last executing test programs: 1m30.07211099s ago: executing program 1 (id=180): syz_usb_connect(0x2, 0xe4, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d2f6010000400009046a00067af4190009050f080000050801060c8b631b75072501020207000905", @ANYBLOB='\"$F'], 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r3, &(0x7f00000002c0)={0x29f, 0x7d, 0x2, {{0x500, 0xc, 0x0, 0x5000000, {0x96346fe8a85d25a7, 0x0, 0xa}, 0x61400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x9b, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x8f}_\xb9\xb6\x18\xcf\xf1\xe7.\x9f\xde\xec\xd8\xfd\xdeU\xc9\x1e\xe45\xd2\b\xf4\xa6\xe1\xa9\xb0\xd3\x85\b\x012\t2c\xa2\xe4\x1eb\xec-t\x98\b\x16\xbcv\xf3\xdaQ\x968\xdc\xb7\x88d\x86\xc8x\x9f\xaa\x06\xfe\x8c\x168X\x83\x92b\x01y\xcc\xb5\x8fu \xcc\xc5\xd3\xb0\nJ\xfa\xf9RZ\xe1?U\x9d\x88\xe88#<\xc6\xec\x97\xb2\xc6\x00P', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x29f) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="140004006e696376663000000000000000000000080005000600000014001780040007"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r5 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x200, 0x80201) (async) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) (async) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000002b00)=[@rdma_args={0x48, 0x114, 0x1, {{0xd, 0xc70f}, {0x0}, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/166, 0xa6}], 0x1, 0x40, 0x20}}, @rdma_args={0x48, 0x114, 0x1, {{0x4, 0x10}, {0x0}, 0x0, 0x37, 0x8, 0x4}}], 0x90, 0x4040010}, 0x0) fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1) 1m28.281800803s ago: executing program 1 (id=186): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) (async) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "263cb220ceea43c6", "c98b594dbcc2bca3f34365edbd055f48", "0500c230", "9e301b61c0d123b3"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "b7050023eb00", "d21b0e8a0e000000000000000600", "1d1cbe23", "717c34f544025fe2"}, 0x28) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) recvfrom(r1, &(0x7f00000015c0)=""/4082, 0xff2, 0x40000116, 0x0, 0x0) (async) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0xfe04}], 0x1) (async) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100) (async) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4002) 1m25.079642167s ago: executing program 1 (id=195): mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000e80)=0x9, 0x9, 0x1) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x5, 0x2, 0x1}) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x7fffffff, 0x6, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000e80)=0x9, 0x9, 0x1) (async) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x5, 0x2, 0x1}) (async) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x7fffffff, 0x6, 0x0) (async) 1m25.074843786s ago: executing program 1 (id=196): fsopen(&(0x7f0000000300)='smb3\x00', 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) pwritev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000200)="48d07e3a45a6a2b59e8243ddaf86e5f81cbe61f4f36c8b697f897b41d8e19efe5a3c800ddda31486c7ff31a800f4a6f30ee055fcdf4362", 0x37}], 0x1, 0x8, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyGS0\x00', 0x2, 0x16b) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) 1m25.013029124s ago: executing program 1 (id=197): r0 = memfd_secret(0x80000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0xd55ac000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="4400000010000104000000000000000000000000853d00000000000000000000120012000a00010076786c616e00000014000200080001007b0000000800020001020304", 0x44}], 0x1}, 0x0) syz_usb_control_io$lan78xx(r2, &(0x7f0000000400)={0x14, &(0x7f00000002c0)={0x0, 0x1, 0x5b, {0x5b, 0x11, "36f1dfa3eaa5aefa726bc59c8c2424ac87d92309883a743e0c53ff6b09bd00382f6b912ca78c697d3fcf718aa53e34205103cabda06c3dd41e935bcd59662941eada44036d165be19275a9430b9435f5a4455058e88765c9e7"}}, &(0x7f0000000340)={0x0, 0x3, 0xac, @string={0xac, 0x3, "79b9e77d70f23a19edb1a684eb048a0b0fe437b3bc958ff3beaa55d30ca900d84d7f20432cb885865c10b12ee5a4307104c9f1c5d043539b9406f677bd1ba33b4a0d88755a1e5c729b5a574646bba1ec08acd3e2769bd8cb632dac1a31246696b1ebe4f076557d0ea1af1e825f0da51a7140ca6fb3054547f1ac71224bf9b41e81f0c77155d20fbe81911976f46d9beb67f541e23d1072b1b1cc6de132a6954a7157471150b668af7186"}}}, &(0x7f00000006c0)={0x34, &(0x7f0000000440)={0x40, 0x12, 0xc6, "9d95f14b75707558c8179f53ac30eeef430187d4c25b8252f3cb5be03173382766cdafda9f19ebcb6756e8d769f61b8feafa02de160fba4a791aa2d3777ec0ea88aa82d04dedf9d2c4985326d27d885f057a3c3de173fd6b47f923762ef2e9ea3ae16b6402c57ea34c9cdcdd7340d44bc285fc1b9d8c60fbf519a49ff99c29436b8404153ce0bcb090b67a363919118a6cabee21dfc5dcd25fe2db97ce428ea3b2f22b4b74d2765cd71afb78e3dda99228cf48e11b386873c2fcee4ec90ceba689d48e6ada93"}, &(0x7f0000000540)={0x0, 0xa, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x64}, &(0x7f0000000600)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000640)={0x40, 0xa0, 0x4, 0x2}, &(0x7f0000000680)={0xc0, 0xa2, 0x2f, "4b709bec2e4cebcf475b781ac911c6c512a408d8e86679ad56da931592050c1549e7291c80e87067d85b28b3f86852"}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) r3 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000100)=0x10) link(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file0\x00') 1m21.283686608s ago: executing program 1 (id=218): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xe, 0x5ae5}, {0x6, 0x2, 0x7, 0x2}]}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005740), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000059c0)={0x0, 0x0, &(0x7f0000005980)={&(0x7f0000005900)={0x14, r3, 0x4cec764115e058c7, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x48800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xa, 0x3, 0x0, @SEQ_CONTROLLER=0xff}) (async) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x3ec0}], 0x1}}], 0x400000000000292, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000001c0)={@mcast1, 0x8000000, 0x2, 0x0, 0x18, 0x4, 0x96}, 0x20) (async) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r6, 0x8008af73, &(0x7f0000000ec0)={0x0, 0x1000, ""/4096}) 1m5.884268112s ago: executing program 32 (id=218): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xe, 0x5ae5}, {0x6, 0x2, 0x7, 0x2}]}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005740), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000059c0)={0x0, 0x0, &(0x7f0000005980)={&(0x7f0000005900)={0x14, r3, 0x4cec764115e058c7, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x48800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xa, 0x3, 0x0, @SEQ_CONTROLLER=0xff}) (async) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x3ec0}], 0x1}}], 0x400000000000292, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000001c0)={@mcast1, 0x8000000, 0x2, 0x0, 0x18, 0x4, 0x96}, 0x20) (async) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r6, 0x8008af73, &(0x7f0000000ec0)={0x0, 0x1000, ""/4096}) 29.848465583s ago: executing program 0 (id=370): syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) (async) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x20, 0xf, 0x82, {0x82, 0x3, "6342d93e8cebc92de5cfa76b8261f2d2c4735c86dcbe5c128d91e023aa27c7b70fbfc1393502fe7f8436a0bf4269c526febe662765d82471ff4612ad073c296a32bcae0414b01c9eef23695ebd3401a2bfdad2edd79ab838515133e0cd00c10cf97639b9a3866145a26434cc405a25dbe0724dd30623ee47ba4bfbb8d4844c88"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}}, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x0, 0x3, 0xee, "564611f0a8d97c700861136c0a9efd2bb1228917dec75d17a7106105dc3af95be5364403b75b9ffa09439eadd196d4c45d3e02d811065519331b053398f8787dd7d641ae5523aec357d46def0d1cc1e835d182791184b128b600ad063e552a8efc188a7777d1177183dbb09e859d240037aa497d5fbc90a80edb105edae2b3f0f0a09ca3936f8638e3100945aaf50dc0a86b5ebafc8a3015f0239f29c5f06728cef22a730b3fbb4e6f0c96d555902de03c58231b9491dab0bc6826c2ae0fbd300add29b47bfcd422c65035ab802cd78a9d9ff8701e15268e48b06998b8fcd5eee6cd04d388ffb9ef52c03069012d"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0xc0, 0xa1, 0x4, 0x7}, &(0x7f0000000380)={0x40, 0xa0, 0x4, 0x7f}, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "9980ca2e050c48fe87d4d8def28d55d1aba9d846e94102b5a63902d071a0d3c193df00fa7eabb0462f0af18648d6e8"}}) 28.61566634s ago: executing program 2 (id=378): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)=',\x00') syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b"], 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c2402"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x23, &(0x7f0000000100)=ANY=[@ANYBLOB="2303b6a8dba2ea866e823471760eb0a95f591455b03f6fc057f9a0621002b1e9504c57465fa948"]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41c}}]}) keyctl$revoke(0x3, r0) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) 28.592864069s ago: executing program 0 (id=379): r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_0\x00', 0x10) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73f72cc9f0ba1f8482d0000005e140602bde200030e000a00100000000a8000001294", 0x2e}], 0x1}, 0x40044) 28.291467707s ago: executing program 0 (id=381): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) readv(r0, &(0x7f0000000400)=[{0x0, 0xfffffec2}, {&(0x7f0000001940)=""/4082, 0xff2}], 0x2) creat(&(0x7f0000000040)='./file0\x00', 0x81) mkdir(&(0x7f0000000400)='./file0\x00', 0x114) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) (async, rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f00000002c0)=[{0x20, 0x2, 0x40, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) write$tun(r2, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1, {[@ra={0x94, 0x4}]}}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb39161906e8b6c78ab07fe1b3fe07565e76f3049a8f11350ffa159ce18eb0ce3712cc785657be76b1587f708924c9feb2e292ab97040cca863de23b3b516cc537105bb0404f84119e4260762c50671dc5aab1358ab653fbfb4bbcd3b4664ec16d8f9ec7829cd1af4a5450585bb1de8f968728adf5dec1de9e1e4a8ababf331c67b6c63551249f96344f4f4656e7cd6bf657857a8af5d2df76f377033b968501e40ed92b801d6efaaa61bdc158a6194b1fd1d6380bb7300a70b1d36c1a76ca97d8aec866053ca0d0d4830f966f48a3461bc25fba4dec31acaa7571527df4164e4f6a96c48ac714f8a8e0a4cd14617b52de88f0bee1cffccc96655f4fc658b5a0510e050f6f40aa3d28453590c3af7a4460719f9106f81797c856d60ec8528cc0c9487e69aa50cea9f374fa68593421c48bae1999c875cb205cc55f3c991416ff38e4f093a4c86ad36f19d1b3578242eedcfafd2c931fd2868dc24d9892f790ed560f40a848dd0670f0f611a61640053a2641ddc8ea149145bc5669b176bf12f40d9e0664760a3e476a93a362dd7dfcc3fd9f8be8ee2cd7a0a5fe189031bacbc1ed8e7c15a2bae104b7650c38ed42128a21ad834bac63ed73159e680f90d41475f28567eef33b4c21860ea1cd7a3f56ca286f87608ed49b72d36a1e6b04e4e0ba9ba7f76bece6426a6cad503c8ab33f28772edee91ab52fa29ff4da3893fa0629d1084b2a87f00a468feed92e5fe5aef33ae040aeb89098033fa81bec4535683391297f750f184f06ccb58dfa50ae2d6c159a0208481450bf38bca83f26c50fffe1449895cb8c990aa1cc0dd4cd2d0b4b3cc0006626898fdf274ecfaa1650c61e17f303f41559d75d470da40196aa5dff545903db275a12166b1692f334c70e4c5cf2ca2410989b429e3bc6e2e630adc5d6a039ad7872c4b4754cceeec43a3323d4594fcc28623e65f3067444e098c8817c9eb3f6dc06b6ec407438c09f2c137009c06505d88e0337c765f6c3b16f53bb0d1b235dbdc509ea3fd0996c8cad5bce70eea4d8852e7adfc222b06552d250e70211228251bfb5b95dd3b09bc30fc52337505a6f0689bfca144db622dead3525fbb73056d1b7fa7b08535af3952a8d77a1f34655eb69616c963f4e8b34e88b8405e0e3cd5130c4f98c4e180bfe76ec6cd6ac5e8ccf5d1cf99fdd79bca0a227ee78d2037a55c8593f7ff10bd42d82cd6c4931df7fa6c0c6a8246cef83599095269fb7841aec2cf1afb41d1c7c54136b2737d2c2ae2be604058b657eec27669b99fa669c92a9ebc8e817ed6860070d2fe6bad743ee65d35633de56f026710729102ed175e2ec0af8cc2840af173c71862e90bd370cd3d277a7d2622a5f00946649c1d7894f2a69c3cf8e21276d72c4536149038f9967ec0c748de34376da7971495e0cd783056cdf20cddab2e2201ea43e657e36c54d42c47d1e6a1c9dede599e6c0baac06c2e3fcc5687c5d4706f32337ab639633822dd98089ba20c532fbe4a5e72963d53a86ec34d6a4aa536015a3272c0d4cc0a3a3ab2196ec7a92bf2daf638ba5957941ff0facfe6a161da6a6cbf8e6b40c8b6a601ee91e592f6bb9dc85f84c99e088004ed3f650404934c8b1d436500f3c83333b33be5532076d1a718f80c139db1ac28c953cc23394a5a137567cde82fc681f32e66aa415c2358d02486cb6cb4d6a77e5b27d729e0116773725410332c58b4cc3683fc9dc5235b19a60ea8794986e56e5e8e2ce65655f261ee0c33c8c0b99e7b5bc61fb55040d9e109a3a1182a0f81c2ca081b14cc207b11dad4592add90ff543d2d237421f938af8a010cd197502dbf42f14f1572aabc9f16593a735c07484d61bc43b5f300eb66abe2052cec153f89c1819512316ad728eca65949bf1f903a556ae67871a0d35b0fcb5485e8fae70695cf90547784da27450d6c3e6049bf2f1b923fab49cf4caebccc7a0171aee4364db173c795cc486475427fb92efdbf161ab7a35aecb8e1d5435ea2733cc8dc3f824b00c6d3e05e406de563d1fc6aa77ef76351a3be04557d915df5ed1fd52207872666bbff9ffb84a6e91ae863af42b3e9dd6da62115ab71c6db508875db1a83e631c4cd658a6492cb1a8bd4a42b4546afb74484d519cb5b1a8db29d91ea575a09dc45f63b51b0ace075511556116db62507ed8b163430eea2dcc171890c51afe0ffb22d6595c15112730ce041648d543abf1871bb62b40303b277b2084eaee4895a9e552bcb2d319cbf733d2682940050095fc9499f116e3c828727c2f0755e2c624891a794a1bd9ff52237f13ccf144e67b5311e556333c5b11816fecd78fffb72190480b93e7fe13682b465aad1c2cf564c16d3e8fb07aed4b415f781a52dda6822ed0023b93c07b61e7740470216f29cb9c770ffd33837a6a0bc2990899778c74af304996ec13c1fc935b6d67b23f5190bf8b1bb3cc4e42bb2b9f1e3b330f24fe172396da0c8b52cdb4351a80fcebfcc85e54436327d8ad72d288551540f9a7bda7ecf2f2c41c3e775e26313de86c1b41ea1199321d533abe105ebfd90c9defd30ce9c7ea7a342b310eeca3dd88732dd9d7751c0ae685fbaed556727d2ece266a66ec7adc3a20f377b386ca7c909aba90fef9605ac37d43dd89e4da8455f086c1d2ce9c5b0eb4296ac64b7c244b28b4fd66a8be0442cbeacc7ba871efb11069d7c28dcdaf5798d0025741e461adabb3f270d056b1fe961e6626fc9a533924364687e80aa10e8ae081d743487bcfa97c0e1938dd47fc9075c3b0772284d98e683f0314c4a261845a3e50106e9c0a529b77293c251472a8eb6213ae49b0cc9d569e0a0c4fa1fb10663e4e0b6b0f9cee796aace2a1b42e42758a0180c2ee89119bf9359c6a277a062eda92a932ccf4b72ec1f998224acbe9eb8d594b8861b65ac276f1d401418c7be4d9344b52eb07aa74ba352e347f06e7e923b86cae5c0beb9f7aa0201b6537a82ea8f9281ac6e82a327ea7b879209dd30c1d40c22c402d3e6f09f4b4146b28cac26532eafbb5f6a67f6f734601ab352c804083570087124b23d7d3bff4d31569fcb8c091f157336d11e0e388a91ddf82b05b22dc3cc2ba4355a9453d9329cbca9d52489f15da5849ba32eb11d91184c6a352fe064aae6e85de05288282f911ebf2a932d43413c9bff9cb50f86af7eecca5eb9e3ce7fe9bc1743bcf24d01d02961116a87e4b55ddc1f217fb488c002cd85bb79db625bded4360983abf1e4574a9a46cfe05f0e45da2dd28703599adbae4703aad3ba1cc44813bcdf2432f0e5e9dd67ee8c6b34a9107fb81f21d87dd8fdf270068528685ea3c989beddc08410a59b5ad68d2fd9b37f8b3fddef393433de51b01314e3d6bb08fd7ea5b9abb4d4ccc5a5a43820004ac3870491b8df621be5388e2c3e2c40843d6798c493b308bef505d9f2d2734990a30150b4cefcaeb590118d21f331f201569c778cd5e54e34ec30a73d1fd48cd5d64d444a2a58856a71fa8173713136bdaef1b9cf1776cd7d5be3179ae7a2a95d7138334add686c5b50ca87e41b4c3f5343387cc491e97c280becefd3d72ae959a4fb3e51c15d6dea3210c480342c1748a040879f005f98a8b0d6a32fad631f557694179d117f71ae5fa6d54d4208aca72c5d1e03d34e80b221522c04b1bc7bc1ee008550a1757a1b74a0fea1d22778fd7e7a5f58e41cf72edf60d751bc35223646397457e8f9036838fd3b72e2bc176acc3e1e99a392b1d496cbfbdaa641b2212ef41c1728dd587272849b3a5cbe3b66f7eaf622d2cdf72ada32ccd3e16dddba2c890beaa8dba3773c88415fbcb733084a9bac52b6844f28377ba01fa3a09f74a57d87f31468ee2c64ae05b35fe3d660bcc6ed908b710a1216974db0232d90a124a4e8ee30322a20455feb4d0bef13ce0fafb56f492a99c3fb1c57900330bf75246147b44f23c77554119f1d96a4558d8fff90922af4f9299407344d7292d29ce3446e39bd9277e513e6068394584a08b356e6a0c641108f6e89390290844548a6c8122d8a83cc6c7d7f0c10d330a537d832bc779ea245a37c850b85858885541da0f914e1a41ec5b49ad9b3b41814f66c50bd1f49cd514d027ecd1bd2f002f1989fc621f23d6d5f1b9976ce95c305fa34ebd3404919c3414fd97227a590684ce5af0a18fb4fa6f41d4a3951fb49cc8184b547e9aa2ceb4912975ecf8e956bb29389789b8ceab72e7ae88fb402795ba7712323409fc83cbaf10a523dd4602d9ae7c158a56fee8df04ba4c48cdd63b1ce09bc697ca138f01f261f51bdc05480b7cf5f64836bf8e029d4883d4bc2f53115129cee1d9a9e57b4a5fb4ebef2237a2bdad349baeab05e6b24167ba67ea94f808d9d1386b08b0fd3c92a80ed253db5bb40e6a0c308339c615af56e554ed0d78881228da41706acd8596c52e33abc8a4a3317847dd50b8d77b341063fb29dd02594a540fa737a4dcf9c57ca8717d36e8a8a84eecf9ebb7bb0f4d8cb0f247f982e4fb7a29a7072f08eb1479e278b1084f4faba3c75b6c33438e24e7b454f1e8ee7c64507ef34f37e8655f49cf6871e8012bbf80d2fe2ad9424464d0a408ca50037f1b1221c2d3dbe4dfa75c236f6b59b8a9c8e3a4b1ef73bae3f8d44affc10c72485dee42b73671867221778a6f9ba1ddd5715a6115845af2da8687e0e75f35cca527cb21a07bb2018a574a7e1eb626ad6939990038588cabc63aaafada2c88336f2c764d52cf5c3740371c79ed30f4b7325768c43b9daab5532b4778bdc380bc56bf656eaeea1f7987db28672850e46fce9c9d7dcc7df7b01e9f98ae98890491949c3a9af72cf35227fe88e79d1853ab46903dffd8ceb6060b5a2da5ee061db21e07124b510af4be93a2eda5c9469c73ef661e52d1d3ddf6d0dbd58715730485d26b731da17fb67b1bdedd400cdd472ab88c059e99452b932202fa8500e9b14ec63791857fc33fb97a21469dc318e9799d6b8d3155a9b9ddae7704457f9fbafd0756fcf8464e2398a88b2b4ea3f655cacd390f6df7b195b35b25c6873f0c53ba2939efe513e448ec1c406380ca4e0a6ef53cb183f05bfe99b003429aa5a4709dbf9b6da2fcbc243bcc6b6e8840ed0636af84b6dd3c3b9e50f19c7fda40185dd542f8ff32e7ca9fad274847238e05cf0db24cf7ac1e2cecbcb20bbfe4868b6245899d8e6717a1f9321fd38b87c0c02bb24ed937e9460d03a5a38fa8e0d222105c8527d898f889bbe298b368fff9b951d1b0780352ce8ad10a5dea883292d6cf149618406fc33ca1539da60a1922ee27b7b74aa3507e6a5731bf2c42c879e9efa0750c8bacc63e2225589eab7bf237c259f715248b61278e4ef6f6d238d5bc9bde650795243874b294f228597cf687df0aa8ab1e58548991a1bd903f70408cd4c23f2db7f2ad3f9a0b12a4e52f09270d8f79aa0cde1ffd268d50fcf47c5b2a41898a076e8467cc40de311c26a1f5ff5d1a6693402f927077083490b65e594d5f4e848dc76e03adb210826926ef65e1f63346ad6a14b732cd7a23bf393e72b3c264258d7ea"}}}}, 0xfce) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async, rerun: 32) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x3) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0) write(r6, &(0x7f0000000540)=',v', 0x2) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) lsetxattr$security_evm(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240), &(0x7f0000000280)=@v2={0x5, 0x0, 0x17, 0x46}, 0x9, 0x1) (async) mount$afs(&(0x7f00000008c0), &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x0, 0x0) 27.083308764s ago: executing program 2 (id=384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @private=0xa010102}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r2, 0xb, 0xffffffff}, 0x10) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) mknod$loop(&(0x7f0000000240)='./file0\x00', 0xc000, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0xc0ed0000, 0x0) fcntl$getown(r3, 0x9) ioprio_set$pid(0x1, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 26.871497995s ago: executing program 2 (id=386): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) (async) move_pages(0x0, 0x3f, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) 26.699016764s ago: executing program 3 (id=387): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x281440, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x171) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x9, 0x3, 0x40, "7a014af368d512af5640d5c50c4f256a942f2bbc168c9fed0c2a25a9dbc28c7f", 0x20363159}) r2 = socket$inet6(0xa, 0x5, 0x8) r3 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x40) ioctl$BLKROSET(r3, 0x125d, &(0x7f00000001c0)=0x2) r4 = syz_io_uring_complete(0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x800, 0x13}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40890}, 0x40001) setsockopt$MRT6_ASSERT(r4, 0x29, 0xcf, &(0x7f0000000340)=0x1, 0x4) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r6, 0x20, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x40080) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r4) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd4, r7, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = syz_open_dev$hidraw(&(0x7f00000006c0), 0xa7, 0x402000) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000000700)) poll(&(0x7f0000000740)=[{r1, 0x9629}], 0x1, 0x6) getdents64(r4, &(0x7f0000000780)=""/238, 0xee) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000880)={0x1, @meta={0x43425052, 0x3ef49815, 0xf330, 0xb78a, 0x702d2d11}}) writev(r0, &(0x7f0000000cc0)=[{&(0x7f0000000980)="0380e4d0305dfe5af1d342edfe58998594a01b8db5241cab58846d19465c4d858f7584f03227e149af8fd48c7ea88b2312e9cb1321c8215ab0025f9864ba88a5b903e2c411115990926c80336f48fd74d966a9cc150f", 0x56}, {&(0x7f0000000a00)="97e06c3c32dc102dbca45416078d895d305b109b5d123aee8cbe1395100492bb3e7632a1d283f15af405ec4397b6627e0febef58b699f83b2c6de17f1c639832ba4b692ce034391545f33311ce16ac4dbc4f99f06a72508df91615469535b6ef8e7731bd2e", 0x65}, {&(0x7f0000000a80)="5f012fad2e6e8b676ec7696177c6f1b52e9ebcd636b0a660972fbb0e3f90f4e9f0d51c28be27ea8448ab06d3a074e9c5370bf07fa1043b64dc3d462ce7606617de30b7d71a4ee402cd881a708fa2e28b5a5c990fe2ac7bcf1ee67685e7d796e45454737b0f71453c26207ac0fe91c2113bb88021baf526a1862c2543bd77761561f66c6017f7b571db6e65655029d95ecd1db3227df603aed68f1540758eee6c2dae0fb69fd5f571812fa69fc2e7921fd858809dd14a325bfd89b1034189244a38", 0xc1}, {&(0x7f0000000b80)="7eace6dbd8ab1a17abe9ba9978a938f8ea6aaa37888c7053b2a533dc58640a178274ec3fdf39db07267a69e20eb80b4ae3671442651fbf9c4bef28ce3b970b410722e0c1fdbc274dddfbebd9978cd097492b173e85a05476eeee186ca2cdc4820d743e0a32fc03334f537b814b3a8bc0850ad9727d2e9747fc777aaae9aa9461f48c28ad0f741790725618f4505183e18d4e7b5fd250", 0x96}, {&(0x7f0000000c40)="74cdec655478e08b82783263105bea7c5f6d9038ba53ff8f814f1626c49c6ec3c08cffa172a92c7231be6e665545da933ec16251a36be2c1be7d895ecbe6bb58a62d59429d4e1020d8e8d6f1c38d6ed9fa228e87ba6334d34a2d7ade9a7602ec487608a3c88aa8", 0x67}], 0x5) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000d40)={0x0, 0x3, 0xc, 0xf25, 0x4, 0x7f, 0x5, 0x4, {0x0, @in6={{0xa, 0x4e23, 0x3, @empty, 0x1}}, 0x0, 0x14f, 0x8, 0xf65, 0x8001}}, &(0x7f0000000e00)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000f00)={r9, 0x88, &(0x7f0000000e40)=[@in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x8}, 0x6}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e22, 0x800, @mcast2, 0x200}]}, &(0x7f0000000f40)=0x10) ioctl$VHOST_VDPA_SET_GROUP_ASID(r4, 0x4008af7c, &(0x7f0000000f80)={0x3}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000fc0)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @private=0xa010101}, @in6={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}], 0x4c) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001080)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r10, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4880) 26.543343936s ago: executing program 0 (id=389): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000680)={0x0, [[0xff7ffffe, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffffe, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x7, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x4}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0xad, 0x0, 0x30, 0x66}) 26.501732755s ago: executing program 2 (id=390): r0 = landlock_create_ruleset(&(0x7f0000000040)={0xe000, 