last executing test programs: 11.885807953s ago: executing program 1 (id=1980): socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB="0b000000070000000100010009000000"], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x4020940d, &(0x7f0000000440)={0x8, 0x0, 0x4}) 11.02528986s ago: executing program 1 (id=1985): gettid() r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) fcntl$setownex(r1, 0xf, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000000)={0x0, 0x1, 0x4, "ca258391"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x110, 0xffffffffffffffff, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x3, @multicast2}}, {{0x2, 0xfffe, @broadcast}}}, 0x108) ftruncate(0xffffffffffffffff, 0x5) syz_usb_control_io$sierra_net(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x0, 0x7, 0x1a, {0x1a, 0x21, "8c0b999a372495c7fb664d37034f246f8f1dcb6339d99ae4"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41c}}}, &(0x7f0000001c00)={0x1c, &(0x7f0000000180)={0x0, 0x12, 0x32, "ec4bf423cc742a526fb0bf7e8462318e36d4e229c7d5ae8cce82d6babc292db6e5d144f1f344dad03d4a2f63abbd1ee7e633"}, &(0x7f0000001780)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000001bc0)={0x21, 0x0, 0x3, "01e216"}}) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffe7d}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x81, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, 0x1c) 7.499874235s ago: executing program 1 (id=2002): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040), 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2d, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x0, 0x5001) read$msr(r0, &(0x7f0000005580)=""/102384, 0x18ff0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) 7.36270062s ago: executing program 4 (id=2003): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000240)="fb4149dd053be3ac2cc4a22332a77b23b8898600087bb16c94a6ab80313804d92f00000000010000045a96383369d226270080ff000000000000000000a000", 0x0, 0xffa4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(0xffffffffffffffff, 0x80306e85, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) close(r7) 7.151764129s ago: executing program 3 (id=2004): signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x2000, 0x8, 0x10}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0xa0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$eventfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 5.144312001s ago: executing program 4 (id=2005): socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$netrom(0x6, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x600c81, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x178, 0x24, 0xd0f, 0x1ffbfd, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x3, 0x400, 0x9, 0x7d, 0x105, 0x86a4, 0xc40, 0x7fffffff, 0xfffffff9, 0x1f, 0xb, 0x16, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x3}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') read$FUSE(r4, &(0x7f0000003f80)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x10) r6 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r6, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (fail_nth: 5) 4.987120178s ago: executing program 3 (id=2006): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$media(0x0, 0x7fdffffe, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) getpgrp(0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x80080) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 4.986775811s ago: executing program 1 (id=2007): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() move_pages(0x0, 0x5, &(0x7f0000000040)=[&(0x7f000068a000/0x3000)=nil, &(0x7f0000443000/0x1000)=nil, &(0x7f0000b12000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000644000/0x4000)=nil], &(0x7f0000000180)=[0x1, 0x10000, 0x0, 0xf9], &(0x7f0000000380)=[0x0, 0x0], 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="e9735a4a24c1171b7d94f3009871b512f7382163", 0x14}], 0x1, 0xf) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000240)={{0x5, 0x0, 0x81, 0x1, 'syz0\x00', 0x8}, 0x2, 0x30, 0x9, r0, 0x3, 0x8001, 'syz1\x00', &(0x7f0000000000)=['^.\'+$\xaf\\\x00', '[^*%*[(\x00', '(\x00'], 0x12}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000080)=0x800002) read$dsp(r7, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) connect$can_bcm(r4, &(0x7f0000001ff0)={0x1d, r5}, 0x10) sendmsg$can_raw(r4, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0) 4.618228941s ago: executing program 3 (id=2008): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000000)='@#,G!@$\\[\x00', 0x2e0000, &(0x7f0000000040)={@_ha_fsid={[0x5, 0x68e]}, {0x9, 0x7, 0x71db, 0x4}}, 0x7fffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xd065}, {[0x3, 0xffffffff, 0x7fffffff, 0x8]}, 0xe5, 0x4a, &(0x7f0000000100)=""/74}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file2\x00'}) mkdirat(r2, &(0x7f0000000a00)='./file0/file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}], [], 0x2c}) read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x2020) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bc26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffab}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xfd, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x1, 0x4, 0xfffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x200], [0x0, 0x1004, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x242, 0x0, 0x8000, 0x0, 0x0, 0x1, 0x0, 0x2]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x58, &(0x7f0000000400)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x3, 0x2, 0x6, @empty, @local, 0x7, 0x8, 0x0, 0x5}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$tipc(0x1e, 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)="fbb06b2de35b0000000000", 0xb}], 0x1, 0x1) close(0xffffffffffffffff) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xea, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) 4.532628802s ago: executing program 0 (id=2009): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) write$hidraw(r1, &(0x7f0000000f00)="5bfd", 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x6d, &(0x7f0000000700)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0x7, 0x80, 0x7, "", [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x6, {{0xa, 0x24, 0x6, 0x0, 0x0, "0c5d92e76e"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x3, 0x3}, [@country_functional={0x6, 0x24, 0x7, 0x7f, 0x81}, @dmm={0x7, 0x24, 0x14, 0xaad, 0x5}, @obex={0x5, 0x24, 0x15, 0x3}, @mdlm_detail={0x4, 0x24, 0x13, 0xd}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xf7, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x5, 0x9}}}}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x250, 0x1, 0x1, 0x6, 0xff, 0xa}, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x2a, &(0x7f0000000ac0)=@string={0x2a, 0x3, "3c09b8c0a0764cdd7ed3ae40992fbd454de781c707630bbce96a6b76c455b3539e8a8c271ba7042e"}}, {0x2, &(0x7f0000000c00)=@string={0x2}}, {0x0, 0x0}]}) 4.450647372s ago: executing program 2 (id=2010): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead34", 0x52}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000700)=""/88, 0x58}, {&(0x7f0000000200)=""/86, 0x56}], 0x2}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r2, 0x10c, 0x0, &(0x7f0000000100)=0x8000, 0x4) 4.318458261s ago: executing program 3 (id=2011): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x2000000000000, 0x101301) rt_sigprocmask(0x1, &(0x7f0000000480)={[0x5]}, 0x0, 0x8) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x8e, 0xfffd, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x1ff, 0x30440) r2 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000000)={0x0, 0x800, 0x7e, 0x20203843, 0x3, [0x2], [0x800], [0x101, 0x6, 0x0, 0xb1e5]}) ioctl$MEDIA_REQUEST_IOC_REINIT(r3, 0x7c81, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'geneve0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000080)=0x100) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0x5bcd, 0x0) ioctl$DRM_IOCTL_GET_CAP(r9, 0xc010640c, &(0x7f0000000000)={0x14}) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0xfffffffffffffe35, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="ab02eaffffff02"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x44, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459d") 4.317967346s ago: executing program 4 (id=2012): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001180)={0x2020}, 0x2020) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x4}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x100) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000040)={r5, 0x0, 0xfffffffff0000000, 0x4000}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x10, 0x0, r5, 0x0, &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x12345}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r4, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1d, 0x3ff, 0xffff3b81, 0x0, 0x21000, 0x1, 0x4438, '\x00', r3, r6, 0x3, 0x3, 0x5}, 0x50) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r0, 0x26}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi4\x00', 0x20c400, 0x0) ioctl$COMEDI_RANGEINFO(r10, 0x80106408, &(0x7f0000000380)={0x5, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}]}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r7, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@float={0x5, 0x0, 0x0, 0x10, 0x4}, @ptr={0x0, 0x0, 0x0, 0xa}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x4e}, 0x28) 4.294362403s ago: executing program 2 (id=2013): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf250500000008000200080000ea"], 0x1c}, 0x1, 0x0, 0x0, 0x845}, 0x10) (fail_nth: 4) 4.178570855s ago: executing program 2 (id=2014): socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x4020940d, &(0x7f0000000440)={0x8, 0x0, 0x4}) 3.716237676s ago: executing program 4 (id=2015): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x7c1, &(0x7f0000000ac0)={{0x12, 0x1, 0x200, 0x75, 0x5d, 0x16, 0x40, 0x403, 0xdc00, 0x7fe9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7af, 0x3, 0x3, 0x4, 0x20, 0x6, "", [{{0x9, 0x4, 0xb2, 0x1, 0xf, 0x9, 0x76, 0x34, 0x4, [], [{{0x9, 0x5, 0x9, 0x10, 0x40, 0x9, 0xc6, 0x8}}, {{0x9, 0x5, 0x1, 0x8, 0x10, 0x8, 0xfc, 0x81}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0x1, 0x94, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xb7, 0x6}]}}, {{0x9, 0x5, 0x80, 0x3, 0x400, 0x9, 0x7, 0x10}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x12, 0x1, 0x2}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x92, 0x9, 0xe, [@generic={0x5f, 0x3, "17d2cd468d3cabee4814c0f4b34101ec81205c1cafd72177df4ca1cabb70a83e20fbe2f208c7945f0ae70be3fcc9563ccc64a5e17cabc2aff19b58dade9a5a76a8566aaf7500dc03e0a322fa55f927e9783e8054cdfc4afbb5fda3a92d"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x50, 0xef3}]}}, {{0x9, 0x5, 0xb, 0x1, 0x400, 0x1, 0x2, 0x4, [@generic={0x7b, 0x1, "1c4ca00a32a9cfb97029faa1dda7977bf207799b94ac995a08b1ef186dc4d71415060d528b6913bfa164bf9e0f9bb6b426b84f3d77588d9cc56a65f10cd2ea41819deea1c488ba8de0989848a6a16317fe1fc7da7f62164d54990f581837bf2a85542fa09e12af7c2593362b40be8448392788b182c0b62b64"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0xfd, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x100}]}}, {{0x9, 0x5, 0xc, 0x1, 0x200, 0xf, 0x8, 0x5}}, {{0x9, 0x5, 0x9, 0xc, 0x10, 0xc, 0xa, 0xbc, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xcf, 0x5}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x3, 0x2, 0xd}}, {{0x9, 0x5, 0x81, 0x0, 0x200, 0x5, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3ff}, @generic={0xee, 0xa, "7cd9112fea8598faa4d11c67517021bab0284ffd6cbf7c349ac8c411385dbb8cbb07ac4773b3fdb8976d0d86cc83cc774297436e4d278daef57ac2fbf64538e27b4f0c84ead5398da86041cace62bb76bd388207583e516846f15a29eb26fb982e2f3b8974d97cff8cb102b1d524d044b8719a8ec07fcd12853b11777b83e17473547556f5f472bc4ad2d61a25760ebe0cdee2050cb78912f27229a61c680c40fd0e6cb5bf10f47dedfd97adb2caae64d0663d11d4b4c8554b7afbdab60a90a539c324c3f0851909e8e6d4ae7a4681f0420ea1033f33773b0dd200070d8cdec1a0c03811a4cda63904bbd44d"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0xd, 0x8, 0x2}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x1, 0x3, 0x5}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x6, 0x9, 0xf}}]}}, {{0x9, 0x4, 0x86, 0x7d, 0xe, 0xc7, 0x60, 0xd7, 0x2, [], [{{0x9, 0x5, 0x2, 0x0, 0x10, 0x8, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0x81}]}}, {{0x9, 0x5, 0x77d1057a1999c418, 0xc, 0x3ff, 0xa0, 0xf8, 0xd5, [@generic={0xad, 0xf, "3fdb94fd1efea8f23e9de63b5d9a6670273dafdd91457047f71ab75ebf498adc52fb580e4fa0ecef15accf7d589372e327866b67f2fa4a0bcb5a78c0bee3da772d797c6863febf4ed78a8426bd18e13806581aa1d95e7ea3ce5870de84587d8f602dd9760b4f3818ff858136517ec8fd61edc85f5cf67ec849f852438cfed785438f4027a61831beee497d5ccf9b3d53fa3dde4e47c430a16976a53e6a8a6a80672d7fbe5b5c9b90ef5eff"}, @generic={0xc3, 0xf, "8dc2bc848cba263644e917c9d1680df4cbca350f99d058bbd0a6f93c2a03343df6f741abf32b4e97ff43a63ac006eb071d8707ee2eb002f370bc5cab23c425a5a519fb3fce124e00024773d523115bfbcabcf22b0e0c2cc7145ecb7f7ddd7b6408d79bfd35a4414fbb5f2dde1ee2c1cc705d5e58f582089133e1a0bdfe31c8524e03c25d37c1ecc7f4f366517fc1098c781f7b0d3d7ef5019428cb24d8869a2f3c79577cad4c6f3836f16c7cb19f436aef56a1b3ca1dca3227e815fdb65284f1ca"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0x7, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xfff6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x3, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x2}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x3, 0x9, 0x3}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x4, 0x3, 0x4, [@generic={0xd9, 0x21, "02e4499c06c7f61068b4931b7166b3a5bbfabfb9a37505c5cdc7067360bfa8fc32593f46d801297edd9c86b8b22145b0959498eefd80b6fc8915d51fed0c130029746a6df6d17f53593f2b7333882c3be796dfdaa62ed17b787964b31b974e3a224abb4a32aa95d057dda3ef4f21fb35c6e9abe5d528f17073f250b2ab92406be9136ecece518c8fefb69691766ae302dce0fde6120abe43aae2ecf1c3e504e3b49c29c0fee954c9a4a76828ae3c26e9aa403e3ce72126cdd3663c0aa81c4faa9171094a2022014b7ef85c28520f9aa9817ab13725338f"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x420, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xe}]}}, {{0x9, 0x5, 0x80, 0x4, 0x200, 0x3, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x32, 0x13f}]}}, {{0x9, 0x5, 0x9, 0x10, 0x1ff, 0x7d, 0x7, 0x70}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x21, 0x8, 0x4, [@generic={0x79, 0xb, "c07e5a8dbc6cb377090a922e71231804f99503c820d55b95c345f3e16f779f1def895f101a5ef3e7a7328a6882698720ff5e5c5f61e898f934dbc1465547ab939e92c89d755e086e0f0a3bcb89b8c1fc73197403b370de7f1c9fd4ba89035e1a5aa16edb0d15fb388503faf9f4c1af68cc65a09a171af0"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x8, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0xfffa}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x4}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x81, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe, 0x4}, @generic={0x3c, 0x30, "f389948d7f640981a6bc98c2ee21a2011825af4582a7805a630169b79ec020a142789dc7fec36ce75f352f7286017014ee25aa69342d0594a704"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x3, 0x40, 0x7}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0x75, 0x8, 0x9, [@generic={0x2b, 0x6, "8a501a7ac9fe5d7e4ed9f42705f7c9addce6e684946caf1a3cc4d818da15f3c668244c6c73babacdf4"}]}}]}}, {{0x9, 0x4, 0x43, 0xe, 0x4, 0xff, 0xff, 0xff, 0xa, [], [{{0x9, 0x5, 0xb, 0x10, 0x3bf, 0x6, 0x2, 0x1, [@generic={0x60, 0x23, "6921c4e4c04702a226e2352796e67a1eddb9bf415d91d1b27cc6ac09a78a362636801575b792fa67d93073e3bbc35da9001f0a5856e33d24b99ea582512e3c1b0f55aac8c8c7067b9f4393258402a6ef43304e0ed833c08cd77240ad4180"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x10, 0x1, 0x4, 0x5}}, {{0x9, 0x5, 0xc, 0x10, 0x3b7, 0x10, 0xd, 0x99, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x92}, @generic={0xaf, 0x2, "4db5d6391cafd0df0a0683584353a4ed43d36c1f2254ccc0d31bff891a8ba0147f48cd4a2f4f389967851c8c88659c620cc5fc4362e0e240973c4124e6cd4683f051ab4900d96fe7768cd521270dee0c29ec1803e14ecbb6fab362778c9f18c9f7a51a2a5f615f4b2d2f56046818216e76cad572f49d29aae9ed3133efa6b2d7574290448eb0a147f494408f62597d89c0eaf03aa923640e00ffeb4597143d2eb6c6e8a60e13c15ce566731ac4"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x400, 0xff, 0xb, 0x10}}]}}]}}]}}, &(0x7f00000015c0)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x300, 0x10, 0xf8, 0x9, 0x20}, 0x82, &(0x7f0000001300)={0x5, 0xf, 0x82, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "6f2b28409f6053e8762362469d6ddd5f"}, @generic={0x66, 0x10, 0x2, "9a3b5fb81ffdb21d87fb9bcacf202bd7589b4aca0197c4046b657c8da259d573d92a496576ad47567de8bee52099e418136e4c45e2a1315acabca640b63d7d85b40ea6afcd417f1a7d392202c0c2874c6603dd6e43f9deaaa6a5919fe470c038f5a4cd"}, @ptm_cap={0x3}]}, 0x4, [{0xcc, &(0x7f00000013c0)=@string={0xcc, 0x3, "b16de1c2e51fac7de1550a69b87901d665fca46cf6128721234242c7bf4048d768c6b9f563cf90314439f8dcfadc2aadbeb2659bd4b18171585e47a17ca3c665f33c961ce4c35be85b2522a0ba90f862f2f1fd599c9bb9b590c8150651d6380b464c61a33ff1121bb3d807a57f925eb6c6abed40325731b72e305587e9232cea5924729dea0e82e0aab4711ace324b05436e49ecb20792d573639de9563e74549d70c411417241ec719f17093e5a40e5c9b2cd4420b9d65a8c813354f4329d1832595cdada06a31e9850"}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x843}}, {0x55, &(0x7f0000001500)=@string={0x55, 0x3, "1d34c33e2b50e824899d1d61938489a99ca808da6683e941083408d93681098fd27cb63c76d5c9166a320b41f4aba96d039bd5860d003c8c97a3b1d0355e336d2f1f85ecc8cb973fd9a00ec471259084f9f3d6"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x804}}]}) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000000)={0xfffffffe, 0x2, 0x3}) 3.255968743s ago: executing program 2 (id=2016): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0xfffffffffffffe35, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x22, 0x5, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x44, &(0x7f00000002c0)="b9425b41651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459d") 3.153399817s ago: executing program 1 (id=2017): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040), 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2d, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x0, 0x5001) read$msr(r0, &(0x7f0000005580)=""/102384, 0x18ff0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) 2.166930434s ago: executing program 0 (id=2018): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$media(0x0, 0x7fdffffe, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) getpgrp(0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x80080) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 2.061065435s ago: executing program 1 (id=2019): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x9, 0x34f081) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) close(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) sched_setattr(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_newrule={0x28, 0x20, 0xf4db158ec847dc8d, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1f}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x44004) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) 1.950236591s ago: executing program 0 (id=2020): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') syz_usb_connect$uac2(0x6, 0x7b, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xc5, &(0x7f0000000240)=ANY=[@ANYBLOB="c50316919eb9af6f9e1fb2910db601f19a1c1bb6907199e34818ce5be558f976ddc548321d0bb0d04812519c005375cf0be57ad1be1bbb54e88a9b2c1119c9426f517e58213195e2cffbf78526633383aad12166f3be8491d3521dd849ade72d5effea93dd9cea871af0831ae1397f03f5204f214f3f5a43afee008ffa3be635aa8c91f1d9ba269280b753f5c71e9e95dc7b3ea7a0f0d64b3b3faf0796e712827583a8514e134992ef185c074ff23db73e1b878e38577923b9684a0f60534326ed8a8133fd"]}]}) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) r1 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x200, 0xffffffff, 0x2}) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0xc004) syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffff6, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f0000000000)) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000001240)={0x37c, 0x6, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r6 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f00000000c0)=0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r7, 0xc0844123, 0x0) 1.345610703s ago: executing program 0 (id=2021): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000000)='@#,G!