last executing test programs: 8m14.135001886s ago: executing program 2 (id=66): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x500, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000100)={0x2, &(0x7f00000e4280)=[{0xe000003, 0x116, &(0x7f0000000140)=[0x80000001, 0x5, 0xfffffff5, 0x3, 0x8, 0x6cf, 0x1, 0x3, 0x5, 0x53c000, 0x722, 0x4, 0x6, 0x2, 0x0, 0x7, 0x5, 0xc, 0x6ff08256, 0x6, 0x9, 0x8, 0xa428, 0x5, 0xa, 0x4, 0x0, 0xfffffffa, 0x4, 0x3, 0x6, 0x5, 0x2, 0x5, 0xef1, 0x1000, 0x400, 0x4a8, 0x7fffffff, 0x594a, 0xfffffff7, 0x10, 0x9, 0x9, 0x3, 0x7, 0x5, 0x200, 0x1, 0x5, 0x800, 0x2, 0x10, 0xf88d, 0xaf888e92, 0xd, 0x3, 0x849, 0x64, 0x0, 0x7, 0x101, 0x400, 0x8, 0x5, 0x8, 0x3, 0x8075, 0x8000, 0x0, 0x7fff, 0x0, 0x8000, 0x7, 0x3, 0x4b, 0x81, 0x3, 0x8f8, 0x2, 0x2, 0xfffffff3, 0x0, 0xff, 0x4, 0x2835, 0x8, 0x400, 0xd, 0x48c, 0x640, 0x4, 0x80000000, 0x8, 0x9, 0x0, 0x6, 0x8865, 0x0, 0x0, 0x7, 0x7f, 0x9, 0x7, 0x9, 0x0, 0xa934380f, 0x69, 0x8, 0x7, 0xc161, 0x7, 0xfffff000, 0x7fffffff, 0x10, 0x1, 0x5, 0x0, 0xb39, 0xe55, 0x1, 0x4, 0x4, 0x1, 0x0, 0x9, 0x8, 0x7, 0x7, 0x7fff, 0xfffffff8, 0x3, 0x3, 0xffffffd4, 0xc74, 0x400, 0x6, 0x312c, 0x5, 0x401, 0x2, 0x500, 0x554, 0x101, 0x4, 0xc, 0x2, 0x8, 0x7, 0x9, 0x7, 0x3c000, 0x1, 0x101, 0x1, 0x4, 0x0, 0x1ff, 0xecd, 0xfba, 0x7, 0x3b, 0x3ed9, 0x81, 0x0, 0x400, 0x0, 0x800, 0x60000, 0xffffff80, 0xffffffff, 0xa, 0x5, 0x7f, 0x8, 0x5, 0x9, 0xfffffffb, 0x4, 0xf4, 0x2, 0x5, 0x2, 0xabec, 0xd, 0x6, 0x9, 0x800, 0x3, 0x200, 0xfffff80d, 0x9, 0x5, 0x8000, 0x2, 0x8, 0x9, 0x7, 0x1ef8, 0x3, 0xcfa, 0x3, 0x0, 0x3, 0x7, 0x90000, 0x8, 0x5, 0x5, 0x3, 0x1000, 0x4, 0x4, 0x7, 0xc, 0xfffffffc, 0x5, 0x0, 0x4, 0x4, 0x80000000, 0xb3e4, 0xfff, 0x0, 0x9, 0x10001, 0x8000, 0x7, 0x8020, 0x8, 0x7fff, 0x0, 0x2, 0xbf2, 0x9, 0xbc, 0x9, 0x856, 0x6, 0x9, 0x6, 0x9, 0x80000001, 0xc2, 0x5, 0x0, 0x9, 0x0, 0x7, 0x80c8, 0x3, 0x9, 0x9, 0x6, 0x0, 0x5, 0xc, 0xad, 0x3, 0x3ff, 0xd, 0xf, 0x4, 0x8, 0x7, 0x3, 0x2, 0x4, 0x101, 0x1, 0x1, 0x1, 0x401, 0x3, 0x4a2, 0x0, 0xc0000000, 0xdd1], 0x5348, 0x7}, {0xe000003, 0x0, 0x0, 0xfffffff4, 0x7}]}) 8m14.002075215s ago: executing program 2 (id=67): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0070880a020100000800faff0700d06d6558b77daaaaaaaaaa148100000008"], 0x5a) 8m12.866876436s ago: executing program 2 (id=69): r0 = inotify_init1(0x80000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0xaa182, 0x0) ioctl$BLKPG(r1, 0x1269, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xe23, @local}, 0xd, &(0x7f00000001c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc8ee6bb5c", 0x6}], 0x2}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@index_off}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x1000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002100010326bd7078fadbdf2505"], 0x14}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x1f8c) 8m12.372897143s ago: executing program 2 (id=72): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='E\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="05004fbd7000fcdbdf7d41ea7c6b06b0251b00000007"], 0x1c}, 0x1, 0x0, 0x0, 0x24000815}, 0x24004805) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') syz_usb_connect(0x3, 0x24, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x52800000}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000001840), 0x4) pivot_root(&(0x7f0000000180)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000240)='./file0/../file0/../file0\x00') r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x9, @remote, 0x2}}, 0x300, 0x9, 0x1a1eabbf, 0x4, 0x20, 0x8, 0xaa}, &(0x7f0000000400)=0x9c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000440)={r4, 0x6, 0x20}, 0xc) 8m11.609027436s ago: executing program 2 (id=79): r0 = openat$iommufd(0xffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x4) (fail_nth: 3) 8m10.642698298s ago: executing program 2 (id=84): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000004c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x100010, r0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) bind$bt_sco(r1, &(0x7f0000000400)={0x1f, @none}, 0x8) 8m10.467559106s ago: executing program 32 (id=84): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000004c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x100010, r0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) bind$bt_sco(r1, &(0x7f0000000400)={0x1f, @none}, 0x8) 7m27.3239844s ago: executing program 3 (id=238): clock_adjtime(0x0, &(0x7f0000000580)={0x3ff, 0x1000000, 0x4100, 0xd, 0x0, 0x3, 0xfffffffffffffffe, 0x800000000006, 0x0, 0xfe, 0x80000000, 0x100, 0x80, 0xfffffffffffffffc, 0x9f, 0x2, 0x7fffffff, 0x9, 0x2ffffffffffd, 0xd, 0x8, 0x3, 0x2, 0x2, 0xc5e3, 0xe}) (fail_nth: 2) 7m27.103616387s ago: executing program 3 (id=239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) sendmsg$NFT_BATCH(r0, 0x0, 0x24000000) 7m26.577343419s ago: executing program 3 (id=240): clock_adjtime(0x0, &(0x7f0000000580)={0x3ff, 0x1000000, 0x4100, 0xd, 0x0, 0x3, 0xfffffffffffffffe, 0x800000000006, 0x0, 0xfe, 0x80000000, 0x100, 0x80, 0xfffffffffffffffc, 0x9f, 0x2, 0x7fffffff, 0x9, 0x2ffffffffffd, 0xd, 0x8, 0x3, 0x2, 0x2, 0xc5e3, 0xe}) 7m26.462120507s ago: executing program 3 (id=241): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000000c0)=0x20) 7m26.283092984s ago: executing program 3 (id=242): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x21) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x141002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000a00)=0x40000) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000140)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x8180, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x173) lsm_set_self_attr(0x64, &(0x7f00000004c0)={0x68, 0x10, 0x28, 0x8, "672b0dbcfc7520e3"}, 0x28, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000008c0)={0xc0, 0x0, 0x5, 0x3, 0xffffffff}) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xf, 0x10, r2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000000)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendto(r0, &(0x7f00000000c0)="a99b23d8d8a540c406c9dba490d9ee980e785abbeeb1e452b5526c1cd3a08cdff43776bc983fb85c911a0c1d24bcce0fbe716415e041e76aa5317a6af8cf85343a33357b2c3a108df4a1b1f68020a882ba2f6155759edfb3f7dea7e671f4500ae9b126f615844abd50be4de781f9489ffda6e137f9aedcda04fcbf2950dac0cd947e3b40ac9cf492a4763da2417a7b244d436c57f4c282e87df96c38f59af302b58db363016c32a67b168071847d6935e222e85f10b2a6ea4b5140130020ca7594f801fe026316dbe114fedd7afbcec1f6439aef661f58", 0xd7, 0x20000080, &(0x7f0000000200)=@can, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 7m26.115017091s ago: executing program 3 (id=244): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002d000701feffffff01000000017c00000c000180"], 0x24}, 0x1, 0x0, 0x0, 0x4c8d5}, 0xc000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000940)={"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"}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064dd2f9ac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e13c4a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b670400d59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b6dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x2, {0x2, 0x8a, 0x0, '\x00', {0x7ff, 0x40801, 0x79, 0x10, 0x0, 0x0, 0x8000, '\x00', 0x6, 0x8000000000000001, 0x1, 0x3, {0x7, 0x6}, {0x4000000000006, 0xca}, {0x2000001, 0x10000}, {0x5, 0xa00}, 0x2002, 0x6, 0x8, 0x7}}}}) write$FUSE_INIT(r3, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x860, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x3, 0x0, [{0x2, 0x81, 0x505fc888cd5fd7d7, 0xfffffae0, 0x80, 0x9, 0x80000001}, {0x80000008, 0x4, 0xe, 0x2, 0x40, 0x6, 0x9}, {0xa, 0xb6ff, 0x6, 0x0, 0x401, 0x7, 0xfffffffc}]}) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x8) 7m10.069643015s ago: executing program 33 (id=244): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002d000701feffffff01000000017c00000c000180"], 0x24}, 0x1, 0x0, 0x0, 0x4c8d5}, 0xc000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000940)={"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"}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x2, {0x2, 0x8a, 0x0, '\x00', {0x7ff, 0x40801, 0x79, 0x10, 0x0, 0x0, 0x8000, '\x00', 0x6, 0x8000000000000001, 0x1, 0x3, {0x7, 0x6}, {0x4000000000006, 0xca}, {0x2000001, 0x10000}, {0x5, 0xa00}, 0x2002, 0x6, 0x8, 0x7}}}}) write$FUSE_INIT(r3, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x860, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x3, 0x0, [{0x2, 0x81, 0x505fc888cd5fd7d7, 0xfffffae0, 0x80, 0x9, 0x80000001}, {0x80000008, 0x4, 0xe, 0x2, 0x40, 0x6, 0x9}, {0xa, 0xb6ff, 0x6, 0x0, 0x401, 0x7, 0xfffffffc}]}) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x8) 27.897890136s ago: executing program 1 (id=3168): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x4880, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x8000000000000001, 0x8b02) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = dup(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_usb_connect(0x0, 0x41, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x3b, 0x98, 0xfc, 0x40, 0x17ef, 0x480b, 0x6f4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0xe4, 0x1, 0x50, 0x6, "", [{{0x9, 0x4, 0xac, 0x1, 0x0, 0xe, 0x1, 0x0, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x200, 0xcce9, 0xf3}, {0x6, 0x24, 0x1a, 0x4, 0xf}}]}}]}}]}}, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffd67}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) r6 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r6, 0x107, 0x15, 0x0, &(0x7f0000000140)) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000003540)={0x0, @local, @multicast1}, 0xc) ioctl$DVB_DEMUX_DMX_QBUF(r4, 0xc0186f3f, &(0x7f00000000c0)={0x9, 0x2, 0x9, 0x4, 0x10, 0x936}) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000040)={0x0, "61a383835e0100d3f73659550bd82a046f9c129000", 0x3, 0x9, 0x0, 0x20, 0x1000411}) 26.116803959s ago: executing program 1 (id=3178): socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000680)={0x8, {"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", 0x2000}}, 0x1006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.685352548s ago: executing program 4 (id=3209): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x2, 0x4, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@allocspi={0x104, 0x16, 0x1, 0x70bd2f, 0x25dfdbfe, {{{@in=@empty, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x5e}, {@in=@broadcast, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0x0, 0x1ffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001}, 0x70bd2a, 0x10000, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x9}}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0xb1, 0xc8, 0x6b}}}, 0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYBLOB="1e140efa"], 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="1e660216e987d3d11032cf3f7c97127bb46bba78cb7dffa0b81882075da53c66ed8c93c56301e72ea97eebb769b9e8f49c892c3a7d998cd1cc5ac1bb6457e90dcc7e845c350badf873", 0x49) 17.309708093s ago: executing program 4 (id=3211): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) socket$netlink(0x10, 0x3, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r1, 0x4b32, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect$uac3(0x5, 0x12c, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x499, 0x103b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11a, 0x3, 0x1, 0xf4, 0x10, 0x3, {0x8, 0xb, 0x2, 0x1, 0x1, 0x1, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x58, 0xa6}, [@feature_unit={0x1d, 0x24, 0x7, 0x5, 0x1, [0xa, 0x3, 0x9, 0xe, 0xb, 0x1]}, @processing_unit={0x1d, 0x24, 0x9, 0x4, 0x6, [0x2, 0x2, 0x3, 0x3, 0x1, 0x3]}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x100, 0x6, 0x8, 0x100, 0x80, 0x3ad6, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x80, 0x5, 0x82, 0x1, 0x7}, @as_header={0x17, 0x24, 0x1, 0x70, 0x10001, 0x1, 0x1, 0x81, 0x1, 0x2, 0x9}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xc, 0xf5, 0xe, 0x10}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7ff, 0xff, 0x25, 0x31}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0xf7, 0xfd, {0xa, 0x25, 0x25, 0x1, 0x71, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x0, 0x2, 0x800, 0x1001, 0x50, 0x80, 0xd0, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0xf6, 0xfc, {0xa, 0x25, 0x25, 0x1, 0x4, 0xb}}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0x9, 0x71, 0x3, 0x10, 0x7}, 0xf2, &(0x7f0000000340)={0x5, 0xf, 0xf2, 0x6, [@generic={0x2d, 0x10, 0x2, "a86bf3b33b1ef4c2500c3c3e10d9c91ece94602dfd356cd105d34796118c0a7b6f4069b1ead35b6b21b4"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xc, 0x7, 0x101}, @generic={0xac, 0x10, 0x4, "37980094a7d3587bd910558077a37882667e86e97a45d5ba7227efd23ef691b5dbe5f71bf954f0924a0b112fefd5be40993a82ade211a18dfcec1b7d17405ec27599545152cae4c4763bdb653bf61bc3993fc0835df42cb8778e0f8a51a8a96022b286196cc15e61418d61cdb897a32582782dcda98d49586e8892ec5a6d50aeb239641ff1775c3883ecc1c885101faad6a9fb2857640dc3b6e7df08811fd432d249419567b427be76"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0xf, 0x401}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x2, [{0x96, &(0x7f0000000440)=@string={0x96, 0x3, "161e544c2ea8b264eb17d447aaeebf27ba57f7709bc6f52317db4dba547786af4926205aa8b7427e6f931d382a7ca04e165dcb7c49a4a454bb1d6e28efdfba8c66c54ca6a3eb7d6615a835dc00d48cd73012b2616d9fe6bbe29b00ca0a7aec230d8bb8b234250218a47797639a54c3f4eb7bbdbee608889f47a67db28af6407d7070cc574a4bd82ed0e1532e548de71ec87ebe99"}}, {0xc9, &(0x7f0000000500)=@string={0xc9, 0x3, "996a4717273f170e2fd6281048c476ec2b0a77001dd2a0ba2f7149b0bb34b768c49121fd22a3fd2f0fadc17bf5519e49510cfb998a27ce8c6b62dfd1169db5ddf562dbd5be3b45163ec70a4c51cce3c9ee6dec1f1f17c69d3c88085061d319d4d9810a89097dd746acb1e2e6855cddd62a8a98834faad105fbea38d4a2e5d31e6f8f4467c85dae50d0251bf18dae8030184d8dda5d003f8a19a49f4b5f857b35c5e5989496d2e79401527bc03e99b1e193ccf63846bd731ab964fbb978a9bec5fc273540586f15"}}]}) syz_usb_control_io$uac3(r3, &(0x7f0000000780)={0x14, &(0x7f0000000640)={0x40, 0x11, 0xf7, {0xf7, 0x23, "c6f400748e069b2d51b4f4cfeff986d4f8f23fcfb8e455adb5cc95d603003146834953df40ce10c6d176fa02ad08c02e1dff363cc216fc712053c25dfcfa89361fa86707da7a51d2232671550d64eac540a038857a7451a2473e040fc331f91c2a2ad8bc541414e2a65e4d636fec45c747c71ac831604f1db5e539caebf4bda54d525bf4fa2c057c748659e07d78082b9e55c0e805f89c4c064fb31652d546ce3e9d3c53d50a900f8faa8afaabe254f1bcb3bee4c28faac76ab89bcbd6216437b02d9c1161e053795ae3f48e85beb6449883d0e237e37716e4ba5150029bc654f74e67d239e2aafcbdd0191b3e3989380eb029612b"}}, &(0x7f0000000740)={0x0, 0x3, 0xd, @string={0xd, 0x3, "df2e1897d04d808b81d4c1"}}}, &(0x7f00000009c0)={0x44, &(0x7f00000007c0)={0x40, 0x15, 0xd, "9cb8b60c752e4a8adf706f3e0f"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000880)={0x20, 0x81, 0x1, "f7"}, &(0x7f00000008c0)={0x20, 0x82, 0x2, "5ca6"}, &(0x7f0000000900)={0x20, 0x83, 0x1, 'v'}, &(0x7f0000000940)={0x20, 0x84, 0x2, "d2e0"}, &(0x7f0000000980)={0x20, 0x85, 0x3, "7ef897"}}) 8.758962164s ago: executing program 5 (id=3235): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) read$eventfd(r1, &(0x7f0000000180), 0x8) io_setup(0x4, 0x0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}]) 8.181802977s ago: executing program 4 (id=3236): r0 = socket$inet6(0xa, 0x80002, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000a00)={0x0, "fdfddfd25c538414cf29b73cbe8eba52"}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000002180)={0x0, "9278eb7124a401012fc8828c6ace7bf7"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000003180)={0x0, 0x7, 0xbdde}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000003580)={0x10, 0x3, {0xfffffffffffffcbc, @usage=0x3, r1, 0x3, 0x7, 0x7, 0x7, 0x100000000, 0x4, @usage=0x1, 0x8, 0x10001, [0x8, 0x19, 0x2b, 0x8, 0x9, 0xfc]}, {0x200, @struct={0x3, 0x7}, r2, 0xfffffffffffffffc, 0x7, 0x7, 0x5, 0x5, 0xc0, @usage=0x2, 0x9, 0xfffffffb, [0x564a, 0x4, 0x7, 0x7fff, 0xfff, 0x9]}, {0x0, @struct={0x200}, r3, 0x5, 0x9, 0x5, 0x6, 0x4, 0x410, @struct={0x8, 0x72}, 0x8, 0x20, [0xb5, 0x9, 0x6, 0x4, 0x9, 0x9]}, {0x0, 0x2}}) socket(0x2, 0x3, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) r4 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000240)={0x0, 0x0, 0x100, 0x3, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1}) r8 = openat$ttynull(0xffffff9c, &(0x7f0000000500), 0x800, 0x0) ioctl$TIOCGLCKTRMIOS(r8, 0x5456, &(0x7f00000008c0)={0xfffff801, 0x6, 0x1001, 0x3fe, 0x6, "fc1c92867a85316d4970d64a6023a658031299"}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 7.579187567s ago: executing program 5 (id=3237): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x500, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000100)={0x1, &(0x7f00000e4280)=[{0xe000003, 0x85, &(0x7f0000000140)=[0x3, 0x53c000, 0x722, 0x6, 0x9, 0x8, 0xa428, 0x5, 0xa, 0x4, 0x0, 0xfffffffa, 0x4, 0x3, 0x6, 0x5, 0x2, 0x5, 0xef1, 0x1000, 0x400, 0x4a8, 0x7fffffff, 0x594a, 0xfffffff7, 0x10, 0x9, 0x9, 0x3, 0x7, 0x5, 0x200, 0x1, 0x5, 0x800, 0x2, 0x10, 0xf88d, 0xaf888e92, 0xd, 0x3, 0x849, 0x64, 0x0, 0x7, 0x101, 0x400, 0x8, 0x5, 0x8, 0x3, 0x8075, 0x8000, 0x0, 0x7fff, 0x0, 0x8000, 0x7, 0x3, 0x4b, 0x81, 0x3, 0x8f8, 0x2, 0x2, 0xfffffff3, 0x0, 0xff, 0x4, 0x2835, 0x8, 0x400, 0xd, 0x48c, 0x640, 0x4, 0x80000000, 0x8, 0x9, 0x0, 0x6, 0x8865, 0x0, 0x0, 0x7, 0x7f, 0x9, 0x7, 0x9, 0x0, 0xa934380f, 0x69, 0x8, 0x7, 0xc161, 0x7, 0xfffff000, 0x7fffffff, 0x10, 0x1, 0x5, 0x0, 0xb39, 0xe55, 0x1, 0x4, 0x4, 0x1, 0x0, 0x9, 0x8, 0x7, 0x7, 0x7fff, 0xfffffff8, 0x3, 0x3, 0xffffffd4, 0xc74, 0x400, 0x6, 0x312c, 0x5, 0x401, 0x2, 0x500, 0x554, 0x101, 0x4, 0xc, 0x2, 0x6, 0x1], 0x5348, 0x7}]}) 7.057166529s ago: executing program 5 (id=3238): syz_usb_connect(0x6, 0x68, &(0x7f0000000000)=ANY=[], 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00c09914a9b1", @ANYRES64=r0], 0xb2) 6.065530519s ago: executing program 5 (id=3241): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000002940)=[{{&(0x7f00000000c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000002500)=[{&(0x7f0000000140)="f274ea7a860dacb310b236b4fe32ccb3d3e804c8d3d57cd073c762ff1674cbd3d3b51bd9a69cd8528a86836e73fa0748e22c55f483b03e3fb846055252786b6b37d90ce027a227cb5bfd07a56e76b70bc2cf92c4cdf4a3e3a819c846e8c59609e6edbccbd111e096a4cc9713155685bcd07fd5d4bf0562692b39aa93e8f8a18474bb7f65149f22423e029463e054edea6c055b04a93cc4b76c0cbecf99f7bf484e1ed3b979738942cab5f755b816a04a601c3612acbbc9d2", 0xb8}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="386218f7e0b6bd66dc7f864d812f9a20eb2fd6cc52146b8e6bf8541cae3a900783e06de775124e7cb12f553d9a44a989ce101419b01023750a73d157e9978bb7ffa9abcc51422190ea4ad8fafd67135f5c4bedc1846a5f8f8a5ba189f2251ef20193ae6b1c8e436e98c4b6e56449060b8aae8a60d01db46b36c3ec7371f305ca45787fb77a77", 