last executing test programs: 7.508463205s ago: executing program 1 (id=623): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001740)=ANY=[@ANYBLOB="fc000000190401"], 0xfc}}, 0x4080) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf8, 0x30314247, 0x2, 0xfffffffe, 0x4000, 0xa, 0x5, 0x0, 0x2}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003e80)=ANY=[@ANYBLOB="c411000011000100040000000000", @ANYRES32=r5, @ANYBLOB="a4112e"], 0x11c4}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x204002, 0x48, 0x20}, 0x18) r7 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e10634a30001000000010902270001010080fa0904000003ff000000070501024000000705810240000007058602000200"], 0x0) syz_usb_ep_write(r7, 0x81, 0x2, &(0x7f0000000100)="01b3") syz_usb_ep_write(r7, 0x81, 0x2, &(0x7f0000000140)='0\x00') nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000300), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r8, 0x40246f4c, &(0x7f0000000400)={0x1c40aa80, 0x2, @ofdm}) openat(r6, &(0x7f0000000000)='./file1\x00', 0x12000, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$uac1(r7, &(0x7f0000000580)={0x14, &(0x7f00000004c0)={0x20, 0x0, 0x3d, {0x3d, 0x9, "6a773f4bdfff56a4a0c9171f0dbb698e9d6a714db6a08077d4f653e3f86d2cfd14a87b0c664cb4195d2d56fe16fec17432ea880a65539a09e8ccc3"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}}, &(0x7f0000000ac0)={0x44, &(0x7f00000005c0)={0x40, 0x17, 0x4e, "78bd6c17405555e869903d01509175193499ee6b60351c73be9d463513342c80f9aa4a03b1ac866de905b9b9a743e074e8333e8e47a6c331d8a14c8eab77f3011c9191b96b12f7de03ef5bc777aa"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x7c}, &(0x7f00000006c0)={0x20, 0x81, 0x1, 'J'}, &(0x7f0000000700)={0x20, 0x82, 0x1, '/'}, &(0x7f0000000780)={0x20, 0x83, 0x3, "d49304"}, &(0x7f00000007c0)={0x20, 0x84, 0x4, "da925bef"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "09f60c"}}) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a10005"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x48004) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r11, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "910705eab22006caffaec5fc4872ced0"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "c74f7bbf0fc0980c6a9d183f66b670f5"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.836137998s ago: executing program 0 (id=625): socket$tipc(0x1e, 0x5, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x1000, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r1 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000100)={0x3, 'vlan0\x00', {0x8}, 0x11}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f00000000c0)) mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r4) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x70, r5, 0x1, 0x70bd1f, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0xfffe}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040010}, 0x48014) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002bbd7000fbdbdf250b0000000800010001000080320ae41e848a60282adc2adf4111000200303030303a30303a31302e300000000008000b00ff0000000e0001006e657464657673696d0000000f0002006e657464657673"], 0x60}, 0x1, 0x0, 0x0, 0x40c4}, 0xd4) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r7, 0x29, 0x37, 0x0, &(0x7f0000000040)) write(r6, &(0x7f0000000400)='drop=\"', 0x6) socket$kcm(0x10, 0x2, 0x0) 6.530854891s ago: executing program 0 (id=627): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6842) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x5, 0x14a1fe, 0x0, 0x0, 0x1a, 0x18, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd1c3ad66500000000000000000000000000000000f9ff00", "a9105c39c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba393b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) r2 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x41000, 0x0) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, 0x0) r3 = dup(r1) r4 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0}) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 6.10150813s ago: executing program 2 (id=629): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f00000023c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_\xa0}!\xfa\xa6\x19\x9b\xf0\x88\x16\xd6\xcd\xcf\x94\xde4t\xcda\x9b\x11D\xb0\xb2\xee\x00\x00\x00\xfd\xea\f\x1f8n\xbc}(#\x02 bM:\x01\xc6\x9e\x01\xb9P\xd0\x934\xc3wug\xbb\xa6Hm\xbf;\xc72\xcf\n\xb0,m\xe3\x1fB\xb3\x051E\xf6j\xd08y7\xd5\xf0\xc9\x82fVO\xc1\xa2\x1a\xb1\x10\xd4\\\x80x=BIOm\x13\xd5_l\xa6\xab\xd2#rg\xad\x83\xd6@\x14Ix>\xa9\xb8\xf4\xf4s\xb1\xae\xec@\x13C.\xce\xf8M1\xca\x89@\xb4\xa0\x94t\xb1\xa2)\xf6\x00%Yqs\xd2\xb6H@\xd1\x82Z#+\xcd\x81\xb6E\xdc&\bO\xa2\xc1\xf9\x9a\n\xd7G\x00\xe6l\\y$\xd5\xe8\xfe.\x10\x1d\xc6\x94)\x98l\x91\x16\x97m\x05\b\xf9\\\xc7\xb4\xb1#1\x81\a\xd8,]O\xcf|\x0e\xb8:\x9a\x8f\xf4oI\xdb\x93,bPi[q\b4; \xaa\x80\xe4\x1f\xbce\x02\xc5\xaa\tz\xf54z[\xf8;\b\xdb\xd3\xff\x87\xa6\x7f\x12*\xc8c\xf0\xb8}\xce\x8f\xb5/p\x97\x8d{\xbc\xdf\xdd\xc6s\\nC\xd5y\xd9\x1a|?\xfd8\f\xad\xb9n\xce<\xfe\x85HY\xa1$\xad\x04\x8dw8\xdd\xa3\xfa!\xaa\xf6Y\xc1\xfb\xc61B\xf9*\xccc)\xf1\xdc\xa4\x06L\xb0\xd3T\x94i\x01\xa8S%\xf6\xf2l\xe6\xf0Kz\xbaC!-\xff\x1a\xb7j\r\xb2O\xd4\x9c\x14+\xd3\xef\x17\vQLzu\x89\xa4\x8cO\xaf\xde', 0x6) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000083c0)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0006cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296560000d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fd92bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f46dc53a26fd997f3af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46ba8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a650b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0c1043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077be00000000d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc654ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0x1, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x3d5, 0xad}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000004680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f00000045c0)='./file1\x00', &(0x7f0000004600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresgid(r3, r4, r5) fcntl$addseals(r0, 0x409, 0x7) ftruncate(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002900), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000005380)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r6}}, 0x18) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000800)='./loop0\x00', 0x6180, 0x700) socket(0xa, 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r8) sendmsg$NFC_CMD_DEP_LINK_UP(r8, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000fddbdf250400000008000100", @ANYRES32=0x0, @ANYBLOB="08000400ffffffff05000a0081"], 0x2c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000) mount(&(0x7f0000000040)=@filename='./loop0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='xfs\x00', 0x85, &(0x7f0000000400)='rtdev=./loop0\x00') 5.322034982s ago: executing program 3 (id=632): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x40081, 0xffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r2, 0x4b63, 0x5) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40bc5311, &(0x7f0000000140)={0x80, 0x1, 0xfffffffd}) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f00000002c0)) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x3) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0xaaaaaaaaaaaab02, 0x2f, 0x0, 0x0) r9 = getpid() renameat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000002100)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r10 = syz_pidfd_open(r9, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) setns(r10, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000300), 0x4ff, 0x200002) ioctl$BLKFINISHZONE(r11, 0x40101288, &(0x7f0000000340)={0x7, 0x5}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x566a, 0x200, 0x2, 0x328}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8edb, 0x21200, 0x0, 0x1fd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x28e2d, 0x8000, 0x200002, 0x2bc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f3b, 0x4460, 0x3, 0x3a0}}], 0x4, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.99538644s ago: executing program 2 (id=633): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x0, 0x8809}, @val={0x0, 0x1, 0x6, 0x8000, 0x7, 0x4}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @local, @broadcast, @loopback}}, 0x2a) ioctl$TIOCSSOFTCAR(r0, 0x5412, &(0x7f0000000040)=0x11) 4.531860439s ago: executing program 0 (id=634): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x29, 0x80000, 0x9) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x181) syz_open_procfs(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x18410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1000004) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x1002, &(0x7f0000000200)=0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r3, &(0x7f0000000000), 0x4000, 0x30000000}]) ioctl$HDIO_GETGEO(r2, 0x301, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0xa382) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) 4.531420596s ago: executing program 2 (id=635): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$inet(0x2, 0x5, 0x5724) close_range(r0, r1, 0x0) listen(r0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbe125090000000800010001000000050008000000000005000700170000000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100017"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) fadvise64(r2, 0x4248, 0xffffffffffffffff, 0x5c70a658a28d5eb) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.20036269s ago: executing program 1 (id=636): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf251f00000008000200", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x8042) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a80016000500014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000200)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x24, 0x3, 0x46d, 0xc082, 0x0, 0x0, "0600ff0901a10185107508950609018102090191028511750895130901810209019102c0"}}, 0x13c) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x4001010, r3, 0xb5a80000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/enable\x00', 0x1, 0x40) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004025057a1200010102030109023200010100c0010904000002ff00000007050102"], 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyUSB0\x00', 0x2, 0x0) write(r6, &(0x7f0000000080)="fa", 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xc0840, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r7], 0xc4}}, 0x0) write$cgroup_int(r5, &(0x7f0000000140)=0x7, 0x12) socket$unix(0x1, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x8, 0x0, 0x0, 'queue0\x00', 0x80}) ioctl$TIOCGETD(r5, 0x5424, &(0x7f0000000180)) write$UHID_INPUT2(r3, &(0x7f0000000340)={0xc, {0x4, "10ff0001"}}, 0xa) 3.810919382s ago: executing program 3 (id=637): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000001c0)=""/143, 0x8f}, {&(0x7f0000002800)=""/236, 0xec}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f0000001640)=""/4083, 0xff3}], 0x4}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000003900)=""/4079, 0xfef}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000002640)=""/203, 0xcb}, {&(0x7f0000000280)=""/102, 0x66}], 0x4}, 0x900000}], 0x7, 0x22, 0x0) (fail_nth: 11) 3.712277348s ago: executing program 3 (id=638): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)) 3.700762181s ago: executing program 3 (id=639): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$sequencer(0xffffff9c, &(0x7f0000000080), 0x23c1c1, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000001500)=@svm={0xd, 0x1, 0x1080, {0xaffc, 0xfffffffffffffffb}, {"6abd2b0b251d10fe9d1446d5d3b16c72429fe2d8d915f9a3f4fc13922d6426c42b5214fa1d5fc13ad4351c882df3455be82f6d358c52fc51c97743b9d7a3dc5c0a3d8694ff0acfd391cd0add371018965a5d497dbdf664050be29bd28b16b781470bb0db9d8637b4a9800bf1be23c538fa1afd3910b465397fda4a97d0f99b28950d70406208b9d919aecdabe803d6617d6faba06225198852d6784599b6b8fc1b4b459e6df265ea73cf2f87a84baa7d768a039234cb93937c5d422d850ca7df686467f56b3b256b23d711641cf0e39eb9b71c8e8aa1420f08d76c86f48f9907005029b100a5d1f08054e17f99d6c710154c3300e7efede0e987444989a6b0e9afd523bf9fa85789a435b2f446864e179f4ab0130aba102c0f4bfd3af98ea2bd8b8511fd1d3434e703954c7b5116192da9768741c79510d3c1f59287e573ee8ed215c4bdac3461586bc355e4cec7d5b9d6debcdaf46abf48fa4d06461a801bcf815924d19d4af610cc725163f2dcae905c5f4fffb7d9aa01dd2852c6530621fa81edb83ef08ffedafc10057b2d3f12268fb0a630f9e9fd96fd74ebae54a967a17bf5f1076b4052410cf751e2539100189a2bda676778ae890eb244a58aded19fac75b70adb520b89a98a3eabb6e3f0fcc265bc8f1f55de84a6efc675e4ae7e1ee954be432ffcfce8ff7c6aab09a54baf5534d33f222b3e1c04126e7d5640f9389e493053ba82e36abe80cbd3a6adc9b3ec38c14c60f9a7dbc7d5f3b4cf8b1680774824beb8f833ba5f25546a74d72c067762ea30b606a48d46a0d68cf4c5832bb94c8885eec7c3c44461c8aad1a2b4ce919ef6b6248a31681b3def08ed0a80407602e9e1f804685d5c4023d9f786f35e6f6432fde797edea0de0047fc718a1dae271596c5f78137e36f9b07fba99620a29ee234591ece0c8513fcadd1e0a9c1d641645a63bc9bd8e63085222be6d3fc2ffc472aefdd0455e23a7cadcf90b1248234b0677ed9e2d570a1aa302c94f17ccbaa9afc7be408b8a63f4220fa4520c850933a61e97d82ef832739aae78ba10fb8e94f4216848844fbf77c10362c1a266fa9ad241318716b1eb349917c800be6fc2a2dc651e4e1560c701ad50e04e8d3217532d2c888664cab2d83a10a5b229d03893d7ae60fb073b92ccac48fa0ddf2d56a113ebd587f625e1281f7062bbd69977ec4c7075dca8ac4b88ab5151828c64a4b55e955f7b14d69ecd31368e3c21208a2715f49c093178a85a7a1d689a447ee480614f311b7ff180595b5695e1464b516ab221026f4cd574c88196f3a8283520eeaccf79f2444c8ba62398a4f4c372fb20f13910fa11b7dc6a4e6ca3da3dc11b239510f8f4e111d0740abcb9a89b6fa7734abe51979f0a805ce0f709eb4a98ba72e79f57bc1b889b696f4f4eb7789c35b0639f07956e2c6d1d22ef58e05b8bf17f9b6061bb899046105a149463da3d91d4023ab9e01125632fda24f599a06be479acb7b729d7bfea06ac6433d04a4f98d3e24c82670a0bb9784e1ebe24d11224f7d706aa5ce406b8fc77b5ee45bd34612ae0361614a3fb3750a575b15cf375e3a83f07f25946672d165b52fe1b35789c6502bf8f0656dbab918201c1a5bd9868aee5ceeccfc4919dfdc5eff495a1bbe1ceb01856d5a9c69157e64f1c190dff97daefa1e8c53490373c735338a877b9d316a5d05aab5b60897aaf11a325343a74e502e93e79576ef8004446f39639ac264e207da7e6dfeef1d4f4d2d55b827ee100dfa9376416d60430dc9b916cf67386ddb8788b38856dc765478e5aead4dcb27b579e68c524d235bf40e05c98a35a50632e9931a719ac3810ed531fa7abfe88984cefd9e7381b3f0632a3730c665a1494416bf843b43bb30c1551b6405554823ff27a25b05f3d7e5427c7d8cf1f60a718193f4f2eaba37e7900d97791abb8cf346b12bd2dc58e2fd1676e766fcbb617bf0d5e5508b90e68db673ca08b4d4dcbca918a45f4d009b4e6a128b3ea75f52c405d45caf40b565d4a46bffdd3c2f75cf4b986a04cfb8beeb1c7480bf2b384ece44a657d90728019e28ec4d5c40d1b6f32ac044c6e81f92ebbb13d4dc545be618ad99ef270f200c9731dace138151d2d889d529927d85f484d2b8ab41ba6d4e89421e219833a8a9f85c7d044b9a1166232ad326bd0841114ebfeeb821e5dd0fca3b468997a7c013c832ce4bb9a59bf7ee674278d12b9ea2143cda7fcbb175371d2569e8779f2b87720fd3b8fbda520cdfc33982814cb4fa4235c64082fdc8b05e6dff91094ddcc5ba1437fa8345b10e043797bfad9bff2b4d88d943c51cf3d8dd16e25f2cf5328be09f55d0816dab02fc477c5872dc7a415153f9b0cebdbe621ae1613f150ff8a810304604c85fd99ed034607a2affbc353d5ff3505ba0724223c2ad09a444732db942778a5ff67962d2ceb3cbec3f79f9774358de00b3ca98171f13b0ba3492d8bb1bc72e20a5eae6d4758c66db60190fd8e62114182f3f6ebdea0f42842ed69b62e9c47a4c11b3eaed8350aa84e1471c612d9ff78bb73752c080307ddc7310e8cc3fda111b658d2b5fe8df3e1f0e8750180ca207af4467f0d9e631c0d6c00abbf1615a2027f39f854517c8e029d4ff6e954bb8ea885312bfe8575bed0ad8193b4ebb1b64fdc0b8e065c8447bf3466128c9c81a0184b8fab740edcaa221486f803a22bad3ce84f57d5d9c1470c2aea932ff0ad696a6e71ef44702f70093b687bb02b66f6db62405e2513293bc4518d7edfa8cbdd2f6ce5a4b2064396364e52793c54af76c6b072d6588d4ee8fe60d2770442029de871b57f553b8a414477d2607afeb1d5192d58087412fc372fdcacfe132dd9705d58008aeecb8d22ba790d5fda434e5fe5047a50eba565414023cddb1b7d77a83957460822f83db29a1ace2d5454d7aec485d7e2a7d90c4f755fc15fc93d014b665675ba5c8e9d8063d4f1b1e81f2dac5890117308abf1fc43e5cc49f8eaa0cabea953228c763396123d27ee7cb024ff48499b935eacb8e18f55be967fb2d733d4adac0832bbc41ec23c36a396b8803d3a710b0d91e9356abcdbffa83bd0492868533bc02a2c7849c1fee261b32d2c3c260f8f3eeb78095884d48b0d9e0d8f6f25b7ed4544040d39cfa21ee91f232873128a7cc5e72b813e6ff6410751cae8ecc895edffa8c7b241b751899180faa00bb4c321e444cd01126e0c1be775ba99bdc1f41479b78a26ee872f672d01188e26f55af1ed8e35d230d1b53c6135d978531aed289d8c1675ff858856a87042f51ca7a1ed73340e35fc7692ba65a289e2b7b9012f5854991518f3bf8d4c1086afe456c404e202b4540a376464ee404b316f2e4b86fd51a89f193f304f82779532448bdae701fac180dbe426aeee0155af9dbbbbbfc89c61b396a8c0634a597c54e8e92d7f6207c0aea60eabb1382360d9fb3181f118acf40543d6bd86bebe51724ca7a14b9012a7ba7be610f4cbb66fbcd4c1583a8ec46137d90506683ff94fc4df4b3146f4a1c94ccc6e36b4ab85a1c340bfa136f1d4c3d6a353f6ef44aa7d7724d417edc3d9690fbf6ba1e4b8812e630a7926b26655743d0a4ed787cc12dcb0751f0152398de0c6eb4015ad46d6ccf6be92dbfea4f4d2cb097e242f79b5e4503f048cc4812adbff736058ff5aeb72dfdd8d5c2143afbe4f797448f33564535ffbe5120aa36b50d144f49fbea17aeaf60c3c564ff3ad90d70f8345c43e328faa1673a99c72a2b6e9df3c0d0c6a00ef3d6b9cd1e209fa38731bf6b3530343d8037422929e67a1a8b129f5691f2d875ac7ba3f5ee8dbf1a440117aff5c9957510c318b43f4f9c39df14829a3077fa95f1b30f5fac4d706453dccb80efe717cda6e041e5dec993a7d42c62ec49ce7f2d182998cf83a78af66e70e08a5d94a6305defeb2caafc7da0a2d937f529e2a14f3a5df7810d817ef51b2d0bd4e0398e5ad6a8a1909649edf5eccc2ded9e525daa24bd62c0d47963e9a19968d5efecc69ff4008480fa0e6d075103b00c02c80439ed018d5f28c6c49dd1cb7c5e9e980548b7d94a0af416610b0d0be86903069f0fd1120f0f98cc12e913f58745bcdbfba0810ec662e44de2880c0a9c5c0a6f918abe2c5039c46298817b66f6892b67cacf50be40d894517173035eaaeb119f58d2590bd7652ebf201b6c1a4e882b630b4373e1d7f4341ea9045af7876deee9de588c03b7d124046a262b6307979257f14dba4a70bdcfcbf99862122f367fdffc62c772abfdd2588fbed13ea86920ff66346ba6bc60b5a41385e0cf5b9b9ddfdab3d01107fa4e35bbcdf4e045006115c7c873f4c81c3a0eabeaacc99e1b21ab907a1812ce2549829ff1638d2c94719de749e8197077201e9608a6688cc4209846e2d3f00aa7f0075aaa6196332ef04d6febac3a530c2b566d6599c8858aaa16aaeb896f7ba531697da4eba1f950d5d4345a1733022423319a1f47d7f6e21a2a38cb0c6a2c865d238b0f48a3fcef4395cde68eae751c81e7104888b17c767eca1ef8cd399412fccf5d667a9a933a1e77d49ec2175cf80f65643d2fbb544a724301aab437b74cf36ee7a685533bd3b1d202c909e34e51985e2fd8c41f33d86e4256e51474079ede6f6f80da218d6466a40d8caa09abc5d44c731ac170854a6c096502b01f9caaee64be6796f87f51653344eb86e8c53749ea6f8ae2877a75885babb98b83547459aa730fc7685a8df24969476a69f8acfedd2a641dc6796652e0bb0f7370d9041ebb14f47996f2da58d6d8a4c2bf2cb5946db7fd83998b5d01a18caa49a3bb608daa5b8892a5ad75c4287171942af011ff2f5f6a61099f87a3237e591779f3e69d971b3bb8b0bde6dee0ba3cdb90fb2694ba2adc1308bfffb747dfaaf80c0d9de34684e213f5100b0e7412d6d2074498395dca5a7252f3a630ad77b5a0d116f5c4224e8822b6f111166de392a98aaa9b9ae5f6f3b121af3643435cc0f55a2d12b420df9b4fba985f302911b7a3655c9be05fe262df750caef3cf766688817eca750457ef251008b0bd674ce8f49813d0b99779195f1e666e4b438bd0ef4eb9f93bb4108afdea2f1cdd799965f40c3114305342e511e6aeca5dfeac20ca0657db057e8c0b92c63faa55b92516a62fe19eb83240f5c3d53290aa239aa8b5cab96aeb403bbcddc8a9fc62d97a00af11bfe57f3984f84230b0df1164929994625039948f10b2e79d9e11159a7d567297f12405339fc1a44574de7f15c39e2cd638eb3def549c725627b04d27337bd54b0838f440bc1ebaa98fba21a96f9c365dac8601a6f2a60c6bb3d97a75079ee8b2f54a375e31965029991b3b5f38effcd600f7cf15f53fa7ae00e2dc0129db7f6a76aef9d479585cbc2117295f21def14788495b4db65d0d72af2b16c86e487de5897e2fe931879a895a7af3cf120110abe5073fa13dfe7c9af218305e0c95c42d9052475b8cd4aa21c28d5f345ebdd9fb9b1f83afd41d06af5b057e6b7b563a65dc3c2778895d7c28109bb3cacbe53632cad0037699e7fe4336a7d3ff0f11918b01f3554adb1e44584e22481e92f583f386199fe2395c60acbea3188aabfcf38d0f4f16cef33e896103f0f1c099e0d75b9c1fef1a281968971fdda557ba964d599bcd58e5dcd8260db32951c9c17d1f90bb95d34fc94eb4581f43d2931af3c7366faba5510163bfabe366fce8de2f18ec9992e15289fa471e0067fbf58c1470e7fc95b1e9f2084857adc83aabbc11e77d0859f58eb69d5d6cc72f9b4c35f3e635dfb197259"}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) (async, rerun: 64) syz_usb_connect(0x2, 0xb3, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b2404"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ea440000000000000000000000000000000000000000000000000100000000000000090000000000000000000000000000000000000000000000010000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) (async, rerun: 64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (rerun: 64) write$sndseq(r7, 0x0, 0x30) (async, rerun: 32) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) (rerun: 32) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2004, @fd_index=0x6, 0x6, 0x0, 0x0, 0x0, 0x1, {0x2, 0x0, 0x10, '\x00', 0x0, 0x8}}) (async, rerun: 64) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) (async, rerun: 64) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r12, 0x401c5504, &(0x7f0000000340)={0x35}) (async, rerun: 