@$\\[\x00', 0x2e0000, &(0x7f0000000040)={@_ha_fsid={[0x5, 0x68e]}, {0x9, 0x7, 0x71db, 0x4}}, 0x7fffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xd065}, {[0x3, 0xffffffff, 0x7fffffff, 0x8]}, 0xe5, 0x4a, &(0x7f0000000100)=""/74}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file2\x00'}) mkdirat(r2, &(0x7f0000000a00)='./file0/file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}], [], 0x2c}) read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x2020) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bc26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffab}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xfd, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x1, 0x4, 0xfffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x200], [0x0, 0x1004, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x242, 0x0, 0x8000, 0x0, 0x0, 0x1, 0x0, 0x2]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x58, &(0x7f0000000400)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x3, 0x2, 0x6, @empty, @local, 0x7, 0x8, 0x0, 0x5}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$tipc(0x1e, 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)="fbb06b2de35b0000000000", 0xb}], 0x1, 0x1) close(0xffffffffffffffff) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xea, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) 728.292476ms ago: executing program 0 (id=2022): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="330520000a00160001007ef52f555f2ab34eb67eabe2dffebf30f8784f997bea54fefe7117599e7dae76", 0x2a, 0x801, 0x0, 0x0) sendmsg$can_j1939(r0, 0x0, 0x48041) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x12c, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x21e72e76, @empty, 0xb}}, 0x3, 0x0, 0x318, 0x1, 0x24}, 0x9c) 671.566324ms ago: executing program 3 (id=2023): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x53, &(0x7f0000000480)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "04cd93f462b548e44c0fd7d659dac420"}]}}, {"acdbed980054d2bd3d"}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18004095"], &(0x7f0000000300)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002d80)={r2, r1, 0x25, 0x8, @void}, 0x10) 586.298677ms ago: executing program 2 (id=2024): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4f24, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000440)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @empty=0xe0000001}, {0x4e22, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 515.681399ms ago: executing program 4 (id=2025): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=@delchain={0x24, 0x65, 0x101, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xffff, 0xffe0}, {0xfff1, 0xfff3}, {0x7, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000805}, 0x4c840) 285.400214ms ago: executing program 0 (id=2026): socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x4020940d, &(0x7f0000000440)={0x8, 0x0, 0x4}) 142.664698ms ago: executing program 3 (id=2027): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x2b, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r2], 0x40}}, 0x0) r4 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, &(0x7f0000000700)={0x1c, &(0x7f00000001c0)={0x40, 0xd}, 0x0, 0x0}) syz_usb_control_io(r4, &(0x7f0000000640)={0x2c, &(0x7f0000000400)={0x20, 0x8, 0xae, {0xae, 0x5, "091b4fc53e33166c49345f47e01f2267792b6f23789f4b4ac4f25c82c747e5b068cb7ff8d32f73a35895100500e0ff72e2853a6eeb3d2004fff88ae6d8d7cf1d3a551a100462ddc981582c1337fcf49237dd4136b398f0dc7801bc2cd267172dfb2b9b3e8964c461e4a864433f3cf883ba2df5deb5cc420c68f788d9e9ddc56a9985517b00828adb8d4ad11569aba81374df23144e7fac682ce294497e7e3ae13b7ea11d74a56c37b7938313"}}, &(0x7f00000004c0)={0x0, 0x3, 0x3d, @string={0x3d, 0x3, "7090ecf2cc6fce3f6f499c2546461aac977ece00d997f06da8b4713475361f346fc80bf0e9ffb56add4c7e5e7458a11ad9961c5ad04f54649c0fea"}}, &(0x7f0000000540)={0x0, 0xf, 0xb, {0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}}, &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x8, 0x1, 0xf2, 'Vq_w', "c206096c"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x1, 0xc, 0xd, 0xe3, 0x0, 0x3}}}, &(0x7f0000000cc0)={0x84, &(0x7f0000000680)={0x0, 0x12, 0x1f, "419e723a917aa7b17a4fd6456cccab8f08253d1500641cacb833e53e7036ba"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0xe0, 0x20}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x43}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "125c"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x3ff}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @random="785b30b0f5fe"}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "a0b6"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0xc0}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0xe}}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) r6 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r5, &(0x7f0000000500), &(0x7f0000000280)=@tcp6=r6, 0x2}, 0x20) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r7, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c000780080006"], 0x5c}}, 0x20084884) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 101.888649ms ago: executing program 2 (id=2028): ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18, 0x20008840}, 0x48004) read$alg(r1, &(0x7f0000000000)=""/3, 0x3) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x8884}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0xc000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b04000000000000000002000000300004801c0001800b00010087b33bcc97736f636b657400000c000280080002400000000310000180080001006e617400040002"], 0x6c}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x8, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x48}, 0x50) close(0x3) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000004000000e27f00000100000001000000", @ANYRES32, @ANYBLOB="ff60fe0000000000000000000000000000000000fe5611393790285cde9b2b6e9df031541ad77a21c5f8faff352a50fececcbb2ef8b793864250b3d786a7afae1fef6bb513a2bef0dd16818d6187e4b0c16f7fab0d95084fc7cb4e588bb363804d35828b8d0e4f65364a03000b1ab741afd7e88f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) chdir(&(0x7f0000000080)='./file1\x00') 0s ago: executing program 4 (id=2029): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040), 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2d, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x0, 0x5001) read$msr(r0, &(0x7f0000005580)=""/102384, 0x18ff0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) kernel console output (not intermixed with test programs): i4: command 0x0406 tx timeout [ 436.055560][T10223] veth0_macvtap: entered promiscuous mode [ 436.104324][T10696] veth1_to_batadv: entered allmulticast mode [ 436.139053][T10696] pim6reg: entered allmulticast mode [ 436.140199][T10223] veth1_macvtap: entered promiscuous mode [ 436.246505][ T5784] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 436.250457][T10223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.390409][T10223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.395852][T10703] FAULT_INJECTION: forcing a failure. [ 436.395852][T10703] name failslab, interval 1, probability 0, space 0, times 0 [ 436.395889][T10703] CPU: 1 UID: 0 PID: 10703 Comm: syz.0.1646 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 436.395917][T10703] Tainted: [L]=SOFTLOCKUP [ 436.395924][T10703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 436.395936][T10703] Call Trace: [ 436.395945][T10703] [ 436.395954][T10703] dump_stack_lvl+0xe8/0x150 [ 436.395989][T10703] should_fail_ex+0x46b/0x600 [ 436.396022][T10703] should_failslab+0xa8/0x100 [ 436.396047][T10703] kmem_cache_alloc_noprof+0x87/0x680 [ 436.396084][T10703] ? skb_clone+0x212/0x3a0 [ 436.396114][T10703] skb_clone+0x212/0x3a0 [ 436.396143][T10703] __netlink_deliver_tap+0x404/0x850 [ 436.396186][T10703] ? netlink_deliver_tap+0x2e/0x1b0 [ 436.396218][T10703] netlink_deliver_tap+0x19c/0x1b0 [ 436.396252][T10703] netlink_unicast+0x805/0x9f0 [ 436.396291][T10703] ? __pfx_netlink_unicast+0x10/0x10 [ 436.396323][T10703] ? netlink_sendmsg+0x650/0xb40 [ 436.396352][T10703] ? skb_put+0x11b/0x210 [ 436.396378][T10703] netlink_sendmsg+0x813/0xb40 [ 436.396420][T10703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.396455][T10703] ? unwind_get_return_address+0x4d/0x90 [ 436.396484][T10703] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 436.396519][T10703] ____sys_sendmsg+0x94c/0x9c0 [ 436.396553][T10703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.396590][T10703] ? import_iovec+0x73/0xa0 [ 436.396615][T10703] ___sys_sendmsg+0x2a5/0x360 [ 436.396648][T10703] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.396723][T10703] ? __fget_files+0x2a/0x420 [ 436.396749][T10703] ? __fget_files+0x3a6/0x420 [ 436.396787][T10703] __x64_sys_sendmsg+0x1c3/0x2a0 [ 436.396816][T10703] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 436.396853][T10703] ? __pfx_ksys_write+0x10/0x10 [ 436.396897][T10703] do_syscall_64+0x14d/0xf80 [ 436.396919][T10703] ? trace_irq_disable+0x3b/0x150 [ 436.396941][T10703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.396962][T10703] ? clear_bhb_loop+0x40/0x90 [ 436.396986][T10703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.397006][T10703] RIP: 0033:0x7f8f7f86c819 [ 436.397026][T10703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.397044][T10703] RSP: 002b:00007f8f7dac6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.397066][T10703] RAX: ffffffffffffffda RBX: 00007f8f7fae5fa0 RCX: 00007f8f7f86c819 [ 436.397081][T10703] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 436.397095][T10703] RBP: 00007f8f7dac6090 R08: 0000000000000000 R09: 0000000000000000 [ 436.397108][T10703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.397119][T10703] R13: 00007f8f7fae6038 R14: 00007f8f7fae5fa0 R15: 00007ffeabda3b48 [ 436.397154][T10703] [ 436.400148][T10703] netlink: 'syz.0.1646': attribute type 39 has an invalid length. [ 436.455504][ T5784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.455538][ T5784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.455574][ T5784] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 436.455596][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.478422][ T5784] usb 3-1: config 0 descriptor?? [ 436.920194][ T5784] hid_parser_main: 369 callbacks suppressed [ 436.920224][ T5784] playstation 0003:054C:0BA0.0017: unknown main item tag 0x0 [ 436.920255][ T5784] playstation 0003:054C:0BA0.0017: unknown main item tag 0x0 [ 436.920282][ T5784] playstation 0003:054C:0BA0.0017: unknown main item tag 0x0 [ 436.920309][ T5784] playstation 0003:054C:0BA0.0017: unknown main item tag 0x0 [ 436.920334][ T5784] playstation 0003:054C:0BA0.0017: unknown main item tag 0x0 [ 436.920361][ T5784] playstation 0003:054C:0BA0.0017: unknown main item tag 0x0 [ 436.920386][ T5784] playstation 0003:054C:0BA0.0017: unknown main item tag 0x0 [ 436.956539][ T5784] playstation 0003:054C:0BA0.0017: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0 [ 437.067158][ T5112] Bluetooth: hci0: command 0x0405 tx timeout [ 437.107668][ T5784] playstation 0003:054C:0BA0.0017: Invalid reportID received, expected 18 got 109 [ 437.107702][ T5784] playstation 0003:054C:0BA0.0017: Failed to retrieve DualShock4 pairing info: -22 [ 437.107761][ T5784] playstation 0003:054C:0BA0.0017: Failed to get MAC address from DualShock4 [ 437.107777][ T5784] playstation 0003:054C:0BA0.0017: Failed to create dualshock4. [ 437.122297][ T5784] playstation 0003:054C:0BA0.0017: probe with driver playstation failed with error -22 [ 437.278410][T10696] lo speed is unknown, defaulting to 1000 [ 437.279274][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.291392][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.294443][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.294963][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.332076][ T5987] usb 3-1: USB disconnect, device number 34 [ 437.496733][ T5124] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 437.704882][ T5124] usb 2-1: unable to get BOS descriptor or descriptor too short [ 437.709277][ T5124] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.709304][ T5124] usb 2-1: config 0 has no interfaces? [ 437.743267][ T5124] usb 2-1: string descriptor 0 read error: -22 [ 437.743424][ T5124] usb 2-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be [ 437.743450][ T5124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.800587][ T5124] usb 2-1: config 0 descriptor?? [ 437.866239][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 437.866279][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 437.866298][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 438.016686][ T5112] Bluetooth: hci4: command 0x0406 tx timeout [ 438.551945][T10740] pim6reg: entered allmulticast mode [ 438.611753][T10740] pim6reg: left allmulticast mode [ 439.095347][T10746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1654'. [ 439.109633][T10746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1654'. [ 440.164692][ T5112] Bluetooth: hci0: command 0x0405 tx timeout [ 440.164735][ T5112] Bluetooth: hci4: command 0x0406 tx timeout [ 440.954859][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.957437][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.435821][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.435847][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.948957][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.948982][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.177973][ T60] Bluetooth: hci0: command 0x0405 tx timeout [ 442.434543][T10766] netlink: 'syz.3.1533': attribute type 15 has an invalid length. [ 443.576331][ T31] usb 2-1: USB disconnect, device number 30 [ 444.476432][ T5124] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 444.676143][ T5124] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 444.676183][ T5124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 444.713525][ T5124] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 444.713560][ T5124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.713582][ T5124] usb 4-1: Product: syz [ 444.713597][ T5124] usb 4-1: Manufacturer: syz [ 444.713612][ T5124] usb 4-1: SerialNumber: syz [ 444.819892][ T5124] usb 4-1: config 0 descriptor?? [ 445.351971][T10814] FAULT_INJECTION: forcing a failure. [ 445.351971][T10814] name failslab, interval 1, probability 0, space 0, times 0 [ 445.352010][T10814] CPU: 0 UID: 0 PID: 10814 Comm: syz.3.1666 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 445.352039][T10814] Tainted: [L]=SOFTLOCKUP [ 445.352047][T10814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 445.352059][T10814] Call Trace: [ 445.352067][T10814] [ 445.352077][T10814] dump_stack_lvl+0xe8/0x150 [ 445.352113][T10814] should_fail_ex+0x46b/0x600 [ 445.352146][T10814] should_failslab+0xa8/0x100 [ 445.352170][T10814] __kmalloc_noprof+0xdf/0x7b0 [ 445.352189][T10814] ? kfree+0x4d/0x6c0 [ 445.352217][T10814] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 445.352243][T10814] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 445.352269][T10814] tomoyo_realpath_from_path+0xe3/0x5d0 [ 445.352310][T10814] tomoyo_check_open_permission+0x229/0x470 [ 445.352334][T10814] ? tomoyo_check_open_permission+0x1d3/0x470 [ 445.352356][T10814] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 