last executing test programs: 2m34.131249796s ago: executing program 1 (id=44): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8937, &(0x7f0000000000)={'gre0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x2710, @local}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x5, 0x0, 0x1, "41b5e4280156"}}) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x5}], 0x2) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_COMPAT={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x421) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x300}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3e) r5 = eventfd(0x9) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='bfs\x00', 0x10008, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0x8, 0xffffffff, 0x1, r5, 0xa}) 2m33.97731386s ago: executing program 1 (id=46): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) r0 = open(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400103842, 0x2) mmap(&(0x7f0000474000/0x4000)=nil, 0x4000, 0x6800006, 0x92, r0, 0x205fc000) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x300, 0x0) 2m33.013600849s ago: executing program 1 (id=50): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701ddffff"], 0x2c}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000400)={0x2, 0x0, [{0x80000007, 0x800, 0x0, 0x9, 0x4, 0x401, 0x2}, {0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x5, 0x0, [{0xb, 0x6, 0x9, 0x861, 0x9, 0x1, 0x5}, {0x80000008, 0x81, 0x0, 0x4, 0x9, 0x1, 0x9}, {0x80000008, 0x3, 0x0, 0x81, 0xd5, 0x4, 0x4}, {0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m31.629072417s ago: executing program 1 (id=53): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) r0 = open(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400103842, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000006c000100"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x0) mmap(&(0x7f0000474000/0x4000)=nil, 0x4000, 0x6800006, 0x92, r0, 0x205fc000) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r3 = socket$inet(0x2, 0x3, 0x1) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x80000001]}, 0x8) readahead(r4, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x20008004) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000000), 0x0, 0x2ff, 0x0) 2m30.540578475s ago: executing program 1 (id=60): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=""/139, 0x8b) 2m30.012016809s ago: executing program 1 (id=63): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000000)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000240)={r3}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0xceb0, 0x0, [], [], [0x8, 0x1]}) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r7) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000680)={r10, 0x1ff, 0x0, 0x1, 0x3, [], [0x800020, 0x0, 0x0, 0x2], [0x0, 0x2, 0x1], [0x0, 0x0, 0xfffffffffefffff8, 0x9]}) (fail_nth: 3) 2m14.677196511s ago: executing program 32 (id=63): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000000)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000240)={r3}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0xceb0, 0x0, [], [], [0x8, 0x1]}) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r7) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000680)={r10, 0x1ff, 0x0, 0x1, 0x3, [], [0x800020, 0x0, 0x0, 0x2], [0x0, 0x2, 0x1], [0x0, 0x0, 0xfffffffffefffff8, 0x9]}) (fail_nth: 3) 4.792574126s ago: executing program 2 (id=999): openat$ppp(0xffffffffffffff9c, 0x0, 0xc0200, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x850}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x0, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x0, 0x700}, @generic={0x0, 0x8, "d58838000391"}]}}}}}}, 0x4e) 4.551043025s ago: executing program 0 (id=1003): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x24, {{0x2, 0x4e23, @multicast2}}}, 0x88) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000280)={0xfffffef8, 0x8, 0xfffffffd, 0x4, 0x88, "57855a2a054e26cba795bf3a588d3f00", 0xb0, 0x4}) read(r2, &(0x7f0000000100)=""/133, 0x85) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8, 0x9, 0xcee, 0x8a7, 0xb, "c16cd2d6d39a5e2f"}) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c82010000c000100050108"], 0x15) 4.507631234s ago: executing program 2 (id=1005): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000300)={0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0x80}, @code={0x1, 0x58, {"440f8971000000c4e1385753bdc4c14f10e7b9800000c00f3235000800000f30c4411f2ae2430f019a8700000066ba610066edf34f0f2c03c483bd49b23e7b00006c450f013449"}}], 0x88}) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000010c0)={[0x60000000003, 0x1000000000, 0x2, 0x10, 0x2000001, 0x0, 0x2004cb, 0xa000000000000000, 0xfffe, 0xfffffffffffffff7, 0x4, 0xffffffffffffffff, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc], 0x1, 0x202}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000000c0)={0xbc, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.441380057s ago: executing program 2 (id=1006): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701ddffff"], 0x2c}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x4e2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000400)={0x2, 0x0, [{0x80000007, 0x800, 0x0, 0x9, 0x4, 0x401, 0x2}, {0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x6, 0x0, [{0xb, 0x6, 0x9, 0x861, 0x9, 0x1, 0x5}, {0x80000008, 0x81, 0x0, 0x4, 0x9, 0x1, 0x9}, {0x80000008, 0x3, 0x0, 0x81, 0xd5, 0x4, 0x4}, {0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}, {0x40000000, 0xd, 0x6, 0x3, 0x2, 0x3}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.034102968s ago: executing program 2 (id=1007): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xf, 0x40, 0x3c, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x8}}}}}]}}, &(0x7f0000000d00)={0x0, 0x0, 0x15, &(0x7f0000000440)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x9, 0xf0f, 0x5, [0xff3f30]}]}}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20004840) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000140)=ANY=[]) 3.696128959s ago: executing program 0 (id=1009): syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000140)="ba070c1c70f36d0eda54d4c0f88093c1a50d80c139c47959c37052d3850564ac800dedfe7b695aead8e64c58491bbd1ef21de0fd31d6649e467567dd314ba5b889bf2ddf2f1ed919", 0x0, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x4, @sdr={0x56555959, 0x3}}) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000040)={0x7, [0x1, 0x1, 0x1, 0x5628, 0x1, 0x100000000, 0x81]}) socket(0x9, 0xa, 0x400) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.307483234s ago: executing program 0 (id=1011): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.667494214s ago: executing program 4 (id=1013): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002480), 0x20000, 0x0) readv(r0, &(0x7f0000002940)=[{0x0}], 0x1) 2.584678853s ago: executing program 3 (id=1014): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000300)={0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0x80}, @code={0x1, 0x58, {"440f8971000000c4e1385753bdc4c14f10e7b9800000c00f3235000800000f30c4411f2ae2430f019a8700000066ba610066edf34f0f2c03c483bd49b23e7b00006c450f013449"}}], 0x88}) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000010c0)={[0x60000000003, 0x1000000000, 0x2, 0x10, 0x2000001, 0x0, 0x2004cb, 0xa000000000000000, 0xfffe, 0xfffffffffffffff7, 0x4, 0xffffffffffffffff, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc], 0x1, 0x202}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000000c0)={0xbc, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.524414341s ago: executing program 3 (id=1015): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701ddffff"], 0x2c}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x4e2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000400)={0x2, 0x0, [{0x80000007, 0x800, 0x0, 0x9, 0x4, 0x401, 0x2}, {0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x6, 0x0, [{0xb, 0x6, 0x9, 0x861, 0x9, 0x1, 0x5}, {0x80000008, 0x81, 0x0, 0x4, 0x9, 0x1, 0x9}, {0x80000008, 0x3, 0x0, 0x81, 0xd5, 0x4, 0x4}, {0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}, {0x40000000, 0xd, 0x6, 0x3, 0x2, 0x3}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.511547097s ago: executing program 4 (id=1016): openat$ppp(0xffffffffffffff9c, 0x0, 0xc0200, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x850}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x0, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x0, 0x700}, @generic={0x0, 0x8, "d58838000391"}]}}}}}}, 0x4e) 2.200138713s ago: executing program 2 (id=1017): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x4000000) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffa, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x2, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0xb, 0x10000, 0x8, 0x91, 0x6, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x80002, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x8, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x5, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x7, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.062650205s ago: executing program 4 (id=1018): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x24, {{0x2, 0x4e23, @multicast2}}}, 0x88) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000280)={0xfffffef8, 0x8, 0xfffffffd, 0x4, 0x88, "57855a2a054e26cba795bf3a588d3f00", 0xb0, 0x4}) read(r2, &(0x7f0000000100)=""/133, 0x85) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8, 0x9, 0xcee, 0x8a7, 0xb, "c16cd2d6d39a5e2f"}) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c82010000c000100050108"], 0x15) 1.924509213s ago: executing program 0 (id=1019): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22826, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x0) 1.836518393s ago: executing program 0 (id=1020): syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000140)="ba070c1c70f36d0eda54d4c0f88093c1a50d80c139c47959c37052d3850564ac800dedfe7b695aead8e64c58491bbd1ef21de0fd31d6649e467567dd314ba5b889bf2ddf2f1ed919", 0x0, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x4, @sdr={0x56555959, 0x3}}) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000040)={0x7, [0x1, 0x1, 0x1, 0x5628, 0x1, 0x100000000, 0x81]}) socket(0x9, 0xa, 0x400) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.671873346s ago: executing program 0 (id=1021): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x1000009}, 0x8) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB='@\x00'/11], 0x0, 0x0, 0x0, 0x0, 0x0}) 1.411936107s ago: executing program 3 (id=1022): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000cc0), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="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", 0x174}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c3", 0x8c}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40885) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.296408843s ago: executing program 3 (id=1023): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000300)={0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0x80}, @code={0x1, 0x58, {"440f8971000000c4e1385753bdc4c14f10e7b9800000c00f3235000800000f30c4411f2ae2430f019a8700000066ba610066edf34f0f2c03c483bd49b23e7b00006c450f013449"}}], 