0x3}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$KVM_CREATE_VM(r1, 0x80111500, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000180)=0x5) r2 = socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/74, 0x32a000, 0x1000}, 0x1c) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001a1401"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x10) chdir(&(0x7f00000000c0)='./file1\x00') openat$rfkill(0xffffffffffffff9c, 0x0, 0x28001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r4, 0x5) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) socket$inet6(0xa, 0x2, 0x0) accept$inet(r4, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x1, 0xca) write(r6, &(0x7f00000002c0)="ea", 0x1) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r6, 0x7b1, &(0x7f00000014c0)={&(0x7f00000004c0)=[0x3f9, 0x5, 0x8, 0x4, 0x1, 0xf, 0xc0, 0xcc87, 0xffff0000, 0x6, 0xba, 0x4, 0x267a, 0x50, 0x1000, 0x5, 0x0, 0x6, 0x62, 0x1, 0xffffffff, 0x3, 0x98, 0x3ff, 0x3, 0xffffffff, 0x8001, 0x4, 0x0, 0x4, 0x5, 0x4, 0x0, 0x1000, 0x5, 0x4051e, 0x6, 0x346cff93, 0x4, 0x0, 0xf4e5, 0x4, 0x101, 0x68, 0x1, 0x2, 0xffffffff, 0x8, 0x4f, 0x1f, 0x3ff, 0x9, 0x4, 0x80, 0x5, 0x2, 0xe, 0x482, 0x0, 0x4, 0x5, 0x1ff, 0x2, 0x3, 0x9591, 0x3, 0x8001, 0x5, 0x7, 0x5, 0xd, 0x1, 0xd, 0x7, 0x5f400000, 0x10000, 0x4, 0x30, 0x3, 0x4, 0x8, 0x3, 0x36c, 0x1, 0x8001, 0x8, 0x10000, 0x6, 0x7, 0x3, 0x7b, 0x73ec, 0x9, 0x2, 0x4, 0x9, 0x3, 0xffff7177, 0x7, 0x7e92, 0x4, 0x6, 0x7de, 0x3, 0x3, 0x4, 0xc492, 0x9, 0x4, 0x1, 0x8000, 0x8001, 0x80000001, 0x0, 0xe2b3, 0x1, 0x1000, 0x0, 0x23c, 0x5, 0x130, 0x9, 0x7, 0x0, 0x10, 0x9, 0xb, 0xf1, 0x6, 0x3, 0xa5, 0x10001, 0x9, 0x0, 0x4, 0x1, 0x4, 0x7, 0xe3db, 0x96, 0x9, 0x7ff, 0x6c5, 0x8, 0x50, 0x2, 0x1, 0x0, 0x7, 0x5ac, 0x3, 0xffffff24, 0xf096, 0xff, 0x4, 0x0, 0xe4, 0x0, 0x400, 0x7f, 0x2, 0x7, 0x0, 0x2, 0x5, 0x1, 0xe75, 0x10, 0x400, 0x5, 0x9, 0xd, 0x3, 0x3, 0x7de, 0x65, 0xe, 0xa, 0x5, 0x0, 0xfffffff8, 0xc3, 0x4, 0x9, 0x6, 0x200, 0x0, 0x5, 0x2, 0x9, 0xfff, 0x5, 0x9, 0x9, 0x9, 0x2f, 0x9, 0x2, 0xe38, 0x4, 0x4e0, 0x6, 0xe808, 0x89, 0x800, 0x80000000, 0x4, 0xfffffffb, 0x6, 0x9, 0x0, 0x7, 0x7, 0x9, 0xfffffff1, 0x9, 0x6b6, 0xf906, 0xc94, 0x7, 0x6, 0x9, 0x8, 0x9, 0x2, 0x4, 0x9, 0x30, 0xe, 0x1ff, 0x1, 0xdf0f, 0x8, 0x9, 0x101, 0x4, 0x4, 0x8, 0x8, 0x6, 0xab15223, 0x30ac, 0x8, 0x9, 0x0, 0x310, 0xa, 0xe, 0x100, 0x4, 0x7fff, 0x8, 0x67, 0x8001, 0x0, 0x7f, 0x1, 0x8001, 0x6, 0x80, 0x8, 0x1000, 0x1, 0x5, 0x6, 0x7, 0x8001, 0x4, 0x7, 0x100, 0x3, 0x1, 0x1000, 0xe163, 0x8, 0x7, 0x2, 0x8, 0x9, 0xf5, 0xfffffb4c, 0x100, 0x5, 0xffffffff, 0x7b, 0x10000, 0x7, 0x4, 0x200, 0x6, 0x0, 0x7, 0x0, 0x6120, 0x401, 0x5, 0x5, 0x9, 0x5, 0x3, 0x9, 0x1ff, 0xd, 0xe2ed, 0x1, 0x2, 0x1000, 0xe, 0x4, 0x2, 0x7, 0xd, 0x5add, 0x2, 0x5, 0xffffffff, 0x415, 0x3, 0x7f, 0x0, 0x1, 0x7, 0x1, 0x1ff, 0x400, 0x2, 0xb3, 0x400, 0x7, 0x7, 0x1, 0x1ff, 0x3, 0x5, 0x7, 0x2, 0x8001, 0x9, 0x9, 0x4, 0x8, 0x6, 0x5, 0x7d73, 0x4, 0x7, 0x8, 0x80, 0x8000, 0x7a0a, 0x1000, 0x1000, 0x10000, 0x3ff, 0x3, 0x3, 0x5, 0x312c6986, 0x51, 0x8, 0x800, 0x7, 0x3, 0x400, 0x0, 0x9, 0x138, 0x1, 0x800, 0x7fffffff, 0x8, 0x2, 0x1, 0xd5, 0x7, 0x6, 0x0, 0x2, 0xdca, 0x9b, 0x3, 0x6, 0x10000, 0x200, 0x8, 0x3ff, 0xb4, 0x800, 0x4, 0x7, 0xfffffffb, 0xfffffffd, 0x8001, 0x8a, 0x756, 0xfffffff8, 0x6, 0x4000, 0x2, 0x800, 0x3, 0x6, 0x300000, 0x80000001, 0x4, 0x3, 0x3, 0x5252, 0x3ff, 0xfffff801, 0x80000001, 0xfffff1ae, 0x2, 0x9, 0xfffffff9, 0x1, 0x5, 0xffffff70, 0x80000000, 0x30, 0x40, 0x1, 0x1, 0x0, 0x6, 0x7fffffff, 0xd7e, 0xfffffffc, 0x5, 0x101, 0x5, 0x7, 0x2, 0x3, 0x670d, 0xffffffff, 0x2, 0x400, 0x10, 0x4, 0x4, 0x80, 0x4, 0x4, 0x6, 0x256, 0x9, 0x100, 0xfffffffc, 0x38, 0xffffffff, 0x9e, 0x8102, 0x4, 0xa33, 0x7, 0x8, 0x4, 0x80, 0x200, 0x2ea, 0x9, 0x0, 0x8, 0x3, 0x101, 0x0, 0x7, 0x0, 0x7, 0x9, 0x4, 0x9, 0x8, 0x7, 0x8, 0x10, 0x3, 0x401, 0x6, 0x7fc000, 0x7f, 0xffffffff, 0x1, 0x6, 0x8, 0x4, 0x100, 0x51c13da7, 0x5, 0x5, 0x6, 0x3, 0x8, 0x3, 0x2, 0x3, 0x6, 0x200, 0x40, 0xfffffffd, 0x2, 0x0, 0x68e9, 0x400, 0x10000, 0x0, 0x1d486a6c, 0xb, 0x10, 0xa, 0x6, 0x100, 0x8, 0x0, 0x3, 0xc404, 0x9, 0xff, 0x80000000, 0xffffffc2, 0x4, 0x10000, 0x9, 0x10000, 0x1, 0x9, 0x5, 0x5, 0x5, 0xfff, 0x7, 0x6, 0x9, 0x7, 0x6dab, 0x0, 0x2, 0xa, 0x6d38, 0x2, 0x9, 0x2, 0x8, 0x7, 0xd, 0x8, 0x74, 0x2, 0x54c, 0xc8b3, 0x4, 0xfffffffb, 0x2, 0x4, 0x5, 0x58, 0x8, 0x800, 0x3, 0x3, 0x4c391650, 0x2, 0x5, 0xffffcb8a, 0x1000, 0x0, 0x0, 0x7, 0x8000, 0x6, 0x5c0, 0x2cc, 0x10001, 0x3, 0x7, 0x6, 0xf8, 0x10000, 0x2, 0x3, 0x4, 0x1, 0x60, 0x8, 0x7, 0x1, 0x4, 0x9, 0x50a, 0xffff, 0x7fff, 0x6, 0x9, 0x10000, 0x8, 0x10000, 0x99, 0x9, 0x5, 0xaaf, 0x8, 0x539, 0xfffff251, 0x5, 0x7, 0x1, 0x7, 0x9e, 0x6, 0x1, 0x2, 0x1, 0x1, 0x9e35, 0xb, 0x4a9, 0xc08, 0xc0b, 0x0, 0x1, 0x1b, 0xcd, 0xded5, 0x1, 0x1, 0x6, 0x7, 0x61a, 0x4, 0x9, 0x5, 0x3740, 0x8, 0x1, 0x0, 0x0, 0x6, 0x8, 0x2, 0x8, 0x3, 0x6, 0x4, 0xfffffffd, 0x2, 0x5, 0xa, 0xab, 0x8, 0x3, 0x8f81, 0x1000, 0xf, 0x5, 0x401, 0x1, 0x80, 0xb, 0xe743, 0x8, 0x80000000, 0x5, 0x89, 0x4, 0x8, 0x501, 0x7, 0x1, 0xe, 0xfffffffc, 0xfffffffb, 0xe, 0x7f, 0x0, 0xa, 0xfffffffa, 0x7fffffff, 0x2, 0x88c6, 0x0, 0x9, 0x7f, 0x2, 0x0, 0x3, 0xfffffc01, 0x80000000, 0x5, 0x8fe, 0x1000, 0x10000, 0x5, 0x3, 0x1, 0x2, 0x54000000, 0x5, 0xe, 0x2, 0x7ca7, 0x2, 0x8, 0x3ff, 0x5, 0x8, 0x9, 0x8, 0xfffffffc, 0xe, 0x7, 0x5, 0x8000, 0x3, 0x7, 0xf, 0x1, 0x2, 0x8, 0x1, 0x2, 0x80, 0x4, 0x4, 0x3, 0x2, 0x8, 0x8, 0x1000, 0x7fffffff, 0xfffffffe, 0x3, 0x2, 0x80000000, 0x80000000, 0x3ff, 0x5, 0x9, 0x401, 0x9, 0x8, 0xffff, 0x101, 0x80000001, 0x0, 0xe4c, 0x1, 0xffffffff, 0x2, 0x0, 0xc50a, 0x1ff, 0x10000, 0xdd0, 0xfffffff8, 0x781, 0x0, 0x0, 0x8, 0x401, 0x7, 0x3, 0x101, 0x0, 0x6, 0x8700, 0xf936, 0xac6, 0x1, 0xffffffff, 0x10, 0x4d38, 0x4, 0x65ef1bca, 0xd, 0x43, 0xfffffffa, 0x6, 0xfffffeff, 0x9, 0x6, 0xe23, 0x3df4, 0xc, 0x6, 0x7, 0x3, 0xa, 0x4, 0x401, 0x3, 0x10, 0x38e00, 0x6, 0xff, 0xfffffffb, 0x6, 0xffffffef, 0xffff, 0x4, 0x7, 0x9, 0x1000, 0x8, 0xfffffff9, 0x7, 0x80a1, 0x5, 0x0, 0x4, 0xfffffb05, 0x8, 0x3, 0x3, 0xffffffff, 0x10001, 0x10000, 0x3, 0x2, 0xb89, 0x3, 0x6397bdee, 0x3, 0x5, 0xffffd318, 0x7, 0x5, 0x0, 0xbc, 0x2, 0x7, 0x5, 0x1, 0xa, 0x1, 0x3, 0xcf3a, 0x0, 0x6, 0x44, 0x1, 0x4, 0x5, 0x7, 0x0, 0x7, 0x40000, 0x0, 0x3, 0xe8, 0x200, 0x4, 0x564, 0x100, 0x5, 0x1, 0x2, 0x38000000, 0x0, 0x5, 0x741, 0x0, 0x28f, 0x5, 0x0, 0x7, 0x7, 0x8, 0xb5b, 0x4, 0x2b0d, 0x866, 0x7f, 0x0, 0xf68, 0x9, 0x8e3, 0x4, 0x0, 0x81, 0xfffffffd, 0x8, 0x2, 0x8, 0x6, 0xffffff00, 0xfff, 0x7, 0x8, 0x8cd, 0x9, 0x8, 0x1d7, 0xfffffff9, 0x1a000, 0x7a3, 0x3, 0x7, 0x3a8000, 0xec1, 0xd1d6, 0x1, 0x7, 0x2, 0x783b, 0x3, 0xfffffffa, 0x7, 0x8, 0x0, 0x3, 0xe, 0x3, 0x7, 0x66, 0x0, 0x7fff, 0x0, 0x5, 0x1, 0x3, 0x6106, 0x9, 0x9, 0x4, 0x8, 0x5, 0x800, 0x40, 0x6, 0xfff, 0xb, 0xbf0d, 0x2, 0x54b, 0x0, 0x683, 0xfffffc01, 0x9, 0x4, 0x0, 0x5, 0xff, 0xa1e, 0xcc3, 0x3, 0xa65, 0xb, 0x20, 0xfffffff2, 0x2aa4, 0x7, 0x2, 0x1ff, 0x1ff, 0x8, 0x7, 0x8001, 0x4, 0xffffffde, 0x3, 0x6, 0xfff, 0x9, 0x9, 0x100, 0x8, 0x5, 0x3, 0xc, 0x0, 0x0, 0x10001, 0x17d4, 0x5, 0xa, 0x1, 0x0, 0x0, 0x80000001, 0x5, 0x9, 0x5, 0x10000, 0x4, 0x0, 0x2a, 0x5, 0x3ff, 0x3, 0x1, 0x1000, 0xba, 0x4, 0x4, 0x7, 0xbafe, 0x200, 0x8b8, 0x6a53, 0x9, 0x16, 0x3, 0x6, 0xfffffff7, 0x0, 0x10, 0x1ff, 0x6, 0x200, 0x66e, 0x1, 0x9, 0x800, 0x3, 0x10000, 0x1, 0x8001, 0x1, 0x1, 0x0, 0x7, 0x4, 0x7], 0x2, 0x400, 0x4}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', r7, &(0x7f00000003c0)='./file0\x00', 0x2) openat$cgroup_ro(r7, &(0x7f0000000100)='io.stat\x00', 0x275a, 0x0) 25.991671487s ago: executing program 3 (id=391): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyGS0\x00', 0x2, 0x16b) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) 25.850308841s ago: executing program 3 (id=393): mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x7ffffffff000, 0x3, &(0x7f0000007000/0x1000)=nil) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write$binfmt_script(r2, &(0x7f00000003c0)={'#! ', './sys_sec'}, 0xd) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000180)) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1b9) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) (async, rerun: 64) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) (rerun: 64) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) write$vga_arbiter(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='lock i'], 0x8) (async, rerun: 64) r4 = socket(0x2, 0x3, 0xff) (rerun: 64) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='wg0\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000000680)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f00000004c0)="2d9b1d00000000000000000000000000000000005315b443b7d788aec4bf4890556e91eebbdef82765cda6401bcf473eb55635e9", 0x34}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000280)="0bffeb36a5589800d082488a3574213ca10df06c0190bd39c9b1deec10a83bbf50c82aaac0533629c96719d6", 0x2c}], 0x1}}], 0x2, 0x4) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2], 0xc0}, 0x1, 0x0, 0x0, 0x801}, 0x220408e0) 25.400797951s ago: executing program 2 (id=395): syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0x38, 0xf3, 0x98, 0x8, 0x1199, 0xc081, 0x29c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x6, 0x0, 0xf8, "", [{{0x9, 0x4, 0x8, 0x25, 0x0, 0x34, 0x6a, 0x7a, 0x5}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x4d, &(0x7f0000000740)={0x5, 0xf, 0x4d, 0x1, [@generic={0x48, 0x10, 0xa, "516ebf24003dce515f0083ac32b3320e88f6675fd062e8c37655a2566dc5eb3a19316f871c4cc2783d071c99b6944684aefa90d55289b383751be2f3823ce99a550af231ff"}]}}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0x38, 0xf3, 0x98, 0x8, 0x1199, 0xc081, 0x29c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x6, 0x0, 0xf8, "", [{{0x9, 0x4, 0x8, 0x25, 0x0, 0x34, 0x6a, 0x7a, 0x5}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x4d, &(0x7f0000000740)={0x5, 0xf, 0x4d, 0x1, [@generic={0x48, 0x10, 0xa, "516ebf24003dce515f0083ac32b3320e88f6675fd062e8c37655a2566dc5eb3a19316f871c4cc2783d071c99b6944684aefa90d55289b383751be2f3823ce99a550af231ff"}]}}) socket$inet_udp(0x2, 0x2, 0x0) 25.327539472s ago: executing program 4 (id=396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000600000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30"], 0xf0}}, 0x0) 25.163450278s ago: executing program 4 (id=397): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) (async) r1 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0/../file0\x00'}) ppoll(&(0x7f0000000080)=[{r0, 0x20}, {r4, 0x8121}, {r1, 0x550}, {r0, 0x80a1}, {r0, 0xa0}, {r0, 0x4420}], 0x6, &(0x7f0000000140)={r2, r3+10000000}, &(0x7f0000000240)={[0x6]}, 0x8) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000680)="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", 0xfc) (async) write(r6, &(0x7f0000000680)="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", 0xfc) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) (async) r7 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) read(r7, &(0x7f00000001c0)=""/71, 0x47) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 25.04484789s ago: executing program 4 (id=398): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0xfffffffffffffffa) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x2, r2}) close(r0) r3 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) r4 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast2, @in=@local, 0xec24, 0x4, 0x0, 0x3, 0x2, 0x0, 0x0, 0xc}, {0x81000, 0x200000004, 0x40000000007, 0xffffffff, 0x100000000, 0x0, 0x200000003, 0x9}, {0x5}, 0x5, 0x0, 0x2, 0x0, 0x4, 0x3}, {{@in=@empty, 0x4d5, 0x6c}, 0x2, @in=@private=0xa010101, 0x3502, 0x4, 0x8, 0x0, 0x9075, 0xef, 0x9}}, 0xe8) setxattr$system_posix_acl(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='system.posix_acl_access\x00', &(0x7f0000000c00)={{}, {}, [{0x2, 0x4}, {0x2, 0x2, 0xee01}], {}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2}, {0x8, 0x5}, {}, {0x8, 0x75cc4ccc56af2412, 0xffffffffffffffff}, {0x8, 0x2}], {0x10, 0x1}}, 0x6c, 0x0) ioctl$MEMERASE64(r3, 0x40104d14, &(0x7f0000000040)={0x9, 0xfffffffffffffffe}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000600)={{r1, &(0x7f00000001c0)='/dev/mtd#\x00', 0x2000, &(0x7f0000000200)={@_ha_fsid={[0xd9, 0x800]}, {0xff, 0x25ca, 0x4, 0x1}}, 0x7fffffff, &(0x7f0000000240), &(0x7f0000000280)=0x101}, {[0x0, 0xe, 0x6, 0x1]}, 0x2, 0x3f, &(0x7f00000005c0)=""/63}) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r7, 0xc02864c3, &(0x7f0000000400)={&(0x7f00000001c0)=[r8], 0x12a05f200, 0x1, 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r7, 0xc00864c5, &(0x7f0000000180)={&(0x7f0000000080)=[r8], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000680)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000006c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000700)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000740)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000780)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000007c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r6, 0xc02864c3, &(0x7f0000000840)={&(0x7f0000000800)=[r8, r9, r10, r11, r12, r13, r14], 0x8, 0x7}) sendmsg$nl_xfrm(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="8c020000100021040000000000000000fe88000000000000000000000000fc01e00000020000000000000000000000000000c12700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000000002b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e"], 0x28c}}, 0x0) r15 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000004c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x5}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000540)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r15, 0xc01864ba, &(0x7f0000000580)={0x9, r16, r17, 0xe0e0e0e0}) 24.972676266s ago: executing program 3 (id=399): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc0105303, &(0x7f0000001380)={0x0, 0x0, 0x0, 'queue1\x00'}) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000001c0)={0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x30, r6, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x9}]]}, 0x30}}, 0x4008002) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000140)={0x2, 0x0, [{0x40000001, 0x8, 0x4, 0x31237648, 0x9, 0x2, 0x80}, {0x4000000a, 0x5, 0x2, 0xffff, 0x7fffffef, 0x5b}]}) 24.836171012s ago: executing program 4 (id=400): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x20000) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000080)=0x23) write(r0, &(0x7f0000000000)="38000000240001040100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002800500010010000000", 0x38) write(r0, &(0x7f0000000040)="38000000240001040200000000000000000000000100000000000200010001000000000008000100657473000c0002800500010010000000", 0x38) 24.755018635s ago: executing program 4 (id=401): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x16b) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) 24.678606316s ago: executing program 3 (id=402): r0 = socket$inet(0x2, 0x1, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)=':27.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000600)={r0, &(0x7f00000004c0)='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00', 0x80, &(0x7f0000000540)={@align=0x5, {0x7, 0x41e, 0x9, 0xfffffffffffffffb}}, 0xb9c2, &(0x7f0000000580), &(0x7f00000005c0)=0x9}) r2 = accept4$unix(r1, &(0x7f0000000640)=@abs, &(0x7f0000000240)=0x6e, 0x800) recvmsg$unix(r2, &(0x7f0000000480)={&(0x7f0000000340), 0x6e, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/23, 0x17}], 0x1, &(0x7f0000000440)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x40012001) r3 = accept$inet(r0, 0x0, 0x0) read(r3, &(0x7f0000000100), 0x4) read(r3, &(0x7f0000000304), 0x4) write(r3, &(0x7f0000000300), 0x100) 24.672985644s ago: executing program 4 (id=403): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x6, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0x3, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x80000b, 0xad, 0x2, 0x4, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00860, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7dff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x9, 0x7ffe, 0x28, 0x10, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000000209010100000000000000000a0000040900010073797a3000000000040002000c00000000000c000003ffff100002210000137500ac35776a98a0a60d077c1900"/78], 0x40}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r5, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f0000000580)={0x0, 0x280, 0x1e0, 0x34325258, 0x3, [0x2], [0x80ffff], [0x0, 0x0, 0x0, 0xff], [0x400000000000000]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x8081, 0x0) write(r7, &(0x7f0000000200)='md0', 0x3) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4042, 0x0) ioctl(r8, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002") ioctl(r8, 0x40140921, &(0x7f0000000420)="0100000002") ioctl(r8, 0x80480911, &(0x7f0000000440)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000114000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740000000020000000000000000000000dca1f8de"], 0x64}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r9) 24.123528672s ago: executing program 2 (id=404): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x442, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0xd, 0x1, 0x1, 0x7, 0xb, 0x9ee, 0x8000}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f12f090934c3b32f2f4777c65b1574826727f5f62", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc567", 0x9e}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b", 0x15}, {&(0x7f0000000300)="9e7f", 0x2}], 0x5, 0x0, 0x0, 0x900}}], 0x1, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', &(0x7f0000000340)={0x121900, 0x40, 0x5}, 0x18) r5 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='ms_mode\x00', &(0x7f0000000100)='crc\x00', 0x0) r6 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file7/file0/file0\x00', r4, &(0x7f0000000000)='./file7/file0\x00', 0x1) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r7, &(0x7f0000000240)=""/157, 0x9d) getdents(r7, 0x0, 0x0) 24.120209405s ago: executing program 0 (id=405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000f00020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30"], 0xf0}}, 0x0) 24.045120678s ago: executing program 0 (id=406): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="280000002c000100000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0a000280976b6408686000000400e77f5497cc4f40258921028330f86e14495090b2b78f373047180d947fc08229120af82c0400b3c49a9af378fa1b0366aea66fafc65760502ae04837460d866ad749542801965b40a7bfaa523890c2"], 0x28}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)='$', 0x1}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0xb7b, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x5, 0x6, 0x4c2336d3, 0x4, 0x1000000, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf782, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0xf47, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0xfffffffd, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x1000032d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x3, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000000209010100000000000000000a00001c0000000073797a30000000000c000480080001407fffffff100002000c0002800500010021000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000580)={0xfffffc00, 0x0, 0x8}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000000101040048cd24340000000000000002000000240001801400018008000100ac1414aa08000200ac1414000c0002810500010000000000100002800c000280050001006ce88b94485e324a6a4967d6eb1a9fd3d2c7c6ccf7c69c12b10601bd8a103ef5a97e4f04d37e1b1ef5520a53ceaf3b7bac5a2196ab4aaf1f0200000000000000"], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000000001010400000000003f47687a2df588150002801400018048000100e00000e00000010000000000"], 0x2c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) 13.131550155s ago: executing program 3 (id=407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xb4, 0x2, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xb586}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_UNACK={0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x83}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x4040040) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) 0s ago: executing program 33 (id=403): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x6, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0x3, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x80000b, 0xad, 0x2, 0x4, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00860, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7dff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x9, 0x7ffe, 0x28, 0x10, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000000209010100000000000000000a0000040900010073797a3000000000040002000c00000000000c000003ffff100002210000137500ac35776a98a0a60d077c1900"/78], 0x40}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r5, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f0000000580)={0x0, 0x280, 0x1e0, 0x34325258, 0x3, [0x2], [0x80ffff], [0x0, 0x0, 0x0, 0xff], [0x400000000000000]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x8081, 0x0) write(r7, &(0x7f0000000200)='md0', 0x3) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4042, 0x0) ioctl(r8, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002") ioctl(r8, 0x40140921, &(0x7f0000000420)="0100000002") ioctl(r8, 0x80480911, &(0x7f0000000440)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000114000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740000000020000000000000000000000dca1f8de"], 0x64}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r9) kernel console output (not intermixed with test programs): 5829][ T5617] usb 3-1: device descriptor read/8, error -71 [ 95.425448][ T5693] usb 1-1: device descriptor read/64, error -71 [ 95.625296][ T5617] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 95.656693][ T5617] usb 3-1: device descriptor read/8, error -71 [ 95.665927][ T5693] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 95.765629][ T5617] usb usb3-port1: unable to enumerate USB device [ 95.825032][ T5693] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 95.828963][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.828990][ T5693] usb 1-1: Product: syz [ 95.829005][ T5693] usb 1-1: Manufacturer: syz [ 95.829020][ T5693] usb 1-1: SerialNumber: syz [ 95.982102][ T5903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.34'. [ 96.048532][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 96.173713][ T5693] usb 2-1: USB disconnect, device number 7 [ 96.202294][ T5907] process 'syz.3.35' launched './file2' with NULL argv: empty string added [ 96.712999][ T5921] netlink: 60 bytes leftover after parsing attributes in process `syz.3.39'. [ 96.713025][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.39'. [ 97.098990][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 97.099401][ T9] ath9k_htc: Failed to initialize the device [ 