last executing test programs: 2m32.306711175s ago: executing program 1 (id=787): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x20000000, 0xfffffffffffffffe, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2, 0x0, 0x8], 0x50000, 0x281302}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m31.998297369s ago: executing program 1 (id=788): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000005180)={0x2020}, 0x2020) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x20000000, 0xfffffffffffffffe, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2, 0x0, 0x8], 0x50000, 0x281302}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m31.684642649s ago: executing program 1 (id=789): r0 = gettid() fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x1, 0x0, 0xe8, 0xbb487aa, r0}) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x0) syz_usb_connect$cdc_ncm(0x1, 0x7b, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x5, 0x40, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "6bd08a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x7ff, 0x8, 0x10}, {0x6, 0x24, 0x1a, 0x7, 0x5}, [@country_functional={0xa, 0x24, 0x7, 0x7, 0xa4, [0x4, 0x80]}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x2, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1a, 0x9, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x9, 0x80}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x20, 0x5, 0x0, 0x0, 0x6}, 0x27, &(0x7f0000000240)={0x5, 0xf, 0x27, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xb4, "31a11e4ae50fc10bb2c2c0dec47a423d"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xc, 0x8, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x9, 0x6, 0x3}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x280a}}]}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) close(0x3) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockname$packet(r5, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0xffffffff) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000100)=0x1) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f00000001c0)={0x20, 0x6, 0x28, {0x28, 0x4, "f70b060003920000000040d43e004f3f7f47860600461288b12fbdd6266fc93f0808251f0000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m28.299296831s ago: executing program 1 (id=807): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905"], 0x0) 2m26.888829366s ago: executing program 1 (id=826): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f000bac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x8040) quotactl_fd$Q_QUOTAON(r0, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x2, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0x101c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) read$FUSE(r6, &(0x7f0000005d40)={0x2020, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000007d80)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) lstat(&(0x7f0000007dc0)='./file0\x00', &(0x7f0000007e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r0, &(0x7f0000007e80)={0xa0, 0x0, r7, {{0x0, 0x3, 0x400, 0x0, 0xb, 0x8c79, {0x1, 0x8001, 0x1e, 0xf1c, 0xf, 0x1, 0x2, 0x4f, 0x6, 0x1000, 0x0, r8, r9, 0x8001, 0xa}}, {0x0, 0x4}}}, 0xa0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000640)="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", 0x132}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="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", 0x47f}], 0x1}}], 0x2, 0x42054) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0x5, 0x4) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) 2m25.859333624s ago: executing program 1 (id=832): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)={0x0, 0xffffffff, 0xffff, 0x4, 0x10000004}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = epoll_create1(0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000, 0x1000002, 0x0, 0xd33, 0xd26d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x70000012}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "3c523adce81beb78", "772f1057167f1800c1cc1d76be52180b", "dda981a6", "dbe71726d792e24d"}, 0x28) recvfrom(r3, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) setsockopt$sock_int(r3, 0x1, 0x4, &(0x7f00000000c0)=0x10000, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a40)={0x53, 0xffffffffffffffff, 0x61, 0xa3, @scatter={0x6, 0x0, &(0x7f0000001800)=[{&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000000680)=""/97, 0x61}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/83, 0x53}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/12, 0xc}]}, &(0x7f0000001880)="a4687a1b69346f893f07643561acf696f1028efea8c44f60fa935182009a5aa47ccc47907533adcbfe316fde1a98e184d1e495ae4cadeb412e537ad4fcf3ad72b6ae764e6939c30fa038d03e312368700cb350965a2a34fd19f5796bd50ee938ad", &(0x7f0000001900)=""/248, 0x5, 0x4, 0x3, &(0x7f0000001a00)}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmmsg(r5, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8002) r6 = epoll_create(0xb4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)={0x30000015}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000180)={0x101, 0x7, 0xf8a, 0xca29c56, 0x2630, 0x9}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000500)={0x5, 0xfffffff9, 0x1, 'queue0\x00', 0xffffffb7}) 2m8.731578415s ago: executing program 32 (id=832): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)={0x0, 0xffffffff, 0xffff, 0x4, 0x10000004}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = epoll_create1(0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000, 0x1000002, 0x0, 0xd33, 0xd26d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x70000012}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "3c523adce81beb78", "772f1057167f1800c1cc1d76be52180b", "dda981a6", "dbe71726d792e24d"}, 0x28) recvfrom(r3, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) setsockopt$sock_int(r3, 0x1, 0x4, &(0x7f00000000c0)=0x10000, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a40)={0x53, 0xffffffffffffffff, 0x61, 0xa3, @scatter={0x6, 0x0, &(0x7f0000001800)=[{&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000000680)=""/97, 0x61}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/83, 0x53}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/12, 0xc}]}, &(0x7f0000001880)="a4687a1b69346f893f07643561acf696f1028efea8c44f60fa935182009a5aa47ccc47907533adcbfe316fde1a98e184d1e495ae4cadeb412e537ad4fcf3ad72b6ae764e6939c30fa038d03e312368700cb350965a2a34fd19f5796bd50ee938ad", &(0x7f0000001900)=""/248, 0x5, 0x4, 0x3, &(0x7f0000001a00)}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmmsg(r5, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8002) r6 = epoll_create(0xb4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)={0x30000015}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000180)={0x101, 0x7, 0xf8a, 0xca29c56, 0x2630, 0x9}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000500)={0x5, 0xfffffff9, 0x1, 'queue0\x00', 0xffffffb7}) 6.214042253s ago: executing program 3 (id=1620): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000004c0)={0x0, 0xc7, "ba55252db47f6510b2fa24db9f1e9de648ae1b521fa9bd666ea327790cd5b5bab232fd607d699b1da109582b0ba4af0dcd66a0192160e3a88f7b057a4b0a5c67b00a3b0e702827d6cad9a50a7cc3439112a4625b5ed40bfa9ffbcc158db40db221e658f43c40dfdb739126a2736322fc83a0a6ac353e9c6c379d547fb98519831d629cd4a275efe5d04b7df36e65d7c9a6e4b86eea5c8a45887e2b11c64a98f59c46fe44de8d438d964b90420d1bb2fe6204ff759774f4545551d61ebb2868c25f07142501fe4d"}, &(0x7f00000005c0)=0xcf) 5.991439773s ago: executing program 3 (id=1625): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f00000006c0)="d09c1349b934161f4e732183398bba761929c0934db3d26bf07e038161e65e1cac51028f5a66ad6abfcf02fde88ca2d2f5314a0d6f1bf89b8fe66f41058b36140a1546874e9dda981c314bf7991a76267a2045cf593cf176786758a181e7bd1cd5b83ae91c18ad4570b11e8063fb148e64ebb53721ecc432697fe052b5e80eb921ca982a010e944239929e591e2cc088305b478404b2ca1dd7f38ca61ddee46059962a584018142d73264dd2fd4524ecec4495c4187688612cd5979b5ba7c4d3f8") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000080)=0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x3, 0x2, 0x457f1c9146f8f874, "4649f6441214bd00100000007f9d0000310fa145d5fbffffff00", 0xb5315241}) r4 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f00000000c0)=ANY=[]) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000100)=0x3b23, 0x4) r5 = socket$inet(0x2, 0x1, 0x6) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000280)="1b7e5555ad4872f588784147f60b5254b22065ca09efe620b6e143cbbfc0c144c7e92746", 0x24, 0x4000000, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r6, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000380)=""/102, 0x66}, {&(0x7f0000001900)=""/4080, 0xff0}, {&(0x7f0000000400)=""/65, 0x41}, {&(0x7f0000002980)=""/34, 0x22}], 0x4}, 0xb}, {{0x0, 0x0, 0x0}, 0x69b9}, {{&(0x7f00000001c0)=@tipc=@name, 0xe2, &(0x7f00000009c0)=[{&(0x7f00000002c0)=""/90, 0x5a}, {&(0x7f00000007c0)=""/255, 0xff}, {&(0x7f00000008c0)=""/244, 0xf4}], 0x3, &(0x7f0000004500)=""/4096, 0x1000}, 0x2}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000003fc0)=""/93, 0x5d}, {&(0x7f0000004040)=""/84, 0x54}, {&(0x7f00000040c0)}, {&(0x7f0000004100)=""/51, 0x33}, {&(0x7f0000004140)=""/216, 0xd8}, {&(0x7f0000004240)=""/7, 0x7}], 0x6, &(0x7f0000004300)=""/249, 0xf9}, 0xf274}], 0x4, 0x42, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r7, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @bt={0xfffffffe, 0x6, 0xffff, 0xd, 0x6, 0x2530, 0x1, 0x2}}) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) 5.217949658s ago: executing program 3 (id=1632): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, 0x0, 0x54cd6337) r2 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000140), 0xfed6) r4 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x20) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0xffffff87}, 0x1c) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r6, 0x204) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r11, 0x0, 0x0) connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r11, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) chown(&(0x7f0000000000)='./file0\x00', r9, r10) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000006b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x18, 0x0, 0x100000000, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.991704208s ago: executing program 0 (id=1648): sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x60}, 0x1, 0x7}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) clock_adjtime(0x17, &(0x7f0000000000)={0x8a38, 0x4, 0xa, 0x7, 0x6, 0x71, 0x5, 0x1, 0x1, 0x7, 0x1, 0x6, 0x7, 0x2, 0x4de, 0x8, 0xc2f3, 0x2fb759ac, 0x4, 0x5, 0x0, 0x6, 0x4, 0x7, 0x8, 0x2}) 3.58140994s ago: executing program 0 (id=1651): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCEXCL(r0, 0x540c) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000000080)=0x3, 0x4) recvmmsg(r2, &(0x7f0000004f80)=[{{0x0, 0x0, 0x0}, 0xbd6}], 0x1, 0x0, 0x0) write$P9_RRENAME(r1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1b4, r3, 0x102, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcb0f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4795}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x45bbdc8}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x281c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffeff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa67e}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x917e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x76}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8435}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 2.728636103s ago: executing program 3 (id=1656): memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\xe4\xda\xf9\xcd7el\xb7\xe6\b\x00\xd8\x8f\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x92\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xd9\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7\xf2\xa0D-N\xf9\xba!L]h;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\xeaq\xbb\x03&\xb4mi\xc7\xff\xca\xd8\x9f\xae\xa3\x04\xaa\x10\xe7\x98\xe48\x8d', 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x128, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0xe4, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0xffffffffffffffc3, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x70, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x150}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 2.415316033s ago: executing program 0 (id=1662): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000004c0)={0x0, 0xc7, "ba55252db47f6510b2fa24db9f1e9de648ae1b521fa9bd666ea327790cd5b5bab232fd607d699b1da109582b0ba4af0dcd66a0192160e3a88f7b057a4b0a5c67b00a3b0e702827d6cad9a50a7cc3439112a4625b5ed40bfa9ffbcc158db40db221e658f43c40dfdb739126a2736322fc83a0a6ac353e9c6c379d547fb98519831d629cd4a275efe5d04b7df36e65d7c9a6e4b86eea5c8a45887e2b11c64a98f59c46fe44de8d438d964b90420d1bb2fe6204ff759774f4545551d61ebb2868c25f07142501fe4d"}, &(0x7f00000005c0)=0xcf) 2.391717871s ago: executing program 3 (id=1663): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800000042000100fffffffffddbdf250200000004003880100001800c00c800", @ANYRES32, @ANYBLOB="89bfc7684cf54df7196137f2c36c07ae6dde7697856d"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x298}, 0x1, 0x0, 0x0, 0xc800}, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000004c0)=ANY=[@ANYRES32], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="280000002e0003050000ddffffff0000180000800c0000000d00fcdba9ccdb21243fe1"], 0x28}], 0x1}, 0x14008010) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/81, 0x3e9236da}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x40000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 2.141691541s ago: executing program 0 (id=1667): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x11) 2.140123435s ago: executing program 4 (id=1669): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000d640)={0x0, 0x0, &(0x7f000000d600)={&(0x7f0000000c80)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x880) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) write$usbip_server(0xffffffffffffffff, &(0x7f00000004c0)=@ret_unlink={{0x4, 0x8, 0x0, 0x0, 0x3ff}, {0x80000001}}, 0x30) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.044544282s ago: executing program 3 (id=1670): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000480)={0x0, 0x22, 0x15, {[@local=@item_012={0x0, 0x2, 0x9a450c9153079611}, @global=@item_012={0x1, 0x1, 0x1, '*'}, @local=@item_012={0x2, 0x2, 0x9, "3fc4"}, @global=@item_4={0x3, 0x1, 0x2, "5e7edd7b"}, @local=@item_012={0x2, 0x2, 0x4, "2bda"}, @local=@item_012={0x1, 0x2, 0x2, ';'}, @local=@item_4={0x3, 0x2, 0x4, "60c0b80b"}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0xb3, 0x1, {0x22, 0xe17}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000540)={0x20, 0x12, 0x6a, "af2b00560c3b890c0ca844b714738d55371f6a1961b633e03b1ab45bd4c1b41d5c61b48ef785415f57644bb70658161d5db1d85c5e6eb321a7a8059e443ed3be0dcb6981d1d20b244b4574692a1664651f0209d7563ddb9a8ac3afcf08225581c40bd0f4157a608e77af"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x14}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000640)={0x20, 0x1, 0xa5, "8707fd6c2f74802b2876ee1bce8c79c5acccffa83ec40b0bc4c0d33111ec147830b0b0f137a4319025674644530a26a1d1d82e86f208086e0aa42d267a71890b66117d679e06ba829c4229bd491bc1a12650bc4f0684dad5aa9d14d181825e0b0bd968f22cdd782ef3f5fdacfc07cc9320f9be22696cb5c456c0ebde259ce563d5ca01ccc0b8807ae366aa9cf9f50126ad2e221758bb52a9b628fa6cc9e3c265396ef3ea00"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0x5}}) syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf4ff}}, 0x0, 0x0}, 0x0) 1.961328714s ago: executing program 0 (id=1671): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$P9_RRENAME(r0, 0x0, 0x0) 1.898688489s ago: executing program 0 (id=1673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000000003e7"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x40) ioctl$FIOCLEX(r0, 0x5451) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904"], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x20000009, 0xffffffffffffffff}) unshare(0x22020400) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x11, 0x5}) r5 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000180)={0x3, 0x8098f904, 0x3}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fcntl$lock(r3, 0x7, &(0x7f00000000c0)={0x1, 0x3, 0x8, 0x73e9}) syz_usb_control_io$lan78xx(r1, &(0x7f0000000340)={0x14, &(0x7f00000001c0)={0x40, 0x30, 0x23, {0x23, 0x23, "ea8f8adbb554b74b29321ce4633d9170d522b9f2ea4d6e959726efedfdb420225e"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}}, &(0x7f0000000540)={0x34, &(0x7f0000000380)={0xa0, 0x11, 0x70, "bf95d00dbf1681ddb4bbd95ad34b0bb0b7289c70302de2e613fbc972591b4100851d09ed555d9ab6fa3e015238a5e29a62aae6d2064af54074b1437c9215e342ddf452b17123b101a01db6860f04a16728ab82aa67eee4401cb0d15ece2271dd6213795b8541c8da26aff0d3b879e017"}, &(0x7f0000000400)={0x0, 0xa, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000480)={0xc0, 0xa1, 0x4, 0x370}, &(0x7f00000004c0)={0x40, 0xa0, 0x4, 0x7fff}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "663f0a2d030b5bed124f9c96b8720d09edba18bb59d231c9e62033ddfab2cb31b51d9b1c42a2908f9595996039a2f1"}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/203, 0xcb, 0x1, &(0x7f0000000680)=""/135, 0x87}, &(0x7f0000000780)=0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000080)=0xfffffffffffffffd, 0x9) 1.415382339s ago: executing program 4 (id=1678): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800000042000100fffffffffddbdf250200000004003880100001800c00c800", @ANYRES32, @ANYBLOB="89bfc7684cf54df7196137f2c36c07ae6dde7697856d"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x298}, 0x1, 0x0, 0x0, 0xc800}, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000004c0)=ANY=[@ANYRES32], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="280000002e0003050000ddffffff0000180000800c0000000d00fcdba9ccdb21243fe1"], 0x28}], 0x1}, 0x14008010) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/81, 0x3e9236da}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x40000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 1.213591087s ago: executing program 4 (id=1681): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x81, 0x6576, 0x3}) r1 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0xe8200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00', @ANYBLOB="01002b"], 0x68}, 0x1, 0x0, 0x0, 0x85}, 0x40040) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0x400100000000c595, 0x0, 0x1, 0x5, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 3) 372.800976ms ago: executing program 2 (id=1685): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x81, 0x6576, 0x3}) r1 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0xe8200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00', @ANYBLOB="01002b"], 0x68}, 0x1, 0x0, 0x0, 0x85}, 0x40040) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0x400100000000c595, 0x0, 0x1, 0x5, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 51.559295ms ago: executing program 2 (id=1686): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x7bf9c1, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) 51.299837ms ago: executing program 4 (id=1687): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c000f"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) (fail_nth: 3) 51.18674ms ago: executing program 2 (id=1688): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x11) 49.705503ms ago: executing program 4 (id=1689): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800000042000100fffffffffddbdf250200000004003880100001800c00c800", @ANYRES32, @ANYBLOB="89bfc7684cf54df7196137f2c36c07ae6dde7697856d"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x298}, 0x1, 0x0, 0x0, 0xc800}, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000004c0)=ANY=[@ANYRES32], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="280000002e0003050000ddffffff0000180000800c0000000d00fcdba9ccdb21243fe1"], 0x28}], 0x1}, 0x14008010) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/81, 0x3e9236da}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x40000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 49.41236ms ago: executing program 2 (id=1690): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c000f"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 49.089178ms ago: executing program 2 (id=1691): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x81, 0x6576, 0x3}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2"], 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', &(0x7f0000000040)={0x741000, 0x81}, 0x18) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f00000000c0)='./file3\x00', 0x44) fsetxattr$security_ima(r1, &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYBLOB="04250b4f825105"], 0x7, 0x1) read$FUSE(r1, &(0x7f0000003b80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x6e8a02, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x129202, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00', @ANYBLOB="01002b"], 0x68}, 0x1, 0x0, 0x0, 0x85}, 0x40040) pread64(0xffffffffffffffff, &(0x7f00000004c0)=""/153, 0x99, 0xffff) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, &(0x7f00000000c0)='gid=1\x00nk]e@\xeec\x10\xc9g\x15H~\xddb\xdc\xb2\b\xfc\xf8\x01KV\xcbQ \xb5\x8c\xd9A\x1c\x1c`\xd4\xf7x\xc6\xad\xa7\xcc\xd4\xba\x1a\'fx&G\xd6$D!,\xa9\xb9\xd7\xebl>ua\x9d\x83Z\xaa\x12)]\xff\xc2\xec8$\x12v\x1bOY\fjM>\x81)&VG\x83.