0x88}) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000010c0)={[0x60000000003, 0x1000000000, 0x2, 0x10, 0x2000001, 0x0, 0x2004cb, 0xa000000000000000, 0xfffe, 0xfffffffffffffff7, 0x4, 0xffffffffffffffff, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc], 0x1, 0x202}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000000c0)={0xbc, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.276447066s ago: executing program 3 (id=1024): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002480), 0x20000, 0x0) readv(r0, &(0x7f0000002940)=[{0x0}], 0x1) 1.116884459s ago: executing program 4 (id=1025): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x2, 0x0, [{0xb, 0x6, 0x9, 0x861, 0x9, 0x1, 0x5}, {0xa, 0x9, 0x2, 0x56, 0x9, 0x0, 0xed2}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='clear_refs\x00') writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) 1.064908878s ago: executing program 3 (id=1026): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xf, 0x40, 0x3c, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x8}}}}}]}}, &(0x7f0000000d00)={0x0, 0x0, 0x15, &(0x7f0000000440)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x9, 0xf0f, 0x5, [0xff3f30]}]}}) sendmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004840) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000140)=ANY=[]) 1.034190344s ago: executing program 2 (id=1027): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 595.215209ms ago: executing program 4 (id=1028): openat$ppp(0xffffffffffffff9c, 0x0, 0xc0200, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x850}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x0, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x0, 0x700}, @generic={0x0, 0x8, "d58838000391"}]}}}}}}, 0x4e) 0s ago: executing program 4 (id=1029): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept$alg(r1, 0x0, 0x0) recvmsg(r2, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x1}, 0x40000102) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4001044}], 0x1, 0x24008844) sendmmsg$inet(r2, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="ec0767", 0x3}, {&(0x7f0000000400)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2bf920be733d5e21ac510b27975", 0x2e}], 0x2}}], 0x1, 0x8058) r3 = syz_open_dev$mouse(&(0x7f00000001c0), 0x7fffffffffffffff, 0x80) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000002c0)={0x52, 0x8, 0x5, {0x0, 0x1}, {0x0, 0x7}, @period={0x5b, 0x6fae, 0x3, 0x6, 0x2, {0x1, 0x6, 0x2, 0x400}, 0x7, &(0x7f0000000240)=[0x1, 0x1, 0x9, 0x5, 0xde, 0x6, 0x652]}}) ioctl$I2C_PEC(r1, 0x708, 0x9) getpid() ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000140)=[{0x67, 0x1, 0xe0, &(0x7f0000000040)="d924ae7d81fcd48f208cb2d76b47d5628bbf920258684fcc99d6a0759a6fafe4bc6187977e653978e557ea6a08a6dc32ea9f669b2066d22884c3683f58fd6c9342ddd9b9ee900865837887196bf85e6415808008c79d40edc340218e609152f6c161103dc7b00ae90c9dd8527494fdd2d1358fb72f06719abd34d8d646712f1f33310ef29cd67e3e8d1121e164291fe2f6be637595564cb1612fc0bce3b29317fd284f726cb3a0e6e03d1759799706452a345ef7bb975bcc8e131b4ac853c338605ca9d606746fcc471a16843d5749f4a34fef5cd696a2462e4401c31aff82cd"}], 0x1}) kernel console output (not intermixed with test programs): netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 144.672302][ T6268] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 144.673230][ T6268] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 144.716719][ T6268] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 144.722268][ T6268] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 144.831569][ T6268] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 144.842889][ T6268] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 144.885369][ T6268] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 145.046154][ T6313] netlink: 40 bytes leftover after parsing attributes in process `syz.2.122'. [ 145.130079][ T6268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.215112][ T6268] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.244406][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.244546][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.282780][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.283075][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.748225][ T5912] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 145.944296][ T5912] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 145.944330][ T5912] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.955247][ T5912] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 145.955320][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 145.955378][ T5912] usb 3-1: Product: syz [ 145.955410][ T5912] usb 3-1: Manufacturer: syz [ 145.955449][ T5912] usb 3-1: SerialNumber: syz [ 146.026017][ T5832] Bluetooth: hci4: command tx timeout [ 146.240376][ T6268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.244479][ T6323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.335937][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 146.498708][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 146.500748][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.500780][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 146.500828][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 146.500852][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.570477][ T10] usb 4-1: config 0 descriptor?? [ 146.871920][ T6268] veth0_vlan: entered promiscuous mode [ 146.893665][ T6268] veth1_vlan: entered promiscuous mode [ 146.996929][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 147.007915][ T10] sony 0003:054C:0268.0005: unknown main item tag 0x2 [ 147.008009][ T10] sony 0003:054C:0268.0005: unknown main item tag 0x0 [ 147.008077][ T10] sony 0003:054C:0268.0005: unknown main item tag 0x0 [ 147.008140][ T10] sony 0003:054C:0268.0005: unknown main item tag 0x0 [ 147.008208][ T10] sony 0003:054C:0268.0005: unknown main item tag 0x0 [ 147.008283][ T10] sony 0003:054C:0268.0005: unknown main item tag 0x0 [ 147.009562][ T10] sony 0003:054C:0268.0005: unknown main item tag 0x0 [ 147.009633][ T10] sony 0003:054C:0268.0005: unknown main item tag 0x0 [ 147.009708][ T10] sony 0003:054C:0268.0005: unknown main item tag 0x0 [ 147.009775][ T10] sony 0003:054C:0268.0005: unknown main item tag 0x0 [ 147.107491][ T6268] veth0_macvtap: entered promiscuous mode [ 147.127362][ T6268] veth1_macvtap: entered promiscuous mode [ 147.146083][ T9] usb 1-1: device descriptor read/64, error -71 [ 147.198911][ T6268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.235732][ T10] sony 0003:054C:0268.0005: hiddev0,hidraw0: USB HID vff.fc Device [HID 054c:0268] on usb-dummy_hcd.3-1/input0 [ 147.235763][ T10] sony 0003:054C:0268.0005: failed to claim input [ 147.278468][ T6268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.344366][ T3571] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.364243][ T3571] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.376451][ T3571] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.377056][ T3571] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.386581][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 147.457553][ T10] usb 4-1: USB disconnect, device number 17 [ 147.526694][ T9] usb 1-1: device descriptor read/64, error -71 [ 147.639026][ T9] usb usb1-port1: attempt power cycle [ 148.005684][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 148.037499][ T9] usb 1-1: device descriptor read/8, error -71 [ 148.105974][ T5832] Bluetooth: hci4: command tx timeout [ 148.154782][ T3571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.154802][ T3571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.286711][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 148.311268][ T9] usb 1-1: device descriptor read/8, error -71 [ 148.342807][ T3571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.342828][ T3571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.418565][ T9] usb usb1-port1: unable to enumerate USB device [ 148.561172][ T5894] usb 3-1: USB disconnect, device number 9 [ 148.776595][ T6347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.794221][ T6352] FAULT_INJECTION: forcing a failure. [ 148.794221][ T6352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.794262][ T6352] CPU: 1 UID: 0 PID: 6352 Comm: syz.4.111 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 148.794291][ T6352] Tainted: [L]=SOFTLOCKUP [ 148.794299][ T6352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 148.794312][ T6352] Call Trace: [ 148.794320][ T6352] [ 148.794328][ T6352] dump_stack_lvl+0xe8/0x150 [ 148.794357][ T6352] should_fail_ex+0x46b/0x600 [ 148.794394][ T6352] _copy_from_user+0x2d/0xb0 [ 148.794424][ T6352] autofs_dev_ioctl+0x172/0xad0 [ 148.794452][ T6352] ? __fget_files+0x2a/0x420 [ 148.794479][ T6352] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 148.794499][ T6352] ? __fget_files+0x2a/0x420 [ 148.794526][ T6352] ? __fget_files+0x2a/0x420 [ 148.794556][ T6352] ? bpf_lsm_file_ioctl+0x9/0x20 [ 148.794580][ T6352] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 148.794602][ T6352] __se_sys_ioctl+0xff/0x170 [ 148.794635][ T6352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.794659][ T6352] do_syscall_64+0x15f/0xf80 [ 148.794701][ T6352] ? trace_irq_disable+0x3b/0x140 [ 148.794726][ T6352] ? clear_bhb_loop+0x40/0x90 [ 148.794753][ T6352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.794775][ T6352] RIP: 0033:0x7fbccf92c819 [ 148.794795][ T6352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.794812][ T6352] RSP: 002b:00007fbccdb86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.794834][ T6352] RAX: ffffffffffffffda RBX: 00007fbccfba5fa0 RCX: 00007fbccf92c819 [ 148.794850][ T6352] RDX: 0000200000000280 RSI: 00000000c0189378 RDI: 0000000000000009 [ 148.794863][ T6352] RBP: 00007fbccdb86090 R08: 0000000000000000 R09: 0000000000000000 [ 148.794876][ T6352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.794888][ T6352] R13: 00007fbccfba6038 R14: 00007fbccfba5fa0 R15: 00007fff414a9e08 [ 148.794921][ T6352] [ 149.044362][ T6355] FAULT_INJECTION: forcing a failure. [ 149.044362][ T6355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.044401][ T6355] CPU: 1 UID: 0 PID: 6355 Comm: syz.2.131 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 149.044432][ T6355] Tainted: [L]=SOFTLOCKUP [ 149.044439][ T6355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 149.044452][ T6355] Call Trace: [ 149.044461][ T6355] [ 149.044470][ T6355] dump_stack_lvl+0xe8/0x150 [ 149.044499][ T6355] should_fail_ex+0x46b/0x600 [ 149.044531][ T6355] _copy_from_user+0x2d/0xb0 [ 149.044569][ T6355] sock_do_ioctl+0x195/0x320 [ 149.044605][ T6355] ? __pfx_sock_do_ioctl+0x10/0x10 [ 149.044654][ T6355] sock_ioctl+0x5c9/0x7f0 [ 149.044695][ T6355] ? __pfx_sock_ioctl+0x10/0x10 [ 149.044725][ T6355] ? __fget_files+0x2a/0x420 [ 149.044750][ T6355] ? __fget_files+0x3a6/0x420 [ 149.044776][ T6355] ? __fget_files+0x2a/0x420 [ 149.044805][ T6355] ? bpf_lsm_file_ioctl+0x9/0x20 [ 149.044830][ T6355] ? __pfx_sock_ioctl+0x10/0x10 [ 149.044860][ T6355] __se_sys_ioctl+0xff/0x170 [ 149.044905][ T6355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.044929][ T6355] do_syscall_64+0x15f/0xf80 [ 149.044960][ T6355] ? trace_irq_disable+0x3b/0x140 [ 149.044984][ T6355] ? clear_bhb_loop+0x40/0x90 [ 149.045011][ T6355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.045033][ T6355] RIP: 0033:0x7f48040bc819 [ 149.045052][ T6355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.045070][ T6355] RSP: 002b:00007f4802316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.045092][ T6355] RAX: ffffffffffffffda RBX: 00007f4804335fa0 RCX: 00007f48040bc819 [ 149.045107][ T6355] RDX: 00002000000000c0 RSI: 0000000000008924 RDI: 0000000000000005 [ 149.045120][ T6355] RBP: 00007f4802316090 R08: 0000000000000000 R09: 0000000000000000 [ 149.045133][ T6355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.045145][ T6355] R13: 00007f4804336038 R14: 00007f4804335fa0 R15: 00007ffe98fbfb48 [ 149.045177][ T6355] [ 149.814115][ T6357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.827813][ T6357] FAULT_INJECTION: forcing a failure. [ 149.827813][ T6357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.827849][ T6357] CPU: 1 UID: 0 PID: 6357 Comm: syz.2.132 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 149.827880][ T6357] Tainted: [L]=SOFTLOCKUP [ 149.827887][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 149.827900][ T6357] Call Trace: [ 149.827908][ T6357] [ 149.827917][ T6357] dump_stack_lvl+0xe8/0x150 [ 149.827947][ T6357] should_fail_ex+0x46b/0x600 [ 149.827978][ T6357] _copy_from_user+0x2d/0xb0 [ 149.828010][ T6357] iommufd_fops_ioctl+0x461/0x5d0 [ 149.828046][ T6357] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 149.828081][ T6357] ? __fget_files+0x2a/0x420 [ 149.828113][ T6357] ? __fget_files+0x2a/0x420 [ 149.828142][ T6357] ? bpf_lsm_file_ioctl+0x9/0x20 [ 149.828167][ T6357] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 149.828197][ T6357] __se_sys_ioctl+0xff/0x170 [ 149.828228][ T6357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.828252][ T6357] do_syscall_64+0x15f/0xf80 [ 149.828285][ T6357] ? trace_irq_disable+0x3b/0x140 [ 149.828311][ T6357] ? clear_bhb_loop+0x40/0x90 [ 149.828338][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.828361][ T6357] RIP: 0033:0x7f48040bc819 [ 149.828382][ T6357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.828399][ T6357] RSP: 002b:00007f4802316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.828422][ T6357] RAX: ffffffffffffffda RBX: 00007f4804335fa0 RCX: 00007f48040bc819 [ 149.828438][ T6357] RDX: 00002000000007c0 RSI: 0000000000003b85 RDI: 0000000000000003 [ 149.828452][ T6357] RBP: 00007f4802316090 R08: 0000000000000000 R09: 0000000000000000 [ 149.828465][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.828478][ T6357] R13: 00007f4804336038 R14: 00007f4804335fa0 R15: 00007ffe98fbfb48 [ 149.828511][ T6357] [ 150.185635][ T5832] Bluetooth: hci4: command tx timeout [ 150.405842][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 150.573518][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 150.573551][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.604328][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 150.604359][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 150.604381][ T9] usb 1-1: Product: syz [ 150.604396][ T9] usb 1-1: Manufacturer: syz [ 150.604411][ T9] usb 1-1: SerialNumber: syz [ 151.238246][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 151.397766][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 151.408794][ T9] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 151.408822][ T9] usb 5-1: config 0 has no interface number 0 [ 151.408863][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 151.408886][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 151.408908][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 151.408931][ T9] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 151.408987][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 151.409010][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.519933][ T9] usb 5-1: config 0 descriptor?? [ 151.705333][ T9] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 151.833439][ T9] usb 5-1: USB disconnect, device number 2 [ 151.833510][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 151.864586][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 152.105238][ T6402] sctp: [Deprecated]: syz.2.147 (pid 6402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.105238][ T6402] Use struct sctp_sack_info instead [ 152.365621][ T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 152.497964][ T9] usb 3-1: device descriptor read/64, error -71 [ 152.764467][ T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 152.905648][ T9] usb 3-1: device descriptor read/64, error -71 [ 153.020596][ T9] usb usb3-port1: attempt power cycle [ 153.168532][ T5895] usb 1-1: USB disconnect, device number 16 [ 153.355904][ T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 153.376577][ T9] usb 3-1: device descriptor read/8, error -71 [ 153.545717][ T5895] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 153.635671][ T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 153.657749][ T9] usb 3-1: device descriptor read/8, error -71 [ 153.703953][ T5895] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 153.703982][ T5895] usb 1-1: config 0 has no interface number 0 [ 153.724981][ T5895] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x3A, changing to 0xA [ 153.725013][ T5895] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 10 [ 153.752133][ T5895] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 153.752161][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 153.752180][ T5895] usb 1-1: Product: syz [ 153.752189][ T5895] usb 1-1: SerialNumber: syz [ 153.773118][ T9] usb usb3-port1: unable to enumerate USB device [ 153.792661][ T5895] usb 1-1: config 0 descriptor?? [ 153.807195][ T5895] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 154.000041][ T10] usb 1-1: USB disconnect, device number 17 [ 154.702189][ T6412] FAULT_INJECTION: forcing a failure. [ 154.702189][ T6412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.702218][ T6412] CPU: 1 UID: 0 PID: 6412 Comm: syz.0.150 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 154.702239][ T6412] Tainted: [L]=SOFTLOCKUP [ 154.702244][ T6412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 154.702254][ T6412] Call Trace: [ 154.702259][ T6412] [ 154.702266][ T6412] dump_stack_lvl+0xe8/0x150 [ 154.702287][ T6412] should_fail_ex+0x46b/0x600 [ 154.702310][ T6412] _copy_from_user+0x2d/0xb0 [ 154.702332][ T6412] io_submit_one+0xd3/0x14c0 [ 154.702359][ T6412] ? irqentry_exit+0x218/0x730 [ 154.702383][ T6412] ? lockdep_hardirqs_on+0x7a/0x110 [ 154.702406][ T6412] ? irqentry_exit+0x218/0x730 [ 154.702433][ T6412] ? __pfx_io_submit_one+0x10/0x10 [ 154.702458][ T6412] ? __might_fault+0xaf/0x130 [ 154.702487][ T6412] ? __might_fault+0xaf/0x130 [ 154.702511][ T6412] __se_sys_io_submit+0x195/0x340 [ 154.702535][ T6412] ? __pfx___se_sys_io_submit+0x10/0x10 [ 154.702563][ T6412] ? ksys_write+0x248/0x270 [ 154.702595][ T6412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.702612][ T6412] do_syscall_64+0x15f/0xf80 [ 154.702636][ T6412] ? trace_irq_disable+0x3b/0x140 [ 154.702653][ T6412] ? clear_bhb_loop+0x40/0x90 [ 154.702672][ T6412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.702687][ T6412] RIP: 0033:0x7fba2b1ec819 [ 154.702701][ T6412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.702714][ T6412] RSP: 002b:00007fba29425028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 154.702730][ T6412] RAX: ffffffffffffffda RBX: 00007fba2b466090 RCX: 00007fba2b1ec819 [ 154.702741][ T6412] RDX: 0000200000000780 RSI: 0000000000000001 RDI: 00007fba293fc000 [ 154.702751][ T6412] RBP: 00007fba29425090 R08: 0000000000000000 R09: 0000000000000000 [ 154.702760][ T6412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.702769][ T6412] R13: 00007fba2b466128 R14: 00007fba2b466090 R15: 00007fff81a21298 [ 154.702792][ T6412] [ 155.278366][ T6422] FAULT_INJECTION: forcing a failure. [ 155.278366][ T6422] name failslab, interval 1, probability 0, space 0, times 0 [ 155.278402][ T6422] CPU: 0 UID: 0 PID: 6422 Comm: syz.2.154 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 155.278429][ T6422] Tainted: [L]=SOFTLOCKUP [ 155.278436][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 155.278448][ T6422] Call Trace: [ 155.278455][ T6422] [ 155.278463][ T6422] dump_stack_lvl+0xe8/0x150 [ 155.278515][ T6422] should_fail_ex+0x46b/0x600 [ 155.278548][ T6422] should_failslab+0xa8/0x100 [ 155.278581][ T6422] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 155.278612][ T6422] ? __d_alloc+0x37/0x6f0 [ 155.278644][ T6422] __d_alloc+0x37/0x6f0 [ 155.278677][ T6422] d_alloc_parallel+0xe6/0x1610 [ 155.278711][ T6422] ? do_raw_spin_lock+0x12b/0x2f0 [ 155.278743][ T6422] ? __lock_acquire+0x6b5/0x2cf0 [ 155.278774][ T6422] ? __pfx_d_alloc_parallel+0x10/0x10 [ 155.278816][ T6422] ? __rt_spin_lock_init+0x3e/0x50 [ 155.278839][ T6422] ? __init_waitqueue_head+0xae/0x160 [ 155.278870][ T6422] __lookup_slow+0x152/0x440 [ 155.278900][ T6422] ? __pfx___lookup_slow+0x10/0x10 [ 155.278940][ T6422] ? down_read+0x156/0x200 [ 155.278962][ T6422] ? __pfx_down_read+0x10/0x10 [ 155.278985][ T6422] ? lookup_fast+0x1a3/0x5b0 [ 155.279016][ T6422] lookup_slow+0x53/0x70 [ 155.279043][ T6422] path_lookupat+0x3f5/0x8c0 [ 155.279082][ T6422] filename_lookup+0x256/0x5d0 [ 155.279113][ T6422] ? __pfx_filename_lookup+0x10/0x10 [ 155.279163][ T6422] ? strncpy_from_user+0x150/0x2b0 [ 155.279191][ T6422] ? do_getname+0x151/0x250 [ 155.279216][ T6422] __se_sys_chdir+0xa8/0x2a0 [ 155.279248][ T6422] ? __pfx___se_sys_chdir+0x10/0x10 [ 155.279291][ T6422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.279314][ T6422] do_syscall_64+0x15f/0xf80 [ 155.279350][ T6422] ? clear_bhb_loop+0x40/0x90 [ 155.279377][ T6422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.279399][ T6422] RIP: 0033:0x7f48040bc819 [ 155.279418][ T6422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.279441][ T6422] RSP: 002b:00007f4802316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 155.279457][ T6422] RAX: ffffffffffffffda RBX: 00007f4804335fa0 RCX: 00007f48040bc819 [ 155.279468][ T6422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 155.279477][ T6422] RBP: 00007f4802316090 R08: 0000000000000000 R09: 0000000000000000 [ 155.279486][ T6422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.279499][ T6422] R13: 00007f4804336038 R14: 00007f4804335fa0 R15: 00007ffe98fbfb48 [ 155.279523][ T6422] [ 155.336397][ T9] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 155.479468][ T9] usb 4-1: device descriptor read/64, error -71 [ 155.551234][ T32] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 155.735653][ T32] usb 5-1: Using ep0 maxpacket: 8 [ 155.737927][ T32] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 155.754141][ T32] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 155.754168][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.754188][ T32] usb 5-1: Product: syz [ 155.754208][ T32] usb 5-1: Manufacturer: syz [ 155.754222][ T32] usb 5-1: SerialNumber: syz [ 155.775610][ T9] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 155.829045][ T32] usb 5-1: config 0 descriptor?? [ 155.854634][ T32] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 155.854669][ T32] usb 5-1: setting power ON [ 155.854682][ T32] dvb-usb: bulk message failed: -22 (2/0) [ 155.892831][ T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.893423][ T32] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 