445.352414][T10814] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 445.352448][T10814] ? tomoyo_file_open+0x167/0x220 [ 445.352481][T10814] security_file_open+0xa9/0x240 [ 445.352506][T10814] do_dentry_open+0x4c0/0x13e0 [ 445.352536][T10814] ? vfs_open+0x31/0x350 [ 445.352566][T10814] vfs_open+0x3b/0x350 [ 445.352587][T10814] ? path_openat+0x2e2b/0x38a0 [ 445.352621][T10814] path_openat+0x2e43/0x38a0 [ 445.352688][T10814] ? __pfx_path_openat+0x10/0x10 [ 445.352718][T10814] ? __lock_acquire+0x6b5/0x2cf0 [ 445.352742][T10814] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 445.352782][T10814] ? do_raw_spin_lock+0x12b/0x2f0 [ 445.352821][T10814] do_file_open+0x23e/0x4a0 [ 445.352851][T10814] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 445.352879][T10814] ? __pfx_do_file_open+0x10/0x10 [ 445.352908][T10814] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 445.352970][T10814] ? alloc_fd+0x64e/0x6c0 [ 445.353008][T10814] do_sys_openat2+0x113/0x200 [ 445.353036][T10814] ? __pfx_do_sys_openat2+0x10/0x10 [ 445.353063][T10814] ? ksys_write+0x248/0x270 [ 445.353096][T10814] ? __pfx_ksys_write+0x10/0x10 [ 445.353131][T10814] __x64_sys_openat+0x138/0x170 [ 445.353163][T10814] do_syscall_64+0x14d/0xf80 [ 445.353185][T10814] ? trace_irq_disable+0x3b/0x150 [ 445.353209][T10814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.353231][T10814] ? clear_bhb_loop+0x40/0x90 [ 445.353256][T10814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.353276][T10814] RIP: 0033:0x7f88546bd04e [ 445.353297][T10814] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 445.353314][T10814] RSP: 002b:00007f8852955b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 445.353337][T10814] RAX: ffffffffffffffda RBX: 00007f88529566c0 RCX: 00007f88546bd04e [ 445.353353][T10814] RDX: 00000000008c4201 RSI: 00007f8852955c00 RDI: ffffffffffffff9c [ 445.353367][T10814] RBP: 00007f8852955c00 R08: 0000000000000000 R09: 0000000000000000 [ 445.353381][T10814] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 445.353395][T10814] R13: 00007f8854976038 R14: 00007f8854975fa0 R15: 00007ffeabc44218 [ 445.353430][T10814] [ 445.353439][T10814] ERROR: Out of memory at tomoyo_realpath_from_path. [ 446.308202][ T5112] Bluetooth: hci0: command 0x0405 tx timeout [ 446.653637][ T5124] usb 4-1: USB disconnect, device number 14 [ 446.969763][ T7171] udevd[7171]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.063751][T10855] netlink: 'syz.3.1678': attribute type 8 has an invalid length. [ 450.336379][ T5986] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 450.486304][ T31] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 450.516820][ T5986] usb 4-1: Using ep0 maxpacket: 32 [ 450.519252][ T5986] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 450.519280][ T5986] usb 4-1: config 0 has no interface number 0 [ 450.519331][ T5986] usb 4-1: config 0 interface 184 has no altsetting 0 [ 450.522497][ T5986] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 450.522529][ T5986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.522551][ T5986] usb 4-1: Product: syz [ 450.522567][ T5986] usb 4-1: Manufacturer: syz [ 450.522584][ T5986] usb 4-1: SerialNumber: syz [ 450.586834][ T5986] usb 4-1: config 0 descriptor?? [ 450.706343][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 450.720615][ T31] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 450.720645][ T31] usb 5-1: config 1 has no interface number 0 [ 450.720703][ T31] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 450.720728][ T31] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 450.720750][ T31] usb 5-1: config 1 interface 105 has no altsetting 0 [ 450.729184][ T31] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 450.729216][ T31] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 450.729238][ T31] usb 5-1: Product: syz [ 450.729253][ T31] usb 5-1: Manufacturer: syz [ 450.729266][ T31] usb 5-1: SerialNumber: syz [ 450.749750][T10865] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 450.749948][T10865] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 451.381212][T10865] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 451.381439][T10865] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 452.468455][ T31] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 452.468947][ T31] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 452.540513][ T5986] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 452.540548][ T5986] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 452.541122][ T5986] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 452.541148][ T5986] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 452.541169][ T5986] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 452.541188][ T5986] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 452.541527][ T5986] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 452.550036][ T5986] usb 4-1: USB disconnect, device number 15 [ 452.631021][ T31] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 8a:0b:2a:ae:dc:34 [ 452.682446][ T31] usb 5-1: USB disconnect, device number 35 [ 452.750859][ T31] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 452.917244][ T31] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 452.917397][ T31] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 452.917534][ T31] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 453.248827][T10887] FAULT_INJECTION: forcing a failure. [ 453.248827][T10887] name failslab, interval 1, probability 0, space 0, times 0 [ 453.248870][T10887] CPU: 0 UID: 0 PID: 10887 Comm: syz.4.1687 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 453.248915][T10887] Tainted: [L]=SOFTLOCKUP [ 453.248923][T10887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 453.248934][T10887] Call Trace: [ 453.248943][T10887] [ 453.248953][T10887] dump_stack_lvl+0xe8/0x150 [ 453.248991][T10887] should_fail_ex+0x46b/0x600 [ 453.249027][T10887] should_failslab+0xa8/0x100 [ 453.249052][T10887] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 453.249083][T10887] ? __alloc_skb+0x1d0/0x7d0 [ 453.249103][T10887] ? lockdep_hardirqs_on+0x7a/0x110 [ 453.249134][T10887] __alloc_skb+0x1d0/0x7d0 [ 453.249162][T10887] __pskb_copy_fclone+0xaa/0xff0 [ 453.249205][T10887] hwsim_hw_xmit+0x427/0x1630 [ 453.249240][T10887] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 453.249264][T10887] ? hwsim_hw_xmit+0xec/0x1630 [ 453.249291][T10887] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 453.249322][T10887] ? __pfx_hwsim_hw_xmit+0x10/0x10 [ 453.249349][T10887] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 453.249385][T10887] ? rt_spin_unlock+0x14f/0x200 [ 453.249420][T10887] ? rt_spin_unlock+0x160/0x200 [ 453.249453][T10887] ieee802154_tx+0x26d/0x510 [ 453.249483][T10887] ieee802154_subif_start_xmit+0x110/0x190 [ 453.249512][T10887] dev_hard_start_xmit+0x2f2/0x8b0 [ 453.249562][T10887] sch_direct_xmit+0x251/0x4c0 [ 453.249599][T10887] ? __pfx_sch_direct_xmit+0x10/0x10 [ 453.249629][T10887] ? rcu_irq_exit_check_preempt+0x200/0x210 [ 453.249654][T10887] ? rt_spin_trylock+0x13a/0x2b0 [ 453.249690][T10887] __dev_queue_xmit+0x1582/0x39b0 [ 453.249729][T10887] ? __dev_queue_xmit+0x27d/0x39b0 [ 453.249773][T10887] ? __might_fault+0xaf/0x130 [ 453.249796][T10887] ? __pfx___dev_queue_xmit+0x10/0x10 [ 453.249825][T10887] ? _copy_from_iter+0x2d3/0x1670 [ 453.249873][T10887] ? __pfx__copy_from_iter+0x10/0x10 [ 453.249921][T10887] ? dev_getfirstbyhwtype+0x24/0x280 [ 453.249951][T10887] ? dev_getfirstbyhwtype+0x24/0x280 [ 453.249978][T10887] ? dev_getfirstbyhwtype+0x24/0x280 [ 453.250023][T10887] dgram_sendmsg+0x746/0xe80 [ 453.250059][T10887] ? __pfx_dgram_sendmsg+0x10/0x10 [ 453.250084][T10887] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 453.250117][T10887] ? __kernel_text_address+0xd/0x30 [ 453.250151][T10887] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 453.250189][T10887] ____sys_sendmsg+0x94c/0x9c0 [ 453.250221][T10887] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.250259][T10887] ? import_iovec+0x73/0xa0 [ 453.250286][T10887] ___sys_sendmsg+0x2a5/0x360 [ 453.250310][T10887] ? get_pid_task+0x20/0x1f0 [ 453.250339][T10887] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.250394][T10887] ? sb_end_write+0xe9/0x1c0 [ 453.250438][T10887] ? __pfx_vfs_write+0x10/0x10 [ 453.250484][T10887] __x64_sys_sendmsg+0x1c3/0x2a0 [ 453.250512][T10887] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 453.250552][T10887] ? __pfx_ksys_write+0x10/0x10 [ 453.250597][T10887] do_syscall_64+0x14d/0xf80 [ 453.250621][T10887] ? trace_irq_disable+0x3b/0x150 [ 453.250645][T10887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.250668][T10887] ? clear_bhb_loop+0x40/0x90 [ 453.250696][T10887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.250718][T10887] RIP: 0033:0x7f2e6016c819 [ 453.250739][T10887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.250755][T10887] RSP: 002b:00007f2e5e3be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.250777][T10887] RAX: ffffffffffffffda RBX: 00007f2e603e5fa0 RCX: 00007f2e6016c819 [ 453.250793][T10887] RDX: 0000000000008800 RSI: 0000200000000380 RDI: 0000000000000006 [ 453.250807][T10887] RBP: 00007f2e5e3be090 R08: 0000000000000000 R09: 0000000000000000 [ 453.250822][T10887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.250835][T10887] R13: 00007f2e603e6038 R14: 00007f2e603e5fa0 R15: 00007ffd12532b88 [ 453.250872][T10887] [ 454.184314][T10901] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1691'. [ 454.185072][T10901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1691'. [ 454.214202][ T5986] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 454.214294][ T5879] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 454.388415][ T5986] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 454.388449][ T5986] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 454.388469][ T5986] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 454.388519][ T5986] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 454.388535][ T5986] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 454.390688][ T5986] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 454.390717][ T5986] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 454.390738][ T5986] usb 5-1: Product: syz [ 454.390752][ T5986] usb 5-1: Manufacturer: syz [ 454.396301][ T5124] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 454.406255][ T7032] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 454.422536][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 454.422562][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 454.434149][ T5986] cdc_wdm 5-1:1.0: skipping garbage [ 454.434169][ T5986] cdc_wdm 5-1:1.0: skipping garbage [ 454.448142][ T5986] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 454.448166][ T5986] cdc_wdm 5-1:1.0: Unknown control protocol [ 454.537306][ T5124] usb 1-1: device descriptor read/64, error -71 [ 454.553361][ T5879] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 454.553395][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.553416][ T5879] usb 4-1: Product: syz [ 454.553432][ T5879] usb 4-1: Manufacturer: syz [ 454.553449][ T5879] usb 4-1: SerialNumber: syz [ 454.590352][ T7032] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 454.590405][ T7032] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.590432][ T7032] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.590455][ T7032] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 454.591971][ T7032] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 454.591998][ T7032] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 454.592020][ T7032] usb 3-1: Manufacturer: syz [ 454.672009][ T5879] usb 4-1: config 0 descriptor?? [ 454.822353][ T5124] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 454.933581][ T7032] usb 3-1: config 0 descriptor?? [ 455.189697][T10894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.192232][T10894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.661417][T10903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.667741][T10903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.701922][ T7032] usbhid 3-1:0.0: can't add hid device: -71 [ 455.703789][ T7032] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 455.752211][ T7032] usb 3-1: USB disconnect, device number 35 [ 455.991529][ T5879] usb 4-1: USB disconnect, device number 16 [ 456.365224][T10913] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1696'. [ 456.490546][ T7171] udevd[7171]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.831271][T10913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.910865][ T5124] usb 5-1: USB disconnect, device number 36 [ 457.097523][T10913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.116390][T10921] ALSA: mixer_oss: invalid OSS volume '' [ 457.116412][T10921] ALSA: mixer_oss: invalid OSS volume '[sRk»z‚1ö¸¼+µéeŒ¥Zu;þ' [ 457.116434][T10921] ALSA: mixer_oss: invalid OSS volume 'ú#F!c)±7š -!‹í6ÀÏP4€X1ßu•½' [ 457.116452][T10921] ALSA: mixer_oss: invalid OSS volume 'ÙÀmÙ—0 ¿¨2"\“d†Ð˽hž¹a1ö' [ 457.116468][T10921] ALSA: mixer_oss: invalid OSS volume 'ŒÇ]-Ù]„z‡QÂþTþÁ…·ÒëõÛøU€' [ 457.116489][T10921] ALSA: mixer_oss: invalid OSS volume 'ïqš„¥dÇhK‰À' [ 457.116504][T10921] ALSA: mixer_oss: invalid OSS volume '‰«f³|o`w¸øgÚ|z¼sÝ·N@æÎüŠ6fà' [ 457.116527][T10921] ALSA: mixer_oss: invalid OSS volume 'g·ÇÛïê' [ 457.116543][T10921] ALSA: mixer_oss: invalid OSS volume 'Hb0õ±rý2Q±6»§4Èd ép‹º¥ZoÈ×' [ 457.116583][T10921] ALSA: mixer_oss: invalid OSS volume 'Á‡¼Fm[°ì€#}ÝÃŽ¹r}[* ¥Â' [ 457.116594][T10921] ALSA: mixer_oss: invalid OSS volume 'ˆ›ËóO."†]šj#Hé)XÉU^¥˜ÄdäŽ' [ 457.116607][T10921] ALSA: mixer_oss: invalid OSS volume 'æŒ)ÂQÎk·' [ 457.116621][T10921] ALSA: mixer_oss: invalid OSS volume '[†©B,Ÿ»PôßVó­#ÆìbjVÚf-r*'Z–' [ 457.116634][T10921] ALSA: mixer_oss: invalid OSS volume 'öµÉw¿Þ‰F6FlCÄœ£·´J瀹FÓ=¹Ž' [ 457.116653][T10921] ALSA: mixer_oss: invalid OSS volume 'Š3j+ä鼺ÍJÁr•ðâs Í' [ 457.116667][T10921] ALSA: mixer_oss: invalid OSS volume ' Ü7öñÁ=²8&ãu›l:u7*;|V¹øAð+s¸4½' [ 457.116685][T10921] ALSA: mixer_oss: invalid OSS volume '‹ºä[+TxŸö=y’ 4hhMÁSŠé]šñ/(1©»' [ 457.116710][T10921] ALSA: mixer_oss: invalid OSS volume 'UâØÏD·ÿ4n·' [ 457.116725][T10921] ALSA: mixer_oss: invalid OSS volume 'Б½*'fâœÔ]™Óft<ß+Oµ[•¥' [ 457.116739][T10921] ALSA: mixer_oss: invalid OSS volume '䧼­%Ã' [ 457.209037][T10913] bond0 (unregistering): Released all slaves [ 459.366242][ T5879] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 459.519639][ T5879] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 459.519708][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.519737][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.519762][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 459.521388][ T5879] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 459.521418][ T5879] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 459.521441][ T5879] usb 5-1: Manufacturer: syz [ 459.532393][ T5879] usb 5-1: config 0 descriptor?? [ 459.536334][ T5876] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 459.732259][ T5876] usb 2-1: Invalid ep0 maxpacket: 64 [ 459.866339][T10954] FAULT_INJECTION: forcing a failure. [ 459.866339][T10954] name failslab, interval 1, probability 0, space 0, times 0 [ 459.866414][T10954] CPU: 1 UID: 0 PID: 10954 Comm: syz.0.1710 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 459.866445][T10954] Tainted: [L]=SOFTLOCKUP [ 459.866453][T10954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 459.866467][T10954] Call Trace: [ 459.866476][T10954] [ 459.866486][T10954] dump_stack_lvl+0xe8/0x150 [ 459.866525][T10954] should_fail_ex+0x46b/0x600 [ 459.866561][T10954] should_failslab+0xa8/0x100 [ 459.866588][T10954] __kmalloc_noprof+0xdf/0x7b0 [ 459.866607][T10954] ? __list_lru_init+0x528/0x600 [ 459.866633][T10954] ? __list_lru_init+0xbe/0x600 [ 459.866664][T10954] __list_lru_init+0xbe/0x600 [ 459.866700][T10954] alloc_super+0x8c5/0xac0 [ 459.866731][T10954] ? rt_spin_unlock+0x160/0x200 [ 459.866768][T10954] sget_fc+0x329/0xa40 [ 459.866801][T10954] ? __pfx_set_anon_super_fc+0x10/0x10 [ 459.866832][T10954] ? __pfx_dlmfs_fill_super+0x10/0x10 [ 459.866865][T10954] get_tree_nodev+0x2a/0x150 [ 459.866901][T10954] vfs_get_tree+0x92/0x2a0 [ 459.866925][T10954] vfs_cmd_create+0xa2/0x200 [ 459.866953][T10954] __se_sys_fsconfig+0x6cf/0x820 [ 459.866984][T10954] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 459.867022][T10954] ? __x64_sys_fsconfig+0x20/0xc0 [ 459.867048][T10954] do_syscall_64+0x14d/0xf80 [ 459.867074][T10954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.867098][T10954] ? clear_bhb_loop+0x40/0x90 [ 459.867126][T10954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.867147][T10954] RIP: 0033:0x7f8f7f86c819 [ 459.867170][T10954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.867189][T10954] RSP: 002b:00007f8f7da84028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 459.867213][T10954] RAX: ffffffffffffffda RBX: 00007f8f7fae6180 RCX: 00007f8f7f86c819 [ 459.867229][T10954] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 459.867243][T10954] RBP: 00007f8f7da84090 R08: 0000000000000000 R09: 0000000000000000 [ 459.867258][T10954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.867270][T10954] R13: 00007f8f7fae6218 R14: 00007f8f7fae6180 R15: 00007ffeabda3b48 [ 459.867307][T10954] [ 460.606594][ T5876] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 460.673446][T10955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.688955][T10955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.691729][ T5879] usbhid 5-1:0.0: can't add hid device: -71 [ 460.691866][ T5879] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 460.756843][ T5879] usb 5-1: USB disconnect, device number 37 [ 460.806800][ T5876] usb 2-1: Invalid ep0 maxpacket: 64 [ 460.807465][ T5876] usb usb2-port1: attempt power cycle [ 