last executing test programs: 10m20.768917317s ago: executing program 1 (id=21): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16=r0, @ANYRES64=r2], 0xfdef) 10m19.252497475s ago: executing program 1 (id=25): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r0, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280027}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000400)='`', 0x1}], 0x1}}], 0x1, 0x10005) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000280), 0x4) 10m18.327748472s ago: executing program 1 (id=28): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000002980)={0x34, &(0x7f0000002780)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f0000000980)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 10m15.397151889s ago: executing program 1 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 10m15.29400314s ago: executing program 1 (id=37): ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000040)={0x4, 0x0, [{0x0, 0x2, 0x1, 0x0, @adapter={0x5, 0x3, 0xfffffffffffffffe, 0x9, 0x4}}, {0xc7, 0x2, 0x1, 0x0, @irqchip={0x81, 0xcc01}}, {0x7ff, 0x3, 0x1, 0x0, @irqchip={0x1ff, 0x80000000}}, {0x7f, 0x3, 0x1, 0x0, @msi={0x7, 0x780, 0x5, 0x7}}]}) r0 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r1, &(0x7f0000009b40)="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", 0x2000, &(0x7f00000004c0)={&(0x7f0000000000)={0x50, 0x0, 0x9da, {0x7, 0x29, 0xfffffffb, 0x48000010, 0x1, 0x3, 0x21, 0x2, 0x0, 0x0, 0x20, 0x97}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) 10m13.847530824s ago: executing program 1 (id=47): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09e3650f01efeff8000f0d35", 0x29}], 0x1, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x800000001, 0x200000000008, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x3, 0x0, 0x2080, {0x0, 0xffff1000}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m13.591153231s ago: executing program 32 (id=47): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09e3650f01efeff8000f0d35", 0x29}], 0x1, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x800000001, 0x200000000008, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x3, 0x0, 0x2080, {0x0, 0xffff1000}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m54.727046126s ago: executing program 2 (id=101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 9m54.083085349s ago: executing program 2 (id=103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000001000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x1b, 0x0, 0xfee00d00}, {0x80f, 0x0, 0x1ff}]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x2, 0x0, 0x0, @adapter={0x5, 0x6, 0x2, 0x1000, 0x5}}]}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0x1, 0x1f06}) 9m53.364282131s ago: executing program 2 (id=105): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2140, 0x185) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 9m49.820482275s ago: executing program 2 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 9m49.530637522s ago: executing program 2 (id=112): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x2000000015, 0x80005, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 9m48.257428788s ago: executing program 2 (id=116): unshare(0x20060400) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) r3 = eventfd2(0x4, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x7c, 0x7000, 0x1, r3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000003c0)={0x5, 0x3000, 0x0, r2, 0x4}) 9m47.906361643s ago: executing program 33 (id=116): unshare(0x20060400) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) r3 = eventfd2(0x4, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x7c, 0x7000, 0x1, r3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000003c0)={0x5, 0x3000, 0x0, r2, 0x4}) 8m25.447936218s ago: executing program 5 (id=368): r0 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x600) ioctl$FE_READ_STATUS(r0, 0x80046f45, &(0x7f0000000040)) 8m24.998460784s ago: executing program 5 (id=370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d30", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 8m24.783029247s ago: executing program 5 (id=371): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_dev$loop(&(0x7f0000000100), 0x10, 0x1ac902) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 8m23.717950995s ago: executing program 5 (id=374): unshare(0x400) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 8m22.728984082s ago: executing program 5 (id=379): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d30", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 8m22.558558872s ago: executing program 5 (id=381): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r5, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000300)={0x8, r5}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8, r4}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x24, 0x18, r3, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r2}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000440)={0x8, r1}) close(r0) 8m7.291968093s ago: executing program 34 (id=381): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r5, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000300)={0x8, r5}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8, r4}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x24, 0x18, r3, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r2}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000440)={0x8, r1}) close(r0) 8m6.324909415s ago: executing program 4 (id=436): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x48}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 8m5.682651552s ago: executing program 4 (id=440): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10) listen(r0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') fchdir(r1) r2 = fsopen(&(0x7f00000000c0)='ubifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-'], 0x27) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003441eb4023398a716af6b593a0010902240001000040000904ee0202949da000090504021f0000000009058802"], 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008095) 8m2.287664778s ago: executing program 4 (id=445): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) listen(r0, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000200)='X', 0x1}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004003}, 0x8) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r4, @ANYBLOB="05"], 0x0) 7m59.559191254s ago: executing program 4 (id=450): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="58fe00001400010300000000000000001e000000ffffffff00"/88, 0x58) 7m59.05679877s ago: executing program 4 (id=453): r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @private=0xa010100}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000815000/0x18000)=nil, &(0x7f0000000980)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d02}]}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4b70cf489f5cb3b}) read(r1, &(0x7f00000002c0)=""/7, 0x7) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x80000002) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000180)=0x20) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) mremap(&(0x7f0000ea6000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r8, &(0x7f0000002140)={0x2020}, 0x2020) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRESOCT=0x0], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x40820) 7m57.771049225s ago: executing program 4 (id=458): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0xa00) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = memfd_secret(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000016a00)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$nl_generic(0x10, 0x3, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./debug/tracing/trace_pipe\x00', 0x8000, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) pselect6(0x40, &(0x7f0000000240)={0x1b9, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) umount2(&(0x7f0000000380)='./file0\x00', 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000200)={{0xc}, {0xe}, 0x40000}) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x800, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0x40000) syz_socket_connect_nvme_tcp() socket$nl_route(0x10, 0x3, 0x0) 7m42.415777525s ago: executing program 35 (id=458): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0xa00) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = memfd_secret(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000016a00)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$nl_generic(0x10, 0x3, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./debug/tracing/trace_pipe\x00', 0x8000, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) pselect6(0x40, &(0x7f0000000240)={0x1b9, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) umount2(&(0x7f0000000380)='./file0\x00', 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000200)={{0xc}, {0xe}, 0x40000}) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x800, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0x40000) syz_socket_connect_nvme_tcp() socket$nl_route(0x10, 0x3, 0x0) 4m1.873227879s ago: executing program 7 (id=1427): syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000180)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0xc0, 0x48, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xf1, 0xff, 0x9, {0x7, 0x25, 0x1, 0xc, 0x1, 0x724}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x3b, 0x2, 0x2, {0x7, 0x25, 0x1, 0xc, 0x5, 0x4}}}}}}}}]}}, 0x0) syslog(0x9, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xcc201, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) 3m58.683568066s ago: executing program 7 (id=1450): write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x2, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) syz_open_dev$usbmon(&(0x7f0000000300), 0x0, 0x4000c2) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="0000f50000000341", @ANYRES16, @ANYRES8=r0, @ANYBLOB="a26d955004650f308bca87d83ff40233a89a3de1306219fb0b75e094700128e0b88882acfef7a152e421fec5f89b180643a41a1b749f69"], 0x0}, 0x0) 3m58.073696691s ago: executing program 7 (id=1452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0xffffffef}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 3m57.918631423s ago: executing program 7 (id=1455): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x10, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0xc}, r1, 0x8001}}, 0x48) writev(r0, 0x0, 0x0) 3m57.797707481s ago: executing program 7 (id=1456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000040)={0x8, 'vlan0\x00', {'ipvlan0\x00'}, 0x4}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100)=0x10) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000340)="0f3566baa00066b80400263e650fc71926660fc7749b010f0175dd0fc77869c4c201b7aa0000010066baf80cb9800000c00f3235000400000f30ef66bafc0ced0f060f01b110000000b8f9ffffff0f23c00f21f835010001000f23f8", 0x5c}], 0x1, 0x54, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m57.221539857s ago: executing program 7 (id=1460): write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x2, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="0000f50000000341", @ANYRES16, @ANYRES8=r0, @ANYBLOB="a26d955004650f308bca87d83ff40233a89a3de1306219fb0b75e094700128e0b88882acfef7a152e421fec5f89b180643a41a1b749f69"], 0x0}, 0x0) 3m42.058936831s ago: executing program 36 (id=1460): write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x2, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="0000f50000000341", @ANYRES16, @ANYRES8=r0, @ANYBLOB="a26d955004650f308bca87d83ff40233a89a3de1306219fb0b75e094700128e0b88882acfef7a152e421fec5f89b180643a41a1b749f69"], 0x0}, 0x0) 3m26.652489367s ago: executing program 3 (id=1563): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = socket$kcm(0x10, 0x2, 0x0) splice(r1, &(0x7f0000000140)=0x6, r0, &(0x7f0000000240)=0x9, 0x1800, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 3m25.432332413s ago: executing program 3 (id=1566): fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x20, 0x1, 0x5, 0x8000000a}) socket$inet(0x2, 0x1, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) 3m22.90114555s ago: executing program 3 (id=1571): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 3m22.716051436s ago: executing program 3 (id=1573): socket$nl_netfilter(0x10, 0x3, 0xc) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000002180), 0x7b0c, 0x40000) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x7, "abacd211119ca94c50377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') pipe(&(0x7f0000000240)) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000240), 0x84000) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x10, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0xc}, r2, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3m22.408885388s ago: executing program 3 (id=1576): socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$setperm(0x5, r3, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@chain={'key_or_keyring:', r3}) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3m20.224704963s ago: executing program 3 (id=1580): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x80000001}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400000000000000000000000000000000010800060001000000060001000a"], 0x44}}, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/key-users\x00', 0x0, 0x0) pread64(r5, &(0x7f0000002100)=""/172, 0xac, 0x3) setsockopt$sock_int(r4, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x2) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a3200000000090001"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="dfa2fa4f2fed05d7f4cd52b178567b3e13f55b9146dec747ee99365b5eadd2d1e6c198e7d9e962a280c8dee5b5090000000000000037515a619d75f49d870aff03e7c29a138f669b81c830e3b5dc3cc54c3e73d963ea507e87f2949230b8d081bc487b83e28fee107dffe10059287d51fb0f12733ce2d5606ad3f2d60fa0d27687062cf4ae412f252b2ebf18ac4f916326c8af752027fcddfa7095c0706cf86596ff0000000000000059fdca53fe59f12d90aefeb3e8aa9e885df83bed35985674126e2b6867197bbd08ac5114de00858d5ea8d0cc865b539080d98b55d1270bae7159f6ea25ecd3651f5cbcf5ae4b601e16735924128599dc619a570ca0e1b3731367bddf4b221339082026eaa1fb5c8c80456d3a0447931e10557194cbd4352a95f987e45f6eabc021ab6441088eb92bb32eaa0c020be6f2b7e3eb90fc37c28cb6f6df9633bcda1216ef1f9562", @ANYRES16=r6, @ANYBLOB="00042abd7000fedbdf25030000000900030073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 3m19.342230407s ago: executing program 37 (id=1580): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x80000001}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400000000000000000000000000000000010800060001000000060001000a"], 0x44}}, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/key-users\x00', 0x0, 0x0) pread64(r5, &(0x7f0000002100)=""/172, 0xac, 0x3) setsockopt$sock_int(r4, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x2) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a3200000000090001"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="dfa2fa4f2fed05d7f4cd52b178567b3e13f55b9146dec747ee99365b5eadd2d1e6c198e7d9e962a280c8dee5b5090000000000000037515a619d75f49d870aff03e7c29a138f669b81c830e3b5dc3cc54c3e73d963ea507e87f2949230b8d081bc487b83e28fee107dffe10059287d51fb0f12733ce2d5606ad3f2d60fa0d27687062cf4ae412f252b2ebf18ac4f916326c8af752027fcddfa7095c0706cf86596ff0000000000000059fdca53fe59f12d90aefeb3e8aa9e885df83bed35985674126e2b6867197bbd08ac5114de00858d5ea8d0cc865b539080d98b55d1270bae7159f6ea25ecd3651f5cbcf5ae4b601e16735924128599dc619a570ca0e1b3731367bddf4b221339082026eaa1fb5c8c80456d3a0447931e10557194cbd4352a95f987e45f6eabc021ab6441088eb92bb32eaa0c020be6f2b7e3eb90fc37c28cb6f6df9633bcda1216ef1f9562", @ANYRES16=r6, @ANYBLOB="00042abd7000fedbdf25030000000900030073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 9.280312047s ago: executing program 6 (id=2151): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0x5015, 0x0) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000040)) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac3(r1, &(0x7f0000000340)={0x14, &(0x7f00000001c0)={0x40, 0x22, 0xe7, {0xe7, 0xe, "3d004199432f597aaa8032fbd90c950d03e92c5749f68df4db8b936ef00b3de695d694e69587184dfec873d2be50ebcb1476faed3d7e6522a50e341c4636bf88ae8d09de507fe2e69a7132a58cd29d886ea5ac17bc244703ad1fb9600d3c03b388a200c1230e8060bf00a90b1b53357d544ae374ad266611d271643591c3a062672623584b542adb5365c9a6720032c1145a4313e4b69629ce9a19d10c4bd756b427ff4c443162443c8a59916f361d743541e52498d6caa66ca025625da9854b35ac0ca00e3009983b7b7a74b503aae359df9db851aa957ef4c37ef60c0fe696bfff91b0a2"}}, &(0x7f00000002c0)={0x0, 0x3, 0x56, @string={0x56, 0x3, "57c88cd01327cfd250446735a00a1ea3ed864f14da4702d8d16e9d3f9150a990f52c62a28a5f7cb3ea965563c10c382e60e1c226497969de73de2d679f0d3e3434eb6bdbf6cfbd6fa6ba26d7ffdee8d31344d42a"}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x0, 0x0, 0xb3, "345b9c69193db9aab31cb40948fa39f38d890af15004ec493fa9d5c6d19c279a9618deeafb6000ad0e57c4923cd3cdeb3af2ee20b4ab9b2e494569a86e8c8bb7f99f6b3d592652b3077c83f2a8bd4a40179d3128a3087dd54c3e808682dc599b54460614821dbf2d57c41e631497935cd1d69775994e6563d40d1276c66a8974ef13158c500ca858f8218d78b2f036c688bb9842a04dae63847652d3ae9dffc1cac358ee0dcdb16ee652b6c5d843569e0a6b18"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000600)={0x20, 0x81, 0x1, '.'