0x86}, {&(0x7f0000002440)="c6050dc7969917522fe7cdbf75e6a393332e2c2ce7647ec15ad2f6ecd9dc44a927", 0x21}, {&(0x7f0000002480)="b272ee7b590cd09091f74d649e07ca256ba5c642b06550495d0d7059be71f7741ef6dd07ae78f5fb1e571d72005bd38460fd3e9a6749d1c5ac4eccb4ee1002ec7ac5a0b30a1228c3b5f9a4eceace1e0a57a337198c57ba85b2492ec7cea1725dacb20fc7d7901c", 0x67}], 0x6, &(0x7f0000002580)=[{0x88, 0x3a, 0x8001, "fbc6efa8b255526fecc4ba419b4d53601d8b054df7c4bcf7512b3d51888c46b24d2d38bf3f3b1818d5ccdff68a15f8768e0ec7b3fb09d7386878a9e1f816fe1824e868fe674f6d48a76b6397f1f7ad0f50081b3fdd6f13107400fe02020487616324c23b5710a4e5733b58a585105e1db844"}, {0xffffffffffffff76, 0x3a, 0x1, "4ba728135cca883efb7d28b114b4fdb809b2bfb749a8a879ec37126059ca74f3ddc2e4fc4c8003ae4cb0696a4375173571466d9780a233f37b970a58ec05006f12d1faedffa4057e294368128b6d506b5c5c0b2e440020dd2f84320dc9cc26d410656686f5654c6250f93f6a9eca972fb90586f964903ffb296b3ea8251c90a11ccf3e4db238bbd6de3ac0cf798507b25c81c2"}, {0xe0, 0x10c, 0x0, "e275e12eeb5c0826b7c53561d64dfdb43785d421e82444456a5232cdc415d6a78e29652fed2ef05644cc2e8f7a9025ba9813c9cc27ecca6a3954f66a60a489f7e2fb6a1ad2659485625698f00cc450aab8a987d11218a01174473745cae1fcce0ac710a52ebc2a6ffb669bf8fde31b596c88a8ef9795e997c72918c9571fb1a43ad2efba9c602ad4d8ec1712b0eef8c4a3d1807e8b4c44cc6a356fe40f9cdddc367be27be9c52412f712c715419d171f839f18c241b9c7ad758aa9115c71953e72d2cf2db72f011b1edd64875637de"}, {0x98, 0x113, 0x3, "5c9ac7ef0009900a705e716a6bd642c29daf55e7dc351c43136ea8cb483348d08fd949de969354d982454cc3cb9392a878789af25880d14aa7159439fe84ccdbb06a214ba56c080cdabceeae40dfcaf7b481f99c6588335440392c067e4a2cfcd1d4082985d80fcf8c3441bb9ae7915ae1064bbdcf914eb12497b86e3282208aaf4e5cad0416"}, {0x98, 0x88, 0x7ff, "725ee3b6c8ad0151259da44a3837af61a5d0364b93024e81beeeafb9d1ffc6906836a0c71d08d1c4e767abb132ef17ca8725c162f8c3a6d38405ecb0688ea58c7f89f50f1834dc00f3d9077e691d05c6d1369da28c6816ebbfea54169236b486263a0e86493b2bdc81ec6e79aac498c99c99b791a9e96f1cd83466bfb71935a84a3059447fa840"}, {0x58, 0x114, 0x3, "6040c93b1db22540a2b948d84e4eb81cb2f02101a545dfa258f20f93b286a7fdccff224cf71eb87bfbbff3e9183e016361b64436a0b48f0108a7a57009f3dded38448aa5c4f55d"}], 0x398}}], 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000000b1401d2"], 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) read(r6, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x100000001, 0x2, 0x3, 0x0, 0x3}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000023f3201"], 0x138) connect$nfc_raw(r3, &(0x7f0000000240)={0x27, r4, 0x0, 0x2}, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="01000000b50300000000000046000000"], 0x14}, 0x1, 0x0, 0x0, 0x95}, 0x0) 5.06155345s ago: executing program 1 (id=3183): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) migrate_pages(0x0, 0x7ffb, &(0x7f00000000c0)=0x1, 0x0) (async) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000000, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = getpgid(r0) syz_pidfd_open(r1, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x5, 0x1, {r1}, {0xffffffffffffffff}, 0x2, 0x2}) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r2, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) 4.970629634s ago: executing program 4 (id=3243): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') lseek(r0, 0xeeb3, 0x0) getdents64(r0, 0x0, 0x0) 4.84297495s ago: executing program 4 (id=3244): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e6ea, [{{0x9, 0x2, 0x48}}]}}, 0x0) set_mempolicy(0x8001, 0x0, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.387014267s ago: executing program 1 (id=3247): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'vlan0\x00', {0x3}, 0x4}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x20001, 0xcb) write$cgroup_devices(r1, &(0x7f0000000140)={'b', ' *:* ', 'r\x00'}, 0x8) fcntl$setlease(r0, 0x400, 0x1) 2.959091766s ago: executing program 1 (id=3250): r0 = socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r0]) prctl$PR_SET_THP_DISABLE(0x42, 0x0) open(0x0, 0x100, 0x80) symlink(0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x410002, 0x100, 0xb}, 0x18) 2.916090468s ago: executing program 5 (id=3251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000040000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000140004800800040000001617080001"], 0xe4}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) syz_io_uring_setup(0x44e3, &(0x7f00000001c0)={0x0, 0x5e17, 0x0, 0x3, 0x170, 0x0, r2}, &(0x7f0000000000), &(0x7f0000000280), &(0x7f00000002c0)) 2.242828688s ago: executing program 1 (id=3253): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b00010000000109040100"], 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, r3, r4) sendmmsg$alg(r1, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86ae", 0xe0}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f00e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd7", 0x3e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d", 0x30}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b3", 0xb5}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) mknodat(0xffffffffffffff9c, &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0xed3) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) sendto(r0, 0x0, 0x0, 0x20008880, 0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) 1.251773713s ago: executing program 0 (id=3254): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x500, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000100)={0x1, &(0x7f00000e4280)=[{0xe000003, 0x83, &(0x7f0000000140)=[0x3, 0x53c000, 0x722, 0x6, 0x9, 0x8, 0xa428, 0x5, 0xa, 0x4, 0x0, 0xfffffffa, 0x4, 0x3, 0x6, 0x5, 0x2, 0x5, 0xef1, 0x1000, 0x400, 0x4a8, 0x7fffffff, 0x594a, 0xfffffff7, 0x10, 0x9, 0x9, 0x3, 0x7, 0x5, 0x200, 0x1, 0x5, 0x800, 0x2, 0x10, 0xf88d, 0xaf888e92, 0xd, 0x3, 0x849, 0x64, 0x0, 0x7, 0x101, 0x400, 0x8, 0x5, 0x8, 0x3, 0x8075, 0x8000, 0x0, 0x7fff, 0x0, 0x8000, 0x7, 0x3, 0x4b, 0x81, 0x3, 0x8f8, 0x2, 0x2, 0xfffffff3, 0x0, 0xff, 0x4, 0x2835, 0x8, 0x400, 0xd, 0x48c, 0x640, 0x4, 0x80000000, 0x8, 0x9, 0x0, 0x6, 0x8865, 0x0, 0x0, 0x7, 0x7f, 0x9, 0x7, 0x9, 0x0, 0xa934380f, 0x69, 0x8, 0x7, 0xc161, 0x7, 0xfffff000, 0x7fffffff, 0x10, 0x1, 0x5, 0x0, 0xb39, 0xe55, 0x1, 0x4, 0x4, 0x1, 0x0, 0x9, 0x8, 0x7, 0x7, 0x7fff, 0xfffffff8, 0x3, 0x3, 0xffffffd4, 0xc74, 0x400, 0x6, 0x312c, 0x5, 0x401, 0x2, 0x500, 0x554, 0x101, 0x4, 0x6, 0x1], 0x5348, 0x7}]}) 1.251016734s ago: executing program 4 (id=3255): fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000010000)=ANY=[@ANYBLOB="40150400000059d11c5f"], 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x8}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r3 = open(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x80082, 0x40) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000005900)=0x10000) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000000c0)="ee2f82", 0x3}) write(r4, &(0x7f0000000180)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) 1.134981807s ago: executing program 0 (id=3256): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0xee43, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000400)={0xf, 0x1, 0x2, "18e889cb5bfb8276529323b392b837e339070000000000010000008000", 0x41416770}) 1.027510434s ago: executing program 0 (id=3257): r0 = syz_ublk_setup_io_uring(0x1f, &(0x7f0000000500)={0x0, 0xf8c8, 0x80, 0x2, 0x35}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000640)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000440)={0x2e, 0x41, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x1, 0xee5, 0x0, 0x0, 0x1000, 0x6489, 0x0, 0x0, 0x114560f04ac8842e}}}, &(0x7f0000000a80)) (fail_nth: 9) 971.282153ms ago: executing program 0 (id=3258): r0 = syz_ublk_setup_io_uring(0x1b, &(0x7f0000000500)={0x0, 0xf8c8, 0x80, 0x3, 0x35}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10, 0x800) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10080, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000640)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000440)={0x2e, 0x41, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x1, 0xee5, 0x0, 0x0, 0x1000, 0x6489, 0x0, 0x0, 0x114560f04ac8842e}}}, &(0x7f0000000a80)) 870.728621ms ago: executing program 0 (id=3259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) (fail_nth: 11) 474.970862ms ago: executing program 0 (id=3260): preadv(0xffffffffffffffff, 0x0, 0x0, 0xc002a0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000008c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=""/176, 0xb0) 0s ago: executing program 5 (id=3261): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x4, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0xa4000021) read(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x891b, 0x0) r3 = socket$kcm(0xa, 0x0, 0x3a) r4 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x1, 0x4) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) close(r7) r8 = socket(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x9, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESDEC=r8]) write$tun(r7, &(0x7f0000000040)={@void, @void, @mpls={[{0xffffd}, {0x8}, {0x9}], @llc={@snap={0x1, 0x155, "d3", "1718f7", 0x883e, "ed879a8f97ec72430622be8358b753340c58dd09c7f037bb31aac69d4c"}}}}, 0x31) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x5, @mcast2, 0x40}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000000c0)="8000d319ac7fae65", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) kernel console output (not intermixed with test programs): zkaller #0 PREEMPT_{RT,(full)} [ 531.657107][T13859] Tainted: [L]=SOFTLOCKUP [ 531.657115][T13859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 531.657129][T13859] Call Trace: [ 531.657138][T13859] [ 531.657147][T13859] dump_stack_lvl+0xe8/0x150 [ 531.657178][T13859] should_fail_ex+0x467/0x600 [ 531.657216][T13859] _copy_to_user+0x31/0xb0 [ 531.657246][T13859] simple_read_from_buffer+0xe1/0x170 [ 531.657277][T13859] proc_fail_nth_read+0x1be/0x230 [ 531.657306][T13859] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 531.657334][T13859] ? rw_verify_area+0x250/0x4d0 [ 531.657364][T13859] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 531.657388][T13859] vfs_read+0x219/0xa90 [ 531.657426][T13859] ? __pfx_vfs_read+0x10/0x10 [ 531.657456][T13859] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 531.657485][T13859] ? lockdep_hardirqs_on+0x7a/0x110 [ 531.657514][T13859] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 531.657542][T13859] ? mutex_lock_nested+0x152/0x1d0 [ 531.657574][T13859] ? fdget_pos+0x252/0x320 [ 531.657607][T13859] ksys_read+0x156/0x270 [ 531.657639][T13859] ? __pfx_ksys_read+0x10/0x10 [ 531.657666][T13859] ? __pfx_snd_pcm_ioctl+0x10/0x10 [ 531.657708][T13859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.657733][T13859] do_syscall_64+0x174/0x580 [ 531.657760][T13859] ? trace_irq_disable+0x3b/0x140 [ 531.657789][T13859] ? clear_bhb_loop+0x40/0x90 [ 531.657817][T13859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.657839][T13859] RIP: 0033:0x7fd64632d68e [ 531.657861][T13859] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 531.657880][T13859] RSP: 002b:00007fd6445bdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 531.657904][T13859] RAX: ffffffffffffffda RBX: 00007fd6445be6c0 RCX: 00007fd64632d68e [ 531.657921][T13859] RDX: 000000000000000f RSI: 00007fd6445be0a0 RDI: 0000000000000006 [ 531.657945][T13859] RBP: 00007fd6445be090 R08: 0000000000000000 R09: 0000000000000000 [ 531.657959][T13859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.657973][T13859] R13: 00007fd6465e6038 R14: 00007fd6465e5fa0 R15: 00007fff4cc1e8a8 [ 531.658008][T13859] [ 531.819895][ T11] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 531.971327][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 531.973844][ T11] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.973881][ T11] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.973906][ T11] usb 5-1: config 0 interface 0 has no altsetting 0 [ 531.973943][ T11] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 531.973969][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.990626][ T11] usb 5-1: config 0 descriptor?? [ 532.543704][T13883] overlay: Unknown parameter 'fsname' [ 533.540990][ T5782] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 533.693943][ T5782] usb 1-1: unable to get BOS descriptor or descriptor too short [ 533.694690][ T5782] usb 1-1: not running at top speed; connect to a high speed hub [ 533.696932][ T5782] usb 1-1: config 250 has an invalid interface number: 239 but max is 0 [ 533.696961][ T5782] usb 1-1: config 250 has no interface number 0 [ 533.697010][ T5782] usb 1-1: config 250 interface 239 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 533.697038][ T5782] usb 1-1: config 250 interface 239 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 533.697063][ T5782] usb 1-1: config 250 interface 239 altsetting 2 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 533.697093][ T5782] usb 1-1: config 250 interface 239 altsetting 2 endpoint 0x83 has invalid maxpacket 59526, setting to 64 [ 533.697124][ T5782] usb 1-1: config 250 interface 239 altsetting 2 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 533.697155][ T5782] usb 1-1: config 250 interface 239 has no altsetting 0 [ 533.699093][ T5782] usb 1-1: language id specifier not provided by device, defaulting to English [ 533.709221][ T5782] usb 1-1: New USB device found, idVendor=05e0, idProduct=2009, bcdDevice=fc.ef [ 533.709252][ T5782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.709272][ T5782] usb 1-1: Product: syz [ 533.709380][ T5782] usb 1-1: SerialNumber: syz [ 533.728931][T13912] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 533.730548][T13912] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 533.975577][ T5782] ipaq 1-1:250.239: PocketPC PDA converter detected [ 533.975927][ T5782] usb 1-1: active config #250 != 1 ?? [ 533.997012][ T5782] usb 1-1: USB disconnect, device number 52 [ 534.129744][ T5340] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 534.209712][ T11] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 534.279669][ T5340] usb 6-1: Using ep0 maxpacket: 32 [ 534.283187][ T5340] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 534.283219][ T5340] usb 6-1: config 0 has no interface number 0 [ 534.283260][ T5340] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 534.285920][ T5340] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 534.285950][ T5340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.285980][ T5340] usb 6-1: Product: syz [ 534.285995][ T5340] usb 6-1: Manufacturer: syz [ 534.286011][ T5340] usb 6-1: SerialNumber: syz [ 534.350902][ T5340] usb 6-1: config 0 descriptor?? [ 534.355104][T13927] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 534.359982][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 534.382640][ T11] usb 2-1: config index 0 descriptor too short (expected 37359, got 202) [ 534.382674][ T11] usb 2-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 534.382697][ T11] usb 2-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 534.382718][ T11] usb 2-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 534.395420][ T11] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 534.395451][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.395473][ T11] usb 2-1: Product: syz [ 534.395490][ T11] usb 2-1: Manufacturer: syz [ 534.395506][ T11] usb 2-1: SerialNumber: syz [ 534.434942][ T11] usb 2-1: 0:2 : does not exist [ 534.571999][T13927] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 534.757856][ T11] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 534.926671][ T202] usb 5-1: USB disconnect, device number 86 [ 535.070185][ T5782] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 535.076751][ T11] usb 2-1: USB disconnect, device number 125 [ 535.215348][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.221417][ T5782] usb 1-1: Using ep0 maxpacket: 16 [ 535.252220][ T5782] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 535.252269][ T5782] usb 1-1: can't read configurations, error -61 [ 535.379845][ T5782] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 535.505931][ T5340] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 535.505966][ T5340] asix 6-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 535.506278][ T5340] asix 6-1:0.188: probe with driver asix failed with error -71 [ 535.529748][ T5782] usb 1-1: Using ep0 maxpacket: 16 [ 535.560387][ T5782] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 535.560431][ T5782] usb 1-1: can't read configurations, error -61 [ 535.560876][ T5782] usb usb1-port1: attempt power cycle [ 535.573932][ T5340] usb 6-1: USB disconnect, device number 57 [ 535.658214][T13948] FAULT_INJECTION: forcing a failure. [ 535.658214][T13948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.658241][T13948] CPU: 0 UID: 0 PID: 13948 Comm: syz.1.2883 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 535.658260][T13948] Tainted: [L]=SOFTLOCKUP [ 535.658265][T13948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 535.658273][T13948] Call Trace: [ 535.658278][T13948] [ 535.658284][T13948] dump_stack_lvl+0xe8/0x150 [ 535.658304][T13948] should_fail_ex+0x467/0x600 [ 535.658327][T13948] _copy_to_user+0x31/0xb0 [ 535.658343][T13948] simple_read_from_buffer+0xe1/0x170 [ 535.658361][T13948] proc_fail_nth_read+0x1be/0x230 [ 535.658377][T13948] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 535.658393][T13948] ? rw_verify_area+0x250/0x4d0 [ 535.658410][T13948] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 535.658423][T13948] vfs_read+0x219/0xa90 [ 535.658444][T13948] ? __pfx_vfs_read+0x10/0x10 [ 535.658461][T13948] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 535.658478][T13948] ? lockdep_hardirqs_on+0x7a/0x110 [ 535.658493][T13948] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 535.658509][T13948] ? mutex_lock_nested+0x152/0x1d0 [ 535.658527][T13948] ? fdget_pos+0x252/0x320 [ 535.658546][T13948] ksys_read+0x156/0x270 [ 535.658564][T13948] ? __pfx_ksys_read+0x10/0x10 [ 535.658591][T13948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.658605][T13948] do_syscall_64+0x174/0x580 [ 535.658621][T13948] ? trace_irq_disable+0x3b/0x140 [ 535.658637][T13948] ? clear_bhb_loop+0x40/0x90 [ 535.658652][T13948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.658665][T13948] RIP: 0033:0x7fe74005d68e [ 535.658677][T13948] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 535.658688][T13948] RSP: 