last executing test programs: 2m31.2917946s ago: executing program 3 (id=1041): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000017c0)={0x34, &(0x7f0000001600)={0x40, 0x14, 0x3, "d772cc"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)={0x0, 0xb, 0x1a, {0x1a, 0x0, "0bac1febc0ccbc35a993a2e16e30d997a112db33b6e26c0b"}}, &(0x7f0000000180)={0x0, 0x3, 0x92, @string={0x92, 0x3, "17c5774e156d60fcb91891f0fd1b61ad0db01c603101351ec3e951c025bf643f408937db3d4f3995eed384639d2f0f7fe4c4755404d2ef08a938006f6bb6fcf9b0e4f29f01ce29b785018c4982c4a930526ac6aab00fb0b8f7f477348e6a23a41259af14debab640f60473e1b20f2b6162ef909e87091c126f2a17226c6dd490184680264b98e02d00fd95f1a8d4eca4"}}, &(0x7f00000000c0)={0x0, 0x22, 0xa, {[@global=@item_012={0x1, 0x1, 0x1, "06"}, @main=@item_4={0x3, 0x0, 0x8, "050b61a9"}, @local=@item_012={0x2, 0x2, 0x3, '\t0'}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x7, 0x1, {0x22, 0x3e8}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x20, 0x16, 0x5c, "e07ecee3570ee0fb223961d84318082d0f7eea9b87ddf30f031cd9fe635254b29126e500a5101969f58987fb2f24873c445f4cdefb0a355fd9402c767886be120c785b6e30be77b4cd65cf0299100423723647f043ef2552b5596b02"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000000380)={0x20, 0x1, 0x81, "8d39f6cb17eee0ab2b59ff2f159f00b0f22bbff9e152fe9cc0a168b0b6e217c7127ca40a2f7e2c87bac1fc593cc83aa4de8394b04b3ef595f2d1945833529110cc1620ea67f3b40c0ca085f035f5c2b002d05ea5531a1fe83c9e85474f96f21ba1a0024a0f74ad959a8cfb1bd55c3273ed535a5f2d1f6df22810b28aef934aef45"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0xfe}}) 2m28.116304811s ago: executing program 3 (id=1046): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000001e40)={0x0, [{0x1, 0x750, 0x9, &(0x7f0000000780)="c749b29a2e1b58287ddfc6570752dd3c1330c1a47abe7db80133aff54b533b7cd01c4e4f50639e533bc6e897b97af056ed96a71ed33c467ec88f5614e02a2dfee21b5e993a2cb7b4dfecee6d846697a694073700559e7f6a6df97d54ec1774be43f65a414871299ba351d5033d764aea0e1a053beb85037019a9e6202b8b77ed74919ba15878015d2ee6bb5e2d3d0b43e2f181e8da099e12a83be0f1b616f7cc1397fd44da7df7222f8dd5017639ec75018752fdb2d5b68453df25b8155134780893bb9914b99ef83ba9d95bf6a8ebbf72a219f5944e560eedd27b72d6618467a26d66bfb508b6563da4"}, {0x2, 0x560, 0xff, &(0x7f0000000540)="e8688585b47cff5a876c6627f2f251d8ddf3aeb1c41be716dc07f76e8afb97d6ac3b80b11036d9e8814d11f7498f432c0244c6159cd8f640a817c1e336b98a681c202f7b2937114b629e3f21526bc52266da5c1893345a9e98cb6035b3bc08f29cbaa4f64b7da3f94be6cd6f5d1ece3e9adba06d106ec70386e0f8e534429a4b851cdfcfb5d6e667643295f6cc89be2b636b3b7ecb7e33cf7d3349b4e605c775bed88db502cb725cbf261618"}, {0x1, 0x1d8, 0x4, &(0x7f0000000280)="58b42bd0fd18b39c32f206c81b6c407b5518e9e6e6acd248eda7b7a0e5f64c82d0bccb30b12b65a10aad32a8d4da302470ec98082e5851c4f27fe9"}, {0xfa8c1b108377007d, 0x290, 0x6, &(0x7f0000000680)="cb4c7a381e61b76ea26b197cd9159ba8501b463e0da98f560601c62ad13a73e477868f6f2dd8388cb330016a50a3d7ccc4551cd0b3eb5ebc415c8db291f7e8662caee0c3dcc323f9713ad13c46ccf7088dd3"}, {0x0, 0x138, 0x240, &(0x7f0000000880)="8cbb0fe52fafeb669ac53b20b24c1a7c65a8720abb6bf8eebd61d16557c1a6e17ceebd8aa273b2"}, {0x0, 0x568, 0xfffffff8, &(0x7f00000008c0)="b3ec294587991806aaea835c2037216a6c5f1b53dfc5b65769f2c62c1f936da3badd091006b9df2be1d2249b611e565c5edeedf86ae8d9532abf1f55029b4bfc898fa110c48da821946d9daa3cd3471423b8152ade299f7bee955e2a0c9dbde7c82231b5a1ab778252d25353fdc2997e6845c6c57ad2e713e5f0a0fec35f4d08a300c582ccd9fbcb2840635426b37092503cdbb8e1279e23a45d0fb4fd4cac4a46fbed31dd9397ed9569863f0e"}, {0x3, 0xb0, 0x9, &(0x7f0000000980)="6648913f2253f8a7386338bf48e06ac7bae0e82a9ad8"}, {0x0, 0x0, 0xffff9c1b, &(0x7f00000009c0)}, {0x4, 0x8000, 0x42, &(0x7f0000000a00)="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"}, {0x3, 0x20, 0xf, &(0x7f0000001a00)="f0c1f708"}, {0x6, 0x668, 0x40, &(0x7f0000001a40)="9a3c1f21dab632dddb9c051afa61715f66b94ef0c7bcfe29d1ebe8189f60967675f09404e76fef759af32b87f48c4d4b63116548e0f7d0825fa59e534ab3e64fd362c3c0ddb6e1092a15eb1258a81d3c663584ca40162eae605eedeb00d9c84863caab271fb41ea49add65c99ee15ef97c97844f44ee0811d3dc6596016a628a48e51a149941d7da9df269f5f63ff1113eb7f4ff2227ac6ef1c80ae5f755cd6ab5987486cb11d94b87cbf617282e4b9b156196a80c29eb38ab6a8f52712bc372a55bb77f1c49825acd83bf0382"}, {0x2, 0x1a8, 0x5, &(0x7f0000001b40)="12a90378e346c40e169cf18a329a8d09d4a861eec9494c6954acc68a90d3cae6284c68788daba6ce8eb753d06025b5a0c82cdcb7c9"}, {0x1, 0x548, 0x1, &(0x7f0000001b80)="99a017d95b203dbbdbc3e77ae63ac305deafc6f4f1259dbd317b7ec4d059edf6aac326d685589edc9dda0cd7a0d7a0b07933a5fcd39a77a4288892f5fb5f6cb3727650090e3c9816fab2abf1cf8074369be204a92d01859e9ed29a5aceda67ddd9248bdb10c7c1e0857751cc98040e84738116746f4a318c15d3c7783ca709b99194584d9af45fb5d21a265cbb99e8ab5e9c3c1460889d879ee275ee09d756b6e55872c61e011b3b9d"}, {0x1, 0x1b8, 0x8, &(0x7f0000001c40)="a2f30319363e0c8838be6964197967c52296dc88716b37596b6540fe0f695d78b9e4c2cbd176d876e760f6ef831fd7a6c0e06393ea6137"}, {0x1, 0x130, 0x3, &(0x7f0000001c80)="42615623952ce7b12d78c64acf5d0db4152359e5df95e1a3cf8e2ab7b892edde2b89a7debe66"}, {0x1, 0x0, 0x2, 0x0}]}) 2m27.388761069s ago: executing program 3 (id=1050): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "30798c1296134feb", "5dbeda07149f5cd2eca17b03520300ac", "f7c6a611", "2e114b4c5b134ba2"}, 0x28) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000380)='\b', 0x1}], 0x1) 2m25.605559834s ago: executing program 3 (id=1054): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0, @ANYBLOB="010000000d000000000001000000000000000c41"], 0x38}}, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_ep_write(r2, 0x8d, 0x0, 0x0) 2m23.733701114s ago: executing program 3 (id=1059): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000240)='wg1\x00', 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000500), 0x0) r1 = syz_open_dev$dmmidi(0x0, 0xca64, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) fcntl$notify(r1, 0x402, 0x9) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) r4 = syz_open_dev$evdev(0x0, 0x0, 0x201) syz_open_dev$tty1(0xc, 0x4, 0x1) write(0xffffffffffffffff, &(0x7f00000001c0)="f300533b6d1e0e495b21fa81aed055ad5056d0c5d0e173b92187aa4455cd3c0aec5d591a67cd93283a00e9d4f1c0a01021a3ce0c3067e07c9505e69e0284094da3f63cde93de29bb2d91a160411fe0129d3ef8a311b403a9e1b79c0a786707ae", 0x60) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f00000005c0)=""/210) socket(0xa, 0x3, 0x3a) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000004c0)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast1, 0xffffffff}, r7}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {0x0, r7}}, 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_io_uring_setup(0x45, &(0x7f0000000480)={0x0, 0xb295, 0x40, 0x2, 0x332}, &(0x7f0000000100), &(0x7f00000000c0)) timer_create(0x1, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 2m22.41428274s ago: executing program 3 (id=1063): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1e) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, 0x0) r5 = userfaultfd(0x80801) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', 0x0, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) syz_usb_connect(0x5, 0xbd8, &(0x7f0000001000)={{0x12, 0x1, 0x201, 0xc4, 0x3b, 0x5b, 0x10, 0x1b3d, 0x16e, 0x177d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc6, 0x3, 0x3, 0x33, 0xb0, 0x1, "", [{{0x9, 0x4, 0x94, 0x6f, 0xd, 0xd1, 0xaf, 0x6d, 0xf7, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4a1, 0x3, 0xb3, 0xc}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfff9, 0xb, 0x5, 0x31}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x0, 0x7f, 0xc}]}], [{{0x9, 0x5, 0xd, 0x10, 0x8, 0x7, 0x7, 0x5, [@generic={0x3c, 0xd, "e4dd8690ebfec5c833cf9f7c7bb0e6d92f5276b452369fd5e5b659cca020c1fe68c9b39415bbba451159b2a45ad217f43e28489381c64f07546c"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0xc0, 0x9b, 0xf8}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0x46, 0x7, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xf2}]}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xe, 0x8b, 0xb, [@generic={0xf7, 0x1, "7ba47ab047771ad0f7b6edf154abc33c3845b7f04d8ed149dd6c363d9c2684443f4a4809786ad909b5fe81be367cc9defd4129a21d5febd9fdb195d7d7413bc1aeb4f98523818c79be1580902f30e6ba0ccad6d83802c8ffd1811a5ab22e8e8138ea43282840c6d9f15d24dd52a5f0a8b4eddb6390a13fd95c2ffaae409e1712f929dbf5e673a63c799f99042d81f9100d166d42657d2a3b524ad9d0711d664c16907a8e1c64b1ef14dd83c3b563616f373fdeeb8fbf6a74c621e63fbfbf5d543fafb071fd46c7bc4346cc0e006befe2c57076d3eb7a963bf1ade6ab9bb6b4eda29d690eaed092ea1fee97cd5fb8353f202f897941"}, @generic={0x9f, 0x4, "7ca43f4eba9a5d68cd8488ced78a8d9f7713025ffc7b9b404815d1c11ac8cd750d8d1448fcdc2d75b7060d9485b8966833fe00aa80431412a6ba222784737688f510c3ef0ae9140796449a92cbebecdf99b064e62e522b15e5383c61715146d471c69a25e60d8d716d4cfe4565e8810951ae219b5d3bbe017498d4d171e5fc3c6c2c051f6eb12f493bf2a50b7bca51fe7c89fa2f57aed0c7ec81b46e27"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x7f, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0x6, 0x64, 0x9}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x8, 0x3, 0x5a, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x8b}]}}, {{0x9, 0x5, 0x0, 0x4, 0x200, 0x2, 0x7}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x5, 0x7, 0x4}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x6, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x2}]}}, {{0x9, 0x5, 0xe, 0x1, 0x8, 0x6e, 0xb7, 0x20}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x21, 0x9, 0x9, [@generic={0x37, 0xf, "095907d4cca1813aa565e2c3e83a8f3560ed20854d9bebf0db3671ec65c1285f688d30590c881658dd476af5c9516300d472d4e193"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0x3c}]}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x3, 0x4a, 0x7}}]}}, {{0x9, 0x4, 0x44, 0xc, 0x7, 0x6d, 0xc1, 0x5d, 0xf5, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "8a"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x101, 0x6, 0x6, 0xb}, {0x6, 0x24, 0x1a, 0x7, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x1, 0xfa, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x19, 0x5}, @mdlm={0x15, 0x24, 0x12, 0xb}, @dmm={0x7, 0x24, 0x14, 0xf, 0x5}]}], [{{0x9, 0x5, 0x17, 0x4, 0x40, 0x7, 0x9, 0x53}}, {{0x9, 0x5, 0xd, 0x2, 0x20, 0x7, 0x10, 0x2, [@generic={0xe5, 0x21, "0af3d7863b10e71f0927eff000a049f2131920105c27df3a31e01abca0ef5d5f43a34eb835bd8ce8ee7929013cc4f5da0a0815420e5cd287ec11a4343f8418b5190c41bd1db0f718a75d1516316b99a44a4a33718f6bd82ce7d217393c08e737385a7ba00b4cdef56de37b796e6962d6ead3bbed0e2a26e8a4b64002da9e69fdea323b34a2e7ca9abc8f94b6cfcacb630fed4be016f31e26583e8c5bead98d9959d1d70b72ce19a76fa884449cf8226eba831714c12624cf7d2ffd7d4ea958195c9873ce7385da2687c9f7aa2c75e074d3cbba738b391ac1b0543d4d213fb7f548dd6f"}, @generic={0xa3, 0x5, "811c0d0b2ef6f14944f067e0a4ff34847c3be2ed4300f591f21d0fea450663ba7397ecdce1e495b8b08f9417bcecaba8299566820ddb4da855704a486587cccc0a97d66149c505ccae20c3eee6f4769081df832eeba45b6c15168030b31ba763ffc270616b91e8953a79240579318299137797731d3c3a5853dd7729a84caeb03de7b12afb2ab68402e4f5c8af09f75500b4d26de0bcc98caa2a17ec60c0672998"}]}}, {{0x9, 0x5, 0x2, 0x19, 0x40, 0xfa, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0xe85}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x6, 0xca, 0xe9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x8000}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x1, 0xa, 0x66, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x3}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x4, 0x81, 0x9}}, {{0x9, 0x5, 0x2, 0x1, 0x20, 0x40, 0x58, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd4, 0x1}, @generic={0xb6, 0x5, "659b691dd07ede7d495ec9a811f29b27b3194acddb46903aeb44e4c11691aa97a21a8a44d1a913e517576ae3d80f8fe5ed129cebc5559af7a2f24c5e145d4a87067cc6a6345db4dca0405d6da4c5e8f8faac49baf0ea68cb6486287749c21b2289406f74f31f6c58730e92ca048925b7c359682c9742521f0ebccea5f5e0635ec32377bbebb973b3aef957f418d4321152f4087b5903459f039b8fb3dfc7cb79ed751f98656b06e74bf8f8fcf967702dfaae3295"}]}}]}}, {{0x9, 0x4, 0x33, 0xc, 0x10, 0x36, 0x5b, 0x95, 0x0, [@generic={0xce, 0x8, "28a7bb9afe544f94ef66011718ff66621d30ba494b080036ce65d4dfb2bb00c3223927547102268e8dd6736c288f7dae58d22cb9b5d715f39550d354e7221c37b0ba81d5655dd97f3b0fc71284d7eeae8a231dc0c690e241f882ca923e225bebbedd5948df013b6ecdd4c96a1a3b60ab8719863beec76e58a51263844d1d644b741db1b09f338f6ca5655588995a37616d63ea115ceeeb00dfa13b1fbac38d3b0e4cfd6fc52ae14f7ebb22b70a09aced06fbbee545bce7ddba28575e42aa434bc6a6dd4acbeed786941e7e6f"}], [{{0x9, 0x5, 0xb, 0x0, 0x400, 0xa0, 0x7f, 0x7, [@generic={0x98, 0xa, "84f92f22072d69852c856b6749c9ec34a89801dc968448eeeaf622850547f582f197a078e3c168398e0690dd048187cc59b8a2f87fbe3faaa526693c08c1263d663edd3363b4163128bae8035980e9c29fe844f547d411b7a50de2ab04bd8f90453e381d6b5ceb9b7837e3cf3832bd2b44915a7a516dc82fdf1548b9df0d464744c4980c464cdc6d4e3825daad3e62b04c7fccb3711b"}, @generic={0x38, 0x6, "ebe9d18130823d77b2ca4aaaa0bfa0954eac5a117223343b71bfbfcda17748087935d4d5fc097a3c028072daff10ed92e54cf16efcce"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x7, 0xf9, 0xf}}, {{0x9, 0x5, 0xa, 0x9, 0x400, 0xfe, 0x8, 0x0, [@generic={0x82, 0x21, "3814717300f139901dbef2cbc0c88359b2e9e0b323fa93236aec6480582d654a2a449288b15bc3edb291364932556377748f995ab020d29d0e91d0487d02476d9cb5c7bf9bd4234fd976c7a38906118f690157e2a6076ca2e2cc923c8bcabea5bce7aaf43b3f1d1336348b41f0f64d1a55de943f6cc2b45baccba35f6698fb3e"}, @generic={0xe3, 0x7, "cfecb5829969d40426d798f088284fdb3718670fec33bd46ff4b8ea0dfc89a91fa581a0403e5abf38b91c2c1fde91c78213b35683a1f398f55111c4f4b4d8039fb85214600ee5f97a3af9a4a397471d7e6d694975b23cf0a95c3bae8435d6e766bd1b7d0361e15a193170030f00802f3bac4f1c1ba808ffd0041a97de649f1cf2e3e81fa183d17b74d683778a06977661688263b94acfd2bf2b3c677376be87e1a8d7169c84eb057e2cabc76491a9452f4436e3bcaba22bc2f17881819f0ca78c477ced90aa340adac79e82a74b2054b0ac17a212473c8b178aef79fb6b7be12af"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x10, 0x0, 0x2, 0xd4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xfd, 0x7f}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x7f, 0xe4, 0x2}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x2, 0x8, 0x10}}, {{0x9, 0x5, 0x5, 0x3, 0x40, 0xaf, 0x8, 0x4}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0x7, 0x10, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x3, 0xb2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x1}]}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x2, 0x6, 0x2}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x81, 0x85, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x80}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xe, 0x5, 0xb}}, {{0x9, 0x5, 0x2, 0x10, 0x0, 0xf5, 0x9, 0x9, [@generic={0x2, 0x5}, @generic={0x16, 0x31, "d9813f68a00d6dd682012000156745d78c5f5489"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x3, 0x1, 0x9}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x1, 0x4, 0x5, [@generic={0xde, 0x4, "8db8b2eab4eb36a5d3561938da2d59e4e89c3eb2d6966044de956d4c41ab9614bc1e3583382ff5ae460098def64161f343e1f9958c52931458ab303721e7e7d3be2e61d0998681c8f6b6707d0e1d74b6485005edc7d1066609d196bc2ef13b9354adaa5e23fad0f89778f31a47a5c662c6f5def5bb2839f1afd1a04cbcc3328304321a7a8ce8cf8aa95d77748d13a7d69acc2c545d6aac62883c839301379e0cc57ff971d45d3f3b5ba5fa1ff3ca88c1623cd12308ea1aea3c7606cb610988f806f4aa0a20bffb0cd7b6c10bb474a135cc8acf84f63f9302541521d6"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xd5, 0x81}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x9, 0x4, 0x3, [@generic={0xa9, 0x7, "b13034ee900733b964db0bc9485119c4a45b50af485d03a0e3aa74596ffb8e1172032a5caec637bd62960f52023de73de288f3a5ea57ac449f64c245b49ce3dfdccbc19fef98c8ed072b5e5a7fc25173f9f4ca37934a18f5d7e29358c1c345ad171f5bff90610211920e7b56f764839c3f24e4e2c811696b5cfbac5edb366490ad1e5d943414d7c4f889bda34739ec792c1f1149e3c5717f3a8a099fbaacd85c342e0a89037753"}, @generic={0x97, 0xa, "57af902a10670f563433940c1be2cadb1b99ba940cb44ab957862b785c0a981256c27db58125a3ab53e68e5c28b532c113c489a6e539d89253057d9c0847909e07d50ffa535447737ce8543428f2da7892593becc5a10abcbd2d1f8a78237b0237bf4382eb2b483f5b154ce780947ac03c24a7cda145715791e56bcc600fe8e574886f4755a11ea65afc70dd13b8eda3508aa31c81"}]}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x40, 0x5, 0x8, 0x40, 0x60}, 0x19, &(0x7f0000000400)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "a40f547d74cf69a0239c0d79fce66478"}]}, 0x8, [{0x4d, &(0x7f0000000200)=@string={0x4d, 0x3, "7c24ff10b4cbd7880c20c5ceace76cb0e1d868adfd484cc7b853b729a36b09acfb96223e7091a03ffcb1b4cc1a66b7983f355d57c4ea2363f28429d7ccfe5cc545895ef67c032505f204b9"}}, {0xd2, &(0x7f0000000280)=@string={0xd2, 0x3, "dc2126061f53ffe44ce058cb5ddcc7dfd8da6a998922c04c705920a87c04e05b29d2fdfb388e6512a386adbe315f62ec1548a87142cbc198970c01b3b4e89d76f2195997603395441f17f0f57678f7efd66a33821cec9c5beebbaf2f788d0462a224056f52ddfbbb85da7ffd227583e0a1820eb388943249cc268de84e71bf91ac457cdb11ca8e0647c6c0db297ecd5e949102a56f7eb94767e5a8983477a8ffd4c608d11b5f44e2864ee08062a3fa02107b6fc6f5a99dcb180879fd04d8a7978cb3b74929a9a3ba1b64e189135aff8b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1004}}, {0x5c, &(0x7f0000000440)=@string={0x5c, 0x3, "3667093b582ce6f0b0362f2b17ccc22c557c9d97c88ecac05d90973d2b42fffc031d854672cc171d741565e8fe9a5940262706b800b898304cb91e51c1944a2d6d7d77772ddfc50ee9858b0395a554bcb8c16a585cbe7cc52b4b"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x8077e54a8b874b2b}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x43e}}, {0x24, &(0x7f0000000540)=@string={0x24, 0x3, "cb0ac1e1f4867d100bfbff4fe36ec435e0eb19292061676d029d5b84e12520cc4b0a"}}]}) name_to_handle_at(r3, &(0x7f0000000600)='./file0\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000052000000a70d000008000100000100000900000001010000c05ccf26925e1979574ad0dfac30f828ebff5377d5252ea06e470a4ec89c8e2e1544ab8ec8113464ae2a76c919d19b104c5a80bf67eb95fcb7473cae94c9b8842198a0ff9463ca3bb4c998b503919907f6e0bd30bd36577a02a0ab48acb1d5f2b1128e7058dfc7ac37219d998b98d9cce08248e5d2ac828dc4d7cbd728cdb0cc58c7e39089a7d9a9ce52ab368ffc8a25f49254dc68d91e082746a9046b0a6bc5c9cb93fa9fafb15d74eaf5cea4995b9a1f"], &(0x7f0000000680), 0x1400) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x810, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 2m7.934248791s ago: executing program 32 (id=1063): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1e) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, 0x0) r5 = userfaultfd(0x80801) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', 0x0, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) syz_usb_connect(0x5, 0xbd8, &(0x7f0000001000)={{0x12, 0x1, 0x201, 0xc4, 0x3b, 0x5b, 0x10, 0x1b3d, 0x16e, 0x177d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc6, 0x3, 0x3, 0x33, 0xb0, 0x1, "", [{{0x9, 0x4, 0x94, 0x6f, 0xd, 0xd1, 0xaf, 0x6d, 0xf7, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4a1, 0x3, 0xb3, 0xc}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfff9, 0xb, 0x5, 0x31}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x0, 0x7f, 0xc}]}], [{{0x9, 0x5, 0xd, 0x10, 0x8, 0x7, 0x7, 0x5, [@generic={0x3c, 0xd, "e4dd8690ebfec5c833cf9f7c7bb0e6d92f5276b452369fd5e5b659cca020c1fe68c9b39415bbba451159b2a45ad217f43e28489381c64f07546c"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0xc0, 0x9b, 0xf8}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0x46, 0x7, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xf2}]}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xe, 0x8b, 0xb, [@generic={0xf7, 0x1, "7ba47ab047771ad0f7b6edf154abc33c3845b7f04d8ed149dd6c363d9c2684443f4a4809786ad909b5fe81be367cc9defd4129a21d5febd9fdb195d7d7413bc1aeb4f98523818c79be1580902f30e6ba0ccad6d83802c8ffd1811a5ab22e8e8138ea43282840c6d9f15d24dd52a5f0a8b4eddb6390a13fd95c2ffaae409e1712f929dbf5e673a63c799f99042d81f9100d166d42657d2a3b524ad9d0711d664c16907a8e1c64b1ef14dd83c3b563616f373fdeeb8fbf6a74c621e63fbfbf5d543fafb071fd46c7bc4346cc0e006befe2c57076d3eb7a963bf1ade6ab9bb6b4eda29d690eaed092ea1fee97cd5fb8353f202f897941"}, @generic={0x9f, 0x4, "7ca43f4eba9a5d68cd8488ced78a8d9f7713025ffc7b9b404815d1c11ac8cd750d8d1448fcdc2d75b7060d9485b8966833fe00aa80431412a6ba222784737688f510c3ef0ae9140796449a92cbebecdf99b064e62e522b15e5383c61715146d471c69a25e60d8d716d4cfe4565e8810951ae219b5d3bbe017498d4d171e5fc3c6c2c051f6eb12f493bf2a50b7bca51fe7c89fa2f57aed0c7ec81b46e27"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x7f, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0x6, 0x64, 0x9}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x8, 0x3, 0x5a, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x8b}]}}, {{0x9, 0x5, 0x0, 0x4, 0x200, 0x2, 0x7}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x5, 