last executing test programs: 12.290468728s ago: executing program 3 (id=1684): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa73, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x3, 0x4000003) socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x0, 0x0) unshare(0x24020400) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000680)={r5, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020, 0x0, 0x0, 0x2], [0x0, 0x2, 0x1], [0x0, 0x0, 0xfffffffffefffff8, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3fb, 0x34325241, 0x0, [r6, 0x0, 0x0, r7], [0x2b8]}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000480)) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) sync() 11.048841066s ago: executing program 4 (id=1688): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x2a, 0x5, 0x2000003, 0x18, 0x0, 0x5c, 0x8}}) gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000e80)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x4000}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000100000000000000000000cb6000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd60"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r5 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/51, 0x33}], 0x1}, 0x80) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010000104000000000000000000004000", @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\b\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="10001280080001006873720004000280"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[], 0xfdef) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500012f8b74ae53050571ff050000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) recvmsg(r6, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x142) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) 10.886015496s ago: executing program 0 (id=1689): syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) sync_file_range(0xffffffffffffffff, 0x800000000976, 0x80, 0x3) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f00000000c0)={r0}) 10.431976393s ago: executing program 4 (id=1690): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.152625996s ago: executing program 4 (id=1692): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000"], 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getroute={0x1c, 0x1a, 0x101, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x800}}, 0x1c}}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c", @ANYRES8=0x0, @ANYRES32=r2], 0x30}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000002fc0)) 9.768428549s ago: executing program 3 (id=1693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000004200"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r3, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000000740)=""/4086, 0xff6}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/242, 0xf2}, {&(0x7f0000002840)=""/247, 0xf7}, {&(0x7f00000000c0)=""/28, 0x1c}, {&(0x7f0000002a00)=""/248, 0xf8}], 0x8}, 0x1081}], 0x1, 0x2002, 0x0) 8.622724634s ago: executing program 0 (id=1696): r0 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) 8.621861802s ago: executing program 3 (id=1697): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=@ipv6_delrule={0x4c, 0x21, 0x1, 0x70bd2c, 0x25dfdbfb, {0xa, 0x14, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x1, 0xa}, [@FRA_SRC={0x14, 0x2, @loopback}, @FRA_DST={0x14, 0x1, @remote}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x15}, 0x44090) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/profiling', 0x101000, 0x118) sendfile(r1, r2, &(0x7f0000000280)=0x4227, 0x7) 8.487663668s ago: executing program 1 (id=1699): r0 = socket(0xa, 0x3, 0xff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xf, &(0x7f00000001c0)=ANY=[@ANYRES32=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@ip_ttl={{0x14, 0x0, 0x34, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3c}}}}], 0x38}, 0x24008004) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x40) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f0000000400)=0x800) syz_open_dev$dmmidi(0x0, 0x200, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r8, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) lchown(&(0x7f0000000180)='./file0\x00', r10, 0xffffffffffffffff) dup2(r11, r8) io_setup(0x101, &(0x7f0000000340)=0x0) io_submit(r12, 0x1, &(0x7f00000008c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x8, r0, 0x0, 0x300, 0x0, 0x0, 0x2}]) 8.433581099s ago: executing program 3 (id=1700): syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a00800040904c81e010103f70909050803ff030406090221072501"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@enum64={0x6, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x8, 0x8001, 0x101}]}]}, {0x0, [0x2e, 0x71, 0x0, 0x30, 0x5f, 0x2e]}}, 0x0, 0x38, 0x0, 0x1, 0x6abb}, 0x28) r0 = getuid() setreuid(r0, r0) socket$inet_udp(0x2, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 8.399896305s ago: executing program 2 (id=1701): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000101401"], 0x30}}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = gettid() keyctl$update(0x2, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3517, 0x173d, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0xa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x2000802, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7ffffd, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r5, 0x0, 0x0, 0x240c8806, &(0x7f0000000140)={0xa, 0x4c20, 0x0, @empty}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x80, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x210000, 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000180)=ANY=[@ANYBLOB="7472416e730670642c7266646e6f3d", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 8.29998514s ago: executing program 0 (id=1702): quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x80800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) unshare(0x22020600) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x60048840}, 0x4810) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10018, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket(0x40000000015, 0x805, 0x0) getsockopt(r8, 0x114, 0x5, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_POLL(r9, &(0x7f0000000200)={0x18, 0xfffffffffffffff5, 0x0, {0xfffffffa}}, 0x18) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r10, &(0x7f0000000100)=[{&(0x7f0000000140)="19", 0x1}], 0x1) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x18, 0x0, 0x6, {0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902"], 0x0) 6.607289844s ago: executing program 4 (id=1703): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="11000000000000a1"], 0x14) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="000cf0000000b0063469d4ce89e0c31ce60c577aad2982114eb3d0db87a3b09f5f5f0c516ea0b0142ab8ab87755a17c7fa01b98ed9682e6d6229e5f96ec8fc1bdbcc5d64ab3b4a3d2353e172cdb8b463509ebec1ce7731ca76352d32b9aae1183572a5ac67e8045aef816b60d386d9d57b0fac5cd2bbec8bb7d47e632129e539391cf981460e9a1f485ba6fd1cbf88dd81cf0c07b5447deec25786252a6adbc740cd0a021c531bec8398e7be783f4eab37"], &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x0, 0x11}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5e}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x71}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x0, 0x6, 0xbf99, 0x0, 0x194, 0x0, 0x4897, 0x4, 0x4, 0x40, 0x9, 0xa}}, &(0x7f0000000300)={0x20, 0x85, 0x4}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0xc8b0}, &(0x7f00000003c0)={0x20, 0x89, 0x2, 0x1}}) r1 = syz_open_dev$video4linux(&(0x7f0000000540), 0xff, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000380)={0x4, 0x8, "3fb55463caf7951b2b1c125692a6cba29b1437b627d3d246", {0x53, 0x1}, 0x6}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0xfffffffc, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x4040) ioctl$XFS_IOC_READLINK_BY_HANDLE(r1, 0xc038586c, &(0x7f00000005c0)={r2, &(0x7f0000000400)='{%@(&\x00', 0xc0880, &(0x7f0000000500)={@_ha_fsid={[0x4, 0x5]}, {0x7, 0x7ff, 0x1}}, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x1}) 6.431285158s ago: executing program 1 (id=1704): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESOCT=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) timerfd_create(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.294804849s ago: executing program 2 (id=1705): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000010c0)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x6, 0x9}) r0 = socket(0x10, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000200)={&(0x7f0000000100)=""/57, 0x39}) ptrace$setregset(0x4205, 0x0, 0x202, &(0x7f0000000040)={&(0x7f0000000340)}) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000), 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mount(0x0, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x280, 0x0, 'queue1\x00', 0xf}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) syz_io_uring_setup(0x487, &(0x7f0000000240)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300), &(0x7f0000000080), &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000d40)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001000)=[{{&(0x7f0000000400)=@caif, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000480)="eb9075b80f07ae687ecc81d0a072e6ec6a33b4e142e7da08961e50e5bba517bb049957df180351892ee9fee5d99ec2336df4452f0728e27cfde683bbd95ac00390cbb1573680fa22f484a7a99f13b8738a0566c5cd8ed5cf54f68bf067f89058f9d6db0750c93212198dcb77e0bcf7eaf4ee4d2fa6f91cccb8c0aa7e9e2c0be41e186e4918172d4af44da7da63faa0538964c9bde620bfbee6f122061445d9cdf4a8d36fda37a3cb6a5ffe4f764857", 0xaf}, {&(0x7f0000000540)="68f4b70f05eb7ee7c01335b18278956743c4d8eace8733ee443833630882dd1e9d5e440fcf00bffd48c62f6fc9e4d9451c307df891fe0cc9660be605695c5c942af285b50455d1df713bc3bf7ac07907238cd24934da66ba094673762b6a9fa81d35dc8658fd7e713474023d7b15895adf8ff17266834fbc267efdb27f81c27aa32c3c7cb9f797b1f8c36e94fc4d1b7f4b54c3cd2901ebefe848296ada716fa3f58a3efd3f7401e84a8ed0474a5cbb8ee05b89897712ba85dfba73fb75f58086577f45e6f8", 0xc5}, {&(0x7f0000000640)="9c947e86ee18d4d82512963ac3aba4678e78a2ddcc90f951b7f0063f7724e8eeac68ab09a815c318720f483c990574d14c41aca967da62a05dc61e32b1a07e1776fc5d80bb750e85e45befa3ea0e1a94424f1431", 0x54}, {&(0x7f00000006c0)="e714e6b9fb106ff7fc4203df06fd", 0xe}, {&(0x7f0000000700)="08932a099b4ebee9fe297a53e4aafa71736200d71d6b7dcf062c9905b4b772e71a1ae1cbfad499bc90cda85858a01ae3d5be70b0650aa47f8995718e9d063a8a48085d8d590bbe8ac30470cbf874c1594230443beb2e77529360b9d7a8f3d24670a3d32ddc71e93255207345c6a4f337cb66e19220fd08502354c60919c601e55b0592ec66be4082", 0x88}, {&(0x7f00000007c0)}, {&(0x7f0000000800)="907070234363910d300b6a9a608ab7798fd8657083966f265b4339763241ba5c0d1a082d3a78b7c192282268d363e15d5caaa9ed7100616ba890984b7c637c321b29dd409e1e0beefbffc1b3393c0260b13ea7ae8f5045cb2d498e56b8556ab0635cb58b550b6fa2cfc413e17c201532d87d312dfee64605bd9ed7a5fd7f5a87ccaf45efb4eac78140e0f0136e5320d852cde04e9aa4a387ca7c1f7d75f0889c7ddadcd229e7b679bc59cfc67f2bd1ee085da7aea9", 0xb5}, {&(0x7f00000008c0)="f9e8b7bcf87a117b24d8e88c182d8d19090650f37339b0d1bade89c028d639f7f8dd5d7a6623340587fd38f558d783ad515a6d19e0ed063fac17c39eb0166d86b8129696cbf173b86e1f1a388ceae9e43074f6bb297bccbe0f6fff6195a9e6e1ca5789674de00c79f33204a2ec3c8e07d85406a80a2e8ed6dc586ecbfa6379a3b17a704bd2add451005235e7eab0756254f31e6893c6c038c0", 0x99}, {&(0x7f0000000980)="c91630c573dab935afaf3282e708bded9488c28a20cadd0ddda76d3f88896e4cc619b7140a5e3db6be49b10e838f6d386d750b2ef46a0782aea5951d9f3fbf8e2b4eef3c538c229dbcd52d8278b093ff814c45219e40787dfd306596226236cb7514f6d00eff", 0x66}], 0x9, &(0x7f0000000b00)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x10}}, @mark={{0x14, 0x1, 0x24, 0x101}}], 0x60}}, {{&(0x7f0000000b80)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x3, 0x2, {0xa, 0x4e20, 0x100, @rand_addr=' \x01\x00', 0xfffffff2}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000c00)="f479678722f08e17529f449c80d85e335eb7433ff6d3dfbf64d5d8d0c9ad77392e747aedd1d3820da7be505e1b6182f3d4cf3755ec74d5365b57c7d4516fb5e50ddf1e1fc87b50a8301fc7c95b2460d0dd751abf6628c15b4c79408404af1ecd5940104e98037a5990b6a8c57dda49", 0x6f}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x1ce}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x4eff}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x78}}, {{&(0x7f0000000d80)=@nfc={0x27, r4, 0x1, 0x3}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="5d074a4247f1bf6ccf6de0e9161e7daea6491c21fc5d36bb2cf31a9e1e662f3777247cdb2f3acd0c33e57c7fe807b65881c975410276cc687639a8a7404327967ecb317f7387af19fabdfd9f8237e41d872b4240a552fffeaec0e7eca037f4aa6ca012c81bd678d13c91d81d6673fb5bdcf8592eaf5377ffd2a7475468f3118099d1456f66cba219948a6b9a29c9a5e2f55094e3b1be36a02adcc9099aec868bc0a892b571b03ceeb85a45c2faccdf1cf460ef667d120c8772d4014b3fdd6edfd2c85c", 0xc3}], 0x1, &(0x7f0000000f40)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0xf67}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xa8}}], 0x3, 0x20000002) write$UHID_INPUT(r3, 0x0, 0x0) 5.481216108s ago: executing program 2 (id=1706): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f281", 0xb7}], 0x1}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x268, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000003680)={0x2020}, 0x2020) 5.365750974s ago: executing program 2 (id=1707): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000004200"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r3, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000000740)=""/4086, 0xff6}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/242, 0xf2}, {&(0x7f0000002840)=""/247, 0xf7}, {&(0x7f00000000c0)=""/28, 0x1c}, {&(0x7f0000002a00)=""/248, 0xf8}], 0x8}, 0x1081}], 0x1, 0x2002, 0x0) 5.103471631s ago: executing program 3 (id=1708): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xf, 0xf}}}, 0x24}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0xf6e, 0xc8081) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff0200"/28], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x2e, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9ab01006f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mount(0x0, &(0x7f00000001c0)='./file7\x00', 0x0, 0x441, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000700)=[0x0, 0x0]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x60, 0x1403, 0x300, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2004c0c0}, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xa) mprotect(&(0x7f0000836000/0x4000)=nil, 0x4000, 0x0) getpeername(r5, 0x0, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="24000000130001002abd7000f8dbdf2504004f8008003300", @ANYRES32, @ANYBLOB="08001300", @ANYRES32=0x0, @ANYBLOB="9dae1288c572dafbe52ec070cefa103ce8b86210abfa10e4dc2863aba2fd8feaa62f3be70300e95ae1ae6bbb57dc9b391f39d1e6c112797c7a6422ba0355f354814d20f8dbf30a8f7964ed58a4c6cb3f61cab1d75c208f7d6c461e545e229e9ca2d1ba5296b053477cbc45d49d08e9acb4925e378acc15b2da62"], 0x24}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f00000000c0)) 5.016836016s ago: executing program 1 (id=1709): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000440), 0x3, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0xdf, &(0x7f0000001400)=""/223, 0x0, 0x4f}, 0x94) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000200)={0x7, @capture={0x0, 0x1, {0x3ff, 0x20}, 0xd, 0x7}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010301010000020000000000000000000c0002"], 0x20}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000dc0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1200000002bd"], 0x20) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0x1d, 0x6, 0xca11, 0x10000}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc5}, 0x24008004) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000480)={{{@in=@private=0xa010101, @in=@remote, 0x0, 0x7, 0x0, 0x840, 0x2, 0x0, 0xa0, 0x0, r9}, {0x0, 0x1, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffc, 0x7fffffffffd, 0x4, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@private, 0x1, 0x3c}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1001}}, 0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)) connect$inet6(r6, &(0x7f0000000040)={0xa, 0xfffe, 0xbb7d, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000300)={0x6, 0x1, &(0x7f00000000c0)=[0x1], &(0x7f0000000100)=[0x2, 0x2, 0x8, 0x8], &(0x7f0000000140)=[0x14d, 0x8, 0x800, 0x5, 0x4, 0x2], &(0x7f0000000180)=[0x4, 0x7, 0x1582, 0x3, 0x1, 0xffff, 0x95]}) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010102}, 0xfffffffffffffcc9) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), 0xffffffffffffffff) 4.209485785s ago: executing program 2 (id=1710): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x16, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={r0, 0x0, 0x20000000}, 0x20) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="84f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d", 0x84}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f", 0x50}], 0x1}}], 0x2, 0x2090) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, &(0x7f00000004c0)) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0xd, 0x2002) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x100001) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000400)={"6140b7b3", 0x7, 0xf, 0xc2, 0x7, 0x44, "ca0ae2a97ad90919865977b90b36b8", "5d8ac82d", "813c2a5e", "dba8cb17", ["b882a8cdc13713fc911c92a5", "2c6694f780f4451eb0116b42", "4d0eefb387e64f623355d909", "4f2f06f5006d1333ed0a738e"]}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x27a}, 0x8) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f00000001c0)={0x7, 0x0, '\x00', {0x0, @reserved}}) sendto$inet(r1, &(0x7f0000000580)='r', 0x1, 0x300080d5, 0x0, 0x0) 3.975141954s ago: executing program 0 (id=1711): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) (fail_nth: 3) 3.872477139s ago: executing program 1 (id=1712): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea", 0x1e9}], 0x1}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x335, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x1, &(0x7f0000000080)=[0x0]) read$FUSE(r3, &(0x7f0000003680)={0x2020}, 0x2020) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40980, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TIOCSTI(r4, 0x5412, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 3.087118568s ago: executing program 2 (id=1713): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd000000"], 