last executing test programs: 10.546299503s ago: executing program 3 (id=9082): r0 = socket$inet6(0xa, 0x7, 0x2f8) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x4, @remote, 0xb}, 0x1c) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) syz_clone(0x86908200, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000180)) 10.374836733s ago: executing program 3 (id=9086): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_usb_connect$cdc_ecm(0x3, 0x6c, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x1, 0x4, 0xa0, 0x6, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x6, 0x24, 0x6, 0x0, 0x0, "85"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x0, 0x2}, [@mdlm={0x15, 0x24, 0x12, 0x93}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x6, 0xcf}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x10, 0x1, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x348, 0x99, 0xe, 0x40}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0xa, 0x73, 0x0, 0x6}, 0x37, &(0x7f00000001c0)={0x5, 0xf, 0x37, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "66616e0c738dfd76e6b184652224440f"}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x10000, 0xf000, 0xb, [0xc0, 0xff0000, 0xc0]}]}, 0x4, [{0xab, &(0x7f0000000300)=@string={0xab, 0x3, "626b2a355147fb2ab04cf0722f7cccd8d50bec0299fe9ef2a17a93da04e85f9efaf020a3805806d69f0d4d3fa9a11a9075e4e5ae8439762f9ea31bd49dcbcd062f177e8fa102cb36dce499509f3def468df3e3b74abf2e0777443ffaf2ae0d7bbe10576b9c5ded4bbb2870f275a3c41cf7496b23063578013f9b0de83b9462f1b39fb06ef301fbb2d799d8248c8c1474a649157b5e08191175b0d196115ca160a9363015066cd1ab42"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x65, &(0x7f0000000400)=@string={0x65, 0x3, "9386302e21bf750d6ba609cb65d5c1edc17335197d2620946b6791c6952c4684471308dc3e9b5141adbf0eb8a413d8191fee6027b8c7a066b3cf07b0a499bb05d06e3990461fb6a01122e921ac8a986c847ce18f90a73bf8b894d822c3dbe76d5f1e5d"}}, {0xb, &(0x7f0000000480)=@string={0xb, 0x3, "8c332b9f2e568db5c8"}}]}) syz_usb_disconnect(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @masq={{0x9}, @void}}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) 8.96553746s ago: executing program 4 (id=9093): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000046c0)=[{{&(0x7f0000000300)=@phonet, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000380)=""/22, 0x16}, {&(0x7f00000008c0)=""/64, 0x40}, {&(0x7f00000004c0)=""/145, 0x91}, {&(0x7f00000047c0)=""/197, 0xc5}, {&(0x7f0000000680)=""/199, 0xc7}, {&(0x7f0000000580)=""/214, 0xd6}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f0000000a00)=""/2, 0x2}, {&(0x7f0000000900)=""/193, 0xc1}], 0x9, &(0x7f00000048c0)=""/4096, 0x1000}, 0x55c}, {{&(0x7f0000001ac0)=@qipcrtr, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000b80)=""/87, 0x57}], 0x1, &(0x7f0000001c00)=""/95, 0x5f}, 0x33}, {{&(0x7f0000001c80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000001d00)=""/223, 0xdf}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/135, 0x87}, {&(0x7f0000002ec0)=""/30, 0x1e}, {&(0x7f0000002f00)=""/86, 0x56}, {&(0x7f0000002f80)=""/4094, 0xffe}, {&(0x7f0000003f80)=""/3, 0x3}, {&(0x7f0000003fc0)=""/173, 0xad}, {&(0x7f0000004080)=""/192, 0xc0}, {&(0x7f0000004140)=""/95, 0x5f}], 0xa}, 0xc}], 0x3, 0xc0000002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_CREATE(r2, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f0000032380)=""/102400, &(0x7f0000000000)=0x19000) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x3) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0xe7d4c009da6c1985}, {0xffffffffffffffff, 0x201}], 0x2, 0x4) bind$tipc(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='Md', &(0x7f0000000100)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe3\x92[\xcb!7\x19#4|\x84R\xaeM9\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85\x03\x9c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) 8.662385095s ago: executing program 3 (id=9095): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) lsm_get_self_attr(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000800", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018", @ANYBLOB="0000e0ff00008500000086000000bf910000040085000000b70000000000000095000000000000000000000000000000000000000000e95e1c280d4d0399d153b0109921aef380010cdfcb35180ed4dd88c9b0d36bb3c770b045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000340)={0x3c, @multicast2, 0x4e20, 0x0, 'lblc\x00', 0x0, 0x2bd, 0x80}, 0x2c) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="1408c443360a0108000000000033000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 8.637359696s ago: executing program 4 (id=9096): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0x11) 8.45599894s ago: executing program 4 (id=9099): r0 = socket$inet6(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001440)='/sys/power/pm_debug_messages', 0x1, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) flock(r2, 0x4) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000001c0)="66ba4000ed660f3a0ba46009000000002e410f07b9800000c00f3235000400000f3066baf80cb8985ade8eef66bafc0cb806000000efc74424000a000000c744240209000000c7442406000000000f011c24b8010000000f01c166b824008ee00f1859080fd2cd", 0x67}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)=@arm64={0x1, 0x26, 0xf4, '\x00', 0x3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x406, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x221a, 0x7721, 0x16, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) socket(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x4, 0x500002) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x6, @mcast2}}, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}}, 0x108) syz_emit_ethernet(0x46, &(0x7f0000000540)={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) close(r1) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @private1, 0x4}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x219}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_IKEY={0x8, 0x4, 0x9}]}}}]}, 0x48}}, 0x4) 8.36191033s ago: executing program 0 (id=9100): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x800, 0xfa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x4004850) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="24000000240035b900000000000000000000000006000300000000000600030000000000bd93d277dfd287d955b01986170cd19111587be1badd75c79ccf474b4e33c553e95cfd04c6a80e334636ddbcb36185ce15cfd3f4a7c9729a2766d5609b317c214718f0e804e95e99b843af0695a9bf6f748eee2c02883974a8165d4975438b8015c285b0b6624ca31c242a42a216ead0ccca44"], 0x24}}, 0x0) getresuid(&(0x7f0000000100), 0x0, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x100, 0x8, @mcast1={0xff, 0x7}, 0xfffffffe}}, {{0xa, 0x0, 0x200, @private2, 0xffffffff}}}, 0x108) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_int(r6, 0x1, 0x2b, 0x0, &(0x7f0000000140)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 7.080582282s ago: executing program 3 (id=9102): openat$userfaultfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='illinois', 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000280)}) arch_prctl$ARCH_GET_CPUID(0x1011) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) r4 = dup2(r3, r2) write$vhost_msg_v2(r4, 0x0, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x11c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x4, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0xd5}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0xd, &(0x7f0000000300)={0x9, 0x0, 0x0, 0x0, 0x1b}, 0x20) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000045c0)=@userptr={0x43, 0x7, 0x4, 0x8, 0x7b, {0x77359400}, {0x5, 0x0, 0x40, 0x9, 0xae, 0x6, "3e30d6cc"}, 0x0, 0x2, {0x0}, 0x4}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 5.559881817s ago: executing program 0 (id=9106): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000046c0)=[{{&(0x7f0000000300)=@phonet, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000380)=""/22, 0x16}, {&(0x7f00000008c0)=""/64, 0x40}, {&(0x7f00000004c0)=""/145, 0x91}, {&(0x7f00000047c0)=""/197, 0xc5}, {&(0x7f0000000680)=""/199, 0xc7}, {&(0x7f0000000580)=""/214, 0xd6}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f0000000a00)=""/2, 0x2}, {&(0x7f0000000900)=""/193, 0xc1}], 0x9, &(0x7f00000048c0)=""/4096, 0x1000}, 0x55c}, {{&(0x7f0000001ac0)=@qipcrtr, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000b80)=""/87, 0x57}], 0x1, &(0x7f0000001c00)=""/95, 0x5f}, 0x33}, {{&(0x7f0000001c80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000001d00)=""/223, 0xdf}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/135, 0x87}, {&(0x7f0000002ec0)=""/30, 0x1e}, {&(0x7f0000002f00)=""/86, 0x56}, {&(0x7f0000002f80)=""/4094, 0xffe}, {&(0x7f0000003f80)=""/3, 0x3}, {&(0x7f0000003fc0)=""/173, 0xad}, {&(0x7f0000004080)=""/192, 0xc0}, {&(0x7f0000004140)=""/95, 0x5f}], 0xa}, 0xc}], 0x3, 0xc0000002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_CREATE(r2, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f0000032380)=""/102400, &(0x7f0000000000)=0x19000) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x3) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0xe7d4c009da6c1985}, {0xffffffffffffffff, 0x201}], 0x2, 0x4) bind$tipc(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='Md', &(0x7f0000000100)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe3\x92[\xcb!7\x19#4|\x84R\xaeM9\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85\x03\x9c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) 5.49751971s ago: executing program 1 (id=9107): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f00000003c0)=[{}], 0x1, 0x0, 0x0, 0x0) (fail_nth: 1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000014}) 5.252092276s ago: executing program 4 (id=9109): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r0, 0x5408, 0x0) (fail_nth: 4) 4.563456144s ago: executing program 4 (id=9110): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="0404040000000000000057c801"], 0xd) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000d0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000440), r4) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000007c0)=ANY=[@ANYBLOB="150aed00", @ANYRES16=r5, @ANYBLOB="310026bd7000fedbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=@newtfilter={0x8c4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x890, 0x2, [@TCA_U32_POLICE={0x868, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x4, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x1, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x7, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xaa, 0xffffffff, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0x80e, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74db, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x4, 0x5, 0x7, 0x4, 0x3, 0x400, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x82, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x0, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x806, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x200004, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x0, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8c4}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0xcc280fe30b66db6e, 0xc7, 0x0, 0x7, {{0xe, 0x4, 0x0, 0x3a, 0x38, 0x64, 0x0, 0x40, 0x29, 0x0, @remote, @empty, {[@lsrr={0x83, 0x23, 0xa2, [@empty, @private=0xa010101, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x14}, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x8000, 0x8000, 0xffffffff, 0x8, {{0x6, 0x4, 0x3, 0x8, 0x18, 0x64, 0x0, 0x4, 0x4, 0x0, @empty, @loopback, {[@ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r0, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000a00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000780)={0x224, r5, 0xc21, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xde4}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8001, 0x3, 0x9, 0x4000000}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x8010}, 0x1) write$rfkill(r1, &(0x7f0000000080)={0x11, 0x0, 0x3, 0x1}, 0x8) r15 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000100)="e06865ce8cab00ff390f9d5e9b70ca61fb91d8eced9bf4dbd3af53d8de63b0428541390179cf88ba9d319e45b38fb721d9", 0x31}, {&(0x7f0000000140)="8f798396f61a0cea85f07c9bd6b226961e7cc2c85f11d33f9814e65f12b3f8acc049c771ae8ba0fd78fc2d5e8e73576127a1a6083853f0730167d0bc3590a016914a185b6770ce511f1aa65bcb7f5c11812d7f65127faa6df87866847e567b2a4ae7e06802bd4661601e752be6f2629c3daaab468fd36a2d02fba2fc0429", 0x7e}, {&(0x7f00000001c0)="7f0672539f0978ee0631ec6b8e9a2391dfac23543a0e6d41fa6a3cbd2c3608156ab3e12d097987060f2c53c5dfe7a6a95be5140cd2c779824d1f0f2e9865caef497fb57bd52c35b8ad1bbcb8de9cac87e7019354206e5a9536e0f4ff290474a00c4cfd4aba1b", 0x66}, {&(0x7f0000000240)="5996a47799edecc4f71937f63e4656795cec4a7179d0450f942724d355b834ee4395698fdce5a11ef8aa2569dc38535f54cde8fb154e1752a11246016b5b3ef59d4fc3847de37e544dcbc71c6c791f36878247ae97117c799ae1a712d66e943ea615037f49f823", 0x67}, {&(0x7f00000002c0)="6a1b684029c1d2e82b2bb06ab55ab712bdef93d9c34d6a2c94f8e2eb76312c1ae0d0e4c3ac1d27100b873b05da0f7b1d3db71154be88400d678794bc0814acc86e26c1fe0d4e1547bc9ce98778496d0a5a3511164904cede01b4f59eb3fd0c62c651549c0c2d31f5368d6507894665ef76e43a86ed553790d68e92ca0700a0242de4a82060b7820339b469cbfb2c1f3f6187e2b63b1ea0b260dc9a5d753d521489a6ae06b1abc984aea96c828ccf245dfd492813095d2013803c6c", 0xbb}], 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) landlock_restrict_self(r15, 0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 4.271923776s ago: executing program 1 (id=9111): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000000c001a800800058004000380"], 0x2c}}, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r2, 0xc080583d, &(0x7f0000000040)={0x5, 0x2, 0xe, 0x5, 0x7, 0x40, 0xa, 0x2}) 4.221444522s ago: executing program 0 (id=9112): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000400)=""/245, 0xf5}, {&(0x7f0000000500)=""/59, 0x3b}, {&(0x7f0000000540)=""/80, 0x50}, {&(0x7f00000005c0)=""/79, 0x4f}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/10, 0xa}, {&(0x7f00000007c0)=""/165, 0xa5}, {&(0x7f0000000880)=""/190, 0xbe}, {&(0x7f0000000940)=""/188, 0xbc}, {&(0x7f0000000a00)=""/77, 0x4d}], 0xa, 0x1000, 0x9) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="cf42", 0x2}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a310000"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x48d0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r6}) set_mempolicy(0x1, 0x0, 0x40) 4.125337072s ago: executing program 1 (id=9113): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) tkill(r0, 0x12) r1 = syz_pidfd_open(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$setownex(r1, 0xf, &(0x7f0000002440)={0x0, r2}) ptrace(0x8, 0x0) r3 = open$dir(&(0x7f0000000040)='./file1\x00', 0x20a801, 0x190) r4 = openat(r3, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x138) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r7 = dup(r6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r10 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) write$cgroup_type(r8, &(0x7f0000000080), 0x11ffffce1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) flock(r4, 0x5) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r4, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/26, 0x1a, 0x0, &(0x7f00000001c0)=""/174, 0xae}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000005000000000000000a00000081f16d0000000095000000000000001e75f82953f246b7debcc2fdcfa37bcc0b4302986c6130898f776268d033b696b1585243f440d133542f82a977bd2baf751e5352fe53b43a901a6d7d7f24859d3c73fd8d69af6c3bf88e56f2a48abb716187ac0a209d32121c79632f34f9dabcb6e72a20aa10a9e8647263e740ef083f2c178659408a"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 4.123963388s ago: executing program 4 (id=9114): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) ioprio_get$pid(0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002c80)=@deltfilter={0x18ec, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0xffff, 0xffff}, {0x0, 0x8abf833ddfa404b6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18bc, 0x2, [@TCA_CGROUP_EMATCHES={0x1044, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1030, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf, 0x7, 0x54a}, {{0x1, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPT={0x1018, 0x3, 0x0, 0x0, {{0x9, 0x9, 0x81}, [@TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}]}]}, @TCA_CGROUP_POLICE={0x854, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff7fff}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x79fd, 0x10001, 0x200, 0x3f2, 0x527d, 0x7, 0x0, 0xe2, 0xffff11a9, 0x3, 0x67, 0x7, 0x7, 0x7f, 0x400, 0xca, 0x8e6, 0x4ac, 0x0, 0x2, 0x8d3, 0xa89d, 0x7, 0x7, 0x7, 0x6, 0x0, 0x0, 0x6, 0x3, 0x8, 0xfe0000, 0x3, 0x6, 0x0, 0x3, 0x3, 0x4, 0x3bf, 0x5, 0x1, 0x80000000, 0xfffffff9, 0x8, 0x1, 0x3, 0x9, 0x0, 0x1, 0x2, 0x5, 0x1, 0x7ff, 0x3, 0x6, 0x7, 0x2, 0x8, 0x2, 0x60801de1, 0x8001, 0x6, 0xd, 0x5, 0xb, 0x3, 0x40, 0xa9, 0x1, 0x2, 0x9, 0x0, 0x4, 0xbbfb, 0x706, 0x7, 0x5, 0x5, 0x6, 0x8c1, 0x6, 0x8, 0x5, 0x7fff, 0x5, 0x0, 0x7f, 0x8, 0x7, 0x9, 0xd, 0x80000001, 0x7, 0x1, 0x8, 0x315a5c48, 0xc0, 0x7fff, 0x4, 0x81, 0xf578, 0xa32, 0xffffff01, 0x2, 0xb, 0x6, 0x4, 0x5, 0x2, 0x6, 0x6, 0x6, 0x10000, 0x7, 0x12000000, 0x5, 0x401, 0x3, 0x4, 0x7f, 0xdfea, 0x2a7, 0xfffffffe, 0x0, 0x2, 0x581d, 0xf, 0x8001, 0x5, 0x564b, 0x5, 0x1, 0x6, 0x7, 0x3, 0x2, 0x1, 0x4d, 0x4, 0x1e4, 0x1, 0x80000000, 0x6, 0x38ab7bf, 0x9, 0x3ff, 0x6, 0x582c, 0xc0, 0x2, 0x4, 0x8, 0xfff, 0x2, 0x4, 0x8, 0x200, 0x7, 0x5d7, 0x9, 0x4be2, 0x3, 0xb, 0x1, 0x3, 0x1, 0x0, 0x0, 0x24, 0x2, 0xfffffff5, 0xffff, 0x3, 0x7a5afb1f, 0x9, 0x6, 0x2, 0x9, 0x401, 0xfffffffe, 0xfffffd2f, 0x2f, 0x4, 0x7, 0x10001, 0x3, 0x1000, 0x80000000, 0x4, 0x3dd0c3f4, 0x6, 0x7fff, 0x4, 0x40, 0x9, 0x8000, 0x8, 0x7, 0xfffffff7, 0x1, 0x7f, 0x8, 0x5, 0x7fff, 0xffff, 0x1, 0x3, 0x8, 0x7, 0x2, 0x9, 0x9, 0x0, 0xfffffff1, 0x18, 0xc, 0x5178, 0xffffff95, 0x1, 0xfffffffa, 0x8, 0xffff52af, 0x9, 0xff, 0x0, 0x8, 0x1e9, 0x5, 0x200, 0x1ff, 0x8, 0x6, 0x10001, 0x4, 0x7, 0xa434, 0x0, 0x7c, 0x7fff, 0xffffffc8, 0x7, 0xbbf, 0x8, 0x4, 0x9, 0x8, 0xbc0e, 0x9, 0x4, 0xfffffff9, 0x0, 0x6, 0x40, 0xfffffff9, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x4, 0x0, 0x0, 0x5, {0x6, 0x0, 0x3, 0x4, 0x2, 0x200}, {0xa, 0x1, 0x4, 0xffff, 0x7, 0x5}, 0x101, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1b0, 0x4, 0x7, 0xd, 0x87, 0x6, 0x2, 0xc, 0x61d6, 0xcd06, 0x7, 0x7f, 0x4, 0xffffffff, 0x5afb, 0xb1d9, 0x5, 0x3, 0x5, 0x0, 0x8, 0x1, 0x401, 0xd, 0x8, 0x2, 0x40, 0x33, 0x4, 0x9, 0x800, 0x52caa48c, 0x2, 0xffffffb1, 0xffffffc6, 0xe, 0x3, 0xfffffffa, 0x80, 0x5, 0xc, 0x6, 0x180, 0x73e, 0x3, 0x3, 0xffffff00, 0x1000, 0x473b, 0x7, 0x9, 0x4af7, 0x7, 0x800, 0x2d4, 0x7fffffff, 0x4, 0xc, 0x0, 0x2, 0x0, 0x4, 0x1, 0x7, 0x9, 0x1, 0xfff, 0x7, 0x1, 0x8, 0x80000001, 0x8, 0x81, 0x20000000, 0xa86b, 0x7f, 0x0, 0x2, 0x1, 0xf, 0xd, 0x1000, 0xd1, 0xc, 0x6, 0x8, 0x4, 0x1000, 0x1, 0x0, 0x1, 0x9, 0x5, 0x40, 0x7, 0x8000, 0xcbaa, 0x7, 0x40, 0x6, 0xd8e, 0x8, 0x2, 0x6, 0x5, 0x1, 0x10001, 0x9, 0x8, 0x80000001, 0x45fb, 0x6, 0x2, 0x0, 0x8, 0xf6196e52, 0x3, 0xffff, 0x8, 0x2, 0xb, 0x8, 0x0, 0x200, 0x8, 0x1, 0x7fff, 0xc37, 0x2, 0xa02, 0x2, 0x8001, 0x8001, 0x8, 0x2, 0x6, 0x8c06, 0x8, 0xff, 0x758, 0x4, 0x6, 0xfffffc9e, 0x5, 0xc, 0x4, 0x5068cefb, 0x7, 0x7ff, 0x4, 0x8, 0x2000000, 0x0, 0x7fff, 0x0, 0x2, 0x9, 0x93e, 0x7fffffff, 0x2, 0x1, 0x4, 0xe, 0x0, 0x10001, 0x8, 0xffffff8e, 0xee6, 0xffff, 0x2, 0x400, 0x3, 0x1000, 0x0, 0x6, 0x3ff, 0x1, 0x6, 0xfffffffe, 0x7dc, 0x8f, 0xe70e, 0x4, 0x3, 0x7ff, 0xcfd, 0x0, 0xc, 0xca3c, 0x6, 0x9, 0xd2a, 0x3, 0x5, 0xfff, 0x0, 0xffff, 0x7, 0x5, 0x557, 0x2, 0x9, 0x9, 0x10001, 0x1, 0x4fb, 0xd, 0xe76, 0x9, 0xfffffc50, 0x8, 0x7, 0x87c, 0x1, 0xe1b5, 0x9, 0xd6, 0xdc8, 0x0, 0x1000, 0x1, 0x401, 0x0, 0x5, 0xb1, 0x3, 0x9, 0x52d0ca6f, 0x400, 0x1, 0x200, 0x5, 0x7fffffff, 0x7f, 0xfd, 0x1, 0x635a, 0x4, 0x1, 0x8, 0x9, 0x6, 0x2a, 0x8000, 0x2, 0x200, 0xbc, 0x4, 0x4, 0x100, 0x1, 0xff000000, 0x10001, 0x1000, 0x7]}]}, @TCA_CGROUP_POLICE={0x20, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}]}}]}, 0x18ec}}, 0x4c844) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x4}}, 0x10, 0x0}, 0x240448e1) socket$inet6(0xa, 0x3, 0x9) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc}) bind$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804001300000008000d000100000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) 3.536169805s ago: executing program 3 (id=9115): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29) ioctl$KVM_CAP_DISABLE_QUIRKS(r0, 0x4068aea3, &(0x7f0000000100)={0x74, 0x0, 0x3}) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000002c0)={0x1, 0x0, @pic={0x5, 0x9, 0x80, 0x8, 0x6, 0x3, 0x3, 0x0, 0x9, 0x3, 0x7, 0x3, 0x2, 0xb, 0xd, 0x3}}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0xa, 0x802, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000003c0)="33adba493baf1f4260157f826a2bb0f773c0572a88a86b541693bac0f77b1f9a8fd61b7b7346cd4ade", 0x29) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000280)={0x0, 0xea60}, 