\x98\x86QM\xf0\xc5\nv\xc2\xb4\xa0\\z\xc3\x86g\xe8\xceN\v\x8f\x81\xe8z\xf8pJ\x7fM7\xa1\x7f\xf0\x9f\x15\xbdfz\xe5\xb4\xac\xf1\xb5\xbf\x06\xa88;PYz%U\x86\xb1t@\xbc$X\xa9\xaeL\xf2\x94\xd3\xeftb\xfe\xa9\a\x9dl\xff{kT\xab\xe2\xf2U\xc3\xaf8\x9d\xe3\xa7\xe3\x92X\xa2`\x96\x8ex\x85[\xe0\x7fa\x99F\xae\a\x913\xe9\x99eCA]B\x92\x93Qr\xf1U\x93\x89q!]\x87\xbd_(g\xc3\x14\xfc3S \xea\x90\xde\xf3\x11\xe3\xb9P7o-p\xb4\x92\xf2\xf0\x1a\x9a\xb0~\x06\xcb\xfc\x11\xab<7x\x94\x14\x8f\x8c\xfb\x05F\xf6\x86..\xc3\xeb\xd0-\x8e\xa8\xd5\x7f\xde\xdf\v\x0f\xc1\xc8K]\x90\x82\x167qD\xae\x9714\xd5\x1b\xa2v-\xae\xac') r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_trace', 0x8a803, 0xf) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r9, 0xff, 0x1, 0x0, &(0x7f0000000040)) write$P9_RLERRORu(r8, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x11) ioctl$BLKDISCARD(r8, 0x1277, &(0x7f00000002c0)=0x3) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffff9, 0x2, 0x2, 0x4, 0x4002004c4, 0x1004, 0x7ffffffffffffffe, 0x2, 0x0, 0x1, 0x8, 0x2000000000000001, 0x0, 0x1eb0efc5], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sched_setattr(r3, &(0x7f0000000300)={0x38, 0x5, 0xa, 0x8, 0xfffff801, 0x4, 0x0, 0x401, 0x8, 0x1}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 19.868348ms ago: executing program 4 (id=1692): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(0xffffffffffffffff, 0x894c, 0x0) 0s ago: executing program 2 (id=1693): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB="b01100001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200002000000000", @ANYRES32, @ANYRES8=r0, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000f50300000000000000020000000000000000000000000000000104000000000000000000000000000002000000000000000300000000200000000000000000000000000000000000000100000000000000440005007f000001000000000000000000000000000000042b0000000a000000fe8000000000000000000000000000aa0000000004000b000000000000000000000000000c100800081008"], 0x11b0}, 0x1, 0x0, 0x0, 0x24008005}, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x1097, &(0x7f0000000300)={0x0, 0xf2de, 0x8, 0x0, 0x281}, &(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000500)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x937, 0x8000, 0x1, 0x125}, &(0x7f00000006c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3d64, 0x1008, 0x2, 0x10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c6e, 0x20000, 0x0, 0x2ae, 0x0, r2}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x65e1, 0x10000, 0xfffffffd, 0x352, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3025, 0x2000, 0x3, 0x310}}], 0x4, &(0x7f0000004780)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, 0x0, '\x00', {0x2, 0xa68, 0x0, &(0x7f0000003780)=@buf_max_buf="29514475ffefeaf7a475140d37e5dc30c8a7d659c8102e5c782240b5085116d494e84279e417a49f6453cb7c064e100e35493a21f863f91aab06f80b8b5c19fcf7d0e53f3bd4d39c536443b71bb839a5cf88e294429fddd28a6740469885adce779954825f110ec5f6806721f23a6a440acdb4eb6746b5e558b4cd0a858f18565ddf0f060c774efab62e49726e7b73c4e18f47b3bbe96dbd028b3f7013e27126334735e1a5649423eda5fca9d39255f815bb60cdfc809fc991ca56c0e21df55345676c82b97365cf4522fbee3edb8f06b2553788867a47af8ef6cd19059667b69f0e87e4b2ff9106984658f3069b3f2b9a1ee481a27117b2567f1d48f6078c008e95c54d89d0d2d89fddaa44788b452711626a261ab87d0d49ff8c106f6b379b8fa994f2fe1fc463e3afeab738d6cd9c56e6ebe6b443447432dd28a07cfe4acbf385e08b575c89a65b7e2adf4eaf20a89a368729acb94c7e3502f50833cd78e9583e9affdcb10b64e99dd95ca86133fd8a8ed6fcd11ce70d576f8024eed2cbe5235148ed94bee558ad0700b2ddee245921822c0c8e473f94dabb1f1e6345ad244c5fc0932a1b7c7dc0522746f4b2fe353249f3fdbd399d5b551b0aa7b1bd5445b21d790656d33a0d74861512968d5e4b6186947bf761126e1c18d4c78fabfc10908572f73785b7aea3d9684617992a881126b494f54b9765210fec406659cd8dacf32d7523075979ee02582e3340dc8bcd1dac68c33dae95539bafc9a69c71e3f8d35a4b531a95ee3d02231ef8b4d4777659e0a14b08aec4b998591bfe42b54fb6294696d3e9aa8b80e51b31b484631c1545a47d10058975687ef4a53fd7eb4afadfac871996b0f1f34a0f2dee10fe40902f9763100a0e83862a52e2adbe36c8e6cc08bb1376bc4c6023eb8773fee1012e5d7340518dd8905ea6128c0ff7eb1b2a06c268e162e392f91d723bd69dea7dac2ff4023207ed07e40098c0cca18175ce86cb530eccff94dbbc3cfce21c025e126609e04d0bb893c141909aa2aee4bc2b708da1f2465bc89d668a42430270dd9fd7392de1a542ba39e3497c2888bf5ed047075af8896f850a1eb8bfd3bc52e3480dc02af5c2d0ea4444c23b4b289421f33aa065db290cf4b74f8aeda535a223382f5be1c59aca23e50a1b29b55f6b7385fe3d93a1dc0f470b128b5fb63d6d506d9babe907ea9b000a9d2d11394184f1b1db922e4de2dd285312c26c3185fffdac6505c63f97a4f9f0805a7f9926ab8dea24219582d46ef13371e18bb87b5b8daed1b3bcfe58eaee2a89c36886becad4860fe9cb9ddb34340f8985613b2f9f8551b2306f212de01895ee26a6094f8643bb472ed0b43e6bd7a4be5d4022ff9e0c04a5839d6ff6d957035ce12acfae0225b05b549d9e3264669ac1f46d89c608053f577d1be832da3684bc84ee87f027bc3d606b63485d22020c612a3d2f26bef2a7c344c59396e5c4a015c66a7d27010501c21316fd30d04470595759c8aa74f5a788b598c7ed98290c8c161999a14533a9aa2793667d486dfd4e5033c2dfe87c9a3a9333df39413056f853f2b884ca1a439b10cef06064890263cb605216cd520f5e43566cfc7730c302db6808a268f7d007b058e1d485e1fc149f52336d9e22e7cbc66d9d309928898c8cdfcd6ecb12b6f46786a5a9e36bd445bb78ece9dadf192b8cf9d026509cb2032ec53827799a64fe394905d21ed462a51c15b6078f177253aa3fdac2c2f201f6a00bff58c785d80c6196132b433a7aefe35429b1b03182239ca52b77c3c30cad4d036474e2320c01c05e7eccc4d354f7f85b8b726ed3eb31629e6a36650703a422f6dfb19c8c7873175391922ac081dc12a9877f86146b0aa26022b6c3918601f3fa07ad679f65352aa8de23b6358f97cf591c097fe50be2d80839a937825146cb79bb823db8c4a1948bbd4ebe4b4e0fb827ae0b67132704c50691c14aa8cec59e1789e638c08cb0c31e8079f02f804ef0819eabc5a1272ce875f2abf86aec183e54b29ee02421255e6849ad78a53a15eb431d3bbe38ae61dd6e7041a9ee080157f5b971da8cbaac5ad9dcad4ea3af756f5f4a382426ff6ac479e0aacc0f55bd25b53c62957a3c94e82c1448b4f564e28259875be575578cc960effe1a6dc43d576912f48537406bee39805fabd24c910e893304fa34e53c71e18b5fe45ac27a9d01aa12b52a1a1a0117dcd60d09c661e544f57ebea032fb11874a6ae92e1c6207e1578aa4366fc0a84193871d5d527b6e7dc110b2a6f7e25012dab9593af11485574a43c5bc45764520665bac43e47b84fba07a74e57c08662821a2135e601579354eb01068d53b1bc3366105bb01261e67c1fddce04942498b0c18a2fdbb96678923e4de6f4c4ebf4ff23b19f5b83d4b00339a1b7a5fb4583da18addce9d8e08a4c7e75502d4bf30cdcfd5cbac52d362aa0b87c4eaeafe03c6d653de12a68ade7802b32ff42db0c2a64e658cc924f40f5822da857c450201865dad713d81f1c24fc8526d9c69be126f09d369eeb37fb64452edd49f62cd65bf5fd1fc5ed57a5747b0ad9f5f321e8677b4aa3447ffde9054093a29287dc459dcda9fc80e00666ce49dbd0397ad939224b28da5631e00b6319308bb27590b66d3b9564a290aa07ed3f1a342bfa8b741cfde9f8cae32e96f11c9b817b1eda814af57cb62afe8067164ac3c06ed59935cf7bb4c62943b72be01b5d5c47c72789c3d7af9f28cbcf5202614289c421573ea28aec34d32958bef8493a2cae9512457f8f829bd6a3c83b607837152df1cf43f158c5fd62cdd55b5b7b02ffa7d069ac5c18e1a7d9a71f0ebeb904447509aad1c833fc6835e60970c7d23c85556201625b55146d078e16248c1f703fea6a2a46a4a33d552ac536d34df8a868a1bfe472d83b0b2c171f00a7570b52d798e4cbca7416dae75abd445daa17fd4d39fc9f798672180ba89042493ccb79eb465bc66f16e258e942cf182c0f34083325a2376f48222cdfa69a17569c925183ffc934845e632652996bb1929b1d8ebd727fc1999cc2ec3f94f28cfeb1a237fe332cbefc0f18664d52911cd4b67e26bdd39e96a1aa662a57b7ff64354168b5a0b343c1aba30c4975745072b72e136c7cf93256685c4e108fe3f461ae23ac8585f10609645bd54a46da2e5c17e5681f757cee8831c61b7a0be3741578a0467c097d0b8215efb2294d57ec09058ace96d249093e339299ce1c43ff5c8212f610237a1a4e06518f16a3b89b62d637c5b137e5d5afae10cd511a4f03a5b12fcc7e0895fdb2e15fc587c5f144552b481f77917638d4f837d954bc01c36b2bddc55aec9004f8c9de6cdad49de7e137db6a73c1af968beed4e1b96cc161eb4d18845ad209c1935e5fd558bbbade958babcb6f9b7a1caf907a4b82fc3fe111260da5e784a094682904d77620af92db924f4544da760f725cb9a904e73d58f7db2e924e5028bcd7c8ecd340809997fad74e71e47826540a2ee73860fc062e586ff64857987774b663564646eb63029b62bacf2e0094db975469c89b75455a857252b9388e5b062457ad8ad1a35faaa005840d92b3c0a48555fd8f515219274e1b66cd585af39037d0be8ece91359cae44db4d22cec88c6fcd95d42aed4780c6c35e6edaef39a519a106e6cac3e8245ef12c22bc25d90f9a0efa317d517d004303d45c53fcab211a9d3c24418aa21b3422fe1a4aa04ea167541ee2d9d262b40c7d575b9a6e2bc9dd30920246e421f8352945b0fd0c91ee447b996b017fdabb85ec86fe92f88035e713a74532dda9743ebb4dfae31171401dee9b1ce31ec0e1ec186db9208b364c7e993f028257b65575071f26d57402501c1feb19a2e71ab0ee9769a005d4415ad858921d8afa57b7b0f37d7505ca08391e53364285dbddf0014d04f2bd512d53c7966cd015ee06523f4bf079671c2ce1b7debdd7e289a2c3dff16e49be5607925028524704c5a28bde7c3ec34a419d4a08942edf0ea295a74ac1e150d313d4c1f0cba2e02af50ba398bc3b7de447ddc1d6efbc80f2ae480d9d0f47a83c39216b2579b1238ec54d8615cdd27b2eacf5d954ad36fa408579fe9d57191e4db4ca9ca7b8e32586926dc59a443318937033db77fdfdf32c85e7c7b964e5b3b982fa44df94411130f2b43fe6ce0bfe901921553e1eed0c0134a104a01c8098d783267a09ec5b65f180f6a229c772d18ad021c22b437af86f43b991929d9b6a08df4595be7be533d56dc5b03c8a62c94b8ff0e0eb42a41509caeb78edbe9964f9b66e7062132aac73257eb982408259cd3360afa0813f71b753370e3d6dde4ec99fc8f4aa94a1fe587c21ad9b2e7342b1d4aa01b13750c3331ae3faebd4b4866bb1b653ad5eea65ba61b52109f5811f5167ff6c166a943e55605f9125eb7573fc3f5e0219847a9e344248e803210cda6c0cddb6b112f9027597ec9b917c9b2ac6123d3dba132c059b8622284368a44bed06413a5a4d9d0e12de133498e8a31df7cd255d7c7ee4b8b704aa46c8e597a1e992928443c9d5be72ae02f743cb2a5ffb4b3a3bf26a432e96a35fe537ae36db4926248dce28cf25485435031f71130d3fa6a9fef2bd45c1dc914bfecad84e8876aacd9a1147e6f6a3b0294bacb38905c1dbc5d7f49297d6f2a34f2a342ba97c867af67c6f0d301dbb34075ac1e009b2d4f37fdf38df83c1c97da8bc054c94a3c2dbefe50485be54e5732d104504ce7926f32f726a5344ebbd9ad2a4fe6949ba5073eac4a6d39160418861b66e1ef84e707ebbc6f2733aaa2c6bc28edd1664ec80191105d0d76c5d17d71628e9616abb20639f3ddf136a0dd82813cb07d04fe57c635c45d1e8e22ab8212d6cfa34c9775fb1c84205fd2db7f32e81bbf0d4568755d58f0c4d290fd766ff024746008dc3db0afdb80e04fd5483c03418c5163648fcf1249ee9396493b410a1fd3c50bc749013b2dc46a14e55b7b629cf475289a68d737221fcf0b07247c468f553b09c081b60ef9d2e526917e967e00019a8b2291ee330f3f6d1ae991b93b7ef36b4c4810face4f058ba73219eb1e6212234c18492f6b5ab12b3c7f305731f3b4990b69d831871ae60f9c983c2ab23699aa7de0a0917e41ac50e785ea6a903b05387ce4360bee45ce7d1701485c041f3f6f068b571e12e6c4821f4f1fd5369fffcbb553e7c590dcbaa82d5b4c94984a1475cb42c8fda7550753fd6ad18cc230f9fbc56ab9732c70994cc4eac9c6d5237627b541aef5f1deeac9a3b832852cfa797764852b6b3d7a890b7b73429bfe7056842eae9c0b8b1becb071772fc705bc59560410c6b3a2edeb2053f0019d638f565d09ca98ad15e0d19d3bf6133dafab2b7fa607173b2d0eea0d1b96776f20b21eafb5285aaadf53366f400ebc5ec5f23cb33f8ad74592f236e4a00354c6b88ef8d7d900da7243ab31927efbb85d3c505a24542012b3cf5b8686875a4945171da1398292d4840a282f647e07d33ebf6d02d23ad9fe5ceffd8bd5ce56af1e5c337dc0d0454ce673b535a17ef3b589d2b03e400b34db8f1b0573bdbe3be7fa60f7f3c816f180a6c3e125158d7cb37f659c9b605d5eb2fbf4cdfa3ca1b9437eb611168e976b71f82076ddd362c90350e13c0465ac9c499ab161061e74457eeeae19cbdfc52d87bd7b9a87ffd04df1b3fd8c076d30e1b4d6ff690c23504ef9b003b53a5e545cd6fc77000b7a43fe7314743232a2f47fc5b5323540a479bb29fb586eb871e71c65702cf1e17a0b910668939413268bf3d80a855f"}}, &(0x7f0000004800)) syz_ublk_setup_io_uring(0x6163, &(0x7f0000004840)={0x0, 0x323, 0x4, 0x3, 0x17f}, &(0x7f00000048c0), &(0x7f0000004900), &(0x7f0000004940)=0x0) (async) r8 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000004980), 0x2, 0x0) syz_ublk_add_dev(r2, 0x0, r5, r7, &(0x7f0000004a00)={0x2e, 0x18, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000049c0)=@any_dev={0x3, 0xa74, 0x0, 0x0, 0x1000, 0xff, r1}}}, &(0x7f0000004a80)) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101081, 0x0) (async) r10 = socket$inet6(0xa, 0x800, 0xabbd) setsockopt$inet6_buf(r10, 0x29, 0x3e, 0x0, 0x0) (async) r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r12, 0x4004ae8b, 0x0) (async) move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x2) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1008000) (async) r13 = socket(0x10, 0x3, 0x0) (async) r14 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r15 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r15, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000080)=[{&(0x7f00000000c0)="81", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000840000000000620000000000000010000000000000008400000008000000"], 0x28}, 0x41) syz_usb_control_io$uac1(r14, 0x0, 0x0) r16 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r16, 0x5, &(0x7f0000000280)={0x0, 0x1, 0xfe9, 0x2}) syz_usb_control_io$hid(r14, 0x0, 0x0) (async) write(r13, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) (async) r17 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r17, &(0x7f00000017c0)={&(0x7f0000000940)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x5}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000000c0)="0234fc72e8c98d5355c34f", 0xb}, {&(0x7f00000001c0)="1f0648b30fb39779269cb808ca08efca42131c21f582de9e4e5a2aaaa07b54c51ac29f04ed36", 0x26}], 0x2, &(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYRES8=r6, @ANYRESHEX=r3], 0xd0}, 0x480c4) (async) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x2) (async) recvmmsg(r13, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0, 0xf}, 0x83}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000004ac0)=""/4096, 0x1000}], 0x10000000000001fa}, 0x8}], 0x3, 0x0, 0x0) kernel console output (not intermixed with test programs): e59 [ 291.567770][ T9283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.567792][ T9283] RSP: 002b:00007f54390e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.567819][ T9283] RAX: ffffffffffffffda RBX: 00007f543b146180 RCX: 00007f543aecce59 [ 291.567838][ T9283] RDX: 0000200000000080 RSI: 0000000040047452 RDI: 0000000000000007 [ 291.567854][ T9283] RBP: 00007f54390e4090 R08: 0000000000000000 R09: 0000000000000000 [ 291.567871][ T9283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.567887][ T9283] R13: 00007f543b146218 R14: 00007f543b146180 R15: 00007ffff29fe758 [ 291.567928][ T9283] [ 291.578701][ T9283] ERROR: Out of memory at tomoyo_realpath_from_path. [ 292.698750][ T5950] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 292.848456][ T5950] usb 5-1: Using ep0 maxpacket: 16 [ 292.850781][ T5950] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 292.850815][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.856615][ T5950] usb 5-1: config 0 descriptor?? [ 292.892316][ T5950] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 293.069560][ T5950] usb 5-1: Detected FT232B [ 293.276242][ T5950] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 293.276706][ T5950] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 293.301430][ T5950] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 293.323075][ T5950] usb 5-1: USB disconnect, device number 16 [ 293.344265][ T5950] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 293.347040][ T5950] ftdi_sio 5-1:0.0: device disconnected [ 293.428488][ T32] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 293.588419][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 293.590229][ T32] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 293.592160][ T32] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 293.592181][ T32] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 293.592196][ T32] usb 1-1: Product: syz [ 293.592207][ T32] usb 1-1: Manufacturer: syz [ 293.592217][ T32] usb 1-1: SerialNumber: syz [ 293.808556][ T37] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 293.836583][ T32] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 293.836612][ T32] usb 1-1: Handspring Visor / Palm OS: port 29, is for unknown use [ 293.836633][ T32] usb 1-1: Handspring Visor / Palm OS: port 1, is for Debugger use [ 293.836654][ T32] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 293.978629][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 293.981103][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.981199][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.981230][ T37] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 293.981248][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.018049][ T37] usb 3-1: config 0 descriptor?? [ 294.049693][ T32] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 294.049789][ T32] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 294.115872][ T32] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 294.165591][ T32] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 294.191150][ T32] usb 1-1: USB disconnect, device number 21 [ 294.220508][ T32] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 294.243233][ T32] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 294.244885][ T32] visor 1-1:1.0: device disconnected [ 294.258800][ T4922] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 294.731968][ T37] usb 3-1: language id specifier not provided by device, defaulting to English [ 294.936653][ T37] letsketch 0003:6161:4D15.0010: Device info: ᱓ [ 295.075671][ T5701] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 295.144462][ T37] letsketch 0003:6161:4D15.0010: Device info:  [ 295.231504][ T5701] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 295.254918][ T5701] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 295.254948][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.254963][ T5701] usb 4-1: Product: syz [ 295.254995][ T5701] usb 4-1: Manufacturer: syz [ 295.255012][ T5701] usb 4-1: SerialNumber: syz [ 295.331689][ T5701] usb 4-1: config 0 descriptor?? [ 295.380888][ T37] usb 3-1: Max retries (5) exceeded reading string descriptor 202 [ 295.380983][ T37] letsketch 0003:6161:4D15.0010: probe with driver letsketch failed with error -71 [ 295.409356][ T5701] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 295.409429][ T5701] usb 4-1: setting power ON [ 295.412099][ T37] usb 3-1: USB disconnect, device number 44 [ 295.478970][ T5701] dvb-usb: bulk message failed: -22 (2/0) [ 295.662208][ T5701] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 295.707765][ T5701] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 295.709213][ T5701] dvb_usb_cxusb 4-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 295.735703][ T5701] usb 4-1: USB disconnect, device number 43 [ 295.878388][ T32] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 296.051387][ T32] usb 1-1: unable to get BOS descriptor or descriptor too short [ 296.052827][ T32] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.052852][ T32] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 296.052914][ T32] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 296.055426][ T32] usb 1-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 