last executing test programs: 3m45.052646177s ago: executing program 2 (id=40): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x0, 0x14, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x8000000) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000810) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, 0xffffffffffffffff) r4 = getpgrp(0x0) r5 = syz_open_dev$sg(&(0x7f00000005c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x2279, 0x0) r6 = gettid() tkill(r6, 0x7) rt_tgsigqueueinfo(r4, r6, 0x1a, &(0x7f00000000c0)={0x3b, 0x8, 0x4}) ppoll(0x0, 0x0, 0x0, &(0x7f00000004c0)={[0x8]}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 3m44.770844594s ago: executing program 2 (id=42): syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0x40, 0x2, {0x2, @pix_mp={0x1c0, 0x9, 0x47504a50, 0x9, 0xa, [{0x1}, {0x2f, 0x5}, {0x8, 0x7fffffff}, {0xfffffbff, 0xfffffff3}, {0xfffffffc, 0x1}, {0x4, 0x6b9}, {0x200, 0x200}, {0x2, 0x5}], 0x1, 0x5, 0x8, 0x2, 0xa70d8594a1711527}}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006008035"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3m44.679288827s ago: executing program 2 (id=43): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m44.543507695s ago: executing program 2 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) (fail_nth: 4) 3m44.129868314s ago: executing program 2 (id=47): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 3) 3m43.907439061s ago: executing program 2 (id=49): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000900)="580000001400192360834b80043f679a10ff3d420000000001000000f61bcdf1194ad353e9cc853a804824cabece4b381effffffff0057e792945f80000000050028925aaa000000c600000004002e499391db0926f27805", 0x58}], 0x1) 3m43.449765622s ago: executing program 32 (id=49): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000900)="580000001400192360834b80043f679a10ff3d420000000001000000f61bcdf1194ad353e9cc853a804824cabece4b381effffffff0057e792945f80000000050028925aaa000000c600000004002e499391db0926f27805", 0x58}], 0x1) 2m48.080531107s ago: executing program 4 (id=301): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 2m47.812414185s ago: executing program 4 (id=302): openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) socket$kcm(0x10, 0x6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x2404c8a0) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m46.840314487s ago: executing program 4 (id=307): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r0, 0x8) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000000200)={0x28d2, 0x1, 0x3}, 0x18, 0x3) landlock_restrict_self(r1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="00f5"]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x401, 0x980) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0x1181a8dc449bc79a, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f000000af80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a940)={0xb0, 0x0, 0x3, [{{0x2, 0x0, 0x1, 0x7, 0x1, 0x80000001, {0x3, 0x7, 0x6, 0x5, 0x5, 0x0, 0x2, 0xe4, 0x8, 0x1000, 0x7, r5, r6, 0x78af02d4, 0x8}}, {0x1, 0x1, 0x4, 0x0, '&@(\x01'}}]}, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d8349000066646e6f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',uname=@@:(,ignoreqv,dfltuid=', @ANYRESHEX=r5, @ANYBLOB=',mmap,subj_type=@@:(,measure,func=POLICY_CHECK,\x00']) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r8, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xd5, 0xb6, 0xc1, 0x8, 0x1870, 0x1, 0xe67f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80}}]}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r9, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2m43.762293043s ago: executing program 4 (id=318): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e) open_tree(r4, &(0x7f0000000340)='./file0/file0\x00', 0x80000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)=@arm64={0x7f, 0x2, 0x5, '\x00', 0x9}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x40000000005, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x6, 0x0, [{0x658, 0x0, 0xfc9}, {0xae5, 0x0, 0x4}, {0x28c, 0x0, 0x4}, {0x24c, 0x0, 0xffffffffffffefff}, {0x1c9, 0x0, 0xc74}, {0xb46, 0x0, 0x100000000}]}) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x224300d, 0x0) 2m43.436620494s ago: executing program 4 (id=320): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x401, 0x1) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x1d) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') (async) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) (async) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 2m43.135757102s ago: executing program 4 (id=321): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000040)={0x1, 0x2, '\x00', 0xff, 0x7b}) (fail_nth: 2) 2m42.581369345s ago: executing program 33 (id=321): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000040)={0x1, 0x2, '\x00', 0xff, 0x7b}) (fail_nth: 2) 2m39.432366943s ago: executing program 3 (id=333): r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc) r1 = userfaultfd(0x801) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0, 0x160) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$bpf(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x2000000, &(0x7f0000000500)={[{}]}) close(r0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m39.138091602s ago: executing program 3 (id=334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) (fail_nth: 6) 2m38.821007135s ago: executing program 3 (id=335): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x1000}], 0x1, &(0x7f0000000100), 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000400)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x4, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r1, 0xffffffffffffffff, 0x0) 2m38.719468141s ago: executing program 3 (id=336): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup/file0\x00', &(0x7f00000000c0)='ufs\x00', 0x1200051, 0x0) 2m38.523905679s ago: executing program 3 (id=337): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000001840)) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x0, 0x31, 0x5, {0x5, 0x11, "3bbf2b"}}, &(0x7f00000000c0)={0x0, 0x3, 0x3e, @string={0x3e, 0x3, "d0bae943bc95ec4d78e4f90f4d72ca2edef586a2ded4b6f6ca66a37fc5866ef79ad60b8a479928e87514a8a08d91a3bac053f208c83185e5b1f6e750"}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x2, 0xa4, 0x5, "c5d96aa5", "31a73e6c"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x2, 0x2, 0xc, 0x40, 0xb2fe, 0x1ff}}}, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x0, 0x14, 0x6e, "819279b9110872a388f1714b2e2097bbb51ccfd656b32b647d829deaf4ec03805896af47c7c368a3b3b6432a4b74e65213a11895fcd170ee94d8d80b2df31e799275da9d96b28c595c5a2bc6323af533778caf9ed4098f484965ecad6186663ef9ed94aaa3fd076a320f14810378"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x120, 0x40}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x3d}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "b0cc"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x94}, &(0x7f0000000540)={0x40, 0x13, 0x6, @local}, &(0x7f0000000580)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "db48"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000000640)={0x40, 0x1c, 0x1}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="20ff07000000004e623ba6713fa9c50bdcfaaef66ac40000a643a7ac718ae41ef1dde646a2beb510b15f54cf6c93e7ab23134fe2e1e4655fadc663ce173ddbf3d194772866d10c377f275f90369335f5aef7b16d33c3ef5d506f90ee902690b3518dd299beb09f361c4fa151444e1f304e4495ce3e55c641349ec1f3ccd5"], 0x0, 0x0, 0x0, 0x0}) 2m36.286526898s ago: executing program 3 (id=346): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffefffb}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = fcntl$getown(r1, 0x9) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x2, &(0x7f0000000700)=""/4096) 2m21.137631242s ago: executing program 34 (id=346): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffefffb}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = fcntl$getown(r1, 0x9) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x2, &(0x7f0000000700)=""/4096) 2m12.566377638s ago: executing program 6 (id=462): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) (fail_nth: 1) 2m12.262656096s ago: executing program 6 (id=463): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000040)={{0x1}}) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, &(0x7f0000000440)={0x20, 0x4, 0xba, {0xba, 0xc, "e8f52a751735212da944dace9b0b3b12982c8d5bffb6c268d492405c0947b5df9fe00764bfdf5631aa58a6127e1f63be93eed3760a384d123ebf8c454d8a8fd4cfd76f6eb3e5dcaa1ae34a45acd4b510b59ea535ba8ac2b96bc44928ad661d3f1055c66de02897bfc63c74617a9b08b1e289c164551af73d71883b702b81e65ca22e1eeb4b671b6d7de8db889faace9e38ec7a5e4cd54bea5fe17434b89ad4a4d2710f0d4a121fdc22259c4dd96f47b1523ab57e9c3e7474"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}, &(0x7f0000000540)={0x0, 0x22, 0xc, {[@main=@item_012={0x1, 0x0, 0xb, "c8"}, @global=@item_4={0x3, 0x1, 0x2, "ae41181f"}, @global=@item_4={0x3, 0x1, 0x2, "b494167d"}]}}, &(0x7f0000000580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0x464}}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000600)={0x20, 0x31, 0x83, "e8dad8ec1ff5079cea0d52388deee56ae98361e9a8a9384c07a9bb3ec1f2aca2edbd026973b966d479122f959747163a257763a2249043ab9e83cd4a2a817648d04850a477e2882a3e0d4a00e0d38d5b00caf430e917ab88f1504e70667977c089ce390628dfc69a4899eeda1dc1d2eff55c006080cd5454cb9855377bf213b0a3e16e"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000740)={0x20, 0x1, 0x19, "a2c6f6e05a2c7dadc00c9d485b26b7d04223d1cc5f4743e56e"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x8}}) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x20, 0x2e, 0x9, 0xfffffffe, 0x25dfdbfd, {0x2}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x4d, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000008c0)={0x14, &(0x7f0000000800)={0x0, 0x6, 0x46, {0x46, 0x22, "4a9760f521fb9fdf438a78133a39985d18abb66f468e2d6cd86108d156826f91fbb6edca2730b9d3cd9cefef4a1154154918a517d19a94333d765b3105627e4a3f17c4ff"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc65}}}, &(0x7f0000000ac0)={0x34, &(0x7f0000000b00)=ANY=[@ANYBLOB="20063d0000000453df6f1a765f37fb648fcac8b4e38b53f8b041ca1a85c4c14612bf5073164664794ab019c48c9aa1aca43550006a76e6f4a55d67e8d6fd037335ec21da2ef17924fc8c61089207d2bf3f90a11d9d710d55973ab087f2c4cf2732485ebc23de36e3c7108e7987bbcc2a22e2d87284d877f88bba31ed0fe00d529fed8755e0a1"], &(0x7f0000000980)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a00)={0x20, 0x0, 0x36, {0x34, "0ad97366d3ebfb14cb69c68abbdb2f806e27719c738c088918ece6df69e77f7111c3a4722a81751d53e6005c715b04dd3d91a970"}}, &(0x7f0000000a40)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000a80)={0x20, 0x0, 0x1, 0x40}}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00c298"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m10.062798436s ago: executing program 6 (id=473): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r0) (fail_nth: 6) 2m8.534573186s ago: executing program 6 (id=481): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r2, 0x0) r3 = getpgid(r2) setpgid(0x0, r3) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xf6, 0xebff) 2m8.409592038s ago: executing program 6 (id=482): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000040)={{0x1}}) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, &(0x7f0000000440)={0x20, 0x4, 0xba, {0xba, 0xc, "e8f52a751735212da944dace9b0b3b12982c8d5bffb6c268d492405c0947b5df9fe00764bfdf5631aa58a6127e1f63be93eed3760a384d123ebf8c454d8a8fd4cfd76f6eb3e5dcaa1ae34a45acd4b510b59ea535ba8ac2b96bc44928ad661d3f1055c66de02897bfc63c74617a9b08b1e289c164551af73d71883b702b81e65ca22e1eeb4b671b6d7de8db889faace9e38ec7a5e4cd54bea5fe17434b89ad4a4d2710f0d4a121fdc22259c4dd96f47b1523ab57e9c3e7474"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}, &(0x7f0000000540)={0x0, 0x22, 0xc, {[@main=@item_012={0x1, 0x0, 0xb, "c8"}, @global=@item_4={0x3, 0x1, 0x2, "ae41181f"}, @global=@item_4={0x3, 0x1, 0x2, "b494167d"}]}}, &(0x7f0000000580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0x464}}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000600)={0x20, 0x31, 0x83, "e8dad8ec1ff5079cea0d52388deee56ae98361e9a8a9384c07a9bb3ec1f2aca2edbd026973b966d479122f959747163a257763a2249043ab9e83cd4a2a817648d04850a477e2882a3e0d4a00e0d38d5b00caf430e917ab88f1504e70667977c089ce390628dfc69a4899eeda1dc1d2eff55c006080cd5454cb9855377bf213b0a3e16e"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000740)={0x20, 0x1, 0x19, "a2c6f6e05a2c7dadc00c9d485b26b7d04223d1cc5f4743e56e"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x8}}) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x20, 0x2e, 0x9, 0xfffffffe, 0x25dfdbfd, {0x2}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x4d, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x0, 0xc, 0x2f, {0x2f, 0x2, "9cb169c122e4987f7b66265ad5ff7041730081c29a2eef2037e90d8d175736db9c73413127e17d19156fa7e49d"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81d}}}, &(0x7f0000000400)={0x34, &(0x7f0000000240)={0x40, 0x11, 0x55, "f379bdedcb56e3d6fb8175e861703afc5735f84f16f38fffb010bc2be765dfb1cbccff55c5c7c3d6d7f51552df6ef64e6d0a95359bf68a425a542721c2f6ef2f6851466b80d6c005760eaa970161b5fb6250754721"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0xc0, 0xa1, 0x4}, &(0x7f0000000380)={0x40, 0xa0, 0x4, 0x5}, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "5a43d319d89d17dc76c6f70334764e8ad320e3198933b0d389f943cc167e1f4dbdb12c9fc3d81cec5a2cbda3ed2337"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000008c0)={0x14, &(0x7f0000000800)={0x0, 0x6, 0x46, {0x46, 0x22, "4a9760f521fb9fdf438a78133a39985d18abb66f468e2d6cd86108d156826f91fbb6edca2730b9d3cd9cefef4a1154154918a517d19a94333d765b3105627e4a3f17c4ff"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc65}}}, &(0x7f0000000ac0)={0x34, &(0x7f0000000b00)=ANY=[@ANYBLOB="20063d0000000453df6f1a765f37fb648fcac8b4e38b53f8b041ca1a85c4c14612bf5073164664794ab019c48c9aa1aca43550006a76e6f4a55d67e8d6fd037335ec21da2ef17924fc8c61089207d2bf3f90a11d9d710d55973ab087f2c4cf2732485ebc23de36e3c7108e7987bbcc2a22e2d87284d877f88bba31ed0fe00d529fed8755e0a1"], &(0x7f0000000980)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a00)={0x20, 0x0, 0x36, {0x34, "0ad97366d3ebfb14cb69c68abbdb2f806e27719c738c088918ece6df69e77f7111c3a4722a81751d53e6005c715b04dd3d91a970"}}, &(0x7f0000000a40)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000a80)={0x20, 0x0, 0x1, 0x40}}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00c298"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m8.114908378s ago: executing program 6 (id=485): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f00000000c0)) 2m7.80143238s ago: executing program 35 (id=485): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f00000000c0)) 1m34.788307194s ago: executing program 1 (id=662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000580)={0x0, 0x3}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00100008000300", @ANYRES32=r4, @ANYBLOB="040046000a00340001010101010100001e00940000080600100000000000004000000012000000000401fcffff05000004004600"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1m34.61876203s ago: executing program 1 (id=663): syslog(0x4, &(0x7f0000000280)=""/36, 0x24) syslog(0x3, &(0x7f00000003c0)=""/4096, 0x1000) syslog(0x4, &(0x7f0000000000), 0x0) 1m34.374842458s ago: executing program 1 (id=666): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@x86={0x3, 0x5, 0x81, 0x0, 0x9, 0xe, 0x5, 0x2, 0x1, 0x1, 0x6, 0x5, 0x0, 0x1af2, 0x3, 0x8, 0xf, 0xf4, 0x9, '\x00', 0x5, 0x8}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x1, 0x2, 0x8000000, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x2, 0x7, 0x2, 0x1, 0xc], 0xeeef0000, 0x4fb40}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r3, &(0x7f0000000280)={@val={0xa, 0x9100}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0x2, 0x6, "ab5d68", 0x9, 0x2b, 0xff, @empty, @private1, [@srh={0x32, 0x0, 0x4, 0x0, 0x2, 0x28, 0x4}]}}}}}}}}, 0x72) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m34.212725326s ago: executing program 1 (id=667): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vcan0\x00'}) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000007cc0)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000040)='./file0/../file0\x00', 0x4) 1m34.161758294s ago: executing program 1 (id=668): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000700)={0x14, &(0x7f0000000600)={0x0, 0x24, 0x9b, {0x9b, 0x1, "3768cb29ae4eaaaa69d7988d70de1de24a5072f7c5ad1c8ad13c998e2c18b3c1fab32c9751de58ab38de2ff5e092000bd201f9ef2770a9c9a38354f6588d2c73a5ff6dff1e7c7c4f994197a5c098ed71ff20de1017c70192348939a4514cba256f7aea28b93f52aedec530b3a15e19a021ddbac0a2b334d2537e74a6e1f76046a3263f2e383124271bfb894fb27654eebc0e104f303bf5b4e6"}}, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000980)={0x44, &(0x7f0000000740)={0x40, 0x16, 0x55, "c9daa0de3fb06739fcafe83219dec45d3170b45ed1d5a8a6cef2e31f7495d1f7e402e100795ad0dfec522347da1b4dd7b51707466d14b11b06bf6dd073808c0a2f6cc485228acb714deff3209dcb6401e26f77ff1d"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000840)={0x20, 0x80, 0x1c, {0x2, 0x9, 0x81, 0x2, 0xb, 0x8, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x6}}, &(0x7f0000000880)={0x20, 0x85, 0x4, 0x874}, &(0x7f00000008c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000900)={0x20, 0x87, 0x2, 0x401}, &(0x7f0000000940)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 1m33.262131653s ago: executing program 1 (id=673): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000080)={r3}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={r3, 0xdf, 0x2, [0x2, 0x1ff]}, 0xc) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x1409, 0x211, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x80800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/74, 0x4a}], 0x1}, 0x0) lseek(r4, 0x0, 0x4) 1m33.012282996s ago: executing program 36 (id=673): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000080)={r3}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={r3, 0xdf, 0x2, [0x2, 0x1ff]}, 0xc) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x1409, 0x211, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x80800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/74, 0x4a}], 0x1}, 0x0) lseek(r4, 0x0, 0x4) 29.968009211s ago: executing program 0 (id=1022): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r1, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000000004000004}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x20, 0xfffffffffffffffa, 0x3fff}) 29.482345161s ago: executing program 0 (id=1027): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x4000891) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1070000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a440000000c0a010800000000000000000a0000030900020073797a31000000000900010073797a310000000018000380100000800c00018006000100d1030000bfec501cedf4276504000080940000001100010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4040854}, 0x40) r4 = dup(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x6, 0x24, &(0x7f0000000300)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x40095505, &(0x7f0000000040)=0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x6}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000300)={0x2, 0x1, 0x6, 0x7f}, 0x10) inotify_init() setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 28.40252916s ago: executing program 0 (id=1032): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x32, &(0x7f0000000c00)={0x0, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}}, {{0xa, 0x0, 0x20000002, @rand_addr=' \x01\x00'}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r1 = open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x80c42, 0x1d0) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000400, 0xee01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}}, 0x448d0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$caif_seqpacket(0x25, 0x5, 0x4) ppoll(&(0x7f0000000100)=[{r5, 0x32}], 0x1, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000f06010200000000000000000200000805000100"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)={0x28, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x40048c4}, 0x4810) 27.425675714s ago: executing program 0 (id=1040): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x21020, 0x0) 27.262367804s ago: executing program 0 (id=1044): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.960783248s ago: executing program 0 (id=1047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b3108000840"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (fail_nth: 5) 26.61607967s ago: executing program 37 (id=1047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b3108000840"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (fail_nth: 5) 4.955631864s ago: executing program 7 (id=1152): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x2c000, 0x1000, 0x10, 0x1}, 0x20) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x100000, 0x0, 0x0, 0x0}) 4.787858459s ago: executing program 7 (id=1154): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01fa030010651fbe347b2c3b00000c00018008000100", @ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x440c1}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200601, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x0}) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) 4.521566664s ago: executing program 7 (id=1156): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af5", 0x0, 0x53}) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x12ba, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x3c, r0, 