last executing test programs: 5m44.718840668s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001780)={'bridge0\x00', &(0x7f0000001740)=@ethtool_channels={0x3c, 0x7f, 0x1ff, 0x3, 0x8ad3, 0xc, 0x932, 0x7, 0x5}}) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x18f883, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r2 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) fcntl$addseals(r2, 0x409, 0xe) ftruncate(r2, 0x8000000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r0}) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) 5m44.450653361s ago: executing program 1 (id=5): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x2000) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x20) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) chdir(&(0x7f0000000100)='./file0\x00') r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x2) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000900, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x11, r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f00000004c0)={0xa, 0xfffe, 0x3, @mcast2, 0x4}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0xe9b0, 0x99, 0x1, 0x8, 0x2}) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=ANY=[], 0x154}, 0x1, 0x0, 0x0, 0x40010}, 0x24048080) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f0000000280)={&(0x7f0000000140)=""/42, 0x2a, 0x775513f2, 0xfa68}) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000002800)=[0x0]) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000180)='`', 0x1, 0x0, &(0x7f0000000240)={0x3a, 0x11, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ipvlan0\x00', &(0x7f0000000380)=@ethtool_rxnfc={0x33, 0x11, 0x401, {0x6, @tcp_ip4_spec={@rand_addr=0x64010101, @local, 0x4e24, 0x4e20, 0xa}, {0x0, @broadcast, 0x101, 0x3, [0x2, 0x9]}, @hdata="5e03f8e97a79f6d1de41dc668d9cae0254b6d9efb81594ff5eb2d741a37a016742f0b3dab7fd28da414e7330934caa58180f3e3c", {0x0, @empty, 0x7, 0x8, [0x6, 0x2]}, 0xb0, 0x6}, 0x2, [0x8, 0x97]}}) syz_usb_connect(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902240001000000000904", @ANYRES32=r7], 0x0) 5m43.239631181s ago: executing program 1 (id=7): r0 = syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x8901) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000100001000200000005dcdf25070000001700000008000000", @ANYRES32, @ANYBLOB="0c00100006"], 0x2c}], 0x1}, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r3, 0x8}, &(0x7f00000000c0)=0x8) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f00000001c0)) clock_gettime(0x8, &(0x7f00000001c0)) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000100)={r4, 0x8}, 0x8) 5m43.100332676s ago: executing program 32 (id=7): r0 = syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x8901) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000100001000200000005dcdf25070000001700000008000000", @ANYRES32, @ANYBLOB="0c00100006"], 0x2c}], 0x1}, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r3, 0x8}, &(0x7f00000000c0)=0x8) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f00000001c0)) clock_gettime(0x8, &(0x7f00000001c0)) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000100)={r4, 0x8}, 0x8) 5m35.321745099s ago: executing program 3 (id=20): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x8) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x7, &(0x7f00000000c0)=ANY=[]) 5m33.430774653s ago: executing program 3 (id=21): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x18, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 5m33.293086351s ago: executing program 3 (id=23): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x40}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc2029440}, 0xc, &(0x7f0000000940)={&(0x7f0000000200)={0x710, 0x0, 0x5, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [{{0x254, 0x1, {{0x3, 0x9}, 0x0, 0x6f, 0x4d21, 0x5, 0x27, 'syz1\x00', "417e27fa193a7a484d88f98dd6eccb1771eefac2ac27e7ed2a8c89da0901c30c", "9e90eafa6504a8f362d6e4712396ea3b93745711271a7f1cb78d63a636c717bf", [{0x1000, 0x1, {0x2, 0xfffffff7}}, {0x0, 0x4, {0x3, 0x3}}, {0xe, 0xe3, {0x2, 0x3}}, {0x8, 0xc6c3, {0x1, 0x7fff}}, {0x47, 0x7fff, {0x0, 0x9}}, {0x5, 0x0, {0x1, 0xf}}, {0x3, 0x8, {0x1, 0x6}}, {0x3ff, 0x9, {0x0, 0x80}}, {0x2, 0x983, {0x1, 0x4}}, {0xf4b9, 0xf4, {0x2, 0x9}}, {0x6, 0x0, {0x1, 0x2}}, {0x1, 0x2, {0x1, 0x1ff}}, {0x0, 0x0, {0x3, 0x1}}, {0x2734, 0xa, {0x1, 0x401}}, {0xd, 0x81, {0x2, 0x3ff}}, {0x1, 0x3, {0x2, 0x6}}, {0xfffb, 0xc70c, {0x0, 0x4}}, {0x8, 0x81, {0x1, 0x40}}, {0x7, 0x95e, {0x2, 0xb}}, {0x1, 0x7e, {0x0, 0x7}}, {0x3, 0xf26, {0x3, 0x1}}, {0x5, 0x6, {0x1, 0x5}}, {0xfff, 0x4, {0x1, 0x4}}, {0x9, 0x451, {0x1, 0x80000000}}, {0xcfd7, 0x6, {0x1, 0xffff}}, {0x7fff, 0x4, {0x3, 0x3}}, {0x0, 0x9, {0x2, 0x612}}, {0x8, 0xb, {0x3, 0x8}}, {0x2, 0x5, {0x1, 0xff}}, {0x81, 0x200, {0x3}}, {0x7, 0x2, {0x3}}, {0x1, 0x2168, {0x0, 0x11}}, {0xfffb, 0x0, {0x0, 0x81}}, {0x69, 0x4b, {0x1, 0xfffff001}}, {0x0, 0x1, {0x0, 0x3c61}}, {0x4, 0x5, {0x1, 0x8}}, {0xe0, 0x8, {0x3, 0x800}}, {0x90cf, 0x5, {0x1, 0xeac3}}, {0x1, 0x1, {0x3, 0x9fbf}}, {0x6, 0x2, {0x0, 0xe43}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x9, 0x2, 0x6, 0xe90e, 0x2, 'syz1\x00', "1a1f62a5dbfe49ad6e3ffe1139222165d441ec1f49b6c331d072fad99fa08753", "abc29dddf57a54bea6d08a642343b4eeb30cc64e69e1116eec404b507cdba3eb", [{0x4, 0xc, {0x0, 0x6}}, {0x2, 0x4, {0x0, 0x87bb}}, {0x40, 0xe4fe, {0x1, 0x1}}, {0x40, 0x2, {0x0, 0x7}}, {0x2, 0x3, {0x1, 0x53ab}}, {0xb46, 0x2, {0x1, 0xc}}, {0x4, 0x3, {0x0, 0x5}}, {0x3, 0x2, {0x2, 0x5}}, {0x74, 0x1, {0x1, 0xfffffffd}}, {0x1000, 0xf6, {0x1, 0x401}}, {0x0, 0x1, {0x0, 0xe}}, {0xc60f, 0x8000, {0x2, 0x6}}, {0x40, 0x5, {0x2, 0x2}}, {0x6, 0x7, {0x0, 0x100}}, {0x96f, 0x2, {0x3}}, {0x6, 0x0, {0x2, 0x7}}, {0x400, 0x7, {0x3, 0x40}}, {0x8001, 0x3, {0x2, 0x6}}, {0x6, 0x9, {0x3, 0x5}}, {0x7, 0x2, {0x1, 0x1}}, {0xfff, 0x5, {0x1, 0x8}}, {0x5, 0x2, {0x3, 0x7}}, {0x0, 0x7fff, {0x3, 0xf4}}, {0x8, 0x8, {0x0, 0xff}}, {0x1, 0x311}, {0x4, 0x0, {0x3}}, {0xbfa7, 0x1, {0x0, 0x8}}, {0x7, 0x2, {0x1, 0xbc7e}}, {0xfff8, 0x9}, {0x7, 0x7, {0x3, 0x2}}, {0x2, 0x8001, {0x0, 0x2}}, {0x2, 0x5, {0x2, 0x9}}, {0xa, 0xff, {0x0, 0xfffffffc}}, {0x41, 0x8001, {0x3, 0x9}}, {0x9, 0xed7, {0x0, 0x4}}, {0x8, 0xffff, {0x3, 0x7fffffff}}, {0x0, 0x101, {0x1, 0x7}}, {0x8, 0x100, {0x0, 0x92}}, {0x0, 0xe9, {0x3, 0xd1}}, {0x40, 0x2, {0x2, 0xd}}]}}}, {{0x254, 0x1, {{0x2, 0x9}, 0xf3, 0x1, 0x84eb, 0xe41a, 0x22, 'syz1\x00', "1117190f0829fb5e30835e8e0adf001f8e7cbd5bf0e9d1834b478d46a3e9915a", "a0c6aa9bbd99fdfe43c032c379e6ca6713e823754c64a23621d24cd5bf1d789c", [{0x2, 0x7, {0x2, 0x9078}}, {0x8, 0x3, {0x3, 0x800}}, {0x5, 0x0, {0x1, 0xfffff001}}, {0x5c92, 0x100, {0x0, 0x2}}, {0x4, 0x1, {0x0, 0xfffffffb}}, {0x8, 0x3, {0x1, 0x9470}}, {0x7fff, 0x9, {0x3, 0xfffffff7}}, {0x8, 0x98c, {0x3, 0x522faae0}}, {0x1, 0xffff, {0x0, 0x6d}}, {0xc, 0x7, {0x0, 0x8001}}, {0xffff, 0x3, {0x0, 0x3}}, {0x7, 0x9, {0x3, 0x1}}, {0x5, 0x3, {0x3, 0x7}}, {0x1ff, 0x1, {0x0, 0x8}}, {0x5, 0x4}, {0xa, 0x2, {0x1, 0x46c}}, {0x4, 0x7, {0x1}}, {0x7, 0x2, {0x1, 0x80}}, {0xe, 0x5, {0x2866a05a32f450e9, 0x8}}, {0x6, 0x2, {0x0, 0x4}}, {0x9, 0x68f7, {0x2, 0x5}}, {0x7f, 0x8, {0x1, 0x80}}, {0x8, 0xe, {0x3, 0x6}}, {0x7, 0x3, {0x2, 0x5}}, {0xa3e4, 0x1, {0x1, 0xeb}}, {0x0, 0x89ca, {0x3, 0x1}}, {0x6, 0x8, {0x1675abc766aa78bb, 0x1}}, {0x2, 0xfffd, {0x0, 0x3}}, {0x2, 0x4000, {0x3, 0x5}}, {0x4, 0x1, {0x3, 0x5}}, {0x842, 0x3ff, {0x3, 0xc}}, {0x3, 0x6, {0x0, 0x17c1}}, {0x7, 0x81, {0x3, 0x3198}}, {0x8001, 0x50c, {0x1, 0x2}}, {0x7, 0x0, {0x2, 0xcdc3}}, {0x7, 0x100, {0x1, 0x27b}}, {0xa50, 0x2, {0x0, 0x500000}}, {0x4, 0x9e75, {0x3}}, {0xffff, 0xc97f, {0x3, 0x4}}, {0x9, 0x7, {0x1, 0x30b}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000000) 5m33.120339944s ago: executing program 3 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001780)={'bridge0\x00', &(0x7f0000001740)=@ethtool_channels={0x3c, 0x7f, 0x1ff, 0x3, 0x8ad3, 0xc, 0x932, 0x7, 0x5}}) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x18f883, 0x0) 5m31.580775322s ago: executing program 3 (id=27): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xf7) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x3000c11, &(0x7f0000000080)=ANY=[@ANYBLOB="6d706f6c3d6900000000656176653d726569617469cb6b73e80d19edac00"]) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x20, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$inet(0x2, 0x3, 0x8) socket$inet6_icmp(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', @random='\x00\x00\x00\x00\x00 '}) r2 = epoll_create1(0x80000) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffffff, 0x8080) ioctl$DRM_IOCTL_MODE_GETGAMMA(r5, 0xc02064a4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = getpgrp(0x0) fcntl$lock(r2, 0x6, &(0x7f0000000040)={0x1, 0x3, 0x57, 0x4, r7}) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r6], 0x7) 5m30.231538286s ago: executing program 3 (id=31): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x11d, 0x8, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x3, 0x72, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) setresuid(0xee00, 0xee00, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x96, 0xd) 5m29.660220464s ago: executing program 33 (id=31): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x11d, 0x8, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x3, 0x72, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) setresuid(0xee00, 0xee00, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x96, 0xd) 5m11.289095786s ago: executing program 5 (id=32): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x18, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 5m11.054826939s ago: executing program 5 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x18f883, 0x0) 5m10.924759189s ago: executing program 5 (id=59): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m9.906944538s ago: executing program 5 (id=62): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x2, 0x3}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r2}, 0x0) landlock_restrict_self(r1, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x50, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x54}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x17, 0x13, [{0x6c, 0x1}, {0x6c}, {0x6c, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x1}, {0x1b, 0x1}, {0x16}, {0x4}, {0x16, 0x1}, {0x24, 0x1}, {0x12, 0x1}, {0x3, 0x1}, {0x1}, {0x30}, {0x24, 0x1}, {0xb, 0x1}, {0xc}, {0x12}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c009900010000002b778b93f507b15e51000000"], 0x30}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 5m9.223243815s ago: executing program 34 (id=62): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x2, 0x3}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r2}, 0x0) landlock_restrict_self(r1, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x50, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x54}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x17, 0x13, [{0x6c, 0x1}, {0x6c}, {0x6c, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x1}, {0x1b, 0x1}, {0x16}, {0x4}, {0x16, 0x1}, {0x24, 0x1}, {0x12, 0x1}, {0x3, 0x1}, {0x1}, {0x30}, {0x24, 0x1}, {0xb, 0x1}, {0xc}, {0x12}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c009900010000002b778b93f507b15e51000000"], 0x30}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 1m21.934818251s ago: executing program 4 (id=1022): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0x1b, 0x35, 0x38, 0x40, 0xc0b, 0xa109, 0x7747, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x80, 0x27, "", [{{0x9, 0x4, 0x68, 0x0, 0x0, 0x1c, 0x8a, 0x29, 0x2e}}]}}]}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xb2) 1m21.293966211s ago: executing program 4 (id=1024): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fc, &(0x7f0000000900)={'bond0\x00', @broadcast}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) setrlimit(0xd, &(0x7f0000000080)={0xe9a6, 0x12a581d}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)="97"}) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x1) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write(r3, &(0x7f0000000fc0), 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x4}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}, 0x9}) connect$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r4 = syz_usb_connect(0x0, 0x1cb, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac2(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$uac2(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, 0x0, 0x0) 1m20.701132683s ago: executing program 4 (id=1028): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="03040000b50000"], 0xc8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'vlan0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e34, @multicast2}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x80010, 0xffffffffffffffff, 0x2000) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f00000000c0)=0x4, 0x4) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000100)=0xc) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @none, 0xb}, 0x68) shutdown(r3, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r6 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xa9, 0x79, 0xb5, 0x20, 0xe41, 0x4159, 0xb8da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xd1, 0x50, 0x60, "", [{{0x9, 0x4, 0x0, 0x1, 0x0, 0x25, 0x1c, 0xde, 0x2}}]}}]}}, 0x0) syz_usb_disconnect(r6) r7 = syz_open_dev$dri(&(0x7f0000000140), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r7, 0xc02064a5, &(0x7f0000000180)={r8, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/softnet_stat\x00') pread64(r9, &(0x7f0000000500)=""/195, 0xc3, 0x9e) r10 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0xeb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xf0, 0x8, 0x8d}}]}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffff55, 0x0, 0x1}) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000180)=0xc4, 0x1) syz_usb_control_io(r10, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007000010600000000000000000700000047"], 0x18}], 0x1}, 0x0) 1m17.507808843s ago: executing program 4 (id=1040): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRES32, @ANYRESDEC, @ANYRES8=r0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f", @ANYRES8, @ANYRES32, @ANYBLOB="140002", @ANYBLOB="b39487ce57695430d927980302b4cc2b384450befffac2d74e7f09b6eab8c401b0270bb64370f5fc9f059290abcd02c1860493cba1de7bc6ecd12ca51b7f564258f5bc71ac337e17056a4d604089fe4d62de21aa1ee9fefcdcea14be7cde39bb656366e22a822683b1bb74b6fbb7f2dcb69c2b50c1334eeecfa3d0a988a5895abed7957094d895633afad1c60579108c2b4412c236e0d4c239bccce62ecdc23fd0635f55c59f50a4ea45a6a088601fbae2f9c14766de23884b7dd405"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) setreuid(0x0, 0xee00) setpriority(0x1, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001080)='/sys/power/sync_on_suspend', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000002c80)={0x30}, 0x30) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) r5 = accept4(r2, 0x0, 0x0, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000003f00090000000000000800000300000004000000100001800c1a108004", @ANYRES8=r6], 0x28}, 0x1, 0x0, 0x0, 0x83b9073f6f60a11d}, 0x4) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) ppoll(&(0x7f0000000300)=[{r4, 0x88}, {r7, 0x1}, {r5, 0x120}, {r4, 0x40}, {r3, 0x378}, {r3, 0x4}, {r7, 0x2600}, {r3, 0x8}, {r3, 0x8104}], 0x9, &(0x7f0000000500)={0x0, 0x989680}, &(0x7f0000000540)={[0x2]}, 0x8) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYRESDEC=r1], 0x6f4}}, 0x0) 1m17.441549253s ago: executing program 4 (id=1041): kexec_load(0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b", 0xa4, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf998", 0xe0, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m16.411183594s ago: executing program 4 (id=1044): socket$igmp(0x2, 0x3, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x1, 0x3) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, 0x0, 0xffffffffffffff02) 1m15.869823206s ago: executing program 35 (id=1044): socket$igmp(0x2, 0x3, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x1, 0x3) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, 0x0, 0xffffffffffffff02) 5.731757295s ago: executing program 2 (id=1577): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f00000fd000/0x4000)=nil, 0x4000, 0x4000009, 0x12, r1, 0x0) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, 0x0) 5.624888476s ago: executing program 2 (id=1578): keyctl$setperm(0x5, 0x0, 0x2000) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x80082102, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae03, 0xa4) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14"]) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x3}, 0x8) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000180)={@my=0x1, 0x1}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x6, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x1, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) r8 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) mount$9p_fd(0x0, 0x0, 0x0, 0x100000, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x14, 0x36, 0x117, 0xfffffffc, 0x814000, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8a}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x24040010}, 0x20004841) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0xfffffffa}) 4.140000608s ago: executing program 2 (id=1591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES8=r1, @ANYRES32, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f7475", @ANYRES8, @ANYRES8, @ANYRES32, @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) syz_usb_connect(0x2, 0x604, &(0x7f0000001400)={{0x12, 0x1, 0x110, 0x90, 0xc0, 0xe6, 0x10, 0x8ca, 0x21, 0x5d22, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f2, 0x2, 0x2e, 0x7f, 0x10, 0x7, "", [{{0x9, 0x4, 0x8a, 0x38, 0xc, 0x87, 0x69, 0xf, 0x4, [], [{{0x9, 0x5, 0x3, 0x0, 0x208, 0x8, 0x1, 0x5, [@generic={0x2d, 0x23, "6781ca3dac911c9cd05f94b02a13a02eca958b9a88a948ff91e0deb64c87662c1976970b74db58f9b6bab9"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3bf, 0x4, 0x5, 0xd4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x4d5}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x4}]}}, {{0x9, 0x5, 0x1a, 0x0, 0x10, 0x2, 0x7, 0x1}}, {{0x9, 0x5, 0xd, 0x10, 0x7f7, 0x9, 0x9, 0xff}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x6, 0xae, 0x0, [@generic={0xfc, 0x11, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x8}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0xf2, 0x2, 0x0, [@generic={0x8a, 0xc, "0e85a9571232b6f39c5302838374f5a97f05bbcac4da3c3415130981e5590907e77ad38344c0f842b6748406e5a1f066537f7e150afc7529f321fe6ac6faacc9017d4f006625e4aadcd5093ceaaa7317491a73cd19422a5326774211c9344c72a91368266d00cc9c30def7f7056f775e242e31b2b4f521cc5f4d36e748ed4beb6d87345059b45bbb"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x20, 0x8, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9b, 0x80}]}}, {{0x9, 0x5, 0x2, 0x4, 0x400, 0x9, 0xe, 0x0, [@generic={0x77, 0x21, "dcff905b25168f836ccca9ed8cd2eb00c6c01538477c8b6092d4da35c1386d3760a5dfc152ce94a403a352370acbf65938617c6268253f265d93bd0582003f41868568bcb86d5c8abc567107a8531d1b3384318d8de849e04d55f1a3e98f8e3e492ded668eb83c2de943fb5c74d98e248d22221c77"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x83}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x0, 0x1, 0x9}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x9b, 0xb3, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x2, 0xc, 0x7, [@generic={0x2f, 0x9, "18a65b4800c56877924421fff00cb811e0e3b221285f73253efcdba59f2893e25263255e59ec7d958e2eba0771"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x3, 0x18, 0x4, [@generic={0x57, 0xc, "5f5d6892402f8efbdd4682061d1741003bf3536a08ba7a19d0e177d8502ab82e89a0c09f3c7ca05775275e8437bd4ee8b82a69f57043fd4c7d41cee2960b08f6a56138c60ad997dc35b0526c341760761e6d317406"}, @generic={0xba, 0xe, "90b7f913ecfd5071c275b1f2a0297d746bc317ad30833aa7691d9b6baccf74783d15f87ecaa7f099006b088a997c07ce11f2bf1079dc7f36393ed7423a1fa0ac0202702d2c9a21b54d5348f81e11a45baa2076c64e3beb71c682739866ea77288e23c34ab3144fda0cd79cf3128b8cc9c4fd769e20b05b38189d48cc4bd26f1c26b860a5d1299a8030ce6ef29fcb5e7930f15c2a5501a3101bd4842a437632edf202a2933317bcd9bb5b0eb463d3b725654a7d3d85899576"}]}}]}}, {{0x9, 0x4, 0xbf, 0x8, 0x8, 0xff, 0x68, 0x64, 0x0, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "a6"}, {0x5, 0x24, 0x0, 0xff80}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x6, 0x32}, {0x6, 0x24, 0x1a, 0xfff8}}], [{{0x9, 0x5, 0xc, 0x3, 0x20, 0x9, 0x5, 0x4, [@generic={0xd8, 