0x7, 0x4}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x6, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x2}]}}, {{0x9, 0x5, 0xe, 0x1, 0x8, 0x6e, 0xb7, 0x20}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x21, 0x9, 0x9, [@generic={0x37, 0xf, "095907d4cca1813aa565e2c3e83a8f3560ed20854d9bebf0db3671ec65c1285f688d30590c881658dd476af5c9516300d472d4e193"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0x3c}]}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x3, 0x4a, 0x7}}]}}, {{0x9, 0x4, 0x44, 0xc, 0x7, 0x6d, 0xc1, 0x5d, 0xf5, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "8a"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x101, 0x6, 0x6, 0xb}, {0x6, 0x24, 0x1a, 0x7, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x1, 0xfa, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x19, 0x5}, @mdlm={0x15, 0x24, 0x12, 0xb}, @dmm={0x7, 0x24, 0x14, 0xf, 0x5}]}], [{{0x9, 0x5, 0x17, 0x4, 0x40, 0x7, 0x9, 0x53}}, {{0x9, 0x5, 0xd, 0x2, 0x20, 0x7, 0x10, 0x2, [@generic={0xe5, 0x21, "0af3d7863b10e71f0927eff000a049f2131920105c27df3a31e01abca0ef5d5f43a34eb835bd8ce8ee7929013cc4f5da0a0815420e5cd287ec11a4343f8418b5190c41bd1db0f718a75d1516316b99a44a4a33718f6bd82ce7d217393c08e737385a7ba00b4cdef56de37b796e6962d6ead3bbed0e2a26e8a4b64002da9e69fdea323b34a2e7ca9abc8f94b6cfcacb630fed4be016f31e26583e8c5bead98d9959d1d70b72ce19a76fa884449cf8226eba831714c12624cf7d2ffd7d4ea958195c9873ce7385da2687c9f7aa2c75e074d3cbba738b391ac1b0543d4d213fb7f548dd6f"}, @generic={0xa3, 0x5, "811c0d0b2ef6f14944f067e0a4ff34847c3be2ed4300f591f21d0fea450663ba7397ecdce1e495b8b08f9417bcecaba8299566820ddb4da855704a486587cccc0a97d66149c505ccae20c3eee6f4769081df832eeba45b6c15168030b31ba763ffc270616b91e8953a79240579318299137797731d3c3a5853dd7729a84caeb03de7b12afb2ab68402e4f5c8af09f75500b4d26de0bcc98caa2a17ec60c0672998"}]}}, {{0x9, 0x5, 0x2, 0x19, 0x40, 0xfa, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0xe85}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x6, 0xca, 0xe9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x8000}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x1, 0xa, 0x66, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x3}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x4, 0x81, 0x9}}, {{0x9, 0x5, 0x2, 0x1, 0x20, 0x40, 0x58, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd4, 0x1}, @generic={0xb6, 0x5, "659b691dd07ede7d495ec9a811f29b27b3194acddb46903aeb44e4c11691aa97a21a8a44d1a913e517576ae3d80f8fe5ed129cebc5559af7a2f24c5e145d4a87067cc6a6345db4dca0405d6da4c5e8f8faac49baf0ea68cb6486287749c21b2289406f74f31f6c58730e92ca048925b7c359682c9742521f0ebccea5f5e0635ec32377bbebb973b3aef957f418d4321152f4087b5903459f039b8fb3dfc7cb79ed751f98656b06e74bf8f8fcf967702dfaae3295"}]}}]}}, {{0x9, 0x4, 0x33, 0xc, 0x10, 0x36, 0x5b, 0x95, 0x0, [@generic={0xce, 0x8, "28a7bb9afe544f94ef66011718ff66621d30ba494b080036ce65d4dfb2bb00c3223927547102268e8dd6736c288f7dae58d22cb9b5d715f39550d354e7221c37b0ba81d5655dd97f3b0fc71284d7eeae8a231dc0c690e241f882ca923e225bebbedd5948df013b6ecdd4c96a1a3b60ab8719863beec76e58a51263844d1d644b741db1b09f338f6ca5655588995a37616d63ea115ceeeb00dfa13b1fbac38d3b0e4cfd6fc52ae14f7ebb22b70a09aced06fbbee545bce7ddba28575e42aa434bc6a6dd4acbeed786941e7e6f"}], [{{0x9, 0x5, 0xb, 0x0, 0x400, 0xa0, 0x7f, 0x7, [@generic={0x98, 0xa, "84f92f22072d69852c856b6749c9ec34a89801dc968448eeeaf622850547f582f197a078e3c168398e0690dd048187cc59b8a2f87fbe3faaa526693c08c1263d663edd3363b4163128bae8035980e9c29fe844f547d411b7a50de2ab04bd8f90453e381d6b5ceb9b7837e3cf3832bd2b44915a7a516dc82fdf1548b9df0d464744c4980c464cdc6d4e3825daad3e62b04c7fccb3711b"}, @generic={0x38, 0x6, "ebe9d18130823d77b2ca4aaaa0bfa0954eac5a117223343b71bfbfcda17748087935d4d5fc097a3c028072daff10ed92e54cf16efcce"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x7, 0xf9, 0xf}}, {{0x9, 0x5, 0xa, 0x9, 0x400, 0xfe, 0x8, 0x0, [@generic={0x82, 0x21, "3814717300f139901dbef2cbc0c88359b2e9e0b323fa93236aec6480582d654a2a449288b15bc3edb291364932556377748f995ab020d29d0e91d0487d02476d9cb5c7bf9bd4234fd976c7a38906118f690157e2a6076ca2e2cc923c8bcabea5bce7aaf43b3f1d1336348b41f0f64d1a55de943f6cc2b45baccba35f6698fb3e"}, @generic={0xe3, 0x7, "cfecb5829969d40426d798f088284fdb3718670fec33bd46ff4b8ea0dfc89a91fa581a0403e5abf38b91c2c1fde91c78213b35683a1f398f55111c4f4b4d8039fb85214600ee5f97a3af9a4a397471d7e6d694975b23cf0a95c3bae8435d6e766bd1b7d0361e15a193170030f00802f3bac4f1c1ba808ffd0041a97de649f1cf2e3e81fa183d17b74d683778a06977661688263b94acfd2bf2b3c677376be87e1a8d7169c84eb057e2cabc76491a9452f4436e3bcaba22bc2f17881819f0ca78c477ced90aa340adac79e82a74b2054b0ac17a212473c8b178aef79fb6b7be12af"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x10, 0x0, 0x2, 0xd4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xfd, 0x7f}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x7f, 0xe4, 0x2}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x2, 0x8, 0x10}}, {{0x9, 0x5, 0x5, 0x3, 0x40, 0xaf, 0x8, 0x4}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0x7, 0x10, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x3, 0xb2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x1}]}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x2, 0x6, 0x2}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x81, 0x85, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x80}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xe, 0x5, 0xb}}, {{0x9, 0x5, 0x2, 0x10, 0x0, 0xf5, 0x9, 0x9, [@generic={0x2, 0x5}, @generic={0x16, 0x31, "d9813f68a00d6dd682012000156745d78c5f5489"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x3, 0x1, 0x9}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x1, 0x4, 0x5, [@generic={0xde, 0x4, "8db8b2eab4eb36a5d3561938da2d59e4e89c3eb2d6966044de956d4c41ab9614bc1e3583382ff5ae460098def64161f343e1f9958c52931458ab303721e7e7d3be2e61d0998681c8f6b6707d0e1d74b6485005edc7d1066609d196bc2ef13b9354adaa5e23fad0f89778f31a47a5c662c6f5def5bb2839f1afd1a04cbcc3328304321a7a8ce8cf8aa95d77748d13a7d69acc2c545d6aac62883c839301379e0cc57ff971d45d3f3b5ba5fa1ff3ca88c1623cd12308ea1aea3c7606cb610988f806f4aa0a20bffb0cd7b6c10bb474a135cc8acf84f63f9302541521d6"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xd5, 0x81}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x9, 0x4, 0x3, [@generic={0xa9, 0x7, "b13034ee900733b964db0bc9485119c4a45b50af485d03a0e3aa74596ffb8e1172032a5caec637bd62960f52023de73de288f3a5ea57ac449f64c245b49ce3dfdccbc19fef98c8ed072b5e5a7fc25173f9f4ca37934a18f5d7e29358c1c345ad171f5bff90610211920e7b56f764839c3f24e4e2c811696b5cfbac5edb366490ad1e5d943414d7c4f889bda34739ec792c1f1149e3c5717f3a8a099fbaacd85c342e0a89037753"}, @generic={0x97, 0xa, "57af902a10670f563433940c1be2cadb1b99ba940cb44ab957862b785c0a981256c27db58125a3ab53e68e5c28b532c113c489a6e539d89253057d9c0847909e07d50ffa535447737ce8543428f2da7892593becc5a10abcbd2d1f8a78237b0237bf4382eb2b483f5b154ce780947ac03c24a7cda145715791e56bcc600fe8e574886f4755a11ea65afc70dd13b8eda3508aa31c81"}]}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x40, 0x5, 0x8, 0x40, 0x60}, 0x19, &(0x7f0000000400)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "a40f547d74cf69a0239c0d79fce66478"}]}, 0x8, [{0x4d, &(0x7f0000000200)=@string={0x4d, 0x3, "7c24ff10b4cbd7880c20c5ceace76cb0e1d868adfd484cc7b853b729a36b09acfb96223e7091a03ffcb1b4cc1a66b7983f355d57c4ea2363f28429d7ccfe5cc545895ef67c032505f204b9"}}, {0xd2, &(0x7f0000000280)=@string={0xd2, 0x3, "dc2126061f53ffe44ce058cb5ddcc7dfd8da6a998922c04c705920a87c04e05b29d2fdfb388e6512a386adbe315f62ec1548a87142cbc198970c01b3b4e89d76f2195997603395441f17f0f57678f7efd66a33821cec9c5beebbaf2f788d0462a224056f52ddfbbb85da7ffd227583e0a1820eb388943249cc268de84e71bf91ac457cdb11ca8e0647c6c0db297ecd5e949102a56f7eb94767e5a8983477a8ffd4c608d11b5f44e2864ee08062a3fa02107b6fc6f5a99dcb180879fd04d8a7978cb3b74929a9a3ba1b64e189135aff8b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1004}}, {0x5c, &(0x7f0000000440)=@string={0x5c, 0x3, "3667093b582ce6f0b0362f2b17ccc22c557c9d97c88ecac05d90973d2b42fffc031d854672cc171d741565e8fe9a5940262706b800b898304cb91e51c1944a2d6d7d77772ddfc50ee9858b0395a554bcb8c16a585cbe7cc52b4b"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x8077e54a8b874b2b}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x43e}}, {0x24, &(0x7f0000000540)=@string={0x24, 0x3, "cb0ac1e1f4867d100bfbff4fe36ec435e0eb19292061676d029d5b84e12520cc4b0a"}}]}) name_to_handle_at(r3, &(0x7f0000000600)='./file0\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000052000000a70d000008000100000100000900000001010000c05ccf26925e1979574ad0dfac30f828ebff5377d5252ea06e470a4ec89c8e2e1544ab8ec8113464ae2a76c919d19b104c5a80bf67eb95fcb7473cae94c9b8842198a0ff9463ca3bb4c998b503919907f6e0bd30bd36577a02a0ab48acb1d5f2b1128e7058dfc7ac37219d998b98d9cce08248e5d2ac828dc4d7cbd728cdb0cc58c7e39089a7d9a9ce52ab368ffc8a25f49254dc68d91e082746a9046b0a6bc5c9cb93fa9fafb15d74eaf5cea4995b9a1f"], &(0x7f0000000680), 0x1400) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x810, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 1m9.030682893s ago: executing program 5 (id=1277): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x1800) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000000c0)=0x1, 0x4) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfd9fb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x42005}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0xffffffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (rerun: 32) 1m7.172540166s ago: executing program 5 (id=1283): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x139b039, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) setresuid(0xee00, 0xee00, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x202021, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) unshare(0x400) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x54, &(0x7f0000000040), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) setresuid(0x0, 0xee01, 0x0) r3 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) shmat(r3, &(0x7f0000ffa000/0x4000)=nil, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) semop(0x0, 0x0, 0x0) syz_io_uring_setup(0x487, &(0x7f0000000240)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300), &(0x7f0000000080)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003d00010325bd7000fcffffff010000009b754a65e4c8f7"], 0x14}, 0x1, 0x0, 0x0, 0x885}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x80002, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x48) 1m5.709759708s ago: executing program 5 (id=1291): socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x810) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x658b5ce}}], 0x18}, 0x4008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) fcntl$dupfd(r1, 0x0, r1) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x8010) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r3) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r4, 0xc79a1cde2581ce5f, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r4, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x5) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x141040) r8 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r9}) r10 = socket$can_j1939(0x1d, 0x2, 0x7) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r11, 0x0, 0x0) bind$can_j1939(r10, &(0x7f0000000280)={0x1d, r12, 0x2, {0x3, 0xff, 0x3}, 0xff}, 0x18) close(r10) 1m3.247288052s ago: executing program 5 (id=1304): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) wait4(r0, 0x0, 0x1, &(0x7f0000000200)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4603240095028000000000000003003e0001010000940200000000000040000000000000004d02000000000000f6ffffff000038000100fdff7f000008030000000400000007000000000000000a00f0ff00000000010100000000000006000000000000000700000000000000"], 0x78) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 4) 15.491618167s ago: executing program 1 (id=1472): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x45e}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shmget(0x0, 0x2000, 0x800, &(0x7f0000168000/0x2000)=nil) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x7f}, 'port1\x00', 0x80, 0x14, 0x4, 0xfffffeff, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r4, 0x0, 0x0) write$cgroup_int(r4, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x9, 0xe, 0xb0, '\x00', 0x8000000000000000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14.050073948s ago: executing program 1 (id=1476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000240)={0x2, 0x0, [{0x2, 0x0, 0x0, 0x8, 0x0, 0x2}, {0x0, 0x6, 0x6}]}) r4 = fsopen(&(0x7f0000000940)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x48, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @enter_looper], 0x0, 0x0, 0x0}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0x6) r6 = fsmount(r4, 0x0, 0x6) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0xf2) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xc0002, 0xc5) sendfile(r8, r8, 0x0, 0xe3aa6ea) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) 13.269283236s ago: executing program 0 (id=1478): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x2000) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd32", 0xb) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYRES8]) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200), 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 12.302396102s ago: executing program 1 (id=1482): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000001e40)={0x0, [{0x1, 0x750, 0x9, &(0x7f0000000780)="c749b29a2e1b58287ddfc6570752dd3c1330c1a47abe7db80133aff54b533b7cd01c4e4f50639e533bc6e897b97af056ed96a71ed33c467ec88f5614e02a2dfee21b5e993a2cb7b4dfecee6d846697a694073700559e7f6a6df97d54ec1774be43f65a414871299ba351d5033d764aea0e1a053beb85037019a9e6202b8b77ed74919ba15878015d2ee6bb5e2d3d0b43e2f181e8da099e12a83be0f1b616f7cc1397fd44da7df7222f8dd5017639ec75018752fdb2d5b68453df25b8155134780893bb9914b99ef83ba9d95bf6a8ebbf72a219f5944e560eedd27b72d6618467a26d66bfb508b6563da4"}, {0x2, 0x560, 0xff, &(0x7f0000000540)="e8688585b47cff5a876c6627f2f251d8ddf3aeb1c41be716dc07f76e8afb97d6ac3b80b11036d9e8814d11f7498f432c0244c6159cd8f640a817c1e336b98a681c202f7b2937114b629e3f21526bc52266da5c1893345a9e98cb6035b3bc08f29cbaa4f64b7da3f94be6cd6f5d1ece3e9adba06d106ec70386e0f8e534429a4b851cdfcfb5d6e667643295f6cc89be2b636b3b7ecb7e33cf7d3349b4e605c775bed88db502cb725cbf261618"}, {0x1, 0x1d8, 0x4, &(0x7f0000000280)="58b42bd0fd18b39c32f206c81b6c407b5518e9e6e6acd248eda7b7a0e5f64c82d0bccb30b12b65a10aad32a8d4da302470ec98082e5851c4f27fe9"}, {0xfa8c1b108377007d, 0x0, 0x6, 0x0}, {0x0, 0x0, 0x240, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xffff9c1b, 0x0}, {0x4, 0x0, 0x42, 0x0}, {0x3, 0x0, 0xf, 0x0}, {0x6, 0x0, 0x40, 0x0}, {0x2, 0x0, 0x5, &(0x7f0000001b40)}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x1, 0x130, 0x3, &(0x7f0000001c80)="42615623952ce7b12d78c64acf5d0db4152359e5df95e1a3cf8e2ab7b892edde2b89a7debe66"}, {0x1, 0x0, 0x2, 0x0}]}) 11.891917281s ago: executing program 0 (id=1485): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0xa9}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x9674}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000200)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x60}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "f07e86658d77dee1adc3488bd75aaa0b"}, @NL80211_ATTR_PMK={0x14, 0xfe, "30e28b43658f6b87b5e90cca75e75e7d"}]}, 0x74}}, 0x41) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) 11.784950424s ago: executing program 1 (id=1486): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x45e}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shmget(0x0, 0x2000, 0x800, &(0x7f0000168000/0x2000)=nil) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x7f}, 'port1\x00', 0x80, 0x14, 0x4, 0xfffffeff, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r4, 0x0, 0x0) write$cgroup_int(r4, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x9, 0xe, 0xb0, '\x00', 0x8000000000000000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10.021624556s ago: executing program 4 (id=1489): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) r4 = accept4(r3, 0x0, 0x0, 0x80000) accept4(r4, 0x0, 0x0, 0x80800) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0xffff, 0x3, 0x0, {0xa, 0x4e22, 0x850a, @private0, 0x4}}}, 0x32) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 9.94275445s ago: executing program 1 (id=1490): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r3 = epoll_create(0x200004) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0xb0000009}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x18000000000002a0, 0x71, 0xffffffffffffff5f, &(0x7f0000000040)="d2ff03cb4608008cb89e08d9865d", 0x0, 0xb22a, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = openat(r2, &(0x7f0000000140)='./cgroup.net/devices.allow\x00', 0x2, 0xca) r7 = openat$cgroup_devices(r6, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) ioctl$SCSI_IOCTL_PROBE_HOST(r9, 0x5385, &(0x7f0000000000)={0x8d, ""/141}) timer_settime(r8, 0x1, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f0000000280)) write$cgroup_devices(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 '], 0x9) read$watch_queue(r6, &(0x7f0000001280)=""/94, 0x5e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 8.407533057s ago: executing program 4 (id=1493): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x7000000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xfffffffa, 0x0, 0x20000, 0x4}) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x5e) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) close(0x3) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x40044160, 0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000003800010326bd700203dcdf2510"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20040814) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb0}}, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x25dfdbff, {0x3}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x14, 0x2e, 0x9, 0x70bd25, 0x1, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x7ff, 0x0, 0x32314d4e, 0x2, 0x9, 0x5, 0x9, 0x5, 0x1, 0x0, 0x1, 0x1}}) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x140) socket$unix(0x1, 0x1, 0x0) 8.406631653s ago: executing program 5 (id=1304): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) wait4(r0, 0x0, 0x1, &(0x7f0000000200)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4603240095028000000000000003003e0001010000940200000000000040000000000000004d02000000000000f6ffffff000038000100fdff7f000008030000000400000007000000000000000a00f0ff00000000010100000000000006000000000000000700000000000000"], 0x78) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 4) 8.3604603s ago: executing program 0 (id=1494): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={r1, r2, r2, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r1, 0x0, r3, 0x13a0, 0x80000003, 0x0, 0x0, 0x0, 0x5, 0xe, 0x4000d, 0x31d}) 6.18268141s ago: executing program 5 (id=1496): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="010028bd70"], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x11) 5.65939305s ago: executing program 0 (id=1498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRESOCT, @ANYBLOB="01002cbd7000fbdbdf250200000014000c00fc000000000000000000000000000000080002000000000005000d000900000008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\a'], 0x48}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r3 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x87680ba2ac5ed7e4, 0x59, 0xd1, 0xd6, 0x10, 0x424, 0x7801, 0x76d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x9, 0x9, 0x40, 0x1b, "", [{{0x9, 0x4, 0x3e, 0xf5, 0x3, 0xdb, 0x1a, 0x41, 0x4, [], [{{0x9, 0x5, 0x5, 0x2, 0x400, 0x4, 0x7, 0xf}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x7, 0x8, 0x1}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0x18, 0x0, 0x65}}]}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x3, [{0x4, 0x1}]}, @ptr, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x5a}, 0x28) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="210b28bd7000ffdbdf2503000000080005000000000014000c00fe880000000000000000000000000001080008000000000008000700", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00?', @ANYRES32=r4, @ANYBLOB="08000500ffffffff"], 0x50}, 0x1, 0x0, 0x0, 0x4054}, 0x4000800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf251200000008000300", @ANYRES32=r6, @ANYBLOB="0a000f00ffffffffffff00000600b5006f060000"], 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x20000810) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_FAMILY={0x5, 0xd, 