last executing test programs: 7m47.945787485s ago: executing program 0 (id=188): r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2014) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000040)={0x300, 0x300, 0x40, 0x1000, 0x4, 0x4, 0x2, 0x1, {0x1, 0xffffff7a, 0x1}, {0x9, 0xbc, 0x1}, {0x7, 0x4}, {0x46, 0xffffffff}, 0x2, 0x40, 0x8, 0x7, 0x0, 0x1, 0xfffffffe, 0x8, 0xf, 0xe6, 0x9, 0x0, 0x18, 0x200, 0x7, 0xc}) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x1000802, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000240)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x3, 'wlc\x00', 0x29, 0xa7e, 0x60}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 7m47.802249164s ago: executing program 0 (id=190): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xaa3a6000) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x72240, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007"], 0x18) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x80000001) (async, rerun: 64) r3 = syz_clone(0x90003080, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) ptrace(0x4206, r3) (async, rerun: 32) fchdir(r0) (async, rerun: 32) tkill(r3, 0x12) (async) ptrace(0x4208, r3) (async, rerun: 64) ptrace$peeksig(0x4209, r3, 0x0, 0x0) (async, rerun: 64) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x440002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_pressure(r4, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000100)={'full', 0x20, 0xf, 0x20, 0x8001}, 0x2f) r7 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) ioctl$EVIOCGBITKEY(r7, 0x40044583, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000002c0)={'team0\x00', @multicast}) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'s526\x00', [0xffc0, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x4, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) (async, rerun: 64) mq_open(&(0x7f0000003b00)='9\x00', 0x40, 0x18b, &(0x7f0000003b40)={0x7a1, 0xb, 0x800000000000000, 0xffffffff}) (async, rerun: 64) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) (async, rerun: 32) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) (rerun: 32) 7m47.571785878s ago: executing program 0 (id=191): syz_usb_connect(0x0, 0x24, &(0x7f0000000800)=ANY=[@ANYBLOB="fcff5002049eb11003040ce87b500102030509021200014900400209041a0700a1933f03"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0xa, 0x1) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000540)=""/194) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f00000004c0)={0x14, &(0x7f00000003c0)={0x20, 0x23, 0x9e, {0x9e, 0x7, "6177b092a05ae56d678a37395a9bbb74dc4275c1b849dbfad0947b1d9beb7d1792a9b95f560be824f08a9500bebe067ca78ce42c341f6c6823da3fb1cc16d3b33cbee824eb87ca156305dc382b3a985629507219bef55976c3167e420a8b7367f586857d104e30b2713db2c76dc2594cd834327a18fbd38bf90fbd3f01f91b105b433fa2e18db9daad00276ee14e522772a9f6622319fe9f7050a7c2"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xca1}}}, &(0x7f0000000cc0)={0x1c, &(0x7f0000000500)={0x40, 0x9, 0x2d, "3ba6cb27cb37c0021656aec8aa70cced9b973576bb709f03cfb0402bcf873e9e9086fd9b82612f8c1edfd3718e"}, &(0x7f0000000840)={0xa1, 0x1, 0x400, "c86b23f0e52672a3bfdc0b2f55e6dac08ba6af25280b5bc819d90cf3657e92a8ea790fec79e8c7f6d62d08bc6639a9c600bfd4e9a5e44ba60c4d10f081a59e6ab3f871a83ee8c09396be01790c6627336c6692da50d5eb98d48f0e066c44294dcdae64a5d263a3e0c14eed225456302003409c378379e6ad9baf3fcee47c9b3eb1790a1852b92b1784d9c5d49ae75aafcac34ba09e36d811f1d43811d7cf668a4416cea8759e710082ac94ef7d439570098b215a1833ded6c900a37387611700af7ef3926375325650748afe9ad7f8e8524966c360da2eb6daf26d15782711d0f8a856a2bb7e91b4c55ff23864e495d8272779f670c87f644508464590da47a149bbd14745f9faf83115d29c46c3392d326a447c92a2fbc21c22c32d789ee1087ecd40bb507ad0cd584f2583393e0b61669fb24db040cef10eea00eff9d1cbed3264abc6c5ea282daefe0b9388277e957dd382c72188671e5b001f41cda12ec8d6ecb0303bc7867d382e757c6df67b63a8686ad88214d864990b29e7f2e9d24dbceebdb3ca2c334604a79764be6e119bfc707f87bfdf9d574ba4462df775260c7be197ffdc5c1efdfc789f4e74dcab9eb67eaf25d1c6108abe77050bb293c1d77a94ff88509fb85ce6183156e4c514df6d72d73f6a98a8ac6f4b4716f7aa9438ea4b64771fa419d09868ac47c2784f7fb247fb7e146574f4d7de5d91a9b48c5819ddb75183d0bf26fb3b4707a003cf4ae364289b1aa5b771593b70fb7e24f45ede863b799d31ee03d3cd72f5ff3dda88d4a698777b5391267c21f9964f26daa296dd5b22edb40f7e3139b9882d976152eacee60df651080701208cb3a607884701a0c368ee932c27fb672f7527a862b96f8511d93b97909f574522dafa009e66dcb854e4c1490baf92a2c88f219cb0d20d91d8639815d24094149718095dd9c4946e18be70807334154c1d52941fa993720ebce7d4c8f5f28c0a7f0b929e2a794d1a24818875a7d2d8ac9a5a61e3b4c51716cc8201374c540b26e615d37f03c558788a2af995af2c863420e2fd515a5ffc36ec02aef8b50ba4d07983172903939681ef701c8665f6a06ccedbd43e2496e33a38cf8461a689279eafcf69b7037fc8d6f78b114cfc07e5e3390ad2760d46a7444a9c53cbe8c8f540e3ea1d100ed2312b4853f60d0756866f595d7ae5fe01ca10d4ccea6d185586787f49637539ab0ebc162b06f04a391dd4bcd276df35bbb2451d560ae9554849bf95a81409b1e087af4062540c65e9ee7cc95c19066105068e060524903b1a999291c160ed89e336b8579d4dc143813ea0a71f3f88f2569817363947d89fce34358eebf4c2e77f80233ef8af5a462d210186ec020d01d3e1b7f3a69661da41dd02948c44333070b4d5ca96ae347d50fba28aa583e41b0036d8004a0997edfad0cc621758245dd6"}, &(0x7f0000000c80)={0x21, 0x0, 0x1, '_'}}) 7m44.481755368s ago: executing program 0 (id=213): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1042, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB='\a\x00'], 0xffdd) 7m44.214701663s ago: executing program 0 (id=217): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0xec0, &(0x7f0000000280)=[{&(0x7f0000000380)="3900000014008157efb0349a2e2125ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582b", 0x39}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="98aba7a1cbec51167d22f9677ddbfd693ad64803aed83644f69b1e9f0d2229888041569749f7f6cd045099bd4e25d6772f6aecd9fe7cb15a4a94aca1b33dc02fe58901ee39c6c2ad9257b1ce826da4a9f4ef1ec0b2f7b5bb20381ea34ea6ccfc64be94b64d078dd1169e4f8534de632e49d507e564381c8eb7445c2599ba312278ee72f6189b6de975c307d17a3419f90c8b177da6c65943749928be63a154a2f5f53b9fddc88efad67ecf5b8ab833588a86d3d14708406787959b134a047f66fdaedf5d30489ec2bcbf0884e01702", @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES16=r1, @ANYRES8=r1], 0x5c}, 0x1, 0x0, 0x0, 0xc040}, 0x41) 7m43.406340275s ago: executing program 0 (id=224): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x8, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc4, 0x8, 0xfe}}}}}]}}]}}, 0x0) (async) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x8, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc4, 0x8, 0xfe}}}}}]}}]}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) (async) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000100)={@val={0xa, 0x10}, @void, @eth={@broadcast, @random="a0f96bdc9609", @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "ee0520", 0x0, 0x2b, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}}}}, 0x3a) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001000001c080008000000020008000900040000001800018014000200776c616e31"], 0x3c}}, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000007c0)=ANY=[@ANYBLOB="400608b9680d01000000192e1fa12e2cdf677546077dece184715d6b3c037a6eae5642c9cdbdb1d767569d44dfc546ac99993b5599852a831bf94939e225e406caddda6751f55dd3ce794aca73bb7bbe25d2294ad00a417aa922f2eb4ba1be04f83f2884267444eb8b8d56b239e1578f8106b8b877442089f8a5d02b81ae370e8cfe8fbab2e0f0dee4f15e4d61f5e51e1e3ad57220b4f6956177c33eff595d5ad91520fb130ab1a3f37bcc49a09281d538ebbe56c26dba7951fdffffffa17d91399de6d44a99cb4c7b4d60f1"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000940)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000540)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000540)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000780)={0x20, 0xe}, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000780)={0x20, 0xe}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000006c0)={0x0, 0x11}, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000006c0)={0x0, 0x11}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r6, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000140)={0x20, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r6, &(0x7f0000000280)={0x14, &(0x7f00000001c0)={0x20, 0xd787fc932cda04cf, 0x51, {0x51, 0x20, "8e73170ccb946a776e8056efe3ad581126883a72d4f6b4711e372cf4f61ec7dce36b43a9418dc454216ac9e1206290455b8f045df680fa762e943e7d073629caaedfa56cce880edbf49e37a5cf2c59"}}, &(0x7f0000000240)={0x0, 0x3, 0x33, @string={0x33, 0x3, "875433c77ac920a3a582fc6783c7c04e8e6a38f88d54e1f28947ccd75e0e45092e7bf7786e140e4251560cdaf0f87f7708"}}}, &(0x7f0000000440)={0x34, &(0x7f00000002c0)={0x20, 0xb, 0x2, "6396"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0xfffffa72}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "0e1bb19369b5b3ab9cdcabcdaf32f4ac3ac82b501cd9ef724da617b757dda5a19684f81c62f3c5d44ca09698002a64"}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x15) ioctl$KVM_HYPERV_EVENTFD(r8, 0x4018aebd, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r8, 0x4018aebd, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) rt_sigqueueinfo(r9, 0x23, &(0x7f00000000c0)={0x8, 0x9, 0x7000000}) (async) rt_sigqueueinfo(r9, 0x23, &(0x7f00000000c0)={0x8, 0x9, 0x7000000}) write(0xffffffffffffffff, &(0x7f0000000440)="2400000058001f000307f4f9002304000a04f55f0500"/36, 0x24) listen(0xffffffffffffffff, 0x5) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 7m43.170711773s ago: executing program 32 (id=224): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x8, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc4, 0x8, 0xfe}}}}}]}}]}}, 0x0) (async) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x8, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc4, 0x8, 0xfe}}}}}]}}]}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) (async) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000100)={@val={0xa, 0x10}, @void, @eth={@broadcast, @random="a0f96bdc9609", @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "ee0520", 0x0, 0x2b, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}}}}, 0x3a) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001000001c080008000000020008000900040000001800018014000200776c616e31"], 0x3c}}, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000007c0)=ANY=[@ANYBLOB="400608b9680d01000000192e1fa12e2cdf677546077dece184715d6b3c037a6eae5642c9cdbdb1d767569d44dfc546ac99993b5599852a831bf94939e225e406caddda6751f55dd3ce794aca73bb7bbe25d2294ad00a417aa922f2eb4ba1be04f83f2884267444eb8b8d56b239e1578f8106b8b877442089f8a5d02b81ae370e8cfe8fbab2e0f0dee4f15e4d61f5e51e1e3ad57220b4f6956177c33eff595d5ad91520fb130ab1a3f37bcc49a09281d538ebbe56c26dba7951fdffffffa17d91399de6d44a99cb4c7b4d60f1"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000940)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000540)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000540)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000780)={0x20, 0xe}, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000780)={0x20, 0xe}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000006c0)={0x0, 0x11}, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000006c0)={0x0, 0x11}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r6, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000140)={0x20, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r6, &(0x7f0000000280)={0x14, &(0x7f00000001c0)={0x20, 0xd787fc932cda04cf, 0x51, {0x51, 0x20, "8e73170ccb946a776e8056efe3ad581126883a72d4f6b4711e372cf4f61ec7dce36b43a9418dc454216ac9e1206290455b8f045df680fa762e943e7d073629caaedfa56cce880edbf49e37a5cf2c59"}}, &(0x7f0000000240)={0x0, 0x3, 0x33, @string={0x33, 0x3, "875433c77ac920a3a582fc6783c7c04e8e6a38f88d54e1f28947ccd75e0e45092e7bf7786e140e4251560cdaf0f87f7708"}}}, &(0x7f0000000440)={0x34, &(0x7f00000002c0)={0x20, 0xb, 0x2, "6396"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0xfffffa72}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "0e1bb19369b5b3ab9cdcabcdaf32f4ac3ac82b501cd9ef724da617b757dda5a19684f81c62f3c5d44ca09698002a64"}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x15) ioctl$KVM_HYPERV_EVENTFD(r8, 0x4018aebd, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r8, 0x4018aebd, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) rt_sigqueueinfo(r9, 0x23, &(0x7f00000000c0)={0x8, 0x9, 0x7000000}) (async) rt_sigqueueinfo(r9, 0x23, &(0x7f00000000c0)={0x8, 0x9, 0x7000000}) write(0xffffffffffffffff, &(0x7f0000000440)="2400000058001f000307f4f9002304000a04f55f0500"/36, 0x24) listen(0xffffffffffffffff, 0x5) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 3m10.071798801s ago: executing program 4 (id=2354): r0 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x2241) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xc, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "000003cefd70f14003556000"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f00000000c0)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7fff, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1, 0xd}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 3m9.925665933s ago: executing program 4 (id=2358): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x34, r1, 0x607, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x460769a9}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}}, 0x0) 3m9.784300167s ago: executing program 4 (id=2359): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x100000000001f, &(0x7f0000000000)=0x3, 0x4) 3m9.671402024s ago: executing program 4 (id=2360): r0 = socket$inet(0x2, 0x3, 0x6) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, 0x0) 3m9.568451402s ago: executing program 4 (id=2361): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3e0, 0x1f8, 0x0, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@dev, @multicast2, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 3m9.366190771s ago: executing program 4 (id=2362): openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000080)) 2m54.203070906s ago: executing program 33 (id=2362): openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000080)) 1m11.258930054s ago: executing program 3 (id=3326): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000001080)={r3, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x8001}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 1m11.165333595s ago: executing program 3 (id=3327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b40)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1m10.969130792s ago: executing program 3 (id=3328): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, 0x0}, 0x48043) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) dup(r0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m10.585928581s ago: executing program 3 (id=3334): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)={0x40, 0x14, 0x1, 0x0, 0x0, {0xa}, [@nested={0x18, 0x95, 0x0, 0x1, [@typed={0x14, 0xb, 0x0, 0x0, @ipv6=@empty}]}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x40}}, 0x20000000) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@redirect_dir_nofollow}, {@nfs_export_on}]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1001) mkdirat(r4, &(0x7f0000000180)='./file0/../file0\x00', 0x0) r5 = semget$private(0x0, 0x7, 0x191) semtimedop(r5, &(0x7f0000000080)=[{0x3, 0xfffd}, {0x3, 0x6, 0x1000}], 0x2, 0x0) semctl$GETNCNT(r5, 0x0, 0xe, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000440)={"3bea2b7c4de2ed611822ed02b558b8ca", 0x0, 0x0, {0x6, 0x563}, {0x4, 0x1}, 0x6, [0x55523cea, 0x7, 0x100000001, 0x5, 0xffffffffffffffff, 0x4, 0x5, 0x7f, 0x6, 0xa1, 0x8, 0xffffffff, 0x5, 0xfff, 0x8, 0x8]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001180)={{r2}, r6, 0x0, @unused=[0x8, 0x7, 0x3, 0x3], @name="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"}) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000380)='./file0/../file0\x00') close(r2) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f00000002c0)="66b9800000c00f326635000800000f30baa000b8990def64600f01c20f0b0f2384f30f5a87ab8666b95806000066b80000000066ba008000000f300f01c966b9800000c00f326635000400000f30", 0x4e}], 0x1, 0x8, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00@\x00', @ANYRES16=r7, @ANYBLOB="200026bd7000ffdbdf25530000000c009900910b000071000000"], 0x20}, 0x1, 0x0, 0x0, 0x40890}, 0x4000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m9.40554947s ago: executing program 3 (id=3354): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, 0x0}, 0x48043) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) dup(r0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m8.654042944s ago: executing program 3 (id=3365): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) accept4(r1, 0x0, 0x0, 0x0) (fail_nth: 4) 1m8.390345724s ago: executing program 34 (id=3365): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) accept4(r1, 0x0, 0x0, 0x0) (fail_nth: 4) 4.64572139s ago: executing program 6 (id=3794): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a88800892f4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) (fail_nth: 11) 4.547920317s ago: executing program 6 (id=3796): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef", 0xa6, 0x5, 0xff}, {&(0x7f0000000100), 0x0, 0x5, 0xffffffff}, {&(0x7f0000000200), 0x0, 0x5, 0x4}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {0x0, 0x0, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f", 0x6}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000340)={0x505f15132580c539, 0x15, 0x5, "d7079980a4"}, &(0x7f0000001200)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000200)={0x40, 0x17}, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r0, 0x8010aebc, &(0x7f0000000300)={0x9000}) ioctl$FBIOGET_VSCREENINFO(r3, 0x4600, &(0x7f0000000880)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.339469516s ago: executing program 2 (id=3797): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) dup(r0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 4.1467579s ago: executing program 2 (id=3799): r0 = fsopen(&(0x7f0000000080)='nfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0xa00000000000000, 0x0) 4.021642126s ago: executing program 2 (id=3800): ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000380)={0x1}) r0 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f0000000380)=[{0x2, 0x3, 0x3000}], 0x1, 0x0) semop(0x0, &(0x7f0000000340)=[{0x2, 0x8001, 0x1000}], 0x1) semop(0x0, &(0x7f0000000300)=[{0x2, 0x0, 0x2000}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.59325876s ago: executing program 2 (id=3803): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x80, 0x610000) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000080)={{0x1, 0x200, 0xcfd0, 0x2, 0x1c000, 0xfac}, 0x3a1, [0x6, 0x540, 0x6, 0x9, 0x4, 0x6, 0x7ff, 0x5, 0x10001, 0x10, 0x7db3, 0x81, 0xf6e, 0xe8c, 0x401, 0x8, 0x8000, 0x9, 0x4, 0x5, 0x400, 0x7fffffff, 0x800, 0x5, 0x80000000, 0x3, 0x7bf, 0x8000, 0x8, 0x6, 0x0, 0xb910, 0x8, 0x0, 0x1ea, 0x6, 0x8, 0x4, 0xff, 0x9, 0x7, 0x80000001, 0x2, 0xd78, 0x1, 0x3, 0x4, 0xc1d, 0x0, 0x0, 0x1000, 0xe, 0x8, 0x5, 0x6, 0x5, 0x2, 0xfff, 0x60d517fd, 0x0, 0x3, 0x9, 0x6, 0x1089, 0x12000, 0xa, 0x3, 0x0, 0x8, 0x1, 0x7, 0xfffffffe, 0x3, 0x80000001, 0x8, 0x10000, 0x0, 0x8, 0x1ff, 0x1, 0x7, 0x2, 0x101, 0x2, 0x3, 0x6f4, 0x5, 0x1, 0x2, 0x401, 0x0, 0x4, 0x4, 0xf175, 0x4, 0x4, 0x7, 0x1, 0xfffff801, 0x9, 0x2, 0xc, 0x6, 0x4, 0x2, 0x0, 0x4a, 0x7e9fc7a0, 0x0, 0x7, 0x8001, 0xe, 0x6, 0x2, 0x7ab, 0x2e8, 0x4, 0x1, 0x0, 0x8, 0xaf, 0x2, 0x2, 0x100, 0x4, 0x1ff, 0x3f, 0xe, 0x3, 0x2, 0xa37a, 0xf0, 0x1, 0x8, 0x8, 0x8, 0x40, 0x72f8, 0x0, 0x10000, 0x3, 0xe, 0x7fff, 0x6, 0xe, 0x1, 0x2, 0x8, 0xfffffffe, 0x6, 0xf, 0x1000, 0x5, 0xffff, 0x7c7, 0xd, 0x7, 0x6, 0x5, 0x7fff, 0x3, 0x2, 0x1, 0x7, 0x8, 0x48, 0x1ff, 0x40, 0x8, 0xffff, 0x6, 0x0, 0x10001, 0xffff00d1, 0x7, 0x0, 0x8000, 0x800, 0x3a2, 0xa4, 0x6, 0xffff95d1, 0x0, 0xc, 0x8000, 0x3, 0x0, 0x0, 0x7fffffff, 0x100, 0x1, 0x0, 0x7ff, 0x3, 0x4c, 0x380, 0xff, 0x5, 0x1, 0x0, 