0xb, "fb35dd9dc6b4199a812e67c7a2582aa6666cb123ea657a10443af3029b5f326f4c92cb13f02f36b906673fe9c61a55f51057b64661c0738f8f60afda5615884899f280c15d0309c6027a334cff8937b7d6a27f92ca20650ec06b7e79b7e6806a6eafe4dcea9f6ba88482784f5722c25dfb8a8b4dda738f7a210c67ea59038b466bcb605095fdf77cf52b34b75b85a4f13d68807c3dfaf1392bdfa64a944e4aa3589c8e4f1edd5affc01ce49709186ca69df8afd473c046cc895985bb464106f611ce1865058e6cd8261b5c7cc61a4a9f907e9160bdd3"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xa, 0x4, 0x9d, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0x2}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x8, 0x0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x10, 0x8}, @generic={0x5a, 0x30, "1737683b114ae9b0668b11dd34e3bb8fb0654b125e48e547f22a04248c508a4117323c3a7ac0c48bb2b5c99ac2b96aecca31b7e18c81ada3ddf5168d9a87dfd8d24bf32d29d947ffb1925723a307356d5899fdb7a7769b26"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x7, 0x0, 0x2f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x979}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x73a}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x6a, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0x6}]}}, {{0x9, 0x5, 0x5, 0x3, 0x3cf, 0xd9, 0x1, 0xff}}, {{0x9, 0x5, 0x8, 0x5, 0x40, 0x5, 0x3, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xae, 0x1}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x4, 0x3, 0x8}}]}}]}}]}}, &(0x7f0000001cc0)={0xa, &(0x7f0000001a40)={0xa, 0x6, 0x110, 0x1, 0x7, 0xe4, 0x40, 0x48}, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="0a1003020000a078c534e0966c0af4759d87a65dac70813ad565f68112f5ffffffffffffdf55fe95172cd8a6d1bdf1cbd1705671d099e1b8cedf242d9fc33b427e11beb815c35e0542abe1687eb17e9ecdab69997194e756fce0e453893916d81f5018a55ffe0eedad96c9a30313074c7d90c86288aba6d92215dd5eb9db90160208000000cc53f6b7c5f23bfa40a72b83c620"], 0x6, [{0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x380a}}, {0x97, &(0x7f0000001b00)=@string={0x97, 0x3, "9e546a492dce68a84ed2696e0fe0488196b4650132478676ac84930c06656b59c8f2dbabbfd43647ec42cdfb3d83958374a9cfa1c88955322ae56d8e4344ab5dc8e86fe310954f730c4edcbdd1b5a26f3eb82d1596e8d3af2b0bd7e64b98109276eebd5f5a6131cef2a613f10897694dbc1fc01a7ec5491f90a27d3f7d5d1c088fcef9b2e0556c31e656f81cd142102054c8c37a82"}}, {0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000001c00)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000001c40)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x4ff}}]}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.015315013s ago: executing program 0 (id=1592): kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b", 0xa4, 0x5, 0xff}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041c780b7caed48", 0x34, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.321654475s ago: executing program 0 (id=1593): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0xffffffffff600000, &(0x7f0000afaf0a)=""/246) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000240)="41d09292b4f9bada89cd637b86dd", 0x36, 0x40000, &(0x7f0000000200)={0x11, 0x17, r3, 0x1, 0x4, 0x6, @multicast}, 0x14) munmap(&(0x7f0000f0b000/0xa000)=nil, 0xa000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200040100000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 3.195936659s ago: executing program 0 (id=1594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200040100000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) (fail_nth: 4) 3.161828614s ago: executing program 0 (id=1595): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f00000fd000/0x4000)=nil, 0x4000, 0x4000009, 0x12, r2, 0x0) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, 0x0) 3.111457645s ago: executing program 0 (id=1596): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0xfffffffffffffff6) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) r1 = syz_usb_connect$uac2(0x0, 0xf2, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x3, 0x1, 0xff, 0x60, 0x8, {0x8, 0xb, 0x2, 0x1, 0x1, 0x4, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x101, 0x5, 0x3f, 0x8}, [@effect_unit={0x11, 0x24, 0x7, 0x6, 0x2, 0x6, [0x0, 0x2, 0x3, 0x0, 0x1]}, @processing_unit={0xb, 0x24, 0x8, 0x5, 0x4, [0x2, 0x1, 0x1]}, @extension_unit={0x8, 0x24, 0x9, 0x1, 0x3, 0x28, "92"}, @extension_unit={0xb, 0x24, 0x9, 0x6, 0xf, 0x7, "d19cdb24"}, @multiply_unit={0x7, 0x24, 0xc, 0x8, 0x2, 0x28}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x71}, @as_header={0x10, 0x24, 0x1, 0x5, 0x7, 0x1, 0x2, 0x45, 0x4, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x7e, 0x81, {0x8, 0x25, 0x1, 0x3, 0x3, 0x4e, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x401, 0xd, 0x68}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0xf, 0x5, 0x6, 0x5}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x1, 0x4, 0x9, 0x6, "61d6"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4, 0x3, 0x9, "f760cf2b7c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xd5, 0xa, 0x5, {0x8, 0x25, 0x1, 0x0, 0x0, 0x8, 0xecc}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x0, 0x9, 0x8, 0x40, 0x2}, 0xf, &(0x7f0000000240)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0xff, 0x8, 0x4}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x410}}]}) syz_usb_control_io$uac2(r1, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x0, 0x5, 0xb8, {0xb8, 0x22, "df6711b40984b71e9a0e8dc7caf63a029039eceabafb74dcb7affb7b9f5383dd2c42ae164e70e250c7f3b2b609ea593c6c2e2603e09ea5e41f49cfcda24bd47a3c1a96a6c6b2bf02b3303628c46f46fbf2163a92f1d95c91924e229e9edb668c8e9b6ec263ac6bbb4c5338c3970ea9a771384791c947098c2814d9a424a4300dde1fbf7063cacbb5094a4c7d550a37e03472f32480cbd148e9ac3b8850d8e53f3f07974a85d08ebcb203744cb0fd27556fa16ce60535"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f0000000700)={0x44, &(0x7f0000000440)={0x40, 0x3, 0xe7, "a592e508ba5a7d5b9dd2b06c96a3217880d737211de825d8066f30172e34216c9c9ef539cd064a3845f8523686faca4ecc30634ebe36c7f216cf2b82bcf91674ca8583c082d8c774ba72424c1f33a0e9337e5ab8708d3a8ff784eadc365e7532ca62113bfd99edf34cdac721c4974cc1c5dec56ea0f9e0787f8de944d6bc67d97fb7d51fdd630fd142d7f821badcb340e9a9290cfc44ff204d9249370c1eb67846e43b02090e1e7482f1137fcd3240ba87a6455789b3728d43ce6cb7fc279bf3eafc33864f64a37b80188f18d65f4ea3b02e485e39c89fee1709278bad2c49fe891195e6969dfc"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xa}, &(0x7f00000005c0)={0x20, 0x81, 0x1, "d1"}, &(0x7f0000000600)={0x20, 0x82, 0x1, "f7"}, &(0x7f0000000640)={0x20, 0x83, 0x1, "f2"}, &(0x7f0000000680)={0x20, 0x84, 0x4, "a4a83005"}, &(0x7f00000006c0)={0x20, 0x85, 0x3, "84f203"}}) 2.871991487s ago: executing program 2 (id=1597): sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0xe4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xd0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xd64df33832dd637a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)=')\'!^\'*}\x00', 0x420000, &(0x7f0000000040)={@align=0x3, {0x5, 0xffff, 0x4, 0x6}}, 0xe7b, &(0x7f0000000080), &(0x7f00000000c0)=0x3}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', 0x7}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001b80), r1) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c00)={0x1c, r3, 0x101, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r3, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x40) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000a00)={0x28, r5, 0x200, 0x78bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xf, 0x3e}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2.664374052s ago: executing program 2 (id=1601): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000180), 0x0, 0x400c3) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @ofdm={0x6, 0x11, 0x1b, 0xf, 0x5, 0xa, 0x4}}) (fail_nth: 3) 2.660923178s ago: executing program 7 (id=1602): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @none={0x0, 0x1}}, 0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000120001"], 0x2c}], 0x1, 0x0, 0x0, 0x8001}, 0x84000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r3, 0x400454d1, 0x110c230004) r4 = socket$nl_generic(0x10, 0x3, 0x10) connect$802154_dgram(r0, &(0x7f0000000480)={0x24, @none={0x0, 0x3}}, 0x14) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, r4, {0x92f4}}, './file0\x00'}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x42082, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='}\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ac14141d0000000000000000100001006574683a6e65747063693000"], 0x54}}, 0x44000) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000080)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r9, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0xffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0xffffffff}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$EXT4_IOC_SETFSUUID(r7, 0x4008662c, &(0x7f0000000780)={0x10, 0x0, "7bc51a240d9742675e2201d78eb5fc67"}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000027bd7000ffdbdf251200000008000300", @ANYRES32=r11, @ANYBLOB="200011800400060004000100040003000400070004000500040006000400010005290006000000050074000200"/56], 0x54}}, 0xee050f739307cc54) socket$kcm(0x2, 0xa, 0x2) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x274) 2.355956979s ago: executing program 2 (id=1603): kexec_load(0x3, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a", 0xa0, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10", 0xa8, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041c780b7caed488a35c2a00906fbd0e2", 0x3d, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0fd6b9bd0eac6bea1", 0xee, 0x5, 0x6}], 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477", 0x34}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78ad", 0x59}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000140)={0x1, 0xfe, 0x8, &(0x7f0000000340)={0x17, "736ad373c2bf272690bb713bd646baa5088d400040d1f9ee96646faa2155462c86"}}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x1000000) 2.350713724s ago: executing program 7 (id=1604): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f00000fd000/0x4000)=nil, 0x4000, 0x4000009, 0x12, r2, 0x0) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, 0x0) 2.310911888s ago: executing program 7 (id=1605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES8=r1, @ANYRES32, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f7475", @ANYRES8, @ANYRES8, @ANYRES32, @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) syz_usb_connect(0x2, 0x604, &(0x7f0000001400)={{0x12, 0x1, 0x110, 0x90, 0xc0, 0xe6, 0x10, 0x8ca, 0x21, 0x5d22, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f2, 0x2, 0x2e, 0x7f, 0x10, 0x7, "", [{{0x9, 0x4, 0x8a, 0x38, 0xc, 0x87, 0x69, 0xf, 0x4, [], [{{0x9, 0x5, 0x3, 0x0, 0x208, 0x8, 0x1, 0x5, [@generic={0x2d, 0x23, "6781ca3dac911c9cd05f94b02a13a02eca958b9a88a948ff91e0deb64c87662c1976970b74db58f9b6bab9"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3bf, 0x4, 0x5, 0xd4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x4d5}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x4}]}}, {{0x9, 0x5, 0x1a, 0x0, 0x10, 0x2, 0x7, 0x1}}, {{0x9, 0x5, 0xd, 0x10, 0x7f7, 0x9, 0x9, 0xff}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x6, 0xae, 0x0, [@generic={0xfc, 0x11, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x8}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0xf2, 0x2, 0x0, [@generic={0x8a, 0xc, "0e85a9571232b6f39c5302838374f5a97f05bbcac4da3c3415130981e5590907e77ad38344c0f842b6748406e5a1f066537f7e150afc7529f321fe6ac6faacc9017d4f006625e4aadcd5093ceaaa7317491a73cd19422a5326774211c9344c72a91368266d00cc9c30def7f7056f775e242e31b2b4f521cc5f4d36e748ed4beb6d87345059b45bbb"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x20, 0x8, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9b, 0x80}]}}, {{0x9, 0x5, 0x2, 0x4, 0x400, 0x9, 0xe, 0x0, [@generic={0x77, 0x21, "dcff905b25168f836ccca9ed8cd2eb00c6c01538477c8b6092d4da35c1386d3760a5dfc152ce94a403a352370acbf65938617c6268253f265d93bd0582003f41868568bcb86d5c8abc567107a8531d1b3384318d8de849e04d55f1a3e98f8e3e492ded668eb83c2de943fb5c74d98e248d22221c77"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x83}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x0, 0x1, 0x9}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x9b, 0xb3, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x2, 0xc, 0x7, [@generic={0x2f, 0x9, "18a65b4800c56877924421fff00cb811e0e3b221285f73253efcdba59f2893e25263255e59ec7d958e2eba0771"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x3, 0x18, 0x4, [@generic={0x57, 0xc, "5f5d6892402f8efbdd4682061d1741003bf3536a08ba7a19d0e177d8502ab82e89a0c09f3c7ca05775275e8437bd4ee8b82a69f57043fd4c7d41cee2960b08f6a56138c60ad997dc35b0526c341760761e6d317406"}, @generic={0xba, 0xe, "90b7f913ecfd5071c275b1f2a0297d746bc317ad30833aa7691d9b6baccf74783d15f87ecaa7f099006b088a997c07ce11f2bf1079dc7f36393ed7423a1fa0ac0202702d2c9a21b54d5348f81e11a45baa2076c64e3beb71c682739866ea77288e23c34ab3144fda0cd79cf3128b8cc9c4fd769e20b05b38189d48cc4bd26f1c26b860a5d1299a8030ce6ef29fcb5e7930f15c2a5501a3101bd4842a437632edf202a2933317bcd9bb5b0eb463d3b725654a7d3d85899576"}]}}]}}, {{0x9, 0x4, 0xbf, 0x8, 0x8, 0xff, 0x68, 0x64, 0x0, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "a6"}, {0x5, 0x24, 0x0, 0xff80}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x6, 0x32}, {0x6, 0x24, 0x1a, 0xfff8}}], [{{0x9, 0x5, 0xc, 0x3, 0x20, 0x9, 0x5, 0x4, [@generic={0xd8, 0xb, "fb35dd9dc6b4199a812e67c7a2582aa6666cb123ea657a10443af3029b5f326f4c92cb13f02f36b906673fe9c61a55f51057b64661c0738f8f60afda5615884899f280c15d0309c6027a334cff8937b7d6a27f92ca20650ec06b7e79b7e6806a6eafe4dcea9f6ba88482784f5722c25dfb8a8b4dda738f7a210c67ea59038b466bcb605095fdf77cf52b34b75b85a4f13d68807c3dfaf1392bdfa64a944e4aa3589c8e4f1edd5affc01ce49709186ca69df8afd473c046cc895985bb464106f611ce1865058e6cd8261b5c7cc61a4a9f907e9160bdd3"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xa, 0x4, 0x9d, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0x2}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x8, 0x0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x10, 0x8}, @generic={0x5a, 0x30, "1737683b114ae9b0668b11dd34e3bb8fb0654b125e48e547f22a04248c508a4117323c3a7ac0c48bb2b5c99ac2b96aecca31b7e18c81ada3ddf5168d9a87dfd8d24bf32d29d947ffb1925723a307356d5899fdb7a7769b26"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x7, 0x0, 0x2f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x979}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x73a}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x6a, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0x6}]}}, {{0x9, 0x5, 0x5, 0x3, 0x3cf, 0xd9, 0x1, 0xff}}, {{0x9, 0x5, 0x8, 0x5, 0x40, 0x5, 0x3, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xae, 0x1}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x4, 0x3, 0x8}}]}}]}}]}}, &(0x7f0000001cc0)={0xa, &(0x7f0000001a40)={0xa, 0x6, 0x110, 0x1, 0x7, 0xe4, 0x40, 0x48}, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="0a1003020000a078c534e0966c0af4759d87a65dac70813ad565f68112f5ffffffffffffdf55fe95172cd8a6d1bdf1cbd1705671d099e1b8cedf242d9fc33b427e11beb815c35e0542abe1687eb17e9ecdab69997194e756fce0e453893916d81f5018a55ffe0eedad96c9a30313074c7d90c86288aba6d92215dd5eb9db90160208000000cc53f6b7c5f23bfa40a72b83c620"], 0x6, [{0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x380a}}, {0x97, &(0x7f0000001b00)=@string={0x97, 0x3, "9e546a492dce68a84ed2696e0fe0488196b4650132478676ac84930c06656b59c8f2dbabbfd43647ec42cdfb3d83958374a9cfa1c88955322ae56d8e4344ab5dc8e86fe310954f730c4edcbdd1b5a26f3eb82d1596e8d3af2b0bd7e64b98109276eebd5f5a6131cef2a613f10897694dbc1fc01a7ec5491f90a27d3f7d5d1c088fcef9b2e0556c31e656f81cd142102054c8c37a82"}}, {0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000001c00)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000001c40)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x4ff}}]}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 993.164235ms ago: executing program 7 (id=1607): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TCSETS(r0, 0x40204706, 0x0) 938.585099ms ago: executing program 7 (id=1608): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "85bd7a991f8cec55", "39fd98ec2a307aba168aa14121a091f2", '\x00', "67a9595b52354cc8"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) (fail_nth: 4) 515.776447ms ago: executing program 7 (id=1609): socket$kcm(0x23, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r1 = socket$pptp(0x18, 0x1, 0x2) io_submit(r0, 0x1, &(0x7f0000001200)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_getevents(r0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 337.153598ms ago: executing program 6 (id=1612): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) r1 = fsopen(&(0x7f0000000340)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x49) lseek(r3, 0x2, 0x1) getdents(r3, &(0x7f0000000440)=""/187, 0x76) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 334.521463ms ago: executing program 6 (id=1613): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f00000fd000/0x4000)=nil, 0x4000, 0x4000009, 0x12, r1, 0x0) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, 0x0) 286.337104ms ago: executing program 6 (id=1614): kexec_load(0x3, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04", 0xa5, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf998", 0xe0, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041c780b7caed488a35c2a00906fbd0e2fa", 0x3e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0fd6b9bd0eac6bea1", 0xee, 0x5, 0x6}], 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78ad", 0x59}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000140)={0x1, 0xfe, 0x8, &(0x7f0000000340)={0x17, "736ad373c2bf272690bb713bd646baa5088d400040d1f9ee96646faa2155462c86"}}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x1000000) 227.873646ms ago: executing program 6 (id=1615): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) r1 = userfaultfd(0x80001) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2720, &(0x7f0000019580)=""/102397, &(0x7f0000000040)=0x18ffd) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/62, 0x1350000, 0x1800, 0x65, 0x1}, 0x20) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000100)={0x62, @multicast1, 0x4e20, 0x1, 'lblc\x00', 0x4, 0x4f, 0x1d}, 0x2c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) setresuid(0x0, 0xee01, 0x0) 127.878513ms ago: executing program 6 (id=1616): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/205, 0xcd}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) (fail_nth: 4) 52.754274ms ago: executing program 0 (id=1617): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00009ce000/0x3000)=nil, 0x3000, 0x0, 0x5, 0x20) r0 = socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x6, 0xc) (async) splice(r1, 0x0, r2, 0x0, 0x6, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 0s ago: executing program 6 (id=1618): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0105b08, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="b4f7878b6c8bc3916f9bc6004301000000000003000000"], 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3828444, &(0x7f0000000340)={[{@verity_off}, {@redirect_dir_follow}, {@redirect_dir_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}, {@verity_on}, {@metacopy_on}], [{@uid_gt={'uid>', r3}}, {@pcr={'pcr', 0x3d, 0x13}}]}) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000280003802400008004000180040002800c00044000000000000000090c0005"], 0xe8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e24, 0x7, @loopback, 0x5}}, 0x0, 0x0, 0x22, 0x0, "ffa1f819be2d45e250fd26562ce09916a27aed631363a5432fb12e08113effb5bb89cfeafda5f79a8e28471efbdc66c9a6152cedb293e5cbbef69e0b815ed1c8e7fd762d9008b749b97592e880b340e1"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @loopback, 0x3}}, 0x0, 0x0, 0x2, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) r5 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0xa102) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc840) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x40010, r0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b", 0x7}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="110000005a"], 0xfe33) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x17, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r8, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) shutdown(r8, 0x1) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c0007"], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x6) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket(0xa, 0x3, 0xff) kernel console output (not intermixed with test programs): 000 [ 403.388724][ T38] audit: type=1326 audit(1779866346.375:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10452 