0x10) socket$qrtr(0x2a, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) socket$kcm(0x10, 0x7, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000fdffffffffdbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') 3.202392413s ago: executing program 3 (id=9116): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x800, 0xfa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x4004850) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="24000000240035b900000000000000000000000006000300000000000600030000000000bd93d277dfd287d955b01986170cd19111587be1badd75c79ccf474b4e33c553e95cfd04c6a80e334636ddbcb36185ce15cfd3f4a7c9729a2766d5609b317c214718f0e804e95e99b843af0695a9bf6f748eee2c02883974a8165d4975438b8015c285b0b6624ca31c242a42a216ead0ccca44"], 0x24}}, 0x0) getresuid(&(0x7f0000000100), 0x0, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x100, 0x8, @mcast1={0xff, 0x7}, 0xfffffffe}}, {{0xa, 0x0, 0x200, @private2, 0xffffffff}}}, 0x108) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_int(r7, 0x1, 0x2b, 0x0, &(0x7f0000000140)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x6, &(0x7f0000000700)=ANY=[@ANYRESHEX=r6], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, r8, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 2.744829877s ago: executing program 0 (id=9117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x3000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0) 2.492743156s ago: executing program 0 (id=9118): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012920000905", @ANYRESDEC], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001600)={0x40, r3, 0x1, 0x70bd2d, 0xffffffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x1, 0x8001, 0x35d, 0x10, 0xa8, 0x2]}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 1.954580391s ago: executing program 1 (id=9120): mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) shmget$private(0x0, 0x3000, 0x40, &(0x7f00001ff000/0x3000)=nil) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$watch_queue(0x0, 0x80) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) syz_io_uring_complete(0x0, 0x0) r2 = memfd_create(&(0x7f00000003c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2\xff\x90z\xea{\xe5\xa0\xceyY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) dup(r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000200)=@overlay={0x6, 0x5, 0x4, 0x20, 0x7, {0x77359400}, {0x0, 0x2, 0x1, 0x0, 0x8, 0xff, "3b0dc0d2"}, 0x101, 0x3, {}, 0x69f4}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') read$FUSE(r6, &(0x7f0000005440)={0x2020}, 0x2020) pread64(r6, &(0x7f0000001340)=""/102386, 0x18ff2, 0x22010) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x3000) shmctl$SHM_UNLOCK(0x0, 0xc) 1.829411018s ago: executing program 2 (id=9121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) (fail_nth: 1) 1.323961503s ago: executing program 2 (id=9122): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000046c0)=[{{&(0x7f0000000300)=@phonet, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000380)=""/22, 0x16}, {&(0x7f00000008c0)=""/64, 0x40}, {&(0x7f00000004c0)=""/145, 0x91}, {&(0x7f00000047c0)=""/197, 0xc5}, {&(0x7f0000000680)=""/199, 0xc7}, {&(0x7f0000000580)=""/214, 0xd6}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f0000000a00)=""/2, 0x2}, {&(0x7f0000000900)=""/193, 0xc1}], 0x9, &(0x7f00000048c0)=""/4096, 0x1000}, 0x55c}, {{&(0x7f0000001ac0)=@qipcrtr, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000b80)=""/87, 0x57}], 0x1, &(0x7f0000001c00)=""/95, 0x5f}, 0x33}, {{&(0x7f0000001c80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000001d00)=""/223, 0xdf}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/135, 0x87}, {&(0x7f0000002ec0)=""/30, 0x1e}, {&(0x7f0000002f00)=""/86, 0x56}, {&(0x7f0000002f80)=""/4094, 0xffe}, {&(0x7f0000003f80)=""/3, 0x3}, {&(0x7f0000003fc0)=""/173, 0xad}, {&(0x7f0000004080)=""/192, 0xc0}, {&(0x7f0000004140)=""/95, 0x5f}], 0xa}, 0xc}, {{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f0000004300)=""/68, 0x44}, {&(0x7f0000004380)=""/194, 0xc2}, {&(0x7f0000000a40)=""/87, 0x57}, {&(0x7f0000004500)=""/159, 0x9f}], 0x4, &(0x7f0000004600)=""/181, 0xb5}, 0x40}], 0x4, 0xc0000002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_CREATE(r2, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f0000032380)=""/102400, &(0x7f0000000000)=0x19000) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x3) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0xe7d4c009da6c1985}, {0xffffffffffffffff, 0x201}], 0x2, 0x4) bind$tipc(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='Md', &(0x7f0000000100)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe3\x92[\xcb!7\x19#4|\x84R\xaeM9\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85\x03\x9c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) 665.473806ms ago: executing program 2 (id=9123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') (async) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') (async) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_mount_image$fuse(0x0, 0x0, 0x432300c, 0x0, 0x21, 0x0, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0x2000006, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x9, 0xfffffffb, 0x0, 0x0, 0x0, 0x3, [0xb3c]}}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000004500000a44000000060a0b04000000000000000002000000100004800c000180080001006f7366000900010073797a30000000000900020073797a3200000000050007402d"], 0x6c}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES64=r5], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x2405c084) 561.662177ms ago: executing program 2 (id=9124): r0 = socket$inet(0xa, 0x801, 0x84) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f00000002c0)={{r0}, "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"}) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="0079ae65036beba69e91ce5d76195db70c067c5cfa72d77527b2096c0cf04153f34fa2067efbfc3647fc7281988c148cdd52d681e59f907843b628f8b4aeec2f8b9ff73b3b291bab4d4939da89a05e178d2095f0f8b31162a161ad527e4b5ebd80156f98dcbeb85991e6a6859f197983e8db7989cc726ebc6b9806deb442e8ea693c93c869c30b8d", 0x88}, {&(0x7f00000000c0)="cf4a19601f57f3237432c4c7f2fa60c6fd05103704072034cf611f5a4370ddd9b544e55873e3bfe3ce402b1c8f73dae4a7ad27a4a6e515dbae5486ff83ee9c73d9fc9a2c34a2592145efcf6b8a1aa05d1b8f6dd8c6584aa97e483e64948495a771a8618ea9cc6104a4bf2628a9c1e53ac636f1ff0621a8cda18c830e5b24b1f6505f4f0f041e1df35693353858bd785ebac895e71aa50c3c12a4ee7f49a9761109dbcf138c69f6baaafabd2480bc", 0xae}], 0x2, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="48000000150081fb7042ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c49388a562af5745e17b8c119418f03000000d6e74703c48f93b8ecf6d65b223d", 0x48}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)={0x0, 0x1c, "3c8ae184cb043958cc6b3b5a17809e0808d35d88494ffa803655b39b"}, &(0x7f00000001c0)=0x24) 558.285931ms ago: executing program 2 (id=9125): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@gettaction={0x124, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x90, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'pedit\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'tunnel_key\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x976e}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x82bc56d0aef84aa0}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5983}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40800}, 0x80) 518.126293ms ago: executing program 1 (id=9126): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000005380)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x10}, {0xffff, 0xfff1}, {0x2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x40, 0xfffffc00, 0xfffffff7, 0x5, 0xa5, 0x0, 0x7, 0x7, 0x80, 0x2, 0x2, 0xfd7f, 0x1, 0x0, 0x0, 0xfff, 0x9, 0xf, 0x6, 0x5, 0x4, 0x3, 0x6, 0x0, 0x400, 0xfffff001, 0x0, 0xb9, 0xe4da, 0x9, 0x0, 0x9, 0x6, 0x3, 0x84a, 0x0, 0x57, 0x5e5, 0x401, 0x1ff, 0x7, 0x0, 0xc84, 0x0, 0x5, 0xeb04, 0x1ff, 0x0, 0x0, 0xffffffff, 0x1, 0x4, 0x3fe0000, 0x9, 0xe, 0x7, 0x0, 0x5d5, 0xd, 0x101, 0xd, 0x8, 0x5, 0x4, 0x7, 0x80000000, 0x1, 0xfffff6d1, 0x270, 0x4, 0x8001, 0x2, 0x8, 0x3, 0xaf7c, 0x0, 0x1, 0xc13c, 0x2, 0xfffffffb, 0x4, 0x10, 0xe2e, 0x80000400, 0xe26f, 0x6, 0xffffffff, 0x6, 0x8, 0x5c98, 0x1007, 0x4, 0x4, 0x9, 0x10, 0x5ffe, 0x6, 0x34b, 0xb45, 0x0, 0x9, 0x8, 0x1f, 0x0, 0x1, 0x5, 0x2, 0x1fc, 0xc1, 0x9, 0x0, 0xfffffff8, 0x1, 0x8001, 0x4c, 0xff, 0x0, 0x6, 0x101, 0x8, 0x8, 0x7fff, 0x9, 0x7, 0x5, 0x48000, 0x7, 0x0, 0x0, 0x4, 0x10000, 0x3, 0x1ff, 0x101, 0x8000, 0x3ac9, 0x1, 0x3, 0x4, 0x4, 0x8, 0x9800, 0x3, 0x7f, 0x440, 0x1, 0x80000000, 0x1, 0xfffffff9, 0xa, 0xfffffff8, 0x9, 0x6, 0xe, 0x2, 0x7, 0x5, 0x9, 0x4, 0xfffffffe, 0x5b, 0x1, 0x4, 0x40, 0xfffffffc, 0xd, 0x9d, 0xffffffff, 0x7, 0xa, 0x9, 0x7, 0xfffffffb, 0xfffffc00, 0x8, 0x768, 0xfffffffd, 0x4, 0x8, 0xffffffff, 0x8001, 0x47, 0xa331, 0x5, 0x4000000, 0x7, 0x3, 0x0, 0x7, 0xb14, 0x5, 0x9, 0x9, 0x6, 0x6, 0x8244, 0x2, 0x52, 0x3e, 0x0, 0x1000, 0x1, 0x1, 0x4, 0x1, 0x3ff, 0x10, 0x3, 0x6, 0x1, 0x200, 0x1, 0x8000, 0x8, 0x3, 0x8, 0x7ff, 0xa, 0x10000, 0x9, 0xbd, 0x0, 0x6, 0x9, 0x553, 0x10001, 0x5, 0x9f, 0x9, 0x83, 0x401, 0x38a7, 0xfffff801, 0x4, 0xfffffffe, 0x0, 0x9, 0x3, 0x200, 0x9, 0x7, 0x400, 0x1, 0xece, 0xfffff0a3, 0x6, 0xe, 0x7, 0x2, 0x8000, 0x550, 0x3ff, 0x433, 0x7, 0x3, 0xfffffff9]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) (fail_nth: 4) 445.089199ms ago: executing program 0 (id=9127): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000100)='./mnt/file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0xfe, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000400)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0xffffffffa4614429, 0x104, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') name_to_handle_at(r2, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)=@FILEID_INO32_GEN={0x8, 0x1, {0xa, 0x80000001}}, 0x0, 0x600) syz_fuse_handle_req(r0, &(0x7f0000004080)="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", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x7, {0xfffffffffffffffe, 0x1, 0x0, {0x3, 0x69ec2dea, 0x1, 0x201, 0x6dc6, 0x7651, 0x5, 0x7, 0xe000, 0x4000, 0x5, 0xee01, 0xffffffffffffffff, 0x5, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r3, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x8}}, 0x10, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) recvmmsg(r3, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/188, 0xbc}], 0x1}}], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006080)={0x2020, 0x0, 0x0}, 0x2020) stat(&(0x7f00000080c0)='./file0\x00', &(0x7f0000008100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r2, &(0x7f0000008180)={0x78, 0xffffffffffffffea, r4, {0x7fff, 0x2524, 0x0, {0x4, 0x8, 0x8, 0x80, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, r5, 0x4}}}, 0x78) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) ioctl$int_in(r6, 0x5452, &(0x7f0000000200)=0x4) write$evdev(r6, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) dup2(r1, r1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1\x00', 0x101546, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="14005470c3c57a4bf18f0000000000000700000a34000000030a0fdb00000200000000000a0020050900030073797a32000000000900010073797a31000000000800054000000000140000001100010000000000000000000100000a"], 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 96.67972ms ago: executing program 1 (id=9128): socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000002c0)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@llc_tr={0x11, {@snap={0x0, 0x1, "0bcc", "bd3467", 0x9000, "449d6d39134a055d072cd1c0fae8a559540459504e3c654d6a6bb7d0630e9bfcf701c7bbd0e56312c4d15d9d4e8303996cf42fa19930ced8e7b00d82e050fcd786157c39b59d629f9a7f3bc5c8d9339dedf4079488fc4e5b57cea4b1a8c53c96b4d8347d41e6d19e493939daee33e8c108051bc25d71bf3856bd3fa2a8636832"}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x1a8, 0xc8, 0x1a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x90000, 0x9, 0x3, 0x146dd345, 0x3, 0x43a, 0x6}}, @common=@srh1={{0x90}, {0x0, 0x7f, 0xb, 0x9, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, @dev={0xfe, 0x80, '\x00', 0x32}, [0xff0000ff, 0xff000000, 0xffffff00, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], [0xff000000, 0xffffff00, 0xff, 0xffffffff], 0x801, 0x21}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0x4695338a4f0a80fe, 0xffffffff, 0xff, 0xff000000], 'ip6erspan0\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0xfc, 0x3}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@mh={{0x28}, {"25c9", 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x5, 0x4}, {0x4, 0x3, 0x6}, 0x5, 0xb8cc}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000100)={0xfffffffd, "5660359c3245d1c42317afad7dd4ed51000000000000657fbc3600", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000180)={"2486970284ed923431d400001f000000a9201be943f06f2f4000", r9}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) r10 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r10, 0x403c6f2b, &(0x7f0000000040)={0x1, {"40a568bf607c2094e9c6a0c0f550f7f8", "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r10, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5c22cb6cd3148b85d5dbf5f9e3413", "a9929074e915d4b883a44cd492a341be"}, 0x1, 0x4}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000140)=0x4, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 0s ago: executing program 2 (id=9129): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000053000/0x2000)=nil, 0x500500, 0x9) r0 = add_key(&(0x7f0000002580)='cifs.spnego\x00', &(0x7f00000025c0)={'syz', 0x2}, &(0x7f0000002600), 0x0, 0xfffffffffffffffd) keyctl$negate(0xd, r0, 0x100000001, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000002800)='.request_key_auth\x00', 0x0) keyctl$set_timeout(0xf, r0, 0x0) add_key$keyring(&(0x7f00000028c0), &(0x7f0000002900)={'syz', 0x0}, 0x0, 0x0, r0) kernel console output (not intermixed with test programs): vsim0 [ 1888.336722][ T3071] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1888.391694][ T1102] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1888.561924][ T1102] usb 3-1: Using ep0 maxpacket: 16 [ 1888.574937][ T1102] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1888.588107][ T1102] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1888.600418][ T1102] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1888.614006][ T1102] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1888.635034][ T1102] usb 3-1: config 7 interface 0 has no altsetting 0 [ 1888.642705][ T1102] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1888.655697][ T1102] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.908801][ T3083] netlink: 'syz.1.8773': attribute type 7 has an invalid length. [ 1889.114313][ T3069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1889.124700][ T3069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1889.415259][ T1102] usbhid 3-1:7.0: can't add hid device: -71 [ 1889.422388][ T1102] usbhid 3-1:7.0: probe with driver usbhid failed with error -71 [ 1889.459158][ T1102] usb 3-1: USB disconnect, device number 73 [ 1890.065378][ T3092] input: syz1 as /devices/virtual/input/input234 [ 1890.362566][ T3096] input: syz1 as /devices/virtual/input/input235 [ 1891.701702][T32388] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 1891.772942][ T5949] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1891.853869][T32388] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1891.864421][T32388] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1891.873917][T32388] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1891.884424][T32388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1891.895624][T32388] usb 1-1: config 0 descriptor?? [ 1891.952580][ T5949] usb 5-1: Using ep0 maxpacket: 32 [ 1891.967492][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1891.979912][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1891.991961][ T5949] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1892.001732][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1892.030839][ T5949] usb 5-1: config 0 descriptor?? [ 1892.292345][T15490] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 1892.350335][ T3124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1892.460948][ T5949] zydacron 0003:13EC:0006.009C: item fetching failed at offset 0/2 [ 1892.473426][T15490] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.484351][ T5949] zydacron 0003:13EC:0006.009C: parse failed [ 1892.492470][ T5949] zydacron 0003:13EC:0006.009C: probe with driver zydacron failed with error -22 [ 1892.503802][T15490] usb 2-1: config 0 has no interfaces? [ 1892.507926][ T3127] input: syz1 as /devices/virtual/input/input236 [ 1892.509730][T15490] usb 2-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 1892.534540][T15490] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1892.565361][T15490] usb 2-1: config 0 descriptor?? [ 1892.656374][ T3115] fuse: Bad value for 'rootmode' [ 1893.034560][ T1102] usb 2-1: USB disconnect, device number 89 [ 1893.483375][ T3135] netlink: 'syz.2.8791': attribute type 1 has an invalid length. [ 1893.521327][ T3135] bond1: entered promiscuous mode [ 1893.527680][ T3135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1893.554961][ T3135] macvtap1: entered allmulticast mode [ 1893.583195][ T3135] bond1: (slave bridge1): making interface the new active one [ 1893.593547][ T3135] bridge1: entered promiscuous mode [ 1893.601351][ T3135] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1893.643925][ T30] kauditd_printk_skb: 1204 callbacks suppressed [ 1893.643946][ T30] audit: type=1326 audit(1776613090.426:4873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3134 comm="syz.2.8791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97d9c819 code=0x7ffc0000 [ 1893.731728][ T30] audit: type=1326 audit(1776613090.426:4874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3134 comm="syz.2.8791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97d9c819 code=0x7ffc0000 [ 1893.791736][ T30] audit: type=1326 audit(1776613090.426:4875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3134 comm="syz.2.8791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde97d9c819 code=0x7ffc0000 [ 1893.853759][ T30] audit: type=1326 audit(1776613090.426:4876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3134 comm="syz.2.8791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97d9c819 code=0x7ffc0000 [ 1893.901971][ T30] audit: type=1326 audit(1776613090.426:4877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3134 comm="syz.2.8791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fde97d9c819 code=0x7ffc0000 [ 1893.926911][ T30] audit: type=1326 audit(1776613090.426:4878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3134 comm="syz.2.8791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97d9c819 code=0x7ffc0000 [ 1893.958967][ T30] audit: type=1326 audit(1776613090.426:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3134 comm="syz.2.8791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97d9c819 code=0x7ffc0000 [ 1893.986613][ T30] audit: type=1326 audit(1776613090.426:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3134 comm="syz.2.8791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fde97d9c819 code=0x7ffc0000 [ 1894.012913][ T30] audit: type=1326 audit(1776613090.426:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3134 comm="syz.2.8791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97d9c819 code=0x7ffc0000 [ 1894.037238][ T30] audit: type=1326 audit(1776613090.426:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3134 comm="syz.2.8791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fde97d9c819 code=0x7ffc0000 [ 1894.351785][ T1102] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1894.360513][T26110] usb 1-1: USB disconnect, device number 106 [ 1894.505862][ T1102] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1894.525715][ T1102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1894.557790][ T1102] usb 2-1: config 0 descriptor?? [ 1894.638189][T26110] usb 5-1: USB disconnect, device number 81 [ 1894.774083][ T3144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1894.790339][ T3144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1894.913117][ T1102] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1895.141679][T26110] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1895.326730][T26110] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1895.361079][T26110] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1895.394080][T26110] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1895.416395][T26110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.435400][T26110] usb 5-1: Product: syz [ 1895.451013][T26110] usb 5-1: Manufacturer: syz [ 1895.455752][T26110] usb 5-1: SerialNumber: syz [ 1895.478273][T26110] cdc_mbim 5-1:1.0: skipping garbage [ 1895.692242][ T3153] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1896.182053][ T3161] input: syz1 as /devices/virtual/input/input237 [ 1896.272477][ T5949] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 1896.335378][ T3153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1896.367632][ T3153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1896.403540][ T3153] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1896.422892][T26110] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 1896.442110][T26110] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 1896.454699][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1896.478654][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1896.514257][ T5949] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1896.532171][T26110] wwan wwan0: port wwan0mbim0 attached [ 1896.539412][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1896.567264][ T5949] usb 1-1: config 0 descriptor?? [ 1896.580157][T26110] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 12:aa:7c:97:1c:a4 [ 1897.019215][ T5949] elan 0003:04F3:0755.009D: unknown main item tag 0x0 [ 1897.034111][ T3174] netlink: 7 bytes leftover after parsing attributes in process `syz.2.8802'. [ 1897.045093][ T5949] elan 0003:04F3:0755.009D: unknown main item tag 0x0 [ 1897.055810][ T5949] elan 0003:04F3:0755.009D: unknown main item tag 0x0 [ 1897.076443][ T5949] elan 0003:04F3:0755.009D: unknown main item tag 0x0 [ 1897.087953][ T3174] vlan0: entered promiscuous mode [ 1897.093399][ T3174] syz_tun: entered promiscuous mode [ 1897.098748][ T5949] elan 0003:04F3:0755.009D: unknown main item tag 0x0 [ 1897.116221][ T5949] elan 0003:04F3:0755.009D: failed to start in urb: -90 [ 1897.145417][ T5949] elan 0003:04F3:0755.009D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 1897.183199][ T1102] [drm:udl_init] *ERROR* Selecting channel failed [ 1897.212028][ T3158] FAULT_INJECTION: forcing a failure. [ 1897.212028][ T3158] name failslab, interval 1, probability 0, space 0, times 0 [ 1897.263488][ T3158] CPU: 1 UID: 0 PID: 3158 Comm: syz.0.8799 Tainted: G L syzkaller #0 PREEMPT(full) [ 1897.263523][ T3158] Tainted: [L]=SOFTLOCKUP [ 1897.263531][ T3158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1897.263543][ T3158] Call Trace: [ 1897.263551][ T3158] [ 1897.263559][ T3158] dump_stack_lvl+0xe8/0x150 [ 1897.263595][ T3158] should_fail_ex+0x412/0x560 [ 1897.263625][ T3158] should_failslab+0xa8/0x100 [ 1897.263649][ T3158] ? security_file_alloc+0x34/0x310 [ 1897.263671][ T3158] kmem_cache_alloc_noprof+0x87/0x650 [ 1897.263691][ T3158] ? rcu_is_watching+0x15/0xb0 [ 1897.263712][ T3158] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1897.263738][ T3158] security_file_alloc+0x34/0x310 [ 1897.263763][ T3158] init_file+0x90/0x2b0 [ 1897.263795][ T3158] alloc_empty_file+0x74/0x1d0 [ 1897.263826][ T3158] path_openat+0x10f/0x3860 [ 1897.263847][ T3158] ? arch_stack_walk+0xfb/0x150 [ 1897.263879][ T3158] ? do_getname+0x2e/0x250 [ 1897.263907][ T3158] ? stack_trace_save+0xa9/0x100 [ 1897.263934][ T3158] ? __pfx_stack_trace_save+0x10/0x10 [ 1897.263961][ T3158] ? do_getname+0x2e/0x250 [ 1897.263988][ T3158] ? stack_depot_save_flags+0x33/0x810 [ 1897.264017][ T3158] ? do_getname+0x2e/0x250 [ 1897.264045][ T3158] ? kasan_save_track+0x4f/0x80 [ 1897.264064][ T3158] ? kasan_save_track+0x3e/0x80 [ 1897.264085][ T3158] ? __kasan_slab_alloc+0x6c/0x80 [ 1897.264108][ T3158] ? __pfx_path_openat+0x10/0x10 [ 1897.264130][ T3158] ? __x64_sys_openat+0x138/0x170 [ 1897.264167][ T3158] ? __lock_acquire+0x6b5/0x2cf0 [ 1897.264219][ T3158] do_file_open+0x23e/0x4a0 [ 1897.264249][ T3158] ? __pfx_do_file_open+0x10/0x10 [ 1897.264295][ T3158] ? _raw_spin_unlock+0x28/0x50 [ 1897.264319][ T3158] ? alloc_fd+0x64b/0x6c0 [ 1897.264360][ T3158] do_sys_openat2+0x113/0x200 [ 1897.264393][ T3158] ? __pfx_do_sys_openat2+0x10/0x10 [ 1897.264424][ T3158] ? ksys_write+0x242/0x270 [ 1897.264450][ T3158] ? __pfx_ksys_write+0x10/0x10 [ 1897.264477][ T3158] __x64_sys_openat+0x138/0x170 [ 1897.264516][ T3158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1897.264538][ T3158] do_syscall_64+0x15f/0xf80 [ 1897.264563][ T3158] ? trace_irq_disable+0x3b/0x140 [ 1897.264589][ T3158] ? clear_bhb_loop+0x40/0x90 [ 1897.264614][ T3158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1897.264633][ T3158] RIP: 0033:0x7fbeb5b5d04e [ 1897.264654][ T3158] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1897.264672][ T3158] RSP: 002b:00007fbeb6a60b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1897.264695][ T3158] RAX: ffffffffffffffda RBX: 00007fbeb6a616c0 RCX: 00007fbeb5b5d04e [ 1897.264711][ T3158] RDX: 0000000000000002 RSI: 00007fbeb6a60c00 RDI: ffffffffffffff9c [ 1897.264726][ T3158] RBP: 00007fbeb6a60c00 R08: 0000000000000000 R09: 0000000000000000 [ 1897.264739][ T3158] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1897.264753][ T3158] R13: 00007fbeb5e16038 R14: 00007fbeb5e15fa0 R15: 00007fbeb5f3fa48 [ 1897.264786][ T3158] [ 1897.269180][ T5950] usb 1-1: USB disconnect, device number 107 [ 1897.294615][ T1102] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1897.453670][ T3178] fido_id[3178]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1897.661053][ T1102] [drm] Initialized udl on minor 2 [ 1897.667524][ T3182] netlink: 'syz.1.8803': attribute type 1 has an invalid length. [ 1897.718335][ T1102] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1897.780059][ T1102] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1897.793651][T32388] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1897.807275][T32388] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1897.823848][ T1102] usb 2-1: USB disconnect, device number 90 [ 1897.891262][ T3195] misc userio: The device must be registered before sending interrupts [ 1898.511804][ T5950] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1898.671833][ T5950] usb 4-1: Using ep0 maxpacket: 32 [ 1898.694443][ T5950] usb 4-1: config 0 has an invalid interface number: 43 but max is 0 [ 1898.753512][ T5950] usb 4-1: config 0 has no interface number 0 [ 1898.782448][ T3220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8811'. [ 1898.805445][T32388] usb 5-1: USB disconnect, device number 82 [ 1898.812956][ T5950] usb 4-1: config 0 interface 43 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1898.836513][T32388] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 1898.900605][ T5950] usb 4-1: config 0 interface 43 has no altsetting 0 [ 1898.958059][ T5950] usb 4-1: New USB device found, idVendor=0499, idProduct=1507, bcdDevice=15.f4 [ 1899.017281][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.064027][ T5950] usb 4-1: Product: syz [ 1899.070039][T32388] wwan wwan0: port wwan0mbim0 disconnected [ 1899.095232][ T5950] usb 4-1: Manufacturer: syz [ 1899.130038][ T5950] usb 4-1: SerialNumber: syz [ 1899.161523][ T5950] usb 4-1: config 0 descriptor?? [ 1899.308484][ T3230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8815'. [ 1899.347864][ T3230] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8815'. [ 1899.766475][ T3246] netlink: 'syz.1.8817': attribute type 15 has an invalid length. [ 1900.013734][ T5950] usb 4-1: USB disconnect, device number 118 [ 1900.058932][ T3252] FAULT_INJECTION: forcing a failure. [ 1900.058932][ T3252] name failslab, interval 1, probability 0, space 0, times 0 [ 1900.081927][T26110] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1900.162680][ T3252] CPU: 1 UID: 0 PID: 3252 Comm: syz.2.8819 Tainted: G L syzkaller #0 PREEMPT(full) [ 1900.162710][ T3252] Tainted: [L]=SOFTLOCKUP [ 1900.162715][ T3252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1900.162723][ T3252] Call Trace: [ 1900.162729][ T3252] [ 1900.162735][ T3252] dump_stack_lvl+0xe8/0x150 [ 1900.162760][ T3252] should_fail_ex+0x412/0x560 [ 1900.162780][ T3252] should_failslab+0xa8/0x100 [ 1900.162796][ T3252] ? security_inode_alloc+0x39/0x310 [ 1900.162814][ T3252] kmem_cache_alloc_noprof+0x87/0x650 [ 1900.162832][ T3252] security_inode_alloc+0x39/0x310 [ 1900.162851][ T3252] inode_init_always_gfp+0x9c8/0xda0 [ 1900.162876][ T3252] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1900.162902][ T3252] alloc_inode+0x82/0x1b0 [ 1900.162929][ T3252] __sock_create+0x12d/0x9d0 [ 1900.162952][ T3252] __sys_socket_file+0xc7/0x160 [ 1900.162972][ T3252] io_socket+0x120/0x3c0 [ 1900.162996][ T3252] __io_issue_sqe+0x180/0x4b0 [ 1900.163016][ T3252] io_issue_sqe+0x165/0xf60 [ 1900.163038][ T3252] io_submit_sqes+0xcc5/0x2240 [ 1900.163073][ T3252] __se_sys_io_uring_enter+0x348/0x1bf0 [ 1900.163097][ T3252] ? __fget_files+0x3a0/0x420 [ 1900.163117][ T3252] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1900.163135][ T3252] ? fput+0xa0/0xd0 [ 1900.163152][ T3252] ? ksys_write+0x242/0x270 [ 1900.163174][ T3252] ? __pfx_ksys_write+0x10/0x10 [ 1900.163191][ T3252] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1900.163208][ T3252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1900.163222][ T3252] do_syscall_64+0x15f/0xf80 [ 1900.163239][ T3252] ? clear_bhb_loop+0x40/0x90 [ 1900.163254][ T3252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1900.163267][ T3252] RIP: 0033:0x7fde97d9c819 [ 1900.163280][ T3252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1900.163290][ T3252] RSP: 002b:00007fde98bb9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1900.163305][ T3252] RAX: ffffffffffffffda RBX: 00007fde98015fa0 RCX: 00007fde97d9c819 [ 1900.163315][ T3252] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 1900.163323][ T3252] RBP: 00007fde98bb9090 R08: 0000000000000000 R09: 0000000000000000 [ 1900.163331][ T3252] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000002 [ 1900.163339][ T3252] R13: 00007fde98016038 R14: 00007fde98015fa0 R15: 00007fde9813fa48 [ 1900.163358][ T3252] [ 1900.163793][ T3252] socket: no more sockets [ 1900.430048][T27849] udevd[27849]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.43/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1900.502864][T26110] usb 5-1: Using ep0 maxpacket: 32 [ 1900.514532][T26110] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1900.526018][T26110] usb 5-1: config 0 has no interfaces? [ 1900.536414][T26110] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1900.551000][T26110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.563199][T26110] usb 5-1: Product: syz [ 1900.567426][T26110] usb 5-1: Manufacturer: syz [ 1900.573234][T26110] usb 5-1: SerialNumber: syz [ 1900.617329][T26110] usb 5-1: config 0 descriptor?? [ 1900.752551][ T3261] sctp: [Deprecated]: syz.3.8820 (pid 3261) Use of int in max_burst socket option. [ 1900.752551][ T3261] Use struct sctp_assoc_value instead [ 1900.839727][T26110] usb 5-1: USB disconnect, device number 83 [ 1900.860954][ T3264] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1901.232434][ T3269] FAULT_INJECTION: forcing a failure. [ 1901.232434][ T3269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1901.261880][ T3269] CPU: 0 UID: 0 PID: 3269 Comm: syz.3.8823 Tainted: G L syzkaller #0 PREEMPT(full) [ 1901.261915][ T3269] Tainted: [L]=SOFTLOCKUP [ 1901.261922][ T3269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1901.261935][ T3269] Call Trace: [ 1901.261943][ T3269] [ 1901.261951][ T3269] dump_stack_lvl+0xe8/0x150 [ 1901.261988][ T3269] should_fail_ex+0x412/0x560 [ 1901.262011][ T3269] _copy_from_user+0x2d/0xb0 [ 1901.262031][ T3269] snd_seq_oss_write+0x5b1/0x8f0 [ 1901.262049][ T3269] ? get_pid_task+0x20/0x1f0 [ 1901.262071][ T3269] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1901.262090][ T3269] ? apparmor_file_permission+0x1f4/0x300 [ 1901.262106][ T3269] ? security_file_permission+0x75/0x260 [ 1901.262122][ T3269] odev_write+0x5a/0x80 [ 1901.262136][ T3269] ? __pfx_odev_write+0x10/0x10 [ 1901.262158][ T3269] vfs_write+0x29a/0xb90 [ 1901.262177][ T3269] ? __pfx_vfs_write+0x10/0x10 [ 1901.262191][ T3269] ? __fget_files+0x2a/0x420 [ 1901.262211][ T3269] ? __fget_files+0x2a/0x420 [ 1901.262228][ T3269] ? __fget_files+0x3a0/0x420 [ 1901.262245][ T3269] ? __fget_files+0x2a/0x420 [ 1901.262267][ T3269] ksys_write+0x150/0x270 [ 1901.262282][ T3269] ? __pfx_ksys_write+0x10/0x10 [ 1901.262307][ T3269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1901.262321][ T3269] do_syscall_64+0x15f/0xf80 [ 1901.262337][ T3269] ? trace_irq_disable+0x3b/0x140 [ 1901.262353][ T3269] ? clear_bhb_loop+0x40/0x90 [ 1901.262368][ T3269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1901.262380][ T3269] RIP: 0033:0x7fced7b9c819 [ 1901.262393][ T3269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1901.262404][ T3269] RSP: 002b:00007fced89df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1901.262420][ T3269] RAX: ffffffffffffffda RBX: 00007fced7e15fa0 RCX: 00007fced7b9c819 [ 1901.262429][ T3269] RDX: 0000000000000232 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1901.262437][ T3269] RBP: 00007fced89df090 R08: 0000000000000000 R09: 0000000000000000 [ 1901.262445][ T3269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1901.262453][ T3269] R13: 00007fced7e16038 R14: 00007fced7e15fa0 R15: 00007fced7f3fa48 [ 1901.262471][ T3269] [ 1901.552013][ T5950] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1901.703583][ T5950] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1901.713331][ T5950] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1901.739679][ T5950] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1901.750666][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.784708][ T5950] usb 3-1: Product: syz [ 1901.794320][ T5950] usb 3-1: Manufacturer: syz [ 1901.800033][ T5950] usb 3-1: SerialNumber: syz [ 1901.857148][ T3279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8826'. [ 1902.031092][ T5950] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1902.230417][ T5950] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1902.239133][ T5950] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 1902.311028][ T3285] netlink: 240 bytes leftover after parsing attributes in process `syz.4.8827'. [ 1902.344197][ T3285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8827'. [ 1902.474633][ T3278] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1902.482547][ T3277] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1902.506667][ T3277] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1902.537087][ T3278] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1902.636740][ T3277] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1902.636805][ T3278] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1902.643348][ T3277] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1902.659412][ T3278] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1902.716315][ T3278] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1902.744360][ T5950] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1902.745309][ T3277] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1902.759147][ T3278] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1902.766662][ T5950] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 1902.774738][ T3277] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1902.806381][ T3277] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1902.813342][ T3277] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1903.681675][T25562] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1904.250087][ T5950] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1904.460426][ T5950] usb 3-1: USB disconnect, device number 74 [ 1904.557936][T27849] udevd[27849]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1904.759266][ T3318] netlink: 'syz.1.8839': attribute type 32 has an invalid length. [ 1904.813421][ T3320] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1904.900978][ T3324] ipvlan0: entered promiscuous mode [ 1904.922306][ T3324] ipvlan0: entered allmulticast mode [ 1904.931682][ T3324] syz_tun: entered allmulticast mode [ 1904.938213][ T3324] team0: Device ipvlan0 is VLAN challenged and team device has VLAN set up [ 1905.018751][ T3327] FAULT_INJECTION: forcing a failure. [ 1905.018751][ T3327] name failslab, interval 1, probability 0, space 0, times 0 [ 1905.034882][ T3327] CPU: 0 UID: 0 PID: 3327 Comm: syz.4.8844 Tainted: G L syzkaller #0 PREEMPT(full) [ 1905.034918][ T3327] Tainted: [L]=SOFTLOCKUP [ 1905.034927][ T3327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1905.034939][ T3327] Call Trace: [ 1905.034949][ T3327] [ 1905.034959][ T3327] dump_stack_lvl+0xe8/0x150 [ 1905.034997][ T3327] should_fail_ex+0x412/0x560 [ 1905.035031][ T3327] should_failslab+0xa8/0x100 [ 1905.035060][ T3327] __kvmalloc_node_noprof+0x178/0x8a0 [ 1905.035085][ T3327] ? __mutex_lock+0x319/0x1550 [ 1905.035111][ T3327] ? io_sqe_buffers_register+0x12d/0x7e0 [ 1905.035159][ T3327] io_sqe_buffers_register+0x12d/0x7e0 [ 1905.035197][ T3327] ? __se_sys_io_uring_register+0x21e/0x1ac0 [ 1905.035226][ T3327] ? __pfx___mutex_lock+0x10/0x10 [ 1905.035260][ T3327] ? __fget_files+0x2a/0x420 [ 1905.035292][ T3327] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 1905.035318][ T3327] ? __fget_files+0x2a/0x420 [ 1905.035347][ T3327] ? __fget_files+0x3a0/0x420 [ 1905.035375][ T3327] ? __fget_files+0x2a/0x420 [ 1905.035413][ T3327] __se_sys_io_uring_register+0x1226/0x1ac0 [ 1905.035446][ T3327] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 1905.035472][ T3327] ? ksys_write+0x242/0x270 [ 1905.035497][ T3327] ? __pfx_ksys_write+0x10/0x10 [ 1905.035528][ T3327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1905.035549][ T3327] do_syscall_64+0x15f/0xf80 [ 1905.035574][ T3327] ? trace_irq_disable+0x3b/0x140 [ 1905.035600][ T3327] ? clear_bhb_loop+0x40/0x90 [ 1905.035626][ T3327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1905.035646][ T3327] RIP: 0033:0x7f28f819c819 [ 1905.035666][ T3327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1905.035684][ T3327] RSP: 002b:00007f28f8fac028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1905.035707][ T3327] RAX: ffffffffffffffda RBX: 00007f28f8415fa0 RCX: 00007f28f819c819 [ 1905.035722][ T3327] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000008 [ 1905.035735][ T3327] RBP: 00007f28f8fac090 R08: 0000000000000000 R09: 0000000000000000 [ 1905.035748][ T3327] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 1905.035761][ T3327] R13: 00007f28f8416038 R14: 00007f28f8415fa0 R15: 00007f28f853fa48 [ 1905.035796][ T3327] [ 1905.625530][ T3335] macvtap1: left allmulticast mode [ 1906.746996][T26110] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1906.916432][ T3366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8857'. [ 1906.938987][T26110] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 1906.951796][T26110] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1906.961217][T26110] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1906.973312][T26110] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1906.995997][T26110] usb 5-1: Product: syz [ 1907.009408][T26110] usb 5-1: Manufacturer: syz [ 1907.016640][T26110] usb 5-1: SerialNumber: syz [ 1907.028283][T26110] usb 5-1: config 0 descriptor?? [ 1907.040622][ T3357] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1907.070796][T26110] usb 5-1: selecting invalid altsetting 0 [ 1907.221680][ T5949] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1907.361780][T22314] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 1907.382044][ T5949] usb 4-1: Using ep0 maxpacket: 16 [ 1907.389998][ T5949] usb 4-1: config 0 has no interfaces? [ 1907.396881][ T5949] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1907.412322][T25562] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1907.414569][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.440061][ T5949] usb 4-1: config 0 descriptor?? [ 1907.473565][ T3378] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1907.523903][T22314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1907.545239][T22314] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1907.549788][ T3378] ipvlan0: entered allmulticast mode [ 1907.560071][ T3378] syz_tun: entered allmulticast mode [ 1907.576458][T22314] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1907.595931][T25562] usb 1-1: config 0 has no interfaces? [ 1907.608626][T22314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.623829][T25562] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1907.644086][T22314] usb 2-1: config 0 descriptor?? [ 1907.649259][T25562] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.677732][T22314] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1907.688111][T25562] usb 1-1: Product: syz [ 1907.694752][T25562] usb 1-1: Manufacturer: syz [ 1907.701024][T22314] dvb-usb: bulk message failed: -22 (3/0) [ 1907.705986][T26110] usb 4-1: USB disconnect, device number 119 [ 1907.722853][T25562] usb 1-1: SerialNumber: syz [ 1907.743501][T22314] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1907.770893][T25562] usb 1-1: config 0 descriptor?? [ 1907.790366][T22314] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1907.832759][T22314] usb 2-1: media controller created [ 1907.855661][T22314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1907.900260][ T3370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1907.920470][T22314] dvb-usb: bulk message failed: -22 (6/0) [ 1907.950663][ T3370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1907.967995][T22314] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1908.012018][T22314] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input238 [ 1908.069071][T26110] usb 1-1: USB disconnect, device number 108 [ 1908.078518][T22314] dvb-usb: schedule remote query interval to 150 msecs. [ 1908.114082][T22314] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1908.278298][T22314] dvb-usb: bulk message failed: -22 (1/0) [ 1908.288432][T22314] dvb-usb: error while querying for an remote control event. [ 1908.451729][ T5950] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1908.464352][T22314] dvb-usb: bulk message failed: -22 (1/0) [ 1908.488241][T22314] dvb-usb: error while querying for an remote control event. [ 1908.528858][ T3390] netlink: 'syz.3.8864': attribute type 6 has an invalid length. [ 1908.545913][ T3390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8864'. [ 1908.602028][ T5950] usb 3-1: device descriptor read/64, error -71 [ 1908.662391][T22314] dvb-usb: bulk message failed: -22 (1/0) [ 1908.678244][T22314] dvb-usb: error while querying for an remote control event. [ 1908.852137][T22314] dvb-usb: bulk message failed: -22 (1/0) [ 1908.852149][ T5950] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1908.902344][T22314] dvb-usb: error while querying for an remote control event. [ 1909.011713][ T5950] usb 3-1: device descriptor read/64, error -71 [ 1909.117764][T22314] dvb-usb: bulk message failed: -22 (1/0) [ 1909.137805][T22314] dvb-usb: error while querying for an remote control event. [ 1909.155108][ T5950] usb usb3-port1: attempt power cycle [ 1909.313328][T22314] dvb-usb: bulk message failed: -22 (1/0) [ 1909.344009][T22314] dvb-usb: error while querying for an remote control event. [ 1909.511876][ T5950] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1909.541742][T22314] dvb-usb: bulk message failed: -22 (1/0) [ 1909.556656][ T5950] usb 3-1: device descriptor read/8, error -71 [ 1909.558499][T22314] dvb-usb: error while querying for an remote control event. [ 1909.662891][T22314] usb 5-1: USB disconnect, device number 84 [ 1909.753702][T25562] dvb-usb: bulk message failed: -22 (1/0) [ 1909.760302][T25562] dvb-usb: error while querying for an remote control event. [ 1909.779906][ T3410] FAULT_INJECTION: forcing a failure. [ 1909.779906][ T3410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1909.796420][ T3410] CPU: 1 UID: 0 PID: 3410 Comm: syz.4.8867 Tainted: G L syzkaller #0 PREEMPT(full) [ 1909.796456][ T3410] Tainted: [L]=SOFTLOCKUP [ 1909.796464][ T3410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1909.796476][ T3410] Call Trace: [ 1909.796485][ T3410] [ 1909.796494][ T3410] dump_stack_lvl+0xe8/0x150 [ 1909.796533][ T3410] should_fail_ex+0x412/0x560 [ 1909.796573][ T3410] _copy_to_user+0x31/0xb0 [ 1909.796607][ T3410] simple_read_from_buffer+0xe1/0x170 [ 1909.796643][ T3410] proc_fail_nth_read+0x1bb/0x230 [ 1909.796678][ T3410] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1909.796709][ T3410] ? rw_verify_area+0x2a6/0x4d0 [ 1909.796723][ T3410] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1909.796744][ T3410] vfs_read+0x20c/0xa70 [ 1909.796761][ T3410] ? __pfx___mutex_lock+0x10/0x10 [ 1909.796786][ T3410] ? __pfx_vfs_read+0x10/0x10 [ 1909.796805][ T3410] ? __fget_files+0x2a/0x420 [ 1909.796826][ T3410] ? __fget_files+0x3a0/0x420 [ 1909.796843][ T3410] ? __fget_files+0x2a/0x420 [ 1909.796876][ T3410] ksys_read+0x150/0x270 [ 1909.796898][ T3410] ? __pfx_ksys_read+0x10/0x10 [ 1909.796924][ T3410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1909.796938][ T3410] do_syscall_64+0x15f/0xf80 [ 1909.796953][ T3410] ? trace_irq_disable+0x3b/0x140 [ 1909.796970][ T3410] ? clear_bhb_loop+0x40/0x90 [ 1909.796985][ T3410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1909.796998][ T3410] RIP: 0033:0x7f28f815d04e [ 1909.797011][ T3410] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1909.797023][ T3410] RSP: 002b:00007f28f8fabfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1909.797038][ T3410] RAX: ffffffffffffffda RBX: 00007f28f8fac6c0 RCX: 00007f28f815d04e [ 1909.797048][ T3410] RDX: 000000000000000f RSI: 00007f28f8fac0a0 RDI: 0000000000000004 [ 1909.797056][ T3410] RBP: 00007f28f8fac090 R08: 0000000000000000 R09: 0000000000000000 [ 1909.797063][ T3410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1909.797071][ T3410] R13: 00007f28f8416038 R14: 00007f28f8415fa0 R15: 00007f28f853fa48 [ 1909.797090][ T3410] [ 1910.016809][T25562] dvb-usb: bulk message failed: -22 (1/0) [ 1910.023107][T25562] dvb-usb: error while querying for an remote control event. [ 1910.038740][ T3411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8868'. [ 1910.064007][ T5950] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1910.088356][T25562] usb 2-1: USB disconnect, device number 92 [ 1910.092338][ T5950] usb 3-1: device descriptor read/8, error -71 [ 1910.134763][ T3398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8865'. [ 1910.212093][ T5950] usb usb3-port1: unable to enumerate USB device [ 1910.258900][T25562] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1910.549694][ T3425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8872'. [ 1910.565330][ T5949] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1910.631815][T25562] usb 2-1: new low-speed USB device number 93 using dummy_hcd [ 1910.721658][ T5949] usb 4-1: Using ep0 maxpacket: 16 [ 1910.729287][ T5949] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1910.741840][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1910.755369][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1910.768068][ T5949] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1910.783699][ T5949] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1910.824244][ T5949] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1910.836037][T25562] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1910.843234][ T5949] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1910.887522][ T5949] usb 4-1: Manufacturer: syz [ 1910.904180][ T5949] usb 4-1: config 0 descriptor?? [ 1910.914674][T25562] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1910.957993][T25562] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1910.995757][T25562] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1911.015689][ T3436] syzkaller0: entered promiscuous mode [ 1911.022176][ T3436] syzkaller0: entered allmulticast mode [ 1911.038520][T25562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.144652][T25562] hub 2-1:1.0: bad descriptor, ignoring hub [ 1911.173246][T25562] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1911.192117][T25562] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1911.292694][ T5949] rc_core: IR keymap rc-hauppauge not found [ 1911.310339][ T5949] Registered IR keymap rc-empty [ 1911.334178][ T5949] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1911.401793][ T5949] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1911.445015][ T5949] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1911.474873][ T5949] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input239 [ 1911.520437][ T5949] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1911.552523][ T5949] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1911.616036][ T5949] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1911.651844][ T5949] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1911.672155][T22314] usb 2-1: USB disconnect, device number 93 [ 1911.682671][ T5949] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1911.727531][ T3446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1911.736726][ T5949] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1911.744323][T26110] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1911.772297][ T5949] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1911.781020][ T3446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1911.812051][ T5949] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1911.841936][ T5949] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1911.861996][ T5949] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1911.885276][ T5949] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1911.894822][ T5949] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1911.921774][T26110] usb 5-1: Using ep0 maxpacket: 16 [ 1911.930102][T26110] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1911.962660][T26110] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1911.994407][T26110] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1912.017688][T26110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.043261][T26110] usb 5-1: Product: syz [ 1912.059901][T26110] usb 5-1: Manufacturer: syz [ 1912.077167][T26110] usb 5-1: SerialNumber: syz [ 1912.105998][T26110] usb 5-1: config 0 descriptor?? [ 1912.137045][T26110] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1912.192065][T26110] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1912.733250][T26110] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1912.797292][T26110] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1913.092767][ T3467] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20004 [ 1913.520834][T22314] usb 4-1: USB disconnect, device number 120 [ 1913.739099][T26110] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1913.748382][T26110] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1913.764054][T26110] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1913.785015][T26110] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1913.803757][T26110] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1913.821522][T26110] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1914.046453][T26110] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1914.064814][T26110] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1914.082760][T26110] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1914.105390][T26110] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1914.118719][T26110] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1914.161350][T26110] usb 5-1: USB disconnect, device number 85 [ 1914.434687][ T5949] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 1914.492261][ T5950] usb 4-1: new low-speed USB device number 121 using dummy_hcd [ 1914.597946][ T5949] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1914.610978][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1914.620167][ T5949] usb 1-1: Product: syz [ 1914.629888][ T5949] usb 1-1: Manufacturer: syz [ 1914.637530][ T5949] usb 1-1: SerialNumber: syz [ 1914.653402][ T5950] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1914.668732][ T5949] usb 1-1: config 0 descriptor?? [ 1914.674753][ T5950] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1914.688938][ T5950] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1914.710540][ T5950] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1914.728549][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1914.776439][ T5950] hub 4-1:1.0: bad descriptor, ignoring hub [ 1914.784208][ T5950] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1914.799177][ T5950] cdc_wdm 4-1:1.0: skipping garbage [ 1914.809878][ T5950] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1914.847376][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.871478][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.892665][ T5949] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1915.303155][ T29] usb 4-1: USB disconnect, device number 121 [ 1915.542489][ T5949] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1915.627739][ T3512] netlink: 87 bytes leftover after parsing attributes in process `syz.3.8896'. [ 1915.646695][ T5949] usb 1-1: USB disconnect, device number 109 [ 1915.665871][ T3514] netlink: 'syz.0.8897': attribute type 10 has an invalid length. [ 1915.998266][ T3518] netlink: 87 bytes leftover after parsing attributes in process `syz.4.8899'. [ 1916.272158][ T5949] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1916.445771][ T5949] usb 4-1: Using ep0 maxpacket: 32 [ 1916.475163][ T5949] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1916.519636][ T5949] usb 4-1: config 1 has no interface number 0 [ 1916.561142][ T5949] usb 4-1: New USB device found, idVendor=0e41, idProduct=4141, bcdDevice= 0.40 [ 1916.596087][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.625237][ T5949] usb 4-1: Product: syz [ 1916.656139][ T5949] usb 4-1: Manufacturer: syz [ 1916.674315][ T5949] usb 4-1: SerialNumber: syz [ 1917.181847][T22314] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1917.231510][ T3543] ptrace attach of "./syz-executor exec"[32170] was attempted by "./syz-executor exec"[3543] [ 1917.258400][ T5949] snd_usb_toneport 4-1:1.1: Line 6 TonePort UX1 found [ 1917.268616][ T5949] usb 4-1: selecting invalid altsetting 2 [ 1917.275243][ T5949] snd_usb_toneport 4-1:1.1: set_interface failed [ 1917.283569][ T29] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 1917.293224][ T5949] snd_usb_toneport 4-1:1.1: Line 6 TonePort UX1 now disconnected [ 1917.314172][ T5949] snd_usb_toneport 4-1:1.1: probe with driver snd_usb_toneport failed with error -22 [ 1917.359731][ T5949] snd_usb_toneport 4-1:1.2: Line 6 TonePort UX1 found [ 1917.360645][T22314] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1917.390153][ T5949] usb 4-1: selecting invalid altsetting 2 [ 1917.396629][ T5949] snd_usb_toneport 4-1:1.2: set_interface failed [ 1917.404053][ T5949] snd_usb_toneport 4-1:1.2: Line 6 TonePort UX1 now disconnected [ 1917.415227][ T5949] snd_usb_toneport 4-1:1.2: probe with driver snd_usb_toneport failed with error -22 [ 1917.427545][ T5949] usb 4-1: USB disconnect, device number 122 [ 1917.481328][T22314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.502945][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1917.527811][ T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1917.548800][ T29] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1917.586425][ T29] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1917.611693][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.671289][T22314] usb 1-1: config 0 descriptor?? [ 1917.684373][ T29] hub 3-1:1.0: bad descriptor, ignoring hub [ 1917.712690][ T29] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1917.738825][ T29] cdc_wdm 3-1:1.0: skipping garbage [ 1917.755783][ T29] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1917.986498][ T3534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1918.048517][ T3534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1918.089195][T22314] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1918.298693][ T3534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1918.312015][ T5949] usb 3-1: USB disconnect, device number 79 [ 1918.352807][ T3534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1918.452719][T22314] [drm:udl_init] *ERROR* Selecting channel failed [ 1918.636980][T22314] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 1918.644045][T22314] [drm] Initialized udl on minor 2 [ 1918.708206][T22314] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1918.866451][ T3559] netlink: 79 bytes leftover after parsing attributes in process `syz.2.8910'. [ 1918.869612][T22314] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1918.895660][ T1102] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1918.918330][T22314] usb 1-1: USB disconnect, device number 110 [ 1918.950340][ T1102] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1919.292631][T22314] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1919.466482][T22314] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1919.476022][T22314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1919.494485][T22314] usb 1-1: Product: syz [ 1919.498903][T22314] usb 1-1: Manufacturer: syz [ 1919.504195][T22314] usb 1-1: SerialNumber: syz [ 1919.612328][ T5949] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1919.741798][ T3555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1919.757727][ T3555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1919.771898][ T5949] usb 4-1: Using ep0 maxpacket: 32 [ 1919.779617][ T3555] fuse: fd is not a fuse device [ 1919.780593][ T5949] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1919.796197][ T5949] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1919.805492][ T5949] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1919.815096][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1919.825387][ T5949] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1919.856405][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1919.867192][ T5949] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1919.877114][ T5949] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1919.890750][ T5949] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1919.900145][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1919.911715][T32388] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 1919.920326][ T5949] usb 4-1: config 0 descriptor?? [ 1920.075202][T32388] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1920.098926][T32388] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1920.126352][T32388] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1920.165180][ T3579] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8919'. [ 1920.191130][T32388] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1920.226474][ T5949] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 123 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1920.231949][T32388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1920.276098][ T5949] usb 4-1: USB disconnect, device number 123 [ 1920.311459][ T5949] usblp0: removed [ 1920.314480][T32388] hub 3-1:1.0: bad descriptor, ignoring hub [ 1920.358965][T32388] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1920.401014][T32388] cdc_wdm 3-1:1.0: skipping garbage [ 1920.441829][T32388] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1920.474908][ T3597] netlink: 79 bytes leftover after parsing attributes in process `syz.1.8924'. [ 1920.864673][ T5949] usb 3-1: USB disconnect, device number 80 [ 1921.087764][T22314] rtl8150 1-1:1.0: couldn't reset the device [ 1921.096070][T22314] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 1921.423730][T22314] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1921.646673][T22314] usb 5-1: Using ep0 maxpacket: 8 [ 1921.699217][ T5949] usb 1-1: USB disconnect, device number 111 [ 1921.750936][T22314] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1921.769901][T22314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.826843][T22314] usb 5-1: Product: syz [ 1921.852882][T22314] usb 5-1: Manufacturer: syz [ 1921.889591][T22314] usb 5-1: SerialNumber: syz [ 1921.960272][ T3632] netlink: 79 bytes leftover after parsing attributes in process `syz.0.8935'. [ 1922.334844][T12146] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1922.373953][T22314] usb 5-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 1922.380031][T12146] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1922.389146][T22314] usb 5-1: incorrect wMaxPacketSize 0x3ef for BADD profile [ 1922.462871][T22314] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1922.505446][T22314] usb 5-1: USB disconnect, device number 86 [ 1922.548602][T27849] udevd[27849]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1923.091763][T26110] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1923.141953][ T5949] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1923.222558][ T3663] netlink: 79 bytes leftover after parsing attributes in process `syz.1.8948'. [ 1923.253750][T26110] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1923.275793][T26110] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1923.287586][T26110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.298171][T26110] usb 3-1: Product: syz [ 1923.305261][ T5949] usb 4-1: Using ep0 maxpacket: 16 [ 1923.310987][T26110] usb 3-1: Manufacturer: syz [ 1923.316939][T26110] usb 3-1: SerialNumber: syz [ 1923.324143][ T5949] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1923.343380][ T5949] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1923.355500][T26110] usb 3-1: selecting invalid altsetting 1 [ 1923.363935][T26110] usb 3-1: unit 6 not found! [ 1923.372537][ T5949] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 39329, setting to 1024 [ 1923.390323][ T5949] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1923.403104][ T5949] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1923.420059][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1923.429139][ T5949] usb 4-1: SerialNumber: syz [ 1923.447659][ T3656] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1923.462114][ T5949] cdc_acm 4-1:1.0: skipping garbage [ 1923.475316][ T5949] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 1923.545840][T26110] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1923.567397][T26110] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1923.582887][T26110] usb 3-1: selecting invalid altsetting 1 [ 1923.590165][T26110] usb 3-1: unit 6 not found! [ 1923.596295][T26110] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1923.605963][T26110] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1923.619801][T26110] usb 3-1: selecting invalid altsetting 1 [ 1923.627350][T26110] usb 3-1: unit 6 not found! [ 1923.634950][T26110] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1923.704550][T26110] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1923.720499][T26110] usb 3-1: USB disconnect, device number 81 [ 1923.762318][ T5949] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 1923.813428][T27944] udevd[27944]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1923.953221][ T5949] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1923.964293][ T5949] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1923.977691][ T5949] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1923.990946][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1924.157689][ T5950] usb 4-1: USB disconnect, device number 124 [ 1924.226181][ T5949] usb 1-1: usb_control_msg returned -32 [ 1924.249647][ T5949] usbtmc 1-1:16.0: can't read capabilities [ 1924.311262][ T5949] usb 1-1: USB disconnect, device number 112 [ 1924.442557][ T3692] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 1924.875777][ T3702] vcan0: tx drop: invalid sa for name 0x0000000000800000 [ 1925.018738][T32140] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1925.045079][T32140] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1925.061953][T32140] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1925.083169][T32140] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1925.093190][T32140] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1925.153644][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1925.173437][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1925.182686][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1925.193022][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1925.206897][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1925.382089][ T5949] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1925.552857][ T5949] usb 5-1: Using ep0 maxpacket: 16 [ 1925.616811][ T5949] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1925.675315][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1925.752249][ T5949] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1925.824087][ T5949] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1925.836963][ T5949] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1925.856543][ T5949] usb 5-1: Manufacturer: syz [ 1925.905150][ T5949] usb 5-1: config 0 descriptor?? [ 1926.168309][ T5950] usb 5-1: USB disconnect, device number 87 [ 1926.479936][ T3738] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8967'. [ 1926.513212][T27226] .2442: (slave syz_tun): Releasing backup interface [ 1926.692339][ T3742] input: syz1 as /devices/virtual/input/input240 [ 1926.760623][T27226] tipc: Resetting bearer [ 1927.022423][T27226] tipc: Disabling bearer [ 1927.085810][ T3718] chnl_net:caif_netlink_parms(): no params data found [ 1927.237393][ T3718] bridge0: port 1(bridge_slave_0) entered blocking state [ 1927.246471][ T3718] bridge0: port 1(bridge_slave_0) entered disabled state [ 1927.256505][ T3718] bridge_slave_0: entered allmulticast mode [ 1927.263888][ T3718] bridge_slave_0: entered promiscuous mode [ 1927.273961][ T3718] bridge0: port 2(bridge_slave_1) entered blocking state [ 1927.282045][ T3718] bridge0: port 2(bridge_slave_1) entered disabled state [ 1927.289361][ T3718] bridge_slave_1: entered allmulticast mode [ 1927.299168][ T3718] bridge_slave_1: entered promiscuous mode [ 1927.321746][T32140] Bluetooth: hci5: command tx timeout [ 1927.339767][ T3718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1927.351747][T25562] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1927.356309][ T3718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1927.393630][ T3718] team0: Port device team_slave_0 added [ 1927.402751][ T5949] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1927.412108][ T3718] team0: Port device team_slave_1 added [ 1927.444020][ T3718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1927.451446][ T3718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1927.495676][ T3718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1927.535044][ T3718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1927.553823][ T3718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1927.590420][ T5949] usb 5-1: Using ep0 maxpacket: 32 [ 1927.612445][ T5949] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1927.622114][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.636398][ T3718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1927.649175][ T5949] usb 5-1: config 0 descriptor?? [ 1927.671738][ T5949] as10x_usb: device has been detected [ 1927.701405][ T5949] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1927.715118][T25562] usb 2-1: config 0 has no interfaces? [ 1927.743732][T25562] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1927.761679][T25562] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1927.780987][ T5949] usb 5-1: DVB: registering adapter 3 frontend 0 (nBox DVB-T Dongle)... [ 1927.785286][T25562] usb 2-1: Product: syz [ 1927.834653][T25562] usb 2-1: Manufacturer: syz [ 1927.864791][T25562] usb 2-1: config 0 descriptor?? [ 1927.890930][ T5949] as10x_usb: error during firmware upload part1 [ 1927.914256][ T5949] Registered device nBox DVB-T Dongle [ 1927.950523][T25562] usb 5-1: USB disconnect, device number 88 [ 1927.984239][ T3718] hsr_slave_0: entered promiscuous mode [ 1928.003423][ T3718] hsr_slave_1: entered promiscuous mode [ 1928.019847][ T3718] debugfs: 'hsr0' already exists in 'hsr' [ 1928.041778][ T3718] Cannot create hsr debugfs directory [ 1928.066110][T25562] Unregistered device nBox DVB-T Dongle [ 1928.070937][T25562] as10x_usb: device has been disconnected [ 1928.164506][ T5949] usb 2-1: USB disconnect, device number 94 [ 1928.381649][ T3765] FAULT_INJECTION: forcing a failure. [ 1928.381649][ T3765] name failslab, interval 1, probability 0, space 0, times 0 [ 1928.394929][ T3765] CPU: 0 UID: 0 PID: 3765 Comm: syz.4.8976 Tainted: G L syzkaller #0 PREEMPT(full) [ 1928.394964][ T3765] Tainted: [L]=SOFTLOCKUP [ 1928.394971][ T3765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1928.394983][ T3765] Call Trace: [ 1928.394992][ T3765] [ 1928.395001][ T3765] dump_stack_lvl+0xe8/0x150 [ 1928.395050][ T3765] should_fail_ex+0x412/0x560 [ 1928.395084][ T3765] should_failslab+0xa8/0x100 [ 1928.395113][ T3765] __kmalloc_noprof+0xe8/0x760 [ 1928.395138][ T3765] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1928.395175][ T3765] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1928.395207][ T3765] ? tomoyo_domain+0xd7/0x130 [ 1928.395244][ T3765] ? tomoyo_path_number_perm+0x219/0x630 [ 1928.395270][ T3765] tomoyo_path_number_perm+0x246/0x630 [ 1928.395300][ T3765] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1928.395325][ T3765] ? __lock_acquire+0x6b5/0x2cf0 [ 1928.395372][ T3765] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1928.395422][ T3765] ? __fget_files+0x2a/0x420 [ 1928.395455][ T3765] ? __fget_files+0x2a/0x420 [ 1928.395484][ T3765] ? __fget_files+0x3a0/0x420 [ 1928.395513][ T3765] ? __fget_files+0x2a/0x420 [ 1928.395547][ T3765] security_file_ioctl+0xc3/0x2a0 [ 1928.395575][ T3765] __se_sys_ioctl+0x47/0x170 [ 1928.395600][ T3765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1928.395623][ T3765] do_syscall_64+0x15f/0xf80 [ 1928.395649][ T3765] ? trace_irq_disable+0x3b/0x140 [ 1928.395675][ T3765] ? clear_bhb_loop+0x40/0x90 [ 1928.395701][ T3765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1928.395720][ T3765] RIP: 0033:0x7f28f819c819 [ 1928.395741][ T3765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1928.395759][ T3765] RSP: 002b:00007f28f8fac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1928.395788][ T3765] RAX: ffffffffffffffda RBX: 00007f28f8415fa0 RCX: 00007f28f819c819 [ 1928.395804][ T3765] RDX: 0000200000000000 RSI: 0000000000005414 RDI: 0000000000000003 [ 1928.395818][ T3765] RBP: 00007f28f8fac090 R08: 0000000000000000 R09: 0000000000000000 [ 1928.395831][ T3765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1928.395844][ T3765] R13: 00007f28f8416038 R14: 00007f28f8415fa0 R15: 00007f28f853fa48 [ 1928.395876][ T3765] [ 1928.396362][ T3765] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1928.902332][ T3718] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.057925][ T3781] input: syz0 as /devices/virtual/input/input241 [ 1929.279120][ T3788] FAULT_INJECTION: forcing a failure. [ 1929.279120][ T3788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1929.295079][ T30] audit: type=1326 audit(1776613126.066:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3786 comm="syz.2.8984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97d9c819 code=0x7ffc0000 [ 1929.319422][ T3718] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.335443][ T3788] CPU: 0 UID: 0 PID: 3788 Comm: syz.1.8983 Tainted: G L syzkaller #0 PREEMPT(full) [ 1929.335474][ T3788] Tainted: [L]=SOFTLOCKUP [ 1929.335483][ T3788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1929.335495][ T3788] Call Trace: [ 1929.335503][ T3788] [ 1929.335513][ T3788] dump_stack_lvl+0xe8/0x150 [ 1929.335549][ T3788] should_fail_ex+0x412/0x560 [ 1929.335581][ T3788] _copy_to_user+0x31/0xb0 [ 1929.335614][ T3788] simple_read_from_buffer+0xe1/0x170 [ 1929.335657][ T3788] proc_fail_nth_read+0x1bb/0x230 [ 1929.335690][ T3788] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1929.335724][ T3788] ? rw_verify_area+0x2a6/0x4d0 [ 1929.335746][ T3788] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1929.335778][ T3788] vfs_read+0x20c/0xa70 [ 1929.335809][ T3788] ? __pfx_vfs_read+0x10/0x10 [ 1929.335835][ T3788] ? do_sys_openat2+0x14c/0x200 [ 1929.335862][ T3788] ? kmem_cache_free+0x182/0x650 [ 1929.335885][ T3788] ? fd_install+0x94/0x3d0 [ 1929.335914][ T3788] ? fdget+0x139/0x1e0 [ 1929.335950][ T3788] ksys_read+0x150/0x270 [ 1929.335975][ T3788] ? __pfx_ksys_read+0x10/0x10 [ 1929.336007][ T3788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1929.336029][ T3788] do_syscall_64+0x15f/0xf80 [ 1929.336054][ T3788] ? trace_irq_disable+0x3b/0x140 [ 1929.336080][ T3788] ? clear_bhb_loop+0x40/0x90 [ 1929.336106][ T3788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1929.336127][ T3788] RIP: 0033:0x7fcc8fb5d04e [ 1929.336148][ T3788] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1929.336166][ T3788] RSP: 002b:00007fcc90a22fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1929.336188][ T3788] RAX: ffffffffffffffda RBX: 00007fcc90a236c0 RCX: 00007fcc8fb5d04e [ 1929.336204][ T3788] RDX: 000000000000000f RSI: 00007fcc90a230a0 RDI: 0000000000000004 [ 1929.336216][ T3788] RBP: 00007fcc90a23090 R08: 0000000000000000 R09: 0000000000000000 [ 1929.336227][ T3788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1929.336240][ T3788] R13: 00007fcc8fe16038 R14: 00007fcc8fe15fa0 R15: 00007fcc8ff3fa48 [ 1929.336269][ T3788] [ 1929.582415][ T30] audit: type=1326 audit(1776613126.066:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3786 comm="syz.2.8984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97d9c819 code=0x7ffc0000 [ 1929.615652][T32140] Bluetooth: hci5: command tx timeout [ 1929.643856][ T30] audit: type=1326 audit(1776613126.066:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3786 comm="syz.2.8984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97d9c819 code=0x7ffc0000 [ 1929.728504][ T30] audit: type=1326 audit(1776613126.066:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3786 comm="syz.2.8984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fde97d9c819 code=0x7ffc0000 [ 1929.765601][ T3718] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.818018][ T30] audit: type=1326 audit(1776613126.066:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3786 comm="syz.2.8984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97d9c819 code=0x7ffc0000 [ 1929.890672][ T3795] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:003e with DS=0x3 [ 1929.898219][ T30] audit: type=1326 audit(1776613126.066:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3786 comm="syz.2.8984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97d9c819 code=0x7ffc0000 [ 1929.926089][ T30] audit: type=1326 audit(1776613126.066:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3786 comm="syz.2.8984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97d9c819 code=0x7ffc0000 [ 1929.949159][ T30] audit: type=1326 audit(1776613126.066:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3786 comm="syz.2.8984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fde97d9c819 code=0x7ffc0000 [ 1929.972848][ T30] audit: type=1326 audit(1776613126.066:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3786 comm="syz.2.8984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97d9c819 code=0x7ffc0000 [ 1929.996046][ T30] audit: type=1326 audit(1776613126.066:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3786 comm="syz.2.8984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97d9c819 code=0x7ffc0000 [ 1930.183020][ T3718] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1931.350177][ T3718] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1931.401637][ T3718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1931.425162][ T3718] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1931.482055][ T3718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1931.489769][ T3829] FAULT_INJECTION: forcing a failure. [ 1931.489769][ T3829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1931.519115][ T3718] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1931.538076][ T3829] CPU: 0 UID: 0 PID: 3829 Comm: syz.2.8995 Tainted: G L syzkaller #0 PREEMPT(full) [ 1931.538106][ T3829] Tainted: [L]=SOFTLOCKUP [ 1931.538111][ T3829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1931.538118][ T3829] Call Trace: [ 1931.538124][ T3829] [ 1931.538130][ T3829] dump_stack_lvl+0xe8/0x150 [ 1931.538155][ T3829] should_fail_ex+0x412/0x560 [ 1931.538174][ T3829] _copy_from_user+0x2d/0xb0 [ 1931.538194][ T3829] do_ipv6_setsockopt+0x25c/0x3150 [ 1931.538207][ T3829] ? get_pid_task+0x20/0x1f0 [ 1931.538225][ T3829] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1931.538237][ T3829] ? get_pid_task+0x20/0x1f0 [ 1931.538249][ T3829] ? get_pid_task+0x20/0x1f0 [ 1931.538261][ T3829] ? get_pid_task+0x20/0x1f0 [ 1931.538279][ T3829] ? __lock_acquire+0x6b5/0x2cf0 [ 1931.538307][ T3829] ? aa_sk_perm+0x6d5/0x900 [ 1931.538324][ T3829] ? __fget_files+0x2a/0x420 [ 1931.538345][ T3829] ? __pfx_aa_sk_perm+0x10/0x10 [ 1931.538362][ T3829] ? __fget_files+0x2a/0x420 [ 1931.538379][ T3829] ? aa_sock_opt_perm+0xff/0x1a0 [ 1931.538397][ T3829] ipv6_setsockopt+0x59/0x170 [ 1931.538409][ T3829] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1931.538428][ T3829] do_sock_setsockopt+0x17c/0x1b0 [ 1931.538443][ T3829] __x64_sys_setsockopt+0x13d/0x1b0 [ 1931.538457][ T3829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1931.538471][ T3829] do_syscall_64+0x15f/0xf80 [ 1931.538487][ T3829] ? trace_irq_disable+0x3b/0x140 [ 1931.538503][ T3829] ? clear_bhb_loop+0x40/0x90 [ 1931.538517][ T3829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1931.538529][ T3829] RIP: 0033:0x7fde97d9c819 [ 1931.538543][ T3829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1931.538554][ T3829] RSP: 002b:00007fde98b98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1931.538569][ T3829] RAX: ffffffffffffffda RBX: 00007fde98016090 RCX: 00007fde97d9c819 [ 1931.538578][ T3829] RDX: 0000000000000001 RSI: 0000000000000029 RDI: 0000000000000003 [ 1931.538586][ T3829] RBP: 00007fde98b98090 R08: 0000000000000004 R09: 0000000000000000 [ 1931.538594][ T3829] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1931.538602][ T3829] R13: 00007fde98016128 R14: 00007fde98016090 R15: 00007fde9813fa48 [ 1931.538620][ T3829] [ 1931.774465][ T3718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1931.782678][ T3718] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1931.816973][T32140] Bluetooth: hci5: command tx timeout [ 1931.837458][ T3718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1932.071761][T26110] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1932.195084][ T3718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1932.231368][T26110] usb 2-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1932.244335][T26110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.266221][T26110] usb 2-1: Product: syz [ 1932.272730][ T3718] 8021q: adding VLAN 0 to HW filter on device team0 [ 1932.280065][T26110] usb 2-1: Manufacturer: syz [ 1932.286586][T26110] usb 2-1: SerialNumber: syz [ 1932.300416][T12146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1932.307724][T12146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1932.359229][T12146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1932.366566][T12146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1932.676592][ T3718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1932.695862][ T3850] kvm: pic: non byte read [ 1932.710217][ T3850] kvm: pic: non byte read [ 1932.796587][ T3718] veth0_vlan: entered promiscuous mode [ 1932.827589][ T3718] veth1_vlan: entered promiscuous mode [ 1932.955434][ T3718] veth0_macvtap: entered promiscuous mode [ 1932.970970][ T3718] veth1_macvtap: entered promiscuous mode [ 1933.059125][ T3718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1933.111447][ T3718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1933.152585][T12146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1933.177251][T12146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1933.186267][T32388] usb 5-1: new low-speed USB device number 89 using dummy_hcd [ 1933.207812][T12146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1933.235373][T12146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1933.235856][ T3862] FAULT_INJECTION: forcing a failure. [ 1933.235856][ T3862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1933.337176][ T3862] CPU: 0 UID: 0 PID: 3862 Comm: syz.3.9004 Tainted: G L syzkaller #0 PREEMPT(full) [ 1933.337208][ T3862] Tainted: [L]=SOFTLOCKUP [ 1933.337217][ T3862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1933.337229][ T3862] Call Trace: [ 1933.337237][ T3862] [ 1933.337246][ T3862] dump_stack_lvl+0xe8/0x150 [ 1933.337282][ T3862] should_fail_ex+0x412/0x560 [ 1933.337310][ T3862] _copy_from_user+0x2d/0xb0 [ 1933.337338][ T3862] ___sys_sendmsg+0x1c6/0x360 [ 1933.337361][ T3862] ? __lock_acquire+0x6b5/0x2cf0 [ 1933.337391][ T3862] ? __pfx____sys_sendmsg+0x10/0x10 [ 1933.337416][ T3862] ? kstrtouint+0x6e/0xe0 [ 1933.337461][ T3862] ? __fget_files+0x2a/0x420 [ 1933.337486][ T3862] ? __fget_files+0x3a0/0x420 [ 1933.337520][ T3862] __sys_sendmmsg+0x27c/0x4e0 [ 1933.337546][ T3862] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1933.337563][ T3862] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1933.337611][ T3862] ? ksys_write+0x242/0x270 [ 1933.337634][ T3862] ? __pfx_ksys_write+0x10/0x10 [ 1933.337659][ T3862] __x64_sys_sendmmsg+0xa0/0xc0 [ 1933.337678][ T3862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1933.337696][ T3862] do_syscall_64+0x15f/0xf80 [ 1933.337720][ T3862] ? clear_bhb_loop+0x40/0x90 [ 1933.337758][ T3862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1933.337776][ T3862] RIP: 0033:0x7fced7b9c819 [ 1933.337794][ T3862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1933.337809][ T3862] RSP: 002b:00007fced89df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1933.337830][ T3862] RAX: ffffffffffffffda RBX: 00007fced7e15fa0 RCX: 00007fced7b9c819 [ 1933.337842][ T3862] RDX: 0000000000000001 RSI: 0000200000006040 RDI: 0000000000000004 [ 1933.337853][ T3862] RBP: 00007fced89df090 R08: 0000000000000000 R09: 0000000000000000 [ 1933.337864][ T3862] R10: 0000000004000045 R11: 0000000000000246 R12: 0000000000000001 [ 1933.337874][ T3862] R13: 00007fced7e16038 R14: 00007fced7e15fa0 R15: 00007fced7f3fa48 [ 1933.337903][ T3862] [ 1933.598584][T32388] usb 5-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 1933.618319][T29695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1933.650029][T32388] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1933.668806][T29695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1933.688146][T32388] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1933.731497][T32388] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1933.759281][T32388] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.785415][T12146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1933.808102][T12146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1933.848575][T32388] hub 