002b:00007fe73e2f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 535.658703][T13948] RAX: ffffffffffffffda RBX: 00007fe73e2f66c0 RCX: 00007fe74005d68e [ 535.658713][T13948] RDX: 000000000000000f RSI: 00007fe73e2f60a0 RDI: 0000000000000004 [ 535.658721][T13948] RBP: 00007fe73e2f6090 R08: 0000000000000000 R09: 0000000000000000 [ 535.658728][T13948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 535.658736][T13948] R13: 00007fe740316038 R14: 00007fe740315fa0 R15: 00007ffd82230ce8 [ 535.658755][T13948] [ 535.800064][T13953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2884'. [ 535.904990][ T5782] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 535.920327][ T5782] usb 1-1: Using ep0 maxpacket: 16 [ 535.926038][ T5782] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 535.926078][ T5782] usb 1-1: can't read configurations, error -61 [ 536.011384][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2885'. [ 536.069830][ T5782] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 536.107511][ T5782] usb 1-1: Using ep0 maxpacket: 16 [ 536.132855][ T5782] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 536.132901][ T5782] usb 1-1: can't read configurations, error -61 [ 536.133453][ T5782] usb usb1-port1: unable to enumerate USB device [ 536.299903][T13964] FAULT_INJECTION: forcing a failure. [ 536.299903][T13964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.299944][T13964] CPU: 1 UID: 0 PID: 13964 Comm: syz.1.2888 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 536.300004][T13964] Tainted: [L]=SOFTLOCKUP [ 536.300013][T13964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 536.300026][T13964] Call Trace: [ 536.300035][T13964] [ 536.300046][T13964] dump_stack_lvl+0xe8/0x150 [ 536.300078][T13964] should_fail_ex+0x467/0x600 [ 536.300117][T13964] _copy_to_user+0x31/0xb0 [ 536.300146][T13964] drm_ioctl+0x736/0xba0 [ 536.300190][T13964] ? __pfx_drm_mode_get_lease_ioctl+0x10/0x10 [ 536.300224][T13964] ? __pfx_drm_ioctl+0x10/0x10 [ 536.300268][T13964] ? __fget_files+0x2a/0x420 [ 536.300298][T13964] ? bpf_lsm_file_ioctl+0x9/0x20 [ 536.300324][T13964] ? __pfx_drm_ioctl+0x10/0x10 [ 536.300353][T13964] __se_sys_ioctl+0xff/0x170 [ 536.300384][T13964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.300408][T13964] do_syscall_64+0x174/0x580 [ 536.300436][T13964] ? trace_irq_disable+0x3b/0x140 [ 536.300465][T13964] ? clear_bhb_loop+0x40/0x90 [ 536.300487][T13964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.300505][T13964] RIP: 0033:0x7fe74009ce59 [ 536.300523][T13964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.300541][T13964] RSP: 002b:00007fe73e2f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 536.300565][T13964] RAX: ffffffffffffffda RBX: 00007fe740315fa0 RCX: 00007fe74009ce59 [ 536.300581][T13964] RDX: 0000200000000400 RSI: 00000000c01064c8 RDI: 0000000000000003 [ 536.300597][T13964] RBP: 00007fe73e2f6090 R08: 0000000000000000 R09: 0000000000000000 [ 536.300611][T13964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.300625][T13964] R13: 00007fe740316038 R14: 00007fe740315fa0 R15: 00007ffd82230ce8 [ 536.300660][T13964] [ 536.593159][ T5782] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 536.743652][ T5782] usb 5-1: unable to get BOS descriptor or descriptor too short [ 536.746022][ T5782] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 536.759030][ T5782] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=2e.d7 [ 536.759063][ T5782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.759083][ T5782] usb 5-1: Product: syz [ 536.759097][ T5782] usb 5-1: Manufacturer: syz [ 536.759111][ T5782] usb 5-1: SerialNumber: syz [ 536.872754][T13980] FAULT_INJECTION: forcing a failure. [ 536.872754][T13980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.872782][T13980] CPU: 0 UID: 0 PID: 13980 Comm: syz.5.2895 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 536.872801][T13980] Tainted: [L]=SOFTLOCKUP [ 536.872806][T13980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 536.872814][T13980] Call Trace: [ 536.872819][T13980] [ 536.872825][T13980] dump_stack_lvl+0xe8/0x150 [ 536.872849][T13980] should_fail_ex+0x467/0x600 [ 536.872872][T13980] _copy_to_user+0x31/0xb0 [ 536.872888][T13980] simple_read_from_buffer+0xe1/0x170 [ 536.872907][T13980] proc_fail_nth_read+0x1be/0x230 [ 536.872923][T13980] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 536.872939][T13980] ? rw_verify_area+0x250/0x4d0 [ 536.872957][T13980] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 536.872970][T13980] vfs_read+0x219/0xa90 [ 536.872991][T13980] ? __pfx_vfs_read+0x10/0x10 [ 536.873008][T13980] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 536.873026][T13980] ? lockdep_hardirqs_on+0x7a/0x110 [ 536.873042][T13980] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 536.873057][T13980] ? mutex_lock_nested+0x152/0x1d0 [ 536.873076][T13980] ? fdget_pos+0x252/0x320 [ 536.873095][T13980] ksys_read+0x156/0x270 [ 536.873109][T13980] ? __pfx_n_tty_ioctl+0x10/0x10 [ 536.873129][T13980] ? __pfx_ksys_read+0x10/0x10 [ 536.873150][T13980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.873163][T13980] do_syscall_64+0x174/0x580 [ 536.873179][T13980] ? trace_irq_disable+0x3b/0x140 [ 536.873195][T13980] ? clear_bhb_loop+0x40/0x90 [ 536.873210][T13980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.873223][T13980] RIP: 0033:0x7fd64632d68e [ 536.873235][T13980] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 536.873247][T13980] RSP: 002b:00007fd6445bdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 536.873261][T13980] RAX: ffffffffffffffda RBX: 00007fd6445be6c0 RCX: 00007fd64632d68e [ 536.873271][T13980] RDX: 000000000000000f RSI: 00007fd6445be0a0 RDI: 0000000000000004 [ 536.873279][T13980] RBP: 00007fd6445be090 R08: 0000000000000000 R09: 0000000000000000 [ 536.873286][T13980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.873294][T13980] R13: 00007fd6465e6038 R14: 00007fd6465e5fa0 R15: 00007fff4cc1e8a8 [ 536.873313][T13980] [ 537.076324][ T5782] usb 5-1: probing VID:PID(0424:012C) [ 537.091217][ T5782] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 537.148407][ T5782] vub300 5-1:3.0: probe with driver vub300 failed with error -22 [ 537.161857][ T5782] usb 5-1: USB disconnect, device number 87 [ 537.508270][T13996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2902'. [ 537.593196][ T37] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 537.794744][ T37] usb 6-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 537.794780][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.794800][ T37] usb 6-1: Product: syz [ 537.794815][ T37] usb 6-1: Manufacturer: syz [ 537.794824][ T37] usb 6-1: SerialNumber: syz [ 537.897708][ T5614] Bluetooth: hci2: unexpected subevent 0x10 length: 18 > 2 [ 538.165891][ T37] usb 6-1: Fast Track Pro switching to config #2 [ 538.372979][ T5782] usb 6-1: USB disconnect, device number 58 [ 538.483471][T13997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2902'. [ 538.483508][T13997] nbd: nbd64 already in use [ 538.994605][T14017] openvswitch: netlink: Missing key (keys=40, expected=100) [ 540.046730][T14041] FAULT_INJECTION: forcing a failure. [ 540.046730][T14041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.062339][T14041] CPU: 1 UID: 0 PID: 14041 Comm: syz.5.2917 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 540.062376][T14041] Tainted: [L]=SOFTLOCKUP [ 540.062384][T14041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 540.062396][T14041] Call Trace: [ 540.062405][T14041] [ 540.062413][T14041] dump_stack_lvl+0xe8/0x150 [ 540.062443][T14041] should_fail_ex+0x467/0x600 [ 540.062487][T14041] _copy_to_user+0x31/0xb0 [ 540.062514][T14041] simple_read_from_buffer+0xe1/0x170 [ 540.062542][T14041] proc_fail_nth_read+0x1be/0x230 [ 540.062568][T14041] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 540.062593][T14041] ? rw_verify_area+0x250/0x4d0 [ 540.062619][T14041] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 540.062640][T14041] vfs_read+0x219/0xa90 [ 540.062674][T14041] ? __pfx_vfs_read+0x10/0x10 [ 540.062701][T14041] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 540.062726][T14041] ? lockdep_hardirqs_on+0x7a/0x110 [ 540.062750][T14041] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 540.062775][T14041] ? mutex_lock_nested+0x152/0x1d0 [ 540.062803][T14041] ? fdget_pos+0x252/0x320 [ 540.062833][T14041] ksys_read+0x156/0x270 [ 540.062860][T14041] ? __pfx_ksys_read+0x10/0x10 [ 540.062892][T14041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.062915][T14041] do_syscall_64+0x174/0x580 [ 540.062939][T14041] ? trace_irq_disable+0x3b/0x140 [ 540.062963][T14041] ? clear_bhb_loop+0x40/0x90 [ 540.062988][T14041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.063008][T14041] RIP: 0033:0x7fd64632d68e [ 540.063027][T14041] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 540.063044][T14041] RSP: 002b:00007fd6445bdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 540.063065][T14041] RAX: ffffffffffffffda RBX: 00007fd6445be6c0 RCX: 00007fd64632d68e [ 540.063080][T14041] RDX: 000000000000000f RSI: 00007fd6445be0a0 RDI: 0000000000000004 [ 540.063092][T14041] RBP: 00007fd6445be090 R08: 0000000000000000 R09: 0000000000000000 [ 540.063105][T14041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.063117][T14041] R13: 00007fd6465e6038 R14: 00007fd6465e5fa0 R15: 00007fff4cc1e8a8 [ 540.063149][T14041] [ 540.567057][T14060] tipc: Can't bind to reserved service type 0 [ 541.184318][T14076] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2929'. [ 541.584966][T14082] netlink: zone id is out of range [ 541.584982][T14082] netlink: zone id is out of range [ 541.584992][T14082] netlink: zone id is out of range [ 541.585002][T14082] netlink: zone id is out of range [ 541.585011][T14082] netlink: zone id is out of range [ 541.585029][T14082] netlink: zone id is out of range [ 541.585038][T14082] netlink: zone id is out of range [ 541.585047][T14082] netlink: zone id is out of range [ 541.585056][T14082] netlink: zone id is out of range [ 542.091030][ T202] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 542.239748][ T202] usb 5-1: Using ep0 maxpacket: 32 [ 542.256214][ T202] usb 5-1: unable to get BOS descriptor or descriptor too short [ 542.275477][ T202] usb 5-1: config 1 has an invalid interface number: 5 but max is 0 [ 542.275506][ T202] usb 5-1: config 1 has no interface number 0 [ 542.275542][ T202] usb 5-1: config 1 interface 5 has no altsetting 0 [ 542.279040][ T202] usb 5-1: New USB device found, idVendor=05c6, idProduct=9079, bcdDevice=e2.61 [ 542.279073][ T202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.279095][ T202] usb 5-1: Product: syz [ 542.279111][ T202] usb 5-1: Manufacturer: syz [ 542.279133][ T202] usb 5-1: SerialNumber: syz [ 542.409421][T14104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2939'. [ 542.780998][ T202] usb 5-1: USB disconnect, device number 88 [ 543.009997][ T5782] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 543.126317][T14110] syzkaller0: entered promiscuous mode [ 543.126351][T14110] syzkaller0: entered allmulticast mode [ 543.239956][ T5782] usb 6-1: Using ep0 maxpacket: 32 [ 543.242450][ T5782] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 543.242482][ T5782] usb 6-1: config 0 has no interface number 0 [ 543.245892][ T5782] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 543.245935][ T5782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.245957][ T5782] usb 6-1: Product: syz [ 543.245973][ T5782] usb 6-1: Manufacturer: syz [ 543.245989][ T5782] usb 6-1: SerialNumber: syz [ 543.258010][ T5782] usb 6-1: config 0 descriptor?? [ 543.426890][T14121] netlink: 'syz.4.2946': attribute type 21 has an invalid length. [ 543.757113][T14109] netlink: 130 bytes leftover after parsing attributes in process `syz.5.2942'. [ 543.758524][ T5782] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 543.758545][ T5782] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 544.139314][T14135] FAULT_INJECTION: forcing a failure. [ 544.139314][T14135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.139343][T14135] CPU: 1 UID: 0 PID: 14135 Comm: syz.1.2951 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 544.139378][T14135] Tainted: [L]=SOFTLOCKUP [ 544.139386][T14135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 544.139400][T14135] Call Trace: [ 544.139410][T14135] [ 544.139420][T14135] dump_stack_lvl+0xe8/0x150 [ 544.139451][T14135] should_fail_ex+0x467/0x600 [ 544.139488][T14135] _copy_to_user+0x31/0xb0 [ 544.139506][T14135] simple_read_from_buffer+0xe1/0x170 [ 544.139524][T14135] proc_fail_nth_read+0x1be/0x230 [ 544.139555][T14135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 544.139583][T14135] ? rw_verify_area+0x250/0x4d0 [ 544.139612][T14135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 544.139635][T14135] vfs_read+0x219/0xa90 [ 544.139669][T14135] ? __pfx_vfs_read+0x10/0x10 [ 544.139700][T14135] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 544.139728][T14135] ? lockdep_hardirqs_on+0x7a/0x110 [ 544.139754][T14135] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 544.139781][T14135] ? mutex_lock_nested+0x152/0x1d0 [ 544.139811][T14135] ? fdget_pos+0x252/0x320 [ 544.139845][T14135] ksys_read+0x156/0x270 [ 544.139875][T14135] ? __pfx_ksys_read+0x10/0x10 [ 544.139899][T14135] ? fput+0xa0/0xd0 [ 544.139927][T14135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.139941][T14135] do_syscall_64+0x174/0x580 [ 544.139957][T14135] ? trace_irq_disable+0x3b/0x140 [ 544.139985][T14135] ? clear_bhb_loop+0x40/0x90 [ 544.140012][T14135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.140035][T14135] RIP: 0033:0x7fe74005d68e [ 544.140055][T14135] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 544.140072][T14135] RSP: 002b:00007fe73e2f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 544.140093][T14135] RAX: ffffffffffffffda RBX: 00007fe73e2f66c0 RCX: 00007fe74005d68e [ 544.140102][T14135] RDX: 000000000000000f RSI: 00007fe73e2f60a0 RDI: 0000000000000004 [ 544.140111][T14135] RBP: 00007fe73e2f6090 R08: 0000000000000000 R09: 0000000000000000 [ 544.140119][T14135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.140128][T14135] R13: 00007fe740316038 R14: 00007fe740315fa0 R15: 00007ffd82230ce8 [ 544.140163][T14135] [ 544.161966][T14109] binder: 14107:14109 ioctl 81f8943c 200000001300 returned -22 [ 544.172531][ T5782] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 544.172882][ T5782] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 544.425912][ T5782] usb 6-1: USB disconnect, device number 59 [ 544.895140][T14160] fuse: Unknown parameter 'ÿ' [ 544.910259][ T5782] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 545.079362][ T5614] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 545.157693][ T5782] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 545.157728][ T5782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.157750][ T5782] usb 1-1: Product: syz [ 545.157766][ T5782] usb 1-1: Manufacturer: syz [ 545.157781][ T5782] usb 1-1: SerialNumber: syz [ 545.218739][ T5782] usb 1-1: config 0 descriptor?? [ 545.229863][ T5782] ch341 1-1:0.0: ch341-uart converter detected [ 545.469726][ T37] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 545.629756][ T5340] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 545.630158][ T37] usb 6-1: Using ep0 maxpacket: 32 [ 545.632883][T14151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.634809][T14151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.635232][ T37] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 545.635257][ T37] usb 6-1: config 0 has no interface number 0 [ 545.639509][ T37] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 545.639543][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.640493][ T37] usb 6-1: Product: syz [ 545.640513][ T37] usb 6-1: Manufacturer: syz [ 545.640528][ T37] usb 6-1: SerialNumber: syz [ 545.649867][ T37] usb 6-1: config 0 descriptor?? [ 545.739303][ T37] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 545.799774][ T5340] usb 2-1: Using ep0 maxpacket: 16 [ 545.802531][ T5340] usb 2-1: config index 0 descriptor too short (expected 37359, got 202) [ 545.802563][ T5340] usb 2-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 545.802587][ T5340] usb 2-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 545.802668][ T5340] usb 2-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 545.807918][ T5340] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 545.808345][ T5340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.808370][ T5340] usb 2-1: Product: syz [ 545.808386][ T5340] usb 2-1: Manufacturer: syz [ 545.808401][ T5340] usb 2-1: SerialNumber: syz [ 545.917915][T14151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2956'. [ 545.952573][ T5340] usb 2-1: 0:2 : does not exist [ 546.183285][ T5340] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 546.276241][ T5782] usb 1-1: failed to send control message: -71 [ 546.276308][ T5782] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 546.356070][ T37] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 546.382578][ T5782] usb 1-1: USB disconnect, device number 57 [ 546.447985][ T5782] ch341 1-1:0.0: device disconnected [ 546.479449][T14182] netlink: 'syz.4.2970': attribute type 3 has an invalid length. [ 546.502281][T14182] netlink: 'syz.4.2970': attribute type 10 has an invalid length. [ 546.502306][T14182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2970'. [ 546.549125][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 546.591458][ T37] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 546.623246][ T37] usb 6-1: USB disconnect, device number 60 [ 546.668899][ T37] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 546.804686][ T37] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 546.807405][ T5340] usb 2-1: USB disconnect, device number 126 [ 546.813478][ T37] quatech2 6-1:0.51: device disconnected [ 546.988578][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 547.020600][T14190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2973'. [ 547.238503][T14197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.255603][T14197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.275350][T14197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.276514][T14197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.380130][ T5782] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 547.469888][ T202] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 547.529846][ T5782] usb 1-1: Using ep0 maxpacket: 32 [ 547.531812][ T5782] usb 1-1: config 1 has an invalid interface number: 216 but max is 0 [ 547.531844][ T5782] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 547.531864][ T5782] usb 1-1: config 1 has no interface number 0 [ 547.531885][ T5782] usb 1-1: config 1 interface 216 has no altsetting 0 [ 547.534230][ T5782] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=17.ee [ 547.534260][ T5782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.534288][ T5782] usb 1-1: Product: syz [ 547.534298][ T5782] usb 1-1: Manufacturer: syz [ 547.534306][ T5782] usb 1-1: SerialNumber: syz [ 547.541007][ T5340] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 547.726430][ T202] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 547.726500][ T202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.726514][ T202] usb 5-1: Product: syz [ 547.726523][ T202] usb 5-1: Manufacturer: syz [ 547.726532][ T202] usb 5-1: SerialNumber: syz [ 547.769058][ T202] usb 5-1: config 0 descriptor?? [ 547.777412][ T5782] xr_serial 1-1:1.216: More than one union descriptor, skipping ... [ 547.779800][ T5340] usb 6-1: device descriptor read/64, error -71 [ 547.779863][ T37] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 547.811402][ T5782] usb 1-1: USB disconnect, device number 58 [ 547.949916][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 547.952462][ T37] usb 2-1: config index 0 descriptor too short (expected 37359, got 202) [ 547.952493][ T37] usb 2-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 547.952517][ T37] usb 2-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 547.952537][ T37] usb 2-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 547.955447][ T37] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 547.955480][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.955500][ T37] usb 2-1: Product: syz [ 547.955516][ T37] usb 2-1: Manufacturer: syz [ 547.955530][ T37] usb 2-1: SerialNumber: syz [ 548.010841][ T37] usb 2-1: 0:2 : does not exist [ 548.017747][ T202] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 548.069752][ T5340] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 548.110412][ T202] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 548.122095][ T202] usb 5-1: USB disconnect, device number 89 [ 548.210235][ T5340] usb 6-1: device descriptor read/64, error -71 [ 548.214738][ T37] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 548.257177][ T37] usb 2-1: USB disconnect, device number 127 [ 548.310246][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 548.323613][ T5340] usb usb6-port1: attempt power cycle [ 548.471589][T14211] FAULT_INJECTION: forcing a failure. [ 548.471589][T14211] name failslab, interval 1, probability 0, space 0, times 0 [ 548.471617][T14211] CPU: 1 UID: 0 PID: 14211 Comm: syz.0.2982 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 548.471636][T14211] Tainted: [L]=SOFTLOCKUP [ 548.471641][T14211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 548.471649][T14211] Call Trace: [ 548.471654][T14211] [ 548.471660][T14211] dump_stack_lvl+0xe8/0x150 [ 548.471680][T14211] should_fail_ex+0x467/0x600 [ 548.471702][T14211] should_failslab+0xa8/0x100 [ 548.471719][T14211] __kmalloc_noprof+0xfb/0x790 [ 548.471733][T14211] ? tomoyo_encode+0x2ad/0x570 [ 548.471750][T14211] ? tomoyo_encode+0x2ad/0x570 [ 548.471772][T14211] tomoyo_encode+0x2ad/0x570 [ 548.471794][T14211] tomoyo_realpath_from_path+0x5fa/0x640 [ 548.471818][T14211] ? tomoyo_path_number_perm+0x219/0x5f0 [ 548.471834][T14211] tomoyo_path_number_perm+0x246/0x5f0 [ 548.471851][T14211] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 548.471866][T14211] ? __lock_acquire+0x683/0x2ce0 [ 548.471891][T14211] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 548.471907][T14211] ? hook_file_ioctl+0x1f3/0x600 [ 548.471931][T14211] ? lockdep_hardirqs_on+0x7a/0x110 [ 548.471957][T14211] ? __fget_files+0x2a/0x420 [ 548.471973][T14211] ? __fget_files+0x2a/0x420 [ 548.471985][T14211] ? __fget_files+0x3a8/0x420 [ 548.471998][T14211] ? __fget_files+0x2a/0x420 [ 548.472013][T14211] security_file_ioctl+0xc3/0x2a0 [ 548.472030][T14211] __se_sys_ioctl+0x47/0x170 [ 548.472047][T14211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.472060][T14211] do_syscall_64+0x174/0x580 [ 548.472075][T14211] ? trace_irq_disable+0x3b/0x140 [ 548.472092][T14211] ? clear_bhb_loop+0x40/0x90 [ 548.472107][T14211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.472119][T14211] RIP: 0033:0x7fbb4d1bce59 [ 548.472132][T14211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.472143][T14211] RSP: 002b:00007fbb4b40e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 548.472157][T14211] RAX: ffffffffffffffda RBX: 00007fbb4d435fa0 RCX: 00007fbb4d1bce59 [ 548.472167][T14211] RDX: 0000200000000040 RSI: 00000000c02c5625 RDI: 0000000000000003 [ 548.472175][T14211] RBP: 00007fbb4b40e090 R08: 0000000000000000 R09: 0000000000000000 [ 548.472183][T14211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.472191][T14211] R13: 00007fbb4d436038 R14: 00007fbb4d435fa0 R15: 00007ffec6535f48 [ 548.472210][T14211] [ 548.472222][T14211] ERROR: Out of memory at tomoyo_realpath_from_path. [ 548.597624][T14215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2984'. [ 548.673606][ T5340] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 548.700530][ T5340] usb 6-1: device descriptor read/8, error -71 [ 548.990249][ T5340] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 549.010622][ T5340] usb 6-1: device descriptor read/8, error -71 [ 549.120285][ T5340] usb usb6-port1: unable to enumerate USB device [ 549.187528][T14228] FAULT_INJECTION: forcing a failure. [ 549.187528][T14228] name failslab, interval 1, probability 0, space 0, times 0 [ 549.187573][T14228] CPU: 1 UID: 0 PID: 14228 Comm: syz.0.2988 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 549.187605][T14228] Tainted: [L]=SOFTLOCKUP [ 549.187613][T14228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 549.187648][T14228] Call Trace: [ 549.187657][T14228] [ 549.187668][T14228] dump_stack_lvl+0xe8/0x150 [ 549.187700][T14228] should_fail_ex+0x467/0x600 [ 549.187741][T14228] should_failslab+0xa8/0x100 [ 549.187768][T14228] ? __anon_vma_prepare+0x10e/0x4e0 [ 549.187793][T14228] kmem_cache_alloc_noprof+0x9e/0x680 [ 549.187816][T14228] ? __anon_vma_prepare+0xc3/0x4e0 [ 549.187839][T14228] ? __anon_vma_prepare+0x10e/0x4e0 [ 549.187869][T14228] __anon_vma_prepare+0x10e/0x4e0 [ 549.187918][T14228] do_pte_missing+0x1d2a/0x28f0 [ 549.187950][T14228] ? rt_spin_unlock+0x163/0x200 [ 549.187976][T14228] ? __pmd_alloc+0x41b/0x5e0 [ 549.188005][T14228] handle_mm_fault+0xe0b/0x1520 [ 549.188034][T14228] ? handle_mm_fault+0xe9/0x1520 [ 549.188058][T14228] ? __pfx_handle_mm_fault+0x10/0x10 [ 549.188099][T14228] ? lock_mm_and_find_vma+0xa7/0x340 [ 549.188127][T14228] do_user_addr_fault+0x744/0x1340 [ 549.188172][T14228] exc_page_fault+0x6a/0xc0 [ 549.188202][T14228] asm_exc_page_fault+0x26/0x30 [ 549.188223][T14228] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 549.188247][T14228] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 549.188265][T14228] RSP: 0018:ffffc90002f77a48 EFLAGS: 00050212 [ 549.188286][T14228] RAX: 0000000000000000 RBX: 0000000000000032 RCX: 0000000000000032 [ 549.188301][T14228] RDX: 0000000000000000 RSI: ffff88804c05cabc RDI: 0000200000002980 [ 549.188317][T14228] RBP: ffffc90002f77cb0 R08: ffff88804c05caed R09: 1ffff1100980b95d [ 549.188333][T14228] R10: dffffc0000000000 R11: ffffed100980b95e R12: 00002000000029b2 [ 549.188350][T14228] R13: 00007ffffffff000 R14: ffff88804c05cabc R15: 0000200000002980 [ 549.188383][T14228] _copy_to_user+0x8a/0xb0 [ 549.188413][T14228] x25_ioctl+0x245/0xff0 [ 549.188434][T14228] ? __pfx_x25_ioctl+0x10/0x10 [ 549.188466][T14228] ? kasan_quarantine_put+0xbb/0x1f0 [ 549.188503][T14228] ? tomoyo_path_number_perm+0x219/0x5f0 [ 549.188533][T14228] ? tomoyo_path_number_perm+0x219/0x5f0 [ 549.188566][T14228] ? do_vfs_ioctl+0x1184/0x1550 [ 549.188599][T14228] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 549.188637][T14228] sock_do_ioctl+0x101/0x320 [ 549.188662][T14228] ? __pfx_sock_do_ioctl+0x10/0x10 [ 549.188679][T14228] ? hook_file_ioctl+0x1f3/0x600 [ 549.188724][T14228] sock_ioctl+0x57d/0x7f0 [ 549.188760][T14228] ? __pfx_sock_ioctl+0x10/0x10 [ 549.188791][T14228] ? __fget_files+0x2a/0x420 [ 549.188814][T14228] ? __fget_files+0x3a8/0x420 [ 549.188837][T14228] ? __fget_files+0x2a/0x420 [ 549.188865][T14228] ? bpf_lsm_file_ioctl+0x9/0x20 [ 549.188901][T14228] ? __pfx_sock_ioctl+0x10/0x10 [ 549.188933][T14228] __se_sys_ioctl+0xff/0x170 [ 549.188963][T14228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.188988][T14228] do_syscall_64+0x174/0x580 [ 549.189015][T14228] ? trace_irq_disable+0x3b/0x140 [ 549.189044][T14228] ? clear_bhb_loop+0x40/0x90 [ 549.189071][T14228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.189094][T14228] RIP: 0033:0x7fbb4d1bce59 [ 549.189114][T14228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.189133][T14228] RSP: 002b:00007fbb4b40e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 549.189155][T14228] RAX: ffffffffffffffda RBX: 00007fbb4d435fa0 RCX: 00007fbb4d1bce59 [ 549.189169][T14228] RDX: 0000200000002980 RSI: 00000000000089ea RDI: 0000000000000004 [ 549.189183][T14228] RBP: 00007fbb4b40e090 R08: 0000000000000000 R09: 0000000000000000 [ 549.189197][T14228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 549.189212][T14228] R13: 00007fbb4d436038 R14: 00007fbb4d435fa0 R15: 00007ffec6535f48 [ 549.189247][T14228] [ 549.679801][ T5340] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 549.833089][ T5340] usb 5-1: unable to get BOS descriptor or descriptor too short [ 549.833540][ T5340] usb 5-1: not running at top speed; connect to a high speed hub [ 549.834836][ T5340] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 133, changing to 4 [ 549.836881][ T5340] usb 5-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 549.836902][ T5340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.836915][ T5340] usb 5-1: Product: syz [ 549.836927][ T5340] usb 5-1: Manufacturer: syz [ 549.836936][ T5340] usb 5-1: SerialNumber: syz [ 550.031126][ T5614] Bluetooth: hci1: command 0x0406 tx timeout [ 550.061065][ T202] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 550.222511][ T202] usb 1-1: Using ep0 maxpacket: 16 [ 550.226769][ T202] usb 1-1: config index 0 descriptor too short (expected 37359, got 202) [ 550.226903][ T202] usb 1-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 550.226927][ T202] usb 1-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 550.226947][ T202] usb 1-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 550.310622][ T202] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 550.310655][ T202] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.310677][ T202] usb 1-1: Product: syz [ 550.310693][ T202] usb 1-1: Manufacturer: syz [ 550.310709][ T202] usb 1-1: SerialNumber: syz [ 550.536782][ T202] usb 1-1: 0:2 : does not exist [ 550.635423][T14242] binder: BINDER_SET_CONTEXT_MGR already set [ 550.635442][T14242] binder: 14241:14242 ioctl 4018620d 200000004a80 returned -16 [ 550.728796][ T202] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 550.820021][ T202] usb 1-1: USB disconnect, device number 59 [ 550.885637][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.905519][T14255] binder: 14254:14255 ioctl c0306201 2000000003c0 returned -22 [ 551.030156][ T5782] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 551.189816][ T5782] usb 2-1: Using ep0 maxpacket: 8 [ 551.192495][ T5782] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 551.192560][ T5782] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 551.192585][ T5782] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 551.192612][ T5782] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 551.192637][ T5782] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.192683][ T5782] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 551.192709][ T5782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.517172][ T5782] usb 2-1: usb_control_msg returned -32 [ 551.517224][ T5782] usbtmc 2-1:16.0: can't read capabilities [ 551.586620][T14262] loop5: detected capacity change from 0 to 7 [ 551.777321][T14262] Buffer I/O error on dev loop5, logical block 0, async page read [ 551.777479][T14262] Buffer I/O error on dev loop5, logical block 0, async page read [ 551.777550][T14262] Buffer I/O error on dev loop5, logical block 0, async page read [ 551.777673][T14262] Buffer I/O error on dev loop5, logical block 0, async page read [ 551.777836][T14262] Buffer I/O error on dev loop5, logical block 0, async page read [ 551.778081][T14262] Buffer I/O error on dev loop5, logical block 0, async page read [ 551.778153][T14262] Buffer I/O error on dev loop5, logical block 0, async page read [ 551.778165][T14262] ldm_validate_partition_table(): Disk read failed. [ 551.778276][T14262] Buffer I/O error on dev loop5, logical block 0, async page read [ 551.778397][T14262] Buffer I/O error on dev loop5, logical block 0, async page read [ 551.778464][T14262] Buffer I/O error on dev loop5, logical block 0, async page read [ 551.778587][T14262] Dev loop5: unable to read RDB block 0 [ 551.778856][T14262] loop5: unable to read partition table [ 551.779074][T14262] loop5: partition table beyond EOD, truncated [ 551.779179][T14262] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾Sêj̳–¢P=Ãë?ã}X‹ºÐ œëÜ5õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 552.086794][T14268] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3004'. [ 552.496640][ T5340] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 552.502629][ T5340] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 552.506723][ T5340] usb 5-1: unable to issue vendor read request (ret = -71) [ 552.507832][ T5340] usb 5-1: unable to issue vendor read request (ret = -71) [ 552.510008][ T5340] usb 5-1: unable to issue vendor read request (ret = -71) [ 552.510580][ T5340] usb 5-1: unable to issue vendor read request (ret = -71) [ 552.513421][ T5340] usb 5-1: unable to issue vendor read request (ret = -71) [ 552.515504][ T5340] usb 5-1: unable to issue vendor read request (ret = -71) [ 552.516184][ T5340] usb 5-1: unable to issue vendor read request (ret = -71) [ 552.517512][ T5340] usb 5-1: unable to issue vendor read request (ret = -71) [ 552.779175][ T5340] usb 5-1: USB disconnect, device number 90 [ 552.912914][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 552.993816][ T11] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 553.139909][ T11] usb 6-1: Using ep0 maxpacket: 16 [ 553.140078][ T37] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 553.142603][ T11] usb 6-1: config index 0 descriptor too short (expected 37359, got 202) [ 553.142635][ T11] usb 6-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 553.142657][ T11] usb 6-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 553.142677][ T11] usb 6-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 553.145034][ T11] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 553.145065][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.145087][ T11] usb 6-1: Product: syz [ 553.145103][ T11] usb 6-1: Manufacturer: syz [ 553.145119][ T11] usb 6-1: SerialNumber: syz [ 553.240751][ T11] usb 6-1: 0:2 : does not exist [ 553.302996][ T37] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 553.303055][ T37] usb 1-1: can't read configurations, error -61 [ 553.435135][T14290] binder: BINDER_SET_CONTEXT_MGR already set [ 553.435153][T14290] binder: 14289:14290 ioctl 4018620d 200000004a80 returned -16 [ 553.440248][ T37] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 553.466810][ T11] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 553.507032][ T11] usb 6-1: USB disconnect, device number 65 [ 553.553290][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 553.589916][ T5340] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 553.612301][ T37] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 553.612345][ T37] usb 1-1: can't read configurations, error -61 [ 553.612944][ T37] usb usb1-port1: attempt power cycle [ 553.735849][ T5613] usb 2-1: USB disconnect, device number 2 [ 553.751063][ T5340] usb 5-1: Using ep0 maxpacket: 16 [ 553.771472][ T5340] usb 5-1: unable to get BOS descriptor or descriptor too short [ 553.797009][ T5340] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.797042][ T5340] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 553.819380][ T5340] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 553.819413][ T5340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.819432][ T5340] usb 5-1: Product: syz [ 553.819446][ T5340] usb 5-1: Manufacturer: syz [ 553.819460][ T5340] usb 5-1: SerialNumber: syz [ 553.949830][ T37] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 553.978194][ T37] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 553.978237][ T37] usb 1-1: can't read configurations, error -61 [ 554.074171][ T5340] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 554.074506][ T5340] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 554.086919][ T5340] usb 5-1: cannot find UAC_HEADER [ 554.111777][ T37] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 554.135287][ T37] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 554.135330][ T37] usb 1-1: can't read configurations, error -61 [ 554.135807][ T37] usb usb1-port1: unable to enumerate USB device [ 554.286028][ T5340] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 554.304873][ T5340] usb 5-1: USB disconnect, device number 91 [ 554.336430][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 554.513230][ T5782] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 554.659735][ T5782] usb 2-1: Using ep0 maxpacket: 16 [ 554.662189][ T5782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.662227][ T5782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.662252][ T5782] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 554.662296][ T5782] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 554.662322][ T5782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.726975][ T5782] usb 2-1: config 0 descriptor?? [ 555.179174][T14311] vlan1: entered promiscuous mode [ 555.202392][ T5782] microsoft 0003:045E:07DA.000C: reserved main item tag 0xd [ 555.202456][ T5782] microsoft 0003:045E:07DA.000C: unknown global tag 0xd [ 555.202501][ T5782] microsoft 0003:045E:07DA.000C: item 0 2 1 13 parsing failed [ 555.203429][ T5782] microsoft 0003:045E:07DA.000C: parse failed [ 555.203546][ T5782] microsoft 