}, &(0x7f0000000640)={0x20, 0x82, 0x3, "4bc562"}, &(0x7f0000000680)={0x20, 0x83, 0x1, '\b'}, &(0x7f00000006c0)={0x20, 0x84, 0x1, 'Z'}, &(0x7f0000000700)={0x20, 0x85, 0x3, "792b03"}}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r3, 0x1, 0xfffffffd, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) 8.122305261s ago: executing program 9 (id=2153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000440)="0f01cf6726a466b9280a000066b873ea000066ba000000000f30f20fe67c0066b9600000000f3266b9210900000f323e3e0fc7ab01000f0766b9300a000066b800a0000066ba000000000f300f09", 0x4e}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) preadv(r2, &(0x7f0000003780), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38c1aa08ac8e505d044fd5000700", @ANYRES16, @ANYRESDEC=r3, @ANYRESHEX=r0], 0x38}}, 0x0) ptrace$cont(0x18, 0x0, 0x4, 0x81) 7.165619635s ago: executing program 9 (id=2157): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, 0x0}) (fail_nth: 1) 6.95117119s ago: executing program 9 (id=2158): r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.667285188s ago: executing program 9 (id=2160): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x201d, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 5.909473141s ago: executing program 6 (id=2161): syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e130100c900"], 0x16) 5.429598298s ago: executing program 6 (id=2162): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f01"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="0000f50000000341", @ANYRES8], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.53143807s ago: executing program 9 (id=2163): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="201504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000003c0)={0x14, &(0x7f0000000140)={0x40, 0x24, 0xe5, {0xe5, 0x3, "7cc53f7f1b3e72b23a17bf7482af871936060964c12196806566c6d591661e55df648e802751f48e39ee4d90c8cd7f597e195c68db90bd4887b23900c5ba75edf5f2e50affa660464f59c9a3564135c2143602abdd40cfc210d592811f958a5489cec4be32b63a4b435771a3f5f1778bcb4a51545794db2030c1909cd7667c9bec65bd1e8e7edfb6606b9febe36e1e9478b083de19ace54c83b4b703b87faf572fae2e8d081e87255f8376576736acde681169dc78eef8a58d5bbcd93113363d9a8309024a3bc439260f7ae09f9ee4118e40b2a3e1e551937c5f5b745724fd9df2bd0f"}}, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x1c, &(0x7f00000004c0)={0x20, 0xd, 0x82, "9798fce6ce7be53a3c12978a9a1430702ef814f220b1f6adcb50efb98ea9f3c1c67c3438ff9c4ad7c93ac94cc2de86025c73b9ab7b78f41f219f7b86dc9d9d5b5a49bfe9f8e80c95f9b2167236367f4004ef13afb0c0b3bdb692c4a2007625a71b5a73e571bb6717d37c1ecfcb30c849561ccfa30f9d0064218257c179e63783f63c"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x5}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000440)={0x20, 0xc98dfa9b6969f6bb, 0x4, "0e3b45ca"}, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) 4.401609813s ago: executing program 8 (id=2164): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x141000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$vhost_msg_v2(r1, &(0x7f0000002b00)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000000)=""/62, 0x3e, &(0x7f0000000080), 0x1, 0x3}}, 0x48) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000001500)={0x44, &(0x7f0000000340)={0x0, 0x5, 0x1, ';'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) 2.461103663s ago: executing program 0 (id=2167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c000000030a010800000000000000000a00000c0900010073797a31000000000c0002400000000000000002040004800a00b4ec9b6cde000700726f7574650000001400000011000100000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x200000a4}, 0x20008040) 2.304414691s ago: executing program 0 (id=2168): r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.197462373s ago: executing program 6 (id=2169): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}}, 0xb8}}, 0x2c000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0010"], 0xb8}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x4, 0x0, &(0x7f00000002c0)=[@exit_looper], 0x0, 0x0, 0x0}) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf250200000000000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 2.15352256s ago: executing program 0 (id=2170): syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e130100c900"], 0x16) 1.736693698s ago: executing program 6 (id=2171): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88c0, 0x179) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) syz_usb_connect(0x7ffffffe, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x6c, 0xa7, 0x6e, 0x8, 0x50d, 0x109, 0xc8b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x2, 0x0, 0x8, "", [{{0x9, 0x4, 0xfe, 0x11, 0x0, 0xbc, 0xeb, 0x71, 0x4}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 1.7198181s ago: executing program 0 (id=2172): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x42901, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) rt_sigsuspend(&(0x7f0000000000)={[0xd289]}, 0x8) 1.373104327s ago: executing program 9 (id=2173): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x151b242d) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) read(r0, &(0x7f0000000400)=""/4096, 0x1000) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0xff03) syz_usb_control_io(r5, 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x5, 0x1, 0x3, 0x6, 0x2, "43fb3a2782c6f0da9cf7aa22bf02768c1c97c8"}) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000003c0)={0x52, 0x0, 0xac, {0x5, 0x1}, {0x4c, 0x2}, @const={0x4, {0xb, 0x5, 0x10, 0x8f}}}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) 1.049447203s ago: executing program 6 (id=2174): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint={0x0, 0x200}}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000002, 0x0, 0x7}]}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f00000000c0)={0x6, 0x401}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000040)={0x27, {0x5f, 0xa, 0x8, 0x2, 0x9, 0x9}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 862.868052ms ago: executing program 0 (id=2175): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x2004402, &(0x7f00000000c0)=ANY=[@ANYBLOB=',access=user,msize=0']) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 799.671707ms ago: executing program 8 (id=2176): syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESOCT], 0x16) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 714.039273ms ago: executing program 0 (id=2177): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f01"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="0000f50000000341", @ANYRES8], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 650.659383ms ago: executing program 8 (id=2178): r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 395.644517ms ago: executing program 8 (id=2179): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x0, 0x6}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x0, 0x2, 0x2, 0x5, 0x3, 0xe32}, 0x20) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000060000000300000012cd1a17b37acc7d72a412966f20766b85d9d1ed8eedc824847b85bd9e3145f511009bd2f9ff608985f0a71219d8accc6392d5a9bb4ce84da30aa93933cda4b95b7b005525fc66aa24880e85b714fc4e8172510ea60dd63266b9a91ef578cc074e929805f7877aeccedaa152113bed80b8e6f6ce20478f4062d4b7d236433b5dbb513c5f2c9feb495546c0fa05c1ca2490cf9e77f4bc5188064efcfcc8fc93"]) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f00000000c0)={0x0, 0xea60}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0xfffffdfe, 0xe2ec0a7, 0x3, 0x7fff, 0xb0, "3d2b9809006e0000cd681ec267a000", 0x2, 0x10}) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000380)='\v', 0x1}], 0x1) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) socket$inet(0x2, 0x3, 0xad) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r7, 0x0, 0x0) 113.571097ms ago: executing program 8 (id=2180): 0s ago: executing program 8 (id=2181): r0 = fsopen(&(0x7f00000000c0)='cpuset\x00', 0xa89a409a767d94ae) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x18) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='bfs\x00', 0x800000, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') openat2(r1, &(0x7f00000008c0)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0xb}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00') syz_usb_connect$uac1(0x6, 0x92, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.520521][T12570] RSP: 002b:00007f36c4e46028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 648.520548][T12570] RAX: ffffffffffffffda RBX: 00007f36c6e75fa0 RCX: 00007f36c6bee0d9 [ 648.520560][T12570] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 648.520569][T12570] RBP: 00007f36c4e46090 R08: 0000000000000000 R09: 0000000000000000 [ 648.520579][T12570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.520589][T12570] R13: 00007f36c6e76038 R14: 00007f36c6e75fa0 R15: 00007ffd8d73ad18 [ 648.520613][T12570] [ 649.598883][T11837] usb 10-1: USB disconnect, device number 33 [ 649.726997][ T7021] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 649.876688][ T7021] usb 7-1: Using ep0 maxpacket: 32 [ 649.878865][ T7021] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.878892][ T7021] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 649.881526][ T7021] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 649.881557][ T7021] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.881580][ T7021] usb 7-1: Product: syz [ 649.881597][ T7021] usb 7-1: Manufacturer: syz [ 649.881612][ T7021] usb 7-1: SerialNumber: syz [ 649.937293][T12332] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 649.966447][ T7021] usb 7-1: config 0 descriptor?? [ 650.076659][T11837] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 650.116727][T12332] usb 1-1: Using ep0 maxpacket: 32 [ 650.121378][T12332] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.121502][T12332] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 650.124769][T12332] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 650.124805][T12332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.124820][T12332] usb 1-1: Product: syz [ 650.124831][T12332] usb 1-1: Manufacturer: syz [ 650.124842][T12332] usb 1-1: SerialNumber: syz [ 650.185726][T12332] usb 1-1: config 0 descriptor?? [ 650.207312][T11837] usb 10-1: device descriptor read/64, error -71 [ 650.239857][ T7021] usb 9-1: USB disconnect, device number 30 [ 650.446728][T11837] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 650.586737][ T7021] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 650.586956][T11837] usb 10-1: device descriptor read/64, error -71 [ 650.697063][T11837] usb usb10-port1: attempt power cycle [ 650.742524][ T7021] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 650.742558][ T7021] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 650.742588][ T7021] usb 9-1: Product: syz [ 650.742609][ T7021] usb 9-1: SerialNumber: syz [ 650.751441][ T7021] usb 9-1: config 0 descriptor?? [ 650.789969][ T7021] hso 9-1:0.0: Not our interface [ 651.046830][T11837] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 651.069090][T11837] usb 10-1: device descriptor read/8, error -71 [ 651.307688][T11837] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 651.328908][T11837] usb 10-1: device descriptor read/8, error -71 [ 651.440571][T11837] usb usb10-port1: unable to enumerate USB device [ 652.511553][T11837] usb 7-1: USB disconnect, device number 101 [ 652.596347][ T7021] usb 1-1: USB disconnect, device number 112 [ 652.906823][T11837] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 653.061205][T11837] usb 7-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 653.061260][T11837] usb 7-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 653.061291][T11837] usb 7-1: config 1 interface 0 has no altsetting 0 [ 653.091059][T11837] usb 7-1: string descriptor 0 read error: -22 [ 653.091346][T11837] usb 7-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 653.091422][T11837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.427173][ T5772] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 653.576814][ T5772] usb 10-1: device descriptor read/64, error -71 [ 653.640414][T12332] usb 9-1: USB disconnect, device number 31 [ 653.788588][T11837] usbhid 7-1:1.0: can't add hid device: -71 [ 653.788683][T11837] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 653.804972][T11837] usb 7-1: USB disconnect, device number 102 [ 653.826874][ T5772] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 653.959400][ T5772] usb 10-1: device descriptor read/64, error -71 [ 654.046718][T12332] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 654.067571][ T5772] usb usb10-port1: attempt power cycle [ 654.216772][T12332] usb 9-1: Using ep0 maxpacket: 32 [ 654.230134][T12332] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.230163][T12332] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 654.232814][T12332] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 654.232836][T12332] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.232931][T12332] usb 9-1: Product: syz [ 654.232949][T12332] usb 9-1: Manufacturer: syz [ 654.232965][T12332] usb 9-1: SerialNumber: syz [ 654.299887][T12332] usb 9-1: config 0 descriptor?? [ 654.407706][ T5772] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 654.427515][ T5772] usb 10-1: device descriptor read/8, error -71 [ 654.666795][T12332] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 654.666965][ T5772] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 654.687280][ T5772] usb 10-1: device descriptor read/8, error -71 [ 654.699717][T11837] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 654.808332][ T5772] usb usb10-port1: unable to enumerate USB device [ 654.836724][T12332] usb 7-1: Using ep0 maxpacket: 8 [ 654.842537][T12332] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 654.842570][T12332] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.842594][T12332] usb 7-1: Product: syz [ 654.842605][T12332] usb 7-1: Manufacturer: syz [ 654.842627][T12332] usb 7-1: SerialNumber: syz [ 654.860184][T11837] usb 1-1: Using ep0 maxpacket: 32 [ 654.894863][T11837] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 654.894895][T11837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.894916][T11837] usb 1-1: config 0 has no interface number 0 [ 654.894962][T11837] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 654.894987][T11837] usb 1-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 654.895309][T12332] usb 7-1: config 0 descriptor?? [ 654.950669][T11837] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 654.950700][T11837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.950722][T11837] usb 1-1: Product: syz [ 654.950738][T11837] usb 1-1: Manufacturer: syz [ 654.950755][T11837] usb 1-1: SerialNumber: syz [ 654.991330][T12332] gspca_main: se401-2.14.0 probing 047d:5003 [ 655.000514][T11837] usb 1-1: config 0 descriptor?? [ 655.018331][T11837] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 655.018617][T11837] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 655.362024][T12332] gspca_se401: ExtraFeatures: 255 [ 655.583122][T12332] input: se401 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input37 [ 655.604233][T12332] usb 7-1: USB disconnect, device number 103 [ 656.366715][ T10] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 656.516669][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 656.524518][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.539718][ T10] usb 7-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 656.539753][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.539777][ T10] usb 7-1: Product: syz [ 656.539793][ T10] usb 7-1: Manufacturer: syz [ 656.539879][ T10] usb 7-1: SerialNumber: syz [ 656.545884][ T10] usb 7-1: config 0 descriptor?? [ 656.604826][ T10] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 656.845141][ T5772] usb 9-1: USB disconnect, device number 32 [ 657.382944][ T10] input: gspca_pac7302 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input38 [ 657.406717][T11837] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 657.436751][T12332] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 657.560871][T11837] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 657.560906][T11837] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 657.560937][T11837] usb 10-1: Product: syz [ 657.560955][T11837] usb 10-1: SerialNumber: syz [ 657.601010][T12332] usb 9-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 657.601067][T12332] usb 9-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 657.601101][T12332] usb 9-1: config 1 interface 0 has no altsetting 0 [ 657.606155][T11837] usb 10-1: config 0 descriptor?? [ 657.623876][ T5772] usb 7-1: USB disconnect, device number 104 [ 657.658702][T12332] usb 9-1: string descriptor 0 read error: -22 [ 657.658873][T12332] usb 9-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 657.658895][T12332] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.729195][T11535] usb 1-1: USB disconnect, device number 113 [ 657.735129][T11837] hso 10-1:0.0: Not our interface [ 658.053626][T12659] binder: 12658:12659 ioctl c0502100 200000000580 returned -22 [ 658.076477][ T38] audit: type=1804 audit(1786500681.511:113): pid=12659 uid=0 auid=4294967295 ses=4294967295 op=measuring_policy cause=store_entry comm="syz.0.1898" name="ima_policy_written" res=0 errno=-17 [ 658.076950][ T38] audit: type=1807 audit(1786500681.521:114): UNKNOWN=me res=0 [ 658.077219][ T38] audit: type=1802 audit(1786500681.521:115): pid=12659 uid=0 auid=4294967295 ses=4294967295 op=update_policy cause=invalid-policy comm="syz.0.1898" res=0 errno=0 [ 658.078492][T12658] ima: policy update failed [ 658.078687][ T38] audit: type=1802 audit(1786500681.521:116): pid=12658 uid=0 auid=4294967295 ses=4294967295 op=policy_update cause=failed comm="syz.0.1898" res=0 errno=0 [ 658.236774][T12332] usbhid 9-1:1.0: can't add hid device: -71 [ 658.236916][T12332] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 658.247704][T12332] usb 9-1: USB disconnect, device number 33 [ 658.576749][T11837] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 658.706786][T11837] usb 7-1: device descriptor read/64, error -71 [ 658.948684][T11837] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 659.076745][T11837] usb 7-1: device descriptor read/64, error -71 [ 659.127516][T11535] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 659.187128][T12332] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 659.188632][T11837] usb usb7-port1: attempt power cycle [ 659.276644][T11535] usb 9-1: Using ep0 maxpacket: 32 [ 659.283241][T11535] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.283270][T11535] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 659.285860][T11535] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 659.285892][T11535] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.285913][T11535] usb 9-1: Product: syz [ 659.285928][T11535] usb 