32) write$uinput_user_dev(r12, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0x48, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x0, 0x0, 0x2000, 0xfa, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x2aa6, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) (rerun: 32) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x3) (async) ioctl$UI_DEV_CREATE(r12, 0x5501) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x4004510d, 0x0) (async) r13 = dup(r1) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r14, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15) (rerun: 32) 3.313410628s ago: executing program 0 (id=640): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x58) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000180), 0x40000, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x5}}, {@max_read={'max_read', 0x3d, 0x83}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'fuse\x00'}}]}}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x6, 0x7ff, {0x5, 0x8010001, 0x7, 0x40c, 0x6, 0x20000000, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x3d4, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x26, 0x5, 0x6100083a, 0x8, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x40042, 0x144) 3.101392025s ago: executing program 0 (id=641): r0 = add_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r0, 0x0, 0x1c}, &(0x7f0000000100)={'enc=', 'raw', ' hash=', {'hmac(sha256)\x00'}}, &(0x7f0000000180), &(0x7f00000001c0)="57dd614234db679c48ce9d7c312e4264de267414c7864419f5a1a6ad") syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0402470c"], 0x7) 2.260164191s ago: executing program 0 (id=642): syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x482) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readahead(r1, 0x2362, 0x10000) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f00000003c0)=0x38d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x40702, 0x0) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xb, 0x20, 0x40, {0x8, 0xb, 0x0, 0x1, 0x1, 0x4, 0x20, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0xb, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x5, 0x9, {0x8, 0x25, 0x1, 0x80, 0x12, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x9, 0x3, 0x40, {0x8, 0x25, 0x1, 0x83, 0x6c, 0x4, 0x8a}}}}}}}}]}}, 0x0) mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r2 = open(&(0x7f0000000000)='./mnt\x00', 0x802, 0x6) socket$igmp(0x2, 0x3, 0x2) r3 = socket$kcm(0x10, 0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x7f, 0x7}) fcntl$lock(r5, 0x24, &(0x7f0000000600)={0x2, 0x0, 0x543117df, 0x4}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000300)={@multicast1, @multicast1, r4}, 0xc) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bacf314aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000000200)=""/31) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x807, 0x3c5b, 0x80000001, 0x26, 0xc, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x0, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x2, 0x5, 0x1, 0x40], [0x10000007, 0xebd, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0xfff, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0xfffffffe, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x80003, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x9, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x40000001, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) removexattr(&(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)=ANY=[@ANYBLOB]) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000240)='./mnt\x00', 0xffffffffffffffff, &(0x7f0000000280)='./dev\x00', 0x4) setxattr$trusted_overlay_upper(&(0x7f0000000340)='./mnt\x00', &(0x7f0000000380), &(0x7f0000000900)={0x0, 0xfb, 0xde, 0x4, 0xb, "9d475e984172266be6840afa87db035d", "5b7fdf4cde712a3a9230e621584caa1a1ccadbff19989a35ef0bb754e52d846f52b6c18c144be44e57e5c77d4e0636a5d6578784163a11ce2623979166e06943ab1427e804e53f7499349e88d5077b448fbfe62fca4ffdc6432e651053fef3f3a1042547f7a794572298fe8ee0c6b4fc3a8fef7d5c8e97fe543a7182e039f65f337bed2ee77b3dcaf2a6255937bcb847d7a201a98be3c40a0d3c91062ee4fc576a1fe7e3990205693c772dbe0afc68560fe478f45b15f09917c070cec0cd8eb8c1adea464837b0631b"}, 0xde, 0x2) 1.825979856s ago: executing program 1 (id=643): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000100)="7800000018002507b9409b14ffbf00000204be040205060502000000430009003f000ce0100000020d0085a168d0bf46d32345653600448d0700050a4500270000005ade4a460c89b6ec0cff3959547f509058ba86c902000000000000000800160005000a0010000000e000e218d1ddf66ed538f2523250", 0x78, 0x20004080, 0x0, 0x0) (async) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) (async) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_type(r7, &(0x7f0000000400), 0x9) (async) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r6, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r4, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x1035, {0x20, 0x0, 0x33b, 0x0, 0x15}}) 1.47995635s ago: executing program 1 (id=644): syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x400) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) accept$alg(r3, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x200020000000000) 1.152256765s ago: executing program 2 (id=645): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x101, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2000) 882.666087ms ago: executing program 1 (id=646): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x80000001}, 0x8) pipe2$9p(&(0x7f0000000180), 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x7, 0x1}, 0x8) (fail_nth: 7) 761.162537ms ago: executing program 2 (id=647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)) 543.709773ms ago: executing program 2 (id=648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x1111, @loopback}, 0x10) listen(r1, 0x1) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000340)={0x0, 'xfrm0\x00', {0x4}, 0x2}) write(r2, &(0x7f0000000200)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,hdr_digest,data_digest', 0x4b) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setstatus(r3, 0x4, 0x2400) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000100000000000080110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000050000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080c01000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f3038390800034000000007200004"], 0xcd0}}, 0x0) 456.300884ms ago: executing program 1 (id=649): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x58) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000180), 0x40000, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x5}}, {@max_read={'max_read', 0x3d, 0x83}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'fuse\x00'}}]}}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x6, 0x7ff, {0x5, 0x8010001, 0x7, 0x40c, 0x6, 0x20000000, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x3d4, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x26, 0x5, 0x6100083a, 0x8, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x40042, 0x144) 529.278µs ago: executing program 3 (id=650): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x1, @rand_addr=' \x01\x00', 0xff}, 0x1c) bind$l2tp6(r3, &(0x7f0000001540)={0xa, 0x0, 0xc2da, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8001, 0x4}, 0x20) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040041}, 0x4040050) dup3(r1, r0, 0x80000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f00000006c0)=""/236, 0xec, 0x1, 0x23}, @fda={0x66646185, 0xc, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=651): r0 = syz_open_dev$loop(&(0x7f0000002500), 0x10000000008, 0xd18135cf55169abc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x7ed16000) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="28000000250001000000000000000200100000000c000000000000d4", @ANYRES32], 0x28}], 0x1}, 0x20000080) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) (async) rt_sigqueueinfo(0x0, 0x3a, &(0x7f0000000000)={0x20, 0x6c, 0xfffffffe}) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={r3, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x0, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x7}, 0x9c) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_int(r4, &(0x7f0000000040)=0xfffffffffffffffc, 0x12) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000340)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000380)=@multiplanar_fd={0xfe, 0x2, 0x4, 0x800, 0x7, {0x0, 0xea60}, {0x3, 0x0, 0x1, 0x7, 0x6, 0x6, "e9c164d4"}, 0x8, 0x4, {&(0x7f0000000240)=[{0x2a, 0x6, {}, 0x80}, {0xee3, 0x4c0, {r4}, 0x8}]}, 0xda2, 0x0, r5}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0xa, 0x20385655, 0x3, @discrete={0xfe, 0xe8}}) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) (async) setrlimit(0x40000000000008, &(0x7f0000000000)={0x5, 0x7}) (async) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1, 0x80000001, 0x6}) (async) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) (async) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000180)={0xfffffffb, {{0xa, 0x4e20, 0x1ff, @empty, 0xfffffeff}}}, 0x88) (async) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3f8c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x4, 0x100, 0x7f, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x6, 0x9, 0xb2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x99, 0x80, {0x8, 0x25, 0x1, 0x1, 0x18, 0x1c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe, 0x4, 0x52, {0x8, 0x25, 0x1, 0x4, 0xf, 0x43, 0x3ce}}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}, {0x9}}}, 0x4) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(r1, r6, 0x2) kernel console output (not intermixed with test programs): 1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 152.800915][ T9] usb 3-1: config 0 interface 196 has no altsetting 0 [ 152.804488][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.804514][ T9] usb 3-1: Product: syz [ 152.804531][ T9] usb 3-1: Manufacturer: syz [ 152.804548][ T9] usb 3-1: SerialNumber: syz [ 152.904620][ T9] usb 3-1: config 0 descriptor?? [ 152.911703][ T6869] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 153.219046][ T6869] netlink: 40 bytes leftover after parsing attributes in process `syz.2.300'. [ 153.626781][ T9] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 153.736691][ T9] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 153.891568][ T9] usb 3-1: USB disconnect, device number 20 [ 154.326134][ T9] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 157.715864][ T6904] Bluetooth: MGMT ver 1.23 [ 157.792964][ T6910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.155562][ T191] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 158.308121][ T191] usb 3-1: not running at top speed; connect to a high speed hub [ 158.308161][ T191] usb 3-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 158.311125][ T191] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.313667][ T191] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 158.313694][ T191] usb 3-1: Product: syz [ 158.313710][ T191] usb 3-1: Manufacturer: syz [ 158.391163][ T191] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 158.391253][ T191] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 158.515604][ T5775] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 158.581863][ T191] usb 3-1: USB disconnect, device number 21 [ 158.683194][ T5775] usb 1-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 158.684664][ T5775] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.684714][ T5775] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 158.684740][ T5775] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.742062][ T5775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 158.742092][ T5775] usb 1-1: Product: syz [ 158.742108][ T5775] usb 1-1: Manufacturer: syz [ 158.760167][ T6921] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 158.783279][ T5775] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 158.804704][ T5775] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 158.932233][ T6926] 9p: p9: multiple sources not supported [ 159.088245][ T5775] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 159.245431][ T5775] usb 2-1: Using ep0 maxpacket: 32 [ 159.249401][ T5775] usb 2-1: New USB device found: idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 159.254632][ T5775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.254659][ T5775] usb 2-1: Product: syz [ 159.254675][ T5775] usb 2-1: Manufacturer: syz [ 159.254691][ T5775] usb 2-1: SerialNumber: syz [ 159.304276][ T5775] usb 2-1: config 0 descriptor?? [ 159.326536][ T5775] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 159.765591][ T5618] Bluetooth: hci0: Opcode 0x1405 failed: -110 [ 159.768118][ T5628] Bluetooth: hci0: command 0x1405 tx timeout [ 160.361748][ T6924] netlink: 'syz.1.320': attribute type 12 has an invalid length. [ 161.295392][ T9] usb 1-1: USB disconnect, device number 15 [ 161.356320][ T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 161.357505][ T9] garmin_gps 1-1:1.0: device disconnected [ 161.853318][ T6950] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=832 (1664 ns) > initial count (1024 ns). Using initial count to start timer. [ 161.905793][ T6926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.967232][ T5775] gspca_ov534_9: reg_r err -71 [ 162.285587][ T5775] gspca_ov534_9: Unknown sensor 0000 [ 162.285688][ T5775] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 162.289644][ T5775] usb 2-1: USB disconnect, device number 24 [ 162.402976][ T6956] FAULT_INJECTION: forcing a failure. [ 162.402976][ T6956] name failslab, interval 1, probability 0, space 0, times 0 [ 162.403013][ T6956] CPU: 0 UID: 0 PID: 6956 Comm: syz.2.328 Not tainted syzkaller #0 PREEMPT(full) [ 162.403041][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 162.403056][ T6956] Call Trace: [ 162.403066][ T6956] [ 162.403077][ T6956] dump_stack_lvl+0xe8/0x150 [ 162.403110][ T6956] should_fail_ex+0x3eb/0x540 [ 162.403154][ T6956] should_failslab+0xa8/0x100 [ 162.403178][ T6956] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 162.403205][ T6956] kmem_cache_alloc_noprof+0x9c/0x600 [ 162.403229][ T6956] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 162.403253][ T6956] ? kmem_cache_alloc_noprof+0x151/0x600 [ 162.403278][ T6956] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 162.403312][ T6956] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 162.403351][ T6956] mmu_topup_memory_caches+0x21/0x1a0 [ 162.403379][ T6956] kvm_mmu_load+0x9d/0x21e0 [ 162.403404][ T6956] ? kvm_msr_allowed+0x9a/0x490 [ 162.403432][ T6956] ? kvm_msr_allowed+0x9a/0x490 [ 162.403456][ T6956] ? kvm_msr_allowed+0x9a/0x490 [ 162.403478][ T6956] ? kvm_msr_allowed+0x3f4/0x490 [ 162.403500][ T6956] ? kvm_msr_allowed+0x9a/0x490 [ 162.403523][ T6956] ? kvm_apic_has_interrupt+0x740/0x770 [ 162.403561][ T6956] vcpu_run+0x4f5b/0x7a90 [ 162.403666][ T6956] ? __pfx_vcpu_run+0x10/0x10 [ 162.403691][ T6956] ? lock_acquire+0x115/0x350 [ 162.403720][ T6956] ? fpu_swap_kvm_fpstate+0xbe/0x510 [ 162.403746][ T6956] ? vmx_unhandleable_emulation_required+0x77/0x230 [ 162.403781][ T6956] kvm_arch_vcpu_ioctl_run+0xe83/0x18b0 [ 162.403810][ T6956] ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0 [ 162.403888][ T6956] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 162.403920][ T6956] kvm_vcpu_ioctl+0xa61/0xfd0 [ 162.403953][ T6956] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 162.404002][ T6956] ? __fget_files+0x2a/0x420 [ 162.404029][ T6956] ? __fget_files+0x2a/0x420 [ 162.404053][ T6956] ? __fget_files+0x2a/0x420 [ 162.404082][ T6956] ? bpf_lsm_file_ioctl+0x9/0x20 [ 162.404107][ T6956] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 162.404138][ T6956] __se_sys_ioctl+0xfc/0x170 [ 162.404166][ T6956] do_syscall_64+0x166/0x520 [ 162.404190][ T6956] ? trace_irq_disable+0x3b/0x140 [ 162.404212][ T6956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.404239][ T6956] ? clear_bhb_loop+0x70/0xc0 [ 162.404267][ T6956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.404293][ T6956] RIP: 0033:0x7ff7c079e199 [ 162.404316][ T6956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.404339][ T6956] RSP: 002b:00007ff7c1583028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.404363][ T6956] RAX: ffffffffffffffda RBX: 00007ff7c0a25fa0 RCX: 00007ff7c079e199 [ 162.404381][ T6956] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 162.404397][ T6956] RBP: 00007ff7c1583090 R08: 0000000000000000 R09: 0000000000000000 [ 162.404413][ T6956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.404429][ T6956] R13: 00007ff7c0a26038 R14: 00007ff7c0a25fa0 R15: 00007ffd9b035c28 [ 162.404468][ T6956] [ 162.931262][ T6964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.931773][ T6964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.086649][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 163.215654][ T9] usb 1-1: device descriptor read/64, error -71 [ 163.316793][ T5775] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 163.466263][ T5775] usb 3-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 163.467524][ T5775] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.467575][ T5775] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 163.467601][ T5775] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.471405][ T5775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 163.471429][ T5775] usb 3-1: Product: syz [ 163.471445][ T5775] usb 3-1: Manufacturer: syz [ 163.525107][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 163.559068][ T6970] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 163.562693][ T5775] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 163.589799][ T5775] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 163.695619][ T9] usb 1-1: device descriptor read/64, error -71 [ 163.805852][ T9] usb usb1-port1: attempt power cycle [ 163.886717][ T191] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 164.012832][ T6981] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 164.055456][ T191] usb 2-1: Using ep0 maxpacket: 32 [ 164.056271][ T191] usb 2-1: New USB device found: idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 164.062045][ T191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.062072][ T191] usb 2-1: Product: syz [ 164.062087][ T191] usb 2-1: Manufacturer: syz [ 164.062102][ T191] usb 2-1: SerialNumber: syz [ 164.113098][ T191] usb 2-1: config 0 descriptor?? [ 164.124385][ T191] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 164.175978][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 164.206888][ T9] usb 1-1: device descriptor read/8, error -71 [ 164.323455][ T191] gspca_topro: reg_w err -71 [ 164.349199][ T191] gspca_topro: Sensor soi763a [ 164.410415][ T191] usb 2-1: USB disconnect, device number 25 [ 164.466096][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 164.490297][ T9] usb 1-1: device descriptor read/8, error -71 [ 164.522269][ T6987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.522806][ T6987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.609494][ T9] usb usb1-port1: unable to enumerate USB device [ 166.164522][ T191] usb 3-1: USB disconnect, device number 22 [ 166.220422][ T191] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 166.224992][ T191] garmin_gps 3-1:1.0: device disconnected [ 166.309562][ T7014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.309990][ T7014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.532587][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.533047][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.213166][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'. [ 167.234742][ T7035] FAULT_INJECTION: forcing a failure. [ 167.234742][ T7035] name failslab, interval 1, probability 0, space 0, times 0 [ 167.234777][ T7035] CPU: 0 UID: 0 PID: 7035 Comm: syz.0.358 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.234806][ T7035] Tainted: [L]=SOFTLOCKUP [ 167.234814][ T7035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 167.234827][ T7035] Call Trace: [ 167.234836][ T7035] [ 167.234845][ T7035] dump_stack_lvl+0xe8/0x150 [ 167.234875][ T7035] should_fail_ex+0x3eb/0x540 [ 167.234903][ T7035] should_failslab+0xa8/0x100 [ 167.234926][ T7035] __kmalloc_noprof+0xf9/0x710 [ 167.234947][ T7035] ? sk_prot_alloc+0x57/0x210 [ 167.234968][ T7035] ? security_sk_alloc+0x52/0x360 [ 167.234987][ T7035] ? security_sk_alloc+0x52/0x360 [ 167.235007][ T7035] ? kmem_cache_alloc_noprof+0x151/0x600 [ 167.235034][ T7035] security_sk_alloc+0x52/0x360 [ 167.235058][ T7035] sk_prot_alloc+0x101/0x210 [ 167.235083][ T7035] sk_alloc+0x3a/0x390 [ 167.235108][ T7035] inet_create+0x7a9/0xff0 [ 167.235129][ T7035] ? inet_create+0x9d/0xff0 [ 167.235154][ T7035] __sock_create+0x4b5/0xac0 [ 167.235185][ T7035] udp_sock_create4+0xc5/0x480 [ 167.235210][ T7035] ? __pfx_udp_sock_create4+0x10/0x10 [ 167.235236][ T7035] ? __pfx___nla_validate_parse+0x10/0x10 [ 167.235266][ T7035] fou_nl_add_doit+0x1a0/0xaf0 [ 167.235295][ T7035] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 167.235322][ T7035] ? trace_kmalloc+0x2a/0xf0 [ 167.235365][ T7035] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 167.235386][ T7035] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 167.235415][ T7035] genl_family_rcv_msg_doit+0x233/0x340 [ 167.235442][ T7035] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 167.235483][ T7035] ? bpf_lsm_capable+0x9/0x20 [ 167.235501][ T7035] ? security_capable+0x7e/0x2c0 [ 167.235528][ T7035] genl_rcv_msg+0x614/0x7a0 [ 167.235555][ T7035] ? __pfx_genl_rcv_msg+0x10/0x10 [ 167.235574][ T7035] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 167.235599][ T7035] ? __asan_memcpy+0x40/0x70 [ 167.235626][ T7035] netlink_rcv_skb+0x226/0x4a0 [ 167.235648][ T7035] ? __pfx_genl_rcv_msg+0x10/0x10 [ 167.235669][ T7035] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 167.235705][ T7035] ? down_read+0x2b9/0x320 [ 167.235729][ T7035] genl_rcv+0x28/0x40 [ 167.235748][ T7035] netlink_unicast+0x7bd/0x940 [ 167.235778][ T7035] netlink_sendmsg+0x7c3/0xae0 [ 167.235804][ T7035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.235833][ T7035] ? apparmor_socket_sendmsg+0x98/0x360 [ 167.235856][ T7035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.235874][ T7035] sock_sendmsg_nosec+0x14e/0x190 [ 167.235898][ T7035] ____sys_sendmsg+0x54e/0x850 [ 167.235925][ T7035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.235955][ T7035] ? import_iovec+0x73/0xa0 [ 167.235979][ T7035] ___sys_sendmsg+0x2a5/0x360 [ 167.235998][ T7035] ? __lock_acquire+0x747/0x2de0 [ 167.236022][ T7035] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.236079][ T7035] ? __fget_files+0x3a2/0x420 [ 167.236098][ T7035] ? __fget_files+0x2a/0x420 [ 167.236126][ T7035] __x64_sys_sendmsg+0x1b1/0x290 [ 167.236149][ T7035] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.236190][ T7035] do_syscall_64+0x166/0x520 [ 167.236209][ T7035] ? trace_irq_disable+0x3b/0x140 [ 167.236246][ T7035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.236282][ T7035] ? clear_bhb_loop+0x70/0xc0 [ 167.236305][ T7035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.236326][ T7035] RIP: 0033:0x7f9e64d9e199 [ 167.236346][ T7035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.236364][ T7035] RSP: 002b:00007f9e65c6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.236385][ T7035] RAX: ffffffffffffffda RBX: 00007f9e65025fa0 RCX: 00007f9e64d9e199 [ 167.236400][ T7035] RDX: 0000000004000080 RSI: 0000200000000440 RDI: 0000000000000003 [ 167.236414][ T7035] RBP: 00007f9e65c6d090 R08: 0000000000000000 R09: 0000000000000000 [ 167.236427][ T7035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.236439][ T7035] R13: 00007f9e65026038 R14: 00007f9e65025fa0 R15: 00007ffff75a0d28 [ 167.236478][ T7035] [ 167.459467][ T191] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 167.847736][ T191] usb 2-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 167.848747][ T191] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.848796][ T191] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 167.848821][ T191] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.854146][ T191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 167.854172][ T191] usb 2-1: Product: syz [ 167.854188][ T191] usb 2-1: Manufacturer: syz [ 167.962428][ T7042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.962903][ T7042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.994209][ T7033] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 168.009833][ T191] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 168.028436][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.361'. [ 168.053954][ T191] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 168.242223][ T5775] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 168.313803][ T7042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.315240][ T7042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.386722][ T5775] usb 3-1: device descriptor read/64, error -71 [ 168.623118][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'. [ 168.637056][ T5775] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 168.775662][ T5775] usb 3-1: device descriptor read/64, error -71 [ 168.882059][ T7059] netlink: 'syz.0.366': attribute type 62 has an invalid length. [ 168.896624][ T5775] usb usb3-port1: attempt power cycle [ 169.100132][ T7062] FAULT_INJECTION: forcing a failure. [ 169.100132][ T7062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.100168][ T7062] CPU: 0 UID: 0 PID: 7062 Comm: syz.0.367 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.100198][ T7062] Tainted: [L]=SOFTLOCKUP [ 169.100215][ T7062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 169.100228][ T7062] Call Trace: [ 169.100239][ T7062] [ 169.100248][ T7062] dump_stack_lvl+0xe8/0x150 [ 169.100276][ T7062] should_fail_ex+0x3eb/0x540 [ 169.100305][ T7062] _copy_from_iter+0x1d3/0x1890 [ 169.100331][ T7062] ? __alloc_skb+0x27a/0x7a0 [ 169.100354][ T7062] ? __alloc_skb+0x27a/0x7a0 [ 169.100376][ T7062] ? __alloc_skb+0x27a/0x7a0 [ 169.100396][ T7062] ? __pfx__copy_from_iter+0x10/0x10 [ 169.100416][ T7062] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 169.100438][ T7062] ? __alloc_skb+0x27a/0x7a0 [ 169.100456][ T7062] ? __alloc_skb+0x27a/0x7a0 [ 169.100482][ T7062] ? netlink_sendmsg+0x5fa/0xae0 [ 169.100503][ T7062] ? skb_put+0x112/0x210 [ 169.100527][ T7062] netlink_sendmsg+0x667/0xae0 [ 169.100554][ T7062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.100594][ T7062] ? apparmor_socket_sendmsg+0x98/0x360 [ 169.100618][ T7062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.100636][ T7062] sock_sendmsg_nosec+0x14e/0x190 [ 169.100660][ T7062] ____sys_sendmsg+0x54e/0x850 [ 169.100685][ T7062] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.100714][ T7062] ? import_iovec+0x73/0xa0 [ 169.100755][ T7062] ___sys_sendmsg+0x2a5/0x360 [ 169.100825][ T7062] ? __lock_acquire+0x747/0x2de0 [ 169.100851][ T7062] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.100909][ T7062] ? __fget_files+0x3a2/0x420 [ 169.100929][ T7062] ? __fget_files+0x2a/0x420 [ 169.100975][ T7062] __x64_sys_sendmsg+0x1b1/0x290 [ 169.101001][ T7062] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.101045][ T7062] do_syscall_64+0x166/0x520 [ 169.101066][ T7062] ? trace_irq_disable+0x3b/0x140 [ 169.101087][ T7062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.101110][ T7062] ? clear_bhb_loop+0x70/0xc0 [ 169.101145][ T7062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.101167][ T7062] RIP: 0033:0x7f9e64d9e199 [ 169.101186][ T7062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.101205][ T7062] RSP: 002b:00007f9e65c6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.101227][ T7062] RAX: ffffffffffffffda RBX: 00007f9e65025fa0 RCX: 00007f9e64d9e199 [ 169.101244][ T7062] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 169.101258][ T7062] RBP: 00007f9e65c6d090 R08: 0000000000000000 R09: 0000000000000000 [ 169.101271][ T7062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.101284][ T7062] R13: 00007f9e65026038 R14: 00007f9e65025fa0 R15: 00007ffff75a0d28 [ 169.101317][ T7062] [ 169.505474][ T5775] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 169.538108][ T5775] usb 3-1: device descriptor read/8, error -71 [ 169.796499][ T5775] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 169.817826][ T5775] usb 3-1: device descriptor read/8, error -71 [ 169.935909][ T5775] usb usb3-port1: unable to enumerate USB device [ 169.939729][ T7073] FAULT_INJECTION: forcing a failure. [ 169.939729][ T7073] name failslab, interval 1, probability 0, space 0, times 0 [ 169.939799][ T7073] CPU: 0 UID: 0 PID: 7073 Comm: syz.3.371 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.939830][ T7073] Tainted: [L]=SOFTLOCKUP [ 169.939839][ T7073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 169.939852][ T7073] Call Trace: [ 169.939861][ T7073] [ 169.939870][ T7073] dump_stack_lvl+0xe8/0x150 [ 169.939900][ T7073] should_fail_ex+0x3eb/0x540 [ 169.939932][ T7073] should_failslab+0xa8/0x100 [ 169.939957][ T7073] __kmalloc_cache_noprof+0x9e/0x600 [ 169.939981][ T7073] ? sctp_datamsg_from_user+0x88/0xef0 [ 169.940003][ T7073] ? sctp_datamsg_from_user+0x88/0xef0 [ 169.940033][ T7073] sctp_datamsg_from_user+0x88/0xef0 [ 169.940060][ T7073] ? __genradix_ptr+0x1e1/0x220 [ 169.940089][ T7073] ? sctp_primitive_ASSOCIATE+0x95/0xc0 [ 169.940118][ T7073] sctp_sendmsg_to_asoc+0x10e6/0x1970 [ 169.940167][ T7073] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 169.940192][ T7073] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 169.940216][ T7073] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 169.940239][ T7073] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 169.940261][ T7073] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 169.940286][ T7073] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 169.940306][ T7073] ? security_sctp_bind_connect+0x7e/0x2c0 [ 169.940333][ T7073] sctp_sendmsg+0x1bb5/0x2d00 [ 169.940368][ T7073] ? kstrtouint+0x6e/0xe0 [ 169.940390][ T7073] ? __pfx_sctp_sendmsg+0x10/0x10 [ 169.940412][ T7073] ? lock_acquire+0x115/0x350 [ 169.940455][ T7073] ? aa_sock_msg_perm+0xf5/0x210 [ 169.940475][ T7073] ? sock_rps_record_flow+0x19/0x350 [ 169.940502][ T7073] ? inet_sendmsg+0x298/0x320 [ 169.940521][ T7073] ? apparmor_socket_sendmsg+0x98/0x360 [ 169.940546][ T7073] ? __pfx_inet_sendmsg+0x10/0x10 [ 169.940567][ T7073] sock_sendmsg_nosec+0x10f/0x190 [ 169.940593][ T7073] __sys_sendto+0x408/0x5a0 [ 169.940615][ T7073] ? ksys_write+0x1e6/0x270 [ 169.940641][ T7073] ? __pfx___sys_sendto+0x10/0x10 [ 169.940661][ T7073] ? __mutex_unlock_slowpath+0x731/0x900 [ 169.940698][ T7073] ? fdget+0x1ac/0x250 [ 169.940762][ T7073] ? __pfx_ksys_write+0x10/0x10 [ 169.940789][ T7073] __x64_sys_sendto+0xde/0x100 [ 169.940816][ T7073] do_syscall_64+0x166/0x520 [ 169.940836][ T7073] ? trace_irq_disable+0x3b/0x140 [ 169.940857][ T7073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.940881][ T7073] ? clear_bhb_loop+0x70/0xc0 [ 169.940905][ T7073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.940928][ T7073] RIP: 0033:0x7f41caf9e199 [ 169.940949][ T7073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.940969][ T7073] RSP: 002b:00007f41cbf24028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 169.940992][ T7073] RAX: ffffffffffffffda RBX: 00007f41cb225fa0 RCX: 00007f41caf9e199 [ 169.941009][ T7073] RDX: 0000000000000005 RSI: 0000200000000080 RDI: 0000000000000003 [ 169.941023][ T7073] RBP: 00007f41cbf24090 R08: 000020000005ffe4 R09: 000000000000001c [ 169.941038][ T7073] R10: 00000000040000b5 R11: 0000000000000246 R12: 0000000000000002 [ 169.941052][ T7073] R13: 00007f41cb226038 R14: 00007f41cb225fa0 R15: 00007ffd1eb96528 [ 169.941099][ T7073] [ 170.427182][ T5775] usb 2-1: USB disconnect, device number 26 [ 170.494251][ T5775] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 170.508507][ T5775] garmin_gps 2-1:1.0: device disconnected [ 171.030634][ T5775] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 171.044329][ T191] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 171.179274][ T5775] usb 2-1: unable to get BOS descriptor or descriptor too short [ 171.179328][ T5775] usb 2-1: New USB device found: idVendor=3285, idProduct=928e, bcdDevice=42.f0 [ 171.180485][ T5775] usb 2-1: config 2 has an invalid interface number: 119 but max is 0 [ 171.180512][ T5775] usb 2-1: config 2 has no interface number 0 [ 171.180554][ T5775] usb 2-1: config 2 interface 119 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1024 [ 171.180582][ T5775] usb 2-1: config 2 interface 119 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 171.180610][ T5775] usb 2-1: config 2 interface 119 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 171.180656][ T5775] usb 2-1: config 2 interface 119 has no altsetting 0 [ 171.183676][ T5775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.183703][ T5775] usb 2-1: Product: syz [ 171.183719][ T5775] usb 2-1: Manufacturer: syz [ 171.183735][ T5775] usb 2-1: SerialNumber: syz [ 171.288656][ T191] usb 1-1: New USB device found: idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 171.293995][ T191] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 171.294021][ T191] usb 1-1: config 0 has no interface number 0 [ 171.294091][ T191] usb 1-1: config 0 interface 41 has no altsetting 0 [ 171.328637][ T191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.328665][ T191] usb 1-1: Product: syz [ 171.328682][ T191] usb 1-1: Manufacturer: syz [ 171.328725][ T191] usb 1-1: SerialNumber: syz [ 171.360767][ T7077] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 171.360907][ T7077] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 171.386879][ T191] usb 1-1: config 0 descriptor?? [ 171.425931][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 171.523826][ T7087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.524439][ T7087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.599176][ T5775] usb 2-1: USB disconnect, device number 27 [ 171.601728][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 171.601777][ T9] usb 3-1: New USB device found: idVendor=1b1c, idProduct=1c0d, bcdDevice=0.40 [ 171.604630][ T9] usb 3-1: config index 0 descriptor too short (expected 46, got 45) [ 171.604657][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.604703][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.669839][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.669868][ T9] usb 3-1: Product: syz [ 171.669885][ T9] usb 3-1: Manufacturer: syz [ 171.669901][ T9] usb 3-1: SerialNumber: syz [ 171.922599][ T7082] usb usb8: usbfs: process 7082 (syz.2.376) did not claim interface 0 before use [ 171.941796][ T7082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.945233][ T7082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.967380][ T7090] usb usb8: usbfs: process 7090 (syz.2.376) did not claim interface 0 before use [ 172.002477][ T9] usbhid 3-1:1.0: fixing wrong optional hid class descriptors count [ 172.002500][ T9] usbhid 3-1:1.0: can't add hid device: -22 [ 172.002621][ T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -22 [ 172.029861][ T191] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 172.034486][ T9] usb 3-1: USB disconnect, device number 27 [ 172.247936][ T7097] fuse: Bad value for 'fd' [ 172.399967][ T191] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 172.400013][ T191] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 172.400244][ T191] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 172.455879][ T191] usb 1-1: USB disconnect, device number 20 [ 172.562480][ T7101] overlayfs: missing 'workdir' [ 172.789221][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 172.957771][ T9] usb 2-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 172.959841][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.959893][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 172.959920][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.964499][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 172.964525][ T9] usb 2-1: Product: syz [ 172.964541][ T9] usb 2-1: Manufacturer: syz [ 173.063521][ T7100] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 173.083540][ T9] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 173.096128][ T9] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 173.229938][ T7114] FAULT_INJECTION: forcing a failure. [ 173.229938][ T7114] name failslab, interval 1, probability 0, space 0, times 0 [ 173.229975][ T7114] CPU: 0 UID: 0 PID: 7114 Comm: syz.2.387 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.230007][ T7114] Tainted: [L]=SOFTLOCKUP [ 173.230016][ T7114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 173.230034][ T7114] Call Trace: [ 173.230042][ T7114] [ 173.230052][ T7114] dump_stack_lvl+0xe8/0x150 [ 173.230081][ T7114] should_fail_ex+0x3eb/0x540 [ 173.230112][ T7114] should_failslab+0xa8/0x100 [ 173.230138][ T7114] __kmalloc_noprof+0xf9/0x710 [ 173.230162][ T7114] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 173.230190][ T7114] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 173.230220][ T7114] __memcg_list_lru_alloc+0x1d9/0x760 [ 173.230250][ T7114] ? xa_load+0x60/0x210 [ 173.230272][ T7114] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 173.230314][ T7114] __memcg_slab_post_alloc_hook+0x3b2/0xdb0 [ 173.230342][ T7114] ? __memcg_slab_post_alloc_hook+0x1f1/0xdb0 [ 173.230381][ T7114] kmem_cache_alloc_lru_noprof+0x34c/0x5f0 [ 173.230406][ T7114] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 173.230428][ T7114] ? bdev_alloc_inode+0x29/0x90 [ 173.230448][ T7114] ? bdev_alloc_inode+0x29/0x90 [ 173.230475][ T7114] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 173.230505][ T7114] bdev_alloc_inode+0x29/0x90 [ 173.230527][ T7114] alloc_inode+0x6a/0x1b0 [ 173.230550][ T7114] new_inode+0x1f/0x170 [ 173.230570][ T7114] ? bdev_alloc+0x18/0x370 [ 173.230594][ T7114] bdev_alloc+0x24/0x370 [ 173.230619][ T7114] __alloc_disk_node+0x11f/0x600 [ 173.230647][ T7114] __blk_alloc_disk+0x105/0x1d0 [ 173.230673][ T7114] ? __pfx___blk_alloc_disk+0x10/0x10 [ 173.230722][ T7114] ? __raw_spin_lock_init+0x45/0x100 [ 173.230749][ T7114] dm_create+0x476/0xf70 [ 173.230775][ T7114] dev_create+0x1f7/0x400 [ 173.230801][ T7114] ? __pfx_dev_create+0x10/0x10 [ 173.230823][ T7114] ? __might_fault+0xaf/0x130 [ 173.230852][ T7114] dm_ctl_ioctl+0x9ec/0xe10 [ 173.230884][ T7114] ? __pfx_dev_create+0x10/0x10 [ 173.230905][ T7114] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 173.230959][ T7114] ? __fget_files+0x2a/0x420 [ 173.230984][ T7114] ? bpf_lsm_file_ioctl+0x9/0x20 [ 173.231007][ T7114] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 173.231029][ T7114] __se_sys_ioctl+0xfc/0x170 [ 173.231054][ T7114] do_syscall_64+0x166/0x520 [ 173.231075][ T7114] ? trace_irq_disable+0x3b/0x140 [ 173.231095][ T7114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.231119][ T7114] ? clear_bhb_loop+0x70/0xc0 [ 173.231144][ T7114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.231167][ T7114] RIP: 0033:0x7ff7c079e199 [ 173.231188][ T7114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.231208][ T7114] RSP: 002b:00007ff7c1583028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.231231][ T7114] RAX: ffffffffffffffda RBX: 00007ff7c0a25fa0 RCX: 00007ff7c079e199 [ 173.231249][ T7114] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 173.231264][ T7114] RBP: 00007ff7c08358e0 R08: 0000000000000000 R09: 0000000000000000 [ 173.231278][ T7114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.231293][ T7114] R13: 00007ff7c0a26038 R14: 00007ff7c0a25fa0 R15: 00007ffd9b035c28 [ 173.231328][ T7114] [ 173.716471][ T7117] syzkaller1: entered promiscuous mode [ 173.716495][ T7117] syzkaller1: entered allmulticast mode [ 174.566692][ T13] bond0: (slave bond_slave_0): interface is now down [ 174.566720][ T13] bond0: (slave bond_slave_1): interface is now down [ 174.883797][ T13] bond0: now running without any active interface! [ 174.965488][ T5618] Bluetooth: hci0: Opcode 0x1405 failed: -110 [ 174.965850][ T5618] Bluetooth: hci0: command 0x1405 tx timeout [ 175.805622][ T7129] fuse: Bad value for 'fd' [ 175.821327][ T191] usb 2-1: USB disconnect, device number 28 [ 175.852062][ T191] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 175.852761][ T191] garmin_gps 2-1:1.0: device disconnected [ 176.312915][ T7131] FAULT_INJECTION: forcing a failure. [ 176.312915][ T7131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.312952][ T7131] CPU: 0 UID: 0 PID: 7131 Comm: syz.1.391 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.312987][ T7131] Tainted: [L]=SOFTLOCKUP [ 176.312995][ T7131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 176.313008][ T7131] Call Trace: [ 176.313016][ T7131] [ 176.313030][ T7131] dump_stack_lvl+0xe8/0x150 [ 176.313059][ T7131] should_fail_ex+0x3eb/0x540 [ 176.313086][ T7131] _copy_from_iter+0x1d3/0x1890 [ 176.313109][ T7131] ? __might_fault+0xaf/0x130 [ 176.313136][ T7131] ? skb_set_owner_w+0x263/0x3d0 [ 176.313161][ T7131] ? sock_alloc_send_pskb+0xc87/0xd90 [ 176.313182][ T7131] ? __pfx__copy_from_iter+0x10/0x10 [ 176.313211][ T7131] ? __pfx__copy_from_iter+0x10/0x10 [ 176.313241][ T7131] copy_page_from_iter+0x219/0x2d0 [ 176.313268][ T7131] skb_copy_datagram_from_iter+0x2f4/0x720 [ 176.313302][ T7131] tun_get_user+0xc7f/0x44d0 [ 176.313358][ T7131] ? aa_file_perm+0x18b/0x15f0 [ 176.313385][ T7131] ? aa_file_perm+0x4ed/0x15f0 [ 176.313406][ T7131] ? __pfx_tun_get_user+0x10/0x10 [ 176.313430][ T7131] ? __lock_acquire+0x747/0x2de0 [ 176.313455][ T7131] ? kstrtoull+0x137/0x1d0 [ 176.313486][ T7131] ? ref_tracker_alloc+0x172/0x530 [ 176.313508][ T7131] ? lock_acquire+0x115/0x350 [ 176.313530][ T7131] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 176.313555][ T7131] ? lock_acquire+0x115/0x350 [ 176.313577][ T7131] ? tun_get+0x1c/0x2f0 [ 176.313603][ T7131] ? tun_get+0x1c/0x2f0 [ 176.313623][ T7131] ? tun_get+0x1c/0x2f0 [ 176.313648][ T7131] tun_chr_write_iter+0x113/0x200 [ 176.313677][ T7131] vfs_write+0x612/0xba0 [ 176.313709][ T7131] ? __pfx_vfs_write+0x10/0x10 [ 176.313735][ T7131] ? __fget_files+0x3a2/0x420 [ 176.313755][ T7131] ? __fget_files+0x2a/0x420 [ 176.313779][ T7131] ? fdget+0x1ac/0x250 [ 176.313806][ T7131] ksys_write+0x150/0x270 [ 176.313831][ T7131] ? __pfx_ksys_write+0x10/0x10 [ 176.313870][ T7131] do_syscall_64+0x166/0x520 [ 176.313892][ T7131] ? trace_irq_disable+0x3b/0x140 [ 176.313913][ T7131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.313936][ T7131] ? clear_bhb_loop+0x70/0xc0 [ 176.313960][ T7131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.313983][ T7131] RIP: 0033:0x7f6c6279e199 [ 176.314004][ T7131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.314023][ T7131] RSP: 002b:00007f6c636a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 176.314047][ T7131] RAX: ffffffffffffffda RBX: 00007f6c62a25fa0 RCX: 00007f6c6279e199 [ 176.314064][ T7131] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000005 [ 176.314078][ T7131] RBP: 00007f6c636a4090 R08: 0000000000000000 R09: 0000000000000000 [ 176.314092][ T7131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.314106][ T7131] R13: 00007f6c62a26038 R14: 00007f6c62a25fa0 R15: 00007fff2c4c87b8 [ 176.314140][ T7131] [ 176.865188][ T7136] netlink: 'syz.2.392': attribute type 178 has an invalid length. [ 177.760159][ T7149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.760643][ T7149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.121318][ T7154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.121802][ T7154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.165803][ T191] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 178.236914][ T7158] fuse: Bad value for 'fd' [ 178.326216][ T191] usb 1-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 178.333180][ T191] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.333231][ T191] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 178.333257][ T191] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.386371][ T191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 178.386398][ T191] usb 1-1: Product: syz [ 178.386413][ T191] usb 1-1: Manufacturer: syz [ 178.395302][ T7152] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 178.432800][ T191] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 178.472123][ T191] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 179.335622][ T5776] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 179.497362][ T5776] usb 2-1: Using ep0 maxpacket: 16 [ 179.498279][ T5776] usb 2-1: New USB device found: idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 179.502146][ T5776] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 179.502173][ T5776] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 179.502195][ T5776] usb 2-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 179.502216][ T5776] usb 2-1: config 166 has no interface number 0 [ 179.502260][ T5776] usb 2-1: config 166 has no interface number 1 [ 179.502310][ T5776] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 179.502333][ T5776] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 179.502368][ T5776] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 179.502421][ T5776] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 179.502448][ T5776] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid wMaxPacketSize 0 [ 179.502472][ T5776] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 0 [ 179.502496][ T5776] usb 2-1: config 166 interface 177 has no altsetting 0 [ 179.502516][ T5776] usb 2-1: config 166 interface 34 has no altsetting 0 [ 179.711703][ T7178] FAULT_INJECTION: forcing a failure. [ 179.711703][ T7178] name failslab, interval 1, probability 0, space 0, times 0 [ 179.711769][ T7178] CPU: 0 UID: 0 PID: 7178 Comm: syz.2.404 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.711797][ T7178] Tainted: [L]=SOFTLOCKUP [ 179.711804][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 179.711817][ T7178] Call Trace: [ 179.711824][ T7178] [ 179.711833][ T7178] dump_stack_lvl+0xe8/0x150 [ 179.711860][ T7178] should_fail_ex+0x3eb/0x540 [ 179.711890][ T7178] should_failslab+0xa8/0x100 [ 179.711911][ T7178] __kmalloc_cache_noprof+0x9e/0x600 [ 179.711933][ T7178] ? nft_trans_table_add+0x56/0x430 [ 179.711953][ T7178] ? nft_trans_table_add+0x56/0x430 [ 179.711973][ T7178] ? __asan_memset+0x22/0x50 [ 179.711996][ T7178] nft_trans_table_add+0x56/0x430 [ 179.712021][ T7178] nf_tables_newtable+0xd26/0x1990 [ 179.712059][ T7178] nfnetlink_rcv+0x1288/0x28c0 [ 179.712112][ T7178] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 179.712174][ T7178] ? skb_clone+0x246/0x3a0 [ 179.712206][ T7178] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.712226][ T7178] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.712252][ T7178] netlink_unicast+0x7bd/0x940 [ 179.712282][ T7178] netlink_sendmsg+0x7c3/0xae0 [ 179.712308][ T7178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.712336][ T7178] ? apparmor_socket_sendmsg+0x98/0x360 [ 179.712360][ T7178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.712379][ T7178] sock_sendmsg_nosec+0x14e/0x190 [ 179.712403][ T7178] ____sys_sendmsg+0x54e/0x850 [ 179.712429][ T7178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.712459][ T7178] ? import_iovec+0x73/0xa0 [ 179.712482][ T7178] ___sys_sendmsg+0x2a5/0x360 [ 179.712501][ T7178] ? __lock_acquire+0x747/0x2de0 [ 179.712526][ T7178] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.712587][ T7178] ? __fget_files+0x3a2/0x420 [ 179.712606][ T7178] ? __fget_files+0x2a/0x420 [ 179.712634][ T7178] __x64_sys_sendmsg+0x1b1/0x290 [ 179.712657][ T7178] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.712697][ T7178] do_syscall_64+0x166/0x520 [ 179.712716][ T7178] ? trace_irq_disable+0x3b/0x140 [ 179.712735][ T7178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.712755][ T7178] ? clear_bhb_loop+0x70/0xc0 [ 179.712778][ T7178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.712799][ T7178] RIP: 0033:0x7ff7c079e199 [ 179.712817][ T7178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.712834][ T7178] RSP: 002b:00007ff7c1583028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.712857][ T7178] RAX: ffffffffffffffda RBX: 00007ff7c0a25fa0 RCX: 00007ff7c079e199 [ 179.712872][ T7178] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 179.712885][ T7178] RBP: 00007ff7c1583090 R08: 0000000000000000 R09: 0000000000000000 [ 179.712897][ T7178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.712909][ T7178] R13: 00007ff7c0a26038 R14: 00007ff7c0a25fa0 R15: 00007ffd9b035c28 [ 179.712941][ T7178] [ 179.817640][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.817668][ T5776] usb 2-1: Product: syz [ 179.817685][ T5776] usb 2-1: Manufacturer: syz [ 179.817726][ T5776] usb 2-1: SerialNumber: syz [ 180.899845][ T191] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 180.951618][ T5604] usb 1-1: USB disconnect, device number 21 [ 180.986695][ T5604] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 180.989403][ T5604] garmin_gps 1-1:1.0: device disconnected [ 181.036602][ T191] usb 3-1: device descriptor read/64, error -71 [ 181.319386][ T191] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 181.446365][ T191] usb 3-1: device descriptor read/64, error -71 [ 181.555759][ T191] usb usb3-port1: attempt power cycle [ 181.906269][ T191] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 181.928721][ T191] usb 3-1: device descriptor read/8, error -71 [ 182.143056][ T5776] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 182.169618][ T191] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 182.192914][ T191] usb 3-1: device descriptor read/8, error -71 [ 182.295886][ T191] usb usb3-port1: unable to enumerate USB device [ 182.377108][ T5776] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 182.562852][ T5776] uvcvideo 2-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 182.562890][ T5776] uvcvideo 2-1:166.34: No valid video chain found. [ 182.590751][ T5776] usb 2-1: USB disconnect, device number 29 [ 182.716385][ T7224] bond0: option arp_interval: invalid value (P) [ 182.716410][ T7224] bond0: option arp_interval: allowed values 0 - 2147483647 [ 183.735467][ T191] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 183.904704][ T191] usb 1-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 183.920824][ T191] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.920880][ T191] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 183.920906][ T191] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.924033][ T191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 183.924060][ T191] usb 1-1: Product: syz [ 183.924076][ T191] usb 1-1: Manufacturer: syz [ 183.983322][ T7253] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 183.993543][ T191] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 184.013155][ T191] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 184.093349][ T7267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.106230][ T7267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.315600][ T191] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 184.477634][ T191] usb 3-1: New USB device found: idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 184.481860][ T191] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.481886][ T191] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 184.481961][ T191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.538057][ T191] usb 3-1: config 0 descriptor?? [ 184.553867][ T191] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 184.554006][ T191] dvb-usb: bulk message failed: -22 (3/0) [ 184.580102][ T191] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 184.581598][ T191] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 184.581649][ T191] usb 3-1: media controller created [ 184.584876][ T191] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.615582][ T5776] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 184.635101][ T191] dvb-usb: bulk message failed: -22 (6/0) [ 184.635291][ T191] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 184.659755][ T191] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 184.682925][ T191] dvb-usb: schedule remote query interval to 150 msecs. [ 184.683835][ T191] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 184.785480][ T5776] usb 2-1: Using ep0 maxpacket: 32 [ 184.786260][ T5776] usb 2-1: New USB device found: idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 184.790401][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.790426][ T5776] usb 2-1: Product: syz [ 184.790469][ T5776] usb 2-1: Manufacturer: syz [ 184.790486][ T5776] usb 2-1: SerialNumber: syz [ 184.847588][ T5776] usb 2-1: config 0 descriptor?? [ 184.852400][ T191] dvb-usb: bulk message failed: -22 (1/0) [ 184.852448][ T191] dvb-usb: error while querying for an remote control event. [ 184.893237][ T5776] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 184.893380][ T5776] dvb-usb: bulk message failed: -22 (4/0) [ 184.893424][ T5776] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 184.893581][ T5776] dvb-usb: bulk message failed: -22 (5/0) [ 184.893597][ T5776] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 184.952504][ T5776] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 184.955550][ T5776] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 184.955605][ T5776] usb 2-1: media controller created [ 185.025416][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 185.025450][ T9] dvb-usb: error while querying for an remote control event. [ 185.033964][ T5776] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.067816][ T9] usb 3-1: USB disconnect, device number 32 [ 185.232932][ T5776] usb 2-1: selecting invalid altsetting 3 [ 185.232955][ T5776] ttusb2: set interface to alts=3 failed [ 185.377583][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 185.548928][ T5776] DVB: Unable to find symbol tda10086_attach() [ 185.548948][ T5776] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 185.550169][ T5776] dvb-usb: bulk message failed: -22 (4/0) [ 185.550190][ T5776] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 185.550346][ T5776] dvb-usb: bulk message failed: -22 (5/0) [ 185.550362][ T5776] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 185.551205][ T5776] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 185.658176][ T5776] usb 2-1: USB disconnect, device number 30 [ 185.976424][ T5776] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 186.382275][ T7294] FAULT_INJECTION: forcing a failure. [ 186.382275][ T7294] name failslab, interval 1, probability 0, space 0, times 0 [ 186.382311][ T7294] CPU: 0 UID: 0 PID: 7294 Comm: syz.3.422 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.382339][ T7294] Tainted: [L]=SOFTLOCKUP [ 186.382347][ T7294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 186.382360][ T7294] Call Trace: [ 186.382368][ T7294] [ 186.382377][ T7294] dump_stack_lvl+0xe8/0x150 [ 186.382409][ T7294] should_fail_ex+0x3eb/0x540 [ 186.382436][ T7294] should_failslab+0xa8/0x100 [ 186.382457][ T7294] ? security_inode_alloc+0x39/0x310 [ 186.382479][ T7294] kmem_cache_alloc_noprof+0x9c/0x600 [ 186.382499][ T7294] ? make_kgid+0x1d1/0x6a0 [ 186.382522][ T7294] ? security_inode_alloc+0x39/0x310 [ 186.382549][ T7294] security_inode_alloc+0x39/0x310 [ 186.382572][ T7294] inode_init_always_gfp+0x97e/0xd30 [ 186.382600][ T7294] ? __pfx_fuse_alloc_inode+0x10/0x10 [ 186.382622][ T7294] alloc_inode+0x82/0x1b0 [ 186.382641][ T7294] ? __pfx_fuse_inode_eq+0x10/0x10 [ 186.382660][ T7294] ? __pfx_fuse_inode_set+0x10/0x10 [ 186.382679][ T7294] iget5_locked+0x4a/0xa0 [ 186.382702][ T7294] fuse_iget+0x37d/0x9d0 [ 186.382723][ T7294] ? pid_nr_ns+0xcb/0x140 [ 186.382747][ T7294] ? fuse_req_prep+0x613/0xa30 [ 186.382771][ T7294] ? __pfx_fuse_iget+0x10/0x10 [ 186.382801][ T7294] fuse_lookup_name+0x703/0x870 [ 186.382822][ T7294] ? lookup_one_qstr_excl+0xd8/0x360 [ 186.382842][ T7294] ? __start_renaming+0x185/0x410 [ 186.382862][ T7294] ? filename_renameat2+0x3a0/0x9a0 [ 186.382893][ T7294] ? __pfx_fuse_lookup_name+0x10/0x10 [ 186.382947][ T7294] fuse_lookup+0x20b/0x4f0 [ 186.382967][ T7294] ? __kasan_kmalloc+0x93/0xb0 [ 186.383012][ T7294] ? __pfx_fuse_lookup+0x10/0x10 [ 186.383051][ T7294] ? d_alloc+0x144/0x190 [ 186.383090][ T7294] lookup_one_qstr_excl+0x12d/0x360 [ 186.383119][ T7294] __start_renaming+0x185/0x410 [ 186.383150][ T7294] filename_renameat2+0x3a0/0x9a0 [ 186.383185][ T7294] ? __pfx_filename_renameat2+0x10/0x10 [ 186.383224][ T7294] ? do_getname+0x151/0x250 [ 186.383248][ T7294] __se_sys_rename+0x55/0x2c0 [ 186.383272][ T7294] do_syscall_64+0x166/0x520 [ 186.383303][ T7294] ? trace_irq_disable+0x3b/0x140 [ 186.383321][ T7294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.383343][ T7294] ? clear_bhb_loop+0x70/0xc0 [ 186.383365][ T7294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.383386][ T7294] RIP: 0033:0x7f41caf9e199 [ 186.383406][ T7294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.383424][ T7294] RSP: 002b:00007f41cbee2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 186.383445][ T7294] RAX: ffffffffffffffda RBX: 00007f41cb226180 RCX: 00007f41caf9e199 [ 186.383460][ T7294] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 00002000000001c0 [ 186.383474][ T7294] RBP: 00007f41cbee2090 R08: 0000000000000000 R09: 0000000000000000 [ 186.383487][ T7294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.383499][ T7294] R13: 00007f41cb226218 R14: 00007f41cb226180 R15: 00007ffd1eb96528 [ 186.383531][ T7294] [ 186.921046][ T5776] usb 1-1: USB disconnect, device number 22 [ 186.963689][ T5776] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 186.984744][ T5776] garmin_gps 1-1:1.0: device disconnected [ 187.253867][ T7301] kvm: pic: non byte write [ 187.426635][ T7307] FAULT_INJECTION: forcing a failure. [ 187.426635][ T7307] name fail_futex, interval 1, probability 0, space 0, times 1 [ 187.426676][ T7307] CPU: 0 UID: 0 PID: 7307 Comm: syz.3.424 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.426708][ T7307] Tainted: [L]=SOFTLOCKUP [ 187.426717][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 187.426731][ T7307] Call Trace: [ 187.426740][ T7307] [ 187.426749][ T7307] dump_stack_lvl+0xe8/0x150 [ 187.426780][ T7307] should_fail_ex+0x3eb/0x540 [ 187.426809][ T7307] get_futex_key+0x1b4/0x1580 [ 187.426832][ T7307] ? __lock_acquire+0x747/0x2de0 [ 187.426866][ T7307] ? __pfx_get_futex_key+0x10/0x10 [ 187.426897][ T7307] ? update_se+0x90/0x1080 [ 187.426923][ T7307] futex_wait_setup+0x4a/0x590 [ 187.426959][ T7307] ? __futex_wait+0xdb/0x470 [ 187.426986][ T7307] __futex_wait+0x175/0x470 [ 187.427007][ T7307] ? update_protect_slice+0x45/0x320 [ 187.427038][ T7307] ? __pfx___futex_wait+0x10/0x10 [ 187.427070][ T7307] ? __pfx_futex_wake_mark+0x10/0x10 [ 187.427099][ T7307] ? try_to_wake_up+0x8ce/0x14e0 [ 187.427135][ T7307] futex_wait+0x121/0x390 [ 187.427165][ T7307] ? __pfx_futex_wait+0x10/0x10 [ 187.427209][ T7307] ? sctp_inet_connect+0x138/0x210 [ 187.427237][ T7307] do_futex+0x3e7/0x4e0 [ 187.427258][ T7307] ? lockdep_hardirqs_on+0x7b/0x110 [ 187.427286][ T7307] ? __pfx_do_futex+0x10/0x10 [ 187.427308][ T7307] ? __sys_connect+0x3a1/0x450 [ 187.427338][ T7307] __se_sys_futex+0x3a8/0x450 [ 187.427367][ T7307] ? __pfx___se_sys_futex+0x10/0x10 [ 187.427389][ T7307] ? rcu_is_watching+0x16/0xb0 [ 187.427419][ T7307] ? __x64_sys_futex+0x21/0xf0 [ 187.427444][ T7307] do_syscall_64+0x166/0x520 [ 187.427466][ T7307] ? trace_irq_disable+0x3b/0x140 [ 187.427485][ T7307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.427507][ T7307] ? clear_bhb_loop+0x70/0xc0 [ 187.427532][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.427556][ T7307] RIP: 0033:0x7f41caf9e199 [ 187.427577][ T7307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.427597][ T7307] RSP: 002b:00007f41cbf240e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 187.427622][ T7307] RAX: ffffffffffffffda RBX: 00007f41cb225fa8 RCX: 00007f41caf9e199 [ 187.427639][ T7307] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f41cb225fa8 [ 187.427654][ T7307] RBP: 00007f41cb225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 187.427669][ T7307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.427682][ T7307] R13: 00007f41cb226038 R14: 00007ffd1eb96440 R15: 00007ffd1eb96528 [ 187.427720][ T7307] [ 188.069576][ T5617] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 188.296520][ T5604] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 188.372902][ T5617] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 188.441787][ T5617] usb 1-1: config 1 has an invalid interface number: 2 but max is 0 [ 188.441818][ T5617] usb 1-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config [ 188.441839][ T5617] usb 1-1: config 1 has no interface number 0 [ 188.441894][ T5617] usb 1-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 188.454089][ T5776] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 188.495842][ T5604] usb 2-1: New USB device found: idVendor=0846, idProduct=1001, bcdDevice=1.00 [ 188.498045][ T5604] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 188.498076][ T5604] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 188.539447][ T5604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.539477][ T5604] usb 2-1: Product: syz [ 188.539493][ T5604] usb 2-1: Manufacturer: syz [ 188.539509][ T5604] usb 2-1: SerialNumber: syz [ 188.673821][ T5776] usb 3-1: New USB device found: idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 188.685205][ T5617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 188.685236][ T5617] usb 1-1: SerialNumber: syz [ 188.702788][ T5776] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.702841][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.833058][ T5776] usb 3-1: config 0 descriptor?? [ 188.846925][ T5604] kaweth 2-1:1.0: Firmware present in device. [ 188.851198][ T5776] rndis_host 3-1:0.0: ACM capabilities ff, not really RNDIS? [ 188.991674][ T5604] kaweth 2-1:1.0: Statistics collection: 0 [ 188.991699][ T5604] kaweth 2-1:1.0: Multicast filter limit: 0 [ 188.991714][ T5604] kaweth 2-1:1.0: MTU: 0 [ 188.991728][ T5604] kaweth 2-1:1.0: Read MAC address 00:00:00:00:00:00 [ 189.009144][ T5617] cdc_ether 1-1:1.2: bad CDC descriptors [ 