296.055456][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.055477][ T32] usb 1-1: Product: syz [ 296.055487][ T32] usb 1-1: Manufacturer: syz [ 296.055499][ T32] usb 1-1: SerialNumber: syz [ 296.390887][ T9339] process 'syz.0.1252' launched './file0' with NULL argv: empty string added [ 296.948387][ T5701] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 296.974363][ T32] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 296.974406][ T32] usb 1-1: 1:1 : unsupported format bits 0xc2000008 [ 296.974442][ T32] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 296.975002][ T32] usb 1-1: unit 2 not found! [ 296.975024][ T32] usb 1-1: unit 8 not found! [ 297.102786][ T5701] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.102825][ T5701] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 297.102853][ T5701] usb 5-1: config 0 interface 0 has no altsetting 0 [ 297.102888][ T5701] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 297.102913][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.175834][ T5701] usb 5-1: config 0 descriptor?? [ 297.310012][ T32] usb 1-1: USB disconnect, device number 22 [ 297.624606][ T9350] udevd[9350]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.848362][ T37] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 297.854217][ T5701] hid_parser_main: 460 callbacks suppressed [ 297.854245][ T5701] dragonrise 0003:0079:0006.0011: unknown main item tag 0x0 [ 297.854278][ T5701] dragonrise 0003:0079:0006.0011: unknown main item tag 0x0 [ 297.854309][ T5701] dragonrise 0003:0079:0006.0011: unknown main item tag 0x0 [ 297.854337][ T5701] dragonrise 0003:0079:0006.0011: unknown main item tag 0x0 [ 297.854365][ T5701] dragonrise 0003:0079:0006.0011: unknown main item tag 0x0 [ 297.854392][ T5701] dragonrise 0003:0079:0006.0011: unknown main item tag 0x0 [ 297.854425][ T5701] dragonrise 0003:0079:0006.0011: unknown main item tag 0x0 [ 297.854454][ T5701] dragonrise 0003:0079:0006.0011: unknown main item tag 0x0 [ 297.854483][ T5701] dragonrise 0003:0079:0006.0011: unknown main item tag 0x0 [ 297.854511][ T5701] dragonrise 0003:0079:0006.0011: unknown main item tag 0x0 [ 297.988429][ T37] usb 4-1: device descriptor read/64, error -71 [ 298.053547][ T5701] dragonrise 0003:0079:0006.0011: hidraw0: USB HID v0.08 Device [HID 0079:0006] on usb-dummy_hcd.4-1/input0 [ 298.053586][ T5701] dragonrise 0003:0079:0006.0011: no inputs found [ 298.053602][ T5701] dragonrise 0003:0079:0006.0011: force feedback init failed [ 298.111371][ T32] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 298.224992][ T5701] usb 5-1: USB disconnect, device number 17 [ 298.238372][ T37] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 298.282601][ T9370] fido_id[9370]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 298.288386][ T32] usb 1-1: Using ep0 maxpacket: 16 [ 298.294406][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.294451][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.294493][ T32] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 298.294518][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.319353][ T5950] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 298.381678][ T32] usb 1-1: config 0 descriptor?? [ 298.411670][ T37] usb 4-1: device descriptor read/64, error -71 [ 298.482225][ T5950] usb 3-1: unable to get BOS descriptor or descriptor too short [ 298.484021][ T5950] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.484050][ T5950] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.529177][ T37] usb usb4-port1: attempt power cycle [ 298.534588][ T5950] usb 3-1: string descriptor 0 read error: -22 [ 298.534722][ T5950] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 298.534749][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.614366][ T5950] usb 3-1: selecting invalid altsetting 1 [ 298.615190][ T5950] usb 3-1: unit 6 not found! [ 298.968334][ T37] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 298.989385][ T37] usb 4-1: device descriptor read/8, error -71 [ 299.009447][ T32] usb 1-1: language id specifier not provided by device, defaulting to English [ 299.181472][ T9366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.210329][ T32] letsketch 0003:6161:4D15.0012: Device info: ᱓ [ 299.241685][ T9366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.257346][ T37] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 299.273019][ T37] usb 4-1: device descriptor read/8, error -71 [ 299.379708][ T37] usb usb4-port1: unable to enumerate USB device [ 299.412717][ T32] letsketch 0003:6161:4D15.0012: Device info:  [ 299.523625][ T5950] usb 3-1: 2:0: sticky mixer values (0/238/1 => 0), disabling [ 299.523660][ T5950] usb 3-1: check MIXER_GET_CUR_BROKEN if you believe the mixer is non-sticky [ 299.666534][ T32] usb 1-1: Max retries (5) exceeded reading string descriptor 202 [ 299.666629][ T32] letsketch 0003:6161:4D15.0012: probe with driver letsketch failed with error -71 [ 299.727708][ T32] usb 1-1: USB disconnect, device number 23 [ 300.000956][ T5950] usb 3-1: USB disconnect, device number 45 [ 300.948815][ T37] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 301.109690][ T37] usb 1-1: Using ep0 maxpacket: 16 [ 301.111982][ T37] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 301.112010][ T37] usb 1-1: config 0 has no interface number 0 [ 301.116031][ T37] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 301.116057][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.116075][ T37] usb 1-1: Product: syz [ 301.116087][ T37] usb 1-1: Manufacturer: syz [ 301.116099][ T37] usb 1-1: SerialNumber: syz [ 301.227959][ T37] usb 1-1: config 0 descriptor?? [ 301.273474][ T37] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 301.449160][ T9435] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1274'. [ 301.649095][ T5950] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 301.801411][ T5950] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 301.801444][ T5950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.801466][ T5950] usb 3-1: config 0 has no interface number 0 [ 301.801527][ T5950] usb 3-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 301.801551][ T5950] usb 3-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 301.801582][ T5950] usb 3-1: config 0 interface 41 has no altsetting 0 [ 301.868500][ T5950] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 301.868601][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.868624][ T5950] usb 3-1: Product: syz [ 301.868640][ T5950] usb 3-1: Manufacturer: syz [ 301.868662][ T5950] usb 3-1: SerialNumber: syz [ 301.916522][ T5950] usb 3-1: config 0 descriptor?? [ 301.935832][ T5950] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 302.377284][ T9451] program syz.0.1270 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.378720][ T37] gspca_spca1528: reg_w err -71 [ 302.378820][ T37] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 302.421554][ T37] usb 1-1: USB disconnect, device number 24 [ 302.948470][ T5702] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 303.035441][ T9474] FAULT_INJECTION: forcing a failure. [ 303.035441][ T9474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.035483][ T9474] CPU: 1 UID: 0 PID: 9474 Comm: syz.0.1279 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 303.035515][ T9474] Tainted: [L]=SOFTLOCKUP [ 303.035524][ T9474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 303.035539][ T9474] Call Trace: [ 303.035548][ T9474] [ 303.035558][ T9474] dump_stack_lvl+0xe8/0x150 [ 303.035590][ T9474] should_fail_ex+0x46b/0x600 [ 303.035630][ T9474] _copy_to_user+0x31/0xb0 [ 303.035658][ T9474] sctp_getsockopt_local_auth_chunks+0x28d/0x470 [ 303.035688][ T9474] ? __local_bh_enable+0x1e1/0x2f0 [ 303.035725][ T9474] ? __pfx_sctp_getsockopt_local_auth_chunks+0x10/0x10 [ 303.035754][ T9474] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 303.035788][ T9474] ? lockdep_hardirqs_on+0x7a/0x110 [ 303.035822][ T9474] sctp_getsockopt+0x3e0/0xb90 [ 303.035860][ T9474] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 303.035899][ T9474] do_sock_getsockopt+0x51d/0x7e0 [ 303.035934][ T9474] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 303.035981][ T9474] ? __fget_files+0x3a6/0x420 [ 303.036004][ T9474] ? __fget_files+0x2a/0x420 [ 303.036036][ T9474] __x64_sys_getsockopt+0x1aa/0x250 [ 303.036074][ T9474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.036100][ T9474] do_syscall_64+0x174/0x580 [ 303.036128][ T9474] ? trace_irq_disable+0x3b/0x140 [ 303.036157][ T9474] ? clear_bhb_loop+0x40/0x90 [ 303.036186][ T9474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.036209][ T9474] RIP: 0033:0x7f89af46ce59 [ 303.036229][ T9474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.036249][ T9474] RSP: 002b:00007f89ad6c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 303.036273][ T9474] RAX: ffffffffffffffda RBX: 00007f89af6e5fa0 RCX: 00007f89af46ce59 [ 303.036291][ T9474] RDX: 000000000000001b RSI: 0000000000000084 RDI: 0000000000000004 [ 303.036304][ T9474] RBP: 00007f89ad6c6090 R08: 00002000000001c0 R09: 0000000000000000 [ 303.036319][ T9474] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 303.036344][ T9474] R13: 00007f89af6e6038 R14: 00007f89af6e5fa0 R15: 00007ffd5093cfc8 [ 303.036387][ T9474] [ 303.144471][ T5702] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 303.144503][ T5702] usb 5-1: config 0 has an invalid interface number: 5 but max is 2 [ 303.144525][ T5702] usb 5-1: config 0 has no interface number 0 [ 303.144543][ T5702] usb 5-1: config 0 has no interface number 1 [ 303.144605][ T5702] usb 5-1: too many endpoints for config 0 interface 5 altsetting 255: 255, using maximum allowed: 30 [ 303.144646][ T5702] usb 5-1: config 0 interface 5 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 303.144677][ T5702] usb 5-1: config 0 interface 5 has no altsetting 0 [ 303.144711][ T5702] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 303.144737][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.387331][ T5702] usb 5-1: config 0 descriptor?? [ 303.465861][ T9478] FAULT_INJECTION: forcing a failure. [ 303.465861][ T9478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.465907][ T9478] CPU: 1 UID: 0 PID: 9478 Comm: syz.0.1280 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 303.465931][ T9478] Tainted: [L]=SOFTLOCKUP [ 303.465937][ T9478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 303.465954][ T9478] Call Trace: [ 303.465961][ T9478] [ 303.465968][ T9478] dump_stack_lvl+0xe8/0x150 [ 303.465997][ T9478] should_fail_ex+0x46b/0x600 [ 303.466028][ T9478] _copy_from_user+0x2d/0xb0 [ 303.466048][ T9478] iommufd_fops_ioctl+0x461/0x5d0 [ 303.466074][ T9478] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 303.466100][ T9478] ? __fget_files+0x2a/0x420 [ 303.466124][ T9478] ? __fget_files+0x2a/0x420 [ 303.466146][ T9478] ? bpf_lsm_file_ioctl+0x9/0x20 [ 303.466170][ T9478] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 303.466191][ T9478] __se_sys_ioctl+0xff/0x170 [ 303.466213][ T9478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.466233][ T9478] do_syscall_64+0x174/0x580 [ 303.466257][ T9478] ? trace_irq_disable+0x3b/0x140 [ 303.466279][ T9478] ? clear_bhb_loop+0x40/0x90 [ 303.466303][ T9478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.466322][ T9478] RIP: 0033:0x7f89af46ce59 [ 303.466342][ T9478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.466366][ T9478] RSP: 002b:00007f89ad6c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.466388][ T9478] RAX: ffffffffffffffda RBX: 00007f89af6e5fa0 RCX: 00007f89af46ce59 [ 303.466403][ T9478] RDX: 0000200000000040 RSI: 0000000000003b83 RDI: 0000000000000003 [ 303.466415][ T9478] RBP: 00007f89ad6c6090 R08: 0000000000000000 R09: 0000000000000000 [ 303.466427][ T9478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.466442][ T9478] R13: 00007f89af6e6038 R14: 00007f89af6e5fa0 R15: 00007ffd5093cfc8 [ 303.466475][ T9478] [ 303.638431][ T5702] usb 5-1: Could not set interface, error -71 [ 303.704269][ T5702] usb 5-1: selecting invalid altsetting 0 [ 303.704293][ T5702] usb 5-1: Could not set interface, error -22 [ 303.723202][ T5702] usb 5-1: USB disconnect, device number 18 [ 304.100491][ T9493] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1283'. [ 304.331147][ T9505] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1284'. [ 304.532212][ T32] usb 3-1: USB disconnect, device number 46 [ 304.854362][ T9517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1288'. [ 305.553921][ T9544] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1296'. [ 305.784719][ T8544] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 305.799415][ T32] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 305.907179][ T9550] FAULT_INJECTION: forcing a failure. [ 305.907179][ T9550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.907221][ T9550] CPU: 1 UID: 0 PID: 9550 Comm: syz.4.1297 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 305.907252][ T9550] Tainted: [L]=SOFTLOCKUP [ 305.907261][ T9550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 305.907276][ T9550] Call Trace: [ 305.907284][ T9550] [ 305.907294][ T9550] dump_stack_lvl+0xe8/0x150 [ 305.907327][ T9550] should_fail_ex+0x46b/0x600 [ 305.907365][ T9550] _copy_from_iter+0x1d3/0x1670 [ 305.907408][ T9550] ? rcu_is_watching+0x15/0xb0 [ 305.907450][ T9550] ? __pfx__copy_from_iter+0x10/0x10 [ 305.907484][ T9550] ? __alloc_skb+0x27d/0x7d0 [ 305.907508][ T9550] ? __alloc_skb+0x27d/0x7d0 [ 305.907539][ T9550] ? netlink_sendmsg+0x650/0xb40 [ 305.907576][ T9550] ? skb_put+0x11b/0x210 [ 305.907606][ T9550] netlink_sendmsg+0x6c0/0xb40 [ 305.907645][ T9550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.907678][ T9550] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 305.907711][ T9550] ? aa_sock_msg_perm+0x122/0x200 [ 305.907736][ T9550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.907765][ T9550] sock_sendmsg_nosec+0x13a/0x180 [ 305.907803][ T9550] ____sys_sendmsg+0x55c/0x870 [ 305.907838][ T9550] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.907876][ T9550] ? import_iovec+0x73/0xa0 [ 305.907903][ T9550] ___sys_sendmsg+0x2a5/0x360 [ 305.907930][ T9550] ? __lock_acquire+0x6b5/0x2d10 [ 305.907964][ T9550] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.908030][ T9550] ? __fget_files+0x2a/0x420 [ 305.908053][ T9550] ? __fget_files+0x3a6/0x420 [ 305.908088][ T9550] __x64_sys_sendmsg+0x1b7/0x290 [ 305.908121][ T9550] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 305.908167][ T9550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.908192][ T9550] do_syscall_64+0x174/0x580 [ 305.908221][ T9550] ? clear_bhb_loop+0x40/0x90 [ 305.908249][ T9550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.908272][ T9550] RIP: 0033:0x7fc13943ce59 [ 305.908293][ T9550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.908312][ T9550] RSP: 002b:00007fc13766d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.908337][ T9550] RAX: ffffffffffffffda RBX: 00007fc1396b6090 RCX: 00007fc13943ce59 [ 305.908354][ T9550] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000007 [ 305.908368][ T9550] RBP: 00007fc13766d090 R08: 0000000000000000 R09: 0000000000000000 [ 305.908383][ T9550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.908402][ T9550] R13: 00007fc1396b6128 R14: 00007fc1396b6090 R15: 00007ffded1eff48 [ 305.908436][ T9550] [ 306.010369][ T32] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 306.010449][ T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.010512][ T32] usb 4-1: config 0 has no interface number 0 [ 306.010661][ T32] usb 4-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.010750][ T32] usb 4-1: config 0 interface 41 has no altsetting 0 [ 306.043849][ T8544] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 306.043878][ T8544] usb 1-1: config 0 has an invalid interface number: 5 but max is 2 [ 306.043900][ T8544] usb 1-1: config 0 has no interface number 0 [ 306.043917][ T8544] usb 1-1: config 0 has no interface number 1 [ 306.043978][ T8544] usb 1-1: too many endpoints for config 0 interface 5 altsetting 255: 255, using maximum allowed: 30 [ 306.044019][ T8544] usb 1-1: config 0 interface 5 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 306.044050][ T8544] usb 1-1: config 0 interface 5 has no altsetting 0 [ 306.044085][ T8544] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 306.044120][ T8544] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.253512][ T32] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 306.253611][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.253666][ T32] usb 4-1: Product: syz [ 306.253709][ T32] usb 4-1: Manufacturer: syz [ 306.253759][ T32] usb 4-1: SerialNumber: syz [ 306.365500][ T8544] usb 1-1: config 0 descriptor?? [ 306.403191][ T32] usb 4-1: config 0 descriptor?? [ 306.436909][ T32] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 306.582300][ T8544] usb 1-1: Could not set interface, error -71 [ 306.614493][ T8544] usb 1-1: selecting invalid altsetting 0 [ 306.614520][ T8544] usb 1-1: Could not set interface, error -22 [ 306.640063][ T8544] usb 1-1: USB disconnect, device number 25 [ 307.318458][ T8544] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 307.475506][ T8544] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 307.492895][ T8544] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 307.492928][ T8544] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.492950][ T8544] usb 5-1: Product: syz [ 307.492966][ T8544] usb 5-1: Manufacturer: syz [ 307.492982][ T8544] usb 5-1: SerialNumber: syz [ 307.547088][ T8544] usb 5-1: config 0 descriptor?? [ 307.823968][ T8544] usb 5-1: USB disconnect, device number 19 [ 308.434467][ T9597] sg_write: data in/out 393181/50 bytes for SCSI command 0x0-- guessing data in; [ 308.434467][ T9597] program syz.2.1305 not setting count and/or reply_len properly [ 308.507496][ T9597] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1305'. [ 308.551016][ T9599] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1306'. [ 308.774657][ T10] usb 4-1: USB disconnect, device number 48 [ 309.041167][ T9576] kexec: Could not allocate control_code_buffer [ 309.508393][ T8544] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 309.592532][ T9627] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1313'. [ 309.646116][ T9632] overlay: ./file0 is not a directory [ 309.658413][ T8544] usb 4-1: Using ep0 maxpacket: 8 [ 309.669910][ T8544] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 309.669944][ T8544] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.669967][ T8544] usb 4-1: Product: syz [ 309.669987][ T8544] usb 4-1: Manufacturer: syz [ 309.670009][ T8544] usb 4-1: SerialNumber: syz [ 309.738028][ T8544] usb 4-1: config 0 descriptor?? [ 309.760489][ T8544] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 310.172823][ T8544] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 310.173492][ T8544] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 310.201706][ T8544] usb 4-1: USB disconnect, device number 49 [ 310.214645][ T9643] ubi: mtd0 is already attached to ubi0 [ 310.492903][ T9651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1318'. [ 310.492994][ T9651] bridge_slave_1: left allmulticast mode [ 310.493019][ T9651] bridge_slave_1: left promiscuous mode [ 310.536694][ T9651] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.668505][ T32] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 310.760126][ T9651] bridge_slave_0: left allmulticast mode [ 310.760167][ T9651] bridge_slave_0: left promiscuous mode [ 310.760460][ T9651] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.835734][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 310.854349][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.854388][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.854432][ T32] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 