9-1: Manufacturer: syz [ 659.285949][T11535] usb 9-1: SerialNumber: syz [ 659.334541][T11535] usb 9-1: config 0 descriptor?? [ 659.346774][T12332] usb 1-1: Using ep0 maxpacket: 16 [ 659.374800][T12332] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 659.374832][T12332] usb 1-1: config 0 has no interface number 0 [ 659.374880][T12332] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 659.374907][T12332] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 659.412878][T12332] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 659.412913][T12332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.412935][T12332] usb 1-1: Product: syz [ 659.412951][T12332] usb 1-1: Manufacturer: syz [ 659.412969][T12332] usb 1-1: SerialNumber: syz [ 659.456080][T12332] usb 1-1: config 0 descriptor?? [ 659.457831][T12670] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 659.457960][T12670] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 659.546727][T11837] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 659.567962][T11837] usb 7-1: device descriptor read/8, error -71 [ 659.674480][T12670] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 659.674621][T12670] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 659.816672][T11837] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 659.838017][T11837] usb 7-1: device descriptor read/8, error -71 [ 659.876046][T12332] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 659.947411][T11837] usb usb7-port1: unable to enumerate USB device [ 660.342360][T11535] usb 10-1: USB disconnect, device number 42 [ 660.856659][ T7021] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 660.924799][T12332] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 660.924835][T12332] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 660.925055][T12332] asix 1-1:0.34: probe with driver asix failed with error -71 [ 660.973047][T12332] usb 1-1: USB disconnect, device number 114 [ 661.046684][ T7021] usb 10-1: Using ep0 maxpacket: 32 [ 661.049160][ T7021] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 661.049191][ T7021] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.049212][ T7021] usb 10-1: config 0 has no interface number 0 [ 661.049256][ T7021] usb 10-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 661.049280][ T7021] usb 10-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 661.051940][ T7021] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 661.051972][ T7021] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.051994][ T7021] usb 10-1: Product: syz [ 661.052009][ T7021] usb 10-1: Manufacturer: syz [ 661.052026][ T7021] usb 10-1: SerialNumber: syz [ 661.146824][ T7021] usb 10-1: config 0 descriptor?? [ 661.182386][ T7021] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 661.182584][ T7021] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22 [ 661.414809][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1906'. [ 661.974673][T12332] usb 9-1: USB disconnect, device number 34 [ 662.206663][ T10] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 662.366834][T12332] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 662.367439][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 662.370017][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.375463][ T10] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 662.375484][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.375500][ T10] usb 1-1: Product: syz [ 662.375511][ T10] usb 1-1: Manufacturer: syz [ 662.375522][ T10] usb 1-1: SerialNumber: syz [ 662.404297][ T10] usb 1-1: config 0 descriptor?? [ 662.439646][ T10] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 662.520701][T12332] usb 9-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 662.520754][T12332] usb 9-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 662.520868][T12332] usb 9-1: config 1 interface 0 has no altsetting 0 [ 662.525490][T12332] usb 9-1: string descriptor 0 read error: -22 [ 662.525640][T12332] usb 9-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 662.525725][T12332] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.087991][T11535] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 663.190409][T12332] usbhid 9-1:1.0: can't add hid device: -71 [ 663.190564][T12332] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 663.215324][T12332] usb 9-1: USB disconnect, device number 35 [ 663.326685][T11535] usb 7-1: Using ep0 maxpacket: 8 [ 663.333519][ T10] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input39 [ 663.334189][T11535] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 663.334218][T11535] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.334241][T11535] usb 7-1: Product: syz [ 663.334257][T11535] usb 7-1: Manufacturer: syz [ 663.334460][T11535] usb 7-1: SerialNumber: syz [ 663.405648][T11535] usb 7-1: config 0 descriptor?? [ 663.422402][T11535] gspca_main: se401-2.14.0 probing 047d:5003 [ 663.533277][T12332] usb 1-1: USB disconnect, device number 115 [ 663.655189][ T10] usb 10-1: USB disconnect, device number 43 [ 664.055401][T11535] input: se401 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input40 [ 664.104917][T11535] usb 7-1: USB disconnect, device number 109 [ 664.200302][ T5772] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 664.352945][ T5772] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 664.352980][ T5772] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 664.353002][ T5772] usb 9-1: Product: syz [ 664.353018][ T5772] usb 9-1: SerialNumber: syz [ 664.377911][ T10] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 664.398626][ T5772] usb 9-1: config 0 descriptor?? [ 664.418209][ T5772] hso 9-1:0.0: Not our interface [ 664.508117][ T10] usb 10-1: device descriptor read/64, error -71 [ 664.750918][ T10] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 664.751126][T11837] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 664.876844][ T10] usb 10-1: device descriptor read/64, error -71 [ 664.896705][T11837] usb 1-1: Using ep0 maxpacket: 32 [ 664.899421][T11837] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 664.899450][T11837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.899475][T11837] usb 1-1: config 0 has no interface number 0 [ 664.899507][T11837] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 664.899524][T11837] usb 1-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 664.902095][T11837] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 664.902125][T11837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.902176][T11837] usb 1-1: Product: syz [ 664.902188][T11837] usb 1-1: Manufacturer: syz [ 664.902199][T11837] usb 1-1: SerialNumber: syz [ 664.918470][T11837] usb 1-1: config 0 descriptor?? [ 665.002713][ T10] usb usb10-port1: attempt power cycle [ 665.003502][T11837] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 665.008119][T11837] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 665.366760][ T10] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 665.398552][ T10] usb 10-1: device descriptor read/8, error -71 [ 665.547246][ T7021] usb 7-1: new low-speed USB device number 110 using dummy_hcd [ 665.656899][ T10] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 665.679102][ T10] usb 10-1: device descriptor read/8, error -71 [ 665.719618][ T7021] usb 7-1: unable to get BOS descriptor or descriptor too short [ 665.719711][ T7021] usb 7-1: too many configurations: 188, using maximum allowed: 8 [ 665.721591][ T7021] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 665.721632][ T7021] usb 7-1: can't read configurations, error -61 [ 665.787831][ T10] usb usb10-port1: unable to enumerate USB device [ 665.846781][ T7021] usb 7-1: new low-speed USB device number 111 using dummy_hcd [ 666.000056][ T7021] usb 7-1: unable to get BOS descriptor or descriptor too short [ 666.000228][ T7021] usb 7-1: too many configurations: 188, using maximum allowed: 8 [ 666.002310][ T7021] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 666.002350][ T7021] usb 7-1: can't read configurations, error -61 [ 666.006259][ T7021] usb usb7-port1: attempt power cycle [ 666.346795][ T7021] usb 7-1: new low-speed USB device number 112 using dummy_hcd [ 666.379785][ T7021] usb 7-1: unable to get BOS descriptor or descriptor too short [ 666.379871][ T7021] usb 7-1: too many configurations: 188, using maximum allowed: 8 [ 666.381893][ T7021] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 666.381929][ T7021] usb 7-1: can't read configurations, error -61 [ 666.507160][ T7021] usb 7-1: new low-speed USB device number 113 using dummy_hcd [ 666.531708][ T7021] usb 7-1: unable to get BOS descriptor or descriptor too short [ 666.531792][ T7021] usb 7-1: too many configurations: 188, using maximum allowed: 8 [ 666.533581][ T7021] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 666.533619][ T7021] usb 7-1: can't read configurations, error -61 [ 666.534095][ T7021] usb usb7-port1: unable to enumerate USB device [ 667.047537][ T5772] usb 9-1: USB disconnect, device number 36 [ 667.397903][ T5772] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 667.527925][T11535] usb 1-1: USB disconnect, device number 116 [ 667.559554][ T5772] usb 9-1: Using ep0 maxpacket: 32 [ 667.572210][ T5772] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 667.572242][ T5772] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.572264][ T5772] usb 9-1: config 0 has no interface number 0 [ 667.572313][ T5772] usb 9-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 667.572338][ T5772] usb 9-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 667.586084][ T5772] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 667.586181][ T5772] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.588475][ T5772] usb 9-1: Product: syz [ 667.588568][ T5772] usb 9-1: Manufacturer: syz [ 667.588620][ T5772] usb 9-1: SerialNumber: syz [ 667.597158][ T10] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 667.674968][ T5772] usb 9-1: config 0 descriptor?? [ 667.691533][ T5772] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 667.692782][ T5772] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -22 [ 667.836702][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 667.839879][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.840015][ T10] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 667.842553][ T10] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 667.842582][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.842604][ T10] usb 10-1: Product: syz [ 667.842621][ T10] usb 10-1: Manufacturer: syz [ 667.842632][ T10] usb 10-1: SerialNumber: syz [ 667.907298][ T10] usb 10-1: config 0 descriptor?? [ 668.027063][T11535] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 668.178723][T11535] usb 1-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 668.178770][T11535] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 668.178791][T11535] usb 1-1: config 1 interface 0 has no altsetting 0 [ 668.182247][T11535] usb 1-1: string descriptor 0 read error: -22 [ 668.182373][T11535] usb 1-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 668.182392][T11535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.666799][T11535] usbhid 1-1:1.0: can't add hid device: -71 [ 668.666931][T11535] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 668.697914][T11535] usb 1-1: USB disconnect, device number 117 [ 668.716695][ T5772] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 668.870708][ T5772] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 668.870742][ T5772] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 668.870765][ T5772] usb 7-1: Product: syz [ 668.870781][ T5772] usb 7-1: SerialNumber: syz [ 668.876187][ T5772] usb 7-1: config 0 descriptor?? [ 668.914880][ T5772] hso 7-1:0.0: Not our interface [ 669.496873][T11535] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 669.646852][T11535] usb 1-1: Using ep0 maxpacket: 16 [ 669.649041][T11535] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 669.649070][T11535] usb 1-1: config 0 has no interface number 0 [ 669.649112][T11535] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 669.649132][T11535] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 669.651693][T11535] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 669.651715][T11535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.651730][T11535] usb 1-1: Product: syz [ 669.651741][T11535] usb 1-1: Manufacturer: syz [ 669.651759][T11535] usb 1-1: SerialNumber: syz [ 669.657986][T11535] usb 1-1: config 0 descriptor?? [ 669.741019][T12752] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 669.741166][T12752] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 669.942936][T12752] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 669.943087][T12752] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 670.146128][ T10] usb 9-1: USB disconnect, device number 37 [ 670.149557][T11535] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 670.301442][ T7021] usb 10-1: USB disconnect, device number 48 [ 670.926684][ T5772] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 671.057006][ T5772] usb 9-1: device descriptor read/64, error -71 [ 671.151383][T12771] FAULT_INJECTION: forcing a failure. [ 671.151383][T12771] name failslab, interval 1, probability 0, space 0, times 0 [ 671.151424][T12771] CPU: 0 UID: 0 PID: 12771 Comm: syz.9.1932 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 671.151455][T12771] Tainted: [L]=SOFTLOCKUP [ 671.151463][T12771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 671.151477][T12771] Call Trace: [ 671.151497][T12771] [ 671.151507][T12771] dump_stack_lvl+0xe8/0x150 [ 671.151543][T12771] should_fail_ex+0x467/0x600 [ 671.151581][T12771] should_failslab+0xa8/0x100 [ 671.151609][T12771] ? ceph_msg_new2+0x3b/0x4d0 [ 671.151637][T12771] kmem_cache_alloc_noprof+0x9e/0x680 [ 671.151671][T12771] ? ceph_msg_new2+0x3b/0x4d0 [ 671.151704][T12771] ceph_msg_new2+0x3b/0x4d0 [ 671.151736][T12771] ceph_monc_init+0x5f0/0xb10 [ 671.151779][T12771] ceph_create_client+0x225/0x310 [ 671.151817][T12771] ceph_get_tree+0x1ca/0x1a40 [ 671.151851][T12771] ? cap_capable+0x123/0x460 [ 671.151877][T12771] ? safesetid_security_capable+0xa9/0x1a0 [ 671.151915][T12771] vfs_get_tree+0x92/0x2a0 [ 671.151946][T12771] vfs_cmd_create+0xa2/0x200 [ 671.151984][T12771] __se_sys_fsconfig+0x6bf/0x810 [ 671.152024][T12771] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 671.152055][T12771] ? ksys_write+0x248/0x270 [ 671.152085][T12771] ? __pfx_ksys_write+0x10/0x10 [ 671.152117][T12771] ? __x64_sys_fsconfig+0x20/0xc0 [ 671.152151][T12771] do_syscall_64+0x17b/0x530 [ 671.152175][T12771] ? irqentry_exit+0x10f/0x8f0 [ 671.152197][T12771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.152221][T12771] ? clear_bhb_loop+0x40/0x90 [ 671.152251][T12771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.152274][T12771] RIP: 0033:0x7ffad783e0d9 [ 671.152295][T12771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.152316][T12771] RSP: 002b:00007ffad5a96028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 671.152340][T12771] RAX: ffffffffffffffda RBX: 00007ffad7ac5fa0 RCX: 00007ffad783e0d9 [ 671.152357][T12771] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 671.152372][T12771] RBP: 00007ffad5a96090 R08: 0000000000000000 R09: 0000000000000000 [ 671.152387][T12771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.152400][T12771] R13: 00007ffad7ac6038 R14: 00007ffad7ac5fa0 R15: 00007fffc71ea2e8 [ 671.152435][T12771] [ 671.424234][T11535] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 671.424259][T11535] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 671.424764][T11535] asix 1-1:0.34: probe with driver asix failed with error -71 [ 671.483802][T11535] usb 1-1: USB disconnect, device number 118 [ 671.580136][T12332] usb 7-1: USB disconnect, device number 114 [ 671.628998][ T5772] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 671.756682][ T5772] usb 9-1: device descriptor read/64, error -71 [ 671.869981][ T5772] usb usb9-port1: attempt power cycle [ 672.236744][ T5772] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 672.257295][ T5772] usb 9-1: device descriptor read/8, error -71 [ 672.336687][T12332] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 672.490018][T12332] usb 10-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 672.490072][T12332] usb 10-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 672.490102][T12332] usb 10-1: config 1 interface 0 has no altsetting 0 [ 672.500730][ T5772] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 672.546312][ T5772] usb 9-1: device descriptor read/8, error -71 [ 672.548335][T12332] usb 10-1: string descriptor 0 read error: -22 [ 672.548499][T12332] usb 10-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 672.548525][T12332] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.648131][ T5772] usb usb9-port1: unable to enumerate USB device [ 672.936859][ T10] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 673.024616][T12332] usbhid 10-1:1.0: can't add hid device: -71 [ 673.068852][T12332] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 673.075990][T12332] usb 10-1: USB disconnect, device number 49 [ 673.091108][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 673.095444][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.095472][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 673.104544][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 673.104578][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.104601][ T10] usb 1-1: Product: syz [ 673.104617][ T10] usb 1-1: Manufacturer: syz [ 673.104633][ T10] usb 1-1: SerialNumber: syz [ 673.187174][ T10] usb 1-1: config 0 descriptor?? [ 673.312693][ T38] audit: type=1326 audit(1786500696.751:117): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12786 comm="syz.6.1937" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f36c6bee0d9 code=0x0 [ 674.288364][ T10] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 674.326363][T12807] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1942'. [ 674.415523][T12808] netlink: 