comm="syz.7.1403" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbba0a6caeb code=0x7ffc0000 [ 403.390907][ T38] audit: type=1326 audit(1779866346.385:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10452 comm="syz.7.1403" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbba0a6caeb code=0x7ffc0000 [ 403.413991][T10475] FAULT_INJECTION: forcing a failure. [ 403.413991][T10475] name failslab, interval 1, probability 0, space 0, times 0 [ 403.414026][T10475] CPU: 1 UID: 0 PID: 10475 Comm: syz.6.1411 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 403.414054][T10475] Tainted: [L]=SOFTLOCKUP [ 403.414061][T10475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 403.414073][T10475] Call Trace: [ 403.414080][T10475] [ 403.414087][T10475] dump_stack_lvl+0xe8/0x150 [ 403.414116][T10475] should_fail_ex+0x46b/0x600 [ 403.414148][T10475] should_failslab+0xa8/0x100 [ 403.414172][T10475] __kmalloc_cache_noprof+0x84/0x690 [ 403.414193][T10475] ? vhost_task_create+0x123/0x380 [ 403.414219][T10475] vhost_task_create+0x123/0x380 [ 403.414240][T10475] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 403.414265][T10475] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 403.414290][T10475] ? __pfx_vhost_task_create+0x10/0x10 [ 403.414326][T10475] ? __pfx_vhost_task_fn+0x10/0x10 [ 403.414350][T10475] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 403.414378][T10475] ? lockdep_hardirqs_on+0x7a/0x110 [ 403.414397][T10475] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 403.414422][T10475] ? mutex_lock_nested+0x152/0x1d0 [ 403.414443][T10475] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 403.414473][T10475] kvm_mmu_post_init_vm+0x147/0x2d0 [ 403.414501][T10475] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 403.414537][T10475] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 403.414561][T10475] ? do_raw_spin_lock+0x12b/0x2f0 [ 403.414590][T10475] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 403.414616][T10475] ? lockdep_hardirqs_on+0x7a/0x110 [ 403.414634][T10475] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 403.414660][T10475] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 403.414688][T10475] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 403.414711][T10475] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 403.414737][T10475] ? lockdep_hardirqs_on+0x7a/0x110 [ 403.414755][T10475] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 403.414781][T10475] ? rt_write_unlock+0x190/0x230 [ 403.414805][T10475] kvm_vcpu_ioctl+0xa65/0xfe0 [ 403.414836][T10475] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 403.414897][T10475] ? __fget_files+0x2a/0x420 [ 403.414917][T10475] ? __fget_files+0x2a/0x420 [ 403.414933][T10475] ? __fget_files+0x3a6/0x420 [ 403.414950][T10475] ? __fget_files+0x2a/0x420 [ 403.414971][T10475] ? bpf_lsm_file_ioctl+0x9/0x20 [ 403.414995][T10475] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 403.415018][T10475] __se_sys_ioctl+0xff/0x170 [ 403.415041][T10475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.415061][T10475] do_syscall_64+0x174/0x580 [ 403.415078][T10475] ? trace_irq_disable+0x3b/0x140 [ 403.415097][T10475] ? clear_bhb_loop+0x40/0x90 [ 403.415118][T10475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.415137][T10475] RIP: 0033:0x7fd3a134ce59 [ 403.415154][T10475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.415170][T10475] RSP: 002b:00007fd39f585028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.415190][T10475] RAX: ffffffffffffffda RBX: 00007fd3a15c6090 RCX: 00007fd3a134ce59 [ 403.415204][T10475] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 403.415215][T10475] RBP: 00007fd39f585090 R08: 0000000000000000 R09: 0000000000000000 [ 403.415227][T10475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.415238][T10475] R13: 00007fd3a15c6128 R14: 00007fd3a15c6090 R15: 00007ffe0f10d8b8 [ 403.415268][T10475] [ 403.434392][ T5773] pwc: recv_control_msg error -71 req 02 val 2600 [ 403.435686][ T5773] pwc: recv_control_msg error -71 req 02 val 2900 [ 403.441379][ T5773] pwc: recv_control_msg error -71 req 02 val 2800 [ 403.444715][ T5773] pwc: recv_control_msg error -71 req 04 val 1100 [ 403.446878][ T5773] pwc: recv_control_msg error -71 req 04 val 1200 [ 403.786857][ T5773] pwc: Registered as video103. [ 403.806794][ T5773] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input116 [ 403.987625][ T5773] usb 8-1: USB disconnect, device number 16 [ 404.598989][ T5774] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 404.599135][ T5774] usb 3-1: MIDIStreaming interface descriptor not found [ 404.628246][ T7894] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 404.702418][ T5774] usb 3-1: USB disconnect, device number 113 [ 404.800647][ T7894] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.800674][ T7894] usb 7-1: config 0 has no interfaces? [ 404.800702][ T7894] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 404.800723][ T7894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.865032][ T7894] usb 7-1: config 0 descriptor?? [ 404.960161][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.017819][ T5594] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 405.070598][ T822] usb 7-1: USB disconnect, device number 84 [ 405.179514][ T5594] usb 8-1: config 0 has an invalid interface number: 197 but max is 0 [ 405.179543][ T5594] usb 8-1: config 0 has no interface number 0 [ 405.179568][ T5594] usb 8-1: too many endpoints for config 0 interface 197 altsetting 106: 74, using maximum allowed: 30 [ 405.179589][ T5594] usb 8-1: config 0 interface 197 altsetting 106 has 0 endpoint descriptors, different from the interface descriptor's value: 74 [ 405.179603][ T5594] usb 8-1: config 0 interface 197 has no altsetting 0 [ 405.181672][ T5594] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 405.181700][ T5594] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.181713][ T5594] usb 8-1: Product: syz [ 405.181721][ T5594] usb 8-1: Manufacturer: syz [ 405.181728][ T5594] usb 8-1: SerialNumber: syz [ 405.267360][ T5594] usb 8-1: config 0 descriptor?? [ 405.276673][T10482] FAULT_INJECTION: forcing a failure. [ 405.276673][T10482] name failslab, interval 1, probability 0, space 0, times 0 [ 405.276699][T10482] CPU: 1 UID: 0 PID: 10482 Comm: syz.6.1414 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 405.276715][T10482] Tainted: [L]=SOFTLOCKUP [ 405.276718][T10482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 405.276726][T10482] Call Trace: [ 405.276733][T10482] [ 405.276740][T10482] dump_stack_lvl+0xe8/0x150 [ 405.276769][T10482] should_fail_ex+0x46b/0x600 [ 405.276801][T10482] should_failslab+0xa8/0x100 [ 405.276825][T10482] __kmalloc_noprof+0xdf/0x7b0 [ 405.276846][T10482] ? tomoyo_encode+0x28b/0x550 [ 405.276867][T10482] tomoyo_encode+0x28b/0x550 [ 405.276889][T10482] tomoyo_realpath_from_path+0x58d/0x5d0 [ 405.276907][T10482] ? tomoyo_path_number_perm+0x219/0x630 [ 405.276933][T10482] tomoyo_path_number_perm+0x246/0x630 [ 405.276961][T10482] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 405.276987][T10482] ? __lock_acquire+0x6b5/0x2d10 [ 405.277014][T10482] ? do_raw_spin_lock+0x12b/0x2f0 [ 405.277048][T10482] ? __fget_files+0x2a/0x420 [ 405.277060][T10482] ? __fget_files+0x2a/0x420 [ 405.277070][T10482] ? __fget_files+0x3a6/0x420 [ 405.277080][T10482] ? __fget_files+0x2a/0x420 [ 405.277101][T10482] security_file_ioctl+0xc3/0x2a0 [ 405.277129][T10482] __se_sys_ioctl+0x47/0x170 [ 405.277151][T10482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.277172][T10482] do_syscall_64+0x174/0x580 [ 405.277191][T10482] ? trace_irq_disable+0x3b/0x140 [ 405.277207][T10482] ? clear_bhb_loop+0x40/0x90 [ 405.277219][T10482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.277229][T10482] RIP: 0033:0x7fd3a134caeb [ 405.277240][T10482] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 405.277253][T10482] RSP: 002b:00007fd39f5a3f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.277273][T10482] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd3a134caeb [ 405.277286][T10482] RDX: 00007fd39f5a4fe0 RSI: 0000000080085502 RDI: 0000000000000003 [ 405.277299][T10482] RBP: 00007fd39f5a6090 R08: 0000000000000000 R09: 0000000000000000 [ 405.277310][T10482] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 405.277322][T10482] R13: 0000000000000000 R14: 00007fd3a15c5fa0 R15: 00007ffe0f10d8b8 [ 405.277353][T10482] [ 405.277578][T10482] ERROR: Out of memory at tomoyo_realpath_from_path. [ 405.988321][ T822] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 406.140610][ T822] usb 3-1: config 46 has an invalid interface number: 138 but max is 1 [ 406.140641][ T822] usb 3-1: config 46 has an invalid interface number: 191 but max is 1 [ 406.140662][ T822] usb 3-1: config 46 has no interface number 0 [ 406.140679][ T822] usb 3-1: config 46 has no interface number 1 [ 406.140746][ T822] usb 3-1: config 46 interface 138 altsetting 56 endpoint 0x3 has invalid maxpacket 520, setting to 64 [ 406.140773][ T822] usb 3-1: config 46 interface 138 altsetting 56 endpoint 0x6 has invalid maxpacket 959, setting to 64 [ 406.140799][ T822] usb 3-1: config 46 interface 138 altsetting 56 has an endpoint descriptor with address 0x1A, changing to 0xA [ 406.140826][ T822] usb 3-1: config 46 interface 138 altsetting 56 endpoint 0xD has invalid maxpacket 2039, setting to 64 [ 406.140855][ T822] usb 3-1: config 46 interface 138 altsetting 56 has a duplicate endpoint with address 0xD, skipping [ 406.140877][ T822] usb 3-1: config 46 interface 138 altsetting 56 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 406.141099][ T822] usb 3-1: config 46 interface 138 altsetting 56 has a duplicate endpoint with address 0x4, skipping [ 406.141124][ T822] usb 3-1: config 46 interface 138 altsetting 56 has an invalid descriptor for endpoint zero, skipping [ 406.141146][ T822] usb 3-1: config 46 interface 138 altsetting 56 has a duplicate endpoint with address 0x4, skipping [ 406.141169][ T822] usb 3-1: config 46 interface 138 altsetting 56 has a duplicate endpoint with address 0xA, skipping [ 406.141207][ T822] usb 3-1: config 46 interface 191 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 406.141230][ T822] usb 3-1: config 46 interface 191 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 406.141251][ T822] usb 3-1: config 46 interface 191 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 406.141272][ T822] usb 3-1: config 46 interface 191 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 406.141291][ T822] usb 3-1: config 46 interface 191 altsetting 8 endpoint 0x5 has invalid maxpacket 975, setting to 64 [ 406.141317][ T822] usb 3-1: config 46 interface 191 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 406.141338][ T822] usb 3-1: config 46 interface 191 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 406.141358][ T822] usb 3-1: config 46 interface 138 has no altsetting 0 [ 406.141375][ T822] usb 3-1: config 46 interface 191 has no altsetting 0 [ 406.146367][ T822] usb 3-1: New USB device found, idVendor=08ca, idProduct=0021, bcdDevice=5d.22 [ 406.146395][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.146415][ T822] usb 3-1: Product: ц [ 406.146430][ T822] usb 3-1: Manufacturer: 咞䥪츭ꡨ퉎湩腈뒖ť䜲皆蒬ಓ攆奫ꯛ풿䜶䋬﯍茽莕ꥴꇏ览㉕蹭䑃嶫锐獏丌뷜뗑澢렾ᔭ꿓ଫ顋鈐徽慚츱꛲霈䵩ᾼᫀ앾Ὁꊐ㽽嵽ࠜ캏당嗠ㅬ囦᳸䋑‐졔竃 [ 406.146456][ T822] usb 3-1: SerialNumber: ᰉ [ 406.469264][ T822] aiptek 3-1:46.138: interface has no int in endpoints, but must have minimum 1 [ 406.491579][ T822] aiptek 3-1:46.191: interface has no int in endpoints, but must have minimum 1 [ 406.503730][ T822] usb 3-1: USB disconnect, device number 114 [ 406.737209][ T5594] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 406.753531][ T5594] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 406.754155][ T5594] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 406.754188][ T5594] usb 8-1: media controller created [ 406.798592][ T5594] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 406.841057][ T5594] DVB: Unable to find symbol mt352_attach() [ 406.872153][ T5594] DVB: Unable to find symbol nxt6000_attach() [ 406.872169][ T5594] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 406.874790][ T5594] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input119 [ 406.876781][ T5594] dvb-usb: schedule remote query interval to 1000 msecs. [ 406.876800][ T5594] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 406.876817][ T5594] dvb-usb: bulk message failed: -22 (7/0) [ 406.876833][ T5594] dvb-usb: bulk message failed: -22 (7/0) [ 406.938806][ T5594] usb 8-1: USB disconnect, device number 17 [ 407.070074][ T5594] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 407.267923][ T822] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 407.407425][T10526] FAULT_INJECTION: forcing a failure. [ 407.407425][T10526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.407448][T10526] CPU: 0 UID: 0 PID: 10526 Comm: syz.6.1434 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 407.407464][T10526] Tainted: [L]=SOFTLOCKUP [ 407.407468][T10526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 407.407475][T10526] Call Trace: [ 407.407479][T10526] [ 407.407484][T10526] dump_stack_lvl+0xe8/0x150 [ 407.407506][T10526] should_fail_ex+0x46b/0x600 [ 407.407536][T10526] _copy_to_user+0x31/0xb0 [ 407.407560][T10526] simple_read_from_buffer+0xe1/0x170 [ 407.407600][T10526] proc_fail_nth_read+0x1be/0x230 [ 407.407625][T10526] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 407.407651][T10526] ? rw_verify_area+0x2ac/0x4e0 [ 407.407669][T10526] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 407.407690][T10526] vfs_read+0x212/0xa80 [ 407.407717][T10526] ? __pfx_vfs_read+0x10/0x10 [ 407.407738][T10526] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 407.407765][T10526] ? lockdep_hardirqs_on+0x7a/0x110 [ 407.407785][T10526] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 407.407811][T10526] ? mutex_lock_nested+0x152/0x1d0 [ 407.407830][T10526] ? fdget_pos+0x252/0x320 [ 407.407844][T10526] ksys_read+0x156/0x270 [ 407.407857][T10526] ? __pfx_ksys_read+0x10/0x10 [ 407.407873][T10526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.407884][T10526] do_syscall_64+0x174/0x580 [ 407.407894][T10526] ? trace_irq_disable+0x3b/0x140 [ 407.407905][T10526] ? clear_bhb_loop+0x40/0x90 [ 407.407918][T10526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.407928][T10526] RIP: 0033:0x7fd3a130d68e [ 407.407938][T10526] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 407.407947][T10526] RSP: 002b:00007fd39f5a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 407.407958][T10526] RAX: ffffffffffffffda RBX: 00007fd39f5a66c0 RCX: 00007fd3a130d68e [ 407.407966][T10526] RDX: 000000000000000f RSI: 00007fd39f5a60a0 RDI: 0000000000000005 [ 407.407972][T10526] RBP: 00007fd39f5a6090 R08: 0000000000000000 R09: 0000000000000000 [ 407.407979][T10526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.407985][T10526] R13: 00007fd3a15c6038 R14: 00007fd3a15c5fa0 R15: 00007ffe0f10d8b8 [ 407.408001][T10526] [ 407.480151][ T822] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 407.480176][ T822] usb 3-1: config 0 has no interface number 0 [ 407.480207][ T822] usb 3-1: too many endpoints for config 0 interface 197 altsetting 106: 74, using maximum allowed: 30 [ 407.480247][ T822] usb 3-1: config 0 interface 197 altsetting 106 has 0 endpoint descriptors, different from the interface descriptor's value: 74 [ 407.480275][ T822] usb 3-1: config 0 interface 197 has no altsetting 0 [ 407.563016][ T822] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 407.563048][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.563074][ T822] usb 3-1: Product: syz [ 407.563089][ T822] usb 3-1: Manufacturer: syz [ 407.563104][ T822] usb 3-1: SerialNumber: syz [ 407.687568][T10530] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1436'. [ 407.687597][T10530] netlink: 'syz.7.1436': attribute type 2 has an invalid length. [ 407.764888][ T822] usb 3-1: config 0 descriptor?? [ 407.879262][T10536] trusted_key: syz.7.1439 sent an empty control message without MSG_MORE. [ 408.286209][T10550] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20000 [ 408.287133][T10550] netlink: 'syz.0.1445': attribute type 27 has an invalid length. [ 408.403623][T10555] netlink: 'syz.0.1448': attribute type 11 has an invalid length. [ 408.895869][T10575] FAULT_INJECTION: forcing a failure. [ 408.895869][T10575] name failslab, interval 1, probability 0, space 0, times 0 [ 408.895893][T10575] CPU: 0 UID: 0 PID: 10575 Comm: syz.6.1457 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 408.895908][T10575] Tainted: [L]=SOFTLOCKUP [ 408.895912][T10575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 408.895919][T10575] Call Trace: [ 408.895926][T10575] [ 408.895935][T10575] dump_stack_lvl+0xe8/0x150 [ 408.895969][T10575] should_fail_ex+0x46b/0x600 [ 408.896001][T10575] should_failslab+0xa8/0x100 [ 408.896025][T10575] kmem_cache_alloc_noprof+0x87/0x680 [ 408.896044][T10575] ? skb_clone+0x212/0x3a0 [ 408.896058][T10575] skb_clone+0x212/0x3a0 [ 408.896070][T10575] __netlink_deliver_tap+0x424/0x8b0 [ 408.896088][T10575] ? netlink_deliver_tap+0x2e/0x1b0 [ 408.896109][T10575] netlink_deliver_tap+0x19c/0x1b0 [ 408.896130][T10575] netlink_unicast+0x754/0x920 [ 408.896166][T10575] netlink_sendmsg+0x813/0xb40 [ 408.896195][T10575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.896213][T10575] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 408.896229][T10575] ? aa_sock_msg_perm+0x122/0x200 [ 408.896241][T10575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.896251][T10575] sock_sendmsg_nosec+0x13a/0x180 [ 408.896274][T10575] sock_write_iter+0x308/0x410 [ 408.896298][T10575] ? __pfx_sock_write_iter+0x10/0x10 [ 408.896343][T10575] do_iter_readv_writev+0x62b/0x8d0 [ 408.896369][T10575] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 408.896389][T10575] ? rw_verify_area+0x25b/0x4e0 [ 408.896402][T10575] vfs_writev+0x345/0x9a0 [ 408.896422][T10575] ? __pfx_vfs_writev+0x10/0x10 [ 408.896460][T10575] ? __fget_files+0x2a/0x420 [ 408.896483][T10575] ? __fget_files+0x3a6/0x420 [ 408.896500][T10575] ? __fget_files+0x2a/0x420 [ 408.896526][T10575] do_writev+0x15a/0x2e0 [ 408.896552][T10575] ? __pfx_do_writev+0x10/0x10 [ 408.896571][T10575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.896582][T10575] do_syscall_64+0x174/0x580 [ 408.896594][T10575] ? trace_irq_disable+0x3b/0x140 [ 408.896614][T10575] ? clear_bhb_loop+0x40/0x90 [ 408.896638][T10575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.896656][T10575] RIP: 0033:0x7fd3a134ce59 [ 408.896674][T10575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.896690][T10575] RSP: 002b:00007fd39f5a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 408.896710][T10575] RAX: ffffffffffffffda RBX: 00007fd3a15c5fa0 RCX: 00007fd3a134ce59 [ 408.896724][T10575] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004 [ 408.896736][T10575] RBP: 00007fd39f5a6090 R08: 0000000000000000 R09: 0000000000000000 [ 408.896748][T10575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.896759][T10575] R13: 00007fd3a15c6038 R14: 00007fd3a15c5fa0 R15: 00007ffe0f10d8b8 [ 408.896788][T10575] [ 409.027784][ T5594] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 409.170233][ T822] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 409.213586][ T5594] usb 8-1: unable to get BOS descriptor or descriptor too short [ 409.219504][ T5594] usb 8-1: config 8 has an invalid interface number: 242 but max is 0 [ 409.219531][ T5594] usb 8-1: config 8 has no interface number 0 [ 409.219574][ T5594] usb 8-1: config 8 interface 242 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 409.219600][ T5594] usb 8-1: config 8 interface 242 has no altsetting 0 [ 409.237772][ T5594] usb 8-1: string descriptor 0 read error: -22 [ 409.237909][ T5594] usb 8-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice= 1.79 [ 409.237933][ T5594] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.264462][ T822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 409.302445][ T822] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 409.302501][ T822] usb 3-1: media controller created [ 409.337317][ T822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 409.414434][ T822] DVB: Unable to find symbol mt352_attach() [ 409.462201][ T822] DVB: Unable to find symbol nxt6000_attach() [ 409.462218][ T822] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 409.467040][ T822] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input120 [ 409.504664][ T822] dvb-usb: schedule remote query interval to 1000 msecs. [ 409.504688][ T822] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 