0x5}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FAMILY={0x5, 0xd, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000800) 5.499310433s ago: executing program 4 (id=1499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r5, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 4.192806676s ago: executing program 4 (id=1500): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x45e}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shmget(0x0, 0x2000, 0x800, &(0x7f0000168000/0x2000)=nil) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x7f}, 'port1\x00', 0x80, 0x14, 0x4, 0xfffffeff, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) write$cgroup_int(r4, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.886927102s ago: executing program 1 (id=1501): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) rmdir(0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8932, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd32", 0xb) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x2a1000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0xc40) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) 3.016354641s ago: executing program 2 (id=1502): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x88800, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0]) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x71}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 2.433473377s ago: executing program 0 (id=1503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) r4 = accept4(r3, 0x0, 0x0, 0x80000) accept4(r4, 0x0, 0x0, 0x80800) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0xffff, 0x3, 0x0, {0xa, 0x4e22, 0x850a, @private0, 0x4}}}, 0x32) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.057388296s ago: executing program 2 (id=1504): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x4, 0x5, 0x3}, @ssrr={0x89, 0x3, 0xce}, @lsrr={0x83, 0x3, 0x1}]}}, {{0x4e20, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x3}}}}}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, r4, 0x25, 0x2, @val=@netfilter={0x3, 0x0, 0x0, 0x1}}, 0x20) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x1c, 0x64, 0x0, 0x24, 0x2, 0x0, @empty, @multicast1}, @address_request={0x11, 0x0, 0x0, 0x9}}}}}, 0x0) 1.049416484s ago: executing program 0 (id=1505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) 1.048639475s ago: executing program 4 (id=1506): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0xffffffffffffffff, 0x0}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000240)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3c) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r4, 0xc018aec0, &(0x7f00000000c0)={0x1}) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f0000000180)=""/95, 0x5f}, {&(0x7f0000000280)=""/185, 0xb9}, {&(0x7f0000000340)=""/224, 0xe0}, {&(0x7f0000000440)=""/199, 0xc7}], 0x4, &(0x7f0000000200)=[{&(0x7f0000000540)=""/86, 0x56}], 0x1, 0x0) 787.780066ms ago: executing program 2 (id=1507): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0) fchmod(0xffffffffffffffff, 0x70) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, 0x0, 0x0) 572.997327ms ago: executing program 2 (id=1508): socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_none}], [], 0x6b}}) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000040)=0x1, 0x4) 365.253042ms ago: executing program 2 (id=1509): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)=[@nested_vmresume={0x130, 0x18, 0x3}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0xef20, 0xe5e78cf276ce291c, 0x1}}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @wr_crn={0x67, 0x20, {0x4}}, @cpuid={0x64, 0x18, {0x2, 0x401}}, @cpuid={0x64, 0x18, {0x4, 0x30db}}], 0xd8}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioprio_set$pid(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect$uac2(0x5, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffffd) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95, 0x70bd27}, 0x14}}, 0x1004c0c0) 136.707555ms ago: executing program 2 (id=1510): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000540)="e460334470b8d408e903ef010800", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 4) 0s ago: executing program 4 (id=1511): r0 = userfaultfd(0x801) r1 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "37b0f462f0f30231", "776eac9c25a9f00fd88e64a867b7636c", "d08736df", "f2ac0fa3589d60ca"}, 0x28) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x891c) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@host, 0x1}) close(0x3) io_setup(0x2, &(0x7f0000000100)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x9, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="d52a6a16"]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0xc010) io_submit(r5, 0x1, &(0x7f0000000800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) kernel console output (not intermixed with test programs): : Error: mce write submit urb error = -90 [ 643.076971][ T5806] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.093551][ T5806] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.183895][ T5806] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.203183][ T5806] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.222319][ T5806] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.250301][ T5806] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.274115][ T5806] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.288541][ T5806] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.307908][ T5806] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.392105][ T5806] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 643.392136][ T5806] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 643.468126][ T5806] usb 5-1: USB disconnect, device number 53 [ 643.490331][ T9811] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1121'. [ 644.050330][ T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 644.193233][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 644.208909][ T9] usb 2-1: config 0 has an invalid descriptor of length 25, skipping remainder of the config [ 644.209134][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 644.209218][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 92, changing to 10 [ 644.209291][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 10205, setting to 1024 [ 644.209373][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 644.243623][ T10] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 644.292111][ T9] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 644.292145][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 644.292168][ T9] usb 2-1: Product: syz [ 644.292185][ T9] usb 2-1: Manufacturer: syz [ 644.292201][ T9] usb 2-1: SerialNumber: syz [ 644.341625][ T9] usb 2-1: config 0 descriptor?? [ 644.354804][ T9818] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 644.431121][ T810] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 644.431722][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 644.435286][ T10] usb 1-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 644.435345][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 644.435440][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 644.435465][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 644.435491][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 644.438276][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 644.438313][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 644.438339][ T10] usb 1-1: Manufacturer: syz [ 644.573965][ T810] usb 5-1: Using ep0 maxpacket: 16 [ 644.577665][ T9] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 644.577692][ T9] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 644.625579][ T810] usb 5-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 644.625633][ T810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 644.625712][ T810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 644.625737][ T810] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 644.625762][ T810] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 644.688968][ T810] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 644.689056][ T810] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 644.689080][ T810] usb 5-1: Manufacturer: syz [ 644.770820][ T810] usb 5-1: config 0 descriptor?? [ 644.783126][ T9] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 644.783216][ T9] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 644.783240][ T9] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 644.923437][ T10] usb 1-1: config 0 descriptor?? [ 644.969397][ T9] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 644.970110][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 644.970342][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 644.970565][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 644.970790][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 644.970955][ T9] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 644.971036][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 645.024090][ T9] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 645.077368][ T9714] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 645.144073][ T9] usb 2-1: USB disconnect, device number 59 [ 645.220631][ T9714] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 645.286677][ T9714] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 645.308425][ T810] rc_core: IR keymap rc-hauppauge not found [ 645.308452][ T810] Registered IR keymap rc-empty [ 645.308644][ T810] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 645.308766][ T10] rc_core: IR keymap rc-hauppauge not found [ 645.308782][ T10] Registered IR keymap rc-empty [ 645.308932][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 645.328090][ T810] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 645.328578][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 645.368644][ T10] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 645.376367][ T810] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 645.422392][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input110 [ 645.425059][ T810] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input109 [ 645.460360][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 645.487199][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 645.504930][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 645.506876][ T9714] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 645.524125][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 645.536159][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 645.537297][ T810] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 645.555765][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 645.575925][ T810] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 645.584961][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 645.596468][ T810] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 645.620869][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 645.631457][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 645.639587][ T810] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 645.677691][ T810] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 645.691257][ T810] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 645.706985][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 645.710405][ T810] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 645.729993][ T810] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 645.746123][ T810] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 645.771715][ T810] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 645.824970][ T10] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 645.825001][ T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 645.883105][ T810] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 645.883138][ T810] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 645.932011][ T810] usb 5-1: USB disconnect, device number 54 [ 645.997524][ T10] usb 1-1: USB disconnect, device number 66 [ 646.261420][ T9714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.270776][ T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 646.340696][ T9714] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.388265][ T1224] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.402849][ T1224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.416294][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 646.832150][ T31] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 646.949308][ T9861] FAULT_INJECTION: forcing a failure. [ 646.949308][ T9861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.949485][ T9861] CPU: 1 UID: 0 PID: 9861 Comm: syz.0.1142 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 646.949514][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 646.949530][ T9861] Call Trace: [ 646.949542][ T9861] [ 646.949553][ T9861] dump_stack_lvl+0xe8/0x150 [ 646.949595][ T9861] should_fail_ex+0x46b/0x600 [ 646.949627][ T9861] _copy_to_user+0x31/0xb0 [ 646.949661][ T9861] simple_read_from_buffer+0xe1/0x170 [ 646.949696][ T9861] proc_fail_nth_read+0x1be/0x230 [ 646.949729][ T9861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 646.949762][ T9861] ? rw_verify_area+0x2ac/0x4e0 [ 646.949796][ T9861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 646.949827][ T9861] vfs_read+0x212/0xa80 [ 646.949871][ T9861] ? __pfx_vfs_read+0x10/0x10 [ 646.949908][ T9861] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 646.949943][ T9861] ? lockdep_hardirqs_on+0x7a/0x110 [ 646.949974][ T9861] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 646.950008][ T9861] ? mutex_lock_nested+0x152/0x1d0 [ 646.950032][ T9861] ? fdget_pos+0x252/0x320 [ 646.950081][ T9861] ksys_read+0x156/0x270 [ 646.950114][ T9861] ? __pfx_n_tty_ioctl+0x10/0x10 [ 646.950153][ T9861] ? __pfx_ksys_read+0x10/0x10 [ 646.950201][ T9861] do_syscall_64+0x14d/0xf80 [ 646.950233][ T9861] ? trace_irq_disable+0x3b/0x150 [ 646.950262][ T9861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.950298][ T9861] ? clear_bhb_loop+0x40/0x90 [ 646.950328][ T9861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.950349][ T9861] RIP: 0033:0x7fe7597ccfce [ 646.950370][ T9861] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 646.950389][ T9861] RSP: 002b:00007fe757a5dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 646.950415][ T9861] RAX: ffffffffffffffda RBX: 00007fe757a5e6c0 RCX: 00007fe7597ccfce [ 646.950433][ T9861] RDX: 000000000000000f RSI: 00007fe757a5e0a0 RDI: 0000000000000004 [ 646.950447][ T9861] RBP: 00007fe757a5e090 R08: 0000000000000000 R09: 0000000000000000 [ 646.950463][ T9861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.950477][ T9861] R13: 00007fe759a86038 R14: 00007fe759a85fa0 R15: 00007ffecc5b8308 [ 646.950515][ T9861] [ 647.013100][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 651.248156][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 651.420638][ T9] usb 2-1: unable to read config index 0 descriptor/start: -32 [ 651.420670][ T9] usb 2-1: chopping to 0 config(s) [ 651.420703][ T9] usb 2-1: can't read configurations, error -32 [ 652.623253][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 653.072220][ T9] usb 2-1: device descriptor read/64, error -32 [ 653.634803][ T9] usb usb2-port1: attempt power cycle [ 654.359778][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 654.974574][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 655.100274][ T9] usb 2-1: device descriptor read/8, error -32 [ 655.280350][ T31] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 655.280415][ T31] usb 5-1: chopping to 0 config(s) [ 655.280487][ T31] usb 5-1: can't read configurations, error -32 [ 655.978388][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 656.053846][ T1222] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.186225][ T1222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.463054][ T9] usb 2-1: device descriptor read/8, error -71 [ 656.496193][ T31] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 656.577133][ T9] usb usb2-port1: unable to enumerate USB device [ 656.843463][ T31] usb 5-1: device descriptor read/64, error -32 [ 656.969992][ T31] usb usb5-port1: attempt power cycle [ 657.970706][ T9885] netlink: 'syz.0.1146': attribute type 10 has an invalid length. [ 658.263026][ T9885] bridge0: port 3(netdevsim0) entered blocking state [ 658.263172][ T9885] bridge0: port 3(netdevsim0) entered disabled state [ 658.263422][ T9885] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 658.285526][ T9885] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 658.500886][ T42] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 658.552474][ T9714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.652976][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 658.653188][ T5784] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 658.660808][ T42] usb 5-1: unable to get BOS descriptor or descriptor too short [ 658.695798][ T42] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 658.695834][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.695856][ T42] usb 5-1: Product: syz [ 658.695872][ T42] usb 5-1: Manufacturer: syz [ 658.695888][ T42] usb 5-1: SerialNumber: syz [ 658.856633][ T5784] usb 2-1: Using ep0 maxpacket: 16 [ 658.878750][ T5784] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.879310][ T5784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 658.879345][ T5784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 658.879370][ T5784] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 658.879617][ T5784] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 658.909459][ T5784] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 658.915129][ T5784] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 658.915159][ T5784] usb 2-1: Manufacturer: syz [ 658.998620][ T5784] usb 2-1: config 0 descriptor?? [ 659.023792][ T42] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 659.023852][ T42] usb 5-1: MIDIStreaming interface descriptor not found [ 659.335169][ T42] usb 5-1: USB disconnect, device number 58 [ 659.358294][ T5784] rc_core: IR keymap rc-hauppauge not found [ 659.358452][ T5784] Registered IR keymap rc-empty [ 659.358613][ T5784] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 659.386877][ T5784] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 659.433078][ T5784] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 659.474078][ T5784] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input112 [ 659.568247][ T5784] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 659.586881][ T9926] udevd[9926]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 659.596415][ T5784] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 659.624828][ T5784] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 659.653292][ T5784] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 659.682465][ T5784] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 659.710424][ T5784] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 659.739151][ T5784] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 659.767496][ T5784] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 659.786628][ T5784] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 659.814996][ T5784] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 659.847438][ T5784] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 659.847469][ T5784] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 659.873944][ T5784] usb 2-1: USB disconnect, device number 64 [ 660.589064][ T9714] veth0_vlan: entered promiscuous mode [ 660.683769][ T9714] veth1_vlan: entered promiscuous mode [ 660.826208][ T9714] veth0_macvtap: entered promiscuous mode [ 660.852679][ T9714] veth1_macvtap: entered promiscuous mode [ 660.897746][ T9714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.931768][ T9714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.982075][ T1425] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.982785][ T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.985464][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.985510][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.345227][ T810] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 662.884884][ T810] usb 2-1: Using ep0 maxpacket: 16 [ 662.951288][ T810] usb 2-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 662.951349][ T810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 662.951380][ T810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 