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getroute={0x1c, 0x1a, 0x101, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x800}}, 0x1c}}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c", @ANYRES8=0x0, @ANYRES32=r2], 0x30}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000002fc0)) 3.080206296s ago: executing program 3 (id=1714): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x6a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) syz_open_pts(0xffffffffffffffff, 0x2) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 3.047258379s ago: executing program 4 (id=1715): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b70000008e000000bca31000000000002403000030feffff720a00fea4ffffff91a4f0ff000000001f030000000000002e140200000000002604fdffa4ffffff14010000000300001d130000000000007a0a00fe0020001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb150c537bf2085651d6dd6ce9bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf0134c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4136dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91ff073e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baaa244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b7025488316241f64c851a7fe7396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30c1675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010fcdb9913823333a70c2a4ab000000000000003f8dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc090000000000000061563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9901010000b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba435926b61c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0aa81192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e5789c6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06eef98aee88ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06ee0ff698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e913ac1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e495295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000060000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c97552606ffff97e86dc995604346262a177b06c634969a31b5717c416f8224662f4dd46d6081cb96dd6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1.469250201s ago: executing program 4 (id=1716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000010c0)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x6, 0x9}) r0 = socket(0x10, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000200)={&(0x7f0000000100)=""/57, 0x39}) ptrace$setregset(0x4205, 0x0, 0x202, &(0x7f0000000040)={&(0x7f0000000340)}) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000), 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mount(0x0, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x280, 0x0, 'queue1\x00', 0xf}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) syz_io_uring_setup(0x487, &(0x7f0000000240)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300), &(0x7f0000000080), &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000d40)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001000)=[{{&(0x7f0000000400)=@caif, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000480)="eb9075b80f07ae687ecc81d0a072e6ec6a33b4e142e7da08961e50e5bba517bb049957df180351892ee9fee5d99ec2336df4452f0728e27cfde683bbd95ac00390cbb1573680fa22f484a7a99f13b8738a0566c5cd8ed5cf54f68bf067f89058f9d6db0750c93212198dcb77e0bcf7eaf4ee4d2fa6f91cccb8c0aa7e9e2c0be41e186e4918172d4af44da7da63faa0538964c9bde620bfbee6f122061445d9cdf4a8d36fda37a3cb6a5ffe4f764857", 0xaf}, {&(0x7f0000000540)="68f4b70f05eb7ee7c01335b18278956743c4d8eace8733ee443833630882dd1e9d5e440fcf00bffd48c62f6fc9e4d9451c307df891fe0cc9660be605695c5c942af285b50455d1df713bc3bf7ac07907238cd24934da66ba094673762b6a9fa81d35dc8658fd7e713474023d7b15895adf8ff17266834fbc267efdb27f81c27aa32c3c7cb9f797b1f8c36e94fc4d1b7f4b54c3cd2901ebefe848296ada716fa3f58a3efd3f7401e84a8ed0474a5cbb8ee05b89897712ba85dfba73fb75f58086577f45e6f8", 0xc5}, {&(0x7f0000000640)="9c947e86ee18d4d82512963ac3aba4678e78a2ddcc90f951b7f0063f7724e8eeac68ab09a815c318720f483c990574d14c41aca967da62a05dc61e32b1a07e1776fc5d80bb750e85e45befa3ea0e1a94424f1431", 0x54}, {&(0x7f00000006c0)="e714e6b9fb106ff7fc4203df06fd", 0xe}, {&(0x7f0000000700)="08932a099b4ebee9fe297a53e4aafa71736200d71d6b7dcf062c9905b4b772e71a1ae1cbfad499bc90cda85858a01ae3d5be70b0650aa47f8995718e9d063a8a48085d8d590bbe8ac30470cbf874c1594230443beb2e77529360b9d7a8f3d24670a3d32ddc71e93255207345c6a4f337cb66e19220fd08502354c60919c601e55b0592ec66be4082", 0x88}, {&(0x7f00000007c0)}, {&(0x7f0000000800)="907070234363910d300b6a9a608ab7798fd8657083966f265b4339763241ba5c0d1a082d3a78b7c192282268d363e15d5caaa9ed7100616ba890984b7c637c321b29dd409e1e0beefbffc1b3393c0260b13ea7ae8f5045cb2d498e56b8556ab0635cb58b550b6fa2cfc413e17c201532d87d312dfee64605bd9ed7a5fd7f5a87ccaf45efb4eac78140e0f0136e5320d852cde04e9aa4a387ca7c1f7d75f0889c7ddadcd229e7b679bc59cfc67f2bd1ee085da7aea9", 0xb5}, {&(0x7f00000008c0)="f9e8b7bcf87a117b24d8e88c182d8d19090650f37339b0d1bade89c028d639f7f8dd5d7a6623340587fd38f558d783ad515a6d19e0ed063fac17c39eb0166d86b8129696cbf173b86e1f1a388ceae9e43074f6bb297bccbe0f6fff6195a9e6e1ca5789674de00c79f33204a2ec3c8e07d85406a80a2e8ed6dc586ecbfa6379a3b17a704bd2add451005235e7eab0756254f31e6893c6c038c0", 0x99}, {&(0x7f0000000980)="c91630c573dab935afaf3282e708bded9488c28a20cadd0ddda76d3f88896e4cc619b7140a5e3db6be49b10e838f6d386d750b2ef46a0782aea5951d9f3fbf8e2b4eef3c538c229dbcd52d8278b093ff814c45219e40787dfd306596226236cb7514f6d00eff", 0x66}], 0x9, &(0x7f0000000b00)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x10}}, @mark={{0x14, 0x1, 0x24, 0x101}}], 0x60}}, {{&(0x7f0000000b80)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x3, 0x2, {0xa, 0x4e20, 0x100, @rand_addr=' \x01\x00', 0xfffffff2}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000c00)="f479678722f08e17529f449c80d85e335eb7433ff6d3dfbf64d5d8d0c9ad77392e747aedd1d3820da7be505e1b6182f3d4cf3755ec74d5365b57c7d4516fb5e50ddf1e1fc87b50a8301fc7c95b2460d0dd751abf6628c15b4c79408404af1ecd5940104e98037a5990b6a8c57dda49", 0x6f}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x1ce}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x4eff}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x78}}, {{&(0x7f0000000d80)=@nfc={0x27, r4, 0x1, 0x3}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="5d074a4247f1bf6ccf6de0e9161e7daea6491c21fc5d36bb2cf31a9e1e662f3777247cdb2f3acd0c33e57c7fe807b65881c975410276cc687639a8a7404327967ecb317f7387af19fabdfd9f8237e41d872b4240a552fffeaec0e7eca037f4aa6ca012c81bd678d13c91d81d6673fb5bdcf8592eaf5377ffd2a7475468f3118099d1456f66cba219948a6b9a29c9a5e2f55094e3b1be36a02adcc9099aec868bc0a892b571b03ceeb85a45c2faccdf1cf460ef667d120c8772d4014b3fdd6edfd2c85c", 0xc3}], 0x1, &(0x7f0000000f40)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0xf67}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xa8}}], 0x3, 0x20000002) write$UHID_INPUT(r3, 0x0, 0x0) 1.467914405s ago: executing program 1 (id=1717): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add", 0xd6}], 0x1}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x268, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000003680)={0x2020}, 0x2020) 1.427977151s ago: executing program 0 (id=1718): setns(0xffffffffffffffff, 0x24020000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x800, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x20008004) accept(r4, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r5 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2, 0x0, 0x0, 0x8}]}, 0x94) sendmsg$inet(r5, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="71b6745b87cc14837cd2559ab3075fccbcee74c6db022e1eac", 0x19}, {&(0x7f0000001080)="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", 0x4cc}], 0x2}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) close(r6) 1.326200968s ago: executing program 1 (id=1719): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00$'], 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r4 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5", 0x11, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x7, 0x9, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000786c6c2500000000002020207b1a00fe00000000bfa101000000010027010000f8ffffffb702000008000000b703000003000000850000001900000095"], &(0x7f0000000540)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000580)=[@increfs], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x1a39, &(0x7f0000000600)={0x0, 0x1746, 0xc09, 0x800082, 0x185}, 0x0, 0x0, &(0x7f0000000500)) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000400)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "d09fecd08b7b01bc021532a703c8477fa58db11981f2ac75dd149f6fd6aaf34dc5edfceeaa939c4394f30301924253412c32a22fb3ef2eeefadff6f3e20b9aa6", 0x1d}, 0x48, 0xfffffffffffffffc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x1, 0x4, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x7, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x18800000000000, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x2800000000000, 0x9, 0x3, 0x2, 0xfffffffffffffff9, 0x20000000000}, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) 0s ago: executing program 0 (id=1720): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000004200"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r3, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000000740)=""/4086, 0xff6}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/242, 0xf2}, {&(0x7f0000002840)=""/247, 0xf7}, {&(0x7f00000000c0)=""/28, 0x1c}, {&(0x7f0000002a00)=""/248, 0xf8}], 0x8}, 0x1081}], 0x1, 0x2002, 0x0) kernel console output (not intermixed with test programs): [ 466.988098][ T48] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 467.049497][ T5806] usb 4-1: device descriptor read/64, error -71 [ 467.066383][ T9694] FAULT_INJECTION: forcing a failure. [ 467.066383][ T9694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.066413][ T9694] CPU: 1 UID: 0 PID: 9694 Comm: syz.4.1207 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 467.066438][ T9694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 467.066450][ T9694] Call Trace: [ 467.066458][ T9694] [ 467.066466][ T9694] dump_stack_lvl+0xe8/0x150 [ 467.066500][ T9694] should_fail_ex+0x46b/0x600 [ 467.066529][ T9694] _copy_to_user+0x31/0xb0 [ 467.066550][ T9694] simple_read_from_buffer+0xe1/0x170 [ 467.066579][ T9694] proc_fail_nth_read+0x1be/0x230 [ 467.066604][ T9694] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 467.066631][ T9694] ? rw_verify_area+0x2ac/0x4e0 [ 467.066659][ T9694] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 467.066683][ T9694] vfs_read+0x212/0xa80 [ 467.066718][ T9694] ? __pfx_vfs_read+0x10/0x10 [ 467.066747][ T9694] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 467.066768][ T9694] ? lockdep_hardirqs_on+0x7a/0x110 [ 467.066788][ T9694] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 467.066809][ T9694] ? mutex_lock_nested+0x152/0x1d0 [ 467.066833][ T9694] ? fdget_pos+0x252/0x320 [ 467.066865][ T9694] ksys_read+0x156/0x270 [ 467.066895][ T9694] ? __pfx_ksys_read+0x10/0x10 [ 467.066933][ T9694] do_syscall_64+0x14d/0xf80 [ 467.066953][ T9694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.066972][ T9694] ? clear_bhb_loop+0x40/0x90 [ 467.066995][ T9694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.067013][ T9694] RIP: 0033:0x7f87397ed04e [ 467.067030][ T9694] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 467.067047][ T9694] RSP: 002b:00007f8737a85fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 467.067065][ T9694] RAX: ffffffffffffffda RBX: 00007f8737a866c0 RCX: 00007f87397ed04e [ 467.067079][ T9694] RDX: 000000000000000f RSI: 00007f8737a860a0 RDI: 0000000000000004 [ 467.067091][ T9694] RBP: 00007f8737a86090 R08: 0000000000000000 R09: 0000000000000000 [ 467.067102][ T9694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.067114][ T9694] R13: 00007f8739aa6038 R14: 00007f8739aa5fa0 R15: 00007ffe077e77a8 [ 467.067144][ T9694] [ 467.181819][ T31] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 467.183100][ T48] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.183122][ T48] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 467.192118][ T48] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 467.192143][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 467.192161][ T48] usb 2-1: SerialNumber: syz [ 467.217184][ T31] usb 3-1: USB disconnect, device number 40 [ 467.312157][ T9699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.313423][ T31] usblp0: removed [ 467.330618][ T5806] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 467.449572][ T48] usb 2-1: 0:2 : does not exist [ 467.469537][ T5806] usb 4-1: device descriptor read/64, error -71 [ 467.558944][ T9699] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1209'. [ 467.611303][ T5806] usb usb4-port1: attempt power cycle [ 467.815189][ T31] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 468.388068][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 468.428709][ T31] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 468.428735][ T31] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 468.462939][ T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 468.462996][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 468.463016][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 468.463039][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 468.463085][ T31] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 468.463108][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.462648][ T31] usb 3-1: config 0 descriptor?? [ 470.465932][ T31] usb 3-1: can't set config #0, error -71 [ 470.482153][ T31] usb 3-1: USB disconnect, device number 41 [ 470.503394][ T48] usb 2-1: USB disconnect, device number 49 [ 471.079073][ T60] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 471.369026][ T9719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1214'. [ 471.376045][ T9719] vlan0: entered promiscuous mode [ 471.453008][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 471.689183][ T9725] IPv6: sit1: Disabled Multicast RS [ 471.728080][ T48] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 471.771210][ T9729] loop5: detected capacity change from 0 to 7 [ 471.779409][ C1] blk_print_req_error: 26 callbacks suppressed [ 471.779426][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.779454][ C1] buffer_io_error: 25 callbacks suppressed [ 471.779464][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 471.781279][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.781308][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 471.781538][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.781649][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 471.781894][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.781920][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 471.782172][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.782197][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 471.782431][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.782456][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 471.782678][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.782786][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 471.782876][ T9729] ldm_validate_partition_table(): Disk read failed. [ 471.783051][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.783077][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 471.783299][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.783323][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 471.783544][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.783568][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 471.783949][ T9729] Dev loop5: unable to read RDB block 0 [ 471.784817][ T9729] loop5: unable to read partition table [ 471.785162][ T9729] loop5: partition table beyond EOD, truncated [ 471.785191][ T9729] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 471.890024][ T48] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 471.890050][ T48] usb 2-1: config 0 has no interface number 0 [ 471.890078][ T48] usb 2-1: config 0 interface 255 has no altsetting 0 [ 471.890108][ T48] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 471.890130][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.919491][ T48] usb 2-1: config 0 descriptor?? [ 471.927908][ T48] cp210x 2-1:0.255: cp210x converter detected [ 472.990763][ T9739] Bluetooth: MGMT ver 1.23 [ 472.993025][ T9737] netlink: 'syz.3.1219': attribute type 11 has an invalid length. [ 472.993044][ T9737] netlink: 'syz.3.1219': attribute type 66 has an invalid length. [ 473.024602][ T48] cp210x 2-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 473.025277][ T48] cp210x 2-1:0.255: failed to get vendor val 0x3711 size 2: -121 [ 473.025300][ T48] cp210x 2-1:0.255: GPIO initialisation failed: -121 [ 473.075771][ T48] usb 2-1: cp210x converter now attached to ttyUSB0 [ 473.141844][ T9741] loop5: detected capacity change from 0 to 7 [ 473.144653][ T9741] ldm_validate_partition_table(): Disk read failed. [ 473.161375][ T9741] Dev loop5: unable to read RDB block 0 [ 473.164336][ T9741] loop5: unable to read partition table [ 473.164540][ T9741] loop5: partition table beyond EOD, truncated [ 473.164557][ T9741] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 475.355647][ T9743] kthread_run failed with err -4 [ 475.476302][ T5883] usb 2-1: USB disconnect, device number 50 [ 475.856474][ T5883] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 475.936254][ T5883] cp210x 2-1:0.255: device disconnected [ 477.321124][ T9766] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 477.321489][ T9766] qnx6: wrong signature (magic) in superblock #1. [ 477.321499][ T9766] qnx6: unable to read the first superblock [ 477.489957][ T9769] netlink: 'syz.2.1229': attribute type 6 has an invalid length. [ 477.616420][ T9771] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 477.622792][ T9771] qnx6: wrong signature (magic) in superblock #1. [ 477.622823][ T9771] qnx6: unable to read the first superblock [ 478.011720][ T9775] FAULT_INJECTION: forcing a failure. [ 478.011720][ T9775] name failslab, interval 1, probability 0, space 0, times 0 [ 478.011752][ T9775] CPU: 1 UID: 0 PID: 9775 Comm: syz.4.1234 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 478.011774][ T9775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 