409.504705][ T822] dvb-usb: bulk message failed: -22 (7/0) [ 409.504722][ T822] dvb-usb: bulk message failed: -22 (7/0) [ 409.538318][ T822] usb 3-1: USB disconnect, device number 115 [ 409.621031][ T5594] qmi_wwan 8-1:8.242: probe with driver qmi_wwan failed with error -22 [ 409.651869][ T5594] usb 8-1: USB disconnect, device number 18 [ 409.699837][ T822] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 410.127830][ T822] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 410.279965][ T822] usb 7-1: config 0 has an invalid interface number: 197 but max is 0 [ 410.279993][ T822] usb 7-1: config 0 has no interface number 0 [ 410.280018][ T822] usb 7-1: too many endpoints for config 0 interface 197 altsetting 106: 74, using maximum allowed: 30 [ 410.280044][ T822] usb 7-1: config 0 interface 197 altsetting 106 has 0 endpoint descriptors, different from the interface descriptor's value: 74 [ 410.280059][ T822] usb 7-1: config 0 interface 197 has no altsetting 0 [ 410.282142][ T822] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 410.282166][ T822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.282177][ T822] usb 7-1: Product: syz [ 410.282184][ T822] usb 7-1: Manufacturer: syz [ 410.282192][ T822] usb 7-1: SerialNumber: syz [ 410.287122][ T822] usb 7-1: config 0 descriptor?? [ 410.507849][ T32] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 410.574594][T10611] FAULT_INJECTION: forcing a failure. [ 410.574594][T10611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.574618][T10611] CPU: 1 UID: 0 PID: 10611 Comm: syz.2.1472 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 410.574633][T10611] Tainted: [L]=SOFTLOCKUP [ 410.574637][T10611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 410.574644][T10611] Call Trace: [ 410.574648][T10611] [ 410.574653][T10611] dump_stack_lvl+0xe8/0x150 [ 410.574673][T10611] should_fail_ex+0x46b/0x600 [ 410.574692][T10611] _copy_to_user+0x31/0xb0 [ 410.574708][T10611] simple_read_from_buffer+0xe1/0x170 [ 410.574728][T10611] proc_fail_nth_read+0x1be/0x230 [ 410.574742][T10611] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 410.574755][T10611] ? rw_verify_area+0x2ac/0x4e0 [ 410.574768][T10611] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 410.574780][T10611] vfs_read+0x212/0xa80 [ 410.574796][T10611] ? __pfx_vfs_read+0x10/0x10 [ 410.574809][T10611] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 410.574825][T10611] ? lockdep_hardirqs_on+0x7a/0x110 [ 410.574835][T10611] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 410.574851][T10611] ? mutex_lock_nested+0x152/0x1d0 [ 410.574863][T10611] ? fdget_pos+0x252/0x320 [ 410.574878][T10611] ksys_read+0x156/0x270 [ 410.574891][T10611] ? __pfx_ksys_read+0x10/0x10 [ 410.574907][T10611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.574918][T10611] do_syscall_64+0x174/0x580 [ 410.574929][T10611] ? clear_bhb_loop+0x40/0x90 [ 410.574942][T10611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.574952][T10611] RIP: 0033:0x7f7fa664d68e [ 410.574962][T10611] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 410.574971][T10611] RSP: 002b:00007f7fa48ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 410.574983][T10611] RAX: ffffffffffffffda RBX: 00007f7fa48de6c0 RCX: 00007f7fa664d68e [ 410.574991][T10611] RDX: 000000000000000f RSI: 00007f7fa48de0a0 RDI: 0000000000000005 [ 410.574997][T10611] RBP: 00007f7fa48de090 R08: 0000000000000000 R09: 0000000000000000 [ 410.575003][T10611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.575009][T10611] R13: 00007f7fa6906038 R14: 00007f7fa6905fa0 R15: 00007fff119e3f18 [ 410.575025][T10611] [ 410.597511][T10612] FAULT_INJECTION: forcing a failure. [ 410.597511][T10612] name failslab, interval 1, probability 0, space 0, times 0 [ 410.597547][T10612] CPU: 0 UID: 0 PID: 10612 Comm: syz.6.1467 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 410.597572][T10612] Tainted: [L]=SOFTLOCKUP [ 410.597580][T10612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 410.597590][T10612] Call Trace: [ 410.597598][T10612] [ 410.597606][T10612] dump_stack_lvl+0xe8/0x150 [ 410.597633][T10612] should_fail_ex+0x46b/0x600 [ 410.597674][T10612] should_failslab+0xa8/0x100 [ 410.597699][T10612] __kmalloc_cache_noprof+0x84/0x690 [ 410.597721][T10612] ? vhost_task_create+0x123/0x380 [ 410.597746][T10612] vhost_task_create+0x123/0x380 [ 410.597766][T10612] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 410.597792][T10612] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 410.597817][T10612] ? __pfx_vhost_task_create+0x10/0x10 [ 410.597845][T10612] ? __pfx_vhost_task_fn+0x10/0x10 [ 410.597870][T10612] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 410.597898][T10612] ? lockdep_hardirqs_on+0x7a/0x110 [ 410.597916][T10612] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 410.597943][T10612] ? mutex_lock_nested+0x152/0x1d0 [ 410.597963][T10612] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 410.597993][T10612] kvm_mmu_post_init_vm+0x147/0x2d0 [ 410.598019][T10612] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 410.598054][T10612] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 410.598078][T10612] ? do_raw_spin_lock+0x12b/0x2f0 [ 410.598104][T10612] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 410.598127][T10612] ? lockdep_hardirqs_on+0x7a/0x110 [ 410.598144][T10612] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 410.598168][T10612] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 410.598195][T10612] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 410.598217][T10612] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 410.598242][T10612] ? lockdep_hardirqs_on+0x7a/0x110 [ 410.598257][T10612] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 410.598280][T10612] ? rt_write_unlock+0x190/0x230 [ 410.598305][T10612] kvm_vcpu_ioctl+0xa65/0xfe0 [ 410.598335][T10612] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 410.598380][T10612] ? __fget_files+0x2a/0x420 [ 410.598401][T10612] ? __fget_files+0x2a/0x420 [ 410.598417][T10612] ? __fget_files+0x3a6/0x420 [ 410.598433][T10612] ? __fget_files+0x2a/0x420 [ 410.598453][T10612] ? bpf_lsm_file_ioctl+0x9/0x20 [ 410.598478][T10612] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 410.598508][T10612] __se_sys_ioctl+0xff/0x170 [ 410.598531][T10612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.598552][T10612] do_syscall_64+0x174/0x580 [ 410.598570][T10612] ? trace_irq_disable+0x3b/0x140 [ 410.598589][T10612] ? clear_bhb_loop+0x40/0x90 [ 410.598612][T10612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.598630][T10612] RIP: 0033:0x7fd3a134ce59 [ 410.598648][T10612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.598672][T10612] RSP: 002b:00007fd39f585028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 410.598693][T10612] RAX: ffffffffffffffda RBX: 00007fd3a15c6090 RCX: 00007fd3a134ce59 [ 410.598707][T10612] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 410.598718][T10612] RBP: 00007fd39f585090 R08: 0000000000000000 R09: 0000000000000000 [ 410.598731][T10612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.598742][T10612] R13: 00007fd3a15c6128 R14: 00007fd3a15c6090 R15: 00007ffe0f10d8b8 [ 410.598773][T10612] [ 410.947919][ T9] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 411.100735][ T9] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 411.100763][ T9] usb 3-1: config 0 has no interface number 0 [ 411.100792][ T9] usb 3-1: too many endpoints for config 0 interface 197 altsetting 106: 74, using maximum allowed: 30 [ 411.100831][ T9] usb 3-1: config 0 interface 197 altsetting 106 has 0 endpoint descriptors, different from the interface descriptor's value: 74 [ 411.100858][ T9] usb 3-1: config 0 interface 197 has no altsetting 0 [ 411.104103][ T9] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 411.104140][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.104160][ T9] usb 3-1: Product: syz [ 411.104174][ T9] usb 3-1: Manufacturer: syz [ 411.104189][ T9] usb 3-1: SerialNumber: syz [ 411.112823][ T9] usb 3-1: config 0 descriptor?? [ 411.360338][ T32] usb 8-1: config 46 has an invalid interface number: 138 but max is 1 [ 411.360367][ T32] usb 8-1: config 46 has an invalid interface number: 191 but max is 1 [ 411.360388][ T32] usb 8-1: config 46 has no interface number 0 [ 411.360405][ T32] usb 8-1: config 46 has no interface number 1 [ 411.360521][ T32] usb 8-1: config 46 interface 138 altsetting 56 endpoint 0x3 has invalid maxpacket 520, setting to 64 [ 411.360550][ T32] usb 8-1: config 46 interface 138 altsetting 56 endpoint 0x6 has invalid maxpacket 959, setting to 64 [ 411.360569][ T32] usb 8-1: config 46 interface 138 altsetting 56 has an endpoint descriptor with address 0x1A, changing to 0xA [ 411.360631][ T32] usb 8-1: config 46 interface 138 altsetting 56 endpoint 0xD has invalid maxpacket 2039, setting to 64 [ 411.360661][ T32] usb 8-1: config 46 interface 138 altsetting 56 has a duplicate endpoint with address 0xD, skipping [ 411.360685][ T32] usb 8-1: config 46 interface 138 altsetting 56 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 411.360712][ T32] usb 8-1: config 46 interface 138 altsetting 56 has a duplicate endpoint with address 0x4, skipping [ 411.360733][ T32] usb 8-1: config 46 interface 138 altsetting 56 has an invalid descriptor for endpoint zero, skipping [ 411.360779][ T32] usb 8-1: config 46 interface 138 altsetting 56 has a duplicate endpoint with address 0x4, skipping [ 411.360801][ T32] usb 8-1: config 46 interface 138 altsetting 56 has a duplicate endpoint with address 0xA, skipping [ 411.360947][ T32] usb 8-1: config 46 interface 191 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 411.360968][ T32] usb 8-1: config 46 interface 191 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 411.360990][ T32] usb 8-1: config 46 interface 191 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 411.361013][ T32] usb 8-1: config 46 interface 191 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 411.361036][ T32] usb 8-1: config 46 interface 191 altsetting 8 endpoint 0x5 has invalid maxpacket 975, setting to 64 [ 411.361095][ T32] usb 8-1: config 46 interface 191 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 411.361109][ T32] usb 8-1: config 46 interface 191 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 411.361128][ T32] usb 8-1: config 46 interface 138 has no altsetting 0 [ 411.361146][ T32] usb 8-1: config 46 interface 191 has no altsetting 0 [ 411.364054][ T32] usb 8-1: New USB device found, idVendor=08ca, idProduct=0021, bcdDevice=5d.22 [ 411.364082][ T32] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.364103][ T32] usb 8-1: Product: ц [ 411.364166][ T32] usb 8-1: Manufacturer: 咞䥪츭ꡨ퉎湩腈뒖ť䜲皆蒬ಓ攆奫ꯛ풿䜶䋬﯍茽莕ꥴꇏ览㉕蹭䑃嶫锐獏丌뷜뗑澢렾ᔭ꿓ଫ顋鈐徽慚츱꛲霈䵩ᾼᫀ앾Ὁꊐ㽽嵽ࠜ캏당嗠ㅬ囦᳸䋑‐졔竃 [ 411.364183][ T32] usb 8-1: SerialNumber: ᰉ [ 411.446795][T10615] FAULT_INJECTION: forcing a failure. [ 411.446795][T10615] name failslab, interval 1, probability 0, space 0, times 0 [ 411.446832][T10615] CPU: 0 UID: 0 PID: 10615 Comm: syz.2.1473 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 411.446858][T10615] Tainted: [L]=SOFTLOCKUP [ 411.446865][T10615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 411.446876][T10615] Call Trace: [ 411.446883][T10615] [ 411.446891][T10615] dump_stack_lvl+0xe8/0x150 [ 411.446919][T10615] should_fail_ex+0x46b/0x600 [ 411.446950][T10615] should_failslab+0xa8/0x100 [ 411.446973][T10615] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 411.446993][T10615] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 411.447015][T10615] ? dup_task_struct+0x52/0x860 [ 411.447046][T10615] dup_task_struct+0x52/0x860 [ 411.447070][T10615] ? rt_spin_unlock+0x160/0x200 [ 411.447212][T10615] copy_process+0x837/0x43d0 [ 411.447271][T10615] ? __pfx_copy_process+0x10/0x10 [ 411.447310][T10615] vhost_task_create+0x1f9/0x380 [ 411.447332][T10615] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 411.447356][T10615] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 411.447382][T10615] ? __pfx_vhost_task_create+0x10/0x10 [ 411.447411][T10615] ? __pfx_vhost_task_fn+0x10/0x10 [ 411.447436][T10615] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 411.447463][T10615] ? lockdep_hardirqs_on+0x7a/0x110 [ 411.447481][T10615] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 411.447506][T10615] ? mutex_lock_nested+0x152/0x1d0 [ 411.447526][T10615] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 411.447557][T10615] kvm_mmu_post_init_vm+0x147/0x2d0 [ 411.447586][T10615] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 411.447621][T10615] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 411.447643][T10615] ? do_raw_spin_lock+0x12b/0x2f0 [ 411.447669][T10615] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 411.447695][T10615] ? lockdep_hardirqs_on+0x7a/0x110 [ 411.447713][T10615] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 411.447736][T10615] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 411.447762][T10615] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 411.447785][T10615] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 411.447812][T10615] ? lockdep_hardirqs_on+0x7a/0x110 [ 411.447829][T10615] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 411.447855][T10615] ? rt_write_unlock+0x190/0x230 [ 411.447880][T10615] kvm_vcpu_ioctl+0xa65/0xfe0 [ 411.447912][T10615] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 411.447957][T10615] ? __fget_files+0x2a/0x420 [ 411.447979][T10615] ? __fget_files+0x2a/0x420 [ 411.447995][T10615] ? __fget_files+0x3a6/0x420 [ 411.448012][T10615] ? __fget_files+0x2a/0x420 [ 411.448033][T10615] ? bpf_lsm_file_ioctl+0x9/0x20 [ 411.448093][T10615] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 411.448122][T10615] __se_sys_ioctl+0xff/0x170 [ 411.448144][T10615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.448165][T10615] do_syscall_64+0x174/0x580 [ 411.448196][T10615] ? trace_irq_disable+0x3b/0x140 [ 411.448216][T10615] ? clear_bhb_loop+0x40/0x90 [ 411.448239][T10615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.448259][T10615] RIP: 0033:0x7f7fa668ce59 [ 411.448277][T10615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.448293][T10615] RSP: 002b:00007f7fa48bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 411.448312][T10615] RAX: ffffffffffffffda RBX: 00007f7fa6906090 RCX: 00007f7fa668ce59 [ 411.448327][T10615] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 411.448338][T10615] RBP: 00007f7fa48bd090 R08: 0000000000000000 R09: 0000000000000000 [ 411.448350][T10615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.448362][T10615] R13: 00007f7fa6906128 R14: 00007f7fa6906090 R15: 00007fff119e3f18 [ 411.448391][T10615] [ 412.039847][ T822] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 412.090220][ T822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 412.091328][ T822] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 412.091383][ T822] usb 7-1: media controller created [ 412.151542][ T822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 412.179983][ T32] aiptek 8-1:46.138: interface has no int in endpoints, but must have minimum 1 [ 412.220758][ T32] aiptek 8-1:46.191: interface has no int in endpoints, but must have minimum 1 [ 412.241668][ T32] usb 8-1: USB disconnect, device number 19 [ 412.272784][ T6870] udevd[6870]: setting mode of /dev/bus/usb/008/019 to 020664 failed: No such file or directory [ 412.273690][ T6870] udevd[6870]: setting owner of /dev/bus/usb/008/019 to uid=0, gid=0 failed: No such file or directory [ 412.323000][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 412.359065][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 412.361465][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 412.361520][ T9] usb 3-1: media controller created [ 412.399122][ T822] DVB: Unable to find symbol mt352_attach() [ 412.405074][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 412.456820][ T822] DVB: Unable to find symbol nxt6000_attach() [ 412.456835][ T822] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 412.481308][ T822] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input123 [ 412.505136][ T822] dvb-usb: schedule remote query interval to 1000 msecs. [ 412.505159][ T822] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 412.505176][ T822] dvb-usb: bulk message failed: -22 (7/0) [ 412.505192][ T822] dvb-usb: bulk message failed: -22 (7/0) [ 412.537820][ T822] usb 7-1: USB disconnect, device number 85 [ 412.609425][ T9] DVB: Unable to find symbol mt352_attach() [ 412.670450][ T822] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 412.716959][ T9] DVB: Unable to find symbol nxt6000_attach() [ 412.716976][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 412.763481][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input124 [ 412.794419][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 412.794436][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 412.794446][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 412.794455][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 412.803370][ T9] usb 3-1: USB disconnect, device number 116 [ 412.912239][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 413.037970][ T822] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 413.168302][ T822] usb 7-1: device descriptor read/64, error -71 [ 413.407855][ T822] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 413.436221][T10646] FAULT_INJECTION: forcing a failure. [ 413.436221][T10646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.436244][T10646] CPU: 1 UID: 0 PID: 10646 Comm: syz.2.1483 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 413.436259][T10646] Tainted: [L]=SOFTLOCKUP [ 413.436263][T10646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 413.436269][T10646] Call Trace: [ 413.436274][T10646] [ 413.436278][T10646] dump_stack_lvl+0xe8/0x150 [ 413.436295][T10646] should_fail_ex+0x46b/0x600 [ 413.436314][T10646] _copy_to_user+0x31/0xb0 [ 413.436327][T10646] simple_read_from_buffer+0xe1/0x170 [ 413.436347][T10646] proc_fail_nth_read+0x1be/0x230 [ 413.436361][T10646] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 413.436374][T10646] ? rw_verify_area+0x2ac/0x4e0 [ 413.436386][T10646] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 413.436397][T10646] vfs_read+0x212/0xa80 [ 413.436413][T10646] ? __pfx_vfs_read+0x10/0x10 [ 413.436426][T10646] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 413.436443][T10646] ? lockdep_hardirqs_on+0x7a/0x110 [ 413.436453][T10646] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 413.436469][T10646] ? mutex_lock_nested+0x152/0x1d0 [ 413.436481][T10646] ? fdget_pos+0x252/0x320 [ 413.436495][T10646] ksys_read+0x156/0x270 [ 413.436508][T10646] ? __pfx_ksys_read+0x10/0x10 [ 413.436524][T10646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.436536][T10646] do_syscall_64+0x174/0x580 [ 413.436545][T10646] ? trace_irq_disable+0x3b/0x140 [ 413.436557][T10646] ? clear_bhb_loop+0x40/0x90 [ 413.436570][T10646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.436580][T10646] RIP: 0033:0x7f7fa664d68e [ 413.436591][T10646] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 413.436599][T10646] RSP: 002b:00007f7fa48ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 413.436612][T10646] RAX: ffffffffffffffda RBX: 00007f7fa48de6c0 RCX: 00007f7fa664d68e [ 413.436621][T10646] RDX: 000000000000000f RSI: 00007f7fa48de0a0 RDI: 0000000000000005 [ 413.436630][T10646] RBP: 00007f7fa48de090 R08: 0000000000000000 R09: 0000000000000000 [ 413.436636][T10646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.436642][T10646] R13: 00007f7fa6906038 R14: 00007f7fa6905fa0 R15: 00007fff119e3f18 [ 413.436659][T10646] [ 413.518350][ T9] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 413.522028][T10648] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20000 [ 413.523223][T10648] netlink: 'syz.2.1484': attribute type 27 has an invalid length. [ 413.670082][ T9] usb 8-1: config 0 has an invalid interface number: 197 but max is 0 [ 413.670108][ T9] usb 8-1: config 0 has no interface number 0 [ 413.670135][ T9] usb 8-1: too many endpoints for config 0 interface 197 altsetting 106: 74, using maximum allowed: 30 [ 413.670181][ T9] usb 8-1: config 0 interface 197 altsetting 106 has 0 endpoint descriptors, different from the interface descriptor's value: 74 [ 413.670208][ T9] usb 8-1: config 0 interface 197 has no altsetting 0 [ 413.678657][ T9] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 413.678686][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.678705][ T9] usb 8-1: Product: syz [ 