461.386290][ T5876] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 461.407112][ T5876] usb 2-1: Invalid ep0 maxpacket: 64 [ 461.502039][T10968] pim6reg: entered allmulticast mode [ 461.551234][ T5876] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 461.575694][ T5876] usb 2-1: Invalid ep0 maxpacket: 64 [ 461.581712][ T5876] usb usb2-port1: unable to enumerate USB device [ 462.727881][T10973] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.731722][T10973] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.516269][ T31] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 466.326260][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 466.329236][ T31] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 466.329266][ T31] usb 2-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 466.329337][ T31] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 466.329384][ T31] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 466.329409][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.378695][ T5879] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 466.530063][ T5879] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 466.530096][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.530155][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.530169][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 466.531322][ T5879] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 466.531404][ T5879] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 466.531418][ T5879] usb 5-1: Manufacturer: syz [ 466.592448][ T5879] usb 5-1: config 0 descriptor?? [ 466.756457][ T7032] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 466.906361][ T7032] usb 3-1: Using ep0 maxpacket: 8 [ 466.909870][ T7032] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 466.910495][ T7032] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.939911][ T7032] usb 3-1: config 0 descriptor?? [ 467.041428][ T5879] appleir 0003:05AC:8243.0018: unknown main item tag 0x0 [ 467.046983][ T7032] gm12u320 3-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 467.047620][ T7032] gm12u320 3-1:0.0: probe with driver gm12u320 failed with error -5 [ 467.095671][ T7032] usb-storage 3-1:0.0: USB Mass Storage device detected [ 467.148869][T11016] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 467.529739][T11003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.530331][T11003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.668071][ T7032] usb-storage 3-1:0.0: device ignored [ 467.981524][ T7032] usb 3-1: USB disconnect, device number 36 [ 468.092468][ T5879] appleir 0003:05AC:8243.0018: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 468.172868][ T5879] usb 5-1: USB disconnect, device number 38 [ 468.645370][T11023] fido_id[11023]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 469.353000][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1741'. [ 469.601316][T11044] FAULT_INJECTION: forcing a failure. [ 469.601316][T11044] name failslab, interval 1, probability 0, space 0, times 0 [ 469.601358][T11044] CPU: 0 UID: 0 PID: 11044 Comm: syz.4.1743 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 469.601386][T11044] Tainted: [L]=SOFTLOCKUP [ 469.601393][T11044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 469.601406][T11044] Call Trace: [ 469.601415][T11044] [ 469.601424][T11044] dump_stack_lvl+0xe8/0x150 [ 469.601460][T11044] should_fail_ex+0x46b/0x600 [ 469.601495][T11044] should_failslab+0xa8/0x100 [ 469.601517][T11044] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 469.601547][T11044] ? __alloc_skb+0x1d0/0x7d0 [ 469.601566][T11044] ? lockdep_hardirqs_on+0x7a/0x110 [ 469.601597][T11044] __alloc_skb+0x1d0/0x7d0 [ 469.601624][T11044] netlink_sendmsg+0x5d4/0xb40 [ 469.601676][T11044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.601710][T11044] ? unwind_get_return_address+0x4d/0x90 [ 469.601735][T11044] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 469.601770][T11044] ____sys_sendmsg+0x94c/0x9c0 [ 469.601803][T11044] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.601838][T11044] ? import_iovec+0x73/0xa0 [ 469.601863][T11044] ___sys_sendmsg+0x2a5/0x360 [ 469.601892][T11044] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.601954][T11044] ? __fget_files+0x2a/0x420 [ 469.601982][T11044] ? __fget_files+0x3a6/0x420 [ 469.602018][T11044] __x64_sys_sendmsg+0x1c3/0x2a0 [ 469.602047][T11044] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 469.602081][T11044] ? __pfx_ksys_write+0x10/0x10 [ 469.602126][T11044] do_syscall_64+0x14d/0xf80 [ 469.602149][T11044] ? trace_irq_disable+0x3b/0x150 [ 469.602173][T11044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.602193][T11044] ? clear_bhb_loop+0x40/0x90 [ 469.602218][T11044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.602240][T11044] RIP: 0033:0x7f2e6016c819 [ 469.602261][T11044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.602280][T11044] RSP: 002b:00007f2e5e3be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.602303][T11044] RAX: ffffffffffffffda RBX: 00007f2e603e5fa0 RCX: 00007f2e6016c819 [ 469.602319][T11044] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 469.602334][T11044] RBP: 00007f2e5e3be090 R08: 0000000000000000 R09: 0000000000000000 [ 469.602346][T11044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.602360][T11044] R13: 00007f2e603e6038 R14: 00007f2e603e5fa0 R15: 00007ffd12532b88 [ 469.602392][T11044] [ 469.645758][T11044] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1743'. [ 469.987489][T11049] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1746'. [ 470.166240][ T5986] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 470.531777][ T5986] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 470.531849][ T5986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.531878][ T5986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.531904][ T5986] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 470.582781][ T5986] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 470.582816][ T5986] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 470.582838][ T5986] usb 3-1: Manufacturer: syz [ 470.617865][ T5986] usb 3-1: config 0 descriptor?? [ 471.053825][ T5986] appleir 0003:05AC:8243.0019: unknown main item tag 0x0 [ 471.085699][ T5986] appleir 0003:05AC:8243.0019: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 471.206297][ T5124] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 471.476879][T11061] FAULT_INJECTION: forcing a failure. [ 471.476879][T11061] name failslab, interval 1, probability 0, space 0, times 0 [ 471.476958][T11061] CPU: 1 UID: 0 PID: 11061 Comm: syz.0.1750 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 471.476988][T11061] Tainted: [L]=SOFTLOCKUP [ 471.476996][T11061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 471.477008][T11061] Call Trace: [ 471.477018][T11061] [ 471.477028][T11061] dump_stack_lvl+0xe8/0x150 [ 471.477067][T11061] should_fail_ex+0x46b/0x600 [ 471.477103][T11061] should_failslab+0xa8/0x100 [ 471.477129][T11061] kmem_cache_alloc_noprof+0x87/0x680 [ 471.477162][T11061] ? io_submit_one+0x130/0x14c0 [ 471.477189][T11061] io_submit_one+0x130/0x14c0 [ 471.477214][T11061] ? irqentry_exit+0x59e/0x620 [ 471.477240][T11061] ? lockdep_hardirqs_on+0x7a/0x110 [ 471.477264][T11061] ? irqentry_exit+0x59e/0x620 [ 471.477287][T11061] ? trace_irq_disable+0x3b/0x150 [ 471.477320][T11061] ? __pfx_io_submit_one+0x10/0x10 [ 471.477359][T11061] ? __might_fault+0xaf/0x130 [ 471.477386][T11061] __se_sys_io_submit+0x195/0x340 [ 471.477420][T11061] ? __pfx___se_sys_io_submit+0x10/0x10 [ 471.477448][T11061] ? ksys_write+0x248/0x270 [ 471.477499][T11061] do_syscall_64+0x14d/0xf80 [ 471.477523][T11061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.477547][T11061] ? clear_bhb_loop+0x40/0x90 [ 471.477574][T11061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.477595][T11061] RIP: 0033:0x7f8f7f86c819 [ 471.477616][T11061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.477635][T11061] RSP: 002b:00007f8f7da84028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 471.477658][T11061] RAX: ffffffffffffffda RBX: 00007f8f7fae6180 RCX: 00007f8f7f86c819 [ 471.477674][T11061] RDX: 0000200000001180 RSI: 0000000000000002 RDI: 00007f8f80620000 [ 471.477689][T11061] RBP: 00007f8f7da84090 R08: 0000000000000000 R09: 0000000000000000 [ 471.477703][T11061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.477717][T11061] R13: 00007f8f7fae6218 R14: 00007f8f7fae6180 R15: 00007ffeabda3b48 [ 471.477752][T11061] [ 472.152647][ T5784] usb 3-1: USB disconnect, device number 37 [ 472.156292][ T5124] usb 5-1: Using ep0 maxpacket: 16 [ 472.237235][ T5124] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 472.237267][ T5124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.237286][ T5124] usb 5-1: Product: æ¿êµì‹Žèš«î†šãµåœ“ï… â—µæ§â†¦ä¿µåƒŽ [ 472.237301][ T5124] usb 5-1: Manufacturer: à ‡ [ 472.237315][ T5124] usb 5-1: SerialNumber: ဌ [ 472.353123][ T31] usb 2-1: USB disconnect, device number 35 [ 472.710326][T11064] fido_id[11064]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 473.209868][T11077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.210503][T11077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.319674][T11080] Bluetooth: MGMT ver 1.23 [ 473.353382][ T5124] usb 5-1: 1:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 473.353413][ T5124] usb 5-1: found format II with max.bitrate = 19, frame size=9 [ 473.353435][ T5124] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 473.353942][ T5124] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 473.354508][ T5124] usb 5-1: unit 2 not found! [ 473.586479][ T5124] usb 5-1: USB disconnect, device number 39 [ 473.613818][T11085] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1759'. [ 473.848039][ T31] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 473.905975][ T7173] udevd[7173]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.996233][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 474.001190][ T31] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 474.001219][ T31] usb 1-1: config 0 has no interface number 0 [ 474.001292][ T31] usb 1-1: config 0 interface 184 has no altsetting 0 [ 474.004414][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 474.004446][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.004467][ T31] usb 1-1: Product: syz [ 474.004612][ T31] usb 1-1: Manufacturer: syz [ 474.004629][ T31] usb 1-1: SerialNumber: syz [ 474.070895][ T31] usb 1-1: config 0 descriptor?? [ 474.138156][ T5784] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 474.996238][ T5784] usb 4-1: device descriptor read/64, error -71 [ 475.006296][ T5124] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 475.076268][ T5987] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 475.156369][ T5124] usb 2-1: Using ep0 maxpacket: 8 [ 475.163455][ T5124] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 475.163489][ T5124] usb 2-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 475.163539][ T5124] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 475.163566][ T5124] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 475.163587][ T5124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.236504][ T5784] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 475.239579][ T5987] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 475.239767][ T5987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.239796][ T5987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.239818][ T5987] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 475.241836][ T5987] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 475.241865][ T5987] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 475.241957][ T5987] usb 3-1: Manufacturer: syz [ 475.284264][ T5987] usb 3-1: config 0 descriptor?? [ 475.735582][ T5987] appleir 0003:05AC:8243.001A: unknown main item tag 0x0 [ 475.832553][ T5987] appleir 0003:05AC:8243.001A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 475.875601][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 475.875638][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 475.902037][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 475.902201][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 475.902274][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 475.902294][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 475.902626][ T31] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 476.016809][ T31] usb 1-1: USB disconnect, device number 51 [ 476.117135][ T36] usb 3-1: USB disconnect, device number 38 [ 477.499466][ T60] Bluetooth: hci3: unexpected event for opcode 0x0405 [ 477.727239][T11112] syzkaller0: entered promiscuous mode [ 477.727268][T11112] syzkaller0: entered allmulticast mode [ 478.025875][T11115] fido_id[11115]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 478.503295][T11126] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1771'. [ 478.527777][T11128] netlink: 'syz.2.1772': attribute type 11 has an invalid length. [ 479.118964][ T5784] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 479.257369][ T5784] usb 1-1: device descriptor read/64, error -71 [ 479.498546][ T5784] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 479.627344][ T5784] usb 1-1: device descriptor read/64, error -71 [ 479.736849][ T5784] usb usb1-port1: attempt power cycle [ 479.854069][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1779'. [ 481.002541][ T60] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 482.219163][ T5784] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 482.446459][ T7032] usb 2-1: USB disconnect, device number 36 [ 482.506322][ T5784] usb 1-1: device not accepting address 54, error -71 [ 482.546381][ T31] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 482.546735][ T5879] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 483.338796][ T5879] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 483.338928][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.338958][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.338982][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 483.342220][ T5879] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 483.342251][ T5879] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 483.342273][ T5879] usb 4-1: Manufacturer: syz [ 483.432244][ T5879] usb 4-1: config 0 descriptor?? [ 483.458275][ T31] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 483.458309][ T31] usb 3-1: config 1 interface 0 has no altsetting 0 [ 483.482469][ T31] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.40 [ 483.482500][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.482519][ T31] usb 3-1: Product: င [ 483.482532][ T31] usb 3-1: Manufacturer: Ð¥ [ 483.482545][ T31] usb 3-1: SerialNumber: syz [ 483.698611][T11161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.726356][T11161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.769604][T11173] pim6reg: entered allmulticast mode [ 483.771632][T11173] pim6reg: left allmulticast mode [ 483.931497][ T5879] usbhid 4-1:0.0: can't add hid device: -71 [ 483.931872][ T5879] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 484.001016][ T5879] usb 4-1: USB disconnect, device number 19 [ 484.001236][ T31] usbhid 3-1:1.0: can't add hid device: -71 [ 484.001365][ T31] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 484.026197][ T31] usb 3-1: USB disconnect, device number 39 [ 485.786316][ T5797] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 485.967851][ T5797] usb 3-1: Using ep0 maxpacket: 8 [ 485.970337][ T5797] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 485.970369][ T5797] usb 3-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 485.970422][ T5797] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.970467][ T5797] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 485.970491][ T5797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.636641][ T5797] usb 3-1: USB disconnect, device number 40 [ 487.483588][T11220] sctp: [Deprecated]: syz.1.1802 (pid 11220) Use of struct sctp_assoc_value in delayed_ack socket option. [ 487.483588][T11220] Use struct sctp_sack_info instead [ 487.610813][T11224] FAULT_INJECTION: forcing a failure. [ 487.610813][T11224] name failslab, interval 1, probability 0, space 0, times 0 [ 487.610859][T11224] CPU: 1 UID: 0 PID: 11224 Comm: syz.0.1804 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 487.610898][T11224] Tainted: [L]=SOFTLOCKUP [ 487.610907][T11224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 487.610920][T11224] Call Trace: [ 487.610928][T11224] [ 487.610938][T11224] dump_stack_lvl+0xe8/0x150 [ 487.610977][T11224] should_fail_ex+0x46b/0x600 [ 487.611015][T11224] should_failslab+0xa8/0x100 [ 487.611041][T11224] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 487.611074][T11224] ? alloc_io_context+0x27/0x2a0 [ 487.611100][T11224] ? rt_spin_unlock+0x14f/0x200 [ 487.611139][T11224] alloc_io_context+0x27/0x2a0 [ 487.611169][T11224] set_task_ioprio+0x461/0x5e0 [ 487.611195][T11224] ? set_task_ioprio+0x5f/0x5e0 [ 487.611225][T11224] __se_sys_ioprio_set+0x518/0xa30 [ 487.611249][T11224] ? __se_sys_ioprio_set+0xd0/0xa30 [ 487.611279][T11224] do_syscall_64+0x14d/0xf80 [ 487.611308][T11224] ? trace_irq_disable+0x3b/0x150 [ 487.611334][T11224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.611356][T11224] ? clear_bhb_loop+0x40/0x90 [ 487.611383][T11224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.611404][T11224] RIP: 0033:0x7f8f7f86c819 [ 487.611426][T11224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.611444][T11224] RSP: 002b:00007f8f7dac6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 487.611468][T11224] RAX: ffffffffffffffda RBX: 00007f8f7fae5fa0 RCX: 00007f8f7f86c819 [ 487.611485][T11224] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 487.611498][T11224] RBP: 