last executing test programs: 2m16.502190402s ago: executing program 2 (id=161): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e00000001090212"], 0x0) setresuid(0x0, 0x0, 0xee00) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x0, 0x9, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x21}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x5}, @NFCTH_STATUS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x4890) syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) 2m15.087492106s ago: executing program 2 (id=169): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x3) unshare(0x40400) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, 0x0, 0x0, 0x1000000000) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) syz_open_dev$tty1(0xc, 0x4, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) listen(r1, 0x3) (async) unshare(0x40400) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') (async) pread64(r2, 0x0, 0x0, 0x1000000000) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 2m14.89586555s ago: executing program 2 (id=170): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000130001002bbd7000f8dbdf2504004f8008003300", @ANYRES32=0x0, @ANYBLOB="100025800c002e805c0b68f9"], 0x2c}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) setsockopt$sock_int(r1, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 2m14.847899951s ago: executing program 2 (id=171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00890d0180c20000030eb6ff7fffff86dd6900d2cd00143a0020010000000000000000000000000002ff02000000000000000000000000000187009078fc000000000000000000000000000001"], 0x4e) 2m14.711691779s ago: executing program 2 (id=172): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) (async) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2, 0x0, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x8) (async) landlock_restrict_self(r1, 0x8) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x6, 0x3, 0x0, 0x0, 0x3}, 0x30, 0x1) landlock_restrict_self(r2, 0x7) landlock_restrict_self(r2, 0xf) landlock_restrict_self(r1, 0x1) landlock_restrict_self(r2, 0x6) (async) landlock_restrict_self(r2, 0x6) landlock_restrict_self(r1, 0xb) (async) landlock_restrict_self(r1, 0xb) landlock_restrict_self(r2, 0x0) (async) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0xe) landlock_restrict_self(r2, 0xa) landlock_restrict_self(r1, 0xe) landlock_restrict_self(r1, 0xa) landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) (async) r3 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') dup(0xffffffffffffffff) (async) r4 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) mkdirat(r4, &(0x7f00000000c0)='./file0\x00', 0x42) write(r0, &(0x7f0000000000)='3', 0x4e) inotify_init() 2m14.539494943s ago: executing program 2 (id=173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000380)={'geneve1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f00000007c0)}, 0x10) listen(r4, 0x5) write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400008000000500050000000580080008"], 0x4a) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) r5 = socket(0x10, 0x3, 0x0) sendto(r5, &(0x7f0000000100)="44000000100005060000000000000000000000000000000000000000000000000c0003006d796c6f7770616e0800050002000000100012000b0001006c6f7770616e0000", 0x44, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x400, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000340)={0x2000, r7}, 0x0) landlock_restrict_self(r6, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x400) sendto(r5, &(0x7f0000000180)="44000000100005060000000000000000000000000000000000000000000000000c0003006d796c6f7770616e0800050003000000100012000b0001006c6f7770616e0000", 0x44, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000200)="44000000100005060000000000000000000000000000000000000000000000000c0003006d796c6f7770616e0800050004000000100012000b0001006c6f7770616e0000", 0x44, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000280)="44000000100005060000000000000000000000000000000000000000000000000c0003006d796c6f7770616e0800050005000000100012000b0001006c6f7770616e0000", 0x44, 0x0, 0x0, 0x0) r8 = socket(0x2, 0x2, 0x0) ioctl(r8, 0x8914, &(0x7f0000000300)="6d796c6f7770616e00000000000000000100"/32) r9 = socket(0xa, 0x2, 0x0) setsockopt(r9, 0x1, 0x19, &(0x7f0000000400)='mylowpan\x00', 0x9) sendto(r9, &(0x7f0000000440)='\x00', 0x1, 0x0, &(0x7f0000000480)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x1c) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2m3.6556901s ago: executing program 3 (id=213): mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) rmdir(&(0x7f0000000100)='./control\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m1.871487477s ago: executing program 3 (id=225): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x50}}, 0x0) (fail_nth: 9) 2m1.457918739s ago: executing program 3 (id=226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00890d0180c20000030eb6ff7fffff86dd6900d2cd00143a0020010000000000000000000000000002ff02000000000000000000000000000187009078fc000000000000000000000000000001"], 0x4e) 2m0.992512405s ago: executing program 3 (id=228): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f00006af000/0x400000)=nil) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@nfs_export_off}, {@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, 'upperdir'}}, {@dont_appraise}, {@uid_lt={'uid<', 0xee00}}]}) (async) chdir(&(0x7f0000000000)='./bus\x00') (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x129240, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r4, 0x400454a4, &(0x7f0000000040)=0x1) (async) read$FUSE(r4, 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) request_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='@\x00', 0xffffffffffffffff) syz_usb_connect(0x2, 0x24, &(0x7f00000010c0)={{0x12, 0x1, 0x110, 0xe5, 0x4f, 0xb8, 0x10, 0xbda, 0x139, 0xb8f9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x6, 0x0, 0x80, "", [{{0x9, 0x4, 0x49, 0x2, 0x0, 0xaf, 0x53, 0xff, 0x81}}]}}]}}, 0x0) (async) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='.\x02\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0) lseek(r7, 0x0, 0x1) (async) open$dir(&(0x7f0000000180)='./file2\x00', 0x10000, 0x84) setsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f00000000c0)=0x2, 0x4) (async) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') 1m59.439647006s ago: executing program 32 (id=173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000380)={'geneve1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f00000007c0)}, 0x10) listen(r4, 0x5) write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400008000000500050000000580080008"], 0x4a) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) r5 = socket(0x10, 0x3, 0x0) sendto(r5, &(0x7f0000000100)="44000000100005060000000000000000000000000000000000000000000000000c0003006d796c6f7770616e0800050002000000100012000b0001006c6f7770616e0000", 0x44, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x400, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000340)={0x2000, r7}, 0x0) landlock_restrict_self(r6, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x400) sendto(r5, &(0x7f0000000180)="44000000100005060000000000000000000000000000000000000000000000000c0003006d796c6f7770616e0800050003000000100012000b0001006c6f7770616e0000", 0x44, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000200)="44000000100005060000000000000000000000000000000000000000000000000c0003006d796c6f7770616e0800050004000000100012000b0001006c6f7770616e0000", 0x44, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000280)="44000000100005060000000000000000000000000000000000000000000000000c0003006d796c6f7770616e0800050005000000100012000b0001006c6f7770616e0000", 0x44, 0x0, 0x0, 0x0) r8 = socket(0x2, 0x2, 0x0) ioctl(r8, 0x8914, &(0x7f0000000300)="6d796c6f7770616e00000000000000000100"/32) r9 = socket(0xa, 0x2, 0x0) setsockopt(r9, 0x1, 0x19, &(0x7f0000000400)='mylowpan\x00', 0x9) sendto(r9, &(0x7f0000000440)='\x00', 0x1, 0x0, &(0x7f0000000480)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x1c) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 1m59.195427471s ago: executing program 3 (id=241): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x8041) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="220000001200010a000000000000000007000000"], 0x26}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x131) write(r1, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) write(r2, &(0x7f0000000000)='5', 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000440)={0x0, 0x9, 0x0, [0x2, 0x2, 0xffffffffffff71bd, 0x62, 0x3], [0x8, 0x6, 0xff, 0x7, 0x100000001, 0x674ec5b6, 0x2, 0xcd, 0x80000001, 0x6, 0x100, 0x8001, 0x0, 0x1000, 0xc2, 0x6, 0x5, 0x7, 0x8, 0x5, 0x1, 0x3, 0x9, 0xfffffffffffffffa, 0x40, 0x1, 0x0, 0x5, 0x3, 0x101, 0x1, 0x0, 0x7, 0x0, 0xa5a2, 0x7, 0x7, 0x4, 0x81, 0x0, 0x2, 0xfffffffffffffffe, 0x9, 0x5, 0x8, 0xfffffffffffffffa, 0x49, 0x73f, 0x8, 0x0, 0x8, 0x6, 0x7, 0x8, 0x2, 0x2, 0x7, 0x6, 0xa4, 0x0, 0x5, 0x8, 0xcf, 0x5, 0x6, 0x3ff, 0x9, 0x6, 0x1000, 0x4, 0x4, 0x7, 0xfffffffffffffff8, 0x7, 0x100, 0x30000000000, 0x184dcb9, 0x9, 0x0, 0x4, 0x5, 0x8000, 0x6000000, 0x1, 0x8, 0x7, 0xfffffffffffffff9, 0x6, 0x0, 0xffffffffffff9683, 0xc05, 0x7f, 0x9f, 0x9, 0x9, 0x6, 0x2, 0x7fffffff, 0x2, 0xfffffffffffff3df, 0x80000000, 0x4, 0x0, 0x4, 0x9, 0x1, 0x2, 0x3c, 0x60, 0x653fc5cb, 0x3, 0x100, 0x8, 0x0, 0xfffffffffffffffc, 0x9, 0x7, 0x1000, 0x10001, 0x2, 0x400]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000880)={r3, 0x1c, 0x6, 0x1}) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m58.839494523s ago: executing program 3 (id=244): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000000100)={0x16cdb, 0x1, 0x1}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x50d, 0x3201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0xc0, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x41, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff77, 0x77, 0x1, {0x22, 0xf23}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x3, 0x82}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 1m43.805199955s ago: executing program 33 (id=244): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000000100)={0x16cdb, 0x1, 0x1}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x50d, 0x3201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0xc0, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x41, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff77, 0x77, 0x1, {0x22, 0xf23}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x3, 0x82}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 9.216347378s ago: executing program 0 (id=753): ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000180)) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x88) 8.920413572s ago: executing program 0 (id=754): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0xb, 0x93, {0x93, 0x5, "03c5d0645c36ae36a764af2160a13fa94b6a0b4a491205442a0d25311956c136001e8bcf10828ad6298eb9c82935c99f5ad62667c8b439e0b59828a784c42a3176a80c7d1a798940de6f984263805292ffbb351888cb11682c350f32940b57dc0a284d9a7a906316ef30c3386d828ed8d014ba122d243bc63d9d9d2364112230088cd2aa5c181a1f0b023896d73cd38f29"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}}, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x3, 0xee, "48c905e5cbea3431c65b00c62039e9b9d29e78693c67e4898b1bc0c47922f1c3a67d3163f973b915ab25494bbac1ea0ef4ad4006b4f232fe7516a8b690f22b98fd90b2ce209e59685d19f2b5a3971ec711144824d59c0456fa653fd7c26534269728b4530d5523d5ddcd05457d0250fcb9e0299ace47106cf8ad707338f1241d7cff8f2deb8aac0ad540f26de0346a66ad4fdb7a8882a743aac8409bccc011c38463831ad02eae0d7498a8c0014f657a34e0c945d36de0ed1c31e21cb62b8935939b684ea0510404bf6f041985df84fa624792bb06cbd6189024c3cc6e4095dfbbf512ceb24ec2b3e137d392b723"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000680)=ANY=[@ANYBLOB="4c6c6e5fe8f53a2034e002077698300bf2d3f8fa75e1cfa52c5e"], &(0x7f0000000380)={0x40, 0x5, 0x2, '3B'}}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000440)={0x14, &(0x7f0000000140)={0x40, 0x9, 0x2, {0x2, 0xb}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcd5}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x0, 0xe, 0xa9, "2bc9f3b9a678e23094da665e65ca0b929fc4775dd56cfc6f8e1c4ac4b50cb390498851b7fe36c10105f3e61a369ff3c96e3b33d44f446779b40355b4b4a1da8cb32c6d3cde093877655c533d93c0e94f6486a59689300f940b0de14cf4c0c5981d63a013aba737a0f48e5b5dda13b02cf748ab86d1b3c2b0e31670aa838e418e5cda2e86c276d24899e0925bc5831d5a81a5053811af957ced1dbc49c093ff4e59c41ea295a85e93f5"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xd2}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0xc0, 0x5, 0x4, "03b923ec"}, &(0x7f0000000600)={0x40, 0x5, 0x5, "2fe48abb48"}}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.704010002s ago: executing program 0 (id=767): socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, &(0x7f0000000480)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, &(0x7f0000000580)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x4004662b, 0x0) 4.510675211s ago: executing program 0 (id=768): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) (fail_nth: 7) 4.049320579s ago: executing program 0 (id=769): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x8000}, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) fcntl$setlease(r3, 0x400, 0x1) open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) read$watch_queue(r4, &(0x7f00000001c0)=""/178, 0xb2) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @empty, 0x4e21, 0x3, 'nq\x00', 0x1, 0xa8a, 0x1007b}, 0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x84, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x84}}, 0x40) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x101}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe8b6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1827}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4010480}, 0x20000000) r7 = socket$kcm(0xa, 0x2, 0x0) getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r8, 0x40049366, &(0x7f0000000480)=0x6) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xfc}, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.898960031s ago: executing program 4 (id=771): ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000180)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x88) 3.791625128s ago: executing program 4 (id=772): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0xfffffffffffff000, 0x0, 0x0) 3.678642859s ago: executing program 4 (id=773): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x882) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000a40)={0xa0, 0x1, @ofdm={0x6, 0x18, 0x11, 0x12, 0x8, 0x6, 0x2}}) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f0000000540)='p:s/- ./file0:0', 0xf) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f00000000c0)) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x18400, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x3, 0x2}, 0x10) 3.656246864s ago: executing program 4 (id=774): r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000002180)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2002, 0x40000002, 0x4, 0xa17433da3c5d6980, 0x2, 0x81}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffffff8, 0x40, 0xc, 0xffffffbb, 0x40, 0x1, 0x1}, &(0x7f00000003c0)=0x9c) fsetxattr(r0, &(0x7f0000000300)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='user.incfs.id\x00') r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e21, 0x0, @loopback, 0x9}}, 0x9, 0xa}, 0x90) 3.60134794s ago: executing program 4 (id=775): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000b529788410e42416ed401020301090224000100000000090400020221f768000905013d000401ff070905021008"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000ac0)={0xa, 0x4e23, 0x2, @remote, 0x4}, 0x1c) setsockopt(r1, 0x1, 0x9, &(0x7f0000000000)="34b7a1e7", 0x4) setsockopt(r1, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b3, 0x0, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000600)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) socket$inet_tcp(0x2, 0x1, 0x0) syz_ublk_setup_queues(r9, r7, &(0x7f0000000500)={0x0, 0x1fffd, 0x0, 0x3, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x2, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c10, 0x10, 0x2, 0x1e3, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2987, 0x8000, 0x1, 0x392}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x700, {}, 0x1f, r6, '\x00', {0xfffe, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x2f, {0x9, 0x0, 0x200001, 0xffff, 0x4, 0x400}}) r11 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r11, 0x29, 0xd0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r13, 0x0) ioctl$FS_IOC_RESVSP(r12, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) 3.047359649s ago: executing program 0 (id=779): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x6, 0x4, 0x80}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl(r4, 0x4048aecb, &(0x7f0000000100)="070000000000000001000000ffffffff0010a5d4") r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40242, 0x31) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000100)={0x50, 0x0, r7, {0x7, 0x1f, 0x1000001, 0x506c7041, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) sendmsg$NFQNL_MSG_VERDICT(r8, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0x100, 0x1, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4922}, @NFQA_CT={0xa4, 0xb, 0x0, 0x1, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xb}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x100}]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc20}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x21}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x15}]}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x0, 0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x2}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x40}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x2}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x9}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x81}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x5}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x3f}}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x32}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, @NFQA_EXP={0x14, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3fb}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}]}, @NFQA_EXP={0x2c, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5e7}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_fuse_handle_req(r6, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000130001002bbd7000f8dbdf2504004f8008003300", @ANYRES32=0x0, @ANYBLOB="100025800c002e805c0b68f9"], 0x2c}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r11, 0x1, &(0x7f0000000480)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r9, &(0x7f0000000340)="8b", 0x47f, 0x6}]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r1, 0x8, 0x100, 0x3, 0x3ff, 0x7fff}, 0x14) 2.80466195s ago: executing program 5 (id=781): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, &(0x7f0000000080)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x8, 0x1b8, 0xffffffd, 0x10000, 0x3, 0x4002004c2, 0x20c4, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x9f9, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt(r5, 0x1000, 0x5209929b, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003", @ANYRES32, @ANYRESOCT=r4, @ANYRESHEX], 0x64}}, 0x0) 2.671894493s ago: executing program 5 (id=782): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r1 = epoll_create(0xb318) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r4, &(0x7f0000000000)='7', 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x1, 0xb000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1.492342625s ago: executing program 5 (id=783): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) mkdirat(r0, &(0x7f0000000000)='./config\x00', 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/cluster/mycluster/node/node0/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='777', 0x3) fallocate(r1, 0x0, 0x2b37, 0x81) 1.289436787s ago: executing program 5 (id=784): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x44802, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/acpi/drivers_autoprobe\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='1', 0x1) (async, rerun: 32) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r5) (rerun: 32) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0xfc, r7, 0x300, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x98b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72ed}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb932}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x80000001, @private1, 0x4}}}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x85}, 0x20000801) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r8, 0x400448dc, 0x0) (async, rerun: 64) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xd, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @generic='f']}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040810}, 0xc000) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r9, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000180)={'veth1_to_batadv\x00', {0x2, 0x0, @initdev}}) 929.379949ms ago: executing program 1 (id=785): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, &(0x7f0000000480)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, &(0x7f0000000580)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x4004662b, 0x0) 843.097125ms ago: executing program 1 (id=786): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f0000000000)='@\\\xc0!