5-1:1.0: bad descriptor, ignoring hub [ 1933.880207][T32388] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1933.887776][T32140] Bluetooth: hci5: command tx timeout [ 1933.925196][T32388] cdc_wdm 5-1:1.0: skipping garbage [ 1933.930836][T32388] cdc_wdm 5-1:1.0: skipping garbage [ 1933.936854][T32388] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1934.352831][T32388] usb 5-1: USB disconnect, device number 89 [ 1934.364219][ T29] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 1934.534050][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1934.546029][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1934.571843][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1934.597137][ T29] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1934.615854][T26110] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 1934.635507][T26110] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 1934.654732][ T29] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1934.665153][ T29] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1934.679516][ T29] usb 4-1: Manufacturer: syz [ 1934.687097][T26110] usb 2-1: USB disconnect, device number 95 [ 1934.700819][ T29] usb 4-1: config 0 descriptor?? [ 1934.701728][T32388] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1934.824993][ T3891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9012'. [ 1934.874415][T32388] usb 1-1: Using ep0 maxpacket: 8 [ 1934.886757][T32388] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1934.895373][T32388] usb 1-1: can't read configurations, error -61 [ 1934.935091][ T3876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1934.968153][ T3876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1934.984560][ T3876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1934.995071][ T3876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1935.012233][T26110] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1935.031898][T32388] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1935.084693][ T29] rc_core: IR keymap rc-hauppauge not found [ 1935.097765][ T29] Registered IR keymap rc-empty [ 1935.103417][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1935.131911][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1935.163969][ T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1935.176745][T26110] usb 2-1: Using ep0 maxpacket: 32 [ 1935.185282][T26110] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1935.198255][ T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input242 [ 1935.211219][T26110] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1935.211885][T32388] usb 1-1: Using ep0 maxpacket: 8 [ 1935.227301][T26110] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1935.245773][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1935.268058][T32388] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1935.272329][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1935.286770][T26110] usb 2-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 1935.297570][T26110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.307336][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1935.315844][T26110] usb 2-1: Product: syz [ 1935.324844][T32388] usb 1-1: can't read configurations, error -61 [ 1935.327572][T26110] usb 2-1: Manufacturer: syz [ 1935.336690][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1935.346098][T26110] usb 2-1: SerialNumber: syz [ 1935.356487][T32388] usb usb1-port1: attempt power cycle [ 1935.362107][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1935.381820][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1935.402496][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1935.432205][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1935.461800][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1935.491802][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1935.521889][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1935.555264][ T29] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1935.583337][ T29] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1935.610743][T26110] usb 2-1: unit 2 not found! [ 1935.645242][ T29] usb 4-1: USB disconnect, device number 125 [ 1935.732068][T32388] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1935.763683][T32388] usb 1-1: Using ep0 maxpacket: 8 [ 1935.799827][T32388] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1935.830269][T32388] usb 1-1: can't read configurations, error -61 [ 1935.863834][T26110] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1935.924378][T26110] usb 2-1: USB disconnect, device number 96 [ 1935.973315][T27849] udevd[27849]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1936.013724][T32388] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1936.053274][T32388] usb 1-1: Using ep0 maxpacket: 8 [ 1936.067769][T32388] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1936.079421][T32388] usb 1-1: can't read configurations, error -61 [ 1936.086494][T32388] usb usb1-port1: unable to enumerate USB device [ 1936.197507][ T3911] FAULT_INJECTION: forcing a failure. [ 1936.197507][ T3911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1936.212864][ T3911] CPU: 1 UID: 0 PID: 3911 Comm: syz.1.9017 Tainted: G L syzkaller #0 PREEMPT(full) [ 1936.212907][ T3911] Tainted: [L]=SOFTLOCKUP [ 1936.212915][ T3911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1936.212927][ T3911] Call Trace: [ 1936.212936][ T3911] [ 1936.212946][ T3911] dump_stack_lvl+0xe8/0x150 [ 1936.212994][ T3911] should_fail_ex+0x412/0x560 [ 1936.213027][ T3911] _copy_from_user+0x2d/0xb0 [ 1936.213065][ T3911] alg_setkey+0xb8/0x190 [ 1936.213096][ T3911] alg_setsockopt+0x3da/0x4a0 [ 1936.213123][ T3911] ? __pfx_alg_setsockopt+0x10/0x10 [ 1936.213149][ T3911] do_sock_setsockopt+0x17c/0x1b0 [ 1936.213175][ T3911] __x64_sys_setsockopt+0x13d/0x1b0 [ 1936.213197][ T3911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.213215][ T3911] do_syscall_64+0x15f/0xf80 [ 1936.213237][ T3911] ? trace_irq_disable+0x3b/0x140 [ 1936.213259][ T3911] ? clear_bhb_loop+0x40/0x90 [ 1936.213280][ T3911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.213304][ T3911] RIP: 0033:0x7fcc8fb9c819 [ 1936.213323][ T3911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1936.213338][ T3911] RSP: 002b:00007fcc90a23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1936.213359][ T3911] RAX: ffffffffffffffda RBX: 00007fcc8fe15fa0 RCX: 00007fcc8fb9c819 [ 1936.213372][ T3911] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 1936.213383][ T3911] RBP: 00007fcc90a23090 R08: 0000000000000000 R09: 0000000000000000 [ 1936.213395][ T3911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1936.213406][ T3911] R13: 00007fcc8fe16038 R14: 00007fcc8fe15fa0 R15: 00007fcc8ff3fa48 [ 1936.213434][ T3911] [ 1936.476667][ T3915] netlink: 27 bytes leftover after parsing attributes in process `syz.3.9019'. [ 1936.570062][ T3921] FAULT_INJECTION: forcing a failure. [ 1936.570062][ T3921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1936.607154][ T3921] CPU: 1 UID: 0 PID: 3921 Comm: syz.3.9021 Tainted: G L syzkaller #0 PREEMPT(full) [ 1936.607191][ T3921] Tainted: [L]=SOFTLOCKUP [ 1936.607199][ T3921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1936.607211][ T3921] Call Trace: [ 1936.607220][ T3921] [ 1936.607229][ T3921] dump_stack_lvl+0xe8/0x150 [ 1936.607269][ T3921] should_fail_ex+0x412/0x560 [ 1936.607301][ T3921] _copy_from_user+0x2d/0xb0 [ 1936.607333][ T3921] ___sys_sendmsg+0x1c6/0x360 [ 1936.607355][ T3921] ? __lock_acquire+0x6b5/0x2cf0 [ 1936.607387][ T3921] ? __pfx____sys_sendmsg+0x10/0x10 [ 1936.607443][ T3921] ? __fget_files+0x2a/0x420 [ 1936.607477][ T3921] ? __fget_files+0x3a0/0x420 [ 1936.607514][ T3921] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1936.607539][ T3921] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1936.607570][ T3921] ? __pfx_ksys_write+0x10/0x10 [ 1936.607603][ T3921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.607626][ T3921] do_syscall_64+0x15f/0xf80 [ 1936.607653][ T3921] ? trace_irq_disable+0x3b/0x140 [ 1936.607680][ T3921] ? clear_bhb_loop+0x40/0x90 [ 1936.607704][ T3921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.607724][ T3921] RIP: 0033:0x7fced7b9c819 [ 1936.607744][ T3921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1936.607762][ T3921] RSP: 002b:00007fced89df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1936.607786][ T3921] RAX: ffffffffffffffda RBX: 00007fced7e15fa0 RCX: 00007fced7b9c819 [ 1936.607802][ T3921] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1936.607816][ T3921] RBP: 00007fced89df090 R08: 0000000000000000 R09: 0000000000000000 [ 1936.607829][ T3921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1936.607842][ T3921] R13: 00007fced7e16038 R14: 00007fced7e15fa0 R15: 00007fced7f3fa48 [ 1936.607875][ T3921] [ 1936.801681][T32388] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1936.901174][ T3927] FAULT_INJECTION: forcing a failure. [ 1936.901174][ T3927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1936.914703][ T3927] CPU: 0 UID: 0 PID: 3927 Comm: syz.4.9024 Tainted: G L syzkaller #0 PREEMPT(full) [ 1936.914736][ T3927] Tainted: [L]=SOFTLOCKUP [ 1936.914744][ T3927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1936.914756][ T3927] Call Trace: [ 1936.914765][ T3927] [ 1936.914774][ T3927] dump_stack_lvl+0xe8/0x150 [ 1936.914811][ T3927] should_fail_ex+0x412/0x560 [ 1936.914844][ T3927] _copy_from_user+0x2d/0xb0 [ 1936.914874][ T3927] ___sys_sendmsg+0x1c6/0x360 [ 1936.914896][ T3927] ? __lock_acquire+0x6b5/0x2cf0 [ 1936.914931][ T3927] ? __pfx____sys_sendmsg+0x10/0x10 [ 1936.914988][ T3927] ? __fget_files+0x2a/0x420 [ 1936.915018][ T3927] ? __fget_files+0x3a0/0x420 [ 1936.915058][ T3927] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1936.915084][ T3927] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1936.915116][ T3927] ? __pfx_ksys_write+0x10/0x10 [ 1936.915149][ T3927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.915171][ T3927] do_syscall_64+0x15f/0xf80 [ 1936.915197][ T3927] ? trace_irq_disable+0x3b/0x140 [ 1936.915223][ T3927] ? clear_bhb_loop+0x40/0x90 [ 1936.915248][ T3927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.915269][ T3927] RIP: 0033:0x7f28f819c819 [ 1936.915289][ T3927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1936.915308][ T3927] RSP: 002b:00007f28f8fac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1936.915331][ T3927] RAX: ffffffffffffffda RBX: 00007f28f8415fa0 RCX: 00007f28f819c819 [ 1936.915347][ T3927] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1936.915359][ T3927] RBP: 00007f28f8fac090 R08: 0000000000000000 R09: 0000000000000000 [ 1936.915371][ T3927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1936.915384][ T3927] R13: 00007f28f8416038 R14: 00007f28f8415fa0 R15: 00007f28f853fa48 [ 1936.915416][ T3927] [ 1937.142341][T32388] usb 3-1: Using ep0 maxpacket: 8 [ 1937.170135][T32388] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1937.179838][T32388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1937.188064][T32388] usb 3-1: Product: syz [ 1937.192336][T32388] usb 3-1: Manufacturer: syz [ 1937.197086][T32388] usb 3-1: SerialNumber: syz [ 1937.205510][T32388] usb 3-1: config 0 descriptor?? [ 1937.215098][T32388] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1937.257392][ T3931] veth0: entered promiscuous mode [ 1937.273139][T22314] usb 4-1: new low-speed USB device number 126 using dummy_hcd [ 1937.284026][ T3930] veth0: left promiscuous mode [ 1937.444935][T22314] usb 4-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 1937.468486][T22314] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1937.508358][T22314] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1937.549377][T22314] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1937.591417][T22314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1937.708394][T22314] hub 4-1:1.0: bad descriptor, ignoring hub [ 1937.773307][T22314] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1937.808055][T22314] cdc_wdm 4-1:1.0: skipping garbage [ 1937.831898][T22314] cdc_wdm 4-1:1.0: skipping garbage [ 1937.859281][T22314] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1938.032649][ T3948] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9032'. [ 1938.242712][T22314] usb 4-1: USB disconnect, device number 126 [ 1938.438621][T32388] input: sonixj as /devices/platform/dummy_hcd.2/usb3/3-1/input/input243 [ 1938.657615][T32388] usb 3-1: USB disconnect, device number 82 [ 1939.221723][T22314] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1939.253086][ T3968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1939.263341][ T3968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1939.340813][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807b194000: rx timeout, send abort [ 1939.349835][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807b194000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1939.397942][T22314] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1939.410501][T22314] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1939.424210][T22314] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1939.436030][T22314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1939.449798][ T3962] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1939.469973][T22314] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1939.492077][ T5949] usb 3-1: new low-speed USB device number 83 using dummy_hcd [ 1939.653968][ T5949] usb 3-1: config index 0 descriptor too short (expected 57380, got 36) [ 1939.692869][ T5949] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1939.714357][T22314] usb 4-1: USB disconnect, device number 127 [ 1939.740921][ T5949] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1939.782096][ T5949] usb 3-1: config 0 interface 0 altsetting 67 has an invalid descriptor for endpoint zero, skipping [ 1939.836921][ T5949] usb 3-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1939.908458][ T5949] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1939.940594][ T5949] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1939.979242][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1940.012061][ T5949] usb 3-1: config 0 descriptor?? [ 1940.032136][ T3969] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1940.061036][ T5949] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1940.141016][ T3986] FAULT_INJECTION: forcing a failure. [ 1940.141016][ T3986] name failslab, interval 1, probability 0, space 0, times 0 [ 1940.151804][ T29] usb 5-1: new low-speed USB device number 90 using dummy_hcd [ 1940.187065][ T3986] CPU: 0 UID: 0 PID: 3986 Comm: syz.0.9045 Tainted: G L syzkaller #0 PREEMPT(full) [ 1940.187101][ T3986] Tainted: [L]=SOFTLOCKUP [ 1940.187110][ T3986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1940.187123][ T3986] Call Trace: [ 1940.187133][ T3986] [ 1940.187143][ T3986] dump_stack_lvl+0xe8/0x150 [ 1940.187182][ T3986] should_fail_ex+0x412/0x560 [ 1940.187217][ T3986] should_failslab+0xa8/0x100 [ 1940.187246][ T3986] __kmalloc_noprof+0xe8/0x760 [ 1940.187271][ T3986] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1940.187308][ T3986] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1940.187340][ T3986] ? tomoyo_domain+0xd7/0x130 [ 1940.187376][ T3986] ? tomoyo_path_number_perm+0x219/0x630 [ 1940.187403][ T3986] tomoyo_path_number_perm+0x246/0x630 [ 1940.187432][ T3986] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1940.187457][ T3986] ? __lock_acquire+0x6b5/0x2cf0 [ 1940.187504][ T3986] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1940.187561][ T3986] ? __fget_files+0x2a/0x420 [ 1940.187594][ T3986] ? __fget_files+0x2a/0x420 [ 1940.187622][ T3986] ? __fget_files+0x3a0/0x420 [ 1940.187651][ T3986] ? __fget_files+0x2a/0x420 [ 1940.187685][ T3986] security_file_ioctl+0xc3/0x2a0 [ 1940.187712][ T3986] __se_sys_ioctl+0x47/0x170 [ 1940.187738][ T3986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1940.187761][ T3986] do_syscall_64+0x15f/0xf80 [ 1940.187790][ T3986] ? clear_bhb_loop+0x40/0x90 [ 1940.187816][ T3986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1940.187838][ T3986] RIP: 0033:0x7f88a3f9c819 [ 1940.187859][ T3986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1940.187886][ T3986] RSP: 002b:00007f88a4ed6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1940.187910][ T3986] RAX: ffffffffffffffda RBX: 00007f88a4215fa0 RCX: 00007f88a3f9c819 [ 1940.187926][ T3986] RDX: 0000200000000400 RSI: 00000000c0106401 RDI: 0000000000000003 [ 1940.187940][ T3986] RBP: 00007f88a4ed6090 R08: 0000000000000000 R09: 0000000000000000 [ 1940.187954][ T3986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1940.187966][ T3986] R13: 00007f88a4216038 R14: 00007f88a4215fa0 R15: 00007f88a433fa48 [ 1940.188000][ T3986] [ 1940.189592][ T3986] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1940.471795][ T3975] vivid-002: disconnect [ 1940.549428][ T3987] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1940.564623][ T29] usb 5-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 1940.575905][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1940.605395][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1940.634773][ T29] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1940.655951][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1940.726360][ T29] hub 5-1:1.0: bad descriptor, ignoring hub [ 1940.755368][ T29] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1940.770105][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 1940.780946][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 1940.824322][ T29] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1941.218072][T22314] usb 3-1: USB disconnect, device number 83 [ 1941.272040][ T29] usb 5-1: USB disconnect, device number 90 [ 1941.419271][ T3972] vivid-002: reconnect [ 1941.884875][ T5949] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1942.041986][ T5949] usb 4-1: Using ep0 maxpacket: 8 [ 1942.056903][ T5949] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1942.146236][ T5949] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1942.197850][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.258404][ T5949] usb 4-1: Product: syz [ 1942.282397][ T5949] usb 4-1: Manufacturer: syz [ 1942.312270][ T5949] usb 4-1: SerialNumber: syz [ 1942.331062][ T4020] binder: transaction release 342 bad handle 1, ret = -22 [ 1942.354892][ T5949] usb 4-1: config 0 descriptor?? [ 1942.416474][ T4026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1942.733275][ T5949] msi2500 4-1:0.0: Registered as swradio24 [ 1942.757916][ T5949] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1942.775874][ T5949] usb 4-1: USB disconnect, device number 2 [ 1943.461759][T22314] usb 1-1: new low-speed USB device number 117 using dummy_hcd [ 1943.601735][ T5949] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1943.653853][T22314] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1943.669660][ T4056] netlink: 324 bytes leftover after parsing attributes in process `syz.2.9057'. [ 1943.686984][T22314] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1943.710775][ T4054] netlink: 'syz.1.9066': attribute type 8 has an invalid length. [ 1943.719111][T22314] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1943.760591][T22314] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1943.778483][ T5949] usb 4-1: Using ep0 maxpacket: 16 [ 1943.793801][T22314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.810314][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1943.833106][ T29] usb 5-1: new low-speed USB device number 91 using dummy_hcd [ 1943.845530][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1943.873395][ T5949] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1943.884350][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.912005][ T5949] usb 4-1: config 0 descriptor?? [ 1943.930687][T22314] hub 1-1:1.0: bad descriptor, ignoring hub [ 1943.961272][T22314] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1943.991983][ T29] usb 5-1: device descriptor read/64, error -71 [ 1943.992501][T22314] cdc_wdm 1-1:1.0: skipping garbage [ 1944.031695][T22314] cdc_wdm 1-1:1.0: skipping garbage [ 1944.043478][T22314] cdc_wdm 1-1:1.0: skipping garbage [ 1944.065139][T22314] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1944.251830][ T29] usb 5-1: new low-speed USB device number 92 using dummy_hcd [ 1944.341308][ T4055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1944.367717][ T5949] corsair 0003:1B1C:1B02.009E: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 1944.391840][ T29] usb 5-1: device descriptor read/64, error -71 [ 1944.425878][ T5950] usb 1-1: USB disconnect, device number 117 [ 1944.512984][ T29] usb usb5-port1: attempt power cycle [ 1944.839723][ T5949] usb 4-1: USB