97.156145][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 97.329054][ T5924] syz.2.41 (5924) used greatest stack depth: 17184 bytes left [ 97.992072][ T5876] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 97.992660][ T5876] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.015946][ T5876] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.020923][ T5876] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.021042][ T5876] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.024887][ T5876] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.060669][ T5876] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.060768][ T5876] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.078964][ T5876] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.083553][ T5876] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.083688][ T5876] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.107412][ T5876] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.179746][ T9] usb 1-1: USB disconnect, device number 5 [ 98.293157][ T5935] netlink: 24 bytes leftover after parsing attributes in process `syz.3.43'. [ 98.355800][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 98.382516][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.513649][ T10] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 98.525884][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 98.525919][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 98 [ 98.525960][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.568009][ T5917] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 98.568178][ T5917] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 98.570498][ T10] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 98.598870][ T5944] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 98.604743][ T10] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 98.646901][ T5945] netlink: 68 bytes leftover after parsing attributes in process `syz.2.48'. [ 98.823952][ T5947] Bluetooth: (null): Too short H5 packet [ 98.841995][ T5944] event trace: Could not enable event p [ 98.934474][ T5952] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 99.175262][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 99.325603][ T10] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 99.326622][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 99.326652][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 99.329062][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.329086][ T10] usb 1-1: Product: syz [ 99.329095][ T10] usb 1-1: Manufacturer: syz [ 99.329104][ T10] usb 1-1: SerialNumber: syz [ 99.392232][ T10] ums-onetouch 1-1:1.0: USB Mass Storage device detected [ 99.408268][ T10] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 99.408537][ T10] input input5: usb_submit_urb failed [ 99.410671][ T10] input: failed to attach handler kbd to device input5, error: -5 [ 99.413705][ T4967] input input5: usb_submit_urb failed [ 99.444749][ T4967] input input5: usb_submit_urb failed [ 99.451045][ T10] scsi host1: usb-storage 1-1:1.0 [ 99.508645][ T5635] input input5: usb_submit_urb failed [ 99.514101][ T4967] input input5: usb_submit_urb failed [ 99.514745][ T4967] input input5: usb_submit_urb failed [ 99.517237][ T4967] input input5: usb_submit_urb failed [ 99.547225][ T25] usb 1-1: USB disconnect, device number 6 [ 99.828231][ T5975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.55'. [ 99.907705][ T5708] usb 2-1: USB disconnect, device number 8 [ 99.959802][ T5708] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 99.960733][ T5708] cyberjack 2-1:1.0: device disconnected [ 100.005346][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 100.025921][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 100.055142][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.125135][ T5617] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 100.136580][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.136628][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.175151][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 100.176490][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 100.177234][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.177706][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 100.177753][ T25] usb 1-1: New USB device found, idVendor=0001, idProduct=1021, bcdDevice= 0.40 [ 100.179021][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.179044][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.179523][ T25] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 100.179558][ T25] usb 1-1: can't read configurations, error -61 [ 100.181706][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.181722][ T9] usb 4-1: Product: syz [ 100.181731][ T9] usb 4-1: Manufacturer: syz [ 100.181740][ T9] usb 4-1: SerialNumber: syz [ 100.208286][ T9] usb 4-1: 0:2 : does not exist [ 100.305727][ T5617] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 100.307608][ T5617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.307640][ T5617] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 100.307680][ T5617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.310545][ T5617] usb 3-1: config 0 descriptor?? [ 100.335216][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 100.355174][ T5708] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 100.412454][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 100.454729][ T9] usb 4-1: USB disconnect, device number 6 [ 100.455300][ T4931] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.487684][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.511133][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 100.516952][ T5708] usb 2-1: Using ep0 maxpacket: 16 [ 100.517938][ T5708] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 100.521855][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.521875][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.521888][ T5708] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 100.521932][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.523760][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 100.523800][ T25] usb 1-1: New USB device found, idVendor=0001, idProduct=1021, bcdDevice= 0.40 [ 100.551696][ T5708] usb 2-1: config 0 descriptor?? [ 100.607947][ T25] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 100.607986][ T25] usb 1-1: can't read configurations, error -61 [ 100.611753][ T25] usb usb1-port1: attempt power cycle [ 100.724480][ T5617] hid_parser_main: 18 callbacks suppressed [ 100.724537][ T5617] hid-led 0003:1294:1320.0003: unknown main item tag 0x7 [ 100.740416][ T5617] hid-led 0003:1294:1320.0003: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.2-1/input0 [ 100.771394][ T5617] hid-led 0003:1294:1320.0003: Riso Kagaku Webmail Notifier initialized [ 100.920699][ T5982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.921846][ T5982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.957970][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 100.981558][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 100.988423][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 100.988472][ T25] usb 1-1: New USB device found, idVendor=0001, idProduct=1021, bcdDevice= 0.40 [ 100.989596][ T5708] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 100.989648][ T5708] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 100.989672][ T5708] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 100.989695][ T5708] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 100.989717][ T5708] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 100.989740][ T5708] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 100.989787][ T5708] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 100.989810][ T5708] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 100.989833][ T5708] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 100.992683][ T25] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 100.992716][ T25] usb 1-1: can't read configurations, error -61 [ 101.024153][ T5708] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0004/input/input6 [ 101.117545][ T25] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 101.120723][ T5708] microsoft 0003:045E:07DA.0004: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 101.139061][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 101.148642][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 101.148688][ T25] usb 1-1: New USB device found, idVendor=0001, idProduct=1021, bcdDevice= 0.40 [ 101.154258][ T25] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 101.154292][ T25] usb 1-1: can't read configurations, error -61 [ 101.154561][ T25] usb usb1-port1: unable to enumerate USB device [ 101.197691][ T9] usb 2-1: USB disconnect, device number 9 [ 101.302206][ T5987] fido_id[5987]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 101.307881][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 101.843238][ T6003] Zero length message leads to an empty skb [ 102.018413][ T6008] TCP: TCP_TX_DELAY enabled [ 102.136587][ T4931] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.215284][ T4931] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.215327][ T4931] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.230911][ T31] audit: type=1400 audit(1789943791.321:2): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=6011 comm="syz.1.64" [ 102.366044][ T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 102.525139][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 102.527132][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 102.527183][ T25] usb 1-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 102.528176][ T25] usb 1-1: config 1 has an invalid interface number: 232 but max is 0 [ 102.528199][ T25] usb 1-1: config 1 has no interface number 0 [ 102.528236][ T25] usb 1-1: config 1 interface 232 altsetting 93 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 102.528252][ T25] usb 1-1: config 1 interface 232 altsetting 93 endpoint 0xE has invalid wMaxPacketSize 0 [ 102.528266][ T25] usb 1-1: config 1 interface 232 has no altsetting 0 [ 102.530060][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.530082][ T25] usb 1-1: Product: syz [ 102.530096][ T25] usb 1-1: Manufacturer: syz [ 102.530111][ T25] usb 1-1: SerialNumber: syz [ 102.535711][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.753741][ T25] hub 1-1:1.232: bad descriptor, ignoring hub [ 102.753772][ T25] hub 1-1:1.232: probe with driver hub failed with error -5 [ 102.755481][ T25] option 1-1:1.232: GSM modem (1-port) converter detected [ 102.777944][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 102.788048][ T25] usb 1-1: USB disconnect, device number 11 [ 102.793068][ T25] option 1-1:1.232: device disconnected [ 102.909875][ T5708] usb 3-1: USB disconnect, device number 9 [ 102.937829][ T97] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 102.948604][ T97] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 102.951879][ T352] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 103.305986][ T5708] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 103.478292][ T5708] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.480775][ T5708] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.480821][ T5708] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 103.487825][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.487863][ T5708] usb 3-1: Product: syz [ 103.487876][ T5708] usb 3-1: Manufacturer: syz [ 103.487890][ T5708] usb 3-1: SerialNumber: syz [ 103.512550][ T5708] cdc_mbim 3-1:1.0: skipping garbage [ 103.705835][ T6042] overlayfs: failed to resolve './bus': -2 [ 103.709419][ T6019] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 103.714603][ T6043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.720053][ T6043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.898710][ T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 104.057658][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 104.059624][ T25] usb 1-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.00 [ 104.063249][ T25] usb 1-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 104.063289][ T25] usb 1-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 104.063716][ T25] usb 1-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 104.063746][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 104.063781][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.069852][ T25] usb 1-1: config 0 descriptor?? [ 104.080624][ T25] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 104.215245][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.288222][ T6031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.291594][ T6031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.305230][ T4931] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.305281][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.506975][ T6061] netlink: 'syz.1.75': attribute type 1 has an invalid length. [ 104.506998][ T6061] netlink: 228 bytes leftover after parsing attributes in process `syz.1.75'. [ 105.403351][ T6063] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 105.616717][ T6066] overlayfs: missing 'lowerdir' [ 105.684914][ T6078] netlink: 60 bytes leftover after parsing attributes in process `syz.3.79'. [ 105.700565][ T6080] netlink: 60 bytes leftover after parsing attributes in process `syz.3.79'. [ 105.700997][ T6080] netlink: 60 bytes leftover after parsing attributes in process `syz.3.79'. [ 105.704855][ T6080] netlink: 60 bytes leftover after parsing attributes in process `syz.3.79'. [ 105.741360][ T6080] netlink: 60 bytes leftover after parsing attributes in process `syz.3.79'. [ 105.741656][ T6080] netlink: 60 bytes leftover after parsing attributes in process `syz.3.79'. [ 105.741949][ T6080] netlink: 60 bytes leftover after parsing attributes in process `syz.3.79'. [ 105.742355][ T6080] netlink: 60 bytes leftover after parsing attributes in process `syz.3.79'. [ 105.748357][ T6080] netlink: 60 bytes leftover after parsing attributes in process `syz.3.79'. [ 105.926343][ T5769] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 105.997975][ T5708] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 105.998089][ T5708] cdc_mbim 3-1:1.0: bind() failure [ 106.029336][ T5708] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 106.029391][ T5708] cdc_ncm 3-1:1.1: bind() failure [ 106.069844][ T5708] usb 3-1: USB disconnect, device number 10 [ 106.083736][ T5769] usb 2-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40 [ 106.096648][ T5769] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 137, changing to 7 [ 106.096697][ T5769] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 74, changing to 7 [ 106.101532][ T5769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.101560][ T5769] usb 2-1: Product: syz [ 106.101575][ T5769] usb 2-1: Manufacturer: syz [ 106.101590][ T5769] usb 2-1: SerialNumber: syz [ 106.417829][ T5769] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 106.424419][ T5769] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 106.517088][ T5769] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 106.539102][ T5769] usb 2-1: USB disconnect, device number 10 [ 106.631685][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.651774][ T51] usb 1-1: USB disconnect, device number 12 [ 107.115213][ T51] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 107.279948][ T51] usb 1-1: unable to get BOS descriptor or descriptor too short [ 107.280513][ T51] usb 1-1: not running at top speed; connect to a high speed hub [ 107.280547][ T51] usb 1-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice=96.91 [ 107.281710][ T51] usb 1-1: config 4 has an invalid interface number: 106 but max is 0 [ 107.281735][ T51] usb 1-1: config 4 has no interface number 0 [ 107.281766][ T51] usb 1-1: config 4 interface 106 has no altsetting 0 [ 107.296007][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.296032][ T51] usb 1-1: Product: syz [ 107.296045][ T51] usb 1-1: Manufacturer: syz [ 107.296058][ T51] usb 1-1: SerialNumber: syz [ 107.412978][ T6114] jffs2: notice: (6114) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 107.494438][ T6114] jffs2: error: (6114) jffs2_do_read_inode: requested to read a nonexistent ino 0 [ 107.513512][ T6114] loop6: detected capacity change from 0 to 2640 [ 107.526041][ T5822] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.526617][ T5822] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.527784][ T5822] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.528311][ T5822] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.528896][ T5822] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.725162][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 107.814554][ T51] uvcvideo 1-1:4.106: Found UVC 0.00 device syz (0408:4033) [ 107.814590][ T51] uvcvideo 1-1:4.106: Forcing UVC version to 1.0a [ 107.814609][ T51] uvcvideo 1-1:4.106: No valid video chain found. [ 107.829789][ T51] usb 1-1: USB disconnect, device number 13 [ 108.178190][ T6132] afs: Unknown parameter 'dyn' [ 108.596979][ T6148] loop7: detected capacity change from 16384 to 0 [ 108.817044][ T6156] netlink: 'syz.2.93': attribute type 15 has an invalid length. [ 108.826395][ T51] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 108.977383][ T51] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 108.979690][ T51] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.979715][ T51] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.993528][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.993553][ T51] usb 1-1: Product: syz [ 108.993566][ T51] usb 1-1: Manufacturer: syz [ 108.993579][ T51] usb 1-1: SerialNumber: syz [ 109.069859][ T51] usb 1-1: 0:1 : does not exist [ 109.081472][ T6160] loop0: detected capacity change from 0 to 2049 [ 109.136437][ T6160] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 109.136469][ T6160] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 109.136482][ T6160] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 109.136572][ T6160] loop0: [ 109.281833][ T51] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 109.291520][ T51] usb 1-1: unit 13 not found! [ 109.374973][ T6162] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 109.433600][ T51] usb 1-1: USB disconnect, device number 14 [ 109.475530][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.635422][ T5769] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 109.785741][ T5769] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 109.786830][ T5769] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 109.786847][ T5769] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 109.789095][ T5769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.789118][ T5769] usb 4-1: Product: syz [ 109.789133][ T5769] usb 4-1: Manufacturer: syz [ 109.789178][ T5769] usb 4-1: SerialNumber: syz [ 110.006394][ T5769] usb 4-1: Limiting number of CPorts to U8_MAX [ 110.201701][ T6188] __nla_validate_parse: 10 callbacks suppressed [ 110.201725][ T6188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.101'. [ 110.220729][ C0] usb 4-1: short aprc response received [ 110.431658][ T6166] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 110.432346][ T6141] IPVS: starting estimator thread 0... [ 110.527052][ T6196] IPVS: using max 31 ests per chain, 74400 per kthread [ 110.528552][ T5769] usb 4-1: failed to set cport flags for port 0 [ 110.528981][ T5769] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 110.578944][ T5769] es2_ap_driver 4-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 110.583631][ T5769] usb 4-1: USB disconnect, device number 8 [ 110.919825][ T6210] overlayfs: failed to resolve './file0': -2 [ 110.983920][ T6214] ======================================================= [ 110.983920][ T6214] WARNING: The mand mount option has been deprecated and [ 110.983920][ T6214] and is ignored by this kernel. Remove the mand [ 110.983920][ T6214] option from the mount to silence this warning. [ 110.983920][ T6214] ======================================================= [ 111.033994][ T6213] overlayfs: overlapping lowerdir path [ 111.247899][ T6230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.110'. [ 111.745578][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 111.789651][ T6225] cgroup: fork rejected by pids controller in /syz1 [ 111.896430][ T9] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 111.897488][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 111.897518][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 98 [ 111.897559][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.928474][ T6241] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 111.928626][ T6241] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 111.969082][ T9] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 112.001225][ T9] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 112.450655][ T6276] sd 0:0:1:0: PR command failed: 1026 [ 112.450712][ T6276] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 112.450752][ T6276] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 113.355029][ T6305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.363310][ T6305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.366962][ T6305] netlink: 'syz.3.124': attribute type 15 has an invalid length. [ 113.366981][ T6305] netlink: 'syz.3.124': attribute type 7 has an invalid length. [ 113.575367][ T5769] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 113.706559][ T5769] usb 4-1: device descriptor read/64, error -71 [ 113.892898][ T6319] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 113.892919][ T6319] rust_binder: Read failure Err(EFAULT) in pid:97 [ 113.945550][ T5769] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 113.997111][ T6324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.997774][ T6324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.075306][ T5769] usb 4-1: device descriptor read/64, error -71 [ 114.165154][ T51] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 114.185546][ T5769] usb usb4-port1: attempt power cycle [ 114.235198][ T5622] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 114.316800][ T51] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 114.318138][ T51] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.318189][ T51] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 114.318212][ T51] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 114.318233][ T51] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.318274][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.381514][ T5622] usb 2-1: device descriptor read/64, error -71 [ 114.489860][ T9] usb 1-1: USB disconnect, device number 15 [ 114.526888][ T5769] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 114.530676][ T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 114.537179][ T9] cyberjack 1-1:1.0: device disconnected [ 114.559452][ T5769] usb 4-1: device descriptor read/8, error -71 [ 114.615349][ T5622] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 114.642544][ T6328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.131'. [ 114.734658][ T6331] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.132'. [ 114.738516][ T6331] netlink: 'syz.0.132': attribute type 61 has an invalid length. [ 114.755159][ T5622] usb 2-1: device descriptor read/64, error -71 [ 114.795348][ T5769] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 114.828665][ T5769] usb 4-1: device descriptor read/8, error -71 [ 114.867594][ T5622] usb usb2-port1: attempt power cycle [ 114.937301][ T5769] usb usb4-port1: unable to enumerate USB device [ 114.974122][ T6319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.974688][ T6319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.115166][ T5708] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 115.205261][ T5622] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 115.226819][ T5622] usb 2-1: device descriptor read/8, error -71 [ 115.267493][ T5708] usb 1-1: unable to get BOS descriptor or descriptor too short [ 115.267988][ T5708] usb 1-1: not running at top speed; connect to a high speed hub [ 115.268070][ T5708] usb 1-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 115.269085][ T5708] usb 1-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config [ 115.269187][ T5708] usb 1-1: config 1 interface 1 has no altsetting 1 [ 115.271393][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.271415][ T5708] usb 1-1: Product: syz [ 115.271428][ T5708] usb 1-1: Manufacturer: syz [ 115.271455][ T5708] usb 1-1: SerialNumber: syz [ 115.402528][ T51] [drm] Initialized gud 1.0.0 for 3-1:1.0 on minor 1 [ 115.465184][ T5622] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 115.486828][ T5622] usb 2-1: device descriptor read/8, error -71 [ 115.492797][ T5708] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 115.503722][ T5708] usb 1-1: unable to issue vendor read request (ret = -71) [ 115.504301][ T5708] usb 1-1: unable to issue vendor read request (ret = -71) [ 115.505531][ T5708] usb 1-1: unable to issue vendor read request (ret = -71) [ 115.506211][ T5708] usb 1-1: unable to issue vendor read request (ret = -71) [ 115.574199][ T5708] usb 1-1: USB disconnect, device number 16 [ 115.596728][ T5622] usb usb2-port1: unable to enumerate USB device [ 115.601483][ T6319] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.601970][ T6319] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 115.601986][ T6319] rust_binder: Read failure Err(EFAULT) in pid:97 [ 115.606761][ T6319] rust_binder: 6318:6319 got transaction to invalid handle 1 [ 115.606785][ T6319] rust_binder: 6318:6319 transaction call to 0:0 failed ENOENT, code 0 size 112-112 [ 115.611700][ T5622] rust_binder: 6318: undelivered TRANSACTION_ERROR: 29201 [ 115.634624][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.757721][ T51] Console: switching to colour frame buffer device 128x48 [ 115.763293][ T51] gud 3-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 115.769284][ T51] usb 3-1: USB disconnect, device number 12 [ 115.783746][ T51] Console: switching to colour VGA+ 80x25 [ 116.183911][ T6344] veth1: mtu less than device minimum [ 116.184020][ T6344] veth1: mtu less than device minimum [ 116.184106][ T6344] veth1: mtu less than device minimum [ 116.184190][ T6344] veth1: mtu less than device minimum [ 116.184279][ T6344] veth1: mtu less than device minimum [ 116.184521][ T6344] veth1: mtu less than device minimum [ 116.184607][ T6344] veth1: mtu less than device minimum [ 116.195788][ T6344] veth1: mtu less than device minimum [ 116.195898][ T6344] veth1: mtu less than device minimum [ 116.195987][ T6344] veth1: mtu less than device minimum [ 116.312656][ T6347] netlink: 300 bytes leftover after parsing attributes in process `syz.2.137'. [ 116.312673][ T6347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.137'. [ 116.329335][ T51] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 116.475638][ T51] usb 1-1: Using ep0 maxpacket: 32 [ 116.476438][ T51] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 116.479324][ T51] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 116.479351][ T51] usb 1-1: config 0 has no interface number 0 [ 116.479393][ T51] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 116.479419][ T51] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 116.479440][ T51] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 116.479464][ T51] usb 1-1: config 0 interface 196 has no altsetting 0 [ 116.482379][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.482404][ T51] usb 1-1: Product: syz [ 116.482418][ T51] usb 1-1: Manufacturer: syz [ 116.482433][ T51] usb 1-1: SerialNumber: syz [ 116.526389][ T51] usb 1-1: config 0 descriptor?? [ 116.528664][ T6341] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 116.737095][ T6341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.737821][ T6341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.761652][ T5622] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 116.835165][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 116.915805][ T5622] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 116.916833][ T5622] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.916858][ T5622] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.916900][ T5622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.920030][ T5622] usb 4-1: config 0 descriptor?? [ 116.942194][ T51] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 116.942541][ T51] ipheth 1-1:0.196: probe with driver ipheth failed with error -22 [ 117.146465][ T6359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.147064][ T6359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.150463][ T51] usb 1-1: USB disconnect, device number 17 [ 117.157748][ T6359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.158256][ T6359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.167099][ T6359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.167628][ T6359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.174634][ T6359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.178555][ T6359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.179733][ T6359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.183280][ T6359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.274823][ T6360] jffs2: notice: (6360) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 117.337453][ T5622] hid_parser_main: 6 callbacks suppressed [ 117.337478][ T5622] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 117.337508][ T5622] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 117.337533][ T5622] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 117.339946][ T5622] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 117.339981][ T5622] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 117.339997][ T5622] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 117.340011][ T5622] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 117.348701][ T5622] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 117.376384][ T25] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 117.505220][ T25] usb 2-1: device descriptor read/64, error -71 [ 117.536962][ T5622] cp2112 0003:10C4:EA90.0005: Part Number: 0x00 Device Version: 0x00 [ 117.738581][ T10] usb 3-1: device descriptor read/64, error -71 [ 117.745509][ T25] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 117.885687][ T25] usb 2-1: device descriptor read/64, error -71 [ 117.924626][ T6373] ftl_cs: FTL header not found. [ 117.985327][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 118.003783][ T25] usb usb2-port1: attempt power cycle [ 118.043947][ T6373] block2mtd: mtd1: [/dev/ram0] erase_size = 64KiB [65536] [ 118.142088][ T6352] cp2112 0003:10C4:EA90.0005: Error starting transaction: -38 [ 118.143947][ T5622] cp2112 0003:10C4:EA90.0005: error reading lock byte: -71 [ 118.153524][ T5622] usb 4-1: USB disconnect, device number 13 [ 118.168211][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 118.169110][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 118.172708][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.172734][ T10] usb 3-1: config 0 has no interface number 0 [ 118.172777][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.172821][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.234745][ T10] usb 3-1: config 0 descriptor?? [ 118.263215][ T10] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 118.345174][ T25] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 118.367071][ T25] usb 2-1: device descriptor read/8, error -71 [ 118.447574][ T6368] cifs: Unknown parameter 'ă÷ĂÓ­'Ä4,ŤZz-#FÇ<ćő]%gCžĘ [ 118.447574][ T6368] SĂČŘČžZ§6źÂ' [ 118.502552][ T6382] 9p: Bad value for 'rfdno' [ 118.565148][ T51] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 118.605145][ T25] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 118.625683][ T25] usb 2-1: device descriptor read/8, error -71 [ 118.720101][ T51] usb 1-1: unable to get BOS descriptor or descriptor too short [ 118.720849][ T51] usb 1-1: not running at top speed; connect to a high speed hub [ 118.720893][ T51] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 118.723197][ T51] usb 1-1: language id specifier not provided by device, defaulting to English [ 118.737572][ T25] usb usb2-port1: unable to enumerate USB device [ 118.768428][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.768458][ T51] usb 1-1: Product: 銴꽦Z뱇 [ 118.768472][ T51] usb 1-1: SerialNumber: syz [ 118.965157][ T5622] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 118.983303][ T6381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.983814][ T6381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.014354][ T51] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 119.014412][ T51] usb 1-1: MIDIStreaming interface descriptor not found [ 119.081931][ T51] usb 1-1: USB disconnect, device number 18 [ 119.116659][ T5622] usb 4-1: Using ep0 maxpacket: 8 [ 119.118177][ T5622] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 119.122721][ T5622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.122747][ T5622] usb 4-1: Product: syz [ 119.122763][ T5622] usb 4-1: Manufacturer: syz [ 119.122778][ T5622] usb 4-1: SerialNumber: syz [ 119.129669][ T5622] usb 4-1: config 0 descriptor?? [ 119.134385][ T5622] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 119.232711][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.612234][ T6388] syzkaller1: entered promiscuous mode [ 119.612259][ T6388] syzkaller1: entered allmulticast mode [ 119.778240][ T6390] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 119.778268][ T6390] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 119.780562][ T6390] vhci_hcd vhci_hcd.0: Device attached [ 119.782883][ T6392] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 119.813813][ T6139] vhci_hcd vhci_hcd.0: stop threads [ 119.813864][ T6139] vhci_hcd vhci_hcd.0: release socket [ 119.813905][ T6139] vhci_hcd vhci_hcd.0: disconnect device [ 119.957295][ T5622] gspca_sonixj: reg_r err -32 [ 119.957391][ T5622] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 119.972487][ T5622] usb 4-1: USB disconnect, device number 14 [ 120.392850][ T51] usb 3-1: USB disconnect, device number 14 [ 120.488148][ T6403] bfs: block size(16384) > page size(4096) not supported by filesystem [ 120.489214][ T6403] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 121.037281][ T6429] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.156'. [ 121.825163][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 121.986628][ T9] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 121.990425][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.255689][ T5622] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 122.385165][ T5622] usb 3-1: device descriptor read/64, error -71 [ 122.423067][ T9] usb 2-1: Firmware version (0.0) predates our first public release. [ 122.423094][ T9] usb 2-1: Please update to version 0.2 or newer [ 122.468071][ T9] usb 2-1: USB disconnect, device number 21 [ 122.546163][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 122.636110][ T5622] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 122.675201][ T10] usb 4-1: device descriptor read/64, error -71 [ 122.795238][ T5622] usb 3-1: device descriptor read/64, error -71 [ 122.905413][ T5622] usb usb3-port1: attempt power cycle [ 122.916989][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 123.045161][ T10] usb 4-1: device descriptor read/64, error -71 [ 123.156236][ T10] usb usb4-port1: attempt power cycle [ 123.255805][ T5622] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 123.276458][ T5622] usb 3-1: device descriptor read/8, error -71 [ 123.496703][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 123.515178][ T5622] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 123.516400][ T10] usb 4-1: device descriptor read/8, error -71 [ 123.539786][ T5622] usb 3-1: device descriptor read/8, error -71 [ 123.655556][ T5622] usb usb3-port1: unable to enumerate USB device [ 123.755163][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 123.776209][ T10] usb 4-1: device descriptor read/8, error -71 [ 123.885769][ T10] usb usb4-port1: unable to enumerate USB device [ 124.004049][ T6489] netlink: 60 bytes leftover after parsing attributes in process `syz.1.173'. [ 124.011772][ T6489] overlay: Unknown parameter 'obj_type' [ 124.032752][ T6489] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 124.696200][ T5618] Bluetooth: hci4: command 0x1003 tx timeout [ 124.696570][ T54] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 124.881014][ T6492] loop4: detected capacity change from 0 to 7 [ 124.885946][ T6492] Dev loop4: unable to read RDB block 7 [ 124.885976][ T6492] loop4: AHDI p1 p2 [ 124.885996][ T6492] loop4: partition table partially beyond EOD, truncated [ 124.886868][ T6492] loop4: p1 start 1702000233 is beyond EOD, truncated [ 125.415464][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 125.568972][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 125.569007][ T9] usb 3-1: New USB device found, idVendor=8516, idProduct=3072, bcdDevice=1e.8c [ 125.569959][ T9] usb 3-1: config 1 has an invalid interface number: 241 but max is 0 [ 125.569974][ T9] usb 3-1: config 1 has no interface number 0 [ 125.569998][ T9] usb 3-1: config 1 interface 241 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 125.570015][ T9] usb 3-1: config 1 interface 241 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 125.574532][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.574547][ T9] usb 3-1: Product: ŕ  [ 125.574556][ T9] usb 3-1: SerialNumber: syz [ 125.582364][ T9] usb 3-1: Interface #241 referenced by multiple IADs [ 125.640265][ T4982] Dev loop4: unable to read RDB block 7 [ 125.640322][ T4982] loop4: AHDI p1 p2 [ 125.640345][ T4982] loop4: partition table partially beyond EOD, truncated [ 125.640595][ T4982] loop4: p1 start 1702000233 is beyond EOD, truncated [ 125.840982][ T203] IPVS: starting estimator thread 0... [ 125.945168][ T6505] IPVS: using max 25 ests per chain, 60000 per kthread [ 125.981422][ T9] usb 3-1: USB disconnect, device number 19 [ 126.045194][ T51] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 126.057051][ T4931] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 126.100994][ T6511] netlink: 52 bytes leftover after parsing attributes in process `syz.3.179'. [ 126.220366][ T51] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 126.224621][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.224647][ T51] usb 1-1: Product: syz [ 126.224662][ T51] usb 1-1: Manufacturer: syz [ 126.224677][ T51] usb 1-1: SerialNumber: syz [ 126.248611][ T51] usb 1-1: config 0 descriptor?? [ 126.272880][ T6516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.180'. [ 126.515510][ T9] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 126.530254][ T51] usb 1-1: USB disconnect, device number 20 [ 126.669887][ T9] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 126.673330][ T6529] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 126.673353][ T6529] CPU: 1 UID: 0 PID: 6529 Comm: syz.2.183 Not tainted syzkaller #0 PREEMPT(full) [ 126.673378][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.673390][ T6529] Call Trace: [ 126.673398][ T6529] [ 126.673407][ T6529] dump_stack_lvl+0xe8/0x150 [ 126.673440][ T6529] sysfs_create_dir_ns+0x271/0x2a0 [ 126.673474][ T6529] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 126.673506][ T6529] ? do_raw_spin_unlock+0xf5/0x200 [ 126.673536][ T6529] kobject_add_internal+0x622/0xcd0 [ 126.673568][ T6529] kobject_add+0x163/0x240 [ 126.673591][ T6529] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 126.673617][ T6529] ? __pfx_kobject_add+0x10/0x10 [ 126.673645][ T6529] ? get_device_parent+0x366/0x3a0 [ 126.673679][ T6529] device_add+0x3fa/0xb80 [ 126.673706][ T6529] tty_register_device_attr+0x425/0x990 [ 126.673736][ T6529] ? __pfx_tty_register_device_attr+0x10/0x10 [ 126.673768][ T6529] ? tty_port_init+0x136/0x1a0 [ 126.673789][ T6529] ? gsm_dlci_alloc+0x330/0x640 [ 126.673817][ T6529] gsm_activate_mux+0x110/0x2a0 [ 126.673846][ T6529] gsmld_ioctl+0x12d3/0x1930 [ 126.673876][ T6529] ? __pfx_gsmld_ioctl+0x10/0x10 [ 126.673920][ T6529] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 126.673957][ T6529] ? ldsem_down_read+0x12/0x40 [ 126.673990][ T6529] ? __pfx_gsmld_ioctl+0x10/0x10 [ 126.674010][ T6529] tty_ioctl+0x9bd/0xdd0 [ 126.674031][ T6529] ? __pfx_tty_ioctl+0x10/0x10 [ 126.674051][ T6529] __se_sys_ioctl+0xfc/0x170 [ 126.674085][ T6529] do_syscall_64+0x166/0x520 [ 126.674103][ T6529] ? trace_irq_disable+0x3b/0x140 [ 126.674132][ T6529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.674153][ T6529] ? clear_bhb_loop+0x70/0xc0 [ 126.674178][ T6529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.674199][ T6529] RIP: 0033:0x7fcbb3f9e159 [ 126.674219][ T6529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.674235][ T6529] RSP: 002b:00007fcbb4dce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.674258][ T6529] RAX: ffffffffffffffda RBX: 00007fcbb4226270 RCX: 00007fcbb3f9e159 [ 126.674274][ T6529] RDX: 0000200000000a00 RSI: 00000000404c4701 RDI: 0000000000000003 [ 126.674288][ T6529] RBP: 00007fcbb403506b R08: 0000000000000000 R09: 0000000000000000 [ 126.674301][ T6529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.674314][ T6529] R13: 00007fcbb4226308 R14: 00007fcbb4226270 R15: 00007fff37b31f88 [ 126.674346][ T6529] [ 126.674731][ T9] usb 2-1: config index 0 descriptor too short (expected 63186, got 210) [ 126.674758][ T9] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 126.674777][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.674794][ T9] usb 2-1: config 0 has no interface number 0 [ 126.674832][ T9] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 126.674853][ T9] usb 2-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0x22, changing to 0x2 [ 126.674876][ T9] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x2 has invalid maxpacket 70, setting to 64 [ 126.674900][ T9] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 126.674939][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.695157][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 126.697025][ T6529] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 126.998081][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 127.036636][ T10] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 127.072107][ T10] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 127.072144][ T10] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 127.072169][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 127.072203][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.129997][ T9] usb 2-1: config 0 descriptor?? [ 127.131155][ T10] usb 4-1: config 0 descriptor?? [ 127.191133][ T9] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 127.353616][ T6524] capability: warning: `syz.3.182' uses 32-bit capabilities (legacy support in use) [ 127.359421][ T6141] usb 2-1: Failed to submit usb control message: -71 [ 127.359464][ T6141] usb 2-1: unable to send the bmi data to the device: -71 [ 127.359509][ T6141] usb 2-1: unable to get target info from device [ 127.359524][ T6141] usb 2-1: could not get target info (-71) [ 127.359743][ T6141] usb 2-1: could not probe fw (-71) [ 127.360500][ T5798] usb 2-1: USB disconnect, device number 22 [ 127.475230][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 127.625201][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 127.628163][ T9] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 127.632329][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.632408][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 127.632435][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.639536][ T9] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 127.639560][ T9] usb 1-1: Product: syz [ 127.639574][ T9] usb 1-1: Manufacturer: syz [ 127.639587][ T9] usb 1-1: SerialNumber: syz [ 127.658248][ T9] usb 1-1: config 0 descriptor?? [ 127.767355][ T9] rc_core: IR keymap rc-imon-rsc not found [ 127.767375][ T9] Registered IR keymap rc-empty [ 127.769778][ T10] usb 4-1: string descriptor 0 read error: -71 [ 127.770587][ T10] uclogic 0003:5543:004D.0006: failed retrieving string descriptor #200: -71 [ 127.770654][ T10] uclogic 0003:5543:004D.0006: failed retrieving pen parameters: -71 [ 127.770672][ T10] uclogic 0003:5543:004D.0006: failed probing pen v2 parameters: -71 [ 127.770731][ T10] uclogic 0003:5543:004D.0006: failed probing parameters: -71 [ 127.770849][ T10] uclogic 0003:5543:004D.0006: probe with driver uclogic failed with error -71 [ 127.773865][ T9] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 127.790469][ T9] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 127.798168][ T10] usb 4-1: USB disconnect, device number 19 [ 127.982617][ T9] usb 1-1: USB disconnect, device number 21 [ 128.055352][ T51] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 128.225713][ T51] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 128.226729][ T51] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 128.226755][ T51] usb 3-1: config 1 has no interface number 0 [ 128.226797][ T51] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 128.226844][ T51] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 128.226860][ T51] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.229433][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.229459][ T51] usb 3-1: Product: syz [ 128.229473][ T51] usb 3-1: Manufacturer: syz [ 128.229487][ T51] usb 3-1: SerialNumber: syz [ 128.232708][ T6541] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.292740][ T5617] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 128.443697][ T6541] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.445385][ T5617] usb 2-1: device descriptor read/64, error -71 [ 128.656904][ T51] sierra_net 3-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 128.685229][ T5617] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 128.790088][ T6562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.190'. [ 128.825398][ T5617] usb 2-1: device descriptor read/64, error -71 [ 128.847098][ T6541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.852646][ T6541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.879836][ T51] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 128.879858][ T51] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 128.881831][ T51] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 128.881850][ T51] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 128.914933][ T51] usb 3-1: USB disconnect, device number 20 [ 128.935957][ T5617] usb usb2-port1: attempt power cycle [ 128.943949][ T51] sierra_net 3-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem [ 128.989346][ T6567] FAULT_INJECTION: forcing a failure. [ 128.989346][ T6567] name failslab, interval 1, probability 0, space 0, times 1 [ 128.989378][ T6567] CPU: 1 UID: 0 PID: 6567 Comm: syz.0.192 Not tainted syzkaller #0 PREEMPT(full) [ 128.989402][ T6567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.989412][ T6567] Call Trace: [ 128.989417][ T6567] [ 128.989423][ T6567] dump_stack_lvl+0xe8/0x150 [ 128.989445][ T6567] should_fail_ex+0x3eb/0x540 [ 128.989463][ T6567] should_failslab+0xa8/0x100 [ 128.989479][ T6567] __kmalloc_cache_noprof+0x9e/0x600 [ 128.989497][ T6567] ? __kmalloc_cache_noprof+0x148/0x600 [ 128.989513][ T6567] ? con_insert_unipair+0x8e/0x210 [ 128.989529][ T6567] ? con_insert_unipair+0x8e/0x210 [ 128.989548][ T6567] con_insert_unipair+0x8e/0x210 [ 128.989565][ T6567] con_set_default_unimap+0x41c/0x590 [ 128.989585][ T6567] vc_allocate+0x331/0x690 [ 128.989603][ T6567] ? __pfx_vc_allocate+0x10/0x10 [ 128.989621][ T6567] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 128.989642][ T6567] con_install+0x9f/0x770 [ 128.989658][ T6567] ? __pfx_con_install+0x10/0x10 [ 128.989677][ T6567] tty_init_dev+0xd7/0x4d0 [ 128.989698][ T6567] tty_open+0x7de/0xd80 [ 128.989719][ T6567] ? __pfx_tty_open+0x10/0x10 [ 128.989735][ T6567] ? do_raw_spin_unlock+0xf5/0x200 [ 128.989753][ T6567] chrdev_open+0x4d9/0x600 [ 128.989767][ T6567] ? __pfx_chrdev_open+0x10/0x10 [ 128.989781][ T6567] ? devcgroup_check_permission+0x31/0x8f0 [ 128.989803][ T6567] ? __pfx_chrdev_open+0x10/0x10 [ 128.989814][ T6567] do_dentry_open+0x80e/0x1360 [ 128.989838][ T6567] vfs_open_consume+0x4a/0x350 [ 128.989851][ T6567] ? path_openat+0x14bb/0x1e40 [ 128.989871][ T6567] path_openat+0x14d7/0x1e40 [ 128.989901][ T6567] do_file_open+0x23e/0x4a0 [ 128.989921][ T6567] ? __pfx_do_file_open+0x10/0x10 [ 128.989952][ T6567] ? _raw_spin_unlock+0x28/0x50 [ 128.989968][ T6567] ? alloc_fd+0x651/0x6c0 [ 128.989989][ T6567] do_sys_openat2+0x115/0x200 [ 128.990002][ T6567] ? __se_sys_futex+0x3a8/0x450 [ 128.990016][ T6567] ? __pfx_do_sys_openat2+0x10/0x10 [ 128.990031][ T6567] ? ksys_write+0x242/0x270 [ 128.990047][ T6567] ? __pfx___se_sys_futex+0x10/0x10 [ 128.990060][ T6567] ? __pfx_ksys_write+0x10/0x10 [ 128.990079][ T6567] __x64_sys_openat+0x138/0x170 [ 128.990096][ T6567] do_syscall_64+0x166/0x520 [ 128.990108][ T6567] ? trace_irq_disable+0x3b/0x140 [ 128.990124][ T6567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.990137][ T6567] ? clear_bhb_loop+0x70/0xc0 [ 128.990152][ T6567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.990164][ T6567] RIP: 0033:0x7faa0675e98e [ 128.990177][ T6567] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 128.990191][ T6567] RSP: 002b:00007faa07606b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 128.990215][ T6567] RAX: ffffffffffffffda RBX: 00007faa076076c0 RCX: 00007faa0675e98e [ 128.990230][ T6567] RDX: 0000000000000002 RSI: 00007faa07606c00 RDI: ffffffffffffff9c [ 128.990244][ T6567] RBP: 00007faa0683506b R08: 0000000000000000 R09: 0000000000000000 [ 128.990257][ T6567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.990269][ T6567] R13: 00007faa06a26038 R14: 00007faa06a25fa0 R15: 00007ffc27a719b8 [ 128.990295][ T6567] [ 129.030116][ T51] sierra_net 3-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 129.095661][ T9] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 129.253716][ T6565] netlink: 168 bytes leftover after parsing attributes in process `syz.3.191'. [ 129.349988][ T6571] netlink: 'syz.3.191': attribute type 10 has an invalid length. [ 129.386963][ T5617] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 129.416696][ T5617] usb 2-1: device descriptor read/8, error -71 [ 129.451125][ T6571] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 129.565268][ T5769] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 129.655196][ T5617] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 129.686776][ T5617] usb 2-1: device descriptor read/8, error -71 [ 129.716297][ T5769] usb 1-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 129.717394][ T5769] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.717429][ T5769] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.717481][ T5769] usb 1-1: config 0 interface 0 has no altsetting 0 [ 129.717503][ T5769] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.720160][ T5769] usb 1-1: config 0 descriptor?? [ 129.795410][ T5617] usb usb2-port1: unable to enumerate USB device [ 129.835156][ T51] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 129.995138][ T51] usb 3-1: Using ep0 maxpacket: 8 [ 129.996884][ T51] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 129.998525][ T51] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.998548][ T51] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 129.998607][ T51] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 130.001223][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.001247][ T51] usb 3-1: Product: syz [ 130.001261][ T51] usb 3-1: Manufacturer: syz [ 130.001275][ T51] usb 3-1: SerialNumber: syz [ 130.584810][ T5769] thrustmaster 0003:044F:B65A.0007: report_id 2378724972 is invalid [ 130.584849][ T5769] thrustmaster 0003:044F:B65A.0007: item 0 4 1 8 parsing failed [ 130.586354][ T5769] thrustmaster 0003:044F:B65A.0007: probe with driver thrustmaster failed with error -22 [ 130.645259][ T51] usb 3-1: clock source 0 is not valid, cannot use [ 130.858183][ T51] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 130.858642][ T51] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 130.926348][ T51] usb 3-1: USB disconnect, device number 21 [ 130.994711][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.515157][ T5798] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 131.665800][ T5798] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 131.669302][ T5798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.669327][ T5798] usb 2-1: Product: syz [ 131.669336][ T5798] usb 2-1: Manufacturer: syz [ 131.669344][ T5798] usb 2-1: SerialNumber: syz [ 131.671856][ T5798] usb 2-1: config 0 descriptor?? [ 131.681775][ T5798] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 131.684351][ T25] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 131.845722][ T25] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 131.846797][ T25] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 131.846830][ T25] usb 3-1: config 1 has no interface number 0 [ 131.849062][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.849087][ T25] usb 3-1: Product: syz [ 131.849103][ T25] usb 3-1: Manufacturer: syz [ 131.849119][ T25] usb 3-1: SerialNumber: syz [ 131.907512][ T25] usb 3-1: 3:1 : does not exist [ 131.907535][ T25] usb 3-1: 3:2 : does not exist [ 131.939392][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 131.940415][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 131.943945][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 131.943984][ T9] usb 4-1: can't read configurations, error -71 [ 132.063141][ T5769] usb 3-1: USB disconnect, device number 22 [ 132.100924][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.190814][ T5617] usb 1-1: USB disconnect, device number 22 [ 132.345158][ T9] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 132.500960][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 132.501019][ T9] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=d1.34 [ 132.502442][ T9] usb 4-1: config 100 has an invalid interface number: 117 but max is 0 [ 132.502473][ T9] usb 4-1: config 100 has no interface number 0 [ 132.502504][ T9] usb 4-1: config 100 interface 117 has no altsetting 0 [ 132.508460][ T9] usb 4-1: string descriptor 0 read error: -22 [ 132.508617][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.539948][ T9] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 132.540314][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 132.598693][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 132.604883][ T9] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 132.604948][ T9] usb 4-1: media controller created [ 132.701903][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.814402][ T9] cxusb: set interface failed [ 132.814424][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 132.814470][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 132.814488][ T9] usb 4-1: bluebird_gpio_write failed. [ 132.825299][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 132.825325][ T9] usb 4-1: bluebird_gpio_write failed. [ 132.930567][ T9] DVB: Unable to find symbol dib7000p_attach() [ 132.930587][ T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 132.941325][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.941826][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.056321][ T9] rc_core: IR keymap rc-dvico-mce not found [ 133.056340][ T9] Registered IR keymap rc-empty [ 133.064542][ T9] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 133.078728][ T9] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input9 [ 133.088023][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 133.088044][ T9] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 133.103153][ T9] usb 4-1: USB disconnect, device number 21 [ 133.163135][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 133.275015][ T9] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected. [ 133.381653][ T6619] netlink: 20 bytes leftover after parsing attributes in process `syz.0.208'. [ 133.816347][ T5693] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 133.965665][ T5693] usb 3-1: Invalid ep0 maxpacket: 64 [ 134.095145][ T5693] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 134.128822][ T6584] netlink: 2 bytes leftover after parsing attributes in process `syz.1.197'. [ 134.245964][ T5693] usb 3-1: Invalid ep0 maxpacket: 64 [ 134.246292][ T5693] usb usb3-port1: attempt power cycle [ 134.332009][ T5798] gspca_stk1135: reg_w 0x350 err -71 [ 134.333057][ T5798] gspca_stk1135: serial bus timeout: status=0x00 [ 134.333071][ T5798] gspca_stk1135: Sensor write failed [ 134.333100][ T5798] gspca_stk1135: serial bus timeout: status=0x00 [ 134.333111][ T5798] gspca_stk1135: Sensor write failed [ 134.333141][ T5798] gspca_stk1135: serial bus timeout: status=0x00 [ 134.333152][ T5798] gspca_stk1135: Sensor read failed [ 134.333182][ T5798] gspca_stk1135: serial bus timeout: status=0x00 [ 134.333192][ T5798] gspca_stk1135: Sensor read failed [ 134.333200][ T5798] gspca_stk1135: Detected sensor type unknown (0x0) [ 134.333234][ T5798] gspca_stk1135: serial bus timeout: status=0x00 [ 134.333245][ T5798] gspca_stk1135: Sensor read failed [ 134.333282][ T5798] gspca_stk1135: serial bus timeout: status=0x00 [ 134.333292][ T5798] gspca_stk1135: Sensor read failed [ 134.333320][ T5798] gspca_stk1135: serial bus timeout: status=0x00 [ 134.333330][ T5798] gspca_stk1135: Sensor write failed [ 134.333358][ T5798] gspca_stk1135: serial bus timeout: status=0x00 [ 134.333369][ T5798] gspca_stk1135: Sensor write failed [ 134.333450][ T5798] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 134.347562][ T5798] usb 2-1: USB disconnect, device number 27 [ 134.585162][ T5693] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 134.606405][ T5693] usb 3-1: Invalid ep0 maxpacket: 64 [ 134.739046][ T5693] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 134.756928][ T5693] usb 3-1: Invalid ep0 maxpacket: 64 [ 134.757300][ T5693] usb usb3-port1: unable to enumerate USB device [ 135.506796][ T6664] input: syz1 as /devices/virtual/input/input10 [ 135.592418][ T6664] jffs2: notice: (6664) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 135.690171][ T6670] net_ratelimit: 55 callbacks suppressed [ 135.690195][ T6670] openvswitch: netlink: IP tunnel dst address not specified [ 136.373353][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'. [ 136.586522][ T6690] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 137.015824][ T5798] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 137.145121][ T5798] usb 3-1: device descriptor read/64, error -71 [ 137.385267][ T5798] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 137.516796][ T5798] usb 3-1: device descriptor read/64, error -71 [ 137.626469][ T5798] usb usb3-port1: attempt power cycle [ 137.655421][ T25] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 137.806705][ T25] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 137.808050][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.808074][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 137.808121][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.808146][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.808183][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.879400][ T25] ims_pcu 1-1:1.0: probe with driver ims_pcu failed with error -22 [ 138.214685][ T5798] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 138.317399][ T6700] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 138.338861][ T5798] usb 3-1: device descriptor read/8, error -71 [ 138.729825][ T5798] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 138.778626][ T5622] usb 1-1: USB disconnect, device number 23 [ 138.906924][ T5798] usb 3-1: device descriptor read/8, error -71 [ 139.040286][ T5798] usb usb3-port1: unable to enumerate USB device [ 140.210383][ T6727] kvm: pic: non byte read [ 140.210486][ T6727] kvm: pic: non byte read [ 140.214573][ T6727] kvm: pic: non byte write [ 140.236416][ T6727] kvm: pic: non byte write [ 140.236611][ T6727] kvm: pic: level sensitive irq not supported [ 140.236806][ T6727] kvm: pic: level sensitive irq not supported [ 141.392990][ T6748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.245'. [ 142.065145][ T5622] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 142.225431][ T5622] usb 4-1: Using ep0 maxpacket: 32 [ 142.226883][ T5622] usb 4-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice=10.00 [ 142.248444][ T5622] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 126, using maximum allowed: 30 [ 142.248494][ T5622] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.248520][ T5622] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.248543][ T5622] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 126 [ 142.249910][ T5622] usb 4-1: New USB device strings: Mfr=0, Product=31, SerialNumber=0 [ 142.249935][ T5622] usb 4-1: Product: syz [ 142.266217][ T25] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 142.332294][ T5622] usb 4-1: config 0 descriptor?? [ 142.475189][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 142.476120][ T25] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 142.477568][ T25] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 142.477593][ T25] usb 1-1: config 0 has no interface number 0 [ 142.477669][ T25] usb 1-1: config 0 interface 184 has no altsetting 0 [ 142.483029][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.483055][ T25] usb 1-1: Product: syz [ 142.483070][ T25] usb 1-1: Manufacturer: syz [ 142.483085][ T25] usb 1-1: SerialNumber: syz [ 142.566752][ T25] usb 1-1: config 0 descriptor?? [ 142.925856][ T6754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.932364][ T6754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.991636][ T25] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 142.991670][ T25] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 142.991689][ T25] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 142.992059][ T25] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 143.125240][ T5622] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 143.125280][ T5622] monterey 0003:0566:3004.0008: unknown main item tag 0x4 [ 143.125304][ T5622] monterey 0003:0566:3004.0008: item fetching failed at offset 2/21 [ 143.126159][ T5622] monterey 0003:0566:3004.0008: probe with driver monterey failed with error -22 [ 143.343693][ T5622] usb 4-1: USB disconnect, device number 22 [ 144.168014][ T31] audit: type=1326 audit(1789943833.261:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6766 comm="syz.2.251" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcbb3f9e159 code=0x0 [ 144.485232][ T5622] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 144.617699][ T5622] usb 3-1: device descriptor read/64, error -71 [ 144.855591][ T5622] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 144.985324][ T5622] usb 3-1: device descriptor read/64, error -71 [ 145.097749][ T5622] usb usb3-port1: attempt power cycle [ 145.152982][ T51] usb 1-1: USB disconnect, device number 24 [ 145.341945][ T6785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.254'. [ 145.445144][ T5622] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 145.475664][ T5622] usb 3-1: device descriptor read/8, error -71 [ 145.725280][ T5622] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 145.747747][ T5622] usb 3-1: device descriptor read/8, error -71 [ 145.856012][ T5622] usb usb3-port1: unable to enumerate USB device [ 147.295826][ T5622] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 147.446790][ T5622] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 147.448328][ T5622] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.448381][ T5622] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.448404][ T5622] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 147.448427][ T5622] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.454629][ T5622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.454656][ T5622] usb 1-1: Product: syz [ 147.454695][ T5622] usb 1-1: Manufacturer: syz [ 147.454711][ T5622] usb 1-1: SerialNumber: syz [ 147.842980][ T5617] usb 1-1: USB disconnect, device number 25 [ 148.911186][ T6814] FAULT_INJECTION: forcing a failure. [ 148.911186][ T6814] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 148.911219][ T6814] CPU: 1 UID: 0 PID: 6814 Comm: syz.0.260 Not tainted syzkaller #0 PREEMPT(full) [ 148.911243][ T6814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.911256][ T6814] Call Trace: [ 148.911264][ T6814] [ 148.911272][ T6814] dump_stack_lvl+0xe8/0x150 [ 148.911306][ T6814] should_fail_ex+0x3eb/0x540 [ 148.911335][ T6814] prepare_alloc_pages+0x21e/0x5f0 [ 148.911374][ T6814] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 148.911412][ T6814] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 148.911454][ T6814] ? policy_nodemask+0x2cc/0x8e0 [ 148.911484][ T6814] alloc_pages_mpol+0x21e/0x390 [ 148.911515][ T6814] alloc_pages_noprof+0xb1/0x2b0 [ 148.911543][ T6814] system_heap_allocate+0x44d/0xf70 [ 148.911581][ T6814] ? __pfx_system_heap_allocate+0x10/0x10 [ 148.911627][ T6814] ? __might_fault+0xaf/0x130 [ 148.911662][ T6814] dma_heap_ioctl+0x4a7/0x6d0 [ 148.911695][ T6814] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 148.911743][ T6814] ? bpf_lsm_file_ioctl+0x9/0x20 [ 148.911778][ T6814] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 148.911804][ T6814] __se_sys_ioctl+0xfc/0x170 [ 148.911839][ T6814] do_syscall_64+0x166/0x520 [ 148.911860][ T6814] ? trace_irq_disable+0x3b/0x140 [ 148.911891][ T6814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.911913][ T6814] ? clear_bhb_loop+0x70/0xc0 [ 148.911940][ T6814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.911961][ T6814] RIP: 0033:0x7faa0679e159 [ 148.911982][ T6814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.911999][ T6814] RSP: 002b:00007faa075e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.912024][ T6814] RAX: ffffffffffffffda RBX: 00007faa06a26090 RCX: 00007faa0679e159 [ 148.912040][ T6814] RDX: 0000200000000040 RSI: 00000000c0184800 RDI: 0000000000000004 [ 148.912054][ T6814] RBP: 00007faa0683506b R08: 0000000000000000 R09: 0000000000000000 [ 148.912068][ T6814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.912081][ T6814] R13: 00007faa06a26128 R14: 00007faa06a26090 R15: 00007ffc27a719b8 [ 148.912115][ T6814] [ 149.321911][ T6823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.263'. [ 149.506533][ T5617] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 149.695896][ T5617] usb 1-1: Invalid ep0 maxpacket: 64 [ 149.820124][ T6827] rust_binder: 6824:6827 got reply transaction with no transaction stack [ 149.820154][ T6827] rust_binder: 6824:6827 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 [ 149.820635][ T5622] rust_binder: 6824: undelivered TRANSACTION_ERROR: 29201 [ 149.854884][ T5617] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 149.877592][ T6826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.019479][ T5617] usb 1-1: Invalid ep0 maxpacket: 64 [ 150.024124][ T5617] usb usb1-port1: attempt power cycle [ 150.375247][ T5617] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 150.396022][ T5617] usb 1-1: Invalid ep0 maxpacket: 64 [ 150.526262][ T5617] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 150.572037][ T5617] usb 1-1: Invalid ep0 maxpacket: 64 [ 150.572417][ T5617] usb usb1-port1: unable to enumerate USB device [ 151.055125][ T51] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 151.216369][ T51] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 151.217631][ T51] usb 4-1: config 0 interface 0 altsetting 72 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 151.217664][ T51] usb 4-1: config 0 interface 0 altsetting 72 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 151.217691][ T51] usb 4-1: config 0 interface 0 has no altsetting 0 [ 151.217725][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.286952][ T51] usb 4-1: config 0 descriptor?? [ 151.323583][ T6840] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 151.366490][ T4931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.371291][ T4931] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.372235][ T4931] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.374859][ T4931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.405502][ T4931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.937753][ T51] usbhid 4-1:0.0: can't add hid device: -71 [ 151.940104][ T51] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 151.991593][ T51] usb 4-1: USB disconnect, device number 23 [ 152.194241][ T6142] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.702304][ T6142] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.034775][ T6142] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.396855][ T6880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.495380][ T54] Bluetooth: hci2: command tx timeout [ 153.594229][ T6880] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 153.634129][ T6880] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 153.683715][ T6880] iommufd_mock iommufd_mock3: Adding to iommu group 3 [ 153.766569][ T6880] iommufd_mock iommufd_mock4: Adding to iommu group 4 [ 153.803524][ T6888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.274'. [ 153.836060][ T6880] iommufd_mock iommufd_mock5: Adding to iommu group 5 [ 153.853240][ T6880] iommufd_mock iommufd_mock6: Adding to iommu group 6 [ 153.867011][ T6880] iommufd_mock iommufd_mock7: Adding to iommu group 7 [ 153.890824][ T6880] iommufd_mock iommufd_mock8: Adding to iommu group 8 [ 153.903586][ T6880] iommufd_mock iommufd_mock9: Adding to iommu group 9 [ 153.941801][ T6880] iommufd_mock iommufd_mock10: Adding to iommu group 10 [ 153.993060][ T6880] iommufd_mock iommufd_mock11: Adding to iommu group 11 [ 154.019853][ T6142] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.023787][ T6880] iommufd_mock iommufd_mock12: Adding to iommu group 12 [ 154.099874][ T6880] iommufd_mock iommufd_mock13: Adding to iommu group 13 [ 154.238999][ T6880] iommufd_mock iommufd_mock14: Adding to iommu group 14 [ 154.655211][ T25] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 154.805839][ T25] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 154.810197][ T25] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 154.810225][ T25] usb 3-1: config 0 has no interface number 0 [ 154.810272][ T25] usb 3-1: config 0 interface 41 has no altsetting 0 [ 154.865997][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.866026][ T25] usb 3-1: Product: syz [ 154.866052][ T25] usb 3-1: Manufacturer: syz [ 154.866066][ T25] usb 3-1: SerialNumber: syz [ 154.869441][ T25] usb 3-1: config 0 descriptor?? [ 155.214202][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 155.251130][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 155.253826][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 155.280261][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 155.311188][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 155.331725][ T6142] bridge_slave_1: left allmulticast mode [ 155.331768][ T6142] bridge_slave_1: left promiscuous mode [ 155.335493][ T6142] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.360972][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 155.415733][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 155.451648][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 155.468909][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 155.504773][ T6142] bridge_slave_0: left allmulticast mode [ 155.504831][ T6142] bridge_slave_0: left promiscuous mode [ 155.524634][ T6142] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.561270][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 155.575702][ T54] Bluetooth: hci2: command tx timeout [ 156.039352][ T6893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.063064][ T6893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.171178][ T6921] mmap: syz.3.284 (6921) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 156.485520][ T6142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.517603][ T6142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.521168][ T6142] bond0 (unregistering): Released all slaves [ 156.982068][ T6929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.982736][ T6929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.096151][ T25] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 157.096182][ T25] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 157.096515][ T25] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 157.225896][ T51] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 157.303195][ T25] usb 3-1: USB disconnect, device number 35 [ 157.397659][ T51] usb 1-1: not running at top speed; connect to a high speed hub [ 157.397700][ T51] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 157.404843][ T51] usb 1-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 157.404913][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.507999][ T5617] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 157.534822][ T51] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -22 [ 157.656689][ T54] Bluetooth: hci2: command tx timeout [ 157.657582][ T5617] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 157.662428][ T5617] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.705286][ T5617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.705315][ T5617] usb 4-1: Product: syz [ 157.705330][ T5617] usb 4-1: Manufacturer: syz [ 157.705345][ T5617] usb 4-1: SerialNumber: syz [ 157.739891][ T5617] usb 4-1: config 0 descriptor?? [ 157.776994][ T5617] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 158.058441][ T6844] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.062041][ T6844] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.062983][ T6844] bridge_slave_0: entered allmulticast mode [ 158.094271][ T6844] bridge_slave_0: entered promiscuous mode [ 158.170709][ T6844] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.170869][ T6844] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.171102][ T6844] bridge_slave_1: entered allmulticast mode [ 158.206601][ T6844] bridge_slave_1: entered promiscuous mode [ 158.272185][ T6844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.286486][ T6844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.343097][ T6844] team0: Port device team_slave_0 added [ 158.353776][ T6844] team0: Port device team_slave_1 added [ 158.418398][ T25] usb 1-1: USB disconnect, device number 30 [ 159.071669][ T25] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 159.148862][ T6844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.148882][ T6844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.148908][ T6844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.196846][ T25] usb 3-1: device descriptor read/64, error -71 [ 159.214151][ T6844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.214169][ T6844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.214194][ T6844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.262124][ T5617] gspca_pac7302: reg_w() failed i: 78 v: 40 error -110 [ 159.262225][ T5617] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 159.340409][ T5617] usb 4-1: USB disconnect, device number 24 [ 159.436362][ T25] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 159.578412][ T25] usb 3-1: device descriptor read/64, error -71 [ 159.707258][ T25] usb usb3-port1: attempt power cycle [ 159.738885][ T54] Bluetooth: hci2: command tx timeout [ 159.742492][ T6142] hsr_slave_0: left promiscuous mode [ 159.756452][ T6142] hsr_slave_1: left promiscuous mode [ 159.757548][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.757588][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.760117][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.760139][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.983765][ T6142] veth1_macvtap: left promiscuous mode [ 159.984333][ T6142] veth0_macvtap: left promiscuous mode [ 160.000887][ T6142] veth1_vlan: left promiscuous mode [ 160.001043][ T6142] veth0_vlan: left promiscuous mode [ 160.115261][ T25] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 160.126964][ T5617] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 160.151341][ T25] usb 3-1: device descriptor read/8, error -71 [ 160.316251][ T5617] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 160.317642][ T5617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.317672][ T5617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.317693][ T5617] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.317737][ T5617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.321972][ T5617] usb 1-1: config 0 descriptor?? [ 160.415233][ T25] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 160.436336][ T25] usb 3-1: device descriptor read/8, error -71 [ 160.545788][ T25] usb usb3-port1: unable to enumerate USB device [ 160.748957][ T6142] team0 (unregistering): Port device team_slave_1 removed [ 160.858449][ T5617] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.0009/input/input12 [ 160.916636][ T6142] team0 (unregistering): Port device team_slave_0 removed [ 160.916967][ T5617] sony 0003:054C:03D5.0009: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0 [ 161.268565][ T6964] netlink: 'syz.3.292': attribute type 1 has an invalid length. [ 161.388021][ T6966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.388520][ T6966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.543227][ T6968] netlink: 'syz.3.292': attribute type 1 has an invalid length. [ 161.625489][ T25] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 161.676488][ T6844] hsr_slave_0: entered promiscuous mode [ 161.700821][ T6844] hsr_slave_1: entered promiscuous mode [ 161.712578][ T6844] debugfs: 'hsr0' already exists in 'hsr' [ 161.712602][ T6844] Cannot create hsr debugfs directory [ 161.734299][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 161.858085][ T6973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.894145][ T6973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.630337][ T6844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 162.720811][ T6844] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 162.733936][ T6844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 162.799043][ T6844] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 162.833170][ T52] Bluetooth: hci4: Frame reassembly failed (-84) [ 162.987928][ T6844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 163.020121][ T51] usb 1-1: USB disconnect, device number 31 [ 163.077759][ T6977] FAULT_INJECTION: forcing a failure. [ 163.077759][ T6977] name failslab, interval 1, probability 0, space 0, times 0 [ 163.077794][ T6977] CPU: 1 UID: 60928 PID: 6977 Comm: syz.2.293 Not tainted syzkaller #0 PREEMPT(full) [ 163.077819][ T6977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.077832][ T6977] Call Trace: [ 163.077841][ T6977] [ 163.077851][ T6977] dump_stack_lvl+0xe8/0x150 [ 163.077886][ T6977] should_fail_ex+0x3eb/0x540 [ 163.077916][ T6977] should_failslab+0xa8/0x100 [ 163.077940][ T6977] ? prepare_creds+0x30/0x820 [ 163.077972][ T6977] kmem_cache_alloc_noprof+0x9c/0x600 [ 163.078003][ T6977] ? prepare_creds+0x30/0x820 [ 163.078048][ T6977] prepare_creds+0x30/0x820 [ 163.078083][ T6977] cap_task_prctl+0x379/0xa40 [ 163.078108][ T6977] security_task_prctl+0xf6/0x190 [ 163.078140][ T6977] __se_sys_prctl+0xbf/0x1910 [ 163.078177][ T6977] ? __pfx___se_sys_prctl+0x10/0x10 [ 163.078215][ T6977] ? __x64_sys_prctl+0x20/0xc0 [ 163.078258][ T6977] do_syscall_64+0x166/0x520 [ 163.078281][ T6977] ? trace_irq_disable+0x3b/0x140 [ 163.078310][ T6977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.078333][ T6977] ? clear_bhb_loop+0x70/0xc0 [ 163.078359][ T6977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.078380][ T6977] RIP: 0033:0x7fcbb3f9e159 [ 163.078402][ T6977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.078421][ T6977] RSP: 002b:00007fcbb4e31028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 163.078447][ T6977] RAX: ffffffffffffffda RBX: 00007fcbb4225fa0 RCX: 00007fcbb3f9e159 [ 163.078472][ T6977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 163.078485][ T6977] RBP: 00007fcbb403506b R08: 0000000000000000 R09: 0000000000000000 [ 163.078499][ T6977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.078512][ T6977] R13: 00007fcbb4226038 R14: 00007fcbb4225fa0 R15: 00007fff37b31f88 [ 163.078546][ T6977] [ 163.346050][ T6844] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 163.346972][ T6844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 163.403016][ T6844] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 164.020898][ T7004] __nla_validate_parse: 3 callbacks suppressed [ 164.020922][ T7004] netlink: 24 bytes leftover after parsing attributes in process `syz.0.295'. [ 164.133114][ T6844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.345889][ T6844] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.398969][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.399095][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.438545][ T203] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.438670][ T203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.865865][ T4931] Bluetooth: hci4: command 0xfc11 tx timeout [ 164.865964][ T54] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 165.314588][ T1970] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 165.712323][ T7035] sctp: [Deprecated]: syz.0.300 (pid 7035) Use of int in max_burst socket option. [ 165.712323][ T7035] Use struct sctp_assoc_value instead [ 165.801863][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 166.586196][ T51] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 166.651269][ T7056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.304'. [ 166.776969][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 166.778435][ T51] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 166.783942][ T51] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 166.783978][ T51] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.784006][ T51] usb 3-1: config 0 interface 0 has no altsetting 0 [ 166.784043][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.851316][ T51] usb 3-1: config 0 descriptor?? [ 167.118619][ T6844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.367940][ T7051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.392783][ T7051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.914067][ T7084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.914684][ T7084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.970715][ T51] input: HID 0419:0600 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0419:0600.000A/input/input13 [ 168.025653][ T51] samsung 0003:0419:0600.000A: input,hidraw0: USB HID v80.00 Joystick [HID 0419:0600] on usb-dummy_hcd.2-1/input0 [ 168.140749][ T5617] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 168.159127][ T5350] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 168.315998][ T5617] usb 1-1: Using ep0 maxpacket: 8 [ 168.317324][ T5350] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 168.317695][ T5617] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 168.359465][ T5617] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 168.361757][ T5617] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 168.364710][ T5350] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 168.364736][ T5350] usb 4-1: Product: syz [ 168.364783][ T5350] usb 4-1: SerialNumber: syz [ 168.419291][ T5617] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 168.464776][ T5617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.464837][ T5617] usb 1-1: Product: syz [ 168.464853][ T5617] usb 1-1: Manufacturer: syz [ 168.464868][ T5617] usb 1-1: SerialNumber: syz [ 168.510750][ T5350] usb 4-1: config 0 descriptor?? [ 168.773907][ T5350] usb 4-1: USB disconnect, device number 26 [ 168.897461][ T7082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.917051][ T7082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.021913][ T7082] netlink: 5592 bytes leftover after parsing attributes in process `syz.0.307'. [ 169.135627][ T5617] adutux 1-1:168.0: interrupt endpoints not found [ 169.168189][ T5617] usb 1-1: USB disconnect, device number 32 [ 169.232018][ T6844] veth0_vlan: entered promiscuous mode [ 169.279325][ T6844] veth1_vlan: entered promiscuous mode [ 169.353293][ T7082] ubi0: attaching mtd0 [ 169.438505][ T7082] ubi0: scanning is finished [ 169.438579][ T7082] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 169.470178][ T6844] veth0_macvtap: entered promiscuous mode [ 169.521535][ T6844] veth1_macvtap: entered promiscuous mode [ 169.557504][ T5350] usb 3-1: USB disconnect, device number 40 [ 169.661249][ T6844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.727643][ T6844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.774473][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 169.865317][ T6142] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.866415][ T6142] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.866460][ T6142] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.866497][ T6142] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.956419][ T25] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 170.038891][ T7082] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 170.086381][ T25] usb 1-1: device descriptor read/64, error -71 [ 170.138422][ T7094] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 170.138463][ T7094] overlayfs: overlapping lowerdir path [ 170.303987][ T6139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.304015][ T6139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.338740][ T25] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 170.475494][ T25] usb 1-1: device descriptor read/64, error -71 [ 170.478983][ T6139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.479004][ T6139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.587383][ T25] usb usb1-port1: attempt power cycle [ 170.715206][ T5350] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 170.865552][ T5350] usb 4-1: device descriptor read/64, error -71 [ 171.106535][ T5350] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 171.265120][ T5350] usb 4-1: device descriptor read/64, error -71 [ 171.389133][ T5350] usb usb4-port1: attempt power cycle [ 171.474502][ T7114] netlink: 20 bytes leftover after parsing attributes in process `syz.0.312'. [ 171.474539][ T7114] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 171.728566][ T5350] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 171.751715][ T5350] usb 4-1: device descriptor read/8, error -71 [ 171.966551][ T51] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 171.995186][ T5350] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 172.019742][ T5350] usb 4-1: device descriptor read/8, error -71 [ 172.116300][ T51] usb 3-1: device descriptor read/64, error -71 [ 172.135606][ T5350] usb usb4-port1: unable to enumerate USB device [ 172.307126][ T7129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.315'. [ 172.375911][ T51] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 172.507056][ T51] usb 3-1: device descriptor read/64, error -71 [ 172.588844][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 172.615623][ T51] usb usb3-port1: attempt power cycle [ 172.967898][ T51] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 173.005809][ T51] usb 3-1: device descriptor read/8, error -71 [ 173.246428][ T5622] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 173.248136][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 173.248519][ T51] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 173.286178][ T51] usb 3-1: device descriptor read/8, error -71 [ 173.397487][ T51] usb usb3-port1: unable to enumerate USB device [ 173.416286][ T25] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 173.417224][ T5622] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.418546][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 173.418827][ T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 173.419897][ T5622] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.421624][ T5622] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 173.421648][ T5622] usb 1-1: SerialNumber: syz [ 173.497775][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 173.497850][ T25] usb 5-1: Product: syz [ 173.497867][ T25] usb 5-1: Manufacturer: syz [ 173.550825][ T5622] cdc_ether 1-1:1.0: skipping garbage [ 173.550851][ T5622] cdc_ether 1-1:1.0: missing cdc header ether descriptor [ 173.555171][ T25] iuu_phoenix 5-1:1.0: iuu_phoenix converter detected [ 173.617501][ T25] usb 5-1: iuu_phoenix converter now attached to ttyUSB0 [ 173.756610][ T54] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 173.779072][ T7144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.782463][ T7144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.879106][ T7146] xt_l2tp: unknown flags: 8b [ 173.880602][ T7144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.883480][ T7144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.997130][ T5622] usb 1-1: USB disconnect, device number 36 [ 174.175152][ T25] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 174.339964][ T25] usb 4-1: not running at top speed; connect to a high speed hub [ 174.340006][ T25] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 174.354028][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.381612][ T25] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 174.381674][ T25] usb 4-1: Product: syz [ 174.381689][ T25] usb 4-1: Manufacturer: syz [ 174.421480][ T25] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 174.663521][ T25] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 174.665062][ T25] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 174.665153][ T25] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 174.665810][ T25] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71 [ 174.772434][ T25] usb 4-1: USB disconnect, device number 31 [ 174.959075][ T7142] iuu_phoenix ttyUSB0: iuu_open - failed submitting read urb, error -90 [ 175.000667][ T51] usb 5-1: USB disconnect, device number 2 [ 175.053590][ T51] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 175.074580][ T51] iuu_phoenix 5-1:1.0: device disconnected [ 175.253115][ T7160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.253632][ T7160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.425977][ T5622] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 175.468277][ T25] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 175.555611][ T5622] usb 3-1: device descriptor read/64, error -71 [ 175.659037][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 175.661850][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 175.661920][ T25] usb 1-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 3.73 [ 175.692417][ T25] usb 1-1: config 4 has an invalid interface number: 235 but max is 0 [ 175.692446][ T25] usb 