}\x00', 0x40, &(0x7f0000000040)={@_ha_fsid={[0xffffffa4, 0xcac]}, {0x3, 0x1, 0x2, 0xe450}}, 0xffff, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000140)=0x1}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000200)={0x6}, 0x4) 715.883027ms ago: executing program 1 (id=787): r0 = syz_open_dev$vim2m(0x0, 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x3, 0x3, 0x0, 0xfe}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000007c0)={0xf0f023, 0xfdfd}) 665.157997ms ago: executing program 1 (id=788): mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) close(0x3) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$kcm(0x29, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x653}], 0x1}, 0x84) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) r3 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write$make_it_fail(r3, 0x0, 0x2d) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='\n', 0x1) 571.300382ms ago: executing program 1 (id=789): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x88) 467.8016ms ago: executing program 4 (id=790): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000002c0)={0x14, &(0x7f0000000040)={0x0, 0x31, 0xc6, {0xc6, 0x16, "b5b88509278f35a1243046ce79c454b2a2c60968095cbfefc853c96070470fcebc23d6fd618fa0d5ff4771c234a8684da4832ed3557d6f388885d0f79611357a69cf278cde8c0629a70253f5e40a1f67280ea9f92790a6822516d6e4e55b7edab664eae656e122d078497f61d40e42d6345dadde1b101baac0192fd63938de214f6f0847a8535ba7cafcaabc0a7454d23228316f770b46e309521db93f986385ff28bf431224775a8dae071cec0aca055acdcb492bd639411cd3dc3fadee545ec762aec8"}}, &(0x7f0000000200)={0x0, 0x3, 0xb8, @string={0xb8, 0x3, "018f79c4733822775c255d4382b55417d1c338855a8e708f46503ddbb81a32eae37aa6d1fb39bfae7f89630b0be391774b03b3bd180333f4ac738c0b6558998b5d81240edcbd8a241ccf920953735b0745e975bad6883b823a9ae5a178cc99e2ca5fa55bcf3975f83c8631346097b5f2ee8b70b268573c55d96a44df47b8130f80362bb931551eaf50e350b449902f110cb253670f643707202ad010bb8bee8544a9bcbdc7562e0ce8fc9b8a45d5debb91229460df5c"}}}, &(0x7f0000000600)={0x34, &(0x7f0000000300)={0x60, 0xe, 0x4e, "d03eac3f9146e8bc4cd6a7b8558e680321cf4118ea9bd279114705253046ba9feda430d4bd3e13e2045f501d0eb11d87cade23821bc8047230dbd284a3bb73ce933027701d0b115edd190aa255fb"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000480)={0x20, 0x0, 0xc9, {0xc7, "96d0a57ca800ce7ba377233484a371118bc9288c5553de47bc68c5711c69e0a360fb9922fbc363ef0ce9e4f25bbd33a029e7b65c0a40f671b5c1c3301f920acc6b61b97e26f8de37b907272c4cd4ed808b1d23d92cc3f4dd6933f299560c0c4d3eb1057e7b9e4f9adac7ad1bcb508f0bd7345a0bdfe9ebb55f57db2b17bbc106fe1088332dd0ab53424ea51a03cc961252e2e55e2a2a1ad4262c53563cc92d00d95b4fa19cb8726f931998e1ec30b1a1faad10aecab26939483cb130e0c61f7e9d12fd485fe89b"}}, &(0x7f0000000580)={0x20, 0x1, 0x1}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0xff}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x20, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 363.908059ms ago: executing program 1 (id=791): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000040)) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000140)=0x1100) r2 = openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000001c0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xe0, "ee8e21ce5646ce"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000011c0)={{0x0, 0x1ff, 0x7, 0xdc, 0x101, 0x90000000000, 0x0, 0x81, 0x5, 0x6, 0xbb, 0x6, 0x13cc, 0x0, 0xfffffffffffffffe}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001240)={r3, r4, "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", "597c5c87c44d858be922e6258ce92eb94afcebe3eb9698c0ee516e2c93753a7b0c248f625ba54481fa85ca0fa57ceafd3a68de3e11f6a4e02bf1dbf9f38c26fc10fc5ce8c148406b0d9671a9069ee104b53d181d7feaea4ad4e0d360b4aab4291c0ee561e804f9b9de1e4b6fa0d9f9a7b4d6aeab1a1570efbd78d92258fbd4b40f28874b0e1e797cf2a01fe02bd2a6503a6c6b53efeca2a4f29e1240d6794060b74b3ee0060fc7d17cce78ab571e2eb1e654f5a73b87061d2a4c3a3df48777be2a4d9677823bff70585f1f6927b293d02fe6b606a84b2d925c0ba9e4616d416afa8a6c67c5bd6756e344815f6acf5fe3cabfe0de69353f8aebcb601caa8357bdb10076607ab4138825c8ed563cb02c0949f67ee1f70ee9a2a3f5493fafb2ca3936a066802ec45340e033f2463e0bc1a9cdda5a4713f88e9cd771765d191c773883bb34ea26775ac37c8c9edd1cefe0d04c7a3375ad0c8f0640cef9b5a7642d46e11fdbfd078534a2059041879337486232dec38a1bc8322f7dcf958a484cbdc5138d303b685c1e3f430d3e77b1a96f5ab712f67ce84d2dffd29e9ba060a5c6216cebde88862f1ab11635dc1fd1b68204968343dbe4817fc4a3cd256feef2954d02dc50408bccccbad1c9866777332e76cb34140b6f902faca93afbc7d84d511c7a5d1163c1420cc0a0812abb3e7f735dd6cc4d373748c8cb8a76bc63751d5f5194114028272ef014ce0c631ef0a04fb82a4b410b6123f99327589a9a8f1719239c79c13a0dc7d956860b028bf9e4473f11604ac179aaf956bd002ab993a678860cab145a0d3a866a6ed24ea46e082dbcaacdb63a5742fd54a8793c8fce52703a4ca901f7c33397792827f3869ed51e7742cc03c6949f4622f473bdd4fdcdb35586c1401e2f5f4a2db548df3b07324af82df1cc42310c3d49311e073203d7a5805713fbb8c429b83b964348a13f41aa7b5f85095e737079ee91ea9690ca86df9e137ce42cdfde3b5de2ef3cc549e7994a24b1886a56fcbc8a32abebdf634ce73e9f527f2329e80c224dc81a279a7f9d8c89e6b0004f64e7ff5fb3c100347fe02aa814ad5346fe19459a03211482a4cf45a689b97bb02d4c1b60094958a6685f7906c0c2c347619351f346c1c24c23e8480a527f6a863a5a356230f064f83a4e42ca7dc80f7fe100dc9a3e5f9589f28a4346ec897e904dc57236ceeff928c6c6debd212d31ee6acb231c96cf793ffb5bba30cb8af806acd53b6e7266a338690e5417a94d318be8e02755e7bafcdfbe77812fe0095317bdfc229f2ba5f8577e6bcdb362dbf2b98bd0b9d6cffb2422e4a7f1fa8a89a9c5542ff90a90f8ef066c888b9b3a8310e4a7137f7fd27129c813e8117cd706fff5120db82c7779851207acadd754ecf0c6743cff9871229d88d2a69f5095ce687157e8dec1e8687acd60a00a78686e36306a15fd343bd393b7b68376adecef91d5c5c3bd12c0720f0617f1d122f6ca45487de71ee5e771c08cd5de2aad1acc3154770d3c8bef0e9a0f9e4062a51bb641ac93fbfab68ceb2ee46b97240f17b4ff5748ac8b5257a2d5b2e8441e558615b1ad8161947e9aeddf99777ef029fe2d8f55e7fef27bb7305f90581ef833f10698c0df035c4671fd608780a820b4626bc6dc843e9d2780a04da35845832c433b168e9e286af5edcf1401853a169b6a9d3235b7e07932135eca76931ef49bfc814cdc5dcd5821fd1697c424e4ca589e0117b02bc908f33da76ef77c686fd3bcf5365f3f3fc2000bb380b85cffda9ea4971efd03be6d1e9fa326742d53fdb34c4e939129937e21098aa8bc78db008f81c6e2a6a958a6e8cacc9d19975597f39218cf6f1023a5ac4e85bcf6a0621683aa60214104071ac9d1c7d40d73137d7c2d3ef51a60995a05a616a819ad2aca48561c05a594925aae788c20adc4964039bd6afbfe718d478e746c2479812eeba80e02c5dff99cc29ec7f39447f8f184b0ecc174f0e938f2393d797d8378a0294bb35b8dd21a14658c37d5f59ad6c3729e7d72eaa7dd61d9dc871529402d9b8c70b6c1cc6353105f39e4e6f7dac763f838c89c8b9d00dafc10028c9dc5d24d4fc025f587f9b2983cca87a14f00d378fc74a5cf8cff91521fefad39862d6ffe984fdc100cf35b62deeea6040afe232ab23d7a9751a9cebd953c1ac3c60b1c1f4e883cf513e7c1239d0f1af891154403763a1292ab89ba28d87959f495b002a9d26ef9920de17dc9501d26d498c3a34d3a6b6f9b27967d03a08bec6e4fa7b31364134b95af4d023e5a436e21e408bab8a232b78c4c6fbb92c696810c44d7313b442d294e40c0c12ea0070183733c6b5350e173544a43c61781aa10887f6a26229f9f7d1e16ebfe26c4e147d7891bc3db464401f40820cd15cbf17865ba6132fbd389537cc9335468b3307f5dc712854bf01285686e4dc5e88ff926c3806f59b88df66557f1729cf356b440611cf6e3ca8140c7beb667fc0fdfadc8e729cfa8f32d5fdf6cac113d2e7a9f90fbdcde73f22bdb8bf39eab1cc657ccbebb058f393ac51cdaaccc088948efa89be43a592a10bb4b0988d170b519449b25b1bdb5fa0f5c143c2a43d653c21c1520c8eb1119717c8f642ff24d2140ca5bd0a68cf5c27decde028d992a55eb22402f13e27dfbb1c6b062df27d9e1806063cd16dd5ce3ba4724f99933f6c8627a91621f25db2dc82ed745f8be50e467dbee8dbd7a139e82d6fa4294954f4be1e15271e495f37da39fccde72387685592b6af8eff137458e239c61069a9db328c3437e99137ef8733490f44e7b3bc19cf7289ca3d6494070f3ff154b4768e9888657ecbb0b7960de697ab8da48daab8e2c932ebde495970d15349c5490d07b619b1683be82ff931b91aad1ca138972160b01b4ba3b097aff63e19d5756f2bb7b003bb2b695cdf331728eb9654acde38658f13439a90ca779d0e04191818309f1e4cc3d74b2902ef68301e4c929d42872b1c94ea7f65a10b1c1599f71234eaf002e7160dba5b02075bb6675533767e8ea273c03f61efe9d493902a675c6e8fc7e907a5c5e2c225f5af55ab6a423ed1fa0dbd485f8cf2884ff37286953da3c1a348401c326801e61d8ed4696692b1353eb6ccec0c18c4906e2b7eb618ec03ab5e09c998cdcf8abf0e8c1da29ad76552f7abe4450c27045ba3ca05dde340f3c6a61a4f8ab0fe0429d91526653608e0e806a3297df6c25319cff7de698cec647007070736bb7d9a870dd511629a5755ee54652147c3d1fb4fb66a5e4279bfd67f126478a5e7cccc1556a12e8490ca41cdb4b7526ff3325ee858128d7e6aad8e7c03a3a9853512f8dd729ba979ff7f97d92e89eacb366445b835c55636d90da6703a31241c42b866a4d3b8d4c4c3e1c3f1407cced2c666bdfeae5929513415cc1afd793c3203e4f490f5895438a77e67c02411ab52c19142631bc6f3184f97b76af3bb6fc9d710ae999008e9b575ba0fc7ce49055a84f1c439c4db6efd32f9480fe752b9ce1a23e88fbcc9319ca8967a1bb15436ab06939dc66370cba745ca33fb7a90b2163759d9d0ee913e5569d85f3a3455031b626237ec5748c94fbe9afdaef62bca47b755fa3d53ccc5c59d0444ba02bdb69635cef1e37947ab21dc3422886a88ad1ad90bc18282ff69a33a2d6be04e84ee32e35c60d31486a273391758da462a261e20aac86cceffbe0b22e858476eccd685638e7c69aec5e56ec2fc774df2eff216a3666d8761507272d811a4c7d0ea4c6fc00340069b01d2ba3a331d7bb14427fa3c1345f115d744bfb5d0f404707c9c7fcc94bf7c2df39d6d50cfbef6de70d582adfa9431cb5be53faaecea3e9610404a393cc1a9a5a5a2d0c7ba950fcaa55f0314dff3cb957b42c430b967c6b26b12f9200a1dcd235ce398f917164204b909fc8dc8c99365b92c35f974ac2e0937d9119339e229c45117d3930d9a0272847135837458557b2ba22fe26fc02c55c307c6608be65858d272eea190af92b3cc567465b08df07f86ea360931971a244edda931ed57654c88dd5ce42df401fa8e1faf30e78639e83afbe87c29ff6f8d7f982cd073c48864ad593ae787685f4e660392030e157a4ec0387fc618eadbb32437b5f8aeb613e1bfa2fc22ae90c72c5990343c8c18a6b7b99673848c00c23303b42b3c9b0bae039355af6d445cf7a82a01d192b5622207c77d8cdce898ed80c93c1be6e3a2c9f72192ce4d515d147fba3c93029fd1a5628a7a76c28babe57c99782579c2dea224becc76e9fcc4654fee9d16de249b034677859b1760e74a63b00bdb9dd02be55a58d16bdda0dfafd968f1b03231c37222be169d8d92c5585b87eef62747be1d20ea28e5193a7fa78f1f8121fa491ba3119a6f2b752bbc50f6fa675d17f376f1713b2e20004d3d01bae66505031bbe36068aee373543683866fda9721178d3dd72a18aba7379d8e58b47c75f72dab118452a72e63f2c316b1d050c396104f18ec1e9e214b3e8914564503f00b1ba2139135b52dd199e8edf4c0a9c73909d6f3d3d6a3cdf8add6646ec5921e4c5f4f7da9dc19e7897b58bbbb47ebf75600f1f10f7ed36408954369bcd72efef72547b042a69a46adff2192dfecc29fca642a67ca73534a4b9d0075d399493b438bfb3e479696e8257ddf144d1ec5e69bb9d90c906d3d4e65ac657b5bb3932b9c62201f7413f988c48b7ef75b029b32aecf3db7927d58ede4822a2900daa8af3c62b03439873ae599e70f122129218b13c18163ef0053368429b6db11a00f6f515d186dcba9d612794ac6b36499407f84ee53582872e5e7144cf45eabcd8232cf669ce5ef914d16d2a33a62eb8931e27eb692319fac8091476eecef537737961e9ef056105ac2ffb565b02c594320970fe092f7db1e0a8470b1d90895d6bb9cd6b26c757782942b8f97a3ce3c6747602689a8d6c87e70c75fff014da21c810b27375895dd1306d0c59643fe9b00528d88e38785cc3cd55c70960b945779ef05688cee95e363da8b930ba923a60fdbfc04f445dc787cf08cbc6a4c5997ee3cdf11f2dbfa8908460b1dee3a3e88ef75529ad68fbf928d3fde5dd95cc5f2ffcbcb5cace993df3924c4169f4081f3985d004b6a4dd27f254ea884662d64100bfb8f6d5d71b5ca675904ac929d5d17125ec84d541c6e1358c093ec8744c44af3b443a2a126768309dcbec141a27a1629bce5a74a476ff391209eaa799eb254e39b51870f70c34a469f38e30334fc5ffaec0916560d076ac33dc2038836cbdabf9470c8cac4f25f89027dd9a6346077706edcb363ef44a08f2e3b622d26fb83b8dd3e8dd19b2d286fadd3ba2316b21df2df171c764f44b47c34510e4fab99449ff05ea82bf618ba8269a7f55984ff550040290e3e7fc16b8631"}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000002240)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002280), 0x400882, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000022c0)={0x0, 0x9}, &(0x7f0000002300)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000002340)={r6, 0x47, "a89569160e7426637a7b83d6f197484769012308b6beb0120ef910aa3dfa2a6d7390810de1851f6a7ea0c7e5266313e058b8f4dcf7c140eb6ba354bed8f948577e80f62e77b986"}, &(0x7f00000023c0)=0x4f) r7 = syz_open_dev$hiddev(&(0x7f0000002400), 0x7, 0x40) sync_file_range(r7, 0xffffffffffff5282, 0x6c4, 0x6) r8 = syz_usb_connect(0x3, 0xa71, &(0x7f0000002440)={{0x12, 0x1, 0x310, 0xbc, 0x20, 0x62, 0x40, 0x12d1, 0x1436, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5f, 0x4, 0x0, 0x1b, 0x0, 0x7, "", [{{0x9, 0x4, 0xe2, 0x8, 0xa, 0x62, 0x7c, 0xf5, 0x8, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "16db7bb3f644"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x6, 0x3, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @mdlm={0x15, 0x24, 0x12, 0xfe}, @mbim={0xc, 0x24, 0x1b, 0xa9e, 0x4, 0x0, 0x8, 0x2}]}], [{{0x9, 0x5, 0x7, 0x0, 0x200, 0x2, 0x1, 0x1, [@generic={0x9e, 0x7, "2c051dc1eb3e5f7b30719f93b1820ffd7438f118a10e60816c5e3bb2bf2463952afda645d7fb1fb41e9dcbd804dc0c83be3cc71ca129b6fef7f657fa37b792839dd73172d4c13f518f868d195ee2b98592a7f6410331596d481a0aeadf4a888abe3c71f68b507a7d4fe4f52005226a65e34d8079e1e4f876a37263165ea054c3143722dc397f71ec8b56c572d5ffca032d825c3a43e0808d2fd98a44"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x9, 0x5, 0x7f, [@generic={0xb3, 0x0, "aa83197c4d3d32d13b81907da292e8c6eca2461721d677e37e9e08e869c5f6cac845a1e1887d49b5f880eb2424f34f20952c06c0dcb375d4abdf047b5e944f5195066d0ebb4f76b8b43305e2654dd6f274b8598b9331f0aec9beccb8e1263d29e20923b17b6c758904257694889a0f524a6b0c2b9413b5b9fd5f9a2fa274bc6f4d247585e1457ddb523bc5f708a195f5622406131fe412f7f42cbdf1566cb37c71c2123d8684ee02441dc4109dd9e3e328"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x20, 0x0, 0xe8, 0x42, [@generic={0x7c, 0x3, "49ad87f071048a341beef092c8cc520eae846e5dd42d822fa1c2aa96412c741ab17ea25d6fffb8644526860bfca90f3fbcf9f9e6d54401efb750791bc4b91b88fbfd955b07c9e80627c5184ee7dd513c4d0022be79630ca643f99726882f0a20d5b897a4548ca3d29a563f2e050d394eb441cb9f80225c1bcd9f"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0x1, 0x61, 0x37, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x26f}, @generic={0x65, 0x11, "701cac99612abff97066688f4b5851883d8c5ce08e9d6cc71c510b31e1d05157705d2f90e91e368c6f374b2f9f26fc63c589224b4f980747becc04b1fa42e4cfc529a408035f40db9be8198bc48c25534176cd143a1785e8486defce384db9d397d834"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x7bf, 0xf1, 0x8, 0xb3, [@generic={0x14, 0xf, "5f6b5dfd33e455b3cb879cf7fd388d758654"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0xc, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0xf044}]}}, {{0x9, 0x5, 0x3, 0x12, 0x8, 0x10, 0x7f, 0x0, [@generic={0x7c, 0x23, "ef338426079f6913eddd6ce1b2c2625e9beb7a40e8b3bfc5677f21b806030d848d1ff1aab680122520a7e43d218f990f23283f55ce12003faf21b3b7a5282a21d95912bd5aa2e37353e9611867b33f4369f5cb18c473ac655121ca5e099fdf6119387f6fa93079a9ee5c8dd3e02f41e690882fa0c88642a957f7"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x6}]}}, {{0x9, 0x5, 0x8, 0x1, 0x10, 0x3, 0x6, 0x6, [@generic={0x42, 0xe, "c65f5810e5a1f9e81041db396d5538dbadda869556491c998e490dddf576530ae2fcb928f7eea5d8a5925941de1ad75797caa5a98431ad64b2255b94b428c371"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0x7, 0x9, 0xff, [@generic={0x64, 0x22, "6a2d0b71efeb1117a0678afb6345cf8c65968d5c34aea0a51686f9c03c03c38545ce41b3f757c14ae2b496c236135d0264c9eb11e3322d3a810c1191924289000381264fcfe64ab05f158e2c42846c1ccbbab115b75a271ced75190d0c16f796fafa"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xf0, 0x1}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x9, 0xd, 0x5, [@generic={0xaf, 0x21, "87d964b03b41225d1ec94d4e5eda5a6f108196459cca9337e0bcdb4086b464f5b1236151914eb64938265bc6fc75f5d9ea88571ddcf21f62ac5d831f61f73d863555caaefb5c50b9495caf5de9093a7c1d3e181e5da4fcfc1661532033b903ad095c1c6ef865f0d2a2a3f90b17e5a73a84d99d647290d113165573120bef8862ed2eb5302503d65302cd68edd9cebb4b11bc55bbf34c0e86525266302afbe41d0afa10df9e4ae51261ff250740"}]}}]}}, {{0x9, 0x4, 0x6f, 0x7, 0x7, 0x48, 0x67, 0x10, 0x3, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "9bda"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x131, 0x664, 0x1ff, 0x24}, [@obex={0x5, 0x24, 0x15, 0x540}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}, @ncm={0x6, 0x24, 0x1a, 0x100, 0x12}, @acm={0x4, 0x24, 0x2, 0x1}, @dmm={0x7, 0x24, 0x14, 0x3, 0xda7}, @country_functional={0xa, 0x24, 0x7, 0x0, 0x0, [0x0, 0x2]}]}], [{{0x9, 0x5, 0x80, 0x8, 0x200, 0x3, 0x8a, 0xa, [@generic={0x4, 0x8, "fe9e"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x6, 0x3, 0xe, [@generic={0x24, 0x1d, "56b6fe583dd3c46c05cc22ceee48291e590107a546dfe4c3a300bfa5e9e152c42348"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x2}]}}, {{0x9, 0x5, 0x8, 0x3, 0x3ff, 0x81, 0x8, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd2, 0x8}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0xa3, 0xf, 0x5c, [@generic={0xd7, 0x23, "ce96e99f9386cdc1028a17dd8071c2d950b789da5f276eddfd8a2851b122ff0d9ff49a84addaf506b0edf1b63711e20585c6cbab062c47cd39931533dac233f397367ea1e899c241f17ea302bd3474007b8bbab1bcb2ac4bf668243a749e6fb87bc4e3073dc80fac2eacfc34c366cfbb060ffb97b5851105dc7eaf6ba085c3945ea4054802d5e80fb9ab619aef33646abdf570914135353fa841291f7d483634d1d3bb3e5464d012d0473b548beae2b364026cf7b2943f8825424cf2f418c69db30739d1f95f31bb6c41686b552b99d3a6b3edbdca"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x400, 0x7d, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xa, 0x7}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x5, 0x6, 0x81, [@generic={0x21, 0x28, "b661893335d4f6b981ebedb051fb9f1613463ef913f6009e9618fe0a0f5908"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x40, 0x8, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1000}, @generic={0xdc, 0x2, "48565c421736c478595ea9b243a4976b7b8c63ec0955f6dab040f328ea9f38659f08941fae36401a52cab358e47a6e8b9ab6ee864f152f13aa152dd75af7bca194fb17dc234546ee595b371d1fdf892cbc2cfe47cc76ee425e3b9a5b38841f4caba54e18e85d544959f68256efec030031c789e0dd9997888a40105d564eb5681b062db4c9a5ed023105bebd746c24d1082fe12aabe8e06f9d202ff2035e31af53b49a3c125edd8a55c43369c18ac02fce55ccfc26d5d9e6ab6471c5553e7fbea0001db90395f94398c96e2213d4f0ce9d219e2082d4fd28bf6a"}]}}]}}, {{0x9, 0x4, 0x9b, 0x7, 0x3, 0xfb, 0xff, 0x4c, 0x5, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "8d50"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x93, 0x0, 0x100, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7f}, @dmm={0x7, 0x24, 0x14, 0x0, 0x6}]}], [{{0x9, 0x5, 0xf, 0x10, 0x8, 0x3, 0x2, 0xa4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0xffff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x5, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xd2c8dd21c037d6f7, 0x4, 0x6}]}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0x8, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x800}, @generic={0x34, 0x11, "2562e6e08c5606e38e9b218234b0d9637becdb3cf58aa972de7050eed4ab0e31ffd9319be1af559e1c33e586b41ee22de46b"}]}}]}}, {{0x9, 0x4, 0x4b, 0x2, 0x5, 0x89, 0xa1, 0x27, 0xd5, [@hid_hid={0x9, 0x21, 0x7, 0xca, 0x1, {0x22, 0x10b}}], [{{0x9, 0x5, 0x6fc0c36662ab298a, 0x1, 0x638, 0x46, 0x3, 0x21, [@generic={0x81, 0x23, "8c25300e8d113ab5667e67bfa180f7c033c3dfac1cc5ee664726df6168e0b9c2a75ae2b2fd076e695582d6db47e6c12b1b24ebc02be94be789b90eb8f77671dcb124765187294cc20619978bd5614aa5cf148c1839c1288911fe40acb0ef1fccf033b2ca89656db5f4b73a0112c48ca7a07c1029fb9b7cd3a48521e17f82eb"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x0, 0x68, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x5, 0xfff5}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x6, 0x1, 0xa4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xa8}, @generic={0x101, 0x7, "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"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x6, 0x0, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x40, 0x3}, @generic={0x17, 0xf, "415b46a679847b9cef606c875564665c411ccfd3ae"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x10, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x7}, @generic={0x59, 0x22, "1af83c9d33eda8dab7b831e6b559575ddda598f93bc4ced10ffb954b1d19cd37f18fa10dc745e84ccde6e1d9f841bc3dfb8ffbdc942ed1e93a9a2c157bcb5f5c46ad05387d8d4ec8e9daf737c98b996898332884ec741e"}]}}]}}]}}]}}, &(0x7f0000003080)={0xa, &(0x7f0000002ec0)={0xa, 0x6, 0x250, 0xf8, 0x1, 0xc4, 0x8, 0xb}, 0x104, &(0x7f0000002f00)={0x5, 0xf, 0x104, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x8, 0x1, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x57, "e9fce03ad4bbf353c2fad5eff6539454"}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x8, 0xf000, 0xe, [0x3f00]}, @generic={0x18, 0x10, 0x1, "2c008b5a30f3334cf02a7b520bc57c30d98ca8d938"}, @generic={0xb9, 0x10, 0x8abde76ce1f4aea8, "dc86c873b0eda0abc860e305d0762dc5070bd3c1e5d6aacba2499ee352600acfd8b59ee54acd631dd9b3cf8f2fcf79a15c362af300c9f7b524c66a43511579577c02160d05aafa9619ebd4e5cf24a5da81b54783b6f4dc4ba6678392ecf40667246bbbade730df4a8f273c37b5666d1071cb98cf8696555410d1432f2d6c380e73a4f67105f97c27848fbb92791271f8c5d9c0e90fc226f3355968a1bcf69a017e1c72d0ba54bc53bac045163b8aa9d1f52487a86ba9"}]}, 0x1, [{0x4, &(0x7f0000003040)=@lang_id={0x4, 0x3, 0x459}}]}) syz_usb_control_io$uac2(r8, &(0x7f0000003200)={0x14, &(0x7f00000030c0)={0x20, 0x6, 0xcb, {0xcb, 0x10, "e51dacfd8ef3892b1db9b0b70dba6dc992beec70fe6cc8167c90e1f74ce5706b6258ead6f8d269b17c284a9160bba25491d793279450de424656362802572ae73083c0e0aa555a64e3cecb48443dc01c4657b9bf6b6af3f1a47c8f42508fe7b8b8dbbb4b048240c49b3a6a2eb3163124d8df38dff73ccbd3fef38fdc63452dbafbe4a396fa53ab3897a271d1a305cb857efd375f5be07cf2b9aa1db56219de0a0ed49f15fb5dbaaf75c7965d0d1e11aea72a4e6c5a94ab1bc4273e4a6c7045a838986bb951fbaa8286"}}, &(0x7f00000031c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}}, &(0x7f0000003480)={0x44, &(0x7f0000003240)={0x40, 0x18, 