'syz.6.1942': attribute type 16 has an invalid length. [ 674.415582][T12808] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.1942'. [ 674.461679][ T10] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 674.461703][ T10] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 674.461719][ T10] usb 10-1: Product: syz [ 674.461729][ T10] usb 10-1: SerialNumber: syz [ 674.499963][ T10] usb 10-1: config 0 descriptor?? [ 674.516309][ T10] hso 10-1:0.0: Not our interface [ 674.587515][T12332] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 674.738138][T12332] usb 9-1: Using ep0 maxpacket: 16 [ 674.740167][T12332] usb 9-1: config 0 has an invalid interface number: 34 but max is 0 [ 674.740197][T12332] usb 9-1: config 0 has no interface number 0 [ 674.740237][T12332] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 674.740256][T12332] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 674.743279][T12332] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 674.743311][T12332] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.743337][T12332] usb 9-1: Product: syz [ 674.743347][T12332] usb 9-1: Manufacturer: syz [ 674.743359][T12332] usb 9-1: SerialNumber: syz [ 674.829621][T12332] usb 9-1: config 0 descriptor?? [ 674.841511][T12806] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 674.841672][T12806] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 675.044913][T12806] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 675.045043][T12806] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 675.156689][ T10] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 675.246431][T12332] asix 9-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 675.316390][ T10] usb 7-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 675.316443][ T10] usb 7-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 675.316476][ T10] usb 7-1: config 1 interface 0 has no altsetting 0 [ 675.358329][ T10] usb 7-1: string descriptor 0 read error: -22 [ 675.358480][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 675.358507][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.679294][T12332] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 675.680120][T12332] asix 9-1:0.34: probe with driver asix failed with error -32 [ 675.783858][T11837] usb 1-1: USB disconnect, device number 119 [ 675.846176][ T10] usbhid 7-1:1.0: can't add hid device: -71 [ 675.846281][ T10] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 675.865847][ T10] usb 7-1: USB disconnect, device number 115 [ 676.209368][T11837] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 676.366767][T11837] usb 1-1: Using ep0 maxpacket: 32 [ 676.370319][T11837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.370349][T11837] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 676.373075][T11837] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 676.373105][T11837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.373131][T11837] usb 1-1: Product: syz [ 676.373159][T11837] usb 1-1: Manufacturer: syz [ 676.373176][T11837] usb 1-1: SerialNumber: syz [ 676.413741][T11837] usb 1-1: config 0 descriptor?? [ 677.093802][T11837] usb 10-1: USB disconnect, device number 50 [ 677.306995][ T6995] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 677.327349][ T5772] usb 9-1: USB disconnect, device number 42 [ 677.456866][ T6995] usb 7-1: Using ep0 maxpacket: 32 [ 677.460335][ T6995] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 677.460365][ T6995] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.460387][ T6995] usb 7-1: config 0 has no interface number 0 [ 677.460434][ T6995] usb 7-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 677.462916][ T6995] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 677.462945][ T6995] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.462966][ T6995] usb 7-1: Product: syz [ 677.462984][ T6995] usb 7-1: Manufacturer: syz [ 677.462996][ T6995] usb 7-1: SerialNumber: syz [ 677.540786][ T6995] usb 7-1: config 0 descriptor?? [ 677.551064][ T6995] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 677.551482][ T6995] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 677.666653][T11837] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 677.816786][T11837] usb 10-1: Using ep0 maxpacket: 32 [ 677.819017][T11837] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 677.819048][T11837] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.819072][T11837] usb 10-1: config 0 has no interface number 0 [ 677.819105][T11837] usb 10-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 677.819124][T11837] usb 10-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 677.821721][T11837] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 677.821753][T11837] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.821775][T11837] usb 10-1: Product: syz [ 677.821790][T11837] usb 10-1: Manufacturer: syz [ 677.821811][T11837] usb 10-1: SerialNumber: syz [ 677.826274][T11837] usb 10-1: config 0 descriptor?? [ 677.875457][T11837] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 677.876221][T11837] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22 [ 678.046724][ T5772] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 678.196733][ T5772] usb 9-1: Using ep0 maxpacket: 8 [ 678.201607][ T5772] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 678.201640][ T5772] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.201656][ T5772] usb 9-1: Product: syz [ 678.201667][ T5772] usb 9-1: Manufacturer: syz [ 678.201678][ T5772] usb 9-1: SerialNumber: syz [ 678.244329][ T5772] usb 9-1: config 0 descriptor?? [ 678.256327][ T5772] gspca_main: se401-2.14.0 probing 047d:5003 [ 678.656466][ T5772] gspca_se401: Wrong descriptor type [ 678.863094][ T5772] usb 9-1: USB disconnect, device number 43 [ 678.892869][T11837] usb 1-1: USB disconnect, device number 120 [ 678.981033][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1957'. [ 679.386802][ T5772] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 679.541919][ T5772] usb 1-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 679.541958][ T5772] usb 1-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 679.541984][ T5772] usb 1-1: Product: syz [ 679.542002][ T5772] usb 1-1: Manufacturer: syz [ 679.578630][ T5772] usb 1-1: config 0 descriptor?? [ 679.592005][ T5772] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 679.594985][ T5772] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 679.782997][T12866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.783678][T12866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.785385][T12332] usb 1-1: USB disconnect, device number 121 [ 679.816845][T12332] ftdi_sio 1-1:0.0: device disconnected [ 679.976653][ T5772] usb 9-1: new low-speed USB device number 44 using dummy_hcd [ 680.090027][ T6995] usb 7-1: USB disconnect, device number 116 [ 680.130724][ T5772] usb 9-1: unable to get BOS descriptor or descriptor too short [ 680.131955][ T5772] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 680.131989][ T5772] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 680.135779][ T5772] usb 9-1: string descriptor 0 read error: -22 [ 680.135923][ T5772] usb 9-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 680.135942][ T5772] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.225738][T12870] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 680.225880][T12870] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 680.264560][ T5772] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 680.455663][T12870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.486369][T12870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.610755][ T37] usb 10-1: USB disconnect, device number 51 [ 680.618096][ T6995] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 680.730377][ T38] audit: type=1807 audit(1786500704.171:118): UNKNOWN=mea%ure res=0 [ 680.730504][ T38] audit: type=1802 audit(1786500704.171:119): pid=12883 uid=0 auid=4294967295 ses=4294967295 op=update_policy cause=invalid-policy comm="syz.0.1963" res=0 errno=0 [ 680.731085][T12881] ima: policy update failed [ 680.731205][ T38] audit: type=1802 audit(1786500704.171:120): pid=12881 uid=0 auid=4294967295 ses=4294967295 op=policy_update cause=failed comm="syz.0.1963" res=0 errno=0 [ 680.796772][ T6995] usb 7-1: Using ep0 maxpacket: 8 [ 680.803329][ T6995] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 680.803365][ T6995] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.803489][ T6995] usb 7-1: Product: syz [ 680.803510][ T6995] usb 7-1: Manufacturer: syz [ 680.803527][ T6995] usb 7-1: SerialNumber: syz [ 680.859889][ T6995] usb 7-1: config 0 descriptor?? [ 680.872685][ T6995] gspca_main: se401-2.14.0 probing 047d:5003 [ 681.046636][ T37] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 681.200060][ T37] usb 10-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 681.200123][ T37] usb 10-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 681.200155][ T37] usb 10-1: config 1 interface 0 has no altsetting 0 [ 681.201610][T12332] usb 9-1: USB disconnect, device number 44 [ 681.270988][ T37] usb 10-1: string descriptor 0 read error: -22 [ 681.271130][ T37] usb 10-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 681.271163][ T37] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.292481][ T6995] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 681.292579][ T6995] se401 7-1:0.0: probe with driver se401 failed with error -71 [ 681.377766][ T6995] usb 7-1: USB disconnect, device number 117 [ 681.744164][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1966'. [ 681.953124][ T37] usbhid 10-1:1.0: can't add hid device: -71 [ 681.953268][ T37] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 682.052864][ T37] usb 10-1: USB disconnect, device number 52 [ 682.867071][ T6995] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 683.016889][ T6995] usb 9-1: Using ep0 maxpacket: 16 [ 683.035575][ T6995] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 683.035614][ T6995] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 683.035638][ T6995] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 683.035666][ T6995] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 683.035691][ T6995] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 683.044919][ T6995] usb 9-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 683.044953][ T6995] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.044988][ T6995] usb 9-1: Product: syz [ 683.045005][ T6995] usb 9-1: Manufacturer: syz [ 683.045022][ T6995] usb 9-1: SerialNumber: syz [ 683.058566][ T6995] usb 9-1: config 0 descriptor?? [ 683.074043][ T6995] port100 9-1:0.0: NFC: Could not get supported command types [ 683.298533][T12332] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 683.423668][T12914] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1975'. [ 683.446872][T12332] usb 10-1: Using ep0 maxpacket: 32 [ 683.454118][T12332] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 683.454153][T12332] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.454179][T12332] usb 10-1: config 0 has no interface number 0 [ 683.454233][T12332] usb 10-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 683.454263][T12332] usb 10-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 683.538445][T12332] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 683.538483][T12332] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.538510][T12332] usb 10-1: Product: syz [ 683.538528][T12332] usb 10-1: Manufacturer: syz [ 683.538546][T12332] usb 10-1: SerialNumber: syz [ 683.600151][T12332] usb 10-1: config 0 descriptor?? [ 683.606374][T12332] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 683.608094][T12332] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22 [ 683.969361][T11837] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 684.116749][T11837] usb 1-1: Using ep0 maxpacket: 8 [ 684.121910][T11837] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 684.121948][T11837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.121974][T11837] usb 1-1: Product: syz [ 684.121985][T11837] usb 1-1: Manufacturer: syz [ 684.121996][T11837] usb 1-1: SerialNumber: syz [ 684.166089][T11837] usb 1-1: config 0 descriptor?? [ 684.178198][T11837] gspca_main: se401-2.14.0 probing 047d:5003 [ 684.226919][ T6995] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 684.415449][ T6995] usb 7-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 684.415502][ T6995] usb 7-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 684.415532][ T6995] usb 7-1: config 1 interface 0 has no altsetting 0 [ 684.436184][ T6995] usb 7-1: string descriptor 0 read error: -22 [ 684.436329][ T6995] usb 7-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 684.436356][ T6995] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.900803][ T6995] usbhid 7-1:1.0: can't add hid device: -71 [ 684.900937][ T6995] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 684.935314][ T6995] usb 7-1: USB disconnect, device number 118 [ 685.303508][T11837] gspca_se401: read req failed req 0x06 error -19 [ 685.319625][T11837] usb 1-1: USB disconnect, device number 122 [ 685.341620][ T5673] udevd[5673]: setting mode of /dev/bus/usb/001/122 to 020664 failed: No such file or directory [ 685.341772][ T5673] udevd[5673]: setting owner of /dev/bus/usb/001/122 to uid=0, gid=0 failed: No such file or directory [ 685.518944][T11837] usb 9-1: USB disconnect, device number 45 [ 685.955406][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.955535][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.229737][T12332] usb 10-1: USB disconnect, device number 53 [ 686.715881][T12951] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1989'. [ 686.717165][T12332] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 686.873972][T12332] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.874002][T12332] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 686.875930][T12332] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 686.875967][T12332] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 686.875990][T12332] usb 9-1: SerialNumber: syz [ 686.929171][T11535] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 687.076801][T11535] usb 10-1: Using ep0 maxpacket: 8 [ 687.133137][T11535] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 687.133175][T11535] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.133782][T11535] usb 10-1: Product: syz [ 687.133803][T11535] usb 10-1: Manufacturer: syz [ 687.133822][T11535] usb 10-1: SerialNumber: syz [ 687.223800][T11535] usb 10-1: config 0 descriptor?? [ 687.298968][T12943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.299607][T12943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.328569][T12943] netlink: 'syz.8.1985': attribute type 27 has an invalid length. [ 687.328595][T12943] netlink: 164 bytes leftover after parsing attributes in process `syz.8.1985'. [ 687.353357][ T37] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 687.406456][T11535] gspca_main: se401-2.14.0 probing 047d:5003 [ 687.551880][ T37] usb 7-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 687.551939][ T37] usb 7-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 687.552062][ T37] usb 7-1: config 1 interface 0 has no altsetting 0 [ 687.588412][ T37] usb 7-1: string descriptor 0 read error: -22 [ 687.590159][ T37] usb 7-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 687.590188][ T37] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.732912][T11535] usb 10-1: reset high-speed USB device number 54 using dummy_hcd [ 687.872019][T12332] usb 9-1: 0:2 : does not exist [ 688.100676][T12332] usb 9-1: USB disconnect, device number 46 [ 688.175145][ T37] usbhid 7-1:1.0: can't add hid device: -71 [ 688.175276][ T37] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 688.194398][ T37] usb 7-1: USB disconnect, device number 119 [ 688.304232][ T5673] udevd[5673]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 688.327464][T11837] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 688.496681][T11837] usb 1-1: Using ep0 maxpacket: 16 [ 688.499021][T11837] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 688.499056][T11837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 688.499080][T11837] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 688.499108][T11837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 688.499132][T11837] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 688.560100][T11837] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 688.560135][T11837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.560157][T11837] usb 1-1: Product: syz [ 688.560174][T11837] usb 1-1: Manufacturer: syz [ 688.560191][T11837] usb 1-1: SerialNumber: syz [ 688.608462][T11837] usb 1-1: config 0 descriptor?? [ 688.622260][T11837] port100 1-1:0.0: NFC: Could not get supported command types [ 688.783317][T11535] gspca_se401: read req failed req 0x06 error -19 [ 688.799432][T12969] FAULT_INJECTION: forcing a failure. [ 688.799432][T12969] name failslab, interval 1, probability 0, space 0, times 0 [ 688.799473][T12969] CPU: 0 UID: 0 PID: 12969 Comm: syz.8.1995 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 688.799503][T12969] Tainted: [L]=SOFTLOCKUP [ 688.799512][T12969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 688.799527][T12969] Call Trace: [ 688.799536][T12969] [ 688.799546][T12969] dump_stack_lvl+0xe8/0x150 [ 688.799582][T12969] should_fail_ex+0x467/0x600 [ 688.799618][T12969] should_failslab+0xa8/0x100 [ 688.799643][T12969] __kvmalloc_node_noprof+0x176/0x880 [ 688.799682][T12969] ? __se_sys_add_key+0x289/0x420 [ 688.799703][T12969] ? __se_sys_add_key+0x289/0x420 [ 688.799732][T12969] __se_sys_add_key+0x289/0x420 [ 688.799760][T12969] ? __pfx___se_sys_add_key+0x10/0x10 [ 688.799790][T12969] ? __x64_sys_add_key+0x20/0xc0 [ 688.799815][T12969] do_syscall_64+0x17b/0x530 [ 688.799838][T12969] ? irqentry_exit+0x10f/0x8f0 [ 688.799869][T12969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.799893][T12969] ? clear_bhb_loop+0x40/0x90 [ 688.799923][T12969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.799947][T12969] RIP: 