662.951403][ T810] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 662.951428][ T810] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 662.988380][ T810] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 662.988418][ T810] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 662.988437][ T810] usb 2-1: Manufacturer: syz [ 663.120957][ T810] usb 2-1: config 0 descriptor?? [ 663.267320][ T9958] FAULT_INJECTION: forcing a failure. [ 663.267320][ T9958] name failslab, interval 1, probability 0, space 0, times 0 [ 663.267369][ T9958] CPU: 1 UID: 0 PID: 9958 Comm: syz.2.1167 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 663.267395][ T9958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 663.267410][ T9958] Call Trace: [ 663.267419][ T9958] [ 663.267429][ T9958] dump_stack_lvl+0xe8/0x150 [ 663.267469][ T9958] should_fail_ex+0x46b/0x600 [ 663.267514][ T9958] should_failslab+0xa8/0x100 [ 663.267541][ T9958] __kmalloc_cache_noprof+0x84/0x690 [ 663.267579][ T9958] ? sctp_add_bind_addr+0x8c/0x370 [ 663.267645][ T9958] sctp_add_bind_addr+0x8c/0x370 [ 663.267694][ T9958] sctp_do_bind+0x5b2/0x9d0 [ 663.267742][ T9958] sctp_connect_new_asoc+0x270/0x6b0 [ 663.267775][ T9958] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 663.267805][ T9958] ? __ipv6_addr_type+0x247/0x2f0 [ 663.267922][ T9958] ? sctp_inet6_send_verify+0x6e/0x300 [ 663.267945][ T9958] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 663.267990][ T9958] __sctp_connect+0x5cb/0xdc0 [ 663.268028][ T9958] ? __local_bh_enable+0x1e1/0x2f0 [ 663.268054][ T9958] ? __pfx___sctp_connect+0x10/0x10 [ 663.268097][ T9958] ? security_sctp_bind_connect+0x7e/0x2c0 [ 663.268135][ T9958] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 663.268174][ T9958] sctp_setsockopt+0x480/0x12c0 [ 663.268199][ T9958] ? sock_common_setsockopt+0x36/0xc0 [ 663.268227][ T9958] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 663.268248][ T9958] do_sock_setsockopt+0x17c/0x1b0 [ 663.268302][ T9958] __x64_sys_setsockopt+0x143/0x1b0 [ 663.268342][ T9958] do_syscall_64+0x14d/0xf80 [ 663.268372][ T9958] ? trace_irq_disable+0x3b/0x150 [ 663.268403][ T9958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.268420][ T9958] ? clear_bhb_loop+0x40/0x90 [ 663.268462][ T9958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.268485][ T9958] RIP: 0033:0x7fdf370dc799 [ 663.268508][ T9958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.268530][ T9958] RSP: 002b:00007fdf35315028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 663.268553][ T9958] RAX: ffffffffffffffda RBX: 00007fdf37356090 RCX: 00007fdf370dc799 [ 663.268570][ T9958] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000005 [ 663.268589][ T9958] RBP: 00007fdf35315090 R08: 000000000000001c R09: 0000000000000000 [ 663.268600][ T9958] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000001 [ 663.268617][ T9958] R13: 00007fdf37356128 R14: 00007fdf37356090 R15: 00007ffc658a1198 [ 663.268669][ T9958] [ 663.914489][ T9965] ieee802154 phy0 wpan0: encryption failed: -22 [ 663.995854][ T810] rc_core: IR keymap rc-hauppauge not found [ 663.995880][ T810] Registered IR keymap rc-empty [ 664.002610][ T810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 664.018622][ T810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 664.019604][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1170'. [ 664.055761][ T1407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.055788][ T1407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.076879][ T810] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 664.173117][ T810] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input113 [ 664.202718][ T810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 664.222435][ T810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 664.235738][ T810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 664.254269][ T810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 664.273696][ T810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 664.294249][ T810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 664.311325][ T810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 664.339744][ T810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 664.359221][ T810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 664.377803][ T810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 664.499536][ T810] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 664.499566][ T810] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 664.645392][ T810] usb 2-1: USB disconnect, device number 65 [ 665.047919][ T9007] Bluetooth: hci2: unexpected event for opcode 0x0c7a [ 665.055432][ T5805] Bluetooth: hci2: hardware error 0x05 [ 665.450548][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.450572][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.559775][ T810] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 665.705515][ T810] usb 2-1: Using ep0 maxpacket: 8 [ 665.708027][ T810] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 665.712381][ T810] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 665.712414][ T810] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 665.712438][ T810] usb 2-1: Product: syz [ 665.712466][ T810] usb 2-1: Manufacturer: syz [ 665.712483][ T810] usb 2-1: SerialNumber: syz [ 666.083151][ T810] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 666.086842][ T810] visor 2-1:1.0: probe with driver visor failed with error -110 [ 666.642736][ T810] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 667.066462][T10034] FAULT_INJECTION: forcing a failure. [ 667.066462][T10034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.066492][T10034] CPU: 1 UID: 0 PID: 10034 Comm: syz.0.1184 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 667.066511][T10034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 667.066522][T10034] Call Trace: [ 667.066529][T10034] [ 667.066536][T10034] dump_stack_lvl+0xe8/0x150 [ 667.066566][T10034] should_fail_ex+0x46b/0x600 [ 667.066588][T10034] _copy_to_user+0x31/0xb0 [ 667.066612][T10034] simple_read_from_buffer+0xe1/0x170 [ 667.066637][T10034] proc_fail_nth_read+0x1be/0x230 [ 667.066717][T10034] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 667.066739][T10034] ? rw_verify_area+0x2ac/0x4e0 [ 667.066763][T10034] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 667.066983][T10034] vfs_read+0x212/0xa80 [ 667.067015][T10034] ? __pfx_vfs_read+0x10/0x10 [ 667.067041][T10034] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 667.067065][T10034] ? lockdep_hardirqs_on+0x7a/0x110 [ 667.067088][T10034] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 667.067110][T10034] ? mutex_lock_nested+0x152/0x1d0 [ 667.067126][T10034] ? fdget_pos+0x252/0x320 [ 667.067154][T10034] ksys_read+0x156/0x270 [ 667.067180][T10034] ? __pfx_ksys_read+0x10/0x10 [ 667.067213][T10034] do_syscall_64+0x14d/0xf80 [ 667.067235][T10034] ? trace_irq_disable+0x3b/0x150 [ 667.067258][T10034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.067280][T10034] ? clear_bhb_loop+0x40/0x90 [ 667.067301][T10034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.067319][T10034] RIP: 0033:0x7fe7597ccfce [ 667.067335][T10034] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 667.067350][T10034] RSP: 002b:00007fe757a5dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 667.067368][T10034] RAX: ffffffffffffffda RBX: 00007fe757a5e6c0 RCX: 00007fe7597ccfce [ 667.067381][T10034] RDX: 000000000000000f RSI: 00007fe757a5e0a0 RDI: 0000000000000006 [ 667.067392][T10034] RBP: 00007fe757a5e090 R08: 0000000000000000 R09: 0000000000000000 [ 667.067402][T10034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.067412][T10034] R13: 00007fe759a86038 R14: 00007fe759a85fa0 R15: 00007ffecc5b8308 [ 667.067439][T10034] [ 667.358161][ T5805] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 667.425939][ T810] usb 5-1: Using ep0 maxpacket: 16 [ 667.442535][ T810] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.442596][ T810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 667.442628][ T810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 667.442652][ T810] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 667.442775][ T810] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 667.451918][ T810] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 667.451955][ T810] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 667.451979][ T810] usb 5-1: Manufacturer: syz [ 667.537791][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 667.540554][ T810] usb 5-1: config 0 descriptor?? [ 667.619057][ T6074] usb 2-1: USB disconnect, device number 66 [ 667.873816][ T810] rc_core: IR keymap rc-hauppauge not found [ 667.873839][ T810] Registered IR keymap rc-empty [ 667.874000][ T810] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 667.893005][ T810] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 667.914070][ T810] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 667.932412][ T810] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input114 [ 667.948802][ T810] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 667.969909][ T810] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 667.988147][ T810] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 668.007268][ T810] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 668.026228][ T42] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 668.036390][ T810] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 668.054906][ T810] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 668.073751][ T810] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 668.092793][ T810] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 668.113549][ T810] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 668.131044][ T810] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 668.179120][ T810] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 668.179146][ T810] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 668.180948][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 668.187562][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.187599][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.187626][ T42] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 668.187685][ T42] usb 1-1: New USB device found, idVendor=045e, idProduct=17da, bcdDevice= 0.00 [ 668.187712][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.312508][ T810] usb 5-1: USB disconnect, device number 59 [ 668.343915][ T42] usb 1-1: config 0 descriptor?? [ 668.840015][ T42] hid_parser_main: 508 callbacks suppressed [ 668.840043][ T42] hid-generic 0003:045E:17DA.0008: unknown main item tag 0x0 [ 668.840075][ T42] hid-generic 0003:045E:17DA.0008: unknown main item tag 0x0 [ 668.840105][ T42] hid-generic 0003:045E:17DA.0008: unknown main item tag 0x0 [ 668.840134][ T42] hid-generic 0003:045E:17DA.0008: unknown main item tag 0x0 [ 668.840163][ T42] hid-generic 0003:045E:17DA.0008: unknown main item tag 0x0 [ 668.840193][ T42] hid-generic 0003:045E:17DA.0008: unknown main item tag 0x0 [ 668.840222][ T42] hid-generic 0003:045E:17DA.0008: unknown main item tag 0x0 [ 668.840251][ T42] hid-generic 0003:045E:17DA.0008: unknown main item tag 0x0 [ 668.840280][ T42] hid-generic 0003:045E:17DA.0008: unknown main item tag 0x0 [ 668.840308][ T42] hid-generic 0003:045E:17DA.0008: unknown main item tag 0x0 [ 668.840336][ T42] hid-generic 0003:045E:17DA.0008: unbalanced collection at end of report description [ 668.841365][ T42] hid-generic 0003:045E:17DA.0008: probe with driver hid-generic failed with error -22 [ 668.996434][T10049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.997047][T10049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.029256][ T5805] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 669.083763][ T810] usb 1-1: USB disconnect, device number 67 [ 669.254903][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 669.398651][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 669.401384][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.401430][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 669.401451][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 669.403009][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 669.403033][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 669.403048][ T9] usb 2-1: Manufacturer: syz [ 669.545175][ T9] usb 2-1: config 0 descriptor?? [ 670.722827][ T9] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 670.864767][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 670.882232][ T9] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 670.882256][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 670.882275][ T9] usb 5-1: Product: syz [ 670.882286][ T9] usb 5-1: Manufacturer: syz [ 670.882297][ T9] usb 5-1: SerialNumber: syz [ 670.982055][ T9] usb 5-1: config 0 descriptor?? [ 671.028849][ T9] gspca_main: sq905-2.14.0 probing 2770:9120 [ 671.198957][ T9] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 671.199046][ T9] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 671.234304][ T9] usb 5-1: USB disconnect, device number 60 [ 671.306712][ T9878] udevd[9878]: setting mode of /dev/bus/usb/005/060 to 020664 failed: No such file or directory [ 671.308407][ T9878] udevd[9878]: setting owner of /dev/bus/usb/005/060 to uid=0, gid=0 failed: No such file or directory [ 672.502138][ T9] usb 2-1: USB disconnect, device number 67 [ 675.720868][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 675.720921][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 676.799503][ T10] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 676.935359][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 676.935380][ T36] audit: type=1326 audit(1773040901.457:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10127 comm="syz.4.1221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff03abfc799 code=0x0 [ 676.978970][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 676.990937][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 677.009946][ T10] usb 2-1: config 9 has an invalid interface number: 57 but max is 0 [ 677.009978][ T10] usb 2-1: config 9 has no interface number 0 [ 677.010015][ T10] usb 2-1: config 9 interface 57 has no altsetting 0 [ 677.045917][ T10] usb 2-1: string descriptor 0 read error: -22 [ 677.046034][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 677.046053][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.533452][ T10] video4linux radio48: keene_cmd_main failed (-71) [ 677.533484][ T10] radio-keene 2-1:9.57: V4L2 device registered as radio48 [ 677.565785][ T10] usb 2-1: USB disconnect, device number 68 [ 678.079069][T10144] FAULT_INJECTION: forcing a failure. [ 678.079069][T10144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.079097][T10144] CPU: 0 UID: 0 PID: 10144 Comm: syz.2.1226 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 678.079116][T10144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 678.079127][T10144] Call Trace: [ 678.079134][T10144] [ 678.079141][T10144] dump_stack_lvl+0xe8/0x150 [ 678.079171][T10144] should_fail_ex+0x46b/0x600 [ 678.079194][T10144] _copy_to_user+0x31/0xb0 [ 678.079218][T10144] simple_read_from_buffer+0xe1/0x170 [ 678.079243][T10144] proc_fail_nth_read+0x1be/0x230 [ 678.079265][T10144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 678.079287][T10144] ? rw_verify_area+0x2ac/0x4e0 [ 678.079311][T10144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 678.079331][T10144] vfs_read+0x212/0xa80 [ 678.079361][T10144] ? __pfx_vfs_read+0x10/0x10 [ 678.079386][T10144] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 678.079410][T10144] ? lockdep_hardirqs_on+0x7a/0x110 [ 678.079432][T10144] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 678.079455][T10144] ? mutex_lock_nested+0x152/0x1d0 [ 678.079471][T10144] ? fdget_pos+0x252/0x320 [ 678.079517][T10144] ksys_read+0x156/0x270 [ 678.079543][T10144] ? __pfx_ksys_read+0x10/0x10 [ 678.079569][T10144] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 678.079594][T10144] do_syscall_64+0x14d/0xf80 [ 678.079617][T10144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.079634][T10144] ? clear_bhb_loop+0x40/0x90 [ 678.079654][T10144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.079671][T10144] RIP: 0033:0x7fdf3709cfce [ 678.079686][T10144] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 678.079700][T10144] RSP: 002b:00007fdf35335fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 678.079718][T10144] RAX: ffffffffffffffda RBX: 00007fdf353366c0 RCX: 00007fdf3709cfce [ 678.079731][T10144] RDX: 000000000000000f RSI: 00007fdf353360a0 RDI: 0000000000000007 [ 678.079741][T10144] RBP: 00007fdf35336090 R08: 0000000000000000 R09: 0000000000000000 [ 678.079752][T10144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.079762][T10144] R13: 00007fdf37356038 R14: 00007fdf37355fa0 R15: 00007ffc658a1198 [ 678.079787][T10144] [ 678.857096][ T31] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 678.995190][T10165] FAULT_INJECTION: forcing a failure. [ 678.995190][T10165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.995222][T10165] CPU: 1 UID: 0 PID: 10165 Comm: syz.1.1234 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 678.995244][T10165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 678.995256][T10165] Call Trace: [ 678.995264][T10165] [ 678.995273][T10165] dump_stack_lvl+0xe8/0x150 [ 678.995306][T10165] should_fail_ex+0x46b/0x600 [ 678.995330][T10165] _copy_from_user+0x2d/0xb0 [ 678.995356][T10165] __x64_sys_epoll_ctl+0x128/0x1b0 [ 678.995505][T10165] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 678.995541][T10165] do_syscall_64+0x14d/0xf80 [ 678.995566][T10165] ? trace_irq_disable+0x3b/0x150 [ 678.995588][T10165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.995607][T10165] ? clear_bhb_loop+0x40/0x90 [ 678.995630][T10165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.995648][T10165] RIP: 0033:0x7f4b45e4c799 [ 678.995666][T10165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.995682][T10165] RSP: 002b:00007f4b440a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 678.995702][T10165] RAX: ffffffffffffffda RBX: 00007f4b460c5fa0 RCX: 00007f4b45e4c799 [ 678.995716][T10165] RDX: 0000000000000004 RSI: 0000000000000003 RDI: 0000000000000005 [ 678.995727][T10165] RBP: 00007f4b440a6090 R08: 0000000000000000 R09: 0000000000000000 [ 678.995739][T10165] R10: 0000200000000c40 R11: 0000000000000246 R12: 0000000000000001 [ 678.995751][T10165] R13: 00007f4b460c6038 R14: 00007f4b460c5fa0 R15: 00007fffb65149f8 [ 678.995779][T10165] [ 679.000401][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 679.133052][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.133218][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 679.133248][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 679.251991][ T31] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 679.252090][ T31] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 679.252146][ T31] usb 1-1: Manufacturer: syz [ 679.311170][ T31] usb 1-1: config 0 descriptor?? [ 680.035792][T10186] FAULT_INJECTION: forcing a failure. [ 680.035792][T10186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.035831][T10186] CPU: 1 UID: 0 PID: 10186 Comm: syz.5.1244 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 680.035866][T10186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 680.036033][T10186] Call Trace: [ 680.036046][T10186] [ 680.036058][T10186] dump_stack_lvl+0xe8/0x150 [ 680.036099][T10186] should_fail_ex+0x46b/0x600 [ 680.036129][T10186] strncpy_from_user+0x36/0x2b0 [ 680.036171][T10186] do_getname+0x77/0x250 [ 680.036200][T10186] __se_sys_renameat2+0x43/0x2c0 [ 680.036232][T10186] do_syscall_64+0x14d/0xf80 [ 680.036263][T10186] ? trace_irq_disable+0x3b/0x150 [ 680.036290][T10186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.036314][T10186] ? clear_bhb_loop+0x40/0x90 [ 680.036343][T10186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.036377][T10186] RIP: 0033:0x7f4f8c4ac799 [ 680.036400][T10186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.036420][T10186] RSP: 002b:00007f4f8a6fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 680.036443][T10186] RAX: ffffffffffffffda RBX: 00007f4f8c725fa0 RCX: 00007f4f8c4ac799 [ 680.036458][T10186] RDX: ffffffffffffff9c RSI: 0000200000000580 RDI: ffffffffffffff9c [ 680.036475][T10186] RBP: 00007f4f8a6fe090 R08: 0000000000000000 R09: 0000000000000000 [ 680.036490][T10186] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 