478.011786][ T9775] Call Trace: [ 478.011794][ T9775] [ 478.011803][ T9775] dump_stack_lvl+0xe8/0x150 [ 478.011836][ T9775] should_fail_ex+0x46b/0x600 [ 478.011869][ T9775] should_failslab+0xa8/0x100 [ 478.011892][ T9775] __kvmalloc_node_noprof+0x170/0x8e0 [ 478.011915][ T9775] ? file_tty_write+0x2ed/0xa30 [ 478.011941][ T9775] ? _mutex_trylock_nest_lock+0x128/0x180 [ 478.011975][ T9775] file_tty_write+0x2ed/0xa30 [ 478.012011][ T9775] vfs_write+0x629/0xba0 [ 478.012049][ T9775] ? __pfx_vfs_write+0x10/0x10 [ 478.012088][ T9775] ? __fget_files+0x2a/0x420 [ 478.012123][ T9775] ksys_write+0x156/0x270 [ 478.012155][ T9775] ? __pfx_ksys_write+0x10/0x10 [ 478.012196][ T9775] do_syscall_64+0x14d/0xf80 [ 478.012217][ T9775] ? trace_irq_disable+0x3b/0x150 [ 478.012240][ T9775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.012260][ T9775] ? clear_bhb_loop+0x40/0x90 [ 478.012284][ T9775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.012303][ T9775] RIP: 0033:0x7f873982c819 [ 478.012327][ T9775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.012344][ T9775] RSP: 002b:00007f8737a86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 478.012364][ T9775] RAX: ffffffffffffffda RBX: 00007f8739aa5fa0 RCX: 00007f873982c819 [ 478.012379][ T9775] RDX: 00000000fffffecc RSI: 0000200000000240 RDI: 0000000000000004 [ 478.012392][ T9775] RBP: 00007f8737a86090 R08: 0000000000000000 R09: 0000000000000000 [ 478.012404][ T9775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.012416][ T9775] R13: 00007f8739aa6038 R14: 00007f8739aa5fa0 R15: 00007ffe077e77a8 [ 478.012447][ T9775] [ 478.057431][ T9777] FAULT_INJECTION: forcing a failure. [ 478.057431][ T9777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.057461][ T9777] CPU: 0 UID: 0 PID: 9777 Comm: syz.0.1230 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 478.057482][ T9777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 478.057494][ T9777] Call Trace: [ 478.057501][ T9777] [ 478.057509][ T9777] dump_stack_lvl+0xe8/0x150 [ 478.057541][ T9777] should_fail_ex+0x46b/0x600 [ 478.057571][ T9777] _copy_from_user+0x2d/0xb0 [ 478.057590][ T9777] __se_sys_migrate_pages+0x54a/0xca0 [ 478.057612][ T9777] ? fput+0xa0/0xd0 [ 478.057636][ T9777] ? __pfx___se_sys_migrate_pages+0x10/0x10 [ 478.057656][ T9777] ? rcu_is_watching+0x15/0xb0 [ 478.057690][ T9777] do_syscall_64+0x14d/0xf80 [ 478.057708][ T9777] ? trace_irq_disable+0x3b/0x150 [ 478.057730][ T9777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.057749][ T9777] ? clear_bhb_loop+0x40/0x90 [ 478.057772][ T9777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.057790][ T9777] RIP: 0033:0x7f04f344c819 [ 478.057807][ T9777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.057823][ T9777] RSP: 002b:00007f04f167d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 478.057842][ T9777] RAX: ffffffffffffffda RBX: 00007f04f36c6090 RCX: 00007f04f344c819 [ 478.057856][ T9777] RDX: 0000200000000040 RSI: 0000000000000003 RDI: 0000000000000000 [ 478.057868][ T9777] RBP: 00007f04f167d090 R08: 0000000000000000 R09: 0000000000000000 [ 478.057880][ T9777] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 478.057892][ T9777] R13: 00007f04f36c6128 R14: 00007f04f36c6090 R15: 00007ffdb6be4768 [ 478.057921][ T9777] [ 480.194863][ T9787] vlan2: entered promiscuous mode [ 480.194886][ T9787] macvlan0: entered promiscuous mode [ 480.315971][ T9800] FAULT_INJECTION: forcing a failure. [ 480.315971][ T9800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.316002][ T9800] CPU: 0 UID: 0 PID: 9800 Comm: syz.1.1239 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 480.316025][ T9800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 480.316037][ T9800] Call Trace: [ 480.316044][ T9800] [ 480.316052][ T9800] dump_stack_lvl+0xe8/0x150 [ 480.316093][ T9800] should_fail_ex+0x46b/0x600 [ 480.316124][ T9800] _copy_from_user+0x2d/0xb0 [ 480.316143][ T9800] ___sys_sendmsg+0x1c6/0x360 [ 480.316171][ T9800] ? __pfx____sys_sendmsg+0x10/0x10 [ 480.316201][ T9800] ? kstrtouint+0x6e/0xe0 [ 480.316249][ T9800] ? __fget_files+0x2a/0x420 [ 480.316274][ T9800] ? __fget_files+0x3a6/0x420 [ 480.316307][ T9800] __sys_sendmmsg+0x282/0x4e0 [ 480.316335][ T9800] ? __pfx___sys_sendmmsg+0x10/0x10 [ 480.316365][ T9800] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 480.316405][ T9800] ? ksys_write+0x248/0x270 [ 480.316437][ T9800] ? __pfx_ksys_write+0x10/0x10 [ 480.316472][ T9800] __x64_sys_sendmmsg+0xa0/0xc0 [ 480.316496][ T9800] do_syscall_64+0x14d/0xf80 [ 480.316517][ T9800] ? trace_irq_disable+0x3b/0x150 [ 480.316541][ T9800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.316561][ T9800] ? clear_bhb_loop+0x40/0x90 [ 480.316585][ T9800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.316604][ T9800] RIP: 0033:0x7f01e0dcc819 [ 480.316622][ T9800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.316639][ T9800] RSP: 002b:00007f01df01e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 480.316660][ T9800] RAX: ffffffffffffffda RBX: 00007f01e1045fa0 RCX: 00007f01e0dcc819 [ 480.316674][ T9800] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 480.316686][ T9800] RBP: 00007f01df01e090 R08: 0000000000000000 R09: 0000000000000000 [ 480.316698][ T9800] R10: 0000000000046000 R11: 0000000000000246 R12: 0000000000000001 [ 480.316710][ T9800] R13: 00007f01e1046038 R14: 00007f01e1045fa0 R15: 00007ffdc4a8df68 [ 480.316741][ T9800] [ 483.098155][ T5864] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 483.148123][ T1076] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 483.228137][ T5864] usb 1-1: device descriptor read/64, error -71 [ 483.298133][ T1076] usb 3-1: device descriptor read/64, error -71 [ 483.528395][ T5864] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 483.568156][ T7572] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 483.570171][ T1076] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 483.658159][ T5864] usb 1-1: device descriptor read/64, error -71 [ 483.748197][ T1076] usb 3-1: device descriptor read/64, error -71 [ 483.814196][ T5864] usb usb1-port1: attempt power cycle [ 483.843138][ T9845] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 483.957326][ T1076] usb usb3-port1: attempt power cycle [ 484.108151][ T7572] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 484.108186][ T7572] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 484.108211][ T7572] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 484.248580][ T5864] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 484.271071][ T5864] usb 1-1: device descriptor read/8, error -71 [ 484.335868][ T7572] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 484.335886][ T7572] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 484.335897][ T7572] usb 4-1: SerialNumber: syz [ 484.357337][ T9838] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 484.359579][ T7572] hub 4-1:1.0: bad descriptor, ignoring hub [ 484.359612][ T7572] hub 4-1:1.0: probe with driver hub failed with error -5 [ 484.508093][ T5864] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 484.528757][ T5864] usb 1-1: device descriptor read/8, error -71 [ 484.603163][ T9838] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 484.674126][ T1076] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 484.697770][ T5864] usb usb1-port1: unable to enumerate USB device [ 485.360276][ T9854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.374536][ T9854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.383165][ T1076] usb 3-1: device descriptor read/8, error -71 [ 485.535486][ T7572] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 485.579127][ T7572] usb 4-1: USB disconnect, device number 48 [ 485.618124][ T1076] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 485.640112][ T1076] usb 3-1: device descriptor read/8, error -71 [ 485.660926][ T9863] tipc: Enabling of bearer rejected, failed to enable media [ 485.758367][ T1076] usb usb3-port1: unable to enumerate USB device [ 486.157568][ T9865] vlan2: entered allmulticast mode [ 486.157587][ T9865] team0: entered allmulticast mode [ 486.157598][ T9865] team_slave_0: entered allmulticast mode [ 486.157613][ T9865] team_slave_1: entered allmulticast mode [ 490.800351][ T808] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 490.900406][ T7572] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 490.928068][ T5883] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 490.950354][ T808] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 490.950380][ T808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.950397][ T808] usb 1-1: config 0 has no interface number 0 [ 490.950455][ T808] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 490.950476][ T808] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 490.953406][ T808] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 490.953426][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.953437][ T808] usb 1-1: Product: syz [ 490.953444][ T808] usb 1-1: Manufacturer: syz [ 490.953451][ T808] usb 1-1: SerialNumber: syz [ 491.030829][ T808] usb 1-1: config 0 descriptor?? [ 491.056312][ T9906] netlink: 'syz.2.1272': attribute type 6 has an invalid length. [ 491.060778][ T7572] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 491.060803][ T7572] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 491.060822][ T7572] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 491.060855][ T7572] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 491.060891][ T7572] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 491.060911][ T7572] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 491.069990][ T7572] usb 2-1: string descriptor 0 read error: -22 [ 491.070120][ T7572] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 491.070142][ T7572] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.076226][ T7572] usb 2-1: config 0 descriptor?? [ 491.111420][ T7572] hub 2-1:0.0: bad descriptor, ignoring hub [ 491.111455][ T7572] hub 2-1:0.0: probe with driver hub failed with error -5 [ 491.193203][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.211919][ T5883] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 491.212006][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.212025][ T5883] usb 4-1: Product: syz [ 491.212038][ T5883] usb 4-1: Manufacturer: syz [ 491.212051][ T5883] usb 4-1: SerialNumber: syz [ 491.215292][ T9908] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 491.215599][ T9908] qnx6: wrong signature (magic) in superblock #1. [ 491.215610][ T9908] qnx6: unable to read the first superblock [ 491.274647][ T808] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 491.288585][ T5883] usb 4-1: config 0 descriptor?? [ 491.292845][ T5883] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 491.293022][ T808] usb 1-1: USB disconnect, device number 40 [ 491.558551][ T7572] usb 2-1: USB disconnect, device number 51 [ 491.981659][ T5883] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 491.981755][ T5883] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 492.015321][ T5883] usb 4-1: USB disconnect, device number 49 [ 496.171001][ T9933] FAULT_INJECTION: forcing a failure. [ 496.171001][ T9933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.171034][ T9933] CPU: 1 UID: 0 PID: 9933 Comm: syz.3.1280 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 496.171056][ T9933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 496.171068][ T9933] Call Trace: [ 496.171075][ T9933] [ 496.171083][ T9933] dump_stack_lvl+0xe8/0x150 [ 496.171115][ T9933] should_fail_ex+0x46b/0x600 [ 496.171145][ T9933] _copy_from_user+0x2d/0xb0 [ 496.171178][ T9933] do_handle_open+0x57b/0x970 [ 496.171201][ T9933] ? __pfx_do_handle_open+0x10/0x10 [ 496.171221][ T9933] ? ksys_write+0x248/0x270 [ 496.171251][ T9933] ? __pfx_ksys_write+0x10/0x10 [ 496.171291][ T9933] do_syscall_64+0x14d/0xf80 [ 496.171312][ T9933] ? trace_irq_disable+0x3b/0x150 [ 496.171335][ T9933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.171355][ T9933] ? clear_bhb_loop+0x40/0x90 [ 496.171379][ T9933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.171398][ T9933] RIP: 0033:0x7f837689c819 [ 496.171415][ T9933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.171432][ T9933] RSP: 002b:00007f8374af6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 496.171451][ T9933] RAX: ffffffffffffffda RBX: 00007f8376b15fa0 RCX: 00007f837689c819 [ 496.171471][ T9933] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 496.171484][ T9933] RBP: 00007f8374af6090 R08: 0000000000000000 R09: 0000000000000000 [ 496.171496][ T9933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.171507][ T9933] R13: 00007f8376b16038 R14: 00007f8376b15fa0 R15: 00007ffc5f31def8 [ 496.171537][ T9933] [ 497.048121][ T808] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 498.038210][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 498.743718][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.743751][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.743790][ T808] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 498.743810][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.942002][ T808] usb 5-1: config 0 descriptor?? [ 499.115330][ T9960] tmpfs: Bad value for 'mpol' [ 499.496980][ T9967] netlink: 'syz.2.1287': attribute type 16 has an invalid length. [ 499.497001][ T9967] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1287'. [ 499.497028][ T9967] veth1_macvtap: entered allmulticast mode [ 499.922546][ T9966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.923003][ T9966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.965235][ T808] hid_parser_main: 222 callbacks suppressed [ 499.965257][ T808] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 499.965448][ T808] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 500.037951][ T9963] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 500.201708][ T808] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0005/input/input11 [ 501.059069][ T9963] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 501.491546][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.372533][ T808] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 502.393455][ T808] usb 5-1: USB disconnect, device number 30 [ 502.438795][ T1076] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 502.589477][ T1076] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 502.589494][ T1076] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 502.589507][ T1076] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 502.589527][ T1076] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 502.589547][ T1076] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 502.589558][ T1076] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 502.592090][ T1076] usb 1-1: string descriptor 0 read error: -22 [ 502.592165][ T1076] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 502.592177][ T1076] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.594966][ T1076] usb 1-1: config 0 descriptor?? [ 502.596774][ T1076] hub 1-1:0.0: bad descriptor, ignoring hub [ 502.596793][ T1076] hub 1-1:0.0: probe with driver hub failed with error -5 [ 502.701648][ T9980] fido_id[9980]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 502.767526][ T9986] input: syz1 as /devices/virtual/input/input12 [ 502.817345][ T1076] IPVS: starting estimator thread 0... [ 502.908106][ T9988] IPVS: using max 15 ests per chain, 36000 per kthread [ 502.979484][ T1076] usb 1-1: USB disconnect, device number 41 [ 503.695929][ T9992] input: syz1 as /devices/virtual/input/input13 [ 503.753666][ T9992] FAULT_INJECTION: forcing a failure. [ 503.753666][ T9992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.753699][ T9992] CPU: 0 UID: 0 PID: 9992 Comm: syz.3.1295 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 503.753721][ T9992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 503.753733][ T9992] Call Trace: [ 503.753741][ T9992] [ 503.753749][ T9992] dump_stack_lvl+0xe8/0x150 [ 503.753782][ T9992] should_fail_ex+0x46b/0x600 [ 503.753813][ T9992] _copy_to_user+0x31/0xb0 [ 503.753834][ T9992] simple_read_from_buffer+0xe1/0x170 [ 503.753862][ T9992] proc_fail_nth_read+0x1be/0x230 [ 503.753889][ T9992] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 503.753916][ T9992] ? rw_verify_area+0x2ac/0x4e0 [ 503.753945][ T9992] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 503.753972][ T9992] vfs_read+0x212/0xa80 [ 503.754007][ T9992] ? __pfx_vfs_read+0x10/0x10 [ 503.754038][ T9992] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 503.754060][ T9992] ? lockdep_hardirqs_on+0x7a/0x110 [ 503.754081][ T9992] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 503.754101][ T9992] ? mutex_lock_nested+0x152/0x1d0 [ 503.754127][ T9992] ? fdget_pos+0x252/0x320 [ 503.754161][ T9992] ksys_read+0x156/0x270 [ 503.754192][ T9992] ? __pfx_ksys_read+0x10/0x10 [ 503.754231][ T9992] do_syscall_64+0x14d/0xf80 [ 503.754251][ T9992] ? trace_irq_disable+0x3b/0x150 [ 503.754274][ T9992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.754293][ T9992] ? clear_bhb_loop+0x40/0x90 [ 503.754317][ T9992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.754336][ T9992] RIP: 0033:0x7f837685d04e [ 503.754354][ T9992] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 503.754370][ T9992] RSP: 002b:00007f8374af5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 503.754395][ T9992] RAX: ffffffffffffffda RBX: 00007f8374af66c0 RCX: 00007f837685d04e [ 503.754409][ T9992] RDX: 000000000000000f RSI: 00007f8374af60a0 RDI: 000000000000000d [ 503.754421][ T9992] RBP: 00007f8374af6090 R08: 0000000000000000 R09: 0000000000000000 [ 503.754433][ T9992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.754444][ T9992] R13: 00007f8376b16038 R14: 00007f8376b15fa0 R15: 00007ffc5f31def8 [ 503.754475][ T9992] [ 503.777591][ T808] IPVS: starting estimator thread 0... [ 503.868181][ T9995] IPVS: using max 8 ests per chain, 19200 per kthread [ 504.220069][T10003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1300'. [ 504.619916][ T36] audit: type=1326 audit(1774915241.924:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10015 comm="syz.1.1305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01e0dcc819 code=0x0 [ 504.885372][T10023] netlink: 'syz.1.1305': attribute type 6 has an invalid length. [ 504.885558][T10023] capability: warning: `syz.1.1305' uses deprecated