last executing test programs: 1m4.355867835s ago: executing program 2 (id=179): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0xb) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000540)=0x1) 1m4.293001996s ago: executing program 2 (id=180): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="000d020000005678d9aa897ecd85116307c5d0a47d7ca144c7b35308b4881164411af24bf778356788abff049511a925f9a13ba09e7899afdd710b4535879fe8b7fad390502ba6a25f92bb3419f4005593b305b93847c74aa9f6abeea873edb5ebf79fbe8a02caccc20354dbc3e700e5189025233103c5cc4d6c28b837ea18dc1e"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000380)={0x14, &(0x7f0000000200)={0x40, 0xf, 0x9, {0x9, 0xe, "76c853d0e44bd6"}}, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) (rerun: 32) 1m1.184602405s ago: executing program 2 (id=198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="0f2258660f1bd80f01ba200003a8000064660fc7b000000f070fc72beaa500be00baf80c66b8a07e258066efbafc0c66b80b9f9c3966ef26650f01c8", 0x3c}], 0x1, 0x7d, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000088945b406d04b6088eca000000010902"], 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 64) 59.775617998s ago: executing program 2 (id=202): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000008450c0b7600000000000109022400010000000009040000ff0300000009210400000122850009058103"], 0x0) syz_usb_connect$midi(0x3, 0x118, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x582, 0x145, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x106, 0x1, 0x1, 0x7, 0xa0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x30, 0x2, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2, 0x6}, @ms_header={0x7, 0x24, 0x1, 0x10, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x3, 0x9, 0x2, [{0x7f, 0x5}, {0xe, 0xf3}], 0xd}, @midi_out_jack={0xf, 0x24, 0x3, 0x2, 0x7f, 0x4, [{0x8, 0x7}, {0xfe, 0x4}, {0x0, 0x8}, {0xc, 0x40}], 0x3}, @ms_header={0x7, 0x24, 0x1, 0x4000, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x1, 0xa0, 0x6, [{0x6, 0x80}, {0xf4, 0x7}, {0x7f, 0x7}, {0x84, 0x9}, {0x9}, {0x40, 0x28}], 0x8}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xb, 0x21}, @midi_out_jack={0x17, 0x24, 0x3, 0x2, 0x1, 0x8, [{0x7, 0x2}, {0x1, 0x1}, {0x9a, 0x1}, {0x1, 0x2}, {0x80, 0x1}, {0x1e, 0x6}, {0xf, 0x5}, {0x2, 0x5}], 0x4}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x217b3b32d3bbb486, 0x1, 0xc6}], [{{0x9, 0x5, 0x3, 0x0, 0xf8876abb856d369e, 0x4, 0x1, 0x3, {0x7, 0x25, 0x1, 0x3, "aa448e"}}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x9, 0x9, 0x10, {0x12, 0x25, 0x1, 0xe, "5ca896488b6ad07a038990ddb540"}}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0xa6, 0xda, 0x8, {0x10, 0x25, 0x1, 0xc, "49f49bc7e92dfd993b2235b9"}}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x0, 0x10, 0xe, {0x7, 0x25, 0x1, 0x3, "7be572"}}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x1, 0x43, 0x0, {0x6, 0x25, 0x1, 0x2, "11f0"}}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x98, 0x0, 0xe, {0xd, 0x25, 0x1, 0x9, "2741c14f65901c763b"}}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x6, 0x7, 0x5b, {0x8, 0x25, 0x1, 0x4, "db071681"}}}]}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x200, 0xa, 0x4, 0x84, 0x20, 0x2d}, 0x45, &(0x7f0000000500)={0x5, 0xf, 0x45, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x11, 0x40, 0x3, 0xfd5, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0xbe, 0x4, 0xc, 0x7}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x0, 0xf0f, 0x5, [0xf, 0x3fc0, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x7, 0x5}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x40, 0x0, 0x9, 0x2}]}, 0x9, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x403}}, {0x89, &(0x7f0000000600)=@string={0x89, 0x3, "fba78441dc47e1a106ce0c7a380c7035a85ee3e57defea2ed30d42fa47fbd3bfa2d4e1046047015b7998d92e09c496058efdaed68de70eaee647381d13eacc711a82179795ab4f9f73fc5fa3b6cd73de1d19314a879b2c54a79ce0c42a3a2f9f2db9971f3043acf511bf6cf1089d740cc3a437195fa04a5c09019b68dfe0e0946cab747ff21a1e"}}, {0xc5, &(0x7f00000006c0)=@string={0xc5, 0x3, "d55cc0299c8c595df90e9144c5c2c69b8bde4ac2520e2ea1b49082e0cc5081411f195d619066d39ef58547384743533d75d5fa0d440cc716254a2781836503580de4d9b72a7efadca5884e90d3932fb9f97b95950dd8612309b7aca6fdac2c0432734b8786818e74e63c99ba64bd04a36308ba8cab4acbab52a1b69ece987c85a564fd46ab4c6f80658d3f6a1d57b4abf9b8e3224798885b5fe0f5c2a32114121ee6e57b34755c4823a75155273ae9b5aabbbf1114b63f6f25f3782a2522c0e8b98806"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x4c3d}}, {0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="100373165b60dc8445caa06388474b7de1a68ae7085bbe1ed7fe57"]}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x2c09}}, {0x8, &(0x7f00000008c0)=@string={0x8, 0x3, "7e92ad147b10"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x40, 0x22, 0x3e, {0x3e, 0xd, "2b894274e91451b160c2b8ab800dec6d342a73b21f67c2449a0776216462d3925293fc9d72aa4c417a7f4fd1de46dd8aa90b23ced2cb0bbdf639e6c6"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}}, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x0, 0x16, 0x2, "ab8e"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0xc0, 0x5, 0x6, "8e894096ade7"}, &(0x7f0000000300)={0x40, 0x5, 0x2, "eb34"}}) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) 58.06057384s ago: executing program 2 (id=213): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) 58.008797859s ago: executing program 2 (id=215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="0f20c035000001000f22c08f693001fdc744240013000000c7442402e7000000ff2c24c42245b66a7d0f01df67400fc75a0fc7442400ce000000c74424027b00c0feff1c240fc72ac744240060000000c74424024458cd3bff1c240fc79d8000c0fe", 0x62}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xc3, 0xb6, 0xf6, 0x40, 0xbfd, 0x112, 0xbb9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0xb, 0x10, 0xb4, "", [{{0x9, 0x4, 0x11, 0x2, 0x2, 0xa1, 0x48, 0xcd, 0x8, [], [{{0x9, 0x5, 0x2, 0x2, 0x7ff, 0x1d, 0x7, 0x5}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x1, 0x9, 0x8}}]}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, 0x0, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r6, 0x2000}], 0x1, &(0x7f0000000980), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x101080) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000040)=0x2) 42.512228768s ago: executing program 32 (id=215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="0f20c035000001000f22c08f693001fdc744240013000000c7442402e7000000ff2c24c42245b66a7d0f01df67400fc75a0fc7442400ce000000c74424027b00c0feff1c240fc72ac744240060000000c74424024458cd3bff1c240fc79d8000c0fe", 0x62}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xc3, 0xb6, 0xf6, 0x40, 0xbfd, 0x112, 0xbb9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0xb, 0x10, 0xb4, "", [{{0x9, 0x4, 0x11, 0x2, 0x2, 0xa1, 0x48, 0xcd, 0x8, [], [{{0x9, 0x5, 0x2, 0x2, 0x7ff, 0x1d, 0x7, 0x5}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x1, 0x9, 0x8}}]}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, 0x0, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r6, 0x2000}], 0x1, &(0x7f0000000980), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x101080) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000040)=0x2) 20.279028533s ago: executing program 4 (id=337): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xe) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x40, 0x22, 0x89, {0x89, 0x7, "cfbeee707ef478a0e2b2590b81ae0950305625b87e1a26ad4ca113735f7b6540ca8575c7a4e7f3b06a5a40f1c5481de86ccf72b1a49754fcef15daa91ebe8fb878757951f4b608fe5da0c283ebb3349e8a112e79ea47b9afd4c8293564f92c6413dc63ae25dafbe6496d7c337f1c1f31f250f11fe93f403ffb020d8ecb3b2edf0a1da023426f83"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x40, 0x16, 0xa8, "229cd5f3335572595522eae91b80f0aa30e3d69591fd9da7bd1cdee4cabec9c435738311c9056d3fbca511d44cbc914ad579051c2ae09e7b52445da6beb25cecd7ca438bc012d3e14494eaea113265a1549d62b271ac4fd2fb55f570446013ba543d1a07c22d5a760d5d6cff64b7432e89056093b9de31f9c56830632d9571fec6c06a9e7c891f4c2954d75da67eb5a12f98dd007279fb947817065389ef601f56e0a73ae5868bcc"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xb5}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0xd, 0x0, 0x7, 0x35d, 0x5e, 0x7, 0x800, 0x5, 0xff, 0xfffe, 0x5}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x7}, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000440)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1c0000000000) r2 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x0, 0x0) keyctl$unlink(0x9, r2, r3) syz_usb_disconnect(r0) 18.540682786s ago: executing program 4 (id=344): mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x120, 0x4) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000300000800000018000180140002006d6163767461703000000000000000000c00028004"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) (async) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000340)={0x1, 0xb}, 0x8) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xad) 18.182220061s ago: executing program 4 (id=346): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x3b) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="6e0200007d02000005f600000000000005830000000008000000000000000000404100000000e0e5000005000000000000001b00046e6f6465767b65766f6f7e0545c60005080037d93a8b920000003300704a86cec602007dfa673efeeb09b5351f5bde05"], 0x26e) r2 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000003c0)) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ppoll(&(0x7f0000000040)=[{r3, 0x9204}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) mount_setattr(r4, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r4}}, 0x20) 18.056411368s ago: executing program 4 (id=349): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', 0x1c8) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r0, 0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', 0x1c8) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') (async) setns(r0, 0x20000) (async) 17.875142642s ago: executing program 4 (id=351): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x44, 0x8, 0x42}) 17.008493188s ago: executing program 4 (id=354): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r0, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x3be1cae) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r2, 0x8}, &(0x7f0000000100)=0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='wusb3801 0x', 0xb) 16.508286269s ago: executing program 33 (id=354): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r0, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x3be1cae) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r2, 0x8}, &(0x7f0000000100)=0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='wusb3801 0x', 0xb) 8.20313752s ago: executing program 3 (id=401): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(0x0, 0xa, 0x28102) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, 0x0, 0xa01, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x3, 0x51, 0x2f, 0x0, 0xc}}}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xb8, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") read(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x9) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 6.531908017s ago: executing program 1 (id=407): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[], 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000007c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="4001e4"], 0x0, 0x0, 0x0, 0x0}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000140)={0x20, 0xe, 0x12, {0x12, 0x1b, "7fa42bac99e1af881c575ec83d81941c"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}}, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x0, 0x9, 0x28, "bc29d959624f79a0ead599ca184212dd5ca69c5d2575b29fe12d116608f41784773808465d36e653"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000002c0)={0x20, 0x81, 0x3, "074ef4"}, &(0x7f0000000300)={0x20, 0x82, 0x1, "fb"}, &(0x7f0000000340)={0x20, 0x83, 0x3, "7f983c"}, &(0x7f0000000380)={0x20, 0x84, 0x2, "16ed"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "259819"}}) syz_usb_disconnect(r0) 5.187293003s ago: executing program 3 (id=414): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x44, 0x8, 0x42}) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) 5.045504059s ago: executing program 3 (id=415): recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) open(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10200, 0x140) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, r2, 0x47550000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0xb, 0x7f, '\x00', 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.864000257s ago: executing program 5 (id=416): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './proc\x00'}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)=@x86={0x28, 0x5, 0x6, 0x0, 0x9, 0xb, 0x1, 0x7, 0x6, 0x4, 0x8, 0x8, 0x0, 0x3, 0x0, 0x40, 0x3a, 0xa, 0x9, '\x00', 0x5, 0x7fffffff}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x122) (async, rerun: 64) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0xa, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async, rerun: 64) sendfile(r2, 0xffffffffffffffff, 0x0, 0x3fffff) (async, rerun: 64) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c40000000002010300000000000000000700000224000a0000000000000007000800014000000000080001400000000108000140000000018c000a80880002800c000280050001002100000006000340000200002c000180141efaa25900000000000000000000000000000114000400fe80000000000000ae00000000000000aa2c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000bb0c00028005000100210000000c000280050001003a0000"], 0xc4}, 0x1, 0x0, 0x0, 0x40010}, 0x10) (async) r4 = socket(0x10, 0x803, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_debugfs\x00', 0x4) (async) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_debugfs/usb/devices\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, 0x0, 0x29) (async) sendto(r4, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000380)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (rerun: 64) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async, rerun: 32) r8 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x2}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) r9 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000002bc0)=ANY=[], 0x8) (async) getsockopt$inet6_opts(r9, 0x29, 0x36, 0xffffffffffffffff, &(0x7f0000000340)=0xffffffffffffffe6) 4.769388934s ago: executing program 3 (id=417): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000180)="2d000000010001", 0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0x6c, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}, @nested={0x8, 0x5, 0x0, 0x1, [@nested={0x4, 0x60}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000003c0), 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x6, 0x301200) syz_usb_connect(0x3, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000085f0500a800010000000109022e000101008032090400"], 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000080)="01e9ff000980ffff", 0x8) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000040)) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x2481, 0x0) ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x270c, 0x20, 0x1, 0x1, 0x2, &(0x7f0000000300)=[0x0], 0x1, 0x0}) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r6, r6, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x12) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) syz_usb_connect$midi(0x2, 0x100, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x582, 0x75, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x1, 0x1, 0x2, 0x90, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x30, 0xc, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x81, 0x53}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x4, 0x2}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xf, 0x4}, @midi_out_jack={0xd, 0x24, 0x3, 0x0, 0xb5, 0x3, [{0x1, 0x3}, {0xc6, 0x1}, {0x0, 0x2}], 0x2}, @midi_out_jack={0xb, 0x24, 0x3, 0x2, 0x16, 0x2, [{0x3, 0x5}, {0x6, 0xc0}], 0x5}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x3, 0x3}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x9, 0x31}, @ms_header={0x7, 0x24, 0x1, 0x400, 0x7}], [{{0x9, 0x5, 0x5, 0x10, 0x10, 0x9, 0x2, 0x4, {0x6, 0x25, 0x1, 0x2, "f6c6"}}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x6, 0x9, 0x4, {0xe, 0x25, 0x1, 0xa, "8fd5b9425e2611c9e5a2"}}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x2, 0x7, 0xd1, {0xe, 0x25, 0x1, 0xa, "50607cc2566558fe8844"}}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x1, 0x1, 0xa, {0xf, 0x25, 0x1, 0xb, "04539b0d7a2075ea9b32ea"}}}, {{0x9, 0x5, 0x88, 0x0, 0x10, 0xe, 0x5, 0x8, {0xc, 0x25, 0x1, 0x8, "5e8e7f670ad22ffa"}}}, {{0x9, 0x5, 0xf, 0x3, 0x90, 0x4, 0x7, 0xf5, {0x12, 0x25, 0x1, 0xe, "503429d17653f35e90bd57a533d4"}}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x2, 0x2, 0x83, {0xa, 0x25, 0x1, 0x6, "8914ff563ae1"}}}]}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x1, 0xb, 0x9, 0x40, 0xa}, 0xc8, &(0x7f0000000480)={0x5, 0xf, 0xc8, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x1, 0xba, 0x78a, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x30, 0x4, 0x4e0f}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x7, 0x9, 0xa, 0x10}, @generic={0x7b, 0x10, 0x1, "b25bb0d05ea07fa96e287813940ba9d2c19bb709442c3b1a32e4603f7223686fac94d57679586e5a0b24c019d28f4b3e221b19b2dc80c41570f0454ae0146087599c2e0c9b8ea767a1e8a7a42aa9ecffc475f089b84bad30568f9e80558eb33ae65baafb950d0ef3b59932c01aca9f37ac8e57827bcc82b8"}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "7468da96456a6dfadad11227f23195d7"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "9869e7c9a48e1c0d91c79e03e1f8d32a"}]}, 0x2, [{0xe2, &(0x7f0000000580)=@string={0xe2, 0x3, "8c803447a92e14bb0bef98624acc405643f3a92d70c545201d0415a44ca4df1ab1cea0c9393be4ec57d3becf2f41adf41fe15d4f5904ebf3ce177b59f093f35967ae96c02edab48f7b58a64ed382a16898e413e9c8dfa45cf9806a024c643009c108cee7e546e990b076e6fb8faaa874e17312fe50be99a36900fca58c876afd4209829a5cc1f5199fe18fbd2a7e283263d1197b432706447f515b05a92625362157f40affcc2e6619372405380c9ad9839fa1bdb9fd1a18eb9699ab56ca9974da1105673c0855999a10fb0ca825e4b1d5333ac38eba79524cf52140eda0b463"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000780)={0x0, 0x0, 0x6, "66c628c5c93a"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.895204441s ago: executing program 5 (id=418): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'erspan0\x00'}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x10000000000, 0x240800) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f00000000c0)=0xb) 3.443984543s ago: executing program 1 (id=419): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8211, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xfb, 0xa0, 0x5, {0x8, 0xb, 0x1, 0x2, 0x1, 0xff, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x2, 0x9, 0xfc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x80, 0xb8, {0x8, 0x25, 0x1, 0x80, 0xc, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9, 0x0, 0x1, {0x8, 0x25, 0x1, 0x82, 0x0, 0x6, 0x8}}}}}}}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000024c0), 0x40000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r1, 0xc01064c4, &(0x7f0000002b40)={0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r1, 0xc0106450, &(0x7f0000000140)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r0, 0xc0106446, &(0x7f0000000180)={r2}) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000100)=0x8, 0x4) 3.092283522s ago: executing program 5 (id=420): r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x10}}}, 0xa) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0003044b11831bc8adcd"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000340)={0x0, 0x10, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x404, 0x70bd2c, 0x25dfdbfe, {0x10, 0x1, 0x1, 0x0, 0x80, 0xffff, 0x80000001, 0x3, 0x0, 0x101, 