0x50, "79cb0339eb7c35b6c7332a02bbcdc3a595a488368af66c28c29f1cf54a213806b180b3570895e7559538a429a1ac978bd2ad2b98bb2e3b33025c7e553c3768712a9ba4e02fcf5b544ec744df17bbdf76"}, &(0x7f00000032c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000003300)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000003340)={0x20, 0x81, 0x3, "a20f45"}, &(0x7f0000003380)={0x20, 0x82, 0x2, "7bd4"}, &(0x7f00000033c0)={0x20, 0x83, 0x3, "d19508"}, &(0x7f0000003400)={0x20, 0x84, 0x1, "ab"}, &(0x7f0000003440)={0x20, 0x85, 0x3, "7e73ad"}}) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000003500)='wg0\x00', 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r7, 0x40109441, &(0x7f0000003540)={0x8, 0x2}) syz_usb_control_io(r8, &(0x7f0000003700)={0x2c, &(0x7f0000003580)={0x40, 0x23, 0x52, {0x52, 0x9, "ab404ce3600355d6737bf94a85080b2041b626bd5bf4bb99b579e8d9e6893dfa452a1ecc4f7b66ed3ced8b4f0461785f5b5da3d0e8eea88ebe85be00b49a81c756a6a4199fb6c5533ad7701d20c1a8e2"}}, &(0x7f0000003600)={0x0, 0x3, 0x31, @string={0x31, 0x3, "ac898466bf0aa10fe8f063ae63094c4bf400dc4b0af647fbc105f7493572495bf37c35deedec657b39ddc69b312050"}}, &(0x7f0000003640)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xf, 0x5, 0x7}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x1b, 0x10, 0xe, "4ed0a88cac5dc6cefd21b1b3c1f0f8837e820e54ad868e25"}]}}, &(0x7f0000003680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x1, 0x4, 0x0, "e47ae885", "03946dc7"}}, &(0x7f00000036c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x4, 0x6, 0x0, 0x4, 0x0, 0x2}}}, &(0x7f0000003b80)={0x84, &(0x7f0000003740)={0x0, 0x30, 0x46, "c2500445737513335aa34d9d444b816e32c495328dc03b09c559367e2e7c1e60c66b88e359b52b2e5c965fc451edbb7980a2a34a95d5728f3e478a705aca1ebf556d557f1c88"}, &(0x7f00000037c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000003800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000003840)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000003880)={0x20, 0x0, 0x4, {0x4, 0x4}}, &(0x7f00000038c0)={0x40, 0x7, 0x2, 0x21}, &(0x7f0000003900)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000003940)={0x40, 0xb, 0x2, "701e"}, &(0x7f0000003980)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000039c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000003a00)={0x40, 0x17, 0x6}, &(0x7f0000003a40)={0x40, 0x19, 0x2, "7711"}, &(0x7f0000003a80)={0x40, 0x1a, 0x2, 0xfffa}, &(0x7f0000003ac0)={0x40, 0x1c, 0x1, 0xc3}, &(0x7f0000003b00)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000003b40)={0x40, 0x21, 0x1, 0xfa}}) read$FUSE(r5, &(0x7f0000003c40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000005c80)={0x50, 0x0, r9, {0x7, 0x2d, 0x8, 0x800000, 0x8, 0xdb28, 0x8, 0x25, 0x0, 0x0, 0x4, 0x401}}, 0x50) r11 = pidfd_getfd(r5, r1, 0x0) close(r0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000005d00)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r11, 0xc01864c1, &(0x7f0000005d40)={r12, 0x1, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_ASKUMOUNT(r13, 0x80049370, &(0x7f0000005d80)) syz_usb_connect(0x1, 0x668, &(0x7f0000005dc0)={{0x12, 0x1, 0x110, 0xaa, 0xe5, 0x9b, 0xff, 0x1e2d, 0x6c, 0x2b49, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x656, 0x2, 0x9, 0x8, 0xa0, 0x6, "", [{{0x9, 0x4, 0x9, 0x9, 0xb, 0xff, 0xb8, 0x41, 0x2, [], [{{0x9, 0x5, 0x8, 0x10, 0x0, 0x0, 0x3, 0xc9, [@generic={0x76, 0x10, "d65a79b1da607a46b91e88841d41ee7a41981f241e2bac8ffb226dcb8770d3e7a30e6874e95e1b97b61c43310d54436e30279bbe0f61efd7e90b8a43a25c5a7b710b4d8004bbdc3a21d7929a101c70d737129f43fd90ef152e17c99050e0b64843e23c8e6abef3bff081cbf998391023d0b84f39"}, @generic={0xc1, 0xf, "690e20e9d7b3909929c18f2d6bae334f10e0e7f63e5c333d9560a77cc6b49ed2e5d199dcc3f2a654dc94a7d81def97f1dc2925b4276f71be5dc2c7fdd106a032c601ff8622218e59c7b8c7a57b4ce02aff02b28755e5bf3d2b3accc3154257862f62be7d996fce95f6c46d255379078da70b3c68f23ad5afd65b23f11746af4837c0d1dbf8c1b37680e9ebde871c738f18c3c7910e2564517fd1d78c10d0a4e32316160fe02c8b8bf709f34f0932f7f86fc273efad6cd7d184a89ef0c0a75a"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0xb, 0x2, 0xd8}}, {{0x9, 0x5, 0x2, 0x8, 0x200, 0x6, 0x3, 0x9b}}, {{0x9, 0x5, 0x3, 0x1, 0x40, 0x40, 0x4, 0x7e}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x5, 0x8a, 0x8}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x72, 0xa, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xf7, 0x40}]}}, {{0x9, 0x5, 0x9, 0x8, 0x3ff, 0xc7, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfc, 0x1ff}, @generic={0xae, 0xc, "c853bd71f1d0705632ff4cdc3ca7a557f261cfbafd11aa362aa5b738a77e91b71337d8145aad696681a313f0e30651d48c3cfa6ca1ca7a8285681a3ed0a4f5ce9c35ab2303b56eb6d1feb290013251ca8b44c21d658890c1c08deece286381412591d7a47b7723d73ebabacc846f0c947c53952c266875485b1f263a956853c562ecbf3364b81814d055333d526f43d1fc3fdbc580363ff270c85a0d093244760905a43b15ed2a2188ba2f25"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x40, 0x0, 0x9, 0x1}}, {{0x9, 0x5, 0x2, 0xc, 0x8, 0xd0, 0xc, 0xc6, [@generic={0x46, 0x22, "155dbf71bc3c222f0d3c37ce422174b3b0a9f54105dd6e406c0dd3f901af534612808cc0e3c46bd7fdfe3d3cb4ce767c542d4d84c0d244c1f26eeb77933169310837fd23"}, @generic={0x44, 0x22, "a4ff086aa2535d14867c726e5da69c7f291ffc3080c5a629fa2d36ac67259471a13e6e0a234e34e2b3dd0ce244b1e5fdc63f4adc31454ee532fc834c630d21c866a4"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0xfc, 0x6, 0xff}}, {{0x9, 0x5, 0x5, 0x8, 0x8, 0x4, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x7}]}}]}}, {{0x9, 0x4, 0x86, 0x7, 0x8, 0x74, 0x21, 0xb5, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x26}, [@processing_unit={0xb, 0x24, 0x7, 0x4, 0x2, 0x30, "4a301d34"}, @selector_unit={0x8, 0x24, 0x5, 0x1, 0x2, "a3b7a1"}, @processing_unit={0x9, 0x24, 0x7, 0x1, 0x2, 0x7, '\tI'}]}], [{{0x9, 0x5, 0x0, 0xd, 0x400, 0x8, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x55, 0x4}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x1, 0x0, 0x2, [@generic={0x71, 0xd, "6340df65eacd062012ab6cf57bad250e0edc0c99a656068f5f7ed6050e8392711af807a206d4a3a40ab58b78719e6d3c9f53cea4d2aa058d9ee9f974ce6e05367b1286f781c8443ca55203f0e2475f4aefefd6363a49c1c446fd846606f52c9a08e4675ce36769a4d5d2d4d849075c"}, @generic={0xb7, 0x10, "5a86fb38b438e1a5329188cb6f6cb8d863c6fab981da2e073debdc08c5bc6465b30176d0d7fc4ee72417c3b9a6f3cf52804f79f892259ce0ab5693f3023fac1ff1401f1ebb72735a291fe2a105ec497b8138c3c189025bf8240afb1a348cf18de37c326d4b22301c589a03afb0cf5eb3912c61b6e9ad07859466dc86a29b8a1da3263f24c638f34b09ddc124867ab2f861fd500e77d93aed8cd3feb8005d681270c512b4d798ce0a3a958b4f7bf74cf285b97e7b06"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x7, 0x2}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x0, 0xf7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x4}]}}, {{0x9, 0x5, 0x1, 0xc, 0x200, 0x7f, 0x80, 0xf9}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x0, 0x0, 0x7e, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x3}]}}, {{0x9, 0x5, 0xa, 0x8, 0x400, 0xf, 0x8b, 0xd6, [@generic={0xfd, 0xc, "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"}, @generic={0xa5, 0xd, "8d39f42c96bc54471f52d15e6b59b548f5aae4f96e700ab5c65b13e35d9ae98fa65029f28fd837e1f45daabdbbdd3a7574511eb6fa022ecf3f68a9b192a89f0d095ee5551f55d7aaa66c1a08ff342ab6bdfe0e20a4059e45c80984efbc1f5cd98144b013c519e75665dcde2aba83543a7f56b633ebfeb7108870b39c041ee4493ae9b2d2750f6ce6d742dd389b82c6149f07ef5ff74769d3e31e1911a94d48a8e867a8"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x20, 0x6, 0x4, 0x8}}]}}]}}]}}, &(0x7f00000065c0)={0xa, &(0x7f0000006440)={0xa, 0x6, 0x300, 0xaf, 0xaa, 0x5, 0x8, 0xc}, 0x5, &(0x7f0000006480)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000064c0)=@lang_id={0x4, 0x3, 0x280a}}, {0xa8, &(0x7f0000006500)=@string={0xa8, 0x3, "74bf8629cb891ca17d5d7d25520e40a54b003c895de8aac2fdaa74b85ef7773931c7eb07035912b7de53610d64b9901c64803845fce67539ea40b92d3bf42677c41f0b0c98953d5a9d3fa54e9da2d23a3cc378749c82f32bda8e78da93e0bfb004a1360547361d0632c8a75d7800118ae5498500e38194682ceb9ad2a6f878d9c42b0b5cdeb418f5a0313bc4c115f85f20dd9c51a0ac8cd53bd393a7e387a70eb3a07066702e"}}]}) openat(r11, &(0x7f0000006600)='./file0\x00', 0x200000, 0x2) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, r10, &(0x7f0000006640)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000006680)={r6, 0xb92, 0x10, 0x24, 0x3}, &(0x7f00000066c0)=0x18) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000006740)) 340.767323ms ago: executing program 5 (id=792): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @empty, 0x4e21, 0x3, 'nq\x00', 0x1, 0xa8a, 0x7b}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xfc}, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x41, 0x3}}], 0x18}, 0x0) 0s ago: executing program 5 (id=793): syz_open_dev$vim2m(&(0x7f0000000440), 0x0, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x800, 0x3, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e24, 0x0, @remote, 0x5}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000500)='l', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x30, 0x5, 0x5}, &(0x7f00000000c0)=0x18) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 197.718286][ T5763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.718309][ T5763] usb 5-1: Product: syz [ 197.718323][ T5763] usb 5-1: Manufacturer: syz [ 197.718336][ T5763] usb 5-1: SerialNumber: syz [ 197.824369][ T10] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 197.976580][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 197.977688][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.977718][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.977774][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.005919][ T10] usb 1-1: config 0 descriptor?? [ 198.169337][ T5763] kaweth 5-1:1.0: Firmware present in device. [ 198.371947][ T5763] kaweth 5-1:1.0: Statistics collection: 0 [ 198.371993][ T5763] kaweth 5-1:1.0: Multicast filter limit: 0 [ 198.372029][ T5763] kaweth 5-1:1.0: MTU: 0 [ 198.372040][ T5763] kaweth 5-1:1.0: Read MAC address 00:00:00:00:00:00 [ 198.416252][ T10] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 198.416346][ T10] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 198.416367][ T10] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 198.416391][ T10] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 198.416416][ T10] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 198.416442][ T10] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 198.416489][ T10] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 198.422882][ T10] pyra 0003:1E7D:2CF6.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 198.612001][ T10] pyra 0003:1E7D:2CF6.001A: couldn't init struct pyra_device [ 198.612078][ T10] pyra 0003:1E7D:2CF6.001A: couldn't install mouse [ 198.629139][ T10] pyra 0003:1E7D:2CF6.001A: probe with driver pyra failed with error -71 [ 198.632811][ T10] usb 1-1: USB disconnect, device number 54 [ 199.046587][ T5686] gspca_stk1135: reg_w 0x352 err -71 [ 199.047670][ T5686] gspca_stk1135: serial bus timeout: status=0x00 [ 199.047683][ T5686] gspca_stk1135: Sensor write failed [ 199.047711][ T5686] gspca_stk1135: serial bus timeout: status=0x00 [ 199.047719][ T5686] gspca_stk1135: Sensor write failed [ 199.047746][ T5686] gspca_stk1135: serial bus timeout: status=0x00 [ 199.047754][ T5686] gspca_stk1135: Sensor read failed [ 199.047807][ T5686] gspca_stk1135: serial bus timeout: status=0x00 [ 199.047817][ T5686] gspca_stk1135: Sensor read failed [ 199.047824][ T5686] gspca_stk1135: Detected sensor type unknown (0x0) [ 199.047855][ T5686] gspca_stk1135: serial bus timeout: status=0x00 [ 199.047863][ T5686] gspca_stk1135: Sensor read failed [ 199.047890][ T5686] gspca_stk1135: serial bus timeout: status=0x00 [ 199.047899][ T5686] gspca_stk1135: Sensor read failed [ 199.047923][ T5686] gspca_stk1135: serial bus timeout: status=0x00 [ 199.047932][ T5686] gspca_stk1135: Sensor write failed [ 199.047959][ T5686] gspca_stk1135: serial bus timeout: status=0x00 [ 199.047968][ T5686] gspca_stk1135: Sensor write failed [ 199.048049][ T5686] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 199.052746][ T5686] usb 2-1: USB disconnect, device number 36 [ 199.524260][ T5763] kaweth 5-1:1.0: Error setting receive filter [ 199.524479][ T5763] kaweth 5-1:1.0: probe with driver kaweth failed with error -5 [ 199.534798][ T5763] usb 5-1: USB disconnect, device number 22 [ 199.627400][ T7898] rust_binder: Write failure EFAULT in pid:460 [ 199.803636][ T7907] FAULT_INJECTION: forcing a failure. [ 199.803636][ T7907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.803675][ T7907] CPU: 1 UID: 0 PID: 7907 Comm: syz.1.576 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.803701][ T7907] Tainted: [L]=SOFTLOCKUP [ 199.803708][ T7907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.803717][ T7907] Call Trace: [ 199.803723][ T7907] [ 199.803730][ T7907] dump_stack_lvl+0xe8/0x150 [ 199.803756][ T7907] should_fail_ex+0x3eb/0x540 [ 199.803781][ T7907] strncpy_from_user+0x36/0x2c0 [ 199.803805][ T7907] __x64_sys_getxattr+0x19c/0x2b0 [ 199.803837][ T7907] ? __pfx___x64_sys_getxattr+0x10/0x10 [ 199.803882][ T7907] ? __pfx_ksys_write+0x10/0x10 [ 199.803917][ T7907] do_syscall_64+0x166/0x520 [ 199.803943][ T7907] ? trace_irq_disable+0x3b/0x140 [ 199.803970][ T7907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.803989][ T7907] ? clear_bhb_loop+0x70/0xc0 [ 199.804011][ T7907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.804030][ T7907] RIP: 0033:0x7fc0c079e159 [ 199.804052][ T7907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.804081][ T7907] RSP: 002b:00007fc0c174f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 199.804102][ T7907] RAX: ffffffffffffffda RBX: 00007fc0c0a25fa0 RCX: 00007fc0c079e159 [ 199.804116][ T7907] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000200 [ 199.804138][ T7907] RBP: 00007fc0c174f090 R08: 0000000000000000 R09: 0000000000000000 [ 199.804150][ T7907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.804161][ T7907] R13: 00007fc0c0a26038 R14: 00007fc0c0a25fa0 R15: 00007ffeafb89b18 [ 199.804191][ T7907] [ 199.929094][ T7909] syzkaller1: entered promiscuous mode [ 199.929118][ T7909] syzkaller1: entered allmulticast mode [ 200.334236][ T5763] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 200.344725][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 200.484924][ T5763] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 200.485970][ T5763] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 200.485997][ T5763] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 200.488009][ T5763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.488032][ T5763] usb 1-1: Product: syz [ 200.488047][ T5763] usb 1-1: Manufacturer: syz [ 200.488059][ T5763] usb 1-1: SerialNumber: syz [ 200.494203][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 200.497484][ T10] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 200.504856][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.504880][ T10] usb 2-1: Product: syz [ 200.504893][ T10] usb 2-1: Manufacturer: syz [ 200.504907][ T10] usb 2-1: SerialNumber: syz [ 200.515532][ T10] usb 2-1: config 0 descriptor?? [ 200.526584][ T10] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 200.536147][ T5701] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 200.541511][ T5686] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 200.698635][ T5701] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 200.699764][ T5701] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.699787][ T5701] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.700729][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 200.700750][ T5701] usb 5-1: SerialNumber: syz [ 200.734251][ T5686] usb 6-1: Using ep0 maxpacket: 32 [ 200.747677][ T5686] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 200.759526][ T5686] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.759571][ T5686] usb 6-1: config 0 has no interfaces? [ 200.759639][ T5686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.764760][ T5686] usb 6-1: config 0 descriptor?? [ 200.790139][ T5763] usb 1-1: Cannot retrieve CPort count: 0 [ 200.790193][ T5763] usb 1-1: Cannot retrieve CPort count: -5 [ 200.790241][ T5763] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -5 [ 200.915925][ T5701] usb 5-1: 0:2 : does not exist [ 200.920995][ T5701] usb 5-1: unit 5: unexpected type 0x09 [ 200.953477][ T5701] usb 5-1: USB disconnect, device number 23 [ 200.998367][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.023286][ T7918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.025577][ T7918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.097737][ T5686] usb 6-1: USB disconnect, device number 16 [ 201.734357][ T5763] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 201.886129][ T5763] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 201.899886][ T5763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.910639][ T5763] usb 5-1: Product: syz [ 201.910689][ T5763] usb 5-1: Manufacturer: syz [ 201.910709][ T5763] usb 5-1: SerialNumber: syz [ 202.011132][ T10] gspca_topro: reg_r err -71 [ 202.016057][ T10] gspca_topro: Sensor soi763a [ 202.035646][ T10] usb 2-1: USB disconnect, device number 37 [ 202.119120][ T5763] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 202.127407][ T7938] syzkaller1: entered promiscuous mode [ 202.127430][ T7938] syzkaller1: entered allmulticast mode [ 202.418286][ T6807] cgroup: fork rejected by pids controller in /syz5 [ 202.700786][ T5701] usb 5-1: USB disconnect, device number 24 [ 202.977274][ T6874] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.078164][ T6874] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.176377][ T5763] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 203.199007][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.214723][ T5763] ath9k_htc: Failed to initialize the device [ 203.225689][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.228882][ T6874] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.244801][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.253414][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.262765][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.271597][ T5701] usb 5-1: ath9k_htc: USB layer deinitialized [ 203.330507][ T10] usb 1-1: USB disconnect, device number 55 [ 203.510163][ T6874] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.519885][ T7968] FAULT_INJECTION: forcing a failure. [ 203.519885][ T7968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.519924][ T7968] CPU: 1 UID: 0 PID: 7968 Comm: syz.0.595 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.519950][ T7968] Tainted: [L]=SOFTLOCKUP [ 203.519957][ T7968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.519969][ T7968] Call Trace: [ 203.519976][ T7968] [ 203.519983][ T7968] dump_stack_lvl+0xe8/0x150 [ 203.520014][ T7968] should_fail_ex+0x3eb/0x540 [ 203.520041][ T7968] _copy_to_user+0x31/0xb0 [ 203.520066][ T7968] simple_read_from_buffer+0xe1/0x170 [ 203.520094][ T7968] proc_fail_nth_read+0x1bb/0x230 [ 203.520125][ T7968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.520155][ T7968] ? rw_verify_area+0x24a/0x4c0 [ 203.520181][ T7968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.520206][ T7968] vfs_read+0x213/0xa80 [ 203.520235][ T7968] ? __pfx___mutex_lock+0x10/0x10 [ 203.520263][ T7968] ? __pfx_vfs_read+0x10/0x10 [ 203.520288][ T7968] ? __fget_files+0x2a/0x420 [ 203.520315][ T7968] ? __fget_files+0x3a2/0x420 [ 203.520337][ T7968] ? __fget_files+0x2a/0x420 [ 203.520367][ T7968] ksys_read+0x150/0x270 [ 203.520394][ T7968] ? __pfx_ksys_read+0x10/0x10 [ 203.520417][ T7968] ? __pfx_tty_ioctl+0x10/0x10 [ 203.520457][ T7968] do_syscall_64+0x166/0x520 [ 203.520483][ T7968] ? trace_irq_disable+0x3b/0x140 [ 203.520508][ T7968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.520527][ T7968] ? clear_bhb_loop+0x70/0xc0 [ 203.520549][ T7968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.520568][ T7968] RIP: 0033:0x7ff54095e98e [ 203.520585][ T7968] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 203.520601][ T7968] RSP: 002b:00007ff541899fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 203.520621][ T7968] RAX: ffffffffffffffda RBX: 00007ff54189a6c0 RCX: 00007ff54095e98e [ 203.520635][ T7968] RDX: 000000000000000f RSI: 00007ff54189a0a0 RDI: 0000000000000006 [ 203.520647][ T7968] RBP: 00007ff54189a090 R08: 0000000000000000 R09: 0000000000000000 [ 203.520659][ T7968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.520671][ T7968] R13: 00007ff540c26038 R14: 00007ff540c25fa0 R15: 00007fff6a148f38 [ 203.520700][ T7968] [ 203.640473][ T7970] syzkaller1: entered promiscuous mode [ 203.640496][ T7970] syzkaller1: entered allmulticast mode [ 203.767705][ T5701] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 203.906129][ T5701] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 203.907130][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.907172][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.910562][ T5701] usb 5-1: config 0 descriptor?? [ 204.088017][ T7961] lo speed is unknown, defaulting to 1000 [ 204.100330][ T6874] bridge_slave_1: left allmulticast mode [ 204.100372][ T6874] bridge_slave_1: left promiscuous mode [ 204.103320][ T6874] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.121468][ T6874] bridge_slave_0: left allmulticast mode [ 204.121517][ T6874] bridge_slave_0: left promiscuous mode [ 204.121734][ T6874] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.157792][ T5701] usbhid 5-1:0.0: can't add hid device: -71 [ 204.163934][ T5701] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 