413.678719][ T9] usb 8-1: Manufacturer: syz [ 413.678733][ T9] usb 8-1: SerialNumber: syz [ 413.687798][ T822] usb 7-1: device descriptor read/64, error -71 [ 413.692064][ T9] usb 8-1: config 0 descriptor?? [ 413.798679][ T822] usb usb7-port1: attempt power cycle [ 413.998133][ T5594] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 414.137801][ T822] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 414.158627][ T822] usb 7-1: device descriptor read/8, error -71 [ 414.176576][ T5594] usb 3-1: config 46 has an invalid interface number: 138 but max is 1 [ 414.176594][ T5594] usb 3-1: config 46 has an invalid interface number: 191 but max is 1 [ 414.176606][ T5594] usb 3-1: config 46 has no interface number 0 [ 414.176615][ T5594] usb 3-1: config 46 has no interface number 1 [ 414.176651][ T5594] usb 3-1: config 46 interface 138 altsetting 56 endpoint 0x3 has invalid maxpacket 520, setting to 64 [ 414.176847][ T5594] usb 3-1: config 46 interface 138 altsetting 56 endpoint 0x6 has invalid maxpacket 959, setting to 64 [ 414.176862][ T5594] usb 3-1: config 46 interface 138 altsetting 56 has an endpoint descriptor with address 0x1A, changing to 0xA [ 414.176875][ T5594] usb 3-1: config 46 interface 138 altsetting 56 endpoint 0xD has invalid maxpacket 2039, setting to 64 [ 414.176890][ T5594] usb 3-1: config 46 interface 138 altsetting 56 has a duplicate endpoint with address 0xD, skipping [ 414.176903][ T5594] usb 3-1: config 46 interface 138 altsetting 56 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 414.176917][ T5594] usb 3-1: config 46 interface 138 altsetting 56 has a duplicate endpoint with address 0x4, skipping [ 414.176929][ T5594] usb 3-1: config 46 interface 138 altsetting 56 has an invalid descriptor for endpoint zero, skipping [ 414.176943][ T5594] usb 3-1: config 46 interface 138 altsetting 56 has a duplicate endpoint with address 0x4, skipping [ 414.176955][ T5594] usb 3-1: config 46 interface 138 altsetting 56 has a duplicate endpoint with address 0xA, skipping [ 414.177159][ T5594] usb 3-1: config 46 interface 191 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 414.177171][ T5594] usb 3-1: config 46 interface 191 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 414.177182][ T5594] usb 3-1: config 46 interface 191 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 414.177194][ T5594] usb 3-1: config 46 interface 191 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 414.177206][ T5594] usb 3-1: config 46 interface 191 altsetting 8 endpoint 0x5 has invalid maxpacket 975, setting to 64 [ 414.177219][ T5594] usb 3-1: config 46 interface 191 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 414.177231][ T5594] usb 3-1: config 46 interface 191 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 414.177242][ T5594] usb 3-1: config 46 interface 138 has no altsetting 0 [ 414.177252][ T5594] usb 3-1: config 46 interface 191 has no altsetting 0 [ 414.222441][ T5594] usb 3-1: New USB device found, idVendor=08ca, idProduct=0021, bcdDevice=5d.22 [ 414.222470][ T5594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.222852][ T5594] usb 3-1: Product: ц [ 414.222868][ T5594] usb 3-1: Manufacturer: 咞䥪츭ꡨ퉎湩腈뒖ť䜲皆蒬ಓ攆奫ꯛ풿䜶䋬﯍茽莕ꥴꇏ览㉕蹭䑃嶫锐獏丌뷜뗑澢렾ᔭ꿓ଫ顋鈐徽慚츱꛲霈䵩ᾼᫀ앾Ὁꊐ㽽嵽ࠜ캏당嗠ㅬ囦᳸䋑‐졔竃 [ 414.222894][ T5594] usb 3-1: SerialNumber: ᰉ [ 414.457805][ T822] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 414.495061][ T822] usb 7-1: device descriptor read/8, error -71 [ 414.522432][ T5594] aiptek 3-1:46.138: interface has no int in endpoints, but must have minimum 1 [ 414.539116][ T5594] aiptek 3-1:46.191: interface has no int in endpoints, but must have minimum 1 [ 414.553278][ T5594] usb 3-1: USB disconnect, device number 117 [ 414.613992][ T822] usb usb7-port1: unable to enumerate USB device [ 414.919150][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 414.942548][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 414.943117][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 414.943148][ T9] usb 8-1: media controller created [ 414.957570][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 415.005748][ T9] DVB: Unable to find symbol mt352_attach() [ 415.045997][ T9] DVB: Unable to find symbol nxt6000_attach() [ 415.046014][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 415.063726][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input127 [ 415.069692][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 415.069714][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 415.069732][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 415.069748][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 415.078057][ T9] usb 8-1: USB disconnect, device number 20 [ 415.205152][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 415.561273][T10663] FAULT_INJECTION: forcing a failure. [ 415.561273][T10663] name failslab, interval 1, probability 0, space 0, times 0 [ 415.561306][T10663] CPU: 0 UID: 0 PID: 10663 Comm: syz.0.1489 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 415.561331][T10663] Tainted: [L]=SOFTLOCKUP [ 415.561337][T10663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 415.561347][T10663] Call Trace: [ 415.561355][T10663] [ 415.561363][T10663] dump_stack_lvl+0xe8/0x150 [ 415.561390][T10663] should_fail_ex+0x46b/0x600 [ 415.561420][T10663] should_failslab+0xa8/0x100 [ 415.561444][T10663] __kmalloc_noprof+0xdf/0x7b0 [ 415.561464][T10663] ? video_usercopy+0x1b1/0x1450 [ 415.561494][T10663] video_usercopy+0x1b1/0x1450 [ 415.561523][T10663] ? __pfx___video_do_ioctl+0x10/0x10 [ 415.561548][T10663] ? __pfx_video_usercopy+0x10/0x10 [ 415.561579][T10663] ? __fget_files+0x2a/0x420 [ 415.561600][T10663] ? __fget_files+0x2a/0x420 [ 415.561615][T10663] ? __fget_files+0x3a6/0x420 [ 415.561629][T10663] v4l2_ioctl+0x190/0x1e0 [ 415.561645][T10663] ? __pfx_v4l2_ioctl+0x10/0x10 [ 415.561667][T10663] __se_sys_ioctl+0xff/0x170 [ 415.561689][T10663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.561709][T10663] do_syscall_64+0x174/0x580 [ 415.561727][T10663] ? trace_irq_disable+0x3b/0x140 [ 415.561748][T10663] ? clear_bhb_loop+0x40/0x90 [ 415.561770][T10663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.561788][T10663] RIP: 0033:0x7fda16f2ce59 [ 415.561801][T10663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.561810][T10663] RSP: 002b:00007fda15186028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 415.561822][T10663] RAX: ffffffffffffffda RBX: 00007fda171a5fa0 RCX: 00007fda16f2ce59 [ 415.561829][T10663] RDX: 0000200000000480 RSI: 00000000c100565c RDI: 0000000000000003 [ 415.561836][T10663] RBP: 00007fda15186090 R08: 0000000000000000 R09: 0000000000000000 [ 415.561843][T10663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.561849][T10663] R13: 00007fda171a6038 R14: 00007fda171a5fa0 R15: 00007ffe9b9365d8 [ 415.561865][T10663] [ 416.057863][ T9] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 416.208021][ T7894] usb 7-1: new full-speed USB device number 90 using dummy_hcd [ 416.222467][ T9] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 416.222498][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.222518][ T9] usb 8-1: Product: syz [ 416.222533][ T9] usb 8-1: Manufacturer: syz [ 416.222548][ T9] usb 8-1: SerialNumber: syz [ 416.234506][ T9] usb 8-1: config 0 descriptor?? [ 416.370148][ T7894] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.372456][ T7894] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 416.372473][ T7894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.372484][ T7894] usb 7-1: Product: syz [ 416.372492][ T7894] usb 7-1: Manufacturer: syz [ 416.372500][ T7894] usb 7-1: SerialNumber: syz [ 416.390600][ T7894] usb 7-1: config 0 descriptor?? [ 416.421005][ T7894] mcba_usb 7-1:0.0: Can't find endpoints [ 416.447190][ T9] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 416.625678][T10677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.626479][T10677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.664629][ T5594] usb 7-1: USB disconnect, device number 90 [ 417.676765][ T9] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 417.680778][ T9] usb 8-1: USB disconnect, device number 21 [ 418.265853][T10704] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20000 [ 418.267036][T10704] netlink: 'syz.7.1503': attribute type 27 has an invalid length. [ 418.540559][T10723] FAULT_INJECTION: forcing a failure. [ 418.540559][T10723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.540582][T10723] CPU: 0 UID: 0 PID: 10723 Comm: syz.6.1511 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 418.540598][T10723] Tainted: [L]=SOFTLOCKUP [ 418.540601][T10723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 418.540608][T10723] Call Trace: [ 418.540612][T10723] [ 418.540617][T10723] dump_stack_lvl+0xe8/0x150 [ 418.540634][T10723] should_fail_ex+0x46b/0x600 [ 418.540653][T10723] _copy_to_user+0x31/0xb0 [ 418.540667][T10723] simple_read_from_buffer+0xe1/0x170 [ 418.540687][T10723] proc_fail_nth_read+0x1be/0x230 [ 418.540707][T10723] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 418.540721][T10723] ? rw_verify_area+0x2ac/0x4e0 [ 418.540733][T10723] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 418.540745][T10723] vfs_read+0x212/0xa80 [ 418.540761][T10723] ? __pfx_vfs_read+0x10/0x10 [ 418.540774][T10723] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 418.540791][T10723] ? lockdep_hardirqs_on+0x7a/0x110 [ 418.540801][T10723] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 418.540817][T10723] ? mutex_lock_nested+0x152/0x1d0 [ 418.540829][T10723] ? fdget_pos+0x252/0x320 [ 418.540844][T10723] ksys_read+0x156/0x270 [ 418.540857][T10723] ? __pfx_ksys_read+0x10/0x10 [ 418.540873][T10723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.540884][T10723] do_syscall_64+0x174/0x580 [ 418.540894][T10723] ? trace_irq_disable+0x3b/0x140 [ 418.540905][T10723] ? clear_bhb_loop+0x40/0x90 [ 418.540918][T10723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.540928][T10723] RIP: 0033:0x7fd3a130d68e [ 418.540938][T10723] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 418.540947][T10723] RSP: 002b:00007fd39f5a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 418.540958][T10723] RAX: ffffffffffffffda RBX: 00007fd39f5a66c0 RCX: 00007fd3a130d68e [ 418.540966][T10723] RDX: 000000000000000f RSI: 00007fd39f5a60a0 RDI: 0000000000000005 [ 418.540972][T10723] RBP: 00007fd39f5a6090 R08: 0000000000000000 R09: 0000000000000000 [ 418.540979][T10723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.540985][T10723] R13: 00007fd3a15c6038 R14: 00007fd3a15c5fa0 R15: 00007ffe0f10d8b8 [ 418.541001][T10723] [ 418.707917][ T5594] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 418.817211][T10729] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.830161][T10729] FAULT_INJECTION: forcing a failure. [ 418.830161][T10729] name fail_iommufd, interval 1, probability 0, space 0, times 1 [ 418.830195][T10729] CPU: 0 UID: 0 PID: 10729 Comm: syz.6.1514 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 418.830221][T10729] Tainted: [L]=SOFTLOCKUP [ 418.830228][T10729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 418.830240][T10729] Call Trace: [ 418.830247][T10729] [ 418.830255][T10729] dump_stack_lvl+0xe8/0x150 [ 418.830283][T10729] should_fail_ex+0x46b/0x600 [ 418.830323][T10729] iommufd_get_object+0x78/0x4b0 [ 418.830344][T10729] ? tomoyo_path_number_perm+0x219/0x630 [ 418.830372][T10729] ? __pfx_iommufd_get_object+0x10/0x10 [ 418.830390][T10729] ? tomoyo_path_number_perm+0x219/0x630 [ 418.830424][T10729] iommufd_get_hw_info+0x263/0xa10 [ 418.830455][T10729] ? __pfx_iommufd_get_hw_info+0x10/0x10 [ 418.830486][T10729] iommufd_fops_ioctl+0x4b8/0x5d0 [ 418.830510][T10729] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 418.830535][T10729] ? __fget_files+0x2a/0x420 [ 418.830558][T10729] ? __fget_files+0x2a/0x420 [ 418.830577][T10729] ? bpf_lsm_file_ioctl+0x9/0x20 [ 418.830600][T10729] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 418.830621][T10729] __se_sys_ioctl+0xff/0x170 [ 418.830642][T10729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.830663][T10729] do_syscall_64+0x174/0x580 [ 418.830680][T10729] ? trace_irq_disable+0x3b/0x140 [ 418.830700][T10729] ? clear_bhb_loop+0x40/0x90 [ 418.830721][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.830739][T10729] RIP: 0033:0x7fd3a134ce59 [ 418.830756][T10729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.830773][T10729] RSP: 002b:00007fd39f5a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.830793][T10729] RAX: ffffffffffffffda RBX: 00007fd3a15c5fa0 RCX: 00007fd3a134ce59 [ 418.830806][T10729] RDX: 0000200000000380 RSI: 0000000000003b8a RDI: 0000000000000003 [ 418.830818][T10729] RBP: 00007fd39f5a6090 R08: 0000000000000000 R09: 0000000000000000 [ 418.830829][T10729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.830840][T10729] R13: 00007fd3a15c6038 R14: 00007fd3a15c5fa0 R15: 00007ffe0f10d8b8 [ 418.830868][T10729] [ 418.859637][ T5594] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.859690][ T5594] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 418.859714][ T5594] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.874648][ T5594] usb 8-1: config 0 descriptor?? [ 418.929003][ T5594] pwc: Askey VC010 type 2 USB webcam detected. [ 419.101260][ T5594] pwc: send_video_command error -71 [ 419.101278][ T5594] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 419.101386][ T5594] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 419.123267][ T5594] usb 8-1: USB disconnect, device number 22 [ 419.417839][ T5712] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 419.467869][ T7894] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 419.579542][ T5712] usb 3-1: config 46 has an invalid interface number: 138 but max is 1 [ 419.579572][ T5712] usb 3-1: config 46 has an invalid interface number: 191 but max is 1 [ 419.579592][ T5712] usb 3-1: config 46 has no interface number 0 [ 419.579601][ T5712] usb 3-1: config 46 has no interface number 1 [ 419.579633][ T5712] usb 3-1: config 46 interface 138 altsetting 56 endpoint 0x3 has invalid maxpacket 520, setting to 64 [ 419.579648][ T5712] usb 3-1: config 46 interface 138 altsetting 56 endpoint 0x6 has invalid maxpacket 959, setting to 64 [ 419.579662][ T5712] usb 3-1: config 46 interface 138 altsetting 56 has an endpoint descriptor with address 0x1A, changing to 0xA [ 419.579676][ T5712] usb 3-1: config 46 interface 138 altsetting 56 endpoint 0xD has invalid maxpacket 2039, setting to 64 [ 419.579691][ T5712] usb 3-1: config 46 interface 138 altsetting 56 has a duplicate endpoint with address 0xD, skipping [ 419.579705][ T5712] usb 3-1: config 46 interface 138 altsetting 56 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 419.579721][ T5712] usb 3-1: config 46 interface 138 altsetting 56 has a duplicate endpoint with address 0x4, skipping [ 419.579733][ T5712] usb 3-1: config 46 interface 138 altsetting 56 has an invalid descriptor for endpoint zero, skipping [ 419.579744][ T5712] usb 3-1: config 46 interface 138 altsetting 56 has a duplicate endpoint with address 0x4, skipping [ 419.579755][ T5712] usb 3-1: config 46 interface 138 altsetting 56 has a duplicate endpoint with address 0xA, skipping [ 419.579780][ T5712] usb 3-1: config 46 interface 191 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 419.579791][ T5712] usb 3-1: config 46 interface 191 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 419.579801][ T5712] usb 3-1: config 46 interface 191 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 419.579813][ T5712] usb 3-1: config 46 interface 191 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 419.579824][ T5712] usb 3-1: config 46 interface 191 altsetting 8 endpoint 0x5 has invalid maxpacket 975, setting to 64 [ 419.579837][ T5712] usb 3-1: config 46 interface 191 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 419.579848][ T5712] usb 3-1: config 46 interface 191 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 419.579859][ T5712] usb 3-1: config 46 interface 138 has no altsetting 0 [ 419.579869][ T5712] usb 3-1: config 46 interface 191 has no altsetting 0 [ 419.582009][ T5712] usb 3-1: New USB device found, idVendor=08ca, idProduct=0021, bcdDevice=5d.22 [ 419.582036][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.582057][ T5712] usb 3-1: Product: ц [ 419.582070][ T5712] usb 3-1: Manufacturer: 咞䥪츭ꡨ퉎湩腈뒖ť䜲皆蒬ಓ攆奫ꯛ풿䜶䋬﯍茽莕ꥴꇏ览㉕蹭䑃嶫锐獏丌뷜뗑澢렾ᔭ꿓ଫ顋鈐徽慚츱꛲霈䵩ᾼᫀ앾Ὁꊐ㽽嵽ࠜ캏당嗠ㅬ囦᳸䋑‐졔竃 [ 419.582084][ T5712] usb 3-1: SerialNumber: ᰉ [ 419.607908][ T5594] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 419.639742][ T7894] usb 7-1: config 0 has an invalid interface number: 197 but max is 0 [ 419.639771][ T7894] usb 7-1: config 0 has no interface number 0 [ 419.639801][ T7894] usb 7-1: too many endpoints for config 0 interface 197 altsetting 106: 74, using maximum allowed: 30 [ 419.639838][ T7894] usb 7-1: config 0 interface 197 altsetting 106 has 0 endpoint descriptors, different from the interface descriptor's value: 74 [ 419.639865][ T7894] usb 7-1: config 0 interface 197 has no altsetting 0 [ 419.642117][ T7894] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 419.642143][ T7894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.642163][ T7894] usb 7-1: Product: syz [ 419.642177][ T7894] usb 7-1: Manufacturer: syz [ 419.642191][ T7894] usb 7-1: SerialNumber: syz [ 419.647497][ T7894] usb 7-1: config 0 descriptor?? [ 419.792744][ T5594] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.792799][ T5594] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 419.793033][ T5594] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.833636][ T5594] usb 8-1: config 0 descriptor?? [ 419.893904][ T5594] pwc: Askey VC010 type 2 USB webcam detected. [ 420.017414][ T5712] aiptek 3-1:46.138: interface has no int in endpoints, but must have minimum 1 [ 420.025567][T10737] FAULT_INJECTION: forcing a failure. [ 420.025567][T10737] name failslab, interval 1, probability 0, space 0, times 0 [ 420.025610][T10737] CPU: 0 UID: 0 PID: 10737 Comm: syz.6.1518 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 420.025637][T10737] Tainted: [L]=SOFTLOCKUP [ 420.025644][T10737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 420.025664][T10737] Call Trace: [ 420.025672][T10737] [ 420.025680][T10737] dump_stack_lvl+0xe8/0x150 [ 420.025708][T10737] should_fail_ex+0x46b/0x600 [ 420.025739][T10737] should_failslab+0xa8/0x100 [ 420.025763][T10737] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 420.025784][T10737] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 420.025807][T10737] ? dup_task_struct+0x52/0x860 [ 420.025837][T10737] dup_task_struct+0x52/0x860 [ 420.025861][T10737] ? rt_spin_unlock+0x160/0x200 [ 420.025885][T10737] copy_process+0x837/0x43d0 [ 420.025938][T10737] ? __pfx_copy_process+0x10/0x10 [ 420.025976][T10737] vhost_task_create+0x1f9/0x380 [ 420.025996][T10737] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 420.026021][T10737] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 420.026047][T10737] ? __pfx_vhost_task_create+0x10/0x10 [ 420.026075][T10737] ? __pfx_vhost_task_fn+0x10/0x10 [ 420.026100][T10737] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 420.026125][T10737] ? lockdep_hardirqs_on+0x7a/0x110 [ 420.026143][T10737] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 420.026168][T10737] ? mutex_lock_nested+0x152/0x1d0 [ 420.026190][T10737] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 420.026218][T10737] kvm_mmu_post_init_vm+0x147/0x2d0 [ 420.026247][T10737] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 420.026281][T10737] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 420.026304][T10737] ? do_raw_spin_lock+0x12b/0x2f0 [ 420.026335][T10737] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 420.026361][T10737] ? lockdep_hardirqs_on+0x7a/0x110 [ 420.026378][T10737] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 420.026403][T10737] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 420.026431][T10737] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 420.026454][T10737] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 420.026480][T10737] ? lockdep_hardirqs_on+0x7a/0x110 [ 420.026497][T10737] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 420.026523][T10737] ? rt_write_unlock+0x190/0x230 [ 420.026548][T10737] kvm_vcpu_ioctl+0xa65/0xfe0 [ 420.026578][T10737] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 420.026622][T10737] ? __fget_files+0x2a/0x420 [ 420.026652][T10737] ? __fget_files+0x2a/0x420 [ 420.026669][T10737] ? __fget_files+0x3a6/0x420 [ 420.026686][T10737] ? __fget_files+0x2a/0x420 [ 