v2 capabilities in a way that may be insecure [ 504.935650][T10025] FAULT_INJECTION: forcing a failure. [ 504.935650][T10025] name failslab, interval 1, probability 0, space 0, times 0 [ 504.935671][T10025] CPU: 0 UID: 0 PID: 10025 Comm: syz.0.1306 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 504.935683][T10025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 504.935690][T10025] Call Trace: [ 504.935694][T10025] [ 504.935698][T10025] dump_stack_lvl+0xe8/0x150 [ 504.935718][T10025] should_fail_ex+0x46b/0x600 [ 504.935734][T10025] should_failslab+0xa8/0x100 [ 504.935746][T10025] kmem_cache_alloc_noprof+0x87/0x680 [ 504.935762][T10025] ? alloc_empty_file+0x55/0x1d0 [ 504.935777][T10025] alloc_empty_file+0x55/0x1d0 [ 504.935789][T10025] path_openat+0x11b/0x38a0 [ 504.935808][T10025] ? try_to_take_rt_mutex+0x840/0xb00 [ 504.935823][T10025] ? arch_stack_walk+0xfb/0x150 [ 504.935838][T10025] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 504.935856][T10025] ? __pfx_path_openat+0x10/0x10 [ 504.935871][T10025] ? __lock_acquire+0x6b5/0x2cf0 [ 504.935882][T10025] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 504.935900][T10025] ? do_raw_spin_lock+0x12b/0x2f0 [ 504.935918][T10025] do_file_open+0x23e/0x4a0 [ 504.935932][T10025] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 504.935944][T10025] ? __pfx_do_file_open+0x10/0x10 [ 504.935958][T10025] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 504.935982][T10025] ? alloc_fd+0x64e/0x6c0 [ 504.935999][T10025] do_sys_openat2+0x113/0x200 [ 504.936013][T10025] ? __pfx_do_sys_openat2+0x10/0x10 [ 504.936026][T10025] ? ksys_write+0x248/0x270 [ 504.936041][T10025] ? __pfx_ksys_write+0x10/0x10 [ 504.936057][T10025] __x64_sys_openat+0x138/0x170 [ 504.936072][T10025] do_syscall_64+0x14d/0xf80 [ 504.936082][T10025] ? trace_irq_disable+0x3b/0x150 [ 504.936094][T10025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.936105][T10025] ? clear_bhb_loop+0x40/0x90 [ 504.936117][T10025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.936127][T10025] RIP: 0033:0x7f04f344c819 [ 504.936137][T10025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.936146][T10025] RSP: 002b:00007f04f167d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 504.936157][T10025] RAX: ffffffffffffffda RBX: 00007f04f36c6090 RCX: 00007f04f344c819 [ 504.936164][T10025] RDX: 0000000000103042 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 504.936171][T10025] RBP: 00007f04f167d090 R08: 0000000000000000 R09: 0000000000000000 [ 504.936177][T10025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.936183][T10025] R13: 00007f04f36c6128 R14: 00007f04f36c6090 R15: 00007ffdb6be4768 [ 504.936202][T10025] [ 506.414167][T10059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1318'. [ 507.388515][T10070] FAULT_INJECTION: forcing a failure. [ 507.388515][T10070] name failslab, interval 1, probability 0, space 0, times 0 [ 507.388535][T10070] CPU: 0 UID: 0 PID: 10070 Comm: syz.0.1323 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 507.388547][T10070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 507.388554][T10070] Call Trace: [ 507.388558][T10070] [ 507.388563][T10070] dump_stack_lvl+0xe8/0x150 [ 507.388582][T10070] should_fail_ex+0x46b/0x600 [ 507.388599][T10070] should_failslab+0xa8/0x100 [ 507.388610][T10070] __kmalloc_cache_node_noprof+0x8a/0x6c0 [ 507.388622][T10070] ? __lock_acquire+0x6b5/0x2cf0 [ 507.388632][T10070] ? __get_vm_area_node+0x171/0x350 [ 507.388648][T10070] __get_vm_area_node+0x171/0x350 [ 507.388665][T10070] __vmalloc_node_range_noprof+0x372/0x1730 [ 507.388680][T10070] ? copy_process+0x508/0x3cd0 [ 507.388702][T10070] ? percpu_ref_get_many+0x19/0x140 [ 507.388718][T10070] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 507.388735][T10070] ? rcu_is_watching+0x15/0xb0 [ 507.388747][T10070] ? memcpy_and_pad+0x48/0x80 [ 507.388760][T10070] __vmalloc_node_noprof+0xc2/0x100 [ 507.388775][T10070] ? copy_process+0x508/0x3cd0 [ 507.388787][T10070] ? copy_process+0x508/0x3cd0 [ 507.388802][T10070] dup_task_struct+0x275/0x9a0 [ 507.388816][T10070] ? rt_spin_unlock+0x160/0x200 [ 507.388832][T10070] copy_process+0x508/0x3cd0 [ 507.388846][T10070] ? kstrtoull+0x12f/0x1d0 [ 507.388863][T10070] ? get_pid_task+0x20/0x1f0 [ 507.388876][T10070] ? __pfx_copy_process+0x10/0x10 [ 507.388896][T10070] kernel_clone+0x249/0x840 [ 507.388912][T10070] ? __pfx_kernel_clone+0x10/0x10 [ 507.388925][T10070] ? do_raw_spin_lock+0x12b/0x2f0 [ 507.388947][T10070] __x64_sys_clone+0x1b6/0x230 [ 507.388958][T10070] ? __pfx___x64_sys_clone+0x10/0x10 [ 507.388975][T10070] ? __pfx_ksys_write+0x10/0x10 [ 507.388995][T10070] do_syscall_64+0x14d/0xf80 [ 507.389006][T10070] ? trace_irq_disable+0x3b/0x150 [ 507.389025][T10070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.389035][T10070] ? clear_bhb_loop+0x40/0x90 [ 507.389047][T10070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.389057][T10070] RIP: 0033:0x7f04f344c819 [ 507.389068][T10070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.389082][T10070] RSP: 002b:00007f04f169dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 507.389100][T10070] RAX: ffffffffffffffda RBX: 00007f04f36c5fa0 RCX: 00007f04f344c819 [ 507.389114][T10070] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 507.389124][T10070] RBP: 00007f04f169e090 R08: 0000000000000000 R09: 0000000000000000 [ 507.389136][T10070] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 507.389146][T10070] R13: 00007f04f36c6038 R14: 00007f04f36c5fa0 R15: 00007ffdb6be4768 [ 507.389174][T10070] [ 507.389183][T10070] syz.0.1323: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 507.390329][T10070] CPU: 0 UID: 0 PID: 10070 Comm: syz.0.1323 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 507.390352][T10070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 507.390364][T10070] Call Trace: [ 507.390371][T10070] [ 507.390379][T10070] dump_stack_lvl+0xe8/0x150 [ 507.390409][T10070] warn_alloc+0x263/0x3e0 [ 507.390437][T10070] ? __pfx_warn_alloc+0x10/0x10 [ 507.390456][T10070] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 507.390476][T10070] ? __lock_acquire+0x6b5/0x2cf0 [ 507.390493][T10070] ? __get_vm_area_node+0x171/0x350 [ 507.390524][T10070] ? __get_vm_area_node+0x2e1/0x350 [ 507.390559][T10070] __vmalloc_node_range_noprof+0x397/0x1730 [ 507.390602][T10070] ? percpu_ref_get_many+0x19/0x140 [ 507.390633][T10070] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 507.390668][T10070] ? rcu_is_watching+0x15/0xb0 [ 507.390690][T10070] ? memcpy_and_pad+0x48/0x80 [ 507.390717][T10070] __vmalloc_node_noprof+0xc2/0x100 [ 507.390747][T10070] ? copy_process+0x508/0x3cd0 [ 507.390773][T10070] ? copy_process+0x508/0x3cd0 [ 507.390802][T10070] dup_task_struct+0x275/0x9a0 [ 507.390832][T10070] ? rt_spin_unlock+0x160/0x200 [ 507.390861][T10070] copy_process+0x508/0x3cd0 [ 507.390891][T10070] ? kstrtoull+0x12f/0x1d0 [ 507.390926][T10070] ? get_pid_task+0x20/0x1f0 [ 507.390952][T10070] ? __pfx_copy_process+0x10/0x10 [ 507.390990][T10070] kernel_clone+0x249/0x840 [ 507.391029][T10070] ? __pfx_kernel_clone+0x10/0x10 [ 507.391056][T10070] ? do_raw_spin_lock+0x12b/0x2f0 [ 507.391101][T10070] __x64_sys_clone+0x1b6/0x230 [ 507.391122][T10070] ? __pfx___x64_sys_clone+0x10/0x10 [ 507.391155][T10070] ? __pfx_ksys_write+0x10/0x10 [ 507.391196][T10070] do_syscall_64+0x14d/0xf80 [ 507.391216][T10070] ? trace_irq_disable+0x3b/0x150 [ 507.391239][T10070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.391258][T10070] ? clear_bhb_loop+0x40/0x90 [ 507.391281][T10070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.391300][T10070] RIP: 0033:0x7f04f344c819 [ 507.391317][T10070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.391333][T10070] RSP: 002b:00007f04f169dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 507.391352][T10070] RAX: ffffffffffffffda RBX: 00007f04f36c5fa0 RCX: 00007f04f344c819 [ 507.391367][T10070] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 507.391377][T10070] RBP: 00007f04f169e090 R08: 0000000000000000 R09: 0000000000000000 [ 507.391389][T10070] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 507.391400][T10070] R13: 00007f04f36c6038 R14: 00007f04f36c5fa0 R15: 00007ffdb6be4768 [ 507.391428][T10070] [ 507.391447][T10070] Mem-Info: [ 507.391455][T10070] active_anon:326 inactive_anon:7433 isolated_anon:0 [ 507.391455][T10070] active_file:18676 inactive_file:42844 isolated_file:0 [ 507.391455][T10070] unevictable:768 dirty:435 writeback:0 [ 507.391455][T10070] slab_reclaimable:11981 slab_unreclaimable:102480 [ 507.391455][T10070] mapped:34011 shmem:2660 pagetables:1229 [ 507.391455][T10070] sec_pagetables:0 bounce:0 [ 507.391455][T10070] kernel_misc_reclaimable:0 [ 507.391455][T10070] free:1300915 free_pcp:5313 free_cma:0 [ 507.391506][T10070] Node 0 active_anon:1304kB inactive_anon:29732kB active_file:74492kB inactive_file:171376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136044kB dirty:1740kB writeback:0kB shmem:9104kB kernel_stack:12872kB pagetables:4792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 507.391548][T10070] Node 1 active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 507.391595][T10070] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 507.391649][T10070] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 507.391682][T10070] Node 0 DMA32 free:1248688kB boost:0kB min:3932kB low:6468kB high:9004kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1304kB inactive_anon:29732kB active_file:74492kB inactive_file:171376kB unevictable:1536kB writepending:1740kB zspages:0kB present:3129332kB managed:2566456kB mlocked:0kB bounce:0kB free_pcp:21244kB local_pcp:1180kB free_cma:0kB [ 507.393379][T10070] lowmem_reserve[]: 0 0 0 0 0 [ 507.393413][T10070] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:416kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 507.393464][T10070] lowmem_reserve[]: 0 0 0 0 0 [ 507.393492][T10070] Node 1 Normal free:3939612kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 507.393548][T10070] lowmem_reserve[]: 0 0 0 0 0 [ 507.393578][T10070] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 507.393683][T10070] Node 0 DMA32: 2042*4kB (UME) 1507*8kB (UE) 363*16kB (UME) 310*32kB (UME) 219*64kB (UME) 249*128kB (UME) 124*256kB (UM) 99*512kB (UME) 63*1024kB (UME) 34*2048kB (UME) 232*4096kB (UM) = 1248688kB [ 507.393831][T10070] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 507.393919][T10070] Node 1 Normal: 5*4kB (UM) 7*8kB (UM) 9*16kB (UM) 12*32kB (UM) 5*64kB (UM) 3*128kB (UM) 4*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 960*4096kB (M) = 3939612kB [ 507.394076][T10070] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 507.394092][T10070] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 507.394114][T10070] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 507.394129][T10070] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 507.394144][T10070] 64174 total pagecache pages [ 507.394155][T10070] 0 pages in swap cache [ 507.394162][T10070] Free swap = 119660kB [ 507.394169][T10070] Total swap = 124996kB [ 507.394176][T10070] 2097051 pages RAM [ 507.394183][T10070] 0 pages HighMem/MovableOnly [ 507.394190][T10070] 423718 pages reserved [ 507.394196][T10070] 0 pages cma reserved [ 508.460678][T10072] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 508.836610][T10086] usb usb7: selecting invalid altsetting 7 [ 508.979427][ T5857] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 509.128175][ T5857] usb 1-1: Using ep0 maxpacket: 16 [ 509.130499][ T5857] usb 1-1: config 0 has no interfaces? [ 509.133199][ T5857] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 509.133225][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.133244][ T5857] usb 1-1: Product: syz [ 509.133257][ T5857] usb 1-1: Manufacturer: syz [ 509.133271][ T5857] usb 1-1: SerialNumber: syz [ 509.186805][ T5857] usb 1-1: config 0 descriptor?? [ 509.266611][T10102] loop5: detected capacity change from 0 to 7 [ 509.267899][ C1] blk_print_req_error: 41 callbacks suppressed [ 509.269198][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 509.269231][ C1] buffer_io_error: 40 callbacks suppressed [ 509.269243][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 509.273609][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 509.273727][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 509.273948][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 509.273974][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 509.274173][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 509.274199][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 509.274432][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 509.274457][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 509.274659][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 509.274683][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 509.274884][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 509.274908][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 509.274981][T10102] ldm_validate_partition_table(): Disk read failed. [ 509.275117][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 509.275141][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 509.275331][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 509.275355][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 509.275541][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 509.275565][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 509.275811][T10102] Dev loop5: unable to read RDB block 0 [ 509.276654][T10102] loop5: unable to read partition table [ 509.276850][T10102] loop5: partition table beyond EOD, truncated [ 509.276865][T10102] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 509.358041][ T48] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 509.398038][ T1076] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 509.419057][T10082] misc userio: No port type given on /dev/userio [ 509.425761][ T5806] usb 1-1: USB disconnect, device number 42 [ 509.508134][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 509.542806][ T48] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 509.542833][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.542851][ T48] usb 4-1: Product: syz [ 509.542864][ T48] usb 4-1: Manufacturer: syz [ 509.542876][ T48] usb 4-1: SerialNumber: syz [ 509.561146][ T48] usb 4-1: config 0 descriptor?? [ 509.568752][ T1076] usb 5-1: Using ep0 maxpacket: 16 [ 509.571142][ T1076] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 509.571165][ T1076] usb 5-1: config 0 has no interface number 0 [ 509.573473][ T1076] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 509.573497][ T1076] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.573515][ T1076] usb 5-1: Product: syz [ 509.573529][ T1076] usb 5-1: Manufacturer: syz [ 509.573542][ T1076] usb 5-1: SerialNumber: syz [ 509.643273][ T1076] usb 5-1: config 0 descriptor?? [ 509.654860][ T1076] hub 5-1:0.132: bad descriptor, ignoring hub [ 509.654897][ T1076] hub 5-1:0.132: probe with driver hub failed with error -5 [ 509.715758][ T1076] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input14 [ 509.807665][ T48] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 510.398331][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'. [ 510.426872][T10116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1343'. [ 511.641011][ T48] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 511.658024][ T48] usb 4-1: USB disconnect, device number 50 [ 511.853058][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1350'. [ 512.048059][ T7572] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 512.141308][T10151] GUP no longer grows the stack in syz.2.1355 (10151): 200000005000-200000007000 (200000004000) [ 512.141344][T10151] CPU: 1 UID: 0 PID: 10151 Comm: syz.2.1355 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 512.141372][T10151] Tainted: [L]=SOFTLOCKUP [ 512.141379][T10151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 512.141391][T10151] Call Trace: [ 512.141399][T10151] [ 512.141408][T10151] dump_stack_lvl+0xe8/0x150 [ 512.141443][T10151] fixup_user_fault+0x637/0x6f0 [ 512.141481][T10151] fault_in_user_writeable+0x71/0xd0 [ 512.141514][T10151] futex_lock_pi+0x815/0xb10 [ 512.141547][T10151] ? __pfx_futex_lock_pi+0x10/0x10 [ 512.141568][T10151] ? get_futex_key+0x8cd/0x1690 [ 512.141625][T10151] ? __pfx_futex_wake_mark+0x10/0x10 [ 512.141663][T10151] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 512.141699][T10151] do_futex+0x292/0x420 [ 512.141725][T10151] ? __pfx_do_futex+0x10/0x10 [ 512.141745][T10151] ? __vm_munmap+0x2e6/0x3d0 [ 512.141777][T10151] __se_sys_futex+0x3a8/0x450 [ 512.141810][T10151] ? __pfx___se_sys_futex+0x10/0x10 [ 512.141836][T10151] ? rcu_is_watching+0x15/0xb0 [ 512.141866][T10151] ? __x64_sys_futex+0x21/0xf0 [ 512.141889][T10151] do_syscall_64+0x14d/0xf80 [ 512.141909][T10151] ? trace_irq_disable+0x3b/0x150 [ 512.141933][T10151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.141954][T10151] ? clear_bhb_loop+0x40/0x90 [ 512.141979][T10151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.141998][T10151] RIP: 0033:0x7fc3e838c819 [ 512.142016][T10151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.142034][T10151] RSP: 002b:00007fc3e65e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 512.142055][T10151] RAX: ffffffffffffffda RBX: 00007fc3e8605fa0 RCX: 00007fc3e838c819 [ 512.142070][T10151] RDX: 0000000000000000 RSI: 000000000000008d RDI: 0000200000004000 [ 512.142082][T10151] RBP: 00007fc3e8422c91 R08: 0000000000000000 R09: 0000000000000000 [ 512.142095][T10151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.142112][T10151] R13: 00007fc3e8606038 R14: 00007fc3e8605fa0 R15: 00007ffd94b95108 [ 512.142142][T10151] [ 512.198124][ T7572] usb 1-1: Using ep0 maxpacket: 8 [ 512.202992][ T7572] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.203043][ T7572] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 512.203064][ T7572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.265207][ T7572] usb 1-1: config 0 descriptor?? [ 512.273133][ T7572] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 512.568192][ T48] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 512.716172][ T1076] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 512.944382][ T1076] usb 4-1: Using ep0 maxpacket: 8 [ 513.153442][ T1076] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.153491][ T1076] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 513.153603][ T1076] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 513.153628][ T1076] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 513.153652][ T1076] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 221, changing to 11 [ 513.153734][ T1076] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 50448, setting to 1024 [ 513.153759][ T1076] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 513.155512][ T48] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 513.155536][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.160392][ T1076] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 513.160472][ T1076] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.160491][ T1076] usb 4-1: Product: syz [ 513.160504][ T1076] usb 4-1: Manufacturer: syz [ 513.160517][ T1076] usb 4-1: SerialNumber: syz [ 513.232909][ T7572] gspca_vc032x: reg_r err -110 [ 513.232995][ T7572] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 513.234688][ T1076] usb 4-1: config 0 descriptor?? [ 513.235580][T10159] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 513.235758][T10159] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 513.337530][ T48] usb 2-1: config 0 descriptor?? [ 513.448768][ T1076] rc_core: IR keymap rc-snapstream-firefly not found [ 513.448788][ T1076] Registered IR keymap rc-empty [ 513.506010][ T1076] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 513.581403][ T1076] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input15 [ 513.624941][ T48] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 514.715878][ T1076] input: syz syz mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16 [ 514.847863][ T5805] usb 1-1: USB disconnect, device number 43 [ 514.882918][ T48] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 514.882943][ T48] [drm] Initialized udl on minor 2 [ 514.917799][ T48] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 514.939445][ T48] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 514.969104][ T31] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 515.003231][ T31] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 515.005044][ T31] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 515.090902][T10186] tmpfs: Bad value for 'mpol' [ 515.105131][ T48] usb 2-1: USB disconnect, device number 52 [ 515.132176][ T5857] usb 5-1: USB disconnect, device number 31 [ 515.661470][ T808] usb 4-1: USB disconnect, device number 51 [ 515.661624][ C1] ati_remote 4-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 515.798692][ T5805] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 515.960874][ T5805] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 515.960903][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.960922][ T5805] usb 1-1: Product: syz [ 515.960935][ T5805] usb 1-1: Manufacturer: syz [ 515.960949][ T5805] usb 1-1: SerialNumber: syz [ 517.153406][ T5805] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 517.153980][ T5805] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 518.678309][ T808] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 518.778057][ T5857] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 518.828189][ T808] usb 3-1: Using ep0 maxpacket: 16 [ 518.830375][ T808] usb 3-1: config 0 has no interfaces? [ 518.847089][ T808] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 518.847115][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.847134][ T808] usb 3-1: Product: syz [ 518.847147][ T808] usb 3-1: Manufacturer: syz [ 518.847160][ T808] usb 3-1: SerialNumber: syz [ 518.884619][ T808] usb 3-1: config 0 descriptor?? [ 518.940542][ T5857] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 518.940571][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.945650][ T5857] usb 5-1: config 0 descriptor?? [ 519.128131][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1377'. [ 519.168219][ T5857] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 519.171136][T10225] syz_tun: entered promiscuous mode [ 519.207202][T10225] syz_tun: left promiscuous mode [ 519.235481][ T5805] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 519.235549][ T5805] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 519.246012][ T5805] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 519.311896][ T5805] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 519.348725][ T5805] usb 1-1: USB disconnect, device number 44 [ 519.457556][ T5857] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 519.457581][ T5857] [drm] Initialized udl on minor 2 [ 519.541157][ T808] usb 3-1: USB disconnect, device number 46 [ 519.574104][ T5857] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 519.574549][ T5857] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 519.575589][ T5864] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 519.576261][ T5864] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 519.576464][ T5864] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 519.638515][ T5857] usb 5-1: USB disconnect, device number 32 [ 520.078246][ T5805] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 520.322364][ T1076] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 521.119732][ T5805] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.119758][ T5805] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 521.119814][ T5805] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 521.122765][ T5805] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=10.40 [ 521.122790][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.122808][ T5805] usb 1-1: Product: syz [ 521.122820][ T5805] usb 1-1: Manufacturer: syz [ 521.122833][ T5805] usb 1-1: SerialNumber: syz [ 521.180307][ T1076] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 521.180332][ T1076] usb 2-1: config 0 has no interface number 0 [ 521.180361][ T1076] usb 2-1: config 0 interface 255 has no altsetting 0 [ 521.180391][ T1076] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 521.180413][ T1076] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.276531][ T1076] usb 2-1: config 0 descriptor?? [ 521.322716][ T1076] cp210x 2-1:0.255: cp210x converter detected [ 521.486786][T10253] tipc: Enabling of bearer rejected, failed to enable media [ 521.554882][ T5805] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 521.556268][ T5805] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 521.583305][ T5805] usb 1-1: 0:2 : does not exist [ 521.711072][ T1076] cp210x 2-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 522.446986][ T1076] cp210x 2-1:0.255: failed to get vendor val 0x370c size 15: -71 [ 522.447014][ T1076] cp210x 2-1:0.255: GPIO initialisation failed: -71 [ 522.831274][ T5805] usb 1-1: USB disconnect, device number 45 [ 522.833553][ T1076] usb 2-1: cp210x converter now attached to ttyUSB0 [ 522.874901][ T1076] usb 2-1: USB disconnect, device number 53 [ 522.886490][ T1076] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 522.887191][ T1076] cp210x 2-1:0.255: device disconnected [ 523.057046][T10183] udevd[10183]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.428897][ T1076] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 523.933175][ T1076] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 523.933203][ T1076] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.960663][ T1076] usb 2-1: config 0 descriptor?? [ 524.125319][T10313] input: syz1 as /devices/virtual/input/input17 [ 524.358272][ T1076] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 525.079279][ T1076] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 525.079303][ T1076] [drm] Initialized udl on minor 2 [ 525.118109][ T5805] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 525.135984][ T808] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 525.293199][ T1076] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 525.300155][ T808] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 525.300183][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.334991][ T808] usb 3-1: config 0 descriptor?? [ 525.348284][ T808] cp210x 3-1:0.0: cp210x converter detected [ 525.677262][ T1076] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 525.681174][ T1076] usb 2-1: USB disconnect, device number 54 [ 525.690310][ T5805] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 525.690335][ T5805] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 525.690355][ T5805] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 525.690387][ T5805] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 525.690425][ T5805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 525.690446][ T5805] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 525.693992][ T5805] usb 4-1: string descriptor 0 read error: -22 [ 525.694134][ T5805] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 525.694157][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.698610][ T48] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 525.728998][ T5805] usb 4-1: config 0 descriptor?? [ 525.733116][ T5805] hub 4-1:0.0: bad descriptor, ignoring hub [ 525.733151][ T5805] hub 4-1:0.0: probe with driver hub failed with error -5 [ 525.745023][T10327] loop5: detected capacity change from 0 to 7 [ 525.747335][ C1] blk_print_req_error: 6 callbacks suppressed [ 525.747351][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 525.747388][ C1] buffer_io_error: 5 callbacks suppressed [ 525.747399][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 525.747663][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 525.747692][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 525.747865][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 525.747891][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 525.749231][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 525.749261][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 525.749629][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 525.749657][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 525.749895][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 525.749923][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 525.750143][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 525.750171][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 525.750247][T10327] ldm_validate_partition_table(): Disk read failed. [ 525.750410][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 525.750436][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 525.750791][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 525.750818][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 525.751054][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 525.751080][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 525.751543][T10327] Dev loop5: unable to read RDB block 0 [ 525.752535][T10327] loop5: unable to read partition table [ 525.752735][T10327] loop5: partition table beyond EOD, truncated [ 525.752752][T10327] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 525.796939][ T808] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 525.823764][ T808] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 525.823813][ T808] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 525.844873][ T808] usb 3-1: cp210x converter now attached to ttyUSB0 [ 526.028783][ T808] usb 3-1: USB disconnect, device number 47 [ 526.070421][ T808] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 526.071127][ T808] cp210x 3-1:0.0: device disconnected [ 526.169616][ T5857] usb 4-1: USB disconnect, device number 52 [ 527.448440][ T1076] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 527.898499][ T1076] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.898526][ T1076] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 527.898585][ T1076] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 527.948510][ T1076] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=10.40 [ 527.948540][ T1076] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.948559][ T1076] usb 2-1: Product: syz [ 527.948572][ T1076] usb 2-1: Manufacturer: syz [ 527.948585][ T1076] usb 2-1: SerialNumber: syz [ 528.073549][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1424'. [ 528.194170][T10339] tipc: Enabling of bearer rejected, failed to enable media [ 528.424292][ T1076] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 528.424435][ T1076] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 528.426583][ T1076] usb 2-1: 0:2 : does not exist [ 528.459543][ T48] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 528.576061][ T1076] usb 2-1: USB disconnect, device number 55 [ 528.636514][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 528.653530][ T48] usb 4-1: unable to get BOS descriptor or descriptor too short [ 528.675698][T10107] udevd[10107]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.756820][ T48] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.756846][ T48] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 528.778120][ T48] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 528.778149][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.778168][ T48] usb 4-1: Product: syz [ 528.778182][ T48] usb 4-1: Manufacturer: syz [ 528.778195][ T48] usb 4-1: SerialNumber: syz [ 528.876248][T10366] fuse: Bad value for 'fd' [ 529.896802][ T48] usb 4-1: unit 6 not found! [ 530.038163][ T48] usb 4-1: USB disconnect, device number 53 [ 530.143255][T10184] udevd[10184]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 530.321114][ T5857] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 531.104294][ T5857] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 531.104324][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.123726][ T5857] usb 5-1: config 0 descriptor?? [ 532.635769][ T5857] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 533.048653][ T5857] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 533.048678][ T5857] [drm] Initialized udl on minor 2 [ 533.198789][ T5857] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 533.199224][ T5857] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 533.201915][ T808] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 533.204804][ T808] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 533.205286][ T808] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 533.210417][ T5857] usb 5-1: USB disconnect, device number 33 [ 533.396042][T10415] trusted_key: syz.1.1443 sent an empty control message without MSG_MORE. [ 533.454110][ T808] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 533.600212][ T808] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 533.602450][ T808] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 533.602476][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.602495][ T808] usb 1-1: Product: syz [ 533.602508][ T808] usb 1-1: Manufacturer: syz [ 533.602522][ T808] usb 1-1: SerialNumber: syz [ 533.675363][ T808] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 534.697782][ T808] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 535.709582][ T5805] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 536.348615][ T5883] usb 1-1: USB disconnect, device number 46 [ 536.408064][ T5805] usb 4-1: Using ep0 maxpacket: 16 [ 536.412202][ T5805] usb 4-1: config 0 has no interfaces? [ 536.416248][ T5805] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 536.416274][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.416294][ T5805] usb 4-1: Product: syz [ 536.416314][ T5805] usb 4-1: Manufacturer: syz [ 536.416327][ T5805] usb 4-1: SerialNumber: syz [ 536.469454][ T5805] usb 4-1: config 0 descriptor?? [ 537.442021][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1452'. [ 537.451801][T10444] batadv0: entered promiscuous mode [ 537.455867][T10444] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 537.457194][T10444] batadv0: left promiscuous mode [ 538.398067][ T808] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 538.471785][ T5805] usb 4-1: USB disconnect, device number 54 [ 538.548096][ T808] usb 2-1: Using ep0 maxpacket: 16 [ 538.549675][ T808] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 538.549698][ T808] usb 2-1: config 0 interface 0 has no altsetting 0 [ 538.557824][ T808] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 538.557839][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.557850][ T808] usb 2-1: Product: syz [ 538.557857][ T808] usb 2-1: Manufacturer: syz [ 538.557864][ T808] usb 2-1: SerialNumber: syz [ 538.563981][ T808] usb 2-1: config 0 descriptor?? [ 538.708106][ T5883] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 538.823911][ T808] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 538.824014][ T808] imon 2-1:0.0: unable to initialize intf0, err -19 [ 538.824036][ T808] imon:imon_probe: failed to initialize context! [ 538.824047][ T808] imon 2-1:0.0: unable to register, err -19 [ 538.840534][ T808] usb 2-1: USB disconnect, device number 56 [ 538.858069][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 538.871586][ T5883] usb 3-1: config index 0 descriptor too short (expected 41, got 18) [ 538.871610][ T5883] usb 3-1: config 2 has an invalid interface number: 255 but max is 0 [ 538.871629][ T5883] usb 3-1: config 2 has no interface number 0 [ 538.871657][ T5883] usb 3-1: too many endpoints for config 2 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 538.871701][ T5883] usb 3-1: config 2 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 538.871726][ T5883] usb 3-1: config 2 interface 255 has no altsetting 0 [ 538.871756][ T5883] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 538.871778][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.224453][ T5883] usb 3-1: string descriptor 0 read error: -71 [ 539.255116][ T5883] usb 3-1: USB disconnect, device number 48 [ 539.531425][T10493] kAFS: No cell specified [ 540.076397][T10505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1471'. [ 541.480365][ T5805] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 541.628022][ T5805] usb 4-1: Using ep0 maxpacket: 16 [ 541.630443][ T5805] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 541.630468][ T5805] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.630486][ T5805] usb 4-1: config 0 has no interface number 0 [ 541.680533][ T5805] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 541.680561][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.680581][ T5805] usb 4-1: Product: syz [ 541.680594][ T5805] usb 4-1: Manufacturer: syz [ 541.680608][ T5805] usb 4-1: SerialNumber: syz [ 541.724037][ T5805] usb 4-1: config 0 descriptor?? [ 542.288237][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 543.006394][T10529] netlink: 'syz.0.1482': attribute type 6 has an invalid length. [ 544.065519][T10529] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 544.068881][T10529] qnx6: wrong signature (magic) in superblock #1. [ 544.068915][T10529] qnx6: unable to read the first superblock [ 544.907080][ T5883] usb 4-1: USB disconnect, device number 55 [ 544.973760][T10540] FAULT_INJECTION: forcing a failure. [ 544.973760][T10540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.973805][T10540] CPU: 1 UID: 0 PID: 10540 Comm: syz.4.1485 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 544.973866][T10540] Tainted: [L]=SOFTLOCKUP [ 544.973881][T10540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 544.973907][T10540] Call Trace: [ 544.973915][T10540] [ 544.973923][T10540] dump_stack_lvl+0xe8/0x150 [ 544.973958][T10540] should_fail_ex+0x46b/0x600 [ 544.973991][T10540] _copy_from_iter+0x1d3/0x1670 [ 544.974030][T10540] ? __pfx__copy_from_iter+0x10/0x10 [ 544.974075][T10540] file_tty_write+0x4ca/0xa30 [ 544.974112][T10540] vfs_write+0x629/0xba0 [ 544.974157][T10540] ? __pfx_vfs_write+0x10/0x10 [ 544.974197][T10540] ? __fget_files+0x2a/0x420 [ 544.974231][T10540] ksys_write+0x156/0x270 [ 544.974263][T10540] ? __pfx_ksys_write+0x10/0x10 [ 544.974304][T10540] do_syscall_64+0x14d/0xf80 [ 544.974325][T10540] ? trace_irq_disable+0x3b/0x150 [ 544.974348][T10540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.974367][T10540] ? clear_bhb_loop+0x40/0x90 [ 544.974391][T10540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.974410][T10540] RIP: 0033:0x7f873982c819 [ 544.974429][T10540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.974445][T10540] RSP: 002b:00007f8737a86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 544.974466][T10540] RAX: ffffffffffffffda RBX: 00007f8739aa5fa0 RCX: 00007f873982c819 [ 544.974480][T10540] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000003 [ 544.974492][T10540] RBP: 00007f8737a86090 R08: 0000000000000000 R09: 0000000000000000 [ 544.974505][T10540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.974517][T10540] R13: 00007f8739aa6038 R14: 00007f8739aa5fa0 R15: 00007ffe077e77a8 [ 544.974548][T10540] [ 544.988039][ T1076] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 545.231951][ T1076] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 545.231977][ T1076] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 545.231996][ T1076] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 545.232028][ T1076] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 545.232066][ T1076] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 545.232086][ T1076] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 545.266724][ T1076] usb 3-1: string descriptor 0 read error: -22 [ 545.266804][ T1076] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 545.266816][ T1076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.355646][ T1076] usb 3-1: config 0 descriptor?? [ 545.368601][ T1076] hub 3-1:0.0: bad descriptor, ignoring hub [ 545.368638][ T1076] hub 3-1:0.0: probe with driver hub failed with error -5 [ 545.808011][ T1076] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 546.114339][ T808] usb 3-1: USB disconnect, device number 49 [ 546.359469][ T1076] usb 1-1: Using ep0 maxpacket: 16 [ 546.679212][ T1076] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 546.679238][ T1076] usb 1-1: config 0 has no interface number 0 [ 546.686138][ T1076] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 546.686164][ T1076] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.686182][ T1076] usb 1-1: Product: syz [ 546.686194][ T1076] usb 1-1: Manufacturer: syz [ 546.686206][ T1076] usb 1-1: SerialNumber: syz [ 546.752729][ T1076] usb 1-1: config 0 descriptor?? [ 546.764644][ T1076] hub 1-1:0.132: bad descriptor, ignoring hub [ 546.764679][ T1076] hub 1-1:0.132: probe with driver hub failed with error -5 [ 546.784427][ T1076] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input18 [ 547.178072][ T1076] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 548.460281][ T1076] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 548.460308][ T1076] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 548.460367][ T1076] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 548.463108][ T1076] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=10.40 [ 548.463135][ T1076] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.463155][ T1076] usb 5-1: Product: syz [ 548.463169][ T1076] usb 5-1: Manufacturer: syz [ 548.463183][ T1076] usb 5-1: SerialNumber: syz [ 548.747927][T10571] tipc: Enabling of bearer rejected, failed to enable media [ 548.783232][ T1076] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 548.783371][ T1076] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 548.787594][ T1076] usb 5-1: 0:2 : does not exist [ 548.904850][ T1076] usb 5-1: USB disconnect, device number 34 [ 549.023966][ T5801] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 549.204276][ T9943] udevd[9943]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 551.498040][ T808] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 551.651213][ T808] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 551.651241][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.657198][ T808] usb 4-1: config 0 descriptor?? [ 551.948098][ T808] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 552.170569][ T808] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 552.170594][ T808] [drm] Initialized udl on minor 2 [ 552.422707][ T808] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 552.423160][ T808] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 552.424201][ T5864] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 552.424961][ T5864] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 552.425232][ T5864] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 552.492585][ T808] usb 4-1: USB disconnect, device number 56 [ 553.770957][T10644] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1518'. [ 553.984272][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1520'. [ 554.729064][T10661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1522'. [ 555.580706][ T7572] usb 1-1: USB disconnect, device number 47 [ 556.954451][T10683] FAULT_INJECTION: forcing a failure. [ 556.954451][T10683] name failslab, interval 1, probability 0, space 0, times 0 [ 556.954483][T10683] CPU: 1 UID: 0 PID: 10683 Comm: syz.1.1527 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 556.954510][T10683] Tainted: [L]=SOFTLOCKUP [ 556.954517][T10683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 556.954528][T10683] Call Trace: [ 556.954535][T10683] [ 556.954543][T10683] dump_stack_lvl+0xe8/0x150 [ 556.954574][T10683] should_fail_ex+0x46b/0x600 [ 556.954603][T10683] should_failslab+0xa8/0x100 [ 556.954622][T10683] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 556.954653][T10683] ? alloc_vmap_area+0x229/0x14b0 [ 556.954685][T10683] alloc_vmap_area+0x229/0x14b0 [ 556.954727][T10683] ? __pfx_alloc_vmap_area+0x10/0x10 [ 556.954756][T10683] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 556.954777][T10683] ? __get_vm_area_node+0x171/0x350 [ 556.954804][T10683] ? copy_process+0x508/0x3cd0 [ 556.954832][T10683] __get_vm_area_node+0x226/0x350 [ 556.954867][T10683] __vmalloc_node_range_noprof+0x372/0x1730 [ 556.954907][T10683] ? copy_process+0x508/0x3cd0 [ 556.954947][T10683] ? percpu_ref_get_many+0x19/0x140 [ 556.954979][T10683] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 556.955013][T10683] ? rcu_is_watching+0x15/0xb0 [ 556.955035][T10683] ? memcpy_and_pad+0x48/0x80 [ 556.955062][T10683] __vmalloc_node_noprof+0xc2/0x100 [ 556.955092][T10683] ? copy_process+0x508/0x3cd0 [ 556.955115][T10683] ? copy_process+0x508/0x3cd0 [ 556.955144][T10683] dup_task_struct+0x275/0x9a0 [ 556.955172][T10683] ? rt_spin_unlock+0x160/0x200 [ 556.955202][T10683] copy_process+0x508/0x3cd0 [ 556.955231][T10683] ? kstrtoull+0x12f/0x1d0 [ 556.955265][T10683] ? get_pid_task+0x20/0x1f0 [ 556.955292][T10683] ? __pfx_copy_process+0x10/0x10 [ 556.955332][T10683] kernel_clone+0x249/0x840 [ 556.955364][T10683] ? __pfx_kernel_clone+0x10/0x10 [ 556.955391][T10683] ? do_raw_spin_lock+0x12b/0x2f0 [ 556.955436][T10683] __x64_sys_clone+0x1b6/0x230 [ 556.955458][T10683] ? __pfx___x64_sys_clone+0x10/0x10 [ 556.955492][T10683] ? __pfx_ksys_write+0x10/0x10 [ 556.955532][T10683] do_syscall_64+0x14d/0xf80 [ 556.955553][T10683] ? trace_irq_disable+0x3b/0x150 [ 556.955576][T10683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.955596][T10683] ? clear_bhb_loop+0x40/0x90 [ 556.955620][T10683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.955638][T10683] RIP: 0033:0x7f01e0dcc819 [ 556.955656][T10683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.955672][T10683] RSP: 002b:00007f01deffcfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 556.955692][T10683] RAX: ffffffffffffffda RBX: 00007f01e1046090 RCX: 00007f01e0dcc819 [ 556.955707][T10683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000a2540400 [ 556.955719][T10683] RBP: 00007f01deffd090 R08: 0000000000000000 R09: 0000000000000000 [ 556.955731][T10683] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 556.955743][T10683] R13: 00007f01e1046128 R14: 00007f01e1046090 R15: 00007ffdc4a8df68 [ 556.955773][T10683] [ 556.955796][T10683] syz.1.1527: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 556.955855][T10683] CPU: 1 UID: 0 PID: 10683 Comm: syz.1.1527 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 556.955880][T10683] Tainted: [L]=SOFTLOCKUP [ 556.955887][T10683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 556.955903][T10683] Call Trace: [ 556.955910][T10683] [ 556.955917][T10683] dump_stack_lvl+0xe8/0x150 [ 556.955947][T10683] warn_alloc+0x263/0x3e0 [ 556.955969][T10683] ? kasan_quarantine_put+0xbb/0x1f0 [ 556.956000][T10683] ? __pfx_warn_alloc+0x10/0x10 [ 556.956021][T10683] ? __get_vm_area_node+0x23f/0x350 [ 556.956047][T10683] ? __get_vm_area_node+0x171/0x350 [ 556.956075][T10683] ? copy_process+0x508/0x3cd0 [ 556.956103][T10683] ? __get_vm_area_node+0x23f/0x350 [ 556.956138][T10683] __vmalloc_node_range_noprof+0x397/0x1730 [ 556.956180][T10683] ? percpu_ref_get_many+0x19/0x140 [ 556.956207][T10683] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 556.956238][T10683] ? rcu_is_watching+0x15/0xb0 [ 556.956259][T10683] ? memcpy_and_pad+0x48/0x80 [ 556.956285][T10683] __vmalloc_node_noprof+0xc2/0x100 [ 556.956312][T10683] ? copy_process+0x508/0x3cd0 [ 556.956332][T10683] ? copy_process+0x508/0x3cd0 [ 556.956355][T10683] dup_task_struct+0x275/0x9a0 [ 556.956377][T10683] ? rt_spin_unlock+0x160/0x200 [ 556.956400][T10683] copy_process+0x508/0x3cd0 [ 556.956422][T10683] ? kstrtoull+0x12f/0x1d0 [ 556.956449][T10683] ? get_pid_task+0x20/0x1f0 [ 556.956470][T10683] ? __pfx_copy_process+0x10/0x10 [ 556.956501][T10683] kernel_clone+0x249/0x840 [ 556.956525][T10683] ? __pfx_kernel_clone+0x10/0x10 [ 556.956547][T10683] ? do_raw_spin_lock+0x12b/0x2f0 [ 556.956581][T10683] __x64_sys_clone+0x1b6/0x230 [ 556.956598][T10683] ? __pfx___x64_sys_clone+0x10/0x10 [ 556.956623][T10683] ? __pfx_ksys_write+0x10/0x10 [ 556.956655][T10683] do_syscall_64+0x14d/0xf80 [ 556.956670][T10683] ? trace_irq_disable+0x3b/0x150 [ 556.956688][T10683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.956703][T10683] ? clear_bhb_loop+0x40/0x90 [ 556.956722][T10683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.956736][T10683] RIP: 0033:0x7f01e0dcc819 [ 556.956749][T10683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.956761][T10683] RSP: 002b:00007f01deffcfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 556.956777][T10683] RAX: ffffffffffffffda RBX: 00007f01e1046090 RCX: 00007f01e0dcc819 [ 556.956788][T10683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000a2540400 [ 556.956797][T10683] RBP: 00007f01deffd090 R08: 0000000000000000 R09: 0000000000000000 [ 556.956807][T10683] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 556.956816][T10683] R13: 00007f01e1046128 R14: 00007f01e1046090 R15: 00007ffdc4a8df68 [ 556.956840][T10683] [ 556.956849][T10683] Mem-Info: [ 556.956857][T10683] active_anon:258 inactive_anon:7402 isolated_anon:0 [ 556.956857][T10683] active_file:20733 inactive_file:42599 isolated_file:0 [ 556.956857][T10683] unevictable:768 dirty:411 writeback:0 [ 556.956857][T10683] slab_reclaimable:12335 slab_unreclaimable:102190 [ 556.956857][T10683] mapped:31517 shmem:1873 pagetables:1343 [ 556.956857][T10683] sec_pagetables:0 bounce:0 [ 556.956857][T10683] kernel_misc_reclaimable:0 [ 556.956857][T10683] free:1298575 free_pcp:3840 free_cma:0 [ 556.956918][T10683] Node 0 active_anon:1032kB inactive_anon:29608kB active_file:82720kB inactive_file:170396kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126068kB dirty:1644kB writeback:0kB shmem:5956kB kernel_stack:13240kB pagetables:5248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 556.956963][T10683] Node 1 active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 556.957006][T10683] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 556.957062][T10683] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 556.957095][T10683] Node 0 DMA32 free:1239328kB boost:0kB min:3932kB low:6468kB high:9004kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1032kB inactive_anon:29608kB active_file:82720kB inactive_file:170396kB unevictable:1536kB writepending:1644kB zspages:0kB present:3129332kB managed:2566456kB mlocked:0kB bounce:0kB free_pcp:15360kB local_pcp:1224kB free_cma:0kB [ 556.957155][T10683] lowmem_reserve[]: 0 0 0 0 0 [ 556.957185][T10683] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:416kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 556.957241][T10683] lowmem_reserve[]: 0 0 0 0 0 [ 556.957271][T10683] Node 1 Normal free:3939612kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 556.957328][T10683] lowmem_reserve[]: 0 0 0 0 0 [ 556.957359][T10683] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 556.957468][T10683] Node 0 DMA32: 1765*4kB (UME) 1939*8kB (UME) 958*16kB (UME) 271*32kB (UME) 140*64kB (UME) 188*128kB (UME) 132*256kB (UME) 89*512kB (UME) 59*1024kB (UME) 34*2048kB (UME) 232*4096kB (UM) = 1239276kB [ 556.957612][T10683] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 556.957695][T10683] Node 1 Normal: 5*4kB (UM) 7*8kB (UM) 9*16kB (UM) 12*32kB (UM) 5*64kB (UM) 3*128kB (UM) 4*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 960*4096kB (M) = 3939612kB [ 556.957842][T10683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 556.957858][T10683] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 556.957873][T10683] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 556.957889][T10683] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 557.045379][T10683] 65199 total pagecache pages [ 557.045393][T10683] 0 pages in swap cache [ 557.045399][T10683] Free swap = 124996kB [ 557.045407][T10683] Total swap = 124996kB [ 557.045415][T10683] 2097051 pages RAM [ 557.045422][T10683] 0 pages HighMem/MovableOnly [ 557.045428][T10683] 423718 pages reserved [ 557.045435][T10683] 0 pages cma reserved [ 557.235085][T10684] pim6reg: entered allmulticast mode [ 558.183954][T10684] mmap: syz.2.1528 (10684) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 561.186839][T10727] tmpfs: Bad value for 'mpol' [ 561.258829][T10729] siw: device registration error -23 [ 561.260436][T10729] netlink: 'syz.0.1545': attribute type 16 has an invalid length. [ 561.260447][T10729] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1545'. [ 561.260466][T10729] veth1_macvtap: entered allmulticast mode [ 561.595553][T10737] bridge0: entered promiscuous mode [ 561.668425][T10737] bridge0: left promiscuous mode [ 561.688050][ T1076] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 561.731138][T10740] fuse: Unknown parameter 'fsmagic' [ 561.841650][ T1076] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.841675][ T1076] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 561.841734][ T1076] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 561.845167][ T1076] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=10.40 [ 561.845193][ T1076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.845212][ T1076] usb 3-1: Product: syz [ 561.845226][ T1076] usb 3-1: Manufacturer: syz [ 561.845238][ T1076] usb 3-1: SerialNumber: syz [ 562.349686][ T1076] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 562.349774][ T1076] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 562.360565][ T1076] usb 3-1: 0:2 : does not exist [ 562.769006][ T48] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 563.003546][ T48] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 563.003574][ T48] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 563.003593][ T48] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 563.003640][ T48] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 563.003665][ T48] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 563.005653][ T48] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 563.005678][ T48] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 563.005698][ T48] usb 5-1: Product: syz [ 563.005711][ T48] usb 5-1: Manufacturer: syz [ 563.072877][ T48] cdc_wdm 5-1:1.0: skipping garbage [ 563.072896][ T48] cdc_wdm 5-1:1.0: skipping garbage [ 563.107106][ T48] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 563.107126][ T48] cdc_wdm 5-1:1.0: Unknown control protocol [ 563.120138][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.175148][T10747] block nbd0: server does not support multiple connections per device. [ 563.176412][T10747] block nbd0: shutting down sockets [ 563.238195][ T1076] usb 3-1: USB disconnect, device number 50 [ 563.411721][T10183] udevd[10183]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 563.453171][T10764] netlink: 'syz.0.1558': attribute type 10 has an invalid length. [ 563.453452][T10764] hsr0: entered promiscuous mode [ 563.465641][T10764] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 563.465871][T10764] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 563.465891][T10764] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 