last executing test programs: 4m22.020135438s ago: executing program 3 (id=1827): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1"], 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000a80)={{r0}, "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"}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f00000000c0)={0xc5, 0x0, r1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m21.789725929s ago: executing program 3 (id=1828): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x25, 0x101, 0x70bd25, 0xfefffffb, {0x18}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) listen(r1, 0x7ff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 4m21.391126752s ago: executing program 3 (id=1829): socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001400)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000013c0)={0x38, 0x5, 0x8, 0x8801, 0x0, 0xd, 0x8000, 0xfffffe0000000000, 0xfa11, 0xfffffffe}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = io_uring_setup(0xd6f, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2, 0x1c8}) userfaultfd(0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 4m19.065623559s ago: executing program 3 (id=1838): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x304000000) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) tee(r2, r3, 0xfffffffffffffc01, 0x0) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 4m17.846839394s ago: executing program 3 (id=1846): gettid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000640)={@private0}, &(0x7f0000000680)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x24}}, 0x10004000) 4m17.192234749s ago: executing program 3 (id=1850): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCGIDLE64(r0, 0x4004743c, &(0x7f0000000000)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}}, @in=@remote, {@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x6}, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20}, {}, {}, 0x4, 0x4000}, 0xfffffffe}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x2d}}]}, 0x134}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r3, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0xf3}, 0xf338}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0xd}], 0x3fffe16, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@int=0x4bf3, 0x4) 4m1.964023203s ago: executing program 32 (id=1850): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCGIDLE64(r0, 0x4004743c, &(0x7f0000000000)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}}, @in=@remote, {@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x6}, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20}, {}, {}, 0x4, 0x4000}, 0xfffffffe}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x2d}}]}, 0x134}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r3, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0xf3}, 0xf338}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0xd}], 0x3fffe16, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@int=0x4bf3, 0x4) 2m47.326638309s ago: executing program 5 (id=2301): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x4c, 0x0, &(0x7f0000000000)) getrlimit(0xd, &(0x7f0000000280)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000200), 0x4) 2m45.186158634s ago: executing program 5 (id=2317): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) pivot_root(0x0, &(0x7f0000000300)='./file0/../file0\x00') 2m44.921835539s ago: executing program 5 (id=2319): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() getrlimit(0x2, &(0x7f0000000040)) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000500)=""/212, 0xd4}, {0x0}], 0x2, 0x1a, 0x20f5) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x192}}, 0x20}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x7, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x0, 0x883e, 0x18, 0x0, @wg=@cookie={0x3, 0x2000001, "67ccd0504ba1aba3e4edb91abc926ec27b5e342382d73908", "c3c5bdecc872d2401aca8ffd28aee0360c3f49515dbeb223f3ee1b5da504b948"}}}}}}}, 0x0) 2m41.506453238s ago: executing program 5 (id=2332): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 2m41.285331596s ago: executing program 5 (id=2336): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', '\x00\x00\x00', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (fail_nth: 4) 2m39.814000157s ago: executing program 5 (id=2339): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2m24.685407803s ago: executing program 33 (id=2339): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 20.699282053s ago: executing program 4 (id=2717): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae\x01\x91&6n \xf2<\xd6\xcf\x15\xd3\xd7\x1d\xa7=\xef\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa0\xbbL}\xcc\'(;\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1b\b>Z\x8e\xb1\xc3j$v\xef,\x06/\x00\x00\x00\x00\x00\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00', 0x0) unshare(0x20030400) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x800) fgetxattr(r1, &(0x7f0000000040)=@random={'security.', 'nl80211\x00'}, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xffff, 0xfffffffa}}, './file0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905013d000401ff070905021008"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) 16.870847259s ago: executing program 4 (id=2724): socket$packet(0x11, 0x2, 0x300) r0 = syz_io_uring_setup(0x496, &(0x7f0000000400)={0x0, 0x7945, 0x10, 0x8000, 0x8000e1}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_usb_connect$uac1(0x3, 0x8d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0x1d, 0x0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x405, 0x3, 0x4, 0x682, 0x3, 0xd2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0xbc51f597b50b7729, 0xa0, 0x7f, 0x95, {0x7, 0x25, 0x1, 0x0, 0x2, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x2, 0x7, 0x9}, @as_header={0x7, 0x24, 0x1, 0x0, 0x10, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0x6, 0xc2, {0x7, 0x25, 0x1, 0x4, 0x6, 0xfffd}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002e00090027bd720000000000040000000800180002ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0xb68, 0x2200) ioctl$SG_IO(r4, 0x2285, &(0x7f00000008c0)={0x53, 0x2, 0x6, 0x40, @scatter={0x0, 0x0, 0x0}, &(0x7f00000001c0)=']_\x00\x00\x00\x00', 0x0, 0x5, 0x31, 0x1, 0x0}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = getpid() tgkill(r5, r6, 0x13) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x9, 0x6000, @fd=r7, 0x100, 0x0, 0x0, 0x1c}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 14.061812296s ago: executing program 2 (id=2730): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@private=0xa010100, @in=@local, 0x4e20, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x6}, {0x3, 0x80000800, 0x9141, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1}, {{@in=@empty, 0x4, 0x33}, 0xa, @in6=@private1, 0x3507, 0x5, 0x0, 0x4, 0xfffffffe, 0x10000000, 0x1}}, 0xe8) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0xc000, 0x62, &(0x7f00000001c0)=""/98}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) 12.830253035s ago: executing program 6 (id=2731): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x3, 0x40202) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b7030000000100004870000000ffffffdc0700002000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @sched_cls=0x2e}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x20000227, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x54) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000000c0)={0x0, @motion_det}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x8, 0x0, 0x2015, 0x23b, 0x7ddd, 0x8, 0x325e1f38, 0x1}) 12.381730834s ago: executing program 2 (id=2732): setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x8a, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf253500000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4840}, 0x4040) r3 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001540), 0x202000, 0x0) fcntl$getflags(r4, 0x3) r5 = syz_open_dev$cec(0x0, 0x0, 0x80) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000000c0)={"ae42ffff", 0x4, 0x5, 0x4, 0x7, 0x803, "000000ffff0600000800", "00000004", "05030400", '\x00\b\x00', ['\x00', "6cb8ff080000000000fffd00", "f0ffffffffebffff00000010", "fdffffffff40b82dc44d00"]}) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) pwritev2(r6, &(0x7f0000000040)=[{&(0x7f0000000000)="e1", 0x1}], 0x1, 0x3, 0x7fffffff, 0x1a) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r3, 0x0, 0x9) fchdir(r7) unshare(0x6020400) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, 0x0, r8, 0x0, 0x276) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r3, 0xc080583d, &(0x7f0000000180)={0x0, 0x7f, 0x4, 0x6, 0xa26, 0xe3b7, 0x6a12, 0x10001}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r9, 0xc0105b08, &(0x7f0000000000)={0x1, 0xfffffffe, 0x7, 0x0, 0x110001}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) ioctl$TUNSETTXFILTER(r4, 0x400454d1, 0x0) 12.264654863s ago: executing program 4 (id=2733): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001e40), 0x0, 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r3) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}]}}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001540), 0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, 0x0, 0x4) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) 11.345755397s ago: executing program 6 (id=2735): syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000083e1ad40402000726b5b010203010902240001010740000904bcd1010101", @ANYRESHEX], 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2, @sliced={0x6a, [0x2, 0x0, 0x0, 0x25dc, 0x4, 0x401, 0x40, 0x9, 0xda, 0x9, 0x78a6, 0x8392, 0x5, 0xa, 0x5, 0x3, 0x3, 0x10, 0x7, 0x2, 0x1, 0xfff6, 0xa, 0x7, 0xa7, 0x6, 0x8, 0x4, 0x2, 0x8, 0x4, 0xa0, 0xfff, 0x9, 0x7, 0x2f1a, 0x9, 0xfff4, 0x8, 0x10, 0x0, 0x9, 0x5, 0x0, 0x4, 0x0, 0x0, 0x7ff], 0x8}}) 11.19284504s ago: executing program 2 (id=2736): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101840, 0x0) r1 = socket(0x2a, 0x2, 0x0) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x2) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="030338bd7000001000110a00"], 0x1c}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000940)={{}, {}, 0x0, 0x4}) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)="764498cb987acb62a6bd7b7f10542aee4e1bf8f48e191889d6d399d7ea4b779b7c609ce0afe74d93120763cc197f87f8a0cdf2e38a043d712c52848ad01afec640237a05f830e3081c25cd2bd5fd14ec5dda50d3be604178a569ba72091dc28f479e13d1431a422df18896015bd69b0ba032911b2169d2510ccf7fbc3db305ea1e6f1543aadbe561d5949a25a1dd39c0550050d6261146c4a0a6def3f1e5288358b515751f8e87a03c625b15f93bbf270bbe5f476d17429363e1f20a14f5b8aae1c1f4f54024a729c3c76d517776a8118b5612686d11890b79f9a284c338dc76815f4027cdf962d126c822af87135ea5d9ef9fe8d9f307972e4b4e85f7ef2edf552a0c5f1c2040293e6d4f7fc3540e054f25cb268e5d1d3cb5fccbe1e213f01a9a4619e1f5699db4598db985f4f6f2f884d164a507a6a4e19f453b12cb2151f24c5cad585c4f32e14c44e5e58a8289a7be2fb0ca1d19d97e3e7c903609816c1541cc0fb734740b9ad59969c391ac97a92556024010c3fec5df4279d61891c663f5bd0604c8ebbec38910d0d250b4135bbe5085ab37ca2cd4b402aacc45d4fb1950d73ade1a05b59f4c10d8f66d93976af7cb86a0988d069d71991944fe558dc5ba092629fba6d88d851be1495af1e797e64c4b5e4fc9cdc6167958a1fa89c2dbd633aeb9ce342e307e3ef88ea13ccae141eb313c52f27d77a8ea0564f5ea9eb23042d05e260ee66ec1099b3974a1a83567f29f07f382027d870da83a69842818fe814777d13f9977ca3a453d3125d2cb7720f239c66fcd9f1bdcd6ec4f5aa6688a34d03da0227867fc7dfb216599a1a26027e841085fd4e803a40d5939bfc600eb56fa4945e87c803cb9fba18a3370ba3139c09dd14dfee16d6e71530f08481409c236b2285d5611cc430e93569f8a6630e7a19008065cea150e9ba0ed4f7a537e38557ddb1bd249fa812e7fca5ac158f3a1abf83e5b7e5b080783e2133022de090b9dcabbdabbf725089b751a99602ef74c254793cef7e45d05d71efc60db0606fc90f639342aa25bb09ffa7e344918db2609d5cb14f8cfd65c32e973cac02297566150cbd992bad90400ff9fb511aa7190893e7568a2494fb413af2f2d4b8af75be7e02b9aabc545f55e1fb11295b36f11eab5895b4a13716cbf08760e9c542bb848c0332840f4673d8c5e00adff80582a1ca930a7b9a6b24a02f3109378f6cd6c860561488912565223d1ae48c41625b77c89a66224317c079addb47b4e0a014b1bb5066e02586f27f3654a0201cce66d673d58cc3ff5560755dab4a791d6c3de40fee03be8a92ffbf4252377f639822e037297b59910c58ab73701366f03240359df6d4af654f472cb148fabd948340b4bad8dba9f9b399fdfb306e0fd56ecfe51ed32519181f52dd828d20fbb99578ba7c7c06509dea5067de5cf794d9aef150524db80b445e0af539f7d0a35b7ee1df7f9ded1770453f348ff542d7bccb397ba85e44df6276430fd6da017c431d642ba37a9f861c13f9e9659a973ee6ce61dcbb8eab78bc95269fb604440f0dd3f5cf59bb2b09fe9df6ca282489e5f30c2288842b817167aaf4e847694b9c9e0e86c737a8763c61020ff8d8d55d660c3986d2f4ec840daee6bc145cc028747c62bf384e125d40d1d35461443c0f16b8c00b6aa0860d0343b735229ba73554af1feab1f485eb424eb4d3c552de4ea77e1907c78485b1335d5cac12b426b72f1a03de5a02a2d6c2c64c266c5db1dd7bfe30b6bbd740be4cb6cde4832355290472e3e8d8e5af48f3ca78f91cec5774d623ad2ad0983e293af0360d386473f91d2413c9a0e44805adbbd4d639166d0a0e93ec28be8b2d39ac99d0dee686298b55b7318d8df4d54db32542d3c4ff9cd7c1eca2e6639f36cd49bbd72df99158df38cc993f0f396cde387622584536e2b05638733a1adc075456b79eddf6c41375949d1c04c66fdab5a61652fc3fdb4a3e043c03ccf4c9e1533290c057e1f3ea0eb89d0d48222b8a913544b5b2ac9bbda9fdb727e74b4b70966c9755bc1a414f0c071c3b61d5fdbb01977e78675453a4eec4c175e84b18090e7c77b3e710d0376a9019d980c061faa7f44b1dd649edfbdb97df2eb589aa7992fc49b8bb6cc10dd1ea4a55072a915404ada21743422e6dde4670a0c7e8c6f95dd386ba383b6f23d6d87e569d520a0397ca4748d170a887eaf94f744957a7b8e76aecf2f18772112aae81d490e39756c7335033ceca26f43960b477169c6119fe65c27810565220889167556d52ef95975b340c3efc4688fdb8e7bdf9815ce16822867117824d17960bc51a52b9a8b92ec4abe6c36dec06fb326fc687ad24b4ba282c6962c309ecc68121903f607f59776f468ab9cd8c8b28e5770eea03b0c7035dca7b5568b0efbca7c1bce740f6668a94fa8e2fd44ecb350f034ec3f5f18f3c69427350bebdaf317cc3483d2ff39e457f8e77acbff63d9d76d990ac85bce5f846eb0722231a166047fa9e67039c07ca74cf9e1a0f98c0249aba55bfb7a09e675864d739dee963c27d665b62bc6ea23bac986a8f8b19bdcb44f1761e11d7bb36e526e35b85a75fa7050d2dce5c0a7e7bada7136f5f495f8d28df3890682445937df134c6e22f4008bc449d5ffc3bba1db8decb850cbdd6f6bc4e8235f59118d08781313493703fa611dca15eddc9528f13f76caa3dff571629e7fdd8ddd6e265c8957add5997775ca263ed547c826267ef6af03e526fe1aea3240803ce973ca3233664744b166bc3e58ea61e13608f0f798022b08c4b7145e51b0bc7c3585acd3223d874e3f7c46fc21b180533d0b73542bc3ea33c08fba36d70804d071146c0d63fe669a0a9f4e63a7421c2d8004e2b4d0c9db3cdd0b404277fe1e9a274326451ca7bb86b4ea4c740d61c2bbd62b225d5d0dc2b8d73d82893e35ea68ac56d1eb3508f7b6fc2845de52e8246700c7faf7202fd3d498172e78633b2b778d59d7ac5665270206d2b49d78dd66321bc38f345953476f55ffd96896d0c7616f5999d94630706f42084bf7502dbd43ff928d317c052b1dd1b6b28e58626090696b0bd7c16e8f42c4f29f5a80e78d16024ae15b5fc6434f45dc0e801297a89c59670c83a678b468072f8830608916af3642e87d72f7560cad40424aba388376af4c8a185eaa7a50d93e17d0b0f7db5607c771f6928f73660fae2f6cf8892b539e88adf51bc1f01bd18cf7cd50dbfe0bc6088b61760f9a3e63bc2ea5d495e2583af03abe5b851f664bd9d6bd5d46722e018fec75edffa5ff72673a3da8f9a121d4c9f1b7859218ae93cb544ebdc207e9a190aecad2b0d3f619d5ffb2785cb07f36604c69a893510476ff1cae2249ac64370a0024a53805218e081b5f42d4d9e13b01391581ccf136059226b0cd4cfc8d4c93146260ef29220b1ebd9a0fb20fdbbeb301df9fb2be8593cc260361344820385125e548f76483d7bdc42c4d09ee105b5c81c16fac3465444567d2c9e8976c58fa429a6f5fc87f45779b4c1983e870c1c34a609085418d0fa7a25f14d026600cd83dca8f294d5a454ba0b5508d84b8c52d23fb4d3f650cde847955abced1f37ac506a3a41ea7171aeb772a0ed117e87f903abfc8be534ca41ffb8690367618602ae7d2c0878ee41e5f38286d19c2a8b3ad630fb3754ee47bb9635bee294dde2d471e1c7a6fc5d93e4d022c57c29278fe0d9e11c8394ade966739a7f4948a318418151c3283d02f10b74193ac40e4d3a85d4f1dcc60beba0bdb7c29c1058faf0c5e5f96234385c973881b65e5b8b5a8e41e7e4a6a57a5254a50fc0f83331a0fa3b9ab210f7286569cc2458a3e8cabd5790ffe7c4b70f96a558c5a3c0ab43c0ad4ea91da15b71b8a651eadfda3914906c6f1d489cbe0ce0a88906eeb7ad7c6e8024ff5c765bca31343c236fac175608fcb17b0ff391e6b124ce5a5209ddea38702a78983c1918faae9ec048bed536b2b5a8748ad1c5986ae46a31cd7b324814d2b670dadb61eca018ce669b5bf13ad2665eb43467d3bd768223530e81f4870ca6f24a3f59f27dc5d92aa255ce5197ceb67da3c39de6b8b9765351b520756ce5881896f15206277ad9bc40d0d3cd7ecc421bfd770a252ea1c08e6749ed91f6ee56395d33d1c716030224518252262266479fd15e4283bf21894c8d7d927eca2563992e851fa3e4ebefb4903746c34b35170ef2253b46177fd56b97067d4ebf1e3df7934a4b45192887271eb9d10e396780b0d0012a706ee211d8bce7b4aa01e9699da543478f402da29452b7d9e89b2859b032f947a244137e06ac5972f099598e1f1fdf8f69da243cf1011f32a8beeffe48468f82ff6f6d3ef51bfce7385bfc3269d21b80ce4d9cc25e1f0365b9c94421176c79e33f8abd9a82f467e85e573b9ffa3b6d26fca951db3c3eb8075a30136f8931ff1340433bae10c00d12bb70df7b06e7ee1588582a683dd6029241f3e4de9bc4837d374af1ccd964b9d44b3ef4def099298f73037087b400ee1b89bc72193c6a586b36a55dbea85a1074e704053ab981a9054ee14306696f52e9cb965a064d8a4b08a441de52534f0f809f665386a850c55d6859087b4974c1da7b8be99402f960004720c9e64ef9aada2a093a2d66ba323562dcf62a938f0b333ff4803b41824bf8c1d1a4c2b2554aeb1b899553f46253e07007bdef925f40423dbdf0ea8df6d4969f007f8cf2a4d1ca76695c3e9755f7eb04b805bf19d4f635fbd8b86b5fa26ed98daee615d93cd6a0d22849791063d2d5ad70bef9cde2a08f3e6753ed1afa2eff1dadce20258e4885e192b03dd8117e182c3af1da7e698ed2496e2687ef91b9a3bdf33c9499fb5134ea66c6ab4f669ff559d753b02364c0ab1f1d95439324f0fd4cf98593dac292e2a2965374637bb45ad8fc8e8850fe28621cb5ba82ee8d1f9fcdf857a6682e9fd856b12e72ad3edc51301f2b8a933422dcff6bb86f741f5aea7c0a1996d2936253c169e212f146cb37265a22ee37c14bd0fc9040da0ec4fcc5f4846642a801218a0d65682969c691ffedbdb15962e9ac1e2650a0a456299da9f7efed197698cc8ef15bebf88dc83219bfb787a69bbc85d003edfa1d0e98707849e6c9de7bf1899037e5325600a2f9ee29bb417a689116bf4c0a8209bc09bb7519b0eeb5962765912897e5630cfa7988c931eacf3134b0f144d180f88467a46d779979f6e66b50b72e45a08059fb1277e14ab59aa39d610b0e3e87ee07c949cf701771e6b49b5d2ef24abd9f7ef04bed96aec4b1d282d9fd22b5f5dca6628f04ae14aa9f486e00d3d2ec20c16acca297f7f850857c6ac0e1dc4b8fba3730ac03ac21dbf4ff5d186e0bf44aa9089daeddfdec81cda7c0befc1043832e8d49b1f1ec7408cb38583632d501db0a5bb7da4bb7378adfa20afaed10676bb5a3a4cf3641bc0014a8727a4b7489d748f51b7705f3006b369e3863481aeafffee1fdd8893a799dc6a04686bfe94e1b50d740cde34540015d6d8734c994b82083d85cabbbcfce7e03dfb38c3248d15e766c0ffa2b8cd7a07114d679a35f19827369d181188948beed74030f375aa100285e7c42a9158d5883cbdca15c9fe6a10032c8d49026d7609ec78a3e333347b7a841daaef7303f113fc9551a8b864637c889adef699b64ceea402b18bb8fd2e3ddfe247abb3f9fff2908c7305a41f97400531470508b348cfa80cdafab48a2e6df20c72605eb0fe20f69bff8278ba147ddddf98aebc773806c903aa3518273b7f69a41a49afe6b0c69c960ba42f89", 0x1000}, {&(0x7f0000001180)="77b47a8341eedf2fe31e3419e4eda18e480060f556d46a348cb5f79a73ce94b585005e3000ca73dca009c34b1fd0de145bd24fee36d57d597ec1783402a181a25c416b267bb82b96e8f01322f0ce18a4a7a4c99697127e0ed8bc1b282e975a49009a9f21b79e11719e1657aff4b02003babeb40c010ff5a99f9e3131544ce1eb0cee48c9fef6bc485557cd931d24ca1b33ca6fe5b7851d92fe", 0x99}, {&(0x7f0000001240)="db54163b1fd5fc8b82ef4a7673ef633136bb934b30326b89b8633f01ef11c6d9d10db7835a281f244a986e594598e6e9ff289de0b658c61ab40cf2087e1d8ade9d080eea87a96a62d5ce696aab6defa723940c6de19e7218a8c3562ff6a37c60788506e59294642bfa90a54c7da448d3f1960ef864a034f9094946a5dbf23bf8d2df901499083b221316235f061296b6df1e5f1e9072df3df91da5f0e88fcbc78351b8", 0xa3}, {&(0x7f0000001300)="f1172ec38902dde2efc852b3463d2000fddf9f28b24c4597c21999ab2853f19a08e457995c06367c7463c5a227ac0171f9cf276a07f5f8d397055ef49f40e143525ba6de79f9110a9cc5120a5956f8ea239dc913cc95bba1f11916256150e6ef866bcc97c318cbc10725b9c3bbd63bc28ec9058a0098dd0d2454c9", 0x7b}], 0x4, 0x9, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000009400000000000007868000018080000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1007, &(0x7f0000001400)=""/4103, 0x0, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 10.828282375s ago: executing program 4 (id=2738): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae\x01\x91&6n \xf2<\xd6\xcf\x15\xd3\xd7\x1d\xa7=\xef\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa0\xbbL}\xcc\'(;\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1b\b>Z\x8e\xb1\xc3j$v\xef,\x06/\x00\x00\x00\x00\x00\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00', 0x0) unshare(0x20030400) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x800) fgetxattr(r1, &(0x7f0000000040)=@random={'security.', 'nl80211\x00'}, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xffff, 0xfffffffa}}, './file0\x00'}) unshare(0x400) shutdown(0xffffffffffffffff, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905013d000401ff070905021008"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) 8.547711145s ago: executing program 6 (id=2739): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x2, 0x2801003, 0x5, 0x5, 0xa, 0x1, 0x0, 0x0, 0x10, 0x4}}, 0x50) read$FUSE(r2, 0x0, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000000240)=[{0x0, 0x2, 0x800}, {0x0, 0xfffe, 0x1000}], 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000845000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000507000/0x2000)=nil, &(0x7f000000e000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fanotify_init(0x0, 0x800) r5 = fcntl$dupfd(r3, 0x406, r3) fanotify_mark(r4, 0x1, 0x4800003b, r5, 0x0) r6 = io_uring_setup(0x1632, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 8.345687867s ago: executing program 0 (id=2741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)) setuid(0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000004c0), 0x800) r3 = geteuid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000a40), 0x0, 0x4000800}}], 0x1, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)) getgroups(0x0, &(0x7f0000000580)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x2}, [{}, {}, {0x2, 0x5}, {0x2, 0x6, 0xee01}, {0x2, 0x4}, {}, {0x2, 0x2, r3}], {}, [{}, {0x8, 0x3, r4}], {0x10, 0x2}, {0x20, 0x2}}, 0x6c, 0x2) 7.654367785s ago: executing program 1 (id=2742): unshare(0x2a020400) r0 = socket(0x1, 0x6, 0x0) unshare(0x500) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271b, &(0x7f0000000440)=""/102392, &(0x7f00000000c0)=0x18ff8) 7.471293118s ago: executing program 0 (id=2743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)) setuid(0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000004c0), 0x800) r3 = geteuid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000a40), 0x0, 0x4000800}}], 0x1, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)) getgroups(0x0, &(0x7f0000000580)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x2}, [{}, {}, {0x2, 0x5}, {0x2, 0x6, 0xee01}, {0x2, 0x4}, {}, {0x2, 0x2, r3}], {}, [{}, {0x8, 0x3, r4}], {0x10, 0x2}, {0x20, 0x2}}, 0x6c, 0x2) 7.468358053s ago: executing program 4 (id=2744): socket$packet(0x11, 0x2, 0x300) r0 = syz_io_uring_setup(0x496, &(0x7f0000000400)={0x0, 0x7945, 0x10, 0x8000, 0x8000e1}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_usb_connect$uac1(0x3, 0x8d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0x1d, 0x0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x405, 0x3, 0x4, 0x682, 0x3, 0xd2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0xbc51f597b50b7729, 0xa0, 0x7f, 0x95, {0x7, 0x25, 0x1, 0x0, 0x2, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x2, 0x7, 0x9}, @as_header={0x7, 0x24, 0x1, 0x0, 0x10, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0x6, 0xc2, {0x7, 0x25, 0x1, 0x4, 0x6, 0xfffd}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002e00090027bd720000000000040000000800180002ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0xb68, 0x2200) ioctl$SG_IO(r4, 0x2285, &(0x7f00000008c0)={0x53, 0x2, 0x6, 0x40, @scatter={0x0, 0x0, 0x0}, &(0x7f00000001c0)=']_\x00\x00\x00\x00', 0x0, 0x5, 0x31, 0x1, 0x0}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) tgkill(r5, 0x0, 0x13) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x9, 0x6000, @fd=r6, 0x100, 0x0, 0x0, 0x1c}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 6.933349461s ago: executing program 1 (id=2745): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) r3 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)=0x1000000010) ioctl$BLKRRPART(r3, 0x125f, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) (fail_nth: 4) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x20d}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0x2, 0x2, 0xb, 0x8, 0x100}, 0x20) 6.854529219s ago: executing program 6 (id=2746): setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x8a, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf253500000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4840}, 0x4040) r3 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001540), 0x202000, 0x0) fcntl$getflags(r4, 0x3) r5 = syz_open_dev$cec(0x0, 0x0, 0x80) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000000c0)={"ae42ffff", 0x4, 0x5, 0x4, 0x7, 0x803, "000000ffff0600000800", "00000004", "05030400", '\x00\b\x00', ['\x00', "6cb8ff080000000000fffd00", "f0ffffffffebffff00000010", "fdffffffff40b82dc44d00"]}) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) pwritev2(r6, &(0x7f0000000040)=[{&(0x7f0000000000)="e1", 0x1}], 0x1, 0x3, 0x7fffffff, 0x1a) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r3, 0x0, 0x9) fchdir(r7) unshare(0x6020400) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, 0x0, r8, 0x0, 0x276) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r3, 0xc080583d, &(0x7f0000000180)={0x0, 0x7f, 0x4, 0x6, 0xa26, 0xe3b7, 0x6a12, 0x10001}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r9, 0xc0105b08, &(0x7f0000000000)={0x1, 0xfffffffe, 0x7, 0x0, 0x110001}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) ioctl$TUNSETTXFILTER(r4, 0x400454d1, 0x0) 5.575045554s ago: executing program 1 (id=2747): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x602, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r1, 0x1) getsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x4) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100), 0x800, &(0x7f00000002c0)=ANY=[@ANYBLOB="736d61636b6673666c6f6f723f1ae92506c1623dc1849c74e05c9cfb", @ANYRES64, @ANYRESDEC]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaac}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x900f, 0x100, 0x4, 0x162}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, 0x8, 0x1}) io_uring_enter(r6, 0x3517, 0x173d, 0x42, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r9 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCXONC(r9, 0x540a, 0x0) semget(0x1, 0x2, 0x0) 5.551352912s ago: executing program 0 (id=2748): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae\x01\x91&6n \xf2<\xd6\xcf\x15\xd3\xd7\x1d\xa7=\xef\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa0\xbbL}\xcc\'(;\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1b\b>Z\x8e\xb1\xc3j$v\xef,\x06/\x00\x00\x00\x00\x00\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00', 0x0) unshare(0x20030400) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff, 0xfffffffa}}, './file0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905013d000401ff070905021008"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) 3.349940715s ago: executing program 1 (id=2749): rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0xd, &(0x7f00000003c0)={0x18, 0x1851, 0x6}) pselect6(0x40, &(0x7f0000000000)={0x10001, 0x1, 0x5, 0x4, 0x6, 0xfffffffffffffffc, 0x7, 0x8}, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0) 3.183206696s ago: executing program 6 (id=2750): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)='p', 0x1}], 0x1) r3 = open(&(0x7f0000000080)='./file0\x00', 0xd60c2, 0x13c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4048aec9, &(0x7f0000000400)={0x1, 0xffffffffffffffff, 0x1}) ftruncate(r3, 0x200004) syz_io_uring_setup(0x4b6, &(0x7f0000000240)={0x0, 0x0, 0x8000, 0x1, 0x20e}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x8}}, 0x20) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x0, 0x401}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x800000000, {0x0, 0x0, 0x0, {0x3, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r9, &(0x7f0000000000), 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x1) unshare(0x22020400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0020000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fcdbdf253a00000008000300", @ANYRES32=r10, @ANYBLOB="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"], 0x2c0}, 0x1, 0x0, 0x0, 0xc000}, 0x800) sendfile(r1, r3, 0x0, 0x80001d00c0d1) 3.134231959s ago: executing program 1 (id=2751): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') getdents64(r0, &(0x7f00000010c0)=""/4067, 0xfe3) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000020c0)={0x0, "83455e21b50168da23541ff9157eaf39"}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000030c0)={r1, "0a0b162764b95b7d767e44ff6251d701"}) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) setresuid(0xee01, 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334d, 0x40, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000140)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) nanosleep(&(0x7f0000000580)={0x0, 0x3938700}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0xfffffffffffffffa, 0x80000) sendmmsg(r7, &(0x7f0000000180), 0x400008a, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r2, 0x627, 0xc1040000, 0x43, 0x0, 0x0) r8 = request_key(&(0x7f0000000280)='rxrpc_s\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000380)='cpuset.memory_pressure_enabled\x00', 0xfffffffffffffffc) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000240)="25476f336cf5aaca53fbe50e556481275b509636a2", 0x15, r8) mknodat$loop(r0, &(0x7f0000000180)='./file0\x00', 0xf4a47dbfaab119fd, 0x1) 2.801528547s ago: executing program 2 (id=2752): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x9, {[@fastopen={0x1e, 0x3, '^'}]}}}}}}}}, 0x0) 2.677321547s ago: executing program 2 (id=2753): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)) setuid(0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000004c0), 0x800) r3 = geteuid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000a40), 0x0, 0x4000800}}], 0x1, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)) getgroups(0x0, &(0x7f0000000580)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x2}, [{}, {}, {0x2, 0x5}, {0x2, 0x6, 0xee01}, {0x2, 0x4}, {}, {0x2, 0x2, r3}], {}, [{}, {0x8, 0x3, r4}], {0x10, 0x2}, {0x20, 0x2}}, 0x6c, 0x2) 2.025828961s ago: executing program 0 (id=2754): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() getrlimit(0x2, &(0x7f0000000040)) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x4000080) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000500)=""/212, 0xd4}, {0x0}], 0x2, 0x1a, 0x20f5) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x192}}, 0x20}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x7, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x0, 0x883e, 0x18, 0x0, @wg=@cookie={0x3, 0x2000001, "67ccd0504ba1aba3e4edb91abc926ec27b5e342382d73908", "c3c5bdecc872d2401aca8ffd28aee0360c3f49515dbeb223f3ee1b5da504b948"}}}}}}}, 0x0) 823.254083ms ago: executing program 0 (id=2755): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000000401400e27f000001"], 0x48) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000130000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000020850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000030000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085000000a600000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4300fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e040000000000000019cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2509b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f980763802788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06470635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b5af41c4bce81eda040ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) close(0x3) r6 = socket(0x1d, 0x1, 0x8) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r7 = accept$inet(r6, &(0x7f0000000480)={0x2, 0x0, @empty}, &(0x7f00000004c0)=0x10) sendto$inet(r7, &(0x7f0000000600)="3fe11bf2ff4df64ac126c6fa2cf281657cfc71b08e0ea011b3462e6e2990dc57fad47ddcd301e9b42c0dbb3e0d8d284002e9773790b55da81f37cc8e1fd1b25e11ac9e1169304de7b6f685a030c2b10a48a33a8e5d39085cbe3edfa7c4e49732668b552df365c5da6259ec134b4d891da189b7bb681d0b004869381aaa8521c0acb784bc835e2765f04aef4a5094ceb126e00d234b6b13ead0f84b70b224380850702f89db83725c50f5717e199fe908c65254af93f9f7f26419fb72ecba4ab1e2c7edcb61ab38da00623d1809afbbdace794c9c696e1e73ab5afda9902826589e2bccadfb4571cb29869c9f", 0xec, 0x4004c11, &(0x7f0000000440)={0x2, 0x4e21, @loopback}, 0x10) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000180), 0x0}, 0x20) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$FE_SET_FRONTEND(r8, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x0, @ofdm={0x5, 0x1e, 0x1a, 0xf, 0x4, 0xa, 0x3}}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000040)="2b8420571b5d301da2adbacdd27b943cfd4a7a75c2f28be7f2fde850d321fa9a5eff", &(0x7f0000000080)=""/88, &(0x7f0000000140)="b3578ffff75e00fc17550859dff108af5595dcae8de59dacd62cfdc9b3c4868cde695c401918408d6ace06a201a483df062af0c9dc9a92bc312cfb4ceb9486431e2f421caa9c349378b41868ffd4155ba2a8a4458939c1bad49c3e5e5bb421d6bc8d1eb9e9d769a1b9be617f41edb27e1928e55bed935e81dc39c6555cf98d20b8b18b93e3b8100f18f245e2e5d678627976defe22cd3b54877038bc93ac00a7a3f23477bfc7c94c66ca7b1bd39d97c84c1b", &(0x7f0000000200)="1fdf82d3a5cebf966c35bf7f4d426a829afd189b4255756a8f1423094fcf1070845adfd389fbeb9c513c4394ef1b182a208828d9f29dcce14b5d5a957042c8331a69696e5469f6633c44aec25d1b5cb1371f8ea63437e0ea2b2802f7e28534c8dc3914190c97eaa788027f95c18b726549146480eda6f680c18bbd7320c0f4653201f10c4a748d6cdc1f44cb3f035af6ee883a47724969af09b4c57c00500a381e932f1866ccc57c0d2ec94bb66365529d7968d1e7731c87966d01b6a9b6df0be3475632664fcbaca9d4598293745bdec1e87347571d8582c6b974ae8a20d1d8", 0x5, r0, 0x4}, 0x38) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000340)) 786.446856ms ago: executing program 2 (id=2756): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003) r3 = dup2(r1, r1) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) syz_open_dev$vcsu(&(0x7f0000000140), 0x8000000000000000, 0x800400) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000210000fffd00000000000000000000000003000000000000000000000000000000000000eb24905e99ec49f91650be05690deb2fe5ada31f3509c7cfcd862bfa8ffe6aae38f91c1847a51f67c054a6dba6ef678e21742dfbf731d9c6f43f59116073470e5d5457b1b8544803644d7dd0ff08d3d8faab5bb67b718667bec238b981dad01ea05c255d501519771303a8cd30d29f0000000000000002d8d4198264484ab73484d9aefc4ab99a9823c0258b6529b1c6c7396548ea678461066b3219b2435f38184a770629471fcaada76286fa5465b2abf3c1288e7af534edc244d02c19585f4f171f96ecc62249ba"], 0x28}}, 0x44044) syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x3, &(0x7f0000000100)=0x6) 785.614433ms ago: executing program 4 (id=2757): syz_open_dev$hiddev(&(0x7f0000000000), 0xd8, 0x44000) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904"], 0x0) r1 = socket(0x28, 0x1, 0x0) r2 = syz_io_uring_setup(0x4f3, &(0x7f0000000340)={0x0, 0x486e, 0x0, 0x2, 0x10000340, 0x0, r1}, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) r5 = signalfd4(r0, &(0x7f0000001080)={[0x6]}, 0x8, 0x80800) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x0, 0x0, 0x1}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)={0x1c, 0x5e, 0x1, 0x0, 0x3, "", [@nested={0x9, 0x133, 0x0, 0x1, [@generic="8ad7c8d47a"]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x20000011}, 0x0) io_uring_enter(r2, 0x47b2, 0x8010f6, 0x82, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="f78d9ca38fff48f3be52162c8f9177a822a7585adc706edb185af080cfc8699dd45f0cffffffffffff784821fbfe2c7727c81ebb446b0885e58df8aa15374e4a01746e5a000000000000000000000000fb66", 0x52}, {&(0x7f00000003c0)="a58cee6d360d4804df39af22a5513ddce2fa7c88fade6a422e1500c5ceed21fd787b10c9cd3d77b42cbf5e0025071f8819e0b4a0641c0878325957d4b22f31c4d6387f5c3f779568ae8a662da34b49eff189d64a36d9f02b636301cc09dc1678ccfdb78e3ccb37fbd07413a2d5bc8255b4f23a1ab1d3f3b1d8efb7bae1a838769aad81bcf02ef84722dd425c6458b936f604a66ffea0d25ee4f2e9cd1dd974b92348f35c7abc64805cda6f34ad82", 0xae}], 0x2}], 0x1, 0x40810) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r9, 0x80045510, &(0x7f0000000000)={0x0, 0x40000000}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000002180)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r10 = syz_io_uring_setup(0x88f, &(0x7f00000003c0)={0x0, 0xaee2, 0x800, 0x2, 0xbfdfffff}, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) syz_open_dev$dri(&(0x7f00000010c0), 0xfffffffffffffff9, 0x408201) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}}) io_uring_enter(r10, 0x47f6, 0x0, 0x0, 0x0, 0x0) 622.121368ms ago: executing program 6 (id=2758): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae\x01\x91&6n \xf2<\xd6\xcf\x15\xd3\xd7\x1d\xa7=\xef\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa0\xbbL}\xcc\'(;\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1b\b>Z\x8e\xb1\xc3j$v\xef,\x06/\x00\x00\x00\x00\x00\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00', 0x0) unshare(0x20030400) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x800) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff, 0xfffffffa}}, './file0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905013d000401ff070905021008"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) 621.728347ms ago: executing program 1 (id=2759): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008c}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x6000, 0x0) ptrace(0x10, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x99fe, 0x11, ')\x00'}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x3, 0xffffffb9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 0s ago: executing program 0 (id=2760): setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x8a, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf253500000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4840}, 0x4040) r3 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001540), 0x202000, 0x0) fcntl$getflags(r4, 0x3) r5 = syz_open_dev$cec(0x0, 0x0, 0x80) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000000c0)={"ae42ffff", 0x4, 0x5, 0x4, 0x7, 0x803, "000000ffff0600000800", "00000004", "05030400", '\x00\b\x00', ['\x00', "6cb8ff080000000000fffd00", "f0ffffffffebffff00000010", "fdffffffff40b82dc44d00"]}) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) pwritev2(r6, &(0x7f0000000040)=[{&(0x7f0000000000)="e1", 0x1}], 0x1, 0x3, 0x7fffffff, 0x1a) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r3, 0x0, 0x9) fchdir(r7) unshare(0x6020400) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, 0x0, r8, 0x0, 0x276) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r3, 0xc080583d, &(0x7f0000000180)={0x0, 0x7f, 0x4, 0x6, 0xa26, 0xe3b7, 0x6a12, 0x10001}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r9, 0xc0105b08, &(0x7f0000000000)={0x1, 0xfffffffe, 0x7, 0x0, 0x110001}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) ioctl$TUNSETTXFILTER(r4, 0x400454d1, 0x0) kernel console output (not intermixed with test programs): 0 descriptor?? [ 928.175372][ T5867] usb 3-1: selecting invalid altsetting 0 [ 928.213986][ T5880] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 928.242751][ T5880] usb 6-1: device descriptor read/8, error -71 [ 928.473942][ T5880] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 928.501780][ T5880] usb 6-1: device descriptor read/8, error -71 [ 928.604330][ T5880] usb usb6-port1: unable to enumerate USB device [ 930.293849][ T5867] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 930.927728][ T5867] usb 6-1: config 1 has an invalid interface number: 40 but max is 0 [ 930.927760][ T5867] usb 6-1: config 1 has no interface number 0 [ 930.927793][ T5867] usb 6-1: config 1 interface 40 has no altsetting 0 [ 930.936245][ T5867] usb 6-1: New USB device found, idVendor=0421, idProduct=03cd, bcdDevice=ee.46 [ 