420.026706][T10737] ? bpf_lsm_file_ioctl+0x9/0x20 [ 420.026729][T10737] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 420.026754][T10737] __se_sys_ioctl+0xff/0x170 [ 420.026776][T10737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.026797][T10737] do_syscall_64+0x174/0x580 [ 420.026814][T10737] ? trace_irq_disable+0x3b/0x140 [ 420.026834][T10737] ? clear_bhb_loop+0x40/0x90 [ 420.026857][T10737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.026875][T10737] RIP: 0033:0x7fd3a134ce59 [ 420.026893][T10737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.026908][T10737] RSP: 002b:00007fd39f5a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.026927][T10737] RAX: ffffffffffffffda RBX: 00007fd3a15c5fa0 RCX: 00007fd3a134ce59 [ 420.026941][T10737] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 420.026952][T10737] RBP: 00007fd39f5a6090 R08: 0000000000000000 R09: 0000000000000000 [ 420.026964][T10737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.026975][T10737] R13: 00007fd3a15c6038 R14: 00007fd3a15c5fa0 R15: 00007ffe0f10d8b8 [ 420.027005][T10737] [ 420.244759][ T5594] pwc: recv_control_msg error -32 req 02 val 2b00 [ 420.246269][ T5594] pwc: recv_control_msg error -32 req 02 val 2700 [ 420.247457][ T5594] pwc: recv_control_msg error -32 req 02 val 2c00 [ 420.249862][ T5594] pwc: recv_control_msg error -32 req 04 val 1000 [ 420.251114][ T5594] pwc: recv_control_msg error -32 req 04 val 1300 [ 420.252422][ T5594] pwc: recv_control_msg error -32 req 04 val 1400 [ 420.253939][ T5594] pwc: recv_control_msg error -32 req 02 val 2000 [ 420.255105][ T5594] pwc: recv_control_msg error -32 req 02 val 2100 [ 420.256360][ T5594] pwc: recv_control_msg error -32 req 04 val 1500 [ 420.465595][ T38] kauditd_printk_skb: 26 callbacks suppressed [ 420.465612][ T38] audit: type=1326 audit(1779866363.455:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10714 comm="syz.7.1508" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba0a6ce59 code=0x7ffc0000 [ 420.468316][ T38] audit: type=1326 audit(1779866363.455:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10714 comm="syz.7.1508" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba0a6ce59 code=0x7ffc0000 [ 420.471042][ T38] audit: type=1326 audit(1779866363.465:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10714 comm="syz.7.1508" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbba0a6caeb code=0x7ffc0000 [ 420.471816][ T38] audit: type=1326 audit(1779866363.465:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10714 comm="syz.7.1508" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbba0a6caeb code=0x7ffc0000 [ 420.472601][ T38] audit: type=1326 audit(1779866363.465:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10714 comm="syz.7.1508" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbba0a6caeb code=0x7ffc0000 [ 420.473700][ T38] audit: type=1326 audit(1779866363.465:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10714 comm="syz.7.1508" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbba0a6caeb code=0x7ffc0000 [ 420.474541][ T38] audit: type=1326 audit(1779866363.465:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10714 comm="syz.7.1508" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbba0a6caeb code=0x7ffc0000 [ 420.475464][ T38] audit: type=1326 audit(1779866363.465:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10714 comm="syz.7.1508" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbba0a6caeb code=0x7ffc0000 [ 420.476255][ T38] audit: type=1326 audit(1779866363.465:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10714 comm="syz.7.1508" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbba0a6caeb code=0x7ffc0000 [ 420.477070][ T38] audit: type=1326 audit(1779866363.465:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10714 comm="syz.7.1508" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbba0a6caeb code=0x7ffc0000 [ 420.753601][ T5712] aiptek 3-1:46.191: interface has no int in endpoints, but must have minimum 1 [ 420.782750][ T5712] usb 3-1: USB disconnect, device number 118 [ 420.793633][ T5594] pwc: recv_control_msg error -71 req 02 val 2400 [ 420.795092][ T5594] pwc: recv_control_msg error -71 req 02 val 2600 [ 420.795859][ T5594] pwc: recv_control_msg error -71 req 02 val 2900 [ 420.796965][ T5594] pwc: recv_control_msg error -71 req 02 val 2800 [ 420.803715][ T5594] pwc: recv_control_msg error -71 req 04 val 1100 [ 420.808209][ T5594] pwc: recv_control_msg error -71 req 04 val 1200 [ 420.914961][ T5594] pwc: Registered as video103. [ 420.940128][ T5594] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input130 [ 421.062584][ T5594] usb 8-1: USB disconnect, device number 23 [ 421.133218][ T7894] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 421.141102][ T7894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 421.141950][ T7894] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 421.141999][ T7894] usb 7-1: media controller created [ 421.164506][ T7894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 421.237511][ T7894] DVB: Unable to find symbol mt352_attach() [ 421.290553][ T7894] DVB: Unable to find symbol nxt6000_attach() [ 421.290563][ T7894] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 421.293070][ T7894] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input131 [ 421.298920][ T7894] dvb-usb: schedule remote query interval to 1000 msecs. [ 421.298942][ T7894] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 421.298959][ T7894] dvb-usb: bulk message failed: -22 (7/0) [ 421.298975][ T7894] dvb-usb: bulk message failed: -22 (7/0) [ 421.309376][ T7894] usb 7-1: USB disconnect, device number 91 [ 421.364522][ T5712] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 421.447169][ T7894] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 421.528442][ T5712] usb 3-1: Using ep0 maxpacket: 16 [ 421.531280][ T5712] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 421.533443][ T5712] usb 3-1: New USB device found, idVendor=0e41, idProduct=4247, bcdDevice= 0.40 [ 421.533471][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.533491][ T5712] usb 3-1: Product: ю [ 421.533503][ T5712] usb 3-1: Manufacturer: ฑ싋黤⪘作찘苋ȿ얎䴈甆瞒틮좁蛼鉙ꅼ쪀Ѡה䩡６㖪㚦ᾧ圹䋩誈尙䔲禮ざਐꋕ⭰洫꙱蚒蓶䍀ㆄ随㡖 [ 421.533515][ T5712] usb 3-1: SerialNumber: ࠔ [ 421.831803][ T5712] usb 3-1: BAAD GENERIC IO: no channels? [ 421.919928][ T32] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 421.962838][ T5712] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 421.993254][ T5712] usb 3-1: USB disconnect, device number 119 [ 422.036685][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 422.091540][ T32] usb 8-1: config 0 has an invalid interface number: 197 but max is 0 [ 422.091577][ T32] usb 8-1: config 0 has no interface number 0 [ 422.091608][ T32] usb 8-1: too many endpoints for config 0 interface 197 altsetting 106: 74, using maximum allowed: 30 [ 422.091638][ T32] usb 8-1: config 0 interface 197 altsetting 106 has 0 endpoint descriptors, different from the interface descriptor's value: 74 [ 422.091653][ T32] usb 8-1: config 0 interface 197 has no altsetting 0 [ 422.093745][ T32] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 422.093774][ T32] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.093792][ T32] usb 8-1: Product: syz [ 422.093800][ T32] usb 8-1: Manufacturer: syz [ 422.093808][ T32] usb 8-1: SerialNumber: syz [ 422.182039][ T32] usb 8-1: config 0 descriptor?? [ 422.357786][ T5712] usb 3-1: new low-speed USB device number 120 using dummy_hcd [ 422.467966][ T5594] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 422.550479][ T5712] usb 3-1: unable to get BOS descriptor or descriptor too short [ 422.551606][ T5712] usb 3-1: config 8 has an invalid interface number: 242 but max is 0 [ 422.551631][ T5712] usb 3-1: config 8 has no interface number 0 [ 422.551676][ T5712] usb 3-1: config 8 interface 242 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 422.551727][ T5712] usb 3-1: config 8 interface 242 has no altsetting 0 [ 422.554806][ T5712] usb 3-1: string descriptor 0 read error: -22 [ 422.554957][ T5712] usb 3-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice= 1.79 [ 422.554971][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.644915][ T5594] usb 7-1: config 0 has an invalid interface number: 197 but max is 0 [ 422.644943][ T5594] usb 7-1: config 0 has no interface number 0 [ 422.644973][ T5594] usb 7-1: too many endpoints for config 0 interface 197 altsetting 106: 74, using maximum allowed: 30 [ 422.645013][ T5594] usb 7-1: config 0 interface 197 altsetting 106 has 0 endpoint descriptors, different from the interface descriptor's value: 74 [ 422.645042][ T5594] usb 7-1: config 0 interface 197 has no altsetting 0 [ 422.684177][ T5594] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 422.684207][ T5594] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.684227][ T5594] usb 7-1: Product: syz [ 422.684242][ T5594] usb 7-1: Manufacturer: syz [ 422.684256][ T5594] usb 7-1: SerialNumber: syz [ 422.747888][ T5594] usb 7-1: config 0 descriptor?? [ 422.984043][ T5712] qmi_wwan 3-1:8.242: probe with driver qmi_wwan failed with error -22 [ 423.040195][ T5712] usb 3-1: USB disconnect, device number 120 [ 423.079224][T10767] FAULT_INJECTION: forcing a failure. [ 423.079224][T10767] name failslab, interval 1, probability 0, space 0, times 0 [ 423.079642][T10767] CPU: 1 UID: 0 PID: 10767 Comm: syz.6.1527 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 423.079669][T10767] Tainted: [L]=SOFTLOCKUP [ 423.079676][T10767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 423.079687][T10767] Call Trace: [ 423.079695][T10767] [ 423.079703][T10767] dump_stack_lvl+0xe8/0x150 [ 423.079731][T10767] should_fail_ex+0x46b/0x600 [ 423.079765][T10767] should_failslab+0xa8/0x100 [ 423.079790][T10767] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 423.079810][T10767] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 423.079833][T10767] ? dup_task_struct+0x52/0x860 [ 423.079864][T10767] dup_task_struct+0x52/0x860 [ 423.079888][T10767] ? rt_spin_unlock+0x160/0x200 [ 423.079920][T10767] copy_process+0x837/0x43d0 [ 423.079976][T10767] ? __pfx_copy_process+0x10/0x10 [ 423.080013][T10767] vhost_task_create+0x1f9/0x380 [ 423.080033][T10767] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 423.080058][T10767] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 423.080085][T10767] ? __pfx_vhost_task_create+0x10/0x10 [ 423.080113][T10767] ? __pfx_vhost_task_fn+0x10/0x10 [ 423.080137][T10767] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 423.080163][T10767] ? lockdep_hardirqs_on+0x7a/0x110 [ 423.080182][T10767] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 423.080208][T10767] ? mutex_lock_nested+0x152/0x1d0 [ 423.080228][T10767] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 423.080259][T10767] kvm_mmu_post_init_vm+0x147/0x2d0 [ 423.080287][T10767] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 423.080322][T10767] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 423.080346][T10767] ? do_raw_spin_lock+0x12b/0x2f0 [ 423.080376][T10767] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 423.080403][T10767] ? lockdep_hardirqs_on+0x7a/0x110 [ 423.080421][T10767] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 423.080446][T10767] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 423.080475][T10767] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 423.080500][T10767] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 423.080526][T10767] ? lockdep_hardirqs_on+0x7a/0x110 [ 423.080544][T10767] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 423.080568][T10767] ? rt_write_unlock+0x190/0x230 [ 423.080593][T10767] kvm_vcpu_ioctl+0xa65/0xfe0 [ 423.080623][T10767] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 423.080667][T10767] ? __fget_files+0x2a/0x420 [ 423.080688][T10767] ? __fget_files+0x2a/0x420 [ 423.080705][T10767] ? __fget_files+0x3a6/0x420 [ 423.080721][T10767] ? __fget_files+0x2a/0x420 [ 423.080739][T10767] ? bpf_lsm_file_ioctl+0x9/0x20 [ 423.080762][T10767] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 423.080783][T10767] __se_sys_ioctl+0xff/0x170 [ 423.080806][T10767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.080826][T10767] do_syscall_64+0x174/0x580 [ 423.080844][T10767] ? trace_irq_disable+0x3b/0x140 [ 423.080864][T10767] ? clear_bhb_loop+0x40/0x90 [ 423.080887][T10767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.080913][T10767] RIP: 0033:0x7fd3a134ce59 [ 423.080931][T10767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.080947][T10767] RSP: 002b:00007fd39f5a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 423.080967][T10767] RAX: ffffffffffffffda RBX: 00007fd3a15c5fa0 RCX: 00007fd3a134ce59 [ 423.080981][T10767] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 423.080992][T10767] RBP: 00007fd39f5a6090 R08: 0000000000000000 R09: 0000000000000000 [ 423.081004][T10767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.081016][T10767] R13: 00007fd3a15c6038 R14: 00007fd3a15c5fa0 R15: 00007ffe0f10d8b8 [ 423.081047][T10767] [ 423.585760][ T32] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 423.607485][ T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 423.614610][ T32] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 423.614674][ T32] usb 8-1: media controller created [ 423.644594][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 423.702500][ T32] DVB: Unable to find symbol mt352_attach() [ 423.746316][ T32] DVB: Unable to find symbol nxt6000_attach() [ 423.746331][ T32] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 423.754938][ T32] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input132 [ 423.761182][ T32] dvb-usb: schedule remote query interval to 1000 msecs. [ 423.761206][ T32] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 423.761223][ T32] dvb-usb: bulk message failed: -22 (7/0) [ 423.761239][ T32] dvb-usb: bulk message failed: -22 (7/0) [ 423.777610][ T32] usb 8-1: USB disconnect, device number 24 [ 423.856778][ T5773] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 423.874951][ T32] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 424.020766][ T5773] usb 3-1: Using ep0 maxpacket: 8 [ 424.047966][ T5773] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 424.047989][ T5773] usb 3-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config [ 424.048009][ T5773] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 424.048044][ T5773] usb 3-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 424.048066][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.071408][ T5773] usb 3-1: config 0 descriptor?? [ 424.185626][ T5594] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 424.198938][ T5594] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 424.200785][ T5594] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 424.200849][ T5594] usb 7-1: media controller created [ 424.234339][ T5594] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 424.279827][ T5594] DVB: Unable to find symbol mt352_attach() [ 424.311652][ T5594] DVB: Unable to find symbol nxt6000_attach() [ 424.311670][ T5594] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 424.316152][ T5594] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input133 [ 424.362742][ T5594] dvb-usb: schedule remote query interval to 1000 msecs. [ 424.362759][ T5594] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 424.362776][ T5594] dvb-usb: bulk message failed: -22 (7/0) [ 424.362785][ T5594] dvb-usb: bulk message failed: -22 (7/0) [ 424.402121][ T5594] usb 7-1: USB disconnect, device number 92 [ 424.435315][T10785] FAULT_INJECTION: forcing a failure. [ 424.435315][T10785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.435344][T10785] CPU: 0 UID: 0 PID: 10785 Comm: syz.7.1531 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 424.435364][T10785] Tainted: [L]=SOFTLOCKUP [ 424.435368][T10785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 424.435377][T10785] Call Trace: [ 424.435382][T10785] [ 424.435389][T10785] dump_stack_lvl+0xe8/0x150 [ 424.435410][T10785] should_fail_ex+0x46b/0x600 [ 424.435434][T10785] _copy_from_iter+0x1d3/0x1670 [ 424.435454][T10785] ? trace_kmem_cache_alloc+0x29/0xe0 [ 424.435469][T10785] ? __alloc_skb+0x27d/0x7d0 [ 424.435488][T10785] ? __pfx__copy_from_iter+0x10/0x10 [ 424.435499][T10785] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 424.435514][T10785] ? __alloc_skb+0x27d/0x7d0 [ 424.435534][T10785] ? netlink_sendmsg+0x650/0xb40 [ 424.435549][T10785] ? skb_put+0x11b/0x210 [ 424.435570][T10785] netlink_sendmsg+0x6c0/0xb40 [ 424.435590][T10785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.435605][T10785] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 424.435626][T10785] ? aa_sock_msg_perm+0x122/0x200 [ 424.435642][T10785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.435655][T10785] sock_sendmsg_nosec+0x13a/0x180 [ 424.435675][T10785] ____sys_sendmsg+0x55c/0x870 [ 424.435693][T10785] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.435713][T10785] ? import_iovec+0x73/0xa0 [ 424.435730][T10785] ___sys_sendmsg+0x2a5/0x360 [ 424.435743][T10785] ? __lock_acquire+0x6b5/0x2d10 [ 424.435771][T10785] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.435809][T10785] ? __fget_files+0x2a/0x420 [ 424.435822][T10785] ? __fget_files+0x3a6/0x420 [ 424.435843][T10785] __x64_sys_sendmsg+0x1c3/0x2a0 [ 424.435858][T10785] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 424.435879][T10785] ? __pfx_ksys_write+0x10/0x10 [ 424.435900][T10785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.435916][T10785] do_syscall_64+0x174/0x580 [ 424.435930][T10785] ? trace_irq_disable+0x3b/0x140 [ 424.435944][T10785] ? clear_bhb_loop+0x40/0x90 [ 424.435961][T10785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.435975][T10785] RIP: 0033:0x7fbba0a6ce59 [ 424.435989][T10785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.436002][T10785] RSP: 002b:00007fbb9ecc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.436018][T10785] RAX: ffffffffffffffda RBX: 00007fbba0ce5fa0 RCX: 00007fbba0a6ce59 [ 424.436028][T10785] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 424.436037][T10785] RBP: 00007fbb9ecc6090 R08: 0000000000000000 R09: 0000000000000000 [ 424.436046][T10785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.436054][T10785] R13: 00007fbba0ce6038 R14: 00007fbba0ce5fa0 R15: 00007ffff3852898 [ 424.436076][T10785] [ 424.785254][T10788] nbd: socks must be embedded in a SOCK_ITEM attr [ 424.796258][ T5594] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 424.987619][T10792] FAULT_INJECTION: forcing a failure. [ 424.987619][T10792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.987679][T10792] CPU: 1 UID: 0 PID: 10792 Comm: syz.7.1533 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 424.987705][T10792] Tainted: [L]=SOFTLOCKUP [ 424.987712][T10792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 424.987723][T10792] Call Trace: [ 424.987730][T10792] [ 424.987737][T10792] dump_stack_lvl+0xe8/0x150 [ 424.987764][T10792] should_fail_ex+0x46b/0x600 [ 424.987794][T10792] _copy_from_user+0x2d/0xb0 [ 424.987823][T10792] procfs_procmap_ioctl+0x337/0xe10 [ 424.987856][T10792] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 424.987889][T10792] ? __fget_files+0x2a/0x420 [ 424.987909][T10792] ? __fget_files+0x2a/0x420 [ 424.987925][T10792] ? __fget_files+0x3a6/0x420 [ 424.987942][T10792] ? __fget_files+0x2a/0x420 [ 424.987962][T10792] ? bpf_lsm_file_ioctl+0x9/0x20 [ 424.987986][T10792] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 424.988012][T10792] __se_sys_ioctl+0xff/0x170 [ 424.988034][T10792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.988054][T10792] do_syscall_64+0x174/0x580 [ 424.988073][T10792] ? trace_irq_disable+0x3b/0x140 [ 424.988092][T10792] ? clear_bhb_loop+0x40/0x90 [ 424.988115][T10792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.988133][T10792] RIP: 0033:0x7fbba0a6ce59 [ 424.988152][T10792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.988174][T10792] RSP: 002b:00007fbb9ecc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.988194][T10792] RAX: ffffffffffffffda RBX: 00007fbba0ce5fa0 RCX: 00007fbba0a6ce59 [ 424.988208][T10792] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000003 [ 424.988221][T10792] RBP: 00007fbb9ecc6090 R08: 0000000000000000 R09: 0000000000000000 [ 424.988233][T10792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.988245][T10792] R13: 00007fbba0ce6038 R14: 00007fbba0ce5fa0 R15: 00007ffff3852898 [ 424.988274][T10792] [ 425.214601][T10798] sg_write: data in/out 745472/136 bytes for SCSI command 0x0-- guessing data in; [ 425.214601][T10798] program syz.2.1530 not setting count and/or reply_len properly [ 425.460707][T10806] mmap: syz.7.1538 (10806) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 425.609309][T10814] FAULT_INJECTION: forcing a failure. [ 425.609309][T10814] name failslab, interval 1, probability 0, space 0, times 0 [ 425.609346][T10814] CPU: 1 UID: 0 PID: 10814 Comm: syz.6.1542 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 425.609372][T10814] Tainted: [L]=SOFTLOCKUP [ 425.609379][T10814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 425.609390][T10814] Call Trace: [ 425.609398][T10814] [ 425.609407][T10814] dump_stack_lvl+0xe8/0x150 [ 425.609435][T10814] should_fail_ex+0x46b/0x600 [ 425.609467][T10814] should_failslab+0xa8/0x100 [ 425.609492][T10814] kmem_cache_alloc_noprof+0x87/0x680 [ 425.609515][T10814] ? __pmd_alloc+0xa4/0x5e0 [ 425.609540][T10814] __pmd_alloc+0xa4/0x5e0 [ 425.609564][T10814] handle_mm_fault+0xf4d/0x14d0 [ 425.609589][T10814] ? handle_mm_fault+0xed/0x14d0 [ 425.609614][T10814] ? __pfx_handle_mm_fault+0x10/0x10 [ 425.609648][T10814] ? __lock_acquire+0x6b5/0x2d10 [ 425.609673][T10814] ? lock_mm_and_find_vma+0xa7/0x340 [ 425.609699][T10814] do_user_addr_fault+0x75b/0x1340 [ 425.609737][T10814] exc_page_fault+0x6a/0xc0 [ 425.609766][T10814] asm_exc_page_fault+0x26/0x30 [ 425.609784][T10814] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 425.609808][T10814] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 425.609824][T10814] RSP: 0018:ffffc90004347a18 EFLAGS: 00050206 [ 425.609842][T10814] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038 [ 425.609855][T10814] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: ffffc90004347aa0 [ 425.609868][T10814] RBP: ffffc90004347c30 R08: ffffc90004347ad7 R09: 1ffff92000868f5a [ 425.609883][T10814] R10: dffffc0000000000 R11: fffff52000868f5b R12: ffffc90004347ba0 [ 425.609897][T10814] R13: dffffc0000000000 R14: ffffc90004347aa0 R15: 00002000000004c0 [ 425.609927][T10814] _copy_from_user+0x7a/0xb0 [ 425.609949][T10814] ___sys_recvmsg+0x175/0x590 [ 425.609975][T10814] ? __pfx____sys_recvmsg+0x10/0x10 [ 425.609999][T10814] ? __fget_files+0x2a/0x420 [ 425.610033][T10814] ? __fget_files+0x3a6/0x420 [ 425.610062][T10814] do_recvmmsg+0x33a/0x800 [ 425.610091][T10814] ? __pfx_do_recvmmsg+0x10/0x10 [ 425.610122][T10814] ? rt_mutex_slowunlock+0x1cb/0x300 [ 425.610160][T10814] __x64_sys_recvmmsg+0x198/0x250 [ 425.610192][T10814] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 425.610221][T10814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.610241][T10814] do_syscall_64+0x174/0x580 [ 425.610255][T10814] ? trace_irq_disable+0x3b/0x140 [ 425.610275][T10814] ? clear_bhb_loop+0x40/0x90 [ 425.610298][T10814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.610316][T10814] RIP: 0033:0x7fd3a134ce59 [ 425.610333][T10814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.610349][T10814] RSP: 002b:00007fd39f5a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 425.610367][T10814] RAX: ffffffffffffffda RBX: 00007fd3a15c5fa0 RCX: 00007fd3a134ce59 [ 425.610381][T10814] RDX: 0000000000000f02 RSI: 00002000000004c0 RDI: 0000000000000004 [ 425.610393][T10814] RBP: 00007fd39f5a6090 R08: 0000000000000000 R09: 0000000000000000 [ 425.610405][T10814] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000001 [ 425.610417][T10814] R13: 00007fd3a15c6038 R14: 00007fd3a15c5fa0 R15: 00007ffe0f10d8b8 [ 425.610446][T10814] [ 425.697792][ T5594] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 425.927164][ T5594] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 425.927193][ T5594] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.927212][ T5594] usb 8-1: Product: syz [ 425.927226][ T5594] usb 8-1: Manufacturer: syz [ 425.927239][ T5594] usb 8-1: SerialNumber: syz [ 426.016108][ T5594] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 426.068261][ T7894] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 426.474942][T10806] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1538'. [ 426.653766][T10844] FAULT_INJECTION: forcing a failure. [ 426.653766][T10844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.653801][T10844] CPU: 1 UID: 0 PID: 10844 Comm: syz.6.1556 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 426.653828][T10844] Tainted: [L]=SOFTLOCKUP [ 426.653835][T10844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 426.653846][T10844] Call Trace: [ 426.653854][T10844] [ 426.653862][T10844] dump_stack_lvl+0xe8/0x150 [ 426.653889][T10844] should_fail_ex+0x46b/0x600 [ 426.653920][T10844] _copy_from_user+0x2d/0xb0 [ 426.653942][T10844] do_pagemap_cmd+0x13d/0xc50 [ 426.653977][T10844] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 426.654019][T10844] ? __fget_files+0x2a/0x420 [ 426.654040][T10844] ? __fget_files+0x2a/0x420 [ 426.654057][T10844] ? __fget_files+0x3a6/0x420 [ 426.654073][T10844] ? __fget_files+0x2a/0x420 [ 426.654094][T10844] ? bpf_lsm_file_ioctl+0x9/0x20 [ 426.654118][T10844] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 426.654144][T10844] __se_sys_ioctl+0xff/0x170 [ 426.654166][T10844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.654186][T10844] do_syscall_64+0x174/0x580 [ 426.654204][T10844] ? trace_irq_disable+0x3b/0x140 [ 426.654224][T10844] ? clear_bhb_loop+0x40/0x90 [ 426.654247][T10844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.654266][T10844] RIP: 0033:0x7fd3a134ce59 [ 426.654284][T10844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.654303][T10844] RSP: 002b:00007fd39f5a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.654323][T10844] RAX: ffffffffffffffda RBX: 00007fd3a15c5fa0 RCX: 00007fd3a134ce59 [ 426.654336][T10844] RDX: 0000200000000140 RSI: 00000000c0606610 RDI: 0000000000000003 [ 426.654349][T10844] RBP: 00007fd39f5a6090 R08: 0000000000000000 R09: 0000000000000000 [ 426.654362][T10844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.654374][T10844] R13: 00007fd3a15c6038 R14: 00007fd3a15c5fa0 R15: 00007ffe0f10d8b8 [ 426.654403][T10844] [ 427.398519][ T7894] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 427.406821][ T5773] usb 3-1: USB disconnect, device number 121 [ 427.411994][ T5610] usb 8-1: USB disconnect, device number 25 [ 427.537315][T10862] FAULT_INJECTION: forcing a failure. [ 427.537315][T10862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.537349][T10862] CPU: 0 UID: 0 PID: 10862 Comm: syz.2.1564 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 427.537376][T10862] Tainted: [L]=SOFTLOCKUP [ 427.537383][T10862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 427.537394][T10862] Call Trace: [ 427.537402][T10862] [ 427.537411][T10862] dump_stack_lvl+0xe8/0x150 [ 427.537437][T10862] should_fail_ex+0x46b/0x600 [ 427.537468][T10862] _copy_to_iter+0x404/0x17d0 [ 427.537498][T10862] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 427.537522][T10862] ? __pfx__copy_to_iter+0x10/0x10 [ 427.537542][T10862] ? rt_spin_lock+0x1e0/0x400 [ 427.537567][T10862] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 427.537600][T10862] __skb_datagram_iter+0xf8/0x980 [ 427.537622][T10862] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 427.537648][T10862] skb_copy_datagram_iter+0xb5/0x240 [ 427.537670][T10862] netlink_recvmsg+0x2c3/0xa50 [ 427.537697][T10862] ? __pfx_netlink_recvmsg+0x10/0x10 [ 427.537720][T10862] ? __pfx_aa_sk_perm+0x10/0x10 [ 427.537752][T10862] ? aa_sock_msg_perm+0x122/0x200 [ 427.537770][T10862] ? __pfx_netlink_recvmsg+0x10/0x10 [ 427.537791][T10862] sock_recvmsg_nosec+0x130/0x170 [ 427.537819][T10862] ____sys_recvmsg+0x23d/0x4f0 [ 427.537847][T10862] ? __pfx_____sys_recvmsg+0x10/0x10 [ 427.537882][T10862] ? import_iovec+0x73/0xa0 [ 427.537905][T10862] ___sys_recvmsg+0x215/0x590 [ 427.537930][T10862] ? __pfx____sys_recvmsg+0x10/0x10 [ 427.537954][T10862] ? __fget_files+0x2a/0x420 [ 427.537990][T10862] ? __fget_files+0x3a6/0x420 [ 427.538018][T10862] do_recvmmsg+0x33a/0x800 [ 427.538045][T10862] ? __pfx_do_recvmmsg+0x10/0x10 [ 427.538077][T10862] ? _copy_from_user+0x94/0xb0 [ 427.538120][T10862] __x64_sys_recvmmsg+0x1b7/0x250 [ 427.538144][T10862] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 427.538173][T10862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.538193][T10862] do_syscall_64+0x174/0x580 [ 427.538210][T10862] ? trace_irq_disable+0x3b/0x140 [ 427.538230][T10862] ? clear_bhb_loop+0x40/0x90 [ 427.538252][T10862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.538271][T10862] RIP: 0033:0x7f7fa668ce59 [ 427.538289][T10862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.538305][T10862] RSP: 002b:00007f7fa48de028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 427.538326][T10862] RAX: ffffffffffffffda RBX: 00007f7fa6905fa0 RCX: 00007f7fa668ce59 [ 427.538341][T10862] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 427.538354][T10862] RBP: 00007f7fa48de090 R08: 0000200000003700 R09: 0000000000000000 [ 427.538367][T10862] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 427.538379][T10862] R13: 00007f7fa6906038 R14: 00007f7fa6905fa0 R15: 00007fff119e3f18 [ 427.538409][T10862] [ 427.548215][ T7894] ath9k_htc: Failed to initialize the device [ 427.548961][ T5610] usb 8-1: ath9k_htc: USB layer deinitialized [ 427.886443][T10873] No control pipe specified [ 428.173015][T10886] FAULT_INJECTION: forcing a failure. [ 428.173015][T10886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.173047][T10886] CPU: 1 UID: 0 PID: 10886 Comm: syz.6.1574 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 428.173068][T10886] Tainted: [L]=SOFTLOCKUP [ 428.173072][T10886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 428.173080][T10886] Call Trace: [ 428.173087][T10886] [ 428.173094][T10886] dump_stack_lvl+0xe8/0x150 [ 428.173118][T10886] should_fail_ex+0x46b/0x600 [ 428.173144][T10886] _copy_from_user+0x2d/0xb0 [ 428.173162][T10886] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 428.173183][T10886] drm_ioctl+0x5d0/0xb80 [ 428.173206][T10886] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 428.173254][T10886] ? __pfx_drm_ioctl+0x10/0x10 [ 428.173281][T10886] ? __fget_files+0x2a/0x420 [ 428.173299][T10886] ? bpf_lsm_file_ioctl+0x9/0x20 [ 428.173320][T10886] ? __pfx_drm_ioctl+0x10/0x10 [ 428.173339][T10886] __se_sys_ioctl+0xff/0x170 [ 428.173358][T10886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.173377][T10886] do_syscall_64+0x174/0x580 [ 428.173391][T10886] ? trace_irq_disable+0x3b/0x140 [ 428.173407][T10886] ? clear_bhb_loop+0x40/0x90 [ 428.173423][T10886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.173436][T10886] RIP: 0033:0x7fd3a134ce59 [ 428.173451][T10886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.173463][T10886] RSP: 002b:00007fd39f5a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.173479][T10886] RAX: ffffffffffffffda RBX: 00007fd3a15c5fa0 RCX: 00007fd3a134ce59 [ 428.173489][T10886] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000014 [ 428.173498][T10886] RBP: 00007fd39f5a6090 R08: 0000000000000000 R09: 0000000000000000 [ 428.173507][T10886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.173515][T10886] R13: 00007fd3a15c6038 R14: 00007fd3a15c5fa0 R15: 00007ffe0f10d8b8 [ 428.173541][T10886] [ 428.541333][T10897] FAULT_INJECTION: forcing a failure. [ 428.541333][T10897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.541368][T10897] CPU: 1 UID: 0 PID: 10897 Comm: syz.6.1579 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 428.541394][T10897] Tainted: [L]=SOFTLOCKUP [ 428.541401][T10897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 428.541412][T10897] Call Trace: [ 428.541419][T10897] [ 428.541427][T10897] dump_stack_lvl+0xe8/0x150 [ 428.541454][T10897] should_fail_ex+0x46b/0x600 [ 428.541484][T10897] _copy_from_user+0x2d/0xb0 [ 428.541506][T10897] procfs_procmap_ioctl+0x337/0xe10 [ 428.541542][T10897] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 428.541578][T10897] ? __fget_files+0x2a/0x420 [ 428.541599][T10897] ? __fget_files+0x2a/0x420 [ 428.541616][T10897] ? __fget_files+0x3a6/0x420 [ 428.541632][T10897] ? __fget_files+0x2a/0x420 [ 428.541653][T10897] ? bpf_lsm_file_ioctl+0x9/0x20 [ 428.541677][T10897] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 428.541703][T10897] __se_sys_ioctl+0xff/0x170 [ 428.541724][T10897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.541745][T10897] do_syscall_64+0x174/0x580 [ 428.541764][T10897] ? trace_irq_disable+0x3b/0x140 [ 428.541783][T10897] ? clear_bhb_loop+0x40/0x90 [ 428.541806][T10897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.541825][T10897] RIP: 0033:0x7fd3a134ce59 [ 428.541843][T10897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.541858][T10897] RSP: 002b:00007fd39f5a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.541879][T10897] RAX: ffffffffffffffda RBX: 00007fd3a15c5fa0 RCX: 00007fd3a134ce59 [ 428.541892][T10897] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000003 [ 428.541905][T10897] RBP: 00007fd39f5a6090 R08: 0000000000000000 R09: 0000000000000000 [ 428.541916][T10897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.541927][T10897] R13: 00007fd3a15c6038 R14: 00007fd3a15c5fa0 R15: 00007ffe0f10d8b8 [ 428.541955][T10897] [ 428.626899][T10899] FAULT_INJECTION: forcing a failure. [ 428.626899][T10899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.626935][T10899] CPU: 0 UID: 0 PID: 10899 Comm: syz.7.1580 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 428.626961][T10899] Tainted: [L]=SOFTLOCKUP [ 428.626968][T10899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 428.626978][T10899] Call Trace: [ 428.626986][T10899] [ 428.626994][T10899] dump_stack_lvl+0xe8/0x150 [ 428.627021][T10899] should_fail_ex+0x46b/0x600 [ 428.627052][T10899] _copy_from_iter+0x1d3/0x1670 [ 428.627079][T10899] ? trace_kmem_cache_alloc+0x29/0xe0 [ 428.627098][T10899] ? __alloc_skb+0x27d/0x7d0 [ 428.627123][T10899] ? __pfx__copy_from_iter+0x10/0x10 [ 428.627139][T10899] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 428.627159][T10899] ? __alloc_skb+0x27d/0x7d0 [ 428.627188][T10899] ? netlink_sendmsg+0x650/0xb40 [ 428.627207][T10899] ? skb_put+0x11b/0x210 [ 428.627234][T10899] netlink_sendmsg+0x6c0/0xb40 [ 428.627262][T10899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.627283][T10899] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 428.627310][T10899] ? aa_sock_msg_perm+0x122/0x200 [ 428.627330][T10899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.627348][T10899] sock_sendmsg_nosec+0x13a/0x180 [ 428.627373][T10899] ____sys_sendmsg+0x55c/0x870 [ 428.627396][T10899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 428.627423][T10899] ? import_iovec+0x73/0xa0 [ 428.627446][T10899] ___sys_sendmsg+0x2a5/0x360 [ 428.627464][T10899] ? __lock_acquire+0x6b5/0x2d10 [ 428.627497][T10899] ? __pfx____sys_sendmsg+0x10/0x10 [ 428.627545][T10899] ? __fget_files+0x2a/0x420 [ 428.627563][T10899] ? __fget_files+0x3a6/0x420 [ 428.627590][T10899] __x64_sys_sendmsg+0x1c3/0x2a0 [ 428.627611][T10899] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 428.627641][T10899] ? __pfx_ksys_write+0x10/0x10 [ 428.627668][T10899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.627687][T10899] do_syscall_64+0x174/0x580 [ 428.627705][T10899] ? trace_irq_disable+0x3b/0x140 [ 428.627725][T10899] ? clear_bhb_loop+0x40/0x90 [ 428.627746][T10899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.627765][T10899] RIP: 0033:0x7fbba0a6ce59 [ 428.627782][T10899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.627798][T10899] RSP: 002b:00007fbb9ecc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.627818][T10899] RAX: ffffffffffffffda RBX: 00007fbba0ce5fa0 RCX: 00007fbba0a6ce59 [ 428.627831][T10899] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 428.627843][T10899] RBP: 00007fbb9ecc6090 R08: 0000000000000000 R09: 0000000000000000 [ 428.627855][T10899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.627867][T10899] R13: 00007fbba0ce6038 R14: 00007fbba0ce5fa0 R15: 00007ffff3852898 [ 428.627896][T10899] [ 429.399602][ T38] kauditd_printk_skb: 20 callbacks suppressed [ 429.399619][ T38] audit: type=1326 audit(1779866372.395:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1578" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa668ce59 code=0x7fc00000 [ 429.399864][ T38] audit: type=1326 audit(1779866372.395:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1578" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7fa668ce59 code=0x7fc00000 [ 429.400120][ T38] audit: type=1326 audit(1779866372.395:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1578" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa668ce59 code=0x7fc00000 [ 429.400357][ T38] audit: type=1326 audit(1779866372.395:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1578" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa668ce59 code=0x7fc00000 [ 429.400618][ T38] audit: type=1326 audit(1779866372.395:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1578" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa668ce59 code=0x7fc00000 [ 429.400985][ T38] audit: type=1326 audit(1779866372.395:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1578" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa668ce59 code=0x7fc00000 [ 429.401209][ T38] audit: type=1326 audit(1779866372.395:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1578" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa668ce59 code=0x7fc00000 [ 429.401478][ T38] audit: type=1326 audit(1779866372.395:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1578" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa668ce59 code=0x7fc00000 [ 429.401719][ T38] audit: type=1326 audit(1779866372.395:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1578" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa668ce59 code=0x7fc00000 [ 429.401920][ T38] audit: type=1326 audit(1779866372.395:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1578" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa668ce59 code=0x7fc00000 [ 429.827785][ T32] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 429.836961][T10926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.837523][T10926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.856512][T10927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.863795][T10926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.864509][T10926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.864866][T10927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.968328][ T32] usb 7-1: device descriptor read/64, error -71 [ 430.097917][ T5610] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 430.167833][ T9] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 430.217898][ T32] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 430.249439][ T5610] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.249489][ T5610] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 430.249524][ T5610] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 430.249548][ T5610] usb 8-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 430.249560][ T5610] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.252324][ T5610] usb 8-1: config 0 descriptor?? [ 430.332141][ T9] usb 3-1: config 46 has an invalid interface number: 138 but max is 1 [ 430.332171][ T9] usb 3-1: config 46 has an invalid interface number: 191 but max is 1 [ 430.332193][ T9] usb 3-1: config 46 has no interface number 0 [ 430.332210][ T9] usb 3-1: config 46 has no interface number 1 [ 430.332247][ T9] usb 3-1: config 46 interface 138 altsetting 56 endpoint 0x3 has invalid maxpacket 520, setting to 64 [ 430.332262][ T9] usb 3-1: config 46 interface 138 altsetting 56 endpoint 0x6 has invalid maxpacket 959, setting to 64 [ 430.332275][ T9] usb 3-1: config 46 interface 138 altsetting 56 has an endpoint descriptor with address 0x1A, changing to 0xA [ 430.332289][ T9] usb 3-1: config 46 interface 138 altsetting 56 endpoint 0xD has invalid maxpacket 2039, setting to 64 [ 430.332303][ T9] usb 3-1: config 46 interface 138 altsetting 56 has a duplicate endpoint with address 0xD, skipping [ 430.332315][ T9] usb 3-1: config 46 interface 138 altsetting 56 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 430.332328][ T9] usb 3-1: config 46 interface 138 altsetting 56 has a duplicate endpoint with address 0x4, skipping [ 430.332339][ T9] usb 3-1: config 46 interface 138 altsetting 56 has an invalid descriptor for endpoint zero, skipping [ 430.332350][ T9] usb 3-1: config 46 interface 138 altsetting 56 has a duplicate endpoint with address 