189.055576][ T7322] netlink: 20 bytes leftover after parsing attributes in process `syz.2.430'. [ 189.214971][ T5776] usb 3-1: USB disconnect, device number 33 [ 189.412027][ T7315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.414687][ T7315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.444117][ T5604] kaweth 2-1:1.0: Error setting SOFS wait [ 189.444343][ T5604] kaweth 2-1:1.0: probe with driver kaweth failed with error -5 [ 189.484465][ T5604] usb 2-1: USB disconnect, device number 31 [ 189.901834][ T7351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.902281][ T7351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.220168][ T7357] Bluetooth: hci0: load_link_keys: too big key_count value 25711 [ 191.048785][ T61] IPVS: starting estimator thread 0... [ 191.088701][ T7374] netlink: 44 bytes leftover after parsing attributes in process `syz.3.439'. [ 191.088725][ T7374] ksmbd: Unknown IPC event: 0, ignore. [ 191.135558][ T7379] IPVS: using max 27 ests per chain, 64800 per kthread [ 191.174831][ T13] IPVS: starting estimator thread 0... [ 191.226599][ T7385] batman_adv: Routing algorithm '' is not supported [ 191.295577][ T7383] IPVS: using max 25 ests per chain, 60000 per kthread [ 191.527416][ T5604] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 191.706300][ T5604] usb 3-1: Using ep0 maxpacket: 16 [ 191.707048][ T5604] usb 3-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 191.708373][ T5604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 191.712103][ T5604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.712126][ T5604] usb 3-1: Product: syz [ 191.712141][ T5604] usb 3-1: Manufacturer: syz [ 191.712164][ T5604] usb 3-1: SerialNumber: syz [ 191.850781][ T5604] usb 3-1: config 0 descriptor?? [ 191.863576][ T5604] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 191.863618][ T5604] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 192.063408][ T5776] usb 1-1: USB disconnect, device number 23 [ 192.551370][ T5604] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 193.089726][ T7409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.090327][ T7409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.175907][ T7412] FAULT_INJECTION: forcing a failure. [ 193.175907][ T7412] name failslab, interval 1, probability 0, space 0, times 0 [ 193.175943][ T7412] CPU: 0 UID: 0 PID: 7412 Comm: syz.0.448 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.175973][ T7412] Tainted: [L]=SOFTLOCKUP [ 193.175981][ T7412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 193.175994][ T7412] Call Trace: [ 193.176003][ T7412] [ 193.176012][ T7412] dump_stack_lvl+0xe8/0x150 [ 193.176042][ T7412] should_fail_ex+0x3eb/0x540 [ 193.176069][ T7412] should_failslab+0xa8/0x100 [ 193.176102][ T7412] __kmalloc_noprof+0xf9/0x710 [ 193.176123][ T7412] ? mutex_init_lockdep+0xdf/0x110 [ 193.176144][ T7412] ? security_task_alloc+0x4d/0x330 [ 193.176164][ T7412] ? security_task_alloc+0x4d/0x330 [ 193.176192][ T7412] security_task_alloc+0x4d/0x330 [ 193.176216][ T7412] copy_process+0x1c72/0x4430 [ 193.176252][ T7412] ? copy_process+0xd11/0x4430 [ 193.176292][ T7412] ? __pfx_copy_process+0x10/0x10 [ 193.176334][ T7412] ? mutex_init_lockdep+0xdf/0x110 [ 193.176357][ T7412] vhost_task_create+0x1f9/0x380 [ 193.176376][ T7412] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 193.176398][ T7412] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 193.176421][ T7412] ? __pfx_vhost_task_create+0x10/0x10 [ 193.176439][ T7412] ? register_lock_class+0x31/0x2e0 [ 193.176466][ T7412] ? __pfx_vhost_task_fn+0x10/0x10 [ 193.176494][ T7412] ? kasan_quarantine_put+0xbb/0x1f0 [ 193.176523][ T7412] kvm_mmu_post_init_vm+0x147/0x2b0 [ 193.176548][ T7412] kvm_arch_vcpu_ioctl_run+0x79/0x18b0 [ 193.176575][ T7412] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 193.176605][ T7412] kvm_vcpu_ioctl+0xa61/0xfd0 [ 193.176631][ T7412] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 193.176670][ T7412] ? __fget_files+0x2a/0x420 [ 193.176692][ T7412] ? __fget_files+0x2a/0x420 [ 193.176711][ T7412] ? __fget_files+0x2a/0x420 [ 193.176734][ T7412] ? bpf_lsm_file_ioctl+0x9/0x20 [ 193.176755][ T7412] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 193.176775][ T7412] __se_sys_ioctl+0xfc/0x170 [ 193.176798][ T7412] do_syscall_64+0x166/0x520 [ 193.176818][ T7412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.176839][ T7412] ? clear_bhb_loop+0x70/0xc0 [ 193.176861][ T7412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.176882][ T7412] RIP: 0033:0x7f9e64d9e199 [ 193.176900][ T7412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.176936][ T7412] RSP: 002b:00007f9e65c2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.176960][ T7412] RAX: ffffffffffffffda RBX: 00007f9e65026180 RCX: 00007f9e64d9e199 [ 193.176976][ T7412] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 193.176989][ T7412] RBP: 00007f9e65c2a090 R08: 0000000000000000 R09: 0000000000000000 [ 193.177003][ T7412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 193.177015][ T7412] R13: 00007f9e65026218 R14: 00007f9e65026180 R15: 00007ffff75a0d28 [ 193.177050][ T7412] [ 193.950770][ T5604] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 193.950837][ T5604] em28xx 3-1:0.0: board has no eeprom [ 194.055506][ T5604] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 194.055553][ T5604] em28xx 3-1:0.0: dvb set to bulk mode. [ 194.056808][ T5776] em28xx 3-1:0.0: Binding DVB extension [ 194.092017][ T5604] usb 3-1: USB disconnect, device number 34 [ 194.103068][ T5604] em28xx 3-1:0.0: Disconnecting em28xx [ 194.330560][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 194.376649][ T5776] em28xx 3-1:0.0: Registering input extension [ 194.412102][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.412155][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.430934][ T5604] em28xx 3-1:0.0: Closing input extension [ 194.811207][ T5604] em28xx: Freeing device [ 194.852802][ T7433] 9p: p9: multiple sources not supported [ 195.236885][ T5604] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 195.335462][ T5776] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 195.386255][ T5604] usb 3-1: New USB device found: idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 195.459292][ T5604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.459321][ T5604] usb 3-1: Product: syz [ 195.459336][ T5604] usb 3-1: Manufacturer: syz [ 195.459351][ T5604] usb 3-1: SerialNumber: syz [ 195.463864][ T5604] usb 3-1: config 0 descriptor?? [ 195.466575][ T5604] ch341 3-1:0.0: ch341-uart converter detected [ 195.535944][ T5776] usb 1-1: Using ep0 maxpacket: 32 [ 195.538915][ T5776] usb 1-1: unable to get BOS descriptor or descriptor too short [ 195.539005][ T5776] usb 1-1: New USB device found: idVendor=05ac, idProduct=8514, bcdDevice=76.af [ 195.542742][ T5776] usb 1-1: config 29 has an invalid interface number: 206 but max is 0 [ 195.542770][ T5776] usb 1-1: config 29 has no interface number 0 [ 195.542801][ T5776] usb 1-1: config 29 interface 206 has no altsetting 0 [ 195.661052][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.661080][ T5776] usb 1-1: Product: syz [ 195.661119][ T5776] usb 1-1: Manufacturer: syz [ 195.661135][ T5776] usb 1-1: SerialNumber: syz [ 196.052656][ T7458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.053229][ T7458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.192757][ T5776] uvcvideo 1-1:29.206: Found multiple Units with ID 1 [ 196.194941][ T5776] uvcvideo 1-1:29.206: Found UVC 0.00 device syz (05ac:8514) [ 196.194973][ T5776] uvcvideo 1-1:29.206: No valid video chain found. [ 196.221736][ T5776] usb 1-1: USB disconnect, device number 24 [ 196.343089][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'. [ 196.343160][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'. [ 196.371830][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'. [ 196.371875][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'. [ 196.404398][ T5604] usb 3-1: failed to send control message: -71 [ 196.404457][ T5604] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 196.426112][ T5604] usb 3-1: USB disconnect, device number 35 [ 196.428106][ T5604] ch341 3-1:0.0: device disconnected [ 197.452809][ T7497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.475759][ T5604] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 197.502641][ T7497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.535918][ T5776] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 197.635757][ T5604] usb 1-1: Using ep0 maxpacket: 16 [ 197.636578][ T5604] usb 1-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 197.637736][ T5604] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.637780][ T5604] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.637804][ T5604] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 197.637831][ T5604] usb 1-1: config 0 interface 0 has no altsetting 0 [ 197.637862][ T5604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.643250][ T5604] usb 1-1: config 0 descriptor?? [ 197.730521][ T5604] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 197.923671][ T5604] usb 1-1: USB disconnect, device number 25 [ 198.547990][ T7523] FAULT_INJECTION: forcing a failure. [ 198.547990][ T7523] name failslab, interval 1, probability 0, space 0, times 0 [ 198.548025][ T7523] CPU: 0 UID: 0 PID: 7523 Comm: syz.1.476 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.548055][ T7523] Tainted: [L]=SOFTLOCKUP [ 198.548063][ T7523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 198.548075][ T7523] Call Trace: [ 198.548083][ T7523] [ 198.548093][ T7523] dump_stack_lvl+0xe8/0x150 [ 198.548121][ T7523] should_fail_ex+0x3eb/0x540 [ 198.548148][ T7523] should_failslab+0xa8/0x100 [ 198.548170][ T7523] ? skb_clone+0x212/0x3a0 [ 198.548191][ T7523] kmem_cache_alloc_noprof+0x9c/0x600 [ 198.548221][ T7523] ? skb_clone+0x212/0x3a0 [ 198.548248][ T7523] skb_clone+0x212/0x3a0 [ 198.548272][ T7523] __netlink_deliver_tap+0x355/0x6e0 [ 198.548306][ T7523] ? netlink_deliver_tap+0x2e/0x1b0 [ 198.548330][ T7523] netlink_deliver_tap+0x19c/0x1b0 [ 198.548353][ T7523] netlink_unicast+0x781/0x940 [ 198.548386][ T7523] netlink_sendmsg+0x7c3/0xae0 [ 198.548414][ T7523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.548445][ T7523] ? apparmor_socket_sendmsg+0x98/0x360 [ 198.548469][ T7523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.548490][ T7523] sock_sendmsg_nosec+0x14e/0x190 [ 198.548515][ T7523] ____sys_sendmsg+0x54e/0x850 [ 198.548543][ T7523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.548574][ T7523] ? import_iovec+0x73/0xa0 [ 198.548599][ T7523] ___sys_sendmsg+0x2a5/0x360 [ 198.548619][ T7523] ? __lock_acquire+0x747/0x2de0 [ 198.548645][ T7523] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.548682][ T7523] ? kstrtouint+0x6e/0xe0 [ 198.548728][ T7523] ? __fget_files+0x3a2/0x420 [ 198.548747][ T7523] ? __fget_files+0x2a/0x420 [ 198.548776][ T7523] __sys_sendmmsg+0x273/0x4d0 [ 198.548803][ T7523] ? __pfx___sys_sendmmsg+0x10/0x10 [ 198.548834][ T7523] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 198.548871][ T7523] ? ksys_write+0x242/0x270 [ 198.548895][ T7523] ? __pfx_ksys_write+0x10/0x10 [ 198.548922][ T7523] __x64_sys_sendmmsg+0xa0/0xc0 [ 198.548946][ T7523] do_syscall_64+0x166/0x520 [ 198.548966][ T7523] ? trace_irq_disable+0x3b/0x140 [ 198.548985][ T7523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.549007][ T7523] ? clear_bhb_loop+0x70/0xc0 [ 198.549031][ T7523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.549053][ T7523] RIP: 0033:0x7f6c6279e199 [ 198.549072][ T7523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.549091][ T7523] RSP: 002b:00007f6c636a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 198.549114][ T7523] RAX: ffffffffffffffda RBX: 00007f6c62a25fa0 RCX: 00007f6c6279e199 [ 198.549130][ T7523] RDX: 0000000000000002 RSI: 00002000000099c0 RDI: 0000000000000003 [ 198.549144][ T7523] RBP: 00007f6c636a4090 R08: 0000000000000000 R09: 0000000000000000 [ 198.549157][ T7523] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 198.549170][ T7523] R13: 00007f6c62a26038 R14: 00007f6c62a25fa0 R15: 00007fff2c4c87b8 [ 198.549204][ T7523] [ 198.961110][ T7524] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.075494][ T5776] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 200.206034][ T5776] usb 2-1: device descriptor read/64, error -71 [ 200.455456][ T5776] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 200.585541][ T5776] usb 2-1: device descriptor read/64, error -71 [ 200.695733][ T5776] usb usb2-port1: attempt power cycle [ 200.924170][ T7552] fuse: fd is not a fuse device [ 201.035498][ T5776] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 201.056274][ T5776] usb 2-1: device descriptor read/8, error -71 [ 201.192652][ T7556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.484'. [ 201.252462][ T7558] fuse: Unknown parameter 'fdÿÿ' [ 201.315454][ T5776] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 201.338912][ T5776] usb 2-1: device descriptor read/8, error -71 [ 201.453659][ T5776] usb usb2-port1: unable to enumerate USB device [ 201.476286][ T5604] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 201.625622][ T5604] usb 3-1: Using ep0 maxpacket: 16 [ 201.626494][ T5604] usb 3-1: New USB device found: idVendor=046d, idProduct=08f3, bcdDevice=b.28 [ 201.627951][ T5604] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 201.627974][ T5604] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.627994][ T5604] usb 3-1: config 0 has no interface number 0 [ 201.630653][ T5604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.630678][ T5604] usb 3-1: Product: syz [ 201.630693][ T5604] usb 3-1: Manufacturer: syz [ 201.630709][ T5604] usb 3-1: SerialNumber: syz [ 201.633442][ T5604] usb 3-1: config 0 descriptor?? [ 201.775558][ T5776] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 201.837419][ T7556] IPVS: length: 140 != 206581052192 [ 201.853842][ T5604] usb 3-1: USB disconnect, device number 36 [ 201.956393][ T5776] usb 1-1: Using ep0 maxpacket: 32 [ 201.957488][ T5776] usb 1-1: New USB device found: idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 201.959725][ T5776] usb 1-1: config 44 has an invalid descriptor of length 0, skipping remainder of the config [ 201.962131][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.962156][ T5776] usb 1-1: Product: syz [ 201.962171][ T5776] usb 1-1: Manufacturer: syz [ 201.962186][ T5776] usb 1-1: SerialNumber: syz [ 202.027299][ T5776] usb 1-1: No union descriptors [ 202.028235][ T5776] usb 1-1: unsupported MDLM descriptors [ 202.282096][ T5604] usb 1-1: USB disconnect, device number 26 [ 203.026871][ T7587] netlink: 28 bytes leftover after parsing attributes in process `syz.3.495'. [ 203.026897][ T7587] openvswitch: netlink: Flow key attr not present in new flow. [ 203.192692][ T7591] Invalid argument reading file caps for ./file0 [ 203.853502][ T7604] netlink: 72 bytes leftover after parsing attributes in process `syz.1.499'. [ 204.408227][ T5706] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 204.512925][ T7626] netlink: 'syz.1.505': attribute type 2 has an invalid length. [ 204.765438][ T5776] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 204.785963][ T5604] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 204.814409][ T5706] usb 3-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 204.888047][ T5706] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.888106][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.917513][ T5706] usb 3-1: config 0 descriptor?? [ 204.941165][ T5776] usb 2-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 204.943892][ T5776] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.945493][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 204.945516][ T5776] usb 2-1: Product: syz [ 204.945531][ T5776] usb 2-1: Manufacturer: syz [ 204.967176][ T5604] usb 1-1: New USB device found: idVendor=15c2, idProduct=2204, bcdDevice=0.00 [ 204.982120][ T5604] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.982168][ T5604] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 204.982211][ T5604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.034759][ T5604] usb 1-1: config 0 descriptor?? [ 205.047267][ T5604] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 205.142484][ T5776] usb 2-1: selecting invalid altsetting 1 [ 205.142638][ T5776] dvb_ttusb_budget: ttusb_init_controller: error [ 205.142652][ T5776] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 205.327645][ T5776] DVB: Unable to find symbol cx22700_attach() [ 205.343847][ T7626] netlink: 60 bytes leftover after parsing attributes in process `syz.1.505'. [ 205.344757][ T7626] netlink: 60 bytes leftover after parsing attributes in process `syz.1.505'. [ 205.448431][ T5776] DVB: Unable to find symbol tda10046_attach() [ 205.448450][ T5776] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 205.452103][ T5604] usb 3-1: USB disconnect, device number 37 [ 205.513534][ T7643] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 205.949253][ T5604] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 206.073645][ T191] usb 1-1: USB disconnect, device number 27 [ 206.096263][ T5604] usb 3-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.40 [ 206.097988][ T5604] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 206.098024][ T5604] usb 3-1: can't read configurations, error -61 [ 206.170479][ T9] usb 2-1: USB disconnect, device number 37 [ 206.226504][ T5604] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 206.377711][ T5604] usb 3-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.40 [ 206.379616][ T5604] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 206.379661][ T5604] usb 3-1: can't read configurations, error -61 [ 206.380122][ T5604] usb usb3-port1: attempt power cycle [ 206.715762][ T5604] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 206.735815][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 206.775133][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.511'. [ 206.775172][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.511'. [ 206.815913][ T5631] Bluetooth: hci2: command 0x0406 tx timeout [ 206.815980][ T5631] Bluetooth: hci0: command 0x1405 tx timeout [ 206.827764][ T5604] usb 3-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.40 [ 206.964166][ T5604] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 206.964205][ T5604] usb 3-1: can't read configurations, error -71 [ 207.125487][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 207.277690][ T9] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 207.278892][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 207.278916][ T9] usb 1-1: config 1 has no interface number 0 [ 207.278971][ T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 207.279002][ T9] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 207.281023][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.281045][ T9] usb 1-1: Product: syz [ 207.281059][ T9] usb 1-1: Manufacturer: syz [ 207.281074][ T9] usb 1-1: SerialNumber: syz [ 207.436564][ T7671] FAULT_INJECTION: forcing a failure. [ 207.436564][ T7671] name failslab, interval 1, probability 0, space 0, times 0 [ 207.436597][ T7671] CPU: 0 UID: 0 PID: 7671 Comm: syz.1.515 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.436623][ T7671] Tainted: [L]=SOFTLOCKUP [ 207.436631][ T7671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 207.436643][ T7671] Call Trace: [ 207.436650][ T7671] [ 207.436658][ T7671] dump_stack_lvl+0xe8/0x150 [ 207.436688][ T7671] should_fail_ex+0x3eb/0x540 [ 207.436714][ T7671] should_failslab+0xa8/0x100 [ 207.436735][ T7671] __kmalloc_noprof+0xf9/0x710 [ 207.436754][ T7671] ? sock_kmalloc+0xd6/0x160 [ 207.436772][ T7671] ? sock_kmalloc+0xd6/0x160 [ 207.436796][ T7671] sock_kmalloc+0xd6/0x160 [ 207.436817][ T7671] af_alg_alloc_areq+0x8c/0x200 [ 207.436839][ T7671] skcipher_recvmsg+0x31e/0xe10 [ 207.436862][ T7671] ? lock_acquire+0x115/0x350 [ 207.436892][ T7671] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 207.436915][ T7671] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 207.436933][ T7671] ? security_socket_recvmsg+0x7e/0x2c0 [ 207.436952][ T7671] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 207.436974][ T7671] sock_recvmsg+0x196/0x1e0 [ 207.436997][ T7671] __sys_recvfrom+0x231/0x3a0 [ 207.437021][ T7671] ? __pfx___sys_recvfrom+0x10/0x10 [ 207.437065][ T7671] ? do_user_addr_fault+0xd3f/0x1480 [ 207.437091][ T7671] __x64_sys_recvfrom+0xde/0x100 [ 207.437114][ T7671] do_syscall_64+0x166/0x520 [ 207.437133][ T7671] ? trace_irq_disable+0x3b/0x140 [ 207.437150][ T7671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.437171][ T7671] ? clear_bhb_loop+0x70/0xc0 [ 207.437194][ T7671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.437214][ T7671] RIP: 0033:0x7f6c6275e9ce [ 207.437233][ T7671] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 207.437251][ T7671] RSP: 002b:00007f6c636a2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 207.437273][ T7671] RAX: ffffffffffffffda RBX: 00007f6c636a46c0 RCX: 00007f6c6275e9ce [ 207.437288][ T7671] RDX: 0000000000001000 RSI: 00007f6c636a3000 RDI: 0000000000000004 [ 207.437301][ T7671] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.437313][ T7671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 207.437325][ T7671] R13: 00007f6c636a2f58 R14: 00007f6c636a3000 R15: 0000000000000000 [ 207.437356][ T7671] [ 207.784019][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.517'. [ 207.987225][ T9] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 207.987277][ T9] cdc_ncm 1-1:1.1: bind() failure [ 208.046895][ T9] usb 1-1: USB disconnect, device number 28 [ 208.106546][ T7678] loop9: detected capacity change from 0 to 255852544 [ 208.844397][ T7693] netlink: 'syz.3.524': attribute type 21 has an invalid length. [ 208.853846][ T7693] netlink: 'syz.3.524': attribute type 2 has an invalid length. [ 209.445479][ T5604] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 209.465544][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 209.598630][ T5604] usb 2-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 209.599910][ T5604] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.599961][ T5604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.603342][ T5604] usb 2-1: config 0 descriptor?? [ 209.641271][ T9] usb 1-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 209.642346][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.642406][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 209.642432][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.644040][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 209.644065][ T9] usb 1-1: Product: syz [ 209.644080][ T9] usb 1-1: Manufacturer: syz [ 209.707333][ T5604] pwc: Askey VC010 type 2 USB webcam detected. [ 209.709988][ T7704] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 209.712543][ T9] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 209.739359][ T9] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 209.970655][ T191] usb 1-1: USB disconnect, device number 29 [ 209.999094][ T191] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 210.003000][ T191] garmin_gps 1-1:1.0: device disconnected [ 210.026699][ T5604] pwc: recv_control_msg error -32 req 02 val 2b00 [ 210.030407][ T5604] pwc: recv_control_msg error -32 req 02 val 2700 [ 210.031076][ T5604] pwc: recv_control_msg error -32 req 02 val 2c00 [ 210.031838][ T5604] pwc: recv_control_msg error -32 req 04 val 1000 [ 210.034227][ T5604] pwc: recv_control_msg error -32 req 04 val 1300 [ 210.069023][ T5604] pwc: recv_control_msg error -32 req 04 val 1400 [ 210.070631][ T5604] pwc: recv_control_msg error -32 req 02 val 2000 [ 210.073404][ T5604] pwc: recv_control_msg error -32 req 02 val 2100 [ 210.097728][ T5604] pwc: recv_control_msg error -32 req 04 val 1500 [ 210.101718][ T5604] pwc: recv_control_msg error -32 req 02 val 2500 [ 210.120994][ T5604] pwc: recv_control_msg error -32 req 02 val 2400 [ 210.121790][ T5604] pwc: recv_control_msg error -32 req 02 val 2600 [ 210.122724][ T5604] pwc: recv_control_msg error -32 req 02 val 2900 [ 210.123554][ T5604] pwc: recv_control_msg error -32 req 02 val 2800 [ 210.335052][ T5604] pwc: Registered as video103. [ 210.352205][ T5604] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 211.258346][ T7721] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (39424 ns). Using initial count to start timer. [ 211.378345][ T7725] FAULT_INJECTION: forcing a failure. [ 211.378345][ T7725] name failslab, interval 1, probability 0, space 0, times 0 [ 211.378384][ T7725] CPU: 1 UID: 0 PID: 7725 Comm: syz.2.533 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.378415][ T7725] Tainted: [L]=SOFTLOCKUP [ 211.378424][ T7725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 211.378438][ T7725] Call Trace: [ 211.378446][ T7725] [ 211.378456][ T7725] dump_stack_lvl+0xe8/0x150 [ 211.378486][ T7725] should_fail_ex+0x3eb/0x540 [ 211.378514][ T7725] should_failslab+0xa8/0x100 [ 211.378538][ T7725] __kmalloc_cache_noprof+0x9e/0x600 [ 211.378561][ T7725] ? __kmalloc_cache_noprof+0x148/0x600 [ 211.378582][ T7725] ? fuse_file_alloc+0xb7/0x230 [ 211.378602][ T7725] ? fuse_file_alloc+0xb7/0x230 [ 211.378629][ T7725] fuse_file_alloc+0xb7/0x230 [ 211.378663][ T7725] fuse_file_open+0x17b/0x950 [ 211.378686][ T7725] ? __lock_acquire+0x747/0x2de0 [ 211.378715][ T7725] ? __asan_memset+0x22/0x50 [ 211.378737][ T7725] ? hook_file_open+0x267/0xa00 [ 211.378759][ T7725] ? __pfx_fuse_file_open+0x10/0x10 [ 211.378784][ T7725] ? __pfx_hook_file_open+0x10/0x10 [ 211.378810][ T7725] ? apparmor_file_open+0x4e9/0x6c0 [ 211.378833][ T7725] ? do_raw_spin_lock+0x12b/0x2f0 [ 211.378861][ T7725] ? __pfx_apparmor_file_open+0x10/0x10 [ 211.378902][ T7725] fuse_open+0x35a/0x770 [ 211.378926][ T7725] ? __pfx_fuse_open+0x10/0x10 [ 211.378946][ T7725] do_dentry_open+0x80e/0x1360 [ 211.378978][ T7725] vfs_open_consume+0x4a/0x350 [ 211.378998][ T7725] ? path_openat+0x148a/0x1da0 [ 211.379021][ T7725] path_openat+0x14a6/0x1da0 [ 211.379062][ T7725] do_file_open+0x23e/0x4a0 [ 211.379082][ T7725] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 211.379109][ T7725] ? __pfx_do_file_open+0x10/0x10 [ 211.379129][ T7725] ? kmem_cache_alloc_noprof+0x151/0x600 [ 211.379178][ T7725] ? do_open_execat+0xad/0x590 [ 211.379203][ T7725] do_open_execat+0x12b/0x590 [ 211.379227][ T7725] ? __pfx_do_open_execat+0x10/0x10 [ 211.379263][ T7725] alloc_bprm+0x24/0x640 [ 211.379287][ T7725] do_execveat_common+0x167/0xbd0 [ 211.379308][ T7725] ? strncpy_from_user+0x150/0x2c0 [ 211.379334][ T7725] ? do_getname+0x151/0x250 [ 211.379357][ T7725] __x64_sys_execveat+0xc7/0xf0 [ 211.379382][ T7725] do_syscall_64+0x166/0x520 [ 211.379402][ T7725] ? trace_irq_disable+0x3b/0x140 [ 211.379422][ T7725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.379451][ T7725] ? clear_bhb_loop+0x70/0xc0 [ 211.379476][ T7725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.379498][ T7725] RIP: 0033:0x7ff7c079e199 [ 211.379524][ T7725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.379543][ T7725] RSP: 002b:00007ff7be9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 211.379566][ T7725] RAX: ffffffffffffffda RBX: 00007ff7c0a26180 RCX: 00007ff7c079e199 [ 211.379582][ T7725] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 211.379597][ T7725] RBP: 00007ff7be9d5090 R08: 0000000000000100 R09: 0000000000000000 [ 211.379610][ T7725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.379623][ T7725] R13: 00007ff7c0a26218 R14: 00007ff7c0a26180 R15: 00007ffd9b035c28 [ 211.379662][ T7725] [ 212.371493][ T191] usb 2-1: USB disconnect, device number 38 [ 212.665472][ T5604] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 212.830430][ T5604] usb 1-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 212.832093][ T5604] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.832143][ T5604] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 212.832169][ T5604] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.834797][ T5604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 212.834823][ T5604] usb 1-1: Product: syz [ 212.834839][ T5604] usb 1-1: Manufacturer: syz [ 212.908031][ T7741] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 212.914078][ T5604] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 212.955176][ T5604] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 213.035523][ T191] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 213.187141][ T191] usb 2-1: Using ep0 maxpacket: 16 [ 213.204977][ T191] usb 2-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 213.220670][ T191] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.220698][ T191] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.256767][ T191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.256796][ T191] usb 2-1: Product: syz [ 213.256812][ T191] usb 2-1: Manufacturer: syz [ 213.256828][ T191] usb 2-1: SerialNumber: syz [ 213.310768][ T191] usb 2-1: 0:2 : does not exist [ 213.420859][ T5604] usb 1-1: USB disconnect, device number 30 [ 213.472104][ T5604] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 213.485573][ T5604] garmin_gps 1-1:1.0: device disconnected [ 213.547799][ T7745] netlink: 4816 bytes leftover after parsing attributes in process `syz.1.543'. [ 213.619173][ T7752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.619760][ T7752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.726158][ T7752] netlink: 4816 bytes leftover after parsing attributes in process `syz.1.543'. [ 213.933636][ T191] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 214.062940][ T191] usb 2-1: USB disconnect, device number 39 [ 214.631110][ T7766] input: syz1 as /devices/virtual/input/input15 [ 214.740605][ T7773] FAULT_INJECTION: forcing a failure. [ 214.740605][ T7773] name failslab, interval 1, probability 0, space 0, times 0 [ 214.740642][ T7773] CPU: 0 UID: 0 PID: 7773 Comm: syz.1.550 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.740673][ T7773] Tainted: [L]=SOFTLOCKUP [ 214.740681][ T7773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 214.740694][ T7773] Call Trace: [ 214.740702][ T7773] [ 214.740713][ T7773] dump_stack_lvl+0xe8/0x150 [ 214.740742][ T7773] should_fail_ex+0x3eb/0x540 [ 214.740770][ T7773] should_failslab+0xa8/0x100 [ 214.740795][ T7773] __kmalloc_cache_noprof+0x9e/0x600 [ 214.740818][ T7773] ? call_usermodehelper_setup+0x8e/0x270 [ 214.740841][ T7773] ? call_usermodehelper_setup+0x8e/0x270 [ 214.740864][ T7773] ? __request_module+0x2ec/0x630 [ 214.740890][ T7773] call_usermodehelper_setup+0x8e/0x270 [ 214.740912][ T7773] ? __pfx_free_modprobe_argv+0x10/0x10 [ 214.740938][ T7773] __request_module+0x3ba/0x630 [ 214.740967][ T7773] ? __pfx___request_module+0x10/0x10 [ 214.740987][ T7773] ? __up_read+0x29c/0x930 [ 214.741018][ T7773] ? crypto_alg_lookup+0x3d3/0x450 [ 214.741051][ T7773] crypto_alg_mod_lookup+0xa2/0x5d0 [ 214.741078][ T7773] crypto_alloc_tfm_node+0x135/0x3e0 [ 214.741110][ T7773] esp6_init_state+0x615/0x1220 [ 214.741135][ T7773] ? do_syscall_64+0x166/0x520 [ 214.741155][ T7773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.741191][ T7773] ? __pfx_esp6_init_state+0x10/0x10 [ 214.741232][ T7773] ? lock_acquire+0x115/0x350 [ 214.741265][ T7773] ? __xfrm_init_state+0x745/0x1320 [ 214.741292][ T7773] __xfrm_init_state+0x9dd/0x1320 [ 214.741315][ T7773] ? __xfrm_init_state+0x745/0x1320 [ 214.741339][ T7773] xfrm_add_sa+0x2f3f/0x40a0 [ 214.741370][ T7773] ? __pfx_xfrm_add_sa+0x10/0x10 [ 214.741389][ T7773] ? apparmor_capable+0x126/0x170 [ 214.741416][ T7773] ? __nla_parse+0x40/0x60 [ 214.741448][ T7773] xfrm_user_rcv_msg+0x7a8/0xf30 [ 214.741478][ T7773] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 214.741533][ T7773] ? __mutex_trylock_common+0x15f/0x270 [ 214.741577][ T7773] ? __pfx___mutex_trylock_common+0x10/0x10 [ 214.741619][ T7773] ? rcu_is_watching+0x16/0xb0 [ 214.741642][ T7773] ? trace_contention_end+0x3d/0x140 [ 214.741673][ T7773] netlink_rcv_skb+0x226/0x4a0 [ 214.741697][ T7773] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 214.741722][ T7773] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 214.741760][ T7773] ? netlink_deliver_tap+0x2e/0x1b0 [ 214.741782][ T7773] ? netlink_deliver_tap+0x2e/0x1b0 [ 214.741807][ T7773] xfrm_netlink_rcv+0x79/0x90 [ 214.741829][ T7773] netlink_unicast+0x7bd/0x940 [ 214.741863][ T7773] netlink_sendmsg+0x7c3/0xae0 [ 214.741891][ T7773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.741922][ T7773] ? apparmor_socket_sendmsg+0x98/0x360 [ 214.741948][ T7773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.741968][ T7773] sock_sendmsg_nosec+0x14e/0x190 [ 214.741994][ T7773] ____sys_sendmsg+0x54e/0x850 [ 214.742022][ T7773] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.742054][ T7773] ? import_iovec+0x73/0xa0 [ 214.742079][ T7773] ___sys_sendmsg+0x2a5/0x360 [ 214.742100][ T7773] ? __lock_acquire+0x747/0x2de0 [ 214.742126][ T7773] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.742153][ T7773] ? futex_wait+0x2a2/0x390 [ 214.742204][ T7773] ? __fget_files+0x3a2/0x420 [ 214.742224][ T7773] ? __fget_files+0x2a/0x420 [ 214.742255][ T7773] __x64_sys_sendmsg+0x1b1/0x290 [ 214.742280][ T7773] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.742324][ T7773] do_syscall_64+0x166/0x520 [ 214.742344][ T7773] ? trace_irq_disable+0x3b/0x140 [ 214.742363][ T7773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.742387][ T7773] ? clear_bhb_loop+0x70/0xc0 [ 214.742411][ T7773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.742433][ T7773] RIP: 0033:0x7f6c6279e199 [ 214.742460][ T7773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.742480][ T7773] RSP: 002b:00007f6c636a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.742504][ T7773] RAX: ffffffffffffffda RBX: 00007f6c62a25fa0 RCX: 00007f6c6279e199 [ 214.742538][ T7773] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 214.742553][ T7773] RBP: 00007f6c628358e0 R08: 0000000000000000 R09: 0000000000000000 [ 214.742567][ T7773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.742581][ T7773] R13: 00007f6c62a26038 R14: 00007f6c62a25fa0 R15: 00007fff2c4c87b8 [ 214.742616][ T7773] [ 215.617283][ T7783] FAULT_INJECTION: forcing a failure. [ 215.617283][ T7783] name failslab, interval 1, probability 0, space 0, times 0 [ 215.617320][ T7783] CPU: 0 UID: 0 PID: 7783 Comm: syz.1.551 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.617379][ T7783] Tainted: [L]=SOFTLOCKUP [ 215.617388][ T7783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 215.617402][ T7783] Call Trace: [ 215.617411][ T7783] [ 215.617421][ T7783] dump_stack_lvl+0xe8/0x150 [ 215.617452][ T7783] should_fail_ex+0x3eb/0x540 [ 215.617480][ T7783] should_failslab+0xa8/0x100 [ 215.617505][ T7783] __kmalloc_cache_noprof+0x9e/0x600 [ 215.617530][ T7783] ? swnode_register+0x59/0x590 [ 215.617552][ T7783] ? swnode_register+0x59/0x590 [ 215.617581][ T7783] swnode_register+0x59/0x590 [ 215.617609][ T7783] fwnode_create_software_node+0x194/0x1f0 [ 215.617637][ T7783] device_create_managed_software_node+0xce/0x1f0 [ 215.617667][ T7783] iommufd_test+0x38a0/0x6360 [ 215.617701][ T7783] ? __lock_acquire+0x747/0x2de0 [ 215.617724][ T7783] ? __pfx_iommufd_test+0x10/0x10 [ 215.617759][ T7783] ? tomoyo_path_number_perm+0x219/0x5f0 [ 215.617784][ T7783] ? tomoyo_path_number_perm+0x219/0x5f0 [ 215.617811][ T7783] ? lock_acquire+0x115/0x350 [ 215.617848][ T7783] ? __might_fault+0xaf/0x130 [ 215.617880][ T7783] iommufd_fops_ioctl+0x465/0x600 [ 215.617910][ T7783] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 215.617938][ T7783] ? __fget_files+0x2a/0x420 [ 215.617973][ T7783] ? bpf_lsm_file_ioctl+0x9/0x20 [ 215.617997][ T7783] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 215.618021][ T7783] __se_sys_ioctl+0xfc/0x170 [ 215.618046][ T7783] do_syscall_64+0x166/0x520 [ 215.618069][ T7783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.618093][ T7783] ? clear_bhb_loop+0x70/0xc0 [ 215.618118][ T7783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.618142][ T7783] RIP: 0033:0x7f6c6279e199 [ 215.618163][ T7783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.618183][ T7783] RSP: 002b:00007f6c636a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.618208][ T7783] RAX: ffffffffffffffda RBX: 00007f6c62a25fa0 RCX: 00007f6c6279e199 [ 215.618225][ T7783] RDX: 0000200000000540 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 215.618240][ T7783] RBP: 00007f6c628358e0 R08: 0000000000000000 R09: 0000000000000000 [ 215.618254][ T7783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.618269][ T7783] R13: 00007f6c62a26038 R14: 00007f6c62a25fa0 R15: 00007fff2c4c87b8 [ 215.618303][ T7783] [ 215.620640][ T7783] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 215.999510][ T7785] FAULT_INJECTION: forcing a failure. [ 215.999510][ T7785] name failslab, interval 1, probability 0, space 0, times 0 [ 215.999548][ T7785] CPU: 0 UID: 0 PID: 7785 Comm: syz.0.554 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.999581][ T7785] Tainted: [L]=SOFTLOCKUP [ 215.999589][ T7785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 215.999603][ T7785] Call Trace: [ 215.999612][ T7785] [ 215.999622][ T7785] dump_stack_lvl+0xe8/0x150 [ 215.999652][ T7785] should_fail_ex+0x3eb/0x540 [ 215.999681][ T7785] should_failslab+0xa8/0x100 [ 215.999703][ T7785] ? alloc_empty_file+0x5b/0x1d0 [ 215.999726][ T7785] kmem_cache_alloc_noprof+0x9c/0x600 [ 215.999757][ T7785] ? alloc_empty_file+0x5b/0x1d0 [ 215.999786][ T7785] alloc_empty_file+0x5b/0x1d0 [ 215.999811][ T7785] alloc_file_pseudo+0x110/0x1e0 [ 215.999837][ T7785] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 215.999859][ T7785] ? _raw_spin_unlock+0x28/0x50 [ 215.999890][ T7785] sock_alloc_file+0xb8/0x2e0 [ 215.999911][ T7785] ? __sys_socket+0x12b/0x1b0 [ 215.999936][ T7785] __sys_socket+0x13f/0x1b0 [ 215.999962][ T7785] __x64_sys_socket+0x7a/0x90 [ 215.999986][ T7785] do_syscall_64+0x166/0x520 [ 216.000008][ T7785] ? trace_irq_disable+0x3b/0x140 [ 216.000029][ T7785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.000053][ T7785] ? clear_bhb_loop+0x70/0xc0 [ 216.000078][ T7785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.000100][ T7785] RIP: 0033:0x7f9e64d9e199 [ 216.000121][ T7785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.000142][ T7785] RSP: 002b:00007f9e65c6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 216.000167][ T7785] RAX: ffffffffffffffda RBX: 00007f9e65025fa0 RCX: 00007f9e64d9e199 [ 216.000184][ T7785] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000010 [ 216.000198][ T7785] RBP: 00007f9e64e358e0 R08: 0000000000000000 R09: 0000000000000000 [ 216.000213][ T7785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.000226][ T7785] R13: 00007f9e65026038 R14: 00007f9e65025fa0 R15: 00007ffff75a0d28 [ 216.000261][ T7785] [ 216.064022][ T5604] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 216.308407][ T5604] usb 3-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 216.310405][ T5604] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.310460][ T5604] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 216.310485][ T5604] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.312787][ T5604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 216.312812][ T5604] usb 3-1: Product: syz [ 216.312828][ T5604] usb 3-1: Manufacturer: syz [ 216.384456][ T7781] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 216.396439][ T5604] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 216.403930][ T5604] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 216.517846][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 216.675716][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 216.675999][ T5604] usb 3-1: USB disconnect, device number 42 [ 216.677177][ T9] usb 2-1: New USB device found: idVendor=05ac, idProduct=024a, bcdDevice=0.00 [ 216.682510][ T9] usb 2-1: config 0 interface 0 altsetting 125 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.682544][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 216.682579][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.751379][ T9] usb 2-1: config 0 descriptor?? [ 216.769040][ T5604] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 216.771891][ T5604] garmin_gps 3-1:1.0: device disconnected [ 216.793449][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16 [ 216.926968][ T7795] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.558'. [ 216.962875][ T7787] tmpfs: Using encoding : utf8-12.1.0 [ 216.977865][ T7787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.980179][ T7787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.010614][ T4966] bcm5974 2-1:0.0: could not read from device [ 217.036030][ T4966] bcm5974 2-1:0.0: could not read from device [ 217.039909][ T9] usb 2-1: USB disconnect, device number 40 [ 217.292660][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 217.753901][ T7803] netlink: 60 bytes leftover after parsing attributes in process `syz.1.562'. [ 217.968049][ T7806] bond0: (slave bond_slave_1): Releasing backup interface [ 218.030482][ T7806] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 218.375573][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 218.536288][ T9] usb 2-1: New USB device found: idVendor=0079, idProduct=0006, bcdDevice=0.00 [ 218.537546][ T9] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.537578][ T9] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 218.537606][ T9] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.537634][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 