930.936280][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.936303][ T5867] usb 6-1: Product: syz [ 930.936314][ T5867] usb 6-1: Manufacturer: syz [ 930.936325][ T5867] usb 6-1: SerialNumber: syz [ 930.947894][ T5932] usb 3-1: USB disconnect, device number 50 [ 931.358097][ T5867] usb 6-1: bad CDC descriptors [ 931.433866][ T5867] usb 6-1: USB disconnect, device number 7 [ 931.721157][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.464039][ T31] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 932.633762][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 932.636405][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.636442][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.636483][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 932.636508][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.692621][ T31] usb 2-1: config 0 descriptor?? [ 932.721777][T13364] FAULT_INJECTION: forcing a failure. [ 932.721777][T13364] name failslab, interval 1, probability 0, space 0, times 0 [ 932.721818][T13364] CPU: 0 UID: 0 PID: 13364 Comm: syz.0.2222 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 932.721848][T13364] Tainted: [L]=SOFTLOCKUP [ 932.721858][T13364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 932.721872][T13364] Call Trace: [ 932.721881][T13364] [ 932.721892][T13364] dump_stack_lvl+0xe8/0x150 [ 932.721932][T13364] should_fail_ex+0x46b/0x600 [ 932.721977][T13364] should_failslab+0xa8/0x100 [ 932.722015][T13364] __kmalloc_cache_noprof+0x84/0x690 [ 932.722052][T13364] ? snd_mixer_oss_get_volume1_vol+0x178/0x500 [ 932.722084][T13364] snd_mixer_oss_get_volume1_vol+0x178/0x500 [ 932.722109][T13364] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 932.722141][T13364] ? lockdep_hardirqs_on+0x7a/0x110 [ 932.722175][T13364] snd_mixer_oss_get_volume1+0x153/0x300 [ 932.722202][T13364] ? __pfx_snd_mixer_oss_get_volume1+0x10/0x10 [ 932.722227][T13364] snd_mixer_oss_ioctl1+0x63c/0x1ae0 [ 932.722272][T13364] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 932.722312][T13364] ? smack_file_ioctl+0x2c2/0x360 [ 932.722343][T13364] ? __pfx_smack_file_ioctl+0x10/0x10 [ 932.722383][T13364] ? __fget_files+0x2a/0x420 [ 932.722411][T13364] ? __fget_files+0x3a6/0x420 [ 932.722438][T13364] ? __fget_files+0x2a/0x420 [ 932.722469][T13364] ? __pfx_snd_mixer_oss_ioctl+0x10/0x10 [ 932.722514][T13364] snd_mixer_oss_ioctl+0x48/0x60 [ 932.722551][T13364] __se_sys_ioctl+0xff/0x170 [ 932.722589][T13364] do_syscall_64+0x14d/0xf80 [ 932.722618][T13364] ? trace_irq_disable+0x3b/0x150 [ 932.722644][T13364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.722667][T13364] ? clear_bhb_loop+0x40/0x90 [ 932.722697][T13364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.722720][T13364] RIP: 0033:0x7f95d5d0c799 [ 932.722743][T13364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.722763][T13364] RSP: 002b:00007f95d3f5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 932.722787][T13364] RAX: ffffffffffffffda RBX: 00007f95d5f85fa0 RCX: 00007f95d5d0c799 [ 932.722803][T13364] RDX: 0000200000000000 RSI: 0000000080086303 RDI: 0000000000000003 [ 932.722819][T13364] RBP: 00007f95d3f5e090 R08: 0000000000000000 R09: 0000000000000000 [ 932.722833][T13364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.722847][T13364] R13: 00007f95d5f86038 R14: 00007f95d5f85fa0 R15: 00007ffd538f1958 [ 932.722885][T13364] [ 932.988741][ T31] logitech 0003:046D:C50C.0007: unknown main item tag 0x0 [ 932.988781][ T31] logitech 0003:046D:C50C.0007: unknown main item tag 0x0 [ 932.988810][ T31] logitech 0003:046D:C50C.0007: unknown main item tag 0x0 [ 932.988839][ T31] logitech 0003:046D:C50C.0007: unknown main item tag 0x0 [ 932.988867][ T31] logitech 0003:046D:C50C.0007: unknown main item tag 0x0 [ 932.988895][ T31] logitech 0003:046D:C50C.0007: unknown main item tag 0x0 [ 932.988925][ T31] logitech 0003:046D:C50C.0007: unknown main item tag 0x0 [ 932.988955][ T31] logitech 0003:046D:C50C.0007: unknown main item tag 0x0 [ 932.988985][ T31] logitech 0003:046D:C50C.0007: unknown main item tag 0x0 [ 932.989015][ T31] logitech 0003:046D:C50C.0007: unknown main item tag 0x0 [ 932.989868][ T31] logitech 0003:046D:C50C.0007: unknown global tag 0xd [ 932.989891][ T31] logitech 0003:046D:C50C.0007: item 0 2 1 13 parsing failed [ 932.990745][ T31] logitech 0003:046D:C50C.0007: parse failed [ 933.053748][ T31] logitech 0003:046D:C50C.0007: probe with driver logitech failed with error -22 [ 933.183925][ T5932] usb 2-1: USB disconnect, device number 74 [ 933.699029][T13381] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2228'. [ 934.983641][ T994] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 935.146411][ T994] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 935.146445][ T994] usb 2-1: config 0 has no interface number 0 [ 935.146493][ T994] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 935.148800][ T994] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 935.148832][ T994] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 935.148855][ T994] usb 2-1: Manufacturer: syz [ 935.148872][ T994] usb 2-1: SerialNumber: syz [ 935.418636][ T994] usb 2-1: config 0 descriptor?? [ 937.558402][ T994] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 937.588290][ T994] usb 2-1: USB disconnect, device number 75 [ 938.523154][T13439] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 938.603325][T13432] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 939.123299][ T5932] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 939.283449][ T5932] usb 6-1: Using ep0 maxpacket: 16 [ 939.285794][ T5932] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 939.285821][ T5932] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 939.285841][ T5932] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 939.311287][ T5932] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 939.311321][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.311344][ T5932] usb 6-1: Product: syz [ 939.311359][ T5932] usb 6-1: Manufacturer: syz [ 939.311376][ T5932] usb 6-1: SerialNumber: syz [ 939.811507][ T5932] usb 6-1: 0:2 : does not exist [ 941.383899][ T5932] usb 6-1: USB disconnect, device number 8 [ 941.484484][T12390] udevd[12390]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 941.555955][T13489] loop8: detected capacity change from 0 to 7 [ 941.600929][T13489] Dev loop8: unable to read RDB block 7 [ 941.600995][T13489] loop8: unable to read partition table [ 941.601235][T13489] loop8: partition table beyond EOD, truncated [ 941.601276][T13489] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 942.123126][ T5932] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 942.251184][T13511] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 942.273185][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 942.275586][ T5932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 942.278652][ T5932] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 942.278682][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.278706][ T5932] usb 2-1: Product: syz [ 942.278722][ T5932] usb 2-1: Manufacturer: syz [ 942.278739][ T5932] usb 2-1: SerialNumber: syz [ 942.333731][ T31] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 942.348086][ T5932] usb 2-1: config 0 descriptor?? [ 942.371623][ T5932] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 942.483572][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 942.486927][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 942.486962][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 942.492033][ T31] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 942.492179][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.492204][ T31] usb 6-1: Product: syz [ 942.492221][ T31] usb 6-1: Manufacturer: syz [ 942.492242][ T31] usb 6-1: SerialNumber: syz [ 942.582195][ T5932] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 942.602376][ T5932] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 942.810159][ T31] usb 6-1: 0:2 : does not exist [ 942.831051][ T31] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 943.030738][ T31] usb 6-1: USB disconnect, device number 9 [ 943.156573][T12095] udevd[12095]: setting owner of /dev/bus/usb/006/009 to uid=0, gid=0 failed: No such file or directory [ 943.278504][T12390] udevd[12390]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 943.583475][T13525] loop8: detected capacity change from 0 to 7 [ 943.601943][T13525] Dev loop8: unable to read RDB block 7 [ 943.602065][T13525] loop8: unable to read partition table [ 943.602640][T13525] loop8: partition table beyond EOD, truncated [ 943.602720][T13525] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 943.989927][ T5867] usb 2-1: USB disconnect, device number 76 [ 945.223035][ T31] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 945.372984][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 945.378004][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 160, changing to 7 [ 945.378040][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 26409, setting to 1024 [ 945.666669][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 945.666706][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.666735][ T31] usb 2-1: Product: syz [ 945.666752][ T31] usb 2-1: Manufacturer: syz [ 945.666768][ T31] usb 2-1: SerialNumber: syz [ 945.897882][T13557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2299'. [ 946.115013][ T31] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 946.116139][ T31] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 946.339930][ T31] usb 2-1: USB disconnect, device number 77 [ 946.415138][T12390] udevd[12390]: setting mode of /dev/bus/usb/002/077 to 020664 failed: No such file or directory [ 946.415325][T12390] udevd[12390]: setting owner of /dev/bus/usb/002/077 to uid=0, gid=0 failed: No such file or directory [ 946.528827][T12390] udevd[12390]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 949.272731][ T5940] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 949.433214][ T5940] usb 3-1: Using ep0 maxpacket: 8 [ 949.435313][ T5940] usb 3-1: config 0 interface 0 has no altsetting 0 [ 949.438260][ T5940] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 949.438293][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.438309][ T5940] usb 3-1: Product: syz [ 949.438320][ T5940] usb 3-1: Manufacturer: syz [ 949.438331][ T5940] usb 3-1: SerialNumber: syz [ 949.500328][ T5940] usb 3-1: config 0 descriptor?? [ 949.516941][ T5940] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 949.736563][ T5940] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 949.739654][ T5940] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 950.007697][T12446] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 950.041018][T12446] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 950.053994][T12446] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 950.077673][T12446] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 950.080459][T12446] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 950.424440][ T5932] usb 3-1: USB disconnect, device number 51 [ 951.178340][T13644] FAULT_INJECTION: forcing a failure. [ 951.178340][T13644] name failslab, interval 1, probability 0, space 0, times 0 [ 951.178380][T13644] CPU: 1 UID: 0 PID: 13644 Comm: syz.5.2336 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 951.178412][T13644] Tainted: [L]=SOFTLOCKUP [ 951.178420][T13644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 951.178434][T13644] Call Trace: [ 951.178444][T13644] [ 951.178454][T13644] dump_stack_lvl+0xe8/0x150 [ 951.178492][T13644] should_fail_ex+0x46b/0x600 [ 951.178535][T13644] should_failslab+0xa8/0x100 [ 951.178571][T13644] __kvmalloc_node_noprof+0x170/0x8e0 [ 951.178609][T13644] ? __se_sys_add_key+0x289/0x420 [ 951.178639][T13644] ? memdup_user+0x99/0xd0 [ 951.178672][T13644] __se_sys_add_key+0x289/0x420 [ 951.178703][T13644] ? __pfx___se_sys_add_key+0x10/0x10 [ 951.178743][T13644] ? __x64_sys_add_key+0x20/0xc0 [ 951.178775][T13644] do_syscall_64+0x14d/0xf80 [ 951.178806][T13644] ? trace_irq_disable+0x3b/0x150 [ 951.178832][T13644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.178856][T13644] ? clear_bhb_loop+0x40/0x90 [ 951.178885][T13644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.178908][T13644] RIP: 0033:0x7f5f1e43c799 [ 951.178930][T13644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.178949][T13644] RSP: 002b:00007f5f1c68e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 951.178973][T13644] RAX: ffffffffffffffda RBX: 00007f5f1e6b5fa0 RCX: 00007f5f1e43c799 [ 951.178990][T13644] RDX: 0000200000000100 RSI: 0000200000000180 RDI: 0000200000000140 [ 951.179007][T13644] RBP: 00007f5f1c68e090 R08: fffffffffffffffe R09: 0000000000000000 [ 951.179024][T13644] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000001 [ 951.179037][T13644] R13: 00007f5f1e6b6038 R14: 00007f5f1e6b5fa0 R15: 00007fff4582e238 [ 951.179081][T13644] [ 952.211934][T12446] Bluetooth: hci1: command tx timeout [ 952.599825][ T5802] IPVS: starting estimator thread 0... [ 952.722993][T13663] IPVS: using max 7 ests per chain, 16800 per kthread [ 952.752797][ T5932] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 952.810041][T13631] chnl_net:caif_netlink_parms(): no params data found [ 952.902532][ T5932] usb 5-1: Using ep0 maxpacket: 16 [ 952.905650][ T5932] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 952.905678][ T5932] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 952.909776][ T5932] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 952.909808][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.909830][ T5932] usb 5-1: Product: syz [ 952.909846][ T5932] usb 5-1: Manufacturer: syz [ 952.909862][ T5932] usb 5-1: SerialNumber: syz [ 953.200200][ T5932] usb 5-1: 0:2 : does not exist [ 953.216495][ T5932] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 953.337432][ T5932] usb 5-1: USB disconnect, device number 65 [ 953.494393][T12390] udevd[12390]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 953.516242][ T3562] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.063833][ T3562] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.217179][T13631] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.217315][T13631] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.217543][T13631] bridge_slave_0: entered allmulticast mode [ 954.236506][T13631] bridge_slave_0: entered promiscuous mode [ 954.272420][T12446] Bluetooth: hci1: command tx timeout [ 954.619246][ T3562] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.811420][T13631] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.811761][T13631] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.812012][T13631] bridge_slave_1: entered allmulticast mode [ 954.915414][T13631] bridge_slave_1: entered promiscuous mode [ 955.173102][ T3562] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.473871][T13631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.478579][T13631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.628404][T13631] team0: Port device team_slave_0 added [ 955.631461][T13631] team0: Port device team_slave_1 added [ 956.235410][T13631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 956.235427][T13631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.235452][T13631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.237427][T13631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.237442][T13631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.237466][T13631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.352821][T12446] Bluetooth: hci1: command tx timeout [ 956.900347][T13631] hsr_slave_0: entered promiscuous mode [ 956.901402][T13631] hsr_slave_1: entered promiscuous mode [ 956.927051][T13631] debugfs: 'hsr0' already exists in 'hsr' [ 956.927086][T13631] Cannot create hsr debugfs directory [ 957.173405][ T3562] bridge_slave_1: left allmulticast mode [ 957.173437][ T3562] bridge_slave_1: left promiscuous mode [ 957.173680][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.369693][T13695] netlink: zone id is out of range [ 957.369738][T13695] netlink: zone id is out of range [ 957.369774][T13695] netlink: zone id is out of range [ 957.369811][T13695] netlink: zone id is out of range [ 957.369846][T13695] netlink: zone id is out of range [ 957.404135][ T3562] bridge_slave_0: left allmulticast mode [ 957.404168][ T3562] bridge_slave_0: left promiscuous mode [ 957.404437][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.409407][ T170] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 958.434558][T12446] Bluetooth: hci1: command tx timeout [ 959.652245][ T994] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 959.798103][ T3562] bond0 (unregistering): (slave 73ÿ): Releasing backup interface [ 959.812867][ T994] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 959.812900][ T994] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 959.815590][ T994] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 959.815619][ T994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.815644][ T994] usb 2-1: Product: syz [ 959.815655][ T994] usb 2-1: Manufacturer: syz [ 959.815666][ T994] usb 2-1: SerialNumber: syz [ 959.821700][ T994] usb 2-1: config 0 descriptor?? [ 959.868887][ T994] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 959.943121][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 960.006549][ T3562] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 960.026526][ T3562] bond0 (unregistering): Released all slaves [ 960.232437][T13708] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 960.233852][T13704] FAULT_INJECTION: forcing a failure. [ 960.233852][T13704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 960.233884][T13704] CPU: 1 UID: 0 PID: 13704 Comm: syz.2.2349 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 960.233909][T13704] Tainted: [L]=SOFTLOCKUP [ 960.233916][T13704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 960.233928][T13704] Call Trace: [ 960.233936][T13704] [ 960.233944][T13704] dump_stack_lvl+0xe8/0x150 [ 960.233979][T13704] should_fail_ex+0x46b/0x600 [ 960.234017][T13704] _copy_to_user+0x31/0xb0 [ 960.234044][T13704] do_ip_vs_get_ctl+0x69a/0xd90 [ 960.234072][T13704] ? __pfx_do_ip_vs_get_ctl+0x10/0x10 [ 960.234114][T13704] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 960.234143][T13704] ? lockdep_hardirqs_on+0x7a/0x110 [ 960.234169][T13704] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 960.234197][T13704] ? rt_mutex_slowunlock+0x1cb/0x300 [ 960.234218][T13704] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 960.234246][T13704] ? nf_getsockopt+0x224/0x290 [ 960.234278][T13704] nf_getsockopt+0x26e/0x290 [ 960.234320][T13704] ip_getsockopt+0x19e/0x230 [ 960.234350][T13704] ? __pfx_ip_getsockopt+0x10/0x10 [ 960.234385][T13704] ? sock_common_getsockopt+0x2d/0xb0 [ 960.234407][T13704] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 960.234426][T13704] smc_getsockopt+0x1e4/0x3c0 [ 960.234451][T13704] ? __pfx_smc_getsockopt+0x10/0x10 [ 960.234477][T13704] ? __pfx_smc_getsockopt+0x10/0x10 [ 960.234501][T13704] do_sock_getsockopt+0x2d3/0x3f0 [ 960.234537][T13704] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 960.234563][T13704] ? __fget_files+0x3a6/0x420 [ 960.234591][T13704] ? __fget_files+0x2a/0x420 [ 960.234624][T13704] __x64_sys_getsockopt+0x1aa/0x250 [ 960.234656][T13704] do_syscall_64+0x14d/0xf80 [ 960.234682][T13704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.234701][T13704] ? clear_bhb_loop+0x40/0x90 [ 960.234724][T13704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.234742][T13704] RIP: 0033:0x7fcae076c799 [ 960.234760][T13704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 960.234777][T13704] RSP: 002b:00007fcade99d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 960.234797][T13704] RAX: ffffffffffffffda RBX: 00007fcae09e6090 RCX: 00007fcae076c799 [ 