0033:0x7fb34700e0d9 [ 688.799968][T12969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.799989][T12969] RSP: 002b:00007fb345266028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 688.800013][T12969] RAX: ffffffffffffffda RBX: 00007fb347295fa0 RCX: 00007fb34700e0d9 [ 688.800031][T12969] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 688.800046][T12969] RBP: 00007fb345266090 R08: 000000001bb76754 R09: 0000000000000000 [ 688.800062][T12969] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000001 [ 688.800076][T12969] R13: 00007fb347296038 R14: 00007fb347295fa0 R15: 00007ffdbf1e8658 [ 688.800112][T12969] [ 688.909033][T11535] usb 10-1: USB disconnect, device number 54 [ 689.309323][T12977] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1998'. [ 689.362844][T12979] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1999'. [ 689.371906][ T38] audit: type=1804 audit(1786500712.811:121): pid=12979 uid=0 auid=4294967295 ses=4294967295 op=measuring_policy cause=store_entry comm="syz.8.1999" name="ima_policy_written" res=0 errno=-17 [ 689.398020][T11535] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 689.422478][ T38] audit: type=1807 audit(1786500712.861:122): action=measure func=F res=0 [ 689.422538][ T38] audit: type=1802 audit(1786500712.861:123): pid=12979 uid=0 auid=4294967295 ses=4294967295 op=update_policy cause=invalid-policy comm="syz.8.1999" res=0 errno=0 [ 689.422924][T12978] ima: policy update failed [ 689.423488][ T38] audit: type=1802 audit(1786500712.861:124): pid=12978 uid=0 auid=4294967295 ses=4294967295 op=policy_update cause=failed comm="syz.8.1999" res=0 errno=0 [ 689.566630][T11535] usb 10-1: Using ep0 maxpacket: 32 [ 689.570748][T11535] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 689.570778][T11535] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.570800][T11535] usb 10-1: config 0 has no interface number 0 [ 689.570848][T11535] usb 10-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 689.570874][T11535] usb 10-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 689.578968][T11535] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 689.579034][T11535] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.579096][T11535] usb 10-1: Product: syz [ 689.579139][T11535] usb 10-1: Manufacturer: syz [ 689.579182][T11535] usb 10-1: SerialNumber: syz [ 689.683477][T11535] usb 10-1: config 0 descriptor?? [ 689.698763][T11535] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 689.699021][T11535] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22 [ 689.966676][ T10] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 690.127431][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 690.145122][ T10] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 690.145157][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.145179][ T10] usb 7-1: Product: syz [ 690.145196][ T10] usb 7-1: Manufacturer: syz [ 690.145222][ T10] usb 7-1: SerialNumber: syz [ 690.188776][ T10] usb 7-1: config 0 descriptor?? [ 690.203536][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 690.981300][T11837] usb 1-1: USB disconnect, device number 123 [ 691.220307][ T10] gspca_se401: read req failed req 0x06 error -19 [ 691.238107][ T10] usb 7-1: USB disconnect, device number 120 [ 691.426717][ T6995] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 691.579188][ T6995] usb 9-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 691.579226][ T6995] usb 9-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 691.579247][ T6995] usb 9-1: config 1 interface 0 has no altsetting 0 [ 691.583348][ T6995] usb 9-1: string descriptor 0 read error: -22 [ 691.583498][ T6995] usb 9-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 691.583524][ T6995] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.829645][T11837] usb 10-1: USB disconnect, device number 55 [ 692.143338][ T6995] usbhid 9-1:1.0: can't add hid device: -71 [ 692.143494][ T6995] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 692.173214][ T6995] usb 9-1: USB disconnect, device number 47 [ 692.409730][T11535] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 692.556652][T11535] usb 7-1: Using ep0 maxpacket: 32 [ 692.560559][T11535] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 692.560589][T11535] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.560631][T11535] usb 7-1: config 0 has no interface number 0 [ 692.560678][T11535] usb 7-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 692.560704][T11535] usb 7-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 692.564402][T11535] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 692.564433][T11535] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.564460][T11535] usb 7-1: Product: syz [ 692.564472][T11535] usb 7-1: Manufacturer: syz [ 692.564483][T11535] usb 7-1: SerialNumber: syz [ 692.660460][T11535] usb 7-1: config 0 descriptor?? [ 692.678954][T11535] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 692.679387][T11535] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 693.309003][T11837] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 693.356821][ T6995] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 693.456707][T11837] usb 9-1: Using ep0 maxpacket: 16 [ 693.459163][T11837] usb 9-1: unable to get BOS descriptor or descriptor too short [ 693.464972][T11837] usb 9-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=62.7c [ 693.465001][T11837] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.465029][T11837] usb 9-1: Product: syz [ 693.465040][T11837] usb 9-1: Manufacturer: syz [ 693.465051][T11837] usb 9-1: SerialNumber: syz [ 693.516708][ T6995] usb 10-1: Using ep0 maxpacket: 16 [ 693.519407][ T6995] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 693.519443][ T6995] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 693.519469][ T6995] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 693.519496][ T6995] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 693.519520][ T6995] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 693.525138][ T6995] usb 10-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 693.525160][ T6995] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.525220][ T6995] usb 10-1: Product: syz [ 693.525231][ T6995] usb 10-1: Manufacturer: syz [ 693.525243][ T6995] usb 10-1: SerialNumber: syz [ 693.655319][ T6995] usb 10-1: config 0 descriptor?? [ 693.671261][ T6995] port100 10-1:0.0: NFC: Could not get supported command types [ 693.696804][T12332] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 693.726194][T13016] tmpfs: Unknown parameter 'usrqWota_block_h' [ 693.743784][T13028] tmpfs: Unknown parameter 'usrqWota_block_h' [ 693.745848][T13029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.761314][T13029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.842728][T11837] gspca_main: etoms-2.14.0 probing 102c:6251 [ 693.887301][T12332] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 693.887339][T12332] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 693.887363][T12332] usb 1-1: Product: syz [ 693.887381][T12332] usb 1-1: SerialNumber: syz [ 693.936444][T12332] usb 1-1: config 0 descriptor?? [ 693.951887][T12332] hso 1-1:0.0: Not our interface [ 693.952596][T11837] usb 9-1: USB disconnect, device number 48 [ 694.169525][ T5602] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 694.172594][T12332] usb 1-1: USB disconnect, device number 124 [ 694.436821][T11837] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 694.596899][T11837] usb 9-1: Using ep0 maxpacket: 32 [ 694.605250][T11837] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 694.605281][T11837] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.605301][T11837] usb 9-1: config 0 has no interface number 0 [ 694.605345][T11837] usb 9-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 694.644478][T11837] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 694.644521][T11837] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.644544][T11837] usb 9-1: Product: syz [ 694.644560][T11837] usb 9-1: Manufacturer: syz [ 694.644577][T11837] usb 9-1: SerialNumber: syz [ 694.683568][T11837] usb 9-1: config 0 descriptor?? [ 694.695813][T11837] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 694.696096][T11837] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -22 [ 694.990092][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2019'. [ 695.199591][T11535] usb 7-1: USB disconnect, device number 121 [ 695.915375][T13055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 696.146836][ T37] usb 10-1: USB disconnect, device number 56 [ 696.673807][T13072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2029'. [ 696.796716][ T37] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 696.836775][ T6995] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 696.950862][ T37] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 696.950894][ T37] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 696.950915][ T37] usb 10-1: Product: syz [ 696.950936][ T37] usb 10-1: SerialNumber: syz [ 696.956161][ T37] usb 10-1: config 0 descriptor?? [ 696.975468][ T37] hso 10-1:0.0: Not our interface [ 696.995131][ T6995] usb 7-1: device descriptor read/64, error -71 [ 697.056916][T11837] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 697.135979][ T10] usb 9-1: USB disconnect, device number 49 [ 697.212501][ T60] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 697.219390][ T7021] usb 10-1: USB disconnect, device number 57 [ 697.229435][T11837] usb 1-1: Using ep0 maxpacket: 32 [ 697.241619][ T6995] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 697.243457][T11837] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 697.243488][T11837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.243582][T11837] usb 1-1: config 0 has no interface number 0 [ 697.243638][T11837] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 697.243666][T11837] usb 1-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 697.312707][T11837] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 697.312732][T11837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.312748][T11837] usb 1-1: Product: syz [ 697.312784][T11837] usb 1-1: Manufacturer: syz [ 697.312810][T11837] usb 1-1: SerialNumber: syz [ 697.364444][T11837] usb 1-1: config 0 descriptor?? [ 697.379769][T11837] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 697.379969][T11837] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 697.402602][ T6995] usb 7-1: device descriptor read/64, error -71 [ 697.507135][ T6995] usb usb7-port1: attempt power cycle [ 697.769727][T13080] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 697.850196][ T6995] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 697.875177][ T6995] usb 7-1: device descriptor read/8, error -71 [ 698.107065][ T6995] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 698.126745][ T7021] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 698.136452][ T6995] usb 7-1: device descriptor read/8, error -71 [ 698.247539][ T6995] usb usb7-port1: unable to enumerate USB device [ 698.292253][ T7021] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 698.292290][ T7021] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 698.292313][ T7021] usb 10-1: Product: syz [ 698.292330][ T7021] usb 10-1: SerialNumber: syz [ 698.303398][ T7021] usb 10-1: config 0 descriptor?? [ 698.337069][ T7021] hso 10-1:0.0: Not our interface [ 698.436828][ T10] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 698.606893][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 698.610322][ T10] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 698.610354][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 698.610379][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 698.610397][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 698.610496][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 698.613652][ T10] usb 9-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 698.613683][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.613706][ T10] usb 9-1: Product: syz [ 698.613722][ T10] usb 9-1: Manufacturer: syz [ 698.613736][ T10] usb 9-1: SerialNumber: syz [ 698.635148][ T10] usb 9-1: config 0 descriptor?? [ 698.725940][ T10] port100 9-1:0.0: NFC: Could not get supported command types [ 698.779743][ T5602] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 699.880797][T11535] usb 1-1: USB disconnect, device number 125 [ 699.978371][T13106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2038'. [ 700.496814][T11535] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 700.716724][T11535] usb 1-1: Using ep0 maxpacket: 32 [ 700.725351][T11535] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 700.725384][T11535] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.725407][T11535] usb 1-1: config 0 has no interface number 0 [ 700.725472][T11535] usb 1-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 700.770016][T11535] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 700.770053][T11535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.770078][T11535] usb 1-1: Product: syz [ 700.770096][T11535] usb 1-1: Manufacturer: syz [ 700.770114][T11535] usb 1-1: SerialNumber: syz [ 700.823663][T11535] usb 1-1: config 0 descriptor?? [ 700.839251][T11535] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 700.839592][T11535] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 701.026637][ T10] usb 10-1: USB disconnect, device number 58 [ 701.154357][T11535] usb 9-1: USB disconnect, device number 50 [ 701.469277][ T10] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 701.506716][T11535] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 701.646769][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 701.649399][ T10] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 701.649436][ T10] usb 10-1: config 0 has no interface number 0 [ 701.649488][ T10] usb 10-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 701.656996][ T10] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 701.657091][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.657160][ T10] usb 10-1: Product: syz [ 701.657195][ T10] usb 10-1: Manufacturer: syz [ 701.657224][ T10] usb 10-1: SerialNumber: syz [ 701.712979][ T10] usb 10-1: config 0 descriptor?? [ 701.734744][T11535] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 701.734777][T11535] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 701.734800][T11535] usb 9-1: Product: syz [ 701.734817][T11535] usb 9-1: SerialNumber: syz [ 701.764937][ T10] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 701.765738][ T10] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22 [ 701.809274][T11535] usb 9-1: config 0 descriptor?? [ 701.825211][T11535] hso 9-1:0.0: Not our interface [ 702.038509][ T10] usb 9-1: USB disconnect, device number 51 [ 702.346739][ T7021] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 702.476832][ T7021] usb 7-1: device descriptor read/64, error -71 [ 702.717250][ T7021] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 702.846771][ T7021] usb 7-1: device descriptor read/64, error -71 [ 702.957067][ T7021] usb usb7-port1: attempt power cycle [ 703.316624][ T7021] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 703.337589][ T7021] usb 7-1: device descriptor read/8, error -71 [ 703.367396][T11535] usb 1-1: USB disconnect, device number 126 [ 703.596682][ T7021] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 703.617409][ T7021] usb 7-1: device descriptor read/8, error -71 [ 703.728427][ T7021] usb usb7-port1: unable to enumerate USB device [ 704.116797][T11535] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 704.176113][ T7021] usb 10-1: USB disconnect, device number 59 [ 704.266825][T11535] usb 1-1: Using ep0 maxpacket: 16 [ 704.275049][T11535] usb 1-1: unable to get BOS descriptor or descriptor too short [ 704.281345][T11535] usb 1-1: config 1 has an invalid interface number: 239 but max is 0 [ 704.281428][T11535] usb 1-1: config 1 has no interface number 0 [ 704.281671][T11535] usb 1-1: config 1 interface 239 has no altsetting 0 [ 704.311516][T11535] usb 1-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=7a.dd [ 704.311547][T11535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.311573][T11535] usb 1-1: Product: syz [ 704.311584][T11535] usb 1-1: Manufacturer: syz [ 704.311595][T11535] usb 1-1: SerialNumber: syz [ 704.626895][ T5772] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 704.784142][ T5772] usb 9-1: Using ep0 maxpacket: 32 [ 704.787015][ T5772] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 704.787210][ T5772] usb 9-1: config 0 has no interface number 0 [ 704.787262][ T5772] usb 9-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 704.849304][ T5772] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 704.849328][ T5772] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.849344][ T5772] usb 9-1: Product: syz [ 704.849355][ T5772] usb 9-1: Manufacturer: syz [ 704.849366][ T5772] usb 9-1: SerialNumber: syz [ 704.895365][ T5772] usb 9-1: config 0 descriptor?? [ 704.909560][ T5772] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 704.909843][ T5772] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -22 [ 705.172778][T11535] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 705.266009][T11535] usb 1-1: USB disconnect, device number 127 [ 705.586686][ T5772] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 705.736704][ T5772] usb 7-1: Using ep0 maxpacket: 32 [ 705.739380][ T5772] usb 7-1: too many configurations: 82, using maximum allowed: 8 [ 705.741335][ T5772] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 705.741372][ T5772] usb 7-1: can't read configurations, error -61 [ 705.827512][T11535] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 705.866975][ T5772] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 705.976676][T11535] usb 10-1: Using ep0 maxpacket: 16 [ 705.979165][T11535] usb 10-1: config 0 has an invalid interface number: 34 but max is 0 [ 705.979195][T11535] usb 10-1: config 0 has no interface number 0 [ 