last executing test programs: 20.799835198s ago: executing program 2 (id=1436): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0xd69, 0x9b99}, 0x36, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0xd, 0x6, 0x4, 0x25cd, 0x5, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbd, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xfffffffd, 0x2, 0x6, 0x7, 0x8, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x95, 0xff, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc65, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x3, 0x809, 0x4, 0x20000a7, 0x1000, 0x2000, 0x400, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x0, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100009, 0x4008000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x1, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x40, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x43, 0xff, 0x1005, 0x4, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x6, 0x3, 0x200006, 0x80008000, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x9d83, 0x0, 0x8008, 0x7fff, 0xffffffff, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0xffff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f00000003c0)={0x4c50, 0xf, [{0x0, 0x1}, {0x79, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x7}, {0x0, 0x1}, {0xe, 0x1}, {0x9, 0x1}, {0xa, 0x1}, {0xa, 0x1}, {0x1}, {0x6, 0x1}, {0xc}, {0xb}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffbfe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000002c0)={0x7, 'wg0\x00', {0x2ea3}, 0xb17}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 16.509566011s ago: executing program 3 (id=1443): syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04224c05ff"], 0x4f) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x104) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000012c0)=0x2) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 16.185038188s ago: executing program 2 (id=1444): syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000440)={0x8d8, 0x4a8d9f63}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) pselect6(0x40, &(0x7f00000000c0)={0x17, 0x9, 0x300000, 0x7, 0xc, 0xb3a, 0xffffffff, 0x1}, &(0x7f0000000300)={0x400, 0x4, 0x1, 0x7, 0x7, 0x0, 0x705e, 0x9}, &(0x7f0000000340)={0x4, 0x1ff, 0x2fca61bd, 0x7, 0x6c00000000000, 0x7, 0x3, 0x7}, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x101]}, 0x8}) r5 = socket$kcm(0x10, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0xfffffffd, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r7) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRESDEC=r4], 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) 11.223034854s ago: executing program 2 (id=1452): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000000c0)) 10.562350547s ago: executing program 1 (id=1457): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r1, &(0x7f0000000400)=@phonet={0x23, 0x0, 0x1, 0x1}, 0x80) writev(r1, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi2\x00', 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x8000000a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27}, 0x94) socket(0x10, 0x3, 0x9) wait4(0x0, 0x0, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000540)={'pcl711\x00', [0x20c, 0x80000003, 0xffffffff, 0xfffffffd, 0x0, 0xb, 0x8000c, 0x3, 0x4, 0x7fe, 0x6, 0x2, 0x1, 0x403, 0x7, 0xfffffff9, 0x4001, 0x2, 0x1, 0x4048000b, 0x5e3c4862, 0x1007fff, 0x200006, 0xd, 0x8004, 0x8, 0x2, 0x5, 0x7, 0x1]}) readv(r0, 0x0, 0x0) 10.493818858s ago: executing program 1 (id=1458): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x0) 10.409414677s ago: executing program 1 (id=1459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0xa, "8ac0"}, @main=@item_012={0x1, 0x0, 0xc, '%'}]}}, 0x0}, 0x0) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r4, 0x4068aea3, &(0x7f0000000080)={0xc1, 0x0, 0x3}) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) syz_io_uring_setup(0x4575, &(0x7f0000000080)={0x0, 0xa397, 0x40, 0xfffffffe, 0xfb}, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f00000006c0), 0x0) r5 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYRES32=r7], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r8, r6, 0x25, 0x0, @val=@tcx={@void, @value=r8}}, 0x1c) 10.32665255s ago: executing program 2 (id=1460): syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000440)={0x8d8, 0x4a8d9f63}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) pselect6(0x40, &(0x7f00000000c0)={0x17, 0x9, 0x300000, 0x7, 0xc, 0xb3a, 0xffffffff, 0x1}, &(0x7f0000000300)={0x400, 0x4, 0x1, 0x7, 0x7, 0x0, 0x705e, 0x9}, &(0x7f0000000340)={0x4, 0x1ff, 0x2fca61bd, 0x7, 0x6c00000000000, 0x7, 0x3, 0x7}, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x101]}, 0x8}) r4 = socket$kcm(0x10, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0xfffffffd, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) 9.284551724s ago: executing program 3 (id=1462): syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000440)={0x8d8, 0x4a8d9f63}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) pselect6(0x40, &(0x7f00000000c0)={0x17, 0x9, 0x300000, 0x7, 0xc, 0xb3a, 0xffffffff, 0x1}, &(0x7f0000000300)={0x400, 0x4, 0x1, 0x7, 0x7, 0x0, 0x705e, 0x9}, &(0x7f0000000340)={0x4, 0x1ff, 0x2fca61bd, 0x7, 0x6c00000000000, 0x7, 0x3, 0x7}, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x101]}, 0x8}) r5 = socket$kcm(0x10, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0xfffffffd, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r7) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRESDEC=r4], 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) 9.265406328s ago: executing program 0 (id=1463): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="080000000000000000000000000000000000000000424e34dfa081c713363e36d749ce1666a9bb36c9d6e729d92cc74ad3452a83495e38f3dd0f7a4e9af113b2bc19fe67074662e9f7359699b36ddc20db8f87fe151315852be99c1407406d10a934dde1aa607362c45ec7c4467cabe93279818cfc30b2f4d719acc165e20948268d5ad4ad2ddbf40255aac75986be1a12e19851cc529070c0ce6ee1929ae6dfcc83ca783945f3b81c4e152b7e00"/183, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000000480)=""/210, 0xd2, 0x4f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$udambuf(0xffffff9c, &(0x7f00000000c0), 0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r3, 0x2285, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e44751170", 0x30}], 0x2) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000000c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x103, 0x1, 0x8, 0x400}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000180)={0xa, 0x4e23, 0x80000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000000000029"], 0x18}, 0x40440e0) 8.442398642s ago: executing program 0 (id=1464): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, 0x0, 0x0) 8.322148507s ago: executing program 0 (id=1465): setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000280)=0xb3e, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0xd69, 0x9b99}, 0x36, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0xd, 0x6, 0x4, 0x25cd, 0x5, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbd, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xfffffffd, 0x2, 0x6, 0x7, 0x8, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x95, 0xff, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc65, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x3, 0x809, 0x4, 0x20000a7, 0x1000, 0x2000, 0x400, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x0, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100009, 0x4008000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x1, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x40, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x43, 0xff, 0x1005, 0x4, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x6, 0x3, 0x200006, 0x80008000, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x9d83, 0x0, 0x8008, 0x7fff, 0xffffffff, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0xffff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f00000003c0)={0x4c50, 0xf, [{0x0, 0x1}, {0x79, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x9, 0x1}, {0x7}, {0x0, 0x1}, {0xe, 0x1}, {0x9, 0x1}, {0xa, 0x1}, {0xa, 0x1}, {0x1}, {0x6, 0x1}, {0xe, 0x1}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffbfe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000002c0)={0x7, 'wg0\x00', {0x2ea3}, 0xb17}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.792947885s ago: executing program 2 (id=1467): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000ebffffff840000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x2, 0x0, 0x9, 0x9, r1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40085503, &(0x7f0000000100)=0xb) 4.528389668s ago: executing program 0 (id=1471): openat$dma_heap(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x2228, 0x1, 0x1, 0x3b8}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x9f) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000040)='net/vlan/vlan1\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x143bc2, 0x1c0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r5, r5, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000002740), 0x80080) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000200)={0x2020}, 0x2020) setxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0200000008"], 0xff3c, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) 4.383623039s ago: executing program 1 (id=1472): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e1f, 0x4, @mcast2, 0xb90}, 0x1c) bind$inet6(r2, &(0x7f0000001bc0)={0xa, 0x4e21, 0x399, @private0}, 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000140)=0x2000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r4, 0x1) ppoll(&(0x7f0000000100)=[{r3, 0x20}], 0x1, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000180)='sysfs\x00', 0x4008, &(0x7f00000001c0)='@\xe4@%).):\x00') getrusage(0x0, &(0x7f00000004c0)) bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x19, 0x4, 0x8, 0x7fffffff}, 0x50) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="040027bd7000fbdbdf250600000078000180140002007465616d5f736c61760800010097fce10757b71d4472aa3a7d216878a9b9c3ac0d44c16acb088c45f90fb0", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f626f6e64000000140002006e72300000000000000000000000000014000200697036746e6c300000000000000000001400020076657468305f746f5f626f6e640000000800030002000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x440d0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) recvmmsg(r0, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/5, 0x5}, 0x6}], 0x1, 0x20, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="4000000010000104000000004000000000000000", @ANYRES32=0x0, @ANYBLOB="038000000000000004001980080004003a010000140003006272696467310000"], 0x40}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4050, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x6}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2b, 0x3, 0xfffffffc) 4.298047506s ago: executing program 4 (id=1473): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aefd", 0x2}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000000000006311bc00000000008510000002000000850000000500000095000000000000009520a505000000007127ba313654e019d335f6b37089023b6ff74203c64c4c79b70324929307da6c86d67a2927b66d12c3aea048f8852196d6b59e555cef320f76c69234c5f7d63569ced26765c14a6e66"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 0x3}, 0x94) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) renameat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) unshare(0x2a020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3.384483912s ago: executing program 4 (id=1474): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="080000000000000000000000000000000000000000424e34dfa081c713363e36d749ce1666a9bb36c9d6e729d92cc74ad3452a83495e38f3dd0f7a4e9af113b2bc19fe67074662e9f7359699b36ddc20db8f87fe151315852be99c1407406d10a934dde1aa607362c45ec7c4467cabe93279818cfc30b2f4d719acc165e20948268d5ad4ad2ddbf40255aac75986be1a12e19851cc529070c0ce6ee1929ae6dfcc83ca783945f3b81c4e152b7e00"/183, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000000480)=""/210, 0xd2, 0x4f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$udambuf(0xffffff9c, &(0x7f00000000c0), 0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r3, 0x2285, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e44751170", 0x30}], 0x2) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000000c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x103, 0x1, 0x8, 0x400}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000180)={0xa, 0x4e23, 0x80000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000000000029"], 0x18}, 0x40440e0) 3.233065529s ago: executing program 3 (id=1475): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, 0x0, 0x0) 3.133404127s ago: executing program 3 (id=1476): syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.882078979s ago: executing program 0 (id=1477): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000240)={0x32, &(0x7f0000000280)=[{0x6, '\x00', @data=0x3, 0x5}]}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x18, 0x2, 0x6, 0x6, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0xbfe81060897b5600) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x2, {0x3, 0x80001000, 0xfc, 0x4}}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = msgget$private(0x0, 0x5c0) msgsnd(r4, 0x0, 0x0, 0x0) msgsnd(r4, &(0x7f00000001c0)=ANY=[], 0x6d, 0x0) chown(0x0, 0x0, 0xee01) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="20030900fe000907f74943ffaf2da1"], 0x0, 0x0, 0x0}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000040)={0x18, 0x1, 0x0, 0x0, r5, 0x100000000}) 2.834334877s ago: executing program 2 (id=1478): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x6dbf, 0x4) syz_usb_connect$uac1(0x3, 0x84, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x9, 0x10, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x9, 0x1001}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x40, 0x1, 0x9, 0x1, "b04f42"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0xf7, 0xd, {0x7, 0x25, 0x1, 0xc, 0x9, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x9, 0x8, {0x7, 0x25, 0x1, 0x4, 0x6, 0x4}}}}}}}}]}}, 0x0) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r0, 0x0, 0x0, 0x2101, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x3) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000040)=0xffffffff, 0x4) add_key(&(0x7f0000003300)='cifs.spnego\x00', &(0x7f0000003340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 2.382603797s ago: executing program 1 (id=1479): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r1, &(0x7f0000000400)=@phonet={0x23, 0x0, 0x1, 0x1}, 0x80) writev(r1, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi2\x00', 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x8000000a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27}, 0x94) socket(0x10, 0x3, 0x9) wait4(0x0, 0x0, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000540)={'pcl711\x00', [0x20c, 0x80000003, 0xffffffff, 0xfffffffd, 0x0, 0xb, 0x8000c, 0x3, 0x4, 0x7fe, 0x6, 0x2, 0x1, 0x403, 0x7, 0xfffffff9, 0x4001, 0x2, 0x1, 0x4048000b, 0x5e3c4862, 0x1007fff, 0x200006, 0xd, 0x8004, 0x8, 0x2, 0x5, 0x7, 0x1]}) readv(r0, 0x0, 0x0) 2.324354854s ago: executing program 4 (id=1480): open$dir(&(0x7f0000000280)='./file0\x00', 0x280, 0xa2) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x718bb647156ec3b7) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) 2.033019535s ago: executing program 4 (id=1481): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x174, 0x16, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x144, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'batadv0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x20c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1e, 0x4, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4c) setresuid(0x0, r4, 0x0) setresuid(0x0, 0xffffffffffffffff, r4) ioctl$FBIOBLANK(r0, 0x4611, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x3c, r6, 0x1, 0x70bd27, 0x0, {0x54}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}}, 0xc084) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x421, 0x0, 0x0, {{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x80}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha3-512-generic\x00'}, 0x0, 0xc0}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x190, r6, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x465ec6d6}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xba}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4000000}, {0x6, 0x11, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xd}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x6}}]}, 0x190}, 0x1, 0x0, 0x0, 0x95}, 0x20020010) 1.732187515s ago: executing program 1 (id=1482): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(0x0, &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000180)='$', 0x1, 0xfffffffffffffffc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2f00) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0fe1709850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmsg(r3, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002300)=[{0x0}, {&(0x7f0000001200)="c1", 0x1}], 0x2}, 0x24004000) capset(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@delsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in=@multicast2, 0x4d5}, [@srcaddr={0x14, 0xd, @in=@private=0xa010100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x885}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@migrate={0xec, 0x21, 0x1, 0x70bd65, 0x25dfdbfb, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@loopback, 0x4e22, 0xb, 0x4e20, 0x0, 0x0, 0xe0, 0x80, 0xff}, 0x0, 0x1}, [@migrate={0x9c, 0x11, [{@in6=@mcast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x1f}, @in6=@private1, 0x33, 0x4, 0x0, 0x3500, 0x2, 