0x10000}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x5, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b01020301090224000100000000090400"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x10}}}, 0xa) (async) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0003044b11831bc8adcd"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000340)={0x0, 0x10, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x404, 0x70bd2c, 0x25dfdbfe, {0x10, 0x1, 0x1, 0x0, 0x80, 0xffff, 0x80000001, 0x3, 0x0, 0x101, 0x10000}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004) (async) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x5, 0x0}) (async) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b01020301090224000100000000090400"], 0x0) (async) 2.865644526s ago: executing program 3 (id=421): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.309862469s ago: executing program 1 (id=423): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x44, 0x8, 0x42}) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) 1.924707979s ago: executing program 1 (id=424): syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff000705810240000007050202400000070583"], 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0x2c77, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0xa, &(0x7f00000000c0), 0x1, 0x8}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x65, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0xffff, 0xc57, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x12}}}, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xffffffff, 0x1e5}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000540)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40012143, 0x0, {0xb}}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) syz_io_uring_modify_offsets$flags(r1, r6, 0x38, 0x0) 1.456080704s ago: executing program 5 (id=425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a1c000000000a0104000000000000000002000000080001006e61740040000000030a0104000000000000000002000000080001006e6174000800030073797a00080007006e61740014000400080001000000000308000200ffffff9c84000000060a0104000000000000000002000000080001006e6174000800020073797a00600004005c0001000b00010074617267657400004c00020009000100444e4154000000000800020000000002340003"], 0x108}}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/time_for_children\x00') open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000006"], 0x4000) (async, rerun: 32) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f00000002c0)=0xe8) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0x4, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000140)=0xfffebffd) (async) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000440)={"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"}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) mlock(&(0x7f0000001000/0x2000)=nil, 0x2000) r8 = fcntl$getown(r0, 0x9) lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000f80), 0xe801, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000fc0)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000001000)=0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000300)={0x21c, 0x28, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@generic="b36335d309f47bc1c429d35e0a8568c12f0356ba5d48fe37c59fe41e94beb49ab04a489b03964c8a7da2feb53ca6c48799693771cb67a7", @nested={0x1d2, 0x25, 0x0, 0x1, [@generic="701ee9453892458fc9887771a28783d0beb641640af60e1d46ea2d327fb6ebedd6c89a1395bb836cbf0b307c0c755c4c8302eeac48433a451d46d592e5548a60cab378ccb38d90e3fbc8ab476199d80dafadb9d4f18be3e0d3267157171cb59e2e51be096a1cf1be7db319c3356e4a154a6d0ec2fc79c5f19c29570dc1df259902b40f03b557c0957866eca88be1a4bb25e3b3c2a5c13c3a2f3a3ba8bcdb942d17fba2a3bb216d0048b63084fcda4842c3ed660e86cdab", @nested={0x4, 0xf3}, @nested={0x4, 0x74}, @typed={0x8, 0x14d, 0x0, 0x0, @uid=r2}, @nested={0x4, 0xfc}, @typed={0x19, 0x83, 0x0, 0x0, @str='ns/time_for_children\x00'}, @typed={0xa, 0x97, 0x0, 0x0, @str='-u$\':\x00'}, @generic="534314d63695be21612f94b3a4b835c20d18f9d119493a8bf5da6c4f0e3425bfef83f2b4d63c92cdbb34b3e079b10a0cadda5efb7d1c563fc39e838cbfffe07b0f7b9f5f7545ed9792d44443b6256a1d6cf0aeecf6b8585d5990d9b28dcbd00e008eb539a35833b500ef233c752d6b2c8e2e8899cdfc0ab961d96628294c88ce0b68b8148a98dfc4ab0b4456559b7d3a2b95c5fabc7383f613f6ebdf8bf06ab8f676f6d20cce4194ba8eb41c1dfbfc57d272851d46108ae346d5ed5b35558d36cd2f021c2e49e14a1ee30577883c4a495861ee", @generic, @typed={0x8, 0x167, 0x0, 0x0, @fd=r7}]}]}, 0x21c}, {&(0x7f0000000680)={0x424, 0x1e, 0x800, 0x70bd25, 0x25dfdbff, "", [@typed={0x8, 0x4, 0x0, 0x0, @pid=r8}, @nested={0xbf, 0x5, 0x0, 0x1, [@nested={0x4, 0x5b}, @nested={0x4, 0x2b3f}, @generic="c91dbc84a63a2b635d4dc86bf650de8cfd883de5561059a6e6f2137f7b6324b193beca109c53adc8d69faa58abc6dbe28bd0dca1b13b948769759ed4b68f563787bb0354ac2a990ba658e3ed820843883a55eff26140a0fbb815b556284623e06c8ca2f37af8d87920becb7b89d70c7c4b846020eae342669e403e06926d9ddea6924a108afa3b9f78", @generic="7aa8f2012ab024ddff07ecabc1037d81b8ca6f8e9ca7b7391a5425b2dae34daf13a3cd3a3133", @nested={0x4, 0x167}]}, @typed={0x4, 0x8c}, @nested={0xe5, 0xd4, 0x0, 0x1, [@nested={0x4, 0x11}, @nested={0x4, 0x143}, @generic="5b4fc421b3861f8d84d73563612179115bb5913296748adb1bce72af022e6e09f6d600e8a9e51ccf84e41a630e0ac395aa2439ff83ec98018805bed1196d28af6d775e3d0f56f21ae1855f902a17ced82266b3307b9948fd5eda45710fafbda9cea690ec6d3b68c1b46c6a1b72d2241354426278bb6282aef206110b81b07f7a9bfa2ea01634d72e40a9475c00d8bbe64a40be89ec76e0705b01a2a2aef22c0da9404b94f1a770af4212e629ea9d4fa0d8e55e80b99b07792a792148e0b8874d220174d5dec94da51eed688c1787dd85081d7a78e4036d6865"]}, @nested={0xed, 0x50, 0x0, 0x1, [@nested={0x4, 0x13d}, @generic="f406e387603bf979433a594f18f53b5c3913c4a700fea11a12712a27c4ab1d2958725b3e7f0c9a53372d50fa1e79bec24d8b1848ac947126b81fed262b9261186d71a65481e768edbe13d335823c3dacb9b3a4617439dab028801b1f710c544987dcb9df85ea41ba5da1d3bf448fe234a7b657b73372e97ed3cd60a89e3887c78a2b3627999ec50e7cd8616b515f229c9227b988150869a005858c6ea6621339660acaf3c4fdadcdeb01f222dcba47b626e16fc481fd49e6fad559320429b4c8ac95f8be8bb3170725ff69312e258af6c7d7c0c15a96c08fe0d0498e0498f4dac5f4efcdb7"]}, @generic="632304280a693d645c266a0ca9a47ddd660ba3b7d35dc8b1906b27eb16427707a9892145b009d105ea740bfdfcf6c5f323bfa691e314732d18ccb3d88568c184cef4fedc508e089463798647f4147d0ea3d5a683b1a553d2ff65d312105474e3fadcab92e316f44ff0041464ef6104720c49aaec7e4cc6073973a4c06b80220b1b324b67a40ea88f40fe126e18f0c002f53956ea97c5d94dcc410e8db8f182d08e17a82f5ec873d41c436823a929e0e66b2fe60946d691aaa62116906e5fd79ffa9655d08a97a31921e6dfde332d7b2b0af1b4dcae6a575d080c7e5c242c6be408f0aef85b58990333274c67837241723b", @generic="cc59409222430888c6a0eb51fa0d7f34ee09650b24a4e58316ab4669ca1f094e69c8f22adb3c97c50d4b472cd092184cf81ef1ba59011b69fdfd6c62a5f92afa2b0f8a8ba0f2ed36761e3ea5acab0dc99357e952f66672d2c6edf4d80cab7a07f9cb06ec97d1e2ebbf400debd3b417b83bd83b83597285ca649d", @generic="16dc91"]}, 0x424}, {&(0x7f0000000ac0)={0x1a8, 0x39, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x18, 0x8f, 0x0, 0x1, [@typed={0x14, 0x157, 0x0, 0x0, @ipv6=@loopback}]}, @typed={0xa0, 0x1e, 0x0, 0x0, @binary="cf6fc75504ac56e2bcfc1569a86c93c3fa7bf31fe0fbc6b9ee7bf61007eb9f576651829f0c279a3cd5013a6f99d3e98364c20f907af6fd2ff18c148341777683868fc09cd2ec5be45bd4adc39a78de0df412c8a72aaca98e4c2d59f85d21b89af8d459d02152b36e189e69458466c0754b38b6abd9867dbfe3a57930fa47e1f98d16b0450c18238efc669e90ca8320c202cf4be537b37c164768cdaa"}, @generic="b7093ad4d6bb2fdf58fb10d48570372f621301dd8b903c1d73f7766cea15048accef805d9c0ddca4ff95255c8d9a58efe4f0bb28fa846d1ede133194681a98be293abb119b28", @typed={0x19, 0x108, 0x0, 0x0, @str='ns/time_for_children\x00'}, @generic="2353e591c7f2a9bd8af5dd87cc73c489babbd885a7b45cd7911f5fcc6a699bb7e62e095f1394eadf8a01b467c4a16747dbfa96295b6e90ad00f69181b17a408bfcd8f673c5836baf5cb28e519f08aeeeb2c11b2b2c71d53ef65aac0404f59584c5423fdca9a4bfb59f9eb9e9bebb1a0865eb28f04d2dab503e12", @typed={0x4, 0x14}]}, 0x1a8}, {&(0x7f0000000d40)={0x1f4, 0x1c, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@generic="f18eeec0791c019962db297a8df1f4936a5befbdeb810298a978055f3e4d63610b9faac7ebd7d769ee060fc3640907bee3cd0ae95a99793f4af8bf1f879d25e490d7def29f19c213ca8921fa27c004eab58fac8dd7891d6d6e26b9d59c6b09b4439f428152ce870e269aa8802e82f90d4e4f0d97d862dfc5beee62383a47d10dcf8bcaf811c6723ab90be51aba7ceff809ed7d8474", @nested={0x8, 0x75, 0x0, 0x1, [@nested={0x4, 0x5e}]}, @nested={0x139, 0xdd, 0x0, 0x1, [@generic="ec0da5aebeb0b0b05bd75280dbabe8483c68b93092be99e5847409835cfb2fdced8512a1c0b101674a3c5be225b4422de3e579eddc39bbb927659c373f4cefe0557529c9532d1cc3ed59f76a7c323d6db153448ccb3d1c3a974ec54a5b91bffce21586c54e648caea22c03206bde2edec6d58986190ce4252887ce7c5099e84df1bdf220b704efe62e7857ff18cf157be0e18a6c71cac88a5a09e78190bd10280989af07", @typed={0x8, 0x69, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x115}, @typed={0x8, 0x9a, 0x0, 0x0, @uid=r9}, @typed={0x8, 0xe4, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xdd}, @generic="a89344d9b249c158149c45846b067862c95e0840a6e064f001c49ec40d8a1a194b12be818a3bbe7d331bf3bbe5f9833a4ccc50031a86579d6c9a85083241637ca7d53934d8987ac59992422c7b2dd9c46715185e526b7860b6946c847657311259711e39aa59dbe22d66f2e345b4fbd755"]}, @typed={0x7, 0x48, 0x0, 0x0, @str='$#\x00'}]}, 0x1f4}], 0x4, &(0x7f0000001040)=[@rights={{0x34, 0x1, 0x1, [r10, r1, r11, r0, r1, r0, r1, r0, r12]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}], 0x58, 0x1}, 0x4040) 1.322915228s ago: executing program 5 (id=426): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001b80)={'team_slave_1\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e, 0x64ef}, {0xb, 0x1203}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000100)="e80000", 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='p:p1 ./file0:0', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r1, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x7, r4, 0x0, 0x0) wait4(r4, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x0) close(0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') 924.994234ms ago: executing program 5 (id=427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x84}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xec}, 0x1, 0x0, 0x0, 0x4000000}, 0x8090) r1 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x0) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c9004000"/32) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000008bd2871000000000000010902240001000010020903f705020200030920000003115789a4a6aa8103400000040416073f38bf9158f364d8ba7eae48a8b376a1ba88"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x20, 0x7, 0x18, {0x18, 0x27, "806b562fd275239f7e5a300ac1ffa3a5ba89db83b04e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000b00)) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c90041000100"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c90042000200"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c90043000300"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c90044000400"/32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r8) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB="bd142e7d01800000b25db50627", @ANYRES16=r9, @ANYBLOB="010027bd7000fcd3df2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x10008001}, 0x400a0) close_range(r6, r0, 0x0) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="c90061002000"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="2700000000000000000000001000"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="cb000000000000000100"/32) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="2300000000000000000000000000000000000000000000000000000001000000") syz_usb_control_io$hid(r1, &(0x7f0000000480)={0x24, &(0x7f0000000180)={0x40, 0x2, 0x3e, {0x3e, 0x31, "8125c524380c3191d1881aed66a5c7cafddb0d238badb69a405b74a2ad5b106f1337b22ed95d243393a22beb4340f65d8b8874a6fc2606feefb58af7"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}, &(0x7f0000000280)=ANY=[@ANYBLOB="00221e000000ab81263da0c331ce85f621d5a28b00475000b3e4279203102583a8238228"], &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff, 0x5, 0x1, {0x22, 0xbc2}}}}, &(0x7f0000000640)={0x2c, &(0x7f00000004c0)={0x40, 0x10, 0x3f, "306cd942397f10e22f74bd6afc6a9010ff62e644c6c2d5c8ca6b977e47ff2d6e34eaf081ff90fee8cec6bd39c00d6e319e1a663ce68e1789435fbbb3014410"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000005c0)={0x20, 0x1, 0x16, "9a4e6ec57303270726b6cfacccc47cd028471852b64e"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x2}}) syz_usb_ep_write(r1, 0x82, 0x20, &(0x7f0000000200)="1200"/32) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_ep_write(r2, 0x82, 0x20, &(0x7f0000000200)="1200"/32) 651.705719ms ago: executing program 1 (id=428): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x19f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f000000aa40), r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f000000ab40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, r5, 0x2, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x404c044}, 0x0) sendmsg$IEEE802154_START_REQ(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x600, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x9}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4040061) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, 0x0, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000380)=0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x19f) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) write(r0, &(0x7f0000000000)='3', 0x4e) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r3) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f000000aa40), r2) (async) sendmsg$IEEE802154_START_REQ(r2, &(0x7f000000ab40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, r5, 0x2, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x404c044}, 0x0) (async) sendmsg$IEEE802154_START_REQ(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x600, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x9}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4040061) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, 0x0, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000380)=0x3) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) (async) 583.451401ms ago: executing program 1 (id=429): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x31}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x621000, 0x800, 0x9, 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) 577.52465ms ago: executing program 0 (id=430): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x11, 0x8848, r1, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 456.090217ms ago: executing program 0 (id=431): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000003c0)=@qipcrtr={0x2a, 0x2, 0x4000}, 0x80, &(0x7f0000000200)=[{&(0x7f0000001500)="000502000b00000000002d39", 0xc}], 0x1}, 0x4000888) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {0x0, 0x3, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x23b, 0x6, {"05b8e3d46359cabd7c6744e571777c26"}, 0x2, 0x5, 0x7fffffff}}}, 0xa0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f00000005c0)=""/46, 0x2e}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f00000018c0)=""/4091, 0xffb}], 0x5}, 0x2}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x7}], 0x5, 0x2100, 0x0) 438.459193ms ago: executing program 0 (id=432): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000540)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) symlinkat(&(0x7f0000002040)='./file1\x00', r1, &(0x7f0000000640)='./dev/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x21884}, 0x4050) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./dev/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x3, 0x8, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) pselect6(0x40, &(0x7f0000000280)={0x1, 0xe, 0x194d, 0x78, 0x19, 0x800, 0x8, 0x1}, &(0x7f0000000400)={0x3fe00000000000, 0x4, 0x7, 0x3f, 0x6, 0x8, 0x68b9, 0x28001}, &(0x7f0000000440)={0xffff, 0x4, 0x2, 0x5, 0x1, 0x401, 0x8, 0xcc5}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x5df]}, 0x8}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x7fffffffffffffff}, {0x47e, 0x8000}, 0x3, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0}) socket$alg(0x26, 0x5, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x44, 0x8, 0x42}) openat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x8000, 0x21) 254.168041ms ago: executing program 0 (id=433): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100003600010000070000ffdbdf25020100800c0000000000000000000000140001"], 0x114}], 0x1}, 0x20000040) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x2, 0x2, 0x7f}}, 0x28) 160.539276ms ago: executing program 3 (id=434): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200, 0x2) mkdir(&(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) setns(0xc9, 0x0) r1 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat(0xffffff9c, &(0x7f0000000600)='./mnt/events/netlink/netlink_extack/trigger\x00', 0x1, 0x0) write(r2, 0x0, 0xfffffd47) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@fd={0xd129, 0x2, 0x4, 0xe000, 0x6ebd, {}, {0x2, 0x8, 0x36, 0xc, 0x6, 0xd1, "9b43e82a"}, 0x408, 0x4, {}, 0x4}) 159.943037ms ago: executing program 0 (id=435): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)={0x38, 0x40, 0x107, 0x70ad2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x27, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000480)={0x6, 0x0, [{0xc0000001, 0x0, 0x1, 0xffffff89, 0x800, 0x9, 0x48d4}, {0xa, 0x4, 0x1, 0x7, 0x7, 0x80000007, 0x5}, {0x40000000, 0x8, 0x1, 0x3ff, 0x7ffffdff, 0x8005, 0x4}, {0x80000007, 0x2, 0x1, 0x8001, 0xdf2, 0x4, 0x9}, {0x9ba32b2b2f59e442, 0x2bb, 0x5, 0xe, 0x3, 0x7ff, 0x8}, {0x80000000, 0x100, 0x6, 0x6, 0x3, 0x2, 0x3}]}) 0s ago: executing program 0 (id=436): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001b80)={'team_slave_1\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e, 0x64ef}, {0xb, 0x1203}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000100)="e80000", 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='p:p1 ./file0:0', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r1, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x7, r4, 0x0, 0x0) wait4(r4, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x0) close(0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') kernel console output (not intermixed with test programs): x10 [ 153.023189][ T6427] ? __fget_files+0x2a/0x420 [ 153.023223][ T6427] ksys_write+0x150/0x270 [ 153.023253][ T6427] ? __pfx_ksys_write+0x10/0x10 [ 153.023299][ T6427] do_syscall_64+0x166/0x520 [ 153.023318][ T6427] ? trace_irq_disable+0x3b/0x140 [ 153.023346][ T6427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.023367][ T6427] ? clear_bhb_loop+0x70/0xc0 [ 153.023392][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.023413][ T6427] RIP: 0033:0x7fe6e7d9e159 [ 153.023432][ T6427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.023447][ T6427] RSP: 002b:00007fe6e8bc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 153.023468][ T6427] RAX: ffffffffffffffda RBX: 00007fe6e8025fa0 RCX: 00007fe6e7d9e159 [ 153.023483][ T6427] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000004 [ 153.023495][ T6427] RBP: 00007fe6e7e3506b R08: 0000000000000000 R09: 0000000000000000 [ 153.023508][ T6427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.023519][ T6427] R13: 00007fe6e8026038 R14: 00007fe6e8025fa0 R15: 00007ffcdae4be78 [ 153.023551][ T6427] [ 153.128194][ T25] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 153.251312][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.251339][ T25] usb 4-1: Product: syz [ 153.251353][ T25] usb 4-1: Manufacturer: syz [ 153.251367][ T25] usb 4-1: SerialNumber: syz [ 153.363003][ T25] usb 4-1: config 0 descriptor?? [ 153.374007][ T25] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 153.574733][ T25] gspca_stk1135: reg_w 0x2 err -71 [ 153.575803][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 153.575817][ T25] gspca_stk1135: Sensor write failed [ 153.575848][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 153.575857][ T25] gspca_stk1135: Sensor write failed [ 