310.854459][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.909570][ T32] usb 3-1: config 0 descriptor?? [ 311.532723][ T9663] FAULT_INJECTION: forcing a failure. [ 311.532723][ T9663] name failslab, interval 1, probability 0, space 0, times 0 [ 311.532767][ T9663] CPU: 0 UID: 0 PID: 9663 Comm: syz.4.1320 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 311.532798][ T9663] Tainted: [L]=SOFTLOCKUP [ 311.532806][ T9663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 311.532820][ T9663] Call Trace: [ 311.532832][ T9663] [ 311.532839][ T9663] dump_stack_lvl+0xe8/0x150 [ 311.532865][ T9663] should_fail_ex+0x46b/0x600 [ 311.532913][ T9663] should_failslab+0xa8/0x100 [ 311.532943][ T9663] __kmalloc_cache_noprof+0xa0/0x6d0 [ 311.532967][ T9663] ? __se_sys_mount+0x166/0x420 [ 311.532992][ T9663] ? __se_sys_mount+0x166/0x420 [ 311.533022][ T9663] ? memdup_user+0x99/0xd0 [ 311.533047][ T9663] __se_sys_mount+0x166/0x420 [ 311.533088][ T9663] ? __pfx___se_sys_mount+0x10/0x10 [ 311.533119][ T9663] ? __x64_sys_mount+0x20/0xc0 [ 311.533140][ T9663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.533164][ T9663] do_syscall_64+0x174/0x580 [ 311.533193][ T9663] ? trace_irq_disable+0x3b/0x140 [ 311.533213][ T9663] ? clear_bhb_loop+0x40/0x90 [ 311.533249][ T9663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.533273][ T9663] RIP: 0033:0x7fc13943ce59 [ 311.533295][ T9663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.533312][ T9663] RSP: 002b:00007fc13764c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 311.533339][ T9663] RAX: ffffffffffffffda RBX: 00007fc1396b6180 RCX: 00007fc13943ce59 [ 311.533358][ T9663] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 311.533369][ T9663] RBP: 00007fc13764c090 R08: 0000200000000140 R09: 0000000000000000 [ 311.533380][ T9663] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 311.533389][ T9663] R13: 00007fc1396b6218 R14: 00007fc1396b6180 R15: 00007ffded1eff48 [ 311.533433][ T9663] [ 311.535529][ T32] usb 3-1: language id specifier not provided by device, defaulting to English [ 311.772777][ T32] letsketch 0003:6161:4D15.0013: Device info: ᱓ [ 311.938277][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 311.946093][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 311.953986][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 311.967864][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 312.017216][ T32] usb 3-1: Max retries (5) exceeded reading string descriptor 201 [ 312.017311][ T32] letsketch 0003:6161:4D15.0013: probe with driver letsketch failed with error -71 [ 312.057773][ T32] usb 3-1: USB disconnect, device number 47 [ 312.105026][ T9666] FAULT_INJECTION: forcing a failure. [ 312.105026][ T9666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.105077][ T9666] CPU: 1 UID: 0 PID: 9666 Comm: syz.3.1324 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 312.105109][ T9666] Tainted: [L]=SOFTLOCKUP [ 312.105118][ T9666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 312.105132][ T9666] Call Trace: [ 312.105142][ T9666] [ 312.105151][ T9666] dump_stack_lvl+0xe8/0x150 [ 312.105185][ T9666] should_fail_ex+0x46b/0x600 [ 312.105224][ T9666] _copy_to_user+0x31/0xb0 [ 312.105252][ T9666] simple_read_from_buffer+0xe1/0x170 [ 312.105282][ T9666] proc_fail_nth_read+0x1be/0x230 [ 312.105311][ T9666] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.105339][ T9666] ? rw_verify_area+0x2ac/0x4e0 [ 312.105367][ T9666] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.105393][ T9666] vfs_read+0x212/0xa80 [ 312.105429][ T9666] ? __pfx_vfs_read+0x10/0x10 [ 312.105460][ T9666] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 312.105491][ T9666] ? lockdep_hardirqs_on+0x7a/0x110 [ 312.105519][ T9666] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 312.105548][ T9666] ? mutex_lock_nested+0x152/0x1d0 [ 312.105583][ T9666] ? fdget_pos+0x252/0x320 [ 312.105616][ T9666] ksys_read+0x156/0x270 [ 312.105647][ T9666] ? __pfx_ksys_read+0x10/0x10 [ 312.105674][ T9666] ? __pfx_ppp_ioctl+0x10/0x10 [ 312.105713][ T9666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.105738][ T9666] do_syscall_64+0x174/0x580 [ 312.105766][ T9666] ? trace_irq_disable+0x3b/0x140 [ 312.105795][ T9666] ? clear_bhb_loop+0x40/0x90 [ 312.105824][ T9666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.105849][ T9666] RIP: 0033:0x7f91e206d68e [ 312.105869][ T9666] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 312.105889][ T9666] RSP: 002b:00007f91e0305fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.105913][ T9666] RAX: ffffffffffffffda RBX: 00007f91e03066c0 RCX: 00007f91e206d68e [ 312.105931][ T9666] RDX: 000000000000000f RSI: 00007f91e03060a0 RDI: 000000000000000a [ 312.105946][ T9666] RBP: 00007f91e0306090 R08: 0000000000000000 R09: 0000000000000000 [ 312.105966][ T9666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.105980][ T9666] R13: 00007f91e2326038 R14: 00007f91e2325fa0 R15: 00007fff63131818 [ 312.106016][ T9666] [ 312.456403][ T9669] ubi: mtd0 is already attached to ubi0 [ 312.791125][ T32] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 312.938305][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 312.940775][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.940808][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.940848][ T32] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 312.940873][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.998568][ T32] usb 4-1: config 0 descriptor?? [ 313.250548][ T9696] binder: BINDER_SET_CONTEXT_MGR already set [ 313.250566][ T9696] binder: 9695:9696 ioctl 4018620d 200000004a80 returned -16 [ 313.251035][ T9696] binder: 9695:9696 ioctl c0306201 2000000004c0 returned -22 [ 313.258106][ T9696] binder: 9695:9696 unknown command 0 [ 313.258128][ T9696] binder: 9695:9696 ioctl c0306201 200000000240 returned -22 [ 313.385445][ T9699] FAULT_INJECTION: forcing a failure. [ 313.385445][ T9699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.385573][ T9699] CPU: 1 UID: 0 PID: 9699 Comm: syz.4.1334 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 313.385606][ T9699] Tainted: [L]=SOFTLOCKUP [ 313.385614][ T9699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 313.385628][ T9699] Call Trace: [ 313.385636][ T9699] [ 313.385646][ T9699] dump_stack_lvl+0xe8/0x150 [ 313.385683][ T9699] should_fail_ex+0x46b/0x600 [ 313.385721][ T9699] copy_fpstate_to_sigframe+0xaab/0xd60 [ 313.385761][ T9699] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 313.385798][ T9699] ? rt_spin_lock+0x1e0/0x400 [ 313.385822][ T9699] ? rt_spin_lock+0x1e0/0x400 [ 313.385855][ T9699] ? fpu__alloc_mathframe+0xac/0x130 [ 313.385882][ T9699] get_sigframe+0x5f7/0x820 [ 313.385915][ T9699] ? __pfx_get_sigframe+0x10/0x10 [ 313.385938][ T9699] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 313.385966][ T9699] ? reacquire_held_locks+0x104/0x190 [ 313.386010][ T9699] x64_setup_rt_frame+0x160/0xcb0 [ 313.386034][ T9699] ? rt_spin_unlock+0x14f/0x200 [ 313.386060][ T9699] ? rt_spin_unlock+0x160/0x200 [ 313.386085][ T9699] ? get_signal+0x114f/0x1330 [ 313.386126][ T9699] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 313.386161][ T9699] arch_do_signal_or_restart+0x442/0x840 [ 313.386190][ T9699] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 313.386213][ T9699] ? __x64_sys_timer_settime+0x202/0x270 [ 313.386270][ T9699] exit_to_user_mode_loop+0x104/0x710 [ 313.386299][ T9699] ? rcu_is_watching+0x15/0xb0 [ 313.386333][ T9699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.386358][ T9699] do_syscall_64+0x353/0x580 [ 313.386386][ T9699] ? trace_irq_disable+0x3b/0x140 [ 313.386415][ T9699] ? clear_bhb_loop+0x40/0x90 [ 313.386442][ T9699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.386478][ T9699] RIP: 0033:0x7fc13943ce59 [ 313.386499][ T9699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.386518][ T9699] RSP: 002b:00007fc13768e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 313.386542][ T9699] RAX: 0000000000000000 RBX: 00007fc1396b5fa0 RCX: 00007fc13943ce59 [ 313.386558][ T9699] RDX: 0000200000040fe0 RSI: 0000000000000001 RDI: 0000000000000000 [ 313.386573][ T9699] RBP: 00007fc13768e090 R08: 0000000000000000 R09: 0000000000000000 [ 313.386587][ T9699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.386601][ T9699] R13: 00007fc1396b6038 R14: 00007fc1396b5fa0 R15: 00007ffded1eff48 [ 313.386636][ T9699] [ 313.661382][ T32] usbhid 4-1:0.0: can't add hid device: -71 [ 313.661520][ T32] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 313.720727][ T32] usb 4-1: USB disconnect, device number 50 [ 314.094805][ T9711] FAULT_INJECTION: forcing a failure. [ 314.094805][ T9711] name failslab, interval 1, probability 0, space 0, times 0 [ 314.094847][ T9711] CPU: 0 UID: 0 PID: 9711 Comm: syz.4.1338 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 314.094879][ T9711] Tainted: [L]=SOFTLOCKUP [ 314.094897][ T9711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 314.094912][ T9711] Call Trace: [ 314.094921][ T9711] [ 314.094932][ T9711] dump_stack_lvl+0xe8/0x150 [ 314.094964][ T9711] should_fail_ex+0x46b/0x600 [ 314.095008][ T9711] should_failslab+0xa8/0x100 [ 314.095036][ T9711] kmem_cache_alloc_node_noprof+0xae/0x710 [ 314.095078][ T9711] ? __alloc_skb+0x1d0/0x7d0 [ 314.095101][ T9711] ? __alloc_skb+0x1d0/0x7d0 [ 314.095130][ T9711] __alloc_skb+0x1d0/0x7d0 [ 314.095163][ T9711] tipc_msg_build+0x162/0xf00 [ 314.095206][ T9711] ? __pfx_tipc_msg_build+0x10/0x10 [ 314.095231][ T9711] ? tipc_nametbl_lookup_mcast_nodes+0x2e/0xa00 [ 314.095298][ T9711] ? tipc_nametbl_lookup_mcast_nodes+0x4c9/0xa00 [ 314.095333][ T9711] ? tipc_nametbl_lookup_mcast_nodes+0x2e/0xa00 [ 314.095376][ T9711] __tipc_sendmsg+0x1ca5/0x2c00 [ 314.095417][ T9711] ? __bfs+0x153/0x290 [ 314.095445][ T9711] ? __pfx_hlock_conflict+0x10/0x10 [ 314.095480][ T9711] ? __pfx___tipc_sendmsg+0x10/0x10 [ 314.095519][ T9711] ? __lock_acquire+0x146e/0x2d10 [ 314.095553][ T9711] ? __bfs+0x153/0x290 [ 314.095588][ T9711] ? __pfx_woken_wake_function+0x10/0x10 [ 314.095629][ T9711] ? ktime_get+0x45/0x220 [ 314.095654][ T9711] ? lock_acquire+0x106/0x350 [ 314.095700][ T9711] ? try_to_take_rt_mutex+0x840/0xb00 [ 314.095739][ T9711] ? __lock_acquire+0x6b5/0x2d10 [ 314.095775][ T9711] ? __lock_acquire+0x6b5/0x2d10 [ 314.095818][ T9711] __tipc_sendstream+0x104e/0x1280 [ 314.095848][ T9711] ? __lock_acquire+0x6b5/0x2d10 [ 314.095902][ T9711] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 314.095936][ T9711] ? __pfx___tipc_sendstream+0x10/0x10 [ 314.095963][ T9711] ? __local_bh_enable+0x1e1/0x2f0 [ 314.096005][ T9711] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 314.096040][ T9711] ? lockdep_hardirqs_on+0x7a/0x110 [ 314.096074][ T9711] tipc_send_packet+0x7c/0xa0 [ 314.096104][ T9711] ? __pfx_tipc_send_packet+0x10/0x10 [ 314.096130][ T9711] sock_sendmsg_nosec+0x13a/0x180 [ 314.096169][ T9711] ____sys_sendmsg+0x55c/0x870 [ 314.096205][ T9711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.096245][ T9711] ? import_iovec+0x73/0xa0 [ 314.096276][ T9711] ___sys_sendmsg+0x2a5/0x360 [ 314.096304][ T9711] ? __lock_acquire+0x6b5/0x2d10 [ 314.096339][ T9711] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.096406][ T9711] ? __fget_files+0x2a/0x420 [ 314.096430][ T9711] ? __fget_files+0x3a6/0x420 [ 314.096465][ T9711] __x64_sys_sendmsg+0x1b7/0x290 [ 314.096499][ T9711] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 314.096548][ T9711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.096575][ T9711] do_syscall_64+0x174/0x580 [ 314.096604][ T9711] ? trace_irq_disable+0x3b/0x140 [ 314.096633][ T9711] ? clear_bhb_loop+0x40/0x90 [ 314.096662][ T9711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.096689][ T9711] RIP: 0033:0x7fc13943ce59 [ 314.096712][ T9711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.096736][ T9711] RSP: 002b:00007fc13768e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.096760][ T9711] RAX: ffffffffffffffda RBX: 00007fc1396b5fa0 RCX: 00007fc13943ce59 [ 314.096777][ T9711] RDX: 0000000000000004 RSI: 0000200000000380 RDI: 0000000000000006 [ 314.096792][ T9711] RBP: 00007fc13768e090 R08: 0000000000000000 R09: 0000000000000000 [ 314.096807][ T9711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.096820][ T9711] R13: 00007fc1396b6038 R14: 00007fc1396b5fa0 R15: 00007ffded1eff48 [ 314.096855][ T9711] [ 314.692575][ T4922] Bluetooth: hci2: unexpected event for opcode 0x0c23 [ 315.138449][ T8544] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 315.302036][ T8544] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 315.302078][ T8544] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 315.302104][ T8544] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 315.304596][ T8544] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.304628][ T8544] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 315.304651][ T8544] usb 5-1: SerialNumber: syz [ 315.386803][ T8544] hub 5-1:1.0: bad descriptor, ignoring hub [ 315.386833][ T8544] hub 5-1:1.0: probe with driver hub failed with error -5 [ 315.417163][ T8544] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 315.456236][ T8544] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 315.544161][ T5950] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 315.684177][ T5950] usb 3-1: device descriptor read/64, error -71 [ 315.701688][ T8544] usb 5-1: USB disconnect, device number 20 [ 315.828389][ T5623] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 315.918431][ T5950] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 315.978367][ T5623] usb 1-1: Using ep0 maxpacket: 16 [ 315.995450][ T5623] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 316.011397][ T5623] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 316.011430][ T5623] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.011452][ T5623] usb 1-1: Product: syz [ 316.011468][ T5623] usb 1-1: Manufacturer: syz [ 316.011485][ T5623] usb 1-1: SerialNumber: syz [ 316.049052][ T5950] usb 3-1: device descriptor read/64, error -71 [ 316.070984][ T5623] usb 1-1: config 0 descriptor?? [ 316.072385][ T9748] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 316.163354][ T5950] usb usb3-port1: attempt power cycle [ 316.181552][ T5623] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 316.485382][ T9748] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1350'. [ 316.509097][ T5950] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 316.532944][ T5950] usb 3-1: device descriptor read/8, error -71 [ 316.562527][ T9748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.600067][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 316.600170][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 316.615266][ T5623] usb 1-1: USB disconnect, device number 26 [ 316.635865][ T5623] mcba_usb 1-1:0.0 can0: device disconnected [ 316.710014][ T9774] FAULT_INJECTION: forcing a failure. [ 316.710014][ T9774] name failslab, interval 1, probability 0, space 0, times 0 [ 316.710050][ T9774] CPU: 0 UID: 0 PID: 9774 Comm: syz.3.1356 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 316.710081][ T9774] Tainted: [L]=SOFTLOCKUP [ 316.710088][ T9774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.710101][ T9774] Call Trace: [ 316.710108][ T9774] [ 316.710115][ T9774] dump_stack_lvl+0xe8/0x150 [ 316.710143][ T9774] should_fail_ex+0x46b/0x600 [ 316.710175][ T9774] should_failslab+0xa8/0x100 [ 316.710198][ T9774] __kmalloc_noprof+0xfe/0x7e0 [ 316.710216][ T9774] ? rcu_is_watching+0x15/0xb0 [ 316.710245][ T9774] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 316.710265][ T9774] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 316.710292][ T9774] tomoyo_realpath_from_path+0xe3/0x5d0 [ 316.710315][ T9774] ? tomoyo_domain+0xd7/0x130 [ 316.710341][ T9774] ? tomoyo_path_number_perm+0x219/0x630 [ 316.710370][ T9774] tomoyo_path_number_perm+0x246/0x630 [ 316.710401][ T9774] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 316.710429][ T9774] ? __lock_acquire+0x6b5/0x2d10 [ 316.710456][ T9774] ? do_raw_spin_lock+0x12b/0x2f0 [ 316.710505][ T9774] ? __fget_files+0x2a/0x420 [ 316.710526][ T9774] ? __fget_files+0x2a/0x420 [ 316.710543][ T9774] ? __fget_files+0x3a6/0x420 [ 316.710573][ T9774] ? __fget_files+0x2a/0x420 [ 316.710596][ T9774] security_file_ioctl+0xc3/0x2a0 [ 316.710625][ T9774] __se_sys_ioctl+0x47/0x170 [ 316.710650][ T9774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.710678][ T9774] do_syscall_64+0x174/0x580 [ 316.710702][ T9774] ? trace_irq_disable+0x3b/0x140 [ 316.710727][ T9774] ? clear_bhb_loop+0x40/0x90 [ 316.710754][ T9774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.710777][ T9774] RIP: 0033:0x7f91e20ace59 [ 316.710797][ T9774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.710814][ T9774] RSP: 002b:00007f91e02e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.710833][ T9774] RAX: ffffffffffffffda RBX: 00007f91e2326090 RCX: 00007f91e20ace59 [ 316.710846][ T9774] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 316.710856][ T9774] RBP: 00007f91e02e5090 R08: 0000000000000000 R09: 0000000000000000 [ 316.710867][ T9774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.710877][ T9774] R13: 00007f91e2326128 R14: 00007f91e2326090 R15: 00007fff63131818 [ 316.710904][ T9774] [ 316.711006][ T9774] ERROR: Out of memory at tomoyo_realpath_from_path. [ 316.813614][ T5950] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 316.857516][ T5950] usb 3-1: device descriptor read/8, error -71 [ 316.970076][ T5950] usb usb3-port1: unable to enumerate USB device [ 317.385797][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.385923][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.110578][ T5800] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 318.230863][ T8544] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 318.260585][ T5800] usb 4-1: Using ep0 maxpacket: 16 [ 318.274086][ T5800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.274124][ T5800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.274165][ T5800] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 318.274190][ T5800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.318130][ T5800] usb 4-1: config 0 descriptor?? [ 318.386115][ T8544] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 318.386182][ T8544] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 318.386211][ T8544] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.471339][ T8544] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 318.970970][ T5800] usb 4-1: language id specifier not provided by device, defaulting to English [ 319.104131][ T9829] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1370'. [ 319.173178][ T5800] letsketch 0003:6161:4D15.0014: Device info: ᱓ [ 319.374601][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 319.375093][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 319.375661][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 319.376112][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 319.376578][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 319.443881][ T5800] usb 4-1: Max retries (5) exceeded reading string descriptor 201 [ 319.443977][ T5800] letsketch 0003:6161:4D15.0014: probe with driver letsketch failed with error -71 [ 319.493074][ T5800] usb 4-1: USB disconnect, device number 51 [ 319.555544][ T8544] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 319.555570][ T8544] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 319.556526][ T8544] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 319.556548][ T8544] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 319.631598][ T8544] usb 5-1: USB disconnect, device number 21 [ 319.919774][ T9849] FAULT_INJECTION: forcing a failure. [ 319.919774][ T9849] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 319.919810][ T9849] CPU: 1 UID: 0 PID: 9849 Comm: syz.0.1376 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 319.919835][ T9849] Tainted: [L]=SOFTLOCKUP [ 319.919841][ T9849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 319.919852][ T9849] Call Trace: [ 319.919859][ T9849] [ 319.919866][ T9849] dump_stack_lvl+0xe8/0x150 [ 319.919893][ T9849] should_fail_ex+0x46b/0x600 [ 319.919923][ T9849] prepare_alloc_pages+0x22a/0x6b0 [ 319.919949][ T9849] __alloc_frozen_pages_noprof+0x12f/0x380 [ 319.919974][ T9849] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 319.919999][ T9849] ? __pfx_policy_nodemask+0x10/0x10 [ 319.920029][ T9849] alloc_pages_mpol+0xd1/0x380 [ 319.920053][ T9849] alloc_pages_noprof+0xd2/0x2f0 [ 319.920077][ T9849] anon_pipe_write+0x205/0x1c80 [ 319.920111][ T9849] ? __pfx_aa_file_perm+0x10/0x10 [ 319.920143][ T9849] ? __pfx_anon_pipe_write+0x10/0x10 [ 319.920177][ T9849] ? apparmor_file_permission+0x1f4/0x300 [ 319.920215][ T9849] vfs_write+0x629/0xba0 [ 319.920246][ T9849] ? __pfx_vfs_write+0x10/0x10 [ 319.920275][ T9849] ? __fget_files+0x2a/0x420 [ 319.920299][ T9849] ksys_write+0x156/0x270 [ 319.920323][ T9849] ? __pfx_ksys_write+0x10/0x10 [ 319.920352][ T9849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.920372][ T9849] do_syscall_64+0x174/0x580 [ 319.920396][ T9849] ? trace_irq_disable+0x3b/0x140 [ 319.920423][ T9849] ? clear_bhb_loop+0x40/0x90 [ 319.920445][ T9849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.920464][ T9849] RIP: 0033:0x7f89af46ce59 [ 319.920482][ T9849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.920499][ T9849] RSP: 002b:00007f89ad6c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 319.920519][ T9849] RAX: ffffffffffffffda RBX: 00007f89af6e5fa0 RCX: 00007f89af46ce59 [ 319.920533][ T9849] RDX: 000000000000ff2e RSI: 0000000000000000 RDI: 0000000000000004 [ 319.920545][ T9849] RBP: 00007f89ad6c6090 R08: 0000000000000000 R09: 0000000000000000 [ 319.920558][ T9849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.920570][ T9849] R13: 00007f89af6e6038 R14: 00007f89af6e5fa0 R15: 00007ffd5093cfc8 [ 319.920599][ T9849] [ 320.232847][ T5800] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 320.414166][ T5800] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 320.436358][ T5800] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 320.436394][ T5800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.436418][ T5800] usb 3-1: Product: syz [ 320.436434][ T5800] usb 3-1: Manufacturer: syz [ 320.436451][ T5800] usb 3-1: SerialNumber: syz [ 320.480736][ T5800] usb 3-1: config 0 descriptor?? [ 321.097976][ T9846] fuse: Unknown parameter 'g' [ 321.113396][ T5950] usb 3-1: USB disconnect, device number 52 [ 321.258498][ T822] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 321.350256][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 321.421451][ T822] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 321.421483][ T822] usb 1-1: config 0 has an invalid interface number: 255 but max is 2 [ 321.421506][ T822] usb 1-1: config 0 has no interface number 0 [ 321.421525][ T822] usb 1-1: config 0 has no interface number 1 [ 321.421585][ T822] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 321.421626][ T822] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 321.421657][ T822] usb 1-1: config 0 interface 255 has no altsetting 0 [ 321.421694][ T822] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 321.421719][ T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.444741][ T822] usb 1-1: config 0 descriptor?? [ 321.638977][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 321.641494][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 321.641565][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 321.641648][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 321.641675][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 321.641739][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 321.710101][ T10] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 321.710133][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.710153][ T10] usb 5-1: Product: syz [ 321.710170][ T10] usb 5-1: Manufacturer: syz [ 321.710185][ T10] usb 5-1: SerialNumber: syz [ 321.714751][ T822] usb 1-1: Could not set interface, error -71 [ 321.806008][ T10] usb 5-1: config 0 descriptor?? [ 321.818482][ T822] usb 1-1: selecting invalid altsetting 0 [ 321.818507][ T822] usb 1-1: Could not set interface, error -22 [ 321.840726][ T822] usb 1-1: USB disconnect, device number 27 [ 322.212590][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 322.214381][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 322.215313][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 322.219826][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 322.225002][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 322.226839][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 322.256728][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 322.262734][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 322.266166][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 322.271126][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 322.276365][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 322.279503][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 322.283806][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 322.289064][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 322.291484][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 322.297396][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 322.302985][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 322.318554][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 322.321143][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 322.321296][ T10] input input10: Timeout waiting for response from device. [ 322.426138][ T10] usb 5-1: USB disconnect, device number 22 [ 322.692506][ T9912] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1395'. [ 322.735947][ T13] bridge_slave_1: left allmulticast mode [ 322.736162][ T13] bridge_slave_1: left promiscuous mode [ 322.770288][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.093673][ T13] bridge_slave_0: left allmulticast mode [ 323.093700][ T13] bridge_slave_0: left promiscuous mode [ 323.093901][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.619680][ T9921] FAULT_INJECTION: forcing a failure. [ 323.619680][ T9921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.619716][ T9921] CPU: 1 UID: 0 PID: 9921 Comm: syz.0.1400 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 323.619743][ T9921] Tainted: [L]=SOFTLOCKUP [ 323.619750][ T9921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 323.619762][ T9921] Call Trace: [ 323.619769][ T9921] [ 323.619777][ T9921] dump_stack_lvl+0xe8/0x150 [ 323.619807][ T9921] should_fail_ex+0x46b/0x600 [ 323.619840][ T9921] _copy_from_user+0x2d/0xb0 [ 323.619863][ T9921] sctp_setsockopt+0x1c4/0x12c0 [ 323.619887][ T9921] ? sock_common_setsockopt+0x36/0xc0 [ 323.619907][ T9921] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 323.619927][ T9921] do_sock_setsockopt+0x17c/0x1b0 [ 323.619956][ T9921] __x64_sys_setsockopt+0x143/0x1b0 [ 323.619984][ T9921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.620008][ T9921] do_syscall_64+0x174/0x580 [ 323.620031][ T9921] ? trace_irq_disable+0x3b/0x140 [ 323.620057][ T9921] ? clear_bhb_loop+0x40/0x90 [ 323.620088][ T9921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.620107][ T9921] RIP: 0033:0x7f89af46ce59 [ 323.620125][ T9921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.620141][ T9921] RSP: 002b:00007f89ad6c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 323.620164][ T9921] RAX: ffffffffffffffda RBX: 00007f89af6e5fa0 RCX: 00007f89af46ce59 [ 323.620178][ T9921] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 323.620188][ T9921] RBP: 00007f89ad6c6090 R08: 000000000000009c R09: 0000000000000000 [ 323.620199][ T9921] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 323.620210][ T9921] R13: 00007f89af6e6038 R14: 00007f89af6e5fa0 R15: 00007ffd5093cfc8 [ 323.620241][ T9921] [ 324.558535][ T5701] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 324.712737][ T5701] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 324.712769][ T5701] usb 3-1: config 0 has an invalid interface number: 255 but max is 2 [ 324.712792][ T5701] usb 3-1: config 0 has no interface number 0 [ 324.712810][ T5701] usb 3-1: config 0 has no interface number 1 [ 324.712870][ T5701] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 324.712911][ T5701] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 324.712944][ T5701] usb 3-1: config 0 interface 255 has no altsetting 0 [ 324.712979][ T5701] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 324.713006][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.755106][ T5701] usb 3-1: config 0 descriptor?? [ 324.969511][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.008626][ T5701] usb 3-1: Could not set interface, error -71 [ 325.041024][ T5701] usb 3-1: selecting invalid altsetting 0 [ 325.041048][ T5701] usb 3-1: Could not set interface, error -22 [ 325.073595][ T5701] usb 3-1: USB disconnect, device number 53 [ 325.095893][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.210080][ T13] bond0 (unregistering): Released all slaves [ 325.411189][ T9946] FAULT_INJECTION: forcing a failure. [ 325.411189][ T9946] name failslab, interval 1, probability 0, space 0, times 0 [ 325.411231][ T9946] CPU: 1 UID: 0 PID: 9946 Comm: syz.3.1407 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 325.411265][ T9946] Tainted: [L]=SOFTLOCKUP [ 325.411273][ T9946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 325.411289][ T9946] Call Trace: [ 325.411298][ T9946] [ 325.411308][ T9946] dump_stack_lvl+0xe8/0x150 [ 325.411343][ T9946] should_fail_ex+0x46b/0x600 [ 325.411383][ T9946] should_failslab+0xa8/0x100 [ 325.411413][ T9946] __kmalloc_noprof+0xfe/0x7e0 [ 325.411439][ T9946] ? do_sys_poll+0x30a/0xf50 [ 325.411459][ T9946] ? do_sys_poll+0x30a/0xf50 [ 325.411487][ T9946] do_sys_poll+0x30a/0xf50 [ 325.411524][ T9946] ? __pfx_do_sys_poll+0x10/0x10 [ 325.411559][ T9946] ? aa_file_perm+0x192/0x15f0 [ 325.411661][ T9946] ? ktime_get_ts64+0xa9/0x410 [ 325.411715][ T9946] ? __pfx_timespec64_add_safe+0x10/0x10 [ 325.411760][ T9946] __x64_sys_poll+0x190/0x350 [ 325.411809][ T9946] ? __pfx___x64_sys_poll+0x10/0x10 [ 325.411852][ T9946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.411877][ T9946] do_syscall_64+0x174/0x580 [ 325.411906][ T9946] ? trace_irq_disable+0x3b/0x140 [ 325.411935][ T9946] ? clear_bhb_loop+0x40/0x90 [ 325.411962][ T9946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.411986][ T9946] RIP: 0033:0x7f91e20ace59 [ 325.412008][ T9946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.412029][ T9946] RSP: 002b:00007f91e0306028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 325.412054][ T9946] RAX: ffffffffffffffda RBX: 00007f91e2325fa0 RCX: 00007f91e20ace59 [ 325.412072][ T9946] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 325.412088][ T9946] RBP: 00007f91e0306090 R08: 0000000000000000 R09: 0000000000000000 [ 325.412103][ T9946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.412117][ T9946] R13: 00007f91e2326038 R14: 00007f91e2325fa0 R15: 00007fff63131818 [ 325.412153][ T9946] [ 326.078390][ T32] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 326.228338][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 326.233903][ T32] usb 3-1: unable to get BOS descriptor or descriptor too short [ 326.252276][ T32] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 326.252309][ T32] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 326.252331][ T32] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 326.285848][ T32] usb 3-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 326.285879][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.285899][ T32] usb 3-1: Product: syz [ 326.285914][ T32] usb 3-1: Manufacturer: syz [ 326.285929][ T32] usb 3-1: SerialNumber: syz [ 326.441530][ T9949] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 326.662667][ T32] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 326.662739][ T32] usb 3-1: MIDIStreaming interface descriptor not found [ 326.971523][ T5800] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 327.129694][ T5800] usb 5-1: Using ep0 maxpacket: 32 [ 327.132583][ T5800] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 327.132612][ T5800] usb 5-1: config 0 has no interface number 0 [ 327.133063][ T5800] usb 5-1: config 0 interface 184 has no altsetting 0 [ 327.136579][ T5800] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 327.136609][ T5800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.136630][ T5800] usb 5-1: Product: syz [ 327.136645][ T5800] usb 5-1: Manufacturer: syz [ 327.136660][ T5800] usb 5-1: SerialNumber: syz [ 327.273820][ T5800] usb 5-1: config 0 descriptor?? [ 327.488350][ T8544] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 327.654694][ T8544] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 327.654721][ T8544] usb 4-1: config 0 has an invalid interface number: 255 but max is 2 [ 327.654741][ T8544] usb 4-1: config 0 has no interface number 0 [ 327.654757][ T8544] usb 4-1: config 0 has no interface number 1 [ 327.654808][ T8544] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 327.654847][ T8544] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 327.654898][ T8544] usb 4-1: config 0 interface 255 has no altsetting 0 [ 327.654933][ T8544] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 327.654957][ T8544] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.797371][ T8544] usb 4-1: config 0 descriptor?? [ 328.014510][ T8544] usb 4-1: Could not set interface, error -71 [ 328.141805][ T8544] usb 4-1: selecting invalid altsetting 0 [ 328.141830][ T8544] usb 4-1: Could not set interface, error -22 [ 328.172245][ T8544] usb 4-1: USB disconnect, device number 52 [ 328.879604][ T38] audit: type=1800 audit(1781754811.454:64): pid=9963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.1412" name="/" dev="sockfs" ino=29976 res=0 errno=0 [ 329.117939][ T4922] Bluetooth: Unexpected start frame (len 12) [ 329.315006][ T5800] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 329.315040][ T5800] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 329.380066][ T5800] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 329.380101][ T5800] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 329.380125][ T5800] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 329.380145][ T5800] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 329.380480][ T5800] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 329.486632][ T5800] usb 5-1: USB disconnect, device number 23 [ 329.965050][ T32] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -12 [ 329.968783][ T32] usb 3-1: can't set first interface for hiFace device. [ 329.968826][ T32] snd-usb-hiface 3-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 330.043116][ T32] usb 3-1: USB disconnect, device number 54 [ 330.165432][ T8213] udevd[8213]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 330.189003][ T5701] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 330.342649][ T5701] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 330.342677][ T5701] usb 4-1: config 0 has an invalid interface number: 255 but max is 2 [ 330.342698][ T5701] usb 4-1: config 0 has no interface number 0 [ 330.342714][ T5701] usb 4-1: config 0 has no interface number 1 [ 330.342762][ T5701] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 330.342799][ T5701] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 330.342828][ T5701] usb 4-1: config 0 interface 255 has no altsetting 0 [ 330.342861][ T5701] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 330.342886][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.451157][ T5701] usb 4-1: config 0 descriptor?? [ 330.572946][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1430'. [ 330.635037][T10013] ubi: mtd0 is already attached to ubi0 [ 330.673250][ T5701] usb 4-1: Could not set interface, error -71 [ 330.731220][ T5701] usb 4-1: selecting invalid altsetting 0 [ 330.731244][ T5701] usb 4-1: Could not set interface, error -22 [ 330.754432][ T5701] usb 4-1: USB disconnect, device number 53 [ 330.934993][T10018] hfs: unable to load iocharset "io#harset" [ 331.685919][T10050] FAULT_INJECTION: forcing a failure. [ 331.685919][T10050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.685956][T10050] CPU: 0 UID: 0 PID: 10050 Comm: syz.0.1440 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 331.685993][T10050] Tainted: [L]=SOFTLOCKUP [ 331.686000][T10050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 331.686012][T10050] Call Trace: [ 331.686018][T10050] [ 331.686026][T10050] dump_stack_lvl+0xe8/0x150 [ 331.686053][T10050] should_fail_ex+0x46b/0x600 [ 331.686085][T10050] _copy_from_user+0x2d/0xb0 [ 331.686106][T10050] kstrtouint_from_user+0xd6/0x180 [ 331.686136][T10050] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 331.686180][T10050] proc_fail_nth_write+0x8e/0x210 [ 331.686201][T10050] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 331.686227][T10050] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 331.686248][T10050] vfs_write+0x2a3/0xba0 [ 331.686279][T10050] ? __pfx_vfs_write+0x10/0x10 [ 331.686305][T10050] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 331.686344][T10050] ? lockdep_hardirqs_on+0x7a/0x110 [ 331.686369][T10050] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 331.686393][T10050] ? mutex_lock_nested+0x152/0x1d0 [ 331.686424][T10050] ? fdget_pos+0x252/0x320 [ 331.686452][T10050] ksys_write+0x156/0x270 [ 331.686478][T10050] ? __pfx_ksys_write+0x10/0x10 [ 331.686511][T10050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.686537][T10050] do_syscall_64+0x174/0x580 [ 331.686561][T10050] ? trace_irq_disable+0x3b/0x140 [ 331.686586][T10050] ? clear_bhb_loop+0x40/0x90 [ 331.686610][T10050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.686630][T10050] RIP: 0033:0x7f89af42d68e [ 331.686649][T10050] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 331.686667][T10050] RSP: 002b:00007f89ad6c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 331.686687][T10050] RAX: ffffffffffffffda RBX: 00007f89ad6c66c0 RCX: 00007f89af42d68e [ 331.686700][T10050] RDX: 0000000000000001 RSI: 00007f89ad6c60a0 RDI: 0000000000000004 [ 331.686715][T10050] RBP: 00007f89ad6c6090 R08: 0000000000000000 R09: 0000000000000000 [ 331.686726][T10050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.686737][T10050] R13: 00007f89af6e6038 R14: 00007f89af6e5fa0 R15: 00007ffd5093cfc8 [ 331.686765][T10050] [ 332.058462][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1442'. [ 332.111702][ T4922] Bluetooth: Unexpected start frame (len 12) [ 332.194733][T10053] ubi: mtd0 is already attached to ubi0 [ 332.712839][T10070] overlay: Unknown parameter 'smackfstransmute' [ 332.772304][ T4922] Bluetooth: Unexpected start frame (len 12) [ 333.125629][T10085] FAULT_INJECTION: forcing a failure. [ 333.125629][T10085] name failslab, interval 1, probability 0, space 0, times 0 [ 333.125671][T10085] CPU: 1 UID: 0 PID: 10085 Comm: syz.4.1450 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 333.125704][T10085] Tainted: [L]=SOFTLOCKUP [ 333.125714][T10085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 333.125729][T10085] Call Trace: [ 333.125739][T10085] [ 333.125750][T10085] dump_stack_lvl+0xe8/0x150 [ 333.125785][T10085] should_fail_ex+0x46b/0x600 [ 333.125824][T10085] should_failslab+0xa8/0x100 [ 333.125853][T10085] kmem_cache_alloc_node_noprof+0xae/0x710 [ 333.125892][T10085] ? __alloc_skb+0x1d0/0x7d0 [ 333.125917][T10085] ? __alloc_skb+0x1d0/0x7d0 [ 333.125949][T10085] __alloc_skb+0x1d0/0x7d0 [ 333.125975][T10085] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 333.126006][T10085] netlink_sendmsg+0x5d4/0xb40 [ 333.126047][T10085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.126081][T10085] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 