0x2140dcfffd4d4d7f, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "2635eb6f2d8ab086368aa4cec5d828e0"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x50) 2.723382502s ago: executing program 8 (id=1166): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="20ff07000000004e623ba6713fa9c50bdcfaaef66ac40000a643a7ac718ae41ef1dde646a2beb510b15f54cf6c93e7ab23134fe2e1e4655fadc663ce173ddb"], 0x0, 0x0, 0x0, 0x0}) 2.654910834s ago: executing program 7 (id=1168): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) writev(r0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000001540)='L', 0x1}], 0x2) read$FUSE(r0, &(0x7f0000001580)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = getpid() syz_pidfd_open(r2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) llistxattr(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)=""/252, 0xfc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xcc) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000006500)=ANY=[@ANYBLOB="501900003c00000825bd7000ffdbdf250d000000040037000800ab00", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="04000380b8023e8086ff74400125b01c725c60eca4fe66d8ebe4462064fe4125d3ec091d9f91039cf3282ef5c72d7d28f4ccc56552b91c25c6da832cc17d78fa72dd876151798820c23cdcdd98f276868c0d5ce4eac3c72b273b6aa48c5553fba14e2ea62f01c6d33481590a709185417c7ab89f54c17eabac26fb95c51075674b104f6a6401bcd43017d258835d616831314e36784a18b61da9bece84654af621275d18937aac4488f1db5309c4656a24477d8752d15c20d47767bc1261541f513768ba3320fd086c506a69bbdd65b29c499ddf3096d57cb10038695010b067c51c486796c35b02ed4ee82a645855ab71b3e4601aaa00026bea00c08096b49656e1a3ee986aa226015d80e8ff0ccac654f9f6225b77dc89075fb644d1d422dcadeb08fb75e5bdf3bc2db712dbe8fbf72d422d913d20f4c724909f0733ed9eb53f17fb52b62101fd1fc954db0867ae57d34a49ee052fd47393e355eb0106ccad3626a8b4e533571a97e5310ddc8fda1ca16f09796dad7f49acc3d1494846b1d21b6da155047fe987829b40968260308545cdb3922db21bd3f637bad22ddb5a043433b634ce0dc39873b5bae2040bdeaba9d23da0bc8c52a35202e1e8f03008a448281caf578a5d3a77e30b677f9f08721cd6511dd899d5d1f100106da6dc30bccf6cb8afb99b4f17699e8da0c49f37c3cb83fdd96afd159df795acff2ffbb27132622d24a8f9d5042da30fd1a0f52fe854ca77766586a2d2c7e5a38ea17eab2c42bc8f3bee328933b78e2bde8d000013000200a71ef47181a3f253b7354e77d450e6000800af00", @ANYRES32=r2, @ANYBLOB="fabc41d0472630ac784b7ba1ee50f7ab9a8124360a84a1491f97fe453313d202c9e89824cb73735094671333c7a3ae0ee3ecb91fa2226c612266a609b33f282fdb227e9a5802956fd8bf0c87c9af11c61ae4bba8d73f5f04b443cf25fe08cd5bf256a3669cdd2e9fdeee2c25bed66d89e114000c00fe8000000000000000000000000000bb22a1958dec92a1dcd49d87bcbd206b4517a8ebe689adc30a24bfa2f3254b46268bdb665da91c68bf45344a81054b66776918092c8f26328dcce8945adc009f4a95669e96cb460b99e8b6a2589bef2542eba8dee7e39b13d632c05e91635c2682c6648aa73a068267ec3a35a5b333f72ef4ecd321f71ac7ff1856179f084d9f551336f28920023ee75d7758273c5d219f7bd4bc168bce017d6d2446394c9a268de8ae686125eca23d4cd18280e6a554c5c2ba9c4fbf64499dc5a35ed1e9a54a4af27f63e40c234b174d9c0138397c3c8ece420ca2ac587086d10024c65fc72eb98f4245d130b879ac32c5d7e8f55aae7e41ca072027795a865cfad97a9ef11efab0bc77758232084c0927299f1e8dc23fd5215d1b7ee87d5b50cf29d9ef748e78c84a0c6d4119462bac7c210b5eeac6b97d13bf0265d3689c61548fdae8fb3cf2235457379a20f71291192c75a28c4d776659546250758dd7111309f531023aa7e90400fe800800130004000000001400ac0000000000000000000000ffff7f000001ad12248014004200ff010000000000000000000000000001ce105c01e8488bc32df9b45b20c4108963f0944e424b97cd31753157886aa4812b37e9173f2f10b4d5febfbc64707750aecf854980b131d855ae4f0fc33d07b3bb5373de0fb888ee49b82c2bdebd18b3cdc71f88e43078bda365ba02bda18bc5a4e7f39fe899f853d7325d88046b43592e0b7fc725349283cb9d848d38b85ecc78a2ff6655a9fb3033a6c6e3af44e6aca8ee966d9e2c3a84421cfc0c0334c4cd7d56d5aef4f2b6d35cc0a4bf97de0f29242ec0a2b3ce49bdf62cde7b1ef0aef113f9facd2bb3afb9c677bb09d46e66433775b0c45fd71da5e784e2af6151076ba0710defaca6c97969575996e68de7e4bc19f7b428106a2691d44cd35d8b755b4c892bd1d8a6e28790364a0f022370ec319f700548e4983fcc030bab9a3627fbb80ee43ebc19789bbc32efc74e9d93f72e4c89b115ff3b7628d56d9c0776e15d5131150b0ed9f4f8d4d2fac6ec5c95b21124de6ffa18d4bca4fb4ee09e514943c1dc19c9e880674748c6cc264edfda1e3fac86cf605175d78d3b73f60a981d3dd39bd16af398c42a427fceb78a5cdeaed0388e554642b86b5a727bf34b25cd34d0ba3952c86df0855e32f0d702194ed8559599467b95175cf47ffc27adefc78c918b591894af768fc388423bc63faffa3207a8f03e8708835db62cdfec15379977232605d7342acab4df1acab49e6548f6e5dbfe0d84ccd023428443bd7b417cb052eb47e455fa2d3763dfb03b7bc38a0478c6cbbf868527fa86411e68795602d2c6d0a29055f61e841a7b7a85636b9b61e793e559c2c9beaecc2016738380223827cecdc755504814c35dd7d9849169a778a8478aad688bf2a3e357c8d5a520753f1e92ca1bdde54508ece32fe19de011f3514a2070ea0cc873feb53e8e0fead215ab468cc5c1ed283c0af83f8b494f162849217ab6d5cbdefdd242959915669d1af0ba8024ffd01f273a9b7b305645f27320f355850f7c4a0219e376ebb3472c2dc7f7cf80005bb6228a7beed32359105d29dda5cc68d45b3b2b41a11ce8ab2a66ae6ed4edccef304f84e488dbaca538a35eab48f43137cee8a4e7470a73133ce99bae5bce298c670152ae67eb3be32f7e9ca83e1134754c2712d1c4347591b6b7287f9137418ffb69ed8455dd291a61a9e4768a1538a580d522e61af6715b4807b00d4eb11b5fa53cb305d38c7a344b4891f55f9ba224a6a039b92462af62424e5a30d7c0f7778d1613cf886746aa695ad75d5ecd27887f7c2fe79c3dc5db9c2a6bed075360b25b6607f5e38b18c100d151216f61335ef49e1e674a70a0545eef1d4207f018a99ed8c4bf9f2a4c278a7b89ebd254e0a4cc6e08d9edc47417210b3c0873bccd5842172968c35109f3f4b3fc284944588e96291895140c10f6f5e2c71c756af7ab532af2b59e7fcab9e3b8bbf4b08c592661ac42cf0a55107c5f72f5261938799069bec0a60196e3c9a8d62f1744732a1d0b6428009d2f78cd6f88973058b4a1f7fe8e62d811742fa8995ea767069abb9f452749d99a8d77a13e88afbcabb4e0ec849aa0d7857f3e67402306be921b823ea22a7f718015082b873690764a59c9d98886517434e8edb3db08191ab75de8f2fece347b48de6a187139fc67b354ecaba3faf6b44a07d926c33010c5afd0120e7e7b7d7a7864ad51e8cf9e1877c0aa47225176f7ecdbda48cc0737a7ef6f7b0a4c812f8d94444bc266a80d5306af3926acb85137ba8aa5850a73565d795dc895cb40cc68f7d33bdb089ff988ed0b3280caa12257205d5c261f3e0442d24b35d5a8266c884fb4e668d4d4733c19b05d794e9c47bd00609b02ef80654bac28b4c49383a23791b5de0ff670ceff9745cee04096e017d3c089892a98663dfdc189fd3329d003f5fa1f590e48cd7b54d389ebeec90cd2b54632b0449c33f7b0dcebaed52981e8e1f8927b50dcd2618cbba8ea40f5d8e75cbcf838aa24dfce877fcf15009b5715a9aa79a36b0387ab51f8ece45ceb53895972f9ccc255b0867decf96c81c6e110aabb63212e743e5e76cb30b74a31805007f399f89a7ac4fdb319e450e85b0b9a599b3e1c9727380e68e6e709216050b8f5dbefb41c3e066c212d38b8a3db9fee757f6542b075605eb0d91023fcd235b0f30f953cac59c169e92069261ee8096dc8c1b2ba163c800b33ebf5d3ae6de50bb39bdb71e35dbf4690fa5429e7567534827478bd0e2b89d8077a80f7dbbceb65889aa8d2c2f2981744efd3650a582bf424e4b77e6bf2b5dca7f46cdd2726df6e83bfb30312ca3c7d08aefaeb9730991727c5c292223ac34c302a6d556c95cf827fc4c13a5280f316d4b7d9b44e68f57617d58968c1415438832976cda462736989d8521302126a8e460c98320ca5c5ed16d013375472115b3b5dd97e06229d668fe923a3453532d07af90ad3e2c9a20066101e202f2af00f577df26dd639d03f82474f1924b141ef6c50d9e5d755dc99965ff460ee18a6bac10dd9dcb39990eaf54ea62972c03a102fc2e88e9f794dae15a0617d0b4b72382993688b7895dff548a20a7fc14de46f7aaff64255defa7a4ffe5d421af1b1c6f5ca2000e1398e2fbe27fa823064880336d00f4c37a824e339c476b171bc7b8622766f9d062db04c51800bd7bd6f358828dcca150393ae2e236a2887d78606552e65274887dfee9a78c2c7b11387857075e5ee00d80fcc61375dd4b8aa20808a5ba398194a2f80c937a05eb401277e51f90c26a9f775666963a932615bcf8ebf61cff886fc19787a34498058d38869c238270caea8880a7f5e2165737f1797bf8c22e34ac8bbb1ffbc5e48c9450ff9788e2693f3082e4f79eafcebbb1cac5c93e8583535d02bde350b8f2cb6b69e9f23a6bb7a5aa294a93ba65870d59db11fb1db5f7a32c01fca54a1ae99fbf7cf4926510ee351e7832f399187bfa2a6fa5c4c5661b817a3a596f0553fb37980205ed3f32e83c3dc812703ae2469aaf891c239dc47f40c1f6c5817f3ce00230b322665a78c9d8e860f9a790e033b21143d7a68731db07882e89e61c9ffdb0be597cc964f828e0f9ffc13700ef080d5dd9c608deaf5dccabcc47454fce02f97ab4337c4792f08a3727623a4aeef1fc9a6b604254666ea4ecfd7e4ea2917ac452b984d966d5cbb90b795309f3ff6dca39297d59aeda57c7844770b8a44205cb8f4722d6c7765d632b3be31c8d546c7090a99477ca105f437557c97d8523c0fedce873ba29f808b41db9519f5061fc78128c7fada817f3a817c40fa3925c9fcb50ad08199aae6335dfc621f3064c0cfc826e8dfa1a3447bba8bb7c3b280e1a0e453e8e9c89d3047906c7f3f2c4f499fa19226da1fe1cc0a365d6c6b1d52554ddc6b33a1f2fbc5d593866c1b6eb8544c0b6e7d6a4ff8101716236505e31b1983fd6ff8adf517695f06567d62ee602741f5fd975dc26170836f482d2cd2980873b03a669f975dfa421372e1a7ae197291a15326c95a3be9cc0fd023c37525b9c6dc39db3e2c02107bede17e050754519f83cb31ee7bfc95a4436fa52fa86207a8ef2b18074a7fdba5548711d942e718d807d874fd890f0f7f21613388696933fac83189eb4189c8afecadbce5fa81849e6bbd5c469d729807875a53104d3f87779a09928a32018d2ee20987bf595b8a3d7ccca1900ebc8e30fb18ad62dc8fac8914d820606ec7363784e8da31adae6b9cbd90b07bd121d26617bb4ab54abc7c005540314a81da5b27adcb07a81176c22aeb8d8ae47d5176f796b250c0bc1c515044dbb8a3bc5edc61ff9a529f966bdbbb29f7cb450457d08002acec6db82d13a0c2165b6a51f0e43460f16f30dbf602b36b42fd9f7cde52066180cbf99a7c19959dd37a8b71e6d977521f6b9cd27860dbda1ab444b24ab389fed680dfcf07305d841a98c83efd8aa4444083163e98e2dd858b8ca5f1405ba66218fc66d52317af834a103977b818b2f29784d8365889fda17e35af32a773167fc391a60e112ec9c9030af3b4f92e28be1c8bf350431b2a0931df2d77d77d06735a14110379b74331effa0d077392c0e3ba4a75372357b694ae1f9c0173bc6e8d007fb284eabe596a45cc521b52ac1442add440bb6983fd291d3a0bcb0014dca3edc640cddb727834bb0f248f6385d3f4f8d281247deb1a772cba594601da97edb75d041f780cbf0e11e094e2349e60ec82eb19bd02cdb533e9f17a4b1dfb1b91cd5c8d823044de1e9ee3ef9b41b4e58ccd9b39b1eec925041a3eca8481feef9bb8244fb8ebfb5e4ad2c8aa5b1baabae07b396f3ff648265a1b785a29ae81faed716c55af470b9318ec2b2303eb826f1944bfab7f48b4b803aa146b7560852783155bf9fdef1e66367dbd62b2422361f8fdc999fb5fb0b195faf186ef499e7298644c335657eb0b55223829ac537dd28d843357f81b52be1ba6ec831c16f3b4211742b3df6a1e1fe81d996126ca22a81b49e57a3408882916c78b69c5b359336f96be217f42e11e07bca76d0c582ff6e62bac1f9b5818ef45d64b1de01e9381eca15baf11d10700f2978d28217c395e7fc7e80bb38b15c94fbe8db2b5b59bb61c373735d6390222f564347255a745a8e698756e03455a2f6ca983614112394a97dd8e5856023f0e00bdbefb2861e3fe8aee57bbba93a625551618cd012b9cac66cde9f19c53970b3cb586c94a0ee3e1eb5ca2474bb1fa77d5158ba70255f1e3efe43d5a2898dd518c7d3585514ed8d846efb22d725ecaf980ebc16fac66cc213878dd98a02bbc35cc2dc32f837aeee2b21b7b8bcc39357196e1c82a6908f9dfea8aea097a0fcbd6092ce0643b35c9e64ba6ef790c6868bf9e1ecdcb0999e0a16cadf0f48b62d2512c21bb4062f4dc1750fa890e659b6ceb50e6e91f448a5fa351fb3caf99539b4ade3fe3539172de773b361792d268879bae12348e9cddeac65ffe7a6cf571e47f0f1b11a80461c9dd64f178f29f59372b3f307000736a83e995acd9424976bd8feb7bcd12c4c6e52d436a5fb2d5421cb63abb1605fc03f8d0b5e7f37733c652b53735aafa01a08c882f51e6a6f36908caf52d30d1e7462974ae48ea25788f901915b90427e9b73b7eb18b1eee49f1bde26cca47ba07503e74906b3e6a186ebc15cc49951d8b5620ac9c71e71d8fe95217514487ecde0574db541f702ad2d8cd4d5ec205cb15eb781223aa356a512fc8ce801e9755c4c05c4dfba7a0ed682ace9f3c5c807f0e2cfbd89f3546ec543c14684c1ea7ab890066747c9c2ee06651a6c20d890f9673c15cec27845235cbec12b7f1cbc3006a8427008f7eeaf7fdf08770b948735a59be8606104479ae757e9bfb479a85d75c5d9538732213f73580773fe7e79d7d59a2616a1441cc759b626502653799ad315847d1cf9f197083dd420e4ec7e43881356177989ef3a6024990a274c4e860af9d56a9c06786bce0f68cfe2f299f85792cee0f0d23b6ed6bd2bffcc2981a45392201d25b40e374f188ffbe9f2bc6701ceb4ec862e826f8fdbf94112ce4169648270386798663847026f58eccd70ed2fac1e66038f767bcdccd4fa262ea69072107cf68f760055d022e81544cb6a4e9a49d98a33caed4124c33244f8afecb2de5db4d33517ccde7171172e1950f4e2b2577e31890f727fa1a9bc33da4d5b3799f6da14777128dcd4496c21ce3d22ffe35336a73a77ef7f65f66b0268e86147df43960f2b30139051148d0c81d03dbe8cb3875e533fd307992a26bc725d007e207b845b26550f165c936ad4442498a2a2010d08308e732ecd80b78f121825680156cfcc076120be918e7c99fbe856cecc2797aba9a395926161821cc2e9f2a12f0fd1584bce76600632862aa788fabde0c1f50453dbbf2b9b60d3f3a79b530c37314bb04b0555f5abe5074cb47d7de1836d5b032d7602d57ee79f1eabcfda9f518243694a8221cdf4c6ce7645c671152be5c8581f3164f4e4fc010ed1e9470ab3ae311290e7a18ed810849f0981f1b57830587eaa5399a5cd06928c3261dfc2d309a5237370121fad2e7e921ffa9a1c8651780c5f2ad7cdefc0d65423a7b28f4bf9281661a476c60212d05ec820f0623a9ef12ff27f9ed8d4125b01ce6c4ae64e931adf18261dd97ca3965795035677aa364a56d36b885bc51dbed9f0f054af4af47115f01f2de2fdd607b323a95dcaf3f9b720d05efc18067b3e3103a435dc94958b2edddad308fa78e5709b4cc1c83b5516729c5885c0163c92bc8e1113ddd3753f11fe496f91c8d025dedb2f9d58c54a2a4fc62a34ef2e98f2f378eb58d7e709a5e1d0d4d7a7720145b832221073444b85e0f88b20c68a9fd76ad4b75c02fe1c1d78a40d74f7eaf19e5048c9689ac7411357316ac151a75d4afb6647e878c007008be0a83c5f8f59b34f0f6ef16fa8b2f9fbefec7218a4c0b68357f7726f70b7f0d7d61b1f9de64cd925836bd15ee5ab894457c8fea4e3cebfef723647bf4e0059eb407462c35efd3dccc493ee8aa5bf8338e76094e03ae06e745ab1c80c485ca5214f7d0713e0480281abab8ddf9e83d968d870ab94f12d1e99f8e250f3ef4d3c9377b0013152b2801be3de5ea0e26c33113557ddabbae243bfb04cd7ab7ee2637110d6d116c3c5ded07d6f906164304820feb3d1059de031ef5960366ad8d14496ceeb06ffc1bfa072f4819a9f38433266e46a6c03f6e731f378bf02b1e5f73b014b6e039a955b908007300", @ANYRES32=r3, @ANYBLOB="000000619e5fac8374b0b4f24429091b25aba2ad4b7e0a6aaf86e6b41dbb701f55b6738d0b0bbeda7103e7a443fcaa73a6c3332775465a401e6b8045698a9eb0a48244382ddbdcc1dd3515af06a5c0f186e1c89e1551b16fc7772d642862006e2f04813f0aa42ee0"], 0x1950}, 0x1, 0x0, 0x0, 0x4040}, 0x10044080) 2.479934734s ago: executing program 7 (id=1170): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000100)={0x40, 0x31, 0x19, "91088f7006dc47b9a31e9a0eeb32ab4ffd14601b6059ce0000"}, 0x0, 0x0}) 2.24143634s ago: executing program 5 (id=1173): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x3a) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000500)={0x0, 0x1, 0x6, @multicast}, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x40f, &(0x7f0000000000)={0x0, 0x0, 0x71, 0x2}) (async) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000240)={{r0}, 0x7, &(0x7f00000001c0)=[0xfe1, 0x9, 0x1, 0x2, 0x8, 0x8000000000000000, 0x401], 0x2, 0x0, 0x1}) ioctl$FE_READ_SIGNAL_STRENGTH(r4, 0x80026f47, &(0x7f0000000180)) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x8, @local, 0x9}, 0x1c) (async) sendto$inet6(r2, 0x0, 0x0, 0x2000c000, &(0x7f00000003c0)={0xa, 0x4e25, 0xc9, @local, 0x4000001}, 0x1c) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES8=r0, @ANYRESHEX=r1, @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="ad2a2396fcd009dea47ff8b9dab8d87eb0e04cf64323af8872c942a9fd82ccf29a3d7e087230a8c7d9df99c3d462932ca1fe1a46d0ca2a26167ee609410c82942b12257e05290c9a1f8fac013a1db58718377d042a2f3315b96a4e6bd6", @ANYRES32=r2], 0x8) 2.139158259s ago: executing program 5 (id=1174): mknod$loop(0x0, 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x30000, 0x0) 2.109189377s ago: executing program 9 (id=1175): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0xc00, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @phonet={0x23, 0x9, 0xf7, 0x4}, @in={0x2, 0x4e23, @multicast2}, @ethernet={0x1, @random="da6aaf115d91"}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x8, 0x71}) (async) read$FUSE(r0, &(0x7f00000025c0)={0x2020}, 0x2020) 2.029616506s ago: executing program 5 (id=1176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}}, 0x448d0) (fail_nth: 4) 1.96149666s ago: executing program 9 (id=1177): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x2d) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000066c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x2, {0x2, 0x0, 0x10001, 0x10000, 0x0, 0x3, {0x80000000000000, 0x0, 0x400000, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000800)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x26b66926}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x2203, 0x0) 1.567623457s ago: executing program 5 (id=1178): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x4) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da8671000905065abf0300000009058202"], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x4) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da8671000905065abf0300000009058202"], 0x0) (async) 1.122937403s ago: executing program 9 (id=1179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xeeee0000, 0x1000, 0xc, 0x37, 0x7, 0xc4, 0x0, 0x0, 0x45, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x1, 0x0, 0x9, 0x0, 0x3, 0x0, 0x4}, {0x6000, 0xffff1000, 0xa, 0x0, 0x0, 0x4, 0x0, 0xf1, 0x0, 0x3c}, {0xffff1000, 0x0, 0x0, 0x78, 0x5, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0x0, 0x10000, 0xc, 0x4, 0x0, 0x9, 0xa1, 0x28}, {0x0, 0x6000, 0x4, 0x0, 0x0, 0x74, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0xdddd1000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xeeee8000, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) 709.304828ms ago: executing program 8 (id=1180): r0 = socket$kcm(0x10, 0x5, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001f80)=ANY=[@ANYBLOB="44000000020101020000000000000000020000050c001980080001000a010000240001800c000280050001003a0000001400018008000100000020f2afbd1d4fcce30001"], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x8c4) close(r0) socket$kcm(0x10, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/reserved_size', 0x8000, 0x90) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000), 0x400000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@directio}, {@ignoreqv}, {@directio}, {@access_client}], [{@context={'context', 0x3d, 'system_u'}}]}}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x200000) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)="5c00000013006bcc9e3be35c6e17aa33074b866c1d0000007ea60864160af3653c000cc0080008000000000000001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037aef751022297e786a6d20010000420000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004084) 558.504582ms ago: executing program 9 (id=1181): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x838, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0xc, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffff8, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000009c0)="54c7130eaf1ca3dedb9d55558fd16dbda7d6738c0e2b86a166ffcb3159162f8503efdbce4b3bc8ebebaaea2c3b657ae0b59b4ab6d26401b11dd8e9ffcb841b0402ac2d709ca854980ea4a1952ea60f0f82d88b3d08f4d61ae17dda042c64e21a7a15b8ab53ff26b9bcd8dc46989f5bf9199627e91fee5a3ff053c2b9097a8efba49b2427f0e8ba1017c7517a35fa36a4e258378e2b68f82a39c928c6cf2512d72b427f28199aebe7532793431e8429d84d94c9b16843eec23e30b900f76a7d0a6a03fcc63ff7378298fe4f624610579993d34a20f05716351189dcd4688c5b005724ce90c41f6792962e1c4424b8da7478b0ca31e9dd35411a29169cc1ea2008ae8a61634a70aa875bd39831207c5b664cf65ba0f283281ff78d7702660c067ef1c2a7ab5181ace071a5768619bd6e24a43b0778b33f1d06b763336d85e31bfa83d679fea9abefd146695b9586abf829b44cb4094c82e23d81a7d9962180899cc0a7b2ee7df234bc5f7cbf53d2b1819075e5143e6744d14e0080000000000000c593bed0f799886824ff41f499b6812850273d04ed44cea50d3e7019ada5b6342ea378df700fe826b1e918538f1d98a73503b6aff148de6c454d0de9080000005298e38d41a0a35472632144c53738b271d19671f962c8084319da96b0533dca42527e88942bef8c19a14cce1338828e4fc8b729b0503b182641db69f91d4d8d83a3636ba1e56564f43b71a0aaea82937ee5c84eb9af29a7a5158bbce2e3ba4026961cf15b47d0e42b9544dd0af0064818096ec48a6c7b26698919e8303daf8d06c5317f92fbd601deb5562247bd3b0a5cfb7c2192ea4ebe06d8d0f093e5e9d838cc5215963df8f315aaeb2e54547cbd651675ab4557c18c4fdcb0adff2a112efd8a30ade408351fb116299570eecf838733a81b45f646e4fdc4f97cd51392e664d4b44e7f9b8531f33c227993c1edeaed5315cc32cda5d643fa352a706cc9242405e5a807029f886b4240f3227e95635c5eedf11ce9615b60a25a8ca788c13b920f262b6745203fd244428fda8c88eb0b7b4457b93ec6b85b2074e8ad246ae1765cfa4835791465bb0b8dd13d0c10cbb45c64620c636fcef73738dfa121052c7d352a95ca06c33a785fabac39faf052b073f059e8a2d13c5063d5a1295799df4626b2e9b025559ae23ae419191be4d121ef471b53e5f70a8d40b7346db768c2663093ad410e45b40afc3470e2170e098ae214f17ba34477e5d752977fd5015d2e0b8cfbc503c6e5318be329603e4717e660bd9d33c72430a2878f283f1cdda0c9f08f3ea2f1ef6f983e7902c858f5cf670cad4b70002521f19bef11f685f5aa4a6913699ee34e364b290e7392b43d18ef57083742dbfee44dfe0111eabc06fd875c9fe18bd36a89ac88df5e79ec576649d17f3fd80dfb546e75bd21ffea75af9cf59398e7d6d66dee5fd624d9f502d627c46ae35295fa36b754ef1b13deb0653e177da828439b2140c9cea9d98b3adf5871f98c5dd24adc150f0ffee9043c43d138071c4974bc72891f760d24b8a6619670d60224c84c97764b340167a79e87358c912c81b7d9337c2eeba2b700354d8bb4e942d7e8b35a3fc7df172b233ea425c1218b255fcfdabbc2e2429dc8ed0acbf395f976eb6d4f35a6da8673aad6e67a26399c45112128f0b0f548692e0ce7b2302d9bb921448968f33bccddc9436673425bc1bf1558c05f709e12fbd60e9da3e33aa21f04ec4078fbaffa779471ffba3f8d313078e5d8d1b85c4ea505b5710bd2bb3afe20fedb5e3eee9190ee50e3edd56202b2c1c5658dac1a68238a4790a31927db0c6c71e6f21d6579f8471299a9410dc32b089a92899ffcc39a5575319ac7cdee7e9d60d17e121c21579eea8b72f048be1690c05b102d1792fd0724318e9a1dbe90b80b7c382e07a2031d710e777352e399ef9d8ff086d16bb40d8cc4bc2cb382b54ab4499a232cbaeb7319121c76ee17161b092ef69c1f3d90640b9a36a834307edc451fcc864f8ae333d63cbdc066fc8f81459e6b40331b3ea7178d4e3d8d6a2ff3532f6da5bbf27cd91124f5bb00f3e00d9ce8cddfe6131f74491867d071664ebbda5c8645a12af625374de4bac99a60bd38b465a89e36899fd38ddd5a087ec06f1ad7c740519ac7a8cd0d67db3ac8e84990fe0080308a81a2e5d5d8981fcc151b5fa9b4c3f84377961cfbcdbc087ee444af4ce4d66b647a0a32cea0a6c969630c936dfc124c84a3f9cf618901109e6dbe756ecdd28091de799ed401218d3d51ae7897327e1b776922e1193465c1e128740aa1766fe65b921f314fbedcb16a614217", 0x677}], 0x1) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 558.296927ms ago: executing program 8 (id=1182): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x2, {0x2, 0x0, 0x10001, 0x10000, 0x0, 0x3, {0x80000000000000, 0x0, 0x400000, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000800)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x26b66926}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x2203, 0x0) 226.150573ms ago: executing program 7 (id=1188): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000001c0)={'pcmmio\x00', [0x5, 