00007f8f7dac6090 R08: 0000000000000000 R09: 0000000000000000 [ 487.611511][T11224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.611524][T11224] R13: 00007f8f7fae6038 R14: 00007f8f7fae5fa0 R15: 00007ffeabda3b48 [ 487.611560][T11224] [ 488.727641][ T5124] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 490.087901][ T5124] usb 5-1: device descriptor read/all, error -71 [ 493.246226][ T5986] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 493.750376][T11259] pim6reg: entered allmulticast mode [ 493.750539][T11259] pim6reg: left allmulticast mode [ 493.850419][ T5986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 493.850445][ T5986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.850468][ T5986] usb 3-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 493.850483][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.855295][ T5986] usb 3-1: config 0 descriptor?? [ 494.290595][ T5986] wacom 0003:056A:5000.001B: unknown main item tag 0x0 [ 494.290620][ T5986] wacom 0003:056A:5000.001B: unknown main item tag 0x0 [ 494.290635][ T5986] wacom 0003:056A:5000.001B: unknown main item tag 0x0 [ 494.290650][ T5986] wacom 0003:056A:5000.001B: unknown main item tag 0x0 [ 494.297331][ T5986] wacom 0003:056A:5000.001B: unknown main item tag 0x0 [ 494.297366][ T5986] wacom 0003:056A:5000.001B: unknown main item tag 0x0 [ 494.297389][ T5986] wacom 0003:056A:5000.001B: unknown main item tag 0x0 [ 494.297412][ T5986] wacom 0003:056A:5000.001B: unknown main item tag 0x0 [ 494.297435][ T5986] wacom 0003:056A:5000.001B: unknown main item tag 0x0 [ 494.297458][ T5986] wacom 0003:056A:5000.001B: unknown main item tag 0x0 [ 494.301921][ T5986] wacom 0003:056A:5000.001B: item 0 0 0 11 parsing failed [ 494.484467][ T5986] wacom 0003:056A:5000.001B: parse failed [ 494.484580][ T5986] wacom 0003:056A:5000.001B: probe with driver wacom failed with error -22 [ 494.502842][ T5986] usb 3-1: USB disconnect, device number 41 [ 495.956465][ T5124] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 496.125672][ T5124] usb 2-1: Using ep0 maxpacket: 8 [ 496.132820][ T5124] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 496.132841][ T5124] usb 2-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 496.132871][ T5124] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 496.132897][ T5124] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 496.132911][ T5124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.547868][T11288] FAULT_INJECTION: forcing a failure. [ 496.547868][T11288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.547910][T11288] CPU: 1 UID: 0 PID: 11288 Comm: syz.3.1824 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 496.547941][T11288] Tainted: [L]=SOFTLOCKUP [ 496.547950][T11288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 496.547963][T11288] Call Trace: [ 496.547972][T11288] [ 496.547982][T11288] dump_stack_lvl+0xe8/0x150 [ 496.548020][T11288] should_fail_ex+0x46b/0x600 [ 496.548054][T11288] _copy_to_user+0x31/0xb0 [ 496.548080][T11288] simple_read_from_buffer+0xe1/0x170 [ 496.548112][T11288] proc_fail_nth_read+0x1be/0x230 [ 496.548141][T11288] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 496.548170][T11288] ? rw_verify_area+0x2ac/0x4e0 [ 496.548200][T11288] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 496.548227][T11288] vfs_read+0x212/0xa80 [ 496.548267][T11288] ? __pfx_vfs_read+0x10/0x10 [ 496.548302][T11288] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 496.548327][T11288] ? lockdep_hardirqs_on+0x7a/0x110 [ 496.548352][T11288] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 496.548375][T11288] ? mutex_lock_nested+0x152/0x1d0 [ 496.548403][T11288] ? fdget_pos+0x252/0x320 [ 496.548440][T11288] ksys_read+0x156/0x270 [ 496.548471][T11288] ? __pfx_ksys_read+0x10/0x10 [ 496.548512][T11288] do_syscall_64+0x14d/0xf80 [ 496.548533][T11288] ? trace_irq_disable+0x3b/0x150 [ 496.548570][T11288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.548593][T11288] ? clear_bhb_loop+0x40/0x90 [ 496.548619][T11288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.548640][T11288] RIP: 0033:0x7f88546bd04e [ 496.548658][T11288] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 496.548675][T11288] RSP: 002b:00007f8852955fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 496.548697][T11288] RAX: ffffffffffffffda RBX: 00007f88529566c0 RCX: 00007f88546bd04e [ 496.548713][T11288] RDX: 000000000000000f RSI: 00007f88529560a0 RDI: 000000000000000a [ 496.548727][T11288] RBP: 00007f8852956090 R08: 0000000000000000 R09: 0000000000000000 [ 496.548741][T11288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.548754][T11288] R13: 00007f8854976038 R14: 00007f8854975fa0 R15: 00007ffeabc44218 [ 496.548791][T11288] [ 497.254463][T11293] pim6reg: entered allmulticast mode [ 497.431730][T11298] pim6reg: left allmulticast mode [ 497.817492][T11304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1829'. [ 499.876272][ T5879] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 500.029511][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 500.029551][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.029593][ T5879] usb 4-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 500.029619][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.077947][ T5879] usb 4-1: config 0 descriptor?? [ 500.547396][ T5879] hid_parser_main: 369 callbacks suppressed [ 500.547427][ T5879] wacom 0003:056A:5000.001C: unknown main item tag 0x0 [ 500.547458][ T5879] wacom 0003:056A:5000.001C: unknown main item tag 0x0 [ 500.547484][ T5879] wacom 0003:056A:5000.001C: unknown main item tag 0x0 [ 500.547509][ T5879] wacom 0003:056A:5000.001C: unknown main item tag 0x0 [ 500.547536][ T5879] wacom 0003:056A:5000.001C: unknown main item tag 0x0 [ 500.547562][ T5879] wacom 0003:056A:5000.001C: unknown main item tag 0x0 [ 500.547588][ T5879] wacom 0003:056A:5000.001C: unknown main item tag 0x0 [ 500.547614][ T5879] wacom 0003:056A:5000.001C: unknown main item tag 0x0 [ 500.547638][ T5879] wacom 0003:056A:5000.001C: unknown main item tag 0x0 [ 500.547662][ T5879] wacom 0003:056A:5000.001C: unknown main item tag 0x0 [ 500.644295][ T5879] wacom 0003:056A:5000.001C: item 0 0 0 11 parsing failed [ 500.645200][ T5879] wacom 0003:056A:5000.001C: parse failed [ 500.645321][ T5879] wacom 0003:056A:5000.001C: probe with driver wacom failed with error -22 [ 500.722151][ T5879] usb 4-1: USB disconnect, device number 20 [ 500.970210][T11311] FAULT_INJECTION: forcing a failure. [ 500.970210][T11311] name failslab, interval 1, probability 0, space 0, times 0 [ 500.970251][T11311] CPU: 1 UID: 0 PID: 11311 Comm: syz.4.1832 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 500.970281][T11311] Tainted: [L]=SOFTLOCKUP [ 500.970290][T11311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 500.970303][T11311] Call Trace: [ 500.970312][T11311] [ 500.970322][T11311] dump_stack_lvl+0xe8/0x150 [ 500.970358][T11311] should_fail_ex+0x46b/0x600 [ 500.970394][T11311] should_failslab+0xa8/0x100 [ 500.970420][T11311] __kmalloc_cache_noprof+0x84/0x690 [ 500.970444][T11311] ? genl_start+0x1c9/0x6c0 [ 500.970475][T11311] genl_start+0x1c9/0x6c0 [ 500.970510][T11311] __netlink_dump_start+0x469/0x7e0 [ 500.970550][T11311] genl_family_rcv_msg_dumpit+0x213/0x310 [ 500.970582][T11311] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 500.970605][T11311] ? genl_get_cmd+0x7f4/0x930 [ 500.970636][T11311] ? __pfx_genl_start+0x10/0x10 [ 500.970658][T11311] ? __pfx_genl_dumpit+0x10/0x10 [ 500.970679][T11311] ? __pfx_genl_done+0x10/0x10 [ 500.970720][T11311] genl_rcv_msg+0x5e8/0x7a0 [ 500.970754][T11311] ? __pfx_genl_rcv_msg+0x10/0x10 [ 500.970779][T11311] ? __pfx_tcp_metrics_nl_dump+0x10/0x10 [ 500.970811][T11311] ? __pfx_ref_tracker_free+0x10/0x10 [ 500.970838][T11311] ? __skb_clone+0x63/0x7a0 [ 500.970882][T11311] netlink_rcv_skb+0x232/0x4b0 [ 500.970915][T11311] ? __pfx_genl_rcv_msg+0x10/0x10 [ 500.970943][T11311] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 500.970992][T11311] ? netlink_deliver_tap+0x2e/0x1b0 [ 500.971020][T11311] ? netlink_deliver_tap+0x2e/0x1b0 [ 500.971056][T11311] genl_rcv+0x28/0x40 [ 500.971079][T11311] netlink_unicast+0x831/0x9f0 [ 500.971120][T11311] ? __pfx_netlink_unicast+0x10/0x10 [ 500.971152][T11311] ? netlink_sendmsg+0x650/0xb40 [ 500.971179][T11311] ? skb_put+0x11b/0x210 [ 500.971206][T11311] netlink_sendmsg+0x813/0xb40 [ 500.971249][T11311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.971284][T11311] ? unwind_get_return_address+0x4d/0x90 [ 500.971312][T11311] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 500.971347][T11311] ____sys_sendmsg+0x94c/0x9c0 [ 500.971380][T11311] ? __pfx_____sys_sendmsg+0x10/0x10 [ 500.971416][T11311] ? import_iovec+0x73/0xa0 [ 500.971443][T11311] ___sys_sendmsg+0x2a5/0x360 [ 500.971477][T11311] ? __pfx____sys_sendmsg+0x10/0x10 [ 500.971544][T11311] ? __fget_files+0x2a/0x420 [ 500.971572][T11311] ? __fget_files+0x3a6/0x420 [ 500.971611][T11311] __x64_sys_sendmsg+0x1c3/0x2a0 [ 500.971642][T11311] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 500.971679][T11311] ? __pfx_ksys_write+0x10/0x10 [ 500.971723][T11311] do_syscall_64+0x14d/0xf80 [ 500.971747][T11311] ? trace_irq_disable+0x3b/0x150 [ 500.971772][T11311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.971795][T11311] ? clear_bhb_loop+0x40/0x90 [ 500.971823][T11311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.971852][T11311] RIP: 0033:0x7f2e6016c819 [ 500.971874][T11311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.971892][T11311] RSP: 002b:00007f2e5e3be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.971916][T11311] RAX: ffffffffffffffda RBX: 00007f2e603e5fa0 RCX: 00007f2e6016c819 [ 500.971932][T11311] RDX: 000000000000c004 RSI: 0000200000000000 RDI: 0000000000000003 [ 500.971947][T11311] RBP: 00007f2e5e3be090 R08: 0000000000000000 R09: 0000000000000000 [ 500.971960][T11311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.971973][T11311] R13: 00007f2e603e6038 R14: 00007f2e603e5fa0 R15: 00007ffd12532b88 [ 500.972010][T11311] [ 501.457715][ T5124] usb 2-1: USB disconnect, device number 37 [ 501.661537][ T5112] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 501.761983][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.762061][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.896418][T11322] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1833'. [ 502.616573][T11327] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1837'. [ 503.046329][ T5124] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 503.206701][ T5124] usb 1-1: Using ep0 maxpacket: 16 [ 503.210087][ T5124] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.210165][ T5124] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 503.210195][ T5124] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 503.210218][ T5124] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 503.210243][ T5124] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 503.212772][ T5124] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 503.212802][ T5124] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 503.212823][ T5124] usb 1-1: Manufacturer: syz [ 503.322432][ T5124] usb 1-1: config 0 descriptor?? [ 504.556548][ T5124] usb 1-1: USB disconnect, device number 56 [ 504.619634][T11355] random: crng reseeded on system resumption [ 504.697174][ T5112] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 505.085110][ T5124] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 505.351739][T11365] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1848'. [ 506.139741][ T5124] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 506.139805][ T5124] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.139834][ T5124] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.139858][ T5124] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 506.196341][ T5124] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 506.196376][ T5124] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 506.196399][ T5124] usb 1-1: Manufacturer: syz [ 506.234065][ T5124] usb 1-1: config 0 descriptor?? [ 506.326622][T11370] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1850'. [ 506.496320][ T5986] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 506.663723][ T5124] hid_parser_main: 369 callbacks suppressed [ 506.663752][ T5124] appleir 0003:05AC:8243.001D: unknown main item tag 0x0 [ 506.676772][ T5986] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 506.676824][ T5986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.676862][ T5986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.676885][ T5986] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 506.679315][ T5986] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 506.679344][ T5986] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 506.679365][ T5986] usb 3-1: Manufacturer: syz [ 506.758833][ T5986] usb 3-1: config 0 descriptor?? [ 506.760478][ T5124] appleir 0003:05AC:8243.001D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 506.926220][T11355] FAULT_INJECTION: forcing a failure. [ 506.926220][T11355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.926258][T11355] CPU: 1 UID: 0 PID: 11355 Comm: syz.0.1847 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 506.926286][T11355] Tainted: [L]=SOFTLOCKUP [ 506.926294][T11355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 506.926305][T11355] Call Trace: [ 506.926314][T11355] [ 506.926324][T11355] dump_stack_lvl+0xe8/0x150 [ 506.926359][T11355] should_fail_ex+0x46b/0x600 [ 506.926395][T11355] _copy_from_user+0x2d/0xb0 [ 506.926417][T11355] core_sys_select+0x57a/0xc30 [ 506.926462][T11355] ? __pfx_core_sys_select+0x10/0x10 [ 506.926511][T11355] ? __pfx_set_user_sigmask+0x10/0x10 [ 506.926551][T11355] ? rt_mutex_slowunlock+0x1cb/0x300 [ 506.926583][T11355] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 506.926620][T11355] __se_sys_pselect6+0x267/0x320 [ 506.926650][T11355] ? __pfx___se_sys_pselect6+0x10/0x10 [ 506.926675][T11355] ? __pfx_ksys_write+0x10/0x10 [ 506.926711][T11355] ? __x64_sys_pselect6+0x21/0xf0 [ 506.926739][T11355] do_syscall_64+0x14d/0xf80 [ 506.926763][T11355] ? trace_irq_disable+0x3b/0x150 [ 506.926786][T11355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.926808][T11355] ? clear_bhb_loop+0x40/0x90 [ 506.926832][T11355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.926853][T11355] RIP: 0033:0x7f8f7f86c819 [ 506.926882][T11355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.926901][T11355] RSP: 002b:00007f8f7dac6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 506.926926][T11355] RAX: ffffffffffffffda RBX: 00007f8f7fae5fa0 RCX: 00007f8f7f86c819 [ 506.926943][T11355] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 506.926957][T11355] RBP: 00007f8f7dac6090 R08: 0000000000000000 R09: 0000000000000000 [ 506.926971][T11355] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.926985][T11355] R13: 00007f8f7fae6038 R14: 00007f8f7fae5fa0 R15: 00007ffeabda3b48 [ 506.927017][T11355] [ 506.998332][ T5876] usb 1-1: USB disconnect, device number 57 [ 507.179461][ T5986] appleir 0003:05AC:8243.001E: unknown main item tag 0x0 [ 507.181790][T11382] fido_id[11382]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 507.182773][ T5124] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 507.225764][ T5986] appleir 0003:05AC:8243.001E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 507.257776][ T37] kauditd_printk_skb: 331 callbacks suppressed [ 507.257792][ T37] audit: type=1326 audit(1776038180.543:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11385 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6016c819 code=0x7ffc0000 [ 507.257820][ T37] audit: type=1326 audit(1776038180.543:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11385 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6016c819 code=0x7ffc0000 [ 507.257848][ T37] audit: type=1326 audit(1776038180.543:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11385 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6016c819 code=0x7ffc0000 [ 507.257872][ T37] audit: type=1326 audit(1776038180.543:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11385 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f2e6016c819 code=0x7ffc0000 [ 507.305104][ T37] audit: type=1326 audit(1776038180.593:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11385 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6016c819 code=0x7ffc0000 [ 507.305156][ T37] audit: type=1326 audit(1776038180.593:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11385 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6016c819 code=0x7ffc0000 [ 507.305197][ T37] audit: type=1326 audit(1776038180.593:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11385 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2e6016c582 code=0x7ffc0000 [ 507.305237][ T37] audit: type=1326 audit(1776038180.593:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11385 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2e6016c582 code=0x7ffc0000 [ 507.326210][ T5124] usb 2-1: Using ep0 maxpacket: 32 [ 507.354477][ T37] audit: type=1326 audit(1776038180.613:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11385 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6016c819 code=0x7ffc0000 [ 507.354645][ T37] audit: type=1326 audit(1776038180.643:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11385 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2e6016c582 code=0x7ffc0000 [ 507.536335][ T5124] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 507.536367][ T5124] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 507.536391][ T5124] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 507.536414][ T5124] usb 2-1: config 1 has no interface number 0 [ 507.536466][ T5124] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 507.536495][ T5124] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 507.536541][ T5124] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 507.536565][ T5124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.634037][ T5124] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 507.784734][ T5124] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 508.082209][ T7032] usb 3-1: USB disconnect, device number 42 [ 508.125348][T11395] fido_id[11395]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 508.509040][T11411] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1862'. [ 508.781741][T11414] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1860'. [ 509.364414][ T5124] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 510.173635][ T7032] usb 2-1: USB disconnect, device number 38 [ 510.175934][ T7032] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 510.427236][ T5112] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 510.692397][T11438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1869'. [ 510.856800][ T7032] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 511.060454][ T5879] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 511.116836][ T7032] usb 3-1: Using ep0 maxpacket: 8 [ 511.119620][ T7032] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 511.119643][ T7032] usb 3-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 511.119673][ T7032] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 511.119713][ T7032] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 511.119737][ T7032] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.134342][T11444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1873'. [ 511.516231][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 511.520798][ T5879] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 511.520819][ T5879] usb 1-1: config 0 has no interface number 0 [ 511.520892][ T5879] usb 1-1: config 0 interface 184 has no altsetting 0 [ 511.614337][ T5879] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 511.614374][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.614410][ T5879] usb 1-1: Product: syz [ 511.614426][ T5879] usb 1-1: Manufacturer: syz [ 511.614502][ T5879] usb 1-1: SerialNumber: syz [ 511.654135][ T5879] usb 1-1: config 0 descriptor?? [ 511.713655][ T7032] usb 3-1: USB disconnect, device number 43 [ 512.516318][ T5986] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 512.680706][ T5986] usb 4-1: unable to get BOS descriptor or descriptor too short [ 512.694866][ T5986] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 512.694896][ T5986] usb 4-1: config 3 has 0 interfaces, different from the descriptor's value: 4 [ 512.828659][ T5986] usb 4-1: New USB device found, idVendor=12b8, idProduct=ec62, bcdDevice=c2.78 [ 512.828693][ T5986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.942217][ T5879] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 512.942255][ T5879] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 512.942790][ T5879] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 512.942817][ T5879] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 512.942837][ T5879] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 512.942855][ T5879] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 512.943146][ T5879] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 513.046365][ T5879] usb 1-1: USB disconnect, device number 58 [ 513.244797][T11462] FAULT_INJECTION: forcing a failure. [ 513.244797][T11462] name failslab, interval 1, probability 0, space 0, times 0 [ 513.244837][T11462] CPU: 0 UID: 0 PID: 11462 Comm: syz.2.1880 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 513.244875][T11462] Tainted: [L]=SOFTLOCKUP [ 513.244884][T11462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 513.244894][T11462] Call Trace: [ 513.244903][T11462] [ 513.244913][T11462] dump_stack_lvl+0xe8/0x150 [ 513.244950][T11462] should_fail_ex+0x46b/0x600 [ 513.244985][T11462] should_failslab+0xa8/0x100 [ 513.245010][T11462] __kmalloc_cache_noprof+0x84/0x690 [ 513.245033][T11462] ? kobject_uevent_env+0x28f/0x9e0 [ 513.245063][T11462] ? __pfx_dev_uevent_name+0x10/0x10 [ 513.245083][T11462] kobject_uevent_env+0x28f/0x9e0 [ 513.245122][T11462] device_del+0x754/0x900 [ 513.245146][T11462] ? bdi_unregister+0x451/0x550 [ 513.245181][T11462] ? __pfx_device_del+0x10/0x10 [ 513.245218][T11462] device_unregister+0x21/0xf0 [ 513.245245][T11462] bdi_unregister+0x468/0x550 [ 513.245274][T11462] ? __pfx_bdi_unregister+0x10/0x10 [ 513.245308][T11462] ? lockdep_hardirqs_on+0x7a/0x110 [ 513.245331][T11462] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 513.245358][T11462] generic_shutdown_super+0x235/0x2d0 [ 513.245390][T11462] kill_anon_super+0x3b/0x70 [ 513.245422][T11462] fuse_kill_sb_anon+0x1f7/0x270 [ 513.245457][T11462] deactivate_locked_super+0xbc/0x130 [ 513.245488][T11462] cleanup_mnt+0x437/0x4d0 [ 513.245520][T11462] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.245548][T11462] task_work_run+0x1d9/0x270 [ 513.245577][T11462] ? __pfx_task_work_run+0x10/0x10 [ 513.245614][T11462] exit_to_user_mode_loop+0xed/0x480 [ 513.245643][T11462] ? rcu_is_watching+0x15/0xb0 [ 513.245672][T11462] do_syscall_64+0x32d/0xf80 [ 513.245697][T11462] ? trace_irq_disable+0x3b/0x150 [ 513.245721][T11462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.245744][T11462] ? clear_bhb_loop+0x40/0x90 [ 513.245771][T11462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.245793][T11462] RIP: 0033:0x7f84fd56c819 [ 513.245814][T11462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.245833][T11462] RSP: 002b:00007f84fb7be028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 513.245856][T11462] RAX: 0000000000000000 RBX: 00007f84fd7e5fa0 RCX: 00007f84fd56c819 [ 513.245880][T11462] RDX: 0000000000000000 RSI: 000000000000000b RDI: 00002000000002c0 [ 513.245895][T11462] RBP: 00007f84fb7be090 R08: 0000000000000000 R09: 0000000000000000 [ 513.245909][T11462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.245922][T11462] R13: 00007f84fd7e6038 R14: 00007f84fd7e5fa0 R15: 00007ffdad1440c8 [ 513.245958][T11462] [ 513.645456][ T5112] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 513.959473][ T5879] usb 4-1: USB disconnect, device number 21 [ 514.325817][T11475] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1885'. [ 515.122969][T11476] FAULT_INJECTION: forcing a failure. [ 515.122969][T11476] name failslab, interval 1, probability 0, space 0, times 0 [ 515.123010][T11476] CPU: 0 UID: 0 PID: 11476 Comm: syz.1.1887 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 515.123046][T11476] Tainted: [L]=SOFTLOCKUP [ 515.123054][T11476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 515.123068][T11476] Call Trace: [ 515.123077][T11476] [ 515.123087][T11476] dump_stack_lvl+0xe8/0x150 [ 515.123124][T11476] should_fail_ex+0x46b/0x600 [ 515.123161][T11476] should_failslab+0xa8/0x100 [ 515.123188][T11476] __kmalloc_noprof+0xdf/0x7b0 [ 515.123210][T11476] ? drm_atomic_state_init+0xa1/0x3b0 [ 515.123249][T11476] drm_atomic_state_init+0xa1/0x3b0 [ 515.123284][T11476] drm_atomic_state_alloc+0xbc/0x100 [ 515.123318][T11476] drm_client_modeset_commit_atomic+0x122/0x7e0 [ 515.123361][T11476] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 515.123410][T11476] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 515.123438][T11476] ? lockdep_hardirqs_on+0x7a/0x110 [ 515.123463][T11476] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 515.123487][T11476] ? mutex_lock_nested+0x152/0x1d0 [ 515.123517][T11476] ? drm_client_modeset_commit_locked+0x4c/0x4d0 [ 515.123547][T11476] drm_client_modeset_commit_locked+0xce/0x4d0 [ 515.123589][T11476] drm_client_modeset_commit+0x4a/0x70 [ 515.123615][T11476] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9c/0x1c0 [ 515.123650][T11476] drm_fb_helper_set_par+0xaf/0x100 [ 515.123682][T11476] fb_set_var+0x847/0xfc0 [ 515.123704][T11476] ? __se_sys_ioctl+0x47/0x170 [ 515.123723][T11476] ? do_syscall_64+0x14d/0xf80 [ 515.123763][T11476] ? __pfx_fb_set_var+0x10/0x10 [ 515.123794][T11476] ? __lock_acquire+0x6b5/0x2cf0 [ 515.123871][T11476] do_fb_ioctl+0x74f/0x800 [ 515.123905][T11476] ? __pfx_do_fb_ioctl+0x10/0x10 [ 515.123957][T11476] ? __asan_memset+0x22/0x50 [ 515.123994][T11476] ? __pfx_smack_file_ioctl+0x10/0x10 [ 515.124033][T11476] ? __fget_files+0x3a6/0x420 [ 515.124053][T11476] ? __fget_files+0x2a/0x420 [ 515.124086][T11476] ? bpf_lsm_file_ioctl+0x9/0x20 [ 515.124111][T11476] ? __pfx_fb_ioctl+0x10/0x10 [ 515.124137][T11476] __se_sys_ioctl+0xff/0x170 [ 515.124162][T11476] do_syscall_64+0x14d/0xf80 [ 515.124185][T11476] ? trace_irq_disable+0x3b/0x150 [ 515.124210][T11476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.124233][T11476] ? clear_bhb_loop+0x40/0x90 [ 515.124261][T11476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.124283][T11476] RIP: 0033:0x7fcdcc6fc819 [ 515.124305][T11476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.124325][T11476] RSP: 002b:00007fcdca956028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 515.124350][T11476] RAX: ffffffffffffffda RBX: 00007fcdcc975fa0 RCX: 00007fcdcc6fc819 [ 515.124366][T11476] RDX: 0000200000000380 RSI: 0000000000004601 RDI: 0000000000000003 [ 515.124380][T11476] RBP: 00007fcdca956090 R08: 0000000000000000 R09: 0000000000000000 [ 515.124395][T11476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.124407][T11476] R13: 00007fcdcc976038 R14: 00007fcdcc975fa0 R15: 00007ffe3a612c68 [ 515.124443][T11476] [ 515.143197][T11478] bridge0: port 3(vlan2) entered blocking state [ 515.143342][T11478] bridge0: port 3(vlan2) entered disabled state [ 515.143604][T11478] vlan2: entered allmulticast mode [ 515.143622][T11478] geneve0: entered allmulticast mode [ 515.147415][T11478] vlan2: entered promiscuous mode [ 515.147437][T11478] geneve0: entered promiscuous mode [ 515.252496][T11482] FAULT_INJECTION: forcing a failure. [ 515.252496][T11482] name failslab, interval 1, probability 0, space 0, times 0 [ 515.252524][T11482] CPU: 1 UID: 0 PID: 11482 Comm: syz.3.1888 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 515.252542][T11482] Tainted: [L]=SOFTLOCKUP [ 515.252547][T11482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 515.252559][T11482] Call Trace: [ 515.252564][T11482] [ 515.252570][T11482] dump_stack_lvl+0xe8/0x150 [ 515.252594][T11482] should_fail_ex+0x46b/0x600 [ 515.252614][T11482] should_failslab+0xa8/0x100 [ 515.252628][T11482] kmem_cache_alloc_noprof+0x87/0x680 [ 515.252646][T11482] ? rcu_is_watching+0x15/0xb0 [ 515.252660][T11482] ? security_file_alloc+0x34/0x310 [ 515.252677][T11482] security_file_alloc+0x34/0x310 [ 515.252691][T11482] init_file+0x96/0x2d0 [ 515.252707][T11482] alloc_empty_file+0x6e/0x1d0 [ 515.252723][T11482] path_openat+0x11b/0x38a0 [ 515.252747][T11482] ? try_to_take_rt_mutex+0x840/0xb00 [ 515.252766][T11482] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 515.252783][T11482] ? __pfx_path_openat+0x10/0x10 [ 515.252802][T11482] ? __lock_acquire+0x6b5/0x2cf0 [ 515.252830][T11482] ? do_raw_spin_lock+0x12b/0x2f0 [ 515.252852][T11482] do_file_open+0x23e/0x4a0 [ 515.252870][T11482] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 515.252886][T11482] ? __pfx_do_file_open+0x10/0x10 [ 515.252902][T11482] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 515.252934][T11482] ? alloc_fd+0x64e/0x6c0 [ 515.252956][T11482] io_openat2+0x41c/0x6d0 [ 515.252979][T11482] ? __pfx_io_openat2+0x10/0x10 [ 515.252997][T11482] ? delayed_getname+0xa9/0x1d0 [ 515.253013][T11482] ? io_openat_prep+0x40b/0x550 [ 515.253032][T11482] __io_issue_sqe+0x180/0x4b0 [ 515.253045][T11482] ? __pfx_io_openat_prep+0x10/0x10 [ 515.253064][T11482] io_issue_sqe+0x164/0xf90 [ 515.253083][T11482] io_submit_sqes+0xd34/0x24e0 [ 515.253117][T11482] __se_sys_io_uring_enter+0x2cc/0x1970 [ 515.253138][T11482] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 515.253152][T11482] ? fput+0xa0/0xd0 [ 515.253167][T11482] ? ksys_write+0x248/0x270 [ 515.253186][T11482] ? __pfx_ksys_write+0x10/0x10 [ 515.253207][T11482] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 515.253222][T11482] do_syscall_64+0x14d/0xf80 [ 515.253236][T11482] ? trace_irq_disable+0x3b/0x150 [ 515.253250][T11482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.253263][T11482] ? clear_bhb_loop+0x40/0x90 [ 515.253278][T11482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.253290][T11482] RIP: 0033:0x7f88546fc819 [ 515.253303][T11482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.253314][T11482] RSP: 002b:00007f8852956028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 515.253329][T11482] RAX: ffffffffffffffda RBX: 00007f8854975fa0 RCX: 00007f88546fc819 [ 515.253338][T11482] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 515.253347][T11482] RBP: 00007f8852956090 R08: 0000000000000000 R09: 0000000000000000 [ 515.253355][T11482] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 515.253362][T11482] R13: 00007f8854976038 R14: 00007f8854975fa0 R15: 00007ffeabc44218 [ 515.253382][T11482] [ 516.006698][ T5112] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 516.666189][ T7032] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 516.818410][ T7032] usb 2-1: Using ep0 maxpacket: 32 [ 516.821592][ T7032] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 516.821621][ T7032] usb 2-1: config 0 has no interface number 0 [ 516.821673][ T7032] usb 2-1: config 0 interface 184 has no altsetting 0 [ 516.825668][ T7032] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 516.825698][ T7032] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.825719][ T7032] usb 2-1: Product: syz [ 516.825734][ T7032] usb 2-1: Manufacturer: syz [ 516.825750][ T7032] usb 2-1: SerialNumber: syz [ 516.889729][ T7032] usb 2-1: config 0 descriptor?? [ 517.859666][ T5124] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 517.996371][ T5124] usb 1-1: device descriptor read/64, error -71 [ 518.081324][ T7032] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 518.081402][ T7032] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 518.081839][ T7032] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 518.081857][ T7032] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 518.081868][ T7032] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 518.081878][ T7032] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 518.082067][ T7032] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 518.173483][ T7032] usb 2-1: USB disconnect, device number 39 [ 518.216283][ T5876] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 518.236342][ T5986] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 518.236593][ T5124] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 518.268405][T11530] FAULT_INJECTION: forcing a failure. [ 518.268405][T11530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.268431][T11530] CPU: 1 UID: 0 PID: 11530 Comm: syz.3.1909 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 518.268450][T11530] Tainted: [L]=SOFTLOCKUP [ 518.268454][T11530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 518.268462][T11530] Call Trace: [ 518.268467][T11530] [ 518.268473][T11530] dump_stack_lvl+0xe8/0x150 [ 518.268497][T11530] should_fail_ex+0x46b/0x600 [ 518.268520][T11530] _copy_from_user+0x2d/0xb0 [ 518.268532][T11530] memdup_user+0x5e/0xd0 [ 518.268549][T11530] strndup_user+0x68/0xd0 [ 518.268564][T11530] __se_sys_fsconfig+0x5f7/0x820 [ 518.268581][T11530] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 518.268592][T11530] ? ksys_write+0x248/0x270 [ 518.268611][T11530] ? __pfx_ksys_write+0x10/0x10 [ 518.268632][T11530] ? __x64_sys_fsconfig+0x20/0xc0 [ 518.268645][T11530] do_syscall_64+0x14d/0xf80 [ 518.268659][T11530] ? trace_irq_disable+0x3b/0x150 [ 518.268673][T11530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.268686][T11530] ? clear_bhb_loop+0x40/0x90 [ 518.268700][T11530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.268712][T11530] RIP: 0033:0x7f88546fc819 [ 518.268724][T11530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.268735][T11530] RSP: 002b:00007f8852956028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 518.268758][T11530] RAX: ffffffffffffffda RBX: 00007f8854975fa0 RCX: 00007f88546fc819 [ 518.268767][T11530] RDX: 0000200000000700 RSI: 0000000000000001 RDI: 0000000000000003 [ 518.268775][T11530] RBP: 00007f8852956090 R08: 0000000000000000 R09: 0000000000000000 [ 518.268783][T11530] R10: 0000200000000780 R11: 0000000000000246 R12: 0000000000000001 [ 518.268791][T11530] R13: 00007f8854976038 R14: 00007f8854975fa0 R15: 00007ffeabc44218 [ 518.268809][T11530] [ 518.376427][ T5124] usb 1-1: device descriptor read/64, error -71 [ 518.411112][ T5986] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 518.411142][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.411162][ T5986] usb 3-1: Product: syz [ 518.411176][ T5986] usb 3-1: Manufacturer: syz [ 518.411190][ T5986] usb 3-1: SerialNumber: syz [ 518.431616][ T5986] usb 3-1: config 0 descriptor?? [ 518.576196][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 518.579246][ T5876] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.579309][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 518.579340][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 518.579363][ T5876] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 518.579388][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 518.581753][ T5876] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 518.581782][ T5876] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 518.581804][ T5876] usb 5-1: Manufacturer: syz [ 518.690833][ T5124] usb usb1-port1: attempt power cycle [ 518.716907][ T5986] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 518.852018][ T5876] usb 5-1: config 0 descriptor?? [ 519.184227][ T5124] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 519.216584][ T5124] usb 1-1: device descriptor