333.126115][T10085] ? aa_sock_msg_perm+0x122/0x200 [ 333.126139][T10085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.126169][T10085] sock_sendmsg_nosec+0x13a/0x180 [ 333.126207][T10085] ____sys_sendmsg+0x55c/0x870 [ 333.126246][T10085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.126286][T10085] ? import_iovec+0x73/0xa0 [ 333.126316][T10085] ___sys_sendmsg+0x2a5/0x360 [ 333.126344][T10085] ? __lock_acquire+0x6b5/0x2d10 [ 333.126379][T10085] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.126442][T10085] ? __fget_files+0x2a/0x420 [ 333.126474][T10085] ? __fget_files+0x3a6/0x420 [ 333.126507][T10085] __x64_sys_sendmsg+0x1b7/0x290 [ 333.126544][T10085] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 333.126589][T10085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.126614][T10085] do_syscall_64+0x174/0x580 [ 333.126643][T10085] ? trace_irq_disable+0x3b/0x140 [ 333.126674][T10085] ? clear_bhb_loop+0x40/0x90 [ 333.126703][T10085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.126732][T10085] RIP: 0033:0x7fc13943ce59 [ 333.126753][T10085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.126774][T10085] RSP: 002b:00007fc13768e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.126798][T10085] RAX: ffffffffffffffda RBX: 00007fc1396b5fa0 RCX: 00007fc13943ce59 [ 333.126822][T10085] RDX: 0000000000000800 RSI: 0000200000000540 RDI: 0000000000000003 [ 333.126839][T10085] RBP: 00007fc13768e090 R08: 0000000000000000 R09: 0000000000000000 [ 333.126854][T10085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.126874][T10085] R13: 00007fc1396b6038 R14: 00007fc1396b5fa0 R15: 00007ffded1eff48 [ 333.126910][T10085] [ 333.502714][T10086] ubi: mtd0 is already attached to ubi0 [ 333.620647][ T13] hsr_slave_0: left promiscuous mode [ 333.622564][ T4922] Bluetooth: Unexpected start frame (len 12) [ 333.679925][ T13] hsr_slave_1: left promiscuous mode [ 333.681335][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.683064][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.728453][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 333.855300][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.855331][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.860998][ T10] usb 1-1: device descriptor read/64, error -71 [ 334.069950][T10105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1455'. [ 334.076064][ T13] veth1_macvtap: left promiscuous mode [ 334.079624][ T13] veth0_macvtap: left promiscuous mode [ 334.087276][ T13] veth1_vlan: left promiscuous mode [ 334.121993][ T13] veth0_vlan: left promiscuous mode [ 334.128739][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 334.258435][ T10] usb 1-1: device descriptor read/64, error -71 [ 334.368684][ T10] usb usb1-port1: attempt power cycle [ 334.718469][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 334.741026][ T10] usb 1-1: device descriptor read/8, error -71 [ 334.978486][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 335.001541][ T10] usb 1-1: device descriptor read/8, error -71 [ 335.089199][ T13] team0 (unregistering): Port device team_slave_1 removed [ 335.110123][ T10] usb usb1-port1: unable to enumerate USB device [ 335.149029][ T13] team0 (unregistering): Port device team_slave_0 removed [ 336.216343][ T4922] Bluetooth: Unexpected start frame (len 12) [ 336.216390][ T4922] Bluetooth: Frame is too long (len 12, expected len 4) [ 336.601838][T10125] qnx4: no qnx4 filesystem (no root dir). [ 336.630170][ T4922] Bluetooth: Unexpected start frame (len 12) [ 336.659381][T10128] ubi: mtd0 is already attached to ubi0 [ 336.703598][T10098] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.746613][T10133] netlink: 4128 bytes leftover after parsing attributes in process `syz.3.1461'. [ 337.415355][T10153] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 4, id = 0 [ 337.475578][T10131] IPVS: stopping backup sync thread 10153 ... [ 338.017243][T10163] ubi: mtd0 is already attached to ubi0 [ 338.068394][ T5950] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 338.112648][ T38] audit: type=1326 audit(1781754820.714:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10166 comm="syz.4.1474" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc13943ce59 code=0x0 [ 338.198570][ T5950] usb 1-1: device descriptor read/64, error -71 [ 338.276379][T10170] FAULT_INJECTION: forcing a failure. [ 338.276379][T10170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.276440][T10170] CPU: 1 UID: 0 PID: 10170 Comm: syz.3.1475 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 338.276473][T10170] Tainted: [L]=SOFTLOCKUP [ 338.276482][T10170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 338.276498][T10170] Call Trace: [ 338.276507][T10170] [ 338.276517][T10170] dump_stack_lvl+0xe8/0x150 [ 338.276558][T10170] should_fail_ex+0x46b/0x600 [ 338.276597][T10170] _copy_from_user+0x2d/0xb0 [ 338.276624][T10170] __copy_msghdr+0x3c3/0x5b0 [ 338.276659][T10170] ___sys_sendmsg+0x213/0x360 [ 338.276687][T10170] ? __lock_acquire+0x6b5/0x2d10 [ 338.276721][T10170] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.276787][T10170] ? __fget_files+0x2a/0x420 [ 338.276810][T10170] ? __fget_files+0x3a6/0x420 [ 338.276844][T10170] __x64_sys_sendmsg+0x1b7/0x290 [ 338.276877][T10170] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 338.276926][T10170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.276952][T10170] do_syscall_64+0x174/0x580 [ 338.276981][T10170] ? trace_irq_disable+0x3b/0x140 [ 338.277009][T10170] ? clear_bhb_loop+0x40/0x90 [ 338.277039][T10170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.277063][T10170] RIP: 0033:0x7f91e20ace59 [ 338.277085][T10170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.277105][T10170] RSP: 002b:00007f91e0306028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.277130][T10170] RAX: ffffffffffffffda RBX: 00007f91e2325fa0 RCX: 00007f91e20ace59 [ 338.277148][T10170] RDX: 000000000400c804 RSI: 0000200000000900 RDI: 0000000000000003 [ 338.277168][T10170] RBP: 00007f91e0306090 R08: 0000000000000000 R09: 0000000000000000 [ 338.277183][T10170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.277198][T10170] R13: 00007f91e2326038 R14: 00007f91e2325fa0 R15: 00007fff63131818 [ 338.277233][T10170] [ 338.548672][ T5950] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 338.629581][T10098] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.679603][ T5950] usb 1-1: device descriptor read/64, error -71 [ 338.788804][ T5950] usb usb1-port1: attempt power cycle [ 339.189229][ T5950] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 339.209081][ T5950] usb 1-1: device descriptor read/8, error -71 [ 339.351036][T10098] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.448473][ T5950] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 339.472658][ T5950] usb 1-1: device descriptor read/8, error -71 [ 339.578812][ T5950] usb usb1-port1: unable to enumerate USB device [ 339.979583][T10098] bridge0: port 3(netdevsim0) entered disabled state [ 340.083601][T10098] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 340.083696][T10098] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 340.114033][T10098] bridge0: port 3(netdevsim0) entered disabled state [ 340.116881][ T4922] Bluetooth: Unexpected start frame (len 12) [ 340.116929][ T4922] Bluetooth: Frame is too long (len 12, expected len 4) [ 340.294976][T10098] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.415292][T10204] ubi: mtd0 is already attached to ubi0 [ 341.085888][ T1378] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.153573][T10223] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1489'. [ 341.153602][T10223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.153666][ T1378] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.397081][T10231] erofs (device nullb0): cannot find valid erofs superblock [ 341.455852][ T6880] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.565904][T10205] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.583296][T10233] kvm: kvm [10232]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000018 [ 341.586274][T10233] kvm: kvm [10232]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000537 [ 341.609077][T10233] kvm: kvm [10232]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x6000000079b [ 341.615590][T10233] kvm: kvm [10232]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x6000000032f [ 341.642373][T10233] kvm: kvm [10232]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x6000000035b [ 341.646667][T10233] kvm: kvm [10232]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x6000000075e [ 341.670923][T10233] kvm: kvm [10232]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x6000000042f [ 341.676124][T10233] kvm: kvm [10232]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000003f70 [ 341.688037][T10233] kvm: kvm [10232]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x600000002b6 [ 341.732079][T10233] kvm: kvm [10232]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x600000003eb [ 342.350536][ T9664] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 342.410150][T10258] netlink: 6468 bytes leftover after parsing attributes in process `syz.0.1501'. [ 342.410172][T10258] openvswitch: netlink: ufid size 4104 bytes exceeds the range (1, 16) [ 342.568536][ T9664] usb 4-1: Using ep0 maxpacket: 8 [ 342.571598][ T9664] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 342.571633][ T9664] usb 4-1: config 179 has no interface number 0 [ 342.571684][ T9664] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 342.571716][ T9664] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 342.571748][ T9664] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 342.571778][ T9664] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 342.571808][ T9664] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 342.571854][ T9664] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 342.571881][ T9664] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.710601][T10247] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 343.098492][ T8544] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 343.252077][ T8544] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 343.252110][ T8544] usb 5-1: config 0 has no interface number 0 [ 343.252159][ T8544] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.252190][ T8544] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 343.252221][ T8544] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 343.252264][ T8544] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 343.252292][ T8544] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.356703][ T8544] usb 5-1: config 0 descriptor?? [ 343.378020][ T8544] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input11 [ 343.821917][ T5950] usb 4-1: USB disconnect, device number 54 [ 343.821951][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 343.822111][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 344.011486][T10284] FAULT_INJECTION: forcing a failure. [ 344.011486][T10284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.011528][T10284] CPU: 0 UID: 0 PID: 10284 Comm: syz.0.1512 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 344.011560][T10284] Tainted: [L]=SOFTLOCKUP [ 344.011569][T10284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 344.011585][T10284] Call Trace: [ 344.011594][T10284] [ 344.011604][T10284] dump_stack_lvl+0xe8/0x150 [ 344.011638][T10284] should_fail_ex+0x46b/0x600 [ 344.011676][T10284] _copy_from_user+0x2d/0xb0 [ 344.011703][T10284] iommufd_fops_ioctl+0x461/0x5d0 [ 344.011735][T10284] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 344.011769][T10284] ? __fget_files+0x2a/0x420 [ 344.011800][T10284] ? __fget_files+0x2a/0x420 [ 344.011828][T10284] ? bpf_lsm_file_ioctl+0x9/0x20 [ 344.011855][T10284] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 344.011884][T10284] __se_sys_ioctl+0xff/0x170 [ 344.011919][T10284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.011946][T10284] do_syscall_64+0x174/0x580 [ 344.011975][T10284] ? trace_irq_disable+0x3b/0x140 [ 344.012014][T10284] ? clear_bhb_loop+0x40/0x90 [ 344.012043][T10284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.012067][T10284] RIP: 0033:0x7f89af46ce59 [ 344.012088][T10284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.012109][T10284] RSP: 002b:00007f89ad6c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 344.012133][T10284] RAX: ffffffffffffffda RBX: 00007f89af6e5fa0 RCX: 00007f89af46ce59 [ 344.012151][T10284] RDX: 0000200000000000 RSI: 0000000000003b86 RDI: 0000000000000003 [ 344.012166][T10284] RBP: 00007f89ad6c6090 R08: 0000000000000000 R09: 0000000000000000 [ 344.012182][T10284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.012196][T10284] R13: 00007f89af6e6038 R14: 00007f89af6e5fa0 R15: 00007ffd5093cfc8 [ 344.012232][T10284] [ 344.493265][ T5800] usb 5-1: USB disconnect, device number 24 [ 344.538147][T10296] FAULT_INJECTION: forcing a failure. [ 344.538147][T10296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.538191][T10296] CPU: 1 UID: 0 PID: 10296 Comm: syz.0.1516 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 344.538223][T10296] Tainted: [L]=SOFTLOCKUP [ 344.538232][T10296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 344.538247][T10296] Call Trace: [ 344.538261][T10296] [ 344.538271][T10296] dump_stack_lvl+0xe8/0x150 [ 344.538304][T10296] should_fail_ex+0x46b/0x600 [ 344.538343][T10296] _copy_from_user+0x2d/0xb0 [ 344.538370][T10296] binder_ioctl_write_read+0x167/0xa470 [ 344.538399][T10296] ? is_bpf_text_address+0x26/0x2b0 [ 344.538445][T10296] ? try_to_take_rt_mutex+0x840/0xb00 [ 344.538470][T10296] ? __kernel_text_address+0xd/0x30 [ 344.538508][T10296] ? __lock_acquire+0x6b5/0x2d10 [ 344.538543][T10296] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 344.538569][T10296] ? stack_depot_save_flags+0x33/0x810 [ 344.538619][T10296] ? do_raw_spin_lock+0x12b/0x2f0 [ 344.538655][T10296] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 344.538684][T10296] ? lockdep_hardirqs_on+0x7a/0x110 [ 344.538714][T10296] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 344.538742][T10296] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 344.538764][T10296] ? reacquire_held_locks+0x104/0x190 [ 344.538796][T10296] ? rt_spin_lock+0x1e0/0x400 [ 344.538820][T10296] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 344.538845][T10296] ? rt_spin_unlock+0x14f/0x200 [ 344.538877][T10296] ? binder_get_thread+0x177/0x6d0 [ 344.538905][T10296] binder_ioctl+0x426/0x1b10 [ 344.538930][T10296] ? tomoyo_path_number_perm+0x219/0x630 [ 344.538975][T10296] ? tomoyo_path_number_perm+0x219/0x630 [ 344.539015][T10296] ? do_vfs_ioctl+0x117b/0x1540 [ 344.539046][T10296] ? __pfx_binder_ioctl+0x10/0x10 [ 344.539069][T10296] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 344.539134][T10296] ? __fget_files+0x2a/0x420 [ 344.539161][T10296] ? __fget_files+0x2a/0x420 [ 344.539182][T10296] ? __fget_files+0x3a6/0x420 [ 344.539206][T10296] ? __fget_files+0x2a/0x420 [ 344.539233][T10296] ? bpf_lsm_file_ioctl+0x9/0x20 [ 344.539261][T10296] ? __pfx_binder_ioctl+0x10/0x10 [ 344.539284][T10296] __se_sys_ioctl+0xff/0x170 [ 344.539313][T10296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.539338][T10296] do_syscall_64+0x174/0x580 [ 344.539368][T10296] ? trace_irq_disable+0x3b/0x140 [ 344.539398][T10296] ? clear_bhb_loop+0x40/0x90 [ 344.539426][T10296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.539449][T10296] RIP: 0033:0x7f89af46ce59 [ 344.539470][T10296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.539491][T10296] RSP: 002b:00007f89ad6a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 344.539516][T10296] RAX: ffffffffffffffda RBX: 00007f89af6e6090 RCX: 00007f89af46ce59 [ 344.539535][T10296] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000005 [ 344.539551][T10296] RBP: 00007f89ad6a5090 R08: 0000000000000000 R09: 0000000000000000 [ 344.539565][T10296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.539579][T10296] R13: 00007f89af6e6128 R14: 00007f89af6e6090 R15: 00007ffd5093cfc8 [ 344.539626][T10296] [ 344.578043][T10296] binder: 10291:10296 ioctl c0306201 200000004a40 returned -14 [ 344.739294][ T4922] Bluetooth: Unexpected start frame (len 12) [ 345.170926][T10301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1520'. [ 345.273190][T10305] tipc: Started in network mode [ 345.273214][T10305] tipc: Node identity 2007ff, cluster identity 4711 [ 345.273227][T10305] tipc: Node number set to 2099199 [ 345.324291][T10306] netlink: 'syz.4.1521': attribute type 10 has an invalid length. [ 345.549660][ T5950] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 345.708607][ T5950] usb 4-1: Using ep0 maxpacket: 32 [ 345.716382][ T5950] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.716443][ T5950] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.751689][ T5950] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.751749][ T5950] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.753696][ T5950] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.753759][ T5950] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.760180][ T5950] usb 4-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 345.760213][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.760236][ T5950] usb 4-1: Product: syz [ 345.760252][ T5950] usb 4-1: Manufacturer: syz [ 345.760269][ T5950] usb 4-1: SerialNumber: syz [ 345.842793][ T5950] usb 4-1: config 0 descriptor?? [ 345.847155][ T5950] cdc_acm 4-1:0.0: Zero length descriptor references [ 345.847201][ T5950] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 345.898150][T10321] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1529'. [ 346.247318][T10336] FAULT_INJECTION: forcing a failure. [ 346.247318][T10336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.247370][T10336] CPU: 1 UID: 0 PID: 10336 Comm: syz.2.1535 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 346.247403][T10336] Tainted: [L]=SOFTLOCKUP [ 346.247412][T10336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 346.247428][T10336] Call Trace: [ 346.247437][T10336] [ 346.247448][T10336] dump_stack_lvl+0xe8/0x150 [ 346.247481][T10336] should_fail_ex+0x46b/0x600 [ 346.247520][T10336] _copy_from_user+0x2d/0xb0 [ 346.247547][T10336] get_sg_io_hdr+0xf6/0x850 [ 346.247583][T10336] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 346.247610][T10336] ? __pfx_get_sg_io_hdr+0x10/0x10 [ 346.247634][T10336] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 346.247674][T10336] ? rt_write_unlock+0x190/0x230 [ 346.247701][T10336] ? sg_add_request+0x526/0x580 [ 346.247730][T10336] sg_new_write+0x180/0x890 [ 346.247761][T10336] ? __pfx_sg_new_write+0x10/0x10 [ 346.247823][T10336] sg_ioctl+0x11fd/0x21a0 [ 346.247856][T10336] ? __pfx_sg_ioctl+0x10/0x10 [ 346.247881][T10336] ? __fget_files+0x2a/0x420 [ 346.247909][T10336] ? __fget_files+0x2a/0x420 [ 346.247932][T10336] ? __fget_files+0x3a6/0x420 [ 346.247955][T10336] ? __fget_files+0x2a/0x420 [ 346.247983][T10336] ? bpf_lsm_file_ioctl+0x9/0x20 [ 346.248011][T10336] ? __pfx_sg_ioctl+0x10/0x10 [ 346.248033][T10336] __se_sys_ioctl+0xff/0x170 [ 346.248064][T10336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.248090][T10336] do_syscall_64+0x174/0x580 [ 346.248122][T10336] ? clear_bhb_loop+0x40/0x90 [ 346.248151][T10336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.248180][T10336] RIP: 0033:0x7f543aecce59 [ 346.248200][T10336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.248222][T10336] RSP: 002b:00007f5439126028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 346.248247][T10336] RAX: ffffffffffffffda RBX: 00007f543b145fa0 RCX: 00007f543aecce59 [ 346.248270][T10336] RDX: 0000200000000040 RSI: 0000000000002285 RDI: 0000000000000003 [ 346.248286][T10336] RBP: 00007f5439126090 R08: 0000000000000000 R09: 0000000000000000 [ 346.248301][T10336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.248315][T10336] R13: 