0003:045E:07DA.000C: probe with driver microsoft failed with error -22 [ 555.319912][ T5340] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 555.469721][ T5340] usb 5-1: Using ep0 maxpacket: 16 [ 555.478505][ T5340] usb 5-1: config index 0 descriptor too short (expected 37359, got 202) [ 555.478537][ T5340] usb 5-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 555.478560][ T5340] usb 5-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 555.478576][ T5340] usb 5-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 555.502700][ T5340] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 555.502731][ T5340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.502752][ T5340] usb 5-1: Product: syz [ 555.502766][ T5340] usb 5-1: Manufacturer: syz [ 555.502781][ T5340] usb 5-1: SerialNumber: syz [ 555.546899][ T5340] usb 5-1: 0:2 : does not exist [ 555.732533][T14331] binder: BINDER_SET_CONTEXT_MGR already set [ 555.732551][T14331] binder: 14330:14331 ioctl 4018620d 200000004a80 returned -16 [ 555.744577][ T5340] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 555.825506][ T5340] usb 5-1: USB disconnect, device number 92 [ 555.963655][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 556.659893][ T5782] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 556.813034][ T5782] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 556.813065][ T5782] usb 1-1: config 0 has no interface number 0 [ 556.813108][ T5782] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 556.813136][ T5782] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 556.813179][ T5782] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 556.813211][ T5782] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.892153][ T5782] usb 1-1: config 0 descriptor?? [ 556.893318][T14349] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 556.969980][ T5782] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 557.200399][T14355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.201529][T14355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.524414][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 557.527749][ T5340] usb 1-1: USB disconnect, device number 64 [ 557.561577][ T5782] usb 2-1: USB disconnect, device number 3 [ 557.814352][T14365] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 557.918164][T14370] FAULT_INJECTION: forcing a failure. [ 557.918164][T14370] name failslab, interval 1, probability 0, space 0, times 0 [ 557.918206][T14370] CPU: 0 UID: 0 PID: 14370 Comm: syz.4.3037 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 557.918236][T14370] Tainted: [L]=SOFTLOCKUP [ 557.918245][T14370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 557.918259][T14370] Call Trace: [ 557.918268][T14370] [ 557.918277][T14370] dump_stack_lvl+0xe8/0x150 [ 557.918308][T14370] should_fail_ex+0x467/0x600 [ 557.918346][T14370] should_failslab+0xa8/0x100 [ 557.918375][T14370] kmem_cache_alloc_node_noprof+0xac/0x660 [ 557.918401][T14370] ? __alloc_skb+0x1d7/0x7a0 [ 557.918426][T14370] ? __alloc_skb+0x1d7/0x7a0 [ 557.918459][T14370] __alloc_skb+0x1d7/0x7a0 [ 557.918490][T14370] netlink_sendmsg+0x5d4/0xb40 [ 557.918534][T14370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.918570][T14370] ? aa_sock_msg_perm+0x122/0x200 [ 557.918618][T14370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.918648][T14370] sock_sendmsg_nosec+0x13a/0x180 [ 557.918675][T14370] ____sys_sendmsg+0x565/0x870 [ 557.918706][T14370] ? __might_fault+0xaf/0x130 [ 557.918746][T14370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.918786][T14370] ? import_iovec+0x73/0xa0 [ 557.918816][T14370] ___sys_sendmsg+0x2a5/0x360 [ 557.918843][T14370] ? __lock_acquire+0x683/0x2ce0 [ 557.918875][T14370] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.918938][T14370] ? __fget_files+0x2a/0x420 [ 557.918963][T14370] ? __fget_files+0x3a8/0x420 [ 557.918999][T14370] __x64_sys_sendmsg+0x1b7/0x290 [ 557.919033][T14370] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 557.919085][T14370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.919110][T14370] do_syscall_64+0x174/0x580 [ 557.919139][T14370] ? trace_irq_disable+0x3b/0x140 [ 557.919168][T14370] ? clear_bhb_loop+0x40/0x90 [ 557.919196][T14370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.919218][T14370] RIP: 0033:0x7fc1e5ecce59 [ 557.919239][T14370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.919259][T14370] RSP: 002b:00007fc1e4126028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.919285][T14370] RAX: ffffffffffffffda RBX: 00007fc1e6145fa0 RCX: 00007fc1e5ecce59 [ 557.919301][T14370] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 557.919316][T14370] RBP: 00007fc1e4126090 R08: 0000000000000000 R09: 0000000000000000 [ 557.919330][T14370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.919343][T14370] R13: 00007fc1e6146038 R14: 00007fc1e6145fa0 R15: 00007ffdcf92b4a8 [ 557.919378][T14370] [ 557.999733][ T5340] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 558.156510][ T5340] usb 1-1: Using ep0 maxpacket: 32 [ 558.165418][ T5340] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 558.165449][ T5340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.165468][ T5340] usb 1-1: Product: syz [ 558.165483][ T5340] usb 1-1: Manufacturer: syz [ 558.165497][ T5340] usb 1-1: SerialNumber: syz [ 558.200786][ T37] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 558.203290][ T5340] usb 1-1: config 0 descriptor?? [ 558.258484][ T5340] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 558.429721][ T37] usb 6-1: Using ep0 maxpacket: 16 [ 558.453868][ T37] usb 6-1: config index 0 descriptor too short (expected 37359, got 202) [ 558.453903][ T37] usb 6-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 558.454666][ T37] usb 6-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 558.454692][ T37] usb 6-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 558.621290][ T825] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 558.627889][ T37] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 558.627983][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.628006][ T37] usb 6-1: Product: syz [ 558.628022][ T37] usb 6-1: Manufacturer: syz [ 558.628038][ T37] usb 6-1: SerialNumber: syz [ 558.728137][ T37] usb 6-1: 0:2 : does not exist [ 558.775091][ T825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 558.775212][ T825] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 558.775240][ T825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.812547][ T825] usb 2-1: config 0 descriptor?? [ 559.101084][ T37] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 559.185316][T14387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 559.498821][ T825] ath6kl: Failed to submit usb control message: -71 [ 559.498880][ T825] ath6kl: unable to send the bmi data to the device: -71 [ 559.498977][ T825] ath6kl: Unable to send get target info: -71 [ 559.525919][ T825] ath6kl: Failed to init ath6kl core: -71 [ 559.592467][ T825] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 559.692965][ T825] usb 2-1: USB disconnect, device number 4 [ 559.696521][ T37] usb 6-1: USB disconnect, device number 66 [ 559.992417][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 560.306657][T14398] netlink: 'syz.5.3045': attribute type 29 has an invalid length. [ 560.307746][T14398] netlink: 'syz.5.3045': attribute type 29 has an invalid length. [ 560.596758][ T4923] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 561.050543][ T5340] gspca_ov534_9: sccb_write failed [ 561.427289][ T5340] gspca_ov534_9: reg_w failed -71 [ 561.488094][T14408] netlink: 'syz.5.3048': attribute type 21 has an invalid length. [ 561.659800][ T5340] gspca_ov534_9: Unknown sensor 0000 [ 561.659914][ T5340] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 561.691052][ T5340] usb 1-1: USB disconnect, device number 65 [ 561.779168][T14423] batadv_slave_0: entered promiscuous mode [ 561.794820][T14422] batadv_slave_0: left promiscuous mode [ 561.840312][ T5782] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 561.970614][ T5782] usb 5-1: device descriptor read/64, error -71 [ 562.011663][ T11] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 562.159793][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 562.162111][ T11] usb 2-1: config index 0 descriptor too short (expected 37359, got 202) [ 562.162142][ T11] usb 2-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 562.162165][ T11] usb 2-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 562.162187][ T11] usb 2-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 562.165477][ T11] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 562.165508][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.165529][ T11] usb 2-1: Product: syz [ 562.165538][ T11] usb 2-1: Manufacturer: syz [ 562.165547][ T11] usb 2-1: SerialNumber: syz [ 562.209756][ T5782] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 562.263683][ T11] usb 2-1: 0:2 : does not exist [ 562.379791][ T5782] usb 5-1: device descriptor read/64, error -71 [ 562.464864][T14421] binder: BINDER_SET_CONTEXT_MGR already set [ 562.464885][T14421] binder: 14420:14421 ioctl 4018620d 200000004a80 returned -16 [ 562.481251][ T11] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 562.490175][ T5782] usb usb5-port1: attempt power cycle [ 562.499844][T14433] FAULT_INJECTION: forcing a failure. [ 562.499844][T14433] name failslab, interval 1, probability 0, space 0, times 0 [ 562.499885][T14433] CPU: 1 UID: 0 PID: 14433 Comm: syz.0.3058 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 562.499915][T14433] Tainted: [L]=SOFTLOCKUP [ 562.499924][T14433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 562.499936][T14433] Call Trace: [ 562.499945][T14433] [ 562.499954][T14433] dump_stack_lvl+0xe8/0x150 [ 562.499984][T14433] should_fail_ex+0x467/0x600 [ 562.500020][T14433] should_failslab+0xa8/0x100 [ 562.500048][T14433] __kmalloc_noprof+0xfb/0x790 [ 562.500072][T14433] ? tomoyo_encode+0x2ad/0x570 [ 562.500103][T14433] ? tomoyo_encode+0x2ad/0x570 [ 562.500143][T14433] tomoyo_encode+0x2ad/0x570 [ 562.500180][T14433] tomoyo_realpath_from_path+0x5fa/0x640 [ 562.500226][T14433] ? tomoyo_path_number_perm+0x219/0x5f0 [ 562.500255][T14433] tomoyo_path_number_perm+0x246/0x5f0 [ 562.500288][T14433] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 562.500315][T14433] ? __lock_acquire+0x683/0x2ce0 [ 562.500361][T14433] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 562.500389][T14433] ? hook_file_ioctl+0x1f3/0x600 [ 562.500417][T14433] ? lockdep_hardirqs_on+0x7a/0x110 [ 562.500473][T14433] ? __fget_files+0x2a/0x420 [ 562.500501][T14433] ? __fget_files+0x2a/0x420 [ 562.500524][T14433] ? __fget_files+0x3a8/0x420 [ 562.500545][T14433] ? __fget_files+0x2a/0x420 [ 562.500573][T14433] security_file_ioctl+0xc3/0x2a0 [ 562.500601][T14433] __se_sys_ioctl+0x47/0x170 [ 562.500631][T14433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.500655][T14433] do_syscall_64+0x174/0x580 [ 562.500691][T14433] ? trace_irq_disable+0x3b/0x140 [ 562.500719][T14433] ? clear_bhb_loop+0x40/0x90 [ 562.500747][T14433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.500769][T14433] RIP: 0033:0x7fbb4d1bce59 [ 562.500790][T14433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.500809][T14433] RSP: 002b:00007fbb4b40e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.500833][T14433] RAX: ffffffffffffffda RBX: 00007fbb4d435fa0 RCX: 00007fbb4d1bce59 [ 562.500850][T14433] RDX: 00002000000002c0 RSI: 00000000c0285629 RDI: 0000000000000003 [ 562.500865][T14433] RBP: 00007fbb4b40e090 R08: 0000000000000000 R09: 0000000000000000 [ 562.500879][T14433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.500893][T14433] R13: 00007fbb4d436038 R14: 00007fbb4d435fa0 R15: 00007ffec6535f48 [ 562.500929][T14433] [ 562.501699][T14433] ERROR: Out of memory at tomoyo_realpath_from_path. [ 562.597622][ T11] usb 2-1: USB disconnect, device number 5 [ 562.658800][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 562.869800][ T5782] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 562.891808][ T5782] usb 5-1: device descriptor read/8, error -71 [ 563.117990][T14449] FAULT_INJECTION: forcing a failure. [ 563.117990][T14449] name failslab, interval 1, probability 0, space 0, times 0 [ 563.118032][T14449] CPU: 0 UID: 0 PID: 14449 Comm: syz.0.3062 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 563.118059][T14449] Tainted: [L]=SOFTLOCKUP [ 563.118066][T14449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 563.118077][T14449] Call Trace: [ 563.118084][T14449] [ 563.118093][T14449] dump_stack_lvl+0xe8/0x150 [ 563.118121][T14449] should_fail_ex+0x467/0x600 [ 563.118154][T14449] should_failslab+0xa8/0x100 [ 563.118176][T14449] ? sctp_get_port_local+0x749/0x17a0 [ 563.118201][T14449] kmem_cache_alloc_noprof+0x9e/0x680 [ 563.118222][T14449] ? sctp_get_port_local+0x749/0x17a0 [ 563.118252][T14449] sctp_get_port_local+0x749/0x17a0 [ 563.118286][T14449] ? sctp_get_port_local+0x50c/0x17a0 [ 563.118310][T14449] ? __pfx_sctp_get_port_local+0x10/0x10 [ 563.118334][T14449] ? sctp_bind_addr_match+0x30/0x2b0 [ 563.118352][T14449] ? sctp_bind_addr_match+0x28b/0x2b0 [ 563.118377][T14449] sctp_do_bind+0x4d9/0x9a0 [ 563.118409][T14449] sctp_connect_new_asoc+0x270/0x6b0 [ 563.118437][T14449] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 563.118468][T14449] ? sctp_inet6_send_verify+0x23a/0x300 [ 563.118486][T14449] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 563.118512][T14449] __sctp_connect+0x5cb/0xdc0 [ 563.118543][T14449] ? __local_bh_enable+0x1e1/0x2f0 [ 563.118573][T14449] ? __pfx___sctp_connect+0x10/0x10 [ 563.118594][T14449] ? security_sctp_bind_connect+0x7e/0x2c0 [ 563.118620][T14449] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 563.118650][T14449] sctp_setsockopt+0x70b/0x12c0 [ 563.118671][T14449] ? sock_common_setsockopt+0x36/0xc0 [ 563.118691][T14449] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 563.118712][T14449] do_sock_setsockopt+0x17c/0x1b0 [ 563.118740][T14449] __x64_sys_setsockopt+0x143/0x1b0 [ 563.118776][T14449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.118797][T14449] do_syscall_64+0x174/0x580 [ 563.118822][T14449] ? clear_bhb_loop+0x40/0x90 [ 563.118845][T14449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.118862][T14449] RIP: 0033:0x7fbb4d1bce59 [ 563.118881][T14449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.118897][T14449] RSP: 002b:00007fbb4b40e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 563.118918][T14449] RAX: ffffffffffffffda RBX: 00007fbb4d435fa0 RCX: 00007fbb4d1bce59 [ 563.118931][T14449] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 563.118943][T14449] RBP: 00007fbb4b40e090 R08: 000000000000001c R09: 0000000000000000 [ 563.118954][T14449] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 563.118966][T14449] R13: 00007fbb4d436038 R14: 00007fbb4d435fa0 R15: 00007ffec6535f48 [ 563.118998][T14449] [ 563.130307][ T5782] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 563.171698][ T5782] usb 5-1: device descriptor read/8, error -71 [ 563.235073][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.235171][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.280716][ T5782] usb usb5-port1: unable to enumerate USB device [ 563.691502][ T202] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 563.856995][ T202] usb 2-1: Using ep0 maxpacket: 8 [ 563.863071][ T202] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 563.863123][ T202] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 563.863149][ T202] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 563.863172][ T202] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 563.863215][ T202] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 563.863238][ T202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.079770][ T202] usb 2-1: GET_CAPABILITIES returned 0 [ 564.079826][ T202] usbtmc 2-1:16.0: can't read capabilities [ 564.294913][ T202] usb 2-1: USB disconnect, device number 6 [ 564.553758][T14466] vlan0: entered promiscuous mode [ 564.553968][T14466] vlan0: entered allmulticast mode [ 564.553980][T14466] veth0_vlan: entered allmulticast mode [ 564.992803][ T11] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 565.152643][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 565.186097][ T11] usb 1-1: config index 0 descriptor too short (expected 37359, got 202) [ 565.186132][ T11] usb 1-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 565.186155][ T11] usb 1-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 565.186187][ T11] usb 1-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 565.188776][ T11] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 565.188809][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.188831][ T11] usb 1-1: Product: syz [ 565.188847][ T11] usb 1-1: Manufacturer: syz [ 565.188862][ T11] usb 1-1: SerialNumber: syz [ 565.274438][ T11] usb 1-1: 0:2 : does not exist [ 565.325908][T14487] __vm_enough_memory: pid: 14487, comm: syz.4.3077, bytes: 21200209408000 not enough memory for the allocation [ 565.327446][T14487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3077'. [ 565.458956][T14470] binder: BINDER_SET_CONTEXT_MGR already set [ 565.458973][T14470] binder: 14469:14470 ioctl 4018620d 200000004a80 returned -16 [ 565.493228][ T11] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 565.544892][ T11] usb 1-1: USB disconnect, device number 66 [ 565.644110][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 565.670595][ T5615] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 565.839791][ T5615] usb 2-1: Using ep0 maxpacket: 16 [ 565.843021][ T5615] usb 2-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 565.843076][ T5615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 565.843094][ T5615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 565.843110][ T5615] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 565.843128][ T5615] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 565.844301][ T5615] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 565.844326][ T5615] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 565.844339][ T5615] usb 2-1: Manufacturer: syz [ 565.848006][ T5615] usb 2-1: config 0 descriptor?? [ 566.892152][ T5615] rc_core: IR keymap rc-hauppauge not found [ 566.892176][ T5615] Registered IR keymap rc-empty [ 566.906074][ T5615] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 566.923457][ T5615] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 566.952093][ T5615] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 