680.036505][T10186] R13: 00007f4f8c726038 R14: 00007f4f8c725fa0 R15: 00007ffd33611b68 [ 680.036540][T10186] [ 680.714682][ T5865] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 680.771570][ T10] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 680.866937][ T5865] usb 5-1: Using ep0 maxpacket: 16 [ 680.870393][ T5865] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 680.872817][ T5865] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 680.872850][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.872872][ T5865] usb 5-1: Product: syz [ 680.872889][ T5865] usb 5-1: Manufacturer: syz [ 680.872905][ T5865] usb 5-1: SerialNumber: syz [ 680.885878][ T5865] usb 5-1: config 0 descriptor?? [ 680.956831][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.957889][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 680.957929][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 680.957963][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 680.957992][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 681.029026][ T10] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 681.029062][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 681.029085][ T10] usb 6-1: Product: syz [ 681.029100][ T10] usb 6-1: Manufacturer: syz [ 681.029117][ T10] usb 6-1: SerialNumber: syz [ 681.080651][ T10] usb 6-1: config 0 descriptor?? [ 681.281533][ T10] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 681.281562][ T10] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 681.464393][ T5865] usb 1-1: USB disconnect, device number 68 [ 681.479143][ T10] radio-si470x 6-1:0.0: software version 38, hardware version 200 [ 681.479267][ T10] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 681.645926][T10208] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1254'. [ 681.976575][T10209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.977588][T10209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.018859][ T10] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 682.018911][ T10] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 682.042962][ T10] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 682.043239][ T10] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 682.121307][ T10] usb 6-1: USB disconnect, device number 2 [ 682.668947][ T31] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 682.817266][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 684.120140][T10225] ptrace attach of "./syz-executor exec"[10234] was attempted by "./syz-executor exec"[10225] [ 684.554092][ T5806] usb 5-1: USB disconnect, device number 61 [ 685.192065][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 685.193130][ T31] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 685.193169][ T31] usb 2-1: can't read configurations, error -71 [ 685.218401][ T5865] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 685.372387][ T5784] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 685.424499][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.424536][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.424582][ T5865] usb 6-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 685.424601][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.491384][ T5865] usb 6-1: config 0 descriptor?? [ 685.534215][ T5784] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 685.534250][ T5784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.592818][ T5784] usb 1-1: config 0 descriptor?? [ 685.652282][ T5784] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 685.850988][ T5784] gp8psk: usb in 128 operation failed. [ 685.952365][ T5865] stadia 0003:18D1:9400.0009: item fetching failed at offset 1/5 [ 685.985514][ T5865] stadia 0003:18D1:9400.0009: parse failed [ 685.986115][ T5865] stadia 0003:18D1:9400.0009: probe with driver stadia failed with error -22 [ 686.067059][ T5784] gp8psk: usb in 146 operation failed. [ 686.067083][ T5784] gp8psk: failed to get FW version [ 686.087533][ T5784] gp8psk: usb in 149 operation failed. [ 686.087554][ T5784] gp8psk: failed to get FPGA version [ 686.353006][ T5784] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 686.353056][ T5784] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 686.558121][ T31] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 686.634693][ T10] usb 1-1: USB disconnect, device number 69 [ 686.716105][ T5806] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 686.721142][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 686.740610][ T31] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 686.740673][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 686.740695][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 686.740712][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 686.740729][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 686.742370][ T31] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 686.742408][ T31] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 686.742424][ T31] usb 2-1: Manufacturer: syz [ 686.836969][ T31] usb 2-1: config 0 descriptor?? [ 686.909185][ T5865] usb 6-1: USB disconnect, device number 3 [ 686.929261][ T5806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 686.929301][ T5806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.929342][ T5806] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 686.929369][ T5806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.022729][ T5806] usb 5-1: config 0 descriptor?? [ 687.467870][ T31] rc_core: IR keymap rc-hauppauge not found [ 687.467893][ T31] Registered IR keymap rc-empty [ 687.468052][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.500703][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.523878][ T5806] elan 0003:04F3:0755.000A: unknown main item tag 0x0 [ 687.523920][ T5806] elan 0003:04F3:0755.000A: unknown main item tag 0x0 [ 687.523948][ T5806] elan 0003:04F3:0755.000A: unknown main item tag 0x0 [ 687.523976][ T5806] elan 0003:04F3:0755.000A: unknown main item tag 0x0 [ 687.524003][ T5806] elan 0003:04F3:0755.000A: unknown main item tag 0x0 [ 687.576661][ T5806] elan 0003:04F3:0755.000A: failed to start in urb: -90 [ 687.632383][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 687.661352][ T5806] elan 0003:04F3:0755.000A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 687.687069][T10265] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 687.790914][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input115 [ 687.810793][ T5865] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 687.881642][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.882997][ T5806] usb 5-1: USB disconnect, device number 62 [ 687.919008][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.935112][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.953937][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.976778][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.991821][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 688.010872][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 688.030019][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 688.058822][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 688.087052][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 688.087312][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 688.126802][ T5865] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 688.225496][ T31] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 688.225565][ T31] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 688.228183][ T5865] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 688.228208][ T5865] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 688.228239][ T5865] usb 1-1: Product: syz [ 688.228251][ T5865] usb 1-1: Manufacturer: syz [ 688.228264][ T5865] usb 1-1: SerialNumber: syz [ 688.316764][T10279] FAULT_INJECTION: forcing a failure. [ 688.316764][T10279] name failslab, interval 1, probability 0, space 0, times 0 [ 688.316806][T10279] CPU: 1 UID: 0 PID: 10279 Comm: syz.2.1282 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 688.316832][T10279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 688.316847][T10279] Call Trace: [ 688.316856][T10279] [ 688.316867][T10279] dump_stack_lvl+0xe8/0x150 [ 688.316906][T10279] should_fail_ex+0x46b/0x600 [ 688.316939][T10279] should_failslab+0xa8/0x100 [ 688.316966][T10279] kmem_cache_alloc_noprof+0x87/0x680 [ 688.317003][T10279] ? dst_alloc+0x105/0x170 [ 688.317060][T10279] ? __pfx_ip6_dst_gc+0x10/0x10 [ 688.317158][T10279] dst_alloc+0x105/0x170 [ 688.317198][T10279] ip6_pol_route+0xafb/0x13d0 [ 688.317251][T10279] ? ip6_pol_route+0x160/0x13d0 [ 688.317286][T10279] ? __pfx_ip6_pol_route+0x10/0x10 [ 688.317315][T10279] ? __lock_acquire+0x6b5/0x2cf0 [ 688.317346][T10279] ? __lock_acquire+0x6b5/0x2cf0 [ 688.317380][T10279] fib6_rule_action+0x9d7/0xc00 [ 688.317441][T10279] ? __pfx_fib6_rule_action+0x10/0x10 [ 688.317483][T10279] ? fib6_rule_match+0x79a/0xa80 [ 688.317588][T10279] ? __pfx_fib6_rule_action+0x10/0x10 [ 688.317623][T10279] fib_rules_lookup+0x768/0xea0 [ 688.317719][T10279] ? fib_rules_lookup+0x9b/0xea0 [ 688.317758][T10279] ? __pfx_fib_rules_lookup+0x10/0x10 [ 688.317788][T10279] ? l3mdev_update_flow+0x29/0x640 [ 688.317871][T10279] ? l3mdev_update_flow+0x4d1/0x640 [ 688.317913][T10279] fib6_rule_lookup+0x1a0/0x730 [ 688.317946][T10279] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 688.317976][T10279] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 688.318014][T10279] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 688.318077][T10279] ip6_route_input+0x730/0xad0 [ 688.318117][T10279] ? __pfx_ip6_route_input+0x10/0x10 [ 688.318189][T10279] ? ip6_rcv_finish_core+0x222/0x420 [ 688.318279][T10279] ip6_rcv_finish+0x141/0x280 [ 688.318319][T10279] NF_HOOK+0x336/0x3c0 [ 688.318340][T10279] ? skb_orphan+0x4f/0xd0 [ 688.318364][T10279] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 688.318398][T10279] ? NF_HOOK+0x9e/0x3c0 [ 688.318421][T10279] ? __pfx_NF_HOOK+0x10/0x10 [ 688.318454][T10279] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 688.318512][T10279] ? netif_receive_skb+0x102/0xc50 [ 688.318541][T10279] netif_receive_skb+0x278/0xc50 [ 688.318570][T10279] ? __pfx_netif_receive_skb+0x10/0x10 [ 688.318592][T10279] ? rcu_is_watching+0x15/0xb0 [ 688.318696][T10279] ? __local_bh_disable_ip+0x3c/0x420 [ 688.318742][T10279] ? tun_rx_batched+0x191/0x760 [ 688.318775][T10279] ? tun_rx_batched+0x191/0x760 [ 688.318811][T10279] tun_rx_batched+0x1ee/0x760 [ 688.318873][T10279] ? __pfx_tun_rx_batched+0x10/0x10 [ 688.318903][T10279] ? __virtio_net_hdr_to_skb+0x9d2/0x13d0 [ 688.318938][T10279] ? trace_kmem_cache_alloc+0x29/0xf0 [ 688.319002][T10279] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 688.319036][T10279] ? lockdep_hardirqs_on+0x7a/0x110 [ 688.319173][T10279] ? tun_get_user+0x2669/0x3de0 [ 688.319211][T10279] tun_get_user+0x2a88/0x3de0 [ 688.319276][T10279] ? __pfx_tun_get_user+0x10/0x10 [ 688.319339][T10279] ? ref_tracker_alloc+0x332/0x4a0 [ 688.319374][T10279] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 688.319413][T10279] ? tun_get+0x1c/0x2f0 [ 688.319454][T10279] ? tun_get+0x1c/0x2f0 [ 688.319493][T10279] ? tun_get+0x1c/0x2f0 [ 688.319534][T10279] tun_chr_write_iter+0x119/0x200 [ 688.319568][T10279] vfs_write+0x629/0xba0 [ 688.319617][T10279] ? __pfx_vfs_write+0x10/0x10 [ 688.319683][T10279] ? __fget_files+0x2a/0x420 [ 688.319725][T10279] ksys_write+0x156/0x270 [ 688.319760][T10279] ? __pfx_ksys_write+0x10/0x10 [ 688.319808][T10279] do_syscall_64+0x14d/0xf80 [ 688.319838][T10279] ? trace_irq_disable+0x3b/0x150 [ 688.319866][T10279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.319892][T10279] ? clear_bhb_loop+0x40/0x90 [ 688.319918][T10279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.319940][T10279] RIP: 0033:0x7fdf3709cfce [ 688.319962][T10279] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 688.319983][T10279] RSP: 002b:00007fdf35314fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 688.320009][T10279] RAX: ffffffffffffffda RBX: 00007fdf353156c0 RCX: 00007fdf3709cfce [ 688.320026][T10279] RDX: 0000000000000052 RSI: 0000200000000280 RDI: 00000000000000c8 [ 688.320049][T10279] RBP: 00007fdf35315090 R08: 0000000000000000 R09: 0000000000000000 [ 688.320064][T10279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.320078][T10279] R13: 00007fdf37356128 R14: 00007fdf37356090 R15: 00007ffc658a1198 [ 688.320115][T10279] [ 688.383420][ T31] usb 2-1: USB disconnect, device number 71 [ 688.916705][ T5865] usb 1-1: palm_os_3_probe - error -110 getting connection information [ 688.916997][ T5865] visor 1-1:1.0: probe with driver visor failed with error -110 [ 689.360558][T10271] fido_id[10271]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 690.112040][T10297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.628553][ T42] usb 1-1: USB disconnect, device number 70 [ 691.555229][ T31] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 691.573434][ T5865] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 691.748890][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 691.749080][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 691.751820][ T5865] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.751940][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 691.751973][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 691.751997][ T5865] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 691.752023][ T5865] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 691.754046][ T5865] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 691.754133][ T5865] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 691.754156][ T5865] usb 2-1: Manufacturer: syz [ 691.883700][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.883773][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 691.883804][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 691.883830][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 691.883855][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 692.117575][ T31] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 692.117609][ T31] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 692.117630][ T31] usb 1-1: Manufacturer: syz [ 692.168971][ T5865] usb 2-1: config 0 descriptor?? [ 692.221183][ T31] usb 1-1: config 0 descriptor?? [ 692.551022][T10334] FAULT_INJECTION: forcing a failure. [ 692.551022][T10334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.551062][T10334] CPU: 0 UID: 0 PID: 10334 Comm: syz.2.1303 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 692.551087][T10334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 692.551101][T10334] Call Trace: [ 692.551110][T10334] [ 692.551120][T10334] dump_stack_lvl+0xe8/0x150 [ 692.551170][T10334] should_fail_ex+0x46b/0x600 [ 692.551199][T10334] _copy_to_user+0x31/0xb0 [ 692.551233][T10334] simple_read_from_buffer+0xe1/0x170 [ 692.551267][T10334] proc_fail_nth_read+0x1be/0x230 [ 692.551299][T10334] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 692.551330][T10334] ? rw_verify_area+0x2ac/0x4e0 [ 692.551360][T10334] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 692.551390][T10334] vfs_read+0x212/0xa80 [ 692.551427][T10334] ? __pfx_l2cap_sock_bind+0x10/0x10 [ 692.551531][T10334] ? __pfx_vfs_read+0x10/0x10 [ 692.551565][T10334] ? bpf_lsm_socket_bind+0x9/0x20 [ 692.551602][T10334] ? __sys_bind+0x30c/0x410 [ 692.551632][T10334] ? __pfx___sys_bind+0x10/0x10 [ 692.551666][T10334] ksys_read+0x156/0x270 [ 692.551700][T10334] ? __pfx_ksys_read+0x10/0x10 [ 692.551744][T10334] do_syscall_64+0x14d/0xf80 [ 692.551773][T10334] ? trace_irq_disable+0x3b/0x150 [ 692.551800][T10334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.551825][T10334] ? clear_bhb_loop+0x40/0x90 [ 692.551854][T10334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.551877][T10334] RIP: 0033:0x7fdf3709cfce [ 692.551898][T10334] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 692.551919][T10334] RSP: 002b:00007fdf35335fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 692.551944][T10334] RAX: ffffffffffffffda RBX: 00007fdf353366c0 RCX: 00007fdf3709cfce [ 692.551962][T10334] RDX: 000000000000000f RSI: 00007fdf353360a0 RDI: 0000000000000003 [ 692.551978][T10334] RBP: 00007fdf35336090 R08: 0000000000000000 R09: 0000000000000000 [ 692.551994][T10334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.552008][T10334] R13: 00007fdf37356038 R14: 00007fdf37355fa0 R15: 00007ffc658a1198 [ 692.552042][T10334] [ 692.907021][ T31] rc_core: IR keymap rc-hauppauge not found [ 692.907037][ T31] Registered IR keymap rc-empty [ 692.907149][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 692.929894][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 692.955200][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 692.957533][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input116 [ 693.065253][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 693.078577][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 693.088877][ T5865] rc_core: IR keymap rc-hauppauge not found [ 693.095427][ T5865] Registered IR keymap rc-empty [ 693.105918][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 693.112497][ T5865] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 693.127232][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 693.159687][ T5865] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 693.178673][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 693.206037][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 693.225504][ T5865] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 693.228500][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 693.241476][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 693.263655][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 693.297933][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 693.317397][ T5865] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input117 [ 693.358956][ T31] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 693.358986][ T31] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 693.442706][ T31] usb 1-1: USB disconnect, device number 71 [ 693.453567][ T5865] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 693.469344][ T5865] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 693.488229][ T5865] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 693.507814][ T5865] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 693.526418][ T5865] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 693.545169][ T5865] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 693.565806][ T5865] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 693.583407][ T5865] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 693.602418][ T5865] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 693.621740][ T5865] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 693.726769][ T5865] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 693.726801][ T5865] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 693.804682][ T5865] usb 2-1: USB disconnect, device number 72 [ 694.671127][ T5865] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 694.822526][ T5865] usb 5-1: Using ep0 maxpacket: 8 [ 695.332893][ T5865] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 695.486400][ T5996] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.491747][ T5865] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 695.491782][ T5865] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 695.491807][ T5865] usb 5-1: Product: syz [ 695.491823][ T5865] usb 5-1: Manufacturer: syz [ 695.491906][ T5865] usb 5-1: SerialNumber: syz [ 696.100265][ T5865] usb 5-1: palm_os_3_probe - error -110 getting connection information [ 696.100372][ T5865] visor 5-1:1.0: probe with driver visor failed with error -110 [ 696.152907][ T9007] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 696.207946][ T9007] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 696.227323][ T9007] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 696.229135][ T9007] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 696.229904][ T9007] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 696.757015][ T5996] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.765023][ T5806] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 696.907849][ T5806] usb 2-1: Using ep0 maxpacket: 8 [ 696.914627][ T5806] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 696.914667][ T5806] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 696.914768][ T5806] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 696.914794][ T5806] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 696.914842][ T5806] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 696.914868][ T5806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.194620][ T794] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 697.197632][ T5806] usb 2-1: GET_CAPABILITIES returned 0 [ 697.197668][ T5806] usbtmc 2-1:16.0: can't read capabilities [ 697.337797][ T31] usb 5-1: USB disconnect, device number 63 [ 697.429127][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 697.431866][T10361] usbtmc 2-1:16.0: Unable to send data, error -71 [ 697.503704][ T5806] usb 2-1: USB disconnect, device number 73 [ 697.628108][ T5996] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.114644][ T5996] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.142452][T10391] FAULT_INJECTION: forcing a failure. [ 698.142452][T10391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.142494][T10391] CPU: 0 UID: 0 PID: 10391 Comm: syz.2.1326 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 698.142522][T10391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 698.142537][T10391] Call Trace: [ 698.142547][T10391] [ 698.142558][T10391] dump_stack_lvl+0xe8/0x150 [ 698.142598][T10391] should_fail_ex+0x46b/0x600 [ 698.142632][T10391] _copy_to_user+0x31/0xb0 [ 698.142666][T10391] simple_read_from_buffer+0xe1/0x170 [ 698.142702][T10391] proc_fail_nth_read+0x1be/0x230 [ 698.142735][T10391] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 698.142767][T10391] ? rw_verify_area+0x2ac/0x4e0 [ 698.142801][T10391] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 698.142831][T10391] vfs_read+0x212/0xa80 [ 698.142874][T10391] ? __pfx_vfs_read+0x10/0x10 [ 698.142911][T10391] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 698.142945][T10391] ? lockdep_hardirqs_on+0x7a/0x110 [ 698.142978][T10391] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 698.143011][T10391] ? mutex_lock_nested+0x152/0x1d0 [ 698.143034][T10391] ? fdget_pos+0x252/0x320 [ 698.143082][T10391] ksys_read+0x156/0x270 [ 698.143120][T10391] ? __pfx_ksys_read+0x10/0x10 [ 698.143165][T10391] do_syscall_64+0x14d/0xf80 [ 698.143196][T10391] ? trace_irq_disable+0x3b/0x150 [ 698.143221][T10391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.143246][T10391] ? clear_bhb_loop+0x40/0x90 [ 698.143275][T10391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.143298][T10391] RIP: 0033:0x7fdf3709cfce [ 698.143319][T10391] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 698.143339][T10391] RSP: 002b:00007fdf35314fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 698.143370][T10391] RAX: ffffffffffffffda RBX: 00007fdf353156c0 RCX: 00007fdf3709cfce [ 698.143388][T10391] RDX: 000000000000000f RSI: 00007fdf353150a0 RDI: 0000000000000004 [ 698.143404][T10391] RBP: 00007fdf35315090 R08: 0000000000000000 R09: 0000000000000000 [ 698.143420][T10391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.143435][T10391] R13: 00007fdf37356128 R14: 00007fdf37356090 R15: 00007ffc658a1198 [ 698.143473][T10391] [ 698.556755][ T5805] Bluetooth: hci5: command tx timeout [ 699.922349][T10405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1330'. [ 700.475873][ T5805] Bluetooth: hci5: command tx timeout [ 700.632443][ T10] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 700.784730][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 700.791818][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.791879][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 700.791909][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 700.791931][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 700.791960][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 700.795345][ T5996] bridge_slave_1: left allmulticast mode [ 700.805408][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 700.805441][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 700.805465][ T10] usb 5-1: Manufacturer: syz [ 700.818690][ T5996] bridge_slave_1: left promiscuous mode [ 700.822673][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.863219][ T10] usb 5-1: config 0 descriptor?? [ 701.185132][ T10] rc_core: IR keymap rc-hauppauge not found [ 701.185154][ T10] Registered IR keymap rc-empty [ 701.185303][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 701.204391][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 701.227745][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 701.287070][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input118 [ 701.319209][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 701.343648][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 701.356312][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 701.375301][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 701.394749][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 701.413410][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 701.432648][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 701.451507][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 701.470929][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 701.489562][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 701.491250][ T5996] bridge_slave_0: left allmulticast mode [ 701.491275][ T5996] bridge_slave_0: left promiscuous mode [ 701.508736][ T6002] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 701.607212][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.625815][ T10] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 701.625852][ T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 701.680274][ T6002] usb 2-1: Using ep0 maxpacket: 16 [ 701.681234][ T10] usb 5-1: USB disconnect, device number 64 [ 701.686385][ T6002] usb 2-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 701.686454][ T6002] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 701.686484][ T6002] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 701.686507][ T6002] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 701.686531][ T6002] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 701.687797][ T6002] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 701.687827][ T6002] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 701.687849][ T6002] usb 2-1: Manufacturer: syz [ 701.839695][ T6002] usb 2-1: config 0 descriptor?? [ 702.232851][ T6002] rc_core: IR keymap rc-hauppauge not found [ 702.232876][ T6002] Registered IR keymap rc-empty [ 702.240267][ T6002] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 702.261243][ T6002] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 702.284900][ T6002] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 702.315577][ T6002] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input119 [ 702.347473][ T6002] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 702.378781][ T6002] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 702.398455][ T6002] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 702.424710][ T6002] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 702.451651][ T6002] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 702.462855][ T5805] Bluetooth: hci5: command tx timeout [ 702.470819][ T6002] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 702.490900][ T6002] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 702.522717][ T6002] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 702.546937][ T6002] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 702.567917][ T6002] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 702.590920][ T6002] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 702.590951][ T6002] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 702.630757][ T6002] usb 2-1: USB disconnect, device number 74 [ 702.651805][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 702.804220][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 702.808459][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 702.810419][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 702.856921][ T10] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 702.856953][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.856968][ T10] usb 3-1: Product: syz [ 702.856980][ T10] usb 3-1: Manufacturer: syz [ 702.856991][ T10] usb 3-1: SerialNumber: syz [ 704.433569][ T5805] Bluetooth: hci5: command tx timeout [ 704.643513][ T5996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.712437][ T5996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.806552][ T5996] bond0 (unregistering): Released all slaves [ 704.951051][T10356] chnl_net:caif_netlink_parms(): no params data found [ 705.448896][ T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 705.496855][ T10] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 705.496892][ T10] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 705.568511][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1345'. [ 705.795537][ T5806] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 705.908189][ T10] usb 3-1: USB disconnect, device number 55 [ 705.944195][ T5806] usb 2-1: Using ep0 maxpacket: 8 [ 705.946973][ T5806] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 705.995473][ T5806] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 705.995507][ T5806] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 705.995530][ T5806] usb 2-1: Product: syz [ 705.995545][ T5806] usb 2-1: Manufacturer: syz [ 705.995561][ T5806] usb 2-1: SerialNumber: syz [ 706.128654][ T9878] udevd[9878]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 707.151041][ T5806] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 707.151151][ T5806] visor 2-1:1.0: probe with driver visor failed with error -110 [ 708.323812][ T10] usb 2-1: USB disconnect, device number 75 [ 708.539607][T10356] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.542411][T10356] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.542685][T10356] bridge_slave_0: entered allmulticast mode [ 708.574706][T10356] bridge_slave_0: entered promiscuous mode [ 709.530383][T10492] ptrace attach of "./syz-executor exec"[10498] was attempted by "./syz-executor exec"[10492] [ 709.579624][T10505] FAULT_INJECTION: forcing a failure. [ 709.579624][T10505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 709.579662][T10505] CPU: 0 UID: 0 PID: 10505 Comm: syz.2.1360 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 709.579688][T10505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 709.579702][T10505] Call Trace: [ 709.579712][T10505] [ 709.579722][T10505] dump_stack_lvl+0xe8/0x150 [ 709.579762][T10505] should_fail_ex+0x46b/0x600 [ 709.579794][T10505] _copy_to_user+0x31/0xb0 [ 709.579828][T10505] snd_pcm_sw_params_user+0x123/0x1b0 [ 709.579953][T10505] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 709.579980][T10505] ? __pfx_snd_pcm_sw_params_user+0x10/0x10 [ 709.580011][T10505] ? rt_spin_unlock+0x14f/0x200 [ 709.580058][T10505] ? snd_pcm_common_ioctl+0x6d5/0xb80 [ 709.580092][T10505] ? __pfx_snd_pcm_ioctl+0x10/0x10 [ 709.580118][T10505] snd_pcm_ioctl+0x8e/0xb0 [ 709.580145][T10505] __se_sys_ioctl+0xff/0x170 [ 709.580183][T10505] do_syscall_64+0x14d/0xf80 [ 709.580212][T10505] ? trace_irq_disable+0x3b/0x150 [ 709.580239][T10505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.580262][T10505] ? clear_bhb_loop+0x40/0x90 [ 709.580290][T10505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.580313][T10505] RIP: 0033:0x7fdf370dc799 [ 709.580334][T10505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.580354][T10505] RSP: 002b:00007fdf35315028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 709.580378][T10505] RAX: ffffffffffffffda RBX: 00007fdf37356090 RCX: 00007fdf370dc799 [ 709.580395][T10505] RDX: 0000200000000000 RSI: 00000000c0884113 RDI: 0000000000000005 [ 709.580411][T10505] RBP: 00007fdf35315090 R08: 0000000000000000 R09: 0000000000000000 [ 709.580426][T10505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.580446][T10505] R13: 00007fdf37356128 R14: 00007fdf37356090 R15: 00007ffc658a1198 [ 709.580483][T10505] [ 710.421958][T10516] FAULT_INJECTION: forcing a failure. [ 710.421958][T10516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.421998][T10516] CPU: 1 UID: 0 PID: 10516 Comm: syz.2.1363 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 710.422024][T10516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 710.422038][T10516] Call Trace: [ 710.422047][T10516] [ 710.422058][T10516] dump_stack_lvl+0xe8/0x150 [ 710.422098][T10516] should_fail_ex+0x46b/0x600 [ 710.422131][T10516] _copy_from_iter+0x1d3/0x1670 [ 710.422167][T10516] ? trace_kmem_cache_alloc+0x29/0xf0 [ 710.422201][T10516] ? __alloc_skb+0x27d/0x7d0 [ 710.422233][T10516] ? __pfx__copy_from_iter+0x10/0x10 [ 710.422258][T10516] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 710.422293][T10516] ? __alloc_skb+0x27d/0x7d0 [ 710.422329][T10516] ? netlink_sendmsg+0x650/0xb40 [ 710.422355][T10516] ? skb_put+0x11b/0x210 [ 710.422391][T10516] netlink_sendmsg+0x6c0/0xb40 [ 710.422427][T10516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 710.422457][T10516] ? unwind_get_return_address+0x4d/0x90 [ 710.422486][T10516] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 710.422522][T10516] ____sys_sendmsg+0x94c/0x9c0 [ 710.422562][T10516] ? __pfx_____sys_sendmsg+0x10/0x10 [ 710.422607][T10516] ? import_iovec+0x73/0xa0 [ 710.422642][T10516] ___sys_sendmsg+0x2a5/0x360 [ 710.422683][T10516] ? __pfx____sys_sendmsg+0x10/0x10 [ 710.422758][T10516] ? __fget_files+0x2a/0x420 [ 710.422787][T10516] ? __fget_files+0x3a6/0x420 [ 710.422828][T10516] __x64_sys_sendmsg+0x1c3/0x2a0 [ 710.422873][T10516] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 710.422917][T10516] ? __pfx_ksys_write+0x10/0x10 [ 710.422965][T10516] do_syscall_64+0x14d/0xf80 [ 710.422994][T10516] ? trace_irq_disable+0x3b/0x150 [ 710.423021][T10516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.423045][T10516] ? clear_bhb_loop+0x40/0x90 [ 710.423074][T10516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.423096][T10516] RIP: 0033:0x7fdf370dc799 [ 710.423118][T10516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.423139][T10516] RSP: 002b:00007fdf35336028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 710.423164][T10516] RAX: ffffffffffffffda RBX: 00007fdf37355fa0 RCX: 00007fdf370dc799 [ 710.423183][T10516] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 710.423198][T10516] RBP: 00007fdf35336090 R08: 0000000000000000 R09: 0000000000000000 [ 710.423214][T10516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.423228][T10516] R13: 00007fdf37356038 R14: 00007fdf37355fa0 R15: 00007ffc658a1198 [ 710.423265][T10516] [ 711.086683][T10356] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.086988][T10356] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.087259][T10356] bridge_slave_1: entered allmulticast mode [ 711.131348][T10356] bridge_slave_1: entered promiscuous mode [ 711.356692][T10356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.386220][T10356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.562099][T10356] team0: Port device team_slave_0 added [ 711.565996][T10356] team0: Port device team_slave_1 added [ 711.633982][T10356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.634002][T10356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.634033][T10356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.690228][T10356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.690251][T10356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.690288][T10356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.853382][T10356] hsr_slave_0: entered promiscuous mode [ 711.895638][T10356] hsr_slave_1: entered promiscuous mode [ 711.897015][T10356] debugfs: 'hsr0' already exists in 'hsr' [ 711.897043][T10356] Cannot create hsr debugfs directory [ 712.291638][ T6011] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 712.434823][ T6011] usb 1-1: Using ep0 maxpacket: 16 [ 713.495232][T10551] autofs: Unknown parameter 'fd0x0000000000000000' [ 714.406846][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 714.560831][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 714.593966][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.594029][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 714.594176][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 714.594288][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 714.594315][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 714.690885][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 714.690920][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 714.690953][ T9] usb 5-1: Manufacturer: syz [ 714.781584][ T9] usb 5-1: config 0 descriptor?? [ 715.236925][ T6011] usb 1-1: unable to get BOS descriptor or descriptor too short [ 715.237973][ T6011] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 715.238019][ T6011] usb 1-1: can't read configurations, error -71 [ 715.397406][ T9] rc_core: IR keymap rc-hauppauge not found [ 715.397430][ T9] Registered IR keymap rc-empty [ 715.397609][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 715.430341][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 715.446930][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 715.450505][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input120 [ 715.499129][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 715.520919][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 715.549903][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 715.578063][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 715.607408][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 715.635131][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 715.654471][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 715.682896][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 715.711471][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 715.721341][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 715.765729][ T9] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 715.765760][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 715.988446][ T9] usb 5-1: USB disconnect, device number 65 [ 716.300089][ T5996] hsr_slave_0: left promiscuous mode [ 716.406751][ T5996] hsr_slave_1: left promiscuous mode [ 716.408646][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.408879][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.434556][T10592] FAULT_INJECTION: forcing a failure. [ 716.434556][T10592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.434595][T10592] CPU: 1 UID: 0 PID: 10592 Comm: syz.2.1389 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 716.434621][T10592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 716.434635][T10592] Call Trace: [ 716.434645][T10592] [ 716.434656][T10592] dump_stack_lvl+0xe8/0x150 [ 716.434696][T10592] should_fail_ex+0x46b/0x600 [ 716.434736][T10592] _copy_to_user+0x31/0xb0 [ 716.434769][T10592] simple_read_from_buffer+0xe1/0x170 [ 716.434805][T10592] proc_fail_nth_read+0x1be/0x230 [ 716.434836][T10592] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 716.434868][T10592] ? rw_verify_area+0x2ac/0x4e0 [ 716.434902][T10592] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 716.434931][T10592] vfs_read+0x212/0xa80 [ 716.434975][T10592] ? __pfx_vfs_read+0x10/0x10 [ 716.435011][T10592] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 716.435046][T10592] ? lockdep_hardirqs_on+0x7a/0x110 [ 716.435076][T10592] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 716.435108][T10592] ? mutex_lock_nested+0x152/0x1d0 [ 716.435131][T10592] ? fdget_pos+0x252/0x320 [ 716.435169][T10592] ksys_read+0x156/0x270 [ 716.435203][T10592] ? __pfx_ksys_read+0x10/0x10 [ 716.435248][T10592] do_syscall_64+0x14d/0xf80 [ 716.435279][T10592] ? trace_irq_disable+0x3b/0x150 [ 716.435306][T10592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.435328][T10592] ? clear_bhb_loop+0x40/0x90 [ 716.435357][T10592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.435381][T10592] RIP: 0033:0x7fdf3709cfce [ 716.435403][T10592] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 716.435424][T10592] RSP: 002b:00007fdf35314fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 716.435449][T10592] RAX: ffffffffffffffda RBX: 00007fdf353156c0 RCX: 00007fdf3709cfce [ 716.435467][T10592] RDX: 000000000000000f RSI: 00007fdf353150a0 RDI: 0000000000000006 [ 716.435486][T10592] RBP: 00007fdf35315090 R08: 0000000000000000 R09: 0000000000000000 [ 716.435502][T10592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.435516][T10592] R13: 