00007f543b146038 R14: 00007f543b145fa0 R15: 00007ffff29fe758 [ 346.248351][T10336] [ 346.265127][ T4922] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 346.265322][ T4922] Bluetooth: hci5: Injecting HCI hardware error event [ 346.267739][ T4922] Bluetooth: hci5: hardware error 0x00 [ 347.126992][T10363] FAULT_INJECTION: forcing a failure. [ 347.126992][T10363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.127051][T10363] CPU: 0 UID: 0 PID: 10363 Comm: syz.0.1546 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 347.127083][T10363] Tainted: [L]=SOFTLOCKUP [ 347.127092][T10363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 347.127109][T10363] Call Trace: [ 347.127119][T10363] [ 347.127129][T10363] dump_stack_lvl+0xe8/0x150 [ 347.127171][T10363] should_fail_ex+0x46b/0x600 [ 347.127210][T10363] _copy_from_user+0x2d/0xb0 [ 347.127238][T10363] ___sys_sendmsg+0x1c6/0x360 [ 347.127266][T10363] ? __lock_acquire+0x6b5/0x2d10 [ 347.127301][T10363] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.127368][T10363] ? __fget_files+0x2a/0x420 [ 347.127392][T10363] ? __fget_files+0x3a6/0x420 [ 347.127427][T10363] __x64_sys_sendmsg+0x1b7/0x290 [ 347.127460][T10363] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.127510][T10363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.127536][T10363] do_syscall_64+0x174/0x580 [ 347.127570][T10363] ? trace_irq_disable+0x3b/0x140 [ 347.127599][T10363] ? clear_bhb_loop+0x40/0x90 [ 347.127628][T10363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.127652][T10363] RIP: 0033:0x7f89af46ce59 [ 347.127674][T10363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.127694][T10363] RSP: 002b:00007f89ad6c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.127719][T10363] RAX: ffffffffffffffda RBX: 00007f89af6e5fa0 RCX: 00007f89af46ce59 [ 347.127738][T10363] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 347.127754][T10363] RBP: 00007f89ad6c6090 R08: 0000000000000000 R09: 0000000000000000 [ 347.127769][T10363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.127783][T10363] R13: 00007f89af6e6038 R14: 00007f89af6e5fa0 R15: 00007ffd5093cfc8 [ 347.127819][T10363] [ 347.327247][ T5715] usb 4-1: USB disconnect, device number 55 [ 347.696690][T10371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1548'. [ 347.992557][T10385] FAULT_INJECTION: forcing a failure. [ 347.992557][T10385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.992599][T10385] CPU: 0 UID: 0 PID: 10385 Comm: syz.0.1556 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 347.992631][T10385] Tainted: [L]=SOFTLOCKUP [ 347.992641][T10385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 347.992655][T10385] Call Trace: [ 347.992665][T10385] [ 347.992675][T10385] dump_stack_lvl+0xe8/0x150 [ 347.992707][T10385] should_fail_ex+0x46b/0x600 [ 347.992745][T10385] _copy_from_user+0x2d/0xb0 [ 347.992773][T10385] sctp_setsockopt+0x1c4/0x12c0 [ 347.992801][T10385] ? sock_common_setsockopt+0x36/0xc0 [ 347.992824][T10385] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 347.992849][T10385] do_sock_setsockopt+0x17c/0x1b0 [ 347.992881][T10385] __x64_sys_setsockopt+0x143/0x1b0 [ 347.992912][T10385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.992939][T10385] do_syscall_64+0x174/0x580 [ 347.992968][T10385] ? trace_irq_disable+0x3b/0x140 [ 347.992997][T10385] ? clear_bhb_loop+0x40/0x90 [ 347.993025][T10385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.993051][T10385] RIP: 0033:0x7f89af46ce59 [ 347.993072][T10385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.993093][T10385] RSP: 002b:00007f89ad6c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 347.993117][T10385] RAX: ffffffffffffffda RBX: 00007f89af6e5fa0 RCX: 00007f89af46ce59 [ 347.993135][T10385] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 347.993149][T10385] RBP: 00007f89ad6c6090 R08: 000000000000009c R09: 0000000000000000 [ 347.993164][T10385] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 347.993180][T10385] R13: 00007f89af6e6038 R14: 00007f89af6e5fa0 R15: 00007ffd5093cfc8 [ 347.993220][T10385] [ 348.749650][ T4922] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 349.535505][T10440] FAULT_INJECTION: forcing a failure. [ 349.535505][T10440] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 349.535549][T10440] CPU: 1 UID: 0 PID: 10440 Comm: syz.2.1579 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 349.535580][T10440] Tainted: [L]=SOFTLOCKUP [ 349.535589][T10440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 349.535604][T10440] Call Trace: [ 349.535613][T10440] [ 349.535623][T10440] dump_stack_lvl+0xe8/0x150 [ 349.535657][T10440] should_fail_ex+0x46b/0x600 [ 349.535696][T10440] prepare_alloc_pages+0x22a/0x6b0 [ 349.535732][T10440] __alloc_frozen_pages_noprof+0x12f/0x380 [ 349.535765][T10440] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 349.535809][T10440] ? __pfx_policy_nodemask+0x10/0x10 [ 349.535837][T10440] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 349.535860][T10440] ? reacquire_held_locks+0x104/0x190 [ 349.535900][T10440] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 349.535930][T10440] alloc_pages_mpol+0xd1/0x380 [ 349.535980][T10440] alloc_pages_noprof+0xd2/0x2f0 [ 349.536014][T10440] __pmd_alloc+0x3a/0x5e0 [ 349.536044][T10440] handle_mm_fault+0xf4d/0x14d0 [ 349.536072][T10440] ? handle_mm_fault+0xed/0x14d0 [ 349.536099][T10440] ? __pfx_handle_mm_fault+0x10/0x10 [ 349.536137][T10440] ? __lock_acquire+0x6b5/0x2d10 [ 349.536172][T10440] ? lock_mm_and_find_vma+0xa7/0x340 [ 349.536203][T10440] do_user_addr_fault+0x75b/0x1340 [ 349.536249][T10440] exc_page_fault+0x6a/0xc0 [ 349.536279][T10440] asm_exc_page_fault+0x26/0x30 [ 349.536303][T10440] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 349.536327][T10440] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 349.536347][T10440] RSP: 0018:ffffc9000620fd58 EFLAGS: 00050206 [ 349.536369][T10440] RAX: 00007ffffffff001 RBX: 000000000000001a RCX: 000000000000001a [ 349.536385][T10440] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffc9000620fdc0 [ 349.536402][T10440] RBP: ffffc9000620feb8 R08: ffffc9000620fdd9 R09: 1ffff92000c41fbb [ 349.536421][T10440] R10: dffffc0000000000 R11: fffff52000c41fbc R12: 0000200000000080 [ 349.536439][T10440] R13: ffffc9000620fdc0 R14: ffffc9000620fdc0 R15: 0000200000000080 [ 349.536476][T10440] _copy_from_user+0x7a/0xb0 [ 349.536504][T10440] __sys_bind+0x1cc/0x410 [ 349.536531][T10440] ? __pfx___sys_bind+0x10/0x10 [ 349.536568][T10440] ? __pfx_ksys_write+0x10/0x10 [ 349.536602][T10440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.536629][T10440] __x64_sys_bind+0x7a/0x90 [ 349.536655][T10440] do_syscall_64+0x174/0x580 [ 349.536684][T10440] ? trace_irq_disable+0x3b/0x140 [ 349.536714][T10440] ? clear_bhb_loop+0x40/0x90 [ 349.536743][T10440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.536767][T10440] RIP: 0033:0x7f543aecce59 [ 349.536788][T10440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.536807][T10440] RSP: 002b:00007f5439126028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 349.536830][T10440] RAX: ffffffffffffffda RBX: 00007f543b145fa0 RCX: 00007f543aecce59 [ 349.536849][T10440] RDX: 000000000000001a RSI: 0000200000000080 RDI: 0000000000000003 [ 349.536870][T10440] RBP: 00007f5439126090 R08: 0000000000000000 R09: 0000000000000000 [ 349.536886][T10440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.536900][T10440] R13: 00007f543b146038 R14: 00007f543b145fa0 R15: 00007ffff29fe758 [ 349.536943][T10440] [ 350.193792][ T5702] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 350.331304][T10453] FAULT_INJECTION: forcing a failure. [ 350.331304][T10453] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 350.331347][T10453] CPU: 0 UID: 0 PID: 10453 Comm: syz.3.1584 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 350.331380][T10453] Tainted: [L]=SOFTLOCKUP [ 350.331389][T10453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 350.331404][T10453] Call Trace: [ 350.331415][T10453] [ 350.331426][T10453] dump_stack_lvl+0xe8/0x150 [ 350.331461][T10453] should_fail_ex+0x46b/0x600 [ 350.331504][T10453] prepare_alloc_pages+0x22a/0x6b0 [ 350.331540][T10453] __alloc_frozen_pages_noprof+0x12f/0x380 [ 350.331573][T10453] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 350.331616][T10453] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 350.331652][T10453] __alloc_pages_noprof+0x10/0x100 [ 350.331680][T10453] __folio_alloc_noprof+0x14/0x90 [ 350.331708][T10453] migrate_pages_batch+0x799/0x3fc0 [ 350.331754][T10453] ? __pfx_alloc_migration_target+0x10/0x10 [ 350.331795][T10453] ? do_raw_spin_lock+0x12b/0x2f0 [ 350.331835][T10453] ? __pfx_migrate_pages_batch+0x10/0x10 [ 350.331883][T10453] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 350.331913][T10453] ? lockdep_hardirqs_on+0x7a/0x110 [ 350.331948][T10453] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 350.331975][T10453] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 350.332000][T10453] ? reacquire_held_locks+0x104/0x190 [ 350.332033][T10453] ? rt_spin_lock+0x1e0/0x400 [ 350.332058][T10453] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 350.332083][T10453] ? rt_spin_unlock+0x14f/0x200 [ 350.332109][T10453] ? rt_spin_unlock+0x160/0x200 [ 350.332135][T10453] ? __folio_put+0xf7/0x3a0 [ 350.332164][T10453] ? __pfx___folio_put+0x10/0x10 [ 350.332197][T10453] migrate_pages+0x1c6b/0x29f0 [ 350.332243][T10453] ? __pfx_alloc_migration_target+0x10/0x10 [ 350.332282][T10453] ? __pfx_migrate_pages+0x10/0x10 [ 350.332315][T10453] ? queue_pages_test_walk+0x43c/0x470 [ 350.332352][T10453] ? __pfx_remove_migration_pte+0x10/0x10 [ 350.332408][T10453] do_migrate_pages+0x6ba/0x910 [ 350.332446][T10453] ? __pfx_do_migrate_pages+0x10/0x10 [ 350.332477][T10453] ? rt_spin_lock+0x1e0/0x400 [ 350.332512][T10453] ? security_capable+0xb9/0x2c0 [ 350.332557][T10453] __se_sys_migrate_pages+0xabc/0xca0 [ 350.332589][T10453] ? fput+0xa0/0xd0 [ 350.332610][T10453] ? __pfx___se_sys_migrate_pages+0x10/0x10 [ 350.332635][T10453] ? ksys_write+0x248/0x270 [ 350.332667][T10453] ? __pfx_ksys_write+0x10/0x10 [ 350.332717][T10453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.332743][T10453] do_syscall_64+0x174/0x580 [ 350.332772][T10453] ? trace_irq_disable+0x3b/0x140 [ 350.332801][T10453] ? clear_bhb_loop+0x40/0x90 [ 350.332830][T10453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.332862][T10453] RIP: 0033:0x7f91e20ace59 [ 350.332885][T10453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.332906][T10453] RSP: 002b:00007f91e02e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 350.332931][T10453] RAX: ffffffffffffffda RBX: 00007f91e2326090 RCX: 00007f91e20ace59 [ 350.332949][T10453] RDX: 0000200000000040 RSI: 0000000000000005 RDI: 0000000000000000 [ 350.332964][T10453] RBP: 00007f91e02e5090 R08: 0000000000000000 R09: 0000000000000000 [ 350.332980][T10453] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 350.332996][T10453] R13: 00007f91e2326128 R14: 00007f91e2326090 R15: 00007fff63131818 [ 350.333031][T10453] [ 350.432100][ T5702] usb 1-1: Using ep0 maxpacket: 16 [ 350.567353][ T5702] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.567477][ T5702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 350.567532][ T5702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 350.567558][ T5702] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 350.567583][ T5702] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.592886][ T5702] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 350.592923][ T5702] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 350.592947][ T5702] usb 1-1: Manufacturer: syz [ 350.777998][ T5702] usb 1-1: config 0 descriptor?? [ 351.101039][ T5702] rc_core: IR keymap rc-hauppauge not found [ 351.101061][ T5702] Registered IR keymap rc-empty [ 351.101446][ T5702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.131019][ T5702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.154012][ T5702] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 351.181970][ T5702] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12 [ 351.218863][ T5702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.240746][ T5702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.258706][ T5702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.281457][ T5702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.298848][ T5702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.318492][ T5702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.338411][ T5702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.358705][ T5702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.378628][ T5702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.398396][ T5702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.468523][ T5702] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 351.468553][ T5702] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 351.497966][T10475] sg_write: data in/out 406492/50 bytes for SCSI command 0x0-- guessing data in; [ 351.497966][T10475] program syz.4.1594 not setting count and/or reply_len properly [ 351.516521][ T5702] usb 1-1: USB disconnect, device number 36 [ 351.798410][ T5701] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 351.948489][ T5701] usb 4-1: Using ep0 maxpacket: 16 [ 351.954924][ T5701] usb 4-1: unable to get BOS descriptor or descriptor too short [ 351.956955][ T5701] usb 4-1: config 4 has an invalid interface number: 119 but max is 0 [ 351.956984][ T5701] usb 4-1: config 4 has no interface number 0 [ 351.957020][ T5701] usb 4-1: config 4 interface 119 has no altsetting 0 [ 351.994591][ T5701] usb 4-1: language id specifier not provided by device, defaulting to English [ 352.014282][ T5701] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 352.014329][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.014353][ T5701] usb 4-1: Product: syz [ 352.014370][ T5701] usb 4-1: SerialNumber: syz [ 352.225153][T10496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1602'. [ 352.362050][ T5701] usb 4-1: USB disconnect, device number 56 [ 352.960438][ T4922] Bluetooth: Unexpected start frame (len 12) [ 352.999143][T10521] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1612'. [ 353.736595][T10553] FAULT_INJECTION: forcing a failure. [ 353.736595][T10553] name failslab, interval 1, probability 0, space 0, times 0 [ 353.736637][T10553] CPU: 0 UID: 0 PID: 10553 Comm: syz.2.1628 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 353.736668][T10553] Tainted: [L]=SOFTLOCKUP [ 353.736678][T10553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 353.736693][T10553] Call Trace: [ 353.736702][T10553] [ 353.736712][T10553] dump_stack_lvl+0xe8/0x150 [ 353.736745][T10553] should_fail_ex+0x46b/0x600 [ 353.736783][T10553] should_failslab+0xa8/0x100 [ 353.736812][T10553] kmem_cache_alloc_node_noprof+0xae/0x710 [ 353.736852][T10553] ? __alloc_skb+0x1d0/0x7d0 [ 353.736875][T10553] ? __alloc_skb+0x1d0/0x7d0 [ 353.736907][T10553] __alloc_skb+0x1d0/0x7d0 [ 353.736937][T10553] netlink_sendmsg+0x5d4/0xb40 [ 353.736976][T10553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.737009][T10553] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 353.737044][T10553] ? aa_sock_msg_perm+0x122/0x200 [ 353.737069][T10553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.737098][T10553] sock_sendmsg_nosec+0x13a/0x180 [ 353.737136][T10553] ____sys_sendmsg+0x55c/0x870 [ 353.737170][T10553] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.737210][T10553] ? import_iovec+0x73/0xa0 [ 353.737242][T10553] ___sys_sendmsg+0x2a5/0x360 [ 353.737271][T10553] ? __lock_acquire+0x6b5/0x2d10 [ 353.737305][T10553] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.737371][T10553] ? __fget_files+0x2a/0x420 [ 353.737393][T10553] ? __fget_files+0x3a6/0x420 [ 353.737427][T10553] __x64_sys_sendmsg+0x1b7/0x290 [ 353.737461][T10553] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.737517][T10553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.737545][T10553] do_syscall_64+0x174/0x580 [ 353.737573][T10553] ? trace_irq_disable+0x3b/0x140 [ 353.737602][T10553] ? clear_bhb_loop+0x40/0x90 [ 353.737630][T10553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.737654][T10553] RIP: 0033:0x7f543aecce59 [ 353.737675][T10553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.737695][T10553] RSP: 002b:00007f5439126028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.737720][T10553] RAX: ffffffffffffffda RBX: 00007f543b145fa0 RCX: 00007f543aecce59 [ 353.737738][T10553] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 353.737753][T10553] RBP: 00007f5439126090 R08: 0000000000000000 R09: 0000000000000000 [ 353.737768][T10553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.737782][T10553] R13: 00007f543b146038 R14: 00007f543b145fa0 R15: 00007ffff29fe758 [ 353.737818][T10553] [ 354.675758][ T5715] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 354.843622][ T5715] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 354.843662][ T5715] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 354.843692][ T5715] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 354.847570][ T5715] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 354.847609][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.847639][ T5715] usb 4-1: Product: syz [ 354.847655][ T5715] usb 4-1: Manufacturer: syz [ 354.847672][ T5715] usb 4-1: SerialNumber: syz [ 354.920599][ T5715] usb 4-1: config 0 descriptor?? [ 354.921639][T10568] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 354.921831][T10568] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 354.924433][ T5715] usb 4-1: ucan: probing device on interface #0 [ 355.304390][ T4922] Bluetooth: hci4: command 0x0406 tx timeout [ 355.342990][ T5715] usb 4-1: ucan: device reported invalid device info [ 355.343010][ T5715] usb 4-1: ucan: probe failed; try to update the device firmware [ 355.804266][T10610] FAULT_INJECTION: forcing a failure. [ 355.804266][T10610] name failslab, interval 1, probability 0, space 0, times 0 [ 355.804302][T10610] CPU: 1 UID: 0 PID: 10610 Comm: syz.2.1650 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 355.804329][T10610] Tainted: [L]=SOFTLOCKUP [ 355.804341][T10610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 355.804354][T10610] Call Trace: [ 355.804362][T10610] [ 355.804371][T10610] dump_stack_lvl+0xe8/0x150 [ 355.804402][T10610] should_fail_ex+0x46b/0x600 [ 355.804436][T10610] should_failslab+0xa8/0x100 [ 355.804460][T10610] __kmalloc_noprof+0xfe/0x7e0 [ 355.804482][T10610] ? copy_splice_read+0x16f/0xab0 [ 355.804505][T10610] ? copy_splice_read+0x16f/0xab0 [ 355.804533][T10610] copy_splice_read+0x16f/0xab0 [ 355.804561][T10610] ? rcu_is_watching+0x15/0xb0 [ 355.804603][T10610] ? __pfx_copy_splice_read+0x10/0x10 [ 355.804626][T10610] ? trace_kmalloc+0x2a/0xf0 [ 355.804646][T10610] ? look_up_lock_class+0x57/0x110 [ 355.804672][T10610] ? register_lock_class+0x31/0x2e0 [ 355.804699][T10610] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 355.804731][T10610] ? alloc_pipe_info+0x373/0x4d0 [ 355.804759][T10610] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 355.804784][T10610] splice_direct_to_actor+0x4ab/0xc80 [ 355.804818][T10610] ? __pfx_direct_splice_actor+0x10/0x10 [ 355.804848][T10610] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 355.804877][T10610] do_splice_direct+0x19b/0x2a0 [ 355.804898][T10610] ? __pfx_do_splice_direct+0x10/0x10 [ 355.804929][T10610] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 355.804956][T10610] ? rw_verify_area+0x25b/0x4e0 [ 355.804980][T10610] do_sendfile+0x547/0x7e0 [ 355.805008][T10610] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 355.805038][T10610] ? __pfx_do_sendfile+0x10/0x10 [ 355.805076][T10610] __se_sys_sendfile64+0x144/0x1a0 [ 355.805107][T10610] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 