566.975054][ T5615] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input30 [ 567.017860][ T5615] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 567.040233][ T5615] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 567.069191][ T5615] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 567.080424][ T5615] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 567.101067][ T5615] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 567.130088][ T5615] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 567.152220][ T5615] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 567.170291][ T5615] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 567.190241][ T5615] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 567.210225][ T5615] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 567.232840][ T5615] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 567.232869][ T5615] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 567.242287][ T5615] usb 2-1: USB disconnect, device number 7 [ 567.290751][ T5340] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 567.503696][ T5340] usb 5-1: Using ep0 maxpacket: 16 [ 567.507570][ T5340] usb 5-1: config index 0 descriptor too short (expected 37359, got 202) [ 567.507601][ T5340] usb 5-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 567.507625][ T5340] usb 5-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 567.507646][ T5340] usb 5-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 567.511586][ T5340] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 567.511617][ T5340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.511637][ T5340] usb 5-1: Product: syz [ 567.511652][ T5340] usb 5-1: Manufacturer: syz [ 567.511666][ T5340] usb 5-1: SerialNumber: syz [ 567.558273][ T5340] usb 5-1: 0:2 : does not exist [ 567.637513][T14522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3090'. [ 567.745627][T14520] binder: BINDER_SET_CONTEXT_MGR already set [ 567.745640][T14520] binder: 14519:14520 ioctl 4018620d 200000004a80 returned -16 [ 567.757668][ T5340] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 567.851583][ T5340] usb 5-1: USB disconnect, device number 97 [ 568.175366][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 569.369806][ T5782] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 569.410249][T14552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3102'. [ 569.501799][ T5782] usb 6-1: device descriptor read/64, error -71 [ 569.580248][ T11] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 569.729870][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 569.734752][ T11] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 569.734786][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.734806][ T11] usb 1-1: Product: syz [ 569.734819][ T11] usb 1-1: Manufacturer: syz [ 569.734828][ T11] usb 1-1: SerialNumber: syz [ 569.739775][ T5782] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 569.783837][ T11] usb 1-1: config 0 descriptor?? [ 569.791089][ T11] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 569.802293][ T5340] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 569.879884][ T5782] usb 6-1: device descriptor read/64, error -71 [ 569.949690][ T5340] usb 2-1: Using ep0 maxpacket: 16 [ 569.952529][ T5340] usb 2-1: config index 0 descriptor too short (expected 37359, got 202) [ 569.952562][ T5340] usb 2-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 569.952586][ T5340] usb 2-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 569.952606][ T5340] usb 2-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 569.955769][ T5340] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 569.955800][ T5340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.955822][ T5340] usb 2-1: Product: syz [ 569.955838][ T5340] usb 2-1: Manufacturer: syz [ 569.955854][ T5340] usb 2-1: SerialNumber: syz [ 569.990351][ T5782] usb usb6-port1: attempt power cycle [ 570.060402][ T5340] usb 2-1: 0:2 : does not exist [ 570.225258][ T5340] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 570.305434][ T5340] usb 2-1: USB disconnect, device number 8 [ 570.379909][ T5782] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 570.380903][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 570.409931][ T5782] usb 6-1: device descriptor read/8, error -71 [ 570.649849][ T5782] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 570.670677][ T5782] usb 6-1: device descriptor read/8, error -71 [ 570.745749][T14568] FAULT_INJECTION: forcing a failure. [ 570.745749][T14568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.745795][T14568] CPU: 1 UID: 0 PID: 14568 Comm: syz.4.3107 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 570.745820][T14568] Tainted: [L]=SOFTLOCKUP [ 570.745825][T14568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 570.745839][T14568] Call Trace: [ 570.745848][T14568] [ 570.745858][T14568] dump_stack_lvl+0xe8/0x150 [ 570.745891][T14568] should_fail_ex+0x467/0x600 [ 570.745927][T14568] _copy_from_user+0x2d/0xb0 [ 570.745953][T14568] do_sock_getsockopt+0x200/0x7e0 [ 570.745988][T14568] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 570.746031][T14568] ? __fget_files+0x3a8/0x420 [ 570.746055][T14568] ? __fget_files+0x2a/0x420 [ 570.746086][T14568] __x64_sys_getsockopt+0x1aa/0x250 [ 570.746121][T14568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.746139][T14568] do_syscall_64+0x174/0x580 [ 570.746155][T14568] ? trace_irq_disable+0x3b/0x140 [ 570.746173][T14568] ? clear_bhb_loop+0x40/0x90 [ 570.746200][T14568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.746223][T14568] RIP: 0033:0x7fc1e5ecce59 [ 570.746245][T14568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.746263][T14568] RSP: 002b:00007fc1e4126028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 570.746297][T14568] RAX: ffffffffffffffda RBX: 00007fc1e6145fa0 RCX: 00007fc1e5ecce59 [ 570.746309][T14568] RDX: 0000000000000018 RSI: 0000000000000084 RDI: 0000000000000003 [ 570.746317][T14568] RBP: 00007fc1e4126090 R08: 0000200000000040 R09: 0000000000000000 [ 570.746325][T14568] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.746333][T14568] R13: 00007fc1e6146038 R14: 00007fc1e6145fa0 R15: 00007ffdcf92b4a8 [ 570.746364][T14568] [ 570.816976][T14570] input: syz0 as /devices/virtual/input/input31 [ 570.960169][ T5782] usb usb6-port1: unable to enumerate USB device [ 571.583433][T14581] netlink: 'syz.1.3112': attribute type 22 has an invalid length. [ 572.037053][ T11] gspca_ov534_9: sccb_write failed [ 572.134795][T14594] binder: 14593:14594 ioctl c0306201 200000000080 returned -14 [ 572.164071][T14596] program syz.4.3117 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 572.241934][ T11] gspca_ov534_9: reg_w failed -71 [ 572.510881][ T11] gspca_ov534_9: Unknown sensor 0000 [ 572.510980][ T11] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 572.546288][ T11] usb 1-1: USB disconnect, device number 67 [ 573.099869][T14615] netlink: 58 bytes leftover after parsing attributes in process `syz.5.3126'. [ 573.281761][ T5340] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 573.489672][ T5340] usb 5-1: Using ep0 maxpacket: 8 [ 573.499897][ T5340] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 573.499930][ T5340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.499951][ T5340] usb 5-1: Product: syz [ 573.499967][ T5340] usb 5-1: Manufacturer: syz [ 573.499982][ T5340] usb 5-1: SerialNumber: syz [ 573.558324][ T5340] usb 5-1: config 0 descriptor?? [ 573.833664][ T5340] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 574.664670][T14629] syzkaller1: entered promiscuous mode [ 574.664714][T14629] syzkaller1: entered allmulticast mode [ 574.899808][ T5718] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 575.015414][T14633] FAULT_INJECTION: forcing a failure. [ 575.015414][T14633] name failslab, interval 1, probability 0, space 0, times 0 [ 575.015459][T14633] CPU: 1 UID: 0 PID: 14633 Comm: syz.5.3132 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 575.015491][T14633] Tainted: [L]=SOFTLOCKUP [ 575.015500][T14633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 575.015513][T14633] Call Trace: [ 575.015522][T14633] [ 575.015532][T14633] dump_stack_lvl+0xe8/0x150 [ 575.015561][T14633] should_fail_ex+0x467/0x600 [ 575.015600][T14633] should_failslab+0xa8/0x100 [ 575.015625][T14633] ? skb_clone+0x212/0x3a0 [ 575.015655][T14633] kmem_cache_alloc_noprof+0x9e/0x680 [ 575.015679][T14633] ? skb_clone+0x212/0x3a0 [ 575.015716][T14633] skb_clone+0x212/0x3a0 [ 575.015751][T14633] __netlink_deliver_tap+0x410/0x880 [ 575.015780][T14633] ? netlink_deliver_tap+0x2e/0x1b0 [ 575.015816][T14633] ? netlink_deliver_tap+0x2e/0x1b0 [ 575.015847][T14633] netlink_deliver_tap+0x19c/0x1b0 [ 575.015878][T14633] netlink_sendskb+0x68/0x140 [ 575.015908][T14633] netlink_rcv_skb+0x2a4/0x4a0 [ 575.015939][T14633] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.015965][T14633] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 575.016019][T14633] genl_rcv+0x28/0x40 [ 575.016041][T14633] netlink_unicast+0x7f5/0x990 [ 575.016080][T14633] netlink_sendmsg+0x813/0xb40 [ 575.016128][T14633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.016164][T14633] ? aa_sock_msg_perm+0x122/0x200 [ 575.016203][T14633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.016232][T14633] sock_sendmsg_nosec+0x13a/0x180 [ 575.016258][T14633] ____sys_sendmsg+0x565/0x870 [ 575.016286][T14633] ? __might_fault+0xaf/0x130 [ 575.016317][T14633] ? __pfx_____sys_sendmsg+0x10/0x10 [ 575.016357][T14633] ? import_iovec+0x73/0xa0 [ 575.016388][T14633] ___sys_sendmsg+0x2a5/0x360 [ 575.016415][T14633] ? __lock_acquire+0x683/0x2ce0 [ 575.016450][T14633] ? __pfx____sys_sendmsg+0x10/0x10 [ 575.016520][T14633] ? __fget_files+0x2a/0x420 [ 575.016544][T14633] ? __fget_files+0x3a8/0x420 [ 575.016578][T14633] __x64_sys_sendmsg+0x1b7/0x290 [ 575.016612][T14633] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 575.016661][T14633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.016684][T14633] do_syscall_64+0x174/0x580 [ 575.016711][T14633] ? trace_irq_disable+0x3b/0x140 [ 575.016737][T14633] ? clear_bhb_loop+0x40/0x90 [ 575.016764][T14633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.016786][T14633] RIP: 0033:0x7fd64636ce59 [ 575.016807][T14633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.016825][T14633] RSP: 002b:00007fd6445be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.016849][T14633] RAX: ffffffffffffffda RBX: 00007fd6465e5fa0 RCX: 00007fd64636ce59 [ 575.016865][T14633] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000003 [ 575.016880][T14633] RBP: 00007fd6445be090 R08: 0000000000000000 R09: 0000000000000000 [ 575.016893][T14633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 575.016907][T14633] R13: 00007fd6465e6038 R14: 00007fd6465e5fa0 R15: 00007fff4cc1e8a8 [ 575.016942][T14633] [ 575.049692][ T5718] usb 1-1: Using ep0 maxpacket: 32 [ 575.121483][ T5718] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 575.121516][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.121538][ T5718] usb 1-1: Product: syz [ 575.121566][ T5718] usb 1-1: Manufacturer: syz [ 575.121582][ T5718] usb 1-1: SerialNumber: syz [ 575.342198][ T5340] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 575.399715][ T5340] usb 5-1: USB disconnect, device number 98 [ 575.453884][ T5718] usb 1-1: config 0 descriptor?? [ 575.486503][ T5718] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 576.159983][ T5619] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 576.289694][ T5619] usb 2-1: device descriptor read/64, error -71 [ 576.459690][ T37] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 576.529719][ T5619] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 576.615157][ T37] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 576.615195][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.615217][ T37] usb 5-1: Product: syz [ 576.615233][ T37] usb 5-1: Manufacturer: syz [ 576.615260][ T37] usb 5-1: SerialNumber: syz [ 576.659976][ T5619] usb 2-1: device descriptor read/64, error -71 [ 576.770732][ T5619] usb usb2-port1: attempt power cycle [ 576.867711][T14658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.869479][T14658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.911505][ T37] net_ratelimit: 358 callbacks suppressed [ 576.911527][ T37] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 576.911577][ T37] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 576.911589][ T37] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 576.974643][ T37] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 577.022631][ T37] usb 5-1: USB disconnect, device number 99 [ 577.109918][ T5619] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 577.130559][ T5619] usb 2-1: device descriptor read/8, error -71 [ 577.319746][ T5782] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 577.369682][ T5619] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 577.390605][ T5619] usb 2-1: device descriptor read/8, error -71 [ 577.469785][ T37] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 577.476245][ T5782] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 231, changing to 4 [ 577.476270][ T5782] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 577.476297][ T5782] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 174, changing to 4 [ 577.476312][ T5782] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 577.479070][ T5782] usb 6-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 577.479102][ T5782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.479161][ T5782] usb 6-1: Product: syz [ 577.479171][ T5782] usb 6-1: Manufacturer: syz [ 577.479180][ T5782] usb 6-1: SerialNumber: syz [ 577.500179][ T5619] usb usb2-port1: unable to enumerate USB device [ 577.622437][ T37] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 577.622469][ T37] usb 5-1: config 8 has an invalid descriptor of length 192, skipping remainder of the config [ 577.622491][ T37] usb 5-1: config 8 has no interface number 0 [ 577.622572][ T37] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 577.622597][ T37] usb 5-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.625318][ T37] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 577.625348][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.625370][ T37] usb 5-1: Product: syz [ 577.625386][ T37] usb 5-1: Manufacturer: syz [ 577.625401][ T37] usb 5-1: SerialNumber: syz [ 577.706292][ T5718] gspca_ov534_9: sccb_write failed [ 577.940530][ T5718] gspca_ov534_9: reg_w failed -71 [ 578.181136][ T37] usb 5-1: USB disconnect, device number 100 [ 578.189771][ T5718] gspca_ov534_9: Unknown sensor 0000 [ 578.189965][ T5718] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 578.316689][ T5718] usb 1-1: USB disconnect, device number 68 [ 578.666786][ T5782] usb 6-1: found format II with max.bitrate = 0, frame size=5 [ 578.666817][ T5782] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 578.668275][ T5782] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 578.780976][T14674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3144'. [ 578.856551][ T5782] usb 6-1: USB disconnect, device number 71 [ 578.928813][ T5626] udevd[5626]: setting mode of /dev/bus/usb/006/071 to 020664 failed: No such file or directory [ 578.928980][ T5626] udevd[5626]: setting owner of /dev/bus/usb/006/071 to uid=0, gid=0 failed: No such file or directory [ 579.048889][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 579.427186][T14685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.429374][T14685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.447317][T14685] netlink: 'syz.5.3148': attribute type 2 has an invalid length. [ 579.447333][T14685] netlink: 'syz.5.3148': attribute type 8 has an invalid length. [ 579.447341][T14685] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3148'. [ 579.659781][ T5615] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 579.840078][ T5615] usb 6-1: device descriptor read/64, error -71 [ 579.940274][ T5619] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 580.079758][ T5615] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 580.090091][ T5619] usb 1-1: Using ep0 maxpacket: 32 [ 580.096211][ T5619] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 580.096243][ T5619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.096263][ T5619] usb 1-1: Product: syz [ 580.096277][ T5619] usb 1-1: Manufacturer: syz [ 580.096291][ T5619] usb 1-1: SerialNumber: syz [ 580.107119][ T5619] usb 1-1: config 0 descriptor?? [ 580.114915][ T5619] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 580.211910][ T5615] usb 6-1: device descriptor read/64, error -71 [ 580.231254][ T37] usb 5-1: new low-speed USB device number 101 using dummy_hcd [ 580.346941][ T5615] usb usb6-port1: attempt power cycle [ 580.389747][ T37] usb 5-1: Invalid ep0 maxpacket: 64 [ 580.430000][ T825] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 580.519734][ T37] usb 5-1: new low-speed USB device number 102 using dummy_hcd [ 580.569760][ T825] usb 2-1: device descriptor read/64, error -71 [ 580.669766][ T37] usb 5-1: Invalid ep0 maxpacket: 64 [ 580.670697][ T37] usb usb5-port1: attempt power cycle [ 580.719768][ T5615] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 580.751027][ T5615] usb 6-1: device descriptor read/8, error -71 [ 580.839794][ T825] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 580.989777][ T825] usb 2-1: device descriptor read/64, error -71 [ 581.009808][ T5615] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 581.039841][ T37] usb 5-1: new low-speed USB device number 103 using dummy_hcd [ 581.042522][ T5615] usb 6-1: device descriptor read/8, error -71 [ 581.061533][ T37] usb 5-1: Invalid ep0 maxpacket: 64 [ 581.110351][ T825] usb usb2-port1: attempt power cycle [ 581.165451][ T5615] usb usb6-port1: unable to enumerate USB device [ 581.209721][ T37] usb 5-1: new low-speed USB device number 104 using dummy_hcd [ 581.231696][ T37] usb 5-1: Invalid ep0 maxpacket: 64 [ 581.232462][ T37] usb usb5-port1: unable to enumerate USB device [ 581.460998][ T825] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 581.482157][ T825] usb 2-1: device descriptor read/8, error -71 [ 581.739759][ T825] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 581.760434][ T825] usb 2-1: device descriptor read/8, error -71 [ 581.871065][ T825] usb usb2-port1: unable to enumerate USB device [ 582.329901][ T5619] gspca_ov534_9: sccb_write failed [ 582.543261][ T5619] gspca_ov534_9: reg_w failed -71 [ 582.779723][ T5619] gspca_ov534_9: Unknown sensor 0000 [ 582.779849][ T5619] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 582.790119][ T5619] usb 1-1: USB disconnect, device number 69 [ 583.009080][T14707] vlan1: entered promiscuous mode [ 583.409717][ T825] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 583.571177][ T825] usb 6-1: Using ep0 maxpacket: 16 [ 583.587690][ T825] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 583.587730][ T825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 583.611381][ T825] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 583.611414][ T825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.611433][ T825] usb 6-1: Product: syz [ 583.611447][ T825] usb 6-1: Manufacturer: syz [ 583.611461][ T825] usb 6-1: SerialNumber: syz [ 583.628976][ T825] usb 6-1: config 0 descriptor?? [ 583.644678][ T825] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 583.644714][ T825] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 584.240461][ T825] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 584.241165][ T825] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 584.453080][T14705] sg_write: data in/out 436700/168 bytes for SCSI command 0x0-- guessing data in; [ 584.453080][T14705] program syz.5.3156 not setting count and/or reply_len properly [ 584.620245][ T825] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 584.620270][ T825] em28xx 6-1:0.0: No AC97 audio processor [ 584.912060][ T5718] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 585.022894][T14754] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3172'. [ 585.022914][T14754] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3172'. [ 585.022923][T14754] netlink: 'syz.4.3172': attribute type 6 has an invalid length. [ 585.022931][T14754] netlink: 'syz.4.3172': attribute type 5 has an invalid length. [ 585.022939][T14754] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3172'. [ 585.102473][ T5718] usb 2-1: unable to get BOS descriptor or descriptor too short [ 585.103734][ T5718] usb 2-1: config 228 has an invalid interface number: 172 but max is 0 [ 585.103765][ T5718] usb 2-1: config 228 has no interface number 0 [ 585.103798][ T5718] usb 2-1: config 228 interface 172 has no altsetting 0 [ 585.106077][ T5718] usb 2-1: New USB device found, idVendor=17ef, idProduct=480b, bcdDevice=6f.4d [ 585.106105][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.106126][ T5718] usb 2-1: Product: syz [ 585.106139][ T5718] usb 2-1: Manufacturer: syz [ 585.106149][ T5718] usb 2-1: SerialNumber: syz [ 585.449324][ T5718] uvcvideo 2-1:228.172: probe with driver uvcvideo failed with error -22 [ 585.465547][ T5718] usb 2-1: USB disconnect, device number 17 [ 586.315770][T14771] binder: 14768:14771 ioctl c0306201 2000000004c0 returned -14 [ 586.429763][ T202] usb 6-1: USB disconnect, device number 76 [ 586.432846][ T202] em28xx 6-1:0.0: Disconnecting em28xx [ 586.628346][ T202] em28xx 6-1:0.0: Freeing device [ 587.429744][ T202] usb 6-1: new low-speed USB device number 77 using dummy_hcd [ 587.457822][ T5614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 587.512692][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 587.516028][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 587.519727][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 587.561343][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 587.603792][ T202] usb 6-1: Invalid ep0 maxpacket: 64 [ 587.777958][ T202] usb 6-1: new low-speed USB device number 78 using dummy_hcd [ 587.950674][ T202] usb 6-1: Invalid ep0 maxpacket: 64 [ 587.957277][ T202] usb usb6-port1: attempt power cycle [ 588.249874][ T5782] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 588.322475][ T202] usb 6-1: new low-speed USB device number 79 using dummy_hcd [ 588.343840][ T202] usb 6-1: Invalid ep0 maxpacket: 64 [ 588.402794][ T825] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 588.435776][ T5782] usb 1-1: Using ep0 maxpacket: 32 [ 588.445498][ T5782] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 588.445533][ T5782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.445554][ T5782] usb 1-1: Product: syz [ 588.445569][ T5782] usb 1-1: Manufacturer: syz [ 588.445583][ T5782] usb 1-1: SerialNumber: syz [ 588.462553][ T5782] usb 1-1: config 0 descriptor?? [ 588.490577][ T5782] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 588.501939][ T202] usb 6-1: new low-speed USB device number 80 using dummy_hcd [ 588.529779][ T825] usb 5-1: device descriptor read/64, error -71 [ 588.554255][ T202] usb 6-1: Invalid ep0 maxpacket: 64 [ 588.555389][ T202] usb usb6-port1: unable to enumerate USB device [ 588.769826][ T825] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 588.919817][ T825] usb 5-1: device descriptor read/64, error -71 [ 589.030044][ T825] usb usb5-port1: attempt power cycle [ 589.326943][T14786] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.327333][T14786] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.327592][T14786] bridge_slave_0: entered allmulticast mode [ 589.332037][T14786] bridge_slave_0: entered promiscuous mode [ 589.348256][T14786] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.348689][T14786] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.348991][T14786] bridge_slave_1: entered allmulticast mode [ 589.357891][T14786] bridge_slave_1: entered promiscuous mode [ 589.371238][ T825] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 589.401828][ T825] usb 5-1: device descriptor read/8, error -71 [ 589.436695][T14786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.447981][T14786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.522634][T14786] team0: Port device team_slave_0 added [ 589.527600][T14786] team0: Port device team_slave_1 added [ 589.585609][T14786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.585627][T14786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.585657][T14786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.589272][T14786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.589289][T14786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.589318][T14786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.639807][ T825] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 589.660468][ T825] usb 5-1: device descriptor read/8, error -71 [ 589.770552][ T825] usb usb5-port1: unable to enumerate USB device [ 589.842281][T14786] hsr_slave_0: entered promiscuous mode [ 589.844314][T14786] hsr_slave_1: entered promiscuous mode [ 589.859782][ T4923] Bluetooth: hci3: command tx timeout [ 590.211427][T14794] pimreg: entered allmulticast mode [ 590.214915][ T5782] gspca_ov534_9: reg_w failed -71 [ 590.263826][T14812] binder: 14811:14812 ioctl c018620c 200000000140 returned -1 [ 590.460301][ T5782] gspca_ov534_9: Unknown sensor 0000 [ 590.460378][ T5782] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 590.481167][ T5782] usb 1-1: USB disconnect, device number 70 [ 590.804112][T14786] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.178418][T14821] FAULT_INJECTION: forcing a failure. [ 591.178418][T14821] name failslab, interval 1, probability 0, space 0, times 0 [ 591.178455][T14821] CPU: 1 UID: 0 PID: 14821 Comm: syz.4.3192 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 591.178482][T14821] Tainted: [L]=SOFTLOCKUP [ 591.178490][T14821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 591.178503][T14821] Call Trace: [ 591.178510][T14821] [ 591.178518][T14821] dump_stack_lvl+0xe8/0x150 [ 591.178543][T14821] should_fail_ex+0x467/0x600 [ 591.178575][T14821] should_failslab+0xa8/0x100 [ 591.178598][T14821] __kmalloc_node_noprof+0xfd/0x7b0 [ 591.178619][T14821] ? crypto_create_tfm_node+0x81/0x3c0 [ 591.178640][T14821] ? crypto_create_tfm_node+0x81/0x3c0 [ 591.178669][T14821] crypto_create_tfm_node+0x81/0x3c0 [ 591.178695][T14821] crypto_alloc_tfm_node+0x169/0x3e0 [ 591.178727][T14821] esp6_init_state+0x3b6/0x1220 [ 591.178751][T14821] ? do_syscall_64+0x174/0x580 [ 591.178773][T14821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.178795][T14821] ? __lock_acquire+0x683/0x2ce0 [ 591.178824][T14821] ? __pfx_esp6_init_state+0x10/0x10 [ 591.178881][T14821] ? __xfrm_init_state+0x745/0x12c0 [ 591.178903][T14821] __xfrm_init_state+0x9dd/0x12c0 [ 591.178923][T14821] ? __xfrm_init_state+0x745/0x12c0 [ 591.178943][T14821] xfrm_add_sa+0x2f51/0x40d0 [ 591.178978][T14821] ? __pfx_xfrm_add_sa+0x10/0x10 [ 591.179001][T14821] ? apparmor_capable+0x126/0x170 [ 591.179024][T14821] ? __nla_parse+0x40/0x60 [ 591.179046][T14821] xfrm_user_rcv_msg+0x7a8/0xf30 [ 591.179089][T14821] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 591.179148][T14821] ? __lock_acquire+0x683/0x2ce0 [ 591.179175][T14821] ? __netlink_deliver_tap+0x600/0x880 [ 591.179197][T14821] ? netlink_deliver_tap+0x19c/0x1b0 [ 591.179218][T14821] ? netlink_unicast+0x7b8/0x990 [ 591.179241][T14821] ? netlink_sendmsg+0x813/0xb40 [ 591.179263][T14821] ? sock_sendmsg_nosec+0x13a/0x180 [ 591.179279][T14821] ? ____sys_sendmsg+0x565/0x870 [ 591.179299][T14821] ? ___sys_sendmsg+0x2a5/0x360 [ 591.179320][T14821] ? __x64_sys_sendmsg+0x1b7/0x290 [ 591.179348][T14821] netlink_rcv_skb+0x226/0x4a0 [ 591.179373][T14821] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 591.179401][T14821] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 591.179436][T14821] ? lockdep_hardirqs_on+0x7a/0x110 [ 591.179462][T14821] ? mutex_lock_nested+0x152/0x1d0 [ 591.179490][T14821] ? xfrm_netlink_rcv+0x6a/0x90 [ 591.179518][T14821] xfrm_netlink_rcv+0x79/0x90 [ 591.179544][T14821] netlink_unicast+0x7f5/0x990 [ 591.179577][T14821] netlink_sendmsg+0x813/0xb40 [ 591.179611][T14821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.179637][T14821] ? aa_sock_msg_perm+0x122/0x200 [ 591.179667][T14821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.179691][T14821] sock_sendmsg_nosec+0x13a/0x180 [ 591.179715][T14821] ____sys_sendmsg+0x565/0x870 [ 591.179738][T14821] ? __might_fault+0xaf/0x130 [ 591.179763][T14821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 591.179794][T14821] ? import_iovec+0x73/0xa0 [ 591.179818][T14821] ___sys_sendmsg+0x2a5/0x360 [ 591.179839][T14821] ? __lock_acquire+0x683/0x2ce0 [ 591.179865][T14821] ? __pfx____sys_sendmsg+0x10/0x10 [ 591.179921][T14821] ? __fget_files+0x2a/0x420 [ 591.179940][T14821] ? __fget_files+0x3a8/0x420 [ 591.179969][T14821] __x64_sys_sendmsg+0x1b7/0x290 [ 591.179995][T14821] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 591.180036][T14821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.180056][T14821] do_syscall_64+0x174/0x580 [ 591.180089][T14821] ? trace_irq_disable+0x3b/0x140 [ 591.180112][T14821] ? clear_bhb_loop+0x40/0x90 [ 591.180135][T14821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.180152][T14821] RIP: 0033:0x7fc1e5ecce59 [ 591.180169][T14821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.180184][T14821] RSP: 002b:00007fc1e4126028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 591.180204][T14821] RAX: ffffffffffffffda RBX: 00007fc1e6145fa0 RCX: 00007fc1e5ecce59 [ 591.180217][T14821] RDX: 0000000000002014 RSI: 0000200000000000 RDI: 0000000000000003 [ 591.180229][T14821] RBP: 00007fc1e4126090 R08: 0000000000000000 R09: 0000000000000000 [ 591.180240][T14821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 591.180250][T14821] R13: 00007fc1e6146038 R14: 00007fc1e6145fa0 R15: 00007ffdcf92b4a8 [ 591.180278][T14821] [ 591.741902][ T5782] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 591.841086][T14827] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3194'. [ 591.877853][T14786] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.940361][ T4923] Bluetooth: hci3: command tx timeout [ 591.955817][T14827] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3194'. [ 591.979885][ T5782] usb 1-1: Using ep0 maxpacket: 8 [ 591.985605][ T5782] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 0.00 [ 591.985628][ T5782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.985641][ T5782] usb 1-1: Product: syz [ 591.985650][ T5782] usb 1-1: Manufacturer: syz [ 591.985659][ T5782] usb 1-1: SerialNumber: syz [ 592.172283][ T5619] usb 6-1: new full-speed USB device number 81 using dummy_hcd [ 592.205160][ T5782] kalmia 1-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 592.259398][ T5782] kalmia 1-1:1.0 (unnamed net_device) (uninitialized): Error receiving init result. Status -71 [ 592.260223][ T5782] kalmia 1-1:1.0: probe with driver kalmia failed with error -71 [ 592.306485][ T5782] usb 1-1: USB disconnect, device number 71 [ 592.338045][ T5619] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 592.338085][ T5619] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.338125][ T5619] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 592.338151][ T5619] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.413982][ T5619] usb 6-1: config 0 descriptor?? [ 592.732168][T14786] team0: Port device netdevsim1 removed [ 592.863735][ T5619] isku 0003:1E7D:319C.000D: item fetching failed at offset 3/7 [ 592.865446][ T5619] isku 0003:1E7D:319C.000D: parse failed [ 592.865535][ T5619] isku 0003:1E7D:319C.000D: probe with driver isku failed with error -22 [ 592.905661][T14786] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.986212][T14837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3196'. [ 593.117904][T14839] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3198'. [ 593.123745][ T5782] usb 6-1: USB disconnect, device number 81 [ 593.595532][T14786] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.022161][ T4923] Bluetooth: hci3: command tx timeout [ 595.310632][ T5695] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 595.442053][ T5782] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 595.477981][ T5695] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 595.478015][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.504660][ T5695] usb 5-1: config 0 descriptor?? [ 595.522018][ T5695] cp210x 5-1:0.0: cp210x converter detected [ 595.603463][ T5782] usb 6-1: Using ep0 maxpacket: 8 [ 595.606299][ T5782] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 595.606332][ T5782] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.606351][ T5782] usb 6-1: config 0 has no interface number 0 [ 595.606603][ T5782] usb 6-1: config 0 interface 122 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 595.613632][ T5782] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 595.613662][ T5782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.613905][ T5782] usb 6-1: Product: syz [ 595.613921][ T5782] usb 6-1: Manufacturer: syz [ 595.613935][ T5782] usb 6-1: SerialNumber: syz [ 595.638016][ T5782] usb 6-1: config 0 descriptor?? [ 595.749193][T14786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 595.798939][T14786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 595.808442][T14786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 595.867876][ T5782] usb 6-1: NFC: intf ffff88803939b000 id ffffffff8eba3420 [ 595.955135][ T5782] usb 6-1: USB disconnect, device number 82 [ 596.019846][ T4923] Bluetooth: hci4: command 0x0406 tx timeout [ 596.099789][ T4923] Bluetooth: hci3: command tx timeout [ 596.181806][T14891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.182501][T14891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.326373][T14786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 596.335355][T14786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 596.714950][T14786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 596.743785][T14786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 597.035509][T14786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 597.247401][T14911] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3216'. [ 597.702631][ T5614] Bluetooth: hci4: unexpected event 0x2f length: 1017 > 260 [ 597.702657][ T5614] Bluetooth: hci4: Malformed Event: 0x2f [ 598.019865][ T825] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 598.059156][T14786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.180028][ T825] usb 1-1: Using ep0 maxpacket: 8 [ 598.184181][ T825] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 598.184246][ T825] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 598.184272][ T825] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 598.184298][ T825] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 598.184324][ T825] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.184370][ T825] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 598.184395][ T825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.453764][T14786] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.479998][ T825] usb 1-1: usb_control_msg returned -32 [ 598.480047][ T825] usbtmc 1-1:16.0: can't read capabilities [ 598.543977][ T1460] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.544257][ T1460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.744506][ T7030] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.745669][ T7030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.856054][ T825] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 598.922059][T14914] usbtmc 1-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 599.029754][ T825] usb 6-1: Using ep0 maxpacket: 8 [ 599.096086][ T825] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 599.096121][ T825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.096144][ T825] usb 6-1: Product: syz [ 599.096161][ T825] usb 6-1: Manufacturer: syz [ 599.096177][ T825] usb 6-1: SerialNumber: syz [ 599.135298][ T37] usb 1-1: USB disconnect, device number 72 [ 599.162483][ T825] usb 6-1: config 0 descriptor?? [ 599.373691][ T825] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -71 [ 599.373807][ T825] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 599.403453][ T825] usb 6-1: USB disconnect, device number 83 [ 600.306665][T14924] FAULT_INJECTION: forcing a failure. [ 600.306665][T14924] name failslab, interval 1, probability 0, space 0, times 0 [ 600.306707][T14924] CPU: 0 UID: 0 PID: 14924 Comm: syz.5.3222 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 600.306737][T14924] Tainted: [L]=SOFTLOCKUP [ 600.306749][T14924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 600.306762][T14924] Call Trace: [ 600.306770][T14924] [ 600.306779][T14924] dump_stack_lvl+0xe8/0x150 [ 600.306809][T14924] should_fail_ex+0x467/0x600 [ 600.306848][T14924] should_failslab+0xa8/0x100 [ 600.306877][T14924] __kmalloc_noprof+0xfb/0x790 [ 600.306898][T14924] ? tomoyo_encode+0x2ad/0x570 [ 600.306926][T14924] ? tomoyo_encode+0x2ad/0x570 [ 