0x2}, {@in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x24}, @in=@empty, @in=@empty, 0xff, 0x4, 0x0, 0x3507, 0xa, 0xa}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x24008010}, 0x8000) 435.699843ms ago: executing program 0 (id=1483): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x800) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) socket(0x10, 0x803, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x3, 0x3, 0x0, 0xf1, 0x80003, 0x2}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0xfffffffc}], 0x1c) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 220.684218ms ago: executing program 4 (id=1484): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000100)) r1 = getegid() r2 = syz_clone3(&(0x7f00000076c0)={0x10000c800, &(0x7f0000007480), &(0x7f00000074c0), &(0x7f0000007500), {0x20}, &(0x7f0000007540)=""/243, 0xf3, &(0x7f0000007640)=""/39, &(0x7f0000007680)=[0xffffffffffffffff], 0x1}, 0x58) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000007740)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@private}}, &(0x7f0000007840)=0xe8) stat(&(0x7f0000007880)='./file0\x00', &(0x7f00000078c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fcntl$getown(0xffffffffffffffff, 0x9) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x8000000000000002, 0x100, 0x2, 0x9, {0x6, 0x9, 0x0, 0x80000000000000ff, 0x3, 0x0, 0x7fffffff, 0x58, 0xffffffff, 0x8000, 0x9, r8, r9, 0x1, 0x4}}, {0x20000000000000, 0x3, 0x2b, 0xf9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000007940)={0x0, 0x0, 0x0}, &(0x7f0000007980)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000079c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007a00)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@dev}}, &(0x7f0000007b00)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000007b40)='./file0\x00', &(0x7f0000007b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r14 = syz_open_dev$vcsn(&(0x7f0000007c00), 0x6, 0x101000) r15 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r15, 0x112, 0x8, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007d00)=[{{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000280)="c176c1070d4ada3bec3358f62c4a8f72d8d0482e5c7f02674467e8734488794cf2f9f5ab60bbe93e98c546736697d5e44e7ac24bf365836b6b73615fe9c2eef61a289c45fcf9c236c3c8be13d0acd122ea73cabb320269f16d6bfe6b9d6743ed87404b615e36e3260f3fdb5f4fe682bccad397225c309afe6b25fc", 0x7b}, {&(0x7f0000000380)="ef0000050149b491a40260259f2d7e1eb50ee59c21940c96869802681903463ff6dfa0eeda6f7b9e5fcd35b07b107a7be882e4152bb9480a9a4365ef348016e140e75bdcced92baa73d596848fbd0908b3238ff6b831a97a62720ab48e0e9b6e03c9a8ee22698aa9e99a8fa7e9de6df162f49213172f3d3f723cad1e37f5e7582ebd7760f1362a1128cece0065598538062217d1d7ac50ef6a219da509857ad3a84e3cb5615dea7700674e23cea64364", 0xb0}, {&(0x7f0000000440)}], 0x3, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="738760a716f60396291a34fe21a98f60c9c27fb85ff9ae42e87f3adcb031ec3955c81d7dfd4213f5d591041376047d0a1842d91360fae1a43998513ea82503963e8be615210678b4a9ee646c0189d6503733a5c43c091c23f0f0c7c215d70fa857f98bc3849f47c580d203af2a54fa59e95ae5b5ce188bd7786a34e3cc99ba62546442accb1503e19607433d1c39ad7795998b7b2a6465a51dfb488df2da98071b439f2203b0ec387b5423f88c28b41b1b40cb6992778a22914bae219383193966ea2f984438397de2fc402c483098f00fdbb65913a4ba2c0232ef18667ae11597b9cb83df1187bf4e858d66dabe50d825e2f27caa", 0xf5}, {&(0x7f00000009c0)="5cb7476cb4034e777227cccf359222623c6490c06cafa461c79571d472d12805ff1b87a0fc8d46f7a4b649c003c157e5250f8f79", 0x34}, {&(0x7f0000000a00)="d2bb1292f115209f438fd3fc290fa0a22ef91942df15aaae73493cf976ddd6a4224b4c718337b6120e3b42f0cc8605cf154617d4939fac85bb82bd25783d25528a90dadea1ee3ee85260c437f2e3ab6adb99d0b5c184a843354b4e01b87289a2c31577f43864fdbe7e430811f8cc2bd41c7b5f42799e94ee0e8fb78aef76d04889", 0x81}], 0x3, &(0x7f0000000ec0)=[@rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x160, 0x8000}}, {{&(0x7f0000001040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004ac0)=[{&(0x7f00000010c0)="80d74b373a12fc6c8e645fe0c84ee25d93ed2d987cb2bf3abaecbdca84b4980fedb7c8be5479b1e8751844c660938e0928d8ec9bbcd1ac4f943cf8c594488efa7b9a95528fbbe5e56b7c4c7b96642e46237b75be8bca64c8495aabc16be9a0756b4880dd2deb8372dbb26f77697b9049b109fd15218382005477a3cba5e8d00e1475f7933c53109c114cabdb63fc5063a87dde6e38ee9f8c3c32386660eebc2a3fdf21055561e1c1", 0xa8}, {&(0x7f0000001180)="00570c0a59f3f23f0bc4dcfad31fa271ca2dd9baa3bec13bed4a8d367b566f289e1510fde18e4a2a78c96a0982e97da5908b5260171fea526717cfc3018b8768f3", 0x41}, {&(0x7f0000001200)="739c929dc4d9e68a5c59276ab65d6e970bad62b5ae3c0e11930164d8212f3b94", 0x20}, {&(0x7f00000039c0)="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", 0x1000}, {0xffffffffffffffff}, {&(0x7f00000049c0)="80b20fe64b3ea90199a301e3572b6587a3059ad837deba7713f1aaddc8fa5d06f3df721b49bd80ad092364e1acecb8fb30c22b60a21cfef5cc92b4", 0x3b}, {&(0x7f0000004a00)="ad9552e5471b577cd695e0f999ed583a3e26d6ebe9d765e3b4666ed2", 0x1c}, {&(0x7f0000004a40)="ce07bcaf3ca091ebc53a6704ff6282374fe20a306447c703f422acc4e456596f02368815941796a8c366177715cfa384c2417acb6cd5e3e142fdf8fb7cc3e91c4cf75b25c576f6d8b30433e6928432e87bce8cb96f", 0x55}], 0x8, &(0x7f0000004b40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x38, 0x8000}}, {{0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000004b80)="d31027aa69dba45c1d6ebc5fa6aa06d148fbc83b62924635e0097d6671cf18604510f62cd50783d321846df05fd47ccef3101ab0963e74fcaedcb93a10d3cc7344c976157b6b4d58584c31efa8bdf8e3f9369c1cb97e824175794c0161775e", 0x5f}, {&(0x7f0000004c00)="d3d7b27c352f00d8d56efadc57556d3c7e8ab5eb4bb60ee0189f5d40d5bc63793b4892d51615878ce46a404c76f219a471be648fabd79a74005d15556ba1c9aadf3f8facd27465e3c437932980d2c12f37d2e574ccf783fd8c45eec655bc7ff3a600e65354f8c1a201b8b6c5abdf65e32c6387a964868dae74d0da561570bb935117492f30ed6141f1caeae469a4efe7a7119679d1bf977199795845351e9321b42c7b0e8052c96f9da288223728503d3a2e332f405ce5dc570defbbcde48686a4ce74f202f22ddd84bc25416d26c1188cf9e735d96544cbffbb2dd90a4e994660f9fa", 0xe3}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r1, @ANYBLOB="00000000ee401e07e4763c88aa744d35825ba6ef8ad14518c3fb0972daabe9d631293c75c719c4f05b3305000000000000007685a1c94fa6abe7c71a9d8475d421a3b49d5aeee7cd73c70a566ab7b297ad9bdd75bbe758b12fd6bd3dc08761cd745c38b82993306357cac2efc8ac8673cacfb666ffcbd9f469699442a7e9ea97fe5609bad2c3f0aa1f637e5556c003291295f5ef9c7f7c14ac4f929e4171790958d14ca4811be462c7af0b4819273f9eeb9004ab7a72d81fb4f9fe1a9f4a281ff12d"], 0x40, 0x20004000}}, {{&(0x7f0000005f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007400)=[{&(0x7f0000006000)="6ed6b587ba942874a7374fdbb16e81e66da648d5a062e5d9696d52dc149a5dd50cc9a551429c9f06ace51b9dfc7f19d76cae1ff1278c0cf985b22165b670e64e4e8040bca0b7c038a84a2cefe4cafe7d2aaefca25d7a7fc639eb8e266ccc34e1ec503fd1acb40ade99808aa59eb21fb30e0b40e217cf2996bbdc2aa836c24701f20e60bf7f6b54779ca37913199d79704668ff95793d124eea19b7b11b70da6a4e1e8fe8863216bcd7f22ef5d2de413a2755878bb887834ad11087906dbdd6e5249aa74006749a23412647ce47c1f4637fbd92b7", 0xd4}, {&(0x7f0000006100)="99d3f9299893fbce104e9d34f6421c5839c50cda887c850857ada55d0b967be9550fb35821e39603f307fe6dc2ce0773a4afc0bb1115b9b57e12ef2f7dd39f0eb757574b682bed65537e8d1d4c767162a8f27412796872b5622971ec0d88ad7cb49e38cfa42e7fa15cca46d7ed51f7de240147fee3aa82cf4d8c5f123ef46bc9203dfdd45296176b3a0e244f8e97cc470d435144ef4b2ee78ceccfc86e94332268f921f0", 0xa4}, {&(0x7f00000061c0)="8ee53ce26495b6804efc68a9dd77145fedaacb3aee36a1173eecd90b2f48e27b9c9c7b1029115e6e12cf6e9c199fd67bc6afcbe92031fb10b758735fd219406f005748e073370d5b7f30d689ffd4997e95d1a06ac47603d419907b814260eadf8d4d813bdb7d11fe32", 0x69}, {&(0x7f0000007240)="dfa8b7d654ea02eb78e7bdedfe748952a86694b45d27860b64ff6203108daf85d71291ffc0", 0x25}, {0x0}, {&(0x7f0000007300)="49cff1878285bc1c28a3b32df0ac7ad4957d0837dffeb582254a4a03cb6a64c907d869c574e54d6d1e8cc973bbcf6e8be0f0b6f2e924c8fd557d5662bd38090e6e34f713b597a9a38689310ad4d162fe698d438a9d2449a92b435d013559a9aa684ca6a5eab23c509bc05973f9de1093b14e8c99f6074d264644c0e445223f5928cfd17baf3b806e224f28a80bdcabbad5192c04db56d4bd0f5a0edc93", 0x9d}, {&(0x7f00000073c0)="7d8ca6cbec38ebfaf2ba40dca00748f3072f8988c01d8e5e51c033b71054957eff0553", 0x23}], 0x7, &(0x7f0000007c40)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r8, r10}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x28, 0x1, 0x1, [r14, r0, r0, r0, 0xffffffffffffffff, r15]}}], 0xa8, 0x4000}}], 0x5, 0x0) r16 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r16, 0x10e, 0xc, &(0x7f0000000000)={0xdce, 0x3, 0x7c, 0x7fff}, 0x10) sendmsg$nl_generic(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001600010a0000000000000000020000000c00008008"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r16, &(0x7f0000001e80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], 0x1a98}, 0x1, 0x0, 0x0, 0x1279fc2cef7b312d}, 0x44040) write(r0, &(0x7f0000000040)="05000000010000", 0x7) 159.702557ms ago: executing program 3 (id=1485): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000), 0x0) 84.999849ms ago: executing program 4 (id=1486): syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000440)={0x8d8, 0x4a8d9f63}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) pselect6(0x40, &(0x7f00000000c0)={0x17, 0x9, 0x300000, 0x7, 0xc, 0xb3a, 0xffffffff, 0x1}, &(0x7f0000000300)={0x400, 0x4, 0x1, 0x7, 0x7, 0x0, 0x705e, 0x9}, &(0x7f0000000340)={0x4, 0x1ff, 0x2fca61bd, 0x7, 0x6c00000000000, 0x7, 0x3, 0x7}, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x101]}, 0x8}) r5 = socket$kcm(0x10, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0xfffffffd, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r7) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRESDEC=r4], 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) 0s ago: executing program 3 (id=1487): syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x127e81) syz_usb_connect$uac3(0x0, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000002244060f80400001020301090293000301ff2010080b0002010130070904000000010130000a2401042f000800000013240304000403ff01b57e00000e000300010005240505050d24070105050000000200000009040100000102300009040101010102300009050109000240d4040a25250600000001040009040200000102300009040201010102300009058209ff03fa0a020a252503000000040900"], 0x0) syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x23c600, 0x0) kernel console output (not intermixed with test programs): ker/0:4) [ 317.189695][ T8860] netlink: 'syz.1.999': attribute type 8 has an invalid length. [ 317.319296][ T8866] __nla_validate_parse: 2 callbacks suppressed [ 317.319318][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1001'. [ 317.319339][ T8866] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1001'. [ 317.319355][ T8866] netlink: 540 bytes leftover after parsing attributes in process `syz.4.1001'. [ 317.483946][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.484029][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.546922][ T8874] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1005'. [ 319.492211][ T8888] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1008'. [ 319.869679][ T808] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 320.355760][ T808] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 320.355793][ T808] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 320.355822][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 320.355850][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 320.355879][ T808] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 320.359974][ T808] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 320.360005][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.360026][ T808] usb 5-1: Product: syz [ 320.360042][ T808] usb 5-1: Manufacturer: syz [ 320.360057][ T808] usb 5-1: SerialNumber: syz [ 320.542985][ T808] usb 5-1: config 0 descriptor?? [ 320.547001][ T8884] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 320.575553][ T808] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14 [ 321.370079][ T8900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.370690][ T8900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.563968][ T5871] usb 5-1: USB disconnect, device number 23 [ 321.564180][ C1] kbtab 5-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 321.738455][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1017'. [ 321.738484][ T8908] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1017'. [ 321.738501][ T8908] netlink: 540 bytes leftover after parsing attributes in process `syz.1.1017'. [ 322.040109][ T8915] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1018'. [ 322.401941][ T808] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 322.476131][ T8923] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1020'. [ 323.023685][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 323.023726][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.023767][ T808] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 323.023792][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.077241][ T808] usb 2-1: config 0 descriptor?? [ 323.852474][ T808] usbhid 2-1:0.0: can't add hid device: -71 [ 323.852622][ T808] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 323.872134][ T808] usb 2-1: USB disconnect, device number 22 [ 324.821329][ T8942] netlink: 'syz.3.1015': attribute type 8 has an invalid length. [ 325.412997][ T8954] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1031'. [ 325.435559][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'. [ 325.435586][ T8952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1029'. [ 325.435603][ T8952] netlink: 540 bytes leftover after parsing attributes in process `syz.3.1029'. [ 325.841921][ T5871] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 326.020130][ T8966] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1033'. [ 326.946770][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 326.946803][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 326.946831][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 326.946859][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 326.946897][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 326.951078][ T5871] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 326.951109][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.951131][ T5871] usb 1-1: Product: syz [ 326.951145][ T5871] usb 1-1: Manufacturer: syz [ 326.951161][ T5871] usb 1-1: SerialNumber: syz [ 326.963867][ T5871] usb 1-1: config 0 descriptor?? [ 326.965078][ T8957] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 326.982912][ T5871] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15 [ 327.242052][ T8977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.242686][ T8977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.443080][ C0] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 327.552725][ T5990] usb 1-1: USB disconnect, device number 19 [ 327.552782][ C1] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 327.614864][ T8983] netlink: 'syz.3.1039': attribute type 8 has an invalid length. [ 327.884230][ T8991] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1043'. [ 327.892139][ T5871] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 328.101222][ T5871] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 328.107489][ T5871] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 328.107519][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.107539][ T5871] usb 3-1: Product: syz [ 328.107552][ T5871] usb 3-1: Manufacturer: syz [ 328.107565][ T5871] usb 3-1: SerialNumber: syz [ 328.144880][ T5871] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 328.186979][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1045'. [ 328.610867][ T9007] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1046'. [ 329.270517][ T5871] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 329.271260][ T5871] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 329.271352][ T5871] usb 3-1: media controller created [ 329.419189][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 329.685720][ T5876] kernel read not supported for file /651/net/if_inet6 (pid: 5876 comm: kworker/0:6) [ 329.821866][ T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 330.000333][ T5871] usb 3-1: USB disconnect, device number 14 [ 330.482005][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 330.487522][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.487636][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 330.487651][ T43] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 330.487666][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 330.491463][ T43] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 330.491483][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.491496][ T43] usb 4-1: Product: syz [ 330.491504][ T43] usb 4-1: Manufacturer: syz [ 330.491512][ T43] usb 4-1: SerialNumber: syz [ 330.543572][ T43] usb 4-1: config 0 descriptor?? [ 330.555161][ T43] gs_usb 4-1:0.0: Required endpoints not found [ 330.749141][ T5871] usb 4-1: USB disconnect, device number 12 [ 331.095316][ T9039] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1056'. [ 332.401888][ T31] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 332.494891][ T9054] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 332.556063][ T9049] Bluetooth: MGMT ver 1.23 [ 332.563706][ T31] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 332.563735][ T31] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 332.563759][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 332.563783][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 332.563808][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 332.594949][ T31] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 332.594982][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.595000][ T31] usb 5-1: Product: syz [ 332.595014][ T31] usb 5-1: Manufacturer: syz [ 332.595028][ T31] usb 5-1: SerialNumber: syz [ 332.685021][ T31] usb 5-1: config 0 descriptor?? [ 332.687719][ T9046] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 332.709936][ T31] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input16 [ 332.858858][ C0] kbtab 5-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 332.898237][ T9056] FAULT_INJECTION: forcing a failure. [ 332.898237][ T9056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.898276][ T9056] CPU: 1 UID: 0 PID: 9056 Comm: syz.3.1064 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 332.898301][ T9056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 332.898313][ T9056] Call Trace: [ 332.898321][ T9056] [ 332.898330][ T9056] dump_stack_lvl+0xe8/0x150 [ 332.898367][ T9056] should_fail_ex+0x46b/0x600 [ 332.898403][ T9056] strncpy_from_user+0x36/0x2b0 [ 332.898434][ T9056] do_getname+0x77/0x250 [ 332.898464][ T9056] do_sys_openat2+0xca/0x200 [ 332.898496][ T9056] ? __pfx_do_sys_openat2+0x10/0x10 [ 332.898538][ T9056] __se_sys_openat2+0x223/0x2d0 [ 332.898568][ T9056] ? __pfx___se_sys_openat2+0x10/0x10 [ 332.898596][ T9056] ? __task_pid_nr_ns+0x28/0x470 [ 332.898630][ T9056] do_syscall_64+0x14d/0xf80 [ 332.898656][ T9056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.898679][ T9056] ? clear_bhb_loop+0x40/0x90 [ 332.898706][ T9056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.898728][ T9056] RIP: 0033:0x7f33da51c819 [ 332.898748][ T9056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.898765][ T9056] RSP: 002b:00007f33d8776028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 332.898789][ T9056] RAX: ffffffffffffffda RBX: 00007f33da795fa0 RCX: 00007f33da51c819 [ 332.898805][ T9056] RDX: 0000200000000380 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 332.898820][ T9056] RBP: 00007f33d8776090 R08: 0000000000000000 R09: 0000000000000000 [ 332.898833][ T9056] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 332.898855][ T9056] R13: 00007f33da796038 R14: 00007f33da795fa0 R15: 00007fffa3548448 [ 332.898890][ T9056] [ 333.164830][ T9059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.192377][ T9059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.281445][ T43] usb 5-1: USB disconnect, device number 24 [ 333.593992][ T9062] netlink: 'syz.3.1065': attribute type 8 has an invalid length. [ 334.591905][ T5799] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 334.670164][ T60] Bluetooth: hci3: command 0x0c1a tx timeout [ 334.670225][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 334.859756][ T9073] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1069'. [ 335.145303][ T9084] net_ratelimit: 12 callbacks suppressed [ 335.145327][ T9084] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 335.152990][ T9084] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 336.062047][ T5876] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 336.221747][ T9096] netlink: 'syz.0.1077': attribute type 8 has an invalid length. [ 336.611998][ T5876] usb 2-1: device descriptor read/64, error -71 [ 336.851910][ T5876] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 336.919767][ T9106] netlink: 'syz.2.1081': attribute type 10 has an invalid length. [ 336.920075][ T9106] bridge0: port 3(syz_tun) entered disabled state [ 336.920531][ T9106] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.920783][ T9106] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.943159][ T9108] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1082'. [ 336.992248][ T5876] usb 2-1: device descriptor read/64, error -71 [ 337.103968][ T5876] usb usb2-port1: attempt power cycle [ 337.445338][ T5876] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 337.549757][ T5876] usb 2-1: device descriptor read/8, error -71 [ 338.203833][ T5876] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 338.223056][ T5876] usb 2-1: device descriptor read/8, error -71 [ 338.348697][ T5876] usb usb2-port1: unable to enumerate USB device [ 338.839136][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1089'. [ 338.839154][ T9129] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1089'. [ 338.839164][ T9129] netlink: 540 bytes leftover after parsing attributes in process `syz.3.1089'. [ 339.403622][ T9131] netlink: 'syz.0.1090': attribute type 8 has an invalid length. [ 339.792621][ T9140] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1094'. [ 340.731208][ T9149] kernel profiling enabled (shift: 63) [ 340.731225][ T9149] profiling shift: 63 too large [ 342.155255][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'. [ 342.155274][ T9168] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1102'. [ 342.155284][ T9168] netlink: 540 bytes leftover after parsing attributes in process `syz.2.1102'. [ 342.654759][ T9175] FAULT_INJECTION: forcing a failure. [ 342.654759][ T9175] name failslab, interval 1, probability 0, space 0, times 0 [ 342.654797][ T9175] CPU: 1 UID: 0 PID: 9175 Comm: syz.1.1105 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 342.654822][ T9175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 342.654834][ T9175] Call Trace: [ 342.654843][ T9175] [ 342.654863][ T9175] dump_stack_lvl+0xe8/0x150 [ 342.654901][ T9175] should_fail_ex+0x46b/0x600 [ 342.654937][ T9175] should_failslab+0xa8/0x100 [ 342.654961][ T9175] __kmalloc_noprof+0xdf/0x7b0 [ 342.654980][ T9175] ? kfree+0x4d/0x6c0 [ 342.655008][ T9175] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 342.655050][ T9175] tomoyo_realpath_from_path+0xe3/0x5d0 [ 342.655087][ T9175] ? tomoyo_path_number_perm+0x219/0x630 [ 342.655109][ T9175] tomoyo_path_number_perm+0x246/0x630 [ 342.655134][ T9175] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 342.655159][ T9175] ? __lock_acquire+0x6b5/0x2cf0 [ 342.655218][ T9175] ? __fget_files+0x2a/0x420 [ 342.655250][ T9175] ? __fget_files+0x2a/0x420 [ 342.655274][ T9175] ? __fget_files+0x3a6/0x420 [ 342.655300][ T9175] ? __fget_files+0x2a/0x420 [ 342.655330][ T9175] security_file_ioctl+0xc3/0x2a0 [ 342.655357][ T9175] __se_sys_ioctl+0x47/0x170 [ 342.655384][ T9175] do_syscall_64+0x14d/0xf80 [ 342.655406][ T9175] ? trace_irq_disable+0x3b/0x150 [ 342.655431][ T9175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.655453][ T9175] ? clear_bhb_loop+0x40/0x90 [ 342.655481][ T9175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.655503][ T9175] RIP: 0033:0x7ffabf93c819 [ 342.655523][ T9175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.655542][ T9175] RSP: 002b:00007ffabdb8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 342.655566][ T9175] RAX: ffffffffffffffda RBX: 00007ffabfbb5fa0 RCX: 00007ffabf93c819 [ 342.655581][ T9175] RDX: 0000200000000040 RSI: 0000000000005412 RDI: 0000000000000003 [ 342.655596][ T9175] RBP: 00007ffabdb8e090 R08: 0000000000000000 R09: 0000000000000000 [ 342.655608][ T9175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.655622][ T9175] R13: 00007ffabfbb6038 R14: 00007ffabfbb5fa0 R15: 00007ffeee054a38 [ 342.655658][ T9175] [ 342.655781][ T9175] ERROR: Out of memory at tomoyo_realpath_from_path. [ 343.053561][ T9178] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1107'. [ 343.653419][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1113'. [ 343.653438][ T9198] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1113'. [ 343.653448][ T9198] netlink: 540 bytes leftover after parsing attributes in process `syz.4.1113'. [ 346.616527][ T9225] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1120'. [ 346.750651][ T31] kernel read not supported for file /617/net/if_inet6 (pid: 31 comm: kworker/1:0) [ 347.179498][ T9238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1126'. [ 348.549188][ T9253] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 348.652757][ T9259] FAULT_INJECTION: forcing a failure. [ 348.652757][ T9259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.652795][ T9259] CPU: 0 UID: 0 PID: 9259 Comm: syz.4.1133 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 348.652830][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 348.652844][ T9259] Call Trace: [ 348.652853][ T9259] [ 348.652863][ T9259] dump_stack_lvl+0xe8/0x150 [ 348.652903][ T9259] should_fail_ex+0x46b/0x600 [ 348.652940][ T9259] _copy_from_user+0x2d/0xb0 [ 348.652964][ T9259] do_tcp_setsockopt+0x4f3/0x2060 [ 348.653001][ T9259] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 348.653040][ T9259] ? __fget_files+0x2a/0x420 [ 348.653072][ T9259] ? sock_common_setsockopt+0x36/0xc0 [ 348.653103][ T9259] ? tcp_setsockopt+0x3d/0xe0 [ 348.653129][ T9259] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 348.653162][ T9259] do_sock_setsockopt+0x17c/0x1b0 [ 348.653193][ T9259] __x64_sys_setsockopt+0x143/0x1b0 [ 348.653224][ T9259] do_syscall_64+0x14d/0xf80 [ 348.653257][ T9259] ? trace_irq_disable+0x3b/0x150 [ 348.653284][ T9259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.653307][ T9259] ? clear_bhb_loop+0x40/0x90 [ 348.653335][ T9259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.653357][ T9259] RIP: 0033:0x7f2721b6c819 [ 348.653378][ T9259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.653397][ T9259] RSP: 002b:00007f271fd9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 348.653422][ T9259] RAX: ffffffffffffffda RBX: 00007f2721de6090 RCX: 00007f2721b6c819 [ 348.653438][ T9259] RDX: 0000000000000024 RSI: 0000000000000006 RDI: 0000000000000003 [ 348.653452][ T9259] RBP: 00007f271fd9d090 R08: 0000000000000004 R09: 0000000000000000 [ 348.653466][ T9259] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 348.653480][ T9259] R13: 00007f2721de6128 R14: 00007f2721de6090 R15: 00007ffcc0f40e68 [ 348.653515][ T9259] [ 349.460791][ T9274] 9p: Bad value for 'rfdno' [ 349.674815][ T9280] FAULT_INJECTION: forcing a failure. [ 349.674815][ T9280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.674840][ T9280] CPU: 0 UID: 0 PID: 9280 Comm: syz.4.1141 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 349.674855][ T9280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 349.674863][ T9280] Call Trace: [ 349.674868][ T9280] [ 349.674874][ T9280] dump_stack_lvl+0xe8/0x150 [ 349.674897][ T9280] should_fail_ex+0x46b/0x600 [ 349.674919][ T9280] _copy_from_user+0x2d/0xb0 [ 349.674932][ T9280] binder_ioctl_write_read+0x167/0xa590 [ 349.674947][ T9280] ? is_bpf_text_address+0x26/0x2b0 [ 349.674972][ T9280] ? try_to_take_rt_mutex+0x840/0xb00 [ 349.674985][ T9280] ? __kernel_text_address+0xd/0x30 [ 349.675004][ T9280] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 349.675018][ T9280] ? __lock_acquire+0x6b5/0x2cf0 [ 349.675031][ T9280] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 349.675045][ T9280] ? __lock_acquire+0x6b5/0x2cf0 [ 349.675064][ T9280] ? do_raw_spin_lock+0x12b/0x2f0 [ 349.675087][ T9280] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 349.675101][ T9280] ? lockdep_hardirqs_on+0x7a/0x110 [ 349.675115][ T9280] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 349.675129][ T9280] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 349.675147][ T9280] ? reacquire_held_locks+0x104/0x190 [ 349.675161][ T9280] ? rt_spin_lock+0x1e0/0x400 [ 349.675179][ T9280] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 349.675199][ T9280] ? rt_spin_unlock+0x14f/0x200 [ 349.675222][ T9280] ? binder_get_thread+0x177/0x6d0 [ 349.675237][ T9280] binder_ioctl+0x426/0x1b70 [ 349.675251][ T9280] ? tomoyo_path_number_perm+0x219/0x630 [ 349.675264][ T9280] ? tomoyo_path_number_perm+0x219/0x630 [ 349.675278][ T9280] ? do_vfs_ioctl+0x117b/0x1540 [ 349.675290][ T9280] ? __pfx_binder_ioctl+0x10/0x10 [ 349.675303][ T9280] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 349.675315][ T9280] ? __pfx_smack_log+0x10/0x10 [ 349.675332][ T9280] ? smk_access+0x14c/0x4e0 [ 349.675352][ T9280] ? smk_tskacc+0x311/0x3a0 [ 349.675371][ T9280] ? smack_file_ioctl+0x2c2/0x360 [ 349.675391][ T9280] ? __pfx_smack_file_ioctl+0x10/0x10 [ 349.675415][ T9280] ? __fget_files+0x2a/0x420 [ 349.675430][ T9280] ? __fget_files+0x3a6/0x420 [ 349.675444][ T9280] ? __fget_files+0x2a/0x420 [ 349.675461][ T9280] ? bpf_lsm_file_ioctl+0x9/0x20 [ 349.675474][ T9280] ? __pfx_binder_ioctl+0x10/0x10 [ 349.675487][ T9280] __se_sys_ioctl+0xff/0x170 [ 349.675500][ T9280] do_syscall_64+0x14d/0xf80 [ 349.675514][ T9280] ? trace_irq_disable+0x3b/0x150 [ 349.675527][ T9280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.675540][ T9280] ? clear_bhb_loop+0x40/0x90 [ 349.675561][ T9280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.675573][ T9280] RIP: 0033:0x7f2721b6c819 [ 349.675586][ T9280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.675597][ T9280] RSP: 002b:00007f271fdbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.675611][ T9280] RAX: ffffffffffffffda RBX: 00007f2721de5fa0 RCX: 00007f2721b6c819 [ 349.675620][ T9280] RDX: 0000200000000ac0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 349.675628][ T9280] RBP: 00007f271fdbe090 R08: 0000000000000000 R09: 0000000000000000 [ 349.675635][ T9280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.675643][ T9280] R13: 00007f2721de6038 R14: 00007f2721de5fa0 R15: 00007ffcc0f40e68 [ 349.675662][ T9280] [ 349.675667][ T9280] binder: 9279:9280 ioctl c0306201 200000000ac0 returned -14 [ 350.694380][ T9291] FAULT_INJECTION: forcing a failure. [ 350.694380][ T9291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.694419][ T9291] CPU: 0 UID: 0 PID: 9291 Comm: syz.3.1144 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 350.694444][ T9291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 350.694457][ T9291] Call Trace: [ 350.694466][ T9291] [ 350.694560][ T9291] dump_stack_lvl+0xe8/0x150 [ 350.694599][ T9291] should_fail_ex+0x46b/0x600 [ 350.694634][ T9291] _copy_from_user+0x2d/0xb0 [ 350.694658][ T9291] udmabuf_ioctl+0xfa/0x310 [ 350.694682][ T9291] ? __pfx_smack_file_ioctl+0x10/0x10 [ 350.694717][ T9291] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 350.694742][ T9291] ? ksys_write+0x202/0x270 [ 350.694782][ T9291] ? bpf_lsm_file_ioctl+0x9/0x20 [ 350.694805][ T9291] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 350.694828][ T9291] __se_sys_ioctl+0xff/0x170 [ 350.694853][ T9291] do_syscall_64+0x14d/0xf80 [ 350.694878][ T9291] ? trace_irq_disable+0x3b/0x150 [ 350.694904][ T9291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.694926][ T9291] ? clear_bhb_loop+0x40/0x90 [ 350.694953][ T9291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.694975][ T9291] RIP: 0033:0x7f33da51c819 [ 350.694995][ T9291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.695014][ T9291] RSP: 002b:00007f33d8776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.695038][ T9291] RAX: ffffffffffffffda RBX: 00007f33da795fa0 RCX: 00007f33da51c819 [ 350.695053][ T9291] RDX: 0000000000000000 RSI: 0000000040187542 RDI: 0000000000000003 [ 350.695067][ T9291] RBP: 00007f33d8776090 R08: 0000000000000000 R09: 0000000000000000 [ 350.695081][ T9291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.695094][ T9291] R13: 00007f33da796038 R14: 00007f33da795fa0 R15: 00007fffa3548448 [ 350.695128][ T9291] [ 350.882202][ T1239] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 350.952027][ T5990] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 351.045977][ T1239] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 351.046012][ T1239] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 351.046039][ T1239] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 351.046067][ T1239] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 351.046096][ T1239] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 351.059171][ T1239] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 351.059204][ T1239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.059224][ T1239] usb 1-1: Product: syz [ 351.059239][ T1239] usb 1-1: Manufacturer: syz [ 351.059254][ T1239] usb 1-1: SerialNumber: syz [ 351.091624][ T9295] FAULT_INJECTION: forcing a failure. [ 351.091624][ T9295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.091668][ T9295] CPU: 1 UID: 0 PID: 9295 Comm: syz.4.1147 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 351.091690][ T9295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 351.091708][ T9295] Call Trace: [ 351.091716][ T9295] [ 351.091734][ T9295] dump_stack_lvl+0xe8/0x150 [ 351.091772][ T9295] should_fail_ex+0x46b/0x600 [ 351.091814][ T9295] _copy_from_iter+0x1d3/0x1670 [ 351.091854][ T9295] ? __local_bh_enable+0x1e1/0x2f0 [ 351.091883][ T9295] ? __pfx__copy_from_iter+0x10/0x10 [ 351.091915][ T9295] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 351.091943][ T9295] ? lockdep_hardirqs_on+0x7a/0x110 [ 351.091970][ T9295] ? page_copy_sane+0x4e/0x270 [ 351.092002][ T9295] copy_page_from_iter+0xdd/0x170 [ 351.092038][ T9295] rds_message_copy_from_user+0x4cf/0xad0 [ 351.092081][ T9295] ? __pfx_rds_message_copy_from_user+0x10/0x10 [ 351.092113][ T9295] ? __asan_memset+0x22/0x50 [ 351.092145][ T9295] ? rds_message_alloc_sgs+0xab/0x180 [ 351.092178][ T9295] rds_sendmsg+0xd7c/0x2130 [ 351.092221][ T9295] ? __pfx_rds_sendmsg+0x10/0x10 [ 351.092259][ T9295] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 351.092290][ T9295] ? __kernel_text_address+0xd/0x30 [ 351.092315][ T9295] ? unwind_get_return_address+0x4d/0x90 [ 351.092341][ T9295] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 351.092374][ T9295] ____sys_sendmsg+0x94c/0x9c0 [ 351.092406][ T9295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.092441][ T9295] ? import_iovec+0x73/0xa0 [ 351.092463][ T9295] ___sys_sendmsg+0x2a5/0x360 [ 351.092492][ T9295] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.092551][ T9295] ? __fget_files+0x2a/0x420 [ 351.092586][ T9295] ? __fget_files+0x3a6/0x420 [ 351.092625][ T9295] __x64_sys_sendmsg+0x1c3/0x2a0 [ 351.092655][ T9295] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.092690][ T9295] ? __pfx_ksys_write+0x10/0x10 [ 351.092741][ T9295] do_syscall_64+0x14d/0xf80 [ 351.092764][ T9295] ? trace_irq_disable+0x3b/0x150 [ 351.092787][ T9295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.092808][ T9295] ? clear_bhb_loop+0x40/0x90 [ 351.092833][ T9295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.092855][ T9295] RIP: 0033:0x7f2721b6c819 [ 351.092875][ T9295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.092894][ T9295] RSP: 002b:00007f271fdbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.092916][ T9295] RAX: ffffffffffffffda RBX: 00007f2721de5fa0 RCX: 00007f2721b6c819 [ 351.092931][ T9295] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 0000000000000003 [ 351.092945][ T9295] RBP: 00007f271fdbe090 R08: 0000000000000000 R09: 0000000000000000 [ 351.092956][ T9295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.092968][ T9295] R13: 00007f2721de6038 R14: 00007f2721de5fa0 R15: 00007ffcc0f40e68 [ 351.092998][ T9295] [ 351.111814][ T5990] usb 3-1: Using ep0 maxpacket: 16 [ 351.122241][ T5990] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 351.122273][ T5990] usb 3-1: config 0 has no interface number 0 [ 351.190881][ T5990] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 351.190915][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.190937][ T5990] usb 3-1: Product: syz [ 351.190953][ T5990] usb 3-1: Manufacturer: syz [ 351.190969][ T5990] usb 3-1: SerialNumber: syz [ 351.434222][ T1239] usb 1-1: config 0 descriptor?? [ 351.435183][ T9289] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 351.553986][ T5990] usb 3-1: config 0 descriptor?? [ 351.812734][ T1239] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 351.834087][ T5990] hub 3-1:0.132: bad descriptor, ignoring hub [ 351.834127][ T5990] hub 3-1:0.132: probe with driver hub failed with error -5 [ 351.903785][ T9306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.906048][ T9307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.907407][ T9306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.911099][ T9307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.967623][ T5990] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input18 [ 352.017840][ C1] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 352.017844][ T1239] usb 1-1: USB disconnect, device number 20 [ 352.055987][ T9287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.056453][ T9287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.291061][ T9309] 9p: Bad value for 'rfdno' [ 355.778080][ T9340] FAULT_INJECTION: forcing a failure. [ 355.778080][ T9340] name failslab, interval 1, probability 0, space 0, times 0 [ 355.778106][ T9340] CPU: 1 UID: 0 PID: 9340 Comm: syz.4.1159 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 355.778121][ T9340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 355.778129][ T9340] Call Trace: [ 355.778134][ T9340] [ 355.778139][ T9340] dump_stack_lvl+0xe8/0x150 [ 355.778162][ T9340] should_fail_ex+0x46b/0x600 [ 355.778182][ T9340] should_failslab+0xa8/0x100 [ 355.778197][ T9340] kmem_cache_alloc_noprof+0x87/0x680 [ 355.778215][ T9340] ? locks_get_lock_context+0x33f/0x5e0 [ 355.778232][ T9340] ? posix_lock_inode+0x23f/0x3db0 [ 355.778250][ T9340] posix_lock_inode+0x23f/0x3db0 [ 355.778264][ T9340] ? smk_tskacc+0x311/0x3a0 [ 355.778283][ T9340] ? smack_file_lock+0x1e4/0x280 [ 355.778302][ T9340] ? __pfx_smack_file_lock+0x10/0x10 [ 355.778324][ T9340] ? __pfx_posix_lock_inode+0x10/0x10 [ 355.778345][ T9340] fcntl_setlk+0x9de/0x10c0 [ 355.778361][ T9340] ? get_pid_task+0x20/0x1f0 [ 355.778383][ T9340] ? __pfx_fcntl_setlk+0x10/0x10 [ 355.778408][ T9340] do_fcntl+0x981/0x19e0 [ 355.778428][ T9340] ? smack_file_fcntl+0x27a/0x320 [ 355.778446][ T9340] ? __pfx_do_fcntl+0x10/0x10 [ 355.778464][ T9340] ? __pfx_smack_file_fcntl+0x10/0x10 [ 355.778493][ T9340] ? ksys_write+0x202/0x270 [ 355.778540][ T9340] ? bpf_lsm_file_fcntl+0x9/0x20 [ 355.778568][ T9340] __se_sys_fcntl+0xcb/0x160 [ 355.778600][ T9340] do_syscall_64+0x14d/0xf80 [ 355.778623][ T9340] ? trace_irq_disable+0x3b/0x150 [ 355.778643][ T9340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.778656][ T9340] ? clear_bhb_loop+0x40/0x90 [ 355.778670][ T9340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.778682][ T9340] RIP: 0033:0x7f2721b6c819 [ 355.778694][ T9340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.778706][ T9340] RSP: 002b:00007f271fdbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 355.778720][ T9340] RAX: ffffffffffffffda RBX: 00007f2721de5fa0 RCX: 00007f2721b6c819 [ 355.778729][ T9340] RDX: 0000200000000140 RSI: 0000000000000007 RDI: 0000000000000003 [ 355.778737][ T9340] RBP: 00007f271fdbe090 R08: 0000000000000000 R09: 0000000000000000 [ 355.778744][ T9340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.778752][ T9340] R13: 00007f2721de6038 R14: 00007f2721de5fa0 R15: 00007ffcc0f40e68 [ 355.778773][ T9340] [ 355.871951][ T5990] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 356.137894][ T5990] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 356.137929][ T5990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.137951][ T5990] usb 4-1: Product: syz [ 356.137967][ T5990] usb 4-1: Manufacturer: syz [ 356.137981][ T5990] usb 4-1: SerialNumber: syz [ 356.213428][ T5990] usb 4-1: config 0 descriptor?? [ 356.228718][ T5990] hub 4-1:0.0: bad descriptor, ignoring hub [ 356.228762][ T5990] hub 4-1:0.0: probe with driver hub failed with error -5 [ 356.659606][ T9346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.663251][ T9346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.837603][ T9346] bridge0: port 3(syz_tun) entered blocking state [ 356.837944][ T9346] bridge0: port 3(syz_tun) entered disabled state [ 356.839041][ T9346] syz_tun: entered allmulticast mode [ 356.866241][ T9346] syz_tun: entered promiscuous mode [ 356.883005][ T9346] bridge0: port 3(syz_tun) entered blocking state [ 356.884656][ T9346] bridge0: port 3(syz_tun) entered forwarding state [ 356.934788][ T9346] netlink: 'syz.3.1158': attribute type 10 has an invalid length. [ 356.942802][ T9346] bridge0: port 3(syz_tun) entered disabled state [ 356.945058][ T9346] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.952789][ T9346] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.021666][ T9346] bridge0: port 3(syz_tun) entered blocking state [ 357.023860][ T9346] bridge0: port 3(syz_tun) entered forwarding state [ 357.025670][ T9346] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.026510][ T9346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.028602][ T9346] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.029637][ T9346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.069150][ T9346] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 358.051162][ T31] usb 3-1: USB disconnect, device number 15 [ 358.248635][ T9350] 9p: Bad value for 'rfdno' [ 358.350917][ T9352] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 359.202855][ T5990] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 359.205655][ T5990] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 359.205718][ T5990] dib0700: firmware download failed at 7 with -22 [ 359.293206][ T5990] usb 4-1: USB disconnect, device number 13 [ 359.334975][ T9360] FAULT_INJECTION: forcing a failure. [ 359.334975][ T9360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.335000][ T9360] CPU: 0 UID: 0 PID: 9360 Comm: syz.3.1166 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 359.335015][ T9360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 359.335023][ T9360] Call Trace: [ 359.335027][ T9360] [ 359.335033][ T9360] dump_stack_lvl+0xe8/0x150 [ 359.335057][ T9360] should_fail_ex+0x46b/0x600 [ 359.335077][ T9360] _copy_from_user+0x2d/0xb0 [ 359.335090][ T9360] __sys_bpf+0x229/0x950 [ 359.335108][ T9360] ? __pfx___sys_bpf+0x10/0x10 [ 359.335121][ T9360] ? rt_mutex_slowunlock+0x1cb/0x300 [ 359.335149][ T9360] ? ksys_write+0x248/0x270 [ 359.335169][ T9360] ? __pfx_ksys_write+0x10/0x10 [ 359.335190][ T9360] __x64_sys_bpf+0x7c/0x90 [ 359.335205][ T9360] do_syscall_64+0x14d/0xf80 [ 359.335219][ T9360] ? trace_irq_disable+0x3b/0x150 [ 359.335233][ T9360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.335245][ T9360] ? clear_bhb_loop+0x40/0x90 [ 359.335260][ T9360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.335272][ T9360] RIP: 0033:0x7f33da51c819 [ 359.335284][ T9360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.335295][ T9360] RSP: 002b:00007f33d8776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 359.335310][ T9360] RAX: ffffffffffffffda RBX: 00007f33da795fa0 RCX: 00007f33da51c819 [ 359.335318][ T9360] RDX: 0000000000000094 RSI: 00002000000039c0 RDI: 0000000000000005 [ 359.335326][ T9360] RBP: 00007f33d8776090 R08: 0000000000000000 R09: 0000000000000000 [ 359.335334][ T9360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.335341][ T9360] R13: 00007f33da796038 R14: 00007f33da795fa0 R15: 00007fffa3548448 [ 359.335359][ T9360] [ 359.414532][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1165'. [ 359.612421][ T9361] bond2: entered allmulticast mode [ 359.612811][ T9361] 8021q: adding VLAN 0 to HW filter on device bond2 [ 359.972516][ T31] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 360.911842][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 360.914850][ T31] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 360.914910][ T31] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 360.914932][ T31] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 360.914957][ T31] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 360.914982][ T31] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.915025][ T31] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 360.915048][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.197324][ T31] usb 5-1: usb_control_msg returned -32 [ 361.197380][ T31] usbtmc 5-1:16.0: can't read capabilities [ 361.311890][ T1239] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 361.351938][ T43] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 361.464368][ T1239] usb 3-1: Using ep0 maxpacket: 32 [ 361.494620][ T1239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.494657][ T1239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.494711][ T1239] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 361.494736][ T1239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.507935][ T1239] usb 3-1: config 0 descriptor?? [ 361.523235][ T1239] hub 3-1:0.0: USB hub found [ 361.550608][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 361.550648][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.550688][ T43] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 361.550712][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.598282][ T43] usb 2-1: config 0 descriptor?? [ 361.914733][ T5876] usb 5-1: USB disconnect, device number 25 [ 361.986689][ T1239] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 362.027429][ T1239] usbhid 3-1:0.0: can't add hid device: -71 [ 362.027575][ T1239] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 362.106099][ T1239] usb 3-1: USB disconnect, device number 16 [ 362.416151][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 362.416281][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 362.481876][ T43] usb 2-1: USB disconnect, device number 27 [ 362.754484][ T9409] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 366.292011][ T43] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 366.443765][ T43] usb 2-1: config 69 has an invalid interface number: 110 but max is 1 [ 366.443798][ T43] usb 2-1: config 69 has an invalid interface number: 79 but max is 1 [ 366.443821][ T43] usb 2-1: config 69 contains an unexpected descriptor of type 0x2, skipping [ 366.443841][ T43] usb 2-1: config 69 has an invalid descriptor of length 1, skipping remainder of the config [ 366.443862][ T43] usb 2-1: config 69 has no interface number 0 [ 366.443879][ T43] usb 2-1: config 69 has no interface number 1 [ 366.443965][ T43] usb 2-1: config 69 interface 79 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 366.443995][ T43] usb 2-1: config 69 interface 79 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 366.444022][ T43] usb 2-1: config 69 interface 110 has no altsetting 0 [ 366.444042][ T43] usb 2-1: config 69 interface 79 has no altsetting 0 [ 366.446517][ T43] usb 2-1: New USB device found, idVendor=1435, idProduct=0326, bcdDevice=a0.5d [ 366.446548][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.446569][ T43] usb 2-1: Product: syz [ 366.446584][ T43] usb 2-1: Manufacturer: syz [ 366.446598][ T43] usb 2-1: SerialNumber: syz [ 366.521905][ T31] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 366.674292][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.674376][ T31] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 366.674393][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.713771][ T31] usb 1-1: config 0 descriptor?? [ 366.925622][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 366.926065][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 366.968865][ T9438] FAULT_INJECTION: forcing a failure. [ 366.968865][ T9438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.968891][ T9438] CPU: 0 UID: 0 PID: 9438 Comm: syz.4.1191 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 366.968908][ T9438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 366.968920][ T9438] Call Trace: [ 366.968928][ T9438] [ 366.968937][ T9438] dump_stack_lvl+0xe8/0x150 [ 366.968975][ T9438] should_fail_ex+0x46b/0x600 [ 366.969016][ T9438] _copy_from_user+0x2d/0xb0 [ 366.969038][ T9438] vmemdup_user+0x5e/0xd0 [ 366.969067][ T9438] map_lookup_and_delete_elem+0x34f/0xa60 [ 366.969098][ T9438] ? bpf_lsm_bpf+0x9/0x20 [ 366.969126][ T9438] __sys_bpf+0x77c/0x950 [ 366.969155][ T9438] ? __pfx___sys_bpf+0x10/0x10 [ 366.969178][ T9438] ? rt_mutex_slowunlock+0x1cb/0x300 [ 366.969224][ T9438] ? ksys_write+0x248/0x270 [ 366.969244][ T9438] ? __pfx_ksys_write+0x10/0x10 [ 366.969276][ T9438] __x64_sys_bpf+0x7c/0x90 [ 366.969302][ T9438] do_syscall_64+0x14d/0xf80 [ 366.969325][ T9438] ? trace_irq_disable+0x3b/0x150 [ 366.969349][ T9438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.969369][ T9438] ? clear_bhb_loop+0x40/0x90 [ 366.969391][ T9438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.969403][ T9438] RIP: 0033:0x7f2721b6c819 [ 366.969415][ T9438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.969436][ T9438] RSP: 002b:00007f271fdbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 366.969460][ T9438] RAX: ffffffffffffffda RBX: 00007f2721de5fa0 RCX: 00007f2721b6c819 [ 366.969476][ T9438] RDX: 0000000000000020 RSI: 0000200000000580 RDI: 0000000000000015 [ 366.969490][ T9438] RBP: 00007f271fdbe090 R08: 0000000000000000 R09: 0000000000000000 [ 366.969503][ T9438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.969515][ T9438] R13: 00007f2721de6038 R14: 00007f2721de5fa0 R15: 00007ffcc0f40e68 [ 366.969548][ T9438] [ 367.188940][ T31] usb 1-1: USB disconnect, device number 21 [ 367.651917][ T31] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 367.801945][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 367.959655][ T31] usb 1-1: config index 0 descriptor too short (expected 36, got 27) [ 367.959725][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 367.959772][ T31] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 367.959797][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.028109][ T31] usb 1-1: config 0 descriptor?? [ 368.043369][ T31] ldusb 1-1:0.0: Interrupt in endpoint not found [ 368.046361][ T31] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 368.883026][ T9455] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 368.931837][ T5990] usb 1-1: USB disconnect, device number 22 [ 368.986585][ T9458] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 369.821455][ T43] usb 2-1: reset high-speed USB device number 28 using dummy_hcd [ 369.849770][ T9467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'. [ 369.849789][ T9467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1202'. [ 369.849799][ T9467] netlink: 540 bytes leftover after parsing attributes in process `syz.0.1202'. [ 369.932091][ T5990] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 370.087133][ T43] usb 2-1: device firmware changed [ 370.094653][ T5990] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 370.094683][ T5990] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 370.094707][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 370.094732][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 370.094755][ T5990] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 370.097938][ T5990] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 370.097965][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.097992][ T5990] usb 5-1: Product: syz [ 370.098005][ T5990] usb 5-1: Manufacturer: syz [ 370.098019][ T5990] usb 5-1: SerialNumber: syz [ 370.135966][ T5990] usb 5-1: config 0 descriptor?? [ 370.137198][ T9465] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 370.246597][ T43] carl9170 2-1:69.79: probe with driver carl9170 failed with error -22 [ 370.247926][ T5990] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input19 [ 370.288473][ C0] kbtab 5-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 370.312533][ T43] usb 2-1: USB disconnect, device number 28 [ 370.601934][ T43] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 370.606289][ T808] usb 5-1: USB disconnect, device number 26 [ 370.755965][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.756022][ T43] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 370.756046][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.856577][ T43] usb 2-1: config 0 descriptor?? [ 371.087560][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 371.087708][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 371.113747][ T43] usb 2-1: USB disconnect, device number 29 [ 371.285741][ T5112] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 371.492045][ T808] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 371.601992][ T43] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 371.644705][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.644745][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.644784][ T808] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 371.644807][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.712768][ T808] usb 3-1: config 0 descriptor?? [ 371.771890][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 371.775755][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.775871][ T43] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 371.775897][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.797840][ T43] usb 2-1: config 0 descriptor?? [ 371.847167][ T43] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 371.912051][ T5801] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 371.950068][ T43] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 372.061813][ T5801] usb 4-1: Using ep0 maxpacket: 16 [ 372.066816][ T5801] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 372.066847][ T5801] usb 4-1: config 0 has no interface number 0 [ 372.092915][ T5801] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 372.092950][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.092973][ T5801] usb 4-1: Product: syz [ 372.092988][ T5801] usb 4-1: Manufacturer: syz [ 372.093003][ T5801] usb 4-1: SerialNumber: syz [ 372.137600][ T5801] usb 4-1: config 0 descriptor?? [ 372.148984][ T5801] hub 4-1:0.132: bad descriptor, ignoring hub [ 372.149029][ T5801] hub 4-1:0.132: probe with driver hub failed with error -5 [ 372.184379][ T5801] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input20 [ 372.242107][ T808] hid-led 0003:27B8:01ED.0007: collection stack underflow [ 372.242706][ T808] hid-led 0003:27B8:01ED.0007: item 0 1 0 12 parsing failed [ 372.246343][ T808] hid-led 0003:27B8:01ED.0007: probe with driver hid-led failed with error -22 [ 372.285363][ T1239] usb 2-1: USB disconnect, device number 30 [ 372.342579][ T1239] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 372.495783][ T9494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.496366][ T9494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.528377][ T9494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.528703][ T9494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.279950][ T808] usb 3-1: USB disconnect, device number 17 [ 373.521902][ T43] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 374.035971][ T43] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 374.036077][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.036381][ T43] usb 2-1: Product: syz [ 374.036675][ T43] usb 2-1: Manufacturer: syz [ 374.036759][ T43] usb 2-1: SerialNumber: syz [ 374.279567][ T43] usb 2-1: config 0 descriptor?? [ 374.293203][ T43] hub 2-1:0.0: bad descriptor, ignoring hub [ 374.293245][ T43] hub 2-1:0.0: probe with driver hub failed with error -5 [ 374.669506][ T9518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.672901][ T9518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.816757][ T9518] netlink: 'syz.1.1214': attribute type 10 has an invalid length. [ 374.822588][ T9518] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.825625][ T9518] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.897052][ T9518] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.897852][ T9518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.899994][ T9518] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.901076][ T9518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.933011][ T9518] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 376.342267][ T5953] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 376.497355][ T5953] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.497413][ T5953] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 376.497596][ T5953] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 376.497715][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.563741][ T5953] usb 3-1: config 0 descriptor?? [ 376.592046][ T5953] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 377.180067][ T43] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 377.207683][ T43] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 377.207739][ T43] dib0700: firmware download failed at 7 with -22 [ 377.253407][ T43] usb 2-1: USB disconnect, device number 31 [ 377.361947][ T5876] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 377.529074][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.529113][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.529164][ T5876] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 377.529188][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.548867][ T5876] usb 5-1: config 0 descriptor?? [ 377.571833][ T5147] usb 4-1: reset high-speed USB device number 14 using dummy_hcd [ 377.592394][ T5147] usb 4-1: device reset changed ep0 maxpacket size! [ 377.626788][ T5990] usb 4-1: USB disconnect, device number 14 [ 377.993407][ T5953] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 378.283869][ T5953] usb 2-1: Using ep0 maxpacket: 16 [ 378.307123][ T5990] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 378.574925][ T5876] hid-led 0003:27B8:01ED.0008: collection stack underflow [ 378.574964][ T5876] hid-led 0003:27B8:01ED.0008: item 0 1 0 12 parsing failed [ 378.585988][ T5876] hid-led 0003:27B8:01ED.0008: probe with driver hid-led failed with error -22 [ 378.709177][ T5990] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 378.709213][ T5990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.709236][ T5990] usb 4-1: Product: syz [ 378.709251][ T5990] usb 4-1: Manufacturer: syz [ 378.709267][ T5990] usb 4-1: SerialNumber: syz [ 378.719800][ T5990] usb 4-1: config 0 descriptor?? [ 378.728153][ T5990] hub 4-1:0.0: bad descriptor, ignoring hub [ 378.728197][ T5990] hub 4-1:0.0: probe with driver hub failed with error -5 [ 378.845081][ T5953] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.845118][ T5953] usb 2-1: config 0 interface 0 has no altsetting 0 [ 378.845157][ T5953] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 378.845182][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.936067][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.936226][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.963711][ T5953] usb 2-1: config 0 descriptor?? [ 378.990953][ T5953] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 379.108292][ T5801] usb 3-1: USB disconnect, device number 18 [ 379.498049][ T9565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.504671][ T9565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.651326][ T9565] netlink: 'syz.3.1232': attribute type 10 has an invalid length. [ 379.654851][ T9565] bridge0: port 3(syz_tun) entered disabled state [ 379.655990][ T9565] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.657662][ T9565] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.367261][ T5953] usb 5-1: USB disconnect, device number 27 [ 380.729585][ T43] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 380.877863][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 380.890804][ T43] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 380.890836][ T43] usb 1-1: config 0 has no interface number 0 [ 380.891980][ T5953] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 380.926330][ T43] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 380.926372][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.926395][ T43] usb 1-1: Product: syz [ 380.926412][ T43] usb 1-1: Manufacturer: syz [ 380.926427][ T43] usb 1-1: SerialNumber: syz [ 380.986991][ T43] usb 1-1: config 0 descriptor?? [ 381.005217][ T43] hub 1-1:0.132: bad descriptor, ignoring hub [ 381.005261][ T43] hub 1-1:0.132: probe with driver hub failed with error -5 [ 381.045526][ T43] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input21 [ 381.084800][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.084837][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.085240][ T5953] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 381.085264][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.133916][ T9555] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1237'. [ 381.163471][ T5953] usb 5-1: config 0 descriptor?? [ 381.426938][ T9581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.433626][ T9581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.452516][ T9571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.453576][ T9571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.520287][ T5990] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 381.615301][ T5990] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 381.615346][ T5990] dib0700: firmware download failed at 7 with -22 [ 381.665984][ T5990] usb 4-1: USB disconnect, device number 15 [ 381.756494][ T5953] hid-led 0003:27B8:01ED.0009: collection stack underflow [ 381.756519][ T5953] hid-led 0003:27B8:01ED.0009: item 0 1 0 12 parsing failed [ 381.757101][ T5953] hid-led 0003:27B8:01ED.0009: probe with driver hid-led failed with error -22 [ 382.307932][ T5876] usb 5-1: USB disconnect, device number 28 [ 382.633816][ T1239] usb 2-1: USB disconnect, device number 32 [ 385.099100][ T9621] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 386.257224][ T9640] tmpfs: Unknown parameter 'ÿÿ' [ 386.310801][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1260'. [ 386.310819][ T9640] nbd: must specify a size in bytes for the device [ 386.515172][ T5147] usb 1-1: reset high-speed USB device number 23 using dummy_hcd [ 386.515930][ T5147] usb 1-1: device reset changed ep0 maxpacket size! [ 386.554793][ T5990] usb 1-1: USB disconnect, device number 23 [ 386.641008][ T9653] FAULT_INJECTION: forcing a failure. [ 386.641008][ T9653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.641034][ T9653] CPU: 1 UID: 0 PID: 9653 Comm: syz.1.1265 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 386.641049][ T9653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 386.641056][ T9653] Call Trace: [ 386.641062][ T9653] [ 386.641067][ T9653] dump_stack_lvl+0xe8/0x150 [ 386.641091][ T9653] should_fail_ex+0x46b/0x600 [ 386.641112][ T9653] _copy_from_user+0x2d/0xb0 [ 386.641125][ T9653] snd_seq_event_dup+0x4a0/0x780 [ 386.641147][ T9653] snd_seq_client_enqueue_event+0x337/0x4e0 [ 386.641167][ T9653] ? __pfx_snd_seq_client_enqueue_event+0x10/0x10 [ 386.641190][ T9653] snd_seq_write+0x5d9/0x830 [ 386.641215][ T9653] ? __pfx_snd_seq_write+0x10/0x10 [ 386.641237][ T9653] ? rw_verify_area+0x25b/0x4e0 [ 386.641255][ T9653] ? __pfx_snd_seq_write+0x10/0x10 [ 386.641277][ T9653] vfs_write+0x2a3/0xba0 [ 386.641301][ T9653] ? __pfx_vfs_write+0x10/0x10 [ 386.641320][ T9653] ? __fget_files+0x2a/0x420 [ 386.641338][ T9653] ? __fget_files+0x2a/0x420 [ 386.641352][ T9653] ? __fget_files+0x3a6/0x420 [ 386.641367][ T9653] ? __fget_files+0x2a/0x420 [ 386.641387][ T9653] ksys_write+0x156/0x270 [ 386.641407][ T9653] ? __pfx_ksys_write+0x10/0x10 [ 386.641431][ T9653] do_syscall_64+0x14d/0xf80 [ 386.641447][ T9653] ? trace_irq_disable+0x3b/0x150 [ 386.641471][ T9653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.641491][ T9653] ? clear_bhb_loop+0x40/0x90 [ 386.641519][ T9653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.641548][ T9653] RIP: 0033:0x7ffabf93c819 [ 386.641569][ T9653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.641582][ T9653] RSP: 002b:00007ffabdb8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 386.641596][ T9653] RAX: ffffffffffffffda RBX: 00007ffabfbb5fa0 RCX: 00007ffabf93c819 [ 386.641605][ T9653] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000004 [ 386.641613][ T9653] RBP: 00007ffabdb8e090 R08: 0000000000000000 R09: 0000000000000000 [ 386.641621][ T9653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.641629][ T9653] R13: 00007ffabfbb6038 R14: 00007ffabfbb5fa0 R15: 00007ffeee054a38 [ 386.641648][ T9653] [ 387.827113][ T9660] netlink: 'syz.2.1266': attribute type 1 has an invalid length. [ 387.827138][ T9660] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1266'. [ 387.965619][ T5990] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 387.975140][ T9664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 388.072785][ T1239] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 388.115791][ T5990] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 388.115857][ T5990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.117720][ T5990] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 388.117749][ T5990] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 388.117771][ T5990] usb 1-1: Manufacturer: syz [ 388.125257][ T5112] Bluetooth: hci4: connection err: -111 [ 388.174675][ T5990] usb 1-1: config 0 descriptor?? [ 388.192830][ T9671] mmap: syz.4.1271 (9671) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 388.257225][ T1239] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 388.257261][ T1239] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 388.261194][ T1239] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 388.261226][ T1239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.261247][ T1239] usb 4-1: Product: syz [ 388.261263][ T1239] usb 4-1: Manufacturer: syz [ 388.261290][ T1239] usb 4-1: SerialNumber: syz [ 388.291294][ T1239] usb 4-1: config 0 descriptor?? [ 388.441940][ T5990] rc_core: IR keymap rc-hauppauge not found [ 388.441966][ T5990] Registered IR keymap rc-empty [ 388.449610][ T5990] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 388.469068][ T5990] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input22 [ 389.015244][ T1239] mos7840 4-1:0.0: required endpoints missing [ 389.034027][ T5801] usb 1-1: USB disconnect, device number 24 [ 389.060713][ T1239] usb 4-1: USB disconnect, device number 16 [ 389.492959][ T9688] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1275'. [ 391.601922][ T1239] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 391.641850][ T5953] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 391.757817][ T1239] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 391.757846][ T1239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.757858][ T1239] usb 3-1: Product: syz [ 391.757867][ T1239] usb 3-1: Manufacturer: syz [ 391.757875][ T1239] usb 3-1: SerialNumber: syz [ 391.765322][ T1239] usb 3-1: config 0 descriptor?? [ 391.776154][ T1239] hub 3-1:0.0: bad descriptor, ignoring hub [ 391.776193][ T1239] hub 3-1:0.0: probe with driver hub failed with error -5 [ 391.802107][ T5953] usb 4-1: Using ep0 maxpacket: 32 [ 391.826889][ T5953] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.844379][ T5953] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 391.844413][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.844434][ T5953] usb 4-1: Product: syz [ 391.844448][ T5953] usb 4-1: Manufacturer: syz [ 391.844463][ T5953] usb 4-1: SerialNumber: syz [ 391.850261][ T5953] usb 4-1: config 0 descriptor?? [ 391.890984][ T5953] usb 4-1: bad CDC descriptors [ 391.892134][ T5801] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 391.907921][ T5953] usb 4-1: unsupported MDLM descriptors [ 392.067148][ T5801] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 392.067181][ T5801] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 392.067201][ T5801] usb 1-1: config 220 has no interface number 2 [ 392.067280][ T5801] usb 1-1: config 220 interface 0 has no altsetting 0 [ 392.067292][ T5801] usb 1-1: config 220 interface 76 has no altsetting 0 [ 392.070614][ T5801] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 392.071377][ T5801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.071403][ T5801] usb 1-1: Product: syz [ 392.071418][ T5801] usb 1-1: Manufacturer: syz [ 392.071431][ T5801] usb 1-1: SerialNumber: syz [ 392.172386][ T9713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.175575][ T9713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.200198][ T9713] netlink: 'syz.2.1280': attribute type 10 has an invalid length. [ 393.017110][ T5953] usb 4-1: USB disconnect, device number 17 [ 393.401281][ T5801] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 393.401384][ T5801] uvcvideo 1-1:220.0: No valid video chain found. [ 393.441045][ T5801] usb 1-1: USB disconnect, device number 25 [ 393.619674][ T9724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.712084][ T5990] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 393.874487][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.874534][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.874636][ T5990] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 393.874661][ T5990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.881001][ T5990] usb 5-1: config 0 descriptor?? [ 394.340005][ T1239] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 395.247962][ T5990] hid-led 0003:27B8:01ED.000A: collection stack underflow [ 395.247998][ T5990] hid-led 0003:27B8:01ED.000A: item 0 1 0 12 parsing failed [ 395.249015][ T5990] hid-led 0003:27B8:01ED.000A: probe with driver hid-led failed with error -22 [ 395.264911][ T1239] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 395.264967][ T1239] dib0700: firmware download failed at 7 with -22 [ 395.405877][ T1239] usb 3-1: USB disconnect, device number 19 [ 395.623911][ T5953] usb 5-1: USB disconnect, device number 29 [ 395.960973][ T9746] FAULT_INJECTION: forcing a failure. [ 395.960973][ T9746] name failslab, interval 1, probability 0, space 0, times 0 [ 395.961010][ T9746] CPU: 0 UID: 0 PID: 9746 Comm: syz.1.1297 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 395.961036][ T9746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 395.961050][ T9746] Call Trace: [ 395.961059][ T9746] [ 395.961068][ T9746] dump_stack_lvl+0xe8/0x150 [ 395.961108][ T9746] should_fail_ex+0x46b/0x600 [ 395.961144][ T9746] should_failslab+0xa8/0x100 [ 395.961169][ T9746] kmem_cache_alloc_noprof+0x87/0x680 [ 395.961204][ T9746] ? copy_fs_struct+0x4f/0x270 [ 395.961235][ T9746] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 395.961268][ T9746] copy_fs_struct+0x4f/0x270 [ 395.961296][ T9746] ksys_unshare+0x3d9/0x930 [ 395.961322][ T9746] ? fput+0xa0/0xd0 [ 395.961349][ T9746] ? __pfx_ksys_unshare+0x10/0x10 [ 395.961372][ T9746] ? __pfx_ksys_write+0x10/0x10 [ 395.961422][ T9746] __x64_sys_unshare+0x38/0x50 [ 395.961444][ T9746] do_syscall_64+0x14d/0xf80 [ 395.961469][ T9746] ? trace_irq_disable+0x3b/0x150 [ 395.961490][ T9746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.961508][ T9746] ? clear_bhb_loop+0x40/0x90 [ 395.961530][ T9746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.961552][ T9746] RIP: 0033:0x7ffabf93c819 [ 395.961572][ T9746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.961592][ T9746] RSP: 002b:00007ffabdb8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 395.961617][ T9746] RAX: ffffffffffffffda RBX: 00007ffabfbb5fa0 RCX: 00007ffabf93c819 [ 395.961633][ T9746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026020480 [ 395.961647][ T9746] RBP: 00007ffabdb8e090 R08: 0000000000000000 R09: 0000000000000000 [ 395.961661][ T9746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.961674][ T9746] R13: 00007ffabfbb6038 R14: 00007ffabfbb5fa0 R15: 00007ffeee054a38 [ 395.961705][ T9746] [ 396.925565][ T5953] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 397.117054][ T5953] usb 5-1: Using ep0 maxpacket: 16 [ 398.191003][ T5953] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 398.191037][ T5953] usb 5-1: config 0 has no interface number 0 [ 398.193856][ T5953] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 398.193889][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.193911][ T5953] usb 5-1: Product: syz [ 398.193927][ T5953] usb 5-1: Manufacturer: syz [ 398.193943][ T5953] usb 5-1: SerialNumber: syz [ 398.264113][ T5953] usb 5-1: config 0 descriptor?? [ 398.269529][ T5953] hub 5-1:0.132: bad descriptor, ignoring hub [ 398.269573][ T5953] hub 5-1:0.132: probe with driver hub failed with error -5 [ 398.308562][ T5953] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input23 [ 398.524789][ T9761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.525451][ T9761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.534897][ T9761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.535466][ T9761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.638002][ T9783] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1312'. [ 399.132451][ T9799] random: crng reseeded on system resumption [ 399.190525][ T1239] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 399.348837][ T1239] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.348874][ T1239] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.348915][ T1239] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 399.348940][ T1239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.363580][ T1239] usb 1-1: config 0 descriptor?? [ 399.422843][ T9808] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 399.829449][ T1239] hid-led 0003:27B8:01ED.000B: collection stack underflow [ 399.829493][ T1239] hid-led 0003:27B8:01ED.000B: item 0 1 0 12 parsing failed [ 399.830492][ T1239] hid-led 0003:27B8:01ED.000B: probe with driver hid-led failed with error -22 [ 400.151849][ T5953] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 400.204691][ T1239] usb 1-1: USB disconnect, device number 26 [ 400.281930][ T5953] usb 3-1: device descriptor read/64, error -71 [ 400.521995][ T5953] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 400.652006][ T5953] usb 3-1: device descriptor read/64, error -71 [ 400.764469][ T5953] usb usb3-port1: attempt power cycle [ 400.952028][ T1239] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 401.102965][ T5953] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 401.113896][ T1239] usb 4-1: Using ep0 maxpacket: 16 [ 401.126281][ T5953] usb 3-1: device descriptor read/8, error -71 [ 401.127936][ T1239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.127968][ T1239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.127990][ T1239] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 401.128018][ T1239] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 401.128032][ T1239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.144790][ T1239] usb 4-1: config 0 descriptor?? [ 401.361832][ T5953] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 401.382748][ T5953] usb 3-1: device descriptor read/8, error -71 [ 401.493437][ T5953] usb usb3-port1: unable to enumerate USB device [ 401.673338][ T1239] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000C/input/input24 [ 401.822247][ T9830] IPVS: length: 167 != 24 [ 402.029724][ T9852] FAULT_INJECTION: forcing a failure. [ 402.029724][ T9852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.029762][ T9852] CPU: 1 UID: 0 PID: 9852 Comm: syz.0.1338 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 402.029787][ T9852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 402.029800][ T9852] Call Trace: [ 402.029808][ T9852] [ 402.029817][ T9852] dump_stack_lvl+0xe8/0x150 [ 402.029856][ T9852] should_fail_ex+0x46b/0x600 [ 402.029892][ T9852] _copy_from_user+0x2d/0xb0 [ 402.029916][ T9852] comedi_unlocked_ioctl+0x603/0x1b00 [ 402.029964][ T9852] ? kasan_quarantine_put+0xbb/0x1f0 [ 402.030003][ T9852] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 402.030051][ T9852] ? do_vfs_ioctl+0x117b/0x1540 [ 402.030078][ T9852] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 402.030100][ T9852] ? __pfx_smack_log+0x10/0x10 [ 402.030131][ T9852] ? smk_access+0x14c/0x4e0 [ 402.030169][ T9852] ? smk_tskacc+0x311/0x3a0 [ 402.030203][ T9852] ? smack_file_ioctl+0x263/0x360 [ 402.030241][ T9852] ? __pfx_smack_file_ioctl+0x10/0x10 [ 402.030286][ T9852] ? __fget_files+0x2a/0x420 [ 402.030313][ T9852] ? __fget_files+0x3a6/0x420 [ 402.030340][ T9852] ? __fget_files+0x2a/0x420 [ 402.030371][ T9852] ? bpf_lsm_file_ioctl+0x9/0x20 [ 402.030395][ T9852] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 402.030424][ T9852] __se_sys_ioctl+0xff/0x170 [ 402.030457][ T9852] do_syscall_64+0x14d/0xf80 [ 402.030480][ T9852] ? trace_irq_disable+0x3b/0x150 [ 402.030504][ T9852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.030527][ T9852] ? clear_bhb_loop+0x40/0x90 [ 402.030553][ T9852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.030575][ T9852] RIP: 0033:0x7f242481c819 [ 402.030595][ T9852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.030614][ T9852] RSP: 002b:00007f2422a6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 402.030637][ T9852] RAX: ffffffffffffffda RBX: 00007f2424a95fa0 RCX: 00007f242481c819 [ 402.030653][ T9852] RDX: 00002000000003c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 402.030667][ T9852] RBP: 00007f2422a6e090 R08: 0000000000000000 R09: 0000000000000000 [ 402.030680][ T9852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.030692][ T9852] R13: 00007f2424a96038 R14: 00007f2424a95fa0 R15: 00007ffdac3cf3a8 [ 402.030729][ T9852] [ 402.310623][ T5876] usb 5-1: USB disconnect, device number 30 [ 402.416378][ T1239] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 402.480758][ T1239] usb 4-1: USB disconnect, device number 18 [ 402.583263][ T9859] fido_id[9859]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 403.013841][ T5953] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 403.161997][ T5953] usb 2-1: Using ep0 maxpacket: 16 [ 403.165406][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.165442][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.165484][ T5953] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 403.165508][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.173093][ T5953] usb 2-1: config 0 descriptor?? [ 403.281895][ T1239] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 403.432603][ T1239] usb 4-1: Using ep0 maxpacket: 16 [ 403.435887][ T1239] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 403.435916][ T1239] usb 4-1: config 0 has no interface number 0 [ 403.439792][ T1239] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 403.439825][ T1239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.439846][ T1239] usb 4-1: Product: syz [ 403.439861][ T1239] usb 4-1: Manufacturer: syz [ 403.439876][ T1239] usb 4-1: SerialNumber: syz [ 403.498079][ T1239] usb 4-1: config 0 descriptor?? [ 403.508864][ T1239] hub 4-1:0.132: bad descriptor, ignoring hub [ 403.508908][ T1239] hub 4-1:0.132: probe with driver hub failed with error -5 [ 403.531407][ T1239] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input25 [ 403.621860][ T5876] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 403.726927][ T9872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.727894][ T9872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.761055][ T9872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.766982][ T9872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.785361][ T5876] usb 1-1: unable to get BOS descriptor or descriptor too short [ 403.786329][ T5876] usb 1-1: not running at top speed; connect to a high speed hub [ 403.788223][ T5876] usb 1-1: config 1 has an invalid interface number: 28 but max is 0 [ 403.788250][ T5876] usb 1-1: config 1 has no interface number 0 [ 403.788319][ T5876] usb 1-1: config 1 interface 28 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 403.788345][ T5876] usb 1-1: config 1 interface 28 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 403.788375][ T5876] usb 1-1: config 1 interface 28 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 403.788402][ T5876] usb 1-1: config 1 interface 28 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 64 [ 403.788428][ T5876] usb 1-1: config 1 interface 28 altsetting 15 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 403.788457][ T5876] usb 1-1: config 1 interface 28 has no altsetting 0 [ 403.801877][ T5876] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=1a.5e [ 403.801912][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.801933][ T5876] usb 1-1: Product: syz [ 403.801950][ T5876] usb 1-1: Manufacturer: syz [ 403.802029][ T5876] usb 1-1: SerialNumber: syz [ 403.941211][ T9875] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 403.944027][ T9875] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 404.109762][ T9878] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1347'. [ 407.143783][ T9896] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 407.376434][ T808] usb 4-1: USB disconnect, device number 19 [ 407.651884][ T808] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 407.815206][ T808] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 407.815303][ T808] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 407.815327][ T808] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 407.818695][ T808] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 407.818792][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.818814][ T808] usb 4-1: Product: syz [ 407.818830][ T808] usb 4-1: Manufacturer: syz [ 407.818845][ T808] usb 4-1: SerialNumber: syz [ 407.833890][ T808] usb 4-1: config 0 descriptor?? [ 408.166483][ T9902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.168929][ T9902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.202776][ T808] usb 4-1: USB disconnect, device number 20 [ 408.430033][ T9906] netlink: 'syz.4.1357': attribute type 10 has an invalid length. [ 408.605642][ T5953] usbhid 2-1:0.0: can't add hid device: -32 [ 408.605768][ T5953] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 409.005916][ T5876] etas_es58x 1-1:1.28: Starting syz syz (Serial Number syz) [ 409.031895][ T5953] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 409.181957][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 409.184707][ T5953] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 409.184740][ T5953] usb 4-1: config 0 has no interface number 0 [ 409.187102][ T5953] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 409.187134][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.187146][ T5953] usb 4-1: Product: syz [ 409.187154][ T5953] usb 4-1: Manufacturer: syz [ 409.187162][ T5953] usb 4-1: SerialNumber: syz [ 409.191156][ T5953] usb 4-1: config 0 descriptor?? [ 409.254493][ T5953] hub 4-1:0.132: bad descriptor, ignoring hub [ 409.254534][ T5953] hub 4-1:0.132: probe with driver hub failed with error -5 [ 409.258183][ T5953] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input26 [ 409.463226][ T9910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.463809][ T9910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.470341][ T9910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.470913][ T9910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.824671][ T5876] usb 4-1: USB disconnect, device number 21 [ 413.385569][ T5953] usb 2-1: USB disconnect, device number 33 [ 413.429611][ T9906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.445169][ T9906] team0: Port device bond0 added [ 413.542976][ T5876] usb 1-1: USB disconnect, device number 27 [ 413.691236][ T9878] delete_channel: no stack [ 414.119843][ T9934] FAULT_INJECTION: forcing a failure. [ 414.119843][ T9934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.119879][ T9934] CPU: 1 UID: 0 PID: 9934 Comm: syz.0.1367 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 414.119904][ T9934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 414.119917][ T9934] Call Trace: [ 414.119925][ T9934] [ 414.119935][ T9934] dump_stack_lvl+0xe8/0x150 [ 414.119973][ T9934] should_fail_ex+0x46b/0x600 [ 414.120031][ T9934] _copy_from_user+0x2d/0xb0 [ 414.120054][ T9934] vmci_host_unlocked_ioctl+0x5ed/0x2850 [ 414.120086][ T9934] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 414.120135][ T9934] ? kasan_quarantine_put+0xbb/0x1f0 [ 414.120175][ T9934] ? tomoyo_path_number_perm+0x219/0x630 [ 414.120201][ T9934] ? do_vfs_ioctl+0x117b/0x1540 [ 414.120223][ T9934] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 414.120262][ T9934] ? __asan_memset+0x22/0x50 [ 414.120289][ T9934] ? smack_file_ioctl+0x263/0x360 [ 414.120322][ T9934] ? __pfx_smack_file_ioctl+0x10/0x10 [ 414.120367][ T9934] ? __fget_files+0x2a/0x420 [ 414.120394][ T9934] ? __fget_files+0x3a6/0x420 [ 414.120421][ T9934] ? __fget_files+0x2a/0x420 [ 414.120461][ T9934] ? bpf_lsm_file_ioctl+0x9/0x20 [ 414.120485][ T9934] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 414.120511][ T9934] __se_sys_ioctl+0xff/0x170 [ 414.120536][ T9934] do_syscall_64+0x14d/0xf80 [ 414.120562][ T9934] ? trace_irq_disable+0x3b/0x150 [ 414.120587][ T9934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.120609][ T9934] ? clear_bhb_loop+0x40/0x90 [ 414.120637][ T9934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.120658][ T9934] RIP: 0033:0x7f242481c819 [ 414.120679][ T9934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.120697][ T9934] RSP: 002b:00007f2422a6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.120721][ T9934] RAX: ffffffffffffffda RBX: 00007f2424a95fa0 RCX: 00007f242481c819 [ 414.120736][ T9934] RDX: 0000200000000140 RSI: 00000000000007b1 RDI: 0000000000000003 [ 414.120749][ T9934] RBP: 00007f2422a6e090 R08: 0000000000000000 R09: 0000000000000000 [ 414.120760][ T9934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.120772][ T9934] R13: 00007f2424a96038 R14: 00007f2424a95fa0 R15: 00007ffdac3cf3a8 [ 414.120805][ T9934] [ 414.441824][ T5876] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 414.604809][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 414.604842][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 414.604864][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 414.610629][ T5876] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 414.610664][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.610686][ T5876] usb 2-1: Product: syz [ 414.610701][ T5876] usb 2-1: Manufacturer: syz [ 414.610716][ T5876] usb 2-1: SerialNumber: syz [ 414.690144][ T5876] usb 2-1: config 0 descriptor?? [ 414.940052][ T9933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.940659][ T9933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.974700][ T808] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 414.998955][ T5953] usb 2-1: USB disconnect, device number 34 [ 415.099536][ T9953] FAULT_INJECTION: forcing a failure. [ 415.099536][ T9953] name failslab, interval 1, probability 0, space 0, times 0 [ 415.099574][ T9953] CPU: 0 UID: 0 PID: 9953 Comm: syz.2.1375 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 415.099599][ T9953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 415.099612][ T9953] Call Trace: [ 415.099621][ T9953] [ 415.099630][ T9953] dump_stack_lvl+0xe8/0x150 [ 415.099667][ T9953] should_fail_ex+0x46b/0x600 [ 415.099703][ T9953] should_failslab+0xa8/0x100 [ 415.099729][ T9953] kmem_cache_alloc_noprof+0x87/0x680 [ 415.099762][ T9953] ? do_getname+0x2e/0x250 [ 415.099792][ T9953] do_getname+0x2e/0x250 [ 415.099820][ T9953] __se_sys_rename+0x3a/0x2c0 [ 415.099850][ T9953] do_syscall_64+0x14d/0xf80 [ 415.099875][ T9953] ? trace_irq_disable+0x3b/0x150 [ 415.099901][ T9953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.099923][ T9953] ? clear_bhb_loop+0x40/0x90 [ 415.099951][ T9953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.099972][ T9953] RIP: 0033:0x7f1f5f15c819 [ 415.100009][ T9953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.100027][ T9953] RSP: 002b:00007f1f5d3ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 415.100050][ T9953] RAX: ffffffffffffffda RBX: 00007f1f5f3d5fa0 RCX: 00007f1f5f15c819 [ 415.100066][ T9953] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000200000000800 [ 415.100081][ T9953] RBP: 00007f1f5d3ae090 R08: 0000000000000000 R09: 0000000000000000 [ 415.100095][ T9953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.100107][ T9953] R13: 