disconnect, device number 3 [ 1944.881997][ T29] usb 5-1: new low-speed USB device number 93 using dummy_hcd [ 1944.909277][ T4073] netlink: 'syz.0.9070': attribute type 1 has an invalid length. [ 1944.925754][ T29] usb 5-1: device descriptor read/8, error -71 [ 1945.171828][ T29] usb 5-1: new low-speed USB device number 94 using dummy_hcd [ 1945.175867][ T4077] syz_tun: entered allmulticast mode [ 1945.202783][ T29] usb 5-1: device descriptor read/8, error -71 [ 1945.223746][ T4081] kvm: pic: non byte write [ 1945.312431][ T29] usb usb5-port1: unable to enumerate USB device [ 1945.422036][ T5949] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1945.491880][T22314] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 1945.590445][ T5949] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1945.608368][ T5949] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1945.620592][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1945.632612][T22314] usb 2-1: device descriptor read/64, error -71 [ 1945.634375][ T5949] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1945.655647][ T5949] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1945.666513][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.674844][ T5949] usb 1-1: Product: syz [ 1945.679352][ T5949] usb 1-1: Manufacturer: syz [ 1945.684706][ T5949] usb 1-1: SerialNumber: syz [ 1945.698696][ T5949] usb 1-1: config 0 descriptor?? [ 1945.709042][ T5949] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected [ 1945.718458][ T5949] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1945.735492][ T5949] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1945.892087][T22314] usb 2-1: new low-speed USB device number 98 using dummy_hcd [ 1945.926921][T31740] usb 1-1: USB disconnect, device number 118 [ 1945.946891][T31740] garmin_gps 1-1:0.0: device disconnected [ 1946.000127][ T4077] syz_tun: left allmulticast mode [ 1946.032276][T22314] usb 2-1: device descriptor read/64, error -71 [ 1946.152016][T22314] usb usb2-port1: attempt power cycle [ 1946.295451][ T4090] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1946.304253][ T4090] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1946.337532][ T4097] netlink: 'syz.0.9078': attribute type 8 has an invalid length. [ 1946.424889][ T4104] netlink: 87 bytes leftover after parsing attributes in process `syz.3.9081'. [ 1946.501717][T22314] usb 2-1: new low-speed USB device number 99 using dummy_hcd [ 1946.521692][T31740] usb 3-1: new low-speed USB device number 84 using dummy_hcd [ 1946.566300][T22314] usb 2-1: device descriptor read/8, error -71 [ 1946.695361][T31740] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1946.707705][T31740] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1946.717227][T31740] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1946.731199][T31740] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1946.741273][T31740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1946.759997][T31740] hub 3-1:1.0: bad descriptor, ignoring hub [ 1946.776250][T31740] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1946.793898][T31740] cdc_wdm 3-1:1.0: skipping garbage [ 1946.799335][T31740] cdc_wdm 3-1:1.0: skipping garbage [ 1946.806038][T31740] cdc_wdm 3-1:1.0: skipping garbage [ 1946.812475][T31740] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1946.822370][T22314] usb 2-1: new low-speed USB device number 100 using dummy_hcd [ 1946.853535][T22314] usb 2-1: device descriptor read/8, error -71 [ 1946.871709][T32388] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1946.911937][ T5949] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1946.982756][T22314] usb usb2-port1: unable to enumerate USB device [ 1947.043821][T32388] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1947.067996][T32388] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1947.088042][T32388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1947.102050][ T5949] usb 4-1: Using ep0 maxpacket: 32 [ 1947.119187][T32388] usb 1-1: config 0 descriptor?? [ 1947.129063][ T5949] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1947.150470][ T5949] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 1947.161233][ T4116] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1947.168900][ T5949] usb 4-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1947.200306][ T5949] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1947.210099][ T5949] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1947.226173][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1947.237500][ T5949] usb 4-1: Product: 蚓⸰뼡൵ꙫ쬉핥珁ᤵ♽鐠杫욑ⲕ葆ፇ鬾䅑뾭렎Ꭴ᧘❠잸暠쾳뀇馤ֻ滐逹὆ꂶ∑⇩説沘粄迡Ꞑ钸⋘淧ṟ [ 1947.265086][ T5949] usb 4-1: Manufacturer: ᰁ [ 1947.270014][ T5949] usb 4-1: SerialNumber: ㎌鼫嘮떍 [ 1947.292770][ T29] usb 3-1: USB disconnect, device number 84 [ 1947.351848][ T4118] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1947.360708][ T4118] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1947.587493][ T5949] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1947.605356][ T5949] usb 4-1: USB disconnect, device number 4 [ 1947.646975][T32388] usbhid 1-1:0.0: can't add hid device: -71 [ 1947.661752][T32388] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1947.673545][T32388] usb 1-1: USB disconnect, device number 119 [ 1948.153414][ T4134] netlink: 'syz.4.9093': attribute type 8 has an invalid length. [ 1948.500673][ T4146] veth1_vlan: entered allmulticast mode [ 1948.546376][ T4149] syzkaller0: entered promiscuous mode [ 1948.555734][ T4149] syzkaller0: entered allmulticast mode [ 1948.821975][T22314] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1948.984899][T22314] usb 5-1: device descriptor read/64, error -71 [ 1949.261704][T22314] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1949.411680][T22314] usb 5-1: device descriptor read/64, error -71 [ 1949.523366][T22314] usb usb5-port1: attempt power cycle [ 1949.901637][T22314] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1949.964902][T22314] usb 5-1: device descriptor read/8, error -71 [ 1950.249597][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 1950.249618][ T30] audit: type=1326 audit(1776613147.026:4930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4165 comm="syz.3.9102" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fced7b9c819 code=0x0 [ 1950.289886][T22314] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1950.341736][T22314] usb 5-1: device descriptor read/8, error -71 [ 1950.454893][T22314] usb usb5-port1: unable to enumerate USB device [ 1950.635256][ T5949] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1950.815807][ T5949] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1950.827531][ T5949] usb 4-1: string descriptor 0 read error: -22 [ 1950.834359][ T5949] usb 4-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.40 [ 1950.873618][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.159316][ T4175] FAULT_INJECTION: forcing a failure. [ 1951.159316][ T4175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1951.182059][ T4175] CPU: 1 UID: 0 PID: 4175 Comm: syz.1.9104 Tainted: G L syzkaller #0 PREEMPT(full) [ 1951.182099][ T4175] Tainted: [L]=SOFTLOCKUP [ 1951.182106][ T4175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1951.182117][ T4175] Call Trace: [ 1951.182126][ T4175] [ 1951.182134][ T4175] dump_stack_lvl+0xe8/0x150 [ 1951.182173][ T4175] should_fail_ex+0x412/0x560 [ 1951.182205][ T4175] _copy_to_user+0x31/0xb0 [ 1951.182239][ T4175] simple_read_from_buffer+0xe1/0x170 [ 1951.182275][ T4175] proc_fail_nth_read+0x1bb/0x230 [ 1951.182310][ T4175] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1951.182345][ T4175] ? rw_verify_area+0x2a6/0x4d0 [ 1951.182367][ T4175] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1951.182400][ T4175] vfs_read+0x20c/0xa70 [ 1951.182429][ T4175] ? __pfx___mutex_lock+0x10/0x10 [ 1951.182458][ T4175] ? __pfx_vfs_read+0x10/0x10 [ 1951.182481][ T4175] ? __fget_files+0x2a/0x420 [ 1951.182514][ T4175] ? __fget_files+0x3a0/0x420 [ 1951.182541][ T4175] ? __fget_files+0x2a/0x420 [ 1951.182577][ T4175] ksys_read+0x150/0x270 [ 1951.182601][ T4175] ? __pfx_ksys_read+0x10/0x10 [ 1951.182619][ T4175] ? __pfx_cec_ioctl+0x10/0x10 [ 1951.182647][ T4175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1951.182665][ T4175] do_syscall_64+0x15f/0xf80 [ 1951.182689][ T4175] ? trace_irq_disable+0x3b/0x140 [ 1951.182715][ T4175] ? clear_bhb_loop+0x40/0x90 [ 1951.182739][ T4175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1951.182759][ T4175] RIP: 0033:0x7fcc8fb5d04e [ 1951.182780][ T4175] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1951.182797][ T4175] RSP: 002b:00007fcc90a22fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1951.182821][ T4175] RAX: ffffffffffffffda RBX: 00007fcc90a236c0 RCX: 00007fcc8fb5d04e [ 1951.182877][ T4175] RDX: 000000000000000f RSI: 00007fcc90a230a0 RDI: 0000000000000004 [ 1951.182891][ T4175] RBP: 00007fcc90a23090 R08: 0000000000000000 R09: 0000000000000000 [ 1951.182904][ T4175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1951.182916][ T4175] R13: 00007fcc8fe16038 R14: 00007fcc8fe15fa0 R15: 00007fcc8ff3fa48 [ 1951.182947][ T4175] [ 1951.600133][ T5949] elecom 0003:056E:011C.009F: unknown main item tag 0x0 [ 1951.607369][ T5949] elecom 0003:056E:011C.009F: unknown main item tag 0x0 [ 1951.614780][ T5949] elecom 0003:056E:011C.009F: unknown main item tag 0x0 [ 1951.622123][ T5949] elecom 0003:056E:011C.009F: unknown main item tag 0x0 [ 1951.629674][ T5949] elecom 0003:056E:011C.009F: unknown main item tag 0x0 [ 1951.636964][ T5949] elecom 0003:056E:011C.009F: unknown main item tag 0x0 [ 1951.644935][ T5949] elecom 0003:056E:011C.009F: unknown main item tag 0x0 [ 1951.652330][ T5949] elecom 0003:056E:011C.009F: unknown main item tag 0x0 [ 1951.664027][ T5949] elecom 0003:056E:011C.009F: unknown main item tag 0x0 [ 1951.679196][ T5949] elecom 0003:056E:011C.009F: unknown main item tag 0x0 [ 1951.725065][ T4181] netlink: 'syz.0.9106': attribute type 8 has an invalid length. [ 1951.796441][ T5949] elecom 0003:056E:011C.009F: hidraw0: USB HID v0.04 Device [HID 056e:011c] on usb-dummy_hcd.3-1/input0 [ 1951.822250][ T4184] FAULT_INJECTION: forcing a failure. [ 1951.822250][ T4184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1951.882529][ T1102] usb 4-1: USB disconnect, device number 5 [ 1951.907280][ T4190] FAULT_INJECTION: forcing a failure. [ 1951.907280][ T4190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1951.988415][ T4190] CPU: 1 UID: 0 PID: 4190 Comm: syz.4.9109 Tainted: G L syzkaller #0 PREEMPT(full) [ 1951.988456][ T4190] Tainted: [L]=SOFTLOCKUP [ 1951.988464][ T4190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1951.988477][ T4190] Call Trace: [ 1951.988485][ T4190] [ 1951.988495][ T4190] dump_stack_lvl+0xe8/0x150 [ 1951.988533][ T4190] should_fail_ex+0x412/0x560 [ 1951.988567][ T4190] _copy_to_user+0x31/0xb0 [ 1951.988607][ T4190] simple_read_from_buffer+0xe1/0x170 [ 1951.988643][ T4190] proc_fail_nth_read+0x1bb/0x230 [ 1951.988678][ T4190] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1951.988711][ T4190] ? rw_verify_area+0x2a6/0x4d0 [ 1951.988732][ T4190] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1951.988764][ T4190] vfs_read+0x20c/0xa70 [ 1951.988791][ T4190] ? __pfx___mutex_lock+0x10/0x10 [ 1951.988819][ T4190] ? __pfx_vfs_read+0x10/0x10 [ 1951.988843][ T4190] ? __fget_files+0x2a/0x420 [ 1951.988877][ T4190] ? __fget_files+0x3a0/0x420 [ 1951.988904][ T4190] ? __fget_files+0x2a/0x420 [ 1951.988943][ T4190] ksys_read+0x150/0x270 [ 1951.988963][ T4190] ? __pfx_ppp_synctty_ioctl+0x10/0x10 [ 1951.988994][ T4190] ? __pfx_ksys_read+0x10/0x10 [ 1951.989016][ T4190] ? __pfx_tty_ioctl+0x10/0x10 [ 1951.989044][ T4190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1951.989065][ T4190] do_syscall_64+0x15f/0xf80 [ 1951.989089][ T4190] ? trace_irq_disable+0x3b/0x140 [ 1951.989115][ T4190] ? clear_bhb_loop+0x40/0x90 [ 1951.989141][ T4190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1951.989161][ T4190] RIP: 0033:0x7f28f815d04e [ 1951.989182][ T4190] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1951.989200][ T4190] RSP: 002b:00007f28f8fabfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1951.989225][ T4190] RAX: ffffffffffffffda RBX: 00007f28f8fac6c0 RCX: 00007f28f815d04e [ 1951.989240][ T4190] RDX: 000000000000000f RSI: 00007f28f8fac0a0 RDI: 0000000000000004 [ 1951.989252][ T4190] RBP: 00007f28f8fac090 R08: 0000000000000000 R09: 0000000000000000 [ 1951.989265][ T4190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1951.989277][ T4190] R13: 00007f28f8416038 R14: 00007f28f8415fa0 R15: 00007f28f853fa48 [ 1951.989309][ T4190] [ 1952.417064][ T4184] CPU: 0 UID: 0 PID: 4184 Comm: syz.1.9107 Tainted: G L syzkaller #0 PREEMPT(full) [ 1952.417101][ T4184] Tainted: [L]=SOFTLOCKUP [ 1952.417109][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1952.417122][ T4184] Call Trace: [ 1952.417131][ T4184] [ 1952.417140][ T4184] dump_stack_lvl+0xe8/0x150 [ 1952.417180][ T4184] should_fail_ex+0x412/0x560 [ 1952.417214][ T4184] _copy_to_user+0x31/0xb0 [ 1952.417248][ T4184] simple_read_from_buffer+0xe1/0x170 [ 1952.417285][ T4184] proc_fail_nth_read+0x1bb/0x230 [ 1952.417320][ T4184] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1952.417356][ T4184] ? rw_verify_area+0x2a6/0x4d0 [ 1952.417379][ T4184] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1952.417413][ T4184] vfs_read+0x20c/0xa70 [ 1952.417442][ T4184] ? __pfx___mutex_lock+0x10/0x10 [ 1952.417471][ T4184] ? __pfx_vfs_read+0x10/0x10 [ 1952.417497][ T4184] ? __fget_files+0x2a/0x420 [ 1952.417533][ T4184] ? __fget_files+0x3a0/0x420 [ 1952.417561][ T4184] ? __fget_files+0x2a/0x420 [ 1952.417600][ T4184] ksys_read+0x150/0x270 [ 1952.417626][ T4184] ? __pfx_ksys_read+0x10/0x10 [ 1952.417658][ T4184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1952.417681][ T4184] do_syscall_64+0x15f/0xf80 [ 1952.417707][ T4184] ? trace_irq_disable+0x3b/0x140 [ 1952.417733][ T4184] ? clear_bhb_loop+0x40/0x90 [ 1952.417759][ T4184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1952.417780][ T4184] RIP: 0033:0x7fcc8fb5d04e [ 1952.417801][ T4184] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1952.417829][ T4184] RSP: 002b:00007fcc90a22fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1952.417854][ T4184] RAX: ffffffffffffffda RBX: 00007fcc90a236c0 RCX: 00007fcc8fb5d04e [ 1952.417870][ T4184] RDX: 000000000000000f RSI: 00007fcc90a230a0 RDI: 0000000000000005 [ 1952.417884][ T4184] RBP: 00007fcc90a23090 R08: 0000000000000000 R09: 0000000000000000 [ 1952.417897][ T4184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1952.417910][ T4184] R13: 00007fcc8fe16038 R14: 00007fcc8fe15fa0 R15: 00007fcc8ff3fa48 [ 1952.417943][ T4184] [ 1952.433671][ T4191] fido_id[4191]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1952.732580][ T5949] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1952.863501][ T4198] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9112'. [ 1952.961641][ T5949] usb 3-1: Using ep0 maxpacket: 8 [ 1952.969304][ T5949] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1952.985854][ T5949] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1953.044778][ T5949] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1953.074393][ T5949] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1953.158641][ T5949] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1953.300275][ T5949] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1953.371363][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.673158][ T1102] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1953.725583][ T4215] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1953.792258][ T5949] usb 3-1: usb_control_msg returned -32 [ 1953.831904][ T5949] usbtmc 3-1:16.0: can't read capabilities [ 1953.851672][ T1102] usb 5-1: Using ep0 maxpacket: 16 [ 1953.886169][ T1102] usb 5-1: config 0 has no interfaces? [ 1953.914672][ T1102] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1953.943915][ T1102] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1953.963907][ T1102] usb 5-1: Manufacturer: syz [ 1953.994022][ T4186] netlink: 'syz.2.9108': attribute type 11 has an invalid length. [ 1954.031363][ T1102] usb 5-1: config 0 descriptor?? [ 1954.051964][ T4186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1954.093383][ T4186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1954.117292][ T5949] usb 3-1: USB disconnect, device number 85 [ 1954.855833][T32388] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1955.048453][T32388] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1955.095178][T32388] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1955.158846][T32388] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1955.193735][T32388] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.204919][T32388] usb 1-1: Product: syz [ 1955.209469][T32388] usb 1-1: Manufacturer: syz [ 1955.253834][T32388] usb 1-1: SerialNumber: syz [ 1955.269211][ T4233] FAULT_INJECTION: forcing a failure. [ 1955.269211][ T4233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1955.305551][T32388] usb 1-1: config 0 descriptor?? [ 1955.332087][ T4233] CPU: 0 UID: 0 PID: 4233 Comm: syz.2.9121 Tainted: G L syzkaller #0 PREEMPT(full) [ 1955.332121][ T4233] Tainted: [L]=SOFTLOCKUP [ 1955.332129][ T4233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1955.332141][ T4233] Call Trace: [ 1955.332149][ T4233] [ 1955.332158][ T4233] dump_stack_lvl+0xe8/0x150 [ 1955.332202][ T4233] should_fail_ex+0x412/0x560 [ 1955.332235][ T4233] _copy_from_user+0x2d/0xb0 [ 1955.332267][ T4233] ___sys_sendmsg+0x1c6/0x360 [ 1955.332292][ T4233] ? __lock_acquire+0x6b5/0x2cf0 [ 1955.332328][ T4233] ? __pfx____sys_sendmsg+0x10/0x10 [ 1955.332387][ T4233] ? __fget_files+0x2a/0x420 [ 1955.332417][ T4233] ? __fget_files+0x3a0/0x420 [ 1955.332458][ T4233] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1955.332485][ T4233] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1955.332518][ T4233] ? __pfx_ksys_write+0x10/0x10 [ 1955.332560][ T4233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1955.332583][ T4233] do_syscall_64+0x15f/0xf80 [ 1955.332609][ T4233] ? trace_irq_disable+0x3b/0x140 [ 1955.332637][ T4233] ? clear_bhb_loop+0x40/0x90 [ 1955.332662][ T4233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1955.332684][ T4233] RIP: 0033:0x7fde97d9c819 [ 1955.332705][ T4233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1955.332725][ T4233] RSP: 002b:00007fde98bb9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1955.332750][ T4233] RAX: ffffffffffffffda RBX: 00007fde98015fa0 RCX: 00007fde97d9c819 [ 1955.332766][ T4233] RDX: 0000000024000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1955.332780][ T4233] RBP: 00007fde98bb9090 R08: 0000000000000000 R09: 0000000000000000 [ 1955.332794][ T4233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1955.332807][ T4233] R13: 00007fde98016038 R14: 00007fde98015fa0 R15: 00007fde9813fa48 [ 1955.332841][ T4233] [ 1955.978265][T32388] usb 1-1: USB disconnect, device number 120 [ 1956.151023][ T4238] netlink: 'syz.2.9122': attribute type 8 has an invalid length. [ 1956.573904][ T4251] FAULT_INJECTION: forcing a failure. [ 1956.573904][ T4251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1956.588947][ T4251] CPU: 0 UID: 0 PID: 4251 Comm: syz.1.9126 Tainted: G L syzkaller #0 PREEMPT(full) [ 1956.588981][ T4251] Tainted: [L]=SOFTLOCKUP [ 1956.588988][ T4251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1956.589000][ T4251] Call Trace: [ 1956.589009][ T4251] [ 1956.589017][ T4251] dump_stack_lvl+0xe8/0x150 [ 1956.589055][ T4251] should_fail_ex+0x412/0x560 [ 1956.589086][ T4251] _copy_from_iter+0x1d3/0x1670 [ 1956.589117][ T4251] ? rcu_is_watching+0x15/0xb0 [ 1956.589145][ T4251] ? __pfx__copy_from_iter+0x10/0x10 [ 1956.589169][ T4251] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 1956.589200][ T4251] ? netlink_sendmsg+0x650/0xb40 [ 1956.589219][ T4251] ? skb_put+0x11b/0x210 [ 1956.589243][ T4251] netlink_sendmsg+0x6c0/0xb40 [ 1956.589271][ T4251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1956.589294][ T4251] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1956.589324][ T4251] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1956.589353][ T4251] ____sys_sendmsg+0x972/0x9f0 [ 1956.589382][ T4251] ? __might_fault+0xaf/0x130 [ 1956.589410][ T4251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1956.589443][ T4251] ? import_iovec+0x73/0xa0 [ 1956.589476][ T4251] ___sys_sendmsg+0x2a5/0x360 [ 1956.589497][ T4251] ? __lock_acquire+0x6b5/0x2cf0 [ 1956.589531][ T4251] ? __pfx____sys_sendmsg+0x10/0x10 [ 1956.589590][ T4251] ? __fget_files+0x2a/0x420 [ 1956.589618][ T4251] ? __fget_files+0x3a0/0x420 [ 1956.589657][ T4251] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1956.589683][ T4251] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1956.589715][ T4251] ? __pfx_ksys_write+0x10/0x10 [ 1956.589748][ T4251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1956.589786][ T4251] do_syscall_64+0x15f/0xf80 [ 1956.589811][ T4251] ? trace_irq_disable+0x3b/0x140 [ 1956.589838][ T4251] ? clear_bhb_loop+0x40/0x90 [ 1956.589869][ T4251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1956.589889][ T4251] RIP: 0033:0x7fcc8fb9c819 [ 1956.589911][ T4251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1956.589929][ T4251] RSP: 002b:00007fcc90a23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1956.589952][ T4251] RAX: ffffffffffffffda RBX: 00007fcc8fe15fa0 RCX: 00007fcc8fb9c819 [ 1956.589967][ T4251] RDX: 0000000024000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1956.589981][ T4251] RBP: 00007fcc90a23090 R08: 0000000000000000 R09: 0000000000000000 [ 1956.589993][ T4251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1956.590006][ T4251] R13: 00007fcc8fe16038 R14: 00007fcc8fe15fa0 R15: 00007fcc8ff3fa48 [ 1956.590039][ T4251] [ 1956.943409][T26110] usb 5-1: USB disconnect, device number 99 [ 1956.980454][ T4248] netlink: 120 bytes leftover after parsing attributes in process `syz.2.9125'. [ 1957.180951][ T4262] [ 1957.183350][ T4262] ===================================================== [ 1957.190576][ T4262] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1957.198044][ T4262] syzkaller #0 Tainted: G L [ 1957.204126][ T4262] ----------------------------------------------------- [ 1957.211325][ T4262] syz.0.9127/4262 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1957.218967][ T4262] ffff888052b5e210 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1957.227780][ T4262] [ 1957.227780][ T4262] and this task is already holding: [ 1957.235155][ T4262] ffff88807c7f6028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1957.245447][ T4262] which would create a new lock dependency: [ 1957.251549][ T4262] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1957.260047][ T4262] [ 1957.260047][ T4262] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1957.269770][ T4262] (&dev->event_lock#2){..