218.537668][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.613224][ T9] usb 2-1: config 0 descriptor?? [ 218.621015][ T7811] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 219.071516][ T9] dragonrise 0003:0079:0006.0006: unknown main item tag 0x5 [ 219.071554][ T9] dragonrise 0003:0079:0006.0006: unknown main item tag 0x0 [ 219.092343][ T9] dragonrise 0003:0079:0006.0006: no fields in the report [ 219.175755][ T7824] netlink: 20 bytes leftover after parsing attributes in process `syz.2.569'. [ 219.177406][ T9] dragonrise 0003:0079:0006.0006: hidraw0: USB HID v0.00 Keyboard [HID 0079:0006] on usb-dummy_hcd.1-1/input0 [ 219.252090][ T9] usb 2-1: USB disconnect, device number 41 [ 220.142217][ T7852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.577'. [ 220.393634][ T7860] FAULT_INJECTION: forcing a failure. [ 220.393634][ T7860] name failslab, interval 1, probability 0, space 0, times 0 [ 220.393686][ T7860] CPU: 0 UID: 0 PID: 7860 Comm: syz.0.580 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.393727][ T7860] Tainted: [L]=SOFTLOCKUP [ 220.393735][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 220.393749][ T7860] Call Trace: [ 220.393758][ T7860] [ 220.393767][ T7860] dump_stack_lvl+0xe8/0x150 [ 220.393797][ T7860] should_fail_ex+0x3eb/0x540 [ 220.393826][ T7860] should_failslab+0xa8/0x100 [ 220.393847][ T7860] ? security_inode_alloc+0x39/0x310 [ 220.393869][ T7860] kmem_cache_alloc_noprof+0x9c/0x600 [ 220.393895][ T7860] ? security_inode_alloc+0x39/0x310 [ 220.393924][ T7860] security_inode_alloc+0x39/0x310 [ 220.393949][ T7860] inode_init_always_gfp+0x97e/0xd30 [ 220.393979][ T7860] alloc_inode+0x82/0x1b0 [ 220.394002][ T7860] new_inode+0x1f/0x170 [ 220.394020][ T7860] ? configfs_new_inode+0x1f/0x410 [ 220.394045][ T7860] configfs_new_inode+0x27/0x410 [ 220.394071][ T7860] configfs_create+0xb5/0x270 [ 220.394095][ T7860] configfs_lookup+0x3b6/0x650 [ 220.394123][ T7860] lookup_open+0x94b/0x1970 [ 220.394172][ T7860] path_openat+0x673/0x1da0 [ 220.394235][ T7860] do_file_open+0x23e/0x4a0 [ 220.394264][ T7860] ? __pfx_do_file_open+0x10/0x10 [ 220.394310][ T7860] ? _raw_spin_unlock+0x28/0x50 [ 220.394332][ T7860] ? alloc_fd+0x6af/0x760 [ 220.394366][ T7860] do_sys_openat2+0x115/0x200 [ 220.394393][ T7860] ? __pfx_do_sys_openat2+0x10/0x10 [ 220.394416][ T7860] ? ksys_write+0x242/0x270 [ 220.394440][ T7860] ? __pfx_ksys_write+0x10/0x10 [ 220.394466][ T7860] __x64_sys_openat+0x138/0x170 [ 220.394495][ T7860] do_syscall_64+0x166/0x520 [ 220.394515][ T7860] ? trace_irq_disable+0x3b/0x140 [ 220.394535][ T7860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.394559][ T7860] ? clear_bhb_loop+0x70/0xc0 [ 220.394584][ T7860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.394608][ T7860] RIP: 0033:0x7f9e64d9e199 [ 220.394628][ T7860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.394647][ T7860] RSP: 002b:00007f9e65c6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 220.394671][ T7860] RAX: ffffffffffffffda RBX: 00007f9e65025fa0 RCX: 00007f9e64d9e199 [ 220.394687][ T7860] RDX: 0000000000000001 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 220.394703][ T7860] RBP: 00007f9e65c6d090 R08: 0000000000000000 R09: 0000000000000000 [ 220.394725][ T7860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.394743][ T7860] R13: 00007f9e65026038 R14: 00007f9e65025fa0 R15: 00007ffff75a0d28 [ 220.394779][ T7860] [ 221.335513][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 221.485664][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 221.504144][ T9] usb 2-1: New USB device found: idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 221.519221][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.519250][ T9] usb 2-1: config 0 has no interfaces? [ 221.537310][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.537339][ T9] usb 2-1: Product: syz [ 221.537355][ T9] usb 2-1: Manufacturer: syz [ 221.537371][ T9] usb 2-1: SerialNumber: syz [ 221.579921][ T9] usb 2-1: config 0 descriptor?? [ 221.707063][ T7889] bond0: entered allmulticast mode [ 221.707088][ T7889] bond_slave_0: entered allmulticast mode [ 221.707106][ T7889] bond_slave_1: entered allmulticast mode [ 221.789403][ T7889] bond0: (slave bond_slave_1): Releasing backup interface [ 221.816977][ T7889] bond_slave_1: left allmulticast mode [ 221.843899][ T7889] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 221.868360][ T5604] usb 2-1: USB disconnect, device number 42 [ 221.881704][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 222.056629][ T9] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 222.061205][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.061238][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.061263][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.061338][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.133496][ T9] usb 3-1: config 0 descriptor?? [ 222.656124][ T9] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 222.743203][ T7909] overlayfs: failed to resolve './cgroup': -2 [ 222.802856][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 222.804101][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 222.825906][ T1364] Bluetooth: hci4: Frame reassembly failed (-84) [ 222.826002][ T1364] Bluetooth: hci4: Frame reassembly failed (-84) [ 222.826066][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 223.063817][ T9] usb 3-1: USB disconnect, device number 43 [ 223.143788][ T7922] syzkaller0: entered promiscuous mode [ 223.143831][ T7922] syzkaller0: entered allmulticast mode [ 223.166267][ T7918] tipc: Started in network mode [ 223.166310][ T7918] tipc: Node identity 363972987a7e, cluster identity 4711 [ 223.166544][ T7918] tipc: Enabled bearer , priority 0 [ 223.323633][ T7912] tipc: Resetting bearer [ 223.461869][ T7912] tipc: Disabling bearer [ 223.488430][ T7936] mmap: syz.3.597 (7936) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 223.987801][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 224.115485][ T9] usb 1-1: device descriptor read/64, error -71 [ 224.355475][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 224.496597][ T9] usb 1-1: device descriptor read/64, error -71 [ 224.605833][ T9] usb usb1-port1: attempt power cycle [ 224.805956][ T5618] Bluetooth: hci4: command 0x1003 tx timeout [ 224.806060][ T4930] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 224.945629][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 224.966658][ T9] usb 1-1: device descriptor read/8, error -71 [ 225.217197][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 225.265748][ T9] usb 1-1: device descriptor read/8, error -71 [ 225.376011][ T9] usb usb1-port1: unable to enumerate USB device [ 226.251911][ T4930] Bluetooth: hci3: command 0x0406 tx timeout [ 228.588065][ T33] audit: type=1326 audit(1791342877.055:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.3.610" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41caf9e199 code=0x0 [ 228.945682][ T5775] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 229.065409][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 229.106830][ T5775] usb 2-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00 [ 229.108010][ T5775] usb 2-1: config 1 has an invalid interface number: 27 but max is 1 [ 229.108037][ T5775] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.108056][ T5775] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 229.108096][ T5775] usb 2-1: config 1 has no interface number 2 [ 229.108153][ T5775] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 229.108177][ T5775] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.108222][ T5775] usb 2-1: config 1 interface 1 has no altsetting 0 [ 229.110560][ T5775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.110585][ T5775] usb 2-1: Product: syz [ 229.110600][ T5775] usb 2-1: Manufacturer: syz [ 229.110616][ T5775] usb 2-1: SerialNumber: syz [ 229.266249][ T9] usb 1-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 229.267785][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.267862][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 229.267907][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.297747][ T5604] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 229.475483][ T5604] usb 3-1: Using ep0 maxpacket: 16 [ 229.476470][ T5604] usb 3-1: New USB device found: idVendor=28bd, idProduct=0935, bcdDevice=0.00 [ 229.478250][ T5604] usb 3-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 229.478348][ T5604] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 229.478377][ T5604] usb 3-1: config 0 interface 0 has no altsetting 0 [ 229.478411][ T5604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.483109][ T5604] usb 3-1: config 0 descriptor?? [ 229.631515][ T8016] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4294967295 (only 8 groups) [ 229.653720][ T8005] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 229.810563][ T5775] usb 2-1: reset high-speed USB device number 43 using dummy_hcd [ 230.144683][ T5604] input: HID 28bd:0935 Mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0935.0008/input/input19 [ 230.259420][ T5604] uclogic 0003:28BD:0935.0008: input,hidraw0: USB HID v0.01 Mouse [HID 28bd:0935] on usb-dummy_hcd.2-1/input0 [ 230.323194][ T5604] usb 3-1: USB disconnect, device number 44 [ 230.693686][ T8029] syzkaller0: entered promiscuous mode [ 230.709880][ T5775] speedtch 2-1:1.0: speedtch_bind: device reset failed (-19)! [ 230.710109][ T5775] usb 2-1: selecting invalid altsetting 0 [ 230.710168][ T5775] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 230.761128][ T5775] speedtch 2-1:1.27: speedtch_bind: setting interface to 1 failed (-19)! [ 230.765044][ T5775] usb 2-1: selecting invalid altsetting 0 [ 230.765073][ T5775] speedtch 2-1:1.27: usbatm_usb_probe: bind failed: -19! [ 230.822268][ T5775] usb 2-1: selecting invalid altsetting 0 [ 230.822326][ T5775] usbtest 2-1:1.1: probe with driver usbtest failed with error -22 [ 230.822736][ T5775] usb 2-1: selecting invalid altsetting 0 [ 230.822791][ T5775] speedtch 2-1:1.1: probe with driver speedtch failed with error -22 [ 230.877554][ T5775] usb 2-1: USB disconnect, device number 43 [ 231.166444][ T5628] Bluetooth: hci1: unexpected event for opcode 0x0c46 [ 231.166742][ T5628] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 231.325780][ T8030] syzkaller0: left promiscuous mode [ 231.448303][ T8040] netlink: 4516 bytes leftover after parsing attributes in process `syz.1.623'. [ 231.567970][ T8040] hsr_slave_1 (unregistering): left promiscuous mode [ 231.607648][ T9] cxacru 1-1:1.0: receive of cm 0x90 failed (-104) [ 231.607731][ T9] cxacru 1-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 231.608257][ T9] cxacru 1-1:1.0: probe with driver cxacru failed with error -22 [ 231.775981][ T5776] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 231.853851][ T9] usb 1-1: USB disconnect, device number 35 [ 231.926500][ T5776] usb 2-1: New USB device found: idVendor=06e1, idProduct=a334, bcdDevice=1.00 [ 231.927888][ T5776] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 231.927921][ T5776] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 231.927964][ T5776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.934629][ T8042] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 231.944906][ T8042] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 231.998833][ T5776] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state. [ 232.024231][ T5776] dvb-usb: bulk message failed: -71 (3/0) [ 232.039010][ T5776] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 232.041135][ T5776] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0) [ 232.041188][ T5776] usb 2-1: media controller created [ 232.131443][ T5776] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.214530][ T5776] dvb-usb: bulk message failed: -71 (6/0) [ 232.214625][ T5776] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0' [ 232.243809][ T5776] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20 [ 232.260100][ T5776] dvb-usb: schedule remote query interval to 150 msecs. [ 232.260154][ T5776] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected. [ 232.328132][ T8049] loop6: detected capacity change from 0 to 2640 [ 232.334930][ T8049] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.334978][ T8049] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.335028][ T8049] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.335092][ T8049] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.335124][ T8049] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.335175][ T8049] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.335219][ T8049] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.335249][ T8049] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.335266][ T8049] ldm_validate_partition_table(): Disk read failed. [ 232.430338][ T8049] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.430404][ T8049] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.430469][ T8049] Dev loop6: unable to read RDB block 0 [ 232.430694][ T8049] loop6: unable to read partition table [ 232.430902][ T8049] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 232.431067][ T5776] dvb-usb: bulk message failed: -71 (1/0) [ 232.431094][ T5776] dvb-usb: error while querying for an remote control event. [ 232.431517][ T8047] netlink: 220 bytes leftover after parsing attributes in process `syz.3.626'. [ 232.592691][ T5775] dvb-usb: bulk message failed: -71 (1/0) [ 232.592726][ T5775] dvb-usb: error while querying for an remote control event. [ 232.665508][ T5776] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 232.745784][ T5775] dvb-usb: bulk message failed: -71 (1/0) [ 232.745817][ T5775] dvb-usb: error while querying for an remote control event. [ 232.807676][ T8050] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 232.837107][ T5776] usb 1-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 232.838265][ T5776] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.838317][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.840962][ T5776] usb 1-1: config 0 descriptor?? [ 232.888497][ T5776] pwc: Askey VC010 type 2 USB webcam detected. [ 232.906076][ T5775] dvb-usb: bulk message failed: -71 (1/0) [ 232.906107][ T5775] dvb-usb: error while querying for an remote control event. [ 233.075912][ T5775] dvb-usb: bulk message failed: -71 (1/0) [ 233.075950][ T5775] dvb-usb: error while querying for an remote control event. [ 233.253224][ T5776] pwc: recv_control_msg error -32 req 02 val 2b00 [ 233.268521][ T5775] dvb-usb: bulk message failed: -71 (1/0) [ 233.268554][ T5775] dvb-usb: error while querying for an remote control event. [ 233.389474][ T8064] fuse: fd is not a fuse device [ 233.437047][ T5775] dvb-usb: bulk message failed: -71 (1/0) [ 233.437083][ T5775] dvb-usb: error while querying for an remote control event. [ 233.552242][ T5776] pwc: recv_control_msg error -71 req 02 val 2c00 [ 233.552749][ T5776] pwc: recv_control_msg error -71 req 04 val 1000 [ 233.553188][ T5776] pwc: recv_control_msg error -71 req 04 val 1300 [ 233.554264][ T5776] pwc: recv_control_msg error -71 req 04 val 1400 [ 233.555137][ T5776] pwc: recv_control_msg error -71 req 02 val 2000 [ 233.597716][ T9] dvb-usb: bulk message failed: -71 (1/0) [ 233.597748][ T9] dvb-usb: error while querying for an remote control event. [ 233.597849][ T5776] pwc: recv_control_msg error -71 req 02 val 2100 [ 233.611697][ T5776] pwc: recv_control_msg error -71 req 04 val 1500 [ 233.627239][ T5776] pwc: recv_control_msg error -71 req 02 val 2500 [ 233.629710][ T5776] pwc: recv_control_msg error -71 req 02 val 2400 [ 233.649769][ T5776] pwc: recv_control_msg error -71 req 02 val 2600 [ 233.657931][ T5776] pwc: recv_control_msg error -71 req 02 val 2900 [ 233.658395][ T5776] pwc: recv_control_msg error -71 req 02 val 2800 [ 233.659966][ T5776] pwc: recv_control_msg error -71 req 04 val 1100 [ 233.660411][ T5776] pwc: recv_control_msg error -71 req 04 val 1200 [ 233.755804][ T5775] dvb-usb: bulk message failed: -71 (1/0) [ 233.755840][ T5775] dvb-usb: error while querying for an remote control event. [ 233.802543][ T5776] pwc: Registered as video103. [ 233.832788][ T5776] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 233.882885][ T5776] usb 1-1: USB disconnect, device number 36 [ 233.924851][ T9] dvb-usb: bulk message failed: -71 (1/0) [ 233.924886][ T9] dvb-usb: error while querying for an remote control event. [ 234.075664][ T9] dvb-usb: bulk message failed: -71 (1/0) [ 234.084054][ T9] dvb-usb: error while querying for an remote control event. [ 234.245957][ T5776] dvb-usb: bulk message failed: -71 (1/0) [ 234.245993][ T5776] dvb-usb: error while querying for an remote control event. [ 234.343466][ T9] usb 2-1: USB disconnect, device number 44 [ 234.570351][ T8073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.692417][ T8075] netlink: 'syz.1.636': attribute type 17 has an invalid length. [ 235.093005][ T8082] netlink: 36 bytes leftover after parsing attributes in process `syz.3.639'. [ 235.132927][ T8085] capability: warning: `syz.3.639' uses 32-bit capabilities (legacy support in use) [ 235.340272][ T27] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 235.343275][ T9] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected. [ 235.572324][ T8093] fuse: Bad value for 'group_id' [ 235.572346][ T8093] fuse: Bad value for 'group_id' [ 235.675533][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 235.781987][ T5628] Bluetooth: hci0: unexpected event for opcode 0x0c47 [ 235.847056][ T9] usb 2-1: New USB device found: idVendor=0525, idProduct=127a, bcdDevice=1.00 [ 235.848184][ T9] usb 2-1: config index 0 descriptor too short (expected 50, got 32) [ 235.848209][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.848251][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 235.848275][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.852570][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.852595][ T9] usb 2-1: Product: syz [ 235.852611][ T9] usb 2-1: Manufacturer: syz [ 235.852626][ T9] usb 2-1: SerialNumber: syz [ 235.931288][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 235.947885][ T8075] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 235.953248][ T9] usb_debug 2-1:1.0: debug converter detected [ 235.973192][ T9] usb 2-1: debug converter now attached to ttyUSB0 [ 236.108425][ T27] usb 3-1: New USB device found: idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 236.163076][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.189794][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 236.192083][ T8075] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 236.218703][ T8075] logitech-hidpp-device 0003:046D:C082.0009: received hid++ report of bad size (4) [ 236.221321][ T9] usb 2-1: USB disconnect, device number 45 [ 236.247216][ T27] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 236.280413][ T9] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 236.282098][ T9] usb_debug 2-1:1.0: device disconnected [ 236.294197][ T5775] logitech-hidpp-device 0003:046D:C082.0009: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 237.020844][ T27] gspca_nw80x: reg_w err -71 [ 237.020926][ T27] nw80x 3-1:3.0: probe with driver nw80x failed with error -71 [ 237.176294][ T27] usb 3-1: USB disconnect, device number 45 [ 237.215622][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 237.368139][ T9] usb 1-1: New USB device found: idVendor=1235, idProduct=8215, bcdDevice=0.40 [ 237.395023][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.395053][ T9] usb 1-1: Product: syz [ 237.395069][ T9] usb 1-1: Manufacturer: syz [ 237.395084][ T9] usb 1-1: SerialNumber: syz [ 238.369315][ T8140] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 238.490115][ T8143] 8021q: VLANs not supported on xfrm0 [ 238.513225][ T8149] fuse: Bad value for 'group_id' [ 238.513247][ T8149] fuse: Bad value for 'group_id' [ 238.628902][ T8151] netlink: 20 bytes leftover after parsing attributes in process `syz.2.648'. [ 238.629324][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.648'. [ 243.944020][ T4981] udevd[4981]: worker [5627] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time [ 245.203649][ C1] sched: DL replenish lagged too much [ 246.613283][ T8143] nvme nvme0: failed to connect socket: -512 [ 257.271452][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.279385][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.358445][ T4930] Bluetooth: hci3: command 0x0406 tx timeout [ 263.538653][ T34] INFO: task kworker/0:1:10 blocked for more than 144 seconds. [ 263.538681][ T34] Tainted: G L syzkaller #0 [ 263.538692][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 263.538701][ T34] task:kworker/0:1 state:D stack:22064 