153.575888][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 153.575898][ T25] gspca_stk1135: Sensor read failed [ 153.575928][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 153.575937][ T25] gspca_stk1135: Sensor read failed [ 153.575944][ T25] gspca_stk1135: Detected sensor type unknown (0x0) [ 153.575983][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 153.575992][ T25] gspca_stk1135: Sensor read failed [ 153.576023][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 153.576032][ T25] gspca_stk1135: Sensor read failed [ 153.576063][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 153.576071][ T25] gspca_stk1135: Sensor write failed [ 153.576101][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 153.576110][ T25] gspca_stk1135: Sensor write failed [ 153.576178][ T25] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 153.584002][ T25] usb 4-1: USB disconnect, device number 14 [ 153.800057][ T5695] usb 2-1: USB disconnect, device number 11 [ 154.194937][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 154.344537][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 154.345355][ T25] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 154.346678][ T25] usb 3-1: config 251 has an invalid interface number: 202 but max is 0 [ 154.346705][ T25] usb 3-1: config 251 has no interface number 0 [ 154.346746][ T25] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.346769][ T25] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 154.346794][ T25] usb 3-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 154.346817][ T25] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 154.346844][ T25] usb 3-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 154.346870][ T25] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 194 [ 154.346895][ T25] usb 3-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.346923][ T25] usb 3-1: config 251 interface 202 has no altsetting 0 [ 154.348609][ T25] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 154.348632][ T25] usb 3-1: Product: syz [ 154.348653][ T25] usb 3-1: SerialNumber: syz [ 154.429585][ T6440] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 155.126286][ T5695] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 155.275404][ T5695] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 155.278986][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 155.279011][ T5695] usb 2-1: Product: syz [ 155.279026][ T5695] usb 2-1: SerialNumber: syz [ 155.283437][ T5695] usb 2-1: config 0 descriptor?? [ 155.496313][ T5695] hso 2-1:0.0: Failed to find BULK eps [ 155.693946][ T5695] usb 2-1: USB disconnect, device number 12 [ 155.874723][ T5715] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 156.036459][ T5715] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 156.038412][ T5715] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 156.038482][ T5715] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 156.042484][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.042510][ T5715] usb 1-1: Product: syz [ 156.042528][ T5715] usb 1-1: Manufacturer: syz [ 156.042544][ T5715] usb 1-1: SerialNumber: syz [ 156.102270][ T5715] usb 1-1: config 0 descriptor?? [ 156.109686][ T6457] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 156.109824][ T6457] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 156.315557][ T6457] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 156.315694][ T6457] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 156.566197][ T5715] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 156.609501][ T5715] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, ae:c0:5b:ae:b4:63 [ 156.614701][ T1218] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 156.637302][ T5715] usb 1-1: USB disconnect, device number 13 [ 156.640656][ T5715] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 156.786094][ T1218] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 156.787419][ T1218] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 156.787444][ T1218] usb 2-1: config 0 has no interface number 0 [ 156.787486][ T1218] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 156.787542][ T1218] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 156.789687][ T1218] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 156.789711][ T1218] usb 2-1: Manufacturer: syz [ 156.789726][ T1218] usb 2-1: SerialNumber: syz [ 156.793488][ T1218] usb 2-1: config 0 descriptor?? [ 156.947927][ T25] cxacru 3-1:251.202: submit of write urb for cm 0x90 failed (-90) [ 156.948016][ T25] cxacru 3-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 156.948481][ T25] cxacru 3-1:251.202: probe with driver cxacru failed with error -22 [ 156.988189][ T25] usb 3-1: USB disconnect, device number 16 [ 157.018605][ T1218] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71 [ 157.018869][ T1218] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 157.022826][ T1218] usb 2-1: USB disconnect, device number 13 [ 157.123235][ T6464] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 157.404528][ T5616] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 157.481097][ T6476] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 157.481130][ T6476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.505337][ T6476] i2c i2c-0: dtv_property_process_set: SET cmd 0x6f632f2e undefined [ 157.564628][ T5616] usb 1-1: Using ep0 maxpacket: 32 [ 157.565401][ T5616] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 157.567270][ T5616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.575330][ T5616] usb 1-1: config 0 descriptor?? [ 157.627033][ T5616] as10x_usb: device has been detected [ 157.628050][ T5616] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 157.661487][ T5616] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 157.808002][ T5616] as10x_usb: error during firmware upload part1 [ 157.808562][ T5616] Registered device nBox DVB-T Dongle [ 157.850024][ T6467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.852113][ T6467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.897991][ T5616] usb 1-1: USB disconnect, device number 14 [ 157.929360][ T5616] Unregistered device nBox DVB-T Dongle [ 157.932685][ T5616] as10x_usb: device has been disconnected [ 157.954750][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 158.105064][ T25] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 158.108708][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.108732][ T25] usb 2-1: Product: syz [ 158.108744][ T25] usb 2-1: Manufacturer: syz [ 158.108757][ T25] usb 2-1: SerialNumber: syz [ 158.110994][ T25] usb 2-1: config 0 descriptor?? [ 158.114584][ T5695] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 158.265276][ T5695] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 158.266284][ T5695] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.266320][ T5695] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.266362][ T5695] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.266397][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.269332][ T5695] usb 3-1: config 0 descriptor?? [ 158.341898][ T6502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.342447][ T6502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.371060][ T6503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.545605][ T6495] jffs2: notice: (6495) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 158.762560][ T6519] FAULT_INJECTION: forcing a failure. [ 158.762560][ T6519] name failslab, interval 1, probability 0, space 0, times 0 [ 158.762593][ T6519] CPU: 0 UID: 0 PID: 6519 Comm: syz.0.171 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.762620][ T6519] Tainted: [L]=SOFTLOCKUP [ 158.762627][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.762638][ T6519] Call Trace: [ 158.762645][ T6519] [ 158.762657][ T6519] dump_stack_lvl+0xe8/0x150 [ 158.762689][ T6519] should_fail_ex+0x3eb/0x540 [ 158.762717][ T6519] should_failslab+0xa8/0x100 [ 158.762740][ T6519] ? prepare_creds+0x30/0x820 [ 158.762772][ T6519] kmem_cache_alloc_noprof+0x9c/0x600 [ 158.762801][ T6519] ? make_kuid+0x1e5/0x670 [ 158.762826][ T6519] ? prepare_creds+0x30/0x820 [ 158.762857][ T6519] ? __pfx_make_kuid+0x10/0x10 [ 158.762904][ T6519] prepare_creds+0x30/0x820 [ 158.762940][ T6519] do_faccessat+0x309/0xd70 [ 158.762972][ T6519] ? __pfx_do_faccessat+0x10/0x10 [ 158.763008][ T6519] __x64_sys_faccessat2+0x9a/0xb0 [ 158.763044][ T6519] do_syscall_64+0x166/0x520 [ 158.763064][ T6519] ? trace_irq_disable+0x3b/0x140 [ 158.763094][ T6519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.763116][ T6519] ? clear_bhb_loop+0x70/0xc0 [ 158.763141][ T6519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.763162][ T6519] RIP: 0033:0x7fe6e7d9e159 [ 158.763182][ T6519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.763200][ T6519] RSP: 002b:00007fe6e8bc9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7 [ 158.763224][ T6519] RAX: ffffffffffffffda RBX: 00007fe6e8025fa0 RCX: 00007fe6e7d9e159 [ 158.763239][ T6519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 158.763253][ T6519] RBP: 00007fe6e7e3506b R08: 0000000000000000 R09: 0000000000000000 [ 158.763266][ T6519] R10: 0000000000001100 R11: 0000000000000246 R12: 0000000000000000 [ 158.763279][ T6519] R13: 00007fe6e8026038 R14: 00007fe6e8025fa0 R15: 00007ffcdae4be78 [ 158.763311][ T6519] [ 158.822336][ T5695] usbhid 3-1:0.0: can't add hid device: -71 [ 158.822431][ T5695] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 158.977887][ T5695] usb 3-1: USB disconnect, device number 17 [ 159.149098][ T6524] loop5: detected capacity change from 0 to 7 [ 159.153209][ T6524] Dev loop5: unable to read RDB block 7 [ 159.153248][ T6524] loop5: unable to read partition table [ 159.153439][ T6524] loop5: partition table beyond EOD, truncated [ 159.153500][ T6524] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 159.227098][ T4982] Dev loop5: unable to read RDB block 7 [ 159.227142][ T4982] loop5: unable to read partition table [ 159.227393][ T4982] loop5: partition table beyond EOD, truncated [ 159.371306][ T25] usb 2-1: Firmware version (0.0) predates our first public release. [ 159.371333][ T25] usb 2-1: Please update to version 0.2 or newer [ 159.608951][ T6541] netlink: 'syz.0.175': attribute type 2 has an invalid length. [ 160.034571][ T25] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 160.174549][ T25] usb 1-1: device descriptor read/64, error -71 [ 160.345935][ T5616] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 160.425221][ T25] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 160.505236][ T5616] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 160.506514][ T5616] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 160.506560][ T5616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.509515][ T6576] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 160.546668][ T5616] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 160.564904][ T25] usb 1-1: device descriptor read/64, error -71 [ 160.640005][ T6589] netlink: 148 bytes leftover after parsing attributes in process `syz.3.182'. [ 160.654367][ T6589] netlink: 56 bytes leftover after parsing attributes in process `syz.3.182'. [ 160.654389][ T6589] netlink: 'syz.3.182': attribute type 1 has an invalid length. [ 160.685094][ T25] usb usb1-port1: attempt power cycle [ 160.901970][ T5715] usb 2-1: USB disconnect, device number 14 [ 161.035742][ T25] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 161.067304][ T25] usb 1-1: device descriptor read/8, error -71 [ 161.242033][ T6604] 9pnet_fd: Insufficient options for proto=fd [ 161.246615][ T6604] fuse: Bad value for 'fd' [ 161.324601][ T25] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 161.346762][ T25] usb 1-1: device descriptor read/8, error -71 [ 161.409841][ T6608] netlink: 'syz.1.187': attribute type 1 has an invalid length. [ 161.409866][ T6608] netlink: 'syz.1.187': attribute type 4 has an invalid length. [ 161.409880][ T6608] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.187'. [ 161.455081][ T25] usb usb1-port1: unable to enumerate USB device [ 161.610441][ T5616] stv0680 3-1:4.0: Could not get descriptor 0200 [ 161.810326][ T5616] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 161.810350][ T5616] stv0680 3-1:4.0: last error: 9, command = 0xe [ 162.188583][ T6632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.189054][ T6632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.218943][ T6627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.192'. [ 162.218962][ T6627] netlink: 40 bytes leftover after parsing attributes in process `syz.1.192'. [ 162.414541][ T5695] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 162.424899][ T5616] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 162.544530][ T5695] usb 2-1: device descriptor read/64, error -71 [ 162.554524][ T5616] usb 4-1: device descriptor read/64, error -71 [ 162.785117][ T5695] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 162.803304][ T5616] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 162.832904][ T6635] overlayfs: conflicting lowerdir path [ 162.914552][ T5695] usb 2-1: device descriptor read/64, error -71 [ 162.954632][ T5616] usb 4-1: device descriptor read/64, error -71 [ 163.025491][ T5695] usb usb2-port1: attempt power cycle [ 163.064873][ T5616] usb usb4-port1: attempt power cycle [ 163.117796][ T5726] usb 3-1: USB disconnect, device number 18 [ 163.312920][ T6651] netlink: 'syz.0.200': attribute type 1 has an invalid length. [ 163.365800][ T5695] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 163.387004][ T5695] usb 2-1: device descriptor read/8, error -71 [ 163.404565][ T5616] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 163.425538][ T5616] usb 4-1: device descriptor read/8, error -71 [ 163.514518][ T5726] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 163.604821][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 163.624549][ T5695] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 163.645288][ T5695] usb 2-1: device descriptor read/8, error -71 [ 163.664518][ T5616] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 163.665208][ T5726] usb 3-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 163.665783][ T5726] usb 3-1: config 0 has no interfaces? [ 163.665813][ T5726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.669543][ T5726] usb 3-1: config 0 descriptor?? [ 163.707290][ T5616] usb 4-1: device descriptor read/8, error -71 [ 163.754517][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 163.756527][ T5695] usb usb2-port1: unable to enumerate USB device [ 163.756741][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 163.757824][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 163.757859][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.760010][ T9] usb 1-1: config 0 descriptor?? [ 163.814931][ T5616] usb usb4-port1: unable to enumerate USB device [ 163.871901][ T6645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.872351][ T6645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.873283][ T6645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.873707][ T6645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.878446][ T6645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.880236][ T6645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.882956][ T6645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.883603][ T6645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.888336][ T6645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.892728][ T6645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.961360][ T5616] usb 3-1: USB disconnect, device number 19 [ 163.973362][ T6654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.983080][ T6654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.370584][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 164.370684][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 164.373299][ T9] usb 1-1: USB disconnect, device number 19 [ 164.834569][ T5695] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 164.986008][ T5695] usb 3-1: Using ep0 maxpacket: 8 [ 164.990307][ T5695] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 164.991478][ T5695] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 164.991516][ T5695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.991540][ T5695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.991559][ T5695] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 164.991598][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.005877][ T5695] usb 3-1: config 0 descriptor?? [ 165.242122][ T6660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.250712][ T6660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.379058][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.204'. [ 165.491691][ T6681] netlink: 'syz.0.208': attribute type 21 has an invalid length. [ 165.491827][ T6681] netlink: 156 bytes leftover after parsing attributes in process `syz.0.208'. [ 165.686498][ T5695] usbhid 3-1:0.0: can't add hid device: -71 [ 165.686616][ T5695] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 165.691299][ T5695] usb 3-1: USB disconnect, device number 20 [ 165.714821][ T25] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 165.844658][ T25] usb 1-1: device descriptor read/64, error -71 [ 165.893503][ T6696] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852126720 (5704253440 ns) > initial count (262184 ns). Using initial count to start timer. [ 165.919969][ T6696] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=2852126720 (5704253440 ns) > initial count (262184 ns). Using initial count to start timer. [ 166.084551][ T25] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 166.177631][ T6699] overlayfs: overlapping lowerdir path [ 166.216616][ T25] usb 1-1: device descriptor read/64, error -71 [ 166.252550][ T6702] netlink: 124 bytes leftover after parsing attributes in process `syz.1.212'. [ 166.325500][ T25] usb usb1-port1: attempt power cycle [ 166.624533][ T5695] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 166.664535][ T25] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 166.684992][ T25] usb 1-1: device descriptor read/8, error -71 [ 166.795771][ T5695] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 166.797034][ T5695] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.797059][ T5695] usb 2-1: config 0 has no interface number 0 [ 166.797097][ T5695] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 166.797122][ T5695] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.797146][ T5695] usb 2-1: config 0 interface 1 has no altsetting 0 [ 166.797171][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.801934][ T5695] usb 2-1: config 0 descriptor?? [ 166.924579][ T25] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 166.955991][ T25] usb 1-1: device descriptor read/8, error -71 [ 167.066894][ T25] usb usb1-port1: unable to enumerate USB device [ 167.448118][ T5695] input: HID 2179:0053 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:2179:0053.0005/input/input11 [ 167.566777][ T5695] uclogic 0003:2179:0053.0005: input,hidraw0: USB HID v0.00 Device [HID 2179:0053] on usb-dummy_hcd.1-1/input1 [ 167.854548][ T25] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 168.015158][ T25] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 168.018441][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.018464][ T25] usb 4-1: Product: syz [ 168.018478][ T25] usb 4-1: Manufacturer: syz [ 168.018491][ T25] usb 4-1: SerialNumber: syz [ 168.463599][ T25] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 168.463659][ T25] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 168.680932][ T25] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 168.680995][ T25] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 168.682135][ T25] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 168.718788][ T25] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 168.884601][ T5708] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 