-.}-{3:3} [ 1957.269805][ T4262] [ 1957.269805][ T4262] ... which became SOFTIRQ-irq-safe at: [ 1957.283077][ T4262] lock_acquire+0x106/0x350 [ 1957.287959][ T4262] _raw_spin_lock_irqsave+0x40/0x60 [ 1957.293354][ T4262] input_event+0x71/0xc0 [ 1957.297755][ T4262] xpad360_process_packet+0xda/0xdc0 [ 1957.303168][ T4262] xpad_irq_in+0x14e/0x25c0 [ 1957.308031][ T4262] __usb_hcd_giveback_urb+0x376/0x540 [ 1957.313584][ T4262] dummy_timer+0xbc0/0x4650 [ 1957.318345][ T4262] __hrtimer_run_queues+0x3c0/0xa20 [ 1957.323802][ T4262] hrtimer_run_softirq+0x17a/0x240 [ 1957.329094][ T4262] handle_softirqs+0x22a/0x840 [ 1957.333946][ T4262] __irq_exit_rcu+0xca/0x220 [ 1957.338714][ T4262] irq_exit_rcu+0x9/0x30 [ 1957.343400][ T4262] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1957.349214][ T4262] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1957.355380][ T4262] kasan_check_range+0xa0/0x2c0 [ 1957.360425][ T4262] folio_remove_rmap_ptes+0x2d8/0xe70 [ 1957.365925][ T4262] tlb_flush_rmaps+0x300/0x430 [ 1957.370866][ T4262] __zap_vma_range+0x3d07/0x4b40 [ 1957.375913][ T4262] unmap_vmas+0x379/0x530 [ 1957.380353][ T4262] exit_mmap+0x280/0x9e0 [ 1957.384716][ T4262] __mmput+0x118/0x430 [ 1957.388889][ T4262] exit_mm+0x18e/0x250 [ 1957.393221][ T4262] do_exit+0x6a2/0x22c0 [ 1957.397592][ T4262] do_group_exit+0x21b/0x2d0 [ 1957.402310][ T4262] __x64_sys_exit_group+0x3f/0x40 [ 1957.407523][ T4262] x64_sys_call+0x221a/0x2240 [ 1957.412326][ T4262] do_syscall_64+0x15f/0xf80 [ 1957.417119][ T4262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1957.423096][ T4262] [ 1957.423096][ T4262] to a SOFTIRQ-irq-unsafe lock: [ 1957.430327][ T4262] (tasklist_lock){.+.+}-{3:3} [ 1957.430355][ T4262] [ 1957.430355][ T4262] ... which became SOFTIRQ-irq-unsafe at: [ 1957.444206][ T4262] ... [ 1957.444219][ T4262] lock_acquire+0x106/0x350 [ 1957.451486][ T4262] _raw_read_lock+0x36/0x50 [ 1957.456198][ T4262] __do_wait+0xde/0x740 [ 1957.460575][ T4262] do_wait+0x1e7/0x510 [ 1957.464727][ T4262] kernel_wait+0xd6/0x1c0 [ 1957.469250][ T4262] call_usermodehelper_exec_work+0xbe/0x230 [ 1957.475328][ T4262] process_scheduled_works+0xb5d/0x1860 [ 1957.480972][ T4262] worker_thread+0xa53/0xfc0 [ 1957.485677][ T4262] kthread+0x388/0x470 [ 1957.489859][ T4262] ret_from_fork+0x514/0xb70 [ 1957.494658][ T4262] ret_from_fork_asm+0x1a/0x30 [ 1957.499602][ T4262] [ 1957.499602][ T4262] other info that might help us debug this: [ 1957.499602][ T4262] [ 1957.509847][ T4262] Chain exists of: [ 1957.509847][ T4262] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1957.509847][ T4262] [ 1957.523551][ T4262] Possible interrupt unsafe locking scenario: [ 1957.523551][ T4262] [ 1957.532052][ T4262] CPU0 CPU1 [ 1957.537539][ T4262] ---- ---- [ 1957.543011][ T4262] lock(tasklist_lock); [ 1957.547440][ T4262] local_irq_disable(); [ 1957.554281][ T4262] lock(&dev->event_lock#2); [ 1957.561478][ T4262] lock(&client->buffer_lock); [ 1957.568886][ T4262] [ 1957.572367][ T4262] lock(&dev->event_lock#2); [ 1957.577422][ T4262] [ 1957.577422][ T4262] *** DEADLOCK *** [ 1957.577422][ T4262] [ 1957.586088][ T4262] 7 locks held by syz.0.9127/4262: [ 1957.591193][ T4262] #0: ffff88802c0b3110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 1957.600627][ T4262] #1: ffff88801ff53230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330 [ 1957.610856][ T4262] #2: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb5/0x330 [ 1957.622080][ T4262] #3: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1957.632461][ T4262] #4: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1957.642230][ T4262] #5: ffff88807c7f6028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1957.652776][ T4262] #6: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1957.662209][ T4262] [ 1957.662209][ T4262] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1957.672799][ T4262] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1957.678908][ T4262] IN-SOFTIRQ-W at: [ 1957.682992][ T4262] lock_acquire+0x106/0x350 [ 1957.689438][ T4262] _raw_spin_lock_irqsave+0x40/0x60 [ 1957.696493][ T4262] input_event+0x71/0xc0 [ 1957.702762][ T4262] xpad360_process_packet+0xda/0xdc0 [ 1957.710152][ T4262] xpad_irq_in+0x14e/0x25c0 [ 1957.716499][ T4262] __usb_hcd_giveback_urb+0x376/0x540 [ 1957.723976][ T4262] dummy_timer+0xbc0/0x4650 [ 1957.730509][ T4262] __hrtimer_run_queues+0x3c0/0xa20 [ 1957.737867][ T4262] hrtimer_run_softirq+0x17a/0x240 [ 1957.745149][ T4262] handle_softirqs+0x22a/0x840 [ 1957.752165][ T4262] __irq_exit_rcu+0xca/0x220 [ 1957.759066][ T4262] irq_exit_rcu+0x9/0x30 [ 1957.765762][ T4262] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1957.774132][ T4262] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1957.782405][ T4262] kasan_check_range+0xa0/0x2c0 [ 1957.789834][ T4262] folio_remove_rmap_ptes+0x2d8/0xe70 [ 1957.797585][ T4262] tlb_flush_rmaps+0x300/0x430 [ 1957.804361][ T4262] __zap_vma_range+0x3d07/0x4b40 [ 1957.811250][ T4262] unmap_vmas+0x379/0x530 [ 1957.817708][ T4262] exit_mmap+0x280/0x9e0 [ 1957.823881][ T4262] __mmput+0x118/0x430 [ 1957.829896][ T4262] exit_mm+0x18e/0x250 [ 1957.835796][ T4262] do_exit+0x6a2/0x22c0 [ 1957.841869][ T4262] do_group_exit+0x21b/0x2d0 [ 1957.848291][ T4262] __x64_sys_exit_group+0x3f/0x40 [ 1957.855188][ T4262] x64_sys_call+0x221a/0x2240 [ 1957.861738][ T4262] do_syscall_64+0x15f/0xf80 [ 1957.868438][ T4262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1957.876355][ T4262] INITIAL USE at: [ 1957.880438][ T4262] lock_acquire+0x106/0x350 [ 1957.886811][ T4262] _raw_spin_lock_irqsave+0x40/0x60 [ 1957.893775][ T4262] input_inject_event+0xa4/0x330 [ 1957.900475][ T4262] kbd_led_trigger_activate+0xbc/0x100 [ 1957.907673][ T4262] led_trigger_set+0x535/0x960 [ 1957.914617][ T4262] led_trigger_set_default+0x260/0x2a0 [ 1957.921934][ T4262] led_classdev_register_ext+0x787/0x9c0 [ 1957.929852][ T4262] input_leds_connect+0x517/0x790 [ 1957.936722][ T4262] input_register_device+0xce0/0x1140 [ 1957.944472][ T4262] atkbd_connect+0x71e/0xa10 [ 1957.951004][ T4262] serio_driver_probe+0x82/0xb0 [ 1957.957716][ T4262] really_probe+0x267/0xaf0 [ 1957.964020][ T4262] __driver_probe_device+0x18c/0x320 [ 1957.971413][ T4262] driver_probe_device+0x4f/0x240 [ 1957.978820][ T4262] __driver_attach+0x34c/0x640 [ 1957.986027][ T4262] bus_for_each_dev+0x23b/0x2c0 [ 1957.992898][ T4262] serio_handle_event+0x1af/0xf80 [ 1957.999971][ T4262] process_scheduled_works+0xb5d/0x1860 [ 1958.007557][ T4262] worker_thread+0xa53/0xfc0 [ 1958.015247][ T4262] kthread+0x388/0x470 [ 1958.021283][ T4262] ret_from_fork+0x514/0xb70 [ 1958.028334][ T4262] ret_from_fork_asm+0x1a/0x30 [ 1958.035126][ T4262] } [ 1958.037799][ T4262] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1958.047869][ T4262] -> (&client->buffer_lock){....}-{3:3} { [ 1958.053703][ T4262] INITIAL USE at: [ 1958.057625][ T4262] lock_acquire+0x106/0x350 [ 1958.063983][ T4262] _raw_spin_lock_irq+0x3d/0x50 [ 1958.070587][ T4262] evdev_read+0x37d/0xcb0 [ 1958.076661][ T4262] vfs_readv+0x587/0x840 [ 1958.082961][ T4262] do_readv+0x154/0x2e0 [ 1958.089256][ T4262] do_syscall_64+0x15f/0xf80 [ 1958.095871][ T4262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1958.103699][ T4262] } [ 1958.106229][ T4262] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1958.114597][ T4262] ... acquired at: [ 1958.118676][ T4262] _raw_spin_lock+0x2e/0x40 [ 1958.123567][ T4262] evdev_pass_values+0xb9/0xbd0 [ 1958.128746][ T4262] evdev_events+0x1e6/0x340 [ 1958.133548][ T4262] input_pass_values+0x288/0x890 [ 1958.139220][ T4262] input_event_dispose+0x330/0x6b0 [ 1958.145409][ T4262] input_inject_event+0x1dc/0x330 [ 1958.150705][ T4262] evdev_write+0x325/0x4c0 [ 1958.155405][ T4262] vfs_write+0x29a/0xb90 [ 1958.160436][ T4262] ksys_write+0x150/0x270 [ 1958.164972][ T4262] do_syscall_64+0x15f/0xf80 [ 1958.170026][ T4262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1958.176637][ T4262] [ 1958.179061][ T4262] [ 1958.179061][ T4262] the dependencies between the lock to be acquired [ 1958.179074][ T4262] and SOFTIRQ-irq-unsafe lock: [ 1958.192951][ T4262] -> (tasklist_lock){.+.+}-{3:3} { [ 1958.198256][ T4262] HARDIRQ-ON-R at: [ 1958.202422][ T4262] lock_acquire+0x106/0x350 [ 1958.209106][ T4262] _raw_read_lock+0x36/0x50 [ 1958.215627][ T4262] __do_wait+0xde/0x740 [ 1958.221889][ T4262] do_wait+0x1e7/0x510 [ 1958.228068][ T4262] kernel_wait+0xd6/0x1c0 [ 1958.234437][ T4262] call_usermodehelper_exec_work+0xbe/0x230 [ 1958.242584][ T4262] process_scheduled_works+0xb5d/0x1860 [ 1958.250357][ T4262] worker_thread+0xa53/0xfc0 [ 1958.257150][ T4262] kthread+0x388/0x470 [ 1958.263505][ T4262] ret_from_fork+0x514/0xb70 [ 1958.270338][ T4262] ret_from_fork_asm+0x1a/0x30 [ 1958.277453][ T4262] SOFTIRQ-ON-R at: [ 1958.282282][ T4262] lock_acquire+0x106/0x350 [ 1958.288977][ T4262] _raw_read_lock+0x36/0x50 [ 1958.295488][ T4262] __do_wait+0xde/0x740 [ 1958.301688][ T4262] do_wait+0x1e7/0x510 [ 1958.308036][ T4262] kernel_wait+0xd6/0x1c0 [ 1958.314489][ T4262] call_usermodehelper_exec_work+0xbe/0x230 [ 1958.322594][ T4262] process_scheduled_works+0xb5d/0x1860 [ 1958.330328][ T4262] worker_thread+0xa53/0xfc0 [ 1958.336918][ T4262] kthread+0x388/0x470 [ 1958.343083][ T4262] ret_from_fork+0x514/0xb70 [ 1958.349770][ T4262] ret_from_fork_asm+0x1a/0x30 [ 1958.356702][ T4262] INITIAL USE at: [ 1958.360772][ T4262] lock_acquire+0x106/0x350 [ 1958.367180][ T4262] _raw_write_lock_irq+0x3d/0x50 [ 1958.374024][ T4262] copy_process+0x2b5e/0x4450 [ 1958.380611][ T4262] kernel_clone+0x284/0x8f0 [ 1958.387105][ T4262] user_mode_thread+0x110/0x180 [ 1958.393865][ T4262] rest_init+0x23/0x300 [ 1958.400013][ T4262] start_kernel+0x38a/0x3e0 [ 1958.406535][ T4262] x86_64_start_reservations+0x24/0x30 [ 1958.414163][ T4262] x86_64_start_kernel+0x143/0x1c0 [ 1958.421394][ T4262] common_startup_64+0x13e/0x147 [ 1958.428356][ T4262] INITIAL READ USE at: [ 1958.432932][ T4262] lock_acquire+0x106/0x350 [ 1958.440324][ T4262] _raw_read_lock+0x36/0x50 [ 1958.447641][ T4262] __do_wait+0xde/0x740 [ 1958.454370][ T4262] do_wait+0x1e7/0x510 [ 1958.460874][ T4262] kernel_wait+0xd6/0x1c0 [ 1958.467587][ T4262] call_usermodehelper_exec_work+0xbe/0x230 [ 1958.475829][ T4262] process_scheduled_works+0xb5d/0x1860 [ 1958.484080][ T4262] worker_thread+0xa53/0xfc0 [ 1958.491288][ T4262] kthread+0x388/0x470 [ 1958.497981][ T4262] ret_from_fork+0x514/0xb70 [ 1958.505089][ T4262] ret_from_fork_asm+0x1a/0x30 [ 1958.512192][ T4262] } [ 1958.514856][ T4262] ... key at: [] tasklist_lock+0x18/0x40 [ 1958.522861][ T4262] ... acquired at: [ 1958.527129][ T4262] _raw_read_lock+0x36/0x50 [ 1958.531986][ T4262] send_sigurg+0x12b/0x420 [ 1958.536869][ T4262] sk_send_sigurg+0x6c/0x2e0 [ 1958.541644][ T4262] queue_oob+0x42c/0x4f0 [ 1958.546845][ T4262] unix_stream_sendmsg+0xcb1/0xe80 [ 1958.552360][ T4262] ____sys_sendmsg+0x972/0x9f0 [ 1958.557407][ T4262] ___sys_sendmsg+0x2a5/0x360 [ 1958.562347][ T4262] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1958.567937][ T4262] do_syscall_64+0x15f/0xf80 [ 1958.573270][ T4262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1958.588969][ T4262] [ 1958.592770][ T4262] -> (&f_owner->lock){....}-{3:3} { [ 1958.599327][ T4262] INITIAL USE at: [ 1958.603602][ T4262] lock_acquire+0x106/0x350 [ 1958.610117][ T4262] _raw_write_lock_irq+0x3d/0x50 [ 1958.617077][ T4262] __f_setown+0x67/0x370 [ 1958.623116][ T4262] generic_setlease+0xacf/0xfd0 [ 1958.630117][ T4262] do_fcntl_add_lease+0x35e/0x470 [ 1958.636997][ T4262] fcntl_setlease+0x123/0x180 [ 1958.643931][ T4262] do_fcntl+0x8b3/0x1a20 [ 1958.650386][ T4262] __se_sys_fcntl+0xc8/0x150 [ 1958.656739][ T4262] do_syscall_64+0x15f/0xf80 [ 1958.663113][ T4262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1958.670848][ T4262] INITIAL READ USE at: [ 1958.675341][ T4262] lock_acquire+0x106/0x350 [ 1958.682113][ T4262] _raw_read_lock_irqsave+0x48/0x60 [ 1958.689635][ T4262] send_sigio+0x38/0x370 [ 1958.696312][ T4262] kill_fasync+0x24d/0x4d0 [ 1958.703418][ T4262] lease_break_callback+0x26/0x30 [ 1958.711068][ T4262] __break_lease+0x81c/0x1e00 [ 1958.718120][ T4262] do_dentry_open+0x1010/0x14e0 [ 1958.725771][ T4262] vfs_open+0x3b/0x340 [ 1958.732713][ T4262] path_openat+0x2e08/0x3860 [ 1958.739514][ T4262] do_file_open+0x23e/0x4a0 [ 1958.746605][ T4262] do_open_execat+0x12b/0x580 [ 1958.753540][ T4262] alloc_bprm+0x28/0x5c0 [ 1958.760073][ T4262] do_execveat_common+0x175/0x690 [ 1958.767302][ T4262] __x64_sys_execve+0x97/0xc0 [ 1958.774174][ T4262] do_syscall_64+0x15f/0xf80 [ 1958.781215][ T4262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1958.789291][ T4262] } [ 1958.791885][ T4262] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1958.800857][ T4262] ... acquired at: [ 1958.804741][ T4262] _raw_read_lock_irqsave+0x48/0x60 [ 1958.810227][ T4262] send_sigio+0x38/0x370 [ 1958.814754][ T4262] kill_fasync+0x24d/0x4d0 [ 1958.819729][ T4262] lease_break_callback+0x26/0x30 [ 1958.824951][ T4262] __break_lease+0x81c/0x1e00 [ 1958.829829][ T4262] do_dentry_open+0x1010/0x14e0 [ 1958.834861][ T4262] vfs_open+0x3b/0x340 [ 1958.839113][ T4262] path_openat+0x2e08/0x3860 [ 1958.844058][ T4262] do_file_open+0x23e/0x4a0 [ 1958.848934][ T4262] do_open_execat+0x12b/0x580 [ 1958.853798][ T4262] alloc_bprm+0x28/0x5c0 [ 1958.858212][ T4262] do_execveat_common+0x175/0x690 [ 1958.863420][ T4262] __x64_sys_execve+0x97/0xc0 [ 1958.868305][ T4262] do_syscall_64+0x15f/0xf80 [ 1958.873195][ T4262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1958.879287][ T4262] [ 1958.881621][ T4262] -> (&new->fa_lock){....}-{3:3} { [ 1958.886789][ T4262] INITIAL USE at: [ 1958.890865][ T4262] lock_acquire+0x106/0x350 [ 1958.897491][ T4262] _raw_write_lock_irq+0x3d/0x50 [ 1958.904101][ T4262] fasync_remove_entry+0xf1/0x1c0 [ 1958.910702][ T4262] lease_modify+0x4f7/0x6c0 [ 1958.917022][ T4262] locks_remove_file+0x5f0/0xf70 [ 1958.923743][ T4262] __fput+0x3ae/0xa60 [ 1958.929424][ T4262] task_work_run+0x1d9/0x270 [ 1958.935762][ T4262] do_exit+0x70f/0x22c0 [ 1958.941495][ T4262] do_group_exit+0x21b/0x2d0 [ 1958.948058][ T4262] get_signal+0x1284/0x1330 [ 1958.954231][ T4262] arch_do_signal_or_restart+0xbc/0x830 [ 1958.961358][ T4262] exit_to_user_mode_loop+0x86/0x480 [ 1958.968225][ T4262] do_syscall_64+0x33e/0xf80 [ 1958.974385][ T4262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1958.982016][ T4262] INITIAL READ USE at: [ 1958.986342][ T4262] lock_acquire+0x106/0x350 [ 1958.992848][ T4262] _raw_read_lock_irqsave+0x48/0x60 [ 1959.000061][ T4262] kill_fasync+0x199/0x4d0 [ 1959.006604][ T4262] lease_break_callback+0x26/0x30 [ 1959.013640][ T4262] __break_lease+0x81c/0x1e00 [ 1959.020570][ T4262] do_dentry_open+0x1010/0x14e0 [ 1959.027415][ T4262] vfs_open+0x3b/0x340 [ 1959.034006][ T4262] path_openat+0x2e08/0x3860 [ 1959.040680][ T4262] do_file_open+0x23e/0x4a0 [ 1959.047441][ T4262] do_open_execat+0x12b/0x580 [ 1959.054734][ T4262] alloc_bprm+0x28/0x5c0 [ 1959.060996][ T4262] do_execveat_common+0x175/0x690 [ 1959.068114][ T4262] __x64_sys_execve+0x97/0xc0 [ 1959.074789][ T4262] do_syscall_64+0x15f/0xf80 [ 1959.081901][ T4262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1959.090237][ T4262] } [ 1959.093704][ T4262] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1959.102916][ T4262] ... acquired at: [ 1959.106818][ T4262] _raw_read_lock_irqsave+0x48/0x60 [ 1959.112303][ T4262] kill_fasync+0x199/0x4d0 [ 1959.117118][ T4262] evdev_pass_values+0x627/0xbd0 [ 1959.122339][ T4262] evdev_events+0x1e6/0x340 [ 1959.127123][ T4262] input_pass_values+0x288/0x890 [ 1959.132250][ T4262] input_event_dispose+0x330/0x6b0 [ 1959.137816][ T4262] input_inject_event+0x1dc/0x330 [ 1959.143224][ T4262] evdev_write+0x325/0x4c0 [ 1959.148099][ T4262] vfs_write+0x29a/0xb90 [ 1959.152736][ T4262] ksys_write+0x150/0x270 [ 1959.157445][ T4262] do_syscall_64+0x15f/0xf80 [ 1959.162341][ T4262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1959.168692][ T4262] [ 1959.171229][ T4262] [ 1959.171229][ T4262] stack backtrace: [ 1959.177320][ T4262] CPU: 0 UID: 0 PID: 4262 Comm: syz.0.9127 Tainted: G L syzkaller #0 PREEMPT(full) [ 1959.177344][ T4262] Tainted: [L]=SOFTLOCKUP [ 1959.177349][ T4262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1959.177357][ T4262] Call Trace: [ 1959.177365][ T4262] [ 1959.177371][ T4262] dump_stack_lvl+0xe8/0x150 [ 1959.177396][ T4262] __lock_acquire+0x2a94/0x2cf0 [ 1959.177421][ T4262] ? kill_fasync+0x199/0x4d0 [ 1959.177434][ T4262] lock_acquire+0x106/0x350 [ 1959.177452][ T4262] ? kill_fasync+0x199/0x4d0 [ 1959.177466][ T4262] ? do_raw_spin_lock+0x12b/0x2f0 [ 1959.177483][ T4262] _raw_read_lock_irqsave+0x48/0x60 [ 1959.177498][ T4262] ? kill_fasync+0x199/0x4d0 [ 1959.177511][ T4262] kill_fasync+0x199/0x4d0 [ 1959.177525][ T4262] ? kill_fasync+0x53/0x4d0 [ 1959.177538][ T4262] evdev_pass_values+0x627/0xbd0 [ 1959.177567][ T4262] ? evdev_pass_values+0x601/0xbd0 [ 1959.177582][ T4262] evdev_events+0x1e6/0x340 [ 1959.177594][ T4262] ? evdev_events+0x79/0x340 [ 1959.177606][ T4262] ? input_pass_values+0x8d/0x890 [ 1959.177617][ T4262] input_pass_values+0x288/0x890 [ 1959.177630][ T4262] ? input_handle_event+0x70c/0xf30 [ 1959.177648][ T4262] input_event_dispose+0x330/0x6b0 [ 1959.177666][ T4262] input_inject_event+0x1dc/0x330 [ 1959.177683][ T4262] ? input_inject_event+0xb5/0x330 [ 1959.177700][ T4262] evdev_write+0x325/0x4c0 [ 1959.177712][ T4262] ? __lock_acquire+0x6b5/0x2cf0 [ 1959.177731][ T4262] ? __pfx_evdev_write+0x10/0x10 [ 1959.177744][ T4262] ? bpf_lsm_file_permission+0x9/0x20 [ 1959.177761][ T4262] ? security_file_permission+0x75/0x260 [ 1959.177776][ T4262] ? rw_verify_area+0x255/0x4d0 [ 1959.177789][ T4262] ? __pfx_evdev_write+0x10/0x10 [ 1959.177802][ T4262] vfs_write+0x29a/0xb90 [ 1959.177823][ T4262] ? __pfx_vfs_write+0x10/0x10 [ 1959.177839][ T4262] ? __fget_files+0x2a/0x420 [ 1959.177857][ T4262] ? __fget_files+0x2a/0x420 [ 1959.177875][ T4262] ? __fget_files+0x3a0/0x420 [ 1959.177892][ T4262] ? __fget_files+0x2a/0x420 [ 1959.177911][ T4262] ksys_write+0x150/0x270 [ 1959.177925][ T4262] ? __pfx_ksys_write+0x10/0x10 [ 1959.177939][ T4262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1959.177953][ T4262] do_syscall_64+0x15f/0xf80 [ 1959.177969][ T4262] ? trace_irq_disable+0x3b/0x140 [ 1959.177984][ T4262] ? clear_bhb_loop+0x40/0x90 [ 1959.177998][ T4262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1959.178011][ T4262] RIP: 0033:0x7f88a3f9c819 [ 1959.178024][ T4262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1959.178036][ T4262] RSP: 002b:00007f88a4e73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1959.178052][ T4262] RAX: ffffffffffffffda RBX: 00007f88a4216270 RCX: 00007f88a3f9c819 [ 1959.178061][ T4262] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000006 [ 1959.178070][ T4262] RBP: 00007f88a4032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1959.178078][ T4262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1959.178086][ T4262] R13: 00007f88a4216308 R14: 00007f88a4216270 R15: 00007f88a433fa48 [ 1959.178099][ T4262]