960.234811][T13704] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000004 [ 960.234822][T13704] RBP: 00007fcade99d090 R08: 0000200000000080 R09: 0000000000000000 [ 960.234835][T13704] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 960.234847][T13704] R13: 00007fcae09e6128 R14: 00007fcae09e6090 R15: 00007fff93411f78 [ 960.234887][T13704] [ 960.542557][ T994] gspca_sunplus: reg_r err -71 [ 960.542656][ T994] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 960.604669][ T994] usb 2-1: USB disconnect, device number 78 [ 961.052148][ T994] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 961.217309][ T994] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 961.217377][ T994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 961.218531][ T994] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 961.218565][ T994] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 961.218580][ T994] usb 3-1: Manufacturer: syz [ 961.228236][ T994] usb 3-1: config 0 descriptor?? [ 961.411622][ T994] rc_core: IR keymap rc-hauppauge not found [ 961.532338][ T994] Registered IR keymap rc-empty [ 961.854990][ T994] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 961.899673][ T994] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input29 [ 962.389190][ C0] igorplugusb 3-1:0.0: receive overflow invalid: 47 [ 963.252594][ T3562] hsr_slave_0: left promiscuous mode [ 963.292661][ T3562] hsr_slave_1: left promiscuous mode [ 963.293778][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.343493][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 963.343523][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 963.478324][ T3562] veth1_macvtap: left promiscuous mode [ 963.478451][ T3562] veth0_macvtap: left promiscuous mode [ 963.478698][ T3562] veth1_vlan: left promiscuous mode [ 964.424631][ T5940] usb 3-1: USB disconnect, device number 52 [ 966.221804][ T31] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 966.400355][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 966.411576][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 966.411803][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 966.418895][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 966.418926][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.418948][ T31] usb 3-1: Product: syz [ 966.418964][ T31] usb 3-1: Manufacturer: syz [ 966.418980][ T31] usb 3-1: SerialNumber: syz [ 966.581407][T13753] netlink: 'syz.4.2363': attribute type 4 has an invalid length. [ 966.710947][T13753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2363'. [ 966.754767][ T31] usb 3-1: 0:2 : does not exist [ 966.810496][ T31] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 967.136083][ T31] usb 3-1: USB disconnect, device number 53 [ 967.288028][T12390] udevd[12390]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 968.063881][ T994] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 968.179806][ T3562] IPVS: stop unused estimator thread 0... [ 968.208794][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 968.211809][ T994] usb 3-1: Using ep0 maxpacket: 8 [ 968.214161][ T994] usb 3-1: config 0 interface 0 has no altsetting 0 [ 968.247798][ T994] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 968.247822][ T994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.247838][ T994] usb 3-1: Product: syz [ 968.247849][ T994] usb 3-1: Manufacturer: syz [ 968.247859][ T994] usb 3-1: SerialNumber: syz [ 968.301107][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 968.311295][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 968.318661][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 968.334417][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 968.364245][ T994] usb 3-1: config 0 descriptor?? [ 968.437625][ T994] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 968.619966][ T994] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 968.638104][ T994] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 968.861655][T13631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 968.920343][T13631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 969.007032][T13631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 969.097681][T13631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 969.480703][ T994] usb 3-1: USB disconnect, device number 54 [ 970.352011][T12446] Bluetooth: hci0: command tx timeout [ 970.625174][ T37] audit: type=1326 audit(1772444135.545:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13819 comm="syz.4.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efffb30c799 code=0x7ffc0000 [ 970.625233][ T37] audit: type=1326 audit(1772444135.545:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13819 comm="syz.4.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efffb30c799 code=0x7ffc0000 [ 970.625279][ T37] audit: type=1326 audit(1772444135.545:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13819 comm="syz.4.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efffb30c799 code=0x7ffc0000 [ 970.625325][ T37] audit: type=1326 audit(1772444135.545:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13819 comm="syz.4.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efffb30c799 code=0x7ffc0000 [ 970.625373][ T37] audit: type=1326 audit(1772444135.545:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13819 comm="syz.4.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efffb30c799 code=0x7ffc0000 [ 970.626094][ T37] audit: type=1326 audit(1772444135.545:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13819 comm="syz.4.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efffb30c799 code=0x7ffc0000 [ 970.626148][ T37] audit: type=1326 audit(1772444135.545:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13819 comm="syz.4.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efffb30c799 code=0x7ffc0000 [ 970.626198][ T37] audit: type=1326 audit(1772444135.545:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13819 comm="syz.4.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efffb30c799 code=0x7ffc0000 [ 970.627267][ T37] audit: type=1326 audit(1772444135.545:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13819 comm="syz.4.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efffb30c799 code=0x7ffc0000 [ 970.627318][ T37] audit: type=1326 audit(1772444135.545:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13819 comm="syz.4.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efffb30c799 code=0x7ffc0000 [ 970.889050][T13631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.926567][T13821] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2373'. [ 970.974786][T13631] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.988261][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.015385][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.054483][T10630] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.054790][T10630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.060941][T13784] chnl_net:caif_netlink_parms(): no params data found [ 971.401937][ T31] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 971.563960][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 971.985164][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 971.985186][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 971.989496][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 971.989520][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.989536][ T31] usb 2-1: Product: syz [ 971.989546][ T31] usb 2-1: Manufacturer: syz [ 971.989558][ T31] usb 2-1: SerialNumber: syz [ 972.123630][T13784] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.123731][T13784] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.124300][T13784] bridge_slave_0: entered allmulticast mode [ 972.155264][T13784] bridge_slave_0: entered promiscuous mode [ 972.226071][T13784] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.226680][T13784] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.227575][T13784] bridge_slave_1: entered allmulticast mode [ 972.268594][ T31] usb 2-1: 0:2 : does not exist [ 972.279778][T13784] bridge_slave_1: entered promiscuous mode [ 972.307054][ T31] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 972.431487][T12446] Bluetooth: hci0: command tx timeout [ 972.451435][ T5867] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 972.474691][T13784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.484974][ T31] usb 2-1: USB disconnect, device number 79 [ 972.541630][T13842] FAULT_INJECTION: forcing a failure. [ 972.541630][T13842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 972.541664][T13842] CPU: 0 UID: 0 PID: 13842 Comm: syz.4.2380 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 972.541690][T13842] Tainted: [L]=SOFTLOCKUP [ 972.541697][T13842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 972.541708][T13842] Call Trace: [ 972.541716][T13842] [ 972.541735][T13842] dump_stack_lvl+0xe8/0x150 [ 972.541768][T13842] should_fail_ex+0x46b/0x600 [ 972.541804][T13842] _copy_to_user+0x31/0xb0 [ 972.541832][T13842] simple_read_from_buffer+0xe1/0x170 [ 972.541859][T13842] proc_fail_nth_read+0x1be/0x230 [ 972.541886][T13842] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 972.541912][T13842] ? rw_verify_area+0x2ac/0x4e0 [ 972.541940][T13842] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 972.541966][T13842] vfs_read+0x212/0xa80 [ 972.541999][T13842] ? __pfx_vfs_read+0x10/0x10 [ 972.542026][T13842] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 972.542052][T13842] ? lockdep_hardirqs_on+0x7a/0x110 [ 972.542078][T13842] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 972.542103][T13842] ? mutex_lock_nested+0x152/0x1d0 [ 972.542121][T13842] ? fdget_pos+0x252/0x320 [ 972.542151][T13842] ksys_read+0x156/0x270 [ 972.542179][T13842] ? __pfx_ksys_read+0x10/0x10 [ 972.542204][T13842] ? __pfx_cec_ioctl+0x10/0x10 [ 972.542239][T13842] do_syscall_64+0x14d/0xf80 [ 972.542263][T13842] ? trace_irq_disable+0x3b/0x150 [ 972.542284][T13842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.542303][T13842] ? clear_bhb_loop+0x40/0x90 [ 972.542325][T13842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.542344][T13842] RIP: 0033:0x7efffb2ccfce [ 972.542362][T13842] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 972.542379][T13842] RSP: 002b:00007efff955dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 972.542399][T13842] RAX: ffffffffffffffda RBX: 00007efff955e6c0 RCX: 00007efffb2ccfce [ 972.542412][T13842] RDX: 000000000000000f RSI: 00007efff955e0a0 RDI: 0000000000000004 [ 972.542430][T13842] RBP: 00007efff955e090 R08: 0000000000000000 R09: 0000000000000000 [ 972.542442][T13842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.542453][T13842] R13: 00007efffb586038 R14: 00007efffb585fa0 R15: 00007ffe73e5fef8 [ 972.542483][T13842] [ 972.608265][T13784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 972.621410][ T5867] usb 3-1: Using ep0 maxpacket: 8 [ 972.666874][ T5867] usb 3-1: config 0 interface 0 has no altsetting 0 [ 972.751692][ T5867] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 972.751725][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.751748][ T5867] usb 3-1: Product: syz [ 972.751764][ T5867] usb 3-1: Manufacturer: syz [ 972.751779][ T5867] usb 3-1: SerialNumber: syz [ 972.895051][ T5867] usb 3-1: config 0 descriptor?? [ 972.910667][ T5867] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 973.069093][T13784] team0: Port device team_slave_0 added [ 973.240639][ T5867] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 973.254034][ T5867] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 973.307839][T13784] team0: Port device team_slave_1 added [ 973.486345][T13784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.486413][T13784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.486443][T13784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.498866][T13784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.498884][T13784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.498914][T13784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.800266][T13784] hsr_slave_0: entered promiscuous mode [ 973.813113][T13784] hsr_slave_1: entered promiscuous mode [ 973.816521][T13784] debugfs: 'hsr0' already exists in 'hsr' [ 973.819906][T13784] Cannot create hsr debugfs directory [ 974.209648][ T31] usb 3-1: USB disconnect, device number 55 [ 974.495850][T13861] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 974.511359][T12446] Bluetooth: hci0: command tx timeout [ 974.853431][T13631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.385815][T13784] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 975.460048][T13784] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 975.532019][T13784] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 975.577914][T13784] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 975.777903][T13631] veth0_vlan: entered promiscuous mode [ 975.846537][T13631] veth1_vlan: entered promiscuous mode [ 976.126035][T13631] veth0_macvtap: entered promiscuous mode [ 976.188336][T13631] veth1_macvtap: entered promiscuous mode [ 976.317316][T13784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.336869][T13631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 976.598453][T12446] Bluetooth: hci0: command tx timeout [ 976.600073][T13631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 976.646436][ T7679] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.675439][T13784] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.675772][ T7679] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.702952][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.731667][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.758214][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.758304][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.838311][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.843150][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.435788][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.435812][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.586669][ T170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.586695][ T170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.841248][ T1797] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 978.850343][T13784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.993645][ T1797] usb 5-1: Using ep0 maxpacket: 32 [ 978.998185][ T1797] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 978.998214][ T1797] usb 5-1: config 0 has no interface number 0 [ 979.030175][ T1797] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 979.030208][ T1797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.030251][ T1797] usb 5-1: Product: syz [ 979.030267][ T1797] usb 5-1: Manufacturer: syz [ 979.030284][ T1797] usb 5-1: SerialNumber: syz [ 979.083891][ T1797] usb 5-1: config 0 descriptor?? [ 979.595374][ T1797] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 979.595411][ T1797] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 979.851718][ T994] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 980.001061][ T994] usb 1-1: Using ep0 maxpacket: 8 [ 980.003839][ T994] usb 1-1: config 0 interface 0 has no altsetting 0 [ 980.007004][ T994] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 980.007035][ T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.007058][ T994] usb 1-1: Product: syz [ 980.007075][ T994] usb 1-1: Manufacturer: syz [ 980.007092][ T994] usb 1-1: SerialNumber: syz [ 980.039784][ T994] usb 1-1: config 0 descriptor?? [ 980.098069][ T994] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 980.266763][ T994] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 980.269714][ T994] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 981.108460][T13784] veth0_vlan: entered promiscuous mode [ 981.142193][T13784] veth1_vlan: entered promiscuous mode [ 981.325438][T13784] veth0_macvtap: entered promiscuous mode [ 981.359201][T13784] veth1_macvtap: entered promiscuous mode [ 981.378007][ T5867] usb 1-1: USB disconnect, device number 56 [ 981.534984][T13784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 981.607865][ T1797] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 981.608248][ T1797] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 981.666236][T13784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.893798][ T1797] usb 5-1: USB disconnect, device number 66 [ 981.897002][T13921] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2396'. [ 981.949222][ T1536] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.949718][ T1536] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.950176][ T1536] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.950577][ T1536] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.344338][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.344364][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.629647][T13939] FAULT_INJECTION: forcing a failure. [ 983.629647][T13939] name failslab, interval 1, probability 0, space 0, times 0 [ 983.629689][T13939] CPU: 0 UID: 0 PID: 13939 Comm: syz.0.2400 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 983.629720][T13939] Tainted: [L]=SOFTLOCKUP [ 983.629729][T13939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 983.629743][T13939] Call Trace: [ 983.629753][T13939] [ 983.629763][T13939] dump_stack_lvl+0xe8/0x150 [ 983.629802][T13939] should_fail_ex+0x46b/0x600 [ 983.629843][T13939] should_failslab+0xa8/0x100 [ 983.629881][T13939] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 983.629916][T13939] ? __alloc_skb+0x1d0/0x7d0 [ 983.629942][T13939] ? lockdep_hardirqs_on+0x7a/0x110 [ 983.629978][T13939] __alloc_skb+0x1d0/0x7d0 [ 983.630010][T13939] netlink_sendmsg+0x5d4/0xb40 [ 983.630047][T13939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 983.630081][T13939] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 983.630118][T13939] ____sys_sendmsg+0xa4e/0xac0 [ 983.630160][T13939] ? __pfx_____sys_sendmsg+0x10/0x10 [ 983.630201][T13939] ? import_iovec+0x73/0xa0 [ 983.630233][T13939] ___sys_sendmsg+0x2a5/0x360 [ 983.630270][T13939] ? __pfx____sys_sendmsg+0x10/0x10 [ 983.630343][T13939] ? __fget_files+0x2a/0x420 [ 983.630371][T13939] ? __fget_files+0x3a6/0x420 [ 983.630411][T13939] __x64_sys_sendmsg+0x1c3/0x2a0 [ 983.630446][T13939] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 983.630490][T13939] ? __pfx_ksys_write+0x10/0x10 [ 983.630535][T13939] do_syscall_64+0x14d/0xf80 [ 983.630567][T13939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.630637][T13939] ? clear_bhb_loop+0x40/0x90 [ 983.630662][T13939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.630686][T13939] RIP: 0033:0x7f9d7585c799 [ 983.630706][T13939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 983.630725][T13939] RSP: 002b:00007f9d73a8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 983.630749][T13939] RAX: ffffffffffffffda RBX: 00007f9d75ad6090 RCX: 00007f9d7585c799 [ 983.630766][T13939] RDX: 0000000000000880 RSI: 0000200000000500 RDI: 0000000000000005 [ 983.630781][T13939] RBP: 00007f9d73a8d090 R08: 0000000000000000 R09: 0000000000000000 [ 983.630796][T13939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 983.630809][T13939] R13: 00007f9d75ad6128 R14: 00007f9d75ad6090 R15: 00007ffd9482ab08 [ 983.630844][T13939] [ 983.930865][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.930888][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.460755][ T5932] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 986.620606][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 986.623227][ T5932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 986.626517][ T5932] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 986.626547][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.626570][ T5932] usb 2-1: Product: syz [ 986.626585][ T5932] usb 2-1: Manufacturer: syz [ 986.626601][ T5932] usb 2-1: SerialNumber: syz [ 