563.609420][ T31] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 563.698086][ T1076] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 563.768303][ T5927] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 563.772909][ T31] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 563.772933][ T31] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 563.772952][ T31] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 563.772987][ T31] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 563.773010][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 563.773021][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 563.776068][ T31] usb 4-1: string descriptor 0 read error: -22 [ 563.776183][ T31] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 563.776196][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.780325][ T31] usb 4-1: config 0 descriptor?? [ 563.808483][ T31] hub 4-1:0.0: bad descriptor, ignoring hub [ 563.808516][ T31] hub 4-1:0.0: probe with driver hub failed with error -5 [ 563.828061][ T48] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 563.848020][ T1076] usb 2-1: Using ep0 maxpacket: 16 [ 563.860182][ T1076] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 563.860231][ T1076] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 563.888431][ T1076] usb 2-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 563.888456][ T1076] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.888475][ T1076] usb 2-1: Product: syz [ 563.888488][ T1076] usb 2-1: Manufacturer: syz [ 563.888502][ T1076] usb 2-1: SerialNumber: syz [ 563.931122][ T5927] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 563.931146][ T5927] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 563.931164][ T5927] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 563.931197][ T5927] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 563.931288][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 563.931309][ T5927] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 563.937867][ T5927] usb 1-1: string descriptor 0 read error: -22 [ 563.938586][ T5927] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 563.939034][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.004438][ T48] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 564.004599][ T48] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 564.004619][ T48] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 564.004652][ T48] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 564.005051][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 564.005073][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 564.011366][ T48] usb 3-1: string descriptor 0 read error: -22 [ 564.011545][ T48] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 564.011568][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.123451][ T5927] usb 1-1: config 0 descriptor?? [ 564.158469][ T5927] hub 1-1:0.0: bad descriptor, ignoring hub [ 564.158506][ T5927] hub 1-1:0.0: probe with driver hub failed with error -5 [ 564.161338][ T48] usb 3-1: config 0 descriptor?? [ 564.181377][ T48] hub 3-1:0.0: bad descriptor, ignoring hub [ 564.181412][ T48] hub 3-1:0.0: probe with driver hub failed with error -5 [ 564.258839][ T48] usb 4-1: USB disconnect, device number 57 [ 564.488462][ T48] usb 1-1: USB disconnect, device number 48 [ 564.548709][ T31] usb 3-1: USB disconnect, device number 51 [ 565.099745][ T31] usb 5-1: USB disconnect, device number 35 [ 566.398351][ T48] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 566.519467][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1567'. [ 566.711043][ T48] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 566.711062][ T48] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 566.711073][ T48] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 566.711092][ T48] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 566.711113][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 566.711124][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 566.730076][ T48] usb 3-1: string descriptor 0 read error: -22 [ 566.730266][ T48] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 566.730288][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.278720][ T48] usb 3-1: config 0 descriptor?? [ 567.597248][ T48] hub 3-1:0.0: bad descriptor, ignoring hub [ 567.597271][ T48] hub 3-1:0.0: probe with driver hub failed with error -5 [ 567.804425][ T1076] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 567.863433][ T1076] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 567.947520][ T1076] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 567.979111][ T1076] usb 2-1: USB disconnect, device number 57 [ 568.060845][ T9947] udevd[9947]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 568.079414][ T5927] usb 3-1: USB disconnect, device number 52 [ 568.088395][ T48] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 568.245768][ T48] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 568.245799][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.262068][ T48] usb 4-1: config 0 descriptor?? [ 568.484396][ T48] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 568.765258][ T5806] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 569.491705][ T48] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 569.491729][ T48] [drm] Initialized udl on minor 2 [ 569.511844][ T48] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 569.512293][ T48] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 569.538302][ T5927] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 569.540449][ T5927] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 569.540582][ T5927] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 569.543903][ T48] usb 4-1: USB disconnect, device number 58 [ 569.668049][ T5806] usb 5-1: Using ep0 maxpacket: 16 [ 569.673228][ T5806] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 569.673252][ T5806] usb 5-1: config 0 has no interface number 0 [ 569.675706][ T5806] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 569.675733][ T5806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.675752][ T5806] usb 5-1: Product: syz [ 569.675766][ T5806] usb 5-1: Manufacturer: syz [ 569.675779][ T5806] usb 5-1: SerialNumber: syz [ 569.705517][ T5806] usb 5-1: config 0 descriptor?? [ 569.728991][ T5806] hub 5-1:0.132: bad descriptor, ignoring hub [ 569.729026][ T5806] hub 5-1:0.132: probe with driver hub failed with error -5 [ 569.762197][ T5806] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input19 [ 571.518279][ T5806] usb 5-1: USB disconnect, device number 36 [ 572.801059][ T48] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 572.933780][ T808] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 573.000236][ T48] usb 2-1: unable to get BOS descriptor or descriptor too short [ 573.000937][ T48] usb 2-1: not running at top speed; connect to a high speed hub [ 573.002470][ T48] usb 2-1: config 16 has an invalid interface number: 44 but max is 0 [ 573.002485][ T48] usb 2-1: config 16 has no interface number 0 [ 573.002503][ T48] usb 2-1: config 16 interface 44 has no altsetting 0 [ 573.046357][ T48] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=21.e1 [ 573.046384][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.046403][ T48] usb 2-1: Product: syz [ 573.046416][ T48] usb 2-1: Manufacturer: syz [ 573.046430][ T48] usb 2-1: SerialNumber: syz [ 573.105278][ T808] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.105303][ T808] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 573.105363][ T808] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 573.139630][ T808] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=10.40 [ 573.139658][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.139678][ T808] usb 4-1: Product: syz [ 573.139691][ T808] usb 4-1: Manufacturer: syz [ 573.139705][ T808] usb 4-1: SerialNumber: syz [ 573.379523][ T808] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 573.379663][ T808] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 573.381801][ T808] usb 4-1: 0:2 : does not exist [ 573.454863][ T48] qmi_wwan 2-1:16.44: probe with driver qmi_wwan failed with error -22 [ 573.508042][ T48] usb 2-1: USB disconnect, device number 58 [ 573.529610][ T808] usb 4-1: USB disconnect, device number 59 [ 573.678549][ T9943] udevd[9943]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 573.965326][T10891] tmpfs: Bad value for 'mpol' [ 574.018013][ T808] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 574.034615][T10894] siw: device registration error -23 [ 574.473363][ T808] usb 3-1: Using ep0 maxpacket: 16 [ 574.537654][ T808] usb 3-1: config 0 has no interfaces? [ 574.542673][ T808] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 574.542699][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.542717][ T808] usb 3-1: Product: syz [ 574.542730][ T808] usb 3-1: Manufacturer: syz [ 574.542743][ T808] usb 3-1: SerialNumber: syz [ 574.578862][ T808] usb 3-1: config 0 descriptor?? [ 574.658999][ T5806] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 574.900867][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1597'. [ 574.909795][T10881] team0: entered promiscuous mode [ 574.910587][T10881] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 574.931973][T10881] team0: left promiscuous mode [ 574.988580][ T5806] usb 5-1: Using ep0 maxpacket: 16 [ 575.096616][ T5806] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 575.096698][ T5806] usb 5-1: config 0 has no interface number 0 [ 575.229108][ T5806] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 575.229283][ T5806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.229332][ T5806] usb 5-1: Product: syz [ 575.229369][ T5806] usb 5-1: Manufacturer: syz [ 575.229405][ T5806] usb 5-1: SerialNumber: syz [ 575.736097][ T5806] usb 5-1: config 0 descriptor?? [ 575.749930][ T5806] hub 5-1:0.132: bad descriptor, ignoring hub [ 575.749967][ T5806] hub 5-1:0.132: probe with driver hub failed with error -5 [ 575.756030][ T5806] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input20 [ 575.929244][ T5806] usb 5-1: USB disconnect, device number 37 [ 575.992205][ T48] usb 3-1: USB disconnect, device number 53 [ 577.808078][ T808] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 578.165177][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1616'. [ 578.211665][ T808] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.211691][ T808] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 578.211749][ T808] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 578.249392][ T808] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=10.40 [ 578.249419][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.249438][ T808] usb 2-1: Product: syz [ 578.249452][ T808] usb 2-1: Manufacturer: syz [ 578.249466][ T808] usb 2-1: SerialNumber: syz [ 578.622592][ T808] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 578.622746][ T808] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 578.627065][ T808] usb 2-1: 0:2 : does not exist [ 578.678918][ T5806] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 578.679136][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 578.858010][ T5806] usb 3-1: device descriptor read/64, error -32 [ 579.837999][ T5806] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 579.884641][T10951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1621'. [ 579.985618][ T808] usb 2-1: USB disconnect, device number 59 [ 580.033608][T10951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1621'. [ 580.033890][T10951] bridge_slave_0: default FDB implementation only supports local addresses [ 580.117948][ T5806] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 580.117976][ T5806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.194408][T10107] udevd[10107]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 580.196776][ T5806] usb 3-1: config 0 descriptor?? [ 580.286924][T10962] tipc: Enabled bearer , priority 10 [ 580.404706][ T5806] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 580.428167][ T5927] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 580.608331][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 580.713102][ T5927] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 580.713818][ T5927] usb 5-1: config 0 has no interface number 0 [ 581.428156][ T5927] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 581.428185][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.428204][ T5927] usb 5-1: Product: syz [ 581.428217][ T5927] usb 5-1: Manufacturer: syz [ 581.428231][ T5927] usb 5-1: SerialNumber: syz [ 581.471218][ T5927] usb 5-1: config 0 descriptor?? [ 581.492708][ T31] tipc: Node number set to 973078572 [ 581.494646][ T5927] hub 5-1:0.132: bad descriptor, ignoring hub [ 581.494681][ T5927] hub 5-1:0.132: probe with driver hub failed with error -5 [ 581.516962][ T5806] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 581.516983][ T5806] [drm] Initialized udl on minor 2 [ 581.564497][ T5927] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input21 [ 581.602491][ T5806] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 581.602954][ T5806] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 581.605445][ T7572] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 581.606122][ T7572] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 581.606325][ T7572] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 581.756230][ T5806] usb 3-1: USB disconnect, device number 55 [ 581.841615][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1631'. [ 582.001249][T10980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.001734][T10980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.019674][ T808] usb 5-1: USB disconnect, device number 39 [ 582.228029][ T5857] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 582.368038][ T808] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 582.378037][ T5857] usb 4-1: Using ep0 maxpacket: 16 [ 582.380066][ T5857] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 582.380089][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.394096][ T5857] usb 4-1: config 0 descriptor?? [ 582.410370][ T5857] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 582.530008][ T808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.530034][ T808] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 582.530149][ T808] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 582.534121][ T808] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=10.40 [ 582.534146][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.534375][ T808] usb 1-1: Product: syz [ 582.534391][ T808] usb 1-1: Manufacturer: syz [ 582.534404][ T808] usb 1-1: SerialNumber: syz [ 582.743619][ T5857] usb 4-1: Detected FT232A [ 582.758616][ T5857] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 582.870204][ T5857] usb 4-1: USB disconnect, device number 60 [ 583.162943][ T808] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 583.163085][ T808] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 583.165341][ T5857] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 583.166021][ T5857] ftdi_sio 4-1:0.0: device disconnected [ 583.199342][ T808] usb 1-1: 0:2 : does not exist [ 583.300015][ T808] usb 1-1: USB disconnect, device number 49 [ 583.314133][T10994] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1637'. [ 584.482409][T10107] udevd[10107]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 584.533663][T11009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1644'. [ 584.544798][T11011] fuse: Bad value for 'fd' [ 584.570640][T11011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1638'. [ 584.680309][T11007] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 585.142876][ T7572] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 587.448957][ T7572] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 587.448985][ T7572] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 587.449005][ T7572] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 587.449040][ T7572] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 587.449078][ T7572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 587.449100][ T7572] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 587.452374][ T7572] usb 5-1: string descriptor 0 read error: -22 [ 587.452508][ T7572] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 587.452531][ T7572] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.656839][ T7572] usb 5-1: config 0 descriptor?? [ 587.753148][T11045] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 587.753172][T11045] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 587.753185][T11045] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 587.853862][ T7572] hub 5-1:0.0: bad descriptor, ignoring hub [ 587.853900][ T7572] hub 5-1:0.0: probe with driver hub failed with error -5 [ 587.896087][T11046] overlayfs: failed lookup in lower (newroot/336, name='file1', err=-40): overlapping layers [ 587.896622][T11046] overlayfs: failed lookup in lower (newroot/336, name='file1', err=-40): overlapping layers [ 587.968924][ T7572] usb 5-1: USB disconnect, device number 40 [ 588.178650][ T1076] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 588.341074][ T1076] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 588.341102][ T1076] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 588.341121][ T1076] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 588.341154][ T1076] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 588.341191][ T1076] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 588.341213][ T1076] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 588.344491][ T1076] usb 2-1: string descriptor 0 read error: -22 [ 588.344638][ T1076] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 588.344660][ T1076] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.443023][ T1076] usb 2-1: config 0 descriptor?? [ 588.446036][ T1076] hub 2-1:0.0: bad descriptor, ignoring hub [ 588.446069][ T1076] hub 2-1:0.0: probe with driver hub failed with error -5 [ 589.799788][ T7572] usb 2-1: USB disconnect, device number 60 [ 595.488086][ T5806] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 595.648280][ T5806] usb 2-1: Using ep0 maxpacket: 8 [ 595.651452][ T5806] usb 2-1: unable to get BOS descriptor or descriptor too short [ 595.652939][ T5806] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.652961][ T5806] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 595.653021][ T5806] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 595.656075][ T5806] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 595.656101][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.656120][ T5806] usb 2-1: Product: syz [ 595.656133][ T5806] usb 2-1: Manufacturer: syz [ 595.656147][ T5806] usb 2-1: SerialNumber: syz [ 596.285910][ T808] libceph: connect (1)[c::]:6789 error -101 [ 596.286327][ T808] libceph: mon0 (1)[c::]:6789 connect error [ 596.301737][ T808] libceph: connect (1)[c::]:6789 error -101 [ 596.302005][ T808] libceph: mon0 (1)[c::]:6789 connect error [ 596.308726][T11150] ceph: No mds server is up or the cluster is laggy [ 596.369150][ T5806] usb 2-1: USB disconnect, device number 61 [ 596.450804][T10183] udevd[10183]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 596.568348][ T808] libceph: connect (1)[c::]:6789 error -101 [ 596.568533][ T808] libceph: mon0 (1)[c::]:6789 connect error [ 596.628062][ T7572] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 596.787993][ T7572] usb 1-1: Using ep0 maxpacket: 16 [ 596.793135][ T7572] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 596.793160][ T7572] usb 1-1: config 0 has no interface number 0 [ 596.798368][ T7572] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 596.798384][ T7572] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.798394][ T7572] usb 1-1: Product: syz [ 596.798402][ T7572] usb 1-1: Manufacturer: syz [ 596.798410][ T7572] usb 1-1: SerialNumber: syz [ 596.875010][ T7572] usb 1-1: config 0 descriptor?? [ 596.885637][ T7572] hub 1-1:0.132: bad descriptor, ignoring hub [ 596.885672][ T7572] hub 1-1:0.132: probe with driver hub failed with error -5 [ 596.933163][ T7572] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input22 [ 597.300804][ T7572] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 597.488657][ T7572] usb 5-1: Using ep0 maxpacket: 16 [ 597.491046][ T7572] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.491071][ T7572] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 597.491106][ T7572] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 597.491129][ T7572] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.500868][ T7572] usb 5-1: config 0 descriptor?? [ 598.826501][T11184] netlink: 'syz.2.1701': attribute type 6 has an invalid length. [ 600.080881][ T808] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 600.409560][T11191] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 600.409699][T11191] qnx6: wrong signature (magic) in superblock #1. [ 600.409705][T11191] qnx6: unable to read the first superblock [ 600.430515][ T808] usb 4-1: config 160 has an invalid interface number: 200 but max is 0 [ 600.430542][ T808] usb 4-1: config 160 has no interface number 0 [ 600.430588][ T808] usb 4-1: config 160 interface 200 has no altsetting 0 [ 600.441078][ T808] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 600.441105][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.441116][ T808] usb 4-1: Product: syz [ 600.441124][ T808] usb 4-1: Manufacturer: syz [ 600.441131][ T808] usb 4-1: SerialNumber: syz [ 600.480993][ T7572] usb 5-1: USB disconnect, device number 41 [ 600.777087][ T808] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 600.777145][ T808] usb 4-1: MIDIStreaming interface descriptor not found [ 600.923312][ T808] usb 4-1: USB disconnect, device number 61 [ 600.955932][T10184] usb 1-1: reset high-speed USB device number 50 using dummy_hcd [ 601.058705][ T7572] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 601.226554][T10184] usb 1-1: device reset changed ep0 maxpacket size! [ 601.465835][ T9943] udevd[9943]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 601.471254][ T31] usb 1-1: USB disconnect, device number 50 [ 601.492300][ T7572] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 601.492329][ T7572] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.577664][ T7572] usb 5-1: config 0 descriptor?? [ 601.787089][ T7572] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 602.028197][ T7572] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 602.028222][ T7572] [drm] Initialized udl on minor 2 [ 602.918799][ T7572] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 602.919252][ T7572] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 602.923192][ T5927] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 602.923948][ T5927] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 602.924168][ T5927] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 602.948701][ T7572] usb 5-1: USB disconnect, device number 42 [ 603.234481][T11220] FAULT_INJECTION: forcing a failure. [ 603.234481][T11220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.234518][T11220] CPU: 0 UID: 0 PID: 11220 Comm: syz.0.1711 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 603.234545][T11220] Tainted: [L]=SOFTLOCKUP [ 603.234553][T11220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 603.234566][T11220] Call Trace: [ 603.234574][T11220] [ 603.234584][T11220] dump_stack_lvl+0xe8/0x150 [ 603.234619][T11220] should_fail_ex+0x46b/0x600 [ 603.234651][T11220] _copy_from_user+0x2d/0xb0 [ 603.234671][T11220] kvm_vcpu_ioctl+0x642/0xfe0 [ 603.234700][T11220] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 603.234726][T11220] ? __asan_memset+0x22/0x50 [ 603.234753][T11220] ? smack_file_ioctl+0x331/0x360 [ 603.234787][T11220] ? __pfx_smack_file_ioctl+0x10/0x10 [ 603.234836][T11220] ? bpf_lsm_file_ioctl+0x9/0x20 [ 603.234857][T11220] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 603.234879][T11220] __se_sys_ioctl+0xff/0x170 [ 603.234902][T11220] do_syscall_64+0x14d/0xf80 [ 603.234923][T11220] ? trace_irq_disable+0x3b/0x150 [ 603.234947][T11220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.234968][T11220] ? clear_bhb_loop+0x40/0x90 [ 603.234992][T11220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.235012][T11220] RIP: 0033:0x7f04f344c819 [ 603.235030][T11220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.235048][T11220] RSP: 002b:00007f04f169e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 603.235068][T11220] RAX: ffffffffffffffda RBX: 00007f04f36c5fa0 RCX: 00007f04f344c819 [ 603.235083][T11220] RDX: 0000200000000240 RSI: 00000000c040aed5 RDI: 0000000000000005 [ 603.235097][T11220] RBP: 00007f04f169e090 R08: 0000000000000000 R09: 0000000000000000 [ 603.235110][T11220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.235140][T11220] R13: 00007f04f36c6038 R14: 00007f04f36c5fa0 R15: 00007ffdb6be4768 [ 603.235172][T11220] [ 603.370300][T11223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1708'. [ 605.460388][ T5864] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 605.617986][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 605.658048][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 605.670737][ T5864] usb 3-1: no configurations [ 605.670756][ T5864] usb 3-1: can't read configurations, error -22 [ 605.838200][ T5864] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 607.125330][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 607.164132][ T5864] usb 3-1: device descriptor read/all, error -71 [ 607.164351][ T5864] usb usb3-port1: attempt power cycle [ 607.184309][ T5864] ================================================================== [ 607.184324][ T5864] BUG: KASAN: slab-use-after-free in rtlock_slowlock_locked+0x3460/0x3c80 [ 607.184364][ T5864] Read of size 8 at addr ffff88803ce788f8 by task kworker/0:4/5864 [ 607.184382][ T5864] [ 607.184396][ T5864] CPU: 0 UID: 0 PID: 5864 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 607.184423][ T5864] Tainted: [L]=SOFTLOCKUP [ 607.184430][ T5864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 607.184443][ T5864] Workqueue: usb_hub_wq hub_event [ 607.184468][ T5864] Call Trace: [ 607.184476][ T5864] [ 607.184485][ T5864] dump_stack_lvl+0xe8/0x150 [ 607.184515][ T5864] print_report+0xba/0x230 [ 607.184540][ T5864] ? rtlock_slowlock_locked+0x3460/0x3c80 [ 607.184567][ T5864] kasan_report+0x117/0x150 [ 607.184589][ T5864] ? rtlock_slowlock_locked+0x3460/0x3c80 [ 607.184622][ T5864] rtlock_slowlock_locked+0x3460/0x3c80 [ 607.184659][ T5864] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 607.184686][ T5864] ? rtlock_slowlock_locked+0x2a8/0x3c80 [ 607.184717][ T5864] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 607.184751][ T5864] ? rcu_is_watching+0x15/0xb0 [ 607.184775][ T5864] rt_spin_lock+0x165/0x400 [ 607.184800][ T5864] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 607.184819][ T5864] ? __pfx_rt_spin_lock+0x10/0x10 [ 607.184846][ T5864] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 607.184876][ T5864] raw_queue_event+0x39/0x2e0 [ 607.184903][ T5864] gadget_disconnect+0x51/0xe0 [ 607.184928][ T5864] set_link_state+0xc0a/0x1220 [ 607.184958][ T5864] dummy_hub_control+0xafc/0x1a00 [ 607.184986][ T5864] ? usb_hcd_submit_urb+0x786/0x1b50 [ 607.185015][ T5864] usb_hcd_submit_urb+0xdbe/0x1b50 [ 607.185049][ T5864] usb_start_wait_urb+0x13f/0x5b0 [ 607.185081][ T5864] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 607.185112][ T5864] usb_control_msg+0x234/0x3e0 [ 607.185135][ T5864] hub_event+0x2dc0/0x4f60 [ 607.185181][ T5864] ? __pfx_hub_event+0x10/0x10 [ 607.185207][ T5864] ? process_scheduled_works+0xa8d/0x18c0 [ 607.185234][ T5864] ? process_scheduled_works+0xa8d/0x18c0 [ 607.185261][ T5864] process_scheduled_works+0xb6e/0x18c0 [ 607.185300][ T5864] ? __pfx_process_scheduled_works+0x10/0x10 [ 607.185330][ T5864] ? assign_work+0x3d5/0x5e0 [ 607.185359][ T5864] worker_thread+0xa53/0xfc0 [ 607.185396][ T5864] kthread+0x388/0x470 [ 607.185423][ T5864] ? __pfx_worker_thread+0x10/0x10 [ 607.185448][ T5864] ? __pfx_kthread+0x10/0x10 [ 607.185468][ T5864] ret_from_fork+0x51e/0xb90 [ 607.185498][ T5864] ? __pfx_ret_from_fork+0x10/0x10 [ 607.185525][ T5864] ? __switch_to+0xc7d/0x1450 [ 607.185551][ T5864] ? __pfx_kthread+0x10/0x10 [ 607.185572][ T5864] ret_from_fork_asm+0x1a/0x30 [ 607.185599][ T5864] [ 607.185607][ T5864] [ 607.185613][ T5864] Allocated by task 11225: [ 607.185631][ T5864] kasan_save_track+0x3e/0x80 [ 607.185660][ T5864] __kasan_kmalloc+0x93/0xb0 [ 607.185689][ T5864] __kmalloc_cache_noprof+0x3a6/0x690 [ 607.185707][ T5864] raw_open+0x8d/0x530 [ 607.185726][ T5864] misc_open+0x2de/0x350 [ 607.185748][ T5864] chrdev_open+0x4d0/0x5f0 [ 607.185767][ T5864] do_dentry_open+0x83d/0x13e0 [ 607.185787][ T5864] vfs_open+0x3b/0x350 [ 607.185805][ T5864] path_openat+0x2e43/0x38a0 [ 607.185830][ T5864] do_file_open+0x23e/0x4a0 [ 607.185854][ T5864] do_sys_openat2+0x113/0x200 [ 607.185875][ T5864] __x64_sys_openat+0x138/0x170 [ 607.185897][ T5864] do_syscall_64+0x14d/0xf80 [ 607.185916][ T5864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.185935][ T5864] [ 607.185939][ T5864] Freed by task 11225: [ 607.185948][ T5864] kasan_save_track+0x3e/0x80 [ 607.185974][ T5864] kasan_save_free_info+0x46/0x50 [ 607.185996][ T5864] __kasan_slab_free+0x5c/0x80 [ 607.186022][ T5864] kfree+0x1c1/0x6c0 [ 607.186046][ T5864] raw_release+0x191/0x260 [ 607.186074][ T5864] __fput+0x461/0xa90 [ 607.186095][ T5864] task_work_run+0x1d9/0x270 [ 607.186115][ T5864] do_exit+0x70f/0x23c0 [ 607.186133][ T5864] do_group_exit+0x21b/0x2d0 [ 607.186152][ T5864] get_signal+0x125c/0x1310 [ 607.186175][ T5864] arch_do_signal_or_restart+0xbc/0x830 [ 607.186198][ T5864] exit_to_user_mode_loop+0x86/0x480 [ 607.186226][ T5864] do_syscall_64+0x32d/0xf80 [ 607.186245][ T5864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.186263][ T5864] [ 607.186267][ T5864] The buggy address belongs to the object at ffff88803ce78000 [ 607.186267][ T5864] which belongs to the cache kmalloc-4k of size 4096 [ 607.186284][ T5864] The buggy address is located 2296 bytes inside of [ 607.186284][ T5864] freed 4096-byte region [ffff88803ce78000, ffff88803ce79000) [ 607.186304][ T5864] [ 607.186310][ T5864] The buggy address belongs to the physical page: [ 607.186328][ T5864] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3ce78 [ 607.186346][ T5864] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 607.186363][ T5864] flags: 0x80000000000040(head|node=0|zone=1) [ 607.186379][ T5864] page_type: f5(slab) [ 607.186397][ T5864] raw: 0080000000000040 ffff88813fe1a140 dead000000000100 dead000000000122 [ 607.186416][ T5864] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 607.186435][ T5864] head: 0080000000000040 ffff88813fe1a140 dead000000000100 dead000000000122 [ 607.186452][ T5864] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 607.186471][ T5864] head: 0080000000000003 ffffea0000f39e01 00000000ffffffff 00000000ffffffff [ 607.186488][ T5864] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 607.186499][ T5864] page dumped because: kasan: bad access detected [ 607.186514][ T5864] page_owner tracks the page as allocated [ 607.186524][ T5864] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1157, tgid 1157 (kworker/u8:8), ts 418662026879, free_ts 418592927550 [ 607.186559][ T5864] post_alloc_hook+0x231/0x280 [ 607.186588][ T5864] get_page_from_freelist+0x28bb/0x2950 [ 607.186608][ T5864] __alloc_frozen_pages_noprof+0x18d/0x380 [ 607.186628][ T5864] allocate_slab+0x77/0x660 [ 607.186648][ T5864] refill_objects+0x334/0x3c0 [ 607.186673][ T5864] __pcs_replace_empty_main+0x35c/0x710 [ 607.186698][ T5864] __kmalloc_node_track_caller_noprof+0x60b/0x7e0 [ 607.186716][ T5864] __alloc_skb+0x2c1/0x7d0 [ 607.186733][ T5864] nsim_dev_trap_report_work+0x29f/0xbc0 [ 607.186759][ T5864] process_scheduled_works+0xb6e/0x18c0 [ 607.186783][ T5864] worker_thread+0xa53/0xfc0 [ 607.186809][ T5864] kthread+0x388/0x470 [ 607.186825][ T5864] ret_from_fork+0x51e/0xb90 [ 607.186851][ T5864] ret_from_fork_asm+0x1a/0x30 [ 607.186868][ T5864] page last free pid 9122 tgid 9120 stack trace: [ 607.186881][ T5864] __free_frozen_pages+0xfe3/0x1170 [ 607.186898][ T5864] __slab_free+0x24f/0x2a0 [ 607.186914][ T5864] qlist_free_all+0x97/0x100 [ 607.186939][ T5864] kasan_quarantine_reduce+0x148/0x160 [ 607.186965][ T5864] __kasan_slab_alloc+0x22/0x80 [ 607.186992][ T5864] kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 607.187021][ T5864] __alloc_skb+0x1d0/0x7d0 [ 607.187037][ T5864] rtmsg_ifinfo_build_skb+0x84/0x260 [ 607.187060][ T5864] rtmsg_ifinfo+0x8c/0x1a0 [ 607.187089][ T5864] netif_close_many+0x284/0x420 [ 607.187118][ T5864] netif_close+0x160/0x220 [ 607.187142][ T5864] dev_close+0x10a/0x220 [ 607.187157][ T5864] team_port_del+0x4ed/0xf30 [ 607.187178][ T5864] do_set_master+0x312/0x6d0 [ 607.187194][ T5864] do_setlink+0x1018/0x4590 [ 607.187209][ T5864] rtnl_newlink+0x147a/0x1be0 [ 607.187234][ T5864] [ 607.187240][ T5864] Memory state around the buggy address: [ 607.187251][ T5864] ffff88803ce78780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 607.187265][ T5864] ffff88803ce78800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 607.187278][ T5864] >ffff88803ce78880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 607.187289][ T5864] ^ [ 607.187301][ T5864] ffff88803ce78900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 607.187313][ T5864] ffff88803ce78980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 607.187323][ T5864] ================================================================== [ 607.187436][ T5864] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 607.187455][ T5864] CPU: 0 UID: 0 PID: 5864 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 607.187481][ T5864] Tainted: [L]=SOFTLOCKUP [ 607.187489][ T5864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 607.187502][ T5864] Workqueue: usb_hub_wq hub_event [ 607.187527][ T5864] Call Trace: [ 607.187534][ T5864] [ 607.187544][ T5864] vpanic+0x56c/0xa60 [ 607.187576][ T5864] ? __pfx_vpanic+0x10/0x10 [ 607.187611][ T5864] panic+0xc5/0xd0 [ 607.187638][ T5864] ? __pfx_panic+0x10/0x10 [ 607.187664][ T5864] ? preempt_schedule_thunk+0x16/0x30 [ 607.187686][ T5864] ? rtlock_slowlock_locked+0x3460/0x3c80 [ 607.187714][ T5864] ? preempt_schedule_thunk+0x16/0x30 [ 607.187737][ T5864] ? rtlock_slowlock_locked+0x3460/0x3c80 [ 607.187766][ T5864] check_panic_on_warn+0x89/0xb0 [ 607.187789][ T5864] ? rtlock_slowlock_locked+0x3460/0x3c80 [ 607.187816][ T5864] end_report+0x73/0x180 [ 607.187834][ T5864] ? rtlock_slowlock_locked+0x3460/0x3c80 [ 607.187862][ T5864] kasan_report+0x128/0x150 [ 607.187885][ T5864] ? rtlock_slowlock_locked+0x3460/0x3c80 [ 607.187916][ T5864] rtlock_slowlock_locked+0x3460/0x3c80 [ 607.187951][ T5864] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 607.187977][ T5864] ? rtlock_slowlock_locked+0x2a8/0x3c80 [ 607.188009][ T5864] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 607.188043][ T5864] ? rcu_is_watching+0x15/0xb0 [ 607.188074][ T5864] rt_spin_lock+0x165/0x400 [ 607.188102][ T5864] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 607.188125][ T5864] ? __pfx_rt_spin_lock+0x10/0x10 [ 607.188153][ T5864] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 607.188183][ T5864] raw_queue_event+0x39/0x2e0 [ 607.188210][ T5864] gadget_disconnect+0x51/0xe0 [ 607.188234][ T5864] set_link_state+0xc0a/0x1220 [ 607.188264][ T5864] dummy_hub_control+0xafc/0x1a00 [ 607.188291][ T5864] ? usb_hcd_submit_urb+0x786/0x1b50 [ 607.188321][ T5864] usb_hcd_submit_urb+0xdbe/0x1b50 [ 607.188353][ T5864] usb_start_wait_urb+0x13f/0x5b0 [ 607.188378][ T5864] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 607.188408][ T5864] usb_control_msg+0x234/0x3e0 [ 607.188432][ T5864] hub_event+0x2dc0/0x4f60 [ 607.188477][ T5864] ? __pfx_hub_event+0x10/0x10 [ 607.188505][ T5864] ? process_scheduled_works+0xa8d/0x18c0 [ 607.188532][ T5864] ? process_scheduled_works+0xa8d/0x18c0 [ 607.188560][ T5864] process_scheduled_works+0xb6e/0x18c0 [ 607.188600][ T5864] ? __pfx_process_scheduled_works+0x10/0x10 [ 607.188631][ T5864] ? assign_work+0x3d5/0x5e0 [ 607.188659][ T5864] worker_thread+0xa53/0xfc0 [ 607.188770][ T5864] kthread+0x388/0x470 [ 607.188822][ T5864] ? __pfx_worker_thread+0x10/0x10 [ 607.188892][ T5864] ? __pfx_kthread+0x10/0x10 [ 607.188930][ T5864] ret_from_fork+0x51e/0xb90 [ 607.189003][ T5864] ? __pfx_ret_from_fork+0x10/0x10 [ 607.189078][ T5864] ? __switch_to+0xc7d/0x1450 [ 607.189135][ T5864] ? __pfx_kthread+0x10/0x10 [ 607.189185][ T5864] ret_from_fork_asm+0x1a/0x30 [ 607.189240][ T5864] [ 607.189393][ T5864] Kernel Offset: disabled