1-1: config 4 has no interface number 0 [ 175.718487][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.718517][ T25] usb 1-1: Product: syz [ 175.718532][ T25] usb 1-1: Manufacturer: syz [ 175.718547][ T25] usb 1-1: SerialNumber: syz [ 175.815972][ T5622] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 175.976453][ T5622] usb 3-1: device descriptor read/64, error -71 [ 175.984952][ T7153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.017414][ T7153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.085755][ T5622] usb usb3-port1: attempt power cycle [ 176.419755][ T25] uvcvideo 1-1:4.235: Found UVC 0.00 device syz (04b4:0384) [ 176.419794][ T25] uvcvideo 1-1:4.235: No valid video chain found. [ 176.420344][ T25] usb 1-1: can't set first interface for hiFace device. [ 176.420367][ T25] snd-usb-hiface 1-1:4.235: probe with driver snd-usb-hiface failed with error -5 [ 176.463014][ T5622] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 176.475795][ T5622] usb 3-1: device descriptor read/8, error -71 [ 176.477106][ T25] usb 1-1: USB disconnect, device number 37 [ 176.725360][ T5622] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 176.759214][ T5622] usb 3-1: device descriptor read/8, error -71 [ 176.802278][ T7174] netlink: 24 bytes leftover after parsing attributes in process `syz.3.325'. [ 176.865478][ T5622] usb usb3-port1: unable to enumerate USB device [ 177.265119][ T7176] netlink: 168 bytes leftover after parsing attributes in process `syz.3.326'. [ 177.555135][ T5693] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 177.605290][ T5769] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 177.707469][ T5693] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 177.713947][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.713978][ T5693] usb 1-1: Product: syz [ 177.713994][ T5693] usb 1-1: Manufacturer: syz [ 177.714009][ T5693] usb 1-1: SerialNumber: syz [ 177.747213][ T5693] usb 1-1: config 0 descriptor?? [ 177.758441][ T5769] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 177.759851][ T5769] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.759903][ T5769] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 177.759927][ T5769] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 177.759953][ T5769] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.759997][ T5769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.764252][ T5693] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 178.404014][ T5769] gud 4-1:1.0: Failed to add properties (error=-71) [ 178.404053][ T5769] gud 4-1:1.0: probe with driver gud failed with error -71 [ 178.485117][ T5769] usb 4-1: USB disconnect, device number 32 [ 178.759794][ T7214] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 178.831983][ T5693] gspca_stk1135: reg_w 0xd err -110 [ 178.833032][ T5693] gspca_stk1135: serial bus timeout: status=0x00 [ 178.833048][ T5693] gspca_stk1135: Sensor write failed [ 178.833077][ T5693] gspca_stk1135: serial bus timeout: status=0x00 [ 178.833089][ T5693] gspca_stk1135: Sensor write failed [ 178.833118][ T5693] gspca_stk1135: serial bus timeout: status=0x00 [ 178.833129][ T5693] gspca_stk1135: Sensor read failed [ 178.833158][ T5693] gspca_stk1135: serial bus timeout: status=0x00 [ 178.833169][ T5693] gspca_stk1135: Sensor read failed [ 178.833177][ T5693] gspca_stk1135: Detected sensor type unknown (0x0) [ 178.833211][ T5693] gspca_stk1135: serial bus timeout: status=0x00 [ 178.833221][ T5693] gspca_stk1135: Sensor read failed [ 178.833251][ T5693] gspca_stk1135: serial bus timeout: status=0x00 [ 178.833262][ T5693] gspca_stk1135: Sensor read failed [ 178.833292][ T5693] gspca_stk1135: serial bus timeout: status=0x00 [ 178.833302][ T5693] gspca_stk1135: Sensor write failed [ 178.833330][ T5693] gspca_stk1135: serial bus timeout: status=0x00 [ 178.833341][ T5693] gspca_stk1135: Sensor write failed [ 178.833425][ T5693] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 179.276302][ T7234] netlink: 'syz.0.327': attribute type 2 has an invalid length. [ 179.276325][ T7234] netlink: 132 bytes leftover after parsing attributes in process `syz.0.327'. [ 179.396258][ T7244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.335'. [ 179.415833][ T5693] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 179.571614][ T5693] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 179.579185][ T5693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.579217][ T5693] usb 5-1: Product: syz [ 179.579231][ T5693] usb 5-1: Manufacturer: syz [ 179.579246][ T5693] usb 5-1: SerialNumber: syz [ 179.612681][ T25] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 179.695272][ T7249] netlink: 180 bytes leftover after parsing attributes in process `syz.2.338'. [ 179.770792][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 179.770858][ T25] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=af.1e [ 179.796246][ T25] usb 4-1: config 228 has an invalid interface number: 99 but max is 0 [ 179.796278][ T25] usb 4-1: config 228 has no interface number 0 [ 179.796322][ T25] usb 4-1: config 228 interface 99 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 179.800292][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.800319][ T25] usb 4-1: Product: syz [ 179.800334][ T25] usb 4-1: Manufacturer: syz [ 179.800349][ T25] usb 4-1: SerialNumber: syz [ 179.803206][ T5693] (unnamed net_device) (uninitialized): Assigned a random MAC address: d2:2e:21:d6:81:fa [ 179.848348][ T5693] rtl8150 5-1:1.0: eth5: rtl8150 is detected [ 180.126333][ T25] ath6kl: Failed to submit usb control message: -71 [ 180.126400][ T25] ath6kl: unable to send the bmi data to the device: -71 [ 180.126417][ T25] ath6kl: Unable to send get target info: -71 [ 180.137902][ T25] ath6kl: Failed to init ath6kl core: -71 [ 180.167786][ T25] ath6kl_usb 4-1:228.99: probe with driver ath6kl_usb failed with error -71 [ 180.186007][ T25] usb 4-1: USB disconnect, device number 33 [ 180.455123][ T5617] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 180.616125][ T5617] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 180.617453][ T5617] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.617484][ T5617] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.617527][ T5617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.733331][ T25] usb 1-1: USB disconnect, device number 38 [ 181.035190][ T5622] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 181.195157][ T5622] usb 4-1: Using ep0 maxpacket: 16 [ 181.199283][ T5622] usb 4-1: unable to get BOS descriptor or descriptor too short [ 181.199334][ T5622] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 181.200762][ T5622] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.200879][ T5622] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.205677][ T5622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.205707][ T5622] usb 4-1: Product: syz [ 181.205722][ T5622] usb 4-1: Manufacturer: syz [ 181.205767][ T5622] usb 4-1: SerialNumber: syz [ 181.404365][ T5617] usb 3-1: usb_control_msg returned -32 [ 181.404453][ T5617] usbtmc 3-1:16.0: can't read capabilities [ 181.507998][ T5622] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 181.508448][ T5622] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 181.721045][ T7291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.346'. [ 182.022008][ T7286] syzkaller1: entered promiscuous mode [ 182.022037][ T7286] syzkaller1: entered allmulticast mode [ 182.105144][ T51] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 182.265380][ T51] usb 1-1: Using ep0 maxpacket: 32 [ 182.267929][ T51] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 182.269613][ T51] usb 1-1: config index 0 descriptor too short (expected 30756, got 36) [ 182.269641][ T51] usb 1-1: config 51 has too many interfaces: 116, using maximum allowed: 32 [ 182.269662][ T51] usb 1-1: config 51 has an invalid descriptor of length 96, skipping remainder of the config [ 182.269711][ T51] usb 1-1: config 51 has 0 interfaces, different from the descriptor's value: 116 [ 182.269750][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.570703][ T51] usb 1-1: string descriptor 0 read error: -71 [ 182.589687][ T51] usb 1-1: USB disconnect, device number 39 [ 182.619643][ T5622] usb 4-1: USB disconnect, device number 34 [ 182.695142][ C0] usb 5-1: eth5: intr status -71 [ 182.695223][ C0] usb 5-1: Rx status -71 [ 182.695293][ C0] usb 5-1: eth5: Tx status -71 [ 182.695850][ C0] usb 5-1: eth5: intr status -71 [ 182.695922][ C0] usb 5-1: Rx status -71 [ 182.695978][ C0] usb 5-1: eth5: Tx status -71 [ 182.696306][ C0] usb 5-1: eth5: intr status -71 [ 182.696364][ C0] usb 5-1: Rx status -71 [ 182.696507][ C0] usb 5-1: eth5: intr status -71 [ 182.696573][ C0] usb 5-1: Rx status -71 [ 182.696622][ T5617] usb 5-1: USB disconnect, device number 3 [ 182.696712][ C0] usb 5-1: eth5: intr status -71 [ 182.762991][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.961662][ T5693] usb 3-1: USB disconnect, device number 49 [ 183.298966][ T7330] netlink: 72 bytes leftover after parsing attributes in process `syz.0.351'. [ 183.337701][ T7330] tmpfs: Bad value for 'mpol' [ 183.365863][ T5769] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 183.517148][ T5769] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 183.520981][ T5769] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.521041][ T5769] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 183.521068][ T5769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 183.521093][ T5769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 183.521116][ T5769] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 183.524591][ T5769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 183.524616][ T5769] usb 4-1: Product: syz [ 183.524632][ T5769] usb 4-1: Manufacturer: syz [ 183.524646][ T5769] usb 4-1: SerialNumber: syz [ 183.544229][ T5769] usb 4-1: config 0 descriptor?? [ 183.787595][ T5769] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 183.787626][ T5769] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 183.987445][ T5769] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 183.987476][ T5769] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 183.987497][ T5769] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 184.132146][ T7347] netlink: 48 bytes leftover after parsing attributes in process `syz.4.353'. [ 184.136755][ T5693] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 184.198543][ T5769] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 184.203218][ T7353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.355'. [ 184.289705][ T5693] usb 1-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 184.291182][ T5693] usb 1-1: config 0 has no interfaces? [ 184.291220][ T5693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.303260][ T5693] usb 1-1: config 0 descriptor?? [ 184.638874][ T5693] usb 1-1: USB disconnect, device number 40 [ 185.593052][ T5769] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 185.595691][ T5769] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 185.713878][ T5769] usb 4-1: USB disconnect, device number 35 [ 185.900880][ T7406] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.940636][ T7408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.365'. [ 185.944191][ T7406] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 186.019710][ T7410] dns_resolver: Unsupported content type (255) [ 186.323225][ T7426] Bluetooth: MGMT ver 1.23 [ 186.332119][ T31] audit: type=1400 audit(1789943875.421:4): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7419 comm="syz.2.368" name="unknown" offset=16 [ 186.455447][ T7432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.455938][ T7432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.676156][ T5617] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 186.698483][ T13] IPVS: starting estimator thread 0... [ 186.698909][ T7438] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 186.722230][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'. [ 186.785160][ T7439] IPVS: using max 28 ests per chain, 67200 per kthread [ 186.827706][ T5617] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 186.828854][ T5617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 186.828885][ T5617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 186.828923][ T5617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.833686][ T5617] usb 1-1: config 0 descriptor?? [ 187.046768][ T5617] hdpvr 1-1:0.0: unexpected answer of status request, len -71 [ 187.046794][ T5617] hdpvr 1-1:0.0: device init failed [ 187.046880][ T5617] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 187.077637][ T5617] usb 1-1: USB disconnect, device number 41 [ 187.420635][ T7460] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.499608][ T7466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.375'. [ 187.535950][ T7471] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes»G [ 187.536018][ T7471] Error validating options; rc = [-22] [ 187.810539][ T7478] netlink: 'syz.0.379': attribute type 10 has an invalid length. [ 188.077229][ T5798] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 188.229774][ T5798] usb 3-1: Using ep0 maxpacket: 32 [ 188.237279][ T5798] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 188.242465][ T5798] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.242490][ T5798] usb 3-1: config 0 has no interface number 0 [ 188.242527][ T5798] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 188.242546][ T5798] usb 3-1: config 0 interface 1 has no altsetting 0 [ 188.250686][ T5798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.250714][ T5798] usb 3-1: Product: syz [ 188.250729][ T5798] usb 3-1: Manufacturer: syz [ 188.250743][ T5798] usb 3-1: SerialNumber: syz [ 188.264644][ T5798] usb 3-1: config 0 descriptor?? [ 188.433087][ T7499] overlay: ./file0 is not a directory [ 188.447616][ T7499] kAFS: Can only specify source 'none' with -o dyn [ 188.528710][ T7482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.529206][ T7482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.550595][ T5798] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 188.550626][ T5798] cx231xx 3-1:0.1: Not found matching IAD interface [ 188.574746][ T5798] usb 3-1: USB disconnect, device number 50 [ 188.997036][ T7479] syz.3.380 (7479) used greatest stack depth: 11936 bytes left [ 189.337729][ T7524] jffs2: notice: (7524) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 189.462040][ T7528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.385'. [ 189.738108][ T7540] netlink: 'syz.4.388': attribute type 1 has an invalid length. [ 189.738135][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.388'. [ 190.152465][ T7552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.390'. [ 190.406203][ T7564] openvswitch: netlink: IPv4 tunnel dst address is zero [ 190.409611][ T7565] openvswitch: netlink: IPv4 tunnel dst address is zero [ 190.958685][ T7580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.959181][ T7580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.021061][ T7582] netlink: 24 bytes leftover after parsing attributes in process `syz.4.396'. [ 191.130927][ T7584] netlink: 'syz.4.397': attribute type 3 has an invalid length. [ 191.133633][ T7585] netlink: 'syz.4.397': attribute type 3 has an invalid length. [ 191.185121][ T5798] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 191.335577][ T5798] usb 3-1: Using ep0 maxpacket: 8 [ 191.337271][ T5798] usb 3-1: New USB device found, idVendor=1199, idProduct=c081, bcdDevice=29.c9 [ 191.340055][ T5798] usb 3-1: config 8 has an invalid interface number: 8 but max is 0 [ 191.340082][ T5798] usb 3-1: config 8 has no interface number 0 [ 191.340114][ T5798] usb 3-1: config 8 interface 8 has no altsetting 0 [ 191.343662][ T5798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.343687][ T5798] usb 3-1: Product: syz [ 191.343703][ T5798] usb 3-1: Manufacturer: syz [ 191.343717][ T5798] usb 3-1: SerialNumber: syz [ 191.585193][ T5798] usb 3-1: USB disconnect, device number 51 [ 191.935168][ T5622] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 192.065113][ T5622] usb 5-1: device descriptor read/64, error -71 [ 192.160801][ T7603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.405'. [ 192.325241][ T5622] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 192.877519][ T5622] usb 5-1: device descriptor read/64, error -71 [ 193.117066][ T5622] usb usb5-port1: attempt power cycle [ 193.631209][ T5622] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 193.805839][ T5622] usb 5-1: device descriptor read/8, error -71 [ 194.328256][ T5622] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 194.802306][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.812967][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.350121][ T7605] ceph: No mds server is up or the cluster is laggy [ 198.513404][ C1] sched: DL replenish lagged too much [ 200.867120][ T5622] usb 5-1: device descriptor read/8, error -110 [ 201.580900][ T5622] usb usb5-port1: unable to enumerate USB device [ 256.396630][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.406793][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.273779][ T7608] ceph: No mds server is up or the cluster is laggy [ 316.517222][ T4931] Bluetooth: hci2: command 0x0406 tx timeout [ 317.469257][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.496775][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.489880][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.500453][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 427.676451][ T32] INFO: task kworker/1:5:5622 blocked for more than 144 seconds. [ 427.676484][ ** replaying previous printk message ** [ 427.676484][ T32] Not tainted syzkaller #0 [ 427.676496][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 427.676508][ T32] task:kworker/1:5 state:D stack:21216 pid:5622 tgid:5622 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 427.676572][ T32] Workqueue: events_power_efficient reg_check_chans_work [ 427.676614][ T32] Call Trace: [ 427.676622][ T32] [ 427.676637][ T32] __schedule+0x17dd/0x5940 [ 427.676691][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 427.676726][ T32] ? __pfx___schedule+0x10/0x10 [ 427.676767][ T32] ? schedule+0x90/0x2b0 [ 427.676802][ T32] schedule+0x164/0x2b0 [ 427.676834][ T32] schedule_preempt_disabled+0x13/0x30 [ 427.676864][ T32] __mutex_lock+0x7c4/0x15a0 [ 427.676892][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 427.676917][ T32] ? reg_check_chans_work+0x1a1/0x1110 [ 427.676951][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 427.676980][ T32] ? look_up_lock_class+0x57/0x110 [ 427.677012][ T32] ? register_lock_class+0x31/0x2e0 [ 427.677052][ T32] reg_check_chans_work+0x1a1/0x1110 [ 427.677102][ T32] ? __pfx_reg_check_chans_work+0x10/0x10 [ 427.677138][ T32] ? lock_acquire+0x115/0x350 [ 427.677190][ T32] ? rcu_is_watching+0x16/0xb0 [ 427.677215][ T32] ? process_scheduled_works+0x97a/0x1630 [ 427.677241][ T32] process_scheduled_works+0xc3d/0x1630 [ 427.677301][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 427.677334][ T32] ? assign_work+0x3cf/0x5d0 [ 427.677366][ T32] worker_thread+0xa47/0xfb0 [ 427.677407][ T32] ? __kthread_parkme+0x71/0x1f0 [ 427.677446][ T32] kthread+0x38b/0x480 [ 427.677477][ T32] ? __pfx_worker_thread+0x10/0x10 [ 427.677499][ T32] ? __pfx_kthread+0x10/0x10 [ 427.677530][ T32] ret_from_fork+0x514/0xb70 [ 427.677562][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 427.677593][ T32] ? __switch_to+0xc89/0x1420 [ 427.677623][ T32] ? __pfx_kthread+0x10/0x10 [ 427.677653][ T32] ret_from_fork_asm+0x1a/0x30 [ 427.677700][ T32] [ 427.677738][ T32] [ 427.677738][ T32] Showing all locks held in the system: [ 427.677748][ T32] locks held by kworker/0:0/9: 4, on CPU#0: [ 427.677764][ T32] #0: ffff8880571eb940 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.677829][ T32] #1: ffffc900000e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.677900][ T32] #2: ffff88807f765440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 427.677964][ T32] #3: ffff888078e3d270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 427.678024][ T32] locks held by kworker/0:1/10: 4, last CPU#0: [ 427.678040][ T32] #0: ffff88803426bd40 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.678102][ T32] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.678180][ T32] #2: ffff88807e4dd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 427.678239][ T32] #3: ffff88807cadc888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 427.678299][ T32] locks held by kworker/u8:0/12: 3, last CPU#1: [ 427.678314][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.678369][ T32] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.678425][ T32] #2: ffff8880670c07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 427.678485][ T32] locks held by kworker/u8:1/13: 3, last CPU#0: [ 427.678500][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.678553][ T32] #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.678609][ T32] #2: ffff888052db07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 427.678667][ T32] locks held by kworker/1:0/25: 3, last CPU#1: [ 427.678683][ T32] #0: ffff8880571eb940 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.678743][ T32] #1: ffffc900001f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.678812][ T32] #2: ffff888078e3d270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 427.678871][ T32] locks held by kworker/1:1/30: 3, last CPU#1: [ 427.678886][ T32] #0: ffff888058030940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.678946][ T32] #1: ffffc90000a57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.679017][ T32] #2: ffff888033435440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 427.679077][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 427.679092][ T32] #0: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 427.679144][ T32] locks held by kworker/u8:2/35: 3, last CPU#1: [ 427.679167][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.679223][ T32] #1: ffffc90000ab7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.679279][ T32] #2: ffff8880671f07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 427.679339][ T32] locks held by kworker/u8:3/50: 4, last CPU#1: [ 427.679353][ T32] #0: ffff888031276940 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.679407][ T32] #1: ffffc90000bb7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.679463][ T32] #2: ffff888035af1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 427.679522][ T32] #3: ffff88807cade640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 427.679580][ T32] locks held by kworker/1:2/51: 2, last CPU#1: [ 427.679595][ T32] #0: ffff88813ff41d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.679650][ T32] #1: ffffc90000bc7c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.679708][ T32] locks held by kworker/u8:4/52: 3, last CPU#1: [ 427.679722][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.679777][ T32] #1: ffffc90000bd7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.679833][ T32] #2: ffff8880798fb258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 427.679898][ T32] locks held by kswapd0/87: 1, last CPU#0: [ 427.679913][ T32] #0: ffffffff8f090420 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0x9e0/0x3260 [ 427.679965][ T32] locks held by kworker/u8:5/97: 4, last CPU#1: [ 427.679980][ T32] #0: ffff8880349ff140 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.680041][ T32] #1: ffffc90002557c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.680098][ T32] #2: ffff8880519ad440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 427.680164][ T32] #3: ffff88802b710330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 427.680225][ T32] locks held by kworker/u8:6/203: 3, last CPU#0: [ 427.680241][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.680296][ T32] #1: ffffc90003017c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.680351][ T32] #2: ffff8880678f07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 427.680408][ T32] locks held by kworker/u8:7/295: 4, on CPU#0: [ 427.680423][ T32] #0: ffff88807de1a140 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.680483][ T32] #1: ffffc90003107c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.680539][ T32] #2: ffff8880348e9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 427.680598][ T32] #3: ffff88802b714888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 427.680667][ T32] locks held by kworker/u8:9/1164: 4, last CPU#0: [ 427.680683][ T32] #0: ffff88807f2ea940 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.680743][ T32] #1: ffffc90004defc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.680799][ T32] #2: ffff8880355f1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 427.680857][ T32] #3: ffff88802b715c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 427.680916][ T32] locks held by kworker/0:2/1220: 3, last CPU#0: [ 427.680932][ T32] #0: ffff888058311940 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.680992][ T32] #1: ffffc9000503fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.681062][ T32] #2: ffff8880355f5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 427.681122][ T32] locks held by kworker/u8:10/1263: 2, last CPU#0: [ 427.681137][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.681201][ T32] #1: ffffc900050bfc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.681267][ T32] locks held by kworker/R-bat_e/3226: 2, last CPU#1: [ 427.681282][ T32] #0: ffff88803241b940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.681337][ T32] #1: ffffc9000e047c20 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.681394][ T32] locks held by udevd/4982: 2, last CPU#0: [ 427.681409][ T32] #0: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 427.681470][ T32] #1: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 427.681524][ T32] locks held by dhcpcd/5276: 3, last CPU#0: [ 427.681538][ T32] #0: ffffffff8f6f2998 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x5f0 [ 427.681592][ T32] #1: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 427.681652][ T32] #2: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 427.681704][ T32] locks held by dhcpcd/5277: 4, last CPU#0: [ 427.681719][ T32] #0: ffffffff8f0367f0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x470 [ 427.681771][ T32] #1: ffff88807dc4a9f8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 427.681828][ T32] #2: ffff88813ff71d38 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 427.681889][ T32] #3: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 427.681946][ T32] locks held by kworker/1:3/5350: 3, last CPU#1: [ 427.681960][ T32] #0: ffff888057027140 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.682018][ T32] #1: ffffc90003757c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.682084][ T32] #2: ffff88802b710d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 427.682142][ T32] locks held by getty/5374: 2, on CPU#1: [ 427.682156][ T32] #0: ffff888035dae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 427.682225][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 427.682282][ T32] locks held by syz-executor/5603: 1, last CPU#0: [ 427.682297][ T32] #0: ffff888029df8260 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 427.682358][ T32] locks held by syz-executor/5613: 3, last CPU#0: [ 427.682373][ T32] #0: ffffffff8f6f2998 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 427.682424][ T32] #1: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 427.682483][ T32] #2: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 427.682533][ T32] locks held by syz-executor/5614: 1, last CPU#0: [ 427.682548][ T32] #0: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 427.682607][ T32] locks held by kworker/1:4/5617: 3, last CPU#1: [ 427.682622][ T32] #0: ffff888057c51d40 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.682683][ T32] #1: ffffc90003be7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.682753][ T32] #2: ffff8880348e9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 427.682813][ T32] locks held by kworker/1:5/5622: 4, on CPU#1: [ 427.682829][ T32] #0: ffff88813ff41d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.682883][ T32] #1: ffffc90003c27c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.682937][ T32] #2: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110 [ 427.682998][ T32] #3: ffff888052db07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x1a1/0x1110 [ 427.683061][ T32] locks held by kworker/0:3/5693: 3, last CPU#0: [ 427.683076][ T32] #0: ffff888058030940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.683137][ T32] #1: ffffc90003e67c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.683215][ T32] #2: ffff888033435440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 427.683276][ T32] locks held by kworker/1:6/5708: 4, last CPU#1: [ 427.683291][ T32] #0: ffff88803426bd40 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.683351][ T32] #1: ffffc90004357c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.683421][ T32] #2: ffff88807e4dd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 427.683480][ T32] #3: ffff88807cadd270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 427.683541][ T32] locks held by kworker/1:7/5728: 3, last CPU#1: [ 427.683556][ T32] #0: ffff888058311940 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.683616][ T32] #1: ffffc90004437c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.683685][ T32] #2: ffff88802b716640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 427.683745][ T32] locks held by kworker/0:4/5751: 4, on CPU#0: [ 427.683760][ T32] #0: ffff888057027140 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.683820][ T32] #1: ffffc90004447c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.683889][ T32] #2: ffff8880519ad440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 427.683948][ T32] #3: ffff88802b710330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 427.684007][ T32] locks held by kworker/0:5/5769: 4, last CPU#0: [ 427.684022][ T32] #0: ffff888057c51d40 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.684084][ T32] #1: ffffc90004537c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.684153][ T32] #2: ffff8880348e9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 427.684222][ T32] #3: ffff88802b714888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 427.684281][ T32] locks held by kworker/0:6/5798: 3, on CPU#0: [ 427.684296][ T32] #0: ffff88813ff43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.684350][ T32] #1: ffffc90004697c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.684405][ T32] #2: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 427.684459][ T32] locks held by kworker/u8:11/6134: 3, last CPU#0: [ 427.684475][ T32] #0: ffff88807de1d140 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.684534][ T32] #1: ffffc90009657c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.684590][ T32] #2: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 427.684672][ T32] locks held by kworker/u8:12/6136: 3, last CPU#0: [ 427.684687][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.684743][ T32] #1: ffffc9000922fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.684800][ T32] #2: ffff88807ded0258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 427.684863][ T32] locks held by kworker/u8:13/6137: 2, last CPU#1: [ 427.684879][ T32] #0: ffff888024f1d940 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.706822][ T32] #1: ffffc90007dcfc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.706883][ T32] locks held by kworker/u8:14/6138: 3, on CPU#0: [ 427.706899][ T32] #0: ffff888031d4f940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.706953][ T32] #1: ffffc900081c7c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.707008][ T32] #2: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 427.707072][ T32] locks held by kworker/u8:15/6139: 3, last CPU#0: [ 427.707087][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.707141][ T32] #1: ffffc90004367c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.707204][ T32] #2: ffff8880679d07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 427.707263][ T32] locks held by kworker/u8:16/6140: 2, last CPU#0: [ 427.707278][ T32] #0: ffff88813fe03940 ((wq_completion)events_dfl_long){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.707334][ T32] #1: ffffc90009e97c40 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.707390][ T32] locks held by kworker/u8:17/6141: 3, last CPU#0: [ 427.707405][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.707458][ T32] #1: ffffc9000a28fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.707513][ T32] #2: ffff888066e007a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 427.707570][ T32] locks held by kworker/u8:18/6142: 3, last CPU#0: [ 427.707585][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.707639][ T32] #1: ffffc9000a29fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.707691][ T32] #2: ffff888052dc07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 427.707748][ T32] locks held by kworker/u8:19/6143: 4, last CPU#0: [ 427.707763][ T32] #0: ffff88807de1e940 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.707824][ T32] #1: ffffc9000a2afc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.707879][ T32] #2: ffff888031199440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 427.707937][ T32] #3: ffff88807cad9700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 427.707995][ T32] locks held by kworker/u8:20/6144: 4, last CPU#1: [ 427.708010][ T32] #0: ffff8880349fd940 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.708069][ T32] #1: ffffc9000a6a7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.708125][ T32] #2: ffff8880519a9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 427.708193][ T32] #3: ffff888078e3e640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 427.708252][ T32] locks held by kworker/u8:21/6145: 3, last CPU#0: [ 427.708267][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.708320][ T32] #1: ffffc9000a6b7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.708375][ T32] #2: ffff8880672d07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 427.708434][ T32] locks held by kworker/u8:22/6146: 2, last CPU#0: [ 427.708448][ T32] #0: ffff88813fe03940 ((wq_completion)events_dfl_long){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.708502][ T32] #1: ffffc9000a6c7c40 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.708558][ T32] locks held by kworker/u8:23/6147: 3, last CPU#0: [ 427.708573][ T32] #0: ffff888032342940 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.708633][ T32] #1: ffffc9000aabfc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.708687][ T32] #2: ffff888078e3ca68 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0 [ 427.708748][ T32] locks held by syz.4.403/7599: 2, on CPU#1: [ 427.708763][ T32] #0: ffff88807af84ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 427.708821][ T32] #1: ffffffff8ef62b68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760 [ 427.708877][ T32] locks held by syz.2.404/7608: 3, last CPU#0: [ 427.708892][ T32] #0: ffff88801eec1268 (&fc->uapi_mutex){+.+.}-{4:4}, at: __se_sys_fsconfig+0x68d/0x810 [ 427.708944][ T32] #1: ffffffff90814ec0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 427.709003][ T32] #2: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 427.709062][ T32] locks held by syz.0.406/7607: 1, on CPU#1: [ 427.709077][ T32] #0: ffffffff8ef62a38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 427.709131][ T32] locks held by syz-executor/7619: 2, last CPU#0: [ 427.709147][ T32] #0: ffff888027875cf8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 427.709206][ T32] #1: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 427.709264][ T32] locks held by kworker/0:7/7620: 3, last CPU#0: [ 427.709280][ T32] #0: ffff888031b2a540 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.709340][ T32] #1: ffffc9000673fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.709409][ T32] #2: ffff88807caddc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 427.709468][ T32] locks held by kworker/0:8/7621: 3, last CPU#0: [ 427.709483][ T32] #0: ffff888034263140 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.709543][ T32] #1: ffffc90003457c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.709611][ T32] #2: ffff88807cadb4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 427.709669][ T32] locks held by kworker/u8:24/7622: 3, last CPU#1: [ 427.709684][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.709739][ T32] #1: ffffc900060efc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 427.709794][ T32] #2: ffff8880359b0258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 427.709853][ T32] [ 427.709859][ T32] ============================================= [ 427.709859][ T32] [ 427.709869][ T32] NMI backtrace for cpu 1 [ 427.709883][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 427.709907][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 427.709919][ T32] Call Trace: [ 427.709928][ T32] [ 427.709937][ T32] dump_stack_lvl+0xe8/0x150 [ 427.709965][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 427.709993][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 427.710025][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 427.710055][ T32] sys_info+0x135/0x170 [ 427.710078][ T32] watchdog+0x1058/0x10d0 [ 427.710113][ T32] ? watchdog+0x209/0x10d0 [ 427.710149][ T32] kthread+0x38b/0x480 [ 427.710186][ T32] ? __pfx_watchdog+0x10/0x10 [ 427.710213][ T32] ? __pfx_kthread+0x10/0x10 [ 427.710242][ T32] ret_from_fork+0x514/0xb70 [ 427.710274][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 427.710302][ T32] ? __switch_to+0xc89/0x1420 [ 427.710331][ T32] ? __pfx_kthread+0x10/0x10 [ 427.710361][ T32] ret_from_fork_asm+0x1a/0x30 [ 427.710404][ T32] [ 427.710413][ T32] Sending NMI from CPU 1 to CPUs 0: [ 427.710441][ C0] NMI backtrace for cpu 0 [ 427.710456][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 427.710477][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 427.710487][ C0] RIP: 0010:deref_stack_reg+0x1a2/0x220 [ 427.710510][ C0] Code: 39 f0 0f 96 c0 20 c8 3c 01 75 30 4c 89 c7 49 89 f7 e8 12 07 00 00 49 89 c6 48 8b 5c 24 08 48 89 d8 48 c1 e8 03 42 80 3c 38 00 <74> 08 48 89 df e8 14 e4 bf 00 4c 89 33 b0 01 eb 02 31 c0 48 83 c4 [ 427.710525][ C0] RSP: 0018:ffffc90000006d78 EFLAGS: 00000246 [ 427.710542][ C0] RAX: 1ffff92000000dd5 RBX: ffffc90000006ea8 RCX: 0000000000000001 [ 427.710554][ C0] RDX: ffffc90000006ea8 RSI: dffffc0000000000 RDI: ffffc900000071f8 [ 427.710567][ C0] RBP: ffffc90000000000 R08: ffffc900000071f8 R09: 0000000000000000 [ 427.710579][ C0] R10: ffffc90000006eb8 R11: fffff52000000dd9 R12: 1ffff92000000dce [ 427.710591][ C0] R13: 1ffff92000000dcf R14: 0000000000082820 R15: dffffc0000000000 [ 427.710604][ C0] FS: 0000000000000000(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 427.710619][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 427.710632][ C0] CR2: 00007f6d44ded158 CR3: 0000000073dc6000 CR4: 00000000003526f0 [ 427.710649][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 427.710668][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 427.710680][ C0] Call Trace: [ 427.710686][ C0] [ 427.710696][ C0] unwind_next_frame+0x19bd/0x2550 [ 427.710717][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 427.710733][ C0] ? unwind_next_frame+0x8f/0x2550 [ 427.710752][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 427.710775][ C0] arch_stack_walk+0x11b/0x150 [ 427.710795][ C0] ? kmem_cache_alloc_node_noprof+0x34f/0x600 [ 427.710821][ C0] stack_trace_save+0xa9/0x100 [ 427.710843][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 427.710866][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 427.710888][ C0] kasan_save_track+0x3e/0x80 [ 427.710912][ C0] ? kasan_save_track+0x3e/0x80 [ 427.710935][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 427.710973][ C0] __kasan_slab_alloc+0x6c/0x80 [ 427.710990][ C0] kmem_cache_alloc_node_noprof+0x34f/0x600 [ 427.711014][ C0] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 427.711036][ C0] ? __alloc_skb+0x27a/0x7a0 [ 427.711052][ C0] ? __alloc_skb+0x27a/0x7a0 [ 427.711070][ C0] __alloc_skb+0x27a/0x7a0 [ 427.711088][ C0] synproxy_send_client_synack+0x175/0xde0 [ 427.711115][ C0] ? lock_acquire+0x115/0x350 [ 427.711138][ C0] ? synproxy_pernet+0x45/0x270 [ 427.711157][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 427.711183][ C0] ? nft_tproxy_eval+0x1a0/0x1c80 [ 427.711207][ C0] ? synproxy_pernet+0x45/0x270 [ 427.711227][ C0] nft_synproxy_eval_v4+0x362/0x4e0 [ 427.711248][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 427.711267][ C0] ? nf_ip_checksum+0x13c/0x510 [ 427.711287][ C0] nft_synproxy_do_eval+0x335/0x550 [ 427.711305][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 427.711326][ C0] ? __ip_vs_service_find+0x843/0x8d0 [ 427.711348][ C0] nft_do_chain+0x48d/0x1b10 [ 427.711373][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 427.711394][ C0] ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10 [ 427.711424][ C0] nft_do_chain_inet+0x360/0x4b0 [ 427.711443][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 427.711464][ C0] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 427.711487][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 427.711506][ C0] nf_hook_slow+0xc5/0x220 [ 427.711531][ C0] NF_HOOK+0x21f/0x3c0 [ 427.711550][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 427.711567][ C0] ? NF_HOOK+0x9e/0x3c0 [ 427.711583][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 427.711601][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 427.711622][ C0] ? ip_local_deliver+0x113/0x190 [ 427.711640][ C0] NF_HOOK+0x336/0x3c0 [ 427.711663][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 427.711681][ C0] ? NF_HOOK+0x9e/0x3c0 [ 427.711697][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 427.711714][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 427.711731][ C0] ? ip_rcv_core+0x88d/0xd50 [ 427.711750][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 427.711766][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 427.711783][ C0] process_backlog+0xa6b/0x18b0 [ 427.711810][ C0] ? process_backlog+0x3de/0x18b0 [ 427.711839][ C0] __napi_poll+0xaa/0x330 [ 427.711864][ C0] net_rx_action+0x61d/0xf50 [ 427.711894][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 427.711927][ C0] ? lapic_next_event+0x11/0x20 [ 427.711956][ C0] handle_softirqs+0x226/0x860 [ 427.711978][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 427.712000][ C0] __irq_exit_rcu+0xcb/0x220 [ 427.712019][ C0] irq_exit_rcu+0x9/0x30 [ 427.712037][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 427.712062][ C0] [ 427.712068][ C0] [ 427.712075][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 427.712094][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 427.712118][ C0] Code: f7 e8 bd eb aa f5 f7 c3 00 02 00 00 74 05 e8 10 35 d7 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 54 00 9c f5 65 48 8b 05 dc 38 c3 07 48 85 c0 74 18 5b 41 5e c3 [ 427.712132][ C0] RSP: 0018:ffffc90000157ca8 EFLAGS: 00000206 [ 427.712146][ C0] RAX: 0000000000000006 RBX: 0000000000000206 RCX: 8000000000000001 [ 427.712157][ C0] RDX: 0000000000000000 RSI: ffffffff8e59e74c RDI: 0000000000000001 [ 427.712170][ C0] RBP: ffffc90000157e18 R08: ffffffff909bb37f R09: 1ffffffff213766f [ 427.712182][ C0] R10: dffffc0000000000 R11: fffffbfff2137670 R12: 0000000000000002 [ 427.712194][ C0] R13: ffff88801dea0000 R14: ffffffff9afb0520 R15: dffffc0000000000 [ 427.712215][ C0] nbcon_kthread_func+0x724/0x8d0 [ 427.712242][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 427.712266][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 427.712293][ C0] ? __kthread_parkme+0x71/0x1f0 [ 427.712314][ C0] ? __kthread_parkme+0x199/0x1f0 [ 427.712336][ C0] kthread+0x38b/0x480 [ 427.712359][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 427.712382][ C0] ? __pfx_kthread+0x10/0x10 [ 427.712405][ C0] ret_from_fork+0x514/0xb70 [ 427.712429][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 427.712452][ C0] ? __switch_to+0xc89/0x1420 [ 427.712472][ C0] ? __pfx_kthread+0x10/0x10 [ 427.712496][ C0] ret_from_fork_asm+0x1a/0x30 [ 427.712524][ C0] [ 427.713438][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 431.147342][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 431.156481][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 431.166555][ T32] Call Trace: [ 431.169856][ T32] [ 431.172809][ T32] vpanic+0x56d/0xa70 [ 431.176831][ T32] ? __pfx_vpanic+0x10/0x10 [ 431.181373][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 431.186960][ T32] panic+0xc5/0xd0 [ 431.190717][ T32] ? __pfx_panic+0x10/0x10 [ 431.195691][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 431.200742][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 431.206928][ T32] watchdog+0x10cc/0x10d0 [ 431.211301][ T32] ? watchdog+0x209/0x10d0 [ 431.215759][ T32] kthread+0x38b/0x480 [ 431.219857][ T32] ? __pfx_watchdog+0x10/0x10 [ 431.224559][ T32] ? __pfx_kthread+0x10/0x10 [ 431.229193][ T32] ret_from_fork+0x514/0xb70 [ 431.233816][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 431.238959][ T32] ? __switch_to+0xc89/0x1420 [ 431.243664][ T32] ? __pfx_kthread+0x10/0x10 [ 431.248288][ T32] ret_from_fork_asm+0x1a/0x30 [ 431.253103][ T32] [ 431.256299][ T32] Kernel Offset: disabled [ 431.260626][ T32] Rebooting in 86400 seconds..