986.755456][ T5932] usb 2-1: config 0 descriptor?? [ 986.808561][ T5932] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 986.962026][T13955] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 987.004453][ T5932] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 987.007591][ T5932] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 987.082189][T13955] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 987.196051][ T5932] usb 2-1: USB disconnect, device number 80 [ 987.701329][T13969] netlink: 'syz.6.2407': attribute type 11 has an invalid length. [ 989.102265][T13986] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2412'. [ 989.411704][ T1129] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 989.538911][T13992] trusted_key: encrypted_key: master key parameter ',€:syz' is invalid [ 989.577031][T13992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2414'. [ 989.577060][T13992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2414'. [ 989.614722][T13992] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 989.704040][T13992] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 990.100575][ T31] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 990.285133][ T31] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 990.286212][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.287448][ T31] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 990.287475][ T31] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 990.287497][ T31] usb 1-1: Manufacturer: syz [ 990.367582][ T31] usb 1-1: config 0 descriptor?? [ 990.440603][ T994] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 990.501126][T14003] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 990.545281][T14003] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 990.630410][ T994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 990.630449][ T994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 990.630495][ T994] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 990.630640][ T994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.694159][ T994] usb 5-1: config 0 descriptor?? [ 990.696412][T14000] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 990.724351][ T994] uvcvideo 5-1:0.0: Found UVC 0.00 device (10c4:ea90) [ 990.724395][ T994] uvcvideo 5-1:0.0: No valid video chain found. [ 990.791131][ T31] rc_core: IR keymap rc-hauppauge not found [ 990.791150][ T31] Registered IR keymap rc-empty [ 990.792518][ T31] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 990.825135][ T31] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input30 [ 991.030361][ T994] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 991.162249][ C1] igorplugusb 1-1:0.0: receive overflow invalid: 47 [ 991.190317][ T994] usb 3-1: Using ep0 maxpacket: 8 [ 991.193120][ T994] usb 3-1: config 0 interface 0 has no altsetting 0 [ 991.196182][ T994] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 991.196213][ T994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.196234][ T994] usb 3-1: Product: syz [ 991.196251][ T994] usb 3-1: Manufacturer: syz [ 991.196268][ T994] usb 3-1: SerialNumber: syz [ 991.202981][ T994] usb 3-1: config 0 descriptor?? [ 991.267376][ T994] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 991.536860][ T994] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 991.552565][ T994] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 991.730569][ T9] usb 3-1: USB disconnect, device number 56 [ 993.090351][ T9] usb 1-1: USB disconnect, device number 57 [ 993.158104][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.266881][T14038] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2429'. [ 994.269919][T14040] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2429'. [ 994.312497][T14039] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 994.944313][ T5802] usb 5-1: USB disconnect, device number 67 [ 995.067000][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 995.231090][ T5803] Bluetooth: hci5: command 0x0406 tx timeout [ 995.713979][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 995.714009][ T9] usb 3-1: config 0 has no interface number 0 [ 995.716530][ T9] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 995.716552][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.716566][ T9] usb 3-1: Product: syz [ 995.716577][ T9] usb 3-1: Manufacturer: syz [ 995.716588][ T9] usb 3-1: SerialNumber: syz [ 995.774735][ T9] usb 3-1: config 0 descriptor?? [ 996.036513][ T9] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 996.053652][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 996.054173][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 996.054283][ T9] usb 3-1: media controller created [ 996.116724][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 996.332480][ T9] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 996.435854][ T9] usb 3-1: USB disconnect, device number 57 [ 997.939965][ T5867] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 997.973177][T14080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.973565][T14080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.119993][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 998.123965][ T5867] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 998.123995][ T5867] usb 5-1: config 0 has no interface number 0 [ 998.124042][ T5867] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 998.126832][ T5867] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 998.126862][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.126885][ T5867] usb 5-1: Product: syz [ 998.126901][ T5867] usb 5-1: Manufacturer: syz [ 998.126916][ T5867] usb 5-1: SerialNumber: syz [ 998.206350][ T5867] usb 5-1: config 0 descriptor?? [ 998.207340][T14073] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 998.241494][ T5932] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 998.393087][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 998.393111][ T5932] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 998.393130][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 998.393253][ T5932] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 998.393292][ T5932] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 998.393354][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.463031][ T5932] usb 1-1: config 0 descriptor?? [ 998.522679][T14073] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 998.669244][ T5932] hdpvr 1-1:0.0: unexpected answer of status request, len -71 [ 998.669264][ T5932] hdpvr 1-1:0.0: device init failed [ 998.669374][ T5932] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 998.720819][ T5932] usb 1-1: USB disconnect, device number 58 [ 998.943634][T14073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.944208][T14073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.971380][ T5867] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1000.971414][ T5867] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 1000.990149][ T5867] asix 5-1:0.188: probe with driver asix failed with error -71 [ 1001.099226][ T5867] usb 5-1: USB disconnect, device number 68 [ 1002.552060][T14103] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2450'. [ 1003.330280][T14109] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1003.378950][T14109] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1004.643446][T14134] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1004.643770][T14134] /dev/nullb0: Can't open blockdev [ 1004.979732][ T994] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1005.129520][ T994] usb 5-1: Using ep0 maxpacket: 32 [ 1005.132069][ T994] usb 5-1: config 2 has an invalid interface number: 45 but max is 0 [ 1005.132097][ T994] usb 5-1: config 2 has no interface number 0 [ 1005.132147][ T994] usb 5-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1005.132174][ T994] usb 5-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1005.135272][ T994] usb 5-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 1005.135301][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.135323][ T994] usb 5-1: Product: syz [ 1005.135340][ T994] usb 5-1: Manufacturer: syz [ 1005.135356][ T994] usb 5-1: SerialNumber: syz [ 1005.149564][ T5867] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1005.228930][ T994] kobil_sct 5-1:2.45: KOBIL USB smart card terminal converter detected [ 1005.249172][ T994] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1005.302726][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 1005.306727][ T5867] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1005.306754][ T5867] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.306776][ T5867] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1005.378941][ T5867] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1005.378974][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.378996][ T5867] usb 3-1: Product: syz [ 1005.379020][ T5867] usb 3-1: Manufacturer: syz [ 1005.379037][ T5867] usb 3-1: SerialNumber: syz [ 1005.452034][T14136] loop8: detected capacity change from 0 to 8 [ 1005.553625][T12095] Dev loop8: unable to read RDB block 8 [ 1005.553728][T12095] loop8: unable to read partition table [ 1005.554262][T12095] loop8: partition table beyond EOD, truncated [ 1005.645092][T14136] Dev loop8: unable to read RDB block 8 [ 1005.646903][T14136] loop8: unable to read partition table [ 1005.648942][T14136] loop8: partition table beyond EOD, truncated [ 1005.654778][T14136] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1005.702272][ T994] usb 5-1: USB disconnect, device number 69 [ 1005.805290][ T994] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1005.824217][ T994] kobil_sct 5-1:2.45: device disconnected [ 1005.844179][ T5867] usb 3-1: 0:2 : does not exist [ 1006.169545][ T9] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1006.224776][T14156] netlink: 174192 bytes leftover after parsing attributes in process `syz.0.2470'. [ 1006.300046][ T1797] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1006.333764][ T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1006.333913][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.335276][ T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1006.335366][ T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1006.335389][ T9] usb 2-1: Manufacturer: syz [ 1006.417815][ T9] usb 2-1: config 0 descriptor?? [ 1006.459568][ T1797] usb 7-1: Using ep0 maxpacket: 16 [ 1006.465263][ T1797] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1006.465298][ T1797] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.465319][ T1797] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1006.507953][ T1797] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1006.507986][ T1797] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.508019][ T1797] usb 7-1: Product: syz [ 1006.508037][ T1797] usb 7-1: Manufacturer: syz [ 1006.508054][ T1797] usb 7-1: SerialNumber: syz [ 1006.950523][ T36] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1007.230362][ T9] rc_core: IR keymap rc-hauppauge not found [ 1007.230383][ T9] Registered IR keymap rc-empty [ 1007.232261][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1007.267979][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input31 [ 1007.429492][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 1007.434930][ T36] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 160, changing to 7 [ 1007.434966][ T36] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 26409, setting to 1024 [ 1007.438454][ T36] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1007.438550][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.438574][ T36] usb 1-1: Product: syz [ 1007.438590][ T36] usb 1-1: Manufacturer: syz [ 1007.438607][ T36] usb 1-1: SerialNumber: syz [ 1007.530384][ T5867] usb 3-1: USB disconnect, device number 58 [ 1007.588052][ C0] igorplugusb 2-1:0.0: receive overflow invalid: 47 [ 1007.622422][ T1797] usb 7-1: 0:2 : does not exist [ 1007.874832][T14161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2472'. [ 1009.313684][ T31] usb 2-1: USB disconnect, device number 81 [ 1009.719910][ T1797] usb 7-1: USB disconnect, device number 2 [ 1009.775231][ T36] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1009.775711][ T36] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1009.982103][T12390] udevd[12390]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1010.019917][ T36] usb 1-1: USB disconnect, device number 59 [ 1010.367443][T12390] udevd[12390]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1011.459366][ T5867] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1011.555681][T14216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1011.555881][T14216] batadv_slave_0: entered promiscuous mode [ 1011.661561][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1011.663009][ T5867] usb 2-1: Using ep0 maxpacket: 8 [ 1011.665683][ T5867] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1011.668813][ T5867] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1011.668843][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.668865][ T5867] usb 2-1: Product: syz [ 1011.668881][ T5867] usb 2-1: Manufacturer: syz [ 1011.668897][ T5867] usb 2-1: SerialNumber: syz [ 1011.738075][ T5867] usb 2-1: config 0 descriptor?? [ 1011.769242][ T994] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1011.803984][ T5867] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 1011.817503][ T9] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1011.817564][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1011.854788][ T9] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1011.854887][ T9] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1011.854911][ T9] usb 3-1: Manufacturer: syz [ 1011.922143][ T994] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 1011.922175][ T994] usb 7-1: config 0 has no interface number 0 [ 1011.922315][ T994] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1011.926755][ T994] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1011.926875][ T994] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1011.926899][ T994] usb 7-1: Manufacturer: syz [ 1011.926917][ T994] usb 7-1: SerialNumber: syz [ 1011.995430][ T9] usb 3-1: config 0 descriptor?? [ 1012.254111][T14228] FAULT_INJECTION: forcing a failure. [ 1012.254111][T14228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1012.254217][T14228] CPU: 1 UID: 0 PID: 14228 Comm: syz.0.2492 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1012.254249][T14228] Tainted: [L]=SOFTLOCKUP [ 1012.254258][T14228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1012.254273][T14228] Call Trace: [ 1012.254282][T14228] [ 1012.254293][T14228] dump_stack_lvl+0xe8/0x150 [ 1012.254335][T14228] should_fail_ex+0x46b/0x600 [ 1012.254379][T14228] _copy_from_user+0x2d/0xb0 [ 1012.254410][T14228] snd_pcm_oss_write2+0x227/0x440 [ 1012.254442][T14228] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1012.254466][T14228] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1012.254495][T14228] ? snd_pcm_oss_write+0x20d/0xbe0 [ 1012.254525][T14228] snd_pcm_oss_write+0x6d1/0xbe0 [ 1012.254565][T14228] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1012.254595][T14228] vfs_write+0x2a3/0xba0 [ 1012.254639][T14228] ? __pfx_vfs_write+0x10/0x10 [ 1012.254673][T14228] ? __fget_files+0x2a/0x420 [ 1012.254731][T14228] ? __fget_files+0x2a/0x420 [ 1012.254757][T14228] ? __fget_files+0x3a6/0x420 [ 1012.254784][T14228] ? __fget_files+0x2a/0x420 [ 1012.254822][T14228] ksys_write+0x156/0x270 [ 1012.254859][T14228] ? __pfx_ksys_write+0x10/0x10 [ 1012.254905][T14228] do_syscall_64+0x14d/0xf80 [ 1012.254939][T14228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.254964][T14228] ? clear_bhb_loop+0x40/0x90 [ 1012.254993][T14228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.255017][T14228] RIP: 0033:0x7f9d7585c799 [ 1012.255041][T14228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1012.255062][T14228] RSP: 002b:00007f9d73a6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1012.255087][T14228] RAX: ffffffffffffffda RBX: 00007f9d75ad6180 RCX: 00007f9d7585c799 [ 1012.255105][T14228] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000006 [ 1012.255121][T14228] RBP: 00007f9d73a6c090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.255136][T14228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1012.255150][T14228] R13: 00007f9d75ad6218 R14: 00007f9d75ad6180 R15: 00007ffd9482ab08 [ 1012.255187][T14228] [ 1012.765062][ T994] usb 7-1: config 0 descriptor?? [ 1012.800547][ T5867] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 1012.806052][ T5867] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1012.949119][ T9] rc_core: IR keymap rc-hauppauge not found [ 1012.949143][ T9] Registered IR keymap rc-empty [ 1012.955970][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1013.015050][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input32 [ 1013.095342][ T5867] usb 2-1: USB disconnect, device number 82 [ 1013.356581][ C0] igorplugusb 3-1:0.0: receive overflow invalid: 47 [ 1014.773075][ T36] usb 3-1: USB disconnect, device number 59 [ 1014.839246][ T994] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1014.883867][ T994] usb 7-1: USB disconnect, device number 3 [ 1015.059055][ T5802] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1015.138769][T14263] can: request_module (can-proto-4) failed. [ 1015.212695][ T5802] usb 5-1: Using ep0 maxpacket: 8 [ 1015.216950][ T5802] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1015.222737][ T5802] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1015.222769][ T5802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.222819][ T5802] usb 5-1: Product: syz [ 1015.222860][ T5802] usb 5-1: Manufacturer: syz [ 1015.222902][ T5802] usb 5-1: SerialNumber: syz [ 1015.286547][ T5802] usb 5-1: config 0 descriptor?? [ 1015.318631][ T5802] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 1015.536639][ T5802] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 1015.541685][ T5802] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1016.286628][ T36] usb 5-1: USB disconnect, device number 70 [ 1016.493940][T14291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.494162][T14291] batadv_slave_0: entered promiscuous mode [ 1016.929523][ T5940] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1017.554150][ T5940] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1017.554211][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.555686][ T5940] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1017.555714][ T5940] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1017.555737][ T5940] usb 3-1: Manufacturer: syz [ 1017.624672][ T5940] usb 3-1: config 0 descriptor?? [ 1017.744400][T14296] netlink: 174192 bytes leftover after parsing attributes in process `syz.4.2518'. [ 1017.828910][ T5940] rc_core: IR keymap rc-hauppauge not found [ 1017.828932][ T5940] Registered IR keymap rc-empty [ 1017.830926][ T5940] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1017.834331][ T5940] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input34 [ 1018.178870][ T5880] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1018.285151][ C1] igorplugusb 3-1:0.0: receive overflow invalid: 47 [ 1018.328830][ T5880] usb 7-1: Using ep0 maxpacket: 16 [ 1018.331468][ T5880] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.331496][ T5880] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1018.334532][ T5880] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1018.334564][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.334587][ T5880] usb 7-1: Product: syz [ 1018.334604][ T5880] usb 7-1: Manufacturer: syz [ 1018.334620][ T5880] usb 7-1: SerialNumber: syz [ 1018.590812][ T5880] usb 7-1: 0:2 : does not exist [ 1018.620840][ T5880] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1019.370021][ T5880] usb 7-1: USB disconnect, device