169.034511][ T5708] usb 1-1: Using ep0 maxpacket: 16 [ 169.035064][ T5708] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 169.036182][ T5708] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.036210][ T5708] usb 1-1: config 0 interface 0 has no altsetting 0 [ 169.036242][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.039858][ T5708] usb 1-1: config 0 descriptor?? [ 169.374610][ T25] usb 2-1: USB disconnect, device number 19 [ 169.479558][ T5708] mcp2221 0003:04D8:00DD.0006: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 169.923132][ T6718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.932441][ T6718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.257675][ T6718] tmpfs: Bad value for 'mpol' [ 170.317263][ T6745] netlink: 'syz.0.219': attribute type 5 has an invalid length. [ 170.427104][ T1253] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.440009][ T38] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.440050][ T38] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.440082][ T38] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.636253][ T5708] usb 1-1: USB disconnect, device number 24 [ 170.750647][ T5695] usb 4-1: USB disconnect, device number 19 [ 171.050102][ T6759] overlay: ./file0 is not a directory [ 171.120156][ T6759] event trace: Could not enable event p [ 171.497329][ T6763] PKCS8: Unsupported PKCS#8 version [ 171.512833][ T6763] FAULT_INJECTION: forcing a failure. [ 171.512833][ T6763] name failslab, interval 1, probability 0, space 0, times 0 [ 171.512862][ T6763] CPU: 0 UID: 0 PID: 6763 Comm: syz.0.227 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.512890][ T6763] Tainted: [L]=SOFTLOCKUP [ 171.512897][ T6763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.512909][ T6763] Call Trace: [ 171.512916][ T6763] [ 171.512924][ T6763] dump_stack_lvl+0xe8/0x150 [ 171.512956][ T6763] should_fail_ex+0x3eb/0x540 [ 171.512984][ T6763] should_failslab+0xa8/0x100 [ 171.513007][ T6763] __kmalloc_cache_noprof+0x9e/0x600 [ 171.513037][ T6763] ? __kmalloc_cache_noprof+0x148/0x600 [ 171.513070][ T6763] ? assoc_array_insert+0x417/0x2f60 [ 171.513093][ T6763] ? assoc_array_insert+0x417/0x2f60 [ 171.513123][ T6763] assoc_array_insert+0x417/0x2f60 [ 171.513161][ T6763] ? down_write+0x166/0x200 [ 171.513192][ T6763] __key_link_begin+0xd6/0x1f0 [ 171.513222][ T6763] key_link+0xdd/0x360 [ 171.513253][ T6763] call_sbin_request_key+0x413/0xbf0 [ 171.513275][ T6763] ? request_key_auth_free_preparse+0x9/0x10 [ 171.513305][ T6763] ? __pfx_call_sbin_request_key+0x10/0x10 [ 171.513326][ T6763] ? do_raw_spin_unlock+0xf5/0x200 [ 171.513382][ T6763] ? __pfx_request_key_auth_new+0x10/0x10 [ 171.513419][ T6763] request_key_and_link+0xefa/0x1580 [ 171.513440][ T6763] ? key_task_permission+0x3b8/0x500 [ 171.513465][ T6763] ? __pfx_request_key_and_link+0x10/0x10 [ 171.513495][ T6763] ? __pfx_asymmetric_key_cmp_partial+0x10/0x10 [ 171.513528][ T6763] ? __pfx_keyring_search_iterator+0x10/0x10 [ 171.513559][ T6763] ? down_read+0x2b9/0x320 [ 171.513579][ T6763] ? _copy_from_user+0x94/0xb0 [ 171.513609][ T6763] __se_sys_request_key+0x29a/0x350 [ 171.513642][ T6763] ? __pfx___se_sys_request_key+0x10/0x10 [ 171.513685][ T6763] do_syscall_64+0x166/0x520 [ 171.513703][ T6763] ? trace_irq_disable+0x3b/0x140 [ 171.513730][ T6763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.513761][ T6763] ? clear_bhb_loop+0x70/0xc0 [ 171.513786][ T6763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.513806][ T6763] RIP: 0033:0x7fe6e7d9e159 [ 171.513824][ T6763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.513840][ T6763] RSP: 002b:00007fe6e8bc9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 171.513862][ T6763] RAX: ffffffffffffffda RBX: 00007fe6e8025fa0 RCX: 00007fe6e7d9e159 [ 171.513877][ T6763] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 171.513892][ T6763] RBP: 00007fe6e7e3506b R08: 0000000000000000 R09: 0000000000000000 [ 171.513904][ T6763] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 171.513917][ T6763] R13: 00007fe6e8026038 R14: 00007fe6e8025fa0 R15: 00007ffcdae4be78 [ 171.513949][ T6763] [ 172.134515][ T5708] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 172.294487][ T5708] usb 1-1: Using ep0 maxpacket: 16 [ 172.295006][ T5708] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 172.299893][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.299917][ T5708] usb 1-1: Product: syz [ 172.299933][ T5708] usb 1-1: Manufacturer: syz [ 172.299947][ T5708] usb 1-1: SerialNumber: syz [ 172.321371][ T5708] usb 1-1: config 0 descriptor?? [ 172.355140][ T5708] gspca_main: spca508-2.14.0 probing 041e:4018 [ 172.585421][ T5708] gspca_spca508: reg_read err -71 [ 172.585780][ T5708] gspca_spca508: reg_read err -71 [ 172.587080][ T5708] gspca_spca508: reg_read err -71 [ 172.587443][ T5708] gspca_spca508: reg_read err -71 [ 172.587793][ T5708] gspca_spca508: reg_read err -71 [ 172.588128][ T5708] gspca_spca508: reg write: error -71 [ 172.588218][ T5708] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 172.636780][ T5708] usb 1-1: USB disconnect, device number 25 [ 173.056344][ T5695] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 173.205097][ T5695] usb 4-1: Using ep0 maxpacket: 32 [ 173.208128][ T5695] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 173.209734][ T5695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.209776][ T5695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.230942][ T5695] usb 4-1: config 0 descriptor?? [ 173.565369][ T25] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 173.734528][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 173.735198][ T25] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 173.736189][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.741571][ T25] usb 1-1: config 0 descriptor?? [ 173.776680][ T25] gspca_main: sunplus-2.14.0 probing 041e:400b [ 173.824558][ T987] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 173.828907][ T5695] input: HID 5543:0042 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:0042.0007/input/input12 [ 173.939736][ T5695] input: HID 5543:0042 Mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:0042.0007/input/input13 [ 173.976823][ T987] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 173.978525][ T987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.978566][ T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.021083][ T987] usb 2-1: config 0 descriptor?? [ 174.050816][ T5695] uclogic 0003:5543:0042.0007: input,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.3-1/input0 [ 174.243081][ T987] usbhid 2-1:0.0: can't add hid device: -71 [ 174.243217][ T987] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 174.266030][ T987] usb 2-1: USB disconnect, device number 20 [ 174.464789][ T25] gspca_sunplus: reg_w_riv err -110 [ 174.464872][ T25] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 174.755563][ T987] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 174.907450][ T987] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 174.908455][ T987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 174.908499][ T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.923588][ T987] usb 2-1: config 0 descriptor?? [ 175.379124][ T987] hid_parser_main: 226 callbacks suppressed [ 175.379147][ T987] logitech-djreceiver 0003:046D:C71F.0008: unknown main item tag 0x0 [ 175.379176][ T987] logitech-djreceiver 0003:046D:C71F.0008: unknown main item tag 0x0 [ 175.379202][ T987] logitech-djreceiver 0003:046D:C71F.0008: unknown main item tag 0x0 [ 175.379229][ T987] logitech-djreceiver 0003:046D:C71F.0008: unknown main item tag 0x0 [ 175.379254][ T987] logitech-djreceiver 0003:046D:C71F.0008: unknown main item tag 0x0 [ 175.379280][ T987] logitech-djreceiver 0003:046D:C71F.0008: unknown main item tag 0x0 [ 175.379349][ T987] logitech-djreceiver 0003:046D:C71F.0008: unknown main item tag 0x0 [ 175.379375][ T987] logitech-djreceiver 0003:046D:C71F.0008: unknown main item tag 0x0 [ 175.379400][ T987] logitech-djreceiver 0003:046D:C71F.0008: unknown main item tag 0x0 [ 175.379427][ T987] logitech-djreceiver 0003:046D:C71F.0008: unknown main item tag 0x0 [ 175.439273][ T987] logitech-djreceiver 0003:046D:C71F.0008: hidraw1: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.1-1/input0 [ 175.566129][ T6790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.587786][ T6790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.798647][ T5695] usb 2-1: USB disconnect, device number 21 [ 175.906719][ T987] usb 4-1: USB disconnect, device number 20 [ 176.133378][ T6800] netlink: 'syz.3.236': attribute type 15 has an invalid length. [ 176.133399][ T6800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.236'. [ 176.291757][ T5616] usb 1-1: USB disconnect, device number 26 [ 176.754516][ T5616] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 176.905122][ T5616] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.906058][ T5616] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.906107][ T5616] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.906142][ T5616] usb 1-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x7F, changing to 0xF [ 176.906164][ T5616] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 176.910878][ T5616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.910901][ T5616] usb 1-1: Product: syz [ 176.910915][ T5616] usb 1-1: Manufacturer: syz [ 176.910930][ T5616] usb 1-1: SerialNumber: syz [ 177.530081][ T6809] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 177.720719][ T6813] capability: warning: `syz.3.241' uses deprecated v2 capabilities in a way that may be insecure [ 177.764785][ T987] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 177.914835][ T987] usb 2-1: Using ep0 maxpacket: 8 [ 177.915663][ T987] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 177.918015][ T987] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 177.918038][ T987] usb 2-1: config 0 has no interface number 0 [ 177.919945][ T987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.919967][ T987] usb 2-1: Product: syz [ 177.919981][ T987] usb 2-1: Manufacturer: syz [ 177.919994][ T987] usb 2-1: SerialNumber: syz [ 177.922617][ T987] usb 2-1: config 0 descriptor?? [ 177.998611][ T5616] cdc_ncm 1-1:1.0: bind() failure [ 178.013407][ T5616] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 178.013452][ T5616] cdc_ncm 1-1:1.1: bind() failure [ 178.145362][ T987] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 178.145455][ T987] uvcvideo 2-1:0.31: Entity type for entity Output 32774 was not initialized! [ 178.260505][ T6821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.264209][ T6821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.510320][ T5616] usb 2-1: USB disconnect, device number 22 [ 178.699732][ T6829] kvm: emulating exchange as write [ 179.366952][ T6828] cgroup: fork rejected by pids controller in /syz3 [ 179.577470][ T987] usb 1-1: USB disconnect, device number 27 [ 179.985700][ T6877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.249'. [ 179.986179][ T6877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.249'. [ 180.051442][ T6874] netlink: 2 bytes leftover after parsing attributes in process `syz.3.248'. [ 180.764932][ T5708] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 180.915206][ T5708] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 180.918457][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.918481][ T5708] usb 4-1: Product: syz [ 180.918497][ T5708] usb 4-1: Manufacturer: syz [ 180.918511][ T5708] usb 4-1: SerialNumber: syz [ 180.956986][ T5708] usb 4-1: config 0 descriptor?? [ 180.957745][ T5616] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 181.114475][ T5616] usb 1-1: Using ep0 maxpacket: 16 [ 181.115345][ T5616] usb 1-1: New USB device found, idVendor=05ac, idProduct=021e, bcdDevice= 0.00 [ 181.116923][ T5616] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 181.116964][ T5616] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.117021][ T5616] usb 1-1: config 0 interface 0 has no altsetting 0 [ 181.117056][ T5616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.181167][ T5616] usb 1-1: config 0 descriptor?? [ 181.383494][ T5708] usb 4-1: Firmware version (0.0) predates our first public release. [ 181.383521][ T5708] usb 4-1: Please update to version 0.2 or newer [ 181.426614][ T5616] hid_parser_main: 448 callbacks suppressed [ 181.426653][ T5616] apple 0003:05AC:021E.0009: unknown main item tag 0x0 [ 181.426683][ T5616] apple 0003:05AC:021E.0009: unknown main item tag 0x0 [ 181.426709][ T5616] apple 0003:05AC:021E.0009: unknown main item tag 0x0 [ 181.426735][ T5616] apple 0003:05AC:021E.0009: unknown main item tag 0x0 [ 181.426763][ T5616] apple 0003:05AC:021E.0009: unknown main item tag 0x0 [ 181.513573][ T5616] apple 0003:05AC:021E.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:021e] on usb-dummy_hcd.0-1/input0 [ 181.532779][ T5708] usb 4-1: USB disconnect, device number 22 [ 182.101306][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.104295][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 182.121310][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 182.135696][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.136505][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.485666][ T5695] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 182.607262][ T987] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 182.639355][ T5695] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 182.641122][ T5695] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 182.641151][ T5695] usb 4-1: config 1 has an invalid descriptor of length 164, skipping remainder of the config [ 182.641172][ T5695] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 182.641275][ T5695] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 182.643351][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 182.643374][ T5695] usb 4-1: Product: syz [ 182.643388][ T5695] usb 4-1: Manufacturer: syz [ 182.726688][ T5695] cdc_wdm 4-1:1.0: skipping garbage [ 182.726705][ T5695] cdc_wdm 4-1:1.0: skipping garbage [ 182.726718][ T5695] cdc_wdm 4-1:1.0: skipping garbage [ 182.726766][ T5695] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 182.846291][ T324] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.962670][ T9] usb 4-1: USB disconnect, device number 23 [ 183.053960][ T324] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.239772][ T324] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.338761][ T324] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.774293][ T324] bridge_slave_1: left allmulticast mode [ 183.774335][ T324] bridge_slave_1: left promiscuous mode [ 183.778649][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.812134][ T324] bridge_slave_0: left allmulticast mode [ 183.812157][ T324] bridge_slave_0: left promiscuous mode [ 183.812647][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.837126][ T5616] usb 1-1: USB disconnect, device number 28 [ 184.172845][ T52] Bluetooth: hci4: command tx timeout [ 184.298998][ T324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.318737][ T324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.321328][ T324] bond0 (unregistering): Released all slaves [ 184.673692][ T6918] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.673788][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.673901][ T6918] bridge_slave_0: entered allmulticast mode [ 184.678473][ T6918] bridge_slave_0: entered promiscuous mode [ 184.687060][ T6918] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.687706][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.688024][ T6918] bridge_slave_1: entered allmulticast mode [ 184.699363][ T6918] bridge_slave_1: entered promiscuous mode [ 185.029948][ T6918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.047373][ T6918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.124076][ T6918] team0: Port device team_slave_0 added [ 185.181060][ T6918] team0: Port device team_slave_1 added [ 185.220418][ T324] hsr_slave_0: left promiscuous mode [ 185.221158][ T324] hsr_slave_1: left promiscuous mode [ 185.222070][ T324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.222102][ T324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.233299][ T324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.233344][ T324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.282393][ T324] veth1_macvtap: left promiscuous mode [ 185.282449][ T324] veth0_macvtap: left promiscuous mode [ 185.282550][ T324] veth1_vlan: left promiscuous mode [ 185.282641][ T324] veth0_vlan: left promiscuous mode [ 185.330667][ T6970] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 185.452239][ T5695] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 185.575496][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 185.595157][ T5695] usb 1-1: New USB device found, idVendor=172f, idProduct=0001, bcdDevice= 0.00 [ 185.596319][ T5695] usb 1-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 185.596343][ T5695] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 33 [ 185.596374][ T5695] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 185.596412][ T5695] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 185.596437][ T5695] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 185.596461][ T5695] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 185.596486][ T5695] usb 1-1: config 0 interface 0 has no altsetting 0 [ 185.596517][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.599955][ T5695] usb 1-1: config 0 descriptor?? [ 185.600673][ T6963] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 185.711649][ T5695] usbhid 1-1:0.0: can't add hid device: -22 [ 185.711740][ T5695] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 185.742863][ T324] team0 (unregistering): Port device team_slave_1 removed [ 185.760478][ T324] team0 (unregistering): Port device team_slave_0 removed [ 185.776278][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 185.778652][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 185.783229][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.783250][ T9] usb 4-1: Product: syz [ 185.783263][ T9] usb 4-1: Manufacturer: syz [ 185.783280][ T9] usb 4-1: SerialNumber: syz [ 185.799901][ T987] usb 2-1: device descriptor read/64, error -71 [ 185.818928][ T9] usb 4-1: config 0 descriptor?? [ 185.823864][ T6963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.832170][ T6963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.857080][ T9] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 185.861283][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 185.982508][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 186.034742][ T987] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 186.059405][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.059419][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.059440][ T6918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.062601][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.062614][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.062635][ T6918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.196365][ T6918] hsr_slave_0: entered promiscuous mode [ 186.197204][ T6918] hsr_slave_1: entered promiscuous mode [ 186.224773][ T987] usb 2-1: device descriptor read/64, error -71 [ 186.246850][ T52] Bluetooth: hci4: command tx timeout [ 186.335081][ T987] usb usb2-port1: attempt power cycle [ 186.399772][ T324] IPVS: stop unused estimator thread 0... [ 186.526313][ T6918] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 186.531654][ T6918] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 186.532637][ T6918] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 186.536462][ T6918] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 186.538409][ T6918] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 186.564185][ T6918] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 