0x0, 0x2, 0x361, 0x8, 0x699, 0x3, 0x6, 0x1, 0x3, 0x3, 0x92, 0x5, 0x3, 0x7, 0x9, 0x7, 0x400, 0xc, 0x8, 0x5, 0x0, 0x2, 0x1, 0xe, 0x3ff, 0x6, 0x8, 0x0, 0x9, 0xff, 0x1000, 0x97, 0x2, 0x2, 0x9, 0xb4f, 0x90000, 0x100, 0x8000, 0x8119, 0x9, 0x5, 0x2, 0x2, 0x81, 0x8, 0x2, 0x1ff, 0x47fe, 0x0, 0x6466, 0x3fff8, 0x8, 0x3, 0x5, 0x3, 0xfffffff9, 0x7, 0x7, 0x46, 0x3, 0x1, 0x1, 0x3, 0x80, 0x6, 0xd, 0x7, 0x8000, 0x1, 0xf, 0xfff, 0x8, 0x81, 0x5, 0x7bed, 0x7fff0000, 0x1ff, 0xfffffff9, 0x4, 0x300000, 0x1, 0x222a, 0xfffffff8, 0x6, 0x10000, 0x5, 0x1, 0x7, 0x40, 0x7, 0xde, 0x1, 0x1, 0x540, 0x743, 0x3, 0x7f, 0x5, 0x8, 0x1, 0xfffffffe, 0x6, 0x4, 0x0, 0x7fff, 0x9, 0x1, 0x3, 0x2aa, 0x101, 0x7fffffff, 0x5, 0xdfb4, 0xb, 0xfffffffd, 0x5, 0x9, 0x9, 0x5, 0x1, 0x4, 0xfffffff9, 0x7, 0x80000000, 0xa9, 0x1000, 0x9, 0x9, 0x6a, 0x9, 0xf5, 0x0, 0x6, 0x401, 0x1, 0x1, 0xffff41ba, 0x7, 0x0, 0x100, 0x5, 0xa38, 0xdf, 0x6, 0x100, 0x80, 0x3, 0x5, 0x0, 0xcd, 0x7f, 0x3ff, 0x3ff, 0xffffffff, 0x0, 0x200, 0xfffff001, 0x8, 0x3ff, 0x9, 0xfffffe00, 0xc2, 0x8, 0x3fc2, 0xb, 0x2, 0x0, 0x10001, 0x917, 0x2, 0x7c98, 0x71, 0x4, 0x30d8, 0x8, 0x10001, 0x3, 0x300, 0x200, 0xb9, 0x7, 0x7, 0x3, 0x1, 0x5, 0x58f5, 0x8, 0x7, 0xc, 0x4, 0x8, 0x2, 0x8, 0x0, 0x9, 0x7, 0x8, 0x7, 0x4, 0x800, 0x7fff, 0x4, 0x9, 0x8, 0x3, 0xf, 0x8, 0x10001, 0x2, 0xffff, 0x200, 0x396, 0x96b, 0xb2c, 0x8, 0x9, 0x4, 0x100, 0x1, 0x0, 0x81, 0xfffffff9, 0x41d4, 0x7, 0xfffff000, 0x0, 0x99c, 0x8, 0x0, 0xfff, 0x7, 0x71, 0xfffffffd, 0x9ef9, 0x6, 0x1, 0x7fffffff, 0xc, 0xfffffffa, 0xffff, 0x10, 0x7f, 0xffff966f, 0xffff, 0x5, 0x80000000, 0x81, 0x73, 0x5, 0xffff068c, 0xfffffff8, 0x5, 0xff, 0x58, 0x6, 0x9, 0x0, 0xfffffffb, 0xffa, 0xef, 0x5, 0xc5, 0x40, 0xfff, 0x3ff, 0x3, 0x1, 0x3, 0x40, 0xffffffff, 0x2, 0xa3, 0x5, 0x3, 0x10, 0x80000001, 0x3, 0x6, 0x40, 0xffff, 0x5, 0xd57d, 0xd, 0x9, 0x5, 0x2, 0x1, 0x401, 0x61ff1ec8, 0x1, 0x1e8e, 0x8, 0x8000, 0x6, 0x7ff, 0x9, 0x800, 0x8, 0xf, 0x7ff, 0x6, 0xfffffffe, 0x4, 0x213719ed, 0x10001, 0x1, 0x5ec79f14, 0x10000000, 0x0, 0x5, 0x46a, 0x3c, 0xe, 0x6, 0x2, 0x1, 0x7f, 0x4, 0x3, 0x7, 0x7fff, 0x1, 0x2, 0x6, 0x100, 0xbb6, 0x1, 0x3, 0x5, 0xfff, 0x4, 0x5, 0x0, 0x5, 0x5, 0x8, 0x0, 0x4, 0x0, 0x3, 0x3, 0x5, 0x5, 0xc, 0x8, 0xfffffff0, 0x65, 0x8, 0x800, 0x8, 0xe, 0x5, 0x7fffffff, 0x0, 0xb7, 0x7ff, 0xf7, 0xd, 0x4, 0x1, 0x4, 0x44b, 0x7, 0x877e, 0x0, 0x491, 0x1, 0x193, 0x0, 0x0, 0x7, 0x9, 0x0, 0x9, 0xc, 0x4, 0x800, 0x9, 0x1, 0x8, 0xffffffff, 0x905, 0xa, 0x4, 0xb, 0x1e, 0xfffffff9, 0x5, 0x8, 0x3, 0x3, 0x8, 0x100, 0x8, 0x10000, 0xffffffff, 0x8, 0xb7, 0xa4, 0x2, 0x9, 0x6, 0xc671, 0x9, 0x7, 0xc, 0x1, 0x5, 0xd8, 0xb489, 0x8, 0x7, 0x101, 0x58, 0x4, 0x6, 0x1, 0x81, 0x80, 0x1, 0x7, 0x4, 0x10001, 0x5, 0x65, 0x80000000, 0xfffffff9, 0x6, 0x80000001, 0x9, 0x9, 0x90, 0x10001, 0x4, 0xbe, 0x6, 0x5, 0x2, 0x80, 0x9, 0x3, 0x6, 0x10, 0x3, 0x27, 0x3, 0xffffffff, 0x9, 0xf3c0, 0xf, 0x101, 0xfff, 0x27, 0x4, 0x2, 0x68a4, 0x89, 0xfffffffa, 0x3e9, 0x7, 0x95b, 0x2, 0x3, 0x101, 0x4d, 0xfffffff7, 0xbf3, 0xb895, 0x9, 0x1, 0x2, 0x81, 0xfffffff8, 0x1, 0x81, 0x8, 0xfb8, 0xd2, 0x9, 0x10, 0x7fffffff, 0x3, 0xffffffff, 0x7, 0x9, 0x5e62, 0x3, 0x9, 0xfffffb44, 0xf, 0x6c93, 0x800, 0x8, 0x1000, 0x9, 0xe7ed, 0x0, 0xb, 0x9, 0x7, 0x1ff, 0x10001, 0x0, 0x9, 0x8, 0x400, 0x5, 0x2875, 0x1, 0x10001, 0x200, 0x100, 0x5, 0xc, 0x8001, 0x0, 0x4, 0x4, 0x8, 0x3, 0x7, 0x8, 0x1, 0x4, 0x8, 0x0, 0x7c3, 0x3, 0x0, 0x5, 0x0, 0x3ba46bff, 0x7, 0x3, 0x2, 0x2, 0x3, 0x4, 0x9, 0x1, 0x1, 0x8, 0x7, 0x0, 0x9, 0x7, 0x1, 0x1, 0xffff, 0x5, 0x1, 0x0, 0x101, 0xffffffff, 0x81, 0x57, 0x0, 0x6, 0x1, 0x3, 0x7fff, 0x798d, 0x3, 0x4, 0x0, 0xfffffffa, 0x2, 0x800, 0x9434, 0x50000, 0x6, 0x23a6, 0x8, 0x8, 0xffff7fff, 0xd4, 0x4, 0x9, 0x0, 0x0, 0x4, 0x9, 0x2, 0xcba, 0xfff, 0x40, 0x7, 0x8, 0x0, 0x6, 0x3, 0x4, 0xcc5a, 0x401, 0x0, 0x7, 0xd, 0x2aa, 0x2, 0x8000, 0x1, 0xb, 0x0, 0x6, 0x1, 0x101, 0x2, 0xf, 0xe67, 0x0, 0x5, 0x2, 0x2, 0x5, 0x4, 0x10001, 0x0, 0x523, 0x3, 0x4, 0x4, 0xfffffffa, 0x0, 0x200000, 0xbe, 0x80000000, 0x0, 0x9, 0xd, 0x2, 0x4e44bfac, 0xe342, 0x7, 0x8, 0x80, 0x80, 0xb, 0x5, 0xa, 0x7, 0x80, 0x800, 0x5, 0x8000, 0x4, 0x8f7, 0x9e, 0x3b7a, 0x480, 0x7, 0x7, 0x2a73, 0xfffffff1, 0x5, 0x401, 0x2, 0x75d, 0x200, 0x6, 0x6, 0x5, 0x1, 0xf331, 0x48000000, 0xa7, 0x9, 0x5231750b, 0x2, 0x77ae, 0xa7, 0x54d6, 0x1, 0x9c, 0x7, 0xd5c, 0xf3adabc, 0x7, 0x7fff, 0x7, 0x3, 0xd5b2, 0x0, 0x2, 0x3, 0x6, 0x7fffffff, 0x3ff, 0x5, 0xc, 0x3, 0x8, 0x0, 0xa, 0x4, 0x7, 0x41, 0x1000, 0x3, 0x10001, 0x10001, 0x7, 0xfffffffd, 0x77f, 0x7, 0x8001, 0x8, 0x8f51, 0x7, 0x8000, 0x80000001, 0x5, 0x6, 0x0, 0x7, 0x4, 0x4, 0x6c, 0x8, 0x7, 0xd34, 0x0, 0x7, 0x2, 0x4, 0x7, 0x101, 0x7fff, 0x10000, 0x200, 0x5c, 0x10001, 0x1ff, 0x58a, 0x6, 0xf, 0x3, 0x7fffffff, 0x100, 0x2, 0x4, 0x9, 0x5, 0x8, 0x3, 0x2, 0x9, 0xa246, 0x9, 0x4, 0x7, 0x6, 0xfffffff7, 0x20, 0x8, 0x17e8, 0x9, 0x9, 0x8, 0x5, 0x0, 0x80, 0x8, 0x7, 0x6, 0x0, 0xfffffe01, 0xd, 0x4, 0x43, 0x0, 0x4, 0x9, 0x5cb, 0x83b, 0x5, 0x3, 0x0, 0x4, 0x1fc, 0x6, 0x19e3, 0x1, 0x80000000, 0x7, 0x9, 0x0, 0x3ff, 0x1, 0x8, 0x7, 0x7fff, 0x7, 0x4, 0x6, 0x40, 0x6, 0xfff, 0x217, 0x7, 0x946, 0x1bc, 0x101, 0x271, 0xffff8000, 0x9, 0x8, 0x4, 0x7, 0x2, 0xffff9c82, 0x5, 0x4e, 0xc4, 0x84, 0x40, 0x21e, 0x8, 0x7, 0x8, 0x17, 0x2, 0xf9b, 0x38c]}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LE_HOST_SUPPORTED={{0x1}}}}, 0x7) 3.528322563s ago: executing program 2 (id=3804): r0 = syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204"], 0x0) msync(&(0x7f0000003000/0x1000)=nil, 0xffffffffdfffcfff, 0x0) syz_usb_connect(0x2, 0xf5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) 2.697645632s ago: executing program 5 (id=3810): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) r3 = socket$kcm(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_channels={0x2ffdb3e722cda0e, 0x8000, 0x8, 0x1, 0x3, 0x8, 0x1000, 0x9, 0x8fb2}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r4, 0xff, 0x1000001, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030300400000fedbdf250c"], 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYRES64=r6, @ANYRESHEX=r5], 0x64}, 0x1, 0x0, 0x0, 0x20000006}, 0x300048c0) 2.592523421s ago: executing program 5 (id=3812): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbff, {{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xffed, 0x0, 0x4e24, 0x3, 0x2, 0x0, 0x20, 0xc, 0x0, 0xee00}, {@in=@empty, 0x20, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x7, 0x20, 0x4, 0x7, 0x4, 0x20000000008, 0x1}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8}, 0xfffffffd, 0x350a, 0xa, 0x4, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x844) syz_usb_connect(0x5, 0x64, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000cb8be7400000000048390102030109025200010000000009044000000e0100000a2406"], 0x0) 1.869792332s ago: executing program 6 (id=3814): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) tkill(r0, 0x12) waitid(0x300000000000000, 0x0, 0x0, 0x2100000a, 0x0) 1.736457871s ago: executing program 6 (id=3816): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000640)={&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x6, @empty, 0x8}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x801) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8042) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r3, 0x8010aebc, &(0x7f0000000080)={0xddd8c000, 0x6000}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000580)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xd000, {}, 0x1, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r5 = openat$audio(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r5, 0x80044dfe, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000001040)='./file1\x00', 0x250942, 0x50) getegid() r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_RESETEP(r6, 0x80045503, &(0x7f0000000040)={0x9, 0x1}) tkill(r0, 0x13) tkill(r0, 0x12) waitid(0x0, 0x0, 0x0, 0x2100000a, 0x0) 1.457276909s ago: executing program 1 (id=3820): r0 = openat$audio1(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) socket(0x14, 0x2, 0x4) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r1, &(0x7f00000000c0)=""/4091, 0xffb) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_proto_private(r2, 0x89ee, &(0x7f0000007880)) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x202000, 0x51, 0x3}, 0x18) open_tree(r3, &(0x7f0000000380)='./file0\x00', 0x100) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000002c0)={0x0, 'pim6reg1\x00', {}, 0x400}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000010c0), 0x60100) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000480), 0x10) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000b0601020000000000000000020000040500010007000000400007800c0019400000000000000006dde73590c3c7c3180900120073797a3100000000080008400000002008000940000000040c00028008000140640101010800094000000001"], 0x64}, 0x1, 0x0, 0x0, 0x2400c0c4}, 0x810) bind$can_raw(r5, &(0x7f00000003c0), 0x10) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000706050000000000000000000001d724"], 0x14}, 0x1, 0x1000000000000}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x1) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000100)=0x3) 1.394197282s ago: executing program 6 (id=3821): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') socket$inet6_tcp(0xa, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) keyctl$negate(0xd, 0x0, 0x6, 0x0) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f020000000000040187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYBLOB='\a'], 0x0) 1.372858065s ago: executing program 1 (id=3822): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a88800892f4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) (fail_nth: 12) 1.293759402s ago: executing program 5 (id=3823): open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlinkat(r1, &(0x7f00000003c0)='./file1\x00', 0x0) 1.222309611s ago: executing program 1 (id=3824): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r2, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r4, 0x0, 0xf3a, 0x0) tee(r3, r7, 0xf3a, 0x4) write$binfmt_elf64(r5, &(0x7f0000000380)=ANY=[], 0x18c6) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r9 = dup(r8) read$FUSE(r9, 0x0, 0x0) write$6lowpan_enable(r9, &(0x7f0000000080)='0', 0x1) r10 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r10, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r11 = socket(0x10, 0x4, 0x1) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r12, 0x29, 0xce, 0x0, &(0x7f0000002940)) r13 = socket$inet(0x2, 0xa, 0x3) writev(r13, &(0x7f00000016c0)=[{&(0x7f0000000040)="4eba15a9608e7849d0d5fac426164659dacef23f722fd9ee75becba2dd5872ec", 0x20}, {&(0x7f00000006c0)="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", 0x1000}], 0x2) setsockopt$inet6_mtu(r11, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xf) write(r2, &(0x7f0000000100)="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", 0x116) 1.007864704s ago: executing program 1 (id=3825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b40)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 886.682365ms ago: executing program 1 (id=3826): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x44040) dup(r0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 638.175837ms ago: executing program 1 (id=3827): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000002c0)={r0, r0, 0xd, 0x0, 0x0, 0x9d, 0x0, 0x2, 0x8, 0x9, 0x1, 0x3, 'syz1\x00'}) ftruncate(r1, 0x7ceb) 580.869135ms ago: executing program 5 (id=3828): r0 = fsopen(&(0x7f0000000080)='nfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0xa00) 528.418899ms ago: executing program 5 (id=3829): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24008090}, 0x40000) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x7c, 0x0, 0x1, 0x70bd28, 0x37, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9ca8, 0x53}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0x49, 0xc5, "6a2de81ec0813e1afe0878ead7bea7bce2bffc8684548705df816f4fb1588cc89d1366ffe52bc6dc2613291aa6cf3e234810bfb59315b214c26678f5d1577b7c103d8004d6"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004881}, 0x0) recvmsg$can_raw(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)}, 0x1021) sendto$packet(r0, &(0x7f0000000000)="0b032200e0ff25000200475400f6a13bb10000a88800892f0200c59e0b57478d92c21b070cd087c20fce53d246f982ad1c2fb386e93215a8a9475adf213b647235e095c65d61cb31cc1e47c7d642889bbbeb2817a905341f0642950fd7ccc3a6b443f5de069a3a957ce994712338878afee36ba361fa58540d41df746f9603e5f46147d4261ab5b054c057c2a565831cab4850977aa441ab937b024e2851c599bb059a792f59", 0xa6, 0x20008004, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x7, 0x6, @broadcast}, 0x14) 361.677994ms ago: executing program 2 (id=3830): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2800002, 0x4082172, 0xffffffffffffffff, 0x1932000) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) io_setup(0x20, &(0x7f0000001140)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020ff050f0222000182830109022400010100000009040000020301020009210005000122000009058103c3b886e76e3ceceb121852ed3394b103ec6160a8940cf51b66b2a3c6138feec7e1564975aacbc7c00c7d9cf8fb01de65e20b222afea086533c7d3cfbc8f7f755b882013b35d9358d099422634450dc5754164a2e16b8af92672f4f9c10c7fb24b288a43ec0caa0d7c7c4ef602c560af0884781cb0e215e25ed6d502545d8efe6b7f64e9821af3cf948b60802cf590fb47a3c26df103da969459036a215e03003a40596e0e4bf958941ad495fc73be1"], 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) close(r0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x2c) 266.999704ms ago: executing program 5 (id=3831): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f000056c000/0x1000)=nil) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58", 0x3}) read(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWOBJ={0x100, 0x12, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_DATA={0xec, 0x4, 0x0, 0x1, [@NFTA_SECMARK_CTX={0x2f, 0x1, 'system_u:object_r:update_modules_exec_t:s0\x00'}, @NFTA_SECMARK_CTX={0x33, 0x1, 'system_u:object_r:unconfined_execmem_exec_t:s0\x00'}, @NFTA_SECMARK_CTX={0x2d, 0x1, 'system_u:object_r:netcontrol_device_t:s0\x00'}, @NFTA_SECMARK_CTX={0x27, 0x1, 'system_u:object_r:tzdata_exec_t:s0\x00'}, @NFTA_SECMARK_CTX={0x2b, 0x1, 'system_u:object_r:ssh_keygen_exec_t:s0\x00'}]}}, @NFT_MSG_NEWRULE={0x148, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_OSF_TTL={0x5, 0x2, 0x9}]}}}]}, @NFTA_RULE_USERDATA={0xb9, 0x7, 0x1, 0x0, "7428505e7eda06cbc02791b0e3462cee60b6596fe7052cc1b9206676850c1ceca71c56a3648bda2dfdd2a770070268378c3cab617ea0fddf9c3f79577ee65e502eb36740bc13c47d12c13854d81211d8701fedd710ae1732676dfea23dbe48d9896960abb93278ff748a64426c92b5fbfad3ab2b26b6ae36435527914857b5a9637bfb97c21786d263dd21b7f08265f44b58bed37b9187613248db25045d1cc69c17b84ae0fdc1bc71d33260a029d777e06ab05d9c"}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x298}, 0x1, 0x0, 0x0, 0x800}, 0x4000814) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x18}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmmsg(r3, &(0x7f000000a0c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x1, 0x8, 0x1, 0x10000}]}) 0s ago: executing program 6 (id=3832): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x200, 0x0, 0x0, 0xa, 0x0, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32f1cc26f7061a74df2cfc06c89fd3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a00", "0b000000000000002e43ac000100000000009b4100", [0x9, 0xa]}}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0xfff, 0x32315241, 0x3, 0x7, [{0x8, 0xd}, {0x8, 0xa}, {0x100000d, 0x9}, {0x5, 0x8}, {0x2, 0x3}, {0x5, 0x4}, {0x4, 0x9}, {0x10001, 0x1800002}], 0x7, 0xd, 0x6, 0x3078182a3427730f, 0x1}}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x8, 0x9, 0x200, 0x7, 0x7, 0xfffffff8, 0xd, 0x81, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000000c0)={r3, 0x1}, 0x8) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0430071b967596bb9be44e80852a51a7ab68416103f30cb86a483e4cd1b830d91dee4b62ad7e1c14a8a37459185ea6d259d44f74d282fba5bd65ffccf425bc78ffaea8dd0541a56e6da8b288cbd8e2a7b276dee542625bf3f98cb4cb6641515484070830d80fa0175524f88fa5a6c197e0d3c26cc983f4d8475a9ae0c600"/141], 0x6) kernel console output (not intermixed with test programs): €Žêº…爷渵䄉뾥襱 [ 515.405143][ T9861] usb 6-1: Manufacturer:  [ 515.405156][ T9861] usb 6-1: SerialNumber: Ó¿ [ 515.873103][ T9861] ftdi_sio 6-1:16.106: FTDI USB Serial Device converter detected [ 515.874799][ T9861] ftdi_sio ttyUSB0: unknown device type: 0x7a98 [ 515.913237][ T9861] ftdi_sio 6-1:16.234: FTDI USB Serial Device converter detected [ 515.915299][ T9861] ftdi_sio ttyUSB1: unknown device type: 0x7a98 [ 515.938501][ T9861] ftdi_sio 6-1:16.3: FTDI USB Serial Device converter detected [ 515.949712][ T9861] ftdi_sio ttyUSB2: unknown device type: 0x7a98 [ 515.950151][T14942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3287'. [ 515.980414][ T9861] ftdi_sio 6-1:16.120: FTDI USB Serial Device converter detected [ 515.991582][ T9861] ftdi_sio ttyUSB3: unknown device type: 0x7a98 [ 516.005274][ T9861] usb 6-1: USB disconnect, device number 12 [ 516.019747][ T9861] ftdi_sio 6-1:16.106: device disconnected [ 516.051152][ T9861] ftdi_sio 6-1:16.234: device disconnected [ 516.058276][ T9861] ftdi_sio 6-1:16.3: device disconnected [ 516.069943][T14944] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3288'. [ 516.098986][ T9861] ftdi_sio 6-1:16.120: device disconnected [ 516.219275][T14948] FAULT_INJECTION: forcing a failure. [ 516.219275][T14948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.219307][T14948] CPU: 0 UID: 0 PID: 14948 Comm: syz.3.3290 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 516.219331][T14948] Tainted: [L]=SOFTLOCKUP [ 516.219338][T14948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 516.219347][T14948] Call Trace: [ 516.219354][T14948] [ 516.219361][T14948] dump_stack_lvl+0xe8/0x150 [ 516.219385][T14948] should_fail_ex+0x46b/0x600 [ 516.219413][T14948] _copy_from_iter+0x1d3/0x1670 [ 516.219438][T14948] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 516.219470][T14948] ? __pfx__copy_from_iter+0x10/0x10 [ 516.219501][T14948] ? dev_get_by_index+0x22/0x2f0 [ 516.219517][T14948] ? dev_get_by_index+0x22/0x2f0 [ 516.219540][T14948] packet_sendmsg+0x2e26/0x4fd0 [ 516.219561][T14948] ? aa_label_sk_perm+0x532/0x6e0 [ 516.219592][T14948] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 516.219618][T14948] ? __lock_acquire+0x6b5/0x2d10 [ 516.219646][T14948] ? __lock_acquire+0x6b5/0x2d10 [ 516.219679][T14948] ? __pfx_packet_sendmsg+0x10/0x10 [ 516.219700][T14948] ? aa_sk_perm+0x703/0x950 [ 516.219730][T14948] ? __pfx_aa_sk_perm+0x10/0x10 [ 516.219751][T14948] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 516.219775][T14948] ? aa_sock_msg_perm+0x122/0x200 [ 516.219793][T14948] ? __pfx_packet_sendmsg+0x10/0x10 [ 516.219808][T14948] sock_sendmsg_nosec+0x112/0x150 [ 516.219829][T14948] __sys_sendto+0x402/0x590 [ 516.219856][T14948] ? __pfx___sys_sendto+0x10/0x10 [ 516.219900][T14948] ? ksys_write+0x248/0x270 [ 516.219922][T14948] ? __pfx_ksys_write+0x10/0x10 [ 516.219946][T14948] __x64_sys_sendto+0xde/0x100 [ 516.219968][T14948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.219987][T14948] do_syscall_64+0x15f/0x560 [ 516.220009][T14948] ? trace_irq_disable+0x3b/0x140 [ 516.220028][T14948] ? clear_bhb_loop+0x40/0x90 [ 516.220049][T14948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.220066][T14948] RIP: 0033:0x7f2a052bce59 [ 516.220088][T14948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.220103][T14948] RSP: 002b:00007f2a03516028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 516.220123][T14948] RAX: ffffffffffffffda RBX: 00007f2a05535fa0 RCX: 00007f2a052bce59 [ 516.220135][T14948] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000003 [ 516.220147][T14948] RBP: 00007f2a03516090 R08: 0000200000000140 R09: 0000000000000014 [ 516.220158][T14948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.220169][T14948] R13: 00007f2a05536038 R14: 00007f2a05535fa0 R15: 00007ffc1d0d1a68 [ 516.220197][T14948] [ 