0x4, skipping [ 430.332362][ T9] usb 3-1: config 46 interface 138 altsetting 56 has a duplicate endpoint with address 0xA, skipping [ 430.332381][ T9] usb 3-1: config 46 interface 191 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 430.332391][ T9] usb 3-1: config 46 interface 191 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 430.332402][ T9] usb 3-1: config 46 interface 191 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 430.332413][ T9] usb 3-1: config 46 interface 191 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 430.332424][ T9] usb 3-1: config 46 interface 191 altsetting 8 endpoint 0x5 has invalid maxpacket 975, setting to 64 [ 430.332437][ T9] usb 3-1: config 46 interface 191 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 430.332447][ T9] usb 3-1: config 46 interface 191 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 430.332458][ T9] usb 3-1: config 46 interface 138 has no altsetting 0 [ 430.332467][ T9] usb 3-1: config 46 interface 191 has no altsetting 0 [ 430.334597][ T9] usb 3-1: New USB device found, idVendor=08ca, idProduct=0021, bcdDevice=5d.22 [ 430.334624][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.334644][ T9] usb 3-1: Product: ц [ 430.334657][ T9] usb 3-1: Manufacturer: 咞䥪츭ꡨ퉎湩腈뒖ť䜲皆蒬ಓ攆奫ꯛ풿䜶䋬﯍茽莕ꥴꇏ览㉕蹭䑃嶫锐獏丌뷜뗑澢렾ᔭ꿓ଫ顋鈐徽慚츱꛲霈䵩ᾼᫀ앾Ὁꊐ㽽嵽ࠜ캏당嗠ㅬ囦᳸䋑‐졔竃 [ 430.334671][ T9] usb 3-1: SerialNumber: ᰉ [ 430.350200][ T32] usb 7-1: device descriptor read/64, error -71 [ 430.464998][ T822] usb 8-1: USB disconnect, device number 26 [ 430.468501][ T32] usb usb7-port1: attempt power cycle [ 430.662610][ T9] aiptek 3-1:46.138: interface has no int in endpoints, but must have minimum 1 [ 430.682783][ T9] aiptek 3-1:46.191: interface has no int in endpoints, but must have minimum 1 [ 430.700021][ T9] usb 3-1: USB disconnect, device number 122 [ 430.829496][ T32] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 430.846532][T10937] FAULT_INJECTION: forcing a failure. [ 430.846532][T10937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.846555][T10937] CPU: 0 UID: 0 PID: 10937 Comm: syz.0.1594 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 430.846570][T10937] Tainted: [L]=SOFTLOCKUP [ 430.846574][T10937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 430.846580][T10937] Call Trace: [ 430.846584][T10937] [ 430.846589][T10937] dump_stack_lvl+0xe8/0x150 [ 430.846605][T10937] should_fail_ex+0x46b/0x600 [ 430.846627][T10937] _copy_from_iter+0x1d3/0x1670 [ 430.846642][T10937] ? trace_kmem_cache_alloc+0x29/0xe0 [ 430.846653][T10937] ? __alloc_skb+0x27d/0x7d0 [ 430.846669][T10937] ? __pfx__copy_from_iter+0x10/0x10 [ 430.846678][T10937] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 430.846689][T10937] ? __alloc_skb+0x27d/0x7d0 [ 430.846706][T10937] ? netlink_sendmsg+0x650/0xb40 [ 430.846716][T10937] ? skb_put+0x11b/0x210 [ 430.846733][T10937] netlink_sendmsg+0x6c0/0xb40 [ 430.846747][T10937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.846759][T10937] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 430.846774][T10937] ? aa_sock_msg_perm+0x122/0x200 [ 430.846786][T10937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.846796][T10937] sock_sendmsg_nosec+0x13a/0x180 [ 430.846811][T10937] ____sys_sendmsg+0x55c/0x870 [ 430.846824][T10937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.846839][T10937] ? import_iovec+0x73/0xa0 [ 430.846851][T10937] ___sys_sendmsg+0x2a5/0x360 [ 430.846861][T10937] ? __lock_acquire+0x6b5/0x2d10 [ 430.846879][T10937] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.846905][T10937] ? __fget_files+0x2a/0x420 [ 430.846914][T10937] ? __fget_files+0x3a6/0x420 [ 430.846928][T10937] __x64_sys_sendmsg+0x1c3/0x2a0 [ 430.846940][T10937] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 430.846955][T10937] ? __pfx_ksys_write+0x10/0x10 [ 430.846971][T10937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.846982][T10937] do_syscall_64+0x174/0x580 [ 430.846993][T10937] ? trace_irq_disable+0x3b/0x140 [ 430.847004][T10937] ? clear_bhb_loop+0x40/0x90 [ 430.847017][T10937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.847027][T10937] RIP: 0033:0x7fda16f2ce59 [ 430.847038][T10937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.847047][T10937] RSP: 002b:00007fda15186028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.847058][T10937] RAX: ffffffffffffffda RBX: 00007fda171a5fa0 RCX: 00007fda16f2ce59 [ 430.847066][T10937] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 430.847072][T10937] RBP: 00007fda15186090 R08: 0000000000000000 R09: 0000000000000000 [ 430.847079][T10937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.847085][T10937] R13: 00007fda171a6038 R14: 00007fda171a5fa0 R15: 00007ffe9b9365d8 [ 430.847100][T10937] [ 430.858651][ T32] usb 7-1: device descriptor read/8, error -71 [ 431.097846][ T32] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 431.119510][ T32] usb 7-1: device descriptor read/8, error -71 [ 431.228052][ T32] usb usb7-port1: unable to enumerate USB device [ 431.255895][T10945] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 431.424430][T10952] FAULT_INJECTION: forcing a failure. [ 431.424430][T10952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.424465][T10952] CPU: 0 UID: 0 PID: 10952 Comm: syz.2.1601 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 431.424491][T10952] Tainted: [L]=SOFTLOCKUP [ 431.424498][T10952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 431.424509][T10952] Call Trace: [ 431.424516][T10952] [ 431.424524][T10952] dump_stack_lvl+0xe8/0x150 [ 431.424552][T10952] should_fail_ex+0x46b/0x600 [ 431.424580][T10952] _copy_from_user+0x2d/0xb0 [ 431.424603][T10952] dvb_usercopy+0x15c/0x2e0 [ 431.424626][T10952] ? __pfx_dvb_frontend_do_ioctl+0x10/0x10 [ 431.424648][T10952] ? __pfx_dvb_usercopy+0x10/0x10 [ 431.424680][T10952] ? __fget_files+0x2a/0x420 [ 431.424697][T10952] ? __fget_files+0x3a6/0x420 [ 431.424714][T10952] ? __fget_files+0x2a/0x420 [ 431.424733][T10952] ? __pfx_dvb_frontend_ioctl+0x10/0x10 [ 431.424754][T10952] dvb_frontend_ioctl+0x5c/0x80 [ 431.424775][T10952] __se_sys_ioctl+0xff/0x170 [ 431.424797][T10952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.424815][T10952] do_syscall_64+0x174/0x580 [ 431.424832][T10952] ? trace_irq_disable+0x3b/0x140 [ 431.424852][T10952] ? clear_bhb_loop+0x40/0x90 [ 431.424875][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.424892][T10952] RIP: 0033:0x7f7fa668ce59 [ 431.424908][T10952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.424923][T10952] RSP: 002b:00007f7fa48de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.424942][T10952] RAX: ffffffffffffffda RBX: 00007f7fa6905fa0 RCX: 00007f7fa668ce59 [ 431.424956][T10952] RDX: 0000200000000080 RSI: 0000000040246f4c RDI: 0000000000000003 [ 431.424968][T10952] RBP: 00007f7fa48de090 R08: 0000000000000000 R09: 0000000000000000 [ 431.424983][T10952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.424994][T10952] R13: 00007f7fa6906038 R14: 00007f7fa6905fa0 R15: 00007fff119e3f18 [ 431.425024][T10952] [ 431.474823][T10955] Unsupported ieee802154 address type: 0 [ 431.476462][T10955] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1602'. [ 431.927889][ T9] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 432.047830][ T822] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 432.090807][ T9] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 432.090835][ T9] usb 3-1: config 0 has no interface number 0 [ 432.090865][ T9] usb 3-1: too many endpoints for config 0 interface 197 altsetting 106: 74, using maximum allowed: 30 [ 432.090893][ T9] usb 3-1: config 0 interface 197 altsetting 106 has 0 endpoint descriptors, different from the interface descriptor's value: 74 [ 432.090908][ T9] usb 3-1: config 0 interface 197 has no altsetting 0 [ 432.093026][ T9] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 432.093053][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.093073][ T9] usb 3-1: Product: syz [ 432.093088][ T9] usb 3-1: Manufacturer: syz [ 432.093100][ T9] usb 3-1: SerialNumber: syz [ 432.096889][ T9] usb 3-1: config 0 descriptor?? [ 432.185810][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 432.198284][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 432.198929][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 432.198962][ T9] usb 3-1: media controller created [ 432.216346][ T822] usb 8-1: config 46 has an invalid interface number: 138 but max is 1 [ 432.216376][ T822] usb 8-1: config 46 has an invalid interface number: 191 but max is 1 [ 432.216398][ T822] usb 8-1: config 46 has no interface number 0 [ 432.216414][ T822] usb 8-1: config 46 has no interface number 1 [ 432.216468][ T822] usb 8-1: config 46 interface 138 altsetting 56 endpoint 0x3 has invalid maxpacket 520, setting to 64 [ 432.216494][ T822] usb 8-1: config 46 interface 138 altsetting 56 endpoint 0x6 has invalid maxpacket 959, setting to 64 [ 432.216519][ T822] usb 8-1: config 46 interface 138 altsetting 56 has an endpoint descriptor with address 0x1A, changing to 0xA [ 432.216544][ T822] usb 8-1: config 46 interface 138 altsetting 56 endpoint 0xD has invalid maxpacket 2039, setting to 64 [ 432.216572][ T822] usb 8-1: config 46 interface 138 altsetting 56 has a duplicate endpoint with address 0xD, skipping [ 432.216594][ T822] usb 8-1: config 46 interface 138 altsetting 56 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 432.216619][ T822] usb 8-1: config 46 interface 138 altsetting 56 has a duplicate endpoint with address 0x4, skipping [ 432.216640][ T822] usb 8-1: config 46 interface 138 altsetting 56 has an invalid descriptor for endpoint zero, skipping [ 432.216661][ T822] usb 8-1: config 46 interface 138 altsetting 56 has a duplicate endpoint with address 0x4, skipping [ 432.216683][ T822] usb 8-1: config 46 interface 138 altsetting 56 has a duplicate endpoint with address 0xA, skipping [ 432.216718][ T822] usb 8-1: config 46 interface 191 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 432.216737][ T822] usb 8-1: config 46 interface 191 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 432.216758][ T822] usb 8-1: config 46 interface 191 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 432.216780][ T822] usb 8-1: config 46 interface 191 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 432.216801][ T822] usb 8-1: config 46 interface 191 altsetting 8 endpoint 0x5 has invalid maxpacket 975, setting to 64 [ 432.216826][ T822] usb 8-1: config 46 interface 191 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 432.216852][ T822] usb 8-1: config 46 interface 191 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 432.216873][ T822] usb 8-1: config 46 interface 138 has no altsetting 0 [ 432.216891][ T822] usb 8-1: config 46 interface 191 has no altsetting 0 [ 432.220961][ T822] usb 8-1: New USB device found, idVendor=08ca, idProduct=0021, bcdDevice=5d.22 [ 432.220990][ T822] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.221010][ T822] usb 8-1: Product: ц [ 432.221024][ T822] usb 8-1: Manufacturer: 咞䥪츭ꡨ퉎湩腈뒖ť䜲皆蒬ಓ攆奫ꯛ풿䜶䋬﯍茽莕ꥴꇏ览㉕蹭䑃嶫锐獏丌뷜뗑澢렾ᔭ꿓ଫ顋鈐徽慚츱꛲霈䵩ᾼᫀ앾Ὁꊐ㽽嵽ࠜ캏당嗠ㅬ囦᳸䋑‐졔竃 [ 432.221050][ T822] usb 8-1: SerialNumber: ᰉ [ 432.405219][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 432.543022][ T822] aiptek 8-1:46.138: interface has no int in endpoints, but must have minimum 1 [ 432.575939][ T822] aiptek 8-1:46.191: interface has no int in endpoints, but must have minimum 1 [ 432.596778][ T822] usb 8-1: USB disconnect, device number 27 [ 432.650293][ T9] DVB: Unable to find symbol mt352_attach() [ 432.719973][ T9] DVB: Unable to find symbol nxt6000_attach() [ 432.720077][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 432.725336][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input138 [ 432.743801][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 432.743824][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 432.743842][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 432.743857][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 433.515376][ T822] usb 3-1: USB disconnect, device number 123 [ 433.778813][ T822] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 434.038633][T10994] [ 434.038646][T10994] ====================================================== [ 434.038654][T10994] WARNING: possible circular locking dependency detected [ 434.038740][T10994] syzkaller #0 Tainted: G L [ 434.038752][T10994] ------------------------------------------------------ [ 434.038760][T10994] syz.6.1616/10994 is trying to acquire lock: [ 434.038770][T10994] ffffffff8e2d0678 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x239/0x1920 [ 434.038855][T10994] [ 434.038855][T10994] but task is already holding lock: [ 434.038862][T10994] ffff888026e8d120 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: blk_throtl_init+0x279/0x410 [ 434.038906][T10994] [ 434.038906][T10994] which lock already depends on the new lock. [ 434.038906][T10994] [ 434.038913][T10994] [ 434.038913][T10994] the existing dependency chain (in reverse order) is: [ 434.038921][T10994] [ 434.038921][T10994] -> #2 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 434.038988][T10994] blk_alloc_queue+0x54e/0x690 [ 434.039011][T10994] __blk_mq_alloc_disk+0x197/0x390 [ 434.039046][T10994] loop_add+0x482/0xb50 [ 434.039067][T10994] loop_init+0xd9/0x170 [ 434.039136][T10994] do_one_initcall+0x250/0x870 [ 434.039156][T10994] do_initcall_level+0x104/0x190 [ 434.039194][T10994] do_initcalls+0x59/0xa0 [ 434.039214][T10994] kernel_init_freeable+0x2a6/0x3e0 [ 434.039235][T10994] kernel_init+0x1d/0x1d0 [ 434.039252][T10994] ret_from_fork+0x514/0xb70 [ 434.039270][T10994] ret_from_fork_asm+0x1a/0x30 [ 434.039289][T10994] [ 434.039289][T10994] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 434.039313][T10994] fs_reclaim_acquire+0x71/0x100 [ 434.039332][T10994] __kmalloc_noprof+0x9d/0x7b0 [ 434.039349][T10994] pcpu_create_chunk+0x54/0xcd0 [ 434.039368][T10994] pcpu_alloc_noprof+0x73d/0x1920 [ 434.039387][T10994] do_kmem_cache_create+0x11a/0x9a0 [ 434.039408][T10994] __kmem_cache_create_args+0x31d/0x450 [ 434.039427][T10994] user_namespaces_init+0xb0/0x130 [ 434.039466][T10994] do_one_initcall+0x250/0x870 [ 434.039485][T10994] do_initcall_level+0x104/0x190 [ 434.039506][T10994] do_initcalls+0x59/0xa0 [ 434.039526][T10994] kernel_init_freeable+0x2a6/0x3e0 [ 434.039548][T10994] kernel_init+0x1d/0x1d0 [ 434.039565][T10994] ret_from_fork+0x514/0xb70 [ 434.039584][T10994] ret_from_fork_asm+0x1a/0x30 [ 434.039603][T10994] [ 434.039603][T10994] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 434.039634][T10994] __lock_acquire+0x15a5/0x2d10 [ 434.039653][T10994] lock_acquire+0x106/0x350 [ 434.039670][T10994] _mutex_lock_killable+0x63/0x1d0 [ 434.039690][T10994] pcpu_alloc_noprof+0x239/0x1920 [ 434.039710][T10994] __percpu_counter_init_many+0x43/0x370 [ 434.039732][T10994] blkg_rwstat_init+0x2c/0x170 [ 434.039747][T10994] throtl_pd_alloc+0xb6/0x460 [ 434.039763][T10994] blkcg_activate_policy+0x692/0xb40 [ 434.039785][T10994] blk_throtl_init+0x2f6/0x410 [ 434.039801][T10994] tg_set_conf+0x1d6/0x4c0 [ 434.039818][T10994] cgroup_file_write+0x331/0x8f0 [ 434.039841][T10994] kernfs_fop_write_iter+0x3b0/0x540 [ 434.039869][T10994] vfs_write+0x629/0xba0 [ 434.039887][T10994] ksys_write+0x156/0x270 [ 434.039904][T10994] do_syscall_64+0x174/0x580 [ 434.039921][T10994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.039938][T10994] [ 434.039938][T10994] other info that might help us debug this: [ 434.039938][T10994] [ 434.039945][T10994] Chain exists of: [ 434.039945][T10994] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#17 [ 434.039945][T10994] [ 434.039978][T10994] Possible unsafe locking scenario: [ 434.039978][T10994] [ 434.039992][T10994] CPU0 CPU1 [ 434.039998][T10994] ---- ---- [ 434.040041][T10994] lock(&q->q_usage_counter(io)#17); [ 434.040059][T10994] lock(fs_reclaim); [ 434.040073][T10994] lock(&q->q_usage_counter(io)#17); [ 434.040091][T10994] lock(pcpu_alloc_mutex); [ 434.040102][T10994] [ 434.040102][T10994] *** DEADLOCK *** [ 434.040102][T10994] [ 434.040108][T10994] 7 locks held by syz.6.1616/10994: [ 434.040119][T10994] #0: ffff888031c49128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 434.040161][T10994] #1: ffff888035c60480 (sb_writers#10){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 434.040207][T10994] #2: ffff8880332de478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 434.040253][T10994] #3: ffff88803eeebf08 (kn->active#73){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 434.040304][T10994] #4: ffff888026e8d358 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x2b0/0x3c0 [ 434.040349][T10994] #5: ffff888026e8d120 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: blk_throtl_init+0x279/0x410 [ 434.040395][T10994] #6: ffff888026e8d158 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: blk_throtl_init+0x279/0x410 [ 434.040437][T10994] [ 434.040437][T10994] stack backtrace: [ 434.040451][T10994] CPU: 1 UID: 0 PID: 10994 Comm: syz.6.1616 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 434.040497][T10994] Tainted: [L]=SOFTLOCKUP [ 434.040504][T10994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 434.040515][T10994] Call Trace: [ 434.040523][T10994] [ 434.040531][T10994] dump_stack_lvl+0xe8/0x150 [ 434.040552][T10994] print_circular_bug+0x2e1/0x300 [ 434.040577][T10994] check_noncircular+0x12e/0x150 [ 434.040603][T10994] __lock_acquire+0x15a5/0x2d10 [ 434.040632][T10994] ? lockdep_hardirqs_on+0x7a/0x110 [ 434.040653][T10994] ? __kasan_kmalloc+0x93/0xb0 [ 434.040674][T10994] ? pcpu_alloc_noprof+0x239/0x1920 [ 434.040694][T10994] lock_acquire+0x106/0x350 [ 434.040713][T10994] ? pcpu_alloc_noprof+0x239/0x1920 [ 434.040735][T10994] ? pcpu_alloc_noprof+0x239/0x1920 [ 434.040758][T10994] ? pcpu_alloc_noprof+0x239/0x1920 [ 434.040778][T10994] _mutex_lock_killable+0x63/0x1d0 [ 434.040799][T10994] ? pcpu_alloc_noprof+0x239/0x1920 [ 434.040820][T10994] ? pcpu_alloc_noprof+0x239/0x1920 [ 434.040842][T10994] pcpu_alloc_noprof+0x239/0x1920 [ 434.040869][T10994] __percpu_counter_init_many+0x43/0x370 [ 434.040895][T10994] blkg_rwstat_init+0x2c/0x170 [ 434.040912][T10994] throtl_pd_alloc+0xb6/0x460 [ 434.040930][T10994] ? __pfx_throtl_pd_alloc+0x10/0x10 [ 434.040947][T10994] blkcg_activate_policy+0x692/0xb40 [ 434.040978][T10994] blk_throtl_init+0x2f6/0x410 [ 434.040999][T10994] tg_set_conf+0x1d6/0x4c0 [ 434.041019][T10994] ? kernfs_root+0x1c/0x230 [ 434.041039][T10994] ? __pfx_tg_set_conf+0x10/0x10 [ 434.041060][T10994] ? kernfs_root+0x1c/0x230 [ 434.041077][T10994] ? kernfs_root+0x1c/0x230 [ 434.041095][T10994] ? kernfs_root+0x1c/0x230 [ 434.041113][T10994] ? kernfs_root+0x1ea/0x230 [ 434.041131][T10994] ? __pfx_tg_set_conf_uint+0x10/0x10 [ 434.041150][T10994] cgroup_file_write+0x331/0x8f0 [ 434.041176][T10994] ? __pfx_cgroup_file_write+0x10/0x10 [ 434.041199][T10994] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 434.041225][T10994] ? lockdep_hardirqs_on+0x7a/0x110 [ 434.041245][T10994] ? __pfx_cgroup_file_write+0x10/0x10 [ 434.041267][T10994] kernfs_fop_write_iter+0x3b0/0x540 [ 434.041293][T10994] vfs_write+0x629/0xba0 [ 434.041316][T10994] ? __pfx_vfs_write+0x10/0x10 [ 434.041336][T10994] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 434.041361][T10994] ? lockdep_hardirqs_on+0x7a/0x110 [ 434.041379][T10994] ? mutex_lock_nested+0x152/0x1d0 [ 434.041399][T10994] ? fdget_pos+0x252/0x320 [ 434.041420][T10994] ksys_write+0x156/0x270 [ 434.041440][T10994] ? __pfx_ksys_write+0x10/0x10 [ 434.041463][T10994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.041481][T10994] do_syscall_64+0x174/0x580 [ 434.041498][T10994] ? trace_irq_disable+0x3b/0x140 [ 434.041517][T10994] ? clear_bhb_loop+0x40/0x90 [ 434.041536][T10994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.041553][T10994] RIP: 0033:0x7fd3a134ce59 [ 434.041571][T10994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.041587][T10994] RSP: 002b:00007fd39f5a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 434.041606][T10994] RAX: ffffffffffffffda RBX: 00007fd3a15c5fa0 RCX: 00007fd3a134ce59 [ 434.041627][T10994] RDX: 000000000000006a RSI: 00002000000000c0 RDI: 0000000000000005 [ 434.041639][T10994] RBP: 00007fd39f5a6090 R08: 0000000000000000 R09: 0000000000000000 [ 434.041651][T10994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.041662][T10994] R13: 00007fd3a15c6038 R14: 00007fd3a15c5fa0 R15: 00007ffe0f10d8b8 [ 434.041682][T10994] [ 434.205798][T11000] IPVS: set_ctl: invalid protocol: 103 100.1.1.1:20000 [ 439.999160][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.999233][ T1335] ieee802154 phy1 wpan1: encryption failed: -22