186.582006][ T6918] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 186.593636][ T6918] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 186.687161][ T987] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 186.706533][ T987] usb 2-1: device descriptor read/8, error -71 [ 186.752363][ T6918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.782099][ T6918] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.793519][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.794081][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.818904][ T4388] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.819012][ T4388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.860223][ T6970] 9p: Bad value for 'wfdno' [ 186.948402][ T987] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 186.965870][ T9] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 186.967160][ T987] usb 2-1: device descriptor read/8, error -71 [ 187.005729][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 187.075589][ T987] usb usb2-port1: unable to enumerate USB device [ 187.413001][ T6918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.583454][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 187.748291][ T6918] veth0_vlan: entered promiscuous mode [ 187.762762][ T6918] veth1_vlan: entered promiscuous mode [ 187.802796][ T6918] veth0_macvtap: entered promiscuous mode [ 187.817648][ T6918] veth1_macvtap: entered promiscuous mode [ 187.840741][ T6918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.861965][ T6918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.914962][ T4388] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.917406][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.917479][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.918033][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.049128][ T5715] usb 1-1: USB disconnect, device number 29 [ 188.162093][ T6297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.162114][ T6297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.282744][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 188.306514][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.306533][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.324556][ T52] Bluetooth: hci4: command tx timeout [ 188.363976][ T7045] FAULT_INJECTION: forcing a failure. [ 188.363976][ T7045] name failslab, interval 1, probability 0, space 0, times 0 [ 188.364023][ T7045] CPU: 0 UID: 16832 PID: 7045 Comm: syz.0.267 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.364051][ T7045] Tainted: [L]=SOFTLOCKUP [ 188.364058][ T7045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.364071][ T7045] Call Trace: [ 188.364079][ T7045] [ 188.364087][ T7045] dump_stack_lvl+0xe8/0x150 [ 188.364120][ T7045] should_fail_ex+0x3eb/0x540 [ 188.364148][ T7045] should_failslab+0xa8/0x100 [ 188.364172][ T7045] __kmalloc_cache_noprof+0x9e/0x600 [ 188.364204][ T7045] ? key_user_lookup+0x143/0x460 [ 188.364225][ T7045] ? key_user_lookup+0x143/0x460 [ 188.364252][ T7045] key_user_lookup+0x143/0x460 [ 188.364276][ T7045] key_alloc+0x129/0x1020 [ 188.364309][ T7045] keyring_alloc+0x45/0xb0 [ 188.364337][ T7045] install_process_keyring_to_cred+0x9e/0x130 [ 188.364364][ T7045] __se_sys_keyctl+0x9f9/0xbc0 [ 188.364385][ T7045] ? __pfx___se_sys_keyctl+0x10/0x10 [ 188.364410][ T7045] ? __pfx_do_futex+0x10/0x10 [ 188.364433][ T7045] ? build_open_flags+0x33a/0x720 [ 188.364462][ T7045] ? __se_sys_futex+0x3a8/0x450 [ 188.364491][ T7045] ? rcu_is_watching+0x16/0xb0 [ 188.364518][ T7045] ? __x64_sys_keyctl+0x20/0xc0 [ 188.364539][ T7045] do_syscall_64+0x166/0x520 [ 188.364558][ T7045] ? trace_irq_disable+0x3b/0x140 [ 188.364586][ T7045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.364608][ T7045] ? clear_bhb_loop+0x70/0xc0 [ 188.364632][ T7045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.364652][ T7045] RIP: 0033:0x7fe6e7d9e159 [ 188.364670][ T7045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.364687][ T7045] RSP: 002b:00007fe6e8bc9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 188.364708][ T7045] RAX: ffffffffffffffda RBX: 00007fe6e8025fa0 RCX: 00007fe6e7d9e159 [ 188.364722][ T7045] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000e [ 188.364735][ T7045] RBP: 00007fe6e7e3506b R08: 0000000000000000 R09: 0000000000000000 [ 188.364747][ T7045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.364759][ T7045] R13: 00007fe6e8026038 R14: 00007fe6e8025fa0 R15: 00007ffcdae4be78 [ 188.364789][ T7045] [ 189.184626][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 189.270479][ T1218] usb 4-1: USB disconnect, device number 24 [ 189.335412][ T9] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 189.337901][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.337942][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 189.337963][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 189.337984][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.338022][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.040691][ T9] gud 5-1:1.0: Failed to add properties (error=-71) [ 190.040723][ T9] gud 5-1:1.0: probe with driver gud failed with error -71 [ 190.071304][ T9] usb 5-1: USB disconnect, device number 2 [ 190.144586][ T7079] netlink: 'syz.1.275': attribute type 6 has an invalid length. [ 190.144600][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.275'. [ 190.194503][ T1218] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 190.259797][ T7083] netlink: 'syz.1.277': attribute type 27 has an invalid length. [ 190.345495][ T1218] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 190.346474][ T1218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.348756][ T1218] usb 4-1: config 0 descriptor?? [ 190.351619][ T1218] cp210x 4-1:0.0: cp210x converter detected [ 190.404540][ T52] Bluetooth: hci4: command tx timeout [ 190.494504][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 190.554899][ T1218] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 190.554929][ T1218] cp210x 4-1:0.0: querying part number failed [ 190.571299][ T1218] usb 4-1: cp210x converter now attached to ttyUSB0 [ 190.631728][ T31] audit: type=1326 audit(1789904828.145:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.4.278" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3b3b9e159 code=0x0 [ 190.664501][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 190.666574][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 190.666637][ T9] usb 2-1: New USB device found, idVendor=1f4d, idProduct=0220, bcdDevice=20.00 [ 190.666678][ T9] usb 2-1: too many configurations: 55, using maximum allowed: 8 [ 190.668107][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 190.668140][ T9] usb 2-1: can't read configurations, error -61 [ 190.794566][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 190.937564][ T7088] rust_binder: Write failure EFAULT in pid:239 [ 190.946112][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 190.961547][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 190.961591][ T9] usb 2-1: New USB device found, idVendor=1f4d, idProduct=0220, bcdDevice=20.00 [ 190.961626][ T9] usb 2-1: too many configurations: 55, using maximum allowed: 8 [ 190.963228][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 190.963262][ T9] usb 2-1: can't read configurations, error -61 [ 190.963547][ T9] usb usb2-port1: attempt power cycle [ 191.344525][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 191.367158][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 191.370887][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 191.370932][ T9] usb 2-1: New USB device found, idVendor=1f4d, idProduct=0220, bcdDevice=20.00 [ 191.370968][ T9] usb 2-1: too many configurations: 55, using maximum allowed: 8 [ 191.372402][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 191.372435][ T9] usb 2-1: can't read configurations, error -61 [ 191.504547][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 191.536980][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 191.540448][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 191.540490][ T9] usb 2-1: New USB device found, idVendor=1f4d, idProduct=0220, bcdDevice=20.00 [ 191.540523][ T9] usb 2-1: too many configurations: 55, using maximum allowed: 8 [ 191.546063][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 191.546095][ T9] usb 2-1: can't read configurations, error -61 [ 191.546343][ T9] usb usb2-port1: unable to enumerate USB device [ 191.705540][ T7105] sg_write: data in/out 443356/194 bytes for SCSI command 0x0-- guessing data in; [ 191.705540][ T7105] program syz.0.284 not setting count and/or reply_len properly [ 191.894498][ T5715] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 192.024658][ T5715] usb 1-1: device descriptor read/64, error -71 [ 192.264536][ T5715] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 192.405892][ T5715] usb 1-1: device descriptor read/64, error -71 [ 192.515630][ T5715] usb usb1-port1: attempt power cycle [ 192.684763][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 192.691730][ T5708] usb 4-1: USB disconnect, device number 25 [ 192.715653][ T5708] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 192.717809][ T5708] cp210x 4-1:0.0: device disconnected [ 192.835115][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 192.835845][ T9] usb 5-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 192.837618][ T9] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 192.837641][ T9] usb 5-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 192.837698][ T9] usb 5-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 192.839640][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.839663][ T9] usb 5-1: Product: syz [ 192.839677][ T9] usb 5-1: Manufacturer: syz [ 192.839695][ T9] usb 5-1: SerialNumber: syz [ 192.864756][ T5715] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 192.892500][ T5715] usb 1-1: device descriptor read/8, error -71 [ 192.936604][ T9] usb 5-1: Fast Track Pro config OK [ 193.124847][ T5715] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 193.146778][ T5715] usb 1-1: device descriptor read/8, error -71 [ 193.150606][ T9] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 193.150638][ T9] usb 5-1: 1:1 : format type 0 is detected, processed as PCM [ 193.150656][ T9] usb 5-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 193.178624][ T9] usb 5-1: 0:2 : does not exist [ 193.178721][ T9] usb 5-1: unit 5 not found! [ 193.178744][ T9] usb 5-1: unit 6 not found! [ 193.253398][ T9] usb 5-1: USB disconnect, device number 3 [ 193.265977][ T5715] usb usb1-port1: unable to enumerate USB device [ 193.355098][ T6372] udevd[6372]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:6.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.714564][ T5695] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 193.831450][ T7136] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 193.831465][ T7136] overlayfs: missing 'lowerdir' [ 193.875097][ T5695] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 193.876237][ T5695] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 193.876262][ T5695] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 193.878293][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.878319][ T5695] usb 2-1: Product: syz [ 193.878334][ T5695] usb 2-1: Manufacturer: syz [ 193.878349][ T5695] usb 2-1: SerialNumber: syz [ 193.928234][ T5695] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 193.948067][ T5695] ums-sddr09 2-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 193.948067][ T5695] Please send a copy of this message to and [ 194.005766][ T5708] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 194.086446][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 194.154604][ T5708] usb 5-1: Using ep0 maxpacket: 16 [ 194.156055][ T5708] usb 5-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=9a.63 [ 194.157254][ T5708] usb 5-1: config 251 has an invalid interface number: 16 but max is 0 [ 194.157281][ T5708] usb 5-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 194.157302][ T5708] usb 5-1: config 251 has no interface number 0 [ 194.157344][ T5708] usb 5-1: config 251 interface 16 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 194.157368][ T5708] usb 5-1: config 251 interface 16 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 194.157397][ T5708] usb 5-1: config 251 interface 16 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 194.157445][ T5708] usb 5-1: config 251 interface 16 has no altsetting 0 [ 194.159745][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.159770][ T5708] usb 5-1: Product: syz [ 194.159810][ T5708] usb 5-1: Manufacturer: syz [ 194.159826][ T5708] usb 5-1: SerialNumber: syz [ 194.244807][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 194.261609][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 194.261780][ T9] usb 4-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 194.268962][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 194.268996][ T9] usb 4-1: can't read configurations, error -71 [ 194.391220][ T5708] usb 5-1: USB disconnect, device number 4 [ 194.407278][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.407357][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.712905][ T5695] scsi host1: usb-storage 2-1:1.0 [ 194.723209][ T5695] usb 2-1: USB disconnect, device number 31 [ 194.764041][ T7141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.775087][ T7141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.114556][ T5708] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 195.173480][ T7155] FAULT_INJECTION: forcing a failure. [ 195.173480][ T7155] name failslab, interval 1, probability 0, space 0, times 0 [ 195.173600][ T7155] CPU: 0 UID: 0 PID: 7155 Comm: syz.4.298 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.173636][ T7155] Tainted: [L]=SOFTLOCKUP [ 195.173647][ T7155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.173665][ T7155] Call Trace: [ 195.173678][ T7155] [ 195.173689][ T7155] dump_stack_lvl+0xe8/0x150 [ 195.173732][ T7155] should_fail_ex+0x3eb/0x540 [ 195.173771][ T7155] should_failslab+0xa8/0x100 [ 195.173808][ T7155] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 195.173848][ T7155] ? __lock_acquire+0x747/0x2de0 [ 195.173890][ T7155] ? __d_alloc+0x37/0x6f0 [ 195.173925][ T7155] ? __d_alloc+0x37/0x6f0 [ 195.173970][ T7155] __d_alloc+0x37/0x6f0 [ 195.174016][ T7155] d_alloc_pseudo+0x21/0xc0 [ 195.174056][ T7155] alloc_path_pseudo+0x107/0x220 [ 195.174095][ T7155] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 195.174126][ T7155] ? do_raw_spin_lock+0x12b/0x2f0 [ 195.174171][ T7155] alloc_file_pseudo+0xa8/0x1e0 [ 195.174208][ T7155] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 195.174258][ T7155] ? alloc_fd+0x651/0x6c0 [ 195.174306][ T7155] anon_inode_getfd+0xc8/0x1f0 [ 195.174355][ T7155] __se_sys_fsopen+0x232/0x2c0 [ 195.174392][ T7155] do_syscall_64+0x166/0x520 [ 195.174423][ T7155] ? trace_irq_disable+0x3b/0x140 [ 195.174460][ T7155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.174493][ T7155] ? clear_bhb_loop+0x70/0xc0 [ 195.174530][ T7155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.174562][ T7155] RIP: 0033:0x7fe3b3b9e159 [ 195.174589][ T7155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.174616][ T7155] RSP: 002b:00007fe3b49a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 195.174649][ T7155] RAX: ffffffffffffffda RBX: 00007fe3b3e26090 RCX: 00007fe3b3b9e159 [ 195.174672][ T7155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 195.174693][ T7155] RBP: 00007fe3b3c3506b R08: 0000000000000000 R09: 0000000000000000 [ 195.174715][ T7155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.174733][ T7155] R13: 00007fe3b3e26128 R14: 00007fe3b3e26090 R15: 00007ffc3cc1a078 [ 195.174778][ T7155] [ 195.338910][ T5708] usb 1-1: Using ep0 maxpacket: 16 [ 195.384886][ T5708] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 195.427587][ T5708] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 195.427619][ T5708] usb 1-1: config 0 has no interface number 0 [ 195.427663][ T5708] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.427692][ T5708] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.427717][ T5708] usb 1-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.427746][ T5708] usb 1-1: config 0 interface 1 has no altsetting 0 [ 195.427793][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.495434][ T5708] usb 1-1: config 0 descriptor?? [ 195.511881][ T5708] usbhid 1-1:0.1: fixing wrong optional hid class descriptors count [ 195.912126][ T5708] elan 0003:04F3:074D.000A: failed to start in urb: -90 [ 196.123340][ T5708] elan 0003:04F3:074D.000A: Get report error for parm 6: -32 [ 196.136855][ T5708] elan 0003:04F3:074D.000A: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.0-1/input1 [ 196.136893][ T5708] elan 0003:04F3:074D.000A: Input device is not registered [ 196.140934][ T5708] elan 0003:04F3:074D.000A: probe with driver elan failed with error -119 [ 196.248047][ T7172] netlink: ct family unspecified [ 196.248080][ T7172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.725891][ T7177] netlink: 393 bytes leftover after parsing attributes in process `syz.3.304'. [ 198.344553][ T987] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 198.494515][ T987] usb 2-1: Using ep0 maxpacket: 16 [ 198.495265][ T987] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 198.499635][ T987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.499661][ T987] usb 2-1: Product: syz [ 198.499676][ T987] usb 2-1: Manufacturer: syz [ 198.499690][ T987] usb 2-1: SerialNumber: syz [ 198.502671][ T987] usb 2-1: config 0 descriptor?? [ 198.589698][ T5715] usb 1-1: USB disconnect, device number 34 [ 198.728061][ T31] audit: type=1800 audit(1789904836.245:3): pid=7200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.310" name="syzkaller0" dev="sda1" ino=2043 res=0 errno=0 [ 198.777841][ T987] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 198.784215][ T987] usb 2-1: USB disconnect, device number 32 [ 198.948874][ T7207] comedi: No check for data length of config insn id 5008 is implemented [ 198.948889][ T7207] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 198.948899][ T7207] comedi: Assuming n=15 is correct [ 199.047998][ T7165] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 199.198472][ T7215] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 199.198490][ T7215] rust_binder: Read failure Err(EFAULT) in pid:269 [ 199.198754][ T7215] rust_binder: 7214:7215 got transaction to invalid handle 3 [ 199.198774][ T7215] rust_binder: 7214:7215 transaction call to 0:0 failed ENOENT, code 0 size 112-24 [ 199.199123][ T987] rust_binder: 7214: undelivered TRANSACTION_ERROR: 29201 [ 199.823219][ T7239] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.320'. [ 199.836786][ T7234] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.320'. [ 199.840436][ T7235] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.320'. [ 200.476046][ T52] Bluetooth: unknown link type 128 [ 200.478056][ T52] Bluetooth: unknown link type 128 [ 200.478236][ T52] Bluetooth: unknown link type 128 [ 200.478769][ T52] Bluetooth: unknown link type 128 [ 200.478983][ T52] Bluetooth: unknown link type 128 [ 200.479138][ T52] Bluetooth: unknown link type 128 [ 200.479319][ T52] Bluetooth: unknown link type 128 [ 200.479576][ T52] Bluetooth: unknown link type 128 [ 200.479808][ T52] Bluetooth: unknown link type 128 [ 200.480368][ T52] Bluetooth: unknown link type 128 [ 200.480545][ T52] Bluetooth: unknown link type 128 [ 200.480746][ T52] Bluetooth: unknown link type 128 [ 200.483973][ T52] Bluetooth: unknown link type 128 [ 200.484083][ T52] Bluetooth: unknown link type 128 [ 200.484165][ T52] Bluetooth: unknown link type 128 [ 200.484270][ T52] Bluetooth: unknown link type 128 [ 200.484360][ T52] Bluetooth: unknown link type 128 [ 200.484690][ T52] Bluetooth: unknown link type 128 [ 200.484789][ T52] Bluetooth: unknown