155.893460][ T32] usb 5-1: media controller created [ 155.915610][ T9] usb 4-1: device descriptor read/64, error -71 [ 155.958438][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.016330][ T9] usb usb4-port1: attempt power cycle [ 156.033230][ T6420] dvb-usb: bulk message failed: -22 (3/0) [ 156.033254][ T6420] dvb-usb: bulk message failed: -22 (3/0) [ 156.162783][ T6432] dvb-usb: bulk message failed: -22 (4/0) [ 156.162805][ T6432] cxusb: i2c read failed [ 156.198357][ T32] usb 5-1: selecting invalid altsetting 6 [ 156.198379][ T32] usb 5-1: digital interface selection failed (-22) [ 156.198392][ T32] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 156.206717][ T32] usb 5-1: setting power OFF [ 156.206741][ T32] dvb-usb: bulk message failed: -22 (2/0) [ 156.206758][ T32] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 156.206771][ T32] (NULL device *): no alternate interface [ 156.355790][ T32] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 156.371488][ T32] usb 5-1: USB disconnect, device number 3 [ 156.388453][ T9] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 156.404057][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 156.422409][ T9] usb 4-1: device descriptor read/8, error -71 [ 156.558065][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 156.558113][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.560841][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 156.560875][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 156.560890][ T10] usb 3-1: Product: syz [ 156.560901][ T10] usb 3-1: Manufacturer: syz [ 156.560911][ T10] usb 3-1: SerialNumber: syz [ 156.685698][ T9] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 156.706333][ T9] usb 4-1: device descriptor read/8, error -71 [ 156.726391][ T6437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.727002][ T6437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.816462][ T9] usb usb4-port1: unable to enumerate USB device [ 156.894867][ T6440] FAULT_INJECTION: forcing a failure. [ 156.894867][ T6440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.894922][ T6440] CPU: 0 UID: 0 PID: 6440 Comm: syz.0.159 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 156.894952][ T6440] Tainted: [L]=SOFTLOCKUP [ 156.894960][ T6440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 156.894973][ T6440] Call Trace: [ 156.894981][ T6440] [ 156.894990][ T6440] dump_stack_lvl+0xe8/0x150 [ 156.895019][ T6440] should_fail_ex+0x46b/0x600 [ 156.895060][ T6440] _copy_from_user+0x2d/0xb0 [ 156.895092][ T6440] kvm_arch_vm_ioctl+0x7b5/0x1a20 [ 156.895123][ T6440] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 156.895149][ T6440] ? __lock_acquire+0x6b5/0x2cf0 [ 156.895182][ T6440] ? __lock_acquire+0x6b5/0x2cf0 [ 156.895233][ T6440] ? unwind_next_frame+0xa6/0x2550 [ 156.895270][ T6440] ? unwind_next_frame+0xa6/0x2550 [ 156.895300][ T6440] ? is_bpf_text_address+0x26/0x2b0 [ 156.895361][ T6440] ? is_bpf_text_address+0x26/0x2b0 [ 156.895391][ T6440] ? is_bpf_text_address+0x292/0x2b0 [ 156.895416][ T6440] ? is_bpf_text_address+0x26/0x2b0 [ 156.895447][ T6440] ? kernel_text_address+0xa5/0xe0 [ 156.895476][ T6440] ? __kernel_text_address+0xd/0x30 [ 156.895528][ T6440] ? unwind_get_return_address+0x4d/0x90 [ 156.895554][ T6440] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 156.895578][ T6440] ? arch_stack_walk+0xfb/0x150 [ 156.895625][ T6440] ? stack_trace_save+0xa9/0x100 [ 156.895646][ T6440] ? __pfx_stack_trace_save+0x10/0x10 [ 156.895666][ T6440] ? kasan_save_free_info+0x46/0x50 [ 156.895691][ T6440] ? stack_depot_save_flags+0x33/0x810 [ 156.895720][ T6440] ? kasan_save_track+0x4f/0x80 [ 156.895745][ T6440] ? kasan_save_track+0x3e/0x80 [ 156.895767][ T6440] ? kasan_save_free_info+0x46/0x50 [ 156.895786][ T6440] ? __kasan_slab_free+0x5c/0x80 [ 156.895811][ T6440] ? kfree+0x1c5/0x6c0 [ 156.895834][ T6440] ? tomoyo_path_number_perm+0x501/0x630 [ 156.895853][ T6440] ? security_file_ioctl+0xc3/0x2a0 [ 156.895882][ T6440] ? __se_sys_ioctl+0x47/0x170 [ 156.895908][ T6440] ? do_syscall_64+0x15f/0xf80 [ 156.895938][ T6440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.895971][ T6440] kvm_vm_ioctl+0x908/0xd50 [ 156.895997][ T6440] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 156.896038][ T6440] ? kasan_quarantine_put+0xbb/0x1f0 [ 156.896078][ T6440] ? tomoyo_path_number_perm+0x219/0x630 [ 156.896100][ T6440] ? tomoyo_path_number_perm+0x219/0x630 [ 156.896125][ T6440] ? do_vfs_ioctl+0x117b/0x1540 [ 156.896156][ T6440] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 156.896218][ T6440] ? __fget_files+0x2a/0x420 [ 156.896244][ T6440] ? __fget_files+0x2a/0x420 [ 156.896267][ T6440] ? __fget_files+0x3a6/0x420 [ 156.896290][ T6440] ? __fget_files+0x2a/0x420 [ 156.896315][ T6440] ? bpf_lsm_file_ioctl+0x9/0x20 [ 156.896337][ T6440] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 156.896360][ T6440] __se_sys_ioctl+0xff/0x170 [ 156.896388][ T6440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.896410][ T6440] do_syscall_64+0x15f/0xf80 [ 156.896438][ T6440] ? trace_irq_disable+0x3b/0x140 [ 156.896460][ T6440] ? clear_bhb_loop+0x40/0x90 [ 156.896485][ T6440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.896505][ T6440] RIP: 0033:0x7fba2b1ec819 [ 156.896524][ T6440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.896540][ T6440] RSP: 002b:00007fba29446028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.896560][ T6440] RAX: ffffffffffffffda RBX: 00007fba2b465fa0 RCX: 00007fba2b1ec819 [ 156.896574][ T6440] RDX: 00002000000002c0 RSI: 000000008048ae66 RDI: 0000000000000004 [ 156.896587][ T6440] RBP: 00007fba29446090 R08: 0000000000000000 R09: 0000000000000000 [ 156.896599][ T6440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.896610][ T6440] R13: 00007fba2b466038 R14: 00007fba2b465fa0 R15: 00007fff81a21298 [ 156.896640][ T6440] [ 157.593910][ T6450] FAULT_INJECTION: forcing a failure. [ 157.593910][ T6450] name failslab, interval 1, probability 0, space 0, times 0 [ 157.593944][ T6450] CPU: 0 UID: 0 PID: 6450 Comm: syz.0.163 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 157.593969][ T6450] Tainted: [L]=SOFTLOCKUP [ 157.593975][ T6450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 157.593987][ T6450] Call Trace: [ 157.593994][ T6450] [ 157.594001][ T6450] dump_stack_lvl+0xe8/0x150 [ 157.594027][ T6450] should_fail_ex+0x46b/0x600 [ 157.594053][ T6450] should_failslab+0xa8/0x100 [ 157.594083][ T6450] kmem_cache_alloc_noprof+0x87/0x680 [ 157.594105][ T6450] ? alloc_empty_file+0x5b/0x1d0 [ 157.594127][ T6450] alloc_empty_file+0x5b/0x1d0 [ 157.594146][ T6450] path_openat+0x11b/0x38a0 [ 157.594178][ T6450] ? try_to_take_rt_mutex+0x840/0xb00 [ 157.594202][ T6450] ? arch_stack_walk+0xfb/0x150 [ 157.594248][ T6450] ? __lock_acquire+0x6b5/0x2cf0 [ 157.594277][ T6450] ? __pfx_path_openat+0x10/0x10 [ 157.594307][ T6450] ? kasan_save_track+0x4f/0x80 [ 157.594331][ T6450] ? kasan_save_track+0x3e/0x80 [ 157.594356][ T6450] ? __kasan_slab_alloc+0x6c/0x80 [ 157.594386][ T6450] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 157.594421][ T6450] ? do_raw_spin_lock+0x12b/0x2f0 [ 157.594463][ T6450] do_file_open+0x23e/0x4a0 [ 157.594491][ T6450] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 157.594525][ T6450] ? __pfx_do_file_open+0x10/0x10 [ 157.594551][ T6450] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 157.594595][ T6450] ? alloc_fd+0x64e/0x6c0 [ 157.594628][ T6450] do_sys_openat2+0x113/0x200 [ 157.594654][ T6450] ? __pfx_do_sys_openat2+0x10/0x10 [ 157.594678][ T6450] ? ksys_write+0x248/0x270 [ 157.594727][ T6450] ? __pfx_ksys_write+0x10/0x10 [ 157.594760][ T6450] __x64_sys_openat+0x138/0x170 [ 157.594788][ T6450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.594812][ T6450] do_syscall_64+0x15f/0xf80 [ 157.594845][ T6450] ? clear_bhb_loop+0x40/0x90 [ 157.594872][ T6450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.594893][ T6450] RIP: 0033:0x7fba2b1ec819 [ 157.594913][ T6450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.594931][ T6450] RSP: 002b:00007fba29425028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 157.594954][ T6450] RAX: ffffffffffffffda RBX: 00007fba2b466090 RCX: 00007fba2b1ec819 [ 157.594969][ T6450] RDX: 0000000000300080 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 157.594982][ T6450] RBP: 00007fba29425090 R08: 0000000000000000 R09: 0000000000000000 [ 157.594995][ T6450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.595007][ T6450] R13: 00007fba2b466128 R14: 00007fba2b466090 R15: 00007fff81a21298 [ 157.595039][ T6450] [ 158.039324][ T6456] program syz.0.164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.455734][ T32] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 158.605650][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 158.612769][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.612799][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.612836][ T32] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 158.612858][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.669303][ T32] usb 4-1: config 0 descriptor?? [ 158.904630][ T6460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.915970][ T6460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.113969][ T9] usb 3-1: USB disconnect, device number 14 [ 159.191559][ T32] hid_parser_main: 28 callbacks suppressed [ 159.191585][ T32] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 159.194912][ T32] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 159.363289][ T6476] FAULT_INJECTION: forcing a failure. [ 159.363289][ T6476] name failslab, interval 1, probability 0, space 0, times 0 [ 159.363325][ T6476] CPU: 0 UID: 0 PID: 6476 Comm: syz.4.172 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 159.363352][ T6476] Tainted: [L]=SOFTLOCKUP [ 159.363359][ T6476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 159.363370][ T6476] Call Trace: [ 159.363378][ T6476] [ 159.363386][ T6476] dump_stack_lvl+0xe8/0x150 [ 159.363413][ T6476] should_fail_ex+0x46b/0x600 [ 159.363443][ T6476] should_failslab+0xa8/0x100 [ 159.363473][ T6476] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 159.363501][ T6476] ? __alloc_skb+0x1d0/0x7d0 [ 159.363520][ T6476] ? lockdep_hardirqs_on+0x7a/0x110 [ 159.363555][ T6476] __alloc_skb+0x1d0/0x7d0 [ 159.363579][ T6476] create_monitor_ctrl_open+0x15c/0x8b0 [ 159.363620][ T6476] ? __pfx_create_monitor_ctrl_open+0x10/0x10 [ 159.363650][ T6476] ? bpf_lsm_capable+0x9/0x20 [ 159.363684][ T6476] hci_sock_ioctl+0x2f2/0x940 [ 159.363716][ T6476] sock_do_ioctl+0x101/0x320 [ 159.363748][ T6476] ? __pfx_sock_do_ioctl+0x10/0x10 [ 159.363789][ T6476] sock_ioctl+0x5c9/0x7f0 [ 159.363819][ T6476] ? __pfx_sock_ioctl+0x10/0x10 [ 159.363846][ T6476] ? __fget_files+0x2a/0x420 [ 159.363870][ T6476] ? __fget_files+0x3a6/0x420 [ 159.363892][ T6476] ? __fget_files+0x2a/0x420 [ 159.363918][ T6476] ? bpf_lsm_file_ioctl+0x9/0x20 [ 159.363941][ T6476] ? __pfx_sock_ioctl+0x10/0x10 [ 159.363967][ T6476] __se_sys_ioctl+0xff/0x170 [ 159.363997][ T6476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.364020][ T6476] do_syscall_64+0x15f/0xf80 [ 159.364049][ T6476] ? trace_irq_disable+0x3b/0x140 [ 159.364072][ T6476] ? clear_bhb_loop+0x40/0x90 [ 159.364105][ T6476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.364127][ T6476] RIP: 