516.752076][T14960] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3296'. [ 516.889445][T14965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3298'. [ 517.106444][T14973] __nla_validate_parse: 1 callbacks suppressed [ 517.106460][T14973] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3300'. [ 517.575595][T14994] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3309'. [ 518.252223][T15019] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3320'. [ 519.122727][T15035] FAULT_INJECTION: forcing a failure. [ 519.122727][T15035] name failslab, interval 1, probability 0, space 0, times 0 [ 519.122760][T15035] CPU: 1 UID: 0 PID: 15035 Comm: syz.5.3325 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 519.122784][T15035] Tainted: [L]=SOFTLOCKUP [ 519.122790][T15035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 519.122801][T15035] Call Trace: [ 519.122807][T15035] [ 519.122815][T15035] dump_stack_lvl+0xe8/0x150 [ 519.122841][T15035] should_fail_ex+0x46b/0x600 [ 519.122879][T15035] should_failslab+0xa8/0x100 [ 519.122901][T15035] __kmalloc_noprof+0xdf/0x7b0 [ 519.122919][T15035] ? kfree+0x4d/0x6c0 [ 519.122934][T15035] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 519.122959][T15035] tomoyo_realpath_from_path+0xe3/0x5d0 [ 519.122978][T15035] ? tomoyo_domain+0xd7/0x130 [ 519.122999][T15035] ? tomoyo_path_number_perm+0x219/0x630 [ 519.123023][T15035] tomoyo_path_number_perm+0x246/0x630 [ 519.123048][T15035] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 519.123070][T15035] ? __lock_acquire+0x6b5/0x2d10 [ 519.123092][T15035] ? do_raw_spin_lock+0x12b/0x2f0 [ 519.123137][T15035] ? __fget_files+0x2a/0x420 [ 519.123157][T15035] ? __fget_files+0x2a/0x420 [ 519.123172][T15035] ? __fget_files+0x3a6/0x420 [ 519.123188][T15035] ? __fget_files+0x2a/0x420 [ 519.123207][T15035] security_file_ioctl+0xc3/0x2a0 [ 519.123231][T15035] __se_sys_ioctl+0x47/0x170 [ 519.123252][T15035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.123270][T15035] do_syscall_64+0x15f/0x560 [ 519.123291][T15035] ? trace_irq_disable+0x3b/0x140 [ 519.123310][T15035] ? clear_bhb_loop+0x40/0x90 [ 519.123332][T15035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.123349][T15035] RIP: 0033:0x7f32b311ce59 [ 519.123364][T15035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.123379][T15035] RSP: 002b:00007f32b1376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 519.123397][T15035] RAX: ffffffffffffffda RBX: 00007f32b3395fa0 RCX: 00007f32b311ce59 [ 519.123410][T15035] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 519.123421][T15035] RBP: 00007f32b1376090 R08: 0000000000000000 R09: 0000000000000000 [ 519.123431][T15035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.123441][T15035] R13: 00007f32b3396038 R14: 00007f32b3395fa0 R15: 00007ffc578f6338 [ 519.123470][T15035] [ 519.123477][T15035] ERROR: Out of memory at tomoyo_realpath_from_path. [ 519.457274][T15044] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3329'. [ 519.744793][T15054] netlink: 'syz.3.3334': attribute type 11 has an invalid length. [ 519.749423][T15054] overlayfs: missing 'lowerdir' [ 520.208959][T15071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3340'. [ 520.792690][T15093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3351'. [ 521.130572][T15108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3359'. [ 521.790325][T15126] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3367'. [ 522.169465][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 522.266768][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 522.294137][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 522.307032][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 522.311330][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 522.350875][ T9862] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 522.506541][ T9862] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 522.506568][ T9862] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 522.524791][ T9862] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 522.524817][ T9862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.524835][ T9862] usb 6-1: Product: syz [ 522.524847][ T9862] usb 6-1: Manufacturer: syz [ 522.524860][ T9862] usb 6-1: SerialNumber: syz [ 522.540875][ T9862] usb 6-1: config 0 descriptor?? [ 522.557792][ T9862] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 523.474561][T15160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3377'. [ 523.559452][ T9861] usb 6-1: USB disconnect, device number 13 [ 523.666369][T15167] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3379'. [ 524.243918][T15134] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.244296][T15134] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.244543][T15134] bridge_slave_0: entered allmulticast mode [ 524.247670][T15134] bridge_slave_0: entered promiscuous mode [ 524.252002][T15134] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.252340][T15134] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.252565][T15134] bridge_slave_1: entered allmulticast mode [ 524.255635][T15134] bridge_slave_1: entered promiscuous mode [ 524.403273][T15134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.408831][T15134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.430762][ T5626] Bluetooth: hci0: command tx timeout [ 524.533761][T15189] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3387'. [ 524.562852][T15191] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3388'. [ 524.874859][T15134] team0: Port device team_slave_0 added [ 524.879068][T15134] team0: Port device team_slave_1 added [ 524.940108][T15134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.940122][T15134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.940147][T15134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.949151][T15134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.949164][T15134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.949188][T15134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.201104][T15207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3396'. [ 525.291992][T15134] hsr_slave_0: entered promiscuous mode [ 525.296242][T15134] hsr_slave_1: entered promiscuous mode [ 525.299616][T15134] debugfs: 'hsr0' already exists in 'hsr' [ 525.299639][T15134] Cannot create hsr debugfs directory [ 525.433692][T15212] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3398'. [ 526.164232][T15233] gfs2: error -5 reading superblock [ 526.224453][T15236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3406'. [ 526.510538][ T5626] Bluetooth: hci0: command tx timeout [ 526.546613][T15244] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3410'. [ 526.546632][T15244] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3410'. [ 526.750696][ T9861] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 526.830521][T15134] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 526.905540][ T9861] usb 3-1: unable to get BOS descriptor or descriptor too short [ 526.907381][ T9861] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.907434][ T9861] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 526.914822][ T9861] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 526.914847][ T9861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.914863][ T9861] usb 3-1: Product: syz [ 526.914875][ T9861] usb 3-1: Manufacturer: syz [ 526.914888][ T9861] usb 3-1: SerialNumber: syz [ 526.978603][T15134] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 526.988946][T15134] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 527.032393][T15134] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 527.037987][T15134] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 527.086745][T15134] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 527.088941][T15134] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 527.131748][T15134] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 527.457456][T15261] FAULT_INJECTION: forcing a failure. [ 527.457456][T15261] name failslab, interval 1, probability 0, space 0, times 0 [ 527.457491][T15261] CPU: 1 UID: 0 PID: 15261 Comm: syz.5.3415 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 527.457515][T15261] Tainted: [L]=SOFTLOCKUP [ 527.457522][T15261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 527.457532][T15261] Call Trace: [ 527.457539][T15261] [ 527.457547][T15261] dump_stack_lvl+0xe8/0x150 [ 527.457569][T15261] should_fail_ex+0x46b/0x600 [ 527.457592][T15261] should_failslab+0xa8/0x100 [ 527.457608][T15261] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 527.457622][T15261] ? __alloc_skb+0x1d0/0x7d0 [ 527.457636][T15261] ? lockdep_hardirqs_on+0x7a/0x110 [ 527.457656][T15261] __alloc_skb+0x1d0/0x7d0 [ 527.457670][T15261] ? __might_fault+0xaf/0x130 [ 527.457685][T15261] alloc_skb_with_frags+0xc8/0x760 [ 527.457710][T15261] sock_alloc_send_pskb+0x884/0x9a0 [ 527.457733][T15261] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 527.457768][T15261] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 527.457790][T15261] ? dev_get_by_index+0x22/0x2f0 [ 527.457802][T15261] ? dev_get_by_index+0x22/0x2f0 [ 527.457819][T15261] packet_sendmsg+0x3167/0x4fd0 [ 527.457836][T15261] ? aa_label_sk_perm+0x532/0x6e0 [ 527.457862][T15261] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 527.457883][T15261] ? __lock_acquire+0x6b5/0x2d10 [ 527.457906][T15261] ? __lock_acquire+0x6b5/0x2d10 [ 527.457933][T15261] ? __pfx_packet_sendmsg+0x10/0x10 [ 527.457949][T15261] ? aa_sk_perm+0x703/0x950 [ 527.457971][T15261] ? __pfx_aa_sk_perm+0x10/0x10 [ 527.457988][T15261] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 527.458007][T15261] ? aa_sock_msg_perm+0x122/0x200 [ 527.458022][T15261] ? __pfx_packet_sendmsg+0x10/0x10 [ 527.458034][T15261] sock_sendmsg_nosec+0x112/0x150 [ 527.458051][T15261] __sys_sendto+0x402/0x590 [ 527.458072][T15261] ? __pfx___sys_sendto+0x10/0x10 [ 527.458105][T15261] ? ksys_write+0x248/0x270 [ 527.458124][T15261] ? __pfx_ksys_write+0x10/0x10 [ 527.458143][T15261] __x64_sys_sendto+0xde/0x100 [ 527.458160][T15261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.458175][T15261] do_syscall_64+0x15f/0x560 [ 527.458192][T15261] ? trace_irq_disable+0x3b/0x140 [ 527.458208][T15261] ? clear_bhb_loop+0x40/0x90 [ 527.458225][T15261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.458241][T15261] RIP: 0033:0x7f32b311ce59 [ 527.458257][T15261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.458270][T15261] RSP: 002b:00007f32b1376028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 527.458287][T15261] RAX: ffffffffffffffda RBX: 00007f32b3395fa0 RCX: 00007f32b311ce59 [ 527.458296][T15261] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000003 [ 527.458304][T15261] RBP: 00007f32b1376090 R08: 0000200000000140 R09: 0000000000000014 [ 527.458315][T15261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.458322][T15261] R13: 00007f32b3396038 R14: 00007f32b3395fa0 R15: 00007ffc578f6338 [ 527.458342][T15261] [ 527.908982][T15134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.049296][T15267] sg_write: process 622 (syz.5.3418) changed security contexts after opening file descriptor, this is not allowed. [ 528.181436][T15134] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.201434][ T2305] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.201581][ T2305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.234069][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.234196][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.497338][ T9861] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 528.497716][ T9861] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 528.497729][ T9861] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 528.497744][ T9861] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 528.497845][ T9861] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 528.497863][ T9861] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 528.497879][ T9861] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 528.565171][ T9861] usb 3-1: failed to enable PITCH for EP 0x82 [ 528.592958][ T5626] Bluetooth: hci0: command tx timeout [ 528.663122][ T9861] usb 3-1: USB disconnect, device number 72 [ 528.786833][T12283] udevd[12283]: setting mode of /dev/bus/usb/003/072 to 020664 failed: No such file or directory [ 528.786984][T12283] udevd[12283]: setting owner of /dev/bus/usb/003/072 to uid=0, gid=0 failed: No such file or directory [ 528.862759][T12552] udevd[12552]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 529.195088][T15286] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3422'. [ 529.195111][T15286] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3422'. [ 529.695279][T15134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.402557][T15134] veth0_vlan: entered promiscuous mode [ 530.437928][T15134] veth1_vlan: entered promiscuous mode [ 530.528973][T15322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3434'. [ 530.528997][T15322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3434'. [ 530.588486][T15134] veth0_macvtap: entered promiscuous mode [ 530.619479][T15134] veth1_macvtap: entered promiscuous mode [ 530.670411][ T5626] Bluetooth: hci0: command tx timeout [ 530.701631][T15134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.733659][ T5608] usb 2-1: new low-speed USB device number 101 using dummy_hcd [ 530.778727][T15134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.805657][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.807584][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.807622][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.807654][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.862789][ T5608] usb 2-1: device descriptor read/64, error -71 [ 531.182810][ T5608] usb 2-1: new low-speed USB device number 102 using dummy_hcd [ 531.383543][ T5608] usb 2-1: device descriptor read/64, error -71 [ 531.549297][ T5608] usb usb2-port1: attempt power cycle [ 532.013309][ T5608] usb 2-1: new low-speed USB device number 103 using dummy_hcd [ 532.036050][ T5608] usb 2-1: device descriptor read/8, error -71 [ 532.340373][ T5608] usb 2-1: new low-speed USB device number 104 using dummy_hcd [ 532.372329][ T5608] usb 2-1: device descriptor read/8, error -71 [ 532.488549][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.488567][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.491259][ T5608] usb usb2-port1: unable to enumerate USB device [ 532.656046][T15352] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3444'. [ 532.664185][ T3385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.664202][ T3385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.892263][T15356] hfsplus: unable to find HFS+ superblock [ 533.667443][T15379] FAULT_INJECTION: forcing a failure. [ 533.667443][T15379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.667477][T15379] CPU: 1 UID: 0 PID: 15379 Comm: syz.1.3455 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 533.667502][T15379] Tainted: [L]=SOFTLOCKUP [ 533.667508][T15379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 533.667518][T15379] Call Trace: [ 533.667526][T15379] [ 533.667533][T15379] dump_stack_lvl+0xe8/0x150 [ 533.667559][T15379] should_fail_ex+0x46b/0x600 [ 533.667588][T15379] _copy_to_user+0x31/0xb0 [ 533.667609][T15379] simple_read_from_buffer+0xe1/0x170 [ 533.667640][T15379] proc_fail_nth_read+0x1be/0x230 [ 533.667663][T15379] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 533.667685][T15379] ? rw_verify_area+0x2ac/0x4e0 [ 533.667704][T15379] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 533.667724][T15379] vfs_read+0x212/0xa80 [ 533.667751][T15379] ? __pfx_vfs_read+0x10/0x10 [ 533.667772][T15379] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 533.667798][T15379] ? lockdep_hardirqs_on+0x7a/0x110 [ 533.667820][T15379] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 533.667842][T15379] ? mutex_lock_nested+0x152/0x1d0 [ 533.667859][T15379] ? fdget_pos+0x252/0x320 [ 533.667884][T15379] ksys_read+0x156/0x270 [ 533.667906][T15379] ? __pfx_ksys_read+0x10/0x10 [ 533.667934][T15379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.667953][T15379] do_syscall_64+0x15f/0x560 [ 533.667975][T15379] ? trace_irq_disable+0x3b/0x140 [ 533.667994][T15379] ? clear_bhb_loop+0x40/0x90 [ 533.668015][T15379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.668033][T15379] RIP: 0033:0x7fb92883d68e [ 533.668048][T15379] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 533.668063][T15379] RSP: 002b:00007fb926ad5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 533.668082][T15379] RAX: ffffffffffffffda RBX: 00007fb926ad66c0 RCX: 00007fb92883d68e [ 533.668110][T15379] RDX: 000000000000000f RSI: 00007fb926ad60a0 RDI: 0000000000000004 [ 533.668121][T15379] RBP: 00007fb926ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 533.668132][T15379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.668143][T15379] R13: 00007fb928af6038 R14: 00007fb928af5fa0 R15: 00007fff0cfb5ef8 [ 533.668172][T15379] [ 534.084559][T15390] FAULT_INJECTION: forcing a failure. [ 534.084559][T15390] name failslab, interval 1, probability 0, space 0, times 0 [ 534.084593][T15390] CPU: 1 UID: 0 PID: 15390 Comm: syz.6.3460 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 534.084618][T15390] Tainted: [L]=SOFTLOCKUP [ 534.084624][T15390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 534.084634][T15390] Call Trace: [ 534.084641][T15390] [ 534.084648][T15390] dump_stack_lvl+0xe8/0x150 [ 534.084674][T15390] should_fail_ex+0x46b/0x600 [ 534.084701][T15390] should_failslab+0xa8/0x100 [ 534.084723][T15390] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 534.084743][T15390] ? __alloc_skb+0x1d0/0x7d0 [ 534.084762][T15390] ? lockdep_hardirqs_on+0x7a/0x110 [ 534.084790][T15390] __alloc_skb+0x1d0/0x7d0 [ 534.084815][T15390] netlink_sendmsg+0x5d4/0xb40 [ 534.084848][T15390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.084873][T15390] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 534.084894][T15390] ? __pfx_aa_file_perm+0x10/0x10 [ 534.084912][T15390] ? aa_sock_msg_perm+0x122/0x200 [ 534.084929][T15390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.084951][T15390] sock_sendmsg_nosec+0x112/0x150 [ 534.084971][T15390] sock_write_iter+0x308/0x410 [ 534.084991][T15390] ? __pfx_sock_write_iter+0x10/0x10 [ 534.085029][T15390] vfs_write+0x629/0xba0 [ 534.085057][T15390] ? __pfx_vfs_write+0x10/0x10 [ 534.085086][T15390] ? __fget_files+0x2a/0x420 [ 534.085112][T15390] ksys_write+0x156/0x270 [ 534.085136][T15390] ? __pfx_ksys_write+0x10/0x10 [ 534.085161][T15390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.085180][T15390] do_syscall_64+0x15f/0x560 [ 534.085207][T15390] ? trace_irq_disable+0x3b/0x140 [ 534.085226][T15390] ? clear_bhb_loop+0x40/0x90 [ 534.085247][T15390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.085264][T15390] RIP: 0033:0x7f5a66cfce59 [ 534.085280][T15390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.085310][T15390] RSP: 002b:00007f5a64f4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 534.085329][T15390] RAX: ffffffffffffffda RBX: 00007f5a66f75fa0 RCX: 00007f5a66cfce59 [ 534.085343][T15390] RDX: 0000000000000029 RSI: 00002000000002c0 RDI: 0000000000000006 [ 534.085354][T15390] RBP: 00007f5a64f4e090 R08: 0000000000000000 R09: 0000000000000000 [ 534.085365][T15390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.085376][T15390] R13: 00007f5a66f76038 R14: 00007f5a66f75fa0 R15: 00007ffc9cfcb048 [ 534.085404][T15390] [ 534.810199][ T37] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 534.810411][ T5608] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 534.970776][ T5791] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 534.996547][ T5608] usb 3-1: unable to get BOS descriptor or descriptor too short [ 534.998997][ T37] usb 6-1: not running at top speed; connect to a high speed hub [ 