705.979259][T11535] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 705.979290][T11535] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 705.981864][T11535] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 705.981892][T11535] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.981910][T11535] usb 10-1: Product: syz [ 705.981921][T11535] usb 10-1: Manufacturer: syz [ 705.981941][T11535] usb 10-1: SerialNumber: syz [ 705.994960][T11535] usb 10-1: config 0 descriptor?? [ 706.017074][ T5772] usb 7-1: Using ep0 maxpacket: 32 [ 706.085696][ T5772] usb 7-1: too many configurations: 82, using maximum allowed: 8 [ 706.091300][T13165] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 706.115605][T13165] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 706.137838][ T5772] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 706.137878][ T5772] usb 7-1: can't read configurations, error -61 [ 706.146040][ T5772] usb usb7-port1: attempt power cycle [ 706.195555][T13170] ucma_write: process 1680 (syz.0.2057) changed security contexts after opening file descriptor, this is not allowed. [ 706.324619][T13165] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 706.324830][T13165] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 706.506666][ T5772] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 706.529373][T11535] asix 10-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 706.530499][ T5772] usb 7-1: Using ep0 maxpacket: 32 [ 706.531719][ T5772] usb 7-1: too many configurations: 82, using maximum allowed: 8 [ 706.559346][ T5772] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 706.559389][ T5772] usb 7-1: can't read configurations, error -61 [ 706.687198][ T5772] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 706.719455][ T5772] usb 7-1: Using ep0 maxpacket: 32 [ 706.806867][ T5772] usb 7-1: too many configurations: 82, using maximum allowed: 8 [ 706.829789][ T5772] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 706.829830][ T5772] usb 7-1: can't read configurations, error -61 [ 706.837773][ T5772] usb usb7-port1: unable to enumerate USB device [ 707.494485][ T7021] usb 9-1: USB disconnect, device number 52 [ 707.817742][T11535] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 707.817768][T11535] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 707.817965][T11535] asix 10-1:0.34: probe with driver asix failed with error -71 [ 707.850041][T11535] usb 10-1: USB disconnect, device number 60 [ 707.976736][ T7021] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 708.127146][ T7021] usb 9-1: Using ep0 maxpacket: 32 [ 708.131581][ T7021] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 708.131614][ T7021] usb 9-1: config 0 has no interface number 0 [ 708.131664][ T7021] usb 9-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 708.135904][ T7021] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 708.136041][ T7021] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.136081][ T7021] usb 9-1: Product: syz [ 708.136098][ T7021] usb 9-1: Manufacturer: syz [ 708.136120][ T7021] usb 9-1: SerialNumber: syz [ 708.226326][ T7021] usb 9-1: config 0 descriptor?? [ 708.240414][ T7021] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 708.240734][ T7021] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -22 [ 708.587529][ T7021] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 708.716736][ T7021] usb 1-1: device descriptor read/64, error -71 [ 708.803725][ T38] audit: type=1807 audit(1786500732.241:125): UNKNOWN=meadure res=0 [ 708.803859][ T38] audit: type=1802 audit(1786500732.241:126): pid=13194 uid=0 auid=4294967295 ses=4294967295 op=update_policy cause=invalid-policy comm="syz.9.2066" res=0 errno=0 [ 708.804221][T13193] ima: policy update failed [ 708.804349][ T38] audit: type=1802 audit(1786500732.241:127): pid=13193 uid=0 auid=4294967295 ses=4294967295 op=policy_update cause=failed comm="syz.9.2066" res=0 errno=0 [ 709.025980][ T38] audit: type=1804 audit(1786500732.461:128): pid=13197 uid=0 auid=4294967295 ses=4294967295 op=measuring_policy cause=store_entry comm="syz.9.2067" name="ima_policy_written" res=0 errno=-17 [ 709.026040][ T38] audit: type=1807 audit(1786500732.461:129): UNKNOWN=me res=0 [ 709.026090][ T38] audit: type=1802 audit(1786500732.461:130): pid=13197 uid=0 auid=4294967295 ses=4294967295 op=update_policy cause=invalid-policy comm="syz.9.2067" res=0 errno=0 [ 709.078194][ T7021] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 709.137251][T13196] ima: policy update failed [ 709.137461][ T38] audit: type=1802 audit(1786500732.581:131): pid=13196 uid=0 auid=4294967295 ses=4294967295 op=policy_update cause=failed comm="syz.9.2067" res=0 errno=0 [ 709.226895][ T7021] usb 1-1: device descriptor read/64, error -71 [ 709.337354][ T7021] usb usb1-port1: attempt power cycle [ 709.616711][ T10] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 709.687942][ T7021] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 709.717572][ T7021] usb 1-1: device descriptor read/8, error -71 [ 709.746722][ T10] usb 10-1: device descriptor read/64, error -71 [ 709.976811][ T7021] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 709.997362][ T7021] usb 1-1: device descriptor read/8, error -71 [ 710.006667][ T10] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 710.108271][ T7021] usb usb1-port1: unable to enumerate USB device [ 710.156713][ T10] usb 10-1: device descriptor read/64, error -71 [ 710.308614][ T10] usb usb10-port1: attempt power cycle [ 710.362970][T13208] input: syz0 as /devices/virtual/input/input41 [ 710.678056][ T10] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 710.698627][ T10] usb 10-1: device descriptor read/8, error -71 [ 710.729831][ T7021] usb 9-1: USB disconnect, device number 53 [ 710.937054][ T10] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 710.969452][ T10] usb 10-1: device descriptor read/8, error -71 [ 711.077324][ T10] usb usb10-port1: unable to enumerate USB device [ 711.136725][ T5772] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 711.286742][ T5772] usb 7-1: Using ep0 maxpacket: 32 [ 711.288725][ T5772] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 711.288755][ T5772] usb 7-1: config 0 has no interface number 0 [ 711.291912][ T5772] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 711.291942][ T5772] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.291966][ T5772] usb 7-1: Product: syz [ 711.291976][ T5772] usb 7-1: Manufacturer: syz [ 711.291988][ T5772] usb 7-1: SerialNumber: syz [ 711.345838][ T5772] usb 7-1: config 0 descriptor?? [ 711.496703][ T37] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 711.626893][ T37] usb 9-1: device descriptor read/64, error -71 [ 711.775154][ T5772] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 711.775188][ T5772] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 711.866781][ T37] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 711.980615][ T5772] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 711.981183][ T5772] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32 [ 712.011092][ T37] usb 9-1: device descriptor read/64, error -71 [ 712.117023][ T37] usb usb9-port1: attempt power cycle [ 712.456904][ T37] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 712.462607][T13233] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2079'. [ 712.487286][ T37] usb 9-1: device descriptor read/8, error -71 [ 712.726886][ T37] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 712.757014][ T5772] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 712.772798][T13236] netlink: 'syz.0.2080': attribute type 21 has an invalid length. [ 712.790340][ T37] usb 9-1: device descriptor read/8, error -71 [ 712.919548][ T37] usb usb9-port1: unable to enumerate USB device [ 712.959423][ T5772] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 712.959449][ T5772] usb 10-1: config 1 has no interface number 0 [ 712.959486][ T5772] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 712.959508][ T5772] usb 10-1: config 1 interface 7 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 712.959526][ T5772] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 712.959545][ T5772] usb 10-1: config 1 interface 7 altsetting 0 endpoint 0x6 has invalid maxpacket 26178, setting to 1024 [ 712.962285][ T5772] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 712.962323][ T5772] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.962340][ T5772] usb 10-1: Product: syz [ 712.962352][ T5772] usb 10-1: Manufacturer: syz [ 712.962372][ T5772] usb 10-1: SerialNumber: syz [ 713.078082][T13233] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 713.078348][T13233] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 713.086691][ T5772] usb 10-1: Error in usbnet_get_endpoints (-22) [ 713.180122][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 713.321099][ T9] usb 10-1: USB disconnect, device number 65 [ 713.327433][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 713.341465][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 713.341498][ T10] usb 1-1: config 0 has no interface number 0 [ 713.341564][ T10] usb 1-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 713.346317][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 713.346356][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.346373][ T10] usb 1-1: Product: syz [ 713.346385][ T10] usb 1-1: Manufacturer: syz [ 713.346397][ T10] usb 1-1: SerialNumber: syz [ 713.422773][ T10] usb 1-1: config 0 descriptor?? [ 713.449069][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 713.449287][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 713.958450][ T9] usb 7-1: USB disconnect, device number 8 [ 714.346800][T11535] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 714.476894][T11535] usb 10-1: device descriptor read/64, error -71 [ 714.727587][T11535] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 714.796730][ T37] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 714.876627][T11535] usb 10-1: device descriptor read/64, error -71 [ 714.926704][ T37] usb 7-1: device descriptor read/64, error -71 [ 714.987715][T11535] usb usb10-port1: attempt power cycle [ 715.176623][ T37] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 715.306736][ T37] usb 7-1: device descriptor read/64, error -71 [ 715.336817][T11535] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 715.357640][T11535] usb 10-1: device descriptor read/8, error -71 [ 715.417017][ T37] usb usb7-port1: attempt power cycle [ 715.596704][T11535] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 715.618955][T11535] usb 10-1: device descriptor read/8, error -71 [ 715.727175][T11535] usb usb10-port1: unable to enumerate USB device [ 715.756898][ T37] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 715.777456][ T37] usb 7-1: device descriptor read/8, error -71 [ 715.916684][ T7021] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 715.924571][ T9] usb 1-1: USB disconnect, device number 6 [ 716.017433][ T37] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 716.047554][ T37] usb 7-1: device descriptor read/8, error -71 [ 716.051241][ T7021] usb 9-1: device descriptor read/64, error -71 [ 716.157313][ T37] usb usb7-port1: unable to enumerate USB device [ 716.286712][ T7021] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 716.316769][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 716.416791][ T7021] usb 9-1: device descriptor read/64, error -71 [ 716.466729][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 716.469153][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 716.469181][ T9] usb 1-1: config 0 has no interface number 0 [ 716.472014][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 716.472044][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.472067][ T9] usb 1-1: Product: syz [ 716.472084][ T9] usb 1-1: Manufacturer: syz [ 716.472099][ T9] usb 1-1: SerialNumber: syz [ 716.493727][ T9] usb 1-1: config 0 descriptor?? [ 716.531660][ T7021] usb usb9-port1: attempt power cycle [ 716.896689][ T7021] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 716.917546][ T7021] usb 9-1: device descriptor read/8, error -71 [ 716.953645][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 716.953670][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 717.156859][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 717.157175][ T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 717.157494][ T7021] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 717.182521][ T7021] usb 9-1: device descriptor read/8, error -71 [ 717.200768][T13272] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 717.289040][T13274] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 717.290948][ T7021] usb usb9-port1: unable to enumerate USB device [ 717.295354][T13274] FAULT_INJECTION: forcing a failure. [ 717.295354][T13274] name failslab, interval 1, probability 0, space 0, times 0 [ 717.295382][T13274] CPU: 1 UID: 0 PID: 13274 Comm: syz.9.2093 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 717.295405][T13274] Tainted: [L]=SOFTLOCKUP [ 717.295411][T13274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 717.295421][T13274] Call Trace: [ 717.295427][T13274] [ 717.295435][T13274] dump_stack_lvl+0xe8/0x150 [ 717.295460][T13274] should_fail_ex+0x467/0x600 [ 717.295487][T13274] should_failslab+0xa8/0x100 [ 717.295505][T13274] __kmalloc_noprof+0xfb/0x790 [ 717.295529][T13274] ? tomoyo_realpath_from_path+0xef/0x640 [ 717.295554][T13274] ? tomoyo_realpath_from_path+0xef/0x640 [ 717.295584][T13274] tomoyo_realpath_from_path+0xef/0x640 [ 717.295616][T13274] ? tomoyo_path_number_perm+0x219/0x5f0 [ 717.295637][T13274] tomoyo_path_number_perm+0x246/0x5f0 [ 717.295660][T13274] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 717.295681][T13274] ? do_raw_spin_lock+0x12b/0x2f0 [ 717.295714][T13274] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 717.295730][T13274] ? lockdep_hardirqs_on+0x7a/0x110 [ 717.295757][T13274] ? __fget_files+0x2a/0x420 [ 717.295777][T13274] ? __fget_files+0x3a8/0x420 [ 717.295792][T13274] ? __fget_files+0x2a/0x420 [ 717.295814][T13274] security_file_ioctl+0xb9/0x260 [ 717.295868][T13274] __se_sys_ioctl+0x47/0x170 [ 717.295892][T13274] do_syscall_64+0x17b/0x530 [ 717.295909][T13274] ? irqentry_exit+0x10f/0x8f0 [ 717.295924][T13274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.295942][T13274] ? clear_bhb_loop+0x40/0x90 [ 717.295962][T13274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.295982][T13274] RIP: 0033:0x7ffad783e0d9 [ 717.295996][T13274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.296011][T13274] RSP: 002b:00007ffad5a96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 717.296028][T13274] RAX: ffffffffffffffda RBX: 00007ffad7ac5fa0 RCX: 00007ffad783e0d9 [ 717.296071][T13274] RDX: 0000200000000280 RSI: 0000000000003b8d RDI: 0000000000000003 [ 717.296086][T13274] RBP: 00007ffad5a96090 R08: 0000000000000000 R09: 0000000000000000 [ 717.296105][T13274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.296114][T13274] R13: 00007ffad7ac6038 R14: 00007ffad7ac5fa0 R15: 00007fffc71ea2e8 [ 717.296139][T13274] [ 717.296238][T13274] ERROR: Out of memory at tomoyo_realpath_from_path. [ 717.916845][ T9] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 718.063136][T13282] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 718.068318][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 718.081699][ T9] usb 10-1: config 0 has an invalid interface number: 34 but max is 0 [ 718.081731][ T9] usb 10-1: config 0 has no interface number 0 [ 718.081782][ T9] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 718.081801][ T9] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 718.084340][ T9] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 718.084372][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.084395][ T9] usb 10-1: Product: syz [ 718.084410][ T9] usb 10-1: Manufacturer: syz [ 718.084424][ T9] usb 10-1: SerialNumber: syz [ 718.178887][ T9] usb 10-1: config 0 descriptor?? [ 718.179884][T13279] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 718.180356][T13279] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 718.389450][T13279] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 718.389598][T13279] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 718.599155][ T9] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 718.599454][ T9] asix 10-1:0.34: probe with driver asix failed with error -61 [ 719.065833][ T9] usb 1-1: USB disconnect, device number 7 [ 719.506758][T11837] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 719.656699][T11837] usb 9-1: Using ep0 maxpacket: 32 [ 719.663367][T11837] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.669038][T11837] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 719.669122][T11837] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.669177][T11837] usb 9-1: Product: syz [ 719.669193][T11837] usb 9-1: Manufacturer: syz [ 719.669208][T11837] usb 9-1: SerialNumber: syz [ 719.736970][T11837] usb 9-1: config 0 descriptor?? [ 719.785728][T11837] cdc_ether 9-1:0.0: missing cdc header descriptor [ 719.821572][T11837] usb 9-1: unsupported MDLM descriptors [ 719.941372][ T9] usb 9-1: USB disconnect, device number 62 [ 720.636605][ T37] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 720.643612][T13319] exFAT-fs (nbd8): unable to read boot sector [ 720.643778][T13319] exFAT-fs (nbd8): failed to read boot sector [ 720.643792][T13319] exFAT-fs (nbd8): failed to recognize exfat type [ 720.710411][T11837] usb 10-1: USB disconnect, device number 70 [ 720.796760][ T37] usb 7-1: Using ep0 maxpacket: 32 [ 720.802837][ T37] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 720.802868][ T37] usb 7-1: config 0 has no interface number 0 [ 720.828496][ T37] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 720.828530][ T37] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.828553][ T37] usb 7-1: Product: syz [ 720.828570][ T37] usb 7-1: Manufacturer: syz [ 720.828585][ T37] usb 7-1: SerialNumber: syz [ 720.863144][ T37] usb 7-1: config 0 descriptor?? [ 721.285188][ T37] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 721.285221][ T37] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 721.500424][ T37] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 721.500758][ T37] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32 [ 722.036833][T11837] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 722.186968][T11837] usb 1-1: Using ep0 maxpacket: 32 [ 722.189738][T11837] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 722.189767][T11837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.189790][T11837] usb 1-1: config 0 has no interface number 0 [ 722.189839][T11837] usb 1-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 722.194377][T11837] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 722.194407][T11837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.194429][T11837] usb 1-1: Product: syz [ 722.194445][T11837] usb 1-1: Manufacturer: syz [ 722.194461][T11837] usb 1-1: SerialNumber: syz [ 722.282820][T11837] usb 1-1: config 0 descriptor?? [ 722.297733][T11837] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 722.298138][T11837] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 722.726387][T13340] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 722.741575][T13340] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2116'. [ 723.455500][ T9] usb 7-1: USB disconnect, device number 13 [ 723.551045][T13357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 723.676651][T12332] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 723.826590][T12332] usb 10-1: Using ep0 maxpacket: 16 [ 723.829212][T12332] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.829282][T12332] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 723.829313][T12332] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 53760, setting to 1024 [ 723.829412][T12332] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 723.829442][T12332] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 723.831071][T12332] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 723.831102][T12332] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 723.831125][T12332] usb 10-1: Manufacturer: syz [ 723.939461][T12332] usb 10-1: config 0 descriptor?? [ 724.306623][T12332] rc_core: IR keymap rc-hauppauge not found [ 724.306640][T12332] Registered IR keymap rc-empty [ 724.310241][T12332] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 724.338293][T12332] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 724.362207][T12332] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 724.388557][T12332] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input42 [ 724.442381][T12332] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 724.457640][T12332] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 724.484496][T12332] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 724.498861][T12332] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 724.517334][T12332] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 724.539698][T12332] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 724.560179][T12332] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 724.577678][T12332] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 724.597029][T12332] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 724.618323][T12332] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 724.648830][T12332] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 724.648852][T12332] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 724.708369][T12332] usb 10-1: USB disconnect, device number 71 [ 724.925221][ T9] usb 1-1: USB disconnect, device number 8 [ 725.446673][T12332] usb 9-1: new full-speed USB device number 63 using dummy_hcd [ 725.609918][T12332] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 725.609946][T12332] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 725.609978][T12332] usb 9-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 725.609996][T12332] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.681854][T12332] usb 9-1: config 0 descriptor?? [ 725.796895][ T9] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 725.926850][ T9] usb 10-1: device descriptor read/64, error -71 [ 726.006845][T11535] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 726.114882][T12332] uclogic 0003:5543:0522.0006: reserved main item tag 0xd [ 726.114920][T12332] uclogic 0003:5543:0522.0006: reserved main item tag 0xe [ 726.151865][T12332] uclogic 0003:5543:0522.0006: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.8-1/input0 [ 726.169817][ T9] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 726.177324][T11535] usb 1-1: Using ep0 maxpacket: 32 [ 726.195818][T11535] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 726.195849][T11535] usb 1-1: config 0 has no interface number 0 [ 726.217152][T11535] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 726.217185][T11535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.217217][T11535] usb 1-1: Product: syz [ 726.217233][T11535] usb 1-1: Manufacturer: syz [ 726.217250][T11535] usb 1-1: SerialNumber: syz [ 726.241267][T11535] usb 1-1: config 0 descriptor?? [ 726.313928][T12332] usb 9-1: USB disconnect, device number 63 [ 726.316785][ T9] usb 10-1: device descriptor read/64, error -71 [ 726.427083][ T9] usb usb10-port1: attempt power cycle [ 726.450908][T13393] fido_id[13393]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 726.694350][T11535] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 726.694384][T11535] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 726.776724][ T9] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 726.797733][ T9] usb 10-1: device descriptor read/8, error -71 [ 726.897139][T11535] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 726.897466][T11535] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 727.056667][ T9] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 727.077460][ T9] usb 10-1: device descriptor read/8, error -71 [ 727.187955][ T9] usb usb10-port1: unable to enumerate USB device [ 727.746931][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 727.897407][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 727.902945][ T9] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 727.902975][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.902998][ T9] usb 7-1: config 0 has no interface number 0 [ 727.903046][ T9] usb 7-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 727.921165][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 727.921230][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.921286][ T9] usb 7-1: Product: syz [ 727.921328][ T9] usb 7-1: Manufacturer: syz [ 727.921370][ T9] usb 7-1: SerialNumber: syz [ 727.957701][ T9] usb 7-1: config 0 descriptor?? [ 728.000771][ T9] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 728.000964][ T9] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 728.874058][T11535] usb 1-1: USB disconnect, device number 9 [ 729.224247][T13435] sctp: [Deprecated]: syz.0.2138 (pid 13435) Use of struct sctp_assoc_value in delayed_ack socket option. [ 729.224247][T13435] Use struct sctp_sack_info instead [ 729.304270][T13427] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2138'. [ 729.856630][T11837] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 730.006757][T11837] usb 10-1: Using ep0 maxpacket: 8 [ 730.015471][T11837] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 730.015495][T11837] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.015511][T11837] usb 10-1: Product: syz [ 730.015522][T11837] usb 10-1: Manufacturer: syz [ 730.015534][T11837] usb 10-1: SerialNumber: syz [ 730.032005][T11837] usb 10-1: config 0 descriptor?? [ 730.077501][T11837] gspca_main: se401-2.14.0 probing 047d:5003 [ 730.471862][T11837] gspca_se401: ExtraFeatures: 255 [ 730.471877][T11837] gspca_se401: Too many frame sizes [ 730.541733][T11535] usb 7-1: USB disconnect, device number 14 [ 730.626698][T12332] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 730.638705][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 730.756642][T12332] usb 9-1: device descriptor read/64, error -71 [ 730.786639][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 730.789377][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 730.789407][ T9] usb 1-1: config 0 has no interface number 0 [ 730.792261][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 730.792293][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.792316][ T9] usb 1-1: Product: syz [ 730.792333][ T9] usb 1-1: Manufacturer: syz [ 730.792349][ T9] usb 1-1: SerialNumber: syz [ 730.808379][ T9] usb 1-1: config 0 descriptor?? [ 730.996702][T12332] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 731.126624][T12332] usb 9-1: device descriptor read/64, error -71 [ 731.238974][T12332] usb usb9-port1: attempt power cycle [ 731.260304][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 731.260358][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 731.464105][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 731.464685][ T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 731.596645][T12332] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 731.618276][T12332] usb 9-1: device descriptor read/8, error -71 [ 731.856648][T12332] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 731.890725][T12332] usb 9-1: device descriptor read/8, error -71 [ 731.947124][ T37] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 731.997472][T12332] usb usb9-port1: unable to enumerate USB device [ 732.113976][ T37] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 732.114011][ T37] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.114036][ T37] usb 7-1: Product: syz [ 732.114049][ T37] usb 7-1: Manufacturer: syz [ 732.114061][ T37] usb 7-1: SerialNumber: syz [ 732.136418][ T37] usb 7-1: config 0 descriptor?? [ 732.386310][ T37] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 732.585857][T12332] usb 10-1: USB disconnect, device number 76 [ 732.708951][ T5602] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 732.708985][ T5602] CPU: 0 UID: 0 PID: 5602 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 732.709020][ T5602] Tainted: [L]=SOFTLOCKUP [ 732.709036][ T5602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 732.709049][ T5602] Workqueue: hci2 hci_rx_work [ 732.709102][ T5602] Call Trace: [ 732.709114][ T5602] [ 732.709125][ T5602] dump_stack_lvl+0xe8/0x150 [ 732.709164][ T5602] sysfs_create_dir_ns+0x271/0x2a0 [ 732.709194][ T5602] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 732.709229][ T5602] ? rt_spin_unlock+0x163/0x200 [ 732.709270][ T5602] kobject_add_internal+0x62c/0xce0 [ 732.709315][ T5602] kobject_add+0x163/0x240 [ 732.709344][ T5602] ? rt_spin_unlock+0x157/0x200 [ 732.709390][ T5602] ? __pfx_kobject_add+0x10/0x10 [ 732.709419][ T5602] ? get_device_parent+0x370/0x3a0 [ 732.709469][ T5602] device_add+0x3fa/0xb80 [ 732.709502][ T5602] hci_conn_add_sysfs+0xd5/0x210 [ 732.709544][ T5602] le_conn_complete_evt+0xfef/0x1580 [ 732.709591][ T5602] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 732.709633][ T5602] ? lockdep_hardirqs_on+0x7a/0x110 [ 732.709661][ T5602] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 732.709697][ T5602] ? rt_mutex_slowunlock+0x219/0x460 [ 732.709732][ T5602] ? skb_pull_data+0xf0/0x200 [ 732.709769][ T5602] hci_le_conn_complete_evt+0x187/0x470 [ 732.709813][ T5602] hci_event_packet+0x67a/0xf10 [ 732.709855][ T5602] ? reacquire_held_locks+0x117/0x1a0 [ 732.709893][ T5602] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 732.709918][ T5602] ? __pfx_hci_event_packet+0x10/0x10 [ 732.709958][ T5602] ? rt_spin_unlock+0x157/0x200 [ 732.710013][ T5602] ? hci_send_to_monitor+0xe2/0x590 [ 732.710053][ T5602] hci_rx_work+0x3ee/0x1020 [ 732.710101][ T5602] ? process_one_work+0x7fd/0x1480 [ 732.710133][ T5602] process_one_work+0xaaf/0x1480 [ 732.710189][ T5602] ? __pfx_process_one_work+0x10/0x10 [ 732.710215][ T5602] ? do_raw_spin_lock+0x12b/0x2f0 [ 732.710260][ T5602] ? assign_work+0x3cf/0x5d0 [ 732.710294][ T5602] worker_thread+0xb05/0x10d0 [ 732.710349][ T5602] kthread+0x388/0x470 [ 732.710401][ T5602] ? __pfx_worker_thread+0x10/0x10 [ 732.710430][ T5602] ? __pfx_kthread+0x10/0x10 [ 732.710467][ T5602] ret_from_fork+0x514/0xb70 [ 732.710509][ T5602] ? __pfx_ret_from_fork+0x10/0x10 [ 732.710551][ T5602] ? __switch_to+0xc89/0x1420 [ 732.710588][ T5602] ? __pfx_kthread+0x10/0x10 [ 732.710627][ T5602] ret_from_fork_asm+0x1a/0x30 [ 732.710692][ T5602] [ 732.711371][ T5602] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 732.711423][ T5602] Bluetooth: hci2: failed to register connection device [ 733.426958][ T37] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 733.501164][ T9] usb 1-1: USB disconnect, device number 10 [ 733.806843][ T37] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 733.814222][T13488] FAULT_INJECTION: forcing a failure. [ 733.814222][T13488] name failslab, interval 1, probability 0, space 0, times 0 [ 733.814251][T13488] CPU: 0 UID: 0 PID: 13488 Comm: syz.9.2157 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 733.814274][T13488] Tainted: [L]=SOFTLOCKUP [ 733.814280][T13488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 733.814290][T13488] Call Trace: [ 733.814296][T13488] [ 733.814303][T13488] dump_stack_lvl+0xe8/0x150 [ 733.814329][T13488] should_fail_ex+0x467/0x600 [ 733.814355][T13488] should_failslab+0xa8/0x100 [ 733.814372][T13488] __kmalloc_noprof+0xfb/0x790 [ 733.814396][T13488] ? tomoyo_realpath_from_path+0xef/0x640 [ 733.814422][T13488] ? tomoyo_realpath_from_path+0xef/0x640 [ 733.814452][T13488] tomoyo_realpath_from_path+0xef/0x640 [ 733.814484][T13488] ? tomoyo_path_number_perm+0x219/0x5f0 [ 733.814505][T13488] tomoyo_path_number_perm+0x246/0x5f0 [ 733.814529][T13488] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 733.814550][T13488] ? do_raw_spin_lock+0x12b/0x2f0 [ 733.814583][T13488] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 733.814603][T13488] ? lockdep_hardirqs_on+0x7a/0x110 [ 733.814631][T13488] ? __fget_files+0x2a/0x420 [ 733.814651][T13488] ? __fget_files+0x3a8/0x420 [ 733.814692][T13488] ? __fget_files+0x2a/0x420 [ 733.814719][T13488] security_file_ioctl+0xb9/0x260 [ 733.814749][T13488] __se_sys_ioctl+0x47/0x170 [ 733.814784][T13488] do_syscall_64+0x17b/0x530 [ 733.814809][T13488] ? irqentry_exit+0x10f/0x8f0 [ 733.814825][T13488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.814841][T13488] ? clear_bhb_loop+0x40/0x90 [ 733.814865][T13488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.814882][T13488] RIP: 0033:0x7ffad783e0d9 [ 733.814897][T13488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.814911][T13488] RSP: 002b:00007ffad5a96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 733.814927][T13488] RAX: ffffffffffffffda RBX: 00007ffad7ac5fa0 RCX: 00007ffad783e0d9 [ 733.814940][T13488] RDX: 0000200000000280 RSI: 0000000000003b8d RDI: 0000000000000003 [ 733.814950][T13488] RBP: 00007ffad5a96090 R08: 0000000000000000 R09: 0000000000000000 [ 733.814961][T13488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.814971][T13488] R13: 00007ffad7ac6038 R14: 00007ffad7ac5fa0 R15: 00007fffc71ea2e8 [ 733.814995][T13488] [ 733.815057][T13488] ERROR: Out of memory at tomoyo_realpath_from_path. [ 734.166635][ T37] usb 9-1: Using ep0 maxpacket: 16 [ 734.169739][ T37] usb 9-1: config 0 has an invalid interface number: 34 but max is 0 [ 734.169769][ T37] usb 9-1: config 0 has no interface number 0 [ 734.169817][ T37] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 734.169846][ T37] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 734.175917][ T37] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 734.175950][ T37] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.175973][ T37] usb 9-1: Product: syz [ 734.176054][ T37] usb 9-1: Manufacturer: syz [ 734.176073][ T37] usb 9-1: SerialNumber: syz [ 734.260239][ T37] usb 9-1: config 0 descriptor?? [ 734.261613][T13480] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 734.261821][T13480] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 734.438244][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 734.465634][T13480] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 734.465831][T13480] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 734.592436][ T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 734.592471][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.592494][ T9] usb 1-1: Product: syz [ 734.592509][ T9] usb 1-1: Manufacturer: syz [ 734.592524][ T9] usb 1-1: SerialNumber: syz [ 734.614476][ T9] usb 1-1: config 0 descriptor?? [ 734.669903][ T37] asix 9-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 734.746751][ T60] Bluetooth: hci2: command 0x2016 tx timeout [ 734.936821][T11535] usb 7-1: USB disconnect, device number 15 [ 735.163969][ T5602] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 735.164004][ T5602] CPU: 0 UID: 0 PID: 5602 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 735.164045][ T5602] Tainted: [L]=SOFTLOCKUP [ 735.164054][ T5602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 735.164071][ T5602] Workqueue: hci4 hci_rx_work [ 735.164118][ T5602] Call Trace: [ 735.164129][ T5602] [ 735.164140][ T5602] dump_stack_lvl+0xe8/0x150 [ 735.164177][ T5602] sysfs_create_dir_ns+0x271/0x2a0 [ 735.164202][ T5602] ? rcu_preempt_deferred_qs_irqrestore+0x81f/0xc10 [ 735.164248][ T5602] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 735.164291][ T5602] kobject_add_internal+0x62c/0xce0 [ 735.164336][ T5602] kobject_add+0x163/0x240 [ 735.164366][ T5602] ? rt_spin_unlock+0x157/0x200 [ 735.164407][ T5602] ? __pfx_kobject_add+0x10/0x10 [ 735.164448][ T5602] ? get_device_parent+0x370/0x3a0 [ 735.164484][ T5602] device_add+0x3fa/0xb80 [ 735.164533][ T5602] hci_conn_add_sysfs+0xd5/0x210 [ 735.164577][ T5602] le_conn_complete_evt+0xfef/0x1580 [ 735.164624][ T5602] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 735.164657][ T5602] ? lockdep_hardirqs_on+0x7a/0x110 [ 735.164683][ T5602] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 735.164708][ T5602] ? rt_mutex_slowunlock+0x219/0x460 [ 