600.306962][T14924] tomoyo_encode+0x2ad/0x570 [ 600.306995][T14924] tomoyo_realpath_from_path+0x5fa/0x640 [ 600.307034][T14924] ? tomoyo_path_number_perm+0x219/0x5f0 [ 600.307060][T14924] tomoyo_path_number_perm+0x246/0x5f0 [ 600.307088][T14924] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 600.307113][T14924] ? __lock_acquire+0x683/0x2ce0 [ 600.307145][T14924] ? __seccomp_filter+0xafb/0x1e00 [ 600.307184][T14924] ? hook_file_ioctl+0x1f3/0x600 [ 600.307235][T14924] ? __fget_files+0x2a/0x420 [ 600.307262][T14924] ? __fget_files+0x2a/0x420 [ 600.307285][T14924] ? __fget_files+0x3a8/0x420 [ 600.307307][T14924] ? __fget_files+0x2a/0x420 [ 600.307335][T14924] security_file_ioctl+0xc3/0x2a0 [ 600.307363][T14924] __se_sys_ioctl+0x47/0x170 [ 600.307393][T14924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.307416][T14924] do_syscall_64+0x174/0x580 [ 600.307444][T14924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.307477][T14924] ? clear_bhb_loop+0x40/0x90 [ 600.307504][T14924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.307526][T14924] RIP: 0033:0x7fd64636ce59 [ 600.307548][T14924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.307567][T14924] RSP: 002b:00007fd6445be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 600.307593][T14924] RAX: ffffffffffffffda RBX: 00007fd6465e5fa0 RCX: 00007fd64636ce59 [ 600.307609][T14924] RDX: 0000200000000100 RSI: 0000000040086200 RDI: 0000000000000005 [ 600.307624][T14924] RBP: 00007fd6445be090 R08: 0000000000000000 R09: 0000000000000000 [ 600.307638][T14924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.307651][T14924] R13: 00007fd6465e6038 R14: 00007fd6465e5fa0 R15: 00007fff4cc1e8a8 [ 600.307685][T14924] [ 600.307784][T14924] ERROR: Out of memory at tomoyo_realpath_from_path. [ 600.989959][ T37] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 600.994448][ T5695] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -110 [ 600.995901][ T5695] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -32 [ 600.995948][ T5695] cp210x 5-1:0.0: GPIO initialisation failed: -32 [ 601.025624][ T5695] usb 5-1: cp210x converter now attached to ttyUSB0 [ 601.143811][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.143849][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.143890][ T37] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 601.143915][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.196159][ T37] usb 1-1: config 0 descriptor?? [ 601.637750][ T825] IPVS: starting estimator thread 0... [ 601.687258][ T37] hid-steam 0003:28DE:1142.000E: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 601.735301][T14943] IPVS: using max 7 ests per chain, 16800 per kthread [ 601.759711][ T37] hid-steam 0003:28DE:1142.000E: Steam wireless receiver connected [ 601.801417][T14786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.995978][ T37] hid-steam 0003:28DE:1142.000F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 602.221957][ T5782] usb 1-1: USB disconnect, device number 73 [ 602.287433][T14786] veth0_vlan: entered promiscuous mode [ 602.522165][T14786] veth1_vlan: entered promiscuous mode [ 602.550320][T14953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.551687][T14953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.770235][T14958] CUSE: unknown device info "" [ 602.770254][T14958] CUSE: unknown device info "" [ 602.770265][T14958] CUSE: zero length info key specified [ 602.774901][T14958] netlink: 5028 bytes leftover after parsing attributes in process `syz.0.3231'. [ 602.847412][ T5782] hid-steam 0003:28DE:1142.000E: Steam wireless receiver disconnected [ 602.965968][T14786] veth0_macvtap: entered promiscuous mode [ 603.331387][T14786] veth1_macvtap: entered promiscuous mode [ 603.689041][T14786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.728829][T14786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.781925][ T9844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.793071][ T9844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.796044][ T9844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.796090][ T9844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.059984][ T37] usb 5-1: USB disconnect, device number 109 [ 604.087577][ T37] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 604.104840][ T37] cp210x 5-1:0.0: device disconnected [ 605.847230][ T7034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.847256][ T7034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.372624][ T9860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.372650][ T9860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.718238][T14992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3242'. [ 607.089484][T10288] Bluetooth: hci0: Frame reassembly failed (-84) [ 607.659769][ T202] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 607.821546][ T202] usb 5-1: too many configurations: 234, using maximum allowed: 8 [ 607.860715][ T37] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 607.887720][ T202] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 607.887753][ T202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.887774][ T202] usb 5-1: Product: syz [ 607.887784][ T202] usb 5-1: Manufacturer: syz [ 607.887794][ T202] usb 5-1: SerialNumber: syz [ 607.935198][ T202] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 608.014068][ T37] usb 1-1: unable to get BOS descriptor or descriptor too short [ 608.014801][ T37] usb 1-1: not running at top speed; connect to a high speed hub [ 608.016116][ T37] usb 1-1: config 228 has an invalid interface number: 172 but max is 0 [ 608.016143][ T37] usb 1-1: config 228 has no interface number 0 [ 608.016174][ T37] usb 1-1: config 228 interface 172 has no altsetting 0 [ 608.073967][ T37] usb 1-1: New USB device found, idVendor=17ef, idProduct=480b, bcdDevice=6f.4d [ 608.073998][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.074016][ T37] usb 1-1: Product: syz [ 608.074030][ T37] usb 1-1: Manufacturer: syz [ 608.074044][ T37] usb 1-1: SerialNumber: syz [ 608.286275][ T11] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 608.396852][ T37] uvcvideo 1-1:228.172: probe with driver uvcvideo failed with error -22 [ 608.480975][ T37] usb 1-1: USB disconnect, device number 74 [ 608.985706][ T4923] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 609.290466][T15013] FAULT_INJECTION: forcing a failure. [ 609.290466][T15013] name failslab, interval 1, probability 0, space 0, times 0 [ 609.290511][T15013] CPU: 1 UID: 0 PID: 15013 Comm: syz.0.3249 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 609.290542][T15013] Tainted: [L]=SOFTLOCKUP [ 609.290551][T15013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 609.290564][T15013] Call Trace: [ 609.290574][T15013] [ 609.290583][T15013] dump_stack_lvl+0xe8/0x150 [ 609.290616][T15013] should_fail_ex+0x467/0x600 [ 609.290655][T15013] should_failslab+0xa8/0x100 [ 609.290685][T15013] kmem_cache_alloc_node_noprof+0xac/0x660 [ 609.290709][T15013] ? __alloc_skb+0x1d7/0x7a0 [ 609.290734][T15013] ? __alloc_skb+0x1d7/0x7a0 [ 609.290765][T15013] __alloc_skb+0x1d7/0x7a0 [ 609.290794][T15013] netlink_sendmsg+0x5d4/0xb40 [ 609.290835][T15013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.290869][T15013] ? aa_sock_msg_perm+0x122/0x200 [ 609.290913][T15013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.290940][T15013] sock_sendmsg_nosec+0x13a/0x180 [ 609.290966][T15013] ____sys_sendmsg+0x565/0x870 [ 609.291000][T15013] ? __might_fault+0xaf/0x130 [ 609.291030][T15013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 609.291069][T15013] ? import_iovec+0x73/0xa0 [ 609.291096][T15013] ___sys_sendmsg+0x2a5/0x360 [ 609.291122][T15013] ? __lock_acquire+0x683/0x2ce0 [ 609.291154][T15013] ? __pfx____sys_sendmsg+0x10/0x10 [ 609.291216][T15013] ? __fget_files+0x2a/0x420 [ 609.291239][T15013] ? __fget_files+0x3a8/0x420 [ 609.291272][T15013] __x64_sys_sendmsg+0x1b7/0x290 [ 609.291302][T15013] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 609.291349][T15013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.291373][T15013] do_syscall_64+0x174/0x580 [ 609.291399][T15013] ? trace_irq_disable+0x3b/0x140 [ 609.291427][T15013] ? clear_bhb_loop+0x40/0x90 [ 609.291453][T15013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.291474][T15013] RIP: 0033:0x7fbb4d1bce59 [ 609.291496][T15013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.291515][T15013] RSP: 002b:00007fbb4b40e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 609.291540][T15013] RAX: ffffffffffffffda RBX: 00007fbb4d435fa0 RCX: 00007fbb4d1bce59 [ 609.291557][T15013] RDX: 0000000000000804 RSI: 0000200000000300 RDI: 0000000000000003 [ 609.291571][T15013] RBP: 00007fbb4b40e090 R08: 0000000000000000 R09: 0000000000000000 [ 609.291585][T15013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.291598][T15013] R13: 00007fbb4d436038 R14: 00007fbb4d435fa0 R15: 00007ffec6535f48 [ 609.291631][T15013] [ 609.539914][ T11] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 610.018611][T15020] fuse: Unknown parameter '' [ 610.994962][ T11] ath9k_htc: Failed to initialize the device [ 611.447835][T15034] FAULT_INJECTION: forcing a failure. [ 611.447835][T15034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.447877][T15034] CPU: 1 UID: 0 PID: 15034 Comm: syz.0.3259 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 611.447909][T15034] Tainted: [L]=SOFTLOCKUP [ 611.447918][T15034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 611.447941][T15034] Call Trace: [ 611.447950][T15034] [ 611.447960][T15034] dump_stack_lvl+0xe8/0x150 [ 611.447990][T15034] should_fail_ex+0x467/0x600 [ 611.448031][T15034] _copy_to_user+0x31/0xb0 [ 611.448061][T15034] simple_read_from_buffer+0xe1/0x170 [ 611.448093][T15034] proc_fail_nth_read+0x1be/0x230 [ 611.448122][T15034] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 611.448151][T15034] ? rw_verify_area+0x250/0x4d0 [ 611.448182][T15034] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 611.448205][T15034] vfs_read+0x219/0xa90 [ 611.448244][T15034] ? __pfx_vfs_read+0x10/0x10 [ 611.448275][T15034] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 611.448304][T15034] ? lockdep_hardirqs_on+0x7a/0x110 [ 611.448333][T15034] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 611.448361][T15034] ? mutex_lock_nested+0x152/0x1d0 [ 611.448391][T15034] ? fdget_pos+0x252/0x320 [ 611.448425][T15034] ksys_read+0x156/0x270 [ 611.448456][T15034] ? __pfx_ksys_read+0x10/0x10 [ 611.448494][T15034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.448520][T15034] do_syscall_64+0x174/0x580 [ 611.448547][T15034] ? trace_irq_disable+0x3b/0x140 [ 611.448576][T15034] ? clear_bhb_loop+0x40/0x90 [ 611.448603][T15034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.448626][T15034] RIP: 0033:0x7fbb4d17d68e [ 611.448647][T15034] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 611.448666][T15034] RSP: 002b:00007fbb4b40dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 611.448691][T15034] RAX: ffffffffffffffda RBX: 00007fbb4b40e6c0 RCX: 00007fbb4d17d68e [ 611.448708][T15034] RDX: 000000000000000f RSI: 00007fbb4b40e0a0 RDI: 0000000000000005 [ 611.448727][T15034] RBP: 00007fbb4b40e090 R08: 0000000000000000 R09: 0000000000000000 [ 611.448741][T15034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 611.448755][T15034] R13: 00007fbb4d436038 R14: 00007fbb4d435fa0 R15: 00007ffec6535f48 [ 611.448791][T15034] [ 612.010762][ T5695] usb 5-1: USB disconnect, device number 110 [ 612.083050][ T5695] usb 5-1: ath9k_htc: USB layer deinitialized [ 612.103517][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 612.439929][ T5695] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 612.460116][ T5782] ------------[ cut here ]------------ [ 612.460135][ T5782] in_task() && kcov_mode_enabled(mode) [ 612.460147][ T5782] WARNING: kernel/kcov.c:894 at kcov_remote_start+0x5bb/0x6f0, CPU#0: kworker/0:6/5782 [ 612.460194][ T5782] Modules linked in: [ 612.460218][ T5782] CPU: 0 UID: 0 PID: 5782 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 612.460249][ T5782] Tainted: [L]=SOFTLOCKUP [ 612.460257][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 612.460272][ T5782] Workqueue: usb_hub_wq hub_event [ 612.460302][ T5782] RIP: 0010:kcov_remote_start+0x5bb/0x6f0 [ 612.460330][ T5782] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 2c 44 f5 02 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 b7 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 d7 88 75 09 89 c0 48 c7 c7 c0 42 9a [ 612.460372][ T5782] RSP: 0018:ffffc9000587f868 EFLAGS: 00010202 [ 612.460392][ T5782] RAX: 0000000000000000 RBX: ffff8880301e9f00 RCX: 0000000080000001 [ 612.460409][ T5782] RDX: 0000000000000000 RSI: ffffffff8bab9e60 RDI: ffffffff8bab9e20 [ 612.460425][ T5782] RBP: ffffc9000587fb70 R08: ffffffff8b3d09b0 R09: 0000000000000000 [ 612.460442][ T5782] R10: 0000000000000000 R11: ffffffff8e1c30c0 R12: 1ffff1100603d478 [ 612.460459][ T5782] R13: dffffc0000000000 R14: 0100000000000002 R15: ffff88802a2d7000 [ 612.460477][ T5782] FS: 0000000000000000(0000) GS:ffff888125c85000(0000) knlGS:0000000000000000 [ 612.460496][ T5782] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 612.460513][ T5782] CR2: 00007fe176cd5fc0 CR3: 000000004ff06000 CR4: 00000000003526f0 [ 612.460534][ T5782] Call Trace: [ 612.460544][ T5782] [ 612.460559][ T5782] hub_event+0x15d/0x4cf0 [ 612.460614][ T5782] ? __lock_acquire+0x683/0x2ce0 [ 612.460649][ T5782] ? register_lock_class+0x31/0x2e0 [ 612.460684][ T5782] ? __lock_acquire+0x683/0x2ce0 [ 612.460730][ T5782] ? do_raw_spin_lock+0x12b/0x2f0 [ 612.460759][ T5782] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 612.460790][ T5782] ? __pfx_hub_event+0x10/0x10 [ 612.460815][ T5782] ? process_one_work+0x8cd/0x12b0 [ 612.460848][ T5782] ? process_one_work+0x8cd/0x12b0 [ 612.460873][ T5782] ? rcu_is_watching+0x15/0xb0 [ 612.460906][ T5782] ? process_one_work+0x8cd/0x12b0 [ 612.460936][ T5782] ? process_one_work+0x8cd/0x12b0 [ 612.460965][ T5782] process_one_work+0x93a/0x12b0 [ 612.461018][ T5782] ? __pfx_process_one_work+0x10/0x10 [ 612.461064][ T5782] ? do_raw_spin_lock+0x12b/0x2f0 [ 612.461102][ T5782] ? assign_work+0x3cf/0x5d0 [ 612.461143][ T5782] worker_thread+0xb05/0x10d0 [ 612.461189][ T5782] ? __kthread_parkme+0x71/0x1f0 [ 612.461224][ T5782] kthread+0x388/0x470 [ 612.461252][ T5782] ? __pfx_worker_thread+0x10/0x10 [ 612.461283][ T5782] ? __pfx_kthread+0x10/0x10 [ 612.461331][ T5782] ret_from_fork+0x514/0xb70 [ 612.461374][ T5782] ? __pfx_ret_from_fork+0x10/0x10 [ 612.461427][ T5782] ? __switch_to+0xc89/0x1420 [ 612.461456][ T5782] ? __pfx_kthread+0x10/0x10 [ 612.461492][ T5782] ret_from_fork_asm+0x1a/0x30 [ 612.461541][ T5782] [ 612.461554][ T5782] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 612.461575][ T5782] CPU: 0 UID: 0 PID: 5782 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 612.461607][ T5782] Tainted: [L]=SOFTLOCKUP [ 612.461616][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 612.461631][ T5782] Workqueue: usb_hub_wq hub_event [ 612.461660][ T5782] Call Trace: [ 612.461669][ T5782] [ 612.461678][ T5782] vpanic+0x56c/0xa60 [ 612.461722][ T5782] ? __pfx__printk+0x10/0x10 [ 612.461750][ T5782] ? __pfx_vpanic+0x10/0x10 [ 612.461787][ T5782] ? is_bpf_text_address+0x292/0x2b0 [ 612.461820][ T5782] ? is_bpf_text_address+0x26/0x2b0 [ 612.461863][ T5782] panic+0xc5/0xd0 [ 612.461896][ T5782] ? __pfx_panic+0x10/0x10 [ 612.461940][ T5782] ? ret_from_fork_asm+0x1a/0x30 [ 612.461975][ T5782] __warn+0x315/0x4c0 [ 612.462022][ T5782] ? kcov_remote_start+0x5bb/0x6f0 [ 612.462068][ T5782] ? kcov_remote_start+0x5bb/0x6f0 [ 612.462095][ T5782] __report_bug+0x331/0x530 [ 612.462134][ T5782] ? kcov_remote_start+0x5bb/0x6f0 [ 612.462163][ T5782] ? __pfx___report_bug+0x10/0x10 [ 612.462198][ T5782] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 612.462229][ T5782] ? rt_spin_lock+0x1e0/0x400 [ 612.462264][ T5782] ? rt_spin_lock+0x1e0/0x400 [ 612.462296][ T5782] ? kcov_remote_start+0x5bb/0x6f0 [ 612.462329][ T5782] report_bug+0x16a/0x220 [ 612.462377][ T5782] ? kcov_remote_start+0x5bb/0x6f0 [ 612.462411][ T5782] ? kcov_remote_start+0x5bd/0x6f0 [ 612.462436][ T5782] handle_bug+0x9c/0x200 [ 612.462498][ T5782] exc_invalid_op+0x1a/0x50 [ 612.462543][ T5782] asm_exc_invalid_op+0x1a/0x20 [ 612.462567][ T5782] RIP: 0010:kcov_remote_start+0x5bb/0x6f0 [ 612.462595][ T5782] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 2c 44 f5 02 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 b7 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 d7 88 75 09 89 c0 48 c7 c7 c0 42 9a [ 612.462613][ T5782] RSP: 0018:ffffc9000587f868 EFLAGS: 00010202 [ 612.462642][ T5782] RAX: 0000000000000000 RBX: ffff8880301e9f00 RCX: 0000000080000001 [ 612.462659][ T5782] RDX: 0000000000000000 RSI: ffffffff8bab9e60 RDI: ffffffff8bab9e20 [ 612.462675][ T5782] RBP: ffffc9000587fb70 R08: ffffffff8b3d09b0 R09: 0000000000000000 [ 612.462699][ T5782] R10: 0000000000000000 R11: ffffffff8e1c30c0 R12: 1ffff1100603d478 [ 612.462715][ T5782] R13: dffffc0000000000 R14: 0100000000000002 R15: ffff88802a2d7000 [ 612.462737][ T5782] ? rt_spin_lock+0x1e0/0x400 [ 612.462776][ T5782] ? kcov_remote_start+0xda/0x6f0 [ 612.462810][ T5782] hub_event+0x15d/0x4cf0 [ 612.462863][ T5782] ? __lock_acquire+0x683/0x2ce0 [ 612.462905][ T5782] ? register_lock_class+0x31/0x2e0 [ 612.462940][ T5782] ? __lock_acquire+0x683/0x2ce0 [ 612.462983][ T5782] ? do_raw_spin_lock+0x12b/0x2f0 [ 612.463013][ T5782] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 612.463042][ T5782] ? __pfx_hub_event+0x10/0x10 [ 612.463067][ T5782] ? process_one_work+0x8cd/0x12b0 [ 612.463105][ T5782] ? process_one_work+0x8cd/0x12b0 [ 612.463136][ T5782] ? rcu_is_watching+0x15/0xb0 [ 612.463170][ T5782] ? process_one_work+0x8cd/0x12b0 [ 612.463202][ T5782] ? process_one_work+0x8cd/0x12b0 [ 612.463232][ T5782] process_one_work+0x93a/0x12b0 [ 612.463283][ T5782] ? __pfx_process_one_work+0x10/0x10 [ 612.463310][ T5782] ? do_raw_spin_lock+0x12b/0x2f0 [ 612.463352][ T5782] ? assign_work+0x3cf/0x5d0 [ 612.463390][ T5782] worker_thread+0xb05/0x10d0 [ 612.463437][ T5782] ? __kthread_parkme+0x71/0x1f0 [ 612.463470][ T5782] kthread+0x388/0x470 [ 612.463498][ T5782] ? __pfx_worker_thread+0x10/0x10 [ 612.463531][ T5782] ? __pfx_kthread+0x10/0x10 [ 612.463560][ T5782] ret_from_fork+0x514/0xb70 [ 612.463592][ T5782] ? __pfx_ret_from_fork+0x10/0x10 [ 612.463620][ T5782] ? __switch_to+0xc89/0x1420 [ 612.463648][ T5782] ? __pfx_kthread+0x10/0x10 [ 612.463686][ T5782] ret_from_fork_asm+0x1a/0x30 [ 612.463740][ T5782] [ 612.463919][ T5782] Kernel Offset: disabled