534.999492][ T5608] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.999511][ T5608] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 534.999554][ T5608] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 534.999812][ T5608] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 535.000611][ T37] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x1 has invalid maxpacket 624, setting to 64 [ 535.000639][ T37] usb 6-1: config 1 interface 0 has no altsetting 0 [ 535.001690][ T5608] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 535.001718][ T5608] usb 3-1: config 1 interface 1 has no altsetting 0 [ 535.020352][ T37] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 535.020376][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.026003][ T37] usb 6-1: Product: syz [ 535.026019][ T37] usb 6-1: Manufacturer: syz [ 535.026030][ T37] usb 6-1: SerialNumber: syz [ 535.062714][ T5608] usb 3-1: string descriptor 0 read error: -22 [ 535.062848][ T5608] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 535.062870][ T5608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.111706][ T5791] usb 2-1: device descriptor read/64, error -71 [ 535.198851][T15409] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 535.350054][ T5791] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 535.408748][ T37] usblp0: Disabling reads from problematic bidirectional printer [ 535.427602][ T37] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 4 proto 1 vid 0x03F0 pid 0x0004 [ 535.446711][ T37] usb 6-1: USB disconnect, device number 14 [ 535.470882][ T37] usblp0: removed [ 535.480878][ T5791] usb 2-1: device descriptor read/64, error -71 [ 535.585211][T15411] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3467'. [ 535.591456][ T5791] usb usb2-port1: attempt power cycle [ 535.980274][ T5791] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 536.000662][ T5791] usb 2-1: device descriptor read/8, error -71 [ 536.190227][ T5608] usb 3-1: 2:0: failed to get current value for ch 1 (-71) [ 536.240491][ T5791] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 536.260037][ T9862] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 536.260726][ T5791] usb 2-1: device descriptor read/8, error -71 [ 536.371410][ T5791] usb usb2-port1: unable to enumerate USB device [ 536.387877][ T5608] usb 3-1: USB disconnect, device number 73 [ 536.390223][ T9862] usb 7-1: device descriptor read/64, error -71 [ 536.630279][ T9862] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 536.762059][ T9862] usb 7-1: device descriptor read/64, error -71 [ 536.870287][ T9862] usb usb7-port1: attempt power cycle [ 536.979952][ T9861] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 537.109909][ T9861] usb 6-1: device descriptor read/64, error -71 [ 537.239986][ T9862] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 537.264396][ T9862] usb 7-1: device descriptor read/8, error -71 [ 537.349961][ T9861] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 537.479909][ T9861] usb 6-1: device descriptor read/64, error -71 [ 537.499924][ T9862] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 537.520733][ T9862] usb 7-1: device descriptor read/8, error -71 [ 537.590283][ T9861] usb usb6-port1: attempt power cycle [ 537.631833][ T9862] usb usb7-port1: unable to enumerate USB device [ 537.929959][ T9861] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 537.951794][ T9861] usb 6-1: device descriptor read/8, error -71 [ 538.189940][ T9861] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 538.211805][ T9861] usb 6-1: device descriptor read/8, error -71 [ 538.320321][ T9861] usb usb6-port1: unable to enumerate USB device [ 538.990658][ T9861] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 539.149907][ T9861] usb 2-1: Using ep0 maxpacket: 16 [ 539.155632][ T9861] usb 2-1: config index 0 descriptor too short (expected 37359, got 202) [ 539.155655][ T9861] usb 2-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 539.155674][ T9861] usb 2-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 539.155690][ T9861] usb 2-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 539.159307][ T9861] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 539.159332][ T9861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.159350][ T9861] usb 2-1: Product: syz [ 539.159363][ T9861] usb 2-1: Manufacturer: syz [ 539.159376][ T9861] usb 2-1: SerialNumber: syz [ 539.231873][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 539.269336][ T9861] usb 2-1: 0:2 : does not exist [ 539.460903][T15449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.463478][T15449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.515855][ T9861] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 539.672174][ T9861] usb 2-1: USB disconnect, device number 109 [ 539.753854][T12283] udevd[12283]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 539.914441][T15429] kexec: Could not allocate control_code_buffer [ 540.161858][ T9862] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 540.311195][ T9862] usb 3-1: Using ep0 maxpacket: 32 [ 540.317483][ T9862] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 540.317515][ T9862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.317535][ T9862] usb 3-1: Product: syz [ 540.317554][ T9862] usb 3-1: Manufacturer: syz [ 540.317568][ T9862] usb 3-1: SerialNumber: syz [ 540.372221][ T9862] usb 3-1: config 0 descriptor?? [ 540.639028][ T9862] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 074 [ 541.541264][ T9862] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 541.587761][T15482] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 541.600499][T15500] overlayfs: maximum fs stacking depth exceeded [ 541.608596][ T5791] usb 3-1: USB disconnect, device number 74 [ 541.714987][ T9862] usb 2-1: config 34 has an invalid interface number: 116 but max is 0 [ 541.715014][ T9862] usb 2-1: config 34 has no interface number 0 [ 541.715053][ T9862] usb 2-1: config 34 interface 116 has no altsetting 0 [ 541.717093][ T9862] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=32.4c [ 541.717117][ T9862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.717126][ T9862] usb 2-1: Product: syz [ 541.717133][ T9862] usb 2-1: Manufacturer: syz [ 541.717140][ T9862] usb 2-1: SerialNumber: syz [ 542.600184][T15511] xt_policy: neither incoming nor outgoing policy selected [ 542.657832][ T9862] comedi comedi5: could not set alternate setting 3 in high speed [ 542.657855][ T9862] usbdux 2-1:34.116: driver 'usbdux' failed to auto-configure device. [ 542.690869][ T9862] usbdux 2-1:34.116: probe with driver usbdux failed with error -71 [ 542.702060][ T9862] usb 2-1: USB disconnect, device number 110 [ 542.856826][T15519] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3511'. [ 543.221784][T15536] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3517'. [ 543.306103][T15540] FAULT_INJECTION: forcing a failure. [ 543.306103][T15540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.306142][T15540] CPU: 0 UID: 0 PID: 15540 Comm: syz.6.3519 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 543.306164][T15540] Tainted: [L]=SOFTLOCKUP [ 543.306169][T15540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 543.306178][T15540] Call Trace: [ 543.306185][T15540] [ 543.306191][T15540] dump_stack_lvl+0xe8/0x150 [ 543.306214][T15540] should_fail_ex+0x46b/0x600 [ 543.306240][T15540] _copy_from_user+0x2d/0xb0 [ 543.306258][T15540] ___sys_sendmsg+0x1c6/0x360 [ 543.306278][T15540] ? __lock_acquire+0x6b5/0x2d10 [ 543.306296][T15540] ? __pfx____sys_sendmsg+0x10/0x10 [ 543.306337][T15540] ? __fget_files+0x2a/0x420 [ 543.306349][T15540] ? __fget_files+0x3a6/0x420 [ 543.306368][T15540] __x64_sys_sendmsg+0x1c3/0x2a0 [ 543.306387][T15540] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 543.306411][T15540] ? __pfx_ksys_write+0x10/0x10 [ 543.306432][T15540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.306446][T15540] do_syscall_64+0x15f/0x560 [ 543.306463][T15540] ? trace_irq_disable+0x3b/0x140 [ 543.306477][T15540] ? clear_bhb_loop+0x40/0x90 [ 543.306494][T15540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.306507][T15540] RIP: 0033:0x7f5a66cfce59 [ 543.306529][T15540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.306540][T15540] RSP: 002b:00007f5a64f4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.306555][T15540] RAX: ffffffffffffffda RBX: 00007f5a66f75fa0 RCX: 00007f5a66cfce59 [ 543.306565][T15540] RDX: 00000000300048c0 RSI: 0000200000000700 RDI: 0000000000000004 [ 543.306573][T15540] RBP: 00007f5a64f4e090 R08: 0000000000000000 R09: 0000000000000000 [ 543.306581][T15540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.306589][T15540] R13: 00007f5a66f76038 R14: 00007f5a66f75fa0 R15: 00007ffc9cfcb048 [ 543.306611][T15540] [ 543.719797][ T5608] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 543.879640][ T5608] usb 6-1: Using ep0 maxpacket: 8 [ 543.890831][ T5608] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 543.890860][ T5608] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 543.890884][ T5608] usb 6-1: config 0 interface 0 has no altsetting 0 [ 543.890914][ T5608] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 543.890934][ T5608] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.906264][ T5608] usb 6-1: config 0 descriptor?? [ 544.318991][ T5608] hid_parser_main: 222 callbacks suppressed [ 544.319012][ T5608] itetech 0003:06CB:73F4.000C: unknown main item tag 0x2 [ 544.319047][ T5608] itetech 0003:06CB:73F4.000C: unknown main item tag 0x0 [ 544.319071][ T5608] itetech 0003:06CB:73F4.000C: unknown main item tag 0x0 [ 544.319096][ T5608] itetech 0003:06CB:73F4.000C: unknown main item tag 0x0 [ 544.319120][ T5608] itetech 0003:06CB:73F4.000C: unknown main item tag 0x0 [ 544.319144][ T5608] itetech 0003:06CB:73F4.000C: unknown main item tag 0x0 [ 544.319169][ T5608] itetech 0003:06CB:73F4.000C: unknown main item tag 0x0 [ 544.319193][ T5608] itetech 0003:06CB:73F4.000C: unknown main item tag 0x0 [ 544.329586][ T5608] itetech 0003:06CB:73F4.000C: hidraw0: USB HID v0.04 Device [HID 06cb:73f4] on usb-dummy_hcd.5-1/input0 [ 544.522937][T15542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.526025][T15542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.531967][T15542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.532492][T15542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.644775][ T5608] usb 6-1: USB disconnect, device number 19 [ 545.584383][T15591] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3540'. [ 545.770702][T15591] nfs4: Unknown parameter 'emory.events' [ 545.969517][ T32] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 546.069537][ T37] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 546.099730][ T32] usb 6-1: device descriptor read/64, error -71 [ 546.219522][ T5791] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 546.239503][ T37] usb 2-1: Using ep0 maxpacket: 8 [ 546.243060][ T37] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 546.243109][ T37] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 546.243135][ T37] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 546.243147][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.297195][ T37] usbtmc 2-1:16.0: bulk endpoints not found [ 546.349557][ T32] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 546.371899][ T5791] usb 3-1: unable to get BOS descriptor or descriptor too short [ 546.372728][ T5791] usb 3-1: not running at top speed; connect to a high speed hub [ 546.381089][ T5791] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 546.381114][ T5791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.381132][ T5791] usb 3-1: Product: 걟éŠäž®å¿í• âœ” [ 546.381145][ T5791] usb 3-1: SerialNumber: syz [ 546.471587][ T9861] usb 2-1: USB disconnect, device number 111 [ 546.493041][ T32] usb 6-1: device descriptor read/64, error -71 [ 546.599742][ T32] usb usb6-port1: attempt power cycle [ 546.939416][ T32] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 546.960087][ T32] usb 6-1: device descriptor read/8, error -71 [ 547.199420][ T32] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 547.231049][ T32] usb 6-1: device descriptor read/8, error -71 [ 547.340129][ T32] usb usb6-port1: unable to enumerate USB device [ 548.041024][T15622] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 548.609370][ T9861] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 548.759651][ T9861] usb 2-1: Using ep0 maxpacket: 32 [ 548.762253][ T9861] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 548.762278][ T9861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.770424][ T9861] usb 2-1: config 0 descriptor?? [ 548.831008][ T9861] as10x_usb: device has been detected [ 548.834585][ T9861] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 549.062227][ T9861] usb 2-1: DVB: registering adapter 4 frontend 0 (nBox DVB-T Dongle)... [ 549.175406][ T5791] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 549.175460][ T5791] usb 3-1: MIDIStreaming interface descriptor not found [ 549.481294][ T9861] as10x_usb: error during firmware upload part1 [ 549.487598][ T9861] Registered device nBox DVB-T Dongle [ 549.530361][ T9861] usb 2-1: USB disconnect, device number 112 [ 549.676251][ T5791] usb 3-1: USB disconnect, device number 75 [ 549.787137][T15656] sg_write: data in/out 50593756/136 bytes for SCSI command 0x0-- guessing data in; [ 549.787137][T15656] program syz.6.3563 not setting count and/or reply_len properly [ 550.193577][ T9861] Unregistered device nBox DVB-T Dongle [ 550.274080][ T9861] as10x_usb: device has been disconnected [ 550.960300][ T9861] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 551.063129][T15691] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3572'. [ 551.119245][ T9861] usb 3-1: Using ep0 maxpacket: 8 [ 551.122794][ T9861] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 551.122846][ T9861] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 551.122868][ T9861] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 551.122890][ T9861] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 551.122910][ T9861] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.125897][ T9861] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 551.125923][ T9861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.176351][T15695] netlink: 'syz.6.3573': attribute type 27 has an invalid length. [ 551.423068][ T9861] usb 3-1: usb_control_msg returned -32 [ 551.423095][ T9861] usbtmc 3-1:16.0: can't read capabilities [ 551.892209][T15707] can: request_module (can-proto-0) failed. [ 552.017488][T15719] FAULT_INJECTION: forcing a failure. [ 552.017488][T15719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.017510][T15719] CPU: 1 UID: 0 PID: 15719 Comm: syz.6.3581 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 552.017525][T15719] Tainted: [L]=SOFTLOCKUP [ 552.017528][T15719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 552.017535][T15719] Call Trace: [ 552.017539][T15719] [ 552.017544][T15719] dump_stack_lvl+0xe8/0x150 [ 552.017560][T15719] should_fail_ex+0x46b/0x600 [ 552.017577][T15719] _copy_from_iter+0x1d3/0x1670 [ 552.017596][T15719] ? trace_kmem_cache_alloc+0x29/0xe0 [ 552.017607][T15719] ? __alloc_skb+0x27d/0x7d0 [ 552.017620][T15719] ? __pfx__copy_from_iter+0x10/0x10 [ 552.017634][T15719] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 552.017643][T15719] ? __alloc_skb+0x27d/0x7d0 [ 552.017658][T15719] ? netlink_sendmsg+0x650/0xb40 [ 552.017672][T15719] ? skb_put+0x11b/0x210 [ 552.017686][T15719] netlink_sendmsg+0x6c0/0xb40 [ 552.017704][T15719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.017718][T15719] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 552.017731][T15719] ? __pfx_aa_file_perm+0x10/0x10 [ 552.017741][T15719] ? aa_sock_msg_perm+0x122/0x200 [ 552.017751][T15719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.017764][T15719] sock_sendmsg_nosec+0x112/0x150 [ 552.017782][T15719] sock_write_iter+0x308/0x410 [ 552.017805][T15719] ? __pfx_sock_write_iter+0x10/0x10 [ 552.017840][T15719] vfs_write+0x629/0xba0 [ 552.017869][T15719] ? __pfx_vfs_write+0x10/0x10 [ 552.017898][T15719] ? __fget_files+0x2a/0x420 [ 552.017923][T15719] ksys_write+0x156/0x270 [ 552.017942][T15719] ? __pfx_ksys_write+0x10/0x10 [ 552.017957][T15719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.017967][T15719] do_syscall_64+0x15f/0x560 [ 552.017982][T15719] ? clear_bhb_loop+0x40/0x90 [ 552.017993][T15719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.018003][T15719] RIP: 0033:0x7f5a66cfce59 [ 552.018013][T15719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.018021][T15719] RSP: 002b:00007f5a64f4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 552.018033][T15719] RAX: ffffffffffffffda RBX: 00007f5a66f75fa0 RCX: 00007f5a66cfce59 [ 552.018040][T15719] RDX: 0000000000000029 RSI: 00002000000002c0 RDI: 0000000000000006 [ 552.018046][T15719] RBP: 00007f5a64f4e090 R08: 0000000000000000 R09: 0000000000000000 [ 552.018052][T15719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.018058][T15719] R13: 00007f5a66f76038 R14: 00007f5a66f75fa0 R15: 00007ffc9cfcb048 [ 552.018073][T15719] [ 552.293458][ T9862] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 552.450978][ T9862] usb 2-1: config 0 has an invalid interface number: 7 but max is 0 [ 552.451099][ T9862] usb 2-1: config 0 has no interface number 0 [ 552.451155][ T9862] usb 2-1: config 0 interface 7 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 552.451180][ T9862] usb 2-1: config 0 interface 7 has no altsetting 0 [ 552.451210][ T9862] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 552.451231][ T9862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.457245][ T9862] usb 2-1: config 0 descriptor?? [ 552.539214][ T32] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 552.693360][ T32] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 552.693389][ T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.693407][ T32] usb 7-1: Product: syz [ 552.693419][ T32] usb 7-1: Manufacturer: syz [ 552.693432][ T32] usb 7-1: SerialNumber: syz [ 552.706899][ T32] usb 7-1: config 0 descriptor?? [ 552.755028][ T9862] usb 2-1: string descriptor 0 read error: -71 [ 552.758330][ T9862] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 552.758761][ T9862] gp8psk: usb in 128 operation failed. [ 552.765431][ T9862] gp8psk: usb in 137 operation failed. [ 552.765447][ T9862] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 552.765482][ T9862] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 552.809389][ T9862] usb 2-1: USB disconnect, device number 113 [ 552.943316][ T32] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 553.776552][ T9861] usb 3-1: USB disconnect, device number 76 [ 554.198169][ T32] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 554.224486][ T32] usb 7-1: USB disconnect, device number 6 [ 554.496481][T15752] FAULT_INJECTION: forcing a failure. [ 554.496481][T15752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.496515][T15752] CPU: 0 UID: 0 PID: 15752 Comm: syz.2.3594 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 554.496540][T15752] Tainted: [L]=SOFTLOCKUP [ 554.496546][T15752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 554.496556][T15752] Call Trace: [ 554.496563][T15752] [ 554.496571][T15752] dump_stack_lvl+0xe8/0x150 [ 554.496596][T15752] should_fail_ex+0x46b/0x600 [ 554.496622][T15752] _copy_from_iter+0x1d3/0x1670 [ 554.496649][T15752] ? sock_alloc_send_pskb+0x8a2/0x9a0 [ 554.496678][T15752] ? __pfx__copy_from_iter+0x10/0x10 [ 554.496708][T15752] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 554.496735][T15752] skb_copy_datagram_from_iter+0xf5/0x710 [ 554.496760][T15752] ? dev_get_by_index+0x22/0x2f0 [ 554.496777][T15752] ? skb_put+0x11b/0x210 [ 554.496800][T15752] packet_sendmsg+0x35be/0x4fd0 [ 554.496835][T15752] ? __lock_acquire+0x6b5/0x2d10 [ 