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 263.538762][ T34] Workqueue: usb_hub_wq hub_event [ 263.538789][ T34] Call Trace: [ 263.538796][ T34] [ 263.538810][ T34] __schedule+0x1b47/0x5b40 [ 263.538843][ T34] ? __lock_acquire+0x747/0x2de0 [ 263.538871][ T34] ? rcu_is_watching+0x16/0xb0 [ 263.538906][ T34] ? __pfx___schedule+0x10/0x10 [ 263.538924][ T34] ? lock_acquire+0x115/0x350 [ 263.538953][ T34] ? schedule+0x90/0x2b0 [ 263.538976][ T34] schedule+0x164/0x2b0 [ 263.538998][ T34] schedule_timeout+0xc0/0x2c0 [ 263.539019][ T34] ? __pfx_schedule_timeout+0x10/0x10 [ 263.539041][ T34] ? do_raw_spin_lock+0x12b/0x2f0 [ 263.539071][ T34] ? _raw_spin_unlock_irq+0x23/0x50 [ 263.539092][ T34] ? wait_for_completion+0x26d/0x5d0 [ 263.539113][ T34] wait_for_completion+0x2c5/0x5d0 [ 263.539146][ T34] ? __pfx_wait_for_completion+0x10/0x10 [ 263.539173][ T34] ? kobject_put+0x50f/0x550 [ 263.539198][ T34] i2c_del_adapter+0x292/0x440 [ 263.539226][ T34] ? __pfx_i2c_del_adapter+0x10/0x10 [ 263.539247][ T34] ? kfree+0x4d/0x650 [ 263.539275][ T34] dvb_usb_i2c_exit+0x64/0xb0 [ 263.539297][ T34] dvb_usb_device_exit+0x1cb/0x350 [ 263.539317][ T34] ? console_srcu_read_lock+0x30/0x60 [ 263.539339][ T34] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 263.539376][ T34] cxusb_probe+0x60f/0x710 [ 263.539399][ T34] ? __pfx_cxusb_probe+0x10/0x10 [ 263.539417][ T34] ? __pm_runtime_set_status+0xa96/0xd80 [ 263.539454][ T34] usb_probe_interface+0x788/0xe50 [ 263.539483][ T34] ? __pfx_usb_probe_interface+0x10/0x10 [ 263.539520][ T34] ? kernfs_create_link+0x1cd/0x240 [ 263.539547][ T34] ? sysfs_do_create_link_sd+0xe0/0x110 [ 263.539572][ T34] ? driver_sysfs_add+0x1fe/0x210 [ 263.539597][ T34] ? __pfx_usb_probe_interface+0x10/0x10 [ 263.539617][ T34] really_probe+0x254/0xae0 [ 263.539644][ T34] __driver_probe_device+0x1e8/0x360 [ 263.539670][ T34] driver_probe_device+0x4f/0x240 [ 263.548392][ T34] __device_attach_driver+0x270/0x410 [ 263.548427][ T34] bus_for_each_drv+0x258/0x2f0 [ 263.548453][ T34] ? __pfx___device_attach_driver+0x10/0x10 [ 263.548477][ T34] ? __pfx_bus_for_each_drv+0x10/0x10 [ 263.548504][ T34] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 263.548534][ T34] __device_attach+0x2c4/0x450 [ 263.548560][ T34] ? __pfx___device_attach+0x10/0x10 [ 263.548580][ T34] ? do_raw_spin_unlock+0xf5/0x200 [ 263.548606][ T34] ? _raw_spin_unlock+0x28/0x50 [ 263.548633][ T34] device_initial_probe+0xa1/0xd0 [ 263.548658][ T34] bus_probe_device+0x12a/0x220 [ 263.548685][ T34] device_add+0x7d7/0xb80 [ 263.548711][ T34] usb_set_configuration+0x1bb5/0x2260 [ 263.548763][ T34] usb_generic_driver_probe+0x8d/0x150 [ 263.548790][ T34] usb_probe_device+0x1c3/0x3b0 [ 263.548825][ T34] ? __pfx_usb_probe_device+0x10/0x10 [ 263.548846][ T34] really_probe+0x254/0xae0 [ 263.548873][ T34] __driver_probe_device+0x1e8/0x360 [ 263.548899][ T34] driver_probe_device+0x4f/0x240 [ 263.548926][ T34] __device_attach_driver+0x270/0x410 [ 263.548954][ T34] bus_for_each_drv+0x258/0x2f0 [ 263.548978][ T34] ? __pfx___device_attach_driver+0x10/0x10 [ 263.549001][ T34] ? __pfx_bus_for_each_drv+0x10/0x10 [ 263.549028][ T34] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 263.549057][ T34] __device_attach+0x2c4/0x450 [ 263.549083][ T34] ? __pfx___device_attach+0x10/0x10 [ 263.549106][ T34] ? do_raw_spin_unlock+0xf5/0x200 [ 263.549132][ T34] ? _raw_spin_unlock+0x28/0x50 [ 263.549158][ T34] device_initial_probe+0xa1/0xd0 [ 263.549184][ T34] bus_probe_device+0x12a/0x220 [ 263.549211][ T34] device_add+0x7d7/0xb80 [ 263.549236][ T34] usb_new_device+0x9aa/0x1690 [ 263.549268][ T34] ? __pfx_usb_new_device+0x10/0x10 [ 263.549295][ T34] ? _raw_spin_unlock_irq+0x23/0x50 [ 263.549321][ T34] hub_event+0x28e8/0x4d30 [ 263.549343][ T34] ? do_raw_spin_unlock+0xf5/0x200 [ 263.549416][ T34] ? __pfx_hub_event+0x10/0x10 [ 263.549447][ T34] ? rcu_is_watching+0x16/0xb0 [ 263.549473][ T34] ? process_scheduled_works+0x97a/0x1630 [ 263.549497][ T34] process_scheduled_works+0xc3d/0x1630 [ 263.549554][ T34] ? __pfx_process_scheduled_works+0x10/0x10 [ 263.549592][ T34] ? assign_work+0x3cf/0x5d0 [ 263.549621][ T34] worker_thread+0xa47/0xfb0 [ 263.549657][ T34] ? __kthread_parkme+0x71/0x1f0 [ 263.549689][ T34] kthread+0x38b/0x480 [ 263.549712][ T34] ? __pfx_worker_thread+0x10/0x10 [ 263.549732][ T34] ? __pfx_kthread+0x10/0x10 [ 263.549756][ T34] ret_from_fork+0x514/0xb70 [ 263.549783][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 263.549806][ T34] ? __switch_to+0xc78/0x1410 [ 263.549840][ T34] ? __pfx_kthread+0x10/0x10 [ 263.549862][ T34] ret_from_fork_asm+0x1a/0x30 [ 263.549901][ T34] [ 263.550083][ T34] [ 263.550083][ T34] Showing all locks held in the system: [ 263.550096][ T34] locks held by kworker/0:0/9: 5, on CPU#0: [ 263.550112][ T34] #0: ffff888023289948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.550172][ T34] #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.550228][ T34] #2: ffff88802a6971d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 263.550279][ T34] #3: ffff88807ac121d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 263.550331][ T34] #4: ffffffff90a17780 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 263.550387][ T34] locks held by kworker/0:1/10: 5, on CPU#0: [ 263.550403][ T34] #0: ffff888023289948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.550458][ T34] #1: ffffc900000f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.550513][ T34] #2: ffff88802a8a61d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 263.550564][ T34] #3: ffff888032cd41d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 263.550616][ T34] #4: ffff888021b3f1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 263.550669][ T34] locks held by kworker/u8:0/12: 3, last CPU#1: [ 263.550685][ T34] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.550739][ T34] #1: ffffc90000117c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.550807][ T34] #2: ffff8880351fc258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 263.550905][ T34] locks held by kworker/u8:1/13: 2, last CPU#0: [ 263.550921][ T34] #0: ffff888035bf7148 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.550978][ T34] #1: ffffc90000127c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.551035][ T34] locks held by kworker/1:0/27: 2, last CPU#1: [ 263.551050][ T34] #0: ffff8880252bb548 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.551109][ T34] #1: ffffc90000a1fc40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.551163][ T34] locks held by kworker/1:1/32: 3, last CPU#1: [ 263.551179][ T34] #0: ffff88807fa84548 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.551236][ T34] #1: ffffc90000a77c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.551305][ T34] #2: ffff88807b565440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 263.551361][ T34] locks held by khungtaskd/34: 1, last CPU#1: [ 263.551377][ T34] #0: ffffffff8f15a260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 263.551431][ T34] locks held by kworker/u8:4/61: 3, last CPU#0: [ 263.551447][ T34] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.551499][ T34] #1: ffffc9000203fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.551554][ T34] #2: ffff88807ba5a258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 263.551607][ T34] locks held by kworker/u8:5/104: 6, last CPU#0: [ 263.551623][ T34] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.551676][ T34] #1: ffffc90002607c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.551731][ T34] #2: ffff888034094258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 263.551788][ T34] #3: ffff88805b75f4e0 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x19e/0xb30 [ 263.551848][ T34] #4: ffffffff8f15a260 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 263.551900][ T34] #5: ffffffff8f15a260 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 263.551952][ T34] locks held by kworker/u8:6/775: 2, last CPU#0: [ 263.551967][ T34] #0: ffff888022367148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.552021][ T34] #1: ffffc9000447fc40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.552087][ T34] locks held by klogd/4970: 1, last CPU#1: [ 263.552103][ T34] #0: ffffffff8f2ad3b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 263.552154][ T34] locks held by udevd/4981: 1, last CPU#1: [ 263.552170][ T34] #0: ffffffff8f2ad3b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 263.552220][ T34] locks held by dhcpcd/5275: 1, last CPU#1: [ 263.552235][ T34] #0: ffffffff8f2ad3b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 263.552286][ T34] locks held by dhcpcd/5276: 2, last CPU#1: [ 263.552301][ T34] #0: ffffffff8f2ad3b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 263.552351][ T34] #1: ffffffff8f15a260 (rcu_read_lock){....}-{1:3}, at: page_ext_get+0x22/0x2e0 [ 263.552403][ T34] locks held by getty/5372: 2, on CPU#0: [ 263.552418][ T34] #0: ffff88803646c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 263.552470][ T34] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 263.552522][ T34] locks held by syz-executor/5613: 1, last CPU#1: [ 263.552538][ T34] #0: ffffffff8f2ad3b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 263.552589][ T34] locks held by syz-executor/5615: 1, last CPU#1: [ 263.552605][ T34] #0: ffffffff8f2ad3b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 263.552655][ T34] locks held by syz-executor/5616: 2, last CPU#0: [ 263.552671][ T34] #0: ffffffff8f8f56f8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 263.552722][ T34] #1: ffffffff8f2ad3b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 263.552772][ T34] locks held by kworker/1:3/5617: 3, last CPU#1: [ 263.552788][ T34] #0: ffff88805bde0548 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.552855][ T34] #1: ffffc90003defc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.552925][ T34] #2: ffff888076599700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 263.552979][ T34] locks held by udevd/5627: 4, on CPU#0: [ 263.552995][ T34] #0: ffff888021faee18 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 263.553045][ T34] #1: ffff88807ae74c80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 263.553101][ T34] #2: ffff88807b03ae18 (kn->active#30){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 263.553157][ T34] #3: ffff888032cd41d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 263.553209][ T34] locks held by kworker/u9:6/5628: 3, last CPU#1: [ 263.553224][ T34] #0: ffff88807937a148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.553276][ T34] #1: ffffc900042afc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.553330][ T34] #2: ffff88807a6ecea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 263.553384][ T34] locks held by kworker/0:4/5693: 2, last CPU#0: [ 263.553399][ T34] #0: ffff88807a162d48 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.553457][ T34] #1: ffffc9000488fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.553528][ T34] locks held by kworker/1:4/5706: 4, last CPU#1: [ 263.553543][ T34] #0: ffff88807a162d48 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.553601][ T34] #1: ffffc9000493fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.553670][ T34] #2: ffff888035d01440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 263.553724][ T34] #3: ffff888021f46640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 263.553779][ T34] locks held by kworker/0:7/5776: 4, on CPU#0: [ 263.553794][ T34] #0: ffff88805bde0548 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.553872][ T34] #1: ffffc90004bbfc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.553941][ T34] #2: ffff88807be59440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 263.553994][ T34] #3: ffff888076599700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 263.554049][ T34] locks held by syz.0.642/8115: 2, last CPU#1: [ 263.554064][ T34] #0: ffffffff8f2ad3b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 263.554114][ T34] #1: ffffffff8f15a260 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 263.554165][ T34] locks held by syz.2.648/8143: 4, last CPU#1: [ 263.554181][ T34] #0: ffffffff8fd0b060 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_write+0x14e/0x2d90 [ 263.554251][ T34] #1: ffffffff90a17780 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 263.554305][ T34] #2: ffffffff8f2ad3b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 263.554356][ T34] #3: ffffffff8f15a260 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 263.554408][ T34] locks held by syz.2.648/8151: 2, last CPU#1: [ 263.554424][ T34] #0: ffff888079d5e8e0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3e/0x100 [ 263.554478][ T34] #1: ffffffff906ebfa0 (nf_conntrack_mutex){+.+.}-{4:4}, at: nf_ct_iterate_cleanup+0x3a/0x4f0 [ 263.554532][ T34] [ 263.554538][ T34] ============================================= [ 263.554538][ T34] [ 263.554557][ T34] NMI backtrace for cpu 1 [ 263.554576][ T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 263.554606][ T34] Tainted: [L]=SOFTLOCKUP [ 263.554614][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 263.554627][ T34] Call Trace: [ 263.554635][ T34] [ 263.554644][ T34] dump_stack_lvl+0xe8/0x150 [ 263.554670][ T34] nmi_cpu_backtrace+0x274/0x2d0 [ 263.554692][ T34] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 263.554718][ T34] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 263.554745][ T34] sys_info+0x135/0x170 [ 263.554764][ T34] watchdog+0x1073/0x10f0 [ 263.554794][ T34] ? watchdog+0x209/0x10f0 [ 263.554831][ T34] kthread+0x38b/0x480 [ 263.554853][ T34] ? __pfx_watchdog+0x10/0x10 [ 263.554872][ T34] ? __pfx_kthread+0x10/0x10 [ 263.554894][ T34] ret_from_fork+0x514/0xb70 [ 263.554918][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 263.554941][ T34] ? __switch_to+0xc78/0x1410 [ 263.554965][ T34] ? __pfx_kthread+0x10/0x10 [ 263.554987][ T34] ret_from_fork_asm+0x1a/0x30 [ 263.555024][ T34] [ 263.555033][ T34] Sending NMI from CPU 1 to CPUs 0: [ 263.555070][ C0] NMI backtrace for cpu 0 [ 263.555086][ C0] CPU: 0 UID: 0 PID: 104 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.555113][ C0] Tainted: [L]=SOFTLOCKUP [ 263.555119][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 263.555132][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 263.555154][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x20/0xb0 [ 263.555176][ C0] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 d8 02 16 12 65 48 8b 0d d8 02 16 12 f7 c1 00 01 00 ff 74 2c <41> 89 c8 41 81 e0 00 01 00 0f 41 81 f8 00 01 00 00 41 0f 95 c0 81 [ 263.555194][ C0] RSP: 0018:ffffc90000006e80 EFLAGS: 00000206 [ 263.555210][ C0] RAX: ffffffff89d26f86 RBX: 0000000000000000 RCX: 8000000000000102 [ 263.555225][ C0] RDX: ffff88801efebe80 RSI: 0000000000000000 RDI: 0000000000000000 [ 263.555238][ C0] RBP: 0000000000000018 R08: 0000000000000100 R09: 0000000000000000 [ 263.555250][ C0] R10: ffffc90000007040 R11: fffff52000000e0e R12: dffffc0000000000 [ 263.555265][ C0] R13: 0000000000000000 R14: ffff8880294bd320 R15: ffff888033f032a0 [ 263.555284][ C0] FS: 0000000000000000(0000) GS:ffff888124633000(0000) knlGS:0000000000000000 [ 263.555303][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.555325][ C0] CR2: 0000555592af5a38 CR3: 000000000ef48000 CR4: 00000000003526f0 [ 263.555356][ C0] Call Trace: [ 263.555363][ C0] [ 263.555370][ C0] lockdep_rtnl_is_held+0x26/0x40 [ 263.555392][ C0] fib_table_lookup+0x2a9/0x16e0 [ 263.555428][ C0] __inet_dev_addr_type+0x2fc/0x560 [ 263.555448][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 263.555471][ C0] ? __inet_dev_addr_type+0x159/0x560 [ 263.555492][ C0] ? __pfx___inet_dev_addr_type+0x10/0x10 [ 263.555517][ C0] ? inet_addr_type_dev_table+0x25/0x190 [ 263.555542][ C0] ? inet_addr_type_dev_table+0x25/0x190 [ 263.555566][ C0] ? inet_addr_type_dev_table+0x25/0x190 [ 263.555590][ C0] ip_route_me_harder+0x45a/0xfe0 [ 263.555619][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 263.555645][ C0] ? __alloc_skb+0x27a/0x7a0 [ 263.555670][ C0] ? __cookie_v4_init_sequence+0x273/0x510 [ 263.555692][ C0] ? kmem_cache_alloc_node_noprof+0x3b9/0x600 [ 263.555720][ C0] synproxy_send_tcp+0x332/0x670 [ 263.555745][ C0] synproxy_send_client_synack+0x89b/0xde0 [ 263.555776][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 263.555798][ C0] ? nft_socket_init+0x304/0x3c0 [ 263.555849][ C0] ? synproxy_pernet+0x45/0x270 [ 263.555873][ C0] nft_synproxy_eval_v4+0x362/0x4e0 [ 263.555900][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 263.555921][ C0] ? __lock_acquire+0x747/0x2de0 [ 263.555944][ C0] ? nf_ip_checksum+0x13c/0x510 [ 263.555967][ C0] nft_synproxy_do_eval+0x389/0x5d0 [ 263.555993][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 263.556025][ C0] nft_do_chain+0x48d/0x1b10 [ 263.556055][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 263.556080][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 263.556102][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 263.556139][ C0] nft_do_chain_ipv4+0x195/0x290 [ 263.556161][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 263.556182][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 263.556206][ C0] ? iptable_mangle_hook+0x18a/0x4c0 [ 263.556230][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 263.556254][ C0] nf_hook_slow+0xc5/0x220 [ 263.556278][ C0] NF_HOOK+0x21f/0x3c0 [ 263.556298][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 263.556330][ C0] ? NF_HOOK+0x9e/0x3c0 [ 263.556349][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 263.556370][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 263.556396][ C0] ? ip_local_deliver+0x113/0x190 [ 263.556418][ C0] NF_HOOK+0x336/0x3c0 [ 263.556437][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 263.556458][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 263.556478][ C0] ? NF_HOOK+0x9e/0x3c0 [ 263.556497][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 263.556518][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 263.556537][ C0] ? ip_rcv_core+0x88d/0xd50 [ 263.556560][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 263.556579][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 263.556600][ C0] process_backlog+0xa6b/0x18b0 [ 263.556623][ C0] ? process_backlog+0x3de/0x18b0 [ 263.556652][ C0] __napi_poll+0xaa/0x330 [ 263.556674][ C0] net_rx_action+0x61d/0xf50 [ 263.556702][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 263.556739][ C0] handle_softirqs+0x223/0x840 [ 263.556759][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 263.556780][ C0] ? do_softirq+0x77/0xd0 [ 263.556802][ C0] ? __alloc_skb+0x18d/0x7a0 [ 263.556820][ C0] ? __alloc_skb+0x18d/0x7a0 [ 263.556841][ C0] do_softirq+0x77/0xd0 [ 263.556861][ C0] [ 263.556868][ C0] [ 263.556876][ C0] __local_bh_enable_ip+0x100/0x140 [ 263.556898][ C0] __alloc_skb+0x1b1/0x7a0 [ 263.556920][ C0] nsim_dev_trap_report_work+0x25f/0xb30 [ 263.556951][ C0] ? process_scheduled_works+0x97a/0x1630 [ 263.556974][ C0] process_scheduled_works+0xc3d/0x1630 [ 263.557014][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 263.557041][ C0] ? assign_work+0x3cf/0x5d0 [ 263.557065][ C0] worker_thread+0xa47/0xfb0 [ 263.557100][ C0] kthread+0x38b/0x480 [ 263.557120][ C0] ? __pfx_worker_thread+0x10/0x10 [ 263.557139][ C0] ? __pfx_kthread+0x10/0x10 [ 263.557160][ C0] ret_from_fork+0x514/0xb70 [ 263.557183][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 263.557204][ C0] ? __switch_to+0xc78/0x1410 [ 263.557226][ C0] ? __pfx_kthread+0x10/0x10 [ 263.557247][ C0] ret_from_fork_asm+0x1a/0x30 [ 263.557277][ C0] [ 269.432427][ T34] Kernel panic - not syncing: hung_task: blocked tasks [ 270.985593][ T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 270.996393][ T34] Tainted: [L]=SOFTLOCKUP [ 271.000738][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 271.010825][ T34] Call Trace: [ 271.014131][ T34] [ 271.017082][ T34] vpanic+0x26f/0x710 [ 271.021108][ T34] panic+0xc5/0xd0 [ 271.024853][ T34] ? __pfx_panic+0x10/0x10 [ 271.029301][ T34] ? preempt_schedule_common+0x7f/0xd0 [ 271.034794][ T34] ? preempt_schedule_thunk+0x16/0x40 [ 271.040207][ T34] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 271.046421][ T34] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 271.052629][ T34] watchdog+0x10e7/0x10f0 [ 271.057012][ T34] ? watchdog+0x209/0x10f0 [ 271.061505][ T34] kthread+0x38b/0x480 [ 271.065617][ T34] ? __pfx_watchdog+0x10/0x10 [ 271.070329][ T34] ? __pfx_kthread+0x10/0x10 [ 271.074975][ T34] ret_from_fork+0x514/0xb70 [ 271.079626][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 271.084772][ T34] ? __switch_to+0xc78/0x1410 [ 271.089487][ T34] ? __pfx_kthread+0x10/0x10 [ 271.094106][ T34] ret_from_fork_asm+0x1a/0x30 [ 271.098920][ T34] [ 271.102613][ T34] Kernel Offset: disabled [ 271.106982][ T34] Rebooting in 86400 seconds..