00007f1f5f3d6038 R14: 00007f1f5f3d5fa0 R15: 00007fff5364b008 [ 415.100150][ T9953] [ 415.149348][ T808] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 415.149379][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.149406][ T808] usb 5-1: Product: syz [ 415.149420][ T808] usb 5-1: Manufacturer: syz [ 415.149433][ T808] usb 5-1: SerialNumber: syz [ 415.427037][ T808] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 415.444180][ T808] usb 5-1: USB disconnect, device number 31 [ 415.464484][ T808] usblp0: removed [ 415.595174][ T5876] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 415.757587][ T5876] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 415.757623][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.757644][ T5876] usb 4-1: Product: syz [ 415.757659][ T5876] usb 4-1: Manufacturer: syz [ 415.757674][ T5876] usb 4-1: SerialNumber: syz [ 415.803314][ T5876] usb 4-1: config 0 descriptor?? [ 415.812248][ T5876] hub 4-1:0.0: bad descriptor, ignoring hub [ 415.812292][ T5876] hub 4-1:0.0: probe with driver hub failed with error -5 [ 415.885014][ T9967] FAULT_INJECTION: forcing a failure. [ 415.885014][ T9967] name failslab, interval 1, probability 0, space 0, times 0 [ 415.885053][ T9967] CPU: 1 UID: 0 PID: 9967 Comm: syz.1.1383 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 415.885077][ T9967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 415.885089][ T9967] Call Trace: [ 415.885098][ T9967] [ 415.885106][ T9967] dump_stack_lvl+0xe8/0x150 [ 415.885140][ T9967] should_fail_ex+0x46b/0x600 [ 415.885160][ T9967] should_failslab+0xa8/0x100 [ 415.885174][ T9967] __kmalloc_noprof+0xdf/0x7b0 [ 415.885193][ T9967] ? copy_splice_read+0x16f/0xab0 [ 415.885233][ T9967] copy_splice_read+0x16f/0xab0 [ 415.885273][ T9967] ? __pfx_copy_splice_read+0x10/0x10 [ 415.885296][ T9967] ? rcu_is_watching+0x15/0xb0 [ 415.885316][ T9967] ? look_up_lock_class+0x57/0x110 [ 415.885331][ T9967] ? register_lock_class+0x31/0x2e0 [ 415.885344][ T9967] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 415.885365][ T9967] ? alloc_pipe_info+0x373/0x4d0 [ 415.885386][ T9967] ? __pfx_copy_splice_read+0x10/0x10 [ 415.885412][ T9967] splice_direct_to_actor+0x483/0xc80 [ 415.885451][ T9967] ? __pfx_direct_splice_actor+0x10/0x10 [ 415.885484][ T9967] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 415.885506][ T9967] do_splice_direct+0x19b/0x2a0 [ 415.885523][ T9967] ? __pfx_do_splice_direct+0x10/0x10 [ 415.885549][ T9967] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 415.885586][ T9967] ? rw_verify_area+0x25b/0x4e0 [ 415.885621][ T9967] do_sendfile+0x547/0x7e0 [ 415.885644][ T9967] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 415.885667][ T9967] ? __pfx_do_sendfile+0x10/0x10 [ 415.885688][ T9967] __se_sys_sendfile64+0x144/0x1a0 [ 415.885707][ T9967] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 415.885742][ T9967] do_syscall_64+0x14d/0xf80 [ 415.885766][ T9967] ? trace_irq_disable+0x3b/0x150 [ 415.885790][ T9967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.885811][ T9967] ? clear_bhb_loop+0x40/0x90 [ 415.885832][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.885844][ T9967] RIP: 0033:0x7ffabf93c819 [ 415.885857][ T9967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.885867][ T9967] RSP: 002b:00007ffabdb8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 415.885888][ T9967] RAX: ffffffffffffffda RBX: 00007ffabfbb5fa0 RCX: 00007ffabf93c819 [ 415.885904][ T9967] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 415.885918][ T9967] RBP: 00007ffabdb8e090 R08: 0000000000000000 R09: 0000000000000000 [ 415.885931][ T9967] R10: 000000000000106f R11: 0000000000000246 R12: 0000000000000001 [ 415.885944][ T9967] R13: 00007ffabfbb6038 R14: 00007ffabfbb5fa0 R15: 00007ffeee054a38 [ 415.885976][ T9967] [ 416.337257][ T9976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.342776][ T9976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.429730][ T9977] netlink: 'syz.3.1376': attribute type 10 has an invalid length. [ 416.689124][ T808] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 417.312129][ T808] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 417.312164][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.312185][ T808] usb 5-1: Product: syz [ 417.312200][ T808] usb 5-1: Manufacturer: syz [ 417.312215][ T808] usb 5-1: SerialNumber: syz [ 417.340713][ T808] usb 5-1: config 0 descriptor?? [ 417.367370][ T808] hub 5-1:0.0: bad descriptor, ignoring hub [ 417.367426][ T808] hub 5-1:0.0: probe with driver hub failed with error -5 [ 417.843668][ T9986] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1386'. [ 417.844283][ T9986] tc_dump_action: action bad kind [ 417.862026][ T9982] netlink: 'syz.2.1386': attribute type 21 has an invalid length. [ 417.862359][ T9982] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1386'. [ 418.334418][ T808] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 418.356219][ T808] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 418.356274][ T808] dib0700: firmware download failed at 7 with -22 [ 418.445550][ T5876] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 418.447666][ T5876] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 418.447716][ T5876] dib0700: firmware download failed at 7 with -22 [ 418.492557][ T5876] usb 4-1: USB disconnect, device number 22 [ 418.499798][ T808] usb 5-1: USB disconnect, device number 32 [ 418.617211][ T9980] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1378'. [ 418.779735][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'. [ 418.779767][ T9999] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1387'. [ 418.779786][ T9999] netlink: 540 bytes leftover after parsing attributes in process `syz.4.1387'. [ 418.942286][ T1239] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 419.111007][ T1239] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 419.111040][ T1239] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 419.111056][ T1239] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 420.047766][ T1239] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 420.047803][ T1239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.047824][ T1239] usb 2-1: Product: syz [ 420.047838][ T1239] usb 2-1: Manufacturer: syz [ 420.047854][ T1239] usb 2-1: SerialNumber: syz [ 420.104471][ T1239] usb 2-1: config 0 descriptor?? [ 420.294840][T10017] FAULT_INJECTION: forcing a failure. [ 420.294840][T10017] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 420.294878][T10017] CPU: 0 UID: 0 PID: 10017 Comm: syz.3.1397 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 420.294902][T10017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 420.294916][T10017] Call Trace: [ 420.294925][T10017] [ 420.294934][T10017] dump_stack_lvl+0xe8/0x150 [ 420.294970][T10017] should_fail_ex+0x46b/0x600 [ 420.295006][T10017] prepare_alloc_pages+0x22a/0x6b0 [ 420.295039][T10017] __alloc_frozen_pages_noprof+0x12f/0x380 [ 420.295069][T10017] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 420.295099][T10017] ? __pfx_policy_nodemask+0x10/0x10 [ 420.295125][T10017] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 420.295151][T10017] ? lockdep_hardirqs_on+0x7a/0x110 [ 420.295177][T10017] alloc_pages_mpol+0xd1/0x380 [ 420.295215][T10017] alloc_pages_noprof+0xce/0x1e0 [ 420.295242][T10017] get_free_pages_noprof+0xf/0x80 [ 420.295265][T10017] __kasan_populate_vmalloc+0x38/0x1d0 [ 420.295298][T10017] ? rt_spin_unlock+0x160/0x200 [ 420.295330][T10017] alloc_vmap_area+0xd73/0x14b0 [ 420.295378][T10017] ? __pfx_alloc_vmap_area+0x10/0x10 [ 420.295413][T10017] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 420.295436][T10017] ? __get_vm_area_node+0x171/0x350 [ 420.295466][T10017] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 420.295497][T10017] __get_vm_area_node+0x226/0x350 [ 420.295531][T10017] __vmalloc_node_range_noprof+0x372/0x1730 [ 420.295564][T10017] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 420.295605][T10017] ? __lock_acquire+0x6b5/0x2cf0 [ 420.295635][T10017] ? kernel_text_address+0xa5/0xe0 [ 420.295663][T10017] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 420.295694][T10017] ? arch_stack_walk+0xfb/0x150 [ 420.295726][T10017] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 420.295752][T10017] __vmalloc_noprof+0xd2/0x120 [ 420.295789][T10017] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 420.295822][T10017] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 420.295854][T10017] bpf_prog_alloc+0x3c/0x1a0 [ 420.295885][T10017] bpf_prog_load+0x7ba/0x1ae0 [ 420.295932][T10017] ? __pfx_bpf_prog_load+0x10/0x10 [ 420.295984][T10017] ? bpf_lsm_bpf+0x9/0x20 [ 420.296004][T10017] ? security_bpf+0x7e/0x2d0 [ 420.296031][T10017] __sys_bpf+0x618/0x950 [ 420.296059][T10017] ? __pfx___sys_bpf+0x10/0x10 [ 420.296081][T10017] ? rt_mutex_slowunlock+0x1cb/0x300 [ 420.296127][T10017] ? ksys_write+0x248/0x270 [ 420.296161][T10017] ? __pfx_ksys_write+0x10/0x10 [ 420.296209][T10017] __x64_sys_bpf+0x7c/0x90 [ 420.296232][T10017] do_syscall_64+0x14d/0xf80 [ 420.296255][T10017] ? trace_irq_disable+0x3b/0x150 [ 420.296279][T10017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.296302][T10017] ? clear_bhb_loop+0x40/0x90 [ 420.296327][T10017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.296349][T10017] RIP: 0033:0x7f33da51c819 [ 420.296371][T10017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.296390][T10017] RSP: 002b:00007f33d8776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 420.296414][T10017] RAX: ffffffffffffffda RBX: 00007f33da795fa0 RCX: 00007f33da51c819 [ 420.296430][T10017] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 420.296443][T10017] RBP: 00007f33d8776090 R08: 0000000000000000 R09: 0000000000000000 [ 420.296456][T10017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.296469][T10017] R13: 00007f33da796038 R14: 00007f33da795fa0 R15: 00007fffa3548448 [ 420.296503][T10017] [ 420.299593][T10017] syz.3.1397: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 420.299909][T10017] CPU: 0 UID: 0 PID: 10017 Comm: syz.3.1397 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 420.299934][T10017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 420.299947][T10017] Call Trace: [ 420.299955][T10017] [ 420.299984][T10017] dump_stack_lvl+0xe8/0x150 [ 420.300023][T10017] warn_alloc+0x263/0x3e0 [ 420.300050][T10017] ? kasan_quarantine_put+0xbb/0x1f0 [ 420.300085][T10017] ? __pfx_warn_alloc+0x10/0x10 [ 420.300108][T10017] ? __get_vm_area_node+0x23f/0x350 [ 420.300137][T10017] ? __get_vm_area_node+0x171/0x350 [ 420.300167][T10017] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 420.300209][T10017] ? __get_vm_area_node+0x23f/0x350 [ 420.300249][T10017] __vmalloc_node_range_noprof+0x397/0x1730 [ 420.300297][T10017] ? __lock_acquire+0x6b5/0x2cf0 [ 420.300326][T10017] ? kernel_text_address+0xa5/0xe0 [ 420.300356][T10017] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 420.300390][T10017] ? arch_stack_walk+0xfb/0x150 [ 420.300426][T10017] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 420.300452][T10017] __vmalloc_noprof+0xd2/0x120 [ 420.300484][T10017] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 420.300515][T10017] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 420.300548][T10017] bpf_prog_alloc+0x3c/0x1a0 [ 420.300580][T10017] bpf_prog_load+0x7ba/0x1ae0 [ 420.300625][T10017] ? __pfx_bpf_prog_load+0x10/0x10 [ 420.300674][T10017] ? bpf_lsm_bpf+0x9/0x20 [ 420.300696][T10017] ? security_bpf+0x7e/0x2d0 [ 420.300724][T10017] __sys_bpf+0x618/0x950 [ 420.300753][T10017] ? __pfx___sys_bpf+0x10/0x10 [ 420.300776][T10017] ? rt_mutex_slowunlock+0x1cb/0x300 [ 420.300824][T10017] ? ksys_write+0x248/0x270 [ 420.300860][T10017] ? __pfx_ksys_write+0x10/0x10 [ 420.300900][T10017] __x64_sys_bpf+0x7c/0x90 [ 420.300924][T10017] do_syscall_64+0x14d/0xf80 [ 420.300948][T10017] ? trace_irq_disable+0x3b/0x150 [ 420.300974][T10017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.300995][T10017] ? clear_bhb_loop+0x40/0x90 [ 420.301021][T10017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.301043][T10017] RIP: 0033:0x7f33da51c819 [ 420.301063][T10017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.301082][T10017] RSP: 002b:00007f33d8776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 420.301105][T10017] RAX: ffffffffffffffda RBX: 00007f33da795fa0 RCX: 00007f33da51c819 [ 420.301121][T10017] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 420.301134][T10017] RBP: 00007f33d8776090 R08: 0000000000000000 R09: 0000000000000000 [ 420.301147][T10017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.301160][T10017] R13: 00007f33da796038 R14: 00007f33da795fa0 R15: 00007fffa3548448 [ 420.301199][T10017] [ 420.301294][T10017] Mem-Info: [ 420.301306][T10017] active_anon:257 inactive_anon:6611 isolated_anon:0 [ 420.301306][T10017] active_file:17221 inactive_file:42611 isolated_file:0 [ 420.301306][T10017] unevictable:768 dirty:160 writeback:0 [ 420.301306][T10017] slab_reclaimable:12107 slab_unreclaimable:102606 [ 420.301306][T10017] mapped:31194 shmem:1360 pagetables:1318 [ 420.301306][T10017] sec_pagetables:0 bounce:0 [ 420.301306][T10017] kernel_misc_reclaimable:0 [ 420.301306][T10017] free:1312600 free_pcp:6788 free_cma:0 [ 420.301363][T10017] Node 0 active_anon:1028kB inactive_anon:26200kB active_file:68672kB inactive_file:170444kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124776kB dirty:636kB writeback:0kB shmem:3904kB kernel_stack:13020kB pagetables:5104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 420.301413][T10017] Node 1 active_anon:0kB inactive_anon:244kB active_file:212kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 420.301460][T10017] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 420.301521][T10017] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 420.301560][T10017] Node 0 DMA32 free:1315232kB boost:0kB min:3932kB low:6468kB high:9004kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1028kB inactive_anon:26200kB active_file:68672kB inactive_file:170444kB unevictable:1536kB writepending:636kB zspages:0kB present:3129332kB managed:2566408kB mlocked:0kB bounce:0kB free_pcp:19592kB local_pcp:10064kB free_cma:0kB [ 420.301622][T10017] lowmem_reserve[]: 0 0 0 0 0 [ 420.301655][T10017] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:412kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 420.333807][T10017] lowmem_reserve[]: 0 0 0 0 0 [ 420.333852][T10017] Node 1 Normal free:3921908kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:44kB active_file:212kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5700kB local_pcp:4268kB free_cma:0kB [ 420.333911][T10017] lowmem_reserve[]: 0 0 0 0 0 [ 420.333944][T10017] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 420.334052][T10017] Node 0 DMA32: 3598*4kB (UM) 2518*8kB (UME) 1489*16kB (UME) 397*32kB (UME) 64*64kB (UME) 128*128kB (UME) 74*256kB (UME) 55*512kB (UM) 11*1024kB (M) 11*2048kB (UME) 279*4096kB (UM) = 1315224kB [ 420.334205][T10017] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 420.334298][T10017] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 4*16kB (UM) 5*32kB (UM) 5*64kB (UM) 4*128kB (UM) 6*256kB (UM) 3*512kB (UM) 0*1024kB 1*2048kB (U) 956*4096kB (M) = 3921988kB [ 420.334447][T10017] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 420.334463][T10017] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 420.334478][T10017] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 420.334493][T10017] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 420.334508][T10017] 61189 total pagecache pages [ 420.334515][T10017] 1 pages in swap cache [ 420.334522][T10017] Free swap = 124996kB [ 420.334529][T10017] Total swap = 124996kB [ 420.334536][T10017] 2097051 pages RAM [ 420.334544][T10017] 0 pages HighMem/MovableOnly [ 420.334550][T10017] 423731 pages reserved [ 420.334556][T10017] 0 pages cma reserved [ 420.400993][T10018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.409002][T10018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.724217][T10024] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1400'. [ 420.724240][T10024] tc_dump_action: action bad kind [ 420.752153][T10024] netlink: 'syz.0.1400': attribute type 21 has an invalid length. [ 420.752239][T10024] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1400'. [ 420.782734][ T808] usb 2-1: USB disconnect, device number 35 [ 421.041946][ T43] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 421.191853][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 421.194485][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.196223][ T43] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 421.196250][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 421.196269][ T43] usb 4-1: SerialNumber: syz [ 421.222300][ T43] usb 4-1: config 0 descriptor?? [ 421.246446][ T43] uvcvideo 4-1:0.0: Found UVC 0.00 device (05ac:8501) [ 421.246478][ T43] uvcvideo 4-1:0.0: No valid video chain found. [ 421.443586][ T43] usb 4-1: USB disconnect, device number 23 [ 421.553721][T10035] FAULT_INJECTION: forcing a failure. [ 421.553721][T10035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.553758][T10035] CPU: 0 UID: 0 PID: 10035 Comm: syz.0.1403 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 421.553784][T10035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 421.553797][T10035] Call Trace: [ 421.553806][T10035] [ 421.553816][T10035] dump_stack_lvl+0xe8/0x150 [ 421.553853][T10035] should_fail_ex+0x46b/0x600 [ 421.553890][T10035] _copy_from_user+0x2d/0xb0 [ 421.553913][T10035] iommufd_fops_ioctl+0x461/0x5d0 [ 421.553947][T10035] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 421.553995][T10035] ? __fget_files+0x2a/0x420 [ 421.554027][T10035] ? bpf_lsm_file_ioctl+0x9/0x20 [ 421.554050][T10035] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 421.554082][T10035] __se_sys_ioctl+0xff/0x170 [ 