0xcc, 0x9, 0x0, 0xffff67d8, 0x7fffffff, 0x7, 0x7f, 0xb401, 0x8, 0x3, 0x82d, 0x4, 0x0, 0x80, 0x40, 0x286, 0x6, 0x7ff, 0x1, 0xf, 0x4, 0x8, 0xffffffa9, 0xc312, 0x4, 0x3ff, 0xe, 0x6d, 0x7, 0x0, 0xfffffffd]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000040)=0x40, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg$inet6(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001340)='\'', 0x7ab8}], 0x1}}], 0x1, 0x0) 225.972581ms ago: executing program 9 (id=1189): r0 = socket(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc050) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) writev(r0, &(0x7f0000000680)=[{&(0x7f00000000c0)="b6e57a053c2242e5ea36a3685c3c228ef2a36c094ca6bbb3a7524386c14ebc709fb43a05fbae234cc0c69ed76300c67ad2390ac104e66a88d82a77607068bf340c3e387090915a1c41571650c7ef20e17b3fd5cde09458f23d408c76179af87a711a5c3ef8a51a368ea6165f6629773b54e86c486e3cd30f4bb9ddd742af491e3f0b52d96eca2c506723ed9ece0e94c580a75f59ef336f3893194562ec72a4c4feceda9bc99160ed38c501f1aed591043590c67e940a0b3aabb3408bc0d667fe685507c4f65329349455f2766f9da8823f9e7c716f87a07bbd1ab1c43187a996", 0xe0}, {&(0x7f00000001c0)="bca6d95582b9b51650cc8706675d243a8525ae88daf30ae6c9fb72c0776ef23807c89190c7a31eae731437b075a86ffcd592d6c673b10a0873c7afb245fedd8365e2f2438650d60e300f7e0f0b320f5b2a764934a820c6a8d8bc75b2de723b81848d92fab5b73b1e8bc6ad84f97a8dec4ae2b7c4729c15f59569ddabed4b2e716e31f1d33085934929c18aabb40b6d4b5ee18b19d3caf8ebf388cd38543e9bfdeb342173e40c9c82a612eb25f0ff1523d158901c5310f999d539633d95631abc84fc8242befc3c6bd1445b3958a8e3f0feaf200254eb1b4f288e74c32bcd0de11b484e68931258625bf4b93e32b054ee87", 0xf1}, {&(0x7f00000002c0)="2bfe1c360809028e6a73599a93e65a2343779371f417c7e4423a4db286e89514f297368b14449cc0cd40dbef6a69a3e866f3fc97412295319696fe2cebc1239dd1f949c60e607bc2d4f7cdfd41e6e6ee6663d26dd78cfd161679305c5240d8007ec1eeec92a29088cda0f7c5e69fe9427fd5c334d3c315c87811c36db832ac14fa3b1db81d172d8d3bdef492286c249caea83f7e52d18c6c9d91b737bd14eda57b83c8190a777dfb4b694573470d05d7da", 0xb1}, {&(0x7f0000000380)="4ff44f480b8e495d01d29faa4c0e83fdf30ed21f312f3786b363b2ad5daa264961c45944b9d538e89d1855747fff88b3826c3cd5aa720422e8a4ca5790fb017bb55106b018133a5550571b5eb44def30a40b3ed77e3d022d5d5226db184fecba05169dc80e11d3b389c65592b65cbcf55d66bb8be21015e87b1749824cb899273aead5a1f65d0659847574dd931934875818899399eb9dc2233eea573126ebc036ac08fd0273743f6dc98762ac8114969e5f36934e3d6bec032c955bba34d83eb819a9f7e5f2db7deb9528c3368abc", 0xcf}, {&(0x7f0000000000)="848c376b49ca3649c373b818e990cc55c7a335aadbc924ff33984db8b0b2450284d26b7b151c1ab05873f55192f9298886892d5ac470e99141adf8a142418bc5a72dba460f", 0x45}, {&(0x7f0000000480)="cc5561872d0fc4a092cb99be1b81696a28244972a0bbb33e6f4790e846a61a8fec86f91248b1740d17f1e018be630374be9e2288e6f50383895aefb310258971cbff6a50cf964390302fd69460d486ee6e79eb11e8c1f46854332b29ce57b00c09138ef3c88d3ab89f1333c50014989c1a9e6e6807c1b6afae016e033f21a1d2de08f0ec7b907b1157bb43edda25bbaff015554e", 0x94}], 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000a40000000000a010000000800020005000000050001000040000008000800ac1e00010800070064010101"], 0x34}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'pimreg\x00', &(0x7f0000000580)=@ethtool_drvinfo={0x3, "1f54d18703cc5a48f03db56f16c7395766b94a47ad4b2121ab921de003fda20d", "6c145f10385bfeaae3b0b911ce9d20c9e0897ce0c06a8c726f82227b54580eb0", "78f36de050317ab351653b0e5effa71c13397654c7326b434d0377438f4180ad", "694a51d4ae35798fa1986471a5f792db17a09a7411cc083fd92d730e98e1c49a", "dc36dc9ee5cc307e6dae5a6866dd6e09f6b9a098b0c975d60edfa38a44d17b8d", "0b94f77915cdd5166840b968", 0xa, 0x20008, 0x5, 0x5, 0xfffc}}) 0s ago: executing program 8 (id=1190): r0 = syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_disconnect(r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024a", 0x55}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001900010025bd700000000000e00000020000000000000000000000000000000000000000000000000000000000000000ffff00000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000050000000000000040000000000904000000000300000000000000ac09800000000000fcffff00200000000000005c49000000fbffffffffffffb6389ea45f9a90b6000000000000000000000000000000000ce8ad14d69f5e5387a9cac9390a0000000000000000000800000000000000000000000000004b"], 0xb8}}, 0x2c004010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000080)=0x1b, 0x4) sendto$inet6(r3, &(0x7f00000000c0)="26a757208dfd7c2e695f05eca27904afc7789197712465003a9621f6ef13b022ac2cd77c5e5ae8a304de170b9e54bf62003c0580ae9e27c53b91f70a23096a516e804dcf9b48074f4b45cab58e76826558b1df48a374ea092f13c7cfdd1c26387be3cb085135c5638d29063a0bebee88088cb70b5450c5bb265dcc2595a238ed5183fdba75006ca53c5ecf0bb12b24294d144f580c3848b3abf78718c64d6b918d17ace6c4dd09fc22e489062a2a0561cd86b9b192a963caa53ef444b5efb693a13053a25e0759ea4e6c9585f550e004e770b6a3f5e396f2412fc556c54c3d4a4282872b18b8041a372cdcb2d04994a2360b4769a5bb05", 0xffffffffffffff91, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x2, @mcast1, 0x4}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000040)=0x4, 0x4) recvmmsg(r3, &(0x7f000000a100)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40002040, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4) kernel console output (not intermixed with test programs): 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.792456][ T5932] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.820311][ T5932] usb 9-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 271.834203][ T5932] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.849067][ T5932] usb 9-1: Product: syz [ 271.853457][ T5932] usb 9-1: Manufacturer: syz [ 271.859592][ T5932] usb 9-1: SerialNumber: syz [ 272.096956][ T5932] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 272.125828][ T5932] usb 9-1: MIDIStreaming interface descriptor not found [ 272.217429][ T5932] usb 9-1: USB disconnect, device number 14 [ 272.965588][ T5932] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 272.985587][ T5939] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 273.015537][ T5953] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 273.117370][ T5932] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.127695][ T5932] usb 9-1: config 0 interface 0 has no altsetting 0 [ 273.136798][ T5939] usb 8-1: Using ep0 maxpacket: 8 [ 273.146522][ T5939] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.146542][ T5932] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 273.157018][ T5939] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 273.157069][ T5939] usb 8-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 273.157094][ T5939] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.171933][ T5939] usb 8-1: config 0 descriptor?? [ 273.197374][ T5953] usb 6-1: Using ep0 maxpacket: 16 [ 273.211270][ T5939] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 273.221681][ T5953] usb 6-1: config 0 has an invalid interface number: 110 but max is 0 [ 273.231654][ T5932] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.239841][ T5953] usb 6-1: config 0 has no interface number 0 [ 273.248349][ T5932] usb 9-1: Product: syz [ 273.252617][ T5953] usb 6-1: config 0 interface 110 has no altsetting 0 [ 273.260478][ T5932] usb 9-1: Manufacturer: syz [ 273.266951][ T5932] usb 9-1: SerialNumber: syz [ 273.273661][ T5953] usb 6-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=f3.42 [ 273.283666][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.292899][ T5932] usb 9-1: config 0 descriptor?? [ 273.298306][ T5953] usb 6-1: Product: syz [ 273.303071][ T5953] usb 6-1: Manufacturer: syz [ 273.310741][ T5932] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 273.319730][ T5953] usb 6-1: SerialNumber: syz [ 273.329831][ T5953] usb 6-1: config 0 descriptor?? [ 273.335252][ T5932] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 273.346580][ T5932] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 273.356131][ T5932] usb 9-1: media controller created [ 273.375981][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 273.426217][ T9077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.437587][ T9077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.448492][ T5932] DVB: Unable to find symbol tda10046_attach() [ 273.454724][ T5932] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 273.463498][ T5932] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 273.480604][ T5939] usb 8-1: USB disconnect, device number 29 [ 273.522089][ T5932] dvb_usb_m920x 9-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 273.539883][ T5932] usb 9-1: USB disconnect, device number 15 [ 273.575016][ T5953] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 273.584934][ T5953] gspca_sn9c20x: Write register 1000 failed -71 [ 273.592260][ T5953] gspca_sn9c20x: Device initialization failed [ 273.598899][ T5953] gspca_sn9c20x 6-1:0.110: probe with driver gspca_sn9c20x failed with error -71 [ 273.622431][ T5953] usb 6-1: USB disconnect, device number 40 [ 274.197952][ T9089] FAULT_INJECTION: forcing a failure. [ 274.197952][ T9089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.211702][ T9089] CPU: 0 UID: 0 PID: 9089 Comm: syz.5.863 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.211735][ T9089] Tainted: [L]=SOFTLOCKUP [ 274.211743][ T9089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 274.211754][ T9089] Call Trace: [ 274.211763][ T9089] [ 274.211771][ T9089] dump_stack_lvl+0xe8/0x150 [ 274.211806][ T9089] should_fail_ex+0x412/0x560 [ 274.211835][ T9089] _copy_to_user+0x31/0xb0 [ 274.211862][ T9089] rfcomm_dev_ioctl+0x1246/0x21d0 [ 274.211901][ T9089] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 274.211941][ T9089] ? tomoyo_path_number_perm+0x219/0x630 [ 274.211971][ T9089] ? do_vfs_ioctl+0x1166/0x1530 [ 274.211994][ T9089] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 274.212021][ T9089] sock_do_ioctl+0x101/0x320 [ 274.212051][ T9089] ? __pfx_sock_do_ioctl+0x10/0x10 [ 274.212076][ T9089] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 274.212113][ T9089] sock_ioctl+0x5c6/0x7f0 [ 274.212141][ T9089] ? __pfx_sock_ioctl+0x10/0x10 [ 274.212167][ T9089] ? __fget_files+0x2a/0x420 [ 274.212191][ T9089] ? __fget_files+0x3a0/0x420 [ 274.212225][ T9089] ? __fget_files+0x2a/0x420 [ 274.212254][ T9089] ? bpf_lsm_file_ioctl+0x9/0x20 [ 274.212275][ T9089] ? __pfx_sock_ioctl+0x10/0x10 [ 274.212299][ T9089] __se_sys_ioctl+0xfc/0x170 [ 274.212321][ T9089] do_syscall_64+0x14d/0xf80 [ 274.212339][ T9089] ? trace_irq_disable+0x3b/0x150 [ 274.212363][ T9089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.212383][ T9089] ? clear_bhb_loop+0x40/0x90 [ 274.212408][ T9089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.212428][ T9089] RIP: 0033:0x7f58e999c799 [ 274.212448][ T9089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.212465][ T9089] RSP: 002b:00007f58e7bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.212486][ T9089] RAX: ffffffffffffffda RBX: 00007f58e9c15fa0 RCX: 00007f58e999c799 [ 274.212501][ T9089] RDX: 0000200000000100 RSI: 00000000800452d2 RDI: 0000000000000004 [ 274.212514][ T9089] RBP: 00007f58e7bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 274.212526][ T9089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.212537][ T9089] R13: 00007f58e9c16038 R14: 00007f58e9c15fa0 R15: 00007ffdf5fa3c18 [ 274.212568][ T9089] [ 274.585522][ T5908] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 274.686946][ T5939] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 274.715539][ T5908] usb 9-1: device descriptor read/64, error -71 [ 274.840563][ T5939] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 274.850760][ T5939] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.859071][ T5939] usb 8-1: Product: syz [ 274.863642][ T5939] usb 8-1: Manufacturer: syz [ 274.871461][ T5939] usb 8-1: SerialNumber: syz [ 274.880218][ T5939] usb 8-1: config 0 descriptor?? [ 274.955622][ T5908] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 275.095559][ T5908] usb 9-1: device descriptor read/64, error -71 [ 275.206122][ T5908] usb usb9-port1: attempt power cycle [ 275.485530][ T5932] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 275.503658][ T5939] usb 8-1: Firmware version (0.0) predates our first public release. [ 275.513574][ T5939] usb 8-1: Please update to version 0.2 or newer [ 275.526807][ T5939] usb 8-1: Firmware: build [ 275.565662][ T5908] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 275.597205][ T5908] usb 9-1: device descriptor read/8, error -71 [ 275.655736][ T5932] usb 6-1: Using ep0 maxpacket: 8 [ 275.671951][ T5932] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.673939][ T9104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.692312][ T9104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.702605][ T5932] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 275.715928][ T5932] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 275.726744][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.738872][ T5932] usb 6-1: config 0 descriptor?? [ 275.758313][ T5932] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 275.830623][ T9105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.835835][ T5908] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 275.852399][ T9105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.866223][ T5908] usb 9-1: device descriptor read/8, error -71 [ 275.969505][ T5932] usb 6-1: USB disconnect, device number 41 [ 275.976697][ T5908] usb usb9-port1: unable to enumerate USB device [ 276.134214][ T5939] usb 8-1: USB disconnect, device number 30 [ 276.487449][ T9109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.499303][ T9109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.916819][ T9109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.925983][ T9109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.965594][ T5939] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 277.005615][ T5908] usb 8-1: new full-speed USB device number 31 using dummy_hcd [ 277.117710][ T5939] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.128339][ T5939] usb 6-1: config 0 interface 0 has no altsetting 0 [ 277.138450][ T5939] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 277.147972][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.159512][ T5939] usb 6-1: Product: syz [ 277.163839][ T5939] usb 6-1: Manufacturer: syz [ 277.168641][ T5939] usb 6-1: SerialNumber: syz [ 277.174741][ T5908] usb 8-1: unable to get BOS descriptor or descriptor too short [ 277.185811][ T5939] usb 6-1: config 0 descriptor?? [ 277.190912][ T5908] usb 8-1: not running at top speed; connect to a high speed hub [ 277.207585][ T5939] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 277.218431][ T5908] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 175, changing to 4 [ 277.243779][ T5939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 277.254533][ T5908] usb 8-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 277.266353][ T5939] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 277.275092][ T5908] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.283549][ T5939] usb 6-1: media controller created [ 277.295639][ T5908] usb 8-1: Product: syz [ 277.301434][ T5908] usb 8-1: Manufacturer: syz [ 277.323066][ T5908] usb 8-1: SerialNumber: syz [ 277.329018][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 277.411408][ T5939] DVB: Unable to find symbol tda10046_attach() [ 277.418137][ T5939] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 277.432937][ T5939] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 277.447209][ T5939] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 277.499298][ T5939] usb 6-1: USB disconnect, device number 42 [ 277.569243][ T5908] usb 8-1: selecting invalid altsetting 1 [ 277.592598][ T5908] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 277.610674][ T5908] usb 8-1: selecting invalid altsetting 1 [ 277.618478][ T5908] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 277.633092][ T5908] usb 8-1: selecting invalid altsetting 1 [ 277.708903][ T5908] snd-usb-audio 8-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 277.724712][ T5908] usb 8-1: USB disconnect, device number 31 [ 277.771564][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.365628][ T5939] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 278.546379][ T5939] usb 9-1: Using ep0 maxpacket: 8 [ 278.580497][ T5939] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.603564][ T5939] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 278.634539][ T5939] usb 9-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 278.652549][ T5939] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.683168][ T5939] usb 9-1: config 0 descriptor?? [ 278.707099][ T5939] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 278.998812][ T5932] usb 9-1: USB disconnect, device number 20 [ 279.333132][ T9157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.405501][ T5932] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 279.585489][ T5932] usb 6-1: Using ep0 maxpacket: 32 [ 279.598880][ T5932] usb 6-1: config 5 has an invalid interface number: 137 but max is 0 [ 279.626610][ T5932] usb 6-1: config 5 has no interface number 0 [ 279.639920][ T5932] usb 6-1: config 5 interface 137 has no altsetting 0 [ 279.655512][ T5953] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 279.670843][ T5932] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 279.687080][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.705522][ T5932] usb 6-1: Product: syz [ 279.716200][ T5932] usb 6-1: Manufacturer: syz [ 279.725788][ T5932] usb 6-1: SerialNumber: syz [ 279.825675][ T5953] usb 8-1: Using ep0 maxpacket: 16 [ 279.835097][ T5953] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 213, changing to 11 [ 279.857954][ T5953] usb 8-1: config 0 interface 0 has no altsetting 0 [ 279.872557][ T5953] usb 8-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 279.894607][ T5953] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.925721][ T5953] usb 8-1: Product: syz [ 279.940796][ T5953] usb 8-1: Manufacturer: syz [ 279.958833][ T5953] usb 8-1: SerialNumber: syz [ 279.984425][ T5953] usb 8-1: config 0 descriptor?? [ 280.067776][ T5932] usb 6-1: USB disconnect, device number 43 [ 280.271899][ T5953] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input35 [ 280.475559][ T10] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 280.565548][ T5953] rc_core: IR keymap rc-imon-pad not found [ 280.571552][ T5953] Registered IR keymap rc-empty [ 280.578449][ T5953] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 280.605541][ T5953] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 280.657277][ T5953] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 280.668330][ T10] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 280.686598][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.695974][ T5953] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input36 [ 280.706062][ T10] usb 9-1: Product: syz [ 280.716490][ T10] usb 9-1: Manufacturer: syz [ 280.729160][ T10] usb 9-1: SerialNumber: syz [ 280.748848][ T5953] imon 8-1:0.0: iMON device (15c2:0041, intf0) on usb<8:32> initialized [ 280.764087][ T10] usb 9-1: config 0 descriptor?? [ 281.040384][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.895'. [ 281.051629][ T9177] FAULT_INJECTION: forcing a failure. [ 281.051629][ T9177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.084759][ T9177] CPU: 1 UID: 0 PID: 9177 Comm: syz.5.895 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.084796][ T9177] Tainted: [L]=SOFTLOCKUP [ 281.084804][ T9177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 281.084816][ T9177] Call Trace: [ 281.084824][ T9177] [ 281.084832][ T9177] dump_stack_lvl+0xe8/0x150 [ 281.084869][ T9177] should_fail_ex+0x412/0x560 [ 281.084898][ T9177] _copy_to_user+0x31/0xb0 [ 281.084925][ T9177] simple_read_from_buffer+0xe1/0x170 [ 281.084958][ T9177] proc_fail_nth_read+0x1bb/0x230 [ 281.084988][ T9177] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.085018][ T9177] ? rw_verify_area+0x2a6/0x4d0 [ 281.085056][ T9177] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.085084][ T9177] vfs_read+0x20c/0xa70 [ 281.085113][ T9177] ? fdget_pos+0x246/0x320 [ 281.085144][ T9177] ? __pfx___mutex_lock+0x10/0x10 [ 281.085167][ T9177] ? __pfx_vfs_read+0x10/0x10 [ 281.085200][ T9177] ? __fget_files+0x2a/0x420 [ 281.085230][ T9177] ? __fget_files+0x3a0/0x420 [ 281.085255][ T9177] ? __fget_files+0x2a/0x420 [ 281.085288][ T9177] ksys_read+0x150/0x270 [ 281.085310][ T9177] ? __pfx_ksys_read+0x10/0x10 [ 281.085340][ T9177] do_syscall_64+0x14d/0xf80 [ 281.085360][ T9177] ? trace_irq_disable+0x3b/0x150 [ 281.085384][ T9177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.085404][ T9177] ? clear_bhb_loop+0x40/0x90 [ 281.085428][ T9177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.085447][ T9177] RIP: 0033:0x7f58e995cfce [ 281.085466][ T9177] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 281.085484][ T9177] RSP: 002b:00007f58e7bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 281.085506][ T9177] RAX: ffffffffffffffda RBX: 00007f58e7bf66c0 RCX: 00007f58e995cfce [ 281.085520][ T9177] RDX: 000000000000000f RSI: 00007f58e7bf60a0 RDI: 0000000000000005 [ 281.085532][ T9177] RBP: 00007f58e7bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 281.085544][ T9177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 281.085554][ T9177] R13: 00007f58e9c16038 R14: 00007f58e9c15fa0 R15: 00007ffdf5fa3c18 [ 281.085587][ T9177] [ 281.087276][ T5939] usb 8-1: USB disconnect, device number 32 [ 281.097239][ C1] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 281.340594][ T10] usb 9-1: Firmware version (0.0) predates our first public release. [ 281.365310][ T10] usb 9-1: Please update to version 0.2 or newer [ 281.596460][ T9184] FAULT_INJECTION: forcing a failure. [ 281.596460][ T9184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.610017][ T9184] CPU: 1 UID: 0 PID: 9184 Comm: syz.0.898 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.610053][ T9184] Tainted: [L]=SOFTLOCKUP [ 281.610069][ T9184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 281.610080][ T9184] Call Trace: [ 281.610092][ T9184] [ 281.610101][ T9184] dump_stack_lvl+0xe8/0x150 [ 281.610137][ T9184] should_fail_ex+0x412/0x560 [ 281.610167][ T9184] _copy_from_iter+0x1d3/0x1670 [ 281.610195][ T9184] ? rcu_is_watching+0x15/0xb0 [ 281.610220][ T9184] ? __pfx__copy_from_iter+0x10/0x10 [ 281.610251][ T9184] ? netlink_sendmsg+0x650/0xb40 [ 281.610269][ T9184] ? skb_put+0x11b/0x210 [ 281.610293][ T9184] netlink_sendmsg+0x6c0/0xb40 [ 281.610322][ T9184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.610343][ T9184] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 281.610383][ T9184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.610401][ T9184] sock_sendmsg_nosec+0x112/0x150 [ 281.610433][ T9184] ____sys_sendmsg+0x589/0x8c0 [ 281.610465][ T9184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.610496][ T9184] ? import_iovec+0x73/0xa0 [ 281.610524][ T9184] ___sys_sendmsg+0x2a5/0x360 [ 281.610551][ T9184] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.610609][ T9184] ? __fget_files+0x2a/0x420 [ 281.610636][ T9184] ? __fget_files+0x3a0/0x420 [ 281.610672][ T9184] __x64_sys_sendmsg+0x1bd/0x2a0 [ 281.610698][ T9184] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 281.610731][ T9184] ? __pfx_ksys_write+0x10/0x10 [ 281.610763][ T9184] do_syscall_64+0x14d/0xf80 [ 281.610782][ T9184] ? trace_irq_disable+0x3b/0x150 [ 281.610805][ T9184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.610826][ T9184] ? clear_bhb_loop+0x40/0x90 [ 281.610851][ T9184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.610871][ T9184] RIP: 0033:0x7ff367f9c799 [ 281.610891][ T9184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.610908][ T9184] RSP: 002b:00007ff3661f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.610931][ T9184] RAX: ffffffffffffffda RBX: 00007ff368215fa0 RCX: 00007ff367f9c799 [ 281.610945][ T9184] RDX: 0000000004004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 281.610957][ T9184] RBP: 00007ff3661f6090 R08: 0000000000000000 R09: 0000000000000000 [ 281.610969][ T9184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.610980][ T9184] R13: 00007ff368216038 R14: 00007ff368215fa0 R15: 00007ffe048689f8 [ 281.611012][ T9184] [ 281.879674][ T10] usb 9-1: USB disconnect, device number 21 [ 282.225631][ T5939] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 282.342120][ T9193] NILFS (nbd8): device size too small [ 282.385716][ T5939] usb 6-1: Using ep0 maxpacket: 32 [ 282.396962][ T5939] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.402588][ T9195] syzkaller1: entered promiscuous mode [ 282.430333][ T9195] syzkaller1: entered allmulticast mode [ 282.434788][ T5939] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.462801][ T5939] usb 6-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 282.490247][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.505733][ T5939] usb 6-1: Product: syz [ 282.510143][ T5939] usb 6-1: Manufacturer: syz [ 282.514811][ T5939] usb 6-1: SerialNumber: syz [ 282.780899][ T5939] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 282.806582][ T5939] usb 6-1: MIDIStreaming interface descriptor not found [ 283.006167][ T5939] usb 6-1: USB disconnect, device number 44 [ 283.262194][ T6058] udevd[6058]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.386010][ T10] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 283.550333][ T10] usb 9-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 283.567249][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.585570][ T10] usb 9-1: Product: syz [ 283.595533][ T10] usb 9-1: Manufacturer: syz [ 283.601804][ T10] usb 9-1: SerialNumber: syz [ 283.830304][ T9219] FAULT_INJECTION: forcing a failure. [ 283.830304][ T9219] name failslab, interval 1, probability 0, space 0, times 0 [ 283.848728][ T10] usb 9-1: unit 4 not found! [ 283.856610][ T9219] CPU: 1 UID: 0 PID: 9219 Comm: syz.0.911 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.856643][ T9219] Tainted: [L]=SOFTLOCKUP [ 283.856651][ T9219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.856662][ T9219] Call Trace: [ 283.856670][ T9219] [ 283.856677][ T9219] dump_stack_lvl+0xe8/0x150 [ 283.856713][ T9219] should_fail_ex+0x412/0x560 [ 283.856748][ T9219] should_failslab+0xa8/0x100 [ 283.856773][ T9219] __kmalloc_noprof+0xe8/0x760 [ 283.856805][ T9219] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 283.856842][ T9219] tomoyo_realpath_from_path+0xe3/0x5d0 [ 283.856884][ T9219] ? tomoyo_path_number_perm+0x219/0x630 [ 283.856911][ T9219] tomoyo_path_number_perm+0x246/0x630 [ 283.856940][ T9219] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 283.856969][ T9219] ? __lock_acquire+0x6b5/0x2cf0 [ 283.857011][ T9219] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 283.857052][ T9219] ? __fget_files+0x2a/0x420 [ 283.857084][ T9219] ? __fget_files+0x2a/0x420 [ 283.857109][ T9219] ? __fget_files+0x3a0/0x420 [ 283.857134][ T9219] ? __fget_files+0x2a/0x420 [ 283.857163][ T9219] security_file_ioctl+0xc3/0x2a0 [ 283.857189][ T9219] __se_sys_ioctl+0x47/0x170 [ 283.857213][ T9219] do_syscall_64+0x14d/0xf80 [ 283.857232][ T9219] ? trace_irq_disable+0x3b/0x150 [ 283.857255][ T9219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.857275][ T9219] ? clear_bhb_loop+0x40/0x90 [ 283.857299][ T9219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.857319][ T9219] RIP: 0033:0x7ff367f9c799 [ 283.857339][ T9219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.857364][ T9219] RSP: 002b:00007ff3661f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.857384][ T9219] RAX: ffffffffffffffda RBX: 00007ff368215fa0 RCX: 00007ff367f9c799 [ 283.857397][ T9219] RDX: 0000200000000080 RSI: 000000004008ae89 RDI: 0000000000000005 [ 283.857409][ T9219] RBP: 00007ff3661f6090 R08: 0000000000000000 R09: 0000000000000000 [ 283.857421][ T9219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.857431][ T9219] R13: 00007ff368216038 R14: 00007ff368215fa0 R15: 00007ffe048689f8 [ 283.857462][ T9219] [ 283.857487][ T9219] ERROR: Out of memory at tomoyo_realpath_from_path. [ 284.168966][ T10] usb 9-1: USB disconnect, device number 22 [ 284.209229][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.283235][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.912'. [ 284.604048][ T9229] input: syz0 as /devices/virtual/input/input37 [ 285.050228][ T9247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.096057][ T9247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.261922][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'. [ 285.348271][ T5939] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 285.394052][ T9253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.406659][ T9253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.515494][ T5939] usb 6-1: Using ep0 maxpacket: 32 [ 285.523221][ T5939] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.534813][ T5939] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.554497][ T5939] usb 6-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 285.565309][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.573874][ T5939] usb 6-1: Product: syz [ 285.578795][ T5939] usb 6-1: Manufacturer: syz [ 285.583582][ T5939] usb 6-1: SerialNumber: syz [ 285.812749][ T5939] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 285.820695][ T5939] usb 6-1: MIDIStreaming interface descriptor not found [ 285.919475][ T5939] usb 6-1: USB disconnect, device number 45 [ 285.940386][ T9257] syzkaller1: entered promiscuous mode [ 285.948804][ T9257] syzkaller1: entered allmulticast mode [ 285.963301][ T9257] netlink: 'syz.8.924': attribute type 27 has an invalid length. [ 286.082132][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.483547][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'. [ 286.603562][ T9280] netlink: 88 bytes leftover after parsing attributes in process `syz.8.928'. [ 286.810825][ T9289] FAULT_INJECTION: forcing a failure. [ 286.810825][ T9289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.828345][ T9289] CPU: 1 UID: 0 PID: 9289 Comm: syz.5.933 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.828380][ T9289] Tainted: [L]=SOFTLOCKUP [ 286.828388][ T9289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 286.828400][ T9289] Call Trace: [ 286.828408][ T9289] [ 286.828416][ T9289] dump_stack_lvl+0xe8/0x150 [ 286.828450][ T9289] should_fail_ex+0x412/0x560 [ 286.828479][ T9289] _copy_from_user+0x2d/0xb0 [ 286.828506][ T9289] wext_handle_ioctl+0xc7/0x1d0 [ 286.828540][ T9289] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 286.828567][ T9289] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 286.828605][ T9289] sock_ioctl+0x159/0x7f0 [ 286.828634][ T9289] ? __pfx_sock_ioctl+0x10/0x10 [ 286.828661][ T9289] ? __fget_files+0x2a/0x420 [ 286.828686][ T9289] ? __fget_files+0x3a0/0x420 [ 286.828711][ T9289] ? __fget_files+0x2a/0x420 [ 286.828740][ T9289] ? bpf_lsm_file_ioctl+0x9/0x20 [ 286.828760][ T9289] ? __pfx_sock_ioctl+0x10/0x10 [ 286.828785][ T9289] __se_sys_ioctl+0xfc/0x170 [ 286.828808][ T9289] do_syscall_64+0x14d/0xf80 [ 286.828826][ T9289] ? trace_irq_disable+0x3b/0x150 [ 286.828849][ T9289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.828869][ T9289] ? clear_bhb_loop+0x40/0x90 [ 286.828894][ T9289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.828914][ T9289] RIP: 0033:0x7f58e999c799 [ 286.828933][ T9289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.828951][ T9289] RSP: 002b:00007f58e7bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.828973][ T9289] RAX: ffffffffffffffda RBX: 00007f58e9c15fa0 RCX: 00007f58e999c799 [ 286.828987][ T9289] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000004 [ 286.829000][ T9289] RBP: 00007f58e7bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 286.829012][ T9289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.829023][ T9289] R13: 00007f58e9c16038 R14: 00007f58e9c15fa0 R15: 00007ffdf5fa3c18 [ 286.829054][ T9289] [ 287.192132][ T9293] netlink: 48 bytes leftover after parsing attributes in process `syz.8.936'. [ 287.432807][ T9303] netlink: 16 bytes leftover after parsing attributes in process `syz.7.939'. [ 287.738743][ T9320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.749618][ T9320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.997888][ T5932] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 288.170053][ T5932] usb 8-1: Using ep0 maxpacket: 32 [ 288.179262][ T5932] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 288.181238][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.949'. [ 288.189178][ T5932] usb 8-1: config 0 has no interface number 0 [ 288.207677][ T5932] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 288.219350][ T5932] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.227922][ T5932] usb 8-1: Product: syz [ 288.232196][ T5932] usb 8-1: Manufacturer: syz [ 288.237983][ T5932] usb 8-1: SerialNumber: syz [ 288.244972][ T5932] usb 8-1: config 0 descriptor?? [ 288.345641][ T10] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 288.456302][ T5956] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 288.508197][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 288.515336][ T10] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 288.530153][ T10] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 288.540602][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 288.548166][ T10] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 288.560119][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.574609][ T10] usb 9-1: config 0 descriptor?? [ 288.641271][ T5956] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 288.662176][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.682244][ T5956] usb 6-1: Product: syz [ 288.687006][ T5956] usb 6-1: Manufacturer: syz [ 288.691798][ T5956] usb 6-1: SerialNumber: syz [ 288.704653][ T5956] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 288.791071][ T9328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.802179][ T5953] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 288.814082][ T9328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.822356][ T9342] netlink: 'syz.0.953': attribute type 3 has an invalid length. [ 288.964055][ T9344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.973641][ T9344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.054432][ T10] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 289.064158][ T10] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 289.072066][ T10] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 289.081410][ T10] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 289.089524][ T10] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 289.101957][ T10] corsair-cpro 0003:1B1C:0C10.0007: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.8-1/input0 [ 289.181127][ T10] corsair-cpro 0003:1B1C:0C10.0007: probe with driver corsair-cpro failed with error -90 [ 289.244898][ T5956] usb 6-1: USB disconnect, device number 46 [ 289.264709][ T10] usb 9-1: USB disconnect, device number 23 [ 289.558009][ T9348] comedi comedi3: ni_at_a2150: I/O port conflict (0x4004f27,28) [ 289.702353][ T9352] netlink: 36 bytes leftover after parsing attributes in process `syz.0.957'. [ 289.711756][ T9352] netlink: 16 bytes leftover after parsing attributes in process `syz.0.957'. [ 289.724161][ T9352] netlink: 36 bytes leftover after parsing attributes in process `syz.0.957'. [ 289.734831][ T9352] netlink: 36 bytes leftover after parsing attributes in process `syz.0.957'. [ 289.905850][ T5953] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 289.930331][ T5953] ath9k_htc: Failed to initialize the device [ 289.958448][ T5956] usb 6-1: ath9k_htc: USB layer deinitialized [ 290.265622][ T5956] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 290.425722][ T5956] usb 6-1: Using ep0 maxpacket: 16 [ 290.433018][ T5956] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.444067][ T5956] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 290.456308][ T5956] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 290.465825][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.474436][ T5956] usb 6-1: Product: syz [ 290.478961][ T5956] usb 6-1: Manufacturer: syz [ 290.483654][ T5956] usb 6-1: SerialNumber: syz [ 290.491962][ T5956] usb 6-1: config 0 descriptor?? [ 290.626358][ T5931] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 290.762052][ T5932] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 290.787949][ T5932] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 290.807380][ T5932] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 290.822004][ T5931] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 290.838690][ T5931] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.849027][ T5932] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 290.871891][ T5931] usb 9-1: config 0 descriptor?? [ 290.893593][ T5932] usb 8-1: USB disconnect, device number 33 [ 290.910252][ T5931] cp210x 9-1:0.0: cp210x converter detected [ 290.921877][ T9375] netlink: 'syz.7.962': attribute type 11 has an invalid length. [ 291.191133][ T9380] FAULT_INJECTION: forcing a failure. [ 291.191133][ T9380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.225492][ T9380] CPU: 0 UID: 0 PID: 9380 Comm: syz.7.963 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.225528][ T9380] Tainted: [L]=SOFTLOCKUP [ 291.225536][ T9380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 291.225549][ T9380] Call Trace: [ 291.225558][ T9380] [ 291.225568][ T9380] dump_stack_lvl+0xe8/0x150 [ 291.225616][ T9380] should_fail_ex+0x412/0x560 [ 291.225652][ T9380] _copy_from_iter+0x1d3/0x1670 [ 291.225686][ T9380] ? __pfx__copy_from_iter+0x10/0x10 [ 291.225719][ T9380] ? sock_alloc_send_pskb+0x896/0x990 [ 291.225751][ T9380] ? __pfx__copy_from_iter+0x10/0x10 [ 291.225783][ T9380] copy_page_from_iter+0x220/0x2d0 [ 291.225811][ T9380] skb_copy_datagram_from_iter+0x306/0x710 [ 291.225846][ T9380] tun_get_user+0xc5c/0x4300 [ 291.225894][ T9380] ? __pfx_tun_get_user+0x10/0x10 [ 291.225933][ T9380] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 291.225964][ T9380] ? lockdep_hardirqs_on+0x7a/0x110 [ 291.225983][ T9380] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 291.226012][ T9380] ? save_netdev_trace_buffer+0x4e2/0x610 [ 291.226040][ T9380] ? ref_tracker_alloc+0x35c/0x4c0 [ 291.226058][ T9380] ? tun_chr_write_iter+0x60/0x210 [ 291.226096][ T9380] ? vfs_write+0x61d/0xb90 [ 291.226124][ T9380] ? ksys_write+0x150/0x270 [ 291.226142][ T9380] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 291.226170][ T9380] ? tun_get+0x1c/0x2f0 [ 291.226195][ T9380] ? tun_get+0x1c/0x2f0 [ 291.226228][ T9380] ? tun_get+0x1c/0x2f0 [ 291.226262][ T9380] tun_chr_write_iter+0x113/0x210 [ 291.226295][ T9380] vfs_write+0x61d/0xb90 [ 291.226321][ T9380] ? __pfx_vfs_write+0x10/0x10 [ 291.226342][ T9380] ? __fget_files+0x2a/0x420 [ 291.226378][ T9380] ksys_write+0x150/0x270 [ 291.226401][ T9380] ? __pfx_ksys_write+0x10/0x10 [ 291.226431][ T9380] do_syscall_64+0x14d/0xf80 [ 291.226449][ T9380] ? trace_irq_disable+0x3b/0x150 [ 291.226474][ T9380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.226488][ T9380] ? clear_bhb_loop+0x40/0x90 [ 291.226506][ T9380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.226521][ T9380] RIP: 0033:0x7f026bb9c799 [ 291.226552][ T9380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.226570][ T9380] RSP: 002b:00007f026ca5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 291.226590][ T9380] RAX: ffffffffffffffda RBX: 00007f026be15fa0 RCX: 00007f026bb9c799 [ 291.226604][ T9380] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000004 [ 291.226620][ T9380] RBP: 00007f026ca5b090 R08: 0000000000000000 R09: 0000000000000000 [ 291.226633][ T9380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 291.226642][ T9380] R13: 00007f026be16038 R14: 00007f026be15fa0 R15: 00007ffff7a04aa8 [ 291.226664][ T9380] [ 291.546733][ T9370] NILFS (nbd8): device size too small [ 291.571379][ T5931] usb 9-1: cp210x converter now attached to ttyUSB0 [ 291.768901][ T5953] usb 9-1: USB disconnect, device number 24 [ 291.780301][ T5953] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 291.820159][ T5953] cp210x 9-1:0.0: device disconnected [ 292.055259][ T9393] netlink: 132 bytes leftover after parsing attributes in process `syz.0.967'. [ 292.285981][ T9406] nbd: must specify at least one socket [ 292.499482][ T9411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.508711][ T9411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.909793][ T5932] usb 6-1: USB disconnect, device number 47 [ 293.227222][ T9421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.976'. [ 293.431325][ T9427] FAULT_INJECTION: forcing a failure. [ 293.431325][ T9427] name failslab, interval 1, probability 0, space 0, times 0 [ 293.460904][ T9427] CPU: 0 UID: 0 PID: 9427 Comm: syz.0.979 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.460939][ T9427] Tainted: [L]=SOFTLOCKUP [ 293.460946][ T9427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 293.460958][ T9427] Call Trace: [ 293.460966][ T9427] [ 293.460975][ T9427] dump_stack_lvl+0xe8/0x150 [ 293.461010][ T9427] should_fail_ex+0x412/0x560 [ 293.461040][ T9427] should_failslab+0xa8/0x100 [ 293.461065][ T9427] __kmalloc_noprof+0xe8/0x760 [ 293.461098][ T9427] ? security_task_alloc+0x4d/0x330 [ 293.461132][ T9427] security_task_alloc+0x4d/0x330 [ 293.461161][ T9427] copy_process+0x1cf3/0x4430 [ 293.461213][ T9427] ? copy_process+0xd68/0x4430 [ 293.461256][ T9427] ? __pfx_copy_process+0x10/0x10 [ 293.461296][ T9427] ? mutex_init_lockdep+0xdf/0x110 [ 293.461322][ T9427] vhost_task_create+0x1f9/0x380 [ 293.461349][ T9427] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 293.461372][ T9427] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 293.461398][ T9427] ? __pfx_vhost_task_create+0x10/0x10 [ 293.461432][ T9427] ? __pfx_vhost_task_fn+0x10/0x10 [ 293.461475][ T9427] ? __lock_acquire+0x6b5/0x2cf0 [ 293.461513][ T9427] kvm_mmu_post_init_vm+0x14c/0x300 [ 293.461542][ T9427] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 293.461578][ T9427] ? __mutex_trylock_common+0x158/0x260 [ 293.461605][ T9427] ? __pfx___mutex_trylock_common+0x10/0x10 [ 293.461628][ T9427] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 293.461654][ T9427] ? register_lock_class+0x31/0x2e0 [ 293.461688][ T9427] ? __lock_acquire+0x6b5/0x2cf0 [ 293.461726][ T9427] ? kasan_quarantine_put+0xbb/0x1f0 [ 293.461758][ T9427] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 293.461790][ T9427] ? do_raw_write_lock+0x11d/0x260 [ 293.461832][ T9427] kvm_vcpu_ioctl+0xa62/0xfd0 [ 293.461861][ T9427] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 293.461881][ T9427] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 293.461925][ T9427] ? __fget_files+0x2a/0x420 [ 293.461954][ T9427] ? __fget_files+0x2a/0x420 [ 293.461981][ T9427] ? __fget_files+0x3a0/0x420 [ 293.462005][ T9427] ? __fget_files+0x2a/0x420 [ 293.462035][ T9427] ? bpf_lsm_file_ioctl+0x9/0x20 [ 293.462056][ T9427] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 293.462078][ T9427] __se_sys_ioctl+0xfc/0x170 [ 293.462103][ T9427] do_syscall_64+0x14d/0xf80 [ 293.462121][ T9427] ? trace_irq_disable+0x3b/0x150 [ 293.462146][ T9427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.462166][ T9427] ? clear_bhb_loop+0x40/0x90 [ 293.462192][ T9427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.462212][ T9427] RIP: 0033:0x7ff367f9c799 [ 293.462235][ T9427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.462252][ T9427] RSP: 002b:00007ff3661f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.462273][ T9427] RAX: ffffffffffffffda RBX: 00007ff368215fa0 RCX: 00007ff367f9c799 [ 293.462288][ T9427] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 293.462300][ T9427] RBP: 00007ff3661f6090 R08: 0000000000000000 R09: 0000000000000000 [ 293.462312][ T9427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.462323][ T9427] R13: 00007ff368216038 R14: 00007ff368215fa0 R15: 00007ffe048689f8 [ 293.462354][ T9427] [ 293.794902][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 293.830029][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.980'. [ 293.894728][ T5939] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 294.069808][ T5939] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 294.079043][ T5939] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.087244][ T5939] usb 8-1: Product: syz [ 294.091452][ T5939] usb 8-1: Manufacturer: syz [ 294.096461][ T5939] usb 8-1: SerialNumber: syz [ 294.103804][ T5939] usb 8-1: config 0 descriptor?? [ 294.135790][ T5939] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 034 [ 294.154376][ T9440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.165961][ T9440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.185562][ T5931] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 294.236215][ T5953] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 294.335667][ T5931] usb 9-1: Using ep0 maxpacket: 32 [ 294.342997][ T5931] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 294.351546][ T5931] usb 9-1: config 0 has no interface number 0 [ 294.363835][ T5931] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 294.375232][ T5931] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.383397][ T5931] usb 9-1: Product: syz [ 294.387708][ T5953] usb 6-1: Using ep0 maxpacket: 32 [ 294.393007][ T5931] usb 9-1: Manufacturer: syz [ 294.398760][ T5931] usb 9-1: SerialNumber: syz [ 294.406810][ T5953] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.417199][ T5953] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.431449][ T5931] usb 9-1: config 0 descriptor?? [ 294.443281][ T5953] usb 6-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 294.452921][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.461728][ T5953] usb 6-1: Product: syz [ 294.466218][ T5953] usb 6-1: Manufacturer: syz [ 294.470891][ T5953] usb 6-1: SerialNumber: syz [ 294.519273][ T5939] (null): failure reading functionality [ 294.530606][ T5939] i2c i2c-3: connected i2c-tiny-usb device [ 294.707601][ T5953] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 294.714844][ T5953] usb 6-1: MIDIStreaming interface descriptor not found [ 294.734178][ T10] usb 8-1: USB disconnect, device number 34 [ 294.843624][ T5931] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 294.865279][ T5931] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 294.890894][ T5953] usb 6-1: USB disconnect, device number 48 [ 294.963523][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.042966][ T9444] kvm_intel: kvm [9443]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9 [ 295.208924][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'. [ 295.388353][ T9455] netlink: 40 bytes leftover after parsing attributes in process `syz.7.990'. [ 295.907827][ T5953] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 295.972081][ T9468] FAULT_INJECTION: forcing a failure. [ 295.972081][ T9468] name failslab, interval 1, probability 0, space 0, times 0 [ 295.985567][ T9468] CPU: 0 UID: 0 PID: 9468 Comm: syz.7.995 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.985601][ T9468] Tainted: [L]=SOFTLOCKUP [ 295.985609][ T9468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.985621][ T9468] Call Trace: [ 295.985629][ T9468] [ 295.985637][ T9468] dump_stack_lvl+0xe8/0x150 [ 295.985673][ T9468] should_fail_ex+0x412/0x560 [ 295.985702][ T9468] should_failslab+0xa8/0x100 [ 295.985723][ T9468] ? skb_clone+0x212/0x3a0 [ 295.985758][ T9468] kmem_cache_alloc_noprof+0x87/0x650 [ 295.985797][ T9468] skb_clone+0x212/0x3a0 [ 295.985825][ T9468] __netlink_deliver_tap+0x424/0x8b0 [ 295.985869][ T9468] ? netlink_deliver_tap+0x2e/0x1b0 [ 295.985902][ T9468] netlink_deliver_tap+0x19c/0x1b0 [ 295.985933][ T9468] netlink_unicast+0x7e3/0x9b0 [ 295.985970][ T9468] ? __pfx_netlink_unicast+0x10/0x10 [ 295.986000][ T9468] ? netlink_sendmsg+0x650/0xb40 [ 295.986017][ T9468] ? skb_put+0x11b/0x210 [ 295.986039][ T9468] netlink_sendmsg+0x813/0xb40 [ 295.986068][ T9468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.986089][ T9468] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 295.986131][ T9468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.986149][ T9468] sock_sendmsg_nosec+0x112/0x150 [ 295.986179][ T9468] ____sys_sendmsg+0x589/0x8c0 [ 295.986212][ T9468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.986243][ T9468] ? import_iovec+0x73/0xa0 [ 295.986271][ T9468] ___sys_sendmsg+0x2a5/0x360 [ 295.986299][ T9468] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.986354][ T9468] ? __fget_files+0x2a/0x420 [ 295.986379][ T9468] ? __fget_files+0x3a0/0x420 [ 295.986411][ T9468] __x64_sys_sendmsg+0x1bd/0x2a0 [ 295.986435][ T9468] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 295.986463][ T9468] ? __pfx_ksys_write+0x10/0x10 [ 295.986491][ T9468] do_syscall_64+0x14d/0xf80 [ 295.986509][ T9468] ? trace_irq_disable+0x3b/0x150 [ 295.986530][ T9468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.986549][ T9468] ? clear_bhb_loop+0x40/0x90 [ 295.986572][ T9468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.986598][ T9468] RIP: 0033:0x7f026bb9c799 [ 295.986618][ T9468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.986636][ T9468] RSP: 002b:00007f026ca5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.986656][ T9468] RAX: ffffffffffffffda RBX: 00007f026be15fa0 RCX: 00007f026bb9c799 [ 295.986671][ T9468] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 295.986682][ T9468] RBP: 00007f026ca5b090 R08: 0000000000000000 R09: 0000000000000000 [ 295.986694][ T9468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.986705][ T9468] R13: 00007f026be16038 R14: 00007f026be15fa0 R15: 00007ffff7a04aa8 [ 295.986735][ T9468] [ 296.085773][ T5953] usb 6-1: Using ep0 maxpacket: 8 [ 296.313061][ T5953] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.336850][ T5953] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 296.367517][ T5953] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 296.407968][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.430978][ T5953] usb 6-1: config 0 descriptor?? [ 296.438495][ T9473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.448920][ T5953] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 296.458321][ T9473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.650057][ T10] usb 6-1: USB disconnect, device number 49 [ 297.047299][ T9476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.056446][ T9476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.069282][ T9476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.080133][ T9476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.455630][ T5953] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 297.578627][ T5908] usb 8-1: new low-speed USB device number 35 using dummy_hcd [ 297.585822][ T5953] usb 6-1: device descriptor read/64, error -71 [ 297.740158][ T5908] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 297.757798][ T5908] usb 8-1: config 0 has no interface number 0 [ 297.770923][ T5908] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 297.783465][ T5908] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 297.795304][ T5908] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 297.808579][ T5908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.825648][ T5953] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 297.827186][ T5908] usb 8-1: config 0 descriptor?? [ 297.844959][ T9480] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 297.877693][ T5908] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 297.931841][ T9489] fuse: Unknown parameter 'grou00000000000000000000' [ 297.975704][ T5953] usb 6-1: device descriptor read/64, error -71 [ 298.059568][ T5908] usb 8-1: USB disconnect, device number 35 [ 298.086560][ T5953] usb usb6-port1: attempt power cycle [ 298.329155][ T5931] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000024: -71 [ 298.342760][ T5931] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 298.359411][ T5931] usb 9-1: USB disconnect, device number 25 [ 298.425559][ T5953] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 298.446441][ T5953] usb 6-1: device descriptor read/8, error -71 [ 298.685586][ T5953] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 298.709045][ T5953] usb 6-1: device descriptor read/8, error -71 [ 298.825932][ T5953] usb usb6-port1: unable to enumerate USB device [ 299.131773][ T10] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 299.186589][ T5939] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 299.305546][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 299.314253][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.325195][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.350165][ T10] usb 8-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 299.362401][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.370920][ T5939] usb 9-1: Using ep0 maxpacket: 8 [ 299.379294][ T10] usb 8-1: Product: syz [ 299.383923][ T10] usb 8-1: Manufacturer: syz [ 299.390465][ T5939] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.401873][ T10] usb 8-1: SerialNumber: syz [ 299.407098][ T5939] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 299.424175][ T5939] usb 9-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 299.434555][ T5939] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.453533][ T5939] usb 9-1: config 0 descriptor?? [ 299.473249][ T5939] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 299.666087][ T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 299.697993][ T5939] usb 9-1: USB disconnect, device number 26 [ 299.713061][ T10] usb 8-1: MIDIStreaming interface descriptor not found [ 299.743412][ T9513] fuse: Unknown parameter 'grou00000000000000000000' [ 299.809609][ T10] usb 8-1: USB disconnect, device number 36 [ 299.871642][ T6058] udevd[6058]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.598522][ T9528] netlink: 'syz.7.1018': attribute type 1 has an invalid length. [ 301.030230][ T9543] FAULT_INJECTION: forcing a failure. [ 301.030230][ T9543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.072503][ T9543] CPU: 0 UID: 0 PID: 9543 Comm: syz.5.1025 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.072536][ T9543] Tainted: [L]=SOFTLOCKUP [ 301.072544][ T9543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 301.072556][ T9543] Call Trace: [ 301.072564][ T9543] [ 301.072573][ T9543] dump_stack_lvl+0xe8/0x150 [ 301.072607][ T9543] should_fail_ex+0x412/0x560 [ 301.072634][ T9543] _copy_to_user+0x31/0xb0 [ 301.072663][ T9543] drm_ioctl+0x6da/0xb80 [ 301.072698][ T9543] ? __pfx_drm_mode_addfb2_ioctl+0x10/0x10 [ 301.072726][ T9543] ? __pfx_drm_ioctl+0x10/0x10 [ 301.072768][ T9543] ? __fget_files+0x2a/0x420 [ 301.072796][ T9543] ? bpf_lsm_file_ioctl+0x9/0x20 [ 301.072816][ T9543] ? __pfx_drm_ioctl+0x10/0x10 [ 301.072845][ T9543] __se_sys_ioctl+0xfc/0x170 [ 301.072866][ T9543] do_syscall_64+0x14d/0xf80 [ 301.072884][ T9543] ? trace_irq_disable+0x3b/0x150 [ 301.072905][ T9543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.072924][ T9543] ? clear_bhb_loop+0x40/0x90 [ 301.072946][ T9543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.072970][ T9543] RIP: 0033:0x7f58e999c799 [ 301.072988][ T9543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.073004][ T9543] RSP: 002b:00007f58e7bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.073025][ T9543] RAX: ffffffffffffffda RBX: 00007f58e9c15fa0 RCX: 00007f58e999c799 [ 301.073039][ T9543] RDX: 00002000000001c0 RSI: 00000000c06864b8 RDI: 0000000000000003 [ 301.073050][ T9543] RBP: 00007f58e7bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 301.073061][ T9543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.073072][ T9543] R13: 00007f58e9c16038 R14: 00007f58e9c15fa0 R15: 00007ffdf5fa3c18 [ 301.073109][ T9543] [ 301.406128][ T5931] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 301.530882][ T9550] FAULT_INJECTION: forcing a failure. [ 301.530882][ T9550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.544952][ T9550] CPU: 1 UID: 0 PID: 9550 Comm: syz.8.1028 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.544985][ T9550] Tainted: [L]=SOFTLOCKUP [ 301.544996][ T9550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 301.545007][ T9550] Call Trace: [ 301.545015][ T9550] [ 301.545022][ T9550] dump_stack_lvl+0xe8/0x150 [ 301.545056][ T9550] should_fail_ex+0x412/0x560 [ 301.545092][ T9550] _copy_to_user+0x31/0xb0 [ 301.545118][ T9550] simple_read_from_buffer+0xe1/0x170 [ 301.545148][ T9550] proc_fail_nth_read+0x1bb/0x230 [ 301.545175][ T9550] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.545202][ T9550] ? rw_verify_area+0x2a6/0x4d0 [ 301.545229][ T9550] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.545255][ T9550] vfs_read+0x20c/0xa70 [ 301.545280][ T9550] ? fdget_pos+0x246/0x320 [ 301.545309][ T9550] ? __pfx___mutex_lock+0x10/0x10 [ 301.545328][ T9550] ? __pfx_vfs_read+0x10/0x10 [ 301.545357][ T9550] ? __fget_files+0x2a/0x420 [ 301.545384][ T9550] ? __fget_files+0x3a0/0x420 [ 301.545410][ T9550] ? __fget_files+0x2a/0x420 [ 301.545443][ T9550] ksys_read+0x150/0x270 [ 301.545465][ T9550] ? __pfx_ksys_read+0x10/0x10 [ 301.545483][ T9550] ? __pfx_drm_ioctl+0x10/0x10 [ 301.545523][ T9550] do_syscall_64+0x14d/0xf80 [ 301.545541][ T9550] ? trace_irq_disable+0x3b/0x150 [ 301.545563][ T9550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.545584][ T9550] ? clear_bhb_loop+0x40/0x90 [ 301.545609][ T9550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.545629][ T9550] RIP: 0033:0x7f1a0795cfce [ 301.545649][ T9550] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 301.545667][ T9550] RSP: 002b:00007f1a088b0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 301.545688][ T9550] RAX: ffffffffffffffda RBX: 00007f1a088b16c0 RCX: 00007f1a0795cfce [ 301.545703][ T9550] RDX: 000000000000000f RSI: 00007f1a088b10a0 RDI: 0000000000000004 [ 301.545715][ T9550] RBP: 00007f1a088b1090 R08: 0000000000000000 R09: 0000000000000000 [ 301.545727][ T9550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.545738][ T9550] R13: 00007f1a07c16038 R14: 00007f1a07c15fa0 R15: 00007fff7bc00c68 [ 301.545770][ T9550] [ 301.785525][ T5931] usb 8-1: Using ep0 maxpacket: 8 [ 301.799449][ T5931] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.810353][ T5931] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 301.823940][ T5931] usb 8-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 301.827760][ T1559] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 301.836118][ T5931] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.854754][ T5931] usb 8-1: config 0 descriptor?? [ 301.868646][ T5931] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 302.022432][ T1559] usb 6-1: Using ep0 maxpacket: 16 [ 302.037134][ T1559] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.050105][ T1559] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.062178][ T1559] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.072428][ T1559] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.080673][ T1559] usb 6-1: Product: syz [ 302.085065][ T1559] usb 6-1: Manufacturer: syz [ 302.089919][ T1559] usb 6-1: SerialNumber: syz [ 302.102858][ T5908] usb 8-1: USB disconnect, device number 37 [ 302.178251][ T1559] usb 6-1: 0:2 : does not exist [ 302.385201][ T1559] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 302.498548][ T1559] usb 6-1: USB disconnect, device number 54 [ 302.544969][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.773212][ T9567] FAULT_INJECTION: forcing a failure. [ 302.773212][ T9567] name failslab, interval 1, probability 0, space 0, times 0 [ 302.789114][ T9567] CPU: 0 UID: 0 PID: 9567 Comm: syz.7.1035 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.789146][ T9567] Tainted: [L]=SOFTLOCKUP [ 302.789152][ T9567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 302.789164][ T9567] Call Trace: [ 302.789171][ T9567] [ 302.789179][ T9567] dump_stack_lvl+0xe8/0x150 [ 302.789213][ T9567] should_fail_ex+0x412/0x560 [ 302.789240][ T9567] should_failslab+0xa8/0x100 [ 302.789262][ T9567] __kmalloc_noprof+0xe8/0x760 [ 302.789292][ T9567] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 302.789324][ T9567] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 302.789357][ T9567] genl_family_rcv_msg_doit+0xd9/0x330 [ 302.789387][ T9567] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 302.789416][ T9567] ? __pfx_genl_get_cmd+0x10/0x10 [ 302.789438][ T9567] ? __pfx_netlbl_mgmt_listdef+0x10/0x10 [ 302.789466][ T9567] ? __lock_acquire+0x6b5/0x2cf0 [ 302.789501][ T9567] genl_rcv_msg+0x61c/0x7a0 [ 302.789531][ T9567] ? __pfx_genl_rcv_msg+0x10/0x10 [ 302.789553][ T9567] ? __pfx_netlbl_mgmt_listdef+0x10/0x10 [ 302.789575][ T9567] ? __lock_acquire+0x6b5/0x2cf0 [ 302.789615][ T9567] netlink_rcv_skb+0x232/0x4b0 [ 302.789647][ T9567] ? __pfx_genl_rcv_msg+0x10/0x10 [ 302.789672][ T9567] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 302.789720][ T9567] ? down_read+0x270/0x2e0 [ 302.789740][ T9567] ? genl_rcv+0xd/0x40 [ 302.789765][ T9567] genl_rcv+0x28/0x40 [ 302.789786][ T9567] netlink_unicast+0x80f/0x9b0 [ 302.789824][ T9567] ? __pfx_netlink_unicast+0x10/0x10 [ 302.789854][ T9567] ? netlink_sendmsg+0x650/0xb40 [ 302.789871][ T9567] ? skb_put+0x11b/0x210 [ 302.789895][ T9567] netlink_sendmsg+0x813/0xb40 [ 302.789924][ T9567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.789956][ T9567] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 302.789998][ T9567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.790016][ T9567] sock_sendmsg_nosec+0x112/0x150 [ 302.790048][ T9567] ____sys_sendmsg+0x589/0x8c0 [ 302.790081][ T9567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.790119][ T9567] ? import_iovec+0x73/0xa0 [ 302.790149][ T9567] ___sys_sendmsg+0x2a5/0x360 [ 302.790178][ T9567] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.790240][ T9567] ? __fget_files+0x2a/0x420 [ 302.790267][ T9567] ? __fget_files+0x3a0/0x420 [ 302.790304][ T9567] __x64_sys_sendmsg+0x1bd/0x2a0 [ 302.790331][ T9567] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.790366][ T9567] ? __pfx_ksys_write+0x10/0x10 [ 302.790398][ T9567] do_syscall_64+0x14d/0xf80 [ 302.790418][ T9567] ? trace_irq_disable+0x3b/0x150 [ 302.790441][ T9567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.790470][ T9567] ? clear_bhb_loop+0x40/0x90 [ 302.790496][ T9567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.790516][ T9567] RIP: 0033:0x7f026bb9c799 [ 302.790537][ T9567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.790555][ T9567] RSP: 002b:00007f026ca5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.790577][ T9567] RAX: ffffffffffffffda RBX: 00007f026be15fa0 RCX: 00007f026bb9c799 [ 302.790591][ T9567] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000004 [ 302.790604][ T9567] RBP: 00007f026ca5b090 R08: 0000000000000000 R09: 0000000000000000 [ 302.790615][ T9567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.790627][ T9567] R13: 00007f026be16038 R14: 00007f026be15fa0 R15: 00007ffff7a04aa8 [ 302.790660][ T9567] [ 303.636415][ T9588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.725599][ T5932] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 303.735588][ T1559] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 303.848233][ T5908] usb 1-1: USB disconnect, device number 42 [ 303.896398][ T5932] usb 9-1: Using ep0 maxpacket: 16 [ 303.902249][ T1559] usb 8-1: Using ep0 maxpacket: 8 [ 303.913690][ T1559] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.920411][ T5932] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 303.925686][ T1559] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 303.946552][ T5932] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.954602][ T1559] usb 8-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 303.954680][ T1559] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.987641][ T1559] usb 8-1: config 0 descriptor?? [ 304.004843][ T5932] usb 9-1: Product: syz [ 304.010747][ T5932] usb 9-1: Manufacturer: syz [ 304.018951][ T1559] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 304.025631][ T5932] usb 9-1: SerialNumber: syz [ 304.039349][ T5932] usb 9-1: config 0 descriptor?? [ 304.114924][ T148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.228887][ T148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.253579][ T1559] usb 8-1: USB disconnect, device number 38 [ 304.352174][ T148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.374745][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 304.394447][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 304.407556][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 304.417283][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 304.425306][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 304.518333][ T148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.744476][ T148] erspan0: left allmulticast mode [ 304.750397][ T148] erspan0: left promiscuous mode [ 304.755761][ T148] bridge0: port 3(erspan0) entered disabled state [ 304.764778][ T148] bridge_slave_1: left allmulticast mode [ 304.771236][ T148] bridge_slave_1: left promiscuous mode [ 304.777449][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.788467][ T148] bridge_slave_0: left allmulticast mode [ 304.794192][ T148] bridge_slave_0: left promiscuous mode [ 304.804908][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.064842][ C1] vcan0: j1939_tp_rxtimer: 0xffff888078da2000: rx timeout, send abort [ 305.078398][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888078da2000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 305.156522][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.172399][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.184998][ T148] bond0 (unregistering): Released all slaves [ 305.227278][ T9595] chnl_net:caif_netlink_parms(): no params data found [ 305.265729][ T5161] Bluetooth: hci1: command tx timeout [ 305.327928][ T148] tipc: Left network mode [ 305.672136][ T9595] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.702900][ T9595] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.715892][ T9595] bridge_slave_0: entered allmulticast mode [ 305.735273][ T9595] bridge_slave_0: entered promiscuous mode [ 305.775508][ T9595] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.783297][ T9595] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.790767][ T10] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 305.804489][ T9595] bridge_slave_1: entered allmulticast mode [ 305.822291][ T9595] bridge_slave_1: entered promiscuous mode [ 305.961187][ T10] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 305.974439][ T9595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.985170][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.017759][ T10] usb 8-1: config 0 descriptor?? [ 306.025203][ T9595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.040625][ T10] cp210x 8-1:0.0: cp210x converter detected [ 306.068378][ T148] hsr_slave_0: left promiscuous mode [ 306.074962][ T148] hsr_slave_1: left promiscuous mode [ 306.082833][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.091340][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.102350][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.110675][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.131011][ T148] veth1_macvtap: left promiscuous mode [ 306.137856][ T148] veth0_macvtap: left promiscuous mode [ 306.144221][ T148] veth1_vlan: left promiscuous mode [ 306.150512][ T148] veth0_vlan: left promiscuous mode [ 306.365050][ C1] vcan0: j1939_tp_rxtimer: 0xffff888078da1c00: rx timeout, send abort [ 306.373873][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888078da1c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 306.454269][ T9620] NILFS (nbd7): device size too small [ 306.465907][ T5161] Bluetooth: hci0: command tx timeout [ 306.489644][ T10] cp210x 8-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 306.517360][ T10] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 306.556892][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1053'. [ 306.574838][ T10] usb 8-1: cp210x converter now attached to ttyUSB0 [ 306.594475][ T10] usb 8-1: USB disconnect, device number 39 [ 306.603844][ T808] usb 9-1: USB disconnect, device number 27 [ 306.670587][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 306.698066][ T10] cp210x 8-1:0.0: device disconnected [ 306.759060][ T148] team0 (unregistering): Port device team_slave_1 removed [ 306.780900][ T148] team0 (unregistering): Port device team_slave_0 removed [ 307.140382][ T9595] team0: Port device team_slave_0 added [ 307.198996][ T9595] team0: Port device team_slave_1 added [ 307.334711][ T9595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.342818][ T9595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.371262][ T9595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.400310][ T9595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.407716][ T808] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 307.436182][ T9595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.524759][ T9595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.584308][ T808] usb 6-1: Using ep0 maxpacket: 8 [ 307.608029][ T808] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.624813][ T808] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 307.654947][ T808] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 307.672181][ T808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.704388][ T808] usb 6-1: config 0 descriptor?? [ 307.715796][ T808] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 307.797945][ T148] IPVS: stop unused estimator thread 0... [ 307.818194][ T9595] hsr_slave_0: entered promiscuous mode [ 307.843961][ T9595] hsr_slave_1: entered promiscuous mode [ 307.858858][ T9658] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 307.925082][ T808] usb 6-1: USB disconnect, device number 55 [ 308.346478][ T1559] usb 8-1: new full-speed USB device number 40 using dummy_hcd [ 308.406246][ T808] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 308.479167][ T9595] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 308.496528][ T9595] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 308.529403][ T1559] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 308.540834][ T1559] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.546882][ T5161] Bluetooth: hci0: command tx timeout [ 308.575623][ T808] usb 9-1: Using ep0 maxpacket: 32 [ 308.583213][ T808] usb 9-1: unable to get BOS descriptor or descriptor too short [ 308.598878][ T1559] usb 8-1: config 0 descriptor?? [ 308.606926][ T808] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.620051][ T9595] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 308.627388][ T808] usb 9-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 308.655533][ T808] usb 9-1: config 1 interface 0 has no altsetting 0 [ 308.670814][ T808] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 308.672823][ T1559] cp210x 8-1:0.0: cp210x converter detected [ 308.687252][ T808] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.710721][ T808] usb 9-1: Product: syz [ 308.718188][ T9595] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 308.721478][ T808] usb 9-1: Manufacturer: syz [ 308.738177][ T808] usb 9-1: SerialNumber: syz [ 308.837360][ T9688] netlink: 770 bytes leftover after parsing attributes in process `syz.5.1066'. [ 308.964912][ T808] cdc_ether 9-1:1.0: missing cdc ether descriptor [ 308.993654][ T808] usb 9-1: USB disconnect, device number 28 [ 309.097593][ T1559] usb 8-1: cp210x converter now attached to ttyUSB0 [ 309.172884][ T9595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.201359][ T9694] netlink: 'syz.5.1067': attribute type 9 has an invalid length. [ 309.220789][ T9694] netlink: 'syz.5.1067': attribute type 11 has an invalid length. [ 309.225756][ T9595] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.247777][ T9694] netlink: 'syz.5.1067': attribute type 12 has an invalid length. [ 309.249127][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.257028][ T9694] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.1067'. [ 309.263412][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.279431][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1067'. [ 309.303427][ T5953] usb 8-1: USB disconnect, device number 40 [ 309.322123][ T5953] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 309.333318][ T5953] cp210x 8-1:0.0: device disconnected [ 309.356768][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.364146][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.910969][ T5161] Bluetooth: hci1: unknown advertising packet type: 0x73 [ 309.911058][ T5161] Bluetooth: hci1: unknown advertising packet type: 0xff [ 309.918431][ T5161] Bluetooth: hci1: Malformed LE Event: 0x02 [ 310.191849][ T9595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.296598][ T5953] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 310.379772][ T5939] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 310.466129][ T5953] usb 6-1: Using ep0 maxpacket: 8 [ 310.482045][ T5939] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 310.493513][ T5953] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.524536][ T5953] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 310.567645][ T5953] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 310.598761][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.632737][ T5161] Bluetooth: hci0: command tx timeout [ 310.652383][ T5953] usb 6-1: config 0 descriptor?? [ 310.674947][ T5953] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 310.902655][ T10] usb 6-1: USB disconnect, device number 56 [ 311.006502][ T9733] FAULT_INJECTION: forcing a failure. [ 311.006502][ T9733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.034884][ T9733] CPU: 0 UID: 0 PID: 9733 Comm: syz.8.1075 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.034920][ T9733] Tainted: [L]=SOFTLOCKUP [ 311.034928][ T9733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 311.034942][ T9733] Call Trace: [ 311.034950][ T9733] [ 311.034959][ T9733] dump_stack_lvl+0xe8/0x150 [ 311.034995][ T9733] should_fail_ex+0x412/0x560 [ 311.035025][ T9733] core_sys_select+0x8dd/0xc30 [ 311.035070][ T9733] ? __pfx_core_sys_select+0x10/0x10 [ 311.035119][ T9733] ? __pfx_set_user_sigmask+0x10/0x10 [ 311.035163][ T9733] __se_sys_pselect6+0x267/0x320 [ 311.035195][ T9733] ? __pfx___se_sys_pselect6+0x10/0x10 [ 311.035222][ T9733] ? __pfx_ksys_write+0x10/0x10 [ 311.035250][ T9733] ? __x64_sys_pselect6+0x21/0xf0 [ 311.035278][ T9733] do_syscall_64+0x14d/0xf80 [ 311.035299][ T9733] ? trace_irq_disable+0x3b/0x150 [ 311.035323][ T9733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.035352][ T9733] ? clear_bhb_loop+0x40/0x90 [ 311.035381][ T9733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.035401][ T9733] RIP: 0033:0x7f1a0799c799 [ 311.035420][ T9733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.035437][ T9733] RSP: 002b:00007f1a088b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 311.035459][ T9733] RAX: ffffffffffffffda RBX: 00007f1a07c15fa0 RCX: 00007f1a0799c799 [ 311.035474][ T9733] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 311.035487][ T9733] RBP: 00007f1a088b1090 R08: 0000200000000280 R09: 0000000000000000 [ 311.035500][ T9733] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 311.035512][ T9733] R13: 00007f1a07c16038 R14: 00007f1a07c15fa0 R15: 00007fff7bc00c68 [ 311.035544][ T9733] [ 311.282072][ T9595] veth0_vlan: entered promiscuous mode [ 311.374533][ T9595] veth1_vlan: entered promiscuous mode [ 311.547563][ T9595] veth0_macvtap: entered promiscuous mode [ 311.617217][ T9595] veth1_macvtap: entered promiscuous mode [ 311.721192][ T9595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.773181][ T9595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.794083][ T9765] FAULT_INJECTION: forcing a failure. [ 311.794083][ T9765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.850806][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.850848][ T9765] CPU: 1 UID: 0 PID: 9765 Comm: syz.5.1080 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.850876][ T9765] Tainted: [L]=SOFTLOCKUP [ 311.850911][ T9765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 311.850968][ T9765] Call Trace: [ 311.850996][ T9765] [ 311.851024][ T9765] dump_stack_lvl+0xe8/0x150 [ 311.851121][ T9765] should_fail_ex+0x412/0x560 [ 311.851209][ T9765] _copy_from_iter+0x1d3/0x1670 [ 311.851275][ T9765] ? rcu_is_watching+0x15/0xb0 [ 311.851347][ T9765] ? __pfx__copy_from_iter+0x10/0x10 [ 311.851428][ T9765] ? netlink_sendmsg+0x650/0xb40 [ 311.851472][ T9765] ? skb_put+0x11b/0x210 [ 311.851534][ T9765] netlink_sendmsg+0x6c0/0xb40 [ 311.851618][ T9765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.851678][ T9765] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 311.851791][ T9765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.851842][ T9765] sock_sendmsg_nosec+0x112/0x150 [ 311.851925][ T9765] ____sys_sendmsg+0x589/0x8c0 [ 311.852003][ T9765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.852088][ T9765] ? import_iovec+0x73/0xa0 [ 311.852161][ T9765] ___sys_sendmsg+0x2a5/0x360 [ 311.852243][ T9765] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.852502][ T9765] ? __fget_files+0x2a/0x420 [ 311.852633][ T9765] ? __fget_files+0x3a0/0x420 [ 311.852737][ T9765] __x64_sys_sendmsg+0x1bd/0x2a0 [ 311.852852][ T9765] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.852940][ T9765] ? __pfx_ksys_write+0x10/0x10 [ 311.853032][ T9765] do_syscall_64+0x14d/0xf80 [ 311.853086][ T9765] ? trace_irq_disable+0x3b/0x150 [ 311.853158][ T9765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.853233][ T9765] ? clear_bhb_loop+0x40/0x90 [ 311.853330][ T9765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.853377][ T9765] RIP: 0033:0x7f58e999c799 [ 311.853442][ T9765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.853547][ T9765] RSP: 002b:00007f58e7bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.853610][ T9765] RAX: ffffffffffffffda RBX: 00007f58e9c15fa0 RCX: 00007f58e999c799 [ 311.853651][ T9765] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 311.853684][ T9765] RBP: 00007f58e7bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 311.853717][ T9765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.853748][ T9765] R13: 00007f58e9c16038 R14: 00007f58e9c15fa0 R15: 00007ffdf5fa3c18 [ 311.853837][ T9765] [ 312.119452][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.132625][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.172552][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.468755][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.497925][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.613183][ T9784] fuse: blksize only supported for fuseblk [ 312.632800][ T9782] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1084'. [ 312.649720][ T9782] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1084'. [ 312.655090][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.669507][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.706068][ T5161] Bluetooth: hci0: command tx timeout [ 313.165598][ T5953] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 313.315508][ T5953] usb 8-1: Using ep0 maxpacket: 8 [ 313.322904][ T5953] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.333648][ T5953] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 313.350060][ T5953] usb 8-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 313.359956][ T5953] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.373523][ T5953] usb 8-1: config 0 descriptor?? [ 313.386691][ T5953] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 313.544933][ T9805] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1090'. [ 313.593352][ T1559] usb 8-1: USB disconnect, device number 41 [ 313.619373][ T9806] nfs: Unknown parameter 'intr' [ 313.725571][ T5908] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 313.878792][ T5908] usb 9-1: config 0 has an invalid interface number: 49 but max is 0 [ 313.887751][ T5908] usb 9-1: config 0 has no interface number 0 [ 313.894077][ T5908] usb 9-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 313.909351][ T5908] usb 9-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 313.924767][ T5908] usb 9-1: config 0 interface 49 has no altsetting 0 [ 313.938074][ T5908] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 313.949013][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.958649][ T5908] usb 9-1: Product: syz [ 313.959306][ T9810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.963480][ T5908] usb 9-1: Manufacturer: syz [ 313.976810][ T5908] usb 9-1: SerialNumber: syz [ 313.978248][ T9810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.992521][ T5908] usb 9-1: config 0 descriptor?? [ 314.175667][ T1559] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 314.291907][ T5908] i2c-tiny-usb 9-1:0.49: version 6d.cc found at bus 009 address 029 [ 314.315219][ T5908] (null): failure setting delay to 10us [ 314.321449][ T5908] i2c-tiny-usb 9-1:0.49: probe with driver i2c-tiny-usb failed with error -5 [ 314.338990][ T5908] usb 9-1: USB disconnect, device number 29 [ 314.347357][ T1559] usb 10-1: Using ep0 maxpacket: 16 [ 314.367334][ T1559] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.382973][ T1559] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 314.402696][ T1559] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.449997][ T1559] usb 10-1: config 0 descriptor?? [ 314.481823][ T1559] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input38 [ 314.663480][ T9809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.676751][ T9809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.691001][ T9809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.715119][ T9809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.727733][ T9809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.739553][ T9809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.749529][ T9809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.763077][ T9809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.785193][ T1559] usb 10-1: USB disconnect, device number 2 [ 315.215583][ T1559] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 315.285525][ T808] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 315.385729][ T1559] usb 9-1: Using ep0 maxpacket: 8 [ 315.405805][ T1559] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 315.431441][ T1559] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.446727][ T808] usb 8-1: Using ep0 maxpacket: 8 [ 315.460047][ T808] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.474555][ T1559] pvrusb2: Hardware description: Terratec Grabster AV400 [ 315.492435][ T808] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 315.493000][ T1559] pvrusb2: ********** [ 315.521815][ T808] usb 8-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 315.535468][ T1559] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 315.547287][ T1559] pvrusb2: Important functionality might not be entirely working. [ 315.552772][ T808] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.563751][ T1559] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 315.578277][ T1559] pvrusb2: ********** [ 315.609611][ T808] usb 8-1: config 0 descriptor?? [ 315.628247][ T808] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 315.667883][ T2364] pvrusb2: Invalid write control endpoint [ 315.795347][ T2364] pvrusb2: Invalid write control endpoint [ 315.802612][ T9848] FAULT_INJECTION: forcing a failure. [ 315.802612][ T9848] name failslab, interval 1, probability 0, space 0, times 0 [ 315.802648][ T9848] CPU: 1 UID: 0 PID: 9848 Comm: syz.5.1105 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.802674][ T9848] Tainted: [L]=SOFTLOCKUP [ 315.802681][ T9848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 315.802693][ T9848] Call Trace: [ 315.802701][ T9848] [ 315.802709][ T9848] dump_stack_lvl+0xe8/0x150 [ 315.802742][ T9848] should_fail_ex+0x412/0x560 [ 315.802770][ T9848] should_failslab+0xa8/0x100 [ 315.802792][ T9848] __kmalloc_cache_noprof+0x88/0x660 [ 315.802823][ T9848] ? iopt_alloc_pages+0x85/0x490 [ 315.802855][ T9848] iopt_alloc_pages+0x85/0x490 [ 315.802884][ T9848] iopt_alloc_user_pages+0x42/0xe0 [ 315.802913][ T9848] iopt_map_user_pages+0x4e/0xd0 [ 315.802938][ T9848] iommufd_ioas_map+0x397/0x4d0 [ 315.802969][ T9848] ? __pfx_iommufd_ioas_map+0x10/0x10 [ 315.803001][ T9848] iommufd_fops_ioctl+0x4b5/0x5d0 [ 315.803029][ T9848] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 315.803059][ T9848] ? __fget_files+0x2a/0x420 [ 315.803089][ T9848] ? __fget_files+0x2a/0x420 [ 315.803117][ T9848] ? bpf_lsm_file_ioctl+0x9/0x20 [ 315.803136][ T9848] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 315.803163][ T9848] __se_sys_ioctl+0xfc/0x170 [ 315.803185][ T9848] do_syscall_64+0x14d/0xf80 [ 315.803204][ T9848] ? trace_irq_disable+0x3b/0x150 [ 315.803227][ T9848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.803249][ T9848] ? clear_bhb_loop+0x40/0x90 [ 315.803271][ T9848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.803290][ T9848] RIP: 0033:0x7f58e999c799 [ 315.803309][ T9848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.803325][ T9848] RSP: 002b:00007f58e7bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.803345][ T9848] RAX: ffffffffffffffda RBX: 00007f58e9c15fa0 RCX: 00007f58e999c799 [ 315.803359][ T9848] RDX: 0000200000000100 RSI: 0000000000003b85 RDI: 0000000000000003 [ 315.803370][ T9848] RBP: 00007f58e7bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 315.803382][ T9848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.803393][ T9848] R13: 00007f58e9c16038 R14: 00007f58e9c15fa0 R15: 00007ffdf5fa3c18 [ 315.803437][ T9848] [ 316.004185][ T808] usb 8-1: USB disconnect, device number 42 [ 316.124506][ T2364] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 316.134220][ T2364] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 316.144094][ T2364] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 316.156110][ T2364] pvrusb2: Device being rendered inoperable [ 316.164112][ T2364] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 316.173687][ T2364] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 316.192466][ T2364] pvrusb2: Attached sub-driver cx25840 [ 316.198183][ T2364] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 316.208355][ T2364] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 