735.164744][ T5602] ? skb_pull_data+0xf0/0x200 [ 735.164778][ T5602] hci_le_conn_complete_evt+0x187/0x470 [ 735.164820][ T5602] hci_event_packet+0x67a/0xf10 [ 735.164858][ T5602] ? reacquire_held_locks+0x117/0x1a0 [ 735.164887][ T5602] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 735.164910][ T5602] ? __pfx_hci_event_packet+0x10/0x10 [ 735.164946][ T5602] ? rt_spin_unlock+0x157/0x200 [ 735.164983][ T5602] ? hci_send_to_monitor+0xe2/0x590 [ 735.165013][ T5602] hci_rx_work+0x3ee/0x1020 [ 735.165055][ T5602] ? process_one_work+0x7fd/0x1480 [ 735.165078][ T5602] process_one_work+0xaaf/0x1480 [ 735.165121][ T5602] ? __pfx_process_one_work+0x10/0x10 [ 735.165140][ T5602] ? do_raw_spin_lock+0x12b/0x2f0 [ 735.165177][ T5602] ? assign_work+0x3cf/0x5d0 [ 735.165204][ T5602] worker_thread+0xb05/0x10d0 [ 735.165249][ T5602] kthread+0x388/0x470 [ 735.165278][ T5602] ? __pfx_worker_thread+0x10/0x10 [ 735.165300][ T5602] ? __pfx_kthread+0x10/0x10 [ 735.165329][ T5602] ret_from_fork+0x514/0xb70 [ 735.165362][ T5602] ? __pfx_ret_from_fork+0x10/0x10 [ 735.165391][ T5602] ? __switch_to+0xc89/0x1420 [ 735.165418][ T5602] ? __pfx_kthread+0x10/0x10 [ 735.165447][ T5602] ret_from_fork_asm+0x1a/0x30 [ 735.165493][ T5602] [ 735.165625][ T5602] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 735.165675][ T5602] Bluetooth: hci4: failed to register connection device [ 735.542388][ T37] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 735.543027][ T37] asix 9-1:0.34: probe with driver asix failed with error -71 [ 735.582713][ T37] usb 9-1: USB disconnect, device number 68 [ 735.988997][ T32] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 736.136821][ T32] usb 7-1: Using ep0 maxpacket: 8 [ 736.138364][ T32] usb 7-1: no configurations [ 736.138385][ T32] usb 7-1: can't read configurations, error -22 [ 736.196093][ T9] usb 1-1: f81604_read: reg: 100e failed: -EPROTO [ 736.250674][ T9] usb 1-1: f81604_read: reg: 200f failed: -EPROTO [ 736.272557][ T9] usb 1-1: USB disconnect, device number 11 [ 736.286768][ T32] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 736.320947][ T9] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 736.446637][ T32] usb 7-1: Using ep0 maxpacket: 8 [ 736.448773][ T32] usb 7-1: no configurations [ 736.448793][ T32] usb 7-1: can't read configurations, error -22 [ 736.449224][ T32] usb usb7-port1: attempt power cycle [ 736.754384][ T5251] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 736.800787][ T5251] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 736.827058][ T5602] Bluetooth: hci2: command 0x2016 tx timeout [ 736.844339][ T37] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 736.844458][ T32] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 736.870699][ T32] usb 7-1: Using ep0 maxpacket: 8 [ 736.871489][ T32] usb 7-1: no configurations [ 736.871509][ T32] usb 7-1: can't read configurations, error -22 [ 736.975183][ T9] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 737.006845][ T37] usb 10-1: Using ep0 maxpacket: 32 [ 737.007251][ T32] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 737.013812][ T37] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 737.013845][ T37] usb 10-1: config 0 has no interface number 0 [ 737.018710][ T37] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 737.018744][ T37] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.035458][ T37] usb 10-1: Product: syz [ 737.035483][ T37] usb 10-1: Manufacturer: syz [ 737.035502][ T37] usb 10-1: SerialNumber: syz [ 737.047452][T11837] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 737.055029][ T32] usb 7-1: Using ep0 maxpacket: 8 [ 737.062946][ T32] usb 7-1: no configurations [ 737.062986][ T32] usb 7-1: can't read configurations, error -22 [ 737.105605][ T32] usb usb7-port1: unable to enumerate USB device [ 737.157123][ T37] usb 10-1: config 0 descriptor?? [ 737.196786][T11837] usb 9-1: Using ep0 maxpacket: 16 [ 737.201656][T11837] usb 9-1: config 0 has an invalid interface number: 34 but max is 0 [ 737.201685][T11837] usb 9-1: config 0 has no interface number 0 [ 737.201728][T11837] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 737.201748][T11837] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 737.227037][T11015] Bluetooth: hci4: command 0x0406 tx timeout [ 737.262825][T11837] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 737.262861][T11837] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.262893][T11837] usb 9-1: Product: syz [ 737.262908][T11837] usb 9-1: Manufacturer: syz [ 737.262924][T11837] usb 9-1: SerialNumber: syz [ 737.359170][T11837] usb 9-1: config 0 descriptor?? [ 737.374039][T13505] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 737.374245][T13505] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 737.575269][ T37] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 737.575304][ T37] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 737.601703][T13505] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 737.602879][T13505] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 737.786640][ T37] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 737.786986][ T37] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -61 [ 737.858760][T11837] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 737.859036][T11837] asix 9-1:0.34: probe with driver asix failed with error -61 [ 738.870098][T13541] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2169'. [ 738.871781][T13541] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2169'. [ 738.892347][ T60] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 738.892430][ T60] CPU: 0 UID: 0 PID: 60 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 738.892515][ T60] Tainted: [L]=SOFTLOCKUP [ 738.892537][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 738.892579][ T60] Workqueue: hci1 hci_rx_work [ 738.892678][ T60] Call Trace: [ 738.892688][ T60] [ 738.892698][ T60] dump_stack_lvl+0xe8/0x150 [ 738.892733][ T60] sysfs_create_dir_ns+0x271/0x2a0 [ 738.892762][ T60] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 738.892791][ T60] ? rt_spin_unlock+0x163/0x200 [ 738.892829][ T60] kobject_add_internal+0x62c/0xce0 [ 738.892867][ T60] kobject_add+0x163/0x240 [ 738.892892][ T60] ? rt_spin_unlock+0x157/0x200 [ 738.892927][ T60] ? __pfx_kobject_add+0x10/0x10 [ 738.892962][ T60] ? get_device_parent+0x370/0x3a0 [ 738.892993][ T60] device_add+0x3fa/0xb80 [ 738.893021][ T60] hci_conn_add_sysfs+0xd5/0x210 [ 738.893058][ T60] le_conn_complete_evt+0xfef/0x1580 [ 738.893096][ T60] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 738.893124][ T60] ? lockdep_hardirqs_on+0x7a/0x110 [ 738.893147][ T60] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 738.893171][ T60] ? rt_mutex_slowunlock+0x219/0x460 [ 738.893204][ T60] ? skb_pull_data+0xf0/0x200 [ 738.893233][ T60] hci_le_conn_complete_evt+0x187/0x470 [ 738.893280][ T60] hci_event_packet+0x67a/0xf10 [ 738.893318][ T60] ? reacquire_held_locks+0x117/0x1a0 [ 738.893352][ T60] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 738.893376][ T60] ? __pfx_hci_event_packet+0x10/0x10 [ 738.893413][ T60] ? rt_spin_unlock+0x157/0x200 [ 738.893454][ T60] ? hci_send_to_monitor+0xe2/0x590 [ 738.893489][ T60] hci_rx_work+0x3ee/0x1020 [ 738.893533][ T60] ? process_one_work+0x7fd/0x1480 [ 738.893560][ T60] process_one_work+0xaaf/0x1480 [ 738.893608][ T60] ? __pfx_process_one_work+0x10/0x10 [ 738.893630][ T60] ? do_raw_spin_lock+0x12b/0x2f0 [ 738.893671][ T60] ? assign_work+0x3cf/0x5d0 [ 738.893701][ T60] worker_thread+0xb05/0x10d0 [ 738.893754][ T60] kthread+0x388/0x470 [ 738.893788][ T60] ? __pfx_worker_thread+0x10/0x10 [ 738.893812][ T60] ? __pfx_kthread+0x10/0x10 [ 738.893845][ T60] ret_from_fork+0x514/0xb70 [ 738.893881][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 738.893913][ T60] ? __switch_to+0xc89/0x1420 [ 738.894034][ T60] ? __pfx_kthread+0x10/0x10 [ 738.894134][ T60] ret_from_fork_asm+0x1a/0x30 [ 738.894269][ T60] [ 738.894361][ T60] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 738.894459][ T60] Bluetooth: hci1: failed to register connection device [ 739.308698][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 739.571098][T11837] usb 10-1: USB disconnect, device number 77 [ 739.815640][T11837] usb 9-1: USB disconnect, device number 69 [ 740.108295][ T9] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 740.165374][ T37] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 740.256700][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 740.272819][ T9] usb 10-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 740.272853][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.272878][ T9] usb 10-1: Product: syz [ 740.272890][ T9] usb 10-1: Manufacturer: syz [ 740.272901][ T9] usb 10-1: SerialNumber: syz [ 740.317181][ T9] usb 10-1: config 0 descriptor?? [ 740.326627][ T37] usb 7-1: Using ep0 maxpacket: 32 [ 740.334979][ T37] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.343878][ T9] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 740.354331][ T37] usb 7-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 740.354380][ T37] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.354403][ T37] usb 7-1: Product: syz [ 740.354419][ T37] usb 7-1: Manufacturer: syz [ 740.354434][ T37] usb 7-1: SerialNumber: syz [ 740.400793][ T37] usb 7-1: config 0 descriptor?? [ 740.442440][ T37] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 740.546720][T11837] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 740.641062][T13572] program syz.8.2179 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 740.696672][T11837] usb 1-1: Using ep0 maxpacket: 8 [ 740.697901][T11837] usb 1-1: no configurations [ 740.697914][T11837] usb 1-1: can't read configurations, error -22 [ 740.830328][T11837] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 740.976949][T11837] usb 1-1: Using ep0 maxpacket: 8 [ 740.978959][T11837] usb 1-1: no configurations [ 740.978973][T11837] usb 1-1: can't read configurations, error -22 [ 740.983921][T11837] usb usb1-port1: attempt power cycle [ 740.987009][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 741.089720][ T159] ================================================================== [ 741.089752][ T159] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0xff5/0x1e40 [ 741.089805][ T159] Write of size 8 at addr ffffc90005bda348 by task kworker/u8:7/159 [ 741.089825][ T159] [ 741.089841][ T159] CPU: 0 UID: 0 PID: 159 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 741.089874][ T159] Tainted: [L]=SOFTLOCKUP [ 741.089883][ T159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 741.089898][ T159] Workqueue: events_unbound flush_to_ldisc [ 741.089927][ T159] Call Trace: [ 741.089936][ T159] [ 741.089946][ T159] dump_stack_lvl+0xe8/0x150 [ 741.089977][ T159] print_address_description+0x55/0x1e0 [ 741.090013][ T159] ? sys_imageblit+0xff5/0x1e40 [ 741.090045][ T159] print_report+0x58/0x70 [ 741.090077][ T159] kasan_report+0x117/0x150 [ 741.090107][ T159] ? sys_imageblit+0xff5/0x1e40 [ 741.090146][ T159] sys_imageblit+0xff5/0x1e40 [ 741.090190][ T159] ? soft_cursor+0x1b0/0xc40 [ 741.090219][ T159] drm_fbdev_shmem_defio_imageblit+0x2c/0x110 [ 741.090255][ T159] soft_cursor+0xa0e/0xc40 [ 741.090289][ T159] bit_cursor+0x11c3/0x1970 [ 741.090330][ T159] ? __pfx_bit_cursor+0x10/0x10 [ 741.090362][ T159] ? get_color+0x2b8/0x4b0 [ 741.090388][ T159] ? fbcon_cursor+0x4c4/0x6f0 [ 741.090412][ T159] hide_cursor+0xd3/0x490 [ 741.090443][ T159] ? __pfx_hide_cursor+0x10/0x10 [ 741.090475][ T159] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 741.090501][ T159] do_con_write+0x1e7/0x5540 [ 741.090526][ T159] ? __lock_acquire+0x6df/0x2e40 [ 741.090552][ T159] ? __lock_acquire+0x6df/0x2e40 [ 741.090574][ T159] ? __lock_acquire+0x6df/0x2e40 [ 741.090600][ T159] ? __lock_acquire+0x6df/0x2e40 [ 741.090627][ T159] ? do_raw_spin_lock+0x12b/0x2f0 [ 741.090661][ T159] ? __pfx_do_con_write+0x10/0x10 [ 741.090690][ T159] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 741.090713][ T159] ? lockdep_hardirqs_on+0x7a/0x110 [ 741.090734][ T159] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 741.090763][ T159] ? rt_mutex_slowunlock+0x219/0x460 [ 741.090797][ T159] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 741.090834][ T159] ? __lock_acquire+0x6df/0x2e40 [ 741.090858][ T159] con_put_char+0x82/0xc0 [ 741.090881][ T159] ? __pfx_con_put_char+0x10/0x10 [ 741.090902][ T159] ? __lock_acquire+0x6df/0x2e40 [ 741.090924][ T159] ? n_tty_receive_buf_standard+0x6a2f/0x6a50 [ 741.090957][ T159] ? __pfx_con_put_char+0x10/0x10 [ 741.090982][ T159] tty_put_char+0xce/0x160 [ 741.091006][ T159] ? __pfx_tty_put_char+0x10/0x10 [ 741.091032][ T159] ? do_raw_spin_lock+0x12b/0x2f0 [ 741.091067][ T159] do_output_char+0x6b7/0x970 [ 741.091098][ T159] __process_echoes+0x2e3/0xa00 [ 741.091136][ T159] n_tty_receive_buf_common+0xcc5/0x13d0 [ 741.091184][ T159] tty_port_default_receive_buf+0x6e/0xa0 [ 741.091212][ T159] flush_to_ldisc+0x247/0x6c0 [ 741.091238][ T159] ? process_one_work+0x7fd/0x1480 [ 741.091262][ T159] process_one_work+0xaaf/0x1480 [ 741.091296][ T159] ? __pfx_process_one_work+0x10/0x10 [ 741.091318][ T159] ? do_raw_spin_lock+0x12b/0x2f0 [ 741.091352][ T159] ? assign_work+0x3cf/0x5d0 [ 741.091375][ T159] worker_thread+0xb05/0x10d0 [ 741.091412][ T159] kthread+0x388/0x470 [ 741.091442][ T159] ? __pfx_worker_thread+0x10/0x10 [ 741.091466][ T159] ? __pfx_kthread+0x10/0x10 [ 741.091497][ T159] ret_from_fork+0x514/0xb70 [ 741.091530][ T159] ? __pfx_ret_from_fork+0x10/0x10 [ 741.091558][ T159] ? __switch_to+0xc89/0x1420 [ 741.091579][ T159] ? __pfx_kthread+0x10/0x10 [ 741.091602][ T159] ret_from_fork_asm+0x1a/0x30 [ 741.091633][ T159] [ 741.091639][ T159] [ 741.091644][ T159] The buggy address belongs to a vmalloc virtual mapping [ 741.091661][ T159] Memory state around the buggy address: [ 741.091672][ T159] ffffc90005bda200: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 741.091684][ T159] ffffc90005bda280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 741.091697][ T159] >ffffc90005bda300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 741.091720][ T159] ^ [ 741.091730][ T159] ffffc90005bda380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 741.091815][ T159] ffffc90005bda400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 741.091825][ T159] ================================================================== [ 741.091902][ T159] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 741.091921][ T159] CPU: 0 UID: 0 PID: 159 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 741.091946][ T159] Tainted: [L]=SOFTLOCKUP [ 741.091954][ T159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 741.091967][ T159] Workqueue: events_unbound flush_to_ldisc [ 741.091990][ T159] Call Trace: [ 741.092000][ T159] [ 741.092008][ T159] vpanic+0x56c/0xa60 [ 741.092028][ T159] ? __pfx_vpanic+0x10/0x10 [ 741.092046][ T159] ? __pfx___schedule+0x10/0x10 [ 741.092077][ T159] panic+0xc5/0xd0 [ 741.092094][ T159] ? __pfx_panic+0x10/0x10 [ 741.092111][ T159] ? preempt_schedule_thunk+0x16/0x40 [ 741.092135][ T159] ? sys_imageblit+0xff5/0x1e40 [ 741.092163][ T159] check_panic_on_warn+0x89/0xb0 [ 741.092193][ T159] ? sys_imageblit+0xff5/0x1e40 [ 741.092222][ T159] end_report+0x73/0x170 [ 741.092240][ T159] ? sys_imageblit+0xff5/0x1e40 [ 741.092271][ T159] kasan_report+0x128/0x150 [ 741.092288][ T159] ? sys_imageblit+0xff5/0x1e40 [ 741.092319][ T159] sys_imageblit+0xff5/0x1e40 [ 741.092352][ T159] ? soft_cursor+0x1b0/0xc40 [ 741.092376][ T159] drm_fbdev_shmem_defio_imageblit+0x2c/0x110 [ 741.092404][ T159] soft_cursor+0xa0e/0xc40 [ 741.092431][ T159] bit_cursor+0x11c3/0x1970 [ 741.092463][ T159] ? __pfx_bit_cursor+0x10/0x10 [ 741.092489][ T159] ? get_color+0x2b8/0x4b0 [ 741.092510][ T159] ? fbcon_cursor+0x4c4/0x6f0 [ 741.092530][ T159] hide_cursor+0xd3/0x490 [ 741.092556][ T159] ? __pfx_hide_cursor+0x10/0x10 [ 741.092581][ T159] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 741.092602][ T159] do_con_write+0x1e7/0x5540 [ 741.092622][ T159] ? __lock_acquire+0x6df/0x2e40 [ 741.092642][ T159] ? __lock_acquire+0x6df/0x2e40 [ 741.092660][ T159] ? __lock_acquire+0x6df/0x2e40 [ 741.092681][ T159] ? __lock_acquire+0x6df/0x2e40 [ 741.092703][ T159] ? do_raw_spin_lock+0x12b/0x2f0 [ 741.092729][ T159] ? __pfx_do_con_write+0x10/0x10 [ 741.092762][ T159] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 741.092780][ T159] ? lockdep_hardirqs_on+0x7a/0x110 [ 741.092797][ T159] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 741.092816][ T159] ? rt_mutex_slowunlock+0x219/0x460 [ 741.092841][ T159] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 741.092870][ T159] ? __lock_acquire+0x6df/0x2e40 [ 741.092888][ T159] con_put_char+0x82/0xc0 [ 741.092908][ T159] ? __pfx_con_put_char+0x10/0x10 [ 741.092927][ T159] ? __lock_acquire+0x6df/0x2e40 [ 741.092946][ T159] ? n_tty_receive_buf_standard+0x6a2f/0x6a50 [ 741.092975][ T159] ? __pfx_con_put_char+0x10/0x10 [ 741.092996][ T159] tty_put_char+0xce/0x160 [ 741.093017][ T159] ? __pfx_tty_put_char+0x10/0x10 [ 741.093036][ T159] ? do_raw_spin_lock+0x12b/0x2f0 [ 741.093064][ T159] do_output_char+0x6b7/0x970 [ 741.093091][ T159] __process_echoes+0x2e3/0xa00 [ 741.093122][ T159] n_tty_receive_buf_common+0xcc5/0x13d0 [ 741.093162][ T159] tty_port_default_receive_buf+0x6e/0xa0 [ 741.093184][ T159] flush_to_ldisc+0x247/0x6c0 [ 741.093214][ T159] ? process_one_work+0x7fd/0x1480 [ 741.093237][ T159] process_one_work+0xaaf/0x1480 [ 741.093269][ T159] ? __pfx_process_one_work+0x10/0x10 [ 741.093286][ T159] ? do_raw_spin_lock+0x12b/0x2f0 [ 741.093313][ T159] ? assign_work+0x3cf/0x5d0 [ 741.093332][ T159] worker_thread+0xb05/0x10d0 [ 741.093360][ T159] kthread+0x388/0x470 [ 741.093384][ T159] ? __pfx_worker_thread+0x10/0x10 [ 741.093403][ T159] ? __pfx_kthread+0x10/0x10 [ 741.093426][ T159] ret_from_fork+0x514/0xb70 [ 741.093453][ T159] ? __pfx_ret_from_fork+0x10/0x10 [ 741.093478][ T159] ? __switch_to+0xc89/0x1420 [ 741.093502][ T159] ? __pfx_kthread+0x10/0x10 [ 741.093526][ T159] ret_from_fork_asm+0x1a/0x30 [ 741.093561][ T159] [ 741.098625][ T159] Kernel Offset: disabled