204.180812][ T5701] usb 5-1: USB disconnect, device number 25 [ 204.194794][ T10] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 204.324143][ T10] usb 2-1: device descriptor read/64, error -71 [ 204.419178][ T6874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.431024][ T6874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.443379][ T6874] bond0 (unregistering): Released all slaves [ 204.584496][ T10] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 204.666736][ T5701] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 204.714320][ T10] usb 2-1: device descriptor read/64, error -71 [ 204.770959][ T5277] 8021q: adding VLAN 0 to HW filter on device eth9 [ 204.824940][ T10] usb usb2-port1: attempt power cycle [ 204.833056][ T5701] usb 5-1: Using ep0 maxpacket: 32 [ 204.838976][ T5701] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 204.850092][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.864285][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.888623][ T5701] usb 5-1: config 0 descriptor?? [ 204.899226][ T5701] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 204.912608][ T6874] hsr_slave_0: left promiscuous mode [ 204.918202][ T6874] hsr_slave_1: left promiscuous mode [ 204.920188][ T6874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.920210][ T6874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.927064][ T6874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.927086][ T6874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.956254][ T5701] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 204.968395][ T6874] veth1_macvtap: left promiscuous mode [ 204.968454][ T6874] veth0_macvtap: left promiscuous mode [ 204.968628][ T6874] veth1_vlan: left promiscuous mode [ 204.968691][ T6874] veth0_vlan: left promiscuous mode [ 205.166251][ T10] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 205.192787][ T10] usb 2-1: device descriptor read/8, error -71 [ 205.334145][ T5613] Bluetooth: hci1: command tx timeout [ 205.389749][ T5763] usb 5-1: USB disconnect, device number 26 [ 205.399438][ T5763] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 205.434451][ T10] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 205.454801][ T10] usb 2-1: device descriptor read/8, error -71 [ 205.556986][ T6874] team0 (unregistering): Port device team_slave_1 removed [ 205.565402][ T10] usb usb2-port1: unable to enumerate USB device [ 205.579757][ T52] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 205.590527][ T6874] team0 (unregistering): Port device team_slave_0 removed [ 205.810982][ T5277] 8021q: adding VLAN 0 to HW filter on device eth10 [ 205.886989][ T7961] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.895759][ T7961] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.895935][ T7961] bridge_slave_0: entered allmulticast mode [ 205.897602][ T7961] bridge_slave_0: entered promiscuous mode [ 205.903433][ T7961] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.905062][ T7961] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.905205][ T7961] bridge_slave_1: entered allmulticast mode [ 205.906937][ T7961] bridge_slave_1: entered promiscuous mode [ 205.971110][ T7961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.979324][ T7961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.004164][ T5763] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 206.082244][ T7961] team0: Port device team_slave_0 added [ 206.093409][ T7961] team0: Port device team_slave_1 added [ 206.164972][ T5763] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 206.175573][ T5763] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.175625][ T5763] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 206.200540][ T5763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.200584][ T5763] usb 1-1: Product: syz [ 206.200616][ T5763] usb 1-1: Manufacturer: syz [ 206.200632][ T5763] usb 1-1: SerialNumber: syz [ 206.213778][ T7961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.213795][ T7961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.213819][ T7961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.216161][ T7961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.216176][ T7961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.216202][ T7961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.347225][ T7961] hsr_slave_0: entered promiscuous mode [ 206.348262][ T7961] hsr_slave_1: entered promiscuous mode [ 206.571005][ T5763] usb 1-1: unit 4 not found! [ 206.636988][ T5763] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -16 [ 206.651921][ T5763] usb 1-1: USB disconnect, device number 56 [ 206.815545][ T5277] 8021q: adding VLAN 0 to HW filter on device eth11 [ 207.269734][ T8048] FAULT_INJECTION: forcing a failure. [ 207.269734][ T8048] name failslab, interval 1, probability 0, space 0, times 0 [ 207.269791][ T8048] CPU: 1 UID: 0 PID: 8048 Comm: syz.4.601 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.269817][ T8048] Tainted: [L]=SOFTLOCKUP [ 207.269823][ T8048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.269833][ T8048] Call Trace: [ 207.269839][ T8048] [ 207.269847][ T8048] dump_stack_lvl+0xe8/0x150 [ 207.269877][ T8048] should_fail_ex+0x3eb/0x540 [ 207.269911][ T8048] should_failslab+0xa8/0x100 [ 207.269931][ T8048] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 207.269957][ T8048] kmem_cache_alloc_noprof+0xa1/0x600 [ 207.269981][ T8048] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 207.270004][ T8048] ? kmem_cache_alloc_noprof+0x156/0x600 [ 207.270029][ T8048] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 207.270060][ T8048] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 207.270097][ T8048] mmu_topup_memory_caches+0x21/0x170 [ 207.270127][ T8048] kvm_mmu_load+0x9d/0x21e0 [ 207.270155][ T8048] ? kvm_msr_allowed+0x9a/0x490 [ 207.270182][ T8048] ? kvm_msr_allowed+0x9a/0x490 [ 207.270209][ T8048] ? kvm_msr_allowed+0x9a/0x490 [ 207.270233][ T8048] ? kvm_msr_allowed+0x3f4/0x490 [ 207.270258][ T8048] ? kvm_msr_allowed+0x9a/0x490 [ 207.270285][ T8048] ? kvm_apic_has_interrupt+0x740/0x770 [ 207.270321][ T8048] vcpu_run+0x4f68/0x79b0 [ 207.270376][ T8048] ? update_se+0x90/0x1020 [ 207.270441][ T8048] ? __pfx_vcpu_run+0x10/0x10 [ 207.270466][ T8048] ? lock_acquire+0x115/0x350 [ 207.270517][ T8048] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 207.270546][ T8048] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 207.270584][ T8048] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 207.270618][ T8048] kvm_vcpu_ioctl+0xa61/0xfd0 [ 207.270657][ T8048] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 207.270682][ T8048] ? hook_file_ioctl+0x1f2/0x600 [ 207.270722][ T8048] ? __fget_files+0x2a/0x420 [ 207.270747][ T8048] ? __fget_files+0x2a/0x420 [ 207.270768][ T8048] ? __fget_files+0x3a2/0x420 [ 207.270790][ T8048] ? __fget_files+0x2a/0x420 [ 207.270816][ T8048] ? bpf_lsm_file_ioctl+0x9/0x20 [ 207.270839][ T8048] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 207.270866][ T8048] __se_sys_ioctl+0xfc/0x170 [ 207.270897][ T8048] do_syscall_64+0x166/0x520 [ 207.270923][ T8048] ? trace_irq_disable+0x3b/0x140 [ 207.270945][ T8048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.270960][ T8048] ? clear_bhb_loop+0x70/0xc0 [ 207.270983][ T8048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.271001][ T8048] RIP: 0033:0x7fc5f639e159 [ 207.271018][ T8048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.271035][ T8048] RSP: 002b:00007fc5f45f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.271055][ T8048] RAX: ffffffffffffffda RBX: 00007fc5f6625fa0 RCX: 00007fc5f639e159 [ 207.271070][ T8048] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 207.271082][ T8048] RBP: 00007fc5f45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 207.271094][ T8048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 207.271104][ T8048] R13: 00007fc5f6626038 R14: 00007fc5f6625fa0 R15: 00007ffc4e0db538 [ 207.271135][ T8048] [ 207.346309][ T5763] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 207.414874][ T5613] Bluetooth: hci1: command tx timeout [ 207.554406][ T5763] usb 2-1: Invalid ep0 maxpacket: 32 [ 207.687862][ T7961] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 207.696271][ T5763] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 207.712483][ T7961] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 207.721689][ T7961] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 207.736855][ T7961] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 207.745508][ T7961] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 207.756438][ T7961] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 207.764670][ T7961] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 207.778408][ T7961] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 207.854352][ T5763] usb 2-1: Invalid ep0 maxpacket: 32 [ 207.860374][ T5763] usb usb2-port1: attempt power cycle [ 207.901899][ T7961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.927309][ T7961] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.934089][ T3983] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.934189][ T3983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.934536][ T5714] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 207.948291][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.948395][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.100420][ T5714] usb 5-1: Using ep0 maxpacket: 16 [ 208.101217][ T5714] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 208.104380][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.104402][ T5714] usb 5-1: Product: syz [ 208.104416][ T5714] usb 5-1: Manufacturer: syz [ 208.104430][ T5714] usb 5-1: SerialNumber: syz [ 208.107763][ T5714] usb 5-1: config 0 descriptor?? [ 208.119201][ T5714] usb 5-1: selecting invalid altsetting 1 [ 208.119222][ T5714] technisat-usb2: could not set alternate setting to 0 [ 208.244753][ T5763] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 208.271422][ T5763] usb 2-1: Invalid ep0 maxpacket: 32 [ 208.310381][ T5714] technisat-usb2: firmware version: 0.0 [ 208.310467][ T5714] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 208.405094][ T5763] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 208.425681][ T5763] usb 2-1: Invalid ep0 maxpacket: 32 [ 208.431365][ T5763] usb usb2-port1: unable to enumerate USB device [ 208.573172][ T7961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.614188][ T5613] Bluetooth: hci3: command 0x1003 tx timeout [ 208.623060][ T52] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 208.732214][ T8099] netlink: 128 bytes leftover after parsing attributes in process `syz.4.602'. [ 208.733821][ T8099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.735306][ T5714] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 208.736332][ T5714] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 208.736382][ T5714] usb 5-1: media controller created [ 208.736905][ T5714] technisat-usb2: i2c-error: out failed 53 = -22 [ 208.737035][ T5714] dvb-usb: MAC address reading failed. [ 208.756990][ T5714] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 208.877789][ T5714] DVB: Unable to find symbol stv090x_attach() [ 208.945682][ T5714] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 209.034187][ T5714] rc_core: IR keymap rc-technisat-usb2 not found [ 209.034226][ T5714] Registered IR keymap rc-empty [ 209.035448][ T5714] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 209.040053][ T5714] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input46 [ 209.068601][ T5714] dvb-usb: schedule remote query interval to 100 msecs. [ 209.069410][ T5714] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 209.080716][ T5714] usb 5-1: USB disconnect, device number 27 [ 209.172036][ T7961] veth0_vlan: entered promiscuous mode [ 209.193829][ T7961] veth1_vlan: entered promiscuous mode [ 209.237928][ T7961] veth0_macvtap: entered promiscuous mode [ 209.257919][ T7961] veth1_macvtap: entered promiscuous mode [ 209.290465][ T5714] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 209.316455][ T7961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.356220][ T7961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.420285][ T272] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.461417][ T8121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.603'. [ 209.474782][ T6874] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.495392][ T52] Bluetooth: hci1: command tx timeout [ 209.531598][ T272] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.698079][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.707022][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.707058][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.883816][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.883867][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.301881][ T8142] syzkaller1: entered promiscuous mode [ 210.313074][ T8142] syzkaller1: entered allmulticast mode [ 210.674410][ T5714] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 210.710321][ T8162] FAULT_INJECTION: forcing a failure. [ 210.710321][ T8162] name failslab, interval 1, probability 0, space 0, times 0 [ 210.710387][ T8162] CPU: 1 UID: 0 PID: 8162 Comm: syz.0.610 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.710412][ T8162] Tainted: [L]=SOFTLOCKUP [ 210.710419][ T8162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.710429][ T8162] Call Trace: [ 210.710435][ T8162] [ 210.710441][ T8162] dump_stack_lvl+0xe8/0x150 [ 210.710468][ T8162] should_fail_ex+0x3eb/0x540 [ 210.710493][ T8162] should_failslab+0xa8/0x100 [ 210.710516][ T8162] __kmalloc_noprof+0xfe/0x720 [ 210.710541][ T8162] ? rcu_is_watching+0x16/0xb0 [ 210.710560][ T8162] ? tomoyo_realpath_from_path+0xef/0x640 [ 210.710582][ T8162] ? tomoyo_realpath_from_path+0xef/0x640 [ 210.710610][ T8162] tomoyo_realpath_from_path+0xef/0x640 [ 210.710651][ T8162] ? tomoyo_path_number_perm+0x219/0x5f0 [ 210.710680][ T8162] tomoyo_path_number_perm+0x246/0x5f0 [ 210.710712][ T8162] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 210.710741][ T8162] ? __lock_acquire+0x6df/0x2e50 [ 210.710781][ T8162] ? hook_file_ioctl+0x1f2/0x600 [ 210.710819][ T8162] ? __fget_files+0x2a/0x420 [ 210.710846][ T8162] ? __fget_files+0x2a/0x420 [ 210.710870][ T8162] ? __fget_files+0x3a2/0x420 [ 210.710893][ T8162] ? __fget_files+0x2a/0x420 [ 210.710919][ T8162] security_file_ioctl+0xc3/0x2a0 [ 210.710949][ T8162] __se_sys_ioctl+0x47/0x170 [ 210.710979][ T8162] do_syscall_64+0x166/0x520 [ 210.711006][ T8162] ? trace_irq_disable+0x3b/0x140 [ 210.711032][ T8162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.711051][ T8162] ? clear_bhb_loop+0x70/0xc0 [ 210.711074][ T8162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.711094][ T8162] RIP: 0033:0x7ff54099e159 [ 210.711112][ T8162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.711128][ T8162] RSP: 002b:00007ff54189a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.711149][ T8162] RAX: ffffffffffffffda RBX: 00007ff540c25fa0 RCX: 00007ff54099e159 [ 210.711164][ T8162] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 210.711174][ T8162] RBP: 00007ff54189a090 R08: 0000000000000000 R09: 0000000000000000 [ 210.711187][ T8162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.711198][ T8162] R13: 00007ff540c26038 R14: 00007ff540c25fa0 R15: 00007fff6a148f38 [ 210.711228][ T8162] [ 210.711248][ T8162] ERROR: Out of memory at tomoyo_realpath_from_path. [ 210.836125][ T5714] usb 5-1: unable to get BOS descriptor or descriptor too short [ 210.836608][ T5714] usb 5-1: not running at top speed; connect to a high speed hub [ 210.836637][ T5714] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 210.837805][ T5714] usb 5-1: config 2 has an invalid interface number: 8 but max is 0 [ 210.837828][ T5714] usb 5-1: config 2 has no interface number 0 [ 210.837866][ T5714] usb 5-1: config 2 interface 8 has no altsetting 0 [ 210.841928][ T5714] usb 5-1: string descriptor 0 read error: -22 [ 210.842059][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.912953][ T10] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 211.130506][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 211.130572][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0921, bcdDevice=89.dc [ 211.136514][ T8173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.139915][ T8173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.150734][ T5714] usbtest 5-1:2.8: Linux user mode ISO test driver [ 211.150756][ T5714] usbtest 5-1:2.8: full-speed {control iso-out} tests (+alt) [ 211.164172][ T10] usb 2-1: config 129 has an invalid interface number: 195 but max is 0 [ 211.164201][ T10] usb 2-1: config 129 has no interface number 0 [ 211.164227][ T10] usb 2-1: config 129 interface 195 has no altsetting 0 [ 211.206843][ T10] usb 2-1: string descriptor 0 read error: -22 [ 211.206977][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.277498][ T10] gspca_main: tv8532-2.14.0 probing 046d:0921 [ 211.286381][ T8177] FAULT_INJECTION: forcing a failure. [ 211.286381][ T8177] name failslab, interval 1, probability 0, space 0, times 0 [ 211.307450][ T8177] CPU: 0 UID: 0 PID: 8177 Comm: syz.0.612 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.307486][ T8177] Tainted: [L]=SOFTLOCKUP [ 211.307495][ T8177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.307507][ T8177] Call Trace: [ 211.307514][ T8177] [ 211.307521][ T8177] dump_stack_lvl+0xe8/0x150 [ 211.307555][ T8177] should_fail_ex+0x3eb/0x540 [ 211.307581][ T8177] should_failslab+0xa8/0x100 [ 211.307612][ T8177] __kmalloc_noprof+0xfe/0x720 [ 211.307639][ T8177] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 211.307670][ T8177] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 211.307707][ T8177] __memcg_list_lru_alloc+0x1d9/0x760 [ 211.307738][ T8177] ? xa_load+0x60/0x210 [ 211.307762][ T8177] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 211.307790][ T8177] ? xa_load+0x60/0x210 [ 211.307823][ T8177] __memcg_slab_post_alloc_hook+0x3c3/0xd90 [ 211.307855][ T8177] ? __memcg_slab_post_alloc_hook+0x202/0xd90 [ 211.307900][ T8177] kmem_cache_alloc_lru_noprof+0x351/0x5f0 [ 211.307927][ T8177] ? kmem_cache_alloc_lru_noprof+0x153/0x5f0 [ 211.307953][ T8177] ? aio_alloc_inode+0x2a/0x80 [ 211.307980][ T8177] ? aio_alloc_inode+0x2a/0x80 [ 211.308014][ T8177] ? __pfx_aio_alloc_inode+0x10/0x10 [ 211.308039][ T8177] aio_alloc_inode+0x2a/0x80 [ 211.308065][ T8177] alloc_inode+0x6a/0x1b0 [ 211.308088][ T8177] alloc_anon_inode+0x1e/0x330 [ 211.308113][ T8177] aio_setup_ring+0x104/0xe20 [ 211.308141][ T8177] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 211.308170][ T8177] ? pcpu_alloc_noprof+0x1036/0x1900 [ 211.308196][ T8177] ? __pfx_aio_setup_ring+0x10/0x10 [ 211.308232][ T8177] ioctx_alloc+0x313/0x830 [ 211.308259][ T8177] ? __might_fault+0xaf/0x130 [ 211.308285][ T8177] __se_sys_io_setup+0x7b/0x1d0 [ 211.308314][ T8177] do_syscall_64+0x166/0x520 [ 211.308341][ T8177] ? trace_irq_disable+0x3b/0x140 [ 211.308367][ T8177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.308385][ T8177] ? clear_bhb_loop+0x70/0xc0 [ 211.308406][ T8177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.308426][ T8177] RIP: 0033:0x7ff54099e159 [ 211.308445][ T8177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.308463][ T8177] RSP: 002b:00007ff54189a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 211.308483][ T8177] RAX: ffffffffffffffda RBX: 00007ff540c25fa0 RCX: 00007ff54099e159 [ 211.308496][ T8177] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000222 [ 211.308507][ T8177] RBP: 00007ff540a35024 R08: 0000000000000000 R09: 0000000000000000 [ 211.308517][ T8177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.308527][ T8177] R13: 00007ff540c26038 R14: 00007ff540c25fa0 R15: 00007fff6a148f38 [ 211.308554][ T8177] [ 211.574342][ T5613] Bluetooth: hci1: command tx timeout [ 211.639961][ T10] usb 2-1: USB disconnect, device number 46 [ 212.319385][ T8211] syzkaller1: entered promiscuous mode [ 212.319415][ T8211] syzkaller1: entered allmulticast mode [ 212.375232][ T52] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 212.452987][ T8215] FAULT_INJECTION: forcing a failure. [ 212.452987][ T8215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.466664][ T8215] CPU: 0 UID: 0 PID: 8215 Comm: syz.0.619 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.466694][ T8215] Tainted: [L]=SOFTLOCKUP [ 212.466701][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.466713][ T8215] Call Trace: [ 212.466721][ T8215] [ 212.466730][ T8215] dump_stack_lvl+0xe8/0x150 [ 212.466780][ T8215] should_fail_ex+0x3eb/0x540 [ 212.466804][ T8215] _copy_from_iter+0x1d3/0x1660 [ 212.466824][ T8215] ? __alloc_skb+0x27a/0x7a0 [ 212.466852][ T8215] ? __alloc_skb+0x27a/0x7a0 [ 212.466879][ T8215] ? __alloc_skb+0x27a/0x7a0 [ 212.466905][ T8215] ? __pfx__copy_from_iter+0x10/0x10 [ 212.466923][ T8215] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 212.466948][ T8215] ? __alloc_skb+0x27a/0x7a0 [ 212.466973][ T8215] ? __alloc_skb+0x27a/0x7a0 [ 212.467003][ T8215] ? netlink_sendmsg+0x5fa/0xae0 [ 212.467025][ T8215] ? skb_put+0x112/0x210 [ 212.467055][ T8215] netlink_sendmsg+0x667/0xae0 [ 212.467081][ T8215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.467109][ T8215] ? apparmor_socket_sendmsg+0x98/0x360 [ 212.467141][ T8215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.467161][ T8215] sock_sendmsg_nosec+0x13a/0x180 [ 212.467188][ T8215] ____sys_sendmsg+0x54e/0x850 [ 212.467211][ T8215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.467235][ T8215] ? import_iovec+0x73/0xa0 [ 212.467260][ T8215] ___sys_sendmsg+0x2a5/0x360 [ 212.467278][ T8215] ? __lock_acquire+0x6df/0x2e50 [ 212.467309][ T8215] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.467359][ T8215] ? __fget_files+0x2a/0x420 [ 212.467382][ T8215] ? __fget_files+0x3a2/0x420 [ 212.467414][ T8215] __x64_sys_sendmsg+0x1b1/0x290 [ 212.467433][ T8215] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 212.467467][ T8215] do_syscall_64+0x166/0x520 [ 212.467495][ T8215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.467514][ T8215] ? clear_bhb_loop+0x70/0xc0 [ 212.467539][ T8215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.467557][ T8215] RIP: 0033:0x7ff54099e159 [ 212.467582][ T8215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.467598][ T8215] RSP: 002b:00007ff54189a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.467618][ T8215] RAX: ffffffffffffffda RBX: 00007ff540c25fa0 RCX: 00007ff54099e159 [ 212.467633][ T8215] RDX: 0000000000040000 RSI: 0000200000000200 RDI: 0000000000000003 [ 212.467645][ T8215] RBP: 00007ff54189a090 R08: 0000000000000000 R09: 0000000000000000 [ 212.467657][ T8215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.467669][ T8215] R13: 00007ff540c26038 R14: 00007ff540c25fa0 R15: 00007fff6a148f38 [ 212.467697][ T8215] [ 212.574252][ T5714] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 212.744381][ T5714] usb 2-1: Using ep0 maxpacket: 32 [ 212.745432][ T5714] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 212.746924][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.746955][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.746991][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.754749][ T5714] usb 2-1: config 0 descriptor?? [ 212.764492][ T5714] hub 2-1:0.0: USB hub found [ 212.979653][ T5714] hub 2-1:0.0: 1 port detected [ 213.379201][ T31] audit: type=1326 audit(1788313644.261:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.5.626" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a3e19e159 code=0x0 [ 213.440932][ T5714] usb 5-1: USB disconnect, device number 28 [ 213.558842][ T8240] syzkaller1: entered promiscuous mode [ 213.558908][ T8240] syzkaller1: entered allmulticast mode [ 213.598573][ T5686] hub 2-1:0.0: activate --> -90 [ 213.801914][ T5686] usb 2-1: USB disconnect, device number 47 [ 214.135058][ T5714] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 214.249765][ T8254] loop0: detected capacity change from 0 to 1 [ 214.274465][ T8254] ldm_validate_privheads(): Disk read failed. [ 214.274527][ T8254] loop0: [ 214.274544][ T8254] loop0: partition table partially beyond EOD, truncated [ 214.295404][ T5714] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 214.312687][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.321965][ T5714] usb 1-1: Product: syz [ 214.322016][ T5714] usb 1-1: Manufacturer: syz [ 214.322035][ T5714] usb 1-1: SerialNumber: syz [ 214.342886][ T5714] usb 1-1: config 0 descriptor?? [ 214.351662][ T5714] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 214.411415][ C1] Unknown status report in ack skb [ 214.854300][ T5686] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 215.007203][ T5686] usb 6-1: not running at top speed; connect to a high speed hub [ 215.007255][ T5686] usb 6-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 215.031823][ T5686] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 215.031879][ T5686] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 67, changing to 4 [ 215.056684][ T5686] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.056724][ T5686] usb 6-1: Product: syz [ 215.056744][ T5686] usb 6-1: Manufacturer: syz [ 215.056761][ T5686] usb 6-1: SerialNumber: syz [ 215.264181][ T5763] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 215.333571][ T5686] usb 6-1: USB disconnect, device number 17 [ 215.398427][ T5763] usb 2-1: device descriptor read/64, error -71 [ 215.398792][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.634178][ T5763] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 215.764256][ T5763] usb 2-1: device descriptor read/64, error -71 [ 215.877013][ T5763] usb usb2-port1: attempt power cycle [ 215.886177][ T8267] syzkaller1: entered promiscuous mode [ 215.886302][ T8267] syzkaller1: entered allmulticast mode [ 216.236717][ T5763] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 216.268956][ T5763] usb 2-1: device descriptor read/8, error -71 [ 216.504155][ T5763] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 216.525488][ T5763] usb 2-1: device descriptor read/8, error -71 [ 216.526810][ T8282] netlink: 40 bytes leftover after parsing attributes in process `syz.5.640'. [ 216.634628][ T5763] usb usb2-port1: unable to enumerate USB device [ 216.984257][ T5763] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 217.134189][ T5763] usb 6-1: Using ep0 maxpacket: 16 [ 217.141556][ T5763] usb 6-1: unable to get BOS descriptor or descriptor too short [ 217.154393][ T5763] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.168939][ T5763] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.168991][ T5763] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 217.169034][ T5763] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.169062][ T5763] usb 6-1: No eUSB2 isoc ep 0x81 companion for config 1 interface 0 altsetting 0 [ 217.212613][ T5763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.212657][ T5763] usb 6-1: Product: syz [ 217.212687][ T5763] usb 6-1: Manufacturer: syz [ 217.212705][ T5763] usb 6-1: SerialNumber: syz [ 217.382384][ T5714] gspca_stk1135: reg_w 0x352 err -71 [ 217.383453][ T5714] gspca_stk1135: serial bus timeout: status=0x00 [ 217.383467][ T5714] gspca_stk1135: Sensor write failed [ 217.383499][ T5714] gspca_stk1135: serial bus timeout: status=0x00 [ 217.383509][ T5714] gspca_stk1135: Sensor write failed [ 217.383535][ T5714] gspca_stk1135: serial bus timeout: status=0x00 [ 217.383544][ T5714] gspca_stk1135: Sensor read failed [ 217.383570][ T5714] gspca_stk1135: serial bus timeout: status=0x00 [ 217.383579][ T5714] gspca_stk1135: Sensor read failed [ 217.383585][ T5714] gspca_stk1135: Detected sensor type unknown (0x0) [ 217.383616][ T5714] gspca_stk1135: serial bus timeout: status=0x00 [ 217.383625][ T5714] gspca_stk1135: Sensor read failed [ 217.383651][ T5714] gspca_stk1135: serial bus timeout: status=0x00 [ 217.383660][ T5714] gspca_stk1135: Sensor read failed [ 217.383684][ T5714] gspca_stk1135: serial bus timeout: status=0x00 [ 217.383692][ T5714] gspca_stk1135: Sensor write failed [ 217.383718][ T5714] gspca_stk1135: serial bus timeout: status=0x00 [ 217.383727][ T5714] gspca_stk1135: Sensor write failed [ 217.383810][ T5714] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 217.400984][ T5714] usb 1-1: USB disconnect, device number 57 [ 217.510815][ T5763] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 217.517767][ T5763] cdc_ncm 6-1:1.0: bind() failure [ 217.528064][ T5763] usb 6-1: USB disconnect, device number 18 [ 217.536020][ T5686] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 217.684626][ T5686] usb 5-1: Using ep0 maxpacket: 16 [ 217.685319][ T5686] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 217.686395][ T5686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.686424][ T5686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.686444][ T5686] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 217.686482][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.700178][ T5686] usb 5-1: config 0 descriptor?? [ 218.128603][ T5686] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 218.128664][ T5686] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 218.128688][ T5686] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 218.128708][ T5686] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 218.128731][ T5686] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 218.144539][ T8341] syzkaller1: entered promiscuous mode [ 218.144562][ T8341] syzkaller1: entered allmulticast mode [ 218.146843][ T5686] input: HID 0955:7214 Haptics as /devices/virtual/input/input47 [ 218.159693][ T8338] netlink: 165 bytes leftover after parsing attributes in process `syz.0.645'. [ 218.184425][ T5686] shield 0003:0955:7214.001B: Registered Thunderstrike controller [ 218.184691][ T5686] shield 0003:0955:7214.001B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 218.397479][ T8314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.408191][ T8314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.417583][ T8314] netlink: 504 bytes leftover after parsing attributes in process `syz.4.644'. [ 218.430657][ T5763] usb 5-1: USB disconnect, device number 29 [ 218.433033][ T5714] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 218.433100][ T5714] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 218.433165][ T5714] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 218.433222][ T5714] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 218.673005][ T8357] dns_resolver: Unsupported server list version (0) [ 219.458795][ T8395] netlink: 100 bytes leftover after parsing attributes in process `syz.0.655'. [ 219.466141][ T8396] loop0: detected capacity change from 0 to 4096 [ 219.499808][ T8396] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 219.499854][ T8396] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 219.499901][ T8396] loop0: [ 219.745033][ T8410] netlink: 104 bytes leftover after parsing attributes in process `syz.5.660'. [ 219.745116][ T8410] FAULT_INJECTION: forcing a failure. [ 219.745116][ T8410] name failslab, interval 1, probability 0, space 0, times 0 [ 219.755491][ T8410] CPU: 1 UID: 0 PID: 8410 Comm: syz.5.660 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.755523][ T8410] Tainted: [L]=SOFTLOCKUP [ 219.755530][ T8410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.755541][ T8410] Call Trace: [ 219.755548][ T8410] [ 219.755556][ T8410] dump_stack_lvl+0xe8/0x150 [ 219.755586][ T8410] should_fail_ex+0x3eb/0x540 [ 219.755624][ T8410] should_failslab+0xa8/0x100 [ 219.755645][ T8410] ? skb_clone+0x212/0x3a0 [ 219.755672][ T8410] kmem_cache_alloc_noprof+0xa1/0x600 [ 219.755700][ T8410] ? skb_clone+0x212/0x3a0 [ 219.755726][ T8410] skb_clone+0x212/0x3a0 [ 219.755750][ T8410] __netlink_deliver_tap+0x413/0x860 [ 219.755785][ T8410] ? netlink_deliver_tap+0x2e/0x1b0 [ 219.755809][ T8410] netlink_deliver_tap+0x19c/0x1b0 [ 219.755833][ T8410] netlink_sendskb+0x68/0x140 [ 219.755855][ T8410] netlink_rcv_skb+0x2a4/0x4a0 [ 219.755878][ T8410] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 219.755905][ T8410] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 219.755943][ T8410] ? netlink_deliver_tap+0x2e/0x1b0 [ 219.755970][ T8410] ? netlink_deliver_tap+0x2e/0x1b0 [ 219.755995][ T8410] xfrm_netlink_rcv+0x79/0x90 [ 219.756021][ T8410] netlink_unicast+0x7bd/0x940 [ 219.756050][ T8410] netlink_sendmsg+0x7c3/0xae0 [ 219.756079][ T8410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.756109][ T8410] ? apparmor_socket_sendmsg+0x98/0x360 [ 219.756141][ T8410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.756163][ T8410] sock_sendmsg_nosec+0x13a/0x180 [ 219.756191][ T8410] ____sys_sendmsg+0x54e/0x850 [ 219.756216][ T8410] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.756245][ T8410] ? import_iovec+0x73/0xa0 [ 219.756271][ T8410] ___sys_sendmsg+0x2a5/0x360 [ 219.756290][ T8410] ? __lock_acquire+0x6df/0x2e50 [ 219.756321][ T8410] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.756374][ T8410] ? __fget_files+0x2a/0x420 [ 219.756396][ T8410] ? __fget_files+0x3a2/0x420 [ 219.756428][ T8410] __x64_sys_sendmsg+0x1b1/0x290 [ 219.756451][ T8410] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.756491][ T8410] do_syscall_64+0x166/0x520 [ 219.756520][ T8410] ? trace_irq_disable+0x3b/0x140 [ 219.756545][ T8410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.756565][ T8410] ? clear_bhb_loop+0x70/0xc0 [ 219.756588][ T8410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.756607][ T8410] RIP: 0033:0x7f9a3e19e159 [ 219.756625][ T8410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.756642][ T8410] RSP: 002b:00007f9a3eff4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.756662][ T8410] RAX: ffffffffffffffda RBX: 00007f9a3e425fa0 RCX: 00007f9a3e19e159 [ 219.756677][ T8410] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 219.756689][ T8410] RBP: 00007f9a3eff4090 R08: 0000000000000000 R09: 0000000000000000 [ 219.756702][ T8410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.756713][ T8410] R13: 00007f9a3e426038 R14: 00007f9a3e425fa0 R15: 00007ffd1586b818 [ 219.756743][ T8410] [ 219.899864][ T8409] syzkaller1: entered promiscuous mode [ 219.899888][ T8409] syzkaller1: entered allmulticast mode [ 220.056074][ T5714] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 220.224316][ T5714] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 220.225623][ T5714] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.225647][ T5714] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 4 [ 220.225681][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.675118][ T5714] usb 1-1: USB disconnect, device number 58 [ 220.833611][ T8447] lo speed is unknown, defaulting to 1000 [ 221.020581][ T8456] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20002 [ 221.207609][ T8458] syzkaller1: entered promiscuous mode [ 221.207644][ T8458] syzkaller1: entered allmulticast mode [ 221.575427][ T2247] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 221.734269][ T5700] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 221.756262][ T2247] usb 1-1: Using ep0 maxpacket: 16 [ 221.756990][ T2247] usb 1-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 221.757957][ T2247] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.757986][ T2247] usb 1-1: config 0 interface 0 has no altsetting 0 [ 221.758015][ T2247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.760711][ T2247] usb 1-1: config 0 descriptor?? [ 221.864416][ T5714] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 221.904835][ T5700] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 221.909216][ T5700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.909244][ T5700] usb 6-1: Product: syz [ 221.909279][ T5700] usb 6-1: Manufacturer: syz [ 221.909292][ T5700] usb 6-1: SerialNumber: syz [ 221.912552][ T5700] usb 6-1: config 0 descriptor?? [ 221.921128][ T5700] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 221.945609][ T5700] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 221.950040][ T5700] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 221.950096][ T5700] usb 6-1: media controller created [ 221.974742][ T5700] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 222.018079][ T5700] DVB: Unable to find symbol mt352_attach() [ 222.048426][ T5700] DVB: Unable to find symbol nxt6000_attach() [ 222.048450][ T5700] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 222.052138][ T5700] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input48 [ 222.057255][ T5700] dvb-usb: schedule remote query interval to 1000 msecs. [ 222.057276][ T5700] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 222.057658][ T5700] dvb-usb: bulk message failed: -22 (7/0) [ 222.057675][ T5700] dvb-usb: bulk message failed: -22 (7/0) [ 222.113243][ T5714] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 222.126546][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.674'. [ 222.139592][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.139634][ T5714] usb 2-1: Product: syz [ 222.139663][ T5714] usb 2-1: Manufacturer: syz [ 222.139680][ T5714] usb 2-1: SerialNumber: syz [ 222.167280][ T5714] usb 2-1: config 0 descriptor?? [ 222.180369][ T5714] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 222.196720][ T5714] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 222.205065][ T2247] wacom 0003:056A:00C5.001C: unknown main item tag 0x6 [ 222.205150][ T2247] wacom 0003:056A:00C5.001C: ignoring exceeding usage max [ 222.217642][ T5700] usb 6-1: USB disconnect, device number 19 [ 222.226518][ T2247] wacom 0003:056A:00C5.001C: hidraw0: USB HID v10.05 Device [HID 056a:00c5] on usb-dummy_hcd.0-1/input0 [ 222.245108][ T5714] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 222.245317][ T5714] usb 2-1: media controller created [ 222.279033][ T5714] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 222.370701][ T5700] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 222.394496][ T5714] DVB: Unable to find symbol mt352_attach() [ 222.395150][ T8464] autofs4:pid:8464:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.1280), cmd(0xc0189375) [ 222.395179][ T8464] autofs4:pid:8464:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 222.410348][ T2247] usb 1-1: USB disconnect, device number 59 [ 222.411968][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.676'. [ 222.479064][ T5714] DVB: Unable to find symbol nxt6000_attach() [ 222.479088][ T5714] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 222.482771][ T5714] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input52 [ 222.491482][ T5714] dvb-usb: schedule remote query interval to 1000 msecs. [ 222.491506][ T5714] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 222.491522][ T5714] dvb-usb: bulk message failed: -22 (7/0) [ 222.491536][ T5714] dvb-usb: bulk message failed: -22 (7/0) [ 222.545081][ T5763] usb 2-1: USB disconnect, device number 52 [ 222.591959][ T5763] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 223.124171][ T5763] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 223.149204][ T8492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.679'. [ 223.149275][ T8492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.679'. [ 223.264165][ T2247] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 223.275086][ T5763] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 223.280678][ T5763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.280704][ T5763] usb 6-1: Product: syz [ 223.280718][ T5763] usb 6-1: Manufacturer: syz [ 223.280732][ T5763] usb 6-1: SerialNumber: syz [ 223.287585][ T5763] usb 6-1: config 0 descriptor?? [ 223.293881][ T5763] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 223.308630][ T5763] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 223.309348][ T5763] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 223.309408][ T5763] usb 6-1: media controller created [ 223.322724][ T5763] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.366196][ T5763] DVB: Unable to find symbol mt352_attach() [ 223.389808][ T5763] DVB: Unable to find symbol nxt6000_attach() [ 223.389833][ T5763] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 223.393377][ T5763] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input53 [ 223.408192][ T5763] dvb-usb: schedule remote query interval to 1000 msecs. [ 223.408213][ T5763] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 223.408228][ T5763] dvb-usb: bulk message failed: -22 (7/0) [ 223.408241][ T5763] dvb-usb: bulk message failed: -22 (7/0) [ 223.418535][ T2247] usb 1-1: unable to get BOS descriptor or descriptor too short [ 223.418584][ T2247] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 223.420636][ T2247] usb 1-1: config 114 has an invalid interface number: 240 but max is 0 [ 223.420661][ T2247] usb 1-1: config 114 has no interface number 0 [ 223.420697][ T2247] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 223.420722][ T2247] usb 1-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 223.420746][ T2247] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 223.420770][ T2247] usb 1-1: config 114 interface 240 has no altsetting 0 [ 223.427717][ T2247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.427742][ T2247] usb 1-1: Product: syz [ 223.427755][ T2247] usb 1-1: Manufacturer: syz [ 223.427769][ T2247] usb 1-1: SerialNumber: syz [ 223.450144][ T8490] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 223.450279][ T8490] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 223.454640][ T5700] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 223.490618][ T8485] FAULT_INJECTION: forcing a failure. [ 223.490618][ T8485] name failslab, interval 1, probability 0, space 0, times 0 [ 223.490674][ T8485] CPU: 0 UID: 0 PID: 8485 Comm: syz.5.677 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.490700][ T8485] Tainted: [L]=SOFTLOCKUP [ 223.490708][ T8485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.490720][ T8485] Call Trace: [ 223.490728][ T8485] [ 223.490736][ T8485] dump_stack_lvl+0xe8/0x150 [ 223.490766][ T8485] should_fail_ex+0x3eb/0x540 [ 223.490794][ T8485] ? __alloc_skb+0x1db/0x7a0 [ 223.490822][ T8485] should_failslab+0xa8/0x100 [ 223.490843][ T8485] ? __alloc_skb+0x1db/0x7a0 [ 223.490868][ T8485] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 223.490894][ T8485] ? __alloc_skb+0x18d/0x7a0 [ 223.490921][ T8485] ? __alloc_skb+0x1db/0x7a0 [ 223.490953][ T8485] __alloc_skb+0x1db/0x7a0 [ 223.490983][ T8485] netlink_sendmsg+0x577/0xae0 [ 223.491012][ T8485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.491042][ T8485] ? apparmor_socket_sendmsg+0x98/0x360 [ 223.491070][ T8485] ? lock_acquire+0x115/0x350 [ 223.491095][ T8485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.491112][ T8485] sock_sendmsg_nosec+0x13a/0x180 [ 223.491135][ T8485] sock_write_iter+0x2de/0x3e0 [ 223.491160][ T8485] ? __pfx_sock_write_iter+0x10/0x10 [ 223.491189][ T8485] ? bpf_lsm_file_permission+0x9/0x20 [ 223.491211][ T8485] ? security_file_permission+0x75/0x260 [ 223.491246][ T8485] vfs_write+0x612/0xba0 [ 223.491279][ T8485] ? __pfx_vfs_write+0x10/0x10 [ 223.491312][ T8485] ? __fget_files+0x2a/0x420 [ 223.491344][ T8485] ksys_write+0x150/0x270 [ 223.491371][ T8485] ? __pfx_ksys_write+0x10/0x10 [ 223.491405][ T8485] do_syscall_64+0x166/0x520 [ 223.491431][ T8485] ? trace_irq_disable+0x3b/0x140 [ 223.491457][ T8485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.491477][ T8485] ? clear_bhb_loop+0x70/0xc0 [ 223.491499][ T8485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.491517][ T8485] RIP: 0033:0x7f9a3e19e159 [ 223.491535][ T8485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.491552][ T8485] RSP: 002b:00007f9a3eff4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 223.491595][ T8485] RAX: ffffffffffffffda RBX: 00007f9a3e425fa0 RCX: 00007f9a3e19e159 [ 223.491609][ T8485] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000007 [ 223.491621][ T8485] RBP: 00007f9a3eff4090 R08: 0000000000000000 R09: 0000000000000000 [ 223.491633][ T8485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.491645][ T8485] R13: 00007f9a3e426038 R14: 00007f9a3e425fa0 R15: 00007ffd1586b818 [ 223.491674][ T8485] [ 223.502499][ T5763] usb 6-1: USB disconnect, device number 20 [ 223.604272][ T5700] usb 2-1: Using ep0 maxpacket: 32 [ 223.605863][ T5700] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 223.609843][ T5700] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 223.609893][ T5700] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 223.609914][ T5700] usb 2-1: config 0 interface 0 has no altsetting 0 [ 223.615954][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.616003][ T5700] usb 2-1: Product: syz [ 223.616027][ T5700] usb 2-1: Manufacturer: syz [ 223.616040][ T5700] usb 2-1: SerialNumber: syz [ 223.618266][ T5763] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 223.627638][ T5700] usb 2-1: config 0 descriptor?? [ 224.032760][ T5700] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 224.142743][ T8505] FAULT_INJECTION: forcing a failure. [ 224.142743][ T8505] name failslab, interval 1, probability 0, space 0, times 0 [ 224.142800][ T8505] CPU: 0 UID: 0 PID: 8505 Comm: syz.5.684 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.142825][ T8505] Tainted: [L]=SOFTLOCKUP [ 224.142831][ T8505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.142842][ T8505] Call Trace: [ 224.142849][ T8505] [ 224.142856][ T8505] dump_stack_lvl+0xe8/0x150 [ 224.142886][ T8505] should_fail_ex+0x3eb/0x540 [ 224.142917][ T8505] should_failslab+0xa8/0x100 [ 224.142938][ T8505] ? dst_alloc+0x105/0x170 [ 224.142961][ T8505] kmem_cache_alloc_noprof+0xa1/0x600 [ 224.142986][ T8505] ? lock_acquire+0x115/0x350 [ 224.143015][ T8505] ? dst_alloc+0x105/0x170 [ 224.143040][ T8505] ? __pfx_ip6_dst_gc+0x10/0x10 [ 224.143064][ T8505] dst_alloc+0x105/0x170 [ 224.143091][ T8505] ip6_pol_route+0xba1/0x14d0 [ 224.143116][ T8505] ? ip6_pol_route+0x163/0x14d0 [ 224.143146][ T8505] ? __pfx_ip6_pol_route+0x10/0x10 [ 224.143170][ T8505] ? __lock_acquire+0x6df/0x2e50 [ 224.143200][ T8505] ? rcu_is_watching+0x16/0xb0 [ 224.143218][ T8505] ? __kasan_check_byte+0x12/0x40 [ 224.143240][ T8505] ? rcu_is_watching+0x16/0xb0 [ 224.143263][ T8505] fib6_rule_lookup+0x222/0x730 [ 224.143288][ T8505] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 224.143314][ T8505] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 224.143340][ T8505] ? lock_acquire+0x115/0x350 [ 224.143383][ T8505] ip6_route_output_flags+0x364/0x5d0 [ 224.143408][ T8505] ? ip6_route_output_flags+0x2e/0x5d0 [ 224.143444][ T8505] ip6_dst_lookup_tail+0x1a1/0x1610 [ 224.143485][ T8505] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 224.143520][ T8505] ? lock_acquire+0x115/0x350 [ 224.143552][ T8505] ? lockdep_unlock+0x5c/0xd0 [ 224.143579][ T8505] ip6_dst_lookup_flow+0x89/0x150 [ 224.143611][ T8505] addr_resolve+0x5dc/0x2010 [ 224.143640][ T8505] ? addr_resolve+0x106/0x2010 [ 224.143665][ T8505] ? do_raw_spin_lock+0x12b/0x2f0 [ 224.143693][ T8505] ? __pfx_addr_resolve+0x10/0x10 [ 224.143735][ T8505] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 224.143772][ T8505] rdma_resolve_ip+0x451/0x870 [ 224.143804][ T8505] rdma_resolve_addr+0x6ca/0x2110 [ 224.143835][ T8505] ? __pfx_rdma_resolve_addr+0x10/0x10 [ 224.143856][ T8505] ? __mutex_lock+0x30a/0x15a0 [ 224.143882][ T8505] ? lock_acquire+0x115/0x350 [ 224.143916][ T8505] ? ucma_resolve_ip+0x2fe/0x490 [ 224.143954][ T8505] ? do_raw_spin_unlock+0xf5/0x200 [ 224.143981][ T8505] ucma_resolve_ip+0x336/0x490 [ 224.144004][ T8505] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 224.144035][ T8505] ? __might_fault+0xaf/0x130 [ 224.144068][ T8505] ucma_write+0x249/0x2f0 [ 224.144091][ T8505] ? __pfx_ucma_write+0x10/0x10 [ 224.144111][ T8505] ? security_file_permission+0x75/0x260 [ 224.144142][ T8505] ? rw_verify_area+0x203/0x4c0 [ 224.144172][ T8505] vfs_writev+0x4bb/0x990 [ 224.144194][ T8505] ? __pfx_ucma_write+0x10/0x10 [ 224.144219][ T8505] ? __pfx_vfs_writev+0x10/0x10 [ 224.144255][ T8505] ? __fget_files+0x2a/0x420 [ 224.144282][ T8505] ? __fget_files+0x3a2/0x420 [ 224.144302][ T8505] ? __fget_files+0x2a/0x420 [ 224.144332][ T8505] do_writev+0x154/0x2e0 [ 224.144360][ T8505] ? __pfx_do_writev+0x10/0x10 [ 224.144395][ T8505] do_syscall_64+0x166/0x520 [ 224.144423][ T8505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.144448][ T8505] ? clear_bhb_loop+0x70/0xc0 [ 224.144471][ T8505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.144490][ T8505] RIP: 0033:0x7f9a3e19e159 [ 224.144509][ T8505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.144525][ T8505] RSP: 002b:00007f9a3eff4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 224.144546][ T8505] RAX: ffffffffffffffda RBX: 00007f9a3e425fa0 RCX: 00007f9a3e19e159 [ 224.144560][ T8505] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000008 [ 224.144573][ T8505] RBP: 00007f9a3eff4090 R08: 0000000000000000 R09: 0000000000000000 [ 224.144585][ T8505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.144596][ T8505] R13: 00007f9a3e426038 R14: 00007f9a3e425fa0 R15: 00007ffd1586b818 [ 224.144629][ T8505] [ 224.244461][ T5700] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 224.249405][ T5700] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 224.635817][ T8517] comedi comedi0: 8255: I/O base address not correctly aligned [ 224.805132][ T8523] FAULT_INJECTION: forcing a failure. [ 224.805132][ T8523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.825596][ T8523] CPU: 1 UID: 0 PID: 8523 Comm: syz.4.688 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.825629][ T8523] Tainted: [L]=SOFTLOCKUP [ 224.825636][ T8523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.825649][ T8523] Call Trace: [ 224.825657][ T8523] [ 224.825665][ T8523] dump_stack_lvl+0xe8/0x150 [ 224.825696][ T8523] should_fail_ex+0x3eb/0x540 [ 224.825748][ T8523] _copy_to_user+0x31/0xb0 [ 224.825775][ T8523] simple_read_from_buffer+0xe1/0x170 [ 224.825806][ T8523] proc_fail_nth_read+0x1bb/0x230 [ 224.825837][ T8523] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.825868][ T8523] ? rw_verify_area+0x24a/0x4c0 [ 224.825895][ T8523] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.825937][ T8523] vfs_read+0x213/0xa80 [ 224.825968][ T8523] ? __pfx___mutex_lock+0x10/0x10 [ 224.825997][ T8523] ? __pfx_vfs_read+0x10/0x10 [ 224.826023][ T8523] ? __fget_files+0x2a/0x420 [ 224.826052][ T8523] ? __fget_files+0x3a2/0x420 [ 224.826075][ T8523] ? __fget_files+0x2a/0x420 [ 224.826121][ T8523] ksys_read+0x150/0x270 [ 224.826149][ T8523] ? __pfx_ksys_read+0x10/0x10 [ 224.826185][ T8523] do_syscall_64+0x166/0x520 [ 224.826211][ T8523] ? trace_irq_disable+0x3b/0x140 [ 224.826239][ T8523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.826259][ T8523] ? clear_bhb_loop+0x70/0xc0 [ 224.826283][ T8523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.826303][ T8523] RIP: 0033:0x7fc5f635e98e [ 224.826321][ T8523] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 224.826358][ T8523] RSP: 002b:00007fc5f45f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 224.826380][ T8523] RAX: ffffffffffffffda RBX: 00007fc5f45f66c0 RCX: 00007fc5f635e98e [ 224.826395][ T8523] RDX: 000000000000000f RSI: 00007fc5f45f60a0 RDI: 0000000000000004 [ 224.826408][ T8523] RBP: 00007fc5f45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 224.826421][ T8523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.826432][ T8523] R13: 00007fc5f6626038 R14: 00007fc5f6625fa0 R15: 00007ffc4e0db538 [ 224.826463][ T8523] [ 225.084977][ T10] usb 2-1: USB disconnect, device number 53 [ 225.273240][ T5714] hid-generic 0006:0000:FFFFFFFC.001D: unknown main item tag 0x0 [ 225.285761][ T5714] hid-generic 0006:0000:FFFFFFFC.001D: unknown main item tag 0x0 [ 225.293754][ T5714] hid-generic 0006:0000:FFFFFFFC.001D: unknown main item tag 0x0 [ 225.301857][ T5714] hid-generic 0006:0000:FFFFFFFC.001D: unknown main item tag 0x0 [ 225.319159][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.5.692'. [ 225.328010][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.5.692'. [ 225.347217][ T5714] hid-generic 0006:0000:FFFFFFFC.001D: hidraw0: VIRTUAL HID v0.00 Device [syz1] on syz1 [ 225.557691][ T8538] fido_id[8538]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 225.876146][ T31] audit: type=1400 audit(1788313656.751:9): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=8529 comm="syz.4.691" name="//o" offset=61 [ 226.089764][ T2247] ir_usb 1-1:114.240: IR Dongle converter detected [ 226.099657][ T2247] usb 1-1: IRDA class descriptor not found, device not bound [ 226.143242][ T2247] usb 1-1: USB disconnect, device number 60 [ 226.512939][ T8567] can: request_module (can-proto-4) failed. [ 226.723156][ T8581] netlink: 60 bytes leftover after parsing attributes in process `syz.5.701'. [ 226.740461][ T8581] netlink: 60 bytes leftover after parsing attributes in process `syz.5.701'. [ 226.804274][ T8583] netlink: 60 bytes leftover after parsing attributes in process `syz.5.702'. [ 226.814442][ T8583] FAULT_INJECTION: forcing a failure. [ 226.814442][ T8583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.827952][ T8583] CPU: 1 UID: 0 PID: 8583 Comm: syz.5.702 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.827984][ T8583] Tainted: [L]=SOFTLOCKUP [ 226.827992][ T8583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.828003][ T8583] Call Trace: [ 226.828011][ T8583] [ 226.828020][ T8583] dump_stack_lvl+0xe8/0x150 [ 226.828051][ T8583] should_fail_ex+0x3eb/0x540 [ 226.828077][ T8583] _copy_to_iter+0x59c/0x1810 [ 226.828097][ T8583] ? up_write+0x19d/0x4a0 [ 226.828132][ T8583] ? __pfx__copy_to_iter+0x10/0x10 [ 226.828157][ T8583] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 226.828198][ T8583] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 226.828226][ T8583] __skb_datagram_iter+0xf8/0x980 [ 226.828248][ T8583] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 226.828275][ T8583] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 226.828304][ T8583] skb_copy_datagram_iter+0xb5/0x240 [ 226.828330][ T8583] netlink_recvmsg+0x2b9/0xa50 [ 226.828362][ T8583] ? __pfx_netlink_recvmsg+0x10/0x10 [ 226.828389][ T8583] ? aa_sock_msg_perm+0x144/0x210 [ 226.828414][ T8583] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 226.828434][ T8583] ? security_socket_recvmsg+0x7e/0x2c0 [ 226.828458][ T8583] ? __pfx_netlink_recvmsg+0x10/0x10 [ 226.828480][ T8583] sock_recvmsg+0x196/0x1e0 [ 226.828506][ T8583] ____sys_recvmsg+0x1e6/0x4a0 [ 226.828533][ T8583] ? __pfx_____sys_recvmsg+0x10/0x10 [ 226.828565][ T8583] ? import_iovec+0x73/0xa0 [ 226.828590][ T8583] ___sys_recvmsg+0x213/0x5a0 [ 226.828614][ T8583] ? __pfx____sys_recvmsg+0x10/0x10 [ 226.828638][ T8583] ? lock_acquire+0x115/0x350 [ 226.828677][ T8583] ? __fget_files+0x3a2/0x420 [ 226.828709][ T8583] __x64_sys_recvmsg+0x1ae/0x290 [ 226.828731][ T8583] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 226.828777][ T8583] do_syscall_64+0x166/0x520 [ 226.828802][ T8583] ? trace_irq_disable+0x3b/0x140 [ 226.828827][ T8583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.828845][ T8583] ? clear_bhb_loop+0x70/0xc0 [ 226.828870][ T8583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.828886][ T8583] RIP: 0033:0x7f9a3e19e159 [ 226.828903][ T8583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.828918][ T8583] RSP: 002b:00007f9a3eff4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 226.828939][ T8583] RAX: ffffffffffffffda RBX: 00007f9a3e425fa0 RCX: 00007f9a3e19e159 [ 226.828953][ T8583] RDX: 0000000020002022 RSI: 0000200000000040 RDI: 0000000000000003 [ 226.828966][ T8583] RBP: 00007f9a3eff4090 R08: 0000000000000000 R09: 0000000000000000 [ 226.828979][ T8583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.828990][ T8583] R13: 00007f9a3e426038 R14: 00007f9a3e425fa0 R15: 00007ffd1586b818 [ 226.829019][ T8583] [ 226.845301][ T8583] netlink: 60 bytes leftover after parsing attributes in process `syz.5.702'. [ 227.774734][ T52] Bluetooth: hci4: unexpected event for opcode 0x2005 [ 228.072921][ T8618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.711'. [ 228.073494][ T8618] netlink: 'syz.1.711': attribute type 1 has an invalid length. [ 228.122019][ T8613] smpboot: CPU 1 is now offline [ 228.288492][ T2247] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 228.426650][ T2247] usb 2-1: device descriptor read/64, error -71 [ 228.605915][ T52] Bluetooth: hci4: unexpected event for opcode 0x0c5b [ 228.666911][ T2247] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 228.804257][ T5763] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 228.812506][ T2247] usb 2-1: device descriptor read/64, error -71 [ 228.915514][ T2247] usb usb2-port1: attempt power cycle [ 228.965588][ T5763] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 228.975962][ T5763] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 228.986990][ T5763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.006877][ T5763] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 229.264800][ T2247] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 229.295899][ T2247] usb 2-1: device descriptor read/8, error -71 [ 229.534245][ T2247] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 229.554854][ T2247] usb 2-1: device descriptor read/8, error -71 [ 229.563332][ T8634] dlm: plock device version mismatch: kernel (1.2.0), user (1.2018902016.0) [ 229.664409][ T2247] usb usb2-port1: unable to enumerate USB device [ 229.844919][ T5693] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 229.928421][ T8636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.928697][ T8636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.004524][ T5693] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 230.014740][ T5693] usb 5-1: config 1 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.026590][ T5693] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 230.026612][ T5693] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 230.026643][ T5693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.062638][ T5763] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 230.072783][ T5763] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 230.072807][ T5763] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 230.275532][ T5693] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 230.313235][ T5693] usb 5-1: USB disconnect, device number 30 [ 230.936352][ T8643] netlink: 104 bytes leftover after parsing attributes in process `syz.5.719'. [ 231.161071][ T8650] netlink: 'syz.1.723': attribute type 21 has an invalid length. [ 231.170812][ T8650] netlink: 'syz.1.723': attribute type 5 has an invalid length. [ 231.178706][ T8650] netlink: 152 bytes leftover after parsing attributes in process `syz.1.723'. [ 231.178816][ T8650] FAULT_INJECTION: forcing a failure. [ 231.178816][ T8650] name failslab, interval 1, probability 0, space 0, times 0 [ 231.178832][ T8650] CPU: 0 UID: 0 PID: 8650 Comm: syz.1.723 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.178847][ T8650] Tainted: [L]=SOFTLOCKUP [ 231.178851][ T8650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 231.178857][ T8650] Call Trace: [ 231.178862][ T8650] [ 231.178866][ T8650] dump_stack_lvl+0xe8/0x150 [ 231.178886][ T8650] should_fail_ex+0x3eb/0x540 [ 231.178901][ T8650] should_failslab+0xa8/0x100 [ 231.178914][ T8650] ? fib_insert_alias+0x300/0x10f0 [ 231.178931][ T8650] kmem_cache_alloc_noprof+0xa1/0x600 [ 231.178947][ T8650] ? rcu_is_watching+0x16/0xb0 [ 231.178958][ T8650] ? fib_insert_alias+0x300/0x10f0 [ 231.178976][ T8650] fib_insert_alias+0x300/0x10f0 [ 231.178992][ T8650] ? fib_table_insert+0x49a/0x1b10 [ 231.179010][ T8650] fib_table_insert+0x671/0x1b10 [ 231.179039][ T8650] ? fib_new_table+0x14b/0x3f0 [ 231.179057][ T8650] inet_rtm_newroute+0x14f/0x250 [ 231.179071][ T8650] ? __local_bh_enable_ip+0xd6/0x140 [ 231.179087][ T8650] ? __dev_queue_xmit+0x29b/0x3820 [ 231.179100][ T8650] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 231.179124][ T8650] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 231.179136][ T8650] rtnetlink_rcv_msg+0x802/0xc00 [ 231.179155][ T8650] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 231.179169][ T8650] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 231.179183][ T8650] ? ref_tracker_free+0x689/0x830 [ 231.179196][ T8650] ? __pfx_ref_tracker_free+0x10/0x10 [ 231.179208][ T8650] ? __asan_memcpy+0x40/0x70 [ 231.179222][ T8650] ? __skb_clone+0x5c/0x6c0 [ 231.179236][ T8650] netlink_rcv_skb+0x226/0x4a0 [ 231.179250][ T8650] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 231.179347][ T8650] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 231.179365][ T8650] ? netlink_deliver_tap+0x2e/0x1b0 [ 231.179377][ T8650] ? netlink_deliver_tap+0x2e/0x1b0 [ 231.179392][ T8650] netlink_unicast+0x7bd/0x940 [ 231.179408][ T8650] netlink_sendmsg+0x7c3/0xae0 [ 231.179423][ T8650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.179439][ T8650] ? apparmor_socket_sendmsg+0x98/0x360 [ 231.179457][ T8650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.179469][ T8650] sock_sendmsg_nosec+0x13a/0x180 [ 231.179484][ T8650] ____sys_sendmsg+0x54e/0x850 [ 231.179498][ T8650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.179513][ T8650] ? import_iovec+0x73/0xa0 [ 231.179527][ T8650] ___sys_sendmsg+0x2a5/0x360 [ 231.179537][ T8650] ? __lock_acquire+0x6df/0x2e50 [ 231.179555][ T8650] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.179583][ T8650] ? __fget_files+0x2a/0x420 [ 231.179595][ T8650] ? __fget_files+0x3a2/0x420 [ 231.179613][ T8650] __x64_sys_sendmsg+0x1b1/0x290 [ 231.179625][ T8650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 231.179647][ T8650] do_syscall_64+0x166/0x520 [ 231.179662][ T8650] ? trace_irq_disable+0x3b/0x140 [ 231.179676][ T8650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.179688][ T8650] ? clear_bhb_loop+0x70/0xc0 [ 231.179700][ T8650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.179714][ T8650] RIP: 0033:0x7fc0c079e159 [ 231.179725][ T8650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.179734][ T8650] RSP: 002b:00007fc0c174f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.179746][ T8650] RAX: ffffffffffffffda RBX: 00007fc0c0a25fa0 RCX: 00007fc0c079e159 [ 231.179757][ T8650] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 231.179764][ T8650] RBP: 00007fc0c174f090 R08: 0000000000000000 R09: 0000000000000000 [ 231.179770][ T8650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 231.179776][ T8650] R13: 00007fc0c0a26038 R14: 00007fc0c0a25fa0 R15: 00007ffeafb89b18 [ 231.179792][ T8650] [ 231.742958][ T5700] usb 1-1: USB disconnect, device number 61 [ 232.304212][ T5693] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 232.489753][ T5693] usb 2-1: unable to get BOS descriptor or descriptor too short [ 232.489799][ T5693] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 232.509224][ T5693] usb 2-1: config index 0 descriptor too short (expected 40744, got 96) [ 232.509252][ T5693] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 232.509264][ T5693] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 232.509291][ T5693] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 232.509316][ T5693] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 232.509332][ T5693] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 52, changing to 7 [ 232.509347][ T5693] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid maxpacket 9272, setting to 1024 [ 232.509362][ T5693] usb 2-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 232.552257][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.552276][ T5693] usb 2-1: Product: syz [ 232.552284][ T5693] usb 2-1: Manufacturer: syz [ 232.552291][ T5693] usb 2-1: SerialNumber: syz [ 232.888108][ T8667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.937639][ T8693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.937926][ T8693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.980101][ T5693] usb 2-1: 1:1 : invalid sync pipe. bmAttributes 31, bLength 9, bSynchAddress 37 [ 232.995766][ T5693] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 233.114723][ T5700] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 233.163907][ T5693] usb 2-1: USB disconnect, device number 58 [ 233.170586][ T5763] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 233.246085][ T5700] usb 1-1: device descriptor read/64, error -71 [ 233.326596][ T5763] usb 5-1: Using ep0 maxpacket: 16 [ 233.333606][ T5763] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 233.344524][ T5763] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 233.344550][ T5763] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 233.344566][ T5763] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 233.344581][ T5763] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 233.344597][ T5763] usb 5-1: config 0 interface 0 has no altsetting 0 [ 233.404583][ T5763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.404610][ T5763] usb 5-1: Product: syz [ 233.404628][ T5763] usb 5-1: Manufacturer: syz [ 233.404638][ T5763] usb 5-1: SerialNumber: syz [ 233.436823][ T5763] usb 5-1: config 0 descriptor?? [ 233.444197][ T8694] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 233.485511][ T5700] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 233.624348][ T5700] usb 1-1: device descriptor read/64, error -71 [ 233.678841][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.730376][ T8694] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 233.738734][ T5700] usb usb1-port1: attempt power cycle [ 233.756554][ T5763] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input54 [ 233.962695][ T8704] tmpfs: Unknown parameter 'grpquotimit' [ 234.096636][ T5700] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 234.139397][ T5700] usb 1-1: device descriptor read/8, error -71 [ 234.266273][ T8694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.266535][ T8694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.357270][ T10] usb 5-1: USB disconnect, device number 31 [ 234.376621][ T5700] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 234.405569][ T5700] usb 1-1: device descriptor read/8, error -71 [ 234.491609][ T8700] sg_write: data in/out 422364/112 bytes for SCSI command 0x0-- guessing data in; [ 234.491609][ T8700] program syz.5.736 not setting count and/or reply_len properly [ 234.515078][ T5700] usb usb1-port1: unable to enumerate USB device [ 235.318698][ T8742] FAULT_INJECTION: forcing a failure. [ 235.318698][ T8742] name failslab, interval 1, probability 0, space 0, times 0 [ 235.318734][ T8742] CPU: 0 UID: 0 PID: 8742 Comm: syz.1.745 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.318749][ T8742] Tainted: [L]=SOFTLOCKUP [ 235.318753][ T8742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.318777][ T8742] Call Trace: [ 235.318782][ T8742] [ 235.318787][ T8742] dump_stack_lvl+0xe8/0x150 [ 235.318807][ T8742] should_fail_ex+0x3eb/0x540 [ 235.318822][ T8742] should_failslab+0xa8/0x100 [ 235.318834][ T8742] ? security_file_alloc+0x34/0x310 [ 235.318850][ T8742] kmem_cache_alloc_noprof+0xa1/0x600 [ 235.318864][ T8742] ? rcu_is_watching+0x16/0xb0 [ 235.318876][ T8742] ? security_file_alloc+0x34/0x310 [ 235.318893][ T8742] security_file_alloc+0x34/0x310 [ 235.318915][ T8742] init_file+0x90/0x2b0 [ 235.318929][ T8742] alloc_empty_file+0x74/0x1d0 [ 235.318940][ T8742] path_openat+0x9d/0x1e40 [ 235.318959][ T8742] ? __lock_acquire+0x6df/0x2e50 [ 235.318978][ T8742] do_file_open+0x23e/0x4a0 [ 235.318995][ T8742] ? __pfx_do_file_open+0x10/0x10 [ 235.319020][ T8742] ? _raw_spin_unlock+0x28/0x50 [ 235.319033][ T8742] ? alloc_fd+0x651/0x6c0 [ 235.319050][ T8742] do_sys_openat2+0x115/0x200 [ 235.319063][ T8742] ? __pfx_do_sys_openat2+0x10/0x10 [ 235.319075][ T8742] ? ksys_write+0x242/0x270 [ 235.319090][ T8742] ? __pfx_ksys_write+0x10/0x10 [ 235.319107][ T8742] __x64_sys_open+0x11e/0x150 [ 235.319125][ T8742] do_syscall_64+0x166/0x520 [ 235.319140][ T8742] ? trace_irq_disable+0x3b/0x140 [ 235.319155][ T8742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.319166][ T8742] ? clear_bhb_loop+0x70/0xc0 [ 235.319179][ T8742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.319189][ T8742] RIP: 0033:0x7fc0c079e159 [ 235.319200][ T8742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.319210][ T8742] RSP: 002b:00007fc0c174f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 235.319222][ T8742] RAX: ffffffffffffffda RBX: 00007fc0c0a25fa0 RCX: 00007fc0c079e159 [ 235.319230][ T8742] RDX: 0000000000000055 RSI: 0000000000108843 RDI: 00002000000001c0 [ 235.319237][ T8742] RBP: 00007fc0c174f090 R08: 0000000000000000 R09: 0000000000000000 [ 235.319244][ T8742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.319250][ T8742] R13: 00007fc0c0a26038 R14: 00007fc0c0a25fa0 R15: 00007ffeafb89b18 [ 235.319266][ T8742] [ 235.454849][ T5700] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 235.698677][ T5700] usb 5-1: unable to get BOS descriptor or descriptor too short [ 235.698722][ T5700] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 235.721146][ T5700] usb 5-1: config 114 has an invalid interface number: 240 but max is 0 [ 235.721173][ T5700] usb 5-1: config 114 has no interface number 0 [ 235.721205][ T5700] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 235.721220][ T5700] usb 5-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 235.721235][ T5700] usb 5-1: config 114 interface 240 altsetting 232 endpoint 0x8A has invalid wMaxPacketSize 0 [ 235.721248][ T5700] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 0 [ 235.721263][ T5700] usb 5-1: config 114 interface 240 has no altsetting 0 [ 235.802693][ T5700] usb 5-1: string descriptor 0 read error: -22 [ 235.802779][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.825484][ T8740] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 235.837675][ T5700] ir_usb 5-1:114.240: IR Dongle converter detected [ 236.077753][ T5700] usb 5-1: IR Dongle converter now attached to ttyUSB0 [ 236.242543][ T8758] FAULT_INJECTION: forcing a failure. [ 236.242543][ T8758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.242577][ T8758] CPU: 0 UID: 0 PID: 8758 Comm: syz.1.750 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.242592][ T8758] Tainted: [L]=SOFTLOCKUP [ 236.242596][ T8758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.242603][ T8758] Call Trace: [ 236.242608][ T8758] [ 236.242613][ T8758] dump_stack_lvl+0xe8/0x150 [ 236.242633][ T8758] should_fail_ex+0x3eb/0x540 [ 236.242648][ T8758] _copy_to_iter+0x404/0x1810 [ 236.242667][ T8758] ? __pfx__copy_to_iter+0x10/0x10 [ 236.242681][ T8758] ? aa_file_perm+0x18b/0x15f0 [ 236.242697][ T8758] ? aa_file_perm+0x4ed/0x15f0 [ 236.242711][ T8758] seq_read_iter+0x2b0/0xca0 [ 236.242730][ T8758] seq_read+0x367/0x480 [ 236.242740][ T8758] ? lock_acquire+0x115/0x350 [ 236.242759][ T8758] ? __pfx_seq_read+0x10/0x10 [ 236.242768][ T8758] ? __mutex_trylock_common+0x15f/0x270 [ 236.242784][ T8758] ? apparmor_file_permission+0x1fb/0x2b0 [ 236.242814][ T8758] ? __pfx_seq_read+0x10/0x10 [ 236.242823][ T8758] proc_reg_read+0x1e9/0x2e0 [ 236.242835][ T8758] ? __pfx_proc_reg_read+0x10/0x10 [ 236.242846][ T8758] vfs_read+0x213/0xa80 [ 236.242863][ T8758] ? __pfx___mutex_lock+0x10/0x10 [ 236.242878][ T8758] ? __pfx_vfs_read+0x10/0x10 [ 236.242892][ T8758] ? __fget_files+0x2a/0x420 [ 236.242907][ T8758] ? __fget_files+0x3a2/0x420 [ 236.242919][ T8758] ? __fget_files+0x2a/0x420 [ 236.242936][ T8758] ksys_read+0x150/0x270 [ 236.242951][ T8758] ? __pfx_ksys_read+0x10/0x10 [ 236.242970][ T8758] do_syscall_64+0x166/0x520 [ 236.242985][ T8758] ? trace_irq_disable+0x3b/0x140 [ 236.242999][ T8758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.243017][ T8758] ? clear_bhb_loop+0x70/0xc0 [ 236.243031][ T8758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.243041][ T8758] RIP: 0033:0x7fc0c079e159 [ 236.243052][ T8758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.243061][ T8758] RSP: 002b:00007fc0c174f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 236.243073][ T8758] RAX: ffffffffffffffda RBX: 00007fc0c0a25fa0 RCX: 00007fc0c079e159 [ 236.243081][ T8758] RDX: 0000000000000120 RSI: 0000200000000400 RDI: 000000000000000a [ 236.243088][ T8758] RBP: 00007fc0c174f090 R08: 0000000000000000 R09: 0000000000000000 [ 236.243094][ T8758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.243101][ T8758] R13: 00007fc0c0a26038 R14: 00007fc0c0a25fa0 R15: 00007ffeafb89b18 [ 236.243117][ T8758] [ 236.535865][ T5700] usb 5-1: USB disconnect, device number 32 [ 236.560046][ T5700] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 236.560435][ T5700] ir_usb 5-1:114.240: device disconnected [ 236.862021][ T8768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.862289][ T8768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.064444][ T5700] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 237.194174][ T5700] usb 6-1: device descriptor read/64, error -71 [ 237.264236][ T10] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 237.415719][ T10] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 237.430941][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.430968][ T10] usb 1-1: Product: syz [ 237.430985][ T10] usb 1-1: Manufacturer: syz [ 237.430995][ T10] usb 1-1: SerialNumber: syz [ 237.440745][ T5700] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 237.470405][ T10] usb 1-1: config 0 descriptor?? [ 237.483370][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 237.524531][ T5693] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 237.595141][ T5700] usb 6-1: device descriptor read/64, error -71 [ 237.687797][ T5693] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 237.699955][ T5693] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.699999][ T5693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 237.700023][ T5693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 237.712054][ T5700] usb usb6-port1: attempt power cycle [ 237.748654][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.757011][ T5693] usb 2-1: Product: syz [ 237.757024][ T5693] usb 2-1: Manufacturer: syz [ 237.757031][ T5693] usb 2-1: SerialNumber: syz [ 237.778094][ T5693] usb 2-1: config 0 descriptor?? [ 237.785844][ T8784] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 237.904428][ T5693] rc_core: IR keymap rc-streamzap not found [ 237.910569][ T5693] Registered IR keymap rc-empty [ 237.917178][ T5693] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 237.933371][ T5693] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input55 [ 238.068717][ T5700] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 238.098755][ T5700] usb 6-1: device descriptor read/8, error -71 [ 238.123684][ T5763] usb 2-1: USB disconnect, device number 59 [ 238.335836][ T5700] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 238.357044][ T5700] usb 6-1: device descriptor read/8, error -71 [ 238.465721][ T5700] usb usb6-port1: unable to enumerate USB device [ 238.616108][ T8794] bonding: bond0 is being deleted... [ 238.795635][ T8796] rust_binder: 8795:8796 got transaction to invalid handle 3 [ 238.804729][ T5700] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 238.813231][ T8796] rust_binder: 8795:8796 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 238.823721][ T8796] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 238.825336][ T8796] rust_binder: Read failure Err(EFAULT) in pid:595 [ 238.843119][ T5763] rust_binder: 8795: undelivered TRANSACTION_ERROR: 29201 [ 238.935970][ T5700] usb 5-1: device descriptor read/64, error -71 [ 239.087372][ T8794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.174756][ T5700] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 239.264196][ T2247] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 239.280101][ T8794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.315458][ T5700] usb 5-1: device descriptor read/64, error -71 [ 239.343042][ T8794] bond0 (unregistering): Released all slaves [ 239.417330][ T2247] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 239.427063][ T5700] usb usb5-port1: attempt power cycle [ 239.435444][ T2247] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.435500][ T2247] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.785411][ T5700] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 239.804821][ T5700] usb 5-1: device descriptor read/8, error -71 [ 239.830490][ T2247] msi2500 2-1:1.0: Registered as swradio24 [ 239.830519][ T2247] msi2500 2-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 239.853982][ T2247] usb 2-1: USB disconnect, device number 60 [ 240.044310][ T5700] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 240.067386][ T5700] usb 5-1: device descriptor read/8, error -71 [ 240.175693][ T5700] usb usb5-port1: unable to enumerate USB device [ 240.547745][ T10] gspca_stk1135: reg_w 0x352 err -71 [ 240.558698][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 240.558721][ T10] gspca_stk1135: Sensor write failed [ 240.558746][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 240.558753][ T10] gspca_stk1135: Sensor write failed [ 240.558770][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 240.558777][ T10] gspca_stk1135: Sensor read failed [ 240.558794][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 240.558801][ T10] gspca_stk1135: Sensor read failed [ 240.558806][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 240.558826][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 240.558833][ T10] gspca_stk1135: Sensor read failed [ 240.558849][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 240.558857][ T10] gspca_stk1135: Sensor read failed [ 240.558873][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 240.558881][ T10] gspca_stk1135: Sensor write failed [ 240.558896][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 240.558903][ T10] gspca_stk1135: Sensor write failed [ 240.558956][ T10] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 240.645409][ T2247] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 240.693203][ T10] usb 1-1: USB disconnect, device number 66 [ 240.788038][ T8815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.800447][ T8815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.824925][ T2247] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 240.836992][ T2247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.837018][ T2247] usb 2-1: Product: syz [ 240.837034][ T2247] usb 2-1: Manufacturer: syz [ 240.837044][ T2247] usb 2-1: SerialNumber: syz [ 240.866457][ T2247] usb 2-1: config 0 descriptor?? [ 240.877943][ T2247] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 241.004981][ T5700] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 241.156807][ T5700] usb 6-1: Using ep0 maxpacket: 32 [ 241.173677][ T5700] usb 6-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 241.185236][ T5700] usb 6-1: config index 0 descriptor too short (expected 36, got 27) [ 241.185264][ T5700] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.185285][ T5700] usb 6-1: too many endpoints for config 0 interface 0 altsetting 5: 71, using maximum allowed: 30 [ 241.185307][ T5700] usb 6-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 241.185324][ T5700] usb 6-1: config 0 interface 0 has no altsetting 0 [ 241.185374][ T5700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.251906][ T5700] usb 6-1: config 0 descriptor?? [ 241.295119][ T8818] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 241.399327][ T8820] FAULT_INJECTION: forcing a failure. [ 241.399327][ T8820] name failslab, interval 1, probability 0, space 0, times 0 [ 241.422805][ T8820] CPU: 0 UID: 0 PID: 8820 Comm: syz.0.768 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.422825][ T8820] Tainted: [L]=SOFTLOCKUP [ 241.422829][ T8820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.422836][ T8820] Call Trace: [ 241.422841][ T8820] [ 241.422846][ T8820] dump_stack_lvl+0xe8/0x150 [ 241.422869][ T8820] should_fail_ex+0x3eb/0x540 [ 241.422888][ T8820] ? __alloc_skb+0x1db/0x7a0 [ 241.422903][ T8820] should_failslab+0xa8/0x100 [ 241.422915][ T8820] ? __alloc_skb+0x1db/0x7a0 [ 241.422929][ T8820] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 241.422943][ T8820] ? __alloc_skb+0x18d/0x7a0 [ 241.422960][ T8820] ? __alloc_skb+0x1db/0x7a0 [ 241.422978][ T8820] __alloc_skb+0x1db/0x7a0 [ 241.422995][ T8820] netlink_ack+0x136/0xb30 [ 241.423007][ T8820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.423022][ T8820] ? __pfx_nl80211_post_doit+0x10/0x10 [ 241.423034][ T8820] ? __pfx_ref_tracker_free+0x10/0x10 [ 241.423046][ T8820] ? __asan_memcpy+0x40/0x70 [ 241.423065][ T8820] netlink_rcv_skb+0x2a4/0x4a0 [ 241.423078][ T8820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.423093][ T8820] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 241.423112][ T8820] ? down_read+0x2be/0x330 [ 241.423125][ T8820] genl_rcv+0x28/0x40 [ 241.423138][ T8820] netlink_unicast+0x7bd/0x940 [ 241.423155][ T8820] netlink_sendmsg+0x7c3/0xae0 [ 241.423171][ T8820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.423187][ T8820] ? apparmor_socket_sendmsg+0x98/0x360 [ 241.423205][ T8820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.423216][ T8820] sock_sendmsg_nosec+0x13a/0x180 [ 241.423232][ T8820] ____sys_sendmsg+0x54e/0x850 [ 241.423246][ T8820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.423262][ T8820] ? import_iovec+0x73/0xa0 [ 241.423276][ T8820] ___sys_sendmsg+0x2a5/0x360 [ 241.423287][ T8820] ? __lock_acquire+0x6df/0x2e50 [ 241.423304][ T8820] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.423333][ T8820] ? __fget_files+0x2a/0x420 [ 241.423345][ T8820] ? __fget_files+0x3a2/0x420 [ 241.423362][ T8820] __x64_sys_sendmsg+0x1b1/0x290 [ 241.423382][ T8820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.423404][ T8820] do_syscall_64+0x166/0x520 [ 241.423419][ T8820] ? trace_irq_disable+0x3b/0x140 [ 241.423434][ T8820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.423445][ T8820] ? clear_bhb_loop+0x70/0xc0 [ 241.423458][ T8820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.423469][ T8820] RIP: 0033:0x7ff54099e159 [ 241.423481][ T8820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.423491][ T8820] RSP: 002b:00007ff54189a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.423504][ T8820] RAX: ffffffffffffffda RBX: 00007ff540c25fa0 RCX: 00007ff54099e159 [ 241.423512][ T8820] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 241.423519][ T8820] RBP: 00007ff54189a090 R08: 0000000000000000 R09: 0000000000000000 [ 241.423526][ T8820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.423532][ T8820] R13: 00007ff540c26038 R14: 00007ff540c25fa0 R15: 00007fff6a148f38 [ 241.423549][ T8820] [ 241.704239][ T5700] usb 6-1: string descriptor 0 read error: -71 [ 241.781488][ T5700] usb 6-1: USB disconnect, device number 25 [ 242.036202][ T50] IPVS: starting estimator thread 0... [ 242.124375][ T8831] IPVS: using max 56 ests per chain, 134400 per kthread [ 242.181798][ T8835] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 160 out of range (51000000..2150000000) [ 242.366138][ T8842] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 242.441920][ T8844] FAULT_INJECTION: forcing a failure. [ 242.441920][ T8844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.452457][ T8844] CPU: 0 UID: 0 PID: 8844 Comm: syz.5.777 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.452479][ T8844] Tainted: [L]=SOFTLOCKUP [ 242.452483][ T8844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.452491][ T8844] Call Trace: [ 242.452496][ T8844] [ 242.452502][ T8844] dump_stack_lvl+0xe8/0x150 [ 242.452525][ T8844] should_fail_ex+0x3eb/0x540 [ 242.452541][ T8844] _copy_to_user+0x31/0xb0 [ 242.452556][ T8844] simple_read_from_buffer+0xe1/0x170 [ 242.452574][ T8844] proc_fail_nth_read+0x1bb/0x230 [ 242.452591][ T8844] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.452608][ T8844] ? rw_verify_area+0x24a/0x4c0 [ 242.452624][ T8844] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.452638][ T8844] vfs_read+0x213/0xa80 [ 242.452655][ T8844] ? __pfx___mutex_lock+0x10/0x10 [ 242.452671][ T8844] ? __pfx_vfs_read+0x10/0x10 [ 242.452685][ T8844] ? __fget_files+0x2a/0x420 [ 242.452701][ T8844] ? __fget_files+0x3a2/0x420 [ 242.452712][ T8844] ? __fget_files+0x2a/0x420 [ 242.452729][ T8844] ksys_read+0x150/0x270 [ 242.452744][ T8844] ? __pfx_ksys_read+0x10/0x10 [ 242.452763][ T8844] do_syscall_64+0x166/0x520 [ 242.452779][ T8844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.452790][ T8844] ? clear_bhb_loop+0x70/0xc0 [ 242.452802][ T8844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.452814][ T8844] RIP: 0033:0x7f9a3e15e98e [ 242.452825][ T8844] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 242.452835][ T8844] RSP: 002b:00007f9a3eff3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.452847][ T8844] RAX: ffffffffffffffda RBX: 00007f9a3eff46c0 RCX: 00007f9a3e15e98e [ 242.452855][ T8844] RDX: 000000000000000f RSI: 00007f9a3eff40a0 RDI: 0000000000000004 [ 242.452862][ T8844] RBP: 00007f9a3eff4090 R08: 0000000000000000 R09: 0000000000000000 [ 242.452869][ T8844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.452875][ T8844] R13: 00007f9a3e426038 R14: 00007f9a3e425fa0 R15: 00007ffd1586b818 [ 242.452892][ T8844] [ 242.568770][ T5763] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 242.737380][ T5763] usb 5-1: device descriptor read/64, error -71 [ 242.954883][ T8848] netlink: 'syz.0.779': attribute type 46 has an invalid length. [ 242.974748][ T5763] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 243.114166][ T5763] usb 5-1: device descriptor read/64, error -71 [ 243.207977][ T8859] FAULT_INJECTION: forcing a failure. [ 243.207977][ T8859] name failslab, interval 1, probability 0, space 0, times 0 [ 243.222000][ T8859] CPU: 0 UID: 0 PID: 8859 Comm: syz.5.782 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.222021][ T8859] Tainted: [L]=SOFTLOCKUP [ 243.222026][ T8859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.222034][ T8859] Call Trace: [ 243.222040][ T8859] [ 243.222047][ T8859] dump_stack_lvl+0xe8/0x150 [ 243.222068][ T8859] should_fail_ex+0x3eb/0x540 [ 243.222087][ T8859] should_failslab+0xa8/0x100 [ 243.222101][ T8859] __kmalloc_cache_node_noprof+0xaa/0x620 [ 243.222120][ T8859] ? __get_vm_area_node+0x155/0x2f0 [ 243.222135][ T8859] ? __get_vm_area_node+0x155/0x2f0 [ 243.222152][ T8859] __get_vm_area_node+0x155/0x2f0 [ 243.222169][ T8859] ? stack_depot_save_flags+0x33/0x7f0 [ 243.222183][ T8859] __vmalloc_node_range_noprof+0x340/0x1690 [ 243.222199][ T8859] ? kvm_set_memslot+0x49a/0x1320 [ 243.222214][ T8859] ? __pfx___mutex_trylock_common+0x10/0x10 [ 243.222229][ T8859] ? rcu_is_watching+0x16/0xb0 [ 243.222241][ T8859] ? trace_contention_end+0x3d/0x140 [ 243.222260][ T8859] ? kvm_set_memslot+0x3c/0x1320 [ 243.222275][ T8859] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 243.222296][ T8859] ? kvm_set_memslot+0x49a/0x1320 [ 243.222308][ T8859] __vmalloc_noprof+0xd2/0x120 [ 243.222322][ T8859] ? kvm_set_memslot+0x49a/0x1320 [ 243.222337][ T8859] kvm_set_memslot+0x49a/0x1320 [ 243.222356][ T8859] kvm_set_memory_region+0x958/0xb90 [ 243.222378][ T8859] kvm_vm_ioctl_set_memory_region+0x6f/0xa0 [ 243.222394][ T8859] kvm_vm_ioctl+0xb95/0xd30 [ 243.222409][ T8859] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 243.222439][ T8859] ? tomoyo_path_number_perm+0x219/0x5f0 [ 243.222457][ T8859] ? tomoyo_path_number_perm+0x219/0x5f0 [ 243.222475][ T8859] ? do_vfs_ioctl+0x116f/0x1530 [ 243.222496][ T8859] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 243.222520][ T8859] ? hook_file_ioctl+0x1f2/0x600 [ 243.222541][ T8859] ? __fget_files+0x2a/0x420 [ 243.222556][ T8859] ? __fget_files+0x2a/0x420 [ 243.222568][ T8859] ? __fget_files+0x3a2/0x420 [ 243.222586][ T8859] ? __fget_files+0x2a/0x420 [ 243.222600][ T8859] ? bpf_lsm_file_ioctl+0x9/0x20 [ 243.222616][ T8859] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 243.222630][ T8859] __se_sys_ioctl+0xfc/0x170 [ 243.222649][ T8859] do_syscall_64+0x166/0x520 [ 243.222672][ T8859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.222683][ T8859] ? clear_bhb_loop+0x70/0xc0 [ 243.222697][ T8859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.222710][ T8859] RIP: 0033:0x7f9a3e19e159 [ 243.222722][ T8859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.222733][ T8859] RSP: 002b:00007f9a3eff4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.222746][ T8859] RAX: ffffffffffffffda RBX: 00007f9a3e425fa0 RCX: 00007f9a3e19e159 [ 243.222754][ T8859] RDX: 0000200000000400 RSI: 000000004020ae46 RDI: 0000000000000006 [ 243.222762][ T8859] RBP: 00007f9a3e235024 R08: 0000000000000000 R09: 0000000000000000 [ 243.222769][ T8859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.222776][ T8859] R13: 00007f9a3e426038 R14: 00007f9a3e425fa0 R15: 00007ffd1586b818 [ 243.222793][ T8859] [ 243.233830][ T8859] syz.5.782: vmalloc error: size 16, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 243.233915][ T8859] CPU: 0 UID: 0 PID: 8859 Comm: syz.5.782 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.233931][ T8859] Tainted: [L]=SOFTLOCKUP [ 243.233936][ T8859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.233943][ T8859] Call Trace: [ 243.233948][ T8859] [ 243.233954][ T8859] dump_stack_lvl+0xe8/0x150 [ 243.233973][ T8859] warn_alloc+0x24d/0x270 [ 243.233992][ T8859] ? __kasan_kmalloc+0x22/0xb0 [ 243.234006][ T8859] ? __pfx_warn_alloc+0x10/0x10 [ 243.234021][ T8859] ? __get_vm_area_node+0x155/0x2f0 [ 243.234039][ T8859] ? __get_vm_area_node+0x2a9/0x2f0 [ 243.234057][ T8859] __vmalloc_node_range_noprof+0x368/0x1690 [ 243.234073][ T8859] ? __pfx___mutex_trylock_common+0x10/0x10 [ 243.234088][ T8859] ? rcu_is_watching+0x16/0xb0 [ 243.234099][ T8859] ? trace_contention_end+0x3d/0x140 [ 243.234119][ T8859] ? kvm_set_memslot+0x3c/0x1320 [ 243.234134][ T8859] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 243.234155][ T8859] ? kvm_set_memslot+0x49a/0x1320 [ 243.234167][ T8859] __vmalloc_noprof+0xd2/0x120 [ 243.234181][ T8859] ? kvm_set_memslot+0x49a/0x1320 [ 243.234196][ T8859] kvm_set_memslot+0x49a/0x1320 [ 243.234215][ T8859] kvm_set_memory_region+0x958/0xb90 [ 243.234236][ T8859] kvm_vm_ioctl_set_memory_region+0x6f/0xa0 [ 243.234252][ T8859] kvm_vm_ioctl+0xb95/0xd30 [ 243.234267][ T8859] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 243.234297][ T8859] ? tomoyo_path_number_perm+0x219/0x5f0 [ 243.234316][ T8859] ? tomoyo_path_number_perm+0x219/0x5f0 [ 243.234334][ T8859] ? do_vfs_ioctl+0x116f/0x1530 [ 243.234353][ T8859] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 243.234376][ T8859] ? hook_file_ioctl+0x1f2/0x600 [ 243.234398][ T8859] ? __fget_files+0x2a/0x420 [ 243.234413][ T8859] ? __fget_files+0x2a/0x420 [ 243.234426][ T8859] ? __fget_files+0x3a2/0x420 [ 243.234439][ T8859] ? __fget_files+0x2a/0x420 [ 243.234454][ T8859] ? bpf_lsm_file_ioctl+0x9/0x20 [ 243.234468][ T8859] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 243.234482][ T8859] __se_sys_ioctl+0xfc/0x170 [ 243.234499][ T8859] do_syscall_64+0x166/0x520 [ 243.234515][ T8859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.234527][ T8859] ? clear_bhb_loop+0x70/0xc0 [ 243.234540][ T8859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.234551][ T8859] RIP: 0033:0x7f9a3e19e159 [ 243.234563][ T8859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.234572][ T8859] RSP: 002b:00007f9a3eff4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.234584][ T8859] RAX: ffffffffffffffda RBX: 00007f9a3e425fa0 RCX: 00007f9a3e19e159 [ 243.234592][ T8859] RDX: 0000200000000400 RSI: 000000004020ae46 RDI: 0000000000000006 [ 243.234599][ T8859] RBP: 00007f9a3e235024 R08: 0000000000000000 R09: 0000000000000000 [ 243.234606][ T8859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.234612][ T8859] R13: 00007f9a3e426038 R14: 00007f9a3e425fa0 R15: 00007ffd1586b818 [ 243.234629][ T8859] [ 243.234909][ T5763] usb usb5-port1: attempt power cycle [ 243.449677][ T8859] Mem-Info: [ 243.449690][ T8859] active_anon:23678 inactive_anon:0 isolated_anon:0 [ 243.449690][ T8859] active_file:0 inactive_file:60821 isolated_file:0 [ 243.449690][ T8859] unevictable:0 dirty:59 writeback:0 [ 243.449690][ T8859] slab_reclaimable:10645 slab_unreclaimable:94321 [ 243.449690][ T8859] mapped:26395 shmem:16956 pagetables:1622 [ 243.449690][ T8859] sec_pagetables:0 bounce:0 [ 243.449690][ T8859] kernel_misc_reclaimable:0 [ 243.449690][ T8859] free:1288823 free_pcp:10342 free_cma:0 [ 243.449723][ T8859] Node 0 active_anon:94712kB inactive_anon:0kB active_file:0kB inactive_file:243048kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105544kB dirty:236kB writeback:0kB shmem:67824kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12416kB pagetables:6352kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 243.449754][ T8859] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:236kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 243.449782][ T8859] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 243.449828][ T8859] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 243.449849][ T8859] Node 0 DMA32 free:1201176kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:94712kB inactive_anon:0kB active_file:0kB inactive_file:243048kB unevictable:0kB writepending:236kB zspages:0kB present:3129332kB managed:2541820kB mlocked:0kB bounce:0kB free_pcp:41360kB local_pcp:41360kB free_cma:0kB [ 243.449880][ T8859] lowmem_reserve[]: 0 0 1 1 1 [ 243.449898][ T8859] Node 0 Normal free:16kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1696kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 243.449926][ T8859] lowmem_reserve[]: 0 0 0 0 0 [ 243.449944][ T8859] Node 1 Normal free:3938740kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:236kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 243.449989][ T8859] lowmem_reserve[]: 0 0 0 0 0 [ 243.450007][ T8859] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 243.450106][ T8859] Node 0 DMA32: 20156*4kB (UME) 1621*8kB (UME) 912*16kB (UME) 501*32kB (UME) 317*64kB (UME) 165*128kB (UME) 43*256kB (UME) 11*512kB (UME) 1*1024kB (M) 3*2048kB (UM) 247*4096kB (UM) = 1201144kB [ 243.450192][ T8859] Node 0 Normal: 0*4kB 2*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 243.450271][ T8859] Node 1 Normal: 5*4kB (UM) 2*8kB (U) 3*16kB (UM) 7*32kB (U) 2*64kB (UM) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (UM) = 3938740kB [ 243.450370][ T8859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 243.450380][ T8859] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 243.450389][ T8859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 243.450398][ T8859] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 243.450406][ T8859] 77743 total pagecache pages [ 243.450411][ T8859] 0 pages in swap cache [ 243.450415][ T8859] Free swap = 124996kB [ 243.450419][ T8859] Total swap = 124996kB [ 243.450424][ T8859] 2097051 pages RAM [ 243.450428][ T8859] 0 pages HighMem/MovableOnly [ 243.450432][ T8859] 429556 pages reserved [ 243.450436][ T8859] 0 pages cma reserved [ 243.688979][ T5763] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 243.740372][ T5763] usb 5-1: device descriptor read/8, error -71 [ 244.106801][ T5763] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 244.182542][ T5763] usb 5-1: device descriptor read/8, error -71 [ 244.292574][ T5763] usb usb5-port1: unable to enumerate USB device [ 244.383598][ T2247] gspca_stk1135: reg_w 0x352 err -71 [ 244.385189][ T2247] gspca_stk1135: serial bus timeout: status=0x00 [ 244.385201][ T2247] gspca_stk1135: Sensor write failed [ 244.385218][ T2247] gspca_stk1135: serial bus timeout: status=0x00 [ 244.385225][ T2247] gspca_stk1135: Sensor write failed [ 244.385243][ T2247] gspca_stk1135: serial bus timeout: status=0x00 [ 244.385250][ T2247] gspca_stk1135: Sensor read failed [ 244.385267][ T2247] gspca_stk1135: serial bus timeout: status=0x00 [ 244.385274][ T2247] gspca_stk1135: Sensor read failed [ 244.385280][ T2247] gspca_stk1135: Detected sensor type unknown (0x0) [ 244.385300][ T2247] gspca_stk1135: serial bus timeout: status=0x00 [ 244.385307][ T2247] gspca_stk1135: Sensor read failed [ 244.385324][ T2247] gspca_stk1135: serial bus timeout: status=0x00 [ 244.385330][ T2247] gspca_stk1135: Sensor read failed [ 244.385347][ T2247] gspca_stk1135: serial bus timeout: status=0x00 [ 244.385354][ T2247] gspca_stk1135: Sensor write failed [ 244.385371][ T2247] gspca_stk1135: serial bus timeout: status=0x00 [ 244.385378][ T2247] gspca_stk1135: Sensor write failed [ 244.385423][ T2247] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 244.513158][ T2247] usb 2-1: USB disconnect, device number 61 [ 245.754331][ T2247] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 245.784698][ T5700] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 245.807038][ T13] IPVS: starting estimator thread 0... [ 245.897904][ T8885] IPVS: using max 56 ests per chain, 134400 per kthread [ 245.905742][ T2247] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 245.919037][ T2247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.919064][ T2247] usb 5-1: Product: syz [ 245.919081][ T2247] usb 5-1: Manufacturer: syz [ 245.919092][ T2247] usb 5-1: SerialNumber: syz [ 245.944030][ T5700] usb 2-1: New USB device found, idVendor=12d1, idProduct=1436, bcdDevice= 0.00 [ 245.956109][ T5700] usb 2-1: config 0 has an invalid interface number: 226 but max is 3 [ 245.956138][ T5700] usb 2-1: config 0 has an invalid interface number: 111 but max is 3 [ 245.956159][ T5700] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 245.956172][ T5700] usb 2-1: config 0 has an invalid interface number: 155 but max is 3 [ 245.956186][ T5700] usb 2-1: config 0 has an invalid interface number: 75 but max is 3 [ 245.956200][ T5700] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 245.956213][ T5700] usb 2-1: config 0 has no interface number 0 [ 245.956224][ T5700] usb 2-1: config 0 has no interface number 1 [ 245.956236][ T5700] usb 2-1: config 0 has no interface number 2 [ 245.956247][ T5700] usb 2-1: config 0 has no interface number 3 [ 245.956293][ T5700] usb 2-1: config 0 interface 226 altsetting 8 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 245.956312][ T5700] usb 2-1: config 0 interface 226 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 245.956329][ T5700] usb 2-1: config 0 interface 226 altsetting 8 endpoint 0x1 has invalid maxpacket 1983, setting to 64 [ 245.956347][ T5700] usb 2-1: config 0 interface 226 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 245.956362][ T5700] usb 2-1: config 0 interface 226 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 245.956377][ T5700] usb 2-1: config 0 interface 226 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 245.956392][ T5700] usb 2-1: config 0 interface 226 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 245.956406][ T5700] usb 2-1: config 0 interface 226 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 245.956432][ T5700] usb 2-1: config 0 interface 111 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 245.956446][ T5700] usb 2-1: config 0 interface 111 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 245.956461][ T5700] usb 2-1: config 0 interface 111 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 245.956479][ T5700] usb 2-1: config 0 interface 111 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1024 [ 245.956497][ T5700] usb 2-1: config 0 interface 111 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 245.956512][ T5700] usb 2-1: config 0 interface 111 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 245.956532][ T5700] usb 2-1: config 0 interface 155 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 245.956547][ T5700] usb 2-1: config 0 interface 155 altsetting 7 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 245.956564][ T5700] usb 2-1: config 0 interface 155 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 245.956585][ T5700] usb 2-1: config 0 interface 75 altsetting 2 endpoint 0x8A has an invalid bInterval 70, changing to 7 [ 245.956601][ T5700] usb 2-1: config 0 interface 75 altsetting 2 endpoint 0x8A has invalid maxpacket 1592, setting to 1024 [ 245.956618][ T5700] usb 2-1: config 0 interface 75 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 245.956633][ T5700] usb 2-1: config 0 interface 75 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 245.956646][ T5700] usb 2-1: config 0 interface 75 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 245.956663][ T5700] usb 2-1: config 0 interface 226 has no altsetting 0 [ 245.956675][ T5700] usb 2-1: config 0 interface 111 has no altsetting 0 [ 245.956687][ T5700] usb 2-1: config 0 interface 155 has no altsetting 0 [ 245.956699][ T5700] usb 2-1: config 0 interface 75 has no altsetting 0 [ 246.031608][ T2247] usb 5-1: config 0 descriptor?? [ 246.112585][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.112603][ T5700] usb 2-1: Product: syz [ 246.112611][ T5700] usb 2-1: Manufacturer: syz [ 246.112634][ T5700] usb 2-1: SerialNumber: syz [ 246.387137][ T5700] usb 2-1: config 0 descriptor?? [ 246.393020][ T8882] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 246.409529][ C0] [ 246.411885][ C0] ============================= [ 246.416710][ C0] [ BUG: Invalid wait context ] [ 246.421547][ C0] syzkaller #0 Tainted: G L [ 246.427506][ C0] ----------------------------- [ 246.432333][ C0] udevd/4982 is trying to lock: [ 246.437178][ C0] ffff888032b05db0 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x1f4/0x9a0 [ 246.446662][ C0] other info that might help us debug this: [ 246.452561][ C0] context-{2:2} [ 246.456016][ C0] locks held by udevd/4982: 1, last CPU#0: [ 246.461801][ C0] #0: ffff888032b06310 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1bc/0x9a0 [ 246.471696][ C0] stack backtrace: [ 246.475400][ C0] CPU: 0 UID: 0 PID: 4982 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 246.485800][ C0] Tainted: [L]=SOFTLOCKUP [ 246.490128][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.500166][ C0] Call Trace: [ 246.503434][ C0] [ 246.506262][ C0] dump_stack_lvl+0xe8/0x150 [ 246.511021][ C0] __lock_acquire+0xef0/0x2e50 [ 246.515802][ C0] ? __lock_acquire+0x6df/0x2e50 [ 246.520729][ C0] lock_acquire+0x115/0x350 [ 246.525217][ C0] ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0 [ 246.530831][ C0] ? xa_load+0x1db/0x210 [ 246.535076][ C0] _raw_read_lock_irqsave+0x48/0x60 [ 246.540273][ C0] ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0 [ 246.545931][ C0] kvm_xen_set_evtchn_fast+0x1f4/0x9a0 [ 246.551473][ C0] ? kvm_xen_set_evtchn_fast+0x1bc/0x9a0 [ 246.557091][ C0] xen_timer_callback+0x109/0x220 [ 246.562097][ C0] ? __pfx_xen_timer_callback+0x10/0x10 [ 246.567622][ C0] __hrtimer_run_queues+0x371/0xa10 [ 246.572806][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 246.577745][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 246.583730][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 246.589355][ C0] [ 246.592270][ C0] [ 246.595184][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 246.601149][ C0] RIP: 0010:__rcu_read_unlock+0x69/0xe0 [ 246.606685][ C0] Code: 00 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 38 84 c0 75 66 41 83 3e 00 75 27 43 0f b6 04 3c 84 c0 75 41 8b 03 3d 00 00 00 40 73 0f <5b> 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc 90 0f 0b 90 eb eb e8 [ 246.626276][ C0] RSP: 0018:ffffc90002e67530 EFLAGS: 00000287 [ 246.632336][ C0] RAX: 0000000000000000 RBX: ffff88807e4fa404 RCX: 0000000000000046 [ 246.640311][ C0] RDX: ffffc90002e67601 RSI: ffffffff8e82a1a3 RDI: ffff88807e4f9f40 [ 246.648271][ C0] RBP: 1ffffffff2272101 R08: ffffc90002e67740 R09: 0000000000000000 [ 246.656267][ C0] R10: ffffc90002e67658 R11: fffff520005ccecd R12: 1ffff1100fc9f480 [ 246.664220][ C0] R13: ffffffff8178222f R14: ffff88807e4fa408 R15: dffffc0000000000 [ 246.672178][ C0] ? unwind_next_frame+0x8f/0x2550 [ 246.677303][ C0] ? unwind_next_frame+0x8f/0x2550 [ 246.682435][ C0] unwind_next_frame+0x1baf/0x2550 [ 246.687551][ C0] ? stack_trace_save+0xa9/0x100 [ 246.692491][ C0] ? unwind_next_frame+0x8f/0x2550 [ 246.697584][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 246.703207][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 246.709363][ C0] arch_stack_walk+0x11b/0x150 [ 246.714129][ C0] ? kasan_save_track+0x3e/0x80 [ 246.718973][ C0] ? security_file_alloc+0x34/0x310 [ 246.724285][ C0] stack_trace_save+0xa9/0x100 [ 246.729055][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 246.734420][ C0] ? alloc_empty_file+0x5b/0x1d0 [ 246.739347][ C0] kasan_save_track+0x3e/0x80 [ 246.744064][ C0] __kasan_slab_alloc+0x6c/0x80 [ 246.748899][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 246.754352][ C0] ? security_file_alloc+0x34/0x310 [ 246.759535][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 246.765154][ C0] ? security_file_alloc+0x34/0x310 [ 246.770340][ C0] security_file_alloc+0x34/0x310 [ 246.775375][ C0] init_file+0x90/0x2b0 [ 246.779510][ C0] alloc_empty_file+0x74/0x1d0 [ 246.784253][ C0] path_openat+0x9d/0x1e40 [ 246.788654][ C0] ? __lock_acquire+0x6df/0x2e50 [ 246.793597][ C0] do_file_open+0x23e/0x4a0 [ 246.798108][ C0] ? __pfx_do_file_open+0x10/0x10 [ 246.803153][ C0] ? _raw_spin_unlock+0x28/0x50 [ 246.808014][ C0] ? alloc_fd+0x651/0x6c0 [ 246.812334][ C0] do_sys_openat2+0x115/0x200 [ 246.816998][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 246.822201][ C0] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 246.827585][ C0] __x64_sys_openat+0x138/0x170 [ 246.832443][ C0] do_syscall_64+0x166/0x520 [ 246.837022][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.843086][ C0] ? clear_bhb_loop+0x70/0xc0 [ 246.847782][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.853708][ C0] RIP: 0033:0x7f2514aa7407 [ 246.858126][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 246.877731][ C0] RSP: 002b:00007ffcceb19fb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 246.886135][ C0] RAX: ffffffffffffffda RBX: 00007f25152a2880 RCX: 00007f2514aa7407 [ 246.894091][ C0] RDX: 0000000000080000 RSI: 00007ffcceb1a130 RDI: ffffffffffffff9c [ 246.902046][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 246.910026][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000558da75517f5 [ 246.917989][ C0] R13: 0000558da75517f5 R14: 0000000000000001 R15: 0000000000000000 [ 246.925964][ C0] [ 246.952932][ T2247] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 247.335370][ T5700] usb-storage 2-1:0.226: USB Mass Storage device detected [ 247.537743][ T8882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.547661][ T8882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.558787][ T5700] usb-storage 2-1:0.111: USB Mass Storage device detected [ 247.572314][ T2247] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 247.587080][ T5700] usb-storage 2-1:0.155: USB Mass Storage device detected [ 247.597401][ T2247] usb 5-1: USB disconnect, device number 41 [ 247.618402][ T5700] usb-storage 2-1:0.75: USB Mass Storage device detected [ 247.649964][ T5700] usb 2-1: USB disconnect, device number 62 [ 254.775006][ T1310] ieee802154 phy1 wpan1: encryption failed: -22