317.281682][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.292797][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.387385][ T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 317.426459][ T9] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 317.570814][ T10] usb 10-1: config index 0 descriptor too short (expected 28277, got 36) [ 317.601992][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 317.609021][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.632718][ T10] usb 10-1: config 0 has no interfaces? [ 317.641322][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 317.655485][ T10] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 317.667294][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.687430][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.699712][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.719864][ T10] usb 10-1: config 0 descriptor?? [ 317.731306][ T9] usb 6-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice= 0.40 [ 317.755539][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.765909][ T9] usb 6-1: Product: syz [ 317.775492][ T9] usb 6-1: Manufacturer: syz [ 317.781918][ T9] usb 6-1: SerialNumber: syz [ 317.910507][ T808] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 318.005056][ T9868] netlink: 'syz.5.1112': attribute type 4 has an invalid length. [ 318.026682][ T9868] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1112'. [ 318.041545][ T5931] usb 10-1: USB disconnect, device number 3 [ 318.054866][ T9868] netlink: 14601 bytes leftover after parsing attributes in process `syz.5.1112'. [ 318.065600][ T808] usb 8-1: Using ep0 maxpacket: 8 [ 318.074278][ T808] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.090713][ T808] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 318.107580][ T808] usb 8-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 318.119424][ T808] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.132166][ T808] usb 8-1: config 0 descriptor?? [ 318.153739][ T808] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 318.158859][ T9] usb 6-1: 0:1 : does not exist [ 318.174132][ T9] usb 6-1: 0:2 : does not exist [ 318.238683][ T9] usb 6-1: USB disconnect, device number 57 [ 318.365338][ T808] usb 8-1: USB disconnect, device number 43 [ 318.512510][ T9] usb 9-1: USB disconnect, device number 30 [ 319.047075][ T9892] FAULT_INJECTION: forcing a failure. [ 319.047075][ T9892] name failslab, interval 1, probability 0, space 0, times 0 [ 319.075761][ T9892] CPU: 1 UID: 0 PID: 9892 Comm: syz.9.1121 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.075795][ T9892] Tainted: [L]=SOFTLOCKUP [ 319.075804][ T9892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 319.075817][ T9892] Call Trace: [ 319.075826][ T9892] [ 319.075835][ T9892] dump_stack_lvl+0xe8/0x150 [ 319.075870][ T9892] should_fail_ex+0x412/0x560 [ 319.075899][ T9892] should_failslab+0xa8/0x100 [ 319.075924][ T9892] __kmalloc_noprof+0xe8/0x760 [ 319.075974][ T9892] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 319.076008][ T9892] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 319.076033][ T9892] ? is_bpf_text_address+0x26/0x2b0 [ 319.076068][ T9892] genl_family_rcv_msg_doit+0xd9/0x330 [ 319.076093][ T9892] ? __asan_memcpy+0x40/0x70 [ 319.076133][ T9892] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 319.076167][ T9892] ? apparmor_capable+0x126/0x170 [ 319.076193][ T9892] ? bpf_lsm_capable+0x9/0x20 [ 319.076221][ T9892] ? security_capable+0x7e/0x2c0 [ 319.076255][ T9892] genl_rcv_msg+0x61c/0x7a0 [ 319.076290][ T9892] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.076313][ T9892] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 319.076343][ T9892] ? __pfx_nl802154_del_llsec_devkey+0x10/0x10 [ 319.076364][ T9892] ? __pfx_nl802154_post_doit+0x10/0x10 [ 319.076394][ T9892] ? __lock_acquire+0x6b5/0x2cf0 [ 319.076437][ T9892] netlink_rcv_skb+0x232/0x4b0 [ 319.076469][ T9892] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.076495][ T9892] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 319.076546][ T9892] ? down_read+0x270/0x2e0 [ 319.076566][ T9892] ? genl_rcv+0xd/0x40 [ 319.076591][ T9892] genl_rcv+0x28/0x40 [ 319.076614][ T9892] netlink_unicast+0x80f/0x9b0 [ 319.076651][ T9892] ? __pfx_netlink_unicast+0x10/0x10 [ 319.076682][ T9892] ? netlink_sendmsg+0x650/0xb40 [ 319.076700][ T9892] ? skb_put+0x11b/0x210 [ 319.076726][ T9892] netlink_sendmsg+0x813/0xb40 [ 319.076756][ T9892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.076778][ T9892] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 319.076820][ T9892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.076839][ T9892] sock_sendmsg_nosec+0x112/0x150 [ 319.076881][ T9892] ____sys_sendmsg+0x589/0x8c0 [ 319.076914][ T9892] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.076948][ T9892] ? import_iovec+0x73/0xa0 [ 319.076978][ T9892] ___sys_sendmsg+0x2a5/0x360 [ 319.077007][ T9892] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.077066][ T9892] ? __fget_files+0x2a/0x420 [ 319.077093][ T9892] ? __fget_files+0x3a0/0x420 [ 319.077140][ T9892] __x64_sys_sendmsg+0x1bd/0x2a0 [ 319.077167][ T9892] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.077201][ T9892] ? __pfx_ksys_write+0x10/0x10 [ 319.077234][ T9892] do_syscall_64+0x14d/0xf80 [ 319.077254][ T9892] ? trace_irq_disable+0x3b/0x150 [ 319.077277][ T9892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.077300][ T9892] ? clear_bhb_loop+0x40/0x90 [ 319.077326][ T9892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.077347][ T9892] RIP: 0033:0x7f5a6ad9c799 [ 319.077368][ T9892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.077387][ T9892] RSP: 002b:00007f5a6bc89028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.077409][ T9892] RAX: ffffffffffffffda RBX: 00007f5a6b015fa0 RCX: 00007f5a6ad9c799 [ 319.077424][ T9892] RDX: 0000000000004880 RSI: 0000200000000e40 RDI: 0000000000000004 [ 319.077437][ T9892] RBP: 00007f5a6bc89090 R08: 0000000000000000 R09: 0000000000000000 [ 319.077450][ T9892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.077462][ T9892] R13: 00007f5a6b016038 R14: 00007f5a6b015fa0 R15: 00007fffd33d7e88 [ 319.077495][ T9892] [ 319.905834][ T1559] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 319.942251][ T9909] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1126'. [ 320.068172][ T1559] usb 10-1: Using ep0 maxpacket: 32 [ 320.082056][ T1559] usb 10-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 320.085815][ T808] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 320.093266][ T1559] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.108452][ T1559] usb 10-1: Product: syz [ 320.113352][ T1559] usb 10-1: Manufacturer: syz [ 320.118172][ T1559] usb 10-1: SerialNumber: syz [ 320.126404][ T1559] usb 10-1: config 0 descriptor?? [ 320.135519][ T9] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 320.153253][ T1559] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 320.247310][ T808] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 320.262628][ T808] usb 8-1: config 1 has no interface number 0 [ 320.277229][ T808] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 320.296753][ T808] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 32 [ 320.308135][ T808] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x9 has an invalid bInterval 143, changing to 11 [ 320.325499][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 320.331421][ T808] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 320.341862][ T808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.350193][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 320.356950][ T808] usb 8-1: Product: syz [ 320.364946][ T808] usb 8-1: Manufacturer: syz [ 320.374580][ T808] usb 8-1: SerialNumber: syz [ 320.379890][ T9] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 320.397406][ T9905] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 320.400121][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.408037][ T9905] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 320.425248][ T808] usb 8-1: Error in usbnet_get_endpoints (-22) [ 320.426226][ T9] usb 6-1: Product: syz [ 320.446223][ T9] usb 6-1: Manufacturer: syz [ 320.455471][ T9] usb 6-1: SerialNumber: syz [ 320.575865][ T9911] overlayfs: missing 'lowerdir' [ 320.878806][ T9] usb 6-1: unit 0 not found! [ 320.988674][ T9918] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 320.988674][ T9918] program syz.7.1125 not setting count and/or reply_len properly [ 321.284183][ T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 321.301594][ T9] usb 6-1: unit 0 not found! [ 321.313246][ T9] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 321.330269][ T9] usb 6-1: unit 0 not found! [ 321.379875][ T9897] hub 9-0:1.0: USB hub found [ 321.389869][ T9897] hub 9-0:1.0: 1 port detected [ 321.432037][ T1559] gspca_topro: reg_w err -71 [ 321.466051][ T9] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 321.476710][ T1559] gspca_topro: Sensor soi763a [ 321.484122][ T9] usb 6-1: USB disconnect, device number 58 [ 321.504490][ T1559] usb 10-1: USB disconnect, device number 4 [ 321.541139][ T6058] udevd[6058]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.685666][ T5956] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 321.835727][ T5956] usb 9-1: Using ep0 maxpacket: 8 [ 321.850665][ T5956] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.870786][ T5956] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 321.884007][ T5956] usb 9-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 321.893203][ T5956] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.907594][ T5956] usb 9-1: config 0 descriptor?? [ 321.918586][ T5956] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 322.092469][ T9928] netlink: 'syz.9.1133': attribute type 10 has an invalid length. [ 322.100662][ T5956] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 322.110673][ T9928] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1133'. [ 322.121734][ T9928] team0: entered promiscuous mode [ 322.128010][ T9928] team_slave_0: entered promiscuous mode [ 322.134221][ T9928] team_slave_1: entered promiscuous mode [ 322.140256][ T9928] team0: entered allmulticast mode [ 322.145343][ T1559] usb 9-1: USB disconnect, device number 31 [ 322.161636][ T9928] team_slave_0: entered allmulticast mode [ 322.195539][ T9928] team_slave_1: entered allmulticast mode [ 322.202281][ T9928] bridge0: port 3(team0) entered blocking state [ 322.209094][ T9928] bridge0: port 3(team0) entered disabled state [ 322.221419][ T9928] bridge0: port 3(team0) entered blocking state [ 322.227985][ T9928] bridge0: port 3(team0) entered forwarding state [ 322.265706][ T5956] usb 6-1: Using ep0 maxpacket: 8 [ 322.275451][ T5956] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 322.287267][ T5956] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 322.297827][ T5956] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 322.308385][ T5956] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.322563][ T5956] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 322.332177][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.496047][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1134'. [ 322.550377][ T5956] usb 6-1: GET_CAPABILITIES returned 0 [ 322.557228][ T5956] usbtmc 6-1:16.0: can't read capabilities [ 322.740247][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1136'. [ 322.871269][ T1559] usb 8-1: USB disconnect, device number 44 [ 323.415519][ T5956] usb 9-1: new full-speed USB device number 32 using dummy_hcd [ 323.547505][ T1559] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 323.589242][ T5956] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 323.616550][ T5956] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.641534][ T5956] usb 9-1: config 0 descriptor?? [ 323.658354][ T5956] cp210x 9-1:0.0: cp210x converter detected [ 323.715939][ T1559] usb 8-1: Using ep0 maxpacket: 32 [ 323.730979][ T1559] usb 8-1: config 9 has an invalid interface number: 221 but max is 1 [ 323.750198][ T1559] usb 8-1: config 9 has an invalid interface number: 221 but max is 1 [ 323.769825][ T1559] usb 8-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 323.784278][ T1559] usb 8-1: config 9 has no interface number 0 [ 323.798895][ T5932] usb 6-1: USB disconnect, device number 59 [ 323.809795][ T1559] usb 8-1: config 9 interface 221 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 323.827493][ T1559] usb 8-1: config 9 interface 221 has no altsetting 0 [ 323.838214][ T1559] usb 8-1: New USB device found, idVendor=0582, idProduct=74ce, bcdDevice=ba.38 [ 323.865916][ T1559] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.885051][ T5956] usb 9-1: cp210x converter now attached to ttyUSB0 [ 323.894985][ T1559] usb 8-1: Product: syz [ 323.918784][ T1559] usb 8-1: Manufacturer: syz [ 323.936300][ T1559] usb 8-1: SerialNumber: syz [ 324.082959][ T5932] usb 9-1: USB disconnect, device number 32 [ 324.127084][ T5932] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 324.142455][ T5932] cp210x 9-1:0.0: device disconnected [ 324.310407][ T1559] usb 8-1: USB disconnect, device number 45 [ 324.370074][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:9.221/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.715558][ T5931] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 324.860864][ T9981] FAULT_INJECTION: forcing a failure. [ 324.860864][ T9981] name failslab, interval 1, probability 0, space 0, times 0 [ 324.893250][ T9981] CPU: 1 UID: 0 PID: 9981 Comm: syz.7.1146 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.893286][ T9981] Tainted: [L]=SOFTLOCKUP [ 324.893294][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 324.893307][ T9981] Call Trace: [ 324.893315][ T9981] [ 324.893325][ T9981] dump_stack_lvl+0xe8/0x150 [ 324.893361][ T9981] should_fail_ex+0x412/0x560 [ 324.893390][ T9981] should_failslab+0xa8/0x100 [ 324.893415][ T9981] __kmalloc_noprof+0xe8/0x760 [ 324.893447][ T9981] ? snd_seq_oss_readq_new+0x86/0x230 [ 324.893468][ T9981] ? __kmalloc_cache_noprof+0x15b/0x660 [ 324.893505][ T9981] snd_seq_oss_readq_new+0x86/0x230 [ 324.893538][ T9981] snd_seq_oss_open+0x81e/0xfc0 [ 324.893565][ T9981] ? do_sys_openat2+0x113/0x200 [ 324.893601][ T9981] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 324.893664][ T9981] ? trace_contention_end+0x3d/0x150 [ 324.893691][ T9981] ? __mutex_lock+0x320/0x1420 [ 324.893732][ T9981] ? __pfx___mutex_lock+0x10/0x10 [ 324.893759][ T9981] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 324.893788][ T9981] ? __pfx_free_devinfo+0x10/0x10 [ 324.893814][ T9981] ? do_raw_spin_unlock+0xf5/0x210 [ 324.893845][ T9981] ? soundcore_open+0x2da/0x490 [ 324.893880][ T9981] odev_open+0x67/0xd0 [ 324.893907][ T9981] chrdev_open+0x4cd/0x5e0 [ 324.893934][ T9981] ? __pfx_chrdev_open+0x10/0x10 [ 324.893956][ T9981] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 324.893996][ T9981] ? __pfx_chrdev_open+0x10/0x10 [ 324.894018][ T9981] do_dentry_open+0x785/0x14e0 [ 324.894058][ T9981] vfs_open+0x3b/0x340 [ 324.894082][ T9981] ? path_openat+0x2df0/0x3860 [ 324.894104][ T9981] path_openat+0x2e08/0x3860 [ 324.894138][ T9981] ? __pfx_stack_trace_save+0x10/0x10 [ 324.894167][ T9981] ? stack_depot_save_flags+0x33/0x810 [ 324.894201][ T9981] ? __pfx_path_openat+0x10/0x10 [ 324.894219][ T9981] ? __x64_sys_openat+0x138/0x170 [ 324.894244][ T9981] ? do_syscall_64+0x14d/0xf80 [ 324.894263][ T9981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.894293][ T9981] ? __lock_acquire+0x6b5/0x2cf0 [ 324.894331][ T9981] do_file_open+0x23e/0x4a0 [ 324.894357][ T9981] ? __pfx_do_file_open+0x10/0x10 [ 324.894399][ T9981] ? _raw_spin_unlock+0x28/0x50 [ 324.894428][ T9981] ? alloc_fd+0x64b/0x6c0 [ 324.894465][ T9981] do_sys_openat2+0x113/0x200 [ 324.894494][ T9981] ? __pfx_do_sys_openat2+0x10/0x10 [ 324.894530][ T9981] ? ksys_write+0x242/0x270 [ 324.894554][ T9981] ? __pfx_ksys_write+0x10/0x10 [ 324.894577][ T9981] __x64_sys_openat+0x138/0x170 [ 324.894611][ T9981] do_syscall_64+0x14d/0xf80 [ 324.894630][ T9981] ? trace_irq_disable+0x3b/0x150 [ 324.894654][ T9981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.894676][ T9981] ? clear_bhb_loop+0x40/0x90 [ 324.894701][ T9981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.894722][ T9981] RIP: 0033:0x7f026bb9c799 [ 324.894743][ T9981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.894761][ T9981] RSP: 002b:00007f026ca5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 324.894783][ T9981] RAX: ffffffffffffffda RBX: 00007f026be15fa0 RCX: 00007f026bb9c799 [ 324.894798][ T9981] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 324.894813][ T9981] RBP: 00007f026ca5b090 R08: 0000000000000000 R09: 0000000000000000 [ 324.894826][ T9981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 324.894837][ T9981] R13: 00007f026be16038 R14: 00007f026be15fa0 R15: 00007ffff7a04aa8 [ 324.894868][ T9981] [ 325.308052][ T5931] usb 6-1: Using ep0 maxpacket: 8 [ 325.316672][ T5931] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.326987][ T5931] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 325.340032][ T5931] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 325.349951][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.362343][ T5931] usb 6-1: config 0 descriptor?? [ 325.372150][ T5931] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 325.585802][ T1559] usb 6-1: USB disconnect, device number 60 [ 325.895484][ T10] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 326.069705][ T10] usb 9-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 326.115470][ T10] usb 9-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 326.148523][ T10] usb 9-1: Product: syz [ 326.170933][ T10] usb 9-1: Manufacturer: syz [ 326.183477][ T10] usb 9-1: SerialNumber: syz [ 326.227304][ T10] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 326.266248][ T1559] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 326.437726][ T1559] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 326.455469][ T1559] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.478160][ T1559] usb 10-1: config 0 descriptor?? [ 326.489283][ T1559] cp210x 10-1:0.0: cp210x converter detected [ 326.627844][ T5932] usb 8-1: new full-speed USB device number 46 using dummy_hcd [ 326.634188][ T10] vp7045: USB control message 'in' went wrong. [ 326.642278][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 326.653568][ T10] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 326.667631][ T10] usb 9-1: USB disconnect, device number 33 [ 326.831005][ T5932] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 326.856196][ T5932] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 326.871819][ T5932] usb 8-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 326.892170][ T5932] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.903975][ T5932] usb 8-1: config 0 descriptor?? [ 326.910008][T10023] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 326.943337][ T1559] usb 10-1: cp210x converter now attached to ttyUSB0 [ 327.008267][T10034] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 327.104250][ T10] usb 10-1: USB disconnect, device number 5 [ 327.132744][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 327.151989][ T10] cp210x 10-1:0.0: device disconnected [ 327.356946][ T5932] sony 0003:12BA:0100.0009: unknown main item tag 0x0 [ 327.366708][ T5932] sony 0003:12BA:0100.0009: unknown main item tag 0x0 [ 327.373991][ T5932] sony 0003:12BA:0100.0009: unknown main item tag 0x0 [ 327.381435][ T5932] sony 0003:12BA:0100.0009: unknown main item tag 0x0 [ 327.394075][ T5932] sony 0003:12BA:0100.0009: unknown main item tag 0x0 [ 327.401532][ T5932] sony 0003:12BA:0100.0009: unknown main item tag 0x0 [ 327.409932][ T5932] sony 0003:12BA:0100.0009: unexpected long global item [ 327.429915][ T5932] sony 0003:12BA:0100.0009: parse failed [ 327.454519][ T5932] sony 0003:12BA:0100.0009: probe with driver sony failed with error -22 [ 327.567022][ T10] usb 8-1: USB disconnect, device number 46 [ 327.855013][T10063] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1162'. [ 328.374729][ T10] IPVS: starting estimator thread 0... [ 328.475525][T10083] IPVS: using max 26 ests per chain, 62400 per kthread [ 328.493338][ T5939] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 328.671378][ T5939] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 328.693474][ T5939] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.702246][ T1559] usb 8-1: new full-speed USB device number 47 using dummy_hcd [ 328.710230][ T5939] usb 9-1: Product: syz [ 328.714795][ T5939] usb 9-1: Manufacturer: syz [ 328.720746][ T5939] usb 9-1: SerialNumber: syz [ 328.729870][ T5939] usb 9-1: config 0 descriptor?? [ 328.753984][ T5939] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 034 [ 328.855329][T10102] fuse: Bad value for 'user_id' [ 328.861506][T10102] fuse: Bad value for 'user_id' [ 328.874944][ T1559] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 328.885872][T10103] FAULT_INJECTION: forcing a failure. [ 328.885872][T10103] name failslab, interval 1, probability 0, space 0, times 0 [ 328.886419][ T1559] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.898923][T10103] CPU: 1 UID: 0 PID: 10103 Comm: syz.5.1176 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.898957][T10103] Tainted: [L]=SOFTLOCKUP [ 328.898993][T10103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 328.899042][T10103] Call Trace: [ 328.899072][T10103] [ 328.899105][T10103] dump_stack_lvl+0xe8/0x150 [ 328.899206][T10103] should_fail_ex+0x412/0x560 [ 328.899282][T10103] should_failslab+0xa8/0x100 [ 328.899344][T10103] ? skb_clone+0x212/0x3a0 [ 328.899407][T10103] kmem_cache_alloc_noprof+0x87/0x650 [ 328.899522][T10103] skb_clone+0x212/0x3a0 [ 328.899593][T10103] __netlink_deliver_tap+0x424/0x8b0 [ 328.899710][T10103] ? netlink_deliver_tap+0x2e/0x1b0 [ 328.899800][T10103] netlink_deliver_tap+0x19c/0x1b0 [ 328.899882][T10103] netlink_unicast+0x7e3/0x9b0 [ 328.899978][T10103] ? __pfx_netlink_unicast+0x10/0x10 [ 328.900059][T10103] ? netlink_sendmsg+0x650/0xb40 [ 328.900101][T10103] ? skb_put+0x11b/0x210 [ 328.900164][T10103] netlink_sendmsg+0x813/0xb40 [ 328.900248][T10103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.900300][T10103] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 328.900395][T10103] ? finish_task_switch+0x41f/0xbe0 [ 328.900504][T10103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.900568][T10103] sock_sendmsg_nosec+0x112/0x150 [ 328.900643][T10103] ____sys_sendmsg+0x589/0x8c0 [ 328.900735][T10103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.900817][T10103] ? import_iovec+0x73/0xa0 [ 328.900890][T10103] ___sys_sendmsg+0x2a5/0x360 [ 328.900969][T10103] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.901115][T10103] ? __fget_files+0x2a/0x420 [ 328.901187][T10103] ? __fget_files+0x3a0/0x420 [ 328.901274][T10103] __x64_sys_sendmsg+0x1bd/0x2a0 [ 328.901344][T10103] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 328.901428][T10103] ? __pfx_ksys_write+0x10/0x10 [ 328.901511][T10103] do_syscall_64+0x14d/0xf80 [ 328.901563][T10103] ? trace_irq_disable+0x3b/0x150 [ 328.901625][T10103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.901683][T10103] ? clear_bhb_loop+0x40/0x90 [ 328.901748][T10103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.901823][T10103] RIP: 0033:0x7f58e999c799 [ 328.901889][T10103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.901951][T10103] RSP: 002b:00007f58e7bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.902012][T10103] RAX: ffffffffffffffda RBX: 00007f58e9c15fa0 RCX: 00007f58e999c799 [ 328.902052][T10103] RDX: 00000000000448d0 RSI: 0000200000000080 RDI: 0000000000000003 [ 328.902084][T10103] RBP: 00007f58e7bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 328.902116][T10103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.902147][T10103] R13: 00007f58e9c16038 R14: 00007f58e9c15fa0 R15: 00007ffdf5fa3c18 [ 328.902224][T10103] [ 329.208178][ T1559] usb 8-1: config 0 descriptor?? [ 329.222930][ T5939] (null): failure reading functionality [ 329.232200][ T5939] i2c i2c-3: connected i2c-tiny-usb device [ 329.241615][ T1559] cp210x 8-1:0.0: cp210x converter detected [ 329.433592][ T10] usb 9-1: USB disconnect, device number 34 [ 329.545613][ T5939] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 329.585579][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 329.640958][ T1559] usb 8-1: cp210x converter now attached to ttyUSB0 [ 329.708025][ T5939] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 329.718583][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 329.730679][ T5939] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 329.751789][ T5939] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 329.763460][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.774818][ T5939] usb 6-1: Product: syz [ 329.779614][ T5939] usb 6-1: Manufacturer: syz [ 329.784359][ T5939] usb 6-1: SerialNumber: syz [ 329.787497][T10109] FAULT_INJECTION: forcing a failure. [ 329.787497][T10109] name failslab, interval 1, probability 0, space 0, times 0 [ 329.802944][T10109] CPU: 1 UID: 0 PID: 10109 Comm: syz.9.1179 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.802977][T10109] Tainted: [L]=SOFTLOCKUP [ 329.802985][T10109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 329.802996][T10109] Call Trace: [ 329.803004][T10109] [ 329.803013][T10109] dump_stack_lvl+0xe8/0x150 [ 329.803050][T10109] should_fail_ex+0x412/0x560 [ 329.803080][T10109] should_failslab+0xa8/0x100 [ 329.803104][T10109] __kmalloc_noprof+0xe8/0x760 [ 329.803137][T10109] ? tomoyo_encode+0x28b/0x550 [ 329.803173][T10109] tomoyo_encode+0x28b/0x550 [ 329.803210][T10109] tomoyo_realpath_from_path+0x58d/0x5d0 [ 329.803253][T10109] ? tomoyo_path_number_perm+0x219/0x630 [ 329.803281][T10109] tomoyo_path_number_perm+0x246/0x630 [ 329.803311][T10109] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 329.803341][T10109] ? __lock_acquire+0x6b5/0x2cf0 [ 329.803384][T10109] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 329.803428][T10109] ? __fget_files+0x2a/0x420 [ 329.803458][T10109] ? __fget_files+0x2a/0x420 [ 329.803484][T10109] ? __fget_files+0x3a0/0x420 [ 329.803509][T10109] ? __fget_files+0x2a/0x420 [ 329.803540][T10109] security_file_ioctl+0xc3/0x2a0 [ 329.803577][T10109] __se_sys_ioctl+0x47/0x170 [ 329.803602][T10109] do_syscall_64+0x14d/0xf80 [ 329.803621][T10109] ? trace_irq_disable+0x3b/0x150 [ 329.803645][T10109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.803667][T10109] ? clear_bhb_loop+0x40/0x90 [ 329.803693][T10109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.803713][T10109] RIP: 0033:0x7f5a6ad9c799 [ 329.803735][T10109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.803753][T10109] RSP: 002b:00007f5a6bc89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.803775][T10109] RAX: ffffffffffffffda RBX: 00007f5a6b015fa0 RCX: 00007f5a6ad9c799 [ 329.803791][T10109] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 329.803804][T10109] RBP: 00007f5a6bc89090 R08: 0000000000000000 R09: 0000000000000000 [ 329.803818][T10109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.803830][T10109] R13: 00007f5a6b016038 R14: 00007f5a6b015fa0 R15: 00007fffd33d7e88 [ 329.803864][T10109] [ 329.803887][T10109] ERROR: Out of memory at tomoyo_realpath_from_path. [ 329.815164][ T5939] usb 6-1: config 0 descriptor?? [ 329.818240][T10107] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 329.863748][ T5851] usb 8-1: USB disconnect, device number 47 [ 330.062640][T10109] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 330.079038][ T5851] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 330.166918][ T5851] cp210x 8-1:0.0: device disconnected [ 330.179409][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1180'. [ 330.233712][ T5931] usb 6-1: USB disconnect, device number 61 [ 330.650032][T10131] fuse: Bad value for 'user_id' [ 330.658529][T10128] FAULT_INJECTION: forcing a failure. [ 330.658529][T10128] name failslab, interval 1, probability 0, space 0, times 0 [ 330.673640][T10131] fuse: Bad value for 'user_id' [ 330.682976][T10128] CPU: 1 UID: 0 PID: 10128 Comm: syz.8.1186 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.683009][T10128] Tainted: [L]=SOFTLOCKUP [ 330.683016][T10128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 330.683029][T10128] Call Trace: [ 330.683123][T10128] [ 330.683183][T10128] dump_stack_lvl+0xe8/0x150 [ 330.683265][T10128] should_fail_ex+0x412/0x560 [ 330.683330][T10128] should_failslab+0xa8/0x100 [ 330.683354][T10128] __kmalloc_cache_noprof+0x88/0x660 [ 330.683386][T10128] ? lockdep_hardirqs_on+0x7a/0x110 [ 330.683439][T10128] ? __request_module+0x2d0/0x660 [ 330.683477][T10128] __request_module+0x2d0/0x660 [ 330.683508][T10128] ? __pfx___request_module+0x10/0x10 [ 330.683537][T10128] ? kasan_quarantine_put+0xbb/0x1f0 [ 330.683569][T10128] ? __pfx___request_module+0x10/0x10 [ 330.683604][T10128] ? apparmor_capable+0x126/0x170 [ 330.683689][T10128] ? dev_load+0x21/0x1f0 [ 330.683722][T10128] dev_ioctl+0x384/0x1150 [ 330.683757][T10128] sock_do_ioctl+0x23e/0x320 [ 330.683788][T10128] ? __pfx_sock_do_ioctl+0x10/0x10 [ 330.683812][T10128] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 330.683848][T10128] sock_ioctl+0x5c6/0x7f0 [ 330.683877][T10128] ? __pfx_sock_ioctl+0x10/0x10 [ 330.683903][T10128] ? __fget_files+0x2a/0x420 [ 330.683929][T10128] ? __fget_files+0x3a0/0x420 [ 330.683955][T10128] ? __fget_files+0x2a/0x420 [ 330.683985][T10128] ? bpf_lsm_file_ioctl+0x9/0x20 [ 330.684007][T10128] ? __pfx_sock_ioctl+0x10/0x10 [ 330.684033][T10128] __se_sys_ioctl+0xfc/0x170 [ 330.684058][T10128] do_syscall_64+0x14d/0xf80 [ 330.684086][T10128] ? trace_irq_disable+0x3b/0x150 [ 330.684111][T10128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.684133][T10128] ? clear_bhb_loop+0x40/0x90 [ 330.684158][T10128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.684179][T10128] RIP: 0033:0x7f1a0799c799 [ 330.684235][T10128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.684254][T10128] RSP: 002b:00007f1a088b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.684308][T10128] RAX: ffffffffffffffda RBX: 00007f1a07c15fa0 RCX: 00007f1a0799c799 [ 330.684323][T10128] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000003 [ 330.684336][T10128] RBP: 00007f1a088b1090 R08: 0000000000000000 R09: 0000000000000000 [ 330.684348][T10128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.684360][T10128] R13: 00007f1a07c16038 R14: 00007f1a07c15fa0 R15: 00007fff7bc00c68 [ 330.684402][T10128] [ 330.746828][ T31] INFO: task syz.3.346:7212 blocked for more than 143 seconds. [ 330.973405][ T31] Tainted: G L syzkaller #0 [ 330.980149][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 330.989334][ T31] task:syz.3.346 state:D stack:26136 pid:7212 tgid:7205 ppid:5847 task_flags:0x400740 flags:0x00080002 [ 331.001641][ T31] Call Trace: [ 331.005122][ T31] [ 331.008349][ T31] __schedule+0x1665/0x5590 [ 331.013183][ T31] ? rcu_is_watching+0x15/0xb0 [ 331.027365][ T31] ? trace_sched_exit_tp+0x3a/0x150 [ 331.034836][ T31] ? ktime_get+0x45/0x220 [ 331.040335][ T31] ? __pfx___schedule+0x10/0x10 [ 331.049169][ T31] ? schedule+0x90/0x360 [ 331.053776][ T31] schedule+0x164/0x360 [ 331.059056][ T31] schedule_timeout+0xc3/0x2c0 [ 331.064225][ T31] ? irqentry_exit+0x61a/0x700 [ 331.069996][ T31] ? trace_irq_disable+0x3b/0x150 [ 331.075785][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 331.081641][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 331.088042][ T31] ? preempt_schedule_common+0x82/0xd0 [ 331.093866][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 331.099575][ T1559] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 331.109385][ T31] __wait_for_common+0x3c0/0x690 [ 331.114782][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 331.122291][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 331.128350][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 331.134127][ T31] wait_for_completion_state+0x1c/0x40 [ 331.140591][ T31] vfs_coredump+0x9c7/0x4280 [ 331.145828][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 331.151009][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 331.159550][ T31] ? __pfx_vfs_coredump+0x10/0x10 [ 331.164725][ T31] ? unwind_next_frame+0xa5/0x23c0 [ 331.172835][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 331.178953][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 331.184155][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 331.189380][ T31] ? unwind_next_frame+0xa5/0x23c0 [ 331.194652][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 331.200527][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 331.208427][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 331.213733][ T31] ? kernel_text_address+0xa5/0xe0 [ 331.219953][ T31] ? __kernel_text_address+0xd/0x30 [ 331.226880][ T31] ? unwind_get_return_address+0x4d/0x90 [ 331.232681][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 331.237925][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 331.243818][ T31] ? stack_depot_save_flags+0x3f3/0x810 [ 331.249674][ T31] ? kasan_save_track+0x4f/0x80 [ 331.254614][ T31] ? kasan_save_track+0x3e/0x80 [ 331.259708][ T31] ? kasan_save_free_info+0x46/0x50 [ 331.265114][ T31] ? __kasan_slab_free+0x5c/0x80 [ 331.271854][ T31] ? kmem_cache_free+0x189/0x640 [ 331.272232][ T5931] usb 9-1: new low-speed USB device number 35 using dummy_hcd [ 331.277901][ T1559] usb 8-1: Using ep0 maxpacket: 16 [ 331.290651][ T31] ? get_signal+0xa4a/0x1330 [ 331.296695][ T31] ? arch_do_signal_or_restart+0xbc/0x830 [ 331.299115][ T1559] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 331.303209][ T31] ? exit_to_user_mode_loop+0x86/0x480 [ 331.313095][ T1559] usb 8-1: config 0 has no interface number 0 [ 331.323170][ T31] ? do_syscall_64+0x32d/0xf80 [ 331.323434][ T1559] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 331.332746][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.346392][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.349256][ T1559] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 331.351688][ T31] get_signal+0x1107/0x1330 [ 331.363079][ T1559] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 331.366302][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 331.375153][ T1559] usb 8-1: Product: syz [ 331.379806][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 331.390535][ T1559] usb 8-1: SerialNumber: syz [ 331.397962][ T31] exit_to_user_mode_loop+0x86/0x480 [ 331.403941][ T31] ? rcu_is_watching+0x15/0xb0 [ 331.409103][ T31] do_syscall_64+0x32d/0xf80 [ 331.413918][ T31] ? trace_irq_disable+0x3b/0x150 [ 331.419372][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.419843][ T1559] usb 8-1: config 0 descriptor?? [ 331.433567][ T31] ? clear_bhb_loop+0x40/0x90 [ 331.439182][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.445325][ T31] RIP: 0033:0x7f379219c799 [ 331.454560][ T1559] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input39 [ 331.465012][ T31] RSP: 002b:00007f3792fa40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 331.478067][ T5931] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 331.479486][ T31] RAX: 00000000000000ca RBX: 00007f3792416098 RCX: 00007f379219c799 [ 331.495217][ T5931] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 331.514096][ T31] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f379241609c [ 331.534334][ T5931] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 331.536191][ T31] RBP: 00007f3792416090 R08: 3fffffffffffffff R09: 0000000000000000 [ 331.565498][ T5931] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 331.581152][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.593545][ T5931] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 331.603410][ T31] R13: 00007f3792416128 R14: 00007ffd94bebc40 R15: 00007ffd94bebd28 [ 331.613037][ T31] [ 331.616537][ T31] [ 331.616537][ T31] Showing all locks held in the system: [ 331.624354][ T5931] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 331.624430][ T5931] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 331.637027][ T31] 1 lock held by khungtaskd/31: [ 331.688782][ T31] #0: ffffffff8eb5d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 331.690102][ T5931] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 331.721983][ T5931] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 331.733552][ T31] 6 locks held by kworker/u8:6/148: [ 331.739965][ T5931] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 331.751797][ T31] 2 locks held by getty/5597: [ 331.758800][ T5931] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 331.767331][ T31] #0: ffff88803828f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 331.783130][ T5931] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 331.794399][ T5931] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 331.806573][ T5931] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 331.819048][ T5931] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 331.820887][ T31] #1: [ 331.834186][ T5931] usb 9-1: string descriptor 0 read error: -22 [ 331.846621][ T31] ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 331.857207][ T5931] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 331.869605][ T31] 3 locks held by kworker/1:4/5931: [ 331.876322][ T5931] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.884612][ T31] 2 locks held by udevd/5967: [ 331.893935][ T31] 2 locks held by syz.7.1188/10134: [ 331.903641][ T31] #0: ffff88801bbc40d0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 331.917347][ T31] #1: ffffffff8eb638e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 331.932474][ T5931] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 331.942397][ T31] [ 331.944903][ T31] ============================================= [ 331.944903][ T31] [ 331.970262][ T31] NMI backtrace for cpu 0 [ 331.970289][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 331.970317][ T31] Tainted: [L]=SOFTLOCKUP [ 331.970329][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 331.970342][ T31] Call Trace: [ 331.970350][ T31] [ 331.970360][ T31] dump_stack_lvl+0xe8/0x150 [ 331.970396][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 331.970424][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 331.970456][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 331.970486][ T31] sys_info+0x135/0x170 [ 331.970508][ T31] watchdog+0x1002/0x1060 [ 331.970540][ T31] ? watchdog+0x1da/0x1060 [ 331.970570][ T31] kthread+0x388/0x470 [ 331.970595][ T31] ? __pfx_watchdog+0x10/0x10 [ 331.970616][ T31] ? __pfx_kthread+0x10/0x10 [ 331.970641][ T31] ret_from_fork+0x51e/0xb90 [ 331.970672][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 331.970701][ T31] ? __switch_to+0xc7d/0x1450 [ 331.970730][ T31] ? __pfx_kthread+0x10/0x10 [ 331.970755][ T31] ret_from_fork_asm+0x1a/0x30 [ 331.970791][ T31] [ 331.970834][ T31] Sending NMI from CPU 0 to CPUs 1: [ 332.091554][ C1] NMI backtrace for cpu 1 [ 332.091576][ C1] CPU: 1 UID: 0 PID: 148 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 332.091601][ C1] Tainted: [L]=SOFTLOCKUP [ 332.091608][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 332.091620][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 332.091656][ C1] RIP: 0010:unwind_next_frame+0x0/0x23c0 [ 332.091676][ C1] Code: cc cc 89 d9 80 e1 07 80 c1 03 38 c1 7c 92 48 89 df e8 54 e0 b8 00 eb 88 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 81 ec 98 00 00 00 49 [ 332.091692][ C1] RSP: 0018:ffffc90002ee75e0 EFLAGS: 00000202 [ 332.091707][ C1] RAX: 0000000000000001 RBX: ffffc90002ee76a0 RCX: 0000000080000000 [ 332.091720][ C1] RDX: dffffc0000000000 RSI: ffffffff819066a8 RDI: ffffc90002ee75e8 [ 332.091733][ C1] RBP: ffffc90002ee7670 R08: ffffc90002ee76b0 R09: 0000000000000006 [ 332.091746][ C1] R10: ffffc90002ee7638 R11: ffffffff81b21b20 R12: ffff8880203d3d00 [ 332.091759][ C1] R13: 00000000000000f0 R14: ffffffff81b21b20 R15: ffffc90002ee75e8 [ 332.091772][ C1] FS: 0000000000000000(0000) GS:ffff888124ee1000(0000) knlGS:0000000000000000 [ 332.091790][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.091803][ C1] CR2: 00007f1a079e9e80 CR3: 000000002a6d8000 CR4: 00000000003526f0 [ 332.091820][ C1] Call Trace: [ 332.091827][ C1] [ 332.091833][ C1] arch_stack_walk+0x11b/0x150 [ 332.091856][ C1] ? worker_thread+0xba8/0x11e0 [ 332.091876][ C1] stack_trace_save+0xa9/0x100 [ 332.091897][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 332.091924][ C1] ? stack_trace_save+0xa9/0x100 [ 332.091947][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 332.091968][ C1] kasan_save_track+0x3e/0x80 [ 332.091993][ C1] ? kasan_save_track+0x3e/0x80 [ 332.092017][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 332.092033][ C1] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 332.092059][ C1] ? __alloc_skb+0x1d0/0x7d0 [ 332.092078][ C1] ? nsim_dev_trap_report_work+0x29a/0xb80 [ 332.092100][ C1] ? process_one_work+0x9ab/0x1780 [ 332.092124][ C1] ? worker_thread+0xba8/0x11e0 [ 332.092166][ C1] __kasan_slab_alloc+0x6c/0x80 [ 332.092183][ C1] kmem_cache_alloc_node_noprof+0x384/0x690 [ 332.092213][ C1] ? __alloc_skb+0x1d0/0x7d0 [ 332.092228][ C1] ? kmem_cache_alloc_node_noprof+0x23e/0x690 [ 332.092257][ C1] __alloc_skb+0x1d0/0x7d0 [ 332.092275][ C1] nsim_dev_trap_report_work+0x29a/0xb80 [ 332.092309][ C1] ? process_one_work+0x8bb/0x1780 [ 332.092333][ C1] process_one_work+0x9ab/0x1780 [ 332.092374][ C1] ? __pfx_process_one_work+0x10/0x10 [ 332.092397][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 332.092434][ C1] worker_thread+0xba8/0x11e0 [ 332.092464][ C1] kthread+0x388/0x470 [ 332.092487][ C1] ? __pfx_worker_thread+0x10/0x10 [ 332.092503][ C1] ? __pfx_kthread+0x10/0x10 [ 332.092523][ C1] ret_from_fork+0x51e/0xb90 [ 332.092549][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 332.092572][ C1] ? __switch_to+0xc7d/0x1450 [ 332.092596][ C1] ? __pfx_kthread+0x10/0x10 [ 332.092617][ C1] ret_from_fork_asm+0x1a/0x30 [ 332.092646][ C1] [ 332.278073][ T5931] usb 9-1: USB disconnect, device number 35 [ 332.285863][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 332.285960][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 332.286054][ T31] Tainted: [L]=SOFTLOCKUP [ 332.286083][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 332.286116][ T31] Call Trace: [ 332.286139][ T31] [ 332.286170][ T31] vpanic+0x56c/0xa60 [ 332.286241][ T31] ? __pfx___schedule+0x10/0x10 [ 332.286315][ T31] ? __pfx_vpanic+0x10/0x10 [ 332.286376][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 332.286461][ T31] panic+0xc5/0xd0 [ 332.286513][ T31] ? __pfx_panic+0x10/0x10 [ 332.286573][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 332.286651][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 332.286731][ T31] watchdog+0x105b/0x1060 [ 332.286824][ T31] ? watchdog+0x1da/0x1060 [ 332.286899][ T31] kthread+0x388/0x470 [ 332.286972][ T31] ? __pfx_watchdog+0x10/0x10 [ 332.287034][ T31] ? __pfx_kthread+0x10/0x10 [ 332.287099][ T31] ret_from_fork+0x51e/0xb90 [ 332.287191][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 332.287263][ T31] ? __switch_to+0xc7d/0x1450 [ 332.287331][ T31] ? __pfx_kthread+0x10/0x10 [ 332.287419][ T31] ret_from_fork_asm+0x1a/0x30 [ 332.287529][ T31] [ 332.290287][ T31] Kernel Offset: disabled