link type 128 [ 200.484876][ T52] Bluetooth: unknown link type 128 [ 200.484963][ T52] Bluetooth: unknown link type 128 [ 200.485049][ T52] Bluetooth: unknown link type 128 [ 200.485134][ T52] Bluetooth: unknown link type 128 [ 200.485221][ T52] Bluetooth: unknown link type 128 [ 200.485306][ T52] Bluetooth: unknown link type 128 [ 200.485394][ T52] Bluetooth: unknown link type 128 [ 200.486836][ T52] Bluetooth: unknown link type 128 [ 200.486934][ T52] Bluetooth: unknown link type 128 [ 200.487025][ T52] Bluetooth: unknown link type 128 [ 200.487123][ T52] Bluetooth: unknown link type 128 [ 200.487215][ T52] Bluetooth: unknown link type 128 [ 200.487306][ T52] Bluetooth: unknown link type 128 [ 200.487409][ T52] Bluetooth: unknown link type 128 [ 200.487501][ T52] Bluetooth: unknown link type 128 [ 200.487591][ T52] Bluetooth: unknown link type 128 [ 200.487678][ T52] Bluetooth: unknown link type 128 [ 200.487767][ T52] Bluetooth: unknown link type 128 [ 200.487872][ T52] Bluetooth: unknown link type 128 [ 200.487960][ T52] Bluetooth: unknown link type 128 [ 200.488047][ T52] Bluetooth: unknown link type 128 [ 200.492611][ T7263] lo speed is unknown, defaulting to 1000 [ 200.492799][ T7263] lo speed is unknown, defaulting to 1000 [ 200.495164][ T52] Bluetooth: unknown link type 128 [ 200.495242][ T52] Bluetooth: unknown link type 128 [ 200.495315][ T52] Bluetooth: unknown link type 128 [ 200.495397][ T52] Bluetooth: unknown link type 128 [ 200.495474][ T52] Bluetooth: unknown link type 128 [ 200.496316][ T52] Bluetooth: unknown link type 128 [ 200.496424][ T52] Bluetooth: unknown link type 128 [ 200.496501][ T52] Bluetooth: unknown link type 128 [ 200.496575][ T52] Bluetooth: unknown link type 128 [ 200.496675][ T52] Bluetooth: unknown link type 128 [ 200.496766][ T52] Bluetooth: unknown link type 128 [ 200.496855][ T52] Bluetooth: unknown link type 128 [ 200.496945][ T52] Bluetooth: unknown link type 128 [ 200.497029][ T52] Bluetooth: unknown link type 128 [ 200.497129][ T52] Bluetooth: unknown link type 128 [ 200.497238][ T52] Bluetooth: unknown link type 128 [ 200.497328][ T52] Bluetooth: unknown link type 128 [ 200.497484][ T52] Bluetooth: unknown link type 128 [ 200.497576][ T52] Bluetooth: unknown link type 128 [ 200.497666][ T52] Bluetooth: unknown link type 128 [ 200.497805][ T52] Bluetooth: unknown link type 128 [ 200.497895][ T52] Bluetooth: unknown link type 128 [ 200.497977][ T52] Bluetooth: unknown link type 128 [ 200.498059][ T52] Bluetooth: unknown link type 128 [ 200.498127][ T52] Bluetooth: unknown link type 128 [ 200.551672][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 200.738223][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 200.739235][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 200.751919][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 200.751990][ T9] usb 5-1: config 0 has no interface number 0 [ 200.752090][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.752150][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.752241][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.806239][ T9] usb 5-1: config 0 descriptor?? [ 200.924223][ T7263] lo speed is unknown, defaulting to 1000 [ 200.933148][ T7263] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 200.933185][ T7263] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 200.933225][ T7263] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 200.990537][ T7263] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 201.152403][ T7263] lo speed is unknown, defaulting to 1000 [ 201.249209][ T7263] lo speed is unknown, defaulting to 1000 [ 201.256983][ T7263] lo speed is unknown, defaulting to 1000 [ 201.367641][ T7263] lo speed is unknown, defaulting to 1000 [ 201.467181][ T7261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.467838][ T7261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.497243][ T9] uclogic 0003:28BD:0071.000B: pen parameters not found [ 201.497271][ T9] uclogic 0003:28BD:0071.000B: interface is invalid, ignoring [ 201.559744][ T9] usb 5-1: USB disconnect, device number 5 [ 201.840224][ T7276] svc: failed to register nfsdv3 RPC service (errno 111). [ 201.842056][ T7276] svc: failed to register nfsaclv3 RPC service (errno 111). [ 202.035968][ T5726] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 202.198607][ T5726] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 202.210075][ T5726] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.210163][ T5726] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 202.218912][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 202.218972][ T5726] usb 4-1: Product: syz [ 202.219042][ T5726] usb 4-1: Manufacturer: syz [ 202.268921][ T5726] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 202.273869][ T7296] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 202.331152][ T7299] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 202.338183][ T7291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.338943][ T7291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.468532][ T7285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.469120][ T7285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.490920][ T52] Bluetooth: hci0: command tx timeout [ 202.574551][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 202.594957][ T987] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 202.722755][ T5726] mos7840 ttyUSB0: probe with driver mos7840 failed with error -32 [ 202.738069][ T7311] nfs4: Unknown parameter 'v'.;*{`?' [ 202.738072][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 202.738119][ T9] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 202.740586][ T9] usb 2-1: config 114 has an invalid interface number: 240 but max is 0 [ 202.740612][ T9] usb 2-1: config 114 has no interface number 0 [ 202.740652][ T9] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 202.740687][ T9] usb 2-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 202.740713][ T9] usb 2-1: config 114 interface 240 altsetting 232 endpoint 0x8A has invalid wMaxPacketSize 0 [ 202.740736][ T9] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 0 [ 202.740760][ T9] usb 2-1: config 114 interface 240 has no altsetting 0 [ 202.750797][ T987] usb 1-1: Using ep0 maxpacket: 8 [ 202.772469][ T987] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 202.802354][ T9] usb 2-1: string descriptor 0 read error: -22 [ 202.802498][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.882707][ T987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.882734][ T987] usb 1-1: Product: syz [ 202.882748][ T987] usb 1-1: Manufacturer: syz [ 202.882762][ T987] usb 1-1: SerialNumber: syz [ 202.917379][ T987] usb 1-1: config 0 descriptor?? [ 202.943515][ T7292] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 202.969968][ T9] ir_usb 2-1:114.240: IR Dongle converter detected [ 203.135531][ T5715] usb 1-1: USB disconnect, device number 35 [ 203.186898][ T7291] XFS (nbd1): SB validate failed with error -5. [ 203.249638][ T7291] XFS (nbd1): io_pages changed from 0 to 1024, not restoring. [ 203.249666][ T7291] XFS (nbd1): ra_pages changed from 0 to 64, not restoring. [ 203.296884][ T9] usb 2-1: IR Dongle converter now attached to ttyUSB1 [ 203.823796][ T7343] 9pnet_fd: p9_fd_create_tcp (7343): problem connecting socket to 127.0.0.1 [ 204.324817][ T5708] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 204.474581][ T5708] usb 5-1: Using ep0 maxpacket: 8 [ 204.475194][ T5708] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 204.476274][ T5708] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.476290][ T5708] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 204.476320][ T5708] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 204.476339][ T5708] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 204.476368][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.482377][ T5708] hub 5-1:1.0: bad descriptor, ignoring hub [ 204.482394][ T5708] hub 5-1:1.0: probe with driver hub failed with error -5 [ 204.482860][ T5708] cdc_wdm 5-1:1.0: skipping garbage [ 204.482871][ T5708] cdc_wdm 5-1:1.0: skipping garbage [ 204.535759][ T5708] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 204.535831][ T5708] cdc_wdm 5-1:1.0: Unknown control protocol [ 204.566036][ T52] Bluetooth: hci0: command tx timeout [ 204.683315][ T7358] devtmpfs: Unknown parameter '!' [ 204.750347][ T9] usb 4-1: USB disconnect, device number 28 [ 204.777893][ T9] mos7840 4-1:1.0: device disconnected [ 205.095050][ T987] usb 2-1: USB disconnect, device number 33 [ 205.102140][ T987] ir-usb ttyUSB1: IR Dongle converter now disconnected from ttyUSB1 [ 205.102812][ T987] ir_usb 2-1:114.240: device disconnected [ 205.184650][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 205.334566][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 205.336486][ T9] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 205.337525][ T9] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 205.337551][ T9] usb 4-1: config 0 has no interface number 0 [ 205.337591][ T9] usb 4-1: config 0 interface 68 altsetting 0 endpoint 0x81 has invalid maxpacket 58483, setting to 1024 [ 205.341096][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.341123][ T9] usb 4-1: Product: syz [ 205.341218][ T9] usb 4-1: Manufacturer: syz [ 205.341234][ T9] usb 4-1: SerialNumber: syz [ 205.415811][ T9] usb 4-1: config 0 descriptor?? [ 205.432527][ T9] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 205.459680][ T7373] kAFS: bad VL server IP address [ 205.623576][ T987] usb 4-1: USB disconnect, device number 29 [ 205.627192][ T6303] usb 4-1: Failed to submit usb control message: -71 [ 205.627282][ T6303] usb 4-1: unable to send the bmi data to the device: -71 [ 205.631056][ T6303] usb 4-1: unable to get target info from device [ 205.631126][ T6303] usb 4-1: could not get target info (-71) [ 205.631799][ T6303] usb 4-1: could not probe fw (-71) [ 206.228000][ T7389] netlink: 'syz.3.347': attribute type 2 has an invalid length. [ 206.228021][ T7389] netlink: 119 bytes leftover after parsing attributes in process `syz.3.347'. [ 206.316475][ T7391] fuse: Bad value for 'group_id' [ 206.316496][ T7391] fuse: Bad value for 'group_id' [ 206.340375][ T7391] Invalid argument reading file caps for ./file0 [ 206.367151][ T7393] overlayfs: failed lookup in lower (newroot/17, name='file1', err=-40): overlapping layers [ 206.367641][ T7394] overlayfs: failed lookup in lower (newroot/17, name='file1', err=-40): overlapping layers [ 206.369735][ T7394] overlay: filesystem on ./file0 not supported as upperdir [ 206.370478][ T7393] overlayfs: failed lookup in lower (newroot/17, name='file1', err=-40): overlapping layers [ 206.370790][ T7396] overlayfs: failed lookup in lower (newroot/17, name='file1', err=-40): overlapping layers [ 206.371624][ T7393] overlayfs: failed lookup in lower (newroot/17, name='bus', err=-40): overlapping layers [ 206.372086][ T7395] overlayfs: failed lookup in lower (newroot/17, name='bus', err=-40): overlapping layers [ 206.396494][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 206.496473][ T7399] FAULT_INJECTION: forcing a failure. [ 206.496473][ T7399] name failslab, interval 1, probability 0, space 0, times 0 [ 206.496510][ T7399] CPU: 0 UID: 0 PID: 7399 Comm: syz.3.350 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.496542][ T7399] Tainted: [L]=SOFTLOCKUP [ 206.496551][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.496566][ T7399] Call Trace: [ 206.496576][ T7399] [ 206.496585][ T7399] dump_stack_lvl+0xe8/0x150 [ 206.496623][ T7399] should_fail_ex+0x3eb/0x540 [ 206.496657][ T7399] should_failslab+0xa8/0x100 [ 206.496686][ T7399] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 206.496721][ T7399] ? __d_alloc+0x37/0x6f0 [ 206.496752][ T7399] ? __d_alloc+0x37/0x6f0 [ 206.496789][ T7399] __d_alloc+0x37/0x6f0 [ 206.496833][ T7399] d_alloc_pseudo+0x21/0xc0 [ 206.496866][ T7399] alloc_path_pseudo+0x107/0x220 [ 206.496897][ T7399] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 206.496924][ T7399] ? do_raw_spin_lock+0x12b/0x2f0 [ 206.496959][ T7399] alloc_file_pseudo+0xa8/0x1e0 [ 206.496989][ T7399] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 206.497016][ T7399] ? _raw_spin_unlock+0x28/0x50 [ 206.497047][ T7399] ? alloc_fd+0x651/0x6c0 [ 206.497079][ T7399] sock_alloc_file+0xb8/0x2e0 [ 206.497109][ T7399] ? __sys_socket+0x12b/0x1b0 [ 206.497144][ T7399] __sys_socket+0x13f/0x1b0 [ 206.497181][ T7399] __x64_sys_socket+0x7a/0x90 [ 206.497216][ T7399] do_syscall_64+0x166/0x520 [ 206.497237][ T7399] ? trace_irq_disable+0x3b/0x140 [ 206.497269][ T7399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.497294][ T7399] ? clear_bhb_loop+0x70/0xc0 [ 206.497321][ T7399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.497345][ T7399] RIP: 0033:0x7fd9f359e159 [ 206.497367][ T7399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.497387][ T7399] RSP: 002b:00007fd9f43ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 206.497413][ T7399] RAX: ffffffffffffffda RBX: 00007fd9f3825fa0 RCX: 00007fd9f359e159 [ 206.497431][ T7399] RDX: 0000000000000014 RSI: 0000000000000003 RDI: 0000000000000010 [ 206.497447][ T7399] RBP: 00007fd9f363506b R08: 0000000000000000 R09: 0000000000000000 [ 206.497462][ T7399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.497488][ T7399] R13: 00007fd9f3826038 R14: 00007fd9f3825fa0 R15: 00007fff0d9f41c8 [ 206.497522][ T7399] [ 206.501545][ T7399] FAULT_INJECTION: forcing a failure. [ 206.501545][ T7399] name failslab, interval 1, probability 0, space 0, times 0 [ 206.501573][ T7399] CPU: 0 UID: 0 PID: 7399 Comm: syz.3.350 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.501596][ T7399] Tainted: [L]=SOFTLOCKUP [ 206.501602][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.501614][ T7399] Call Trace: [ 206.501621][ T7399] [ 206.501628][ T7399] dump_stack_lvl+0xe8/0x150 [ 206.501657][ T7399] should_fail_ex+0x3eb/0x540 [ 206.501684][ T7399] should_failslab+0xa8/0x100 [ 206.501706][ T7399] ? sk_prot_alloc+0x57/0x210 [ 206.501744][ T7399] kmem_cache_alloc_noprof+0x9c/0x600 [ 206.501770][ T7399] ? make_kgid+0x1d1/0x6a0 [ 206.501791][ T7399] ? security_inode_alloc+0x39/0x310 [ 206.501814][ T7399] ? kmem_cache_alloc_noprof+0x151/0x600 [ 206.501847][ T7399] ? sk_prot_alloc+0x57/0x210 [ 206.501872][ T7399] sk_prot_alloc+0x57/0x210 [ 206.501890][ T7399] ? sk_alloc+0x27/0x390 [ 206.501909][ T7399] sk_alloc+0x3a/0x390 [ 206.501929][ T7399] rds_create+0x83/0x4a0 [ 206.501960][ T7399] __sock_create+0x4b5/0xac0 [ 206.501996][ T7399] __sys_socket+0xd6/0x1b0 [ 206.502023][ T7399] __x64_sys_socket+0x7a/0x90 [ 206.502051][ T7399] do_syscall_64+0x166/0x520 [ 206.502068][ T7399] ? trace_irq_disable+0x3b/0x140 [ 206.502096][ T7399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.502116][ T7399] ? clear_bhb_loop+0x70/0xc0 [ 206.502141][ T7399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.502158][ T7399] RIP: 0033:0x7fd9f359e159 [ 206.502176][ T7399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.502191][ T7399] RSP: 002b:00007fd9f43ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 206.502213][ T7399] RAX: ffffffffffffffda RBX: 00007fd9f3825fa0 RCX: 00007fd9f359e159 [ 206.502228][ T7399] RDX: 0000000000000000 RSI: 0000000000080005 RDI: 0000000000000015 [ 206.502241][ T7399] RBP: 00007fd9f363506b R08: 0000000000000000 R09: 0000000000000000 [ 206.502253][ T7399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.502264][ T7399] R13: 00007fd9f3826038 R14: 00007fd9f3825fa0 R15: 00007fff0d9f41c8 [ 206.502291][ T7399] [ 206.647715][ T52] Bluetooth: hci0: command tx timeout [ 206.674604][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 206.700235][ T9] usb 2-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 206.726325][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 206.745997][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.746031][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 206.746075][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.060505][ T7399] lo speed is unknown, defaulting to 1000 [ 207.089315][ T9] usb 2-1: config 0 descriptor?? [ 207.243987][ T7403] mmap: syz.0.352 (7403) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 207.413731][ T25] usb 5-1: USB disconnect, device number 6 [ 207.538608][ T9] thrustmaster 0003:044F:B654.000C: unknown main item tag 0x0 [ 207.540846][ T9] thrustmaster 0003:044F:B654.000C: force feedback for ThrustMaster devices by Zinx Verituse [ 207.567203][ T9] input: HID 044f:b654 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:044F:B654.000C/input/input16 [ 207.692540][ T9] thrustmaster 0003:044F:B654.000C: input,hidraw0: USB HID v0.00 Joystick [HID 044f:b654] on usb-dummy_hcd.1-1/input0 [ 207.997831][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.998626][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.999326][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.000800][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.026549][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.144611][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 208.209978][ T5726] usb 2-1: USB disconnect, device number 34 [ 208.308855][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 208.309835][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.309885][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 208.309909][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.311412][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 208.311436][ T9] usb 4-1: Product: syz [ 208.311455][ T9] usb 4-1: Manufacturer: syz [ 208.378719][ T7418] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 208.382632][ T9] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 208.417314][ T9] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 208.456853][ T7419] lo speed is unknown, defaulting to 1000 [ 208.526684][ T7430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.724728][ T5620] Bluetooth: hci0: command 0x0409 tx timeout [ 208.773091][ T25] usb 4-1: USB disconnect, device number 30 [ 208.796243][ T25] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 208.797019][ T25] garmin_gps 4-1:1.0: device disconnected [ 209.066314][ T7419] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.066496][ T7419] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.066648][ T7419] bridge_slave_0: entered allmulticast mode [ 209.070638][ T7419] bridge_slave_0: entered promiscuous mode [ 209.082310][ T7419] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.082944][ T7419] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.083376][ T7419] bridge_slave_1: entered allmulticast mode [ 209.091022][ T7419] bridge_slave_1: entered promiscuous mode [ 209.192488][ T7419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.206527][ T7419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.250537][ T7419] team0: Port device team_slave_0 added [ 209.253439][ T7419] team0: Port device team_slave_1 added [ 209.295650][ T7419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.295668][ T7419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.295694][ T7419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.300497][ T7419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.300513][ T7419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.300537][ T7419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.447008][ T7419] hsr_slave_0: entered promiscuous mode [ 209.448558][ T7419] hsr_slave_1: entered promiscuous mode [ 209.449216][ T7419] debugfs: 'hsr0' already exists in 'hsr' [ 209.449234][ T7419] Cannot create hsr debugfs directory [ 210.001205][ T7419] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 210.018220][ T7419] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.018960][ T7419] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 210.046462][ T7419] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.049009][ T7419] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 210.053625][ T7419] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.079130][ T7419] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 210.085599][ T5620] Bluetooth: hci1: command tx timeout [ 210.100784][ T7419] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 210.151945][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'. [ 210.238896][ T7472] FAULT_INJECTION: forcing a failure. [ 210.238896][ T7472] name failslab, interval 1, probability 0, space 0, times 0 [ 210.238930][ T7472] CPU: 1 UID: 0 PID: 7472 Comm: syz.1.368 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.238956][ T7472] Tainted: [L]=SOFTLOCKUP [ 210.238964][ T7472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.238976][ T7472] Call Trace: [ 210.238984][ T7472] [ 210.238993][ T7472] dump_stack_lvl+0xe8/0x150 [ 210.239023][ T7472] should_fail_ex+0x3eb/0x540 [ 210.239051][ T7472] should_failslab+0xa8/0x100 [ 210.239073][ T7472] ? __inet_hash_connect+0x162c/0x2590 [ 210.239096][ T7472] kmem_cache_alloc_noprof+0x9c/0x600 [ 210.239123][ T7472] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 210.239147][ T7472] ? __inet_hash_connect+0xe96/0x2590 [ 210.239170][ T7472] ? __inet_hash_connect+0x162c/0x2590 [ 210.239199][ T7472] __inet_hash_connect+0x162c/0x2590 [ 210.239237][ T7472] ? __inet_hash_connect+0x5ce/0x2590 [ 210.239266][ T7472] ? __pfx___inet_hash_connect+0x10/0x10 [ 210.239288][ T7472] ? sk_setup_caps+0x94f/0xbc0 [ 210.239309][ T7472] ? inet6_ehashfn+0x2f/0x3b0 [ 210.239338][ T7472] ? inet6_hash_connect+0xeb/0x170 [ 210.239368][ T7472] tcp_v6_connect+0x1231/0x1cf0 [ 210.239393][ T7472] ? kasan_save_track+0x3e/0x80 [ 210.239422][ T7472] ? __kasan_kmalloc+0x93/0xb0 [ 210.239454][ T7472] ? __pfx_tcp_v6_connect+0x10/0x10 [ 210.239492][ T7472] __inet_stream_connect+0x28c/0xf50 [ 210.239543][ T7472] ? __pfx___inet_stream_connect+0x10/0x10 [ 210.239589][ T7472] ? __kasan_kmalloc+0x93/0xb0 [ 210.239612][ T7472] ? __kmalloc_cache_noprof+0x31c/0x600 [ 210.239643][ T7472] ? __kmalloc_cache_noprof+0x148/0x600 [ 210.239672][ T7472] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 210.239711][ T7472] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 210.239749][ T7472] tcp_sendmsg_locked+0x4d3d/0x5640 [ 210.239800][ T7472] ? __lock_acquire+0x747/0x2de0 [ 210.239845][ T7472] ? preempt_schedule_thunk+0x16/0x40 [ 210.239894][ T7472] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 210.239934][ T7472] ? tcp_sendmsg+0x21/0x50 [ 210.239968][ T7472] ? __local_bh_enable_ip+0xd6/0x140 [ 210.239999][ T7472] tcp_sendmsg+0x2f/0x50 [ 210.240030][ T7472] ? __pfx_inet6_sendmsg+0x10/0x10 [ 210.240056][ T7472] sock_sendmsg_nosec+0x90/0x180 [ 210.240087][ T7472] __sys_sendto+0x408/0x5a0 [ 210.240114][ T7472] ? __pfx___sys_sendto+0x10/0x10 [ 210.240160][ T7472] ? rcu_is_watching+0x16/0xb0 [ 210.240188][ T7472] __x64_sys_sendto+0xde/0x100 [ 210.240213][ T7472] do_syscall_64+0x166/0x520 [ 210.240233][ T7472] ? trace_irq_disable+0x3b/0x140 [ 210.240263][ T7472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.240286][ T7472] ? clear_bhb_loop+0x70/0xc0 [ 210.240311][ T7472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.240333][ T7472] RIP: 0033:0x7f04c639e159 [ 210.240352][ T7472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.240371][ T7472] RSP: 002b:00007f04c45f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 210.240394][ T7472] RAX: ffffffffffffffda RBX: 00007f04c6625fa0 RCX: 00007f04c639e159 [ 210.240410][ T7472] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 210.240423][ T7472] RBP: 00007f04c643506b R08: 00002000000001c0 R09: 000000000000001c [ 210.240437][ T7472] R10: 0000000024000010 R11: 0000000000000246 R12: 0000000000000000 [ 210.240451][ T7472] R13: 00007f04c6626038 R14: 00007f04c6625fa0 R15: 00007ffc55e10808 [ 210.240485][ T7472] [ 210.630730][ T7419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.716163][ T7419] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.745525][ T6297] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.745646][ T6297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.773091][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.773192][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.795182][ T5715] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 210.807361][ T5620] Bluetooth: hci0: command 0x0409 tx timeout [ 210.849714][ T7479] FAULT_INJECTION: forcing a failure. [ 210.849714][ T7479] name fail_futex, interval 1, probability 0, space 0, times 1 [ 210.849754][ T7479] CPU: 1 UID: 0 PID: 7479 Comm: syz.1.369 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.849787][ T7479] Tainted: [L]=SOFTLOCKUP [ 210.849795][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.849810][ T7479] Call Trace: [ 210.849819][ T7479] [ 210.849829][ T7479] dump_stack_lvl+0xe8/0x150 [ 210.849865][ T7479] should_fail_ex+0x3eb/0x540 [ 210.849897][ T7479] get_futex_key+0x1b4/0x1580 [ 210.849956][ T7479] ? __pfx_get_futex_key+0x10/0x10 [ 210.850005][ T7479] futex_wake+0x119/0x5f0 [ 210.850034][ T7479] ? path_setxattrat+0x428/0x450 [ 210.850058][ T7479] ? __pfx_futex_wake+0x10/0x10 [ 210.850090][ T7479] ? path_setxattrat+0x428/0x450 [ 210.850121][ T7479] do_futex+0x458/0x4e0 [ 210.850149][ T7479] ? __pfx_do_futex+0x10/0x10 [ 210.850182][ T7479] __se_sys_futex+0x3a8/0x450 [ 210.850212][ T7479] ? __pfx___se_sys_futex+0x10/0x10 [ 210.850235][ T7479] ? rcu_is_watching+0x16/0xb0 [ 210.850262][ T7479] ? __x64_sys_futex+0x21/0xf0 [ 210.850289][ T7479] do_syscall_64+0x166/0x520 [ 210.850308][ T7479] ? trace_irq_disable+0x3b/0x140 [ 210.850339][ T7479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.850361][ T7479] ? clear_bhb_loop+0x70/0xc0 [ 210.850432][ T7479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.850455][ T7479] RIP: 0033:0x7f04c639e159 [ 210.850477][ T7479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.850496][ T7479] RSP: 002b:00007f04c45f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 210.850531][ T7479] RAX: ffffffffffffffda RBX: 00007f04c6625fa8 RCX: 00007f04c639e159 [ 210.850545][ T7479] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f04c6625fac [ 210.850568][ T7479] RBP: 00007f04c6625fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 210.850583][ T7479] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 210.850597][ T7479] R13: 00007f04c6626038 R14: 00007ffc55e10720 R15: 00007ffc55e10808 [ 210.850629][ T7479] [ 210.872633][ T7481] zonefs (nbd0) ERROR: Not a zoned block device [ 210.905716][ T7479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.369'. [ 210.920173][ T7481] loop6: detected capacity change from 0 to 7 [ 210.980906][ T5715] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 211.003765][ T5715] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 211.003856][ T5715] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.003909][ T5715] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 211.003964][ T5715] usb 4-1: config 1 has no interface number 0 [ 211.004043][ T5715] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 211.004137][ T5715] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 211.076648][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.076736][ T5715] usb 4-1: Product: syz [ 211.076771][ T5715] usb 4-1: Manufacturer: syz [ 211.076815][ T5715] usb 4-1: SerialNumber: syz [ 211.380223][ T7487] ublk0: read batch cmd buffer failed [ 211.380345][ T7487] ublk0: read batch cmd buffer failed [ 211.384053][ T5715] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 211.419571][ T7487] ublk0: read batch cmd buffer failed [ 211.419689][ T7487] ublk0: read batch cmd buffer failed [ 211.476095][ T5715] usb 4-1: USB disconnect, device number 31 [ 211.588158][ T7492] netlink: 'syz.1.373': attribute type 46 has an invalid length. [ 211.622196][ T7492] tipc: Started in network mode [ 211.622215][ T7492] tipc: Node identity 4, cluster identity 4711 [ 211.622226][ T7492] tipc: Node number set to 4 [ 211.854700][ T5726] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 212.007027][ T5726] usb 2-1: unable to get BOS descriptor or descriptor too short [ 212.007082][ T5726] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 212.008255][ T5726] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.008280][ T5726] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.012279][ T5726] usb 2-1: string descriptor 0 read error: -22 [ 212.012402][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.166568][ T5620] Bluetooth: hci1: command tx timeout [ 212.335707][ T7419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.450387][ T5726] usb 2-1: USB disconnect, device number 35 [ 212.664631][ T25] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 212.884619][ T5620] Bluetooth: hci0: command 0x0409 tx timeout [ 213.088521][ T7543] syzkaller1: entered promiscuous mode [ 213.088546][ T7543] syzkaller1: entered allmulticast mode [ 213.285972][ T7419] veth0_vlan: entered promiscuous mode [ 213.327512][ T7419] veth1_vlan: entered promiscuous mode [ 213.471375][ T7419] veth0_macvtap: entered promiscuous mode [ 213.501199][ T7419] veth1_macvtap: entered promiscuous mode [ 213.545775][ T7560] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 213.580589][ T7419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.611017][ T7419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.790029][ T1387] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.790074][ T1387] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.790107][ T1387] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.790139][ T1387] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.034577][ T1387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.034601][ T1387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.170513][ T7585] FAULT_INJECTION: forcing a failure. [ 214.170513][ T7585] name failslab, interval 1, probability 0, space 0, times 0 [ 214.170549][ T7585] CPU: 0 UID: 0 PID: 7585 Comm: syz.1.389 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.170578][ T7585] Tainted: [L]=SOFTLOCKUP [ 214.170587][ T7585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.170599][ T7585] Call Trace: [ 214.170608][ T7585] [ 214.170618][ T7585] dump_stack_lvl+0xe8/0x150 [ 214.170653][ T7585] should_fail_ex+0x3eb/0x540 [ 214.170684][ T7585] should_failslab+0xa8/0x100 [ 214.170710][ T7585] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 214.170752][ T7585] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 214.170784][ T7585] ? xas_split_alloc+0x19c/0x4c0 [ 214.170804][ T7585] ? xas_split_alloc+0x19c/0x4c0 [ 214.170833][ T7585] xas_split_alloc+0x19c/0x4c0 [ 214.170869][ T7585] __folio_split+0x8dd/0x1a40 [ 214.170914][ T7585] ? __pfx___folio_split+0x10/0x10 [ 214.170944][ T7585] ? __up_read+0x29c/0x930 [ 214.170973][ T7585] ? folio_alloc_swap+0x2cc/0x12e0 [ 214.171005][ T7585] shmem_writeout+0x571/0x17a0 [ 214.171035][ T7585] ? lock_acquire+0x115/0x350 [ 214.171067][ T7585] ? __pfx_shmem_writeout+0x10/0x10 [ 214.171090][ T7585] ? folio_mapping+0x16f/0x1f0 [ 214.171114][ T7585] ? folio_clear_dirty_for_io+0x162/0x820 [ 214.171152][ T7585] ? try_to_unmap_flush_dirty+0x96/0x100 [ 214.171186][ T7585] shrink_folio_list+0x33ee/0x5270 [ 214.171241][ T7585] ? trace_sched_exit_tp+0x3a/0x130 [ 214.171283][ T7585] ? __pfx_shrink_folio_list+0x10/0x10 [ 214.171318][ T7585] ? __lock_acquire+0x747/0x2de0 [ 214.171379][ T7585] ? __bfs+0x153/0x290 [ 214.171406][ T7585] ? __css_rstat_updated+0x237/0x540 [ 214.171456][ T7585] reclaim_folio_list+0x100/0x430 [ 214.171502][ T7585] ? __pfx_reclaim_folio_list+0x10/0x10 [ 214.171549][ T7585] reclaim_pages+0x452/0x530 [ 214.171588][ T7585] ? __pfx_reclaim_pages+0x10/0x10 [ 214.171620][ T7585] ? do_raw_spin_unlock+0xf5/0x200 [ 214.171650][ T7585] madvise_cold_or_pageout_pte_range+0x184d/0x2340 [ 214.171692][ T7585] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 214.171713][ T7585] ? __lock_acquire+0x747/0x2de0 [ 214.171759][ T7585] ? __lock_acquire+0x747/0x2de0 [ 214.171791][ T7585] walk_pgd_range+0x102d/0x1dc0 [ 214.171869][ T7585] ? __pfx_walk_pgd_range+0x10/0x10 [ 214.171903][ T7585] __walk_page_range+0x16d/0x720 [ 214.171931][ T7585] ? __lock_acquire+0x747/0x2de0 [ 214.171966][ T7585] ? is_bpf_text_address+0x292/0x2b0 [ 214.171998][ T7585] walk_page_range_vma_unsafe+0x309/0x410 [ 214.172031][ T7585] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 214.172062][ T7585] ? mlock_drain_local+0x79/0x490 [ 214.172099][ T7585] ? walk_page_range_vma+0x6b/0x90 [ 214.172127][ T7585] madvise_vma_behavior+0x2831/0x41c0 [ 214.172159][ T7585] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 214.172182][ T7585] ? __lock_acquire+0x747/0x2de0 [ 214.172228][ T7585] ? do_raw_spin_lock+0x12b/0x2f0 [ 214.172263][ T7585] ? rcu_is_watching+0x16/0xb0 [ 214.172286][ T7585] ? trace_hrtimer_start+0x82/0x200 [ 214.172316][ T7585] ? hrtimer_start_range_ns_common+0x83b/0xb90 [ 214.172357][ T7585] ? finish_task_switch+0x40e/0xc60 [ 214.172380][ T7585] ? lockdep_hardirqs_on+0x7b/0x110 [ 214.172416][ T7585] ? rcu_is_watching+0x16/0xb0 [ 214.172449][ T7585] ? trace_sched_exit_tp+0x3a/0x130 [ 214.172493][ T7585] ? mas_prev_slot+0xb76/0xbf0 [ 214.172539][ T7585] ? find_vma_prev+0x123/0x1b0 [ 214.172565][ T7585] ? __pfx_find_vma_prev+0x10/0x10 [ 214.172584][ T7585] ? futex_unqueue+0x22/0x240 [ 214.172604][ T7585] ? __futex_wait+0x3c7/0x470 [ 214.172625][ T7585] ? update_protect_slice+0x128/0x210 [ 214.172653][ T7585] madvise_walk_vmas+0x576/0xb00 [ 214.172679][ T7585] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 214.172699][ T7585] ? blk_start_plug+0x6e/0x1b0 [ 214.172720][ T7585] madvise_do_behavior+0x385/0x540 [ 214.172750][ T7585] ? __pfx_madvise_do_behavior+0x10/0x10 [ 214.172774][ T7585] ? down_read+0x2b9/0x320 [ 214.172798][ T7585] do_madvise+0x327/0x3a0 [ 214.172825][ T7585] ? __pfx_do_madvise+0x10/0x10 [ 214.172860][ T7585] ? __se_sys_futex+0x3a8/0x450 [ 214.172886][ T7585] ? rcu_is_watching+0x16/0xb0 [ 214.172912][ T7585] __x64_sys_madvise+0xa6/0xc0 [ 214.172930][ T7585] do_syscall_64+0x166/0x520 [ 214.172947][ T7585] ? trace_irq_disable+0x3b/0x140 [ 214.172973][ T7585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.172992][ T7585] ? clear_bhb_loop+0x70/0xc0 [ 214.173015][ T7585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.173033][ T7585] RIP: 0033:0x7f04c639e159 [ 214.173049][ T7585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.173064][ T7585] RSP: 002b:00007f04c45f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 214.173083][ T7585] RAX: ffffffffffffffda RBX: 00007f04c6625fa0 RCX: 00007f04c639e159 [ 214.173096][ T7585] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000 [ 214.173110][ T7585] RBP: 00007f04c643506b R08: 0000000000000000 R09: 0000000000000000 [ 214.173121][ T7585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.173132][ T7585] R13: 00007f04c6626038 R14: 00007f04c6625fa0 R15: 00007ffc55e10808 [ 214.173162][ T7585] [ 214.259142][ T5620] Bluetooth: hci1: command tx timeout [ 214.506401][ T6303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.506464][ T6303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.800799][ T7585] FAULT_INJECTION: forcing a failure. [ 214.800799][ T7585] name failslab, interval 1, probability 0, space 0, times 0 [ 214.800833][ T7585] CPU: 1 UID: 0 PID: 7585 Comm: syz.1.389 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.800860][ T7585] Tainted: [L]=SOFTLOCKUP [ 214.800867][ T7585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.800879][ T7585] Call Trace: [ 214.800887][ T7585] [ 214.800895][ T7585] dump_stack_lvl+0xe8/0x150 [ 214.800925][ T7585] should_fail_ex+0x3eb/0x540 [ 214.800951][ T7585] should_failslab+0xa8/0x100 [ 214.800981][ T7585] ? security_file_alloc+0x34/0x310 [ 214.801007][ T7585] kmem_cache_alloc_noprof+0x9c/0x600 [ 214.801031][ T7585] ? rcu_is_watching+0x16/0xb0 [ 214.801050][ T7585] ? security_file_alloc+0x34/0x310 [ 214.801078][ T7585] security_file_alloc+0x34/0x310 [ 214.801105][ T7585] init_file+0x90/0x2b0 [ 214.801126][ T7585] alloc_empty_file+0x74/0x1d0 [ 214.801146][ T7585] path_openat+0x9d/0x1e40 [ 214.801188][ T7585] ? __lock_acquire+0x747/0x2de0 [ 214.801222][ T7585] do_file_open+0x23e/0x4a0 [ 214.801250][ T7585] ? __pfx_do_file_open+0x10/0x10 [ 214.801295][ T7585] ? _raw_spin_unlock+0x28/0x50 [ 214.801317][ T7585] ? alloc_fd+0x651/0x6c0 [ 214.801344][ T7585] do_sys_openat2+0x115/0x200 [ 214.801364][ T7585] ? __se_sys_futex+0x3a8/0x450 [ 214.801384][ T7585] ? __pfx_do_sys_openat2+0x10/0x10 [ 214.801406][ T7585] ? rcu_is_watching+0x16/0xb0 [ 214.801426][ T7585] __x64_sys_openat+0x138/0x170 [ 214.801451][ T7585] do_syscall_64+0x166/0x520 [ 214.801467][ T7585] ? trace_irq_disable+0x3b/0x140 [ 214.801493][ T7585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.801511][ T7585] ? clear_bhb_loop+0x70/0xc0 [ 214.801532][ T7585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.801550][ T7585] RIP: 0033:0x7f04c639e159 [ 214.801566][ T7585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.801582][ T7585] RSP: 002b:00007f04c45f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 214.801602][ T7585] RAX: ffffffffffffffda RBX: 00007f04c6625fa0 RCX: 00007f04c639e159 [ 214.801614][ T7585] RDX: 0000000000000042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 214.801625][ T7585] RBP: 00007f04c643506b R08: 0000000000000000 R09: 0000000000000000 [ 214.801635][ T7585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.801645][ T7585] R13: 00007f04c6626038 R14: 00007f04c6625fa0 R15: 00007ffc55e10808 [ 214.801671][ T7585] [ 214.976571][ T5620] Bluetooth: hci0: command 0x0409 tx timeout [ 215.234314][ T7599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.391'. [ 215.726067][ T5695] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 215.864516][ T5695] usb 6-1: device descriptor read/64, error -71 [ 216.106224][ T5695] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 216.237007][ T5695] usb 6-1: device descriptor read/64, error -71 [ 216.335134][ T5620] Bluetooth: hci1: command tx timeout [ 216.344941][ T5708] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 216.350989][ T5695] usb usb6-port1: attempt power cycle [ 216.434585][ T1218] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 216.495276][ T5708] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 216.496279][ T5708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.496311][ T5708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.496364][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.498614][ T5708] usb 1-1: config 0 descriptor?? [ 216.615337][ T1218] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 216.616413][ T1218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.616491][ T1218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.619330][ T1218] usb 4-1: config 0 descriptor?? [ 216.684518][ T5695] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 216.706786][ T7622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.707335][ T7622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.731680][ T5695] usb 6-1: device descriptor read/8, error -71 [ 216.825958][ T1218] usbhid 4-1:0.0: can't add hid device: -71 [ 216.826060][ T1218] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 216.830998][ T1218] usb 4-1: USB disconnect, device number 33 [ 216.914866][ T5708] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 216.914905][ T5708] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 216.914934][ T5708] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 216.914961][ T5708] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 216.914988][ T5708] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 216.915015][ T5708] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 216.915043][ T5708] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 216.918957][ T5708] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 217.045841][ T5620] Bluetooth: hci0: command 0x0409 tx timeout [ 217.062158][ T5695] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 217.075227][ T5695] usb 6-1: device descriptor read/8, error -71 [ 217.111339][ T5708] cp2112 0003:10C4:EA90.000D: Part Number: 0x00 Device Version: 0x00 [ 217.186580][ T5695] usb usb6-port1: unable to enumerate USB device [ 217.265459][ T1218] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 217.416632][ T1218] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 217.417761][ T1218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.417832][ T1218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.421573][ T1218] usb 4-1: config 0 descriptor?? [ 217.516059][ T7622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.518161][ T7622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.522132][ T7622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.531300][ T7622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.741898][ T5708] cp2112 0003:10C4:EA90.000D: error setting SMBus config [ 217.752856][ T5708] cp2112 0003:10C4:EA90.000D: probe with driver cp2112 failed with error -71 [ 217.780783][ T5708] usb 1-1: USB disconnect, device number 36 [ 218.094646][ T5695] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 218.224568][ T5695] usb 2-1: device descriptor read/64, error -71 [ 218.237258][ T1218] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 218.245742][ T1218] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input17 [ 218.407328][ T7652] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 218.476307][ T5695] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 218.591626][ T7629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.592703][ T7629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.612763][ T5715] usb 4-1: USB disconnect, device number 34 [ 218.612879][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 218.629247][ T5695] usb 2-1: device descriptor read/64, error -71 [ 218.680986][ T7662] kvm [7661]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x1 [ 218.735799][ T5695] usb usb2-port1: attempt power cycle [ 219.074544][ T5695] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 219.096258][ T5695] usb 2-1: device descriptor read/8, error -71 [ 219.124506][ T5620] Bluetooth: hci0: command 0x0409 tx timeout [ 219.154573][ T987] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 219.308009][ T987] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 219.308977][ T987] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.309023][ T987] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 219.309045][ T987] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 219.309069][ T987] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.309108][ T987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.337902][ T5695] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 219.372155][ T5695] usb 2-1: device descriptor read/8, error -71 [ 219.475028][ T5695] usb usb2-port1: unable to enumerate USB device [ 219.663756][ T7689] Bluetooth: MGMT ver 1.23 [ 219.829615][ T987] gud 1-1:1.0: No supported pixel formats found [ 219.829654][ T987] gud 1-1:1.0: probe with driver gud failed with error -22 [ 219.914550][ T5695] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 220.075275][ T5695] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 220.076522][ T5695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.079672][ T5695] usb 4-1: config 0 descriptor?? [ 220.284168][ T7689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.296180][ T7689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.300907][ T5695] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 220.544879][ T5695] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 220.544976][ T5695] [drm] Initialized udl on minor 1 [ 220.936059][ T5695] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 220.936527][ T5695] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 220.964312][ T5695] usb 4-1: USB disconnect, device number 35 [ 220.973865][ T987] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 221.204576][ T5620] Bluetooth: hci0: command 0x0409 tx timeout [ 221.264495][ T987] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 221.416842][ T5620] Bluetooth: hci0: adv larger than maximum supported [ 221.420004][ T987] usb 2-1: unable to get BOS descriptor or descriptor too short [ 221.420052][ T987] usb 2-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 221.423076][ T987] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 221.423099][ T987] usb 2-1: can't read configurations, error -71 [ 221.524529][ T5695] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 221.675340][ T5695] usb 6-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 221.676426][ T5695] usb 6-1: config 4 has an invalid interface number: 44 but max is 0 [ 221.676445][ T5695] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 221.676459][ T5695] usb 6-1: config 4 has no interface number 0 [ 221.676485][ T5695] usb 6-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 221.678869][ T5695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.678887][ T5695] usb 6-1: Product: syz [ 221.678898][ T5695] usb 6-1: Manufacturer: syz [ 221.678909][ T5695] usb 6-1: SerialNumber: syz [ 221.744664][ T1218] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 221.890123][ T5708] usb 1-1: USB disconnect, device number 37 [ 221.902390][ T1218] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 221.903441][ T1218] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 221.903470][ T1218] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 221.903514][ T1218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.988720][ T1218] usb 4-1: probing VID:PID(0424:012C) [ 222.004869][ T1218] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 222.004895][ T1218] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 222.004914][ T1218] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 222.004934][ T1218] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 222.004955][ T1218] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 222.090442][ T7713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.091070][ T7713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.094109][ T7713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.109090][ T7713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.127876][ T7718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.130373][ T7718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.314540][ T5695] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 222.319402][ T5695] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 222.319458][ T5695] dib0700: firmware download failed at 7 with -22 [ 222.356916][ T5695] usb 6-1: USB disconnect, device number 6 [ 222.382581][ T1218] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 222.404760][ T5708] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 222.575506][ T5708] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 222.576460][ T5708] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 222.576476][ T5708] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.576513][ T5708] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 222.576526][ T5708] usb 1-1: config 1 has no interface number 0 [ 222.576545][ T5708] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 222.576572][ T5708] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 222.578746][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.578770][ T5708] usb 1-1: Product: syz [ 222.578806][ T5708] usb 1-1: Manufacturer: syz [ 222.578836][ T5708] usb 1-1: SerialNumber: syz [ 222.583160][ T1218] usb 4-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 222.744584][ T987] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 222.789808][ T7717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.790256][ T7717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.896807][ T987] usb 2-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 222.897768][ T987] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 222.897808][ T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.933127][ T987] pegasus 2-1:1.0: Missing or invalid endpoints [ 222.992222][ T7717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.993661][ T7717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.110616][ T5708] usb 2-1: USB disconnect, device number 42 [ 223.203026][ T25] usb 1-1: USB disconnect, device number 38 [ 223.284529][ T5620] Bluetooth: hci0: command 0x0409 tx timeout [ 223.611501][ T1218] usb 4-1: USB disconnect, device number 36 [ 223.624381][ T25] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 223.628208][ T25] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 223.704797][ T1218] USB vub300 remote SDIO host controller[0] now disconnected [ 223.724546][ T5708] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 223.854533][ T5708] usb 6-1: device descriptor read/64, error -71 [ 224.095966][ T5708] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 224.143561][ T7762] netlink: 'syz.0.433': attribute type 1 has an invalid length. [ 224.143581][ T7762] netlink: 224 bytes leftover after parsing attributes in process `syz.0.433'. [ 224.227701][ T5708] usb 6-1: device descriptor read/64, error -71 [ 224.264267][ T7767] netlink: 'syz.0.435': attribute type 2 has an invalid length. [ 224.335960][ T5708] usb usb6-port1: attempt power cycle [ 224.487572][ C1] ------------[ cut here ]------------ [ 224.487589][ C1] do not call blocking ops when !TASK_RUNNING; state=2001 set at [] do_nanosleep+0x7e/0x710 [ 224.487645][ C1] WARNING: kernel/sched/core.c:9014 at __might_sleep+0x92/0xf0, CPU#1: syz.1.429/7748 [ 224.515207][ C1] Modules linked in: [ 224.519131][ C1] CPU: 1 UID: 0 PID: 7748 Comm: syz.1.429 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.529971][ C1] Tainted: [L]=SOFTLOCKUP [ 224.534313][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.544444][ C1] RIP: 0010:__might_sleep+0xac/0xf0 [ 224.549677][ C1] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 7e fa 07 0f 43 80 3c 3c 00 74 08 48 89 df e8 5f 79 a1 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 224.569326][ C1] RSP: 0018:ffffc90000a18c10 EFLAGS: 00010246 [ 224.575446][ C1] RAX: 0000000000000000 RBX: ffff8880284318a8 RCX: ffffffff8bf8f2fe [ 224.583431][ C1] RDX: ffffffff8bf8f2fe RSI: 0000000000002001 RDI: ffffffff909eaf20 [ 224.591483][ C1] RBP: 0000000000002001 R08: 0000000000000100 R09: 1ffffffff213766f [ 224.599503][ C1] R10: dffffc0000000000 R11: fffffbfff2137670 R12: 1ffff11005086315 [ 224.607562][ C1] R13: 00000000000011d4 R14: ffffffff909eaf20 R15: dffffc0000000000 [ 224.615597][ C1] FS: 0000555555c89500(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 224.624609][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 224.631253][ C1] CR2: 000000110c340b0d CR3: 000000007b5f2000 CR4: 00000000003526f0 [ 224.639312][ C1] Call Trace: [ 224.642621][ C1] [ 224.645534][ C1] cancel_delayed_work_sync+0x6b/0xf0 [ 224.650966][ C1] mmc_free_host+0x19/0x30 [ 224.655464][ C1] call_timer_fn+0x18d/0x5f0 [ 224.660088][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 224.666853][ C1] ? call_timer_fn+0xd5/0x5f0 [ 224.671574][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 224.676788][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 224.682040][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 224.688793][ C1] __run_timer_base+0x652/0x8b0 [ 224.693696][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 224.699163][ C1] ? ktime_get+0x1f5/0x220 [ 224.703618][ C1] ? lapic_next_event+0x11/0x20 [ 224.708556][ C1] run_timer_softirq+0xb7/0x170 [ 224.713454][ C1] handle_softirqs+0x226/0x860 [ 224.718316][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 224.723148][ C1] __irq_exit_rcu+0xcb/0x220 [ 224.727823][ C1] irq_exit_rcu+0x9/0x30 [ 224.732130][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 224.737881][ C1] [ 224.740845][ C1] [ 224.743807][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 224.749884][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 224.756387][ C1] Code: f7 e8 bd eb aa f5 f7 c3 00 02 00 00 74 05 e8 10 35 d7 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 54 00 9c f5 65 48 8b 05 dc 38 c3 07 48 85 c0 74 18 5b 41 5e c3 [ 224.776074][ C1] RSP: 0018:ffffc900031efb18 EFLAGS: 00000206 [ 224.782185][ C1] RAX: 0000000000000002 RBX: 0000000000000282 RCX: 8000000000000001 [ 224.790254][ C1] RDX: 0000000000000000 RSI: ffffffff8e59e74c RDI: 0000000000000001 [ 224.798289][ C1] RBP: ffffffff9aee4150 R08: ffffffff909bb37f R09: 1ffffffff213766f [ 224.806352][ C1] R10: dffffc0000000000 R11: fffffbfff2137670 R12: ffff888074a310c0 [ 224.814357][ C1] R13: ffff888074a310a8 R14: ffffffff9aee4158 R15: dffffc0000000000 [ 224.822427][ C1] debug_object_assert_init+0x20d/0x380 [ 224.828106][ C1] hrtimer_start_range_ns_user+0x3d/0x430 [ 224.833864][ C1] do_nanosleep+0x17a/0x710 [ 224.838467][ C1] ? do_nanosleep+0x7e/0x710 [ 224.843111][ C1] ? __pfx_do_nanosleep+0x10/0x10 [ 224.848218][ C1] ? __asan_memset+0x22/0x50 [ 224.852871][ C1] ? __hrtimer_setup+0x1b7/0x260 [ 224.857891][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 224.863146][ C1] hrtimer_nanosleep+0x18f/0x3a0 [ 224.868175][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 224.873689][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 224.878995][ C1] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 224.884613][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 224.890735][ C1] do_syscall_64+0x166/0x520 [ 224.895418][ C1] ? trace_irq_disable+0x3b/0x140 [ 224.900496][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.906651][ C1] ? clear_bhb_loop+0x70/0xc0 [ 224.911374][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.917364][ C1] RIP: 0033:0x7f04c635e98e [ 224.921815][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 224.941621][ C1] RSP: 002b:00007ffc55e108e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 224.950116][ C1] RAX: ffffffffffffffda RBX: 0000555555c89500 RCX: 00007f04c635e98e [ 224.958173][ C1] RDX: 00007ffc55e10940 RSI: 0000000000000000 RDI: 0000000000000000 [ 224.966205][ C1] RBP: 00007f04c6627da0 R08: 0000000000000000 R09: 0000000000000000 [ 224.974214][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000036d51 [ 224.982268][ C1] R13: 00007f04c662627c R14: 0000000000036b54 R15: 00007f04c6626270 [ 224.990341][ C1] [ 224.993399][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 225.000708][ C1] CPU: 1 UID: 0 PID: 7748 Comm: syz.1.429 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.011521][ C1] Tainted: [L]=SOFTLOCKUP [ 225.015877][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.025976][ C1] Call Trace: [ 225.029305][ C1] [ 225.032177][ C1] vpanic+0x56d/0xa70 [ 225.036237][ C1] ? __pfx__printk+0x10/0x10 [ 225.040862][ C1] ? __pfx_vpanic+0x10/0x10 [ 225.045415][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 225.050741][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 225.055997][ C1] panic+0xc5/0xd0 [ 225.059873][ C1] ? __pfx_panic+0x10/0x10 [ 225.064357][ C1] __warn+0x315/0x4c0 [ 225.068385][ C1] ? __might_sleep+0x92/0xf0 [ 225.073023][ C1] ? __might_sleep+0x92/0xf0 [ 225.077655][ C1] __report_bug+0x276/0x570 [ 225.082212][ C1] ? __might_sleep+0x92/0xf0 [ 225.086849][ C1] ? __pfx___report_bug+0x10/0x10 [ 225.091926][ C1] ? do_nanosleep+0x7e/0x710 [ 225.096544][ C1] ? do_nanosleep+0x7e/0x710 [ 225.101194][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 225.107045][ C1] ? debug_object_assert_init+0x20d/0x380 [ 225.112811][ C1] report_bug_entry+0x19b/0x290 [ 225.117716][ C1] ? __might_sleep+0xac/0xf0 [ 225.122358][ C1] ? __might_sleep+0xb1/0xf0 [ 225.126990][ C1] handle_bug+0xce/0x200 [ 225.131276][ C1] exc_invalid_op+0x1a/0x50 [ 225.135814][ C1] asm_exc_invalid_op+0x1a/0x20 [ 225.140699][ C1] RIP: 0010:__might_sleep+0xac/0xf0 [ 225.145935][ C1] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 7e fa 07 0f 43 80 3c 3c 00 74 08 48 89 df e8 5f 79 a1 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 225.165578][ C1] RSP: 0018:ffffc90000a18c10 EFLAGS: 00010246 [ 225.171685][ C1] RAX: 0000000000000000 RBX: ffff8880284318a8 RCX: ffffffff8bf8f2fe [ 225.179684][ C1] RDX: ffffffff8bf8f2fe RSI: 0000000000002001 RDI: ffffffff909eaf20 [ 225.187658][ C1] RBP: 0000000000002001 R08: 0000000000000100 R09: 1ffffffff213766f [ 225.195635][ C1] R10: dffffc0000000000 R11: fffffbfff2137670 R12: 1ffff11005086315 [ 225.203605][ C1] R13: 00000000000011d4 R14: ffffffff909eaf20 R15: dffffc0000000000 [ 225.211608][ C1] ? do_nanosleep+0x7e/0x710 [ 225.216240][ C1] ? do_nanosleep+0x7e/0x710 [ 225.220884][ C1] cancel_delayed_work_sync+0x6b/0xf0 [ 225.226312][ C1] mmc_free_host+0x19/0x30 [ 225.230787][ C1] call_timer_fn+0x18d/0x5f0 [ 225.235430][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 225.242150][ C1] ? call_timer_fn+0xd5/0x5f0 [ 225.246875][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 225.252033][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 225.257266][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 225.264015][ C1] __run_timer_base+0x652/0x8b0 [ 225.268930][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 225.274359][ C1] ? ktime_get+0x1f5/0x220 [ 225.278816][ C1] ? lapic_next_event+0x11/0x20 [ 225.283709][ C1] run_timer_softirq+0xb7/0x170 [ 225.288625][ C1] handle_softirqs+0x226/0x860 [ 225.293443][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 225.298244][ C1] __irq_exit_rcu+0xcb/0x220 [ 225.302866][ C1] irq_exit_rcu+0x9/0x30 [ 225.307137][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 225.312825][ C1] [ 225.315781][ C1] [ 225.318735][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 225.324739][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 225.331256][ C1] Code: f7 e8 bd eb aa f5 f7 c3 00 02 00 00 74 05 e8 10 35 d7 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 54 00 9c f5 65 48 8b 05 dc 38 c3 07 48 85 c0 74 18 5b 41 5e c3 [ 225.350886][ C1] RSP: 0018:ffffc900031efb18 EFLAGS: 00000206 [ 225.356985][ C1] RAX: 0000000000000002 RBX: 0000000000000282 RCX: 8000000000000001 [ 225.364978][ C1] RDX: 0000000000000000 RSI: ffffffff8e59e74c RDI: 0000000000000001 [ 225.372976][ C1] RBP: ffffffff9aee4150 R08: ffffffff909bb37f R09: 1ffffffff213766f [ 225.380967][ C1] R10: dffffc0000000000 R11: fffffbfff2137670 R12: ffff888074a310c0 [ 225.388961][ C1] R13: ffff888074a310a8 R14: ffffffff9aee4158 R15: dffffc0000000000 [ 225.396972][ C1] debug_object_assert_init+0x20d/0x380 [ 225.402576][ C1] hrtimer_start_range_ns_user+0x3d/0x430 [ 225.408330][ C1] do_nanosleep+0x17a/0x710 [ 225.412873][ C1] ? do_nanosleep+0x7e/0x710 [ 225.417495][ C1] ? __pfx_do_nanosleep+0x10/0x10 [ 225.422545][ C1] ? __asan_memset+0x22/0x50 [ 225.427158][ C1] ? __hrtimer_setup+0x1b7/0x260 [ 225.432119][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 225.437353][ C1] hrtimer_nanosleep+0x18f/0x3a0 [ 225.442350][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 225.447861][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 225.453110][ C1] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 225.458697][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 225.464822][ C1] do_syscall_64+0x166/0x520 [ 225.469433][ C1] ? trace_irq_disable+0x3b/0x140 [ 225.474483][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.480580][ C1] ? clear_bhb_loop+0x70/0xc0 [ 225.485291][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.491205][ C1] RIP: 0033:0x7f04c635e98e [ 225.495634][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 225.515255][ C1] RSP: 002b:00007ffc55e108e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 225.523696][ C1] RAX: ffffffffffffffda RBX: 0000555555c89500 RCX: 00007f04c635e98e [ 225.531692][ C1] RDX: 00007ffc55e10940 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.539691][ C1] RBP: 00007f04c6627da0 R08: 0000000000000000 R09: 0000000000000000 [ 225.547697][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000036d51 [ 225.555695][ C1] R13: 00007f04c662627c R14: 0000000000036b54 R15: 00007f04c6626270 [ 225.563706][ C1] [ 225.566910][ C1] Kernel Offset: disabled [ 225.571246][ C1] Rebooting in 86400 seconds..