0033:0x7fbccf92c819 [ 159.364145][ T6476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.364163][ T6476] RSP: 002b:00007fbccdb86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.364184][ T6476] RAX: ffffffffffffffda RBX: 00007fbccfba5fa0 RCX: 00007fbccf92c819 [ 159.364199][ T6476] RDX: 0000200000000080 RSI: 00000000800448d4 RDI: 0000000000000004 [ 159.364212][ T6476] RBP: 00007fbccdb86090 R08: 0000000000000000 R09: 0000000000000000 [ 159.364224][ T6476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.364236][ T6476] R13: 00007fbccfba6038 R14: 00007fbccfba5fa0 R15: 00007fff414a9e08 [ 159.364267][ T6476] [ 159.390427][ T32] ft260 0003:0403:6030.0006: chip code: 0000 0000 [ 159.807421][ T32] ft260 0003:0403:6030.0006: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 160.009494][ T32] ft260 0003:0403:6030.0006: failed to retrieve status: -32, no wakeup [ 160.010381][ T32] ft260 0003:0403:6030.0006: failed to retrieve status: -32 [ 160.176080][ T5894] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 160.226755][ T32] usb 4-1: USB disconnect, device number 22 [ 160.260538][ T6481] binder: 6479:6481 ioctl c0306201 200000000080 returned -14 [ 160.325954][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 160.339195][ T5894] usb 5-1: unable to get BOS descriptor or descriptor too short [ 160.348221][ T5894] usb 5-1: config 4 interface 0 has no altsetting 0 [ 160.364151][ T5894] usb 5-1: string descriptor 0 read error: -22 [ 160.364243][ T5894] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 160.364266][ T5894] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 160.449902][ T5894] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 160.543124][ T5894] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 160.543550][ T5894] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 160.543613][ T5894] usb 5-1: media controller created [ 160.647201][ T6489] netlink: 40 bytes leftover after parsing attributes in process `syz.2.176'. [ 160.648782][ T6478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.649351][ T6478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.716654][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.889884][ T5894] zl10353_read_register: readreg error (reg=127, ret==0) [ 160.972175][ T6491] netlink: 40 bytes leftover after parsing attributes in process `syz.3.177'. [ 161.264123][ T6500] FAULT_INJECTION: forcing a failure. [ 161.264123][ T6500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.264160][ T6500] CPU: 0 UID: 0 PID: 6500 Comm: syz.3.180 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 161.264188][ T6500] Tainted: [L]=SOFTLOCKUP [ 161.264195][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 161.264207][ T6500] Call Trace: [ 161.264215][ T6500] [ 161.264223][ T6500] dump_stack_lvl+0xe8/0x150 [ 161.264250][ T6500] should_fail_ex+0x46b/0x600 [ 161.264279][ T6500] _copy_to_user+0x31/0xb0 [ 161.264308][ T6500] simple_read_from_buffer+0xe1/0x170 [ 161.264337][ T6500] proc_fail_nth_read+0x1be/0x230 [ 161.264364][ T6500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.264391][ T6500] ? rw_verify_area+0x2ac/0x4e0 [ 161.264417][ T6500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.264443][ T6500] vfs_read+0x212/0xa80 [ 161.264479][ T6500] ? __pfx_vfs_read+0x10/0x10 [ 161.264508][ T6500] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 161.264540][ T6500] ? lockdep_hardirqs_on+0x7a/0x110 [ 161.264570][ T6500] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 161.264599][ T6500] ? mutex_lock_nested+0x152/0x1d0 [ 161.264623][ T6500] ? fdget_pos+0x252/0x320 [ 161.264660][ T6500] ksys_read+0x156/0x270 [ 161.264689][ T6500] ? __pfx_ksys_read+0x10/0x10 [ 161.264715][ T6500] ? __pfx_autofs_root_ioctl+0x10/0x10 [ 161.264750][ T6500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.264769][ T6500] do_syscall_64+0x15f/0xf80 [ 161.264792][ T6500] ? trace_irq_disable+0x3b/0x140 [ 161.264808][ T6500] ? clear_bhb_loop+0x40/0x90 [ 161.264827][ T6500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.264843][ T6500] RIP: 0033:0x7f363c29d04e [ 161.264857][ T6500] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 161.264871][ T6500] RSP: 002b:00007f363a514fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 161.264888][ T6500] RAX: ffffffffffffffda RBX: 00007f363a5156c0 RCX: 00007f363c29d04e [ 161.264899][ T6500] RDX: 000000000000000f RSI: 00007f363a5150a0 RDI: 0000000000000008 [ 161.264909][ T6500] RBP: 00007f363a515090 R08: 0000000000000000 R09: 0000000000000000 [ 161.264918][ T6500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.264927][ T6500] R13: 00007f363c556128 R14: 00007f363c556090 R15: 00007fff4fa8deb8 [ 161.264963][ T6500] [ 161.350854][ T5894] usb 5-1: USB disconnect, device number 4 [ 161.415643][ T32] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 161.626819][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 161.628658][ T32] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 161.628684][ T32] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 161.628707][ T32] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 161.628732][ T32] usb 3-1: config 1 has no interface number 0 [ 161.628764][ T32] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 161.628782][ T32] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 161.628811][ T32] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 161.628828][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.730693][ T6503] netlink: 20 bytes leftover after parsing attributes in process `syz.0.178'. [ 161.774988][ T32] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 161.976356][ T6495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.977125][ T6495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.089278][ T32] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 162.196034][ T5894] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 162.345691][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 162.348009][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.348039][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.348272][ T5894] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 162.348288][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.368711][ T5894] usb 5-1: config 0 descriptor?? [ 162.392453][ T5894] usbhid 5-1:0.0: can't add hid device: -22 [ 162.392772][ T5894] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 162.456474][ T5929] usb 3-1: USB disconnect, device number 15 [ 162.487964][ T5929] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 162.556354][ T5894] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 162.616475][ T5881] usb 5-1: USB disconnect, device number 5 [ 162.705859][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 162.710772][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.710807][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.710835][ T5894] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 162.710851][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.757023][ T5894] usb 4-1: config 0 descriptor?? [ 162.998094][ T6509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.998742][ T6509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.254568][ T5894] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 163.254605][ T5894] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 163.306742][ T6516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.426635][ T5894] ft260 0003:0403:6030.0007: chip code: 0000 0000 [ 163.643593][ T6509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.644163][ T6509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.656188][ T5894] ft260 0003:0403:6030.0007: failed to retrieve system status [ 163.657314][ T5894] ft260 0003:0403:6030.0007: probe with driver ft260 failed with error -5 [ 163.685401][ T6519] FAULT_INJECTION: forcing a failure. [ 163.685401][ T6519] name failslab, interval 1, probability 0, space 0, times 0 [ 163.685440][ T6519] CPU: 1 UID: 0 PID: 6519 Comm: syz.4.187 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 163.685471][ T6519] Tainted: [L]=SOFTLOCKUP [ 163.685479][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 163.685497][ T6519] Call Trace: [ 163.685505][ T6519] [ 163.685522][ T6519] dump_stack_lvl+0xe8/0x150 [ 163.685553][ T6519] should_fail_ex+0x46b/0x600 [ 163.685586][ T6519] should_failslab+0xa8/0x100 [ 163.685620][ T6519] kmem_cache_alloc_noprof+0x87/0x680 [ 163.685650][ T6519] ? fuse_get_req+0x6c3/0xac0 [ 163.685689][ T6519] fuse_get_req+0x6c3/0xac0 [ 163.685732][ T6519] ? __pfx_fuse_get_req+0x10/0x10 [ 163.685766][ T6519] ? __lock_acquire+0x6b5/0x2cf0 [ 163.685808][ T6519] fuse_chan_send+0x2d6/0x1aa0 [ 163.685847][ T6519] ? unwind_next_frame+0xa6/0x2550 [ 163.685879][ T6519] ? from_kgid+0x1ca/0x660 [ 163.685901][ T6519] ? __pfx_fuse_chan_send+0x10/0x10 [ 163.685935][ T6519] ? __pfx_from_kgid+0x10/0x10 [ 163.685961][ T6519] ? is_bpf_text_address+0x26/0x2b0 [ 163.685989][ T6519] ? pid_nr_ns+0xd4/0x150 [ 163.686019][ T6519] ? fuse_req_prep+0x5e0/0x8e0 [ 163.686050][ T6519] ? __fuse_simple_request+0x7a/0xb0 [ 163.686088][ T6519] fuse_setlk+0x320/0x400 [ 163.686116][ T6519] ? __pfx_fuse_setlk+0x10/0x10 [ 163.686181][ T6519] ? aa_file_perm+0x51a/0x15f0 [ 163.686212][ T6519] fuse_file_lock+0x398/0x820 [ 163.686236][ T6519] ? __pfx_fuse_file_lock+0x10/0x10 [ 163.686263][ T6519] ? __pfx_aa_file_perm+0x10/0x10 [ 163.686311][ T6519] ? apparmor_file_lock+0x252/0x360 [ 163.686350][ T6519] ? __pfx_fuse_file_lock+0x10/0x10 [ 163.686371][ T6519] fcntl_setlk+0x9ac/0x1090 [ 163.686418][ T6519] ? __pfx_fcntl_setlk+0x10/0x10 [ 163.686462][ T6519] do_fcntl+0x981/0x19e0 [ 163.686495][ T6519] ? __fget_files+0x2a/0x420 [ 163.686526][ T6519] ? __pfx_do_fcntl+0x10/0x10 [ 163.686562][ T6519] ? __fget_files+0x2a/0x420 [ 163.686590][ T6519] ? __fget_files+0x2a/0x420 [ 163.686621][ T6519] ? bpf_lsm_file_fcntl+0x9/0x20 [ 163.686649][ T6519] __se_sys_fcntl+0xcb/0x160 [ 163.686677][ T6519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.686700][ T6519] do_syscall_64+0x15f/0xf80 [ 163.686732][ T6519] ? trace_irq_disable+0x3b/0x140 [ 163.686756][ T6519] ? clear_bhb_loop+0x40/0x90 [ 163.686782][ T6519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.686804][ T6519] RIP: 0033:0x7fbccf92c819 [ 163.686823][ T6519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.686841][ T6519] RSP: 002b:00007fbccdb86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 163.686864][ T6519] RAX: ffffffffffffffda RBX: 00007fbccfba5fa0 RCX: 00007fbccf92c819 [ 163.686880][ T6519] RDX: 0000200000000200 RSI: 0000000000000006 RDI: 0000000000000005 [ 163.686894][ T6519] RBP: 00007fbccdb86090 R08: 0000000000000000 R09: 0000000000000000 [ 163.686907][ T6519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.686919][ T6519] R13: 00007fbccfba6038 R14: 00007fbccfba5fa0 R15: 00007fff414a9e08 [ 163.686951][ T6519] [ 164.234606][ T6523] FAULT_INJECTION: forcing a failure. [ 164.234606][ T6523] name failslab, interval 1, probability 0, space 0, times 0 [ 164.234647][ T6523] CPU: 1 UID: 0 PID: 6523 Comm: syz.2.188 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 164.234670][ T6523] Tainted: [L]=SOFTLOCKUP [ 164.234675][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 164.234685][ T6523] Call Trace: [ 164.234691][ T6523] [ 164.234698][ T6523] dump_stack_lvl+0xe8/0x150 [ 164.234719][ T6523] should_fail_ex+0x46b/0x600 [ 164.234742][ T6523] should_failslab+0xa8/0x100 [ 164.234767][ T6523] __kmalloc_cache_noprof+0x84/0x690 [ 164.234798][ T6523] ? psi_trigger_create+0x26b/0xb60 [ 164.234819][ T6523] psi_trigger_create+0x26b/0xb60 [ 164.234835][ T6523] ? css_put+0x57/0x290 [ 164.234853][ T6523] ? __pfx_psi_trigger_create+0x10/0x10 [ 164.234869][ T6523] ? css_put+0x57/0x290 [ 164.234886][ T6523] ? css_put+0x1cd/0x290 [ 164.234902][ T6523] pressure_write+0x1a7/0x210 [ 164.234923][ T6523] ? __pfx_cgroup_io_pressure_write+0x10/0x10 [ 164.234940][ T6523] cgroup_file_write+0x331/0x8f0 [ 164.234969][ T6523] ? __pfx_cgroup_file_write+0x10/0x10 [ 164.234993][ T6523] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 164.235017][ T6523] ? lockdep_hardirqs_on+0x7a/0x110 [ 164.235048][ T6523] ? __pfx_cgroup_file_write+0x10/0x10 [ 164.235070][ T6523] kernfs_fop_write_iter+0x3b0/0x540 [ 164.235099][ T6523] vfs_write+0x629/0xba0 [ 164.235127][ T6523] ? __pfx_vfs_write+0x10/0x10 [ 164.235150][ T6523] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 164.235174][ T6523] ? lockdep_hardirqs_on+0x7a/0x110 [ 164.235199][ T6523] ? mutex_lock_nested+0x152/0x1d0 [ 164.235217][ T6523] ? fdget_pos+0x252/0x320 [ 164.235242][ T6523] ksys_write+0x156/0x270 [ 164.235265][ T6523] ? __pfx_ksys_write+0x10/0x10 [ 164.235293][ T6523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.235309][ T6523] do_syscall_64+0x15f/0xf80 [ 164.235332][ T6523] ? trace_irq_disable+0x3b/0x140 [ 164.235349][ T6523] ? clear_bhb_loop+0x40/0x90 [ 164.235368][ T6523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.235384][ T6523] RIP: 0033:0x7f48040bc819 [ 164.235398][ T6523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.235411][ T6523] RSP: 002b:00007f4802316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.235427][ T6523] RAX: ffffffffffffffda RBX: 00007f4804335fa0 RCX: 00007f48040bc819 [ 164.235438][ T6523] RDX: 000000000000002f RSI: 0000200000000080 RDI: 0000000000000004 [ 164.235448][ T6523] RBP: 00007f4802316090 R08: 0000000000000000 R09: 0000000000000000 [ 164.235457][ T6523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.235466][ T6523] R13: 00007f4804336038 R14: 00007f4804335fa0 R15: 00007ffe98fbfb48 [ 164.235513][ T6523] [ 164.696271][ T6530] Invalid ELF header type: 2 != 1 [ 165.085655][ T5912] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 165.216799][ T6541] FAULT_INJECTION: forcing a failure. [ 165.216799][ T6541] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 165.216850][ T6541] CPU: 1 UID: 0 PID: 6541 Comm: syz.4.195 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 165.216876][ T6541] Tainted: [L]=SOFTLOCKUP [ 165.216884][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 165.216896][ T6541] Call Trace: [ 165.216904][ T6541] [ 165.216912][ T6541] dump_stack_lvl+0xe8/0x150 [ 165.216941][ T6541] should_fail_ex+0x46b/0x600 [ 165.216971][ T6541] prepare_alloc_pages+0x22a/0x6b0 [ 165.217010][ T6541] __alloc_frozen_pages_noprof+0x12f/0x380 [ 165.217052][ T6541] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 165.217090][ T6541] ? __pfx_policy_nodemask+0x10/0x10 [ 165.217120][ T6541] ? __lock_acquire+0x6b5/0x2cf0 [ 165.217154][ T6541] alloc_pages_mpol+0xd1/0x380 [ 165.217189][ T6541] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 165.217222][ T6541] vma_alloc_folio_noprof+0xe1/0x1e0 [ 165.217256][ T6541] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 165.217288][ T6541] ? __pte_offset_map+0x29/0x200 [ 165.217321][ T6541] do_pte_missing+0x822/0x2950 [ 165.217367][ T6541] handle_mm_fault+0xdb5/0x14c0 [ 165.217399][ T6541] ? handle_mm_fault+0xed/0x14c0 [ 165.217431][ T6541] ? __pfx_handle_mm_fault+0x10/0x10 [ 165.217472][ T6541] ? __lock_acquire+0x6b5/0x2cf0 [ 165.217502][ T6541] ? lock_mm_and_find_vma+0xa7/0x340 [ 165.217557][ T6541] do_user_addr_fault+0x75b/0x1340 [ 165.217598][ T6541] exc_page_fault+0x6a/0xc0 [ 165.217652][ T6541] asm_exc_page_fault+0x26/0x30 [ 165.217672][ T6541] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 165.217697][ T6541] Code: 27 05 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 165.217714][ T6541] RSP: 0018:ffffc900098a7878 EFLAGS: 00050206 [ 165.217733][ T6541] RAX: ffffffff84b1b001 RBX: ffff8880361e0000 RCX: 00000000000003c7 [ 165.217748][ T6541] RDX: 0000000000000000 RSI: ffff8880361e0000 RDI: 00002000000034c0 [ 165.217761][ T6541] RBP: ffffc900098a79f0 R08: ffff8880361e03c6 R09: 1ffff11006c3c078 [ 165.217776][ T6541] R10: dffffc0000000000 R11: ffffed1006c3c079 R12: dffffc0000000000 [ 165.217791][ T6541] R13: 0000000000000000 R14: 00007ffffffff000 R15: 00000000000003c7 [ 165.217812][ T6541] ? _copy_to_iter+0x371/0x17d0 [ 165.217844][ T6541] _copy_to_iter+0x493/0x17d0 [ 165.217867][ T6541] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 165.217912][ T6541] ? __pfx__copy_to_iter+0x10/0x10 [ 165.217942][ T6541] ? stats_show+0x6cd/0x6f0 [ 165.217978][ T6541] seq_read_iter+0xbf6/0xe20 [ 165.218029][ T6541] seq_read+0x36a/0x490 [ 165.218067][ T6541] ? __pfx_seq_read+0x10/0x10 [ 165.218098][ T6541] ? __debugfs_file_get+0x5d5/0x710 [ 165.218123][ T6541] ? __pfx___debugfs_file_get+0x10/0x10 [ 165.218148][ T6541] ? apparmor_file_permission+0x1f4/0x300 [ 165.218187][ T6541] full_proxy_read+0x127/0x1f0 [ 165.218211][ T6541] ? __pfx_full_proxy_read+0x10/0x10 [ 165.218235][ T6541] vfs_read+0x212/0xa80 [ 165.218271][ T6541] ? __pfx_vfs_read+0x10/0x10 [ 165.218302][ T6541] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 165.218333][ T6541] ? lockdep_hardirqs_on+0x7a/0x110 [ 165.218363][ T6541] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 165.218394][ T6541] ? mutex_lock_nested+0x152/0x1d0 [ 165.218419][ T6541] ? fdget_pos+0x252/0x320 [ 165.218451][ T6541] ksys_read+0x156/0x270 [ 165.218482][ T6541] ? __pfx_ksys_read+0x10/0x10 [ 165.218517][ T6541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.218540][ T6541] do_syscall_64+0x15f/0xf80 [ 165.218569][ T6541] ? trace_irq_disable+0x3b/0x140 [ 165.218591][ T6541] ? clear_bhb_loop+0x40/0x90 [ 165.218622][ T6541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.218643][ T6541] RIP: 0033:0x7fbccf92c819 [ 165.218660][ T6541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.218676][ T6541] RSP: 002b:00007fbccdb86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 165.218696][ T6541] RAX: ffffffffffffffda RBX: 00007fbccfba5fa0 RCX: 00007fbccf92c819 [ 165.218711][ T6541] RDX: 0000000000000cac RSI: 00002000000034c0 RDI: 0000000000000006 [ 165.218724][ T6541] RBP: 00007fbccdb86090 R08: 0000000000000000 R09: 0000000000000000 [ 165.218736][ T6541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.218748][ T6541] R13: 00007fbccfba6038 R14: 00007fbccfba5fa0 R15: 00007fff414a9e08 [ 165.218779][ T6541] [ 165.685630][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 165.687772][ T5912] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 165.687862][ T5912] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 165.687885][ T5912] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 165.687907][ T5912] usb 1-1: config 1 has no interface number 0 [ 165.687975][ T5912] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 165.688003][ T5912] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 165.688045][ T5912] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 165.688070][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.787338][ T5912] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 165.864057][ T820] usb 4-1: USB disconnect, device number 23 [ 165.988259][ T6547] netlink: 132 bytes leftover after parsing attributes in process `syz.3.198'. [ 166.021018][ T6538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.029946][ T6538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.053857][ T5912] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 166.520440][ T32] usb 1-1: USB disconnect, device number 18 [ 166.543777][ T32] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 166.620859][ T820] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 166.645831][ T5894] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 166.775683][ T820] usb 4-1: Using ep0 maxpacket: 16 [ 166.775859][ T5894] usb 3-1: device descriptor read/64, error -71 [ 166.779689][ T820] usb 4-1: unable to get BOS descriptor or descriptor too short [ 166.780981][ T820] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.781005][ T820] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.783579][ T820] usb 4-1: New USB device found, idVendor=0e41, idProduct=4242, bcdDevice= 0.40 [ 166.783604][ T820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.783625][ T820] usb 4-1: Product: syz [ 166.783639][ T820] usb 4-1: Manufacturer: syz [ 166.783653][ T820] usb 4-1: SerialNumber: syz [ 167.015867][ T5894] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 167.092701][ T6552] netlink: 'syz.3.200': attribute type 1 has an invalid length. [ 167.092724][ T6552] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.200'. [ 167.151187][ T5894] usb 3-1: device descriptor read/64, error -71 [ 167.222569][ T820] usb 4-1: 0:1 : does not exist [ 167.222587][ T820] usb 4-1: 0:2 : does not exist [ 167.260107][ T5894] usb usb3-port1: attempt power cycle [ 167.335948][ T820] usb 4-1: USB disconnect, device number 24 [ 167.615685][ T5894] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 167.636515][ T5894] usb 3-1: device descriptor read/8, error -71 [ 167.785846][ T5912] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 167.885681][ T5894] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 167.906273][ T5894] usb 3-1: device descriptor read/8, error -71 [ 167.936949][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 167.939153][ T5912] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 167.939179][ T5912] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 167.939204][ T5912] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 167.939225][ T5912] usb 5-1: config 1 has no interface number 0 [ 167.939258][ T5912] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.939277][ T5912] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 167.939307][ T5912] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 167.939324][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.017464][ T5894] usb usb3-port1: unable to enumerate USB device [ 168.055048][ T5912] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 168.250033][ T5912] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 168.660772][ T6565] capability: warning: `syz.4.205' uses deprecated v2 capabilities in a way that may be insecure [ 169.208606][ T6567] FAULT_INJECTION: forcing a failure. [ 169.208606][ T6567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.208640][ T6567] CPU: 1 UID: 0 PID: 6567 Comm: syz.3.207 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 169.208666][ T6567] Tainted: [L]=SOFTLOCKUP [ 169.208673][ T6567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 169.208684][ T6567] Call Trace: [ 169.208691][ T6567] [ 169.208699][ T6567] dump_stack_lvl+0xe8/0x150 [ 169.208725][ T6567] should_fail_ex+0x46b/0x600 [ 169.208751][ T6567] core_sys_select+0x8df/0xc30 [ 169.208786][ T6567] ? __pfx_core_sys_select+0x10/0x10 [ 169.208825][ T6567] ? __pfx_set_user_sigmask+0x10/0x10 [ 169.208843][ T6567] ? rt_mutex_slowunlock+0x1cb/0x300 [ 169.208864][ T6567] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 