00007fdf37356128 R14: 00007fdf37356090 R15: 00007ffc658a1198 [ 716.435554][T10592] [ 716.776111][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.776145][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.543775][ T5996] veth1_macvtap: left promiscuous mode [ 717.645627][ T5996] veth0_macvtap: left promiscuous mode [ 717.646057][ T5996] veth1_vlan: left promiscuous mode [ 717.646505][ T5996] veth0_vlan: left promiscuous mode [ 718.449454][ T5865] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 718.660455][ T5865] usb 5-1: Using ep0 maxpacket: 16 [ 718.788368][ T31] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 719.262438][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 720.003320][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.003485][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 720.003519][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 720.003544][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 720.003634][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 721.435289][ T31] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 721.435326][ T31] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 721.435422][ T31] usb 1-1: Manufacturer: syz [ 721.501634][ T31] usb 1-1: config 0 descriptor?? [ 721.612497][ T31] usb 1-1: can't set config #0, error -71 [ 721.642634][ T31] usb 1-1: USB disconnect, device number 74 [ 721.779959][ T5865] usb 5-1: unable to get BOS descriptor or descriptor too short [ 721.789411][ T5865] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 721.789454][ T5865] usb 5-1: can't read configurations, error -71 [ 722.608135][ T5865] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 722.855841][ T5865] usb 5-1: unable to get BOS descriptor or descriptor too short [ 722.859488][ T5865] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 722.859532][ T5865] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 138, changing to 7 [ 722.859570][ T5865] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 50525, setting to 1024 [ 722.931525][ T5865] usb 5-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 722.931723][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.931747][ T5865] usb 5-1: Product: syz [ 722.931764][ T5865] usb 5-1: Manufacturer: syz [ 722.931779][ T5865] usb 5-1: SerialNumber: syz [ 723.186638][ T5996] team0 (unregistering): Port device team_slave_1 removed [ 723.276054][ T5996] team0 (unregistering): Port device team_slave_0 removed [ 723.363706][ T5865] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 723.363765][ T5865] usb 5-1: MIDIStreaming interface descriptor not found [ 723.674245][ T5865] usb 5-1: USB disconnect, device number 67 [ 723.860280][T10666] udevd[10666]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 724.896080][T10683] FAULT_INJECTION: forcing a failure. [ 724.896080][T10683] name failslab, interval 1, probability 0, space 0, times 0 [ 724.896121][T10683] CPU: 0 UID: 0 PID: 10683 Comm: syz.2.1421 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 724.896149][T10683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 724.896164][T10683] Call Trace: [ 724.896173][T10683] [ 724.896184][T10683] dump_stack_lvl+0xe8/0x150 [ 724.896226][T10683] should_fail_ex+0x46b/0x600 [ 724.896258][T10683] should_failslab+0xa8/0x100 [ 724.896286][T10683] __kmalloc_noprof+0xdf/0x7b0 [ 724.896320][T10683] ? kfree+0x4d/0x6c0 [ 724.896349][T10683] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 724.896380][T10683] tomoyo_realpath_from_path+0xe3/0x5d0 [ 724.896418][T10683] ? tomoyo_path_number_perm+0x219/0x630 [ 724.896454][T10683] tomoyo_path_number_perm+0x246/0x630 [ 724.896491][T10683] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 724.896528][T10683] ? __lock_acquire+0x6b5/0x2cf0 [ 724.896589][T10683] ? __fget_files+0x2a/0x420 [ 724.896623][T10683] ? __fget_files+0x2a/0x420 [ 724.896650][T10683] ? __fget_files+0x3a6/0x420 [ 724.896678][T10683] ? __fget_files+0x2a/0x420 [ 724.896711][T10683] security_file_ioctl+0xc3/0x2a0 [ 724.896749][T10683] __se_sys_ioctl+0x47/0x170 [ 724.896789][T10683] do_syscall_64+0x14d/0xf80 [ 724.896821][T10683] ? trace_irq_disable+0x3b/0x150 [ 724.896848][T10683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.896872][T10683] ? clear_bhb_loop+0x40/0x90 [ 724.896909][T10683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.896934][T10683] RIP: 0033:0x7fdf370dc799 [ 724.896955][T10683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.896975][T10683] RSP: 002b:00007fdf352f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 724.897000][T10683] RAX: ffffffffffffffda RBX: 00007fdf37356180 RCX: 00007fdf370dc799 [ 724.897018][T10683] RDX: 0000200000000140 RSI: 00000000400454d9 RDI: 0000000000000003 [ 724.897034][T10683] RBP: 00007fdf352f4090 R08: 0000000000000000 R09: 0000000000000000 [ 724.897050][T10683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.897064][T10683] R13: 00007fdf37356218 R14: 00007fdf37356180 R15: 00007ffc658a1198 [ 724.897102][T10683] [ 724.897112][T10683] ERROR: Out of memory at tomoyo_realpath_from_path. [ 726.631550][T10682] ceph: No mds server is up or the cluster is laggy [ 726.796105][ T93] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 728.029575][T10699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 729.414882][T10753] FAULT_INJECTION: forcing a failure. [ 729.414882][T10753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.414935][T10753] CPU: 1 UID: 0 PID: 10753 Comm: syz.2.1437 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 729.414962][T10753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 729.414977][T10753] Call Trace: [ 729.414997][T10753] [ 729.415008][T10753] dump_stack_lvl+0xe8/0x150 [ 729.415048][T10753] should_fail_ex+0x46b/0x600 [ 729.415082][T10753] _copy_to_user+0x31/0xb0 [ 729.415120][T10753] simple_read_from_buffer+0xe1/0x170 [ 729.415154][T10753] proc_fail_nth_read+0x1be/0x230 [ 729.415185][T10753] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 729.415217][T10753] ? rw_verify_area+0x2ac/0x4e0 [ 729.415251][T10753] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 729.415281][T10753] vfs_read+0x212/0xa80 [ 729.415324][T10753] ? __pfx_vfs_read+0x10/0x10 [ 729.415362][T10753] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 729.415395][T10753] ? lockdep_hardirqs_on+0x7a/0x110 [ 729.415426][T10753] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 729.415459][T10753] ? mutex_lock_nested+0x152/0x1d0 [ 729.415483][T10753] ? fdget_pos+0x252/0x320 [ 729.415523][T10753] ksys_read+0x156/0x270 [ 729.415561][T10753] ? __pfx_ksys_read+0x10/0x10 [ 729.415608][T10753] do_syscall_64+0x14d/0xf80 [ 729.415658][T10753] ? trace_irq_disable+0x3b/0x150 [ 729.415686][T10753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.415710][T10753] ? clear_bhb_loop+0x40/0x90 [ 729.415740][T10753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.415763][T10753] RIP: 0033:0x7fdf3709cfce [ 729.415784][T10753] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 729.415805][T10753] RSP: 002b:00007fdf35314fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 729.415830][T10753] RAX: ffffffffffffffda RBX: 00007fdf353156c0 RCX: 00007fdf3709cfce [ 729.415848][T10753] RDX: 000000000000000f RSI: 00007fdf353150a0 RDI: 0000000000000004 [ 729.415863][T10753] RBP: 00007fdf35315090 R08: 0000000000000000 R09: 0000000000000000 [ 729.415878][T10753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.415891][T10753] R13: 00007fdf37356128 R14: 00007fdf37356090 R15: 00007ffc658a1198 [ 729.415928][T10753] [ 729.839769][T10744] ceph: No mds server is up or the cluster is laggy [ 730.172923][ T9] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 730.400072][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 730.403056][ T9] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.403094][ T9] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.403120][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 730.403158][ T9] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 730.403183][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.482849][ T9] usb 5-1: config 0 descriptor?? [ 730.567987][T10769] sctp: [Deprecated]: syz.2.1443 (pid 10769) Use of int in max_burst socket option. [ 730.567987][T10769] Use struct sctp_assoc_value instead [ 731.823989][ T9] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 731.824033][ T9] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 731.824063][ T9] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 731.824093][ T9] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 731.824122][ T9] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 731.882250][ T9] nzxt-smart2 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 732.360326][ T31] usb 5-1: USB disconnect, device number 68 [ 732.614265][ T6002] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 732.826818][ T6002] usb 2-1: unable to get BOS descriptor or descriptor too short [ 732.827606][ T6002] usb 2-1: not running at top speed; connect to a high speed hub [ 732.830041][ T6002] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 732.830079][ T6002] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 732.830108][ T6002] usb 2-1: config 1 interface 0 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 732.830136][ T6002] usb 2-1: config 1 interface 0 has no altsetting 0 [ 732.839563][ T6002] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 732.840005][ T6002] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.840086][ T6002] usb 2-1: Product: syz [ 732.840129][ T6002] usb 2-1: Manufacturer: syz [ 732.840180][ T6002] usb 2-1: SerialNumber: syz [ 732.946833][T10783] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 732.947140][T10783] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 733.199180][T10356] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 733.212968][ T6002] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 733.239050][T10356] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 733.261013][ T6002] usb 2-1: USB disconnect, device number 76 [ 733.338390][T10356] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 733.457307][T10356] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 733.648554][ T5865] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 733.819849][ T5865] usb 5-1: Using ep0 maxpacket: 16 [ 733.822772][ T5865] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.822830][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 733.822861][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 733.822883][ T5865] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 733.822907][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 733.831470][ T5865] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 733.831568][ T5865] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 733.832188][ T5865] usb 5-1: Manufacturer: syz [ 733.896425][ T5865] usb 5-1: config 0 descriptor?? [ 733.957475][T10356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.155342][T10828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1458'. [ 734.236620][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 734.236706][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 734.798826][T10356] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.862581][ T5865] rc_core: IR keymap rc-hauppauge not found [ 734.862600][ T5865] Registered IR keymap rc-empty [ 734.862713][ T5865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 734.865973][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.866902][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.877386][ T5865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 734.961719][ T5865] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 735.028009][ T5865] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input121 [ 735.055684][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.055829][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.084313][ T5865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 735.103250][ T5865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 735.115839][ T5865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 735.136908][ T5865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 735.162810][ T5865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 735.191481][ T5865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 735.227398][ T5865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 735.244150][ T5865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 735.262974][ T5865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 735.279739][ T5865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 735.340385][ T5865] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 735.340414][ T5865] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 735.530214][ T5865] usb 5-1: USB disconnect, device number 69 [ 735.964987][T10846] FAULT_INJECTION: forcing a failure. [ 735.964987][T10846] name failslab, interval 1, probability 0, space 0, times 0 [ 735.965043][T10846] CPU: 0 UID: 0 PID: 10846 Comm: syz.1.1462 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 735.965072][T10846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 735.965088][T10846] Call Trace: [ 735.965099][T10846] [ 735.965110][T10846] dump_stack_lvl+0xe8/0x150 [ 735.965151][T10846] should_fail_ex+0x46b/0x600 [ 735.965184][T10846] should_failslab+0xa8/0x100 [ 735.965211][T10846] __kmalloc_cache_noprof+0x84/0x690 [ 735.965247][T10846] ? snd_mixer_oss_put_volume1_sw+0x176/0x440 [ 735.965385][T10846] snd_mixer_oss_put_volume1_sw+0x176/0x440 [ 735.965415][T10846] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 735.965455][T10846] snd_mixer_oss_put_recsrc1_sw+0x65/0x90 [ 735.965492][T10846] ? __pfx_snd_mixer_oss_put_recsrc1_sw+0x10/0x10 [ 735.965520][T10846] snd_mixer_oss_set_recsrc+0x278/0x450 [ 735.965552][T10846] ? __pfx_snd_mixer_oss_set_recsrc+0x10/0x10 [ 735.965581][T10846] ? __might_fault+0xaf/0x130 [ 735.965677][T10846] snd_mixer_oss_ioctl1+0xf01/0x1ae0 [ 735.965702][T10846] ? do_vfs_ioctl+0x11c/0x1540 [ 735.965743][T10846] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 735.965772][T10846] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 735.965809][T10846] ? __pfx___schedule+0x10/0x10 [ 735.965840][T10846] ? smk_access+0x14c/0x4e0 [ 735.965880][T10846] ? irqentry_exit+0x59e/0x620 [ 735.965912][T10846] ? lockdep_hardirqs_on+0x7a/0x110 [ 735.965952][T10846] snd_mixer_oss_ioctl_card+0x114/0x170 [ 735.965984][T10846] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 735.966025][T10846] snd_pcm_oss_ioctl+0x267/0xe00 [ 735.966056][T10846] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 735.966085][T10846] __se_sys_ioctl+0xff/0x170 [ 735.966126][T10846] do_syscall_64+0x14d/0xf80 [ 735.966159][T10846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.966185][T10846] ? clear_bhb_loop+0x40/0x90 [ 735.966215][T10846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.966240][T10846] RIP: 0033:0x7f4b45e4c799 [ 735.966264][T10846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.966285][T10846] RSP: 002b:00007f4b44064028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 735.966311][T10846] RAX: ffffffffffffffda RBX: 00007f4b460c6180 RCX: 00007f4b45e4c799 [ 735.966329][T10846] RDX: 0000200000000100 RSI: 00000000c0044dff RDI: 0000000000000008 [ 735.966346][T10846] RBP: 00007f4b44064090 R08: 0000000000000000 R09: 0000000000000000 [ 735.966362][T10846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.966376][T10846] R13: 00007f4b460c6218 R14: 00007f4b460c6180 R15: 00007fffb65149f8 [ 735.966414][T10846] [ 736.600270][ T10] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 736.756352][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 736.793009][ T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 736.793046][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.793066][ T10] usb 1-1: Product: syz [ 736.793081][ T10] usb 1-1: Manufacturer: syz [ 736.793096][ T10] usb 1-1: SerialNumber: syz [ 737.112118][ T10] usb 1-1: config 0 descriptor?? [ 737.143351][ T10] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 737.324098][ T10] ssu100 1-1:0.0: probe with driver ssu100 failed with error -5 [ 738.436906][T10854] ceph: No mds server is up or the cluster is laggy [ 738.748803][T10869] FAULT_INJECTION: forcing a failure. [ 738.748803][T10869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.748841][T10869] CPU: 1 UID: 0 PID: 10869 Comm: syz.1.1466 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 738.748867][T10869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 738.748880][T10869] Call Trace: [ 738.748889][T10869] [ 738.748899][T10869] dump_stack_lvl+0xe8/0x150 [ 738.748938][T10869] should_fail_ex+0x46b/0x600 [ 738.748968][T10869] _copy_from_iter+0x1d3/0x1670 [ 738.749002][T10869] ? trace_kmem_cache_alloc+0x29/0xf0 [ 738.749034][T10869] ? __alloc_skb+0x27d/0x7d0 [ 738.749063][T10869] ? __pfx__copy_from_iter+0x10/0x10 [ 738.749087][T10869] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 738.749119][T10869] ? __alloc_skb+0x27d/0x7d0 [ 738.749154][T10869] ? netlink_sendmsg+0x650/0xb40 [ 738.749180][T10869] ? skb_put+0x11b/0x210 [ 738.749213][T10869] netlink_sendmsg+0x6c0/0xb40 [ 738.749260][T10869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.749290][T10869] ? unwind_get_return_address+0x4d/0x90 [ 738.749317][T10869] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 738.749355][T10869] ____sys_sendmsg+0x94c/0x9c0 [ 738.749395][T10869] ? __pfx_____sys_sendmsg+0x10/0x10 [ 738.749437][T10869] ? import_iovec+0x73/0xa0 [ 738.749471][T10869] ___sys_sendmsg+0x2a5/0x360 [ 738.749515][T10869] ? __pfx____sys_sendmsg+0x10/0x10 [ 738.749586][T10869] ? __fget_files+0x2a/0x420 [ 738.749615][T10869] ? __fget_files+0x3a6/0x420 [ 738.749654][T10869] __x64_sys_sendmsg+0x1c3/0x2a0 [ 738.749689][T10869] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 738.749730][T10869] ? __pfx_ksys_write+0x10/0x10 [ 738.749776][T10869] do_syscall_64+0x14d/0xf80 [ 738.749806][T10869] ? trace_irq_disable+0x3b/0x150 [ 738.749833][T10869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.749856][T10869] ? clear_bhb_loop+0x40/0x90 [ 738.749884][T10869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.749906][T10869] RIP: 0033:0x7f4b45e4c799 [ 738.749928][T10869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.749946][T10869] RSP: 002b:00007f4b440a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 738.749970][T10869] RAX: ffffffffffffffda RBX: 00007f4b460c5fa0 RCX: 00007f4b45e4c799 [ 738.749987][T10869] RDX: 0000000004000000 RSI: 0000200000000740 RDI: 0000000000000003 [ 738.750002][T10869] RBP: 00007f4b440a6090 R08: 0000000000000000 R09: 0000000000000000 [ 738.750017][T10869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.750031][T10869] R13: 00007f4b460c6038 R14: 00007f4b460c5fa0 R15: 00007fffb65149f8 [ 738.750066][T10869] [ 739.638068][T10356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.776433][ T10] usb 1-1: USB disconnect, device number 75 [ 740.638516][T10890] ptrace attach of "./syz-executor exec"[10891] was attempted by "./syz-executor exec"[10890] [ 741.497474][ T10] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 741.655611][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 741.685912][ T10] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 741.685946][ T10] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 741.685972][ T10] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 741.686000][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 741.719113][ T10] usb 1-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 741.719149][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.719172][ T10] usb 1-1: Product: syz [ 741.719189][ T10] usb 1-1: Manufacturer: syz [ 741.719204][ T10] usb 1-1: SerialNumber: syz [ 742.031101][ T10] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 76 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 742.211852][ T5865] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 742.218405][T10894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.219131][T10894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.357988][ T31] usb 1-1: USB disconnect, device number 76 [ 742.361654][ T31] usblp0: removed [ 742.405991][T10356] veth0_vlan: entered promiscuous mode [ 742.431923][ T5865] usb 5-1: Using ep0 maxpacket: 16 [ 742.434856][ T5865] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.434897][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 