554.496861][T15752] ? __lock_acquire+0x6b5/0x2d10 [ 554.496893][T15752] ? __pfx_packet_sendmsg+0x10/0x10 [ 554.496912][T15752] ? aa_sk_perm+0x703/0x950 [ 554.496943][T15752] ? __pfx_aa_sk_perm+0x10/0x10 [ 554.496964][T15752] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 554.496988][T15752] ? aa_sock_msg_perm+0x122/0x200 [ 554.497006][T15752] ? __pfx_packet_sendmsg+0x10/0x10 [ 554.497024][T15752] sock_sendmsg_nosec+0x112/0x150 [ 554.497046][T15752] __sys_sendto+0x402/0x590 [ 554.497072][T15752] ? __pfx___sys_sendto+0x10/0x10 [ 554.497115][T15752] ? ksys_write+0x248/0x270 [ 554.497138][T15752] ? __pfx_ksys_write+0x10/0x10 [ 554.497162][T15752] __x64_sys_sendto+0xde/0x100 [ 554.497182][T15752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.497201][T15752] do_syscall_64+0x15f/0x560 [ 554.497222][T15752] ? trace_irq_disable+0x3b/0x140 [ 554.497238][T15752] ? clear_bhb_loop+0x40/0x90 [ 554.497250][T15752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.497260][T15752] RIP: 0033:0x7fa72748ce59 [ 554.497270][T15752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.497279][T15752] RSP: 002b:00007fa7256e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 554.497290][T15752] RAX: ffffffffffffffda RBX: 00007fa727705fa0 RCX: 00007fa72748ce59 [ 554.497297][T15752] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000003 [ 554.497304][T15752] RBP: 00007fa7256e6090 R08: 0000200000000140 R09: 0000000000000014 [ 554.497310][T15752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.497316][T15752] R13: 00007fa727706038 R14: 00007fa727705fa0 R15: 00007ffc1c440118 [ 554.497331][T15752] [ 556.506270][ T5626] Bluetooth: hci2: unexpected cc 0x0c2d length: 1 < 4 [ 556.506301][ T5626] Bluetooth: hci2: unexpected event for opcode 0x0c2d [ 556.717661][T15804] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3612'. [ 556.740605][T15805] fuse: Bad value for 'fd' [ 557.342113][T15795] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 557.342199][T15795] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 557.542170][T15795] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 557.542404][T15795] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 557.683984][T15795] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 557.932570][T15795] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 558.168841][ T9861] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 558.176189][ T60] Bluetooth: hci1: unexpected event for opcode 0x100c [ 558.318757][ T9861] usb 6-1: Using ep0 maxpacket: 32 [ 558.333758][ T9861] usb 6-1: unable to get BOS descriptor or descriptor too short [ 558.335087][ T9861] usb 6-1: config 3 has an invalid interface number: 223 but max is 1 [ 558.335109][ T9861] usb 6-1: config 3 has an invalid interface number: 25 but max is 1 [ 558.335127][ T9861] usb 6-1: config 3 has an invalid interface number: 223 but max is 1 [ 558.335144][ T9861] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 558.335161][ T9861] usb 6-1: config 3 has no interface number 0 [ 558.335175][ T9861] usb 6-1: config 3 has no interface number 1 [ 558.335224][ T9861] usb 6-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 558.335243][ T9861] usb 6-1: config 3 interface 25 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 558.335267][ T9861] usb 6-1: config 3 interface 223 has no altsetting 1 [ 558.335280][ T9861] usb 6-1: config 3 interface 25 has no altsetting 0 [ 558.450958][ T9861] usb 6-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 558.450985][ T9861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.451004][ T9861] usb 6-1: Product: syz [ 558.451016][ T9861] usb 6-1: Manufacturer: syz [ 558.451028][ T9861] usb 6-1: SerialNumber: syz [ 558.591868][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 558.749200][ T9861] usb 6-1: USB disconnect, device number 24 [ 559.420401][T15842] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3625'. [ 559.728630][T15840] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 559.728660][T15840] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 559.729067][T15840] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 559.729079][T15840] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 559.768725][ T5729] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 559.918853][ T5729] usb 3-1: Using ep0 maxpacket: 32 [ 559.923553][ T5729] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 559.923567][ T5729] usb 3-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 559.923577][ T5729] usb 3-1: config 0 has no interface number 0 [ 559.923600][ T5729] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 559.923610][ T5729] usb 3-1: config 0 interface 1 has no altsetting 0 [ 559.925899][ T5729] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 559.925923][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.925940][ T5729] usb 3-1: Product: syz [ 559.925952][ T5729] usb 3-1: Manufacturer: syz [ 559.925965][ T5729] usb 3-1: SerialNumber: syz [ 559.958821][ T5729] usb 3-1: config 0 descriptor?? [ 560.053729][T15849] FAULT_INJECTION: forcing a failure. [ 560.053729][T15849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.053763][T15849] CPU: 0 UID: 0 PID: 15849 Comm: syz.1.3627 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 560.053788][T15849] Tainted: [L]=SOFTLOCKUP [ 560.053794][T15849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 560.053804][T15849] Call Trace: [ 560.053811][T15849] [ 560.053819][T15849] dump_stack_lvl+0xe8/0x150 [ 560.053844][T15849] should_fail_ex+0x46b/0x600 [ 560.053872][T15849] _copy_from_iter+0x1d3/0x1670 [ 560.053904][T15849] ? trace_kmem_cache_alloc+0x29/0xe0 [ 560.053922][T15849] ? __alloc_skb+0x27d/0x7d0 [ 560.053942][T15849] ? __pfx__copy_from_iter+0x10/0x10 [ 560.053965][T15849] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 560.053984][T15849] ? __alloc_skb+0x27d/0x7d0 [ 560.054009][T15849] ? netlink_sendmsg+0x650/0xb40 [ 560.054030][T15849] ? skb_put+0x11b/0x210 [ 560.054054][T15849] netlink_sendmsg+0x6c0/0xb40 [ 560.054085][T15849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.054111][T15849] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 560.054136][T15849] ? aa_sock_msg_perm+0x122/0x200 [ 560.054154][T15849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.054176][T15849] sock_sendmsg_nosec+0x112/0x150 [ 560.054198][T15849] ____sys_sendmsg+0x55c/0x870 [ 560.054225][T15849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 560.054255][T15849] ? import_iovec+0x73/0xa0 [ 560.054277][T15849] ___sys_sendmsg+0x2a5/0x360 [ 560.054298][T15849] ? __lock_acquire+0x6b5/0x2d10 [ 560.054323][T15849] ? __pfx____sys_sendmsg+0x10/0x10 [ 560.054377][T15849] ? __fget_files+0x2a/0x420 [ 560.054393][T15849] ? __fget_files+0x3a6/0x420 [ 560.054419][T15849] __x64_sys_sendmsg+0x1c3/0x2a0 [ 560.054452][T15849] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 560.054485][T15849] ? __pfx_ksys_write+0x10/0x10 [ 560.054512][T15849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.054531][T15849] do_syscall_64+0x15f/0x560 [ 560.054553][T15849] ? trace_irq_disable+0x3b/0x140 [ 560.054573][T15849] ? clear_bhb_loop+0x40/0x90 [ 560.054595][T15849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.054611][T15849] RIP: 0033:0x7fb92887ce59 [ 560.054628][T15849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.054643][T15849] RSP: 002b:00007fb926ad6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.054662][T15849] RAX: ffffffffffffffda RBX: 00007fb928af5fa0 RCX: 00007fb92887ce59 [ 560.054672][T15849] RDX: 00000000300048c0 RSI: 0000200000000700 RDI: 0000000000000004 [ 560.054681][T15849] RBP: 00007fb926ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 560.054691][T15849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.054702][T15849] R13: 00007fb928af6038 R14: 00007fb928af5fa0 R15: 00007fff0cfb5ef8 [ 560.054724][T15849] [ 560.274015][ T5729] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 560.274044][ T5729] cx231xx 3-1:0.1: Not found matching IAD interface [ 560.298665][ T5729] usb 3-1: USB disconnect, device number 77 [ 560.668687][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 560.682823][T15862] FAULT_INJECTION: forcing a failure. [ 560.682823][T15862] name failslab, interval 1, probability 0, space 0, times 0 [ 560.682854][T15862] CPU: 1 UID: 0 PID: 15862 Comm: syz.1.3634 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 560.682879][T15862] Tainted: [L]=SOFTLOCKUP [ 560.682885][T15862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 560.682895][T15862] Call Trace: [ 560.682902][T15862] [ 560.682909][T15862] dump_stack_lvl+0xe8/0x150 [ 560.682932][T15862] should_fail_ex+0x46b/0x600 [ 560.682960][T15862] should_failslab+0xa8/0x100 [ 560.682981][T15862] kmem_cache_alloc_noprof+0x87/0x680 [ 560.683000][T15862] ? skb_clone+0x212/0x3a0 [ 560.683026][T15862] skb_clone+0x212/0x3a0 [ 560.683052][T15862] __netlink_deliver_tap+0x424/0x8b0 [ 560.683086][T15862] ? netlink_deliver_tap+0x2e/0x1b0 [ 560.683111][T15862] netlink_deliver_tap+0x19c/0x1b0 [ 560.683134][T15862] netlink_unicast+0x754/0x920 [ 560.683165][T15862] netlink_sendmsg+0x813/0xb40 [ 560.683199][T15862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.683223][T15862] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 560.683245][T15862] ? __pfx_aa_file_perm+0x10/0x10 [ 560.683264][T15862] ? aa_sock_msg_perm+0x122/0x200 [ 560.683281][T15862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.683303][T15862] sock_sendmsg_nosec+0x112/0x150 [ 560.683324][T15862] sock_write_iter+0x308/0x410 [ 560.683343][T15862] ? __pfx_sock_write_iter+0x10/0x10 [ 560.683380][T15862] vfs_write+0x629/0xba0 [ 560.683408][T15862] ? __pfx_vfs_write+0x10/0x10 [ 560.683436][T15862] ? __fget_files+0x2a/0x420 [ 560.683460][T15862] ksys_write+0x156/0x270 [ 560.683482][T15862] ? __pfx_ksys_write+0x10/0x10 [ 560.683509][T15862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.683527][T15862] do_syscall_64+0x15f/0x560 [ 560.683547][T15862] ? trace_irq_disable+0x3b/0x140 [ 560.683565][T15862] ? clear_bhb_loop+0x40/0x90 [ 560.683586][T15862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.683604][T15862] RIP: 0033:0x7fb92887ce59 [ 560.683620][T15862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.683634][T15862] RSP: 002b:00007fb926ad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 560.683653][T15862] RAX: ffffffffffffffda RBX: 00007fb928af5fa0 RCX: 00007fb92887ce59 [ 560.683666][T15862] RDX: 0000000000000029 RSI: 00002000000002c0 RDI: 0000000000000006 [ 560.683676][T15862] RBP: 00007fb926ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 560.683687][T15862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.683698][T15862] R13: 00007fb928af6038 R14: 00007fb928af5fa0 R15: 00007fff0cfb5ef8 [ 560.683732][T15862] [ 561.258679][ T5729] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 561.409561][ T5729] usb 2-1: Using ep0 maxpacket: 8 [ 561.411188][ T5729] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.411216][ T5729] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 561.411236][ T5729] usb 2-1: config 0 interface 0 has no altsetting 0 [ 561.411253][ T5729] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 561.411265][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.422242][ T5729] usb 2-1: config 0 descriptor?? [ 561.704129][T15893] program syz.2.3644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 561.768623][ T32] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 561.892210][T15873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.893297][T15873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.899949][ T32] usb 7-1: device descriptor read/64, error -71 [ 561.929289][ T5729] hkems 0003:2006:0118.000D: unknown main item tag 0x0 [ 561.929320][ T5729] hkems 0003:2006:0118.000D: unknown main item tag 0x0 [ 561.929345][ T5729] hkems 0003:2006:0118.000D: unknown main item tag 0x0 [ 561.929368][ T5729] hkems 0003:2006:0118.000D: unknown main item tag 0x0 [ 561.929392][ T5729] hkems 0003:2006:0118.000D: unknown main item tag 0x0 [ 561.929415][ T5729] hkems 0003:2006:0118.000D: unknown main item tag 0x0 [ 561.929439][ T5729] hkems 0003:2006:0118.000D: unknown main item tag 0x0 [ 561.929463][ T5729] hkems 0003:2006:0118.000D: unknown main item tag 0x0 [ 561.929488][ T5729] hkems 0003:2006:0118.000D: unknown main item tag 0x0 [ 561.929512][ T5729] hkems 0003:2006:0118.000D: unknown main item tag 0x0 [ 561.943978][ T5729] hkems 0003:2006:0118.000D: hidraw0: USB HID v0.03 Device [HID 2006:0118] on usb-dummy_hcd.1-1/input0 [ 561.944005][ T5729] hkems 0003:2006:0118.000D: no inputs found [ 561.944017][ T5729] hkems 0003:2006:0118.000D: force feedback init failed [ 562.151396][ T32] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 562.161688][ T37] usb 2-1: USB disconnect, device number 114 [ 562.233688][T15903] FAULT_INJECTION: forcing a failure. [ 562.233688][T15903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.233719][T15903] CPU: 0 UID: 0 PID: 15903 Comm: syz.2.3646 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 562.233743][T15903] Tainted: [L]=SOFTLOCKUP [ 562.233750][T15903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 562.233760][T15903] Call Trace: [ 562.233766][T15903] [ 562.233774][T15903] dump_stack_lvl+0xe8/0x150 [ 562.233798][T15903] should_fail_ex+0x46b/0x600 [ 562.233825][T15903] _copy_from_iter+0x1d3/0x1670 [ 562.233854][T15903] ? sock_alloc_send_pskb+0x8a2/0x9a0 [ 562.233897][T15903] ? __pfx__copy_from_iter+0x10/0x10 [ 562.233930][T15903] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 562.233958][T15903] skb_copy_datagram_from_iter+0xf5/0x710 [ 562.233986][T15903] ? dev_get_by_index+0x22/0x2f0 [ 562.234002][T15903] ? skb_put+0x11b/0x210 [ 562.234027][T15903] packet_sendmsg+0x35be/0x4fd0 [ 562.234063][T15903] ? __lock_acquire+0x6b5/0x2d10 [ 562.234097][T15903] ? __lock_acquire+0x6b5/0x2d10 [ 562.234130][T15903] ? __pfx_packet_sendmsg+0x10/0x10 [ 562.234151][T15903] ? aa_sk_perm+0x703/0x950 [ 562.234183][T15903] ? __pfx_aa_sk_perm+0x10/0x10 [ 562.234205][T15903] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 562.234230][T15903] ? aa_sock_msg_perm+0x122/0x200 [ 562.234247][T15903] ? __pfx_packet_sendmsg+0x10/0x10 [ 562.234263][T15903] sock_sendmsg_nosec+0x112/0x150 [ 562.234284][T15903] __sys_sendto+0x402/0x590 [ 562.234310][T15903] ? __pfx___sys_sendto+0x10/0x10 [ 562.234354][T15903] ? ksys_write+0x248/0x270 [ 562.234377][T15903] ? __pfx_ksys_write+0x10/0x10 [ 562.234401][T15903] __x64_sys_sendto+0xde/0x100 [ 562.234427][T15903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.234446][T15903] do_syscall_64+0x15f/0x560 [ 562.234468][T15903] ? trace_irq_disable+0x3b/0x140 [ 562.234487][T15903] ? clear_bhb_loop+0x40/0x90 [ 562.234508][T15903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.234525][T15903] RIP: 0033:0x7fa72748ce59 [ 562.234541][T15903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.234556][T15903] RSP: 002b:00007fa7256e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 562.234575][T15903] RAX: ffffffffffffffda RBX: 00007fa727705fa0 RCX: 00007fa72748ce59 [ 562.234588][T15903] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000003 [ 562.234599][T15903] RBP: 00007fa7256e6090 R08: 0000200000000140 R09: 0000000000000014 [ 562.234611][T15903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.234621][T15903] R13: 00007fa727706038 R14: 00007fa727705fa0 R15: 00007ffc1c440118 [ 562.234649][T15903] [ 562.278578][ T32] usb 7-1: device descriptor read/64, error -71 [ 562.389691][ T32] usb usb7-port1: attempt power cycle [ 562.768146][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.768240][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.783219][ T32] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 562.802744][ T32] usb 7-1: device descriptor read/8, error -71 [ 562.906441][T15916] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3652'. [ 562.978553][ T9] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 563.042681][ T32] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 563.059164][ T32] usb 7-1: device descriptor read/8, error -71 [ 563.145080][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.145106][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 563.145139][ T9] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 563.145160][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.170423][ T32] usb usb7-port1: unable to enumerate USB device [ 563.214889][ T9] usb 3-1: config 0 descriptor?? [ 563.430316][T15911] 9pnet_fd: Insufficient options for proto=fd [ 563.838532][ T37] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 563.961645][ T32] usb 3-1: USB disconnect, device number 78 [ 564.021983][ T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.022014][ T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.022049][ T37] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 564.022070][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.036934][ T37] usb 6-1: config 0 descriptor?? [ 564.572546][ T37] hid-steam 0003:28DE:1142.000E: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 564.721378][ T37] hid-steam 0003:28DE:1142.000E: Steam wireless receiver connected [ 564.837932][T15926] syzkaller1: entered promiscuous mode [ 564.837956][T15926] syzkaller1: entered allmulticast mode [ 564.841397][T15926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.842055][T15926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.931527][ T37] hid-steam 0003:28DE:1142.000F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 565.017740][T15944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3661'. [ 565.062181][ T60] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 565.188056][ T37] usb 6-1: USB disconnect, device number 25 [ 565.315244][ T60] Bluetooth: hci1: unexpected event for opcode 0x100c [ 565.409382][ T37] hid-steam 0003:28DE:1142.000E: Steam wireless receiver disconnected [ 565.528375][ T3131] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 565.553976][T15957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3666'. [ 565.684161][ T3131] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 565.684180][ T3131] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 565.686444][ T3131] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 565.686468][ T3131] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.686485][ T3131] usb 7-1: Product: syz [ 565.686497][ T3131] usb 7-1: Manufacturer: syz [ 565.686505][ T3131] usb 7-1: SerialNumber: syz [ 565.698823][ T3131] usb 7-1: config 0 descriptor?? [ 565.723251][T15950] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 565.723377][T15950] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 565.800630][T15964] FAULT_INJECTION: forcing a failure. [ 565.800630][T15964] name failslab, interval 1, probability 0, space 0, times 0 [ 565.800659][T15964] CPU: 0 UID: 0 PID: 15964 Comm: syz.5.3669 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 565.800681][T15964] Tainted: [L]=SOFTLOCKUP [ 565.800685][T15964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 565.800692][T15964] Call Trace: [ 565.800698][T15964] [ 565.800703][T15964] dump_stack_lvl+0xe8/0x150 [ 565.800723][T15964] should_fail_ex+0x46b/0x600 [ 565.800745][T15964] should_failslab+0xa8/0x100 [ 565.800762][T15964] __kmalloc_noprof+0xdf/0x7b0 [ 565.800777][T15964] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 565.800797][T15964] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 565.800818][T15964] genl_family_rcv_msg_doit+0xd9/0x330 [ 565.800842][T15964] ? __asan_memcpy+0x40/0x70 [ 565.800864][T15964] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 565.800884][T15964] ? apparmor_capable+0x126/0x170 [ 565.800901][T15964] ? bpf_lsm_capable+0x9/0x20 [ 565.800919][T15964] ? security_capable+0x7e/0x2c0 [ 565.800942][T15964] genl_rcv_msg+0x61c/0x7a0 [ 565.800961][T15964] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.800975][T15964] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 