read/8, error -71 [ 520.293360][ T5986] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 520.444279][ T5124] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 520.556282][ T5876] rc_core: IR keymap rc-hauppauge not found [ 520.556307][ T5876] Registered IR keymap rc-empty [ 520.556480][ T5876] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 520.576270][ T5876] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 520.597964][ T5876] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 520.601288][ T5876] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input17 [ 520.636947][ T5876] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 520.660462][ T5876] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 520.671075][ T5124] usb 1-1: device not accepting address 62, error -71 [ 520.676423][ T5876] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 520.691985][ T5124] usb usb1-port1: unable to enumerate USB device [ 520.696329][ T5876] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 520.718396][ T5876] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 520.736226][ T5876] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 520.756959][ T5876] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 520.776378][ T5876] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 520.796283][ T5876] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 520.821367][ T5876] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 521.015119][ T5876] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 521.015149][ T5876] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 521.981389][T11550] FAULT_INJECTION: forcing a failure. [ 521.981389][T11550] name failslab, interval 1, probability 0, space 0, times 0 [ 521.981425][T11550] CPU: 1 UID: 0 PID: 11550 Comm: syz.0.1913 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 521.981451][T11550] Tainted: [L]=SOFTLOCKUP [ 521.981459][T11550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 521.981470][T11550] Call Trace: [ 521.981478][T11550] [ 521.981486][T11550] dump_stack_lvl+0xe8/0x150 [ 521.981519][T11550] should_fail_ex+0x46b/0x600 [ 521.981551][T11550] should_failslab+0xa8/0x100 [ 521.981573][T11550] __kmalloc_noprof+0xdf/0x7b0 [ 521.981591][T11550] ? trace_kmem_cache_alloc+0x29/0xf0 [ 521.981616][T11550] ? security_sk_alloc+0x52/0x360 [ 521.981640][T11550] security_sk_alloc+0x52/0x360 [ 521.981662][T11550] sk_prot_alloc+0x101/0x210 [ 521.981686][T11550] sk_alloc+0x3a/0x390 [ 521.981710][T11550] inet_create+0x7a0/0x1010 [ 521.981732][T11550] ? inet_create+0x9c/0x1010 [ 521.981756][T11550] __sock_create+0x4b2/0x9d0 [ 521.981792][T11550] mptcp_subflow_create_socket+0xfb/0x800 [ 521.981831][T11550] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 521.981857][T11550] ? __lock_acquire+0x6b5/0x2cf0 [ 521.981884][T11550] __mptcp_nmpc_sk+0x14e/0x790 [ 521.981911][T11550] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 521.981945][T11550] mptcp_connect+0x71/0x830 [ 521.981969][T11550] __inet_stream_connect+0x25a/0xdd0 [ 521.982002][T11550] ? __pfx___inet_stream_connect+0x10/0x10 [ 521.982020][T11550] ? __local_bh_enable+0x1e1/0x2f0 [ 521.982050][T11550] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 521.982074][T11550] ? lockdep_hardirqs_on+0x7a/0x110 [ 521.982101][T11550] inet_stream_connect+0x66/0xa0 [ 521.982124][T11550] __sys_connect+0x315/0x450 [ 521.982146][T11550] ? __pfx___sys_connect+0x10/0x10 [ 521.982178][T11550] ? __pfx_ksys_write+0x10/0x10 [ 521.982213][T11550] __x64_sys_connect+0x7a/0x90 [ 521.982233][T11550] do_syscall_64+0x14d/0xf80 [ 521.982253][T11550] ? trace_irq_disable+0x3b/0x150 [ 521.982274][T11550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.982294][T11550] ? clear_bhb_loop+0x40/0x90 [ 521.982317][T11550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.982335][T11550] RIP: 0033:0x7f8f7f86c819 [ 521.982353][T11550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.982369][T11550] RSP: 002b:00007f8f7da84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 521.982391][T11550] RAX: ffffffffffffffda RBX: 00007f8f7fae6180 RCX: 00007f8f7f86c819 [ 521.982405][T11550] RDX: 0000000000000010 RSI: 00002000000009c0 RDI: 0000000000000005 [ 521.982418][T11550] RBP: 00007f8f7da84090 R08: 0000000000000000 R09: 0000000000000000 [ 521.982430][T11550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.982442][T11550] R13: 00007f8f7fae6218 R14: 00007f8f7fae6180 R15: 00007ffeabda3b48 [ 521.982473][T11550] [ 522.422296][ T5876] usb 5-1: USB disconnect, device number 42 [ 522.475357][ T7032] usb 3-1: USB disconnect, device number 44 [ 523.424768][ T5124] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 523.598521][ T5124] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 523.598558][ T5124] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.598588][ T5124] usb 2-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 523.598602][ T5124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.658525][ T5124] usb 2-1: config 0 descriptor?? [ 524.336554][ T5784] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 524.385162][ T5124] wacom 0003:056A:5000.001F: unknown main item tag 0x0 [ 524.385187][ T5124] wacom 0003:056A:5000.001F: unknown main item tag 0x0 [ 524.385202][ T5124] wacom 0003:056A:5000.001F: unknown main item tag 0x0 [ 524.385217][ T5124] wacom 0003:056A:5000.001F: unknown main item tag 0x0 [ 524.385232][ T5124] wacom 0003:056A:5000.001F: unknown main item tag 0x0 [ 524.385247][ T5124] wacom 0003:056A:5000.001F: unknown main item tag 0x0 [ 524.385261][ T5124] wacom 0003:056A:5000.001F: unknown main item tag 0x0 [ 524.385276][ T5124] wacom 0003:056A:5000.001F: unknown main item tag 0x0 [ 524.385290][ T5124] wacom 0003:056A:5000.001F: unknown main item tag 0x0 [ 524.385304][ T5124] wacom 0003:056A:5000.001F: unknown main item tag 0x0 [ 524.465590][ T5124] wacom 0003:056A:5000.001F: item 0 0 0 11 parsing failed [ 524.474424][ T5124] wacom 0003:056A:5000.001F: parse failed [ 524.474549][ T5124] wacom 0003:056A:5000.001F: probe with driver wacom failed with error -22 [ 524.536185][ T5784] usb 5-1: Using ep0 maxpacket: 32 [ 524.538790][ T5784] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 524.538820][ T5784] usb 5-1: config 0 has no interface number 0 [ 524.538871][ T5784] usb 5-1: config 0 interface 184 has no altsetting 0 [ 524.542884][ T5784] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 524.542916][ T5784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.542937][ T5784] usb 5-1: Product: syz [ 524.542952][ T5784] usb 5-1: Manufacturer: syz [ 524.542968][ T5784] usb 5-1: SerialNumber: syz [ 524.576400][ T60] Bluetooth: hci0: command 0x0405 tx timeout [ 524.630321][ T31] usb 2-1: USB disconnect, device number 40 [ 524.644520][ T5784] usb 5-1: config 0 descriptor?? [ 524.678116][ T5986] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 524.846258][ T5986] usb 4-1: Using ep0 maxpacket: 16 [ 524.848443][ T5986] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 524.848544][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 524.853063][ T5986] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 524.853082][ T5986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.853094][ T5986] usb 4-1: Product: syz [ 524.853399][ T5986] usb 4-1: Manufacturer: syz [ 524.853449][ T5986] usb 4-1: SerialNumber: syz [ 524.932542][ T5986] usb 4-1: config 0 descriptor?? [ 524.955884][ T5986] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 524.955909][ T5986] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 525.295420][T11593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1927'. [ 526.670013][ T5986] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 526.694892][ T5986] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 526.705554][ T5986] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 526.705643][ T5986] em28xx 4-1:0.0: No AC97 audio processor [ 528.359766][ T5784] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 528.359810][ T5784] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 528.360504][ T5784] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 528.360521][ T5784] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 528.360532][ T5784] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 528.360543][ T5784] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 528.360738][ T5784] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 528.486830][ T5784] usb 5-1: USB disconnect, device number 43 [ 528.649225][ T7032] usb 4-1: USB disconnect, device number 22 [ 528.651818][ T7032] em28xx 4-1:0.0: Disconnecting em28xx [ 529.053461][ T7032] em28xx 4-1:0.0: Freeing device [ 529.966903][ T5784] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 530.084956][ T5986] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 530.185370][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 530.376299][ T5986] usb 5-1: device descriptor read/64, error -32 [ 530.676344][ T5784] usb 2-1: device descriptor read/64, error -71 [ 530.680070][ T5986] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 530.731378][T11630] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1938'. [ 530.844358][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 530.844397][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.844440][ T5986] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 530.844465][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.904212][ T5986] usb 5-1: config 0 descriptor?? [ 530.956303][ T5784] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 531.096252][ T5784] usb 2-1: device descriptor read/64, error -71 [ 531.245701][ T5784] usb usb2-port1: attempt power cycle [ 531.379434][ T5986] hid_parser_main: 369 callbacks suppressed [ 531.379452][ T5986] wacom 0003:056A:5000.0020: unknown main item tag 0x0 [ 531.379471][ T5986] wacom 0003:056A:5000.0020: unknown main item tag 0x0 [ 531.379485][ T5986] wacom 0003:056A:5000.0020: unknown main item tag 0x0 [ 531.379500][ T5986] wacom 0003:056A:5000.0020: unknown main item tag 0x0 [ 531.379514][ T5986] wacom 0003:056A:5000.0020: unknown main item tag 0x0 [ 531.379528][ T5986] wacom 0003:056A:5000.0020: unknown main item tag 0x0 [ 531.379543][ T5986] wacom 0003:056A:5000.0020: unknown main item tag 0x0 [ 531.379557][ T5986] wacom 0003:056A:5000.0020: unknown main item tag 0x0 [ 531.379572][ T5986] wacom 0003:056A:5000.0020: unknown main item tag 0x0 [ 531.379586][ T5986] wacom 0003:056A:5000.0020: unknown main item tag 0x0 [ 531.478844][ T5986] wacom 0003:056A:5000.0020: item 0 0 0 11 parsing failed [ 531.479750][ T5986] wacom 0003:056A:5000.0020: parse failed [ 531.479868][ T5986] wacom 0003:056A:5000.0020: probe with driver wacom failed with error -22 [ 531.541302][T11643] kthread_run failed with err -4 [ 531.573939][ T5797] usb 5-1: USB disconnect, device number 45 [ 531.586337][ T5784] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 531.606915][ T5784] usb 2-1: device descriptor read/8, error -71 [ 531.766547][ T5986] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 531.856284][ T5784] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 531.877113][ T5784] usb 2-1: device descriptor read/8, error -71 [ 531.946026][T11648] loop5: detected capacity change from 0 to 7 [ 531.987313][ T5784] usb usb2-port1: unable to enumerate USB device [ 532.005803][T11657] veth1_to_bridge: mtu less than device minimum [ 532.023802][T11657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.039403][T11657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.128758][T11648] Dev loop5: unable to read RDB block 7 [ 532.128824][T11648] loop5: unable to read partition table [ 532.130651][T11648] loop5: partition table beyond EOD, truncated [ 532.131090][T11648] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 532.367933][ T5986] usb 1-1: unable to get BOS descriptor or descriptor too short [ 532.388030][ T5986] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 532.388076][ T5986] usb 1-1: can't read configurations, error -71 [ 532.564726][T11666] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1951'. [ 532.705533][T11671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1952'. [ 532.733195][T11671] binder: BINDER_SET_CONTEXT_MGR already set [ 532.733214][T11671] binder: 11667:11671 ioctl 4018620d 200000004a80 returned -16 [ 533.787964][ T5986] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 537.956262][ T5986] usb 1-1: Using ep0 maxpacket: 8 [ 538.182744][ T5986] usb 1-1: device descriptor read/all, error -71 [ 538.196643][ T5986] usb usb1-port1: attempt power cycle [ 539.443060][T11703] FAULT_INJECTION: forcing a failure. [ 539.443060][T11703] name failslab, interval 1, probability 0, space 0, times 0 [ 539.443102][T11703] CPU: 1 UID: 0 PID: 11703 Comm: syz.0.1963 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 539.443133][T11703] Tainted: [L]=SOFTLOCKUP [ 539.443141][T11703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 539.443154][T11703] Call Trace: [ 539.443163][T11703] [ 539.443172][T11703] dump_stack_lvl+0xe8/0x150 [ 539.443210][T11703] should_fail_ex+0x46b/0x600 [ 539.443247][T11703] should_failslab+0xa8/0x100 [ 539.443272][T11703] __kmalloc_noprof+0xdf/0x7b0 [ 539.443294][T11703] ? io_cache_alloc_new+0x40/0x100 [ 539.443323][T11703] io_cache_alloc_new+0x40/0x100 [ 539.443347][T11703] io_arm_apoll+0x487/0x950 [ 539.443379][T11703] ? __pfx_io_arm_apoll+0x10/0x10 [ 539.443410][T11703] ? __io_issue_sqe+0x1f7/0x4b0 [ 539.443433][T11703] ? io_file_get_normal+0xec/0x310 [ 539.443457][T11703] ? io_arm_poll_handler+0x208/0x2a0 [ 539.443490][T11703] io_queue_async+0x175/0x2d0 [ 539.443534][T11703] io_submit_sqes+0x12cc/0x24e0 [ 539.443596][T11703] __se_sys_io_uring_enter+0x2cc/0x1970 [ 539.443635][T11703] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 539.443661][T11703] ? fput+0xa0/0xd0 [ 539.443689][T11703] ? ksys_write+0x248/0x270 [ 539.443724][T11703] ? __pfx_ksys_write+0x10/0x10 [ 539.443760][T11703] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 539.443789][T11703] do_syscall_64+0x14d/0xf80 [ 539.443813][T11703] ? trace_irq_disable+0x3b/0x150 [ 539.443838][T11703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.443861][T11703] ? clear_bhb_loop+0x40/0x90 [ 539.443888][T11703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.443910][T11703] RIP: 0033:0x7f8f7f86c819 [ 539.443931][T11703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.443950][T11703] RSP: 002b:00007f8f7dac6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 539.443974][T11703] RAX: ffffffffffffffda RBX: 00007f8f7fae5fa0 RCX: 00007f8f7f86c819 [ 539.443991][T11703] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 539.444004][T11703] RBP: 00007f8f7dac6090 R08: 0000000000000000 R09: 0000000000000000 [ 539.444018][T11703] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 539.444031][T11703] R13: 00007f8f7fae6038 R14: 00007f8f7fae5fa0 R15: 00007ffeabda3b48 [ 539.444067][T11703] [ 540.918073][ T5986] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 540.927190][ T5879] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 541.056277][ T5986] usb 5-1: device descriptor read/64, error -71 [ 541.076378][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 541.079274][ T5879] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 541.079306][ T5879] usb 3-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 541.079378][ T5879] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 541.079424][ T5879] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 541.079447][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.296209][ T5986] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 541.716217][ T5986] usb 5-1: device descriptor read/64, error -71 [ 541.912486][ T5986] usb usb5-port1: attempt power cycle [ 541.933682][ T5879] usb 3-1: USB disconnect, device number 45 [ 542.956442][ T5986] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 542.981329][ T5986] usb 5-1: device descriptor read/8, error -71 [ 542.996941][ T5797] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 543.156790][ T5797] usb 1-1: Using ep0 maxpacket: 32 [ 543.158668][ T5797] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 543.158698][ T5797] usb 1-1: config 0 has no interface number 0 [ 543.158739][ T5797] usb 1-1: config 0 interface 184 has no altsetting 0 [ 543.161410][ T5797] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 543.161434][ T5797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.161445][ T5797] usb 1-1: Product: syz [ 543.161454][ T5797] usb 1-1: Manufacturer: syz [ 543.161462][ T5797] usb 1-1: SerialNumber: syz [ 543.226337][ T5986] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 543.229856][ T5797] usb 1-1: config 0 descriptor?? [ 543.256247][ T5986] usb 5-1: device descriptor read/8, error -71 [ 543.367225][ T5986] usb usb5-port1: unable to enumerate USB device [ 543.438105][T11754] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1982'. [ 543.686332][ T5879] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 543.838767][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 543.845600][ T5879] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 543.845663][ T5879] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 543.845689][ T5879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 543.845712][ T5879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 543.845736][ T5879] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 543.845780][ T5879] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 543.845804][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.064432][ T5879] usb 3-1: usb_control_msg returned -32 [ 544.064494][ T5879] usbtmc 3-1:16.0: can't read capabilities [ 544.124314][ T5797] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 544.124348][ T5797] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 544.124908][ T5797] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 544.124998][ T5797] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 544.125020][ T5797] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 544.125040][ T5797] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 544.125378][ T5797] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 544.146196][ T5876] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 544.292754][ T5797] usb 1-1: USB disconnect, device number 66 [ 544.444359][T11768] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 544.462781][ T5879] usb 3-1: USB disconnect, device number 46 [ 544.483219][T11770] FAULT_INJECTION: forcing a failure. [ 544.483219][T11770] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 544.483259][T11770] CPU: 1 UID: 0 PID: 11770 Comm: syz.3.1988 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 544.483287][T11770] Tainted: [L]=SOFTLOCKUP [ 544.483294][T11770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 544.483306][T11770] Call Trace: [ 544.483314][T11770] [ 544.483323][T11770] dump_stack_lvl+0xe8/0x150 [ 544.483356][T11770] should_fail_ex+0x46b/0x600 [ 544.483388][T11770] prepare_alloc_pages+0x22a/0x6b0 [ 544.483419][T11770] __alloc_frozen_pages_noprof+0x12f/0x380 [ 544.483446][T11770] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 544.483472][T11770] ? __pfx_policy_nodemask+0x10/0x10 [ 544.483491][T11770] ? __lock_acquire+0x6b5/0x2cf0 [ 544.483520][T11770] alloc_pages_mpol+0xd1/0x380 [ 544.483556][T11770] vma_alloc_folio_noprof+0xea/0x290 [ 544.483580][T11770] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 544.483613][T11770] do_pte_missing+0x7f9/0x29e0 [ 544.483652][T11770] handle_mm_fault+0xd0a/0x13c0 [ 544.483686][T11770] ? handle_mm_fault+0xe7/0x13c0 [ 544.483716][T11770] ? __pfx_handle_mm_fault+0x10/0x10 [ 544.483765][T11770] ? lock_mm_and_find_vma+0xa7/0x340 [ 544.483790][T11770] do_user_addr_fault+0x75b/0x1340 [ 544.483835][T11770] exc_page_fault+0x6a/0xc0 [ 544.483858][T11770] asm_exc_page_fault+0x26/0x30 [ 544.483877][T11770] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 544.483903][T11770] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 544.483919][T11770] RSP: 0018:ffffc9000443f678 EFLAGS: 00050206 [ 544.483937][T11770] RAX: ffffffff849c2d01 RBX: ffff88803c34a000 RCX: 0000000000000197 [ 544.483951][T11770] RDX: 0000000000000000 RSI: ffff88803c34adc0 RDI: 0000200000001000 [ 544.483963][T11770] RBP: ffffc9000443f7f8 R08: ffff88803c34af56 R09: 1ffff110078695ea [ 544.483977][T11770] R10: dffffc0000000000 R11: ffffed10078695eb R12: 1ffff110070754c4 [ 544.483991][T11770] R13: 0000200000000240 R14: ffff8880383aa630 R15: 0000000000000f57 [ 544.484013][T11770] ? _copy_to_iter+0x131/0x17d0 [ 544.484046][T11770] _copy_to_iter+0x255/0x17d0 [ 544.484072][T11770] ? seq_printf+0x1ee/0x290 [ 544.484103][T11770] ? __pfx_seq_printf+0x10/0x10 [ 544.484123][T11770] ? __pfx__copy_to_iter+0x10/0x10 [ 544.484145][T11770] ? seq_write+0xd8/0x140 [ 544.484175][T11770] ? seq_read_iter+0xb85/0xe20 [ 544.484201][T11770] seq_read_iter+0xbf6/0xe20 [ 544.484241][T11770] proc_reg_read_iter+0x1bf/0x290 [ 544.484269][T11770] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 544.484292][T11770] __io_read+0x72f/0x1540 [ 544.484330][T11770] ? __kmalloc_noprof+0x408/0x7b0 [ 544.484354][T11770] ? __pfx___io_read+0x10/0x10 [ 544.484385][T11770] io_read+0x4a/0x1c0 [ 544.484412][T11770] __io_issue_sqe+0x180/0x4b0 [ 544.484435][T11770] ? io_file_get_normal+0xec/0x310 [ 544.484458][T11770] io_issue_sqe+0x164/0xf90 [ 544.484489][T11770] io_submit_sqes+0xd34/0x24e0 [ 544.484554][T11770] __se_sys_io_uring_enter+0x2cc/0x1970 [ 544.484589][T11770] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 544.484611][T11770] ? fput+0xa0/0xd0 [ 544.484634][T11770] ? ksys_write+0x248/0x270 [ 544.484664][T11770] ? __pfx_ksys_write+0x10/0x10 [ 544.484696][T11770] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 544.484721][T11770] do_syscall_64+0x14d/0xf80 [ 544.484741][T11770] ? trace_irq_disable+0x3b/0x150 [ 544.484762][T11770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.484781][T11770] ? clear_bhb_loop+0x40/0x90 [ 544.484805][T11770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.484823][T11770] RIP: 0033:0x7f88546fc819 [ 544.484842][T11770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.484857][T11770] RSP: 002b:00007f8852956028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 544.484875][T11770] RAX: ffffffffffffffda RBX: 00007f8854975fa0 RCX: 00007f88546fc819 [ 544.484888][T11770] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 544.484900][T11770] RBP: 00007f8852956090 R08: 0000000000000000 R09: 0000000000000000 [ 544.484912][T11770] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 544.484923][T11770] R13: 00007f8854976038 R14: 00007f8854975fa0 R15: 00007ffeabc44218 [ 544.484957][T11770] [ 544.487472][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 544.490037][ T5876] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 544.490062][ T5876] usb 2-1: config 0 has no interface number 0 [ 544.490107][ T5876] usb 2-1: config 0 interface 184 has no altsetting 0 [ 544.492858][ T5876] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 544.492883][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.492901][ T5876] usb 2-1: Product: syz [ 544.492915][ T5876] usb 2-1: Manufacturer: syz [ 544.492928][ T5876] usb 2-1: SerialNumber: syz [ 544.511797][ T5876] usb 2-1: config 0 descriptor?? [ 545.376167][ T5784] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 545.382619][T11782] binder: 11781:11782 ioctl c0306201 200000000080 returned -14 [ 545.385056][T11782] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1994'. [ 545.419879][T11782] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 545.436868][T11782] bridge1: entered promiscuous mode [ 545.536174][ T5784] usb 3-1: Using ep0 maxpacket: 8 [ 545.538716][ T5784] usb 3-1: unable to get BOS descriptor or descriptor too short [ 545.539967][ T5784] usb 3-1: config 3 has an invalid interface number: 108 but max is 0 [ 545.539994][ T5784] usb 3-1: config 3 has no interface number 0 [ 545.540028][ T5784] usb 3-1: config 3 interface 108 has no altsetting 0 [ 545.542541][ T5784] usb 3-1: New USB device found, idVendor=9ab2, idProduct=4fc3, bcdDevice= 7.67 [ 545.542582][ T5784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.542601][ T5784] usb 3-1: Product: syz [ 545.542615][ T5784] usb 3-1: Manufacturer: syz [ 545.542630][ T5784] usb 3-1: SerialNumber: syz [ 545.854157][ T5876] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 545.854194][ T5876] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 545.898486][ T5784] cdc_eem 3-1:3.108: probe with driver cdc_eem failed with error -22 [ 545.931933][ T5784] usb 3-1: USB disconnect, device number 47 [ 546.123868][ T5876] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 546.123905][ T5876] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 546.123926][ T5876] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 546.123945][ T5876] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 546.124287][ T5876] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 546.134411][ T5876] usb 2-1: USB disconnect, device number 45 [ 546.271752][T11797] program syz.0.1998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 546.828505][T11805] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2000'. [ 546.828535][T11805] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2000'. [ 550.530030][T11847] FAULT_INJECTION: forcing a failure. [ 550.530030][T11847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.530089][T11847] CPU: 1 UID: 0 PID: 11847 Comm: syz.2.2013 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 550.530119][T11847] Tainted: [L]=SOFTLOCKUP [ 550.530127][T11847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 550.530140][T11847] Call Trace: [ 550.530149][T11847] [ 550.530159][T11847] dump_stack_lvl+0xe8/0x150 [ 550.530197][T11847] should_fail_ex+0x46b/0x600 [ 550.530232][T11847] _copy_from_iter+0x1d3/0x1670 [ 550.530271][T11847] ? trace_kmem_cache_alloc+0x29/0xf0 [ 550.530303][T11847] ? __alloc_skb+0x27d/0x7d0 [ 550.530325][T11847] ? __pfx__copy_from_iter+0x10/0x10 [ 550.530355][T11847] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 550.530387][T11847] ? __alloc_skb+0x27d/0x7d0 [ 550.530415][T11847] ? netlink_sendmsg+0x650/0xb40 [ 550.530442][T11847] ? skb_put+0x11b/0x210 [ 550.530468][T11847] netlink_sendmsg+0x6c0/0xb40 [ 550.530508][T11847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.530538][T11847] ? unwind_get_return_address+0x4d/0x90 [ 550.530563][T11847] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 550.530599][T11847] ____sys_sendmsg+0x94c/0x9c0 [ 550.530638][T11847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 550.530675][T11847] ? import_iovec+0x73/0xa0 [ 550.530700][T11847] ___sys_sendmsg+0x2a5/0x360 [ 550.530732][T11847] ? __pfx____sys_sendmsg+0x10/0x10 [ 550.530799][T11847] ? __fget_files+0x2a/0x420 [ 550.530834][T11847] ? __fget_files+0x3a6/0x420 [ 550.530873][T11847] __x64_sys_sendmsg+0x1c3/0x2a0 [ 550.530903][T11847] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 550.530940][T11847] ? __pfx_ksys_write+0x10/0x10 [ 550.530986][T11847] do_syscall_64+0x14d/0xf80 [ 550.531011][T11847] ? trace_irq_disable+0x3b/0x150 [ 550.531036][T11847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.531059][T11847] ? clear_bhb_loop+0x40/0x90 [ 550.531086][T11847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.531109][T11847] RIP: 0033:0x7f84fd56c819 [ 550.531130][T11847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.531148][T11847] RSP: 002b:00007f84fb7be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.531173][T11847] RAX: ffffffffffffffda RBX: 00007f84fd7e5fa0 RCX: 00007f84fd56c819 [ 550.531189][T11847] RDX: 0000000000000010 RSI: 0000200000000780 RDI: 0000000000000003 [ 550.531203][T11847] RBP: 00007f84fb7be090 R08: 0000000000000000 R09: 0000000000000000 [ 550.531217][T11847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.531231][T11847] R13: 00007f84fd7e6038 R14: 00007f84fd7e5fa0 R15: 00007ffdad1440c8 [ 550.531266][T11847] [ 550.565964][ T5986] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 550.746184][ T5879] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 550.832481][ T5986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.832521][ T5986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.832564][ T5986] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 550.832589][ T5986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.898558][ T5986] usb 1-1: config 0 descriptor?? [ 550.901641][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.901695][ T5879] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 550.901719][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.957206][ T5879] usb 4-1: config 0 descriptor?? [ 550.978085][ T8112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.978181][ T8112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.978260][ T8112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.978338][ T8112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.055527][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.065541][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.072054][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.114500][ T5987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.139045][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.376251][ T5876] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 551.506274][ T5876] usb 5-1: device descriptor read/64, error -71 [ 551.613750][ T5986] usbhid 1-1:0.0: can't add hid device: -71 [ 551.654611][ T5986] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 551.663324][ T5986] usb 1-1: USB disconnect, device number 67 [ 551.746257][ T5876] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 551.856962][ T31] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 551.887466][ T5876] usb 5-1: device descriptor read/64, error -71 [ 552.010501][ T5876] usb usb5-port1: attempt power cycle [ 552.212086][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.213595][ T31] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 552.213780][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.504375][ T31] usb 3-1: config 0 descriptor?? [ 552.717311][ T5876] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 552.738675][ T5876] usb 5-1: device descriptor read/8, error -71 [ 552.943598][ T31] keytouch 0003:0926:3333.0021: fixing up Keytouch IEC report descriptor [ 552.974897][ T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0021/input/input18 [ 552.986192][ T5876] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 553.007651][ T5876] usb 5-1: device descriptor read/8, error -71 [ 553.116910][ T5876] usb usb5-port1: unable to enumerate USB device [ 554.011775][ T5879] usbhid 4-1:0.0: can't add hid device: -71 [ 554.011912][ T5879] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 554.060093][ T5879] usb 4-1: USB disconnect, device number 23 [ 554.382963][T11879] netlink: 'syz.2.2024': attribute type 8 has an invalid length. [ 554.382988][T11879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2024'. [ 554.437693][ T31] keytouch 0003:0926:3333.0021: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 554.482692][T11879] bond0: entered promiscuous mode [ 554.482726][T11879] bond_slave_0: entered promiscuous mode [ 554.501789][ T31] usb 3-1: USB disconnect, device number 48 [ 554.543487][T11879] gretap0: entered promiscuous mode [ 554.544878][T11879] hsr1: entered promiscuous mode [ 554.862506][T11889] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 554.862524][T11889] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 554.862539][T11889] CPU: 1 UID: 0 PID: 11889 Comm: syz.2.2028 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 554.862558][T11889] Tainted: [L]=SOFTLOCKUP [ 554.862563][T11889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 554.862570][T11889] RIP: 0010:memcpy_sglist+0x420/0x730 [ 554.862589][T11889] Code: e8 65 9d 61 fd f6 c3 01 0f 85 0a 01 00 00 e8 f7 97 61 fd 4c 89 f3 eb 07 e8 ed 97 61 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 554.862600][T11889] RSP: 0018:ffffc900044af938 EFLAGS: 00010202 [ 554.862616][T11889] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 [ 554.862624][T11889] RDX: ffffc9000db09000 RSI: 0000000000000545 RDI: 0000000000000546 [ 554.862633][T11889] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 554.862640][T11889] R10: dffffc0000000000 R11: ffffed100db2e401 R12: 0000000000000001 [ 554.862648][T11889] R13: ffff8880411dc000 R14: ffff88804d1b0820 R15: 0000000000000008 [ 554.862656][T11889] FS: 00007f84fb7be6c0(0000) GS:ffff888126432000(0000) knlGS:0000000000000000 [ 554.862667][T11889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 554.862675][T11889] CR2: 00002000001ec030 CR3: 0000000065ff6000 CR4: 00000000003526f0 [ 554.862688][T11889] Call Trace: [ 554.862694][T11889] [ 554.862704][T11889] aead_recvmsg+0x719/0x1030 [ 554.862720][T11889] ? __pfx___resched_curr+0x10/0x10 [ 554.862739][T11889] ? __pfx_aead_recvmsg+0x10/0x10 [ 554.862751][T11889] ? preempt_schedule_common+0x82/0xd0 [ 554.862764][T11889] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 554.862781][T11889] ? security_socket_recvmsg+0x7e/0x2c0 [ 554.862798][T11889] ? __pfx_aead_recvmsg+0x10/0x10 [ 554.862810][T11889] sock_recvmsg+0x172/0x1b0 [ 554.862828][T11889] sock_read_iter+0x25a/0x330 [ 554.862842][T11889] ? __pfx_sock_read_iter+0x10/0x10 [ 554.862862][T11889] vfs_read+0x58b/0xa80 [ 554.862880][T11889] ? __pfx_vfs_read+0x10/0x10 [ 554.862897][T11889] ? __fget_files+0x2a/0x420 [ 554.862913][T11889] ksys_read+0x156/0x270 [ 554.862928][T11889] ? __pfx_ksys_read+0x10/0x10 [ 554.862946][T11889] do_syscall_64+0x14d/0xf80 [ 554.862959][T11889] ? trace_irq_disable+0x3b/0x150 [ 554.862971][T11889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.862983][T11889] ? clear_bhb_loop+0x40/0x90 [ 554.862995][T11889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.863006][T11889] RIP: 0033:0x7f84fd56c819 [ 554.863017][T11889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.863026][T11889] RSP: 002b:00007f84fb7be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 554.863039][T11889] RAX: ffffffffffffffda RBX: 00007f84fd7e5fa0 RCX: 00007f84fd56c819 [ 554.863047][T11889] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 0000000000000004 [ 554.863055][T11889] RBP: 00007f84fd602c91 R08: 0000000000000000 R09: 0000000000000000 [ 554.863062][T11889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.863070][T11889] R13: 00007f84fd7e6038 R14: 00007f84fd7e5fa0 R15: 00007ffdad1440c8 [ 554.863082][T11889] [ 554.863086][T11889] Modules linked in: [ 554.863096][T11889] ---[ end trace 0000000000000000 ]--- [ 554.863103][T11889] RIP: 0010:memcpy_sglist+0x420/0x730 [ 554.863117][T11889] Code: e8 65 9d 61 fd f6 c3 01 0f 85 0a 01 00 00 e8 f7 97 61 fd 4c 89 f3 eb 07 e8 ed 97 61 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 554.863126][T11889] RSP: 0018:ffffc900044af938 EFLAGS: 00010202 [ 554.863136][T11889] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 [ 554.863144][T11889] RDX: ffffc9000db09000 RSI: 0000000000000545 RDI: 0000000000000546 [ 554.863152][T11889] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 554.863159][T11889] R10: dffffc0000000000 R11: ffffed100db2e401 R12: 0000000000000001 [ 554.863167][T11889] R13: ffff8880411dc000 R14: ffff88804d1b0820 R15: 0000000000000008 [ 554.863175][T11889] FS: 00007f84fb7be6c0(0000) GS:ffff888126432000(0000) knlGS:0000000000000000 [ 554.863186][T11889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 554.863194][T11889] CR2: 00002000001ec030 CR3: 0000000065ff6000 CR4: 00000000003526f0 [ 554.863204][T11889] Kernel panic - not syncing: Fatal exception [ 554.863381][T11889] Kernel Offset: disabled