355.805143][T10610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.805164][T10610] do_syscall_64+0x174/0x580 [ 355.805186][T10610] ? trace_irq_disable+0x3b/0x140 [ 355.805209][T10610] ? clear_bhb_loop+0x40/0x90 [ 355.805232][T10610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.805250][T10610] RIP: 0033:0x7f543aecce59 [ 355.805268][T10610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.805285][T10610] RSP: 002b:00007f5439126028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 355.805307][T10610] RAX: ffffffffffffffda RBX: 00007f543b145fa0 RCX: 00007f543aecce59 [ 355.805322][T10610] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 355.805334][T10610] RBP: 00007f5439126090 R08: 0000000000000000 R09: 0000000000000000 [ 355.805347][T10610] R10: 000080001d00c0d1 R11: 0000000000000246 R12: 0000000000000001 [ 355.805360][T10610] R13: 00007f543b146038 R14: 00007f543b145fa0 R15: 00007ffff29fe758 [ 355.805389][T10610] [ 356.142569][ T5950] usb 4-1: USB disconnect, device number 57 [ 356.168385][ T5701] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 356.318444][ T5701] usb 5-1: Using ep0 maxpacket: 16 [ 356.322990][ T5701] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 356.323019][ T5701] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 356.323044][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 356.323070][ T5701] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 356.323094][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 356.323116][ T5701] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 356.323137][ T5701] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 356.326878][ T5701] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 356.326909][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.326930][ T5701] usb 5-1: Product: syz [ 356.326944][ T5701] usb 5-1: Manufacturer: syz [ 356.326959][ T5701] usb 5-1: SerialNumber: syz [ 356.471940][ T5701] usb 5-1: config 0 descriptor?? [ 356.472909][T10608] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 356.492520][ T5701] iuu_phoenix 5-1:0.0: iuu_phoenix converter detected [ 356.520229][ T5701] usb 5-1: iuu_phoenix converter now attached to ttyUSB0 [ 356.684796][ T5950] usb 5-1: USB disconnect, device number 25 [ 356.720632][ T5950] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 356.722764][ T5950] iuu_phoenix 5-1:0.0: device disconnected [ 357.714933][T10661] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1673'. [ 357.818493][ T5702] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 357.958361][ T5715] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 357.969807][ T5702] usb 4-1: Using ep0 maxpacket: 16 [ 357.990929][ T5702] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.990960][ T5702] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 357.991013][ T5702] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 357.991039][ T5702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.037459][ T5702] usb 4-1: config 0 descriptor?? [ 358.130578][ T5715] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.134588][ T5715] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 358.134674][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.134713][ T5715] usb 1-1: Product: syz [ 358.134758][ T5715] usb 1-1: Manufacturer: syz [ 358.134838][ T5715] usb 1-1: SerialNumber: syz [ 358.182403][ T5715] usb 1-1: config 0 descriptor?? [ 358.200584][ T5715] cyberjack 1-1:0.0: required endpoints missing [ 358.424679][T10678] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 358.533214][T10678] FAULT_INJECTION: forcing a failure. [ 358.533214][T10678] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 358.533245][T10678] CPU: 1 UID: 0 PID: 10678 Comm: syz.4.1681 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 358.533271][T10678] Tainted: [L]=SOFTLOCKUP [ 358.533277][T10678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 358.533287][T10678] Call Trace: [ 358.533294][T10678] [ 358.533301][T10678] dump_stack_lvl+0xe8/0x150 [ 358.533327][T10678] should_fail_ex+0x46b/0x600 [ 358.533356][T10678] prepare_alloc_pages+0x22a/0x6b0 [ 358.533381][T10678] __alloc_frozen_pages_noprof+0x12f/0x380 [ 358.533404][T10678] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 358.533427][T10678] ? __pfx_policy_nodemask+0x10/0x10 [ 358.533448][T10678] ? __lock_acquire+0x6b5/0x2d10 [ 358.533474][T10678] alloc_pages_mpol+0xd1/0x380 [ 358.533497][T10678] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 358.533519][T10678] vma_alloc_folio_noprof+0xe1/0x1e0 [ 358.533542][T10678] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 358.533563][T10678] ? __pte_offset_map+0x29/0x200 [ 358.533593][T10678] do_pte_missing+0x822/0x2940 [ 358.533619][T10678] ? handle_mm_fault+0xed/0x14d0 [ 358.533639][T10678] handle_mm_fault+0xdc2/0x14d0 [ 358.533658][T10678] ? handle_mm_fault+0xed/0x14d0 [ 358.533677][T10678] ? __pfx_handle_mm_fault+0x10/0x10 [ 358.533694][T10678] ? follow_page_pte+0xbe2/0xe60 [ 358.533716][T10678] ? __pfx_follow_page_pte+0x10/0x10 [ 358.533741][T10678] __get_user_pages+0x16d4/0x2620 [ 358.533798][T10678] get_user_pages_unlocked+0x1e2/0x710 [ 358.533832][T10678] hva_to_pfn+0x365/0xf20 [ 358.533857][T10678] ? __lock_acquire+0x6b5/0x2d10 [ 358.533884][T10678] ? __pfx_hva_to_pfn+0x10/0x10 [ 358.533913][T10678] ? xas_start+0x396/0x780 [ 358.533935][T10678] ? xa_load+0x60/0x210 [ 358.533963][T10678] ? kvm_follow_pfn+0x21a/0x3c0 [ 358.533988][T10678] __kvm_faultin_pfn+0xaa/0x100 [ 358.534048][T10678] kvm_mmu_faultin_pfn+0x735/0x15b0 [ 358.534093][T10678] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 358.534133][T10678] kvm_tdp_page_fault+0x273/0x370 [ 358.534174][T10678] kvm_mmu_do_page_fault+0x33d/0x690 [ 358.534202][T10678] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 358.534228][T10678] ? __lock_acquire+0x6b5/0x2d10 [ 358.534253][T10678] ? __lock_acquire+0x6b5/0x2d10 [ 358.534274][T10678] ? clear_bhb_loop+0x40/0x90 [ 358.534291][T10678] ? clear_bhb_loop+0x40/0x90 [ 358.534307][T10678] ? clear_bhb_loop+0x40/0x90 [ 358.534328][T10678] kvm_mmu_page_fault+0x22d/0xb90 [ 358.534356][T10678] ? __pfx_handle_ept_violation+0x10/0x10 [ 358.534380][T10678] vmx_handle_exit+0x1081/0x17e0 [ 358.534413][T10678] vcpu_run+0x4c9e/0x76f0 [ 358.534430][T10678] ? segmented_read+0x2d0/0x3f0 [ 358.534457][T10678] ? vcpu_run+0x355b/0x76f0 [ 358.534513][T10678] ? __pfx_vcpu_run+0x10/0x10 [ 358.534530][T10678] ? __asan_memcpy+0x40/0x70 [ 358.534555][T10678] ? complete_emulated_mmio+0x53e/0x900 [ 358.534589][T10678] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 358.534617][T10678] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 358.534635][T10678] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 358.534680][T10678] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 358.534702][T10678] ? lockdep_hardirqs_on+0x7a/0x110 [ 358.534722][T10678] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 358.534743][T10678] ? _mutex_lock_killable+0x152/0x1d0 [ 358.534775][T10678] ? kvm_vcpu_ioctl+0x283/0xfe0 [ 358.534801][T10678] kvm_vcpu_ioctl+0xa65/0xfe0 [ 358.534830][T10678] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 358.534870][T10678] ? __fget_files+0x2a/0x420 [ 358.534890][T10678] ? __fget_files+0x2a/0x420 [ 358.534905][T10678] ? __fget_files+0x3a6/0x420 [ 358.534921][T10678] ? __fget_files+0x2a/0x420 [ 358.534939][T10678] ? bpf_lsm_file_ioctl+0x9/0x20 [ 358.534959][T10678] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 358.534984][T10678] __se_sys_ioctl+0xff/0x170 [ 358.535022][T10678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.535050][T10678] do_syscall_64+0x174/0x580 [ 358.535078][T10678] ? trace_irq_disable+0x3b/0x140 [ 358.535108][T10678] ? clear_bhb_loop+0x40/0x90 [ 358.535139][T10678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.535162][T10678] RIP: 0033:0x7fc13943ce59 [ 358.535177][T10678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.535192][T10678] RSP: 002b:00007fc13768e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.535209][T10678] RAX: ffffffffffffffda RBX: 00007fc1396b5fa0 RCX: 00007fc13943ce59 [ 358.535222][T10678] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 358.535232][T10678] RBP: 00007fc13768e090 R08: 0000000000000000 R09: 0000000000000000 [ 358.535242][T10678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.535254][T10678] R13: 00007fc1396b6038 R14: 00007fc1396b5fa0 R15: 00007ffded1eff48 [ 358.535280][T10678] [ 359.612104][T10708] netlink: 4344 bytes leftover after parsing attributes in process `syz.2.1693'. [ 359.618923][ T39] INFO: task syz.1.832:7898 blocked for more than 143 seconds. [ 359.618968][ T39] Tainted: G L syzkaller #0 [ 359.618983][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 359.619005][ T39] task:syz.1.832 state:D stack:22136 pid:7898 tgid:7896 ppid:5611 task_flags:0x400140 flags:0x00080002 [ 359.619081][ T39] Call Trace: [ 359.619093][ T39] [ 359.619114][ T39] __schedule+0x172b/0x5550 [ 359.619169][ T39] ? kasan_save[ 359.619169][ T39] ? kasan_save_free_info+0x46/0x50 [ 359.619225][ T39] ? __pfx___schedule+0x10/0x10 [ 359.619250][ T39] ? rt_mutex_slowlock_block+0x2e9/0x670 [ 359.619302][ T39] rt_mutex_schedule+0x76/0xf0 [ 359.619339][ T39] rt_mutex_slowlock_block+0x505/0x670 [ 359.619387][ T39] ? rt_mutex_slowlock_block+0x2e9/0x670 [ 359.619426][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 359.619543][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 359.619577][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 359.619611][ T39] ? snd_seq_ioctl+0x270/0x490 [ 359.619655][ T39] ? snd_seq_ioctl+0x270/0x490 [ 359.619698][ T39] ? snd_seq_ioctl+0x270/0x490 [ 359.619732][ T39] mutex_lock_nested+0x168/0x1d0 [ 359.619774][ T39] snd_seq_ioctl+0x270/0x490 [ 359.619826][ T39] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 359.619884][ T39] ? __fget_files+0x3a6/0x420 [ 359.619909][ T39] ? __fget_files+0x2a/0x420 [ 359.619938][ T39] ? bpf_lsm_file_ioctl+0x9/0x20 [ 359.619968][ T39] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 359.620060][ T39] __se_sys_ioctl+0xff/0x170 [ 359.620093][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.620121][ T39] do_syscall_64+0x174/0x580 [ 359.620158][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.638480][ T39] ? clear_bhb_loop+0x40/0x90 [ 359.638606][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.638681][ T39] RIP: 0033:0x7fb5a9c9ce59 [ 359.638735][ T39] RSP: 002b:00007fb5a7eee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.638809][ T39] RAX: ffffffffffffffda RBX: 00007fb5a9f15fa0 RCX: 00007fb5a9c9ce59 [ 359.638853][ T39] RDX: 0000200000000500 RSI: 00000000c08c5336 RDI: 0000000000000003 [ 359.639105][ T39] RBP: 00007fb5a9d32d6f R08: 0000000000000000 R09: 0000000000000000 [ 359.639148][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.639192][ T39] R13: 00007fb5a9f16038 R14: 00007fb5a9f15fa0 R15: 00007ffeb3328988 [ 359.639296][ T39] [ 359.639443][ T39] [ 359.639443][ T39] Showing all locks held in the system: [ 359.639477][ T39] 4 locks held by pr/legacy/17: [ 359.639520][ T39] #0: ffffffff8e3bd300 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250 [ 359.639673][ T39] #1: ffffffff8e2a4bf8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90 [ 359.641974][ T39] #2: ffffffff9a020cd8 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x178/0x1b50 [ 359.645635][ T39] #3: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 359.646054][ T39] 1 lock held by khungtaskd/39: [ 359.646095][ T39] #0: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 359.646358][ T39] 2 locks held by getty/5364: [ 359.646404][ T39] #0: ffff8880369fd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 359.646567][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x465/0x1490 [ 359.651172][ T39] 3 locks held by kworker/0:5/5702: [ 359.651213][ T39] #0: ffff88813fe56938 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 359.651393][ T39] #1: ffffc90004e07c40 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 359.653460][ T39] #2: ffff88802ac96210 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x23/0x120 [ 359.653637][ T39] 12 locks held by kworker/u8:16/5794: [ 359.653699][ T39] #0: ffff88805f780138 ((wq_completion)wg-kex-wg0#11){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 359.653840][ T39] #1: ffffc9000504fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 359.653991][ T39] #2: ffffffff8e261520 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 359.654159][ T39] #3: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 359.657769][ T39] #4: ffff88805ceca240 (&peer->endpoint_lock){++..}-{3:3}, at: wg_socket_send_skb_to_peer+0x6e/0x200 [ 359.657935][ T39] #5: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x277/0x4b0 [ 359.661222][ T39] #6: ffffffff8e261520 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 359.661428][ T39] #7: ffffffff8e3cb300 (rcu_read_lock_bh){....}-{1:3}, at: send6+0x255/0x910 [ 359.661595][ T39] #8: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 359.661731][ T39] #9: ffffffff8e261520 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 359.661899][ T39] #10: ffffffff8e3cb300 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b3/0x3900 [ 359.662053][ T39] #11: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550 [ 359.666274][ T39] 1 lock held by syz.1.832/7898: [ 359.666318][ T39] #0: ffff88805f463200 (&client->ioctl_mutex){+.+.}-{4:4}, at: snd_seq_ioctl+0x270/0x490 [ 359.666525][ T39] 1 lock held by syz.1.832/7905: [ 359.666558][ T39] #0: ffff88805f463200 (&client->ioctl_mutex){+.+.}-{4:4}, at: snd_seq_ioctl+0x270/0x490 [ 359.667711][ T39] 2 locks held by kworker/u8:64/10205: [ 359.667751][ T39] #0: ffff88801ae94138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 359.668146][ T39] #1: ffffc9000662fc40 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 359.668513][ T39] 2 locks held by kworker/u8:66/10207: [ 359.668546][ T39] #0: ffff88801ae94138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 359.668728][ T39] #1: ffffc90004c27c40 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 359.668906][ T39] 1 lock held by syz.2.1693/10707: [ 359.668949][ T39] #0: ffff888051ea9f30 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock_killable+0x1d/0x70 [ 359.672278][ T39] 10 locks held by syz.2.1693/10708: [ 359.672322][ T39] #0: ffffffff8e49e250 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 359.673154][ T39] #1: ffff888051ea9f30 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x184/0x1d70 [ 359.673313][ T39] #2: ffff88803f8b8430 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x272/0x1d70 [ 359.673475][ T39] #3: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 359.673646][ T39] #4: ffff888036faac58 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 359.675231][ T39] #5: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 359.675395][ T39] #6: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 359.675589][ T39] #7: ffff8880358c1298 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x5ae/0x5550 [ 359.676510][ T39] #8: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock_nested+0x1de/0x3f0 [ 359.676656][ T39] #9: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: page_table_check_set+0x126/0x510 [ 359.676814][ T39] [ 359.676834][ T39] ============================================= [ 359.676834][ T39] [ 359.676885][ T39] NMI backtrace for cpu 1 [ 359.676939][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 359.677016][ T39] Tainted: [L]=SOFTLOCKUP [ 359.677038][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 359.677080][ T39] Call Trace: [ 359.677102][ T39] [ 359.677131][ T39] dump_stack_lvl+0xe8/0x150 [ 359.677206][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 359.677278][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 359.677353][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 359.677427][ T39] sys_info+0x135/0x170 [ 359.677514][ T39] watchdog+0xfd3/0x1030 [ 359.677603][ T39] ? watchdog+0x1c9/0x1030 [ 359.677697][ T39] kthread+0x388/0x470 [ 359.677764][ T39] ? __pfx_watchdog+0x10/0x10 [ 359.677839][ T39] ? __pfx_kthread+0x10/0x10 [ 359.677908][ T39] ret_from_fork+0x514/0xb70 [ 359.677939][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 359.678078][ T39] ? __switch_to+0xc79/0x1410 [ 359.678162][ T39] ? __pfx_kthread+0x10/0x10 [ 359.678196][ T39] ret_from_fork_asm+0x1a/0x30 [ 359.678241][ T39] [ 359.678287][ T39] Sending NMI from CPU 1 to CPUs 0: [ 359.678330][ C0] NMI backtrace for cpu 0 [ 359.678348][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 359.678374][ C0] Tainted: [L]=SOFTLOCKUP [ 359.678382][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 359.678394][ C0] RIP: 0010:io_serial_out+0x7c/0xc0 [ 359.678421][ C0] Code: 24 78 fc 44 89 f9 d3 e5 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5c fc e3 fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1 [ 359.678438][ C0] RSP: 0018:ffffc90000167a50 EFLAGS: 00000202 [ 359.678454][ C0] RAX: 0000000000000020 RBX: 0000000000000020 RCX: 0000000000000000 [ 359.678467][ C0] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000000 [ 359.678478][ C0] RBP: 00000000000003f8 R08: 0000000000000000 R09: 0000000000000000 [ 359.678490][ C0] R10: dffffc0000000000 R11: ffffffff854da6b0 R12: dffffc0000000000 [ 359.678506][ C0] R13: dffffc0000000000 R14: ffffffff9a020d00 R15: 0000000000000000 [ 359.678520][ C0] FS: 0000000000000000(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 359.678535][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.678548][ C0] CR2: 0000200000003000 CR3: 000000005a928000 CR4: 00000000003526f0 [ 359.678565][ C0] Call Trace: [ 359.678573][ C0] [ 359.678583][ C0] serial8250_console_write+0x1215/0x1b50 [ 359.678615][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 359.678640][ C0] ? console_flush_one_record+0xfa/0xb90 [ 359.678666][ C0] ? console_flush_one_record+0x48f/0xb90 [ 359.678691][ C0] console_flush_one_record+0x68b/0xb90 [ 359.678718][ C0] ? console_flush_one_record+0xfa/0xb90 [ 359.678745][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 359.678769][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 359.678796][ C0] legacy_kthread_func+0x1b6/0x250 [ 359.678820][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 359.678842][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 359.678865][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 359.678888][ C0] kthread+0x388/0x470 [ 359.678908][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 359.678930][ C0] ? __pfx_kthread+0x10/0x10 [ 359.678954][ C0] ret_from_fork+0x514/0xb70 [ 359.678977][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 359.679006][ C0] ? __switch_to+0xc79/0x1410 [ 359.679025][ C0] ? __pfx_kthread+0x10/0x10 [ 359.679046][ C0] ret_from_fork_asm+0x1a/0x30 [ 359.679078][ C0] [ 359.687007][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 359.687099][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 359.687193][ T39] Tainted: [L]=SOFTLOCKUP [ 359.687215][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 359.687256][ T39] Call Trace: [ 359.687279][ T39] [ 359.687309][ T39] vpanic+0x56c/0xa60 [ 359.687411][ T39] ? __pfx___schedule+0x10/0x10 [ 359.687484][ T39] ? __pfx_vpanic+0x10/0x10 [ 359.687599][ T39] panic+0xc5/0xd0 [ 359.687686][ T39] ? __pfx_panic+0x10/0x10 [ 359.687789][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 359.687926][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 359.688011][ T39] watchdog+0x102c/0x1030 [ 359.688115][ T39] ? watchdog+0x1c9/0x1030 [ 359.688181][ T39] kthread+0x388/0x470 [ 359.688206][ T39] ? __pfx_watchdog+0x10/0x10 [ 359.688232][ T39] ? __pfx_kthread+0x10/0x10 [ 359.688259][ T39] ret_from_fork+0x514/0xb70 [ 359.688289][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 359.688316][ T39] ? __switch_to+0xc79/0x1410 [ 359.688341][ T39] ? __pfx_kthread+0x10/0x10 [ 359.688389][ T39] ret_from_fork_asm+0x1a/0x30 [ 359.688435][ T39] [ 359.689081][ T39] Kernel Offset: disabled