421.554108][T10035] do_syscall_64+0x14d/0xf80 [ 421.554131][T10035] ? trace_irq_disable+0x3b/0x150 [ 421.554156][T10035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.554178][T10035] ? clear_bhb_loop+0x40/0x90 [ 421.554205][T10035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.554225][T10035] RIP: 0033:0x7f242481c819 [ 421.554245][T10035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.554264][T10035] RSP: 002b:00007f2422a6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.554288][T10035] RAX: ffffffffffffffda RBX: 00007f2424a95fa0 RCX: 00007f242481c819 [ 421.554304][T10035] RDX: 0000200000000040 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 421.554318][T10035] RBP: 00007f2422a6e090 R08: 0000000000000000 R09: 0000000000000000 [ 421.554331][T10035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.554345][T10035] R13: 00007f2424a96038 R14: 00007f2424a95fa0 R15: 00007ffdac3cf3a8 [ 421.554386][T10035] [ 423.092486][T10052] overlayfs: conflicting lowerdir path [ 423.113985][T10054] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1411'. [ 423.114011][T10054] tc_dump_action: action bad kind [ 423.133209][T10054] netlink: 'syz.0.1411': attribute type 21 has an invalid length. [ 423.133290][T10054] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1411'. [ 423.359197][T10069] Unsupported ieee802154 address type: 0 [ 423.421992][ T5876] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 423.472515][T10072] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1418'. [ 423.554499][ T5876] usb 5-1: device descriptor read/64, error -71 [ 423.793919][ T5876] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 424.074275][ T5876] usb 5-1: device descriptor read/64, error -71 [ 424.618986][ T5876] usb usb5-port1: attempt power cycle [ 424.829719][T10085] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1425'. [ 424.829745][T10085] tc_dump_action: action bad kind [ 424.849589][T10085] netlink: 'syz.2.1425': attribute type 21 has an invalid length. [ 424.849664][T10085] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1425'. [ 424.976349][ T5876] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 424.992799][ T5876] usb 5-1: device descriptor read/8, error -71 [ 425.242112][ T5876] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 425.262575][ T5876] usb 5-1: device descriptor read/8, error -71 [ 425.291910][ T808] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 425.319961][T10101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1429'. [ 425.382948][ T5876] usb usb5-port1: unable to enumerate USB device [ 425.421899][ T808] usb 1-1: device descriptor read/64, error -71 [ 425.661875][ T808] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 425.911992][ T808] usb 1-1: device descriptor read/64, error -71 [ 426.040178][ T808] usb usb1-port1: attempt power cycle [ 426.502018][ T808] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 426.524756][ T808] usb 1-1: device descriptor read/8, error -71 [ 426.672140][ T1239] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 426.821861][ T1239] usb 5-1: Using ep0 maxpacket: 32 [ 426.823847][ T1239] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.826700][ T1239] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 426.826725][ T1239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.826737][ T1239] usb 5-1: Product: syz [ 426.826746][ T1239] usb 5-1: Manufacturer: syz [ 426.826754][ T1239] usb 5-1: SerialNumber: syz [ 426.830099][ T1239] usb 5-1: config 0 descriptor?? [ 426.922999][ T808] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 427.591962][ T808] usb 1-1: device descriptor read/8, error -71 [ 427.702986][ T808] usb usb1-port1: unable to enumerate USB device [ 427.841805][ T1239] quatech2 5-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 429.291941][ T1239] usb 5-1: qt2_attach - failed to power on unit: -71 [ 429.292125][ T1239] quatech2 5-1:0.0: probe with driver quatech2 failed with error -71 [ 429.334763][ T1239] usb 5-1: USB disconnect, device number 37 [ 431.431927][ T1239] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 431.472281][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 431.717744][ T1239] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.717801][ T1239] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.717830][ T1239] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 431.717844][ T1239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.838734][ T10] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 431.839857][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.841029][ T10] usb 3-1: Product: syz [ 431.841741][ T10] usb 3-1: Manufacturer: syz [ 431.841760][ T10] usb 3-1: SerialNumber: syz [ 431.877255][ T1239] usb 1-1: config 0 descriptor?? [ 431.888786][ T10] usb 3-1: config 0 descriptor?? [ 431.897949][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 431.897976][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 431.919298][ T1239] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 433.556968][T10163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.557726][T10163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.569553][T10163] netlink: 'syz.2.1444': attribute type 10 has an invalid length. [ 435.788939][ T43] usb 1-1: USB disconnect, device number 32 [ 436.066554][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 436.068659][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 436.068711][ T10] dib0700: firmware download failed at 7 with -22 [ 436.138717][ T10] usb 3-1: USB disconnect, device number 24 [ 436.200141][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1450'. [ 436.420947][T10178] bridge0: port 3(veth1) entered blocking state [ 436.421199][T10178] bridge0: port 3(veth1) entered disabled state [ 436.421429][T10178] veth1: entered allmulticast mode [ 436.445975][T10178] veth1: entered promiscuous mode [ 436.447516][T10178] bridge0: port 3(veth1) entered blocking state [ 436.447664][T10178] bridge0: port 3(veth1) entered forwarding state [ 437.110930][T10194] FAULT_INJECTION: forcing a failure. [ 437.110930][T10194] name failslab, interval 1, probability 0, space 0, times 0 [ 437.111023][T10194] CPU: 0 UID: 0 PID: 10194 Comm: syz.4.1456 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 437.111050][T10194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 437.111064][T10194] Call Trace: [ 437.111074][T10194] [ 437.111083][T10194] dump_stack_lvl+0xe8/0x150 [ 437.111122][T10194] should_fail_ex+0x46b/0x600 [ 437.111161][T10194] should_failslab+0xa8/0x100 [ 437.111187][T10194] kmem_cache_alloc_noprof+0x87/0x680 [ 437.111222][T10194] ? can_rx_register+0x16d/0x770 [ 437.111257][T10194] can_rx_register+0x16d/0x770 [ 437.111286][T10194] ? __pfx_j1939_can_recv+0x10/0x10 [ 437.111319][T10194] j1939_netdev_start+0x7c9/0xbe0 [ 437.111360][T10194] j1939_sk_bind+0x836/0xb10 [ 437.111403][T10194] __sys_bind+0x2e9/0x410 [ 437.111440][T10194] ? __pfx___sys_bind+0x10/0x10 [ 437.111501][T10194] __x64_sys_bind+0x7a/0x90 [ 437.111536][T10194] do_syscall_64+0x14d/0xf80 [ 437.111561][T10194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.111585][T10194] ? clear_bhb_loop+0x40/0x90 [ 437.111613][T10194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.111635][T10194] RIP: 0033:0x7f2721b6c819 [ 437.111660][T10194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.111676][T10194] RSP: 002b:00007f271fd7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 437.111698][T10194] RAX: ffffffffffffffda RBX: 00007f2721de6180 RCX: 00007f2721b6c819 [ 437.111714][T10194] RDX: 0000000000000018 RSI: 0000200000000080 RDI: 0000000000000008 [ 437.111727][T10194] RBP: 00007f271fd7c090 R08: 0000000000000000 R09: 0000000000000000 [ 437.111740][T10194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.111754][T10194] R13: 00007f2721de6218 R14: 00007f2721de6180 R15: 00007ffcc0f40e68 [ 437.111791][T10194] [ 437.851810][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 438.009116][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.009156][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.009199][ T10] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 438.009224][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.065805][ T10] usb 2-1: config 0 descriptor?? [ 438.081851][ T1239] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 438.782863][ T1239] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 438.782964][ T1239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.782990][ T1239] usb 3-1: Product: syz [ 438.783008][ T1239] usb 3-1: Manufacturer: syz [ 438.783025][ T1239] usb 3-1: SerialNumber: syz [ 438.846173][ T1239] usb 3-1: config 0 descriptor?? [ 438.882749][ T5876] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 438.905791][ T1239] hub 3-1:0.0: bad descriptor, ignoring hub [ 438.905835][ T1239] hub 3-1:0.0: probe with driver hub failed with error -5 [ 438.991436][ T10] hid-led 0003:27B8:01ED.000D: collection stack underflow [ 438.991475][ T10] hid-led 0003:27B8:01ED.000D: item 0 1 0 12 parsing failed [ 439.015805][ T10] hid-led 0003:27B8:01ED.000D: probe with driver hid-led failed with error -22 [ 439.055005][ T5876] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 439.055095][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.055117][ T5876] usb 4-1: Product: syz [ 439.055132][ T5876] usb 4-1: Manufacturer: syz [ 439.055146][ T5876] usb 4-1: SerialNumber: syz [ 439.427337][T10212] netlink: 'syz.2.1460': attribute type 10 has an invalid length. [ 440.157545][ T5876] usb 4-1: config 0 descriptor?? [ 440.362733][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.366412][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.383817][ T5876] hub 4-1:0.0: bad descriptor, ignoring hub [ 440.384105][ T5876] hub 4-1:0.0: probe with driver hub failed with error -5 [ 440.624363][T10223] FAULT_INJECTION: forcing a failure. [ 440.624363][T10223] name failslab, interval 1, probability 0, space 0, times 0 [ 440.624477][T10223] CPU: 0 UID: 0 PID: 10223 Comm: syz.4.1466 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 440.624517][T10223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 440.624530][T10223] Call Trace: [ 440.624538][T10223] [ 440.624548][T10223] dump_stack_lvl+0xe8/0x150 [ 440.624588][T10223] should_fail_ex+0x46b/0x600 [ 440.624625][T10223] should_failslab+0xa8/0x100 [ 440.624651][T10223] kmem_cache_alloc_noprof+0x87/0x680 [ 440.624686][T10223] ? do_getname_kernel+0x54/0x230 [ 440.624716][T10223] do_getname_kernel+0x54/0x230 [ 440.624740][T10223] ? vfs_path_lookup+0x32/0x190 [ 440.624769][T10223] vfs_path_lookup+0x3c/0x190 [ 440.624804][T10223] mntns_install+0x3bf/0x510 [ 440.624839][T10223] ? __pfx_mntns_install+0x10/0x10 [ 440.624871][T10223] ? __se_sys_setns+0x508/0x1bb0 [ 440.624915][T10223] __se_sys_setns+0xfb3/0x1bb0 [ 440.624942][T10223] ? irqentry_exit+0x59e/0x620 [ 440.624966][T10223] ? __pfx___schedule+0x10/0x10 [ 440.625005][T10223] ? __se_sys_setns+0x508/0x1bb0 [ 440.625103][T10223] ? __pfx___se_sys_setns+0x10/0x10 [ 440.625147][T10223] do_syscall_64+0x14d/0xf80 [ 440.625171][T10223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.625190][T10223] ? clear_bhb_loop+0x40/0x90 [ 440.625215][T10223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.625235][T10223] RIP: 0033:0x7f2721b6c819 [ 440.625255][T10223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.625272][T10223] RSP: 002b:00007f271fd9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 440.625295][T10223] RAX: ffffffffffffffda RBX: 00007f2721de6090 RCX: 00007f2721b6c819 [ 440.625311][T10223] RDX: 0000000000000000 RSI: 0000000024020000 RDI: 0000000000000003 [ 440.625325][T10223] RBP: 00007f271fd9d090 R08: 0000000000000000 R09: 0000000000000000 [ 440.625339][T10223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.625352][T10223] R13: 00007f2721de6128 R14: 00007f2721de6090 R15: 00007ffcc0f40e68 [ 440.625383][T10223] [ 441.239685][T10225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.243411][T10225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.340265][T10225] netlink: 'syz.3.1462': attribute type 10 has an invalid length. [ 442.487068][ T1239] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 442.532870][ T1239] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 442.532906][ T1239] dib0700: firmware download failed at 7 with -22 [ 442.627587][ T1239] usb 3-1: USB disconnect, device number 25 [ 442.779928][ T10] usb 2-1: USB disconnect, device number 36 [ 442.853708][T10234] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 443.612684][ T5876] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 443.917843][ T5876] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 443.917901][ T5876] dib0700: firmware download failed at 7 with -22 [ 443.993120][ T5876] usb 4-1: USB disconnect, device number 24 [ 445.006898][T10260] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 445.222324][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 445.482107][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 445.482140][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.482159][ T10] usb 3-1: Product: syz [ 445.482173][ T10] usb 3-1: Manufacturer: syz [ 445.482186][ T10] usb 3-1: SerialNumber: syz [ 446.092466][T10275] 9p: Bad value for 'wfdno' [ 447.131117][ T10] usb 3-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 447.131150][ T10] usb 3-1: 1:1 : sample bitwidth 9 in over sample bytes 1 [ 447.174067][ T10] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 447.315495][ T5876] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 447.318643][ T10] usb 3-1: USB disconnect, device number 26 [ 447.459433][ T6002] udevd[6002]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/[ 447.459433][ T6002] udevd[6002]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.472090][ T808] BUG: kernel NULL pointer dereference, address: 0000000000000010 [ 447.472110][ T808] #PF: supervisor read access in kernel mode [ 447.472120][ T808] #PF: error_code(0x0000) - not-present page [ 447.472131][ T808] PGD 800000002c74c067 P4D 800000002c74c067 PUD 0 [ 447.472160][ T808] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 447.472180][ T808] CPU: 1 UID: 0 PID: 808 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 447.472201][ T808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 447.472213][ T808] Workqueue: usb_hub_wq hub_event [ 447.472240][ T808] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 447.472265][ T808] Code: 80 8d 4c 8b b8 a0 73 4f 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 60 84 e2 8d 4d 8b 3f 49 81 ff 60 84 e2 8d 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 71 12 e4 02 84 c0 74 0e 49 8b 07 49 [ 447.472282][ T808] RSP: 0018:ffffc9000471f7c8 EFLAGS: 00010207 [ 447.472298][ T808] RAX: 0000000000000000 RBX: ffff8880254edb80 RCX: 0000000000000000 [ 447.472311][ T808] RDX: 0000000011248a00 RSI: 0000000000000001 RDI: ffffffff8ba67a20 [ 447.472324][ T808] RBP: 0000000000100000 R08: ffffffff8b26a1d0 R09: ffffffff8ddcb980 [ 447.472338][ T808] R10: dffffc0000000000 R11: fffffbfff1ed4ef7 R12: 0000000000000002 [ 447.472351][ T808] R13: 0000000000000001 R14: ffff8880348fbf00 R15: 0000000000000000 [ 447.472363][ T808] FS: 0000000000000000(0000) GS:ffff888126432000(0000) knlGS:0000000000000000 [ 447.472379][ T808] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 447.472391][ T808] CR2: 0000000000000010 CR3: 000000003fa4c000 CR4: 00000000003526f0 [ 447.472409][ T808] Call Trace: [ 447.472417][ T808] [ 447.472426][ T808] hub_event+0x150/0x4f60 [ 447.472448][ T808] ? __lock_acquire+0x6b5/0x2cf0 [ 447.472470][ T808] ? look_up_lock_class+0x57/0x110 [ 447.472491][ T808] ? register_lock_class+0x31/0x2e0 [ 447.472510][ T808] ? __lock_acquire+0x6b5/0x2cf0 [ 447.472532][ T808] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 447.472559][ T808] ? __pfx_hub_event+0x10/0x10 [ 447.472583][ T808] ? process_scheduled_works+0xa8d/0x18c0 [ 447.472607][ T808] ? process_scheduled_works+0xa8d/0x18c0 [ 447.472637][ T808] process_scheduled_works+0xb6e/0x18c0 [ 447.472673][ T808] ? __pfx_process_scheduled_works+0x10/0x10 [ 447.472700][ T808] ? assign_work+0x3d5/0x5e0 [ 447.472724][ T808] worker_thread+0xa53/0xfc0 [ 447.472760][ T808] kthread+0x388/0x470 [ 447.472778][ T808] ? __pfx_worker_thread+0x10/0x10 [ 447.472802][ T808] ? __pfx_kthread+0x10/0x10 [ 447.472820][ T808] ret_from_fork+0x51e/0xb90 [ 447.472847][ T808] ? __pfx_ret_from_fork+0x10/0x10 [ 447.472870][ T808] ? __switch_to+0xc7d/0x1450 [ 447.472894][ T808] ? __pfx_kthread+0x10/0x10 [ 447.472912][ T808] ret_from_fork_asm+0x1a/0x30 [ 447.472936][ T808] [ 447.472942][ T808] Modules linked in: [ 447.472953][ T808] CR2: 0000000000000010 [ 447.472971][ T808] ---[ end trace 0000000000000000 ]--- [ 447.472981][ T808] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 447.473003][ T808] Code: 80 8d 4c 8b b8 a0 73 4f 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 60 84 e2 8d 4d 8b 3f 49 81 ff 60 84 e2 8d 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 71 12 e4 02 84 c0 74 0e 49 8b 07 49 [ 447.473019][ T808] RSP: 0018:ffffc9000471f7c8 EFLAGS: 00010207 [ 447.473034][ T808] RAX: 0000000000000000 RBX: ffff8880254edb80 RCX: 0000000000000000 [ 447.473046][ T808] RDX: 0000000011248a00 RSI: 0000000000000001 RDI: ffffffff8ba67a20 [ 447.473058][ T808] RBP: 0000000000100000 R08: ffffffff8b26a1d0 R09: ffffffff8ddcb980 [ 447.473071][ T808] R10: dffffc0000000000 R11: fffffbfff1ed4ef7 R12: 0000000000000002 [ 447.473084][ T808] R13: 0000000000000001 R14: ffff8880348fbf00 R15: 0000000000000000 [ 447.473096][ T808] FS: 0000000000000000(0000) GS:ffff888126432000(0000) knlGS:0000000000000000 [ 447.473112][ T808] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 447.473124][ T808] CR2: 0000000000000010 CR3: 000000003fa4c000 CR4: 00000000003526f0 [ 447.473144][ T808] Kernel panic - not syncing: Fatal exception [ 447.473306][ T808] Kernel Offset: disabled