565.800990][T15964] ? __pfx_nl802154_new_interface+0x10/0x10 [ 565.801005][T15964] ? __pfx_nl802154_post_doit+0x10/0x10 [ 565.801031][T15964] netlink_rcv_skb+0x232/0x4b0 [ 565.801051][T15964] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.801066][T15964] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 565.801093][T15964] ? netlink_deliver_tap+0x2e/0x1b0 [ 565.801110][T15964] ? netlink_deliver_tap+0x2e/0x1b0 [ 565.801131][T15964] genl_rcv+0x28/0x40 [ 565.801143][T15964] netlink_unicast+0x780/0x920 [ 565.801168][T15964] netlink_sendmsg+0x813/0xb40 [ 565.801193][T15964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.801212][T15964] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 565.801231][T15964] ? aa_sock_msg_perm+0x122/0x200 [ 565.801245][T15964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.801262][T15964] sock_sendmsg_nosec+0x112/0x150 [ 565.801279][T15964] ____sys_sendmsg+0x55c/0x870 [ 565.801301][T15964] ? __pfx_____sys_sendmsg+0x10/0x10 [ 565.801327][T15964] ? import_iovec+0x73/0xa0 [ 565.801345][T15964] ___sys_sendmsg+0x2a5/0x360 [ 565.801361][T15964] ? __lock_acquire+0x6b5/0x2d10 [ 565.801380][T15964] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.801424][T15964] ? __fget_files+0x2a/0x420 [ 565.801437][T15964] ? __fget_files+0x3a6/0x420 [ 565.801457][T15964] __x64_sys_sendmsg+0x1c3/0x2a0 [ 565.801477][T15964] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 565.801502][T15964] ? __pfx_ksys_write+0x10/0x10 [ 565.801524][T15964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.801539][T15964] do_syscall_64+0x15f/0x560 [ 565.801556][T15964] ? trace_irq_disable+0x3b/0x140 [ 565.801571][T15964] ? clear_bhb_loop+0x40/0x90 [ 565.801587][T15964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.801600][T15964] RIP: 0033:0x7f32b311ce59 [ 565.801614][T15964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.801626][T15964] RSP: 002b:00007f32b1376028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 565.801641][T15964] RAX: ffffffffffffffda RBX: 00007f32b3395fa0 RCX: 00007f32b311ce59 [ 565.801651][T15964] RDX: 00000000300048c0 RSI: 0000200000000700 RDI: 0000000000000004 [ 565.801660][T15964] RBP: 00007f32b1376090 R08: 0000000000000000 R09: 0000000000000000 [ 565.801668][T15964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.801676][T15964] R13: 00007f32b3396038 R14: 00007f32b3395fa0 R15: 00007ffc578f6338 [ 565.801698][T15964] [ 565.909975][ T37] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 565.946741][T15950] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 565.947565][T15950] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 566.078706][ T37] usb 2-1: unable to get BOS descriptor or descriptor too short [ 566.095146][ T37] usb 2-1: not running at top speed; connect to a high speed hub [ 566.103743][ T37] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.103765][ T37] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 566.116269][ T37] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 566.116302][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.116369][ T37] usb 2-1: Product: syz [ 566.116383][ T37] usb 2-1: Manufacturer: syz [ 566.116396][ T37] usb 2-1: SerialNumber: syz [ 566.353421][ T3131] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 566.657170][ T37] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 566.662462][ T37] usb 2-1: USB disconnect, device number 115 [ 566.712402][T12335] udevd[12335]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 567.012268][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3672'. [ 567.116383][T15979] FAULT_INJECTION: forcing a failure. [ 567.116383][T15979] name failslab, interval 1, probability 0, space 0, times 0 [ 567.116417][T15979] CPU: 1 UID: 0 PID: 15979 Comm: syz.1.3674 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 567.116441][T15979] Tainted: [L]=SOFTLOCKUP [ 567.116448][T15979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 567.116457][T15979] Call Trace: [ 567.116467][T15979] [ 567.116475][T15979] dump_stack_lvl+0xe8/0x150 [ 567.116499][T15979] should_fail_ex+0x46b/0x600 [ 567.116526][T15979] should_failslab+0xa8/0x100 [ 567.116549][T15979] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 567.116569][T15979] ? __alloc_skb+0x1d0/0x7d0 [ 567.116587][T15979] ? lockdep_hardirqs_on+0x7a/0x110 [ 567.116615][T15979] __alloc_skb+0x1d0/0x7d0 [ 567.116638][T15979] netlink_dump+0x1d8/0xe10 [ 567.116663][T15979] ? __netlink_lookup+0xc6/0x8b0 [ 567.116690][T15979] ? do_raw_spin_lock+0x12b/0x2f0 [ 567.116707][T15979] ? __pfx_netlink_dump+0x10/0x10 [ 567.116739][T15979] ? lockdep_hardirqs_on+0x7a/0x110 [ 567.116770][T15979] __netlink_dump_start+0x5cb/0x7e0 [ 567.116802][T15979] unix_diag_handler_dump+0x1b6/0x950 [ 567.116831][T15979] ? sock_diag_lock_handler+0x19/0x290 [ 567.116854][T15979] ? __pfx_unix_diag_handler_dump+0x10/0x10 [ 567.116877][T15979] ? __pfx_unix_diag_dump+0x10/0x10 [ 567.116902][T15979] ? sock_diag_lock_handler+0x19/0x290 [ 567.116922][T15979] ? sock_diag_lock_handler+0x19/0x290 [ 567.116946][T15979] sock_diag_rcv_msg+0x4cc/0x600 [ 567.116971][T15979] netlink_rcv_skb+0x232/0x4b0 [ 567.116996][T15979] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 567.117017][T15979] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 567.117037][T15979] ? lockdep_hardirqs_on+0x7a/0x110 [ 567.117080][T15979] netlink_unicast+0x780/0x920 [ 567.117113][T15979] netlink_sendmsg+0x813/0xb40 [ 567.117138][T15979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.117153][T15979] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 567.117167][T15979] ? __pfx_aa_file_perm+0x10/0x10 [ 567.117177][T15979] ? aa_sock_msg_perm+0x122/0x200 [ 567.117187][T15979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.117201][T15979] sock_sendmsg_nosec+0x112/0x150 [ 567.117221][T15979] sock_write_iter+0x308/0x410 [ 567.117232][T15979] ? __pfx_sock_write_iter+0x10/0x10 [ 567.117253][T15979] vfs_write+0x629/0xba0 [ 567.117270][T15979] ? __pfx_vfs_write+0x10/0x10 [ 567.117286][T15979] ? __fget_files+0x2a/0x420 [ 567.117301][T15979] ksys_write+0x156/0x270 [ 567.117314][T15979] ? __pfx_ksys_write+0x10/0x10 [ 567.117329][T15979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.117340][T15979] do_syscall_64+0x15f/0x560 [ 567.117353][T15979] ? trace_irq_disable+0x3b/0x140 [ 567.117365][T15979] ? clear_bhb_loop+0x40/0x90 [ 567.117377][T15979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.117387][T15979] RIP: 0033:0x7fb92887ce59 [ 567.117398][T15979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.117407][T15979] RSP: 002b:00007fb926ad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 567.117419][T15979] RAX: ffffffffffffffda RBX: 00007fb928af5fa0 RCX: 00007fb92887ce59 [ 567.117426][T15979] RDX: 0000000000000029 RSI: 00002000000002c0 RDI: 0000000000000006 [ 567.117433][T15979] RBP: 00007fb926ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 567.117439][T15979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.117445][T15979] R13: 00007fb928af6038 R14: 00007fb928af5fa0 R15: 00007fff0cfb5ef8 [ 567.117461][T15979] [ 567.762020][T15950] can0: slcan on ttynull. [ 568.173359][T15949] can0 (unregistered): slcan off ttynull. [ 568.340220][ T3131] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 568.433734][ T3131] dm9601 7-1:0.0 eth9: register 'dm9601' at usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet, aa:0b:da:32:18:9a [ 568.449134][ T3131] usb 7-1: USB disconnect, device number 11 [ 568.461440][ T3131] dm9601 7-1:0.0 eth9: unregister 'dm9601' usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet [ 568.987868][ T60] Bluetooth: hci1: unexpected event for opcode 0x0001 [ 569.010258][ T60] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 569.293859][T16040] FAULT_INJECTION: forcing a failure. [ 569.293859][T16040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.293893][T16040] CPU: 0 UID: 0 PID: 16040 Comm: syz.6.3688 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 569.293918][T16040] Tainted: [L]=SOFTLOCKUP [ 569.293925][T16040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 569.293935][T16040] Call Trace: [ 569.293943][T16040] [ 569.293951][T16040] dump_stack_lvl+0xe8/0x150 [ 569.293976][T16040] should_fail_ex+0x46b/0x600 [ 569.294005][T16040] _copy_from_iter+0x1d3/0x1670 [ 569.294041][T16040] ? __pfx__copy_from_iter+0x10/0x10 [ 569.294062][T16040] ? sock_alloc_send_pskb+0x8a2/0x9a0 [ 569.294092][T16040] ? __pfx__copy_from_iter+0x10/0x10 [ 569.294123][T16040] copy_page_from_iter+0x220/0x2d0 [ 569.294152][T16040] skb_copy_datagram_from_iter+0x306/0x710 [ 569.294185][T16040] packet_sendmsg+0x35be/0x4fd0 [ 569.294220][T16040] ? __lock_acquire+0x6b5/0x2d10 [ 569.294247][T16040] ? __lock_acquire+0x6b5/0x2d10 [ 569.294278][T16040] ? __pfx_packet_sendmsg+0x10/0x10 [ 569.294300][T16040] ? aa_sk_perm+0x703/0x950 [ 569.294330][T16040] ? __pfx_aa_sk_perm+0x10/0x10 [ 569.294352][T16040] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 569.294376][T16040] ? aa_sock_msg_perm+0x122/0x200 [ 569.294394][T16040] ? __pfx_packet_sendmsg+0x10/0x10 [ 569.294410][T16040] sock_sendmsg_nosec+0x112/0x150 [ 569.294432][T16040] __sys_sendto+0x402/0x590 [ 569.294459][T16040] ? __pfx___sys_sendto+0x10/0x10 [ 569.294501][T16040] ? ksys_write+0x248/0x270 [ 569.294525][T16040] ? __pfx_ksys_write+0x10/0x10 [ 569.294558][T16040] __x64_sys_sendto+0xde/0x100 [ 569.294580][T16040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.294601][T16040] do_syscall_64+0x15f/0x560 [ 569.294623][T16040] ? trace_irq_disable+0x3b/0x140 [ 569.294641][T16040] ? clear_bhb_loop+0x40/0x90 [ 569.294661][T16040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.294680][T16040] RIP: 0033:0x7f5a66cfce59 [ 569.294696][T16040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.294711][T16040] RSP: 002b:00007f5a64f4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 569.294730][T16040] RAX: ffffffffffffffda RBX: 00007f5a66f75fa0 RCX: 00007f5a66cfce59 [ 569.294743][T16040] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000003 [ 569.294754][T16040] RBP: 00007f5a64f4e090 R08: 0000200000000140 R09: 0000000000000014 [ 569.294765][T16040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.294775][T16040] R13: 00007f5a66f76038 R14: 00007f5a66f75fa0 R15: 00007ffc9cfcb048 [ 569.294802][T16040] [ 569.869586][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 569.911630][ T9862] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 570.018129][ T9861] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 570.026187][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 570.026213][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.026231][ T9] usb 7-1: Product: syz [ 570.026243][ T9] usb 7-1: Manufacturer: syz [ 570.026256][ T9] usb 7-1: SerialNumber: syz [ 570.068040][ T9862] usb 6-1: Using ep0 maxpacket: 32 [ 570.069918][ T9862] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 570.069940][ T9862] usb 6-1: config 0 has no interface number 0 [ 570.069984][ T9862] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 570.073155][ T9862] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 570.073179][ T9862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.073198][ T9862] usb 6-1: Product: syz [ 570.073211][ T9862] usb 6-1: Manufacturer: syz [ 570.073225][ T9862] usb 6-1: SerialNumber: syz [ 570.118682][T16071] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3697'. [ 570.159247][ T9862] usb 6-1: config 0 descriptor?? [ 570.161440][T16053] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 570.185555][T16073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3697'. [ 570.247858][ T9861] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 570.247887][ T9861] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 570.267221][ T9861] usb 3-1: config 220 has no interface number 2 [ 570.267294][ T9861] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 570.267381][ T9861] usb 3-1: config 220 interface 0 has no altsetting 0 [ 570.267399][ T9861] usb 3-1: config 220 interface 76 has no altsetting 0 [ 570.267416][ T9861] usb 3-1: config 220 interface 1 has no altsetting 0 [ 570.314614][ T9861] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 570.314856][ T9861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.314869][ T9861] usb 3-1: Product: syz [ 570.314876][ T9861] usb 3-1: Manufacturer: syz [ 570.314883][ T9861] usb 3-1: SerialNumber: syz [ 570.378392][ T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 570.378509][ T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 570.378530][ T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 570.388289][T16053] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 570.420759][ T9] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 570.471939][ T9] usb 7-1: USB disconnect, device number 12 [ 570.589834][T16057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.592860][T16057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.595607][T16057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.596147][T16057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.646069][ T9861] usb 3-1: selecting invalid altsetting 0 [ 570.704482][ T9861] usb 3-1: selecting invalid altsetting 0 [ 570.709011][ T9861] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 570.709039][ T9861] uvcvideo 3-1:220.0: No valid video chain found. [ 570.727102][ T9861] usb 3-1: selecting invalid altsetting 0 [ 570.727134][ T9861] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 570.793826][ T9861] usb 3-1: USB disconnect, device number 79 [ 570.801126][ T9862] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 570.801377][ T9862] asix 6-1:0.188: probe with driver asix failed with error -61 [ 570.870494][ T60] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 571.043206][ T60] Bluetooth: hci1: unexpected event for opcode 0x100c [ 571.481857][T16098] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3705'. [ 571.621833][T16103] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 571.726220][T16109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3708'. [ 571.784916][T16111] syzkaller1: entered promiscuous mode [ 571.784931][T16111] syzkaller1: entered allmulticast mode [ 571.793363][T16111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3709'. [ 572.927253][T16139] overlayfs: conflicting options: userxattr,redirect_dir=on [ 573.151056][ T9861] usb 6-1: USB disconnect, device number 26 [ 573.687925][ T9861] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 573.807918][ T5729] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 573.836128][ T38] audit: type=1326 audit(2000000388.381:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16141 comm="syz.2.3720" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72748ce59 code=0x7fc00000 [ 573.836177][ T38] audit: type=1326 audit(2000000388.381:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16141 comm="syz.2.3720" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa72748ce59 code=0x7fc00000 [ 573.836227][ T38] audit: type=1326 audit(2000000388.381:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16141 comm="syz.2.3720" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72748ce59 code=0x7fc00000 [ 573.836268][ T38] audit: type=1326 audit(2000000388.381:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16141 comm="syz.2.3720" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72748ce59 code=0x7fc00000 [ 573.836307][ T38] audit: type=1326 audit(2000000388.381:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16141 comm="syz.2.3720" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72748ce59 code=0x7fc00000 [ 573.836347][ T38] audit: type=1326 audit(2000000388.381:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16141 comm="syz.2.3720" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72748ce59 code=0x7fc00000 [ 573.836387][ T38] audit: type=1326 audit(2000000388.381:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16141 comm="syz.2.3720" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72748ce59 code=0x7fc00000 [ 573.836426][ T38] audit: type=1326 audit(2000000388.381:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16141 comm="syz.2.3720" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72748ce59 code=0x7fc00000 [ 573.836468][ T38] audit: type=1326 audit(2000000388.381:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16141 comm="syz.2.3720" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72748ce59 code=0x7fc00000 [ 573.836508][ T38] audit: type=1326 audit(2000000388.381:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16141 comm="syz.2.3720" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72748ce59 code=0x7fc00000 [ 573.850277][ T9861] usb 2-1: unable to get BOS descriptor or descriptor too short [ 573.850807][ T9861] usb 2-1: not running at top speed; connect to a high speed hub [ 573.853317][ T9861] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.853363][ T9861] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 573.858688][ T9861] usb 2-1: New USB device found, idVendor=2435, idProduct=8014, bcdDevice= 0.40 [ 573.858713][ T9861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.858731][ T9861] usb 2-1: Product: syz [ 573.858744][ T9861] usb 2-1: Manufacturer: syz [ 573.858757][ T9861] usb 2-1: SerialNumber: syz [ 574.163524][ T5729] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 574.163550][ T5729] usb 6-1: config 1 has no interface number 0 [ 574.163593][ T5729] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 574.163616][ T5729] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 16 [ 574.182282][ T5729] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 574.182309][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.182329][ T5729] usb 6-1: Product: syz [ 574.182343][ T5729] usb 6-1: Manufacturer: syz [ 574.182357][ T5729] usb 6-1: SerialNumber: syz [ 574.246386][T16158] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 574.246555][T16158] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 574.279009][ T5729] usb 6-1: Error in usbnet_get_endpoints (-22) [ 574.428591][T16165] netlink: 'syz.2.3728': attribute type 3 has an invalid length. [ 574.553234][T16168] FAULT_INJECTION: forcing a failure. [ 574.553234][T16168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.553268][T16168] CPU: 1 UID: 0 PID: 16168 Comm: syz.2.3729 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 574.553293][T16168] Tainted: [L]=SOFTLOCKUP [ 574.553300][T16168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 574.553310][T16168] Call Trace: [ 574.553318][T16168] [ 574.553326][T16168] dump_stack_lvl+0xe8/0x150 [ 574.553350][T16168] should_fail_ex+0x46b/0x600 [ 574.553379][T16168] _copy_from_iter+0x1d3/0x1670 [ 574.553418][T16168] ? __pfx__copy_from_iter+0x10/0x10 [ 574.553441][T16168] ? sock_alloc_send_pskb+0x8a2/0x9a0 [ 574.553471][T16168] ? __pfx__copy_from_iter+0x10/0x10 [ 574.553503][T16168] copy_page_from_iter+0x220/0x2d0 [ 574.553531][T16168] skb_copy_datagram_from_iter+0x306/0x710 [ 574.553568][T16168] packet_sendmsg+0x35be/0x4fd0 [ 574.553603][T16168] ? __lock_acquire+0x6b5/0x2d10 [ 574.553630][T16168] ? __lock_acquire+0x6b5/0x2d10 [ 574.553670][T16168] ? __pfx_packet_sendmsg+0x10/0x10 [ 574.553691][T16168] ? aa_sk_perm+0x703/0x950 [ 574.553724][T16168] ? __pfx_aa_sk_perm+0x10/0x10 [ 574.553746][T16168] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 574.553771][T16168] ? aa_sock_msg_perm+0x122/0x200 [ 574.553789][T16168] ? __pfx_packet_sendmsg+0x10/0x10 [ 574.553806][T16168] sock_sendmsg_nosec+0x112/0x150 [ 574.553827][T16168] __sys_sendto+0x402/0x590 [ 574.553855][T16168] ? __pfx___sys_sendto+0x10/0x10 [ 574.553898][T16168] ? ksys_write+0x248/0x270 [ 574.553922][T16168] ? __pfx_ksys_write+0x10/0x10 [ 574.553946][T16168] __x64_sys_sendto+0xde/0x100 [ 574.553969][T16168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.553989][T16168] do_syscall_64+0x15f/0x560 [ 574.554011][T16168] ? trace_irq_disable+0x3b/0x140 [ 574.554030][T16168] ? clear_bhb_loop+0x40/0x90 [ 574.554052][T16168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.554070][T16168] RIP: 0033:0x7fa72748ce59 [ 574.554087][T16168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.554102][T16168] RSP: 002b:00007fa7256e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 574.554121][T16168] RAX: ffffffffffffffda RBX: 00007fa727705fa0 RCX: 00007fa72748ce59 [ 574.554135][T16168] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000003 [ 574.554147][T16168] RBP: 00007fa7256e6090 R08: 0000200000000140 R09: 0000000000000014 [ 574.554159][T16168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.554170][T16168] R13: 00007fa727706038 R14: 00007fa727705fa0 R15: 00007ffc1c440118 [ 574.554198][T16168] [ 575.463650][ T60] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 575.639494][ T5608] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 575.768948][ T5729] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 575.789743][ T5608] usb 3-1: not running at top speed; connect to a high speed hub [ 575.790944][ T5608] usb 3-1: config 45 has an invalid interface number: 2 but max is 0 [ 575.790966][ T5608] usb 3-1: config 45 has no interface number 0 [ 575.790995][ T5608] usb 3-1: config 45 interface 2 has no altsetting 0 [ 575.793469][ T5608] usb 3-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 575.793494][ T5608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.793513][ T5608] usb 3-1: Product: syz [ 575.793526][ T5608] usb 3-1: Manufacturer: syz [ 575.793538][ T5608] usb 3-1: SerialNumber: syz [ 575.920247][ T5729] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 575.920270][ T5729] usb 7-1: config 1 has no interface number 0 [ 575.920371][ T5729] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 575.920397][ T5729] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 575.920419][ T5729] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 32 [ 575.920441][ T5729] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 575.923397][ T5729] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 575.923421][ T5729] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.923439][ T5729] usb 7-1: Product: syz [ 575.923503][ T5729] usb 7-1: Manufacturer: syz [ 575.923517][ T5729] usb 7-1: SerialNumber: syz [ 575.972896][T16191] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 575.997905][T16191] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 576.162349][ T5608] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 576.162460][ T5608] dvb-usb: bulk message failed: -22 (3/0) [ 576.200333][ T5608] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 576.202992][T16191] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 576.203011][ T5608] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 576.203068][ T5608] usb 3-1: media controller created [ 576.203200][ T5608] dvb-usb: bulk message failed: -22 (5/0) [ 576.203302][T16191] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 576.203330][ T5608] dvb-usb: MAC address reading failed. [ 576.205866][ T5608] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 576.224256][ T5729] usb 7-1: No status endpoint found [ 576.276641][ T5608] dvb-usb: bulk message failed: -22 (6/0) [ 576.276832][ T5608] dvb-usb: bulk message failed: -22 (6/0) [ 576.276915][ T5608] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 576.283444][ T5608] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input36 [ 576.292573][ T5608] dvb-usb: schedule remote query interval to 100 msecs. [ 576.292591][ T5608] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 576.304422][ T5608] usb 3-1: USB disconnect, device number 80 [ 576.385657][ T5608] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 576.482287][ T9861] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 576.482333][ T9861] usb 2-1: MIDIStreaming interface descriptor not found [ 576.599471][ T5791] usb 6-1: USB disconnect, device number 27 [ 576.632386][T16196] random: crng reseeded on system resumption [ 576.778159][ T9861] usb 2-1: USB disconnect, device number 117 [ 577.239646][ T9861] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 577.367710][ T9861] usb 2-1: device descriptor read/64, error -71 [ 577.537676][ T5729] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 577.637676][ T9861] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 577.699705][ T5729] usb 3-1: Using ep0 maxpacket: 16 [ 577.719114][ T5729] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 577.719147][ T5729] usb 3-1: can't read configurations, error -22 [ 577.777690][ T9861] usb 2-1: device descriptor read/64, error -71 [ 577.857684][ T5729] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 577.898774][ T9861] usb usb2-port1: attempt power cycle [ 578.010260][ T5729] usb 3-1: Using ep0 maxpacket: 16 [ 578.075840][ T5729] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 578.075867][ T5729] usb 3-1: can't read configurations, error -22 [ 578.076176][ T5729] usb usb3-port1: attempt power cycle [ 578.237716][ T9861] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 578.261375][ T9861] usb 2-1: device descriptor read/8, error -71 [ 578.417644][ T5729] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 578.438308][ T5729] usb 3-1: device descriptor read/8, error -71 [ 578.497617][ T9861] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 578.529805][ T9861] usb 2-1: device descriptor read/8, error -71 [ 578.637950][ T9861] usb usb2-port1: unable to enumerate USB device [ 578.677604][ T5729] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 578.698250][ T5729] usb 3-1: device descriptor read/8, error -71 [ 578.808995][ T5729] usb usb3-port1: unable to enumerate USB device [ 579.652316][ T9862] usb 7-1: USB disconnect, device number 13 [ 580.031128][ T60] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 580.054376][T16222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3746'. [ 580.054490][T16222] FAULT_INJECTION: forcing a failure. [ 580.054490][T16222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.054517][T16222] CPU: 0 UID: 0 PID: 16222 Comm: syz.1.3746 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 580.054542][T16222] Tainted: [L]=SOFTLOCKUP [ 580.054548][T16222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 580.054559][T16222] Call Trace: [ 580.054567][T16222] [ 580.054574][T16222] dump_stack_lvl+0xe8/0x150 [ 580.054600][T16222] should_fail_ex+0x46b/0x600 [ 580.054629][T16222] _copy_to_user+0x31/0xb0 [ 580.054650][T16222] simple_read_from_buffer+0xe1/0x170 [ 580.054681][T16222] proc_fail_nth_read+0x1be/0x230 [ 580.054704][T16222] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 580.054735][T16222] ? rw_verify_area+0x2ac/0x4e0 [ 580.054755][T16222] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 580.054776][T16222] vfs_read+0x212/0xa80 [ 580.054803][T16222] ? __pfx_vfs_read+0x10/0x10 [ 580.054824][T16222] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 580.054848][T16222] ? lockdep_hardirqs_on+0x7a/0x110 [ 580.054871][T16222] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 580.054894][T16222] ? mutex_lock_nested+0x152/0x1d0 [ 580.054912][T16222] ? fdget_pos+0x252/0x320 [ 580.054936][T16222] ksys_read+0x156/0x270 [ 580.054957][T16222] ? __pfx_ksys_read+0x10/0x10 [ 580.054983][T16222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.055003][T16222] do_syscall_64+0x15f/0x560 [ 580.055024][T16222] ? trace_irq_disable+0x3b/0x140 [ 580.055044][T16222] ? clear_bhb_loop+0x40/0x90 [ 580.055064][T16222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.055081][T16222] RIP: 0033:0x7fb92883d68e [ 580.055098][T16222] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 580.055112][T16222] RSP: 002b:00007fb926ad5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 580.055132][T16222] RAX: ffffffffffffffda RBX: 00007fb926ad66c0 RCX: 00007fb92883d68e [ 580.055145][T16222] RDX: 000000000000000f RSI: 00007fb926ad60a0 RDI: 0000000000000006 [ 580.055156][T16222] RBP: 00007fb926ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 580.055167][T16222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.055178][T16222] R13: 00007fb928af6038 R14: 00007fb928af5fa0 R15: 00007fff0cfb5ef8 [ 580.055207][T16222] [ 580.489010][T16229] FAULT_INJECTION: forcing a failure. [ 580.489010][T16229] name failslab, interval 1, probability 0, space 0, times 0 [ 580.489043][T16229] CPU: 1 UID: 0 PID: 16229 Comm: syz.1.3749 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 580.489069][T16229] Tainted: [L]=SOFTLOCKUP [ 580.489076][T16229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 580.489086][T16229] Call Trace: [ 580.489094][T16229] [ 580.489102][T16229] dump_stack_lvl+0xe8/0x150 [ 580.489127][T16229] should_fail_ex+0x46b/0x600 [ 580.489155][T16229] should_failslab+0xa8/0x100 [ 580.489178][T16229] kmem_cache_alloc_noprof+0x87/0x680 [ 580.489205][T16229] ? skb_clone+0x212/0x3a0 [ 580.489234][T16229] skb_clone+0x212/0x3a0 [ 580.489261][T16229] __netlink_deliver_tap+0x424/0x8b0 [ 580.489296][T16229] ? netlink_deliver_tap+0x2e/0x1b0 [ 580.489322][T16229] netlink_deliver_tap+0x19c/0x1b0 [ 580.489347][T16229] netlink_dump+0x8ed/0xe10 [ 580.489381][T16229] ? __pfx_netlink_dump+0x10/0x10 [ 580.489415][T16229] ? lockdep_hardirqs_on+0x7a/0x110 [ 580.489449][T16229] __netlink_dump_start+0x5cb/0x7e0 [ 580.489480][T16229] unix_diag_handler_dump+0x1b6/0x950 [ 580.489510][T16229] ? sock_diag_lock_handler+0x19/0x290 [ 580.489533][T16229] ? __pfx_unix_diag_handler_dump+0x10/0x10 [ 580.489556][T16229] ? __pfx_unix_diag_dump+0x10/0x10 [ 580.489581][T16229] ? sock_diag_lock_handler+0x19/0x290 [ 580.489600][T16229] ? sock_diag_lock_handler+0x19/0x290 [ 580.489626][T16229] sock_diag_rcv_msg+0x4cc/0x600 [ 580.489650][T16229] netlink_rcv_skb+0x232/0x4b0 [ 580.489673][T16229] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 580.489698][T16229] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 580.489733][T16229] ? netlink_deliver_tap+0x2e/0x1b0 [ 580.489756][T16229] ? netlink_deliver_tap+0x2e/0x1b0 [ 580.489785][T16229] netlink_unicast+0x780/0x920 [ 580.489816][T16229] netlink_sendmsg+0x813/0xb40 [ 580.489849][T16229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.489875][T16229] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 580.489898][T16229] ? __pfx_aa_file_perm+0x10/0x10 [ 580.489917][T16229] ? aa_sock_msg_perm+0x122/0x200 [ 580.489935][T16229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.489958][T16229] sock_sendmsg_nosec+0x112/0x150 [ 580.489981][T16229] sock_write_iter+0x308/0x410 [ 580.490000][T16229] ? __pfx_sock_write_iter+0x10/0x10 [ 580.490040][T16229] vfs_write+0x629/0xba0 [ 580.490069][T16229] ? __pfx_vfs_write+0x10/0x10 [ 580.490099][T16229] ? __fget_files+0x2a/0x420 [ 580.490125][T16229] ksys_write+0x156/0x270 [ 580.490148][T16229] ? __pfx_ksys_write+0x10/0x10 [ 580.490176][T16229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.490202][T16229] do_syscall_64+0x15f/0x560 [ 580.490224][T16229] ? trace_irq_disable+0x3b/0x140 [ 580.490243][T16229] ? clear_bhb_loop+0x40/0x90 [ 580.490265][T16229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.490283][T16229] RIP: 0033:0x7fb92887ce59 [ 580.490300][T16229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.490314][T16229] RSP: 002b:00007fb926ad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 580.490334][T16229] RAX: ffffffffffffffda RBX: 00007fb928af5fa0 RCX: 00007fb92887ce59 [ 580.490347][T16229] RDX: 0000000000000029 RSI: 00002000000002c0 RDI: 0000000000000006 [ 580.490358][T16229] RBP: 00007fb926ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 580.490370][T16229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.490381][T16229] R13: 00007fb928af6038 R14: 00007fb928af5fa0 R15: 00007fff0cfb5ef8 [ 580.490410][T16229] [ 580.800036][T16233] 9pnet_fd: Insufficient options for proto=fd [ 581.672750][T16261] netlink: 'syz.5.3759': attribute type 21 has an invalid length. [ 581.716238][T16262] trusted_key: syz.2.3760 sent an empty control message without MSG_MORE. [ 581.723592][T16261] binder: 16259:16261 ioctl c018620c 200000000300 returned -1 [ 581.743731][T16266] FAULT_INJECTION: forcing a failure. [ 581.743731][T16266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.743762][T16266] CPU: 1 UID: 0 PID: 16266 Comm: syz.1.3762 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 581.743782][T16266] Tainted: [L]=SOFTLOCKUP [ 581.743787][T16266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 581.743794][T16266] Call Trace: [ 581.743800][T16266] [ 581.743806][T16266] dump_stack_lvl+0xe8/0x150 [ 581.743824][T16266] should_fail_ex+0x46b/0x600 [ 581.743846][T16266] _copy_from_iter+0x1d3/0x1670 [ 581.743873][T16266] ? __pfx__copy_from_iter+0x10/0x10 [ 581.743891][T16266] ? sock_alloc_send_pskb+0x8a2/0x9a0 [ 581.743914][T16266] ? __pfx__copy_from_iter+0x10/0x10 [ 581.743938][T16266] copy_page_from_iter+0x220/0x2d0 [ 581.743960][T16266] skb_copy_datagram_from_iter+0x306/0x710 [ 581.743989][T16266] packet_sendmsg+0x35be/0x4fd0 [ 581.744018][T16266] ? __lock_acquire+0x6b5/0x2d10 [ 581.744040][T16266] ? __lock_acquire+0x6b5/0x2d10 [ 581.744066][T16266] ? __pfx_packet_sendmsg+0x10/0x10 [ 581.744083][T16266] ? aa_sk_perm+0x703/0x950 [ 581.744111][T16266] ? __pfx_aa_sk_perm+0x10/0x10 [ 581.744130][T16266] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 581.744151][T16266] ? aa_sock_msg_perm+0x122/0x200 [ 581.744165][T16266] ? __pfx_packet_sendmsg+0x10/0x10 [ 581.744176][T16266] sock_sendmsg_nosec+0x112/0x150 [ 581.744192][T16266] __sys_sendto+0x402/0x590 [ 581.744212][T16266] ? __pfx___sys_sendto+0x10/0x10 [ 581.744246][T16266] ? ksys_write+0x248/0x270 [ 581.744263][T16266] ? __pfx_ksys_write+0x10/0x10 [ 581.744281][T16266] __x64_sys_sendto+0xde/0x100 [ 581.744299][T16266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.744314][T16266] do_syscall_64+0x15f/0x560 [ 581.744333][T16266] ? trace_irq_disable+0x3b/0x140 [ 581.744349][T16266] ? clear_bhb_loop+0x40/0x90 [ 581.744366][T16266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.744379][T16266] RIP: 0033:0x7fb92887ce59 [ 581.744393][T16266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.744405][T16266] RSP: 002b:00007fb926ad6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 581.744420][T16266] RAX: ffffffffffffffda RBX: 00007fb928af5fa0 RCX: 00007fb92887ce59 [ 581.744431][T16266] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000003 [ 581.744440][T16266] RBP: 00007fb926ad6090 R08: 0000200000000140 R09: 0000000000000014 [ 581.744450][T16266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 581.744458][T16266] R13: 00007fb928af6038 R14: 00007fb928af5fa0 R15: 00007fff0cfb5ef8 [ 581.744481][T16266] [ 582.172280][T16278] tmpfs: Bad value for 'mpol' [ 582.287499][ T5608] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 582.376942][ T60] Bluetooth: hci1: unexpected event 0x08 length: 5 > 4 [ 582.437480][ T5608] usb 7-1: Using ep0 maxpacket: 8 [ 582.439918][ T5608] usb 7-1: config 168 has an invalid interface number: 255 but max is 0 [ 582.439941][ T5608] usb 7-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 582.439959][ T5608] usb 7-1: config 168 has no interface number 0 [ 582.439988][ T5608] usb 7-1: too many endpoints for config 168 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 582.440024][ T5608] usb 7-1: config 168 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 582.440048][ T5608] usb 7-1: config 168 interface 255 has no altsetting 0 [ 582.497663][ T5608] usb 7-1: config 168 has an invalid interface number: 255 but max is 0 [ 582.497686][ T5608] usb 7-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 582.497704][ T5608] usb 7-1: config 168 has no interface number 0 [ 582.497733][ T5608] usb 7-1: too many endpoints for config 168 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 582.497769][ T5608] usb 7-1: config 168 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 582.497793][ T5608] usb 7-1: config 168 interface 255 has no altsetting 0 [ 582.501201][ T5608] usb 7-1: config 168 has an invalid interface number: 255 but max is 0 [ 582.501223][ T5608] usb 7-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 582.501240][ T5608] usb 7-1: config 168 has no interface number 0 [ 582.501270][ T5608] usb 7-1: too many endpoints for config 168 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 582.501306][ T5608] usb 7-1: config 168 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 582.501331][ T5608] usb 7-1: config 168 interface 255 has no altsetting 0 [ 582.567413][ T5608] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 582.567440][ T5608] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.567459][ T5608] usb 7-1: Product: syz [ 582.567472][ T5608] usb 7-1: Manufacturer: syz [ 582.567485][ T5608] usb 7-1: SerialNumber: syz [ 582.582289][ T60] Bluetooth: hci1: unexpected event for opcode 0x100c [ 582.893228][ T5608] adutux 7-1:168.255: interrupt endpoints not found [ 582.909174][ T5608] usb 7-1: USB disconnect, device number 14 [ 583.017441][ T3131] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 583.167387][ T3131] usb 2-1: Using ep0 maxpacket: 32 [ 583.170493][ T3131] usb 2-1: unable to get BOS descriptor or descriptor too short [ 583.185886][ T3131] usb 2-1: config 13 has an invalid interface number: 178 but max is 0 [ 583.185910][ T3131] usb 2-1: config 13 has no interface number 0 [ 583.185940][ T3131] usb 2-1: config 13 interface 178 has no altsetting 0 [ 583.216430][ T3131] usb 2-1: New USB device found, idVendor=0846, idProduct=5f01, bcdDevice=e3.ed [ 583.216457][ T3131] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.216476][ T3131] usb 2-1: Product: syz [ 583.216489][ T3131] usb 2-1: Manufacturer: syz [ 583.216502][ T3131] usb 2-1: SerialNumber: syz [ 583.474227][T16294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.480746][T16294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.573819][ T60] Bluetooth: hci1: unexpected event for opcode 0x100c [ 584.022362][T16322] FAULT_INJECTION: forcing a failure. [ 584.022362][T16322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.022392][T16322] CPU: 0 UID: 0 PID: 16322 Comm: syz.6.3781 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 584.022413][T16322] Tainted: [L]=SOFTLOCKUP [ 584.022428][T16322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 584.022436][T16322] Call Trace: [ 584.022443][T16322] [ 584.022450][T16322] dump_stack_lvl+0xe8/0x150 [ 584.022471][T16322] should_fail_ex+0x46b/0x600 [ 584.022494][T16322] _copy_to_user+0x31/0xb0 [ 584.022513][T16322] simple_read_from_buffer+0xe1/0x170 [ 584.022541][T16322] proc_fail_nth_read+0x1be/0x230 [ 584.022562][T16322] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 584.022583][T16322] ? rw_verify_area+0x2ac/0x4e0 [ 584.022602][T16322] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 584.022622][T16322] vfs_read+0x212/0xa80 [ 584.022663][T16322] ? __pfx_vfs_read+0x10/0x10 [ 584.022685][T16322] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 584.022709][T16322] ? lockdep_hardirqs_on+0x7a/0x110 [ 584.022730][T16322] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 584.022753][T16322] ? mutex_lock_nested+0x152/0x1d0 [ 584.022770][T16322] ? fdget_pos+0x252/0x320 [ 584.022795][T16322] ksys_read+0x156/0x270 [ 584.022817][T16322] ? __pfx_ksys_read+0x10/0x10 [ 584.022845][T16322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.022865][T16322] do_syscall_64+0x15f/0x560 [ 584.022886][T16322] ? trace_irq_disable+0x3b/0x140 [ 584.022906][T16322] ? clear_bhb_loop+0x40/0x90 [ 584.022927][T16322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.022946][T16322] RIP: 0033:0x7f5a66cbd68e [ 584.022963][T16322] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 584.022978][T16322] RSP: 002b:00007f5a64f4dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 