742.434918][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 742.434934][ T5865] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 742.434952][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 742.436146][ T5865] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 742.436169][ T5865] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 742.436184][ T5865] usb 5-1: Manufacturer: syz [ 742.444692][ T5865] usb 5-1: config 0 descriptor?? [ 742.659710][T10912] Bluetooth: MGMT ver 1.23 [ 742.725100][T10356] veth1_vlan: entered promiscuous mode [ 743.013956][T10356] veth0_macvtap: entered promiscuous mode [ 743.088967][T10356] veth1_macvtap: entered promiscuous mode [ 743.126106][ T5865] rc_core: IR keymap rc-hauppauge not found [ 743.126124][ T5865] Registered IR keymap rc-empty [ 743.126235][ T5865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 743.150434][ T5865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 743.194319][ T5865] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 743.197327][ T5865] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input122 [ 743.268684][ T5865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 743.288081][ T5865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 743.307878][ T5865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 743.326344][ T5865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 743.345246][ T5865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 743.373883][ T5865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 743.393429][ T5865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 743.411880][ T5865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 743.431572][ T5865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 743.450551][ T5865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 743.488429][ T5865] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 743.488450][ T5865] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 743.572539][ T5865] usb 5-1: USB disconnect, device number 70 [ 743.755989][T10356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.805935][T10356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.894844][ T1224] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.916803][ T1224] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.917041][ T1224] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.920984][ T1224] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.700816][T10950] FAULT_INJECTION: forcing a failure. [ 744.700816][T10950] name failslab, interval 1, probability 0, space 0, times 0 [ 744.700857][T10950] CPU: 1 UID: 0 PID: 10950 Comm: syz.4.1484 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 744.700884][T10950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 744.700900][T10950] Call Trace: [ 744.700922][T10950] [ 744.700934][T10950] dump_stack_lvl+0xe8/0x150 [ 744.700974][T10950] should_fail_ex+0x46b/0x600 [ 744.701007][T10950] should_failslab+0xa8/0x100 [ 744.701034][T10950] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 744.701070][T10950] ? __alloc_skb+0x1d0/0x7d0 [ 744.701099][T10950] ? lockdep_hardirqs_on+0x7a/0x110 [ 744.701137][T10950] __alloc_skb+0x1d0/0x7d0 [ 744.701173][T10950] netlink_sendmsg+0x5d4/0xb40 [ 744.701213][T10950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 744.701251][T10950] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 744.701286][T10950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 744.701327][T10950] __sys_sendto+0x67f/0x710 [ 744.701364][T10950] ? __pfx___sys_sendto+0x10/0x10 [ 744.701419][T10950] ? exc_page_fault+0x6a/0xc0 [ 744.701448][T10950] ? do_user_addr_fault+0xc6f/0x1340 [ 744.701482][T10950] __x64_sys_sendto+0xde/0x100 [ 744.701515][T10950] do_syscall_64+0x14d/0xf80 [ 744.701546][T10950] ? trace_irq_disable+0x3b/0x150 [ 744.701574][T10950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.701600][T10950] ? clear_bhb_loop+0x40/0x90 [ 744.701629][T10950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.701652][T10950] RIP: 0033:0x7ff03abbcfce [ 744.701675][T10950] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 744.701720][T10950] RSP: 002b:00007ff038e2be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 744.701746][T10950] RAX: ffffffffffffffda RBX: 00007ff038e2d6c0 RCX: 00007ff03abbcfce [ 744.701765][T10950] RDX: 000000000000001c RSI: 00007ff038e2c000 RDI: 0000000000000005 [ 744.701780][T10950] RBP: 0000000000000000 R08: 00007ff038e2bf04 R09: 000000000000000c [ 744.701795][T10950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 744.701809][T10950] R13: 00007ff038e2bf58 R14: 00007ff038e2c000 R15: 0000000000000000 [ 744.701845][T10950] [ 745.166553][ T6002] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 745.646098][ T6002] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 745.662254][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.663014][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.708286][ T6002] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 745.708350][ T6002] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 745.708376][ T6002] usb 1-1: config 0 interface 0 has no altsetting 0 [ 745.709902][ T6002] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 745.709980][ T6002] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 745.710007][ T6002] usb 1-1: config 0 interface 0 has no altsetting 0 [ 745.711200][ T6002] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 745.711276][ T6002] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 745.711294][ T6002] usb 1-1: config 0 interface 0 has no altsetting 0 [ 745.712621][ T6002] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 745.712679][ T6002] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 745.712704][ T6002] usb 1-1: config 0 interface 0 has no altsetting 0 [ 745.713898][ T6002] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 745.713953][ T6002] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 745.713978][ T6002] usb 1-1: config 0 interface 0 has no altsetting 0 [ 745.716302][ T6002] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 745.716360][ T6002] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 745.716459][ T6002] usb 1-1: config 0 interface 0 has no altsetting 0 [ 745.914497][ T6002] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 745.915401][ T6002] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 745.915433][ T6002] usb 1-1: config 0 interface 0 has no altsetting 0 [ 745.964755][ T6002] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 745.964817][ T6002] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 745.964844][ T6002] usb 1-1: config 0 interface 0 has no altsetting 0 [ 746.005674][ T6002] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 746.005709][ T6002] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 746.005733][ T6002] usb 1-1: Product: syz [ 746.005753][ T6002] usb 1-1: Manufacturer: syz [ 746.005769][ T6002] usb 1-1: SerialNumber: syz [ 746.063797][ T6002] usb 1-1: config 0 descriptor?? [ 746.092771][ T6002] yurex 1-1:0.0: Could not find endpoints [ 746.233047][ T5996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.233073][ T5996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.292051][ T10] usb 1-1: USB disconnect, device number 77 [ 746.833077][ T5784] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 747.796016][ T5784] usb 2-1: Using ep0 maxpacket: 16 [ 747.821075][ T5784] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 747.821112][ T5784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.821134][ T5784] usb 2-1: Product: syz [ 747.821150][ T5784] usb 2-1: Manufacturer: syz [ 747.821166][ T5784] usb 2-1: SerialNumber: syz [ 747.875910][ T5784] usb 2-1: config 0 descriptor?? [ 748.514427][T10971] FAULT_INJECTION: forcing a failure. [ 748.514427][T10971] name failslab, interval 1, probability 0, space 0, times 0 [ 748.514510][T10971] CPU: 0 UID: 0 PID: 10971 Comm: syz.5.1304 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 748.514538][T10971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 748.514552][T10971] Call Trace: [ 748.514560][T10971] [ 748.514570][T10971] dump_stack_lvl+0xe8/0x150 [ 748.514654][T10971] should_fail_ex+0x46b/0x600 [ 748.514677][T10971] should_failslab+0xa8/0x100 [ 748.514694][T10971] kmem_cache_alloc_noprof+0x87/0x680 [ 748.514718][T10971] ? rcu_is_watching+0x15/0xb0 [ 748.514735][T10971] ? security_file_alloc+0x34/0x310 [ 748.514761][T10971] security_file_alloc+0x34/0x310 [ 748.514785][T10971] init_file+0x96/0x2d0 [ 748.514805][T10971] alloc_empty_file+0x6e/0x1d0 [ 748.514825][T10971] path_openat+0x11b/0x38a0 [ 748.514854][T10971] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 748.514876][T10971] ? rcu_preempt_deferred_qs_irqrestore+0x7b9/0xbc0 [ 748.514916][T10971] ? __pfx_path_openat+0x10/0x10 [ 748.514939][T10971] ? is_bpf_text_address+0x292/0x2b0 [ 748.514960][T10971] ? is_bpf_text_address+0x26/0x2b0 [ 748.514984][T10971] ? kernel_text_address+0xa5/0xe0 [ 748.515003][T10971] ? __kernel_text_address+0xd/0x30 [ 748.515021][T10971] ? unwind_get_return_address+0x4d/0x90 [ 748.515036][T10971] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 748.515060][T10971] ? arch_stack_walk+0xfb/0x150 [ 748.515090][T10971] do_file_open+0x23e/0x4a0 [ 748.515117][T10971] ? __pfx_stack_trace_save+0x10/0x10 [ 748.515141][T10971] ? __pfx_do_file_open+0x10/0x10 [ 748.515187][T10971] ? do_open_execat+0xad/0x590 [ 748.515213][T10971] do_open_execat+0x12b/0x590 [ 748.515237][T10971] ? __pfx_do_open_execat+0x10/0x10 [ 748.515268][T10971] alloc_bprm+0x28/0x5c0 [ 748.515295][T10971] do_execveat_common+0x175/0x690 [ 748.515323][T10971] ? do_getname+0x151/0x250 [ 748.515342][T10971] __x64_sys_execveat+0xc7/0xf0 [ 748.515369][T10971] do_syscall_64+0x14d/0xf80 [ 748.515391][T10971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.515408][T10971] ? clear_bhb_loop+0x40/0x90 [ 748.515428][T10971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.515444][T10971] RIP: 0033:0x7f46e07fc799 [ 748.515461][T10971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.515476][T10971] RSP: 002b:00007f46dea35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 748.515493][T10971] RAX: ffffffffffffffda RBX: 00007f46e0a76090 RCX: 00007f46e07fc799 [ 748.515506][T10971] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 748.515518][T10971] RBP: 00007f46dea35090 R08: 0000000000000000 R09: 0000000000000000 [ 748.515529][T10971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.515539][T10971] R13: 00007f46e0a76128 R14: 00007f46e0a76090 R15: 00007fff54310218 [ 748.515572][T10971] [ 750.177913][ T5784] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 750.280072][ T5784] ssu100 2-1:0.0: probe with driver ssu100 failed with error -5 [ 751.119240][ T6074] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 751.804340][ T6074] usb 1-1: Using ep0 maxpacket: 16 [ 751.926076][ T6074] usb 1-1: unable to get BOS descriptor or descriptor too short [ 751.942316][ T6074] usb 1-1: config 9 has an invalid interface number: 62 but max is 0 [ 751.942348][ T6074] usb 1-1: config 9 has no interface number 0 [ 751.942398][ T6074] usb 1-1: config 9 interface 62 altsetting 245 bulk endpoint 0x5 has invalid maxpacket 1024 [ 751.942428][ T6074] usb 1-1: config 9 interface 62 has no altsetting 0 [ 751.997616][ T6074] usb 1-1: New USB device found, idVendor=0424, idProduct=7801, bcdDevice=76.d2 [ 751.997652][ T6074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.997676][ T6074] usb 1-1: Product: syz [ 751.997691][ T6074] usb 1-1: Manufacturer: syz [ 751.997707][ T6074] usb 1-1: SerialNumber: syz [ 752.045576][T10984] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 752.215517][ T10] usb 2-1: USB disconnect, device number 77 [ 752.895065][T10995] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1501'. [ 752.949430][ T6074] usb 1-1: USB disconnect, device number 78 [ 755.476492][T10997] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1501'. [ 755.879093][T11013] ptrace attach of "./syz-executor exec"[11020] was attempted by "./syz-executor exec"[11013] [ 756.176694][ T37] INFO: task syz.3.1063:9617 blocked for more than 143 seconds. [ 756.176722][ T37] Not tainted syzkaller #0 [ 756.176736][ T37] Blocked by coredump. [ 756.176743][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 756.176754][ T37] task:syz.3.1063 state:D stack:23304 pid:9617 tgid:9617 ppid:5797 task_flags:0x40044c flags:0x00080003 [ 756.176850][ T37] Call Trace: [ 756.176859][ T37] [ 756.176873][ T37] __schedule+0x1553/0x5240 [ 756.176914][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 756.176942][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 756.176984][ T37] ? rt_spin_lock+0x1e0/0x400 [ 756.177013][ T37] ? __pfx___schedule+0x10/0x10 [ 756.177056][ T37] ? schedule+0x90/0x360 [ 756.177088][ T37] schedule+0x164/0x360 [ 756.177120][ T37] __fuse_simple_request+0x121f/0x1c60 [ 756.177229][ T37] ? __pfx___fuse_simple_request+0x10/0x10 [ 756.177260][ T37] ? __pfx_autoremove_wake_function+0x10/0x10 [ 756.177384][ T37] ? __pfx_autoremove_wake_function+0x10/0x10 [ 756.177420][ T37] fuse_flush+0x673/0x8b0 [ 756.177524][ T37] ? __pfx_fuse_flush+0x10/0x10 [ 756.177738][ T37] ? fput_close+0x11f/0x240 [ 756.177769][ T37] ? __pfx_fuse_flush+0x10/0x10 [ 756.177791][ T37] filp_flush+0xc0/0x190 [ 756.177815][ T37] filp_close+0x1d/0x40 [ 756.177836][ T37] put_files_struct+0x1bd/0x360 [ 756.177862][ T37] do_exit+0x6c9/0x23c0 [ 756.177883][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 756.177910][ T37] ? __pfx_do_exit+0x10/0x10 [ 756.177925][ T37] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 756.177944][ T37] ? reacquire_held_locks+0x104/0x190 [ 756.178020][ T37] ? rt_spin_lock+0x1e0/0x400 [ 756.178056][ T37] do_group_exit+0x21b/0x2d0 [ 756.178076][ T37] ? rt_spin_unlock+0x160/0x200 [ 756.178096][ T37] get_signal+0x125c/0x1310 [ 756.178135][ T37] arch_do_signal_or_restart+0xbc/0x830 [ 756.178160][ T37] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 756.178188][ T37] ? __fget_files+0x2a/0x420 [ 756.178216][ T37] exit_to_user_mode_loop+0x86/0x480 [ 756.178244][ T37] ? rcu_is_watching+0x15/0xb0 [ 756.178266][ T37] do_syscall_64+0x32d/0xf80 [ 756.178289][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.178307][ T37] ? clear_bhb_loop+0x40/0x90 [ 756.178328][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.178345][ T37] RIP: 0033:0x7f973deec502 [ 756.178361][ T37] RSP: 002b:00007ffd4afb7bf8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 756.178379][ T37] RAX: 00007f973b8b8000 RBX: 00007f973b8b8000 RCX: 00007f973deec502 [ 756.178392][ T37] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007f973b8b8000 [ 756.178403][ T37] RBP: 0000000000000011 R08: 00000000000000dc R09: 0000000000000000 [ 756.178413][ T37] R10: 0000000000000011 R11: 0000000000000206 R12: 0000000000000003 [ 756.178423][ T37] R13: 0000000000000004 R14: 0000000000000000 R15: 00007f973e165fa0 [ 756.178447][ T37] [ 756.178483][ T37] [ 756.178483][ T37] Showing all locks held in the system: [ 756.178494][ T37] 1 lock held by khungtaskd/37: [ 756.178504][ T37] #0: ffffffff8ddcb840 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 756.178561][ T37] 3 locks held by kworker/u8:9/1224: [ 756.178570][ T37] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 756.178615][ T37] #1: ffffc900059c7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 756.178659][ T37] #2: ffffffff8f159ff8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 756.178819][ T37] 2 locks held by getty/5554: [ 756.178829][ T37] #0: ffff888037a620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 756.178892][ T37] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 756.178939][ T37] 3 locks held by syz-executor/5798: [ 756.178963][ T37] 2 locks held by kworker/u8:16/7320: [ 756.178973][ T37] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 756.179017][ T37] #1: ffffc9000e597c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 756.179065][ T37] 1 lock held by syz.4.1470/10891: [ 756.179076][ T37] 2 locks held by syz.1.1501/10997: [ 756.179085][ T37] 1 lock held by syz.0.1505/11012: [ 756.179094][ T37] #0: ffffffff8f159ff8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x36f/0x1e10 [ 756.179138][ T37] 1 lock held by syz.0.1505/11016: [ 756.179148][ T37] #0: ffffffff8f159ff8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x36f/0x1e10 [ 756.179191][ T37] 3 locks held by syz.4.1506/11020: [ 756.179201][ T37] 1 lock held by syz.5.1496/11024: [ 756.179210][ T37] #0: ffff8880737e00e8 (&kvm->slots_lock){+.+.}-{4:4}, at: kvm_vm_ioctl_set_memory_region+0x67/0xe0 [ 756.179258][ T37] 2 locks held by syz.2.1510/11025: [ 756.179268][ T37] [ 756.179272][ T37] ============================================= [ 756.179272][ T37] [ 756.179285][ T37] NMI backtrace for cpu 0 [ 756.179297][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 756.179315][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 756.179326][ T37] Call Trace: [ 756.179334][ T37] [ 756.179341][ T37] dump_stack_lvl+0xe8/0x150 [ 756.179367][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 756.179407][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 756.179432][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 756.179452][ T37] sys_info+0x135/0x170 [ 756.179496][ T37] watchdog+0xfd9/0x1030 [ 756.179525][ T37] ? watchdog+0x21a/0x1030 [ 756.179551][ T37] kthread+0x388/0x470 [ 756.179568][ T37] ? __pfx_watchdog+0x10/0x10 [ 756.179587][ T37] ? __pfx_kthread+0x10/0x10 [ 756.179605][ T37] ret_from_fork+0x51e/0xb90 [ 756.179631][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 756.179653][ T37] ? __switch_to+0xc7d/0x1450 [ 756.179677][ T37] ? __pfx_kthread+0x10/0x10 [ 756.179695][ T37] ret_from_fork_asm+0x1a/0x30 [ 756.179722][ T37] [ 756.179729][ T37] Sending NMI from CPU 0 to CPUs 1: [ 756.179795][ C1] NMI backtrace for cpu 1 [ 756.179812][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 756.179834][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 756.179846][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 756.179875][ C1] Code: be 5d 02 e9 13 c4 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0c 27 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 756.179893][ C1] RSP: 0018:ffffc900001d7e20 EFLAGS: 00000242 [ 756.179911][ C1] RAX: 0000000000c62497 RBX: ffffffff81994bed RCX: 0000000080000001 [ 756.179926][ C1] RDX: 0000000000000001 RSI: ffffffff8d55f1e6 RDI: ffffffff8ba65e00 [ 756.179940][ C1] RBP: ffffc900001d7f10 R08: ffff8880b8933f1b R09: 1ffff110171267e3 [ 756.179955][ C1] R10: dffffc0000000000 R11: ffffed10171267e4 R12: ffffffff8f6a30b0 [ 756.179971][ C1] R13: 1ffff11003957000 R14: 0000000000000001 R15: 0000000000000001 [ 756.179985][ C1] FS: 0000000000000000(0000) GS:ffff88812643f000(0000) knlGS:0000000000000000 [ 756.180001][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 756.180015][ C1] CR2: 00007fdf37e8da08 CR3: 000000000dbba000 CR4: 00000000003526f0 [ 756.180033][ C1] Call Trace: [ 756.180042][ C1] [ 756.180049][ C1] default_idle+0x9/0x20 [ 756.180078][ C1] default_idle_call+0x72/0xb0 [ 756.180107][ C1] do_idle+0x1bd/0x500 [ 756.180130][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 756.180155][ C1] ? __pfx_do_idle+0x10/0x10 [ 756.180182][ C1] cpu_startup_entry+0x43/0x60 [ 756.180205][ C1] start_secondary+0x101/0x110 [ 756.180232][ C1] common_startup_64+0x13e/0x147 [ 756.180261][ C1] [ 756.180800][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 756.180814][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 756.180832][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 756.180842][ T37] Call Trace: [ 756.180849][ T37] [ 756.180856][ T37] vpanic+0x56c/0xa60 [ 756.180885][ T37] ? __pfx_vpanic+0x10/0x10 [ 756.180918][ T37] panic+0xc5/0xd0 [ 756.180942][ T37] ? __pfx_panic+0x10/0x10 [ 756.180971][ T37] ? printk_trigger_flush+0x117/0x180 [ 756.180997][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 756.181024][ T37] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 756.181045][ T37] watchdog+0x1023/0x1030 [ 756.181069][ T37] ? watchdog+0x21a/0x1030 [ 756.181095][ T37] kthread+0x388/0x470 [ 756.181112][ T37] ? __pfx_watchdog+0x10/0x10 [ 756.181131][ T37] ? __pfx_kthread+0x10/0x10 [ 756.181397][ T37] ret_from_fork+0x51e/0xb90 [ 756.181431][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 756.181454][ T37] ? __switch_to+0xc7d/0x1450 [ 756.181478][ T37] ? __pfx_kthread+0x10/0x10 [ 756.181496][ T37] ret_from_fork_asm+0x1a/0x30 [ 756.181531][ T37] [ 756.182147][ T37] Kernel Offset: disabled