number 4 [ 1019.708732][T12390] udevd[12390]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1019.968908][ T5880] usb 3-1: USB disconnect, device number 60 [ 1020.943007][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1021.192028][T14337] netlink: 174192 bytes leftover after parsing attributes in process `syz.1.2533'. [ 1021.762883][ T5802] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1023.032165][ T5802] usb 2-1: Using ep0 maxpacket: 8 [ 1023.456915][ T5802] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.456974][ T5802] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1023.456998][ T5802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.482224][ T5802] usb 2-1: config 0 descriptor?? [ 1023.522218][ T5802] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1023.978550][ T5880] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1024.088825][ T1797] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1024.142444][ T5880] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1024.142507][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.144147][ T5880] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1024.144177][ T5880] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1024.144192][ T5880] usb 5-1: Manufacturer: syz [ 1024.196672][ T5880] usb 5-1: config 0 descriptor?? [ 1024.288770][ T1797] usb 3-1: Using ep0 maxpacket: 16 [ 1024.292739][ T1797] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.292766][ T1797] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1024.323577][ T5880] rc_core: IR keymap rc-hauppauge not found [ 1024.323598][ T5880] Registered IR keymap rc-empty [ 1024.328121][ T1797] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1024.328214][ T1797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.328243][ T1797] usb 3-1: Product: syz [ 1024.328259][ T1797] usb 3-1: Manufacturer: syz [ 1024.328275][ T1797] usb 3-1: SerialNumber: syz [ 1024.373528][ T5880] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1024.403211][ T5880] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input35 [ 1025.357249][ T5802] gspca_vc032x: reg_w err -71 [ 1025.357442][ T5802] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 1025.416133][ T5802] usb 2-1: USB disconnect, device number 83 [ 1025.466952][ T1797] usb 3-1: 0:2 : does not exist [ 1025.499361][ T1797] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1025.611444][T14373] netlink: 174192 bytes leftover after parsing attributes in process `syz.6.2545'. [ 1025.640790][ C0] igorplugusb 5-1:0.0: receive overflow invalid: 47 [ 1025.754050][ T1797] usb 3-1: USB disconnect, device number 61 [ 1025.972338][T12016] udevd[12016]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1026.189149][ T1797] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1029.078743][ T1797] usb 7-1: Using ep0 maxpacket: 8 [ 1029.571510][ T36] usb 5-1: USB disconnect, device number 71 [ 1029.807605][ T1797] usb 7-1: device descriptor read/all, error -71 [ 1032.228191][ T5880] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1032.329203][T14403] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1032.413557][T14408] netlink: 174192 bytes leftover after parsing attributes in process `syz.2.2556'. [ 1032.770554][T14403] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1032.790288][ T5880] usb 7-1: Using ep0 maxpacket: 8 [ 1032.807181][ T5880] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1032.812944][ T5880] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1032.812976][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.813005][ T5880] usb 7-1: Product: syz [ 1032.813017][ T5880] usb 7-1: Manufacturer: syz [ 1032.813028][ T5880] usb 7-1: SerialNumber: syz [ 1032.857648][ T5880] usb 7-1: config 0 descriptor?? [ 1032.883964][ T5880] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found [ 1033.085762][ T5880] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected [ 1033.111890][ T5880] snd_usb_toneport 7-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1033.168346][ T5802] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1033.318438][ T5802] usb 1-1: Using ep0 maxpacket: 8 [ 1033.320960][ T5802] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1033.326509][ T5802] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1033.326628][ T5802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.326738][ T5802] usb 1-1: Product: syz [ 1033.326755][ T5802] usb 1-1: Manufacturer: syz [ 1033.330767][ T5802] usb 1-1: SerialNumber: syz [ 1033.412885][ T5802] usb 1-1: config 0 descriptor?? [ 1033.436061][ T5802] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 1033.742229][ T5802] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 1033.744246][ T5802] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1033.848904][ T5802] usb 7-1: USB disconnect, device number 7 [ 1034.868384][ T5867] usb 1-1: USB disconnect, device number 60 [ 1038.282349][T14452] netlink: 174192 bytes leftover after parsing attributes in process `syz.2.2569'. [ 1038.954092][T14466] comedi comedi0: Minor 2 could not be opened [ 1039.790797][T14469] binder: 14456:14469 ioctl d000943e 200000116cc0 returned -22 [ 1040.508590][ T36] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1040.610791][ T31] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1040.658493][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 1040.680576][ T36] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1040.688765][ T36] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1040.688852][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.688916][ T36] usb 5-1: Product: syz [ 1040.688951][ T36] usb 5-1: Manufacturer: syz [ 1040.688993][ T36] usb 5-1: SerialNumber: syz [ 1040.751854][ T36] usb 5-1: config 0 descriptor?? [ 1040.769244][ T31] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 1040.769267][ T31] usb 3-1: config 0 has no interface number 0 [ 1040.769300][ T31] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1040.772919][ T31] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1040.772969][ T31] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1040.772991][ T31] usb 3-1: Manufacturer: syz [ 1040.773007][ T31] usb 3-1: SerialNumber: syz [ 1040.844716][ T36] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 1040.894005][ T31] usb 3-1: config 0 descriptor?? [ 1040.991295][ T36] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 1041.013457][ T36] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1041.307555][ T5880] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1041.467546][ T5880] usb 1-1: Using ep0 maxpacket: 32 [ 1041.472469][ T5880] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 160, changing to 7 [ 1041.472507][ T5880] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 26409, setting to 1024 [ 1041.477082][ T5880] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1041.477116][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.477138][ T5880] usb 1-1: Product: syz [ 1041.477155][ T5880] usb 1-1: Manufacturer: syz [ 1041.477171][ T5880] usb 1-1: SerialNumber: syz [ 1041.677493][ T5867] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1041.698490][ T994] usb 5-1: USB disconnect, device number 72 [ 1041.707191][T14489] netlink: 174192 bytes leftover after parsing attributes in process `syz.1.2583'. [ 1041.762697][T14477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2579'. [ 1041.827431][ T5867] usb 7-1: Using ep0 maxpacket: 32 [ 1041.843604][ T5867] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 160, changing to 7 [ 1041.843699][ T5867] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 26409, setting to 1024 [ 1041.875155][ T5867] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1041.875418][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.875442][ T5867] usb 7-1: Product: syz [ 1041.875458][ T5867] usb 7-1: Manufacturer: syz [ 1041.875474][ T5867] usb 7-1: SerialNumber: syz [ 1043.561333][ T31] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1043.681418][ T31] usb 3-1: USB disconnect, device number 62 [ 1043.811401][T14483] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2581'. [ 1044.179139][ T5880] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1044.213157][ T5880] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1044.473419][ T5880] usb 1-1: USB disconnect, device number 61 [ 1044.576494][ T5867] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1044.576978][ T5867] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1044.668747][T12390] udevd[12390]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1044.728969][ T5867] usb 7-1: USB disconnect, device number 8 [ 1045.556265][T12390] udevd[12390]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1045.757282][ T5867] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1045.917192][ T5867] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1045.918819][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.922771][ T5867] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1045.922800][ T5867] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1045.922822][ T5867] usb 1-1: Manufacturer: syz [ 1046.772335][ T5867] usb 1-1: config 0 descriptor?? [ 1047.388443][ T5867] rc_core: IR keymap rc-hauppauge not found [ 1047.388461][ T5867] Registered IR keymap rc-empty [ 1047.392974][ T5867] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1047.395422][ T5867] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input37 [ 1047.655891][T14538] netlink: 206628 bytes leftover after parsing attributes in process `syz.6.2595'. [ 1047.830137][ C0] igorplugusb 1-1:0.0: receive overflow invalid: 47 [ 1047.917189][ T5802] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 1048.676873][ T5802] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 1048.676904][ T5802] usb 2-1: config 0 has no interface number 0 [ 1048.678502][ T5802] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1048.697820][ T5802] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1048.697852][ T5802] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1048.697875][ T5802] usb 2-1: Manufacturer: syz [ 1048.697890][ T5802] usb 2-1: SerialNumber: syz [ 1048.726906][ T5802] usb 2-1: config 0 descriptor?? [ 1050.141356][ T5940] usb 1-1: USB disconnect, device number 62 [ 1050.467184][ T5867] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1050.630062][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 1050.633092][ T5867] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1050.633119][ T5867] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.633141][ T5867] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1050.665198][ T5867] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1050.665240][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.665263][ T5867] usb 5-1: Product: syz [ 1050.665280][ T5867] usb 5-1: Manufacturer: syz [ 1050.665296][ T5867] usb 5-1: SerialNumber: syz [ 1051.303938][T14558] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1051.346301][ T5867] usb 5-1: 0:2 : does not exist [ 1051.356735][ T5867] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1051.997880][ T5802] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1052.104472][ T5867] usb 5-1: USB disconnect, device number 73 [ 1052.131717][ T5802] usb 2-1: USB disconnect, device number 84 [ 1052.231061][T12016] udevd[12016]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1052.521320][T14570] netlink: 206628 bytes leftover after parsing attributes in process `syz.2.2607'. [ 1053.077449][ T994] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1053.227610][ T994] usb 3-1: Using ep0 maxpacket: 16 [ 1053.256894][ T994] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.256923][ T994] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1053.261142][ T994] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1053.261175][ T994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.261196][ T994] usb 3-1: Product: syz [ 1053.261212][ T994] usb 3-1: Manufacturer: syz [ 1053.261228][ T994] usb 3-1: SerialNumber: syz [ 1054.022805][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1054.277981][ T994] usb 3-1: 0:2 : does not exist [ 1054.291939][ T994] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1054.401716][ T994] usb 3-1: USB disconnect, device number 63 [ 1054.522706][T12390] udevd[12390]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1054.596450][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.713975][T14590] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1055.062128][T14603] FAULT_INJECTION: forcing a failure. [ 1055.062128][T14603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1055.062158][T14603] CPU: 1 UID: 0 PID: 14603 Comm: syz.1.2618 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1055.062180][T14603] Tainted: [L]=SOFTLOCKUP [ 1055.062187][T14603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1055.062198][T14603] Call Trace: [ 1055.062204][T14603] [ 1055.062223][T14603] dump_stack_lvl+0xe8/0x150 [ 1055.062251][T14603] should_fail_ex+0x46b/0x600 [ 1055.062283][T14603] _copy_to_user+0x31/0xb0 [ 1055.062306][T14603] simple_read_from_buffer+0xe1/0x170 [ 1055.062330][T14603] proc_fail_nth_read+0x1be/0x230 [ 1055.062352][T14603] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1055.062374][T14603] ? rw_verify_area+0x2ac/0x4e0 [ 1055.062397][T14603] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1055.062418][T14603] vfs_read+0x212/0xa80 [ 1055.062446][T14603] ? __pfx_vfs_read+0x10/0x10 [ 1055.062473][T14603] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1055.062497][T14603] ? lockdep_hardirqs_on+0x7a/0x110 [ 1055.062520][T14603] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1055.062543][T14603] ? mutex_lock_nested+0x152/0x1d0 [ 1055.062560][T14603] ? fdget_pos+0x252/0x320 [ 1055.062587][T14603] ksys_read+0x156/0x270 [ 1055.062613][T14603] ? __pfx_ksys_read+0x10/0x10 [ 1055.062636][T14603] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1055.062660][T14603] do_syscall_64+0x14d/0xf80 [ 1055.062682][T14603] ? trace_irq_disable+0x3b/0x150 [ 1055.062701][T14603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.062718][T14603] ? clear_bhb_loop+0x40/0x90 [ 1055.062738][T14603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.062755][T14603] RIP: 0033:0x7fcdc13ccfce [ 1055.062770][T14603] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1055.062785][T14603] RSP: 002b:00007fcdbf65dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1055.062803][T14603] RAX: ffffffffffffffda RBX: 00007fcdbf65e6c0 RCX: 00007fcdc13ccfce [ 1055.062816][T14603] RDX: 000000000000000f RSI: 00007fcdbf65e0a0 RDI: 0000000000000004 [ 1055.062827][T14603] RBP: 00007fcdbf65e090 R08: 0000000000000000 R09: 0000000000000000 [ 1055.062837][T14603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1055.062847][T14603] R13: 00007fcdc1686038 R14: 00007fcdc1685fa0 R15: 00007ffc130b01c8 [ 1055.062873][T14603] [ 1055.066868][ T994] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1055.216688][ T994] usb 5-1: Using ep0 maxpacket: 16 [ 1055.246672][ T994] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.246700][ T994] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1055.302355][ T5802] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 1055.303382][ T994] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1055.303412][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.303434][ T994] usb 5-1: Product: syz [ 1055.303451][ T994] usb 5-1: Manufacturer: syz [ 1055.303467][ T994] usb 5-1: SerialNumber: syz [ 1055.491741][ T5802] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 1055.491774][ T5802] usb 1-1: config 0 has no interface number 0 [ 1055.491822][ T5802] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1055.494582][ T5802] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1055.494614][ T5802] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1055.494638][ T5802] usb 1-1: Manufacturer: syz [ 1055.494654][ T5802] usb 1-1: SerialNumber: syz [ 1055.541735][ T5802] usb 1-1: config 0 descriptor?? [ 1055.576779][ T1797] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1055.597301][T14611] netlink: 206628 bytes leftover after parsing attributes in process `syz.1.2620'. [ 1055.643159][ T994] usb 5-1: 0:2 : does not exist [ 1055.658331][ T994] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1055.728450][ T1797] usb 3-1: Using ep0 maxpacket: 16 [ 1055.735609][ T1797] usb 3-1: config index 0 descriptor too short (expected 37359, got 202) [ 1055.735640][ T1797] usb 3-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 1055.735664][ T1797] usb 3-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.735743][ T1797] usb 3-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 1055.792587][ T994] usb 5-1: USB disconnect, device number 74 [ 1055.824748][ T1797] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1055.824843][ T1797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.824867][ T1797] usb 3-1: Product: syz [ 1055.824884][ T1797] usb 3-1: Manufacturer: syz [ 1055.824900][ T1797] usb 3-1: SerialNumber: syz [ 1055.979346][T12390] udevd[12390]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1056.279230][ T1797] usb 3-1: 0:2 : does not exist [ 1056.332244][ T1797] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1056.591903][ T1797] usb 3-1: USB disconnect, device number 64 [ 1056.736033][T12390] udevd[12390]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1056.796727][ T5940] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1056.951242][ T5940] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.951274][ T5940] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1056.951376][ T5940] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1056.951403][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.023954][ T5940] usb 7-1: config 0 descriptor?? [ 1057.273703][T14625] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2623'. [ 1057.273756][T14625] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1057.387190][ T5940] usb 7-1: USB disconnect, device number 9 [ 1058.146099][ T5802] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1058.174643][ T5802] usb 1-1: USB disconnect, device number 63 [ 1058.658761][T14648] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2632'. [ 1058.659954][T14649] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1059.208653][T14659] program syz.6.2636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1059.387704][T14657] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1059.423466][T14657] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1060.161066][ T994] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 1060.269369][T14682] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2643'. [ 1060.317167][ T994] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 1060.318403][ T994] usb 5-1: config 0 has no interface number 0 [ 1060.320114][ T994] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1061.586153][ T994] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1061.775782][ T994] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1061.778622][ T994] usb 5-1: Manufacturer: syz [ 1061.778931][ T994] usb 5-1: SerialNumber: syz [ 1062.006473][ T994] usb 5-1: config 0 descriptor?? [ 1062.347425][T14695] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1063.830123][T14710] FAULT_INJECTION: forcing a failure. [ 1063.830123][T14710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1063.830189][T14710] CPU: 1 UID: 0 PID: 14710 Comm: syz.1.2652 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1063.830220][T14710] Tainted: [L]=SOFTLOCKUP [ 1063.830229][T14710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1063.830244][T14710] Call Trace: [ 1063.830253][T14710] [ 1063.830264][T14710] dump_stack_lvl+0xe8/0x150 [ 1063.830305][T14710] should_fail_ex+0x46b/0x600 [ 1063.830351][T14710] _copy_from_user+0x2d/0xb0 [ 1063.830382][T14710] ___sys_sendmsg+0x1c6/0x360 [ 1063.830421][T14710] ? __pfx____sys_sendmsg+0x10/0x10 [ 1063.830460][T14710] ? lockdep_hardirqs_on+0x7a/0x110 [ 1063.830536][T14710] __sys_sendmmsg+0x282/0x4e0 [ 1063.830574][T14710] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1063.830616][T14710] ? lockdep_hardirqs_on+0x7a/0x110 [ 1063.830673][T14710] ? rcu_is_watching+0x15/0xb0 [ 1063.830705][T14710] __x64_sys_sendmmsg+0xa0/0xc0 [ 1063.830740][T14710] do_syscall_64+0x14d/0xf80 [ 1063.830771][T14710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.830795][T14710] ? clear_bhb_loop+0x40/0x90 [ 1063.830823][T14710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.830847][T14710] RIP: 0033:0x7fcdc140c799 [ 1063.830869][T14710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1063.830890][T14710] RSP: 002b:00007fcdbf61c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1063.830915][T14710] RAX: ffffffffffffffda RBX: 00007fcdc1686180 RCX: 00007fcdc140c799 [ 1063.830933][T14710] RDX: 17fd147c801ae9af RSI: 0000200000000ac0 RDI: 0000000000000005 [ 1063.830949][T14710] RBP: 00007fcdbf61c090 R08: 0000000000000000 R09: 0000000000000000 [ 1063.830964][T14710] R10: 000000000000ff14 R11: 0000000000000246 R12: 0000000000000001 [ 1063.830979][T14710] R13: 00007fcdc1686218 R14: 00007fcdc1686180 R15: 00007ffc130b01c8 [ 1063.831015][T14710] [ 1064.968806][ T994] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1065.227833][ T994] usb 5-1: USB disconnect, device number 75 [ 1065.828310][T14689] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1065.996126][T14689] usb 7-1: Using ep0 maxpacket: 16 [ 1065.998860][T14689] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.998889][T14689] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1066.003770][T14689] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1066.003802][T14689] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.003826][T14689] usb 7-1: Product: syz [ 1066.003843][T14689] usb 7-1: Manufacturer: syz [ 1066.003858][T14689] usb 7-1: SerialNumber: syz [ 1066.307080][T14689] usb 7-1: 0:2 : does not exist [ 1066.322200][T14721] netlink: 'syz.2.2656': attribute type 1 has an invalid length. [ 1066.322240][T14721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2656'. [ 1066.359051][T14689] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1066.471354][T14689] usb 7-1: USB disconnect, device number 10 [ 1066.577802][T12390] udevd[12390]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1067.846634][T14729] 9pnet_fd: Insufficient options for proto=fd [ 1068.107421][T14740] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1068.836397][ T5802] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1069.026625][ T5802] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 1069.026689][ T5802] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1069.026716][ T5802] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1069.041589][ T5802] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=20.0b [ 1069.041701][ T5802] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1069.041775][ T5802] usb 2-1: Product: syz [ 1069.041810][ T5802] usb 2-1: Manufacturer: syz [ 1069.041851][ T5802] usb 2-1: SerialNumber: syz [ 1069.055975][ T994] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 1069.101564][ T5802] usb 2-1: config 0 descriptor?? [ 1069.135156][ T5802] hub 2-1:0.0: bad descriptor, ignoring hub [ 1069.135190][ T5802] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1069.164670][ T5802] usb 2-1: selecting invalid altsetting 0 [ 1069.233515][ T994] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 1069.233545][ T994] usb 3-1: config 0 has no interface number 0 [ 1069.233592][ T994] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1069.262651][ T994] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1069.262683][ T994] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1069.262706][ T994] usb 3-1: Manufacturer: syz [ 1069.262721][ T994] usb 3-1: SerialNumber: syz [ 1069.298410][ T994] usb 3-1: config 0 descriptor?? [ 1069.459746][ T5802] usb 2-1: USB disconnect, device number 85 [ 1069.996336][ T5802] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1070.166297][ T31] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1070.538508][ T5802] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 1070.538571][ T5802] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1070.538597][ T5802] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1070.605324][ T5802] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=20.0b [ 1070.605358][ T5802] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1070.605381][ T5802] usb 2-1: Product: syz [ 1070.605398][ T5802] usb 2-1: Manufacturer: syz [ 1070.605414][ T5802] usb 2-1: SerialNumber: syz [ 1070.625044][T14766] QAT: failed to copy from user. [ 1070.668360][ T5802] usb 2-1: config 0 descriptor?? [ 1070.698588][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 1070.723184][ T31] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.723213][ T31] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1070.763756][ T31] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1070.763790][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.763814][ T31] usb 7-1: Product: syz [ 1070.763831][ T31] usb 7-1: Manufacturer: syz [ 1070.763847][ T31] usb 7-1: SerialNumber: syz [ 1070.786246][ T5802] hub 2-1:0.0: bad descriptor, ignoring hub [ 1070.786288][ T5802] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1070.824792][ T5802] usb 2-1: selecting invalid altsetting 0 [ 1071.103311][ T31] usb 7-1: 0:2 : does not exist [ 1071.120442][ T5802] usb 2-1: USB disconnect, device number 86 [ 1071.147294][ T31] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1072.406281][ T31] usb 7-1: USB disconnect, device number 11 [ 1072.429300][ T994] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1072.786387][ T994] usb 3-1: USB disconnect, device number 65 [ 1073.209437][T12390] udevd[12390]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1073.832408][ T37] kauditd_printk_skb: 83 callbacks suppressed [ 1073.832424][ T37] audit: type=1326 audit(1772444238.761:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14795 comm="syz.2.2679" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcae076c799 code=0x0 [ 1073.912185][T14796] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2680'. [ 1075.895939][ T5907] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1075.999764][T14815] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2686'. [ 1076.015595][ T5880] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1076.055290][ T5907] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1076.055324][ T5907] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.104632][ T5907] usb 7-1: config 0 descriptor?? [ 1076.187945][ T5880] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 1076.187978][ T5880] usb 5-1: config 0 has no interface number 0 [ 1076.188044][ T5880] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1076.192756][ T5880] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1076.192788][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1076.192811][ T5880] usb 5-1: Manufacturer: syz [ 1076.192827][ T5880] usb 5-1: SerialNumber: syz [ 1076.440594][ T5880] usb 5-1: config 0 descriptor?? [ 1076.706045][ T5802] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1076.861736][ T5802] usb 2-1: Using ep0 maxpacket: 8 [ 1076.875921][ T5802] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.876042][ T5802] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1076.876070][ T5802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.938215][ T5802] usb 2-1: config 0 descriptor?? [ 1076.962661][ T5907] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1076.963170][ T5907] [drm:udl_init] *ERROR* Selecting channel failed [ 1077.046687][ T5802] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -22 [ 1077.264061][ T5907] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1077.264091][ T5907] [drm] Initialized udl on minor 2 [ 1079.024520][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 1079.333942][ T5907] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1079.373177][ T5907] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1079.444753][ T5907] usb 7-1: USB disconnect, device number 12 [ 1080.023781][ T1797] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1080.047949][T14689] usb 2-1: USB disconnect, device number 87 [ 1080.052074][ T5880] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1080.085638][ T5880] usb 5-1: USB disconnect, device number 76 [ 1083.793494][T14858] FAULT_INJECTION: forcing a failure. [ 1083.793494][T14858] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.793524][T14858] CPU: 0 UID: 0 PID: 14858 Comm: syz.0.2699 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1083.793546][T14858] Tainted: [L]=SOFTLOCKUP [ 1083.793552][T14858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1083.793563][T14858] Call Trace: [ 1083.793569][T14858] [ 1083.793576][T14858] dump_stack_lvl+0xe8/0x150 [ 1083.793605][T14858] should_fail_ex+0x46b/0x600 [ 1083.793637][T14858] should_failslab+0xa8/0x100 [ 1083.793665][T14858] kmem_cache_alloc_noprof+0x87/0x680 [ 1083.793690][T14858] ? alloc_empty_file+0x55/0x1d0 [ 1083.793708][T14858] ? __lock_acquire+0x6b5/0x2cf0 [ 1083.793727][T14858] alloc_empty_file+0x55/0x1d0 [ 1083.793746][T14858] path_openat+0x11b/0x38a0 [ 1083.793775][T14858] ? unwind_next_frame+0xa5/0x23c0 [ 1083.793808][T14858] ? __pfx_path_openat+0x10/0x10 [ 1083.793832][T14858] ? is_bpf_text_address+0x292/0x2b0 [ 1083.793855][T14858] ? is_bpf_text_address+0x26/0x2b0 [ 1083.793879][T14858] ? kernel_text_address+0xa5/0xe0 [ 1083.793900][T14858] ? __kernel_text_address+0xd/0x30 [ 1083.793918][T14858] ? unwind_get_return_address+0x4d/0x90 [ 1083.793934][T14858] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1083.793957][T14858] ? arch_stack_walk+0xfb/0x150 [ 1083.793981][T14858] do_file_open+0x23e/0x4a0 [ 1083.794005][T14858] ? __pfx_stack_trace_save+0x10/0x10 [ 1083.794029][T14858] ? __pfx_do_file_open+0x10/0x10 [ 1083.794074][T14858] ? do_open_execat+0xad/0x590 [ 1083.794106][T14858] do_open_execat+0x12b/0x590 [ 1083.794129][T14858] ? __pfx_do_open_execat+0x10/0x10 [ 1083.794161][T14858] alloc_bprm+0x28/0x5c0 [ 1083.794187][T14858] do_execveat_common+0x175/0x690 [ 1083.794215][T14858] ? do_getname+0x151/0x250 [ 1083.794233][T14858] __x64_sys_execveat+0xc7/0xf0 [ 1083.794259][T14858] do_syscall_64+0x14d/0xf80 [ 1083.794282][T14858] ? trace_irq_disable+0x3b/0x150 [ 1083.794300][T14858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.794317][T14858] ? clear_bhb_loop+0x40/0x90 [ 1083.794339][T14858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.794355][T14858] RIP: 0033:0x7f9d7585c799 [ 1083.794370][T14858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.794385][T14858] RSP: 002b:00007f9d73aae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1083.794402][T14858] RAX: ffffffffffffffda RBX: 00007f9d75ad5fa0 RCX: 00007f9d7585c799 [ 1083.794414][T14858] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1083.794426][T14858] RBP: 00007f9d73aae090 R08: 0000000000001000 R09: 0000000000000000 [ 1083.794436][T14858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.794446][T14858] R13: 00007f9d75ad6038 R14: 00007f9d75ad5fa0 R15: 00007ffd9482ab08 [ 1083.794471][T14858] [ 1083.975097][ T994] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1084.185568][ T994] usb 3-1: Using ep0 maxpacket: 16 [ 1084.188055][ T994] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1084.188085][ T994] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1084.188121][ T994] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1084.188148][ T994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.234559][ T994] usb 3-1: config 0 descriptor?? [ 1084.268144][ T994] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1084.804562][T14689] usb 3-1: USB disconnect, device number 66 [ 1084.955142][ T994] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1085.048717][ T1120] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1085.198418][ T994] usb 5-1: config 0 has an invalid interface number: 97 but max is 0 [ 1085.198450][ T994] usb 5-1: config 0 has no interface number 0 [ 1085.198483][ T994] usb 5-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 1085.198533][ T994] usb 5-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 1085.198625][ T994] usb 5-1: config 0 interface 97 has no altsetting 0 [ 1085.198664][ T994] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1085.198689][ T994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.037914][ T994] usb 5-1: config 0 descriptor?? [ 1087.694277][T14894] FAULT_INJECTION: forcing a failure. [ 1087.694277][T14894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1087.694318][T14894] CPU: 0 UID: 0 PID: 14894 Comm: syz.6.2710 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1087.694350][T14894] Tainted: [L]=SOFTLOCKUP [ 1087.694358][T14894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1087.694377][T14894] Call Trace: [ 1087.694386][T14894] [ 1087.694396][T14894] dump_stack_lvl+0xe8/0x150 [ 1087.694437][T14894] should_fail_ex+0x46b/0x600 [ 1087.694482][T14894] _copy_from_iter+0x1d3/0x1670 [ 1087.694516][T14894] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1087.694548][T14894] ? __alloc_skb+0x27d/0x7d0 [ 1087.694577][T14894] ? __pfx__copy_from_iter+0x10/0x10 [ 1087.694600][T14894] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1087.694635][T14894] ? __alloc_skb+0x27d/0x7d0 [ 1087.694669][T14894] ? netlink_sendmsg+0x650/0xb40 [ 1087.694693][T14894] ? skb_put+0x11b/0x210 [ 1087.694727][T14894] netlink_sendmsg+0x6c0/0xb40 [ 1087.694760][T14894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1087.694794][T14894] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1087.694829][T14894] ____sys_sendmsg+0xa4e/0xac0 [ 1087.694879][T14894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1087.694922][T14894] ? import_iovec+0x73/0xa0 [ 1087.694955][T14894] ___sys_sendmsg+0x2a5/0x360 [ 1087.694994][T14894] ? __pfx____sys_sendmsg+0x10/0x10 [ 1087.695063][T14894] ? __fget_files+0x2a/0x420 [ 1087.695091][T14894] ? __fget_files+0x3a6/0x420 [ 1087.695129][T14894] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1087.695163][T14894] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1087.695205][T14894] ? __pfx_ksys_write+0x10/0x10 [ 1087.695251][T14894] do_syscall_64+0x14d/0xf80 [ 1087.695283][T14894] ? trace_irq_disable+0x3b/0x150 [ 1087.695309][T14894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.695333][T14894] ? clear_bhb_loop+0x40/0x90 [ 1087.695363][T14894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.695386][T14894] RIP: 0033:0x7f9bbee4c799 [ 1087.695408][T14894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.695427][T14894] RSP: 002b:00007f9bbd0a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1087.695452][T14894] RAX: ffffffffffffffda RBX: 00007f9bbf0c5fa0 RCX: 00007f9bbee4c799 [ 1087.695469][T14894] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1087.695483][T14894] RBP: 00007f9bbd0a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1087.695497][T14894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1087.695509][T14894] R13: 00007f9bbf0c6038 R14: 00007f9bbf0c5fa0 R15: 00007ffef4b5bf78 [ 1087.695543][T14894] [ 1089.992235][ T994] usb 5-1: string descriptor 0 read error: -71 [ 1089.993803][ T994] cp210x 5-1:0.97: cp210x converter detected [ 1089.994354][ T994] cp210x 5-1:0.97: failed to get vendor val 0x370b size 1: -71 [ 1089.994381][ T994] cp210x 5-1:0.97: querying part number failed [ 1090.025300][ T994] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1090.030986][ T994] usb 5-1: USB disconnect, device number 77 [ 1090.054426][ T994] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1090.063494][ T994] cp210x 5-1:0.97: device disconnected [ 1092.022217][T14912] affs: No valid root block on device nullb0 [ 1092.314667][ T994] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1092.474634][ T994] usb 5-1: Using ep0 maxpacket: 8 [ 1092.481611][ T994] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1092.484845][ T994] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1092.484879][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.484902][ T994] usb 5-1: Product: syz [ 1092.484918][ T994] usb 5-1: Manufacturer: syz [ 1092.484935][ T994] usb 5-1: SerialNumber: syz [ 1092.498589][ T994] usb 5-1: config 0 descriptor?? [ 1092.589911][ T994] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 1092.748350][ T994] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 1092.773723][ T994] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1092.796042][T12446] Bluetooth: hci0: command 0x0406 tx timeout [ 1094.003160][ T5880] usb 5-1: USB disconnect, device number 78 [ 1094.947797][T14934] FAULT_INJECTION: forcing a failure. [ 1094.947797][T14934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1094.947826][T14934] CPU: 0 UID: 0 PID: 14934 Comm: syz.1.2713 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1094.947849][T14934] Tainted: [L]=SOFTLOCKUP [ 1094.947855][T14934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1094.947866][T14934] Call Trace: [ 1094.947873][T14934] [ 1094.947880][T14934] dump_stack_lvl+0xe8/0x150 [ 1094.947909][T14934] should_fail_ex+0x46b/0x600 [ 1094.947941][T14934] _copy_from_user+0x2d/0xb0 [ 1094.947967][T14934] __sys_bpf+0x229/0x950 [ 1094.947989][T14934] ? __pfx___sys_bpf+0x10/0x10 [ 1094.948007][T14934] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1094.948038][T14934] ? ksys_write+0x248/0x270 [ 1094.948063][T14934] ? __pfx_ksys_write+0x10/0x10 [ 1094.948093][T14934] __x64_sys_bpf+0x7c/0x90 [ 1094.948111][T14934] do_syscall_64+0x14d/0xf80 [ 1094.948133][T14934] ? trace_irq_disable+0x3b/0x150 [ 1094.948153][T14934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.948170][T14934] ? clear_bhb_loop+0x40/0x90 [ 1094.948190][T14934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.948208][T14934] RIP: 0033:0x7fcdc140c799 [ 1094.948224][T14934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1094.948238][T14934] RSP: 002b:00007fcdbf65e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1094.948254][T14934] RAX: ffffffffffffffda RBX: 00007fcdc1685fa0 RCX: 00007fcdc140c799 [ 1094.948266][T14934] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 1094.948277][T14934] RBP: 00007fcdbf65e090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.948286][T14934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1094.948295][T14934] R13: 00007fcdc1686038 R14: 00007fcdc1685fa0 R15: 00007ffc130b01c8 [ 1094.948319][T14934] [ 1095.064684][ T5880] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1095.250388][ T5880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.250424][ T5880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.250466][ T5880] usb 7-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1095.250492][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.303360][ T5880] usb 7-1: config 0 descriptor?? [ 1095.764469][ T994] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1095.771075][ T5880] hid_parser_main: 60 callbacks suppressed [ 1095.771093][ T5880] playstation 0003:054C:0BA0.0008: unknown main item tag 0x0 [ 1095.810886][ T5880] playstation 0003:054C:0BA0.0008: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.6-1/input0 [ 1095.844600][ T36] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1095.914632][ T994] usb 5-1: Using ep0 maxpacket: 32 [ 1095.932416][ T994] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 160, changing to 7 [ 1095.932441][ T994] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 26409, setting to 1024 [ 1095.960729][ T994] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1095.960947][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.960965][ T994] usb 5-1: Product: syz [ 1095.960976][ T994] usb 5-1: Manufacturer: syz [ 1095.960987][ T994] usb 5-1: SerialNumber: syz [ 1096.037451][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 1096.042987][ T36] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 160, changing to 7 [ 1096.043023][ T36] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 26409, setting to 1024 [ 1096.051594][ T36] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1096.051625][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.051662][ T36] usb 2-1: Product: syz [ 1096.051697][ T36] usb 2-1: Manufacturer: syz [ 1096.051739][ T36] usb 2-1: SerialNumber: syz [ 1096.115680][ T5880] playstation 0003:054C:0BA0.0008: Invalid byte count transferred, expected 16 got 2 [ 1096.115702][ T5880] playstation 0003:054C:0BA0.0008: Failed to retrieve DualShock4 pairing info: -22 [ 1096.116160][ T5880] playstation 0003:054C:0BA0.0008: Failed to get MAC address from DualShock4 [ 1096.116189][ T5880] playstation 0003:054C:0BA0.0008: Failed to create dualshock4. [ 1096.241870][ T5880] playstation 0003:054C:0BA0.0008: probe with driver playstation failed with error -22 [ 1096.277361][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2724'. [ 1096.509253][ T5907] usb 7-1: USB disconnect, device number 13 [ 1098.242539][T14938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2723'. [ 1099.841231][ T994] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1099.841718][ T994] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1099.957133][ T994] usb 5-1: USB disconnect, device number 79 [ 1100.005313][ T36] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1100.020682][ T36] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1100.810414][ T36] usb 2-1: USB disconnect, device number 88 [ 1100.898620][T12390] udevd[12390]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1101.285184][ T5907] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1101.469816][ T5907] usb 7-1: config 1 has an invalid interface number: 188 but max is 0 [ 1101.469857][ T5907] usb 7-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 1101.469882][ T5907] usb 7-1: config 1 has no interface number 0 [ 1101.469927][ T5907] usb 7-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1101.469948][ T5907] usb 7-1: config 1 interface 188 has no altsetting 0 [ 1101.472599][ T5907] usb 7-1: New USB device found, idVendor=2040, idProduct=7200, bcdDevice=5b.6b [ 1101.472630][ T5907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.472654][ T5907] usb 7-1: Product: syz [ 1101.472670][ T5907] usb 7-1: Manufacturer: syz [ 1101.472691][ T5907] usb 7-1: SerialNumber: syz [ 1101.591794][ T5907] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 1101.694166][ T36] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1101.867759][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 1101.968638][ T36] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1102.174863][ T36] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1102.174950][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.175046][ T36] usb 5-1: Product: syz [ 1102.175064][ T36] usb 5-1: Manufacturer: syz [ 1102.175080][ T36] usb 5-1: SerialNumber: syz [ 1102.508930][ T36] usb 5-1: config 0 descriptor?? [ 1103.409128][ T36] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 1103.538038][ T36] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 1103.540109][ T36] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1103.574758][ T5907] snd-usb-audio 7-1:1.188: probe with driver snd-usb-audio failed with error -22 [ 1103.578791][ T5907] usb 7-1: USB disconnect, device number 14 [ 1103.655310][T12390] udevd[12390]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1104.627012][ T994] usb 5-1: USB disconnect, device number 80 [ 1105.603928][ T9] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1105.746605][T15012] FAULT_INJECTION: forcing a failure. [ 1105.746605][T15012] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.746676][T15012] CPU: 1 UID: 0 PID: 15012 Comm: syz.1.2745 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1105.746708][T15012] Tainted: [L]=SOFTLOCKUP [ 1105.746717][T15012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1105.746732][T15012] Call Trace: [ 1105.746742][T15012] [ 1105.746753][T15012] dump_stack_lvl+0xe8/0x150 [ 1105.746795][T15012] should_fail_ex+0x46b/0x600 [ 1105.746838][T15012] should_failslab+0xa8/0x100 [ 1105.746877][T15012] __kmalloc_cache_noprof+0x84/0x690 [ 1105.746914][T15012] ? f2fs_init_fs_context+0x4f/0xc0 [ 1105.746944][T15012] f2fs_init_fs_context+0x4f/0xc0 [ 1105.746968][T15012] alloc_fs_context+0x9d5/0xd50 [ 1105.747011][T15012] __se_sys_fsopen+0xa5/0x2c0 [ 1105.747050][T15012] do_syscall_64+0x14d/0xf80 [ 1105.747082][T15012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.747106][T15012] ? clear_bhb_loop+0x40/0x90 [ 1105.747135][T15012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.747159][T15012] RIP: 0033:0x7fcdc140c799 [ 1105.747180][T15012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1105.747201][T15012] RSP: 002b:00007fcdbf61c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1105.747224][T15012] RAX: ffffffffffffffda RBX: 00007fcdc1686180 RCX: 00007fcdc140c799 [ 1105.747242][T15012] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000140 [ 1105.747257][T15012] RBP: 00007fcdbf61c090 R08: 0000000000000000 R09: 0000000000000000 [ 1105.747272][T15012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1105.747287][T15012] R13: 00007fcdc1686218 R14: 00007fcdc1686180 R15: 00007ffc130b01c8 [ 1105.747323][T15012] [ 1106.595147][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1106.602854][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 160, changing to 7 [ 1106.602890][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 26409, setting to 1024 [ 1106.614305][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1106.614338][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.614359][ T9] usb 5-1: Product: syz [ 1106.614375][ T9] usb 5-1: Manufacturer: syz [ 1106.614391][ T9] usb 5-1: SerialNumber: syz [ 1106.787719][T15017] binder: Unknown parameter 'smackfsfloor?é%Áb' [ 1106.911701][T15005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2744'. [ 1107.157573][T14950] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1107.314798][T14950] usb 1-1: Using ep0 maxpacket: 8 [ 1108.293010][T15018] cgroup: fork rejected by pids controller in /syz1 [ 1108.390752][T14950] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1108.484659][T14950] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1108.484747][T14950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.484770][T14950] usb 1-1: Product: syz [ 1108.484786][T14950] usb 1-1: Manufacturer: syz [ 1108.484802][T14950] usb 1-1: SerialNumber: syz [ 1108.549300][T14950] usb 1-1: config 0 descriptor?? [ 1108.640924][T14950] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 1108.917775][T14950] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 1108.940453][T14950] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1109.102854][T14950] usb 1-1: USB disconnect, device number 64 [ 1109.220146][ T9] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1109.222646][ T9] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1109.301530][ T9] usb 5-1: USB disconnect, device number 81 [ 1109.494118][T12390] udevd[12390]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1111.619879][T15089] faux_driver vkms: [drm] Unknown color mode 3; guessing buffer size. [ 1111.824590][T15087] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1111.890137][T15087] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1111.909488][ T5940] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1112.003587][T14950] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 1112.034278][ T1797] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1112.056390][ T5940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.061753][ T5940] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1112.061787][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.061809][ T5940] usb 5-1: Product: syz [ 1112.061826][ T5940] usb 5-1: Manufacturer: syz [ 1112.061842][ T5940] usb 5-1: SerialNumber: syz [ 1112.080982][ T5940] usb 5-1: config 0 descriptor?? [ 1112.140168][ T5940] CoreChips 5-1:0.0: probe with driver CoreChips failed with error -22 [ 1112.187464][ T1797] usb 7-1: Using ep0 maxpacket: 8 [ 1112.189658][ T1797] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1112.192060][ T1797] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1112.192090][ T1797] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.192116][ T1797] usb 7-1: Product: syz [ 1112.192127][ T1797] usb 7-1: Manufacturer: syz [ 1112.192139][ T1797] usb 7-1: SerialNumber: syz [ 1112.241326][T14950] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 1112.241357][T14950] usb 2-1: config 0 has no interface number 0 [ 1112.241431][T14950] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1112.249466][ T1797] usb 7-1: config 0 descriptor?? [ 1112.284588][T14950] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1112.284623][T14950] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1112.284645][T14950] usb 2-1: Manufacturer: syz [ 1112.284662][T14950] usb 2-1: SerialNumber: syz [ 1112.292968][T14950] usb 2-1: config 0 descriptor?? [ 1112.330433][ T1797] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found [ 1112.528366][ T1797] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected [ 1112.531408][ T1797] snd_usb_toneport 7-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1112.722376][ T5940] usb 7-1: USB disconnect, device number 15 [ 1112.824044][ T38] INFO: task syz.5.2339:13662 blocked for more than 143 seconds. [ 1112.824078][ T38] Tainted: G L syzkaller #0 [ 1112.824103][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1112.824178][ T38] task:syz.5.2339 state:D stack:26944 pid:13662 tgid:13659 ppid:12442 task_flags:0x400140 flags:0x00080002 [ 1112.824255][ T38] Call Trace: [ 1112.824265][ T38] [ 1112.824334][ T38] __schedule+0x1553/0x5240 [ 1112.824377][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1112.824418][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1112.824500][ T38] ? __pfx___schedule+0x10/0x10 [ 1112.824542][ T38] ? schedule+0x90/0x360 [ 1112.824574][ T38] schedule+0x164/0x360 [ 1112.824660][ T38] __fuse_simple_request+0x121f/0x1c60 [ 1112.824708][ T38] ? __pfx___fuse_simple_request+0x10/0x10 [ 1112.824740][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1112.824852][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1112.824991][ T38] ? __kasan_kmalloc+0x93/0xb0 [ 1112.825032][ T38] ? fuse_send_init+0x57/0x6a0 [ 1112.825072][ T38] fuse_send_init+0x40f/0x6a0 [ 1112.825170][ T38] ? __pfx_fuse_fill_super+0x10/0x10 [ 1112.825205][ T38] get_tree_nodev+0xbb/0x150 [ 1112.825314][ T38] fuse_get_tree+0x304/0x500 [ 1112.825348][ T38] vfs_get_tree+0x92/0x2a0 [ 1112.825386][ T38] do_new_mount+0x341/0xd30 [ 1112.825468][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 1112.825509][ T38] ? __pfx_do_new_mount+0x10/0x10 [ 1112.825537][ T38] ? ns_capable+0x89/0xe0 [ 1112.825572][ T38] ? path_mount+0x690/0x10e0 [ 1112.825675][ T38] ? user_path_at+0xd4/0x160 [ 1112.825711][ T38] __se_sys_mount+0x31d/0x420 [ 1112.825748][ T38] ? __pfx___se_sys_mount+0x10/0x10 [ 1112.825838][ T38] ? __x64_sys_mount+0x20/0xc0 [ 1112.825870][ T38] do_syscall_64+0x14d/0xf80 [ 1112.826075][ T38] ? trace_irq_disable+0x3b/0x150 [ 1112.826168][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.826196][ T38] ? clear_bhb_loop+0x40/0x90 [ 1112.826225][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.826250][ T38] RIP: 0033:0x7f5f1e43c799 [ 1112.826327][ T38] RSP: 002b:00007f5f1c66d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1112.826354][ T38] RAX: ffffffffffffffda RBX: 00007f5f1e6b6090 RCX: 00007f5f1e43c799 [ 1112.826372][ T38] RDX: 00002000000020c0 RSI: 0000200000002080 RDI: 0000000000000000 [ 1112.826388][ T38] RBP: 00007f5f1e4d2bd9 R08: 0000200000000140 R09: 0000000000000000 [ 1112.826405][ T38] R10: 0000000000000413 R11: 0000000000000246 R12: 0000000000000000 [ 1112.826420][ T38] R13: 00007f5f1e6b6128 R14: 00007f5f1e6b6090 R15: 00007fff4582e238 [ 1112.826513][ T38] [ 1112.826558][ T38] [ 1112.826558][ T38] Showing all locks held in the system: [ 1112.826572][ T38] 1 lock held by khungtaskd/38: [ 1112.826586][ T38] #0: ffffffff8ddcd780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1112.826736][ T38] 2 locks held by getty/5553: [ 1112.826750][ T38] #0: ffff8880365e80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1112.826879][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 1112.827082][ T38] 3 locks held by kworker/1:6/5940: [ 1112.827098][ T38] #0: ffff88802229f938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1112.971900][ T38] #1: ffffc90004e3fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1112.981969][ T38] #2: ffff888029af9188 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 1113.003900][ T38] 7 locks held by kworker/u8:17/7679: [ 1113.003930][ T38] 6 locks held by kworker/u8:23/10624: [ 1113.003946][ T38] 4 locks held by udevd/12095: [ 1113.003959][ T38] #0: ffff8880546d6ec8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 1113.004083][ T38] #1: ffff888028050878 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 1113.004209][ T38] #2: ffff88805ec1fa58 (kn->active#19){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1113.004282][ T38] #3: ffff88802420b188 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1113.019206][ T38] 1 lock held by syz.5.2339/13662: [ 1113.019223][ T38] #0: ffff88802b8c80d0 (&type->s_umount_key#55/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xac0 [ 1113.036185][ T38] 5 locks held by kworker/0:3/14950: [ 1113.036202][ T38] #0: ffff88802229f938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1113.046827][ T38] #1: ffffc90003f9fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1113.071646][ T38] #2: ffff888029950188 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 1113.071727][ T38] #3: ffff88802420b188 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1113.082484][ T38] #4: ffff88802420a150 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1113.107945][ T38] 2 locks held by syz.1.2734/14980: [ 1113.107998][ T38] 1 lock held by syz.2.2756/15084: [ 1113.108026][ T38] #0: ffff888019c31d30 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x237/0x4f0 [ 1113.108136][ T38] 5 locks held by syz.2.2756/15093: [ 1113.108180][ T38] 1 lock held by syz.4.2757/15089: [ 1113.108299][ T38] 2 locks held by syz.1.2759/15092: [ 1113.108347][ T38] #0: ffff888024f560a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1113.108435][ T38] #1: ffff888024f56120 (&tty->atomic_write_lock){+.+.}-{4:4}, at: file_tty_write+0x217/0xa30 [ 1113.108545][ T38] 4 locks held by syz.0.2760/15099: [ 1113.108581][ T38] [ 1113.108601][ T38] ============================================= [ 1113.108601][ T38] [ 1113.108643][ T38] NMI backtrace for cpu 1 [ 1113.108684][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1113.108715][ T38] Tainted: [L]=SOFTLOCKUP [ 1113.108725][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1113.108760][ T38] Call Trace: [ 1113.108784][ T38] [ 1113.108807][ T38] dump_stack_lvl+0xe8/0x150 [ 1113.108868][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1113.108906][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1113.108993][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1113.109030][ T38] sys_info+0x135/0x170 [ 1113.109078][ T38] watchdog+0xfd9/0x1030 [ 1113.109172][ T38] ? watchdog+0x21a/0x1030 [ 1113.109210][ T38] kthread+0x388/0x470 [ 1113.109255][ T38] ? __pfx_watchdog+0x10/0x10 [ 1113.109318][ T38] ? __pfx_kthread+0x10/0x10 [ 1113.109358][ T38] ret_from_fork+0x51e/0xb90 [ 1113.109394][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1113.109423][ T38] ? __switch_to+0xc7d/0x1450 [ 1113.109456][ T38] ? __pfx_kthread+0x10/0x10 [ 1113.109481][ T38] ret_from_fork_asm+0x1a/0x30 [ 1113.109519][ T38] [ 1113.109543][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1113.109588][ C0] NMI backtrace for cpu 0 [ 1113.109606][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1113.109644][ C0] Tainted: [L]=SOFTLOCKUP [ 1113.109651][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1113.109663][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 1113.109691][ C0] Code: e8 de 12 95 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2f 26 fb fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 da 78 f6 05 cc 44 89 f9 80 e1 07 [ 1113.109708][ C0] RSP: 0018:ffffc900001679d0 EFLAGS: 00000202 [ 1113.109724][ C0] RAX: 1ffffffff3329e00 RBX: 00000000000003fd RCX: 0000000000000000 [ 1113.109738][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1113.109749][ C0] RBP: ffffffff9994f730 R08: 0000000000000000 R09: 0000000000000000 [ 1113.109761][ C0] R10: dffffc0000000000 R11: ffffffff852f3940 R12: dffffc0000000000 [ 1113.109776][ C0] R13: 0000000000000000 R14: ffffffff9994f4a0 R15: 0000000000000000 [ 1113.109788][ C0] FS: 0000000000000000(0000) GS:ffff888126340000(0000) knlGS:0000000000000000 [ 1113.109804][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1113.109817][ C0] CR2: 00007fcdbf63cff8 CR3: 000000002b5e6000 CR4: 00000000003526f0 [ 1113.109833][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 1113.109845][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1113.109857][ C0] Call Trace: [ 1113.109863][ C0] [ 1113.109872][ C0] wait_for_lsr+0x1aa/0x2f0 [ 1113.109908][ C0] serial8250_console_write+0x120d/0x1b90 [ 1113.109939][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1113.109966][ C0] ? console_flush_one_record+0x48f/0xb90 [ 1113.109998][ C0] console_flush_one_record+0x68b/0xb90 [ 1113.110029][ C0] ? console_flush_one_record+0xfa/0xb90 [ 1113.110059][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 1113.110088][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1113.110117][ C0] legacy_kthread_func+0x1b6/0x250 [ 1113.110146][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1113.110174][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1113.110204][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 1113.110236][ C0] kthread+0x388/0x470 [ 1113.110255][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1113.110281][ C0] ? __pfx_kthread+0x10/0x10 [ 1113.110300][ C0] ret_from_fork+0x51e/0xb90 [ 1113.110346][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1113.110376][ C0] ? __switch_to+0xc7d/0x1450 [ 1113.110400][ C0] ? __pfx_kthread+0x10/0x10 [ 1113.110420][ C0] ret_from_fork_asm+0x1a/0x30 [ 1113.110446][ C0] [ 1113.116891][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1113.116971][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1113.117010][ T38] Tainted: [L]=SOFTLOCKUP [ 1113.117020][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1113.117035][ T38] Call Trace: [ 1113.117058][ T38] [ 1113.117074][ T38] vpanic+0x56c/0xa60 [ 1113.117165][ T38] ? __pfx___schedule+0x10/0x10 [ 1113.117197][ T38] ? __pfx_vpanic+0x10/0x10 [ 1113.117306][ T38] panic+0xc5/0xd0 [ 1113.117347][ T38] ? __pfx_panic+0x10/0x10 [ 1113.117404][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1113.117488][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1113.117519][ T38] watchdog+0x1023/0x1030 [ 1113.117570][ T38] ? watchdog+0x21a/0x1030 [ 1113.117604][ T38] kthread+0x388/0x470 [ 1113.117628][ T38] ? __pfx_watchdog+0x10/0x10 [ 1113.117653][ T38] ? __pfx_kthread+0x10/0x10 [ 1113.117678][ T38] ret_from_fork+0x51e/0xb90 [ 1113.117713][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1113.117743][ T38] ? __switch_to+0xc7d/0x1450 [ 1113.117774][ T38] ? __pfx_kthread+0x10/0x10 [ 1113.117800][ T38] ret_from_fork_asm+0x1a/0x30 [ 1113.117839][ T38] [ 1113.118444][ T38] Kernel Offset: disabled