584.022997][T16322] RAX: ffffffffffffffda RBX: 00007f5a64f4e6c0 RCX: 00007f5a66cbd68e [ 584.023011][T16322] RDX: 000000000000000f RSI: 00007f5a64f4e0a0 RDI: 0000000000000007 [ 584.023023][T16322] RBP: 00007f5a64f4e090 R08: 0000000000000000 R09: 0000000000000000 [ 584.023034][T16322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.023045][T16322] R13: 00007f5a66f76038 R14: 00007f5a66f75fa0 R15: 00007ffc9cfcb048 [ 584.023073][T16322] [ 584.278107][ T3131] usb 2-1: Could not find all expected endpoints [ 584.278832][ T3131] usb-storage 2-1:13.178: USB Mass Storage device detected [ 584.481847][ T3131] usb 2-1: USB disconnect, device number 122 [ 584.867285][ T3131] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 585.017363][ T3131] usb 2-1: Using ep0 maxpacket: 8 [ 585.021273][ T3131] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 585.021296][ T3131] usb 2-1: config 0 has no interface number 0 [ 585.024713][ T3131] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 585.024738][ T3131] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.024756][ T3131] usb 2-1: Product: syz [ 585.024770][ T3131] usb 2-1: Manufacturer: syz [ 585.024783][ T3131] usb 2-1: SerialNumber: syz [ 585.081744][ T3131] usb 2-1: config 0 descriptor?? [ 585.101111][ T3131] usb 2-1: selecting invalid altsetting 1 [ 585.102175][ T3131] dvb_ttusb_budget: ttusb_init_controller: error [ 585.102191][ T3131] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 585.204445][ T3131] DVB: Unable to find symbol stv0299_attach() [ 585.251214][ T3131] DVB: Unable to find symbol tda8083_attach() [ 585.251228][ T3131] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 585.334052][ T9862] usb 2-1: USB disconnect, device number 123 [ 585.500016][T16355] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[12521] was attempted by ""[16355] [ 585.622816][T16362] FAULT_INJECTION: forcing a failure. [ 585.622816][T16362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.622849][T16362] CPU: 0 UID: 0 PID: 16362 Comm: syz.6.3794 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 585.622874][T16362] Tainted: [L]=SOFTLOCKUP [ 585.622880][T16362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 585.622890][T16362] Call Trace: [ 585.622897][T16362] [ 585.622906][T16362] dump_stack_lvl+0xe8/0x150 [ 585.622931][T16362] should_fail_ex+0x46b/0x600 [ 585.622959][T16362] _copy_from_iter+0x1d3/0x1670 [ 585.622994][T16362] ? __pfx__copy_from_iter+0x10/0x10 [ 585.623016][T16362] ? sock_alloc_send_pskb+0x8a2/0x9a0 [ 585.623046][T16362] ? __pfx__copy_from_iter+0x10/0x10 [ 585.623083][T16362] copy_page_from_iter+0x220/0x2d0 [ 585.623112][T16362] skb_copy_datagram_from_iter+0x306/0x710 [ 585.623148][T16362] packet_sendmsg+0x35be/0x4fd0 [ 585.623188][T16362] ? __lock_acquire+0x6b5/0x2d10 [ 585.623215][T16362] ? __lock_acquire+0x6b5/0x2d10 [ 585.623248][T16362] ? __pfx_packet_sendmsg+0x10/0x10 [ 585.623268][T16362] ? aa_sk_perm+0x703/0x950 [ 585.623308][T16362] ? __pfx_aa_sk_perm+0x10/0x10 [ 585.623330][T16362] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 585.623354][T16362] ? aa_sock_msg_perm+0x122/0x200 [ 585.623374][T16362] ? __pfx_packet_sendmsg+0x10/0x10 [ 585.623390][T16362] sock_sendmsg_nosec+0x112/0x150 [ 585.623410][T16362] __sys_sendto+0x402/0x590 [ 585.623437][T16362] ? __pfx___sys_sendto+0x10/0x10 [ 585.623479][T16362] ? ksys_write+0x248/0x270 [ 585.623502][T16362] ? __pfx_ksys_write+0x10/0x10 [ 585.623526][T16362] __x64_sys_sendto+0xde/0x100 [ 585.623547][T16362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.623566][T16362] do_syscall_64+0x15f/0x560 [ 585.623588][T16362] ? trace_irq_disable+0x3b/0x140 [ 585.623607][T16362] ? clear_bhb_loop+0x40/0x90 [ 585.623627][T16362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.623644][T16362] RIP: 0033:0x7f5a66cfce59 [ 585.623660][T16362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.623675][T16362] RSP: 002b:00007f5a64f4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 585.623693][T16362] RAX: ffffffffffffffda RBX: 00007f5a66f75fa0 RCX: 00007f5a66cfce59 [ 585.623706][T16362] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000003 [ 585.623718][T16362] RBP: 00007f5a64f4e090 R08: 0000200000000140 R09: 0000000000000014 [ 585.623729][T16362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 585.623740][T16362] R13: 00007f5a66f76038 R14: 00007f5a66f75fa0 R15: 00007ffc9cfcb048 [ 585.623766][T16362] [ 585.743913][ T60] Bluetooth: hci0: unexpected event for opcode 0x007f [ 586.007784][ T9862] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 586.167217][ T9862] usb 7-1: Using ep0 maxpacket: 8 [ 586.171013][ T9862] usb 7-1: config 0 has an invalid interface number: 197 but max is 0 [ 586.171037][ T9862] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.171055][ T9862] usb 7-1: config 0 has no interface number 0 [ 586.171098][ T9862] usb 7-1: too many endpoints for config 0 interface 197 altsetting 106: 74, using maximum allowed: 30 [ 586.171142][ T9862] usb 7-1: config 0 interface 197 altsetting 106 has 0 endpoint descriptors, different from the interface descriptor's value: 74 [ 586.171167][ T9862] usb 7-1: config 0 interface 197 has no altsetting 0 [ 586.171198][ T9862] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 586.171220][ T9862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.209038][ T9862] usb 7-1: config 0 descriptor?? [ 586.438735][ T9862] usb 7-1: string descriptor 0 read error: -32 [ 586.450159][ T9862] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 586.679434][ T60] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 586.967381][ T9862] gspca_vc032x: reg_r err -110 [ 586.967460][ T9862] vc032x 7-1:0.197: probe with driver vc032x failed with error -110 [ 587.030213][T16395] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3805'. [ 587.091084][ T9861] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 587.227257][ T9861] usb 3-1: device descriptor read/64, error -71 [ 587.477184][ T9861] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 587.605285][ T32] usb 7-1: USB disconnect, device number 15 [ 587.608569][ T9861] usb 3-1: device descriptor read/64, error -71 [ 587.730183][ T9861] usb usb3-port1: attempt power cycle [ 587.937112][ T5729] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 588.087266][ T9861] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 588.090169][ T5729] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 588.090193][ T5729] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.090210][ T5729] usb 6-1: config 0 has no interface number 0 [ 588.092429][ T5729] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=39.48 [ 588.092454][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.092471][ T5729] usb 6-1: Product: syz [ 588.092484][ T5729] usb 6-1: Manufacturer: syz [ 588.092496][ T5729] usb 6-1: SerialNumber: syz [ 588.123843][ T9861] usb 3-1: device descriptor read/8, error -71 [ 588.168664][ T5729] usb 6-1: config 0 descriptor?? [ 588.174283][ T5729] gspca_main: spca501-2.14.0 probing 0000:0000 [ 588.373478][ T5729] gspca_spca501: reg write: error -71 [ 588.373495][ T5729] spca501 6-1:0.64: Reg write failed for 0x02,0x0f,0x05 [ 588.373581][ T5729] spca501 6-1:0.64: probe with driver spca501 failed with error -22 [ 588.374289][ T5729] uvcvideo 6-1:0.64: probe with driver uvcvideo failed with error -22 [ 588.378722][ T9861] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 588.415891][ T9861] usb 3-1: device descriptor read/8, error -71 [ 588.419833][ T5729] usb 6-1: USB disconnect, device number 28 [ 588.518599][ T9861] usb usb3-port1: unable to enumerate USB device [ 588.922080][T16434] FAULT_INJECTION: forcing a failure. [ 588.922080][T16434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.922115][T16434] CPU: 0 UID: 0 PID: 16434 Comm: syz.1.3822 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 588.922140][T16434] Tainted: [L]=SOFTLOCKUP [ 588.922147][T16434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 588.922157][T16434] Call Trace: [ 588.922165][T16434] [ 588.922173][T16434] dump_stack_lvl+0xe8/0x150 [ 588.922198][T16434] should_fail_ex+0x46b/0x600 [ 588.922226][T16434] _copy_from_iter+0x1d3/0x1670 [ 588.922261][T16434] ? __pfx__copy_from_iter+0x10/0x10 [ 588.922299][T16434] ? sock_alloc_send_pskb+0x8a2/0x9a0 [ 588.922329][T16434] ? __pfx__copy_from_iter+0x10/0x10 [ 588.922360][T16434] copy_page_from_iter+0x220/0x2d0 [ 588.922389][T16434] skb_copy_datagram_from_iter+0x306/0x710 [ 588.922423][T16434] packet_sendmsg+0x35be/0x4fd0 [ 588.922459][T16434] ? __lock_acquire+0x6b5/0x2d10 [ 588.922488][T16434] ? __lock_acquire+0x6b5/0x2d10 [ 588.922520][T16434] ? __pfx_packet_sendmsg+0x10/0x10 [ 588.922539][T16434] ? aa_sk_perm+0x703/0x950 [ 588.922571][T16434] ? __pfx_aa_sk_perm+0x10/0x10 [ 588.922594][T16434] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 588.922618][T16434] ? aa_sock_msg_perm+0x122/0x200 [ 588.922636][T16434] ? __pfx_packet_sendmsg+0x10/0x10 [ 588.922654][T16434] sock_sendmsg_nosec+0x112/0x150 [ 588.922675][T16434] __sys_sendto+0x402/0x590 [ 588.922702][T16434] ? __pfx___sys_sendto+0x10/0x10 [ 588.922746][T16434] ? ksys_write+0x248/0x270 [ 588.922769][T16434] ? __pfx_ksys_write+0x10/0x10 [ 588.922793][T16434] __x64_sys_sendto+0xde/0x100 [ 588.922815][T16434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.922834][T16434] do_syscall_64+0x15f/0x560 [ 588.922855][T16434] ? trace_irq_disable+0x3b/0x140 [ 588.922874][T16434] ? clear_bhb_loop+0x40/0x90 [ 588.922896][T16434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.922914][T16434] RIP: 0033:0x7fb92887ce59 [ 588.922930][T16434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.922944][T16434] RSP: 002b:00007fb926ad6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 588.922963][T16434] RAX: ffffffffffffffda RBX: 00007fb928af5fa0 RCX: 00007fb92887ce59 [ 588.922976][T16434] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000003 [ 588.922987][T16434] RBP: 00007fb926ad6090 R08: 0000200000000140 R09: 0000000000000014 [ 588.922999][T16434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 588.923010][T16434] R13: 00007fb928af6038 R14: 00007fb928af5fa0 R15: 00007fff0cfb5ef8 [ 588.923045][T16434] [ 589.197143][ T5791] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 589.358312][ T5791] usb 7-1: Using ep0 maxpacket: 16 [ 589.362078][ T5791] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.362098][ T5791] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 589.367609][ T5791] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 589.367633][ T5791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.367651][ T5791] usb 7-1: Product: syz [ 589.367665][ T5791] usb 7-1: Manufacturer: syz [ 589.367678][ T5791] usb 7-1: SerialNumber: syz [ 589.446332][ T5791] usb 7-1: 0:2 : does not exist [ 589.597555][ T5791] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 589.779138][ T5791] usb 7-1: USB disconnect, device number 16 [ 589.918270][T12283] udevd[12283]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 590.216945][ T32] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 590.291396][T16466] loop5: detected capacity change from 0 to 1 [ 590.302588][ T3296] [ 590.302597][ T3296] ====================================================== [ 590.302605][ T3296] WARNING: possible circular locking dependency detected [ 590.302621][ T3296] syzkaller #0 Tainted: G L [ 590.302630][ T3296] ------------------------------------------------------ [ 590.302638][ T3296] kworker/u8:13/3296 is trying to acquire lock: [ 590.302648][ T3296] ffff888038d3f950 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 590.302694][ T3296] [ 590.302694][ T3296] but task is already holding lock: [ 590.302701][ T3296] ffffc9000e08fc40 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 590.302742][ T3296] [ 590.302742][ T3296] which lock already depends on the new lock. [ 590.302742][ T3296] [ 590.302749][ T3296] [ 590.302749][ T3296] the existing dependency chain (in reverse order) is: [ 590.302756][ T3296] [ 590.302756][ T3296] -> #5 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}: [ 590.302780][ T3296] process_one_work+0x8d7/0x1630 [ 590.302801][ T3296] worker_thread+0xb49/0x1140 [ 590.302822][ T3296] kthread+0x388/0x470 [ 590.302837][ T3296] ret_from_fork+0x514/0xb70 [ 590.302856][ T3296] ret_from_fork_asm+0x1a/0x30 [ 590.302878][ T3296] [ 590.302878][ T3296] -> #4 ((wq_completion)loop8){+.+.}-{0:0}: [ 590.302902][ T3296] touch_wq_lockdep_map+0xcb/0x180 [ 590.302917][ T3296] __flush_workqueue+0x14b/0x14f0 [ 590.302932][ T3296] drain_workqueue+0xd3/0x390 [ 590.302946][ T3296] lo_release+0x287/0x8f0 [ 590.302964][ T3296] bdev_release+0x541/0x660 [ 590.302984][ T3296] blkdev_release+0x15/0x20 [ 590.303004][ T3296] __fput+0x461/0xa70 [ 590.303018][ T3296] fput_close_sync+0x11f/0x240 [ 590.303032][ T3296] __x64_sys_close+0x7e/0x110 [ 590.303046][ T3296] do_syscall_64+0x15f/0x560 [ 590.303066][ T3296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.303082][ T3296] [ 590.303082][ T3296] -> #3 (&disk->open_mutex){+.+.}-{4:4}: [ 590.303105][ T3296] mutex_lock_nested+0x5a/0x1d0 [ 590.303121][ T3296] bdev_open+0xe0/0xcc0 [ 590.303139][ T3296] bdev_file_open_by_dev+0x1be/0x240 [ 590.303158][ T3296] swsusp_check+0x56/0x490 [ 590.303175][ T3296] software_resume+0x51/0x4c0 [ 590.303197][ T3296] resume_store+0x333/0x4f0 [ 590.303210][ T3296] kernfs_fop_write_iter+0x3b0/0x540 [ 590.303231][ T3296] vfs_write+0x629/0xba0 [ 590.303247][ T3296] ksys_write+0x156/0x270 [ 590.303262][ T3296] do_syscall_64+0x15f/0x560 [ 590.303281][ T3296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.303297][ T3296] [ 590.303297][ T3296] -> #2 (system_transition_mutex){+.+.}-{4:4}: [ 590.303320][ T3296] mutex_lock_nested+0x5a/0x1d0 [ 590.303335][ T3296] pm_test_store+0x95/0x480 [ 590.303352][ T3296] kernfs_fop_write_iter+0x3b0/0x540 [ 590.303370][ T3296] iter_file_splice_write+0x9a6/0x10f0 [ 590.303387][ T3296] direct_splice_actor+0x104/0x160 [ 590.303402][ T3296] splice_direct_to_actor+0x545/0xc80 [ 590.303417][ T3296] do_splice_direct+0x19b/0x2a0 [ 590.303432][ T3296] do_sendfile+0x547/0x7e0 [ 590.303452][ T3296] __se_sys_sendfile64+0x144/0x1a0 [ 590.303471][ T3296] do_syscall_64+0x15f/0x560 [ 590.303491][ T3296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.303506][ T3296] [ 590.303506][ T3296] -> #1 (&of->mutex){+.+.}-{4:4}: [ 590.303535][ T3296] mutex_lock_nested+0x5a/0x1d0 [ 590.303551][ T3296] kernfs_seq_start+0x5c/0x420 [ 590.303571][ T3296] seq_read_iter+0x3f8/0xe20 [ 590.303589][ T3296] vfs_read+0x58b/0xa80 [ 590.303604][ T3296] ksys_read+0x156/0x270 [ 590.303620][ T3296] do_syscall_64+0x15f/0x560 [ 590.303639][ T3296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.303655][ T3296] [ 590.303655][ T3296] -> #0 (&p->lock){+.+.}-{4:4}: [ 590.303678][ T3296] __lock_acquire+0x15a5/0x2d10 [ 590.303695][ T3296] lock_acquire+0x106/0x350 [ 590.303711][ T3296] mutex_lock_nested+0x5a/0x1d0 [ 590.303726][ T3296] seq_read_iter+0xb8/0xe20 [ 590.303744][ T3296] lo_rw_aio+0xc80/0xf00 [ 590.303761][ T3296] loop_process_work+0x92a/0x11b0 [ 590.303779][ T3296] process_one_work+0x98b/0x1630 [ 590.303797][ T3296] worker_thread+0xb49/0x1140 [ 590.303818][ T3296] kthread+0x388/0x470 [ 590.303833][ T3296] ret_from_fork+0x514/0xb70 [ 590.303850][ T3296] ret_from_fork_asm+0x1a/0x30 [ 590.303869][ T3296] [ 590.303869][ T3296] other info that might help us debug this: [ 590.303869][ T3296] [ 590.303875][ T3296] Chain exists of: [ 590.303875][ T3296] &p->lock --> (wq_completion)loop8 --> (work_completion)(&lo->rootcg_work) [ 590.303875][ T3296] [ 590.303907][ T3296] Possible unsafe locking scenario: [ 590.303907][ T3296] [ 590.303913][ T3296] CPU0 CPU1 [ 590.303920][ T3296] ---- ---- [ 590.303925][ T3296] lock((work_completion)(&lo->rootcg_work)); [ 590.303938][ T3296] lock((wq_completion)loop8); [ 590.303951][ T3296] lock((work_completion)(&lo->rootcg_work)); [ 590.303965][ T3296] lock(&p->lock); [ 590.303976][ T3296] [ 590.303976][ T3296] *** DEADLOCK *** [ 590.303976][ T3296] [ 590.303982][ T3296] 2 locks held by kworker/u8:13/3296: [ 590.303992][ T3296] #0: ffff88806c898138 ((wq_completion)loop5){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 590.304036][ T3296] #1: ffffc9000e08fc40 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 590.304080][ T3296] [ 590.304080][ T3296] stack backtrace: [ 590.304092][ T3296] CPU: 1 UID: 0 PID: 3296 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 590.304116][ T3296] Tainted: [L]=SOFTLOCKUP [ 590.304122][ T3296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 590.304133][ T3296] Workqueue: loop5 loop_rootcg_workfn [ 590.304152][ T3296] Call Trace: [ 590.304159][ T3296] [ 590.304166][ T3296] dump_stack_lvl+0xe8/0x150 [ 590.304186][ T3296] print_circular_bug+0x2e1/0x300 [ 590.304209][ T3296] check_noncircular+0x12e/0x150 [ 590.304234][ T3296] __lock_acquire+0x15a5/0x2d10 [ 590.304255][ T3296] ? unwind_next_frame+0xa6/0x2550 [ 590.304278][ T3296] ? __bfs+0x153/0x290 [ 590.304295][ T3296] ? __pfx_hlock_conflict+0x10/0x10 [ 590.304318][ T3296] ? seq_read_iter+0xb8/0xe20 [ 590.304337][ T3296] lock_acquire+0x106/0x350 [ 590.304354][ T3296] ? seq_read_iter+0xb8/0xe20 [ 590.304375][ T3296] ? seq_read_iter+0xb8/0xe20 [ 590.304396][ T3296] ? seq_read_iter+0xb8/0xe20 [ 590.304415][ T3296] mutex_lock_nested+0x5a/0x1d0 [ 590.304431][ T3296] ? seq_read_iter+0xb8/0xe20 [ 590.304453][ T3296] seq_read_iter+0xb8/0xe20 [ 590.304474][ T3296] ? kernfs_fop_read_iter+0x149/0x6b0 [ 590.304495][ T3296] ? __asan_memset+0x22/0x50 [ 590.304527][ T3296] lo_rw_aio+0xc80/0xf00 [ 590.304547][ T3296] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 590.304570][ T3296] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 590.304586][ T3296] ? reacquire_held_locks+0x104/0x190 [ 590.304608][ T3296] ? __pfx_lo_rw_aio+0x10/0x10 [ 590.304629][ T3296] ? rt_spin_unlock+0x14f/0x200 [ 590.304647][ T3296] ? kthread_associate_blkcg+0x359/0x600 [ 590.304665][ T3296] ? rt_spin_unlock+0x160/0x200 [ 590.304682][ T3296] loop_process_work+0x92a/0x11b0 [ 590.304708][ T3296] ? __pfx_loop_process_work+0x10/0x10 [ 590.304730][ T3296] ? add_lock_to_list+0xc7/0x100 [ 590.304751][ T3296] ? lockdep_unlock+0x5d/0xd0 [ 590.304767][ T3296] ? __lock_acquire+0x146e/0x2d10 [ 590.304791][ T3296] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 590.304808][ T3296] ? process_one_work+0x8be/0x1630 [ 590.304830][ T3296] ? process_one_work+0x8be/0x1630 [ 590.304856][ T3296] ? process_one_work+0x8be/0x1630 [ 590.304876][ T3296] process_one_work+0x98b/0x1630 [ 590.304904][ T3296] ? __pfx_process_one_work+0x10/0x10 [ 590.304925][ T3296] ? do_raw_spin_lock+0x12b/0x2f0 [ 590.304947][ T3296] worker_thread+0xb49/0x1140 [ 590.304978][ T3296] kthread+0x388/0x470 [ 590.304994][ T3296] ? __pfx_worker_thread+0x10/0x10 [ 590.305016][ T3296] ? __pfx_kthread+0x10/0x10 [ 590.305033][ T3296] ret_from_fork+0x514/0xb70 [ 590.305053][ T3296] ? __pfx_ret_from_fork+0x10/0x10 [ 590.305072][ T3296] ? __switch_to+0xc79/0x1410 [ 590.305088][ T3296] ? __pfx_kthread+0x10/0x10 [ 590.305106][ T3296] ret_from_fork_asm+0x1a/0x30 [ 590.305131][ T3296] [ 590.367755][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 590.397758][ T32] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11 [ 590.397787][ T32] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41155, setting to 1024 [ 590.397812][ T32] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 590.399757][ T32] usb 3-1: New USB device found, idVendor=05ff, idProduct=020f, bcdDevice= 0.22 [ 590.399780][ T32] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 590.399799][ T32] usb 3-1: Product: syz [ 590.399811][ T32] usb 3-1: Manufacturer: syz [ 590.399824][ T32] usb 3-1: SerialNumber: syz [ 590.612241][ T32] usbhid 3-1:1.0: can't add hid device: -22 [ 590.612322][ T32] usbhid 3-1:1.0: probe with driver usbhid failed with error -22 [ 590.614778][ T32] usb 3-1: USB disconnect, device number 89