169.208890][ T6567] __se_sys_pselect6+0x267/0x320 [ 169.208912][ T6567] ? __pfx___se_sys_pselect6+0x10/0x10 [ 169.208930][ T6567] ? __pfx_ksys_write+0x10/0x10 [ 169.208959][ T6567] ? __x64_sys_pselect6+0x21/0xf0 [ 169.208979][ T6567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.209001][ T6567] do_syscall_64+0x15f/0xf80 [ 169.209029][ T6567] ? trace_irq_disable+0x3b/0x140 [ 169.209050][ T6567] ? clear_bhb_loop+0x40/0x90 [ 169.209086][ T6567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.209106][ T6567] RIP: 0033:0x7f363c2dc819 [ 169.209122][ T6567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.209136][ T6567] RSP: 002b:00007f363a536028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 169.209154][ T6567] RAX: ffffffffffffffda RBX: 00007f363c555fa0 RCX: 00007f363c2dc819 [ 169.209166][ T6567] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 169.209177][ T6567] RBP: 00007f363a536090 R08: 0000000000000000 R09: 0000000000000000 [ 169.209187][ T6567] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 169.209197][ T6567] R13: 00007f363c556038 R14: 00007f363c555fa0 R15: 00007fff4fa8deb8 [ 169.209222][ T6567] [ 169.448893][ T9] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 169.895886][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 170.085697][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 170.095172][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.095217][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.095698][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 170.095724][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.218254][ T9] usb 3-1: config 0 descriptor?? [ 170.528332][ T6569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.529049][ T6569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.660733][ T5895] usb 5-1: USB disconnect, device number 6 [ 170.667895][ T5895] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 170.755033][ T9] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 170.755069][ T9] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 170.941393][ T9] ft260 0003:0403:6030.0008: chip code: 0000 0000 [ 171.084906][ T6580] kvm: kvm [6576]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 171.112552][ T6580] kvm: kvm [6576]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x3 [ 171.114432][ T6580] kvm: kvm [6576]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 171.146518][ T6569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.147145][ T6569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.153120][ T9] ft260 0003:0403:6030.0008: failed to retrieve system status [ 171.153497][ T9] ft260 0003:0403:6030.0008: probe with driver ft260 failed with error -5 [ 171.184035][ T5895] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 171.345685][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 171.354701][ T5895] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 171.354727][ T5895] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 171.354746][ T5895] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 171.354766][ T5895] usb 1-1: config 1 has no interface number 0 [ 171.354803][ T5895] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.354827][ T5895] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 171.354864][ T5895] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 171.354887][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.479341][ T5895] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 171.667275][ T6578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.669535][ T6578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.698159][ T5895] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 172.122453][ T5912] usb 1-1: USB disconnect, device number 19 [ 172.160174][ T5912] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 172.629829][ T5895] usb 3-1: USB disconnect, device number 20 [ 172.875052][ T6596] kvm: kvm [6593]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 172.912754][ T6596] kvm: kvm [6593]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 173.019926][ T6596] kvm: kvm [6593]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x400003 [ 173.561995][ T6607] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 173.596856][ T6610] kvm: kvm [6609]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 173.685389][ T6614] netlink: 'syz.3.220': attribute type 10 has an invalid length. [ 173.752060][ T6618] netlink: 'syz.4.221': attribute type 4 has an invalid length. [ 173.818603][ T6614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.830826][ T6614] team0: Port device netdevsim0 added [ 173.951737][ T6617] netlink: 'syz.3.220': attribute type 10 has an invalid length. [ 174.970774][ T6645] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 175.120928][ T5894] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 175.140207][ T6656] FAULT_INJECTION: forcing a failure. [ 175.140207][ T6656] name failslab, interval 1, probability 0, space 0, times 0 [ 175.140236][ T6656] CPU: 0 UID: 0 PID: 6656 Comm: syz.0.234 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 175.140257][ T6656] Tainted: [L]=SOFTLOCKUP [ 175.140262][ T6656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 175.140272][ T6656] Call Trace: [ 175.140278][ T6656] [ 175.140283][ T6656] dump_stack_lvl+0xe8/0x150 [ 175.140305][ T6656] should_fail_ex+0x46b/0x600 [ 175.140328][ T6656] should_failslab+0xa8/0x100 [ 175.140352][ T6656] __kmalloc_noprof+0xdf/0x7b0 [ 175.140373][ T6656] ? copy_splice_read+0x16f/0xab0 [ 175.140396][ T6656] copy_splice_read+0x16f/0xab0 [ 175.140422][ T6656] ? __pfx_copy_splice_read+0x10/0x10 [ 175.140452][ T6656] ? rcu_is_watching+0x15/0xb0 [ 175.140495][ T6656] ? look_up_lock_class+0x57/0x110 [ 175.140522][ T6656] ? register_lock_class+0x31/0x2e0 [ 175.140544][ T6656] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 175.140571][ T6656] ? alloc_pipe_info+0x373/0x4d0 [ 175.140595][ T6656] ? __pfx_copy_splice_read+0x10/0x10 [ 175.140613][ T6656] splice_direct_to_actor+0x483/0xc80 [ 175.140640][ T6656] ? __pfx_direct_splice_actor+0x10/0x10 [ 175.140665][ T6656] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 175.140693][ T6656] do_splice_direct+0x19b/0x2a0 [ 175.140714][ T6656] ? __pfx_do_splice_direct+0x10/0x10 [ 175.140734][ T6656] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 175.140760][ T6656] ? rw_verify_area+0x25b/0x4e0 [ 175.140785][ T6656] do_sendfile+0x547/0x7e0 [ 175.140806][ T6656] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 175.140841][ T6656] ? __pfx_do_sendfile+0x10/0x10 [ 175.140867][ T6656] __se_sys_sendfile64+0x144/0x1a0 [ 175.140885][ T6656] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 175.140907][ T6656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.140924][ T6656] do_syscall_64+0x15f/0xf80 [ 175.140947][ T6656] ? trace_irq_disable+0x3b/0x140 [ 175.140965][ T6656] ? clear_bhb_loop+0x40/0x90 [ 175.140984][ T6656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.141000][ T6656] RIP: 0033:0x7fba2b1ec819 [ 175.141014][ T6656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.141028][ T6656] RSP: 002b:00007fba29446028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 175.141044][ T6656] RAX: ffffffffffffffda RBX: 00007fba2b465fa0 RCX: 00007fba2b1ec819 [ 175.141056][ T6656] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 175.141065][ T6656] RBP: 00007fba29446090 R08: 0000000000000000 R09: 0000000000000000 [ 175.141075][ T6656] R10: 0000000010000008 R11: 0000000000000246 R12: 0000000000000001 [ 175.141085][ T6656] R13: 00007fba2b466038 R14: 00007fba2b465fa0 R15: 00007fff81a21298 [ 175.141108][ T6656] [ 175.277680][ T5912] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 175.375647][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 175.456629][ T5894] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 175.456659][ T5894] usb 4-1: config 0 has no interface number 0 [ 175.456708][ T5894] usb 4-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 175.456737][ T5894] usb 4-1: config 0 interface 246 altsetting 255 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 175.456766][ T5894] usb 4-1: config 0 interface 246 has no altsetting 0 [ 175.459226][ T5894] usb 4-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 175.459254][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.459276][ T5894] usb 4-1: Product: syz [ 175.459291][ T5894] usb 4-1: Manufacturer: syz [ 175.459307][ T5894] usb 4-1: SerialNumber: syz [ 175.464804][ T5894] usb 4-1: config 0 descriptor?? [ 175.476969][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 175.482379][ T5912] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 175.492941][ T5912] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 175.492968][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.492985][ T5912] usb 3-1: Product: syz [ 175.492997][ T5912] usb 3-1: Manufacturer: syz [ 175.493010][ T5912] usb 3-1: SerialNumber: syz [ 175.539402][ T5912] usb 3-1: config 0 descriptor?? [ 175.582875][ T5912] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 175.582927][ T5912] usb 3-1: setting power ON [ 175.582944][ T5912] dvb-usb: bulk message failed: -22 (2/0) [ 175.611617][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 175.621388][ T5912] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 175.621478][ T5912] usb 3-1: media controller created [ 175.692497][ T6648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.693215][ T6648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.797836][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 175.832920][ T6654] dvb-usb: bulk message failed: -22 (3/0) [ 175.832941][ T6654] cxusb: i2c rd: len=224 is too big! [ 175.832941][ T6654] [ 175.863904][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.881738][ T5894] usb 4-1: USB disconnect, device number 25 [ 175.941101][ T6663] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 175.944442][ T5829] udevd[5829]: setting mode of /dev/bus/usb/004/025 to 020664 failed: No such file or directory [ 175.944592][ T5829] udevd[5829]: setting owner of /dev/bus/usb/004/025 to uid=0, gid=0 failed: No such file or directory [ 175.981277][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 175.981306][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 175.981398][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.007661][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 176.007750][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 176.007772][ T9] usb 1-1: Product: syz [ 176.007788][ T9] usb 1-1: Manufacturer: syz [ 176.007827][ T9] usb 1-1: SerialNumber: syz [ 176.169641][ T6663] kvm: pic: level sensitive irq not supported [ 176.170190][ T6663] kvm: pic: single mode not supported [ 176.170318][ T6663] kvm: pic: single mode not supported [ 176.170394][ T6663] kvm: pic: level sensitive irq not supported [ 176.170515][ T6663] kvm: pic: single mode not supported [ 176.336066][ T5912] usb 3-1: selecting invalid altsetting 6 [ 176.336097][ T5912] usb 3-1: digital interface selection failed (-22) [ 176.336109][ T5912] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 176.407701][ T5912] usb 3-1: setting power OFF [ 176.407719][ T5912] dvb-usb: bulk message failed: -22 (2/0) [ 176.407876][ T5912] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 176.408010][ T5912] (NULL device *): no alternate interface [ 176.492972][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 176.665112][ T32] usb 1-1: USB disconnect, device number 20 [ 176.695385][ T32] usblp0: removed [ 176.757021][ T5912] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 176.788815][ T5912] usb 3-1: USB disconnect, device number 21 [ 177.457829][ T6687] kvm: kvm [6686]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 177.462115][ T6687] kvm: kvm [6686]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x8000000000000 [ 177.494037][ T6687] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2320780359 (18566242872 ns) > initial count (8656597208 ns). Using initial count to start timer. [ 178.703236][ T6713] kvm: kvm [6712]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 178.768537][ T6715] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 179.366700][ T6722] kvm: kvm [6719]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 179.706227][ T6726] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 180.209318][ T6747] kvm: kvm [6746]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 180.534323][ T6752] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 181.547734][ T6781] kvm: kvm [6780]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 182.198200][ T6794] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 182.983848][ T6816] kvm: kvm [6810]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 182.993127][ T6816] kvm: kvm [6810]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x3 [ 182.994455][ T6816] kvm: kvm [6810]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 184.605366][ T6854] kvm: kvm [6850]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 184.623740][ T6854] kvm: kvm [6850]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x3 [ 184.623981][ T6854] kvm: kvm [6850]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 185.096548][ T6867] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 185.967535][ T6893] kvm: kvm [6890]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 185.972570][ T6893] kvm: kvm [6890]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x3 [ 185.972808][ T6893] kvm: kvm [6890]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 186.699023][ T6905] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 187.046377][ T6921] kvm: kvm [6920]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 188.212133][ T6956] kvm_pr_unimpl_wrmsr: 2 callbacks suppressed [ 188.212155][ T6956] kvm: kvm [6953]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 188.232734][ T6956] kvm: kvm [6953]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 189.544797][ T6993] kvm: kvm [6992]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 189.567820][ T6993] kvm: kvm [6992]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 190.574970][ T7033] kvm: kvm [7028]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 190.611834][ T7029] kvm: kvm [7028]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 191.701893][ T7070] kvm: kvm [7066]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 191.749181][ T7067] kvm: kvm [7066]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 192.733323][ T7105] kvm: kvm [7102]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 194.222901][ T7158] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 194.435032][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.435143][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.143790][ T7185] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 196.046440][ T7216] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 197.851044][ T7281] kvm: kvm [7280]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 197.868387][ T7281] kvm: kvm [7280]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 197.943387][ T7281] kvm: kvm [7280]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 198.007550][ T7281] kvm: kvm [7280]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x400003 [ 201.715938][ T7418] KVM: debugfs: duplicate directory 7418-4 [ 201.721647][ T7418] kvm: kvm [7417]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 202.732584][ T7447] KVM: debugfs: duplicate directory 7447-4 [ 202.819332][ T7449] kvm: kvm [7446]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 203.911914][ T7476] KVM: debugfs: duplicate directory 7476-4 [ 203.942495][ T7476] kvm: kvm [7475]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 207.142959][ T7565] kvm: kvm [7564]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 207.150984][ T7565] kvm: kvm [7564]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 207.191756][ T7565] kvm: kvm [7564]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 207.211102][ T7565] kvm: kvm [7564]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x400003 [ 208.528044][ T1249] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 208.695776][ T1249] usb 1-1: Using ep0 maxpacket: 32 [ 208.709844][ T1249] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 208.709878][ T1249] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 208.709908][ T1249] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 208.709937][ T1249] usb 1-1: config 1 has no interface number 0 [ 208.710001][ T1249] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.710038][ T1249] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 208.710093][ T1249] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 208.710211][ T1249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.834160][ T1249] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 209.026474][ T7598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.031429][ T7598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.071295][ T1249] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 209.508147][ T1249] usb 1-1: USB disconnect, device number 21 [ 209.520759][ T1249] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 210.280914][ T7640] kvm: kvm [7639]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x400003 [ 211.240023][ T5912] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 211.396629][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 211.398472][ T5912] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 211.398491][ T5912] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 211.398505][ T5912] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 211.398521][ T5912] usb 5-1: config 1 has no interface number 0 [ 211.398553][ T5912] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 211.398573][ T5912] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 211.398603][ T5912] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 211.398620][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.508815][ T5912] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 211.715866][ T7660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.716522][ T7660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.753105][ T5912] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 212.209243][ T5912] usb 5-1: USB disconnect, device number 7 [ 212.235408][ T5912] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 214.445821][ T5912] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 214.599023][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 214.600878][ T5912] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 214.600905][ T5912] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 214.600931][ T5912] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 214.600948][ T5912] usb 1-1: config 1 has no interface number 0 [ 214.600989][ T5912] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.601009][ T5912] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 214.601038][ T5912] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 214.601055][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.732884][ T5912] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 214.927722][ T7730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.928330][ T7730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.971220][ T5912] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 215.363222][ T32] usb 1-1: USB disconnect, device number 22 [ 215.386489][ T32] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 217.835740][ T5912] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 217.995791][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 218.006704][ T5912] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 218.006780][ T5912] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 218.006842][ T5912] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 218.006903][ T5912] usb 4-1: config 1 has no interface number 0 [ 218.007048][ T5912] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 218.007130][ T5912] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 218.007250][ T5912] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 218.007296][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.119527][ T5912] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 218.301716][ T7800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.302446][ T7800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.331838][ T5912] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 218.748415][ T32] usb 4-1: USB disconnect, device number 26 [ 218.762795][ T32] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 220.775844][ T5894] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 220.935639][ T5894] usb 1-1: Using ep0 maxpacket: 32 [ 220.942451][ T5894] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 220.942514][ T5894] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 220.942540][ T5894] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 220.942596][ T5894] usb 1-1: config 1 has no interface number 0 [ 220.942730][ T5894] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.942789][ T5894] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 220.942841][ T5894] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 220.942907][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.043629][ T5894] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 221.265830][ T7871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.266946][ T7871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.274154][ T5894] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 221.713851][ T1249] usb 1-1: USB disconnect, device number 23 [ 221.747231][ T1249] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 222.107057][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 222.185826][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 222.204107][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 222.204145][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 223.782324][ T7957] gfs2: not a GFS2 filesystem [ 223.885779][ T5894] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 224.063425][ T5894] usb 1-1: Using ep0 maxpacket: 32 [ 224.090501][ T5894] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 224.090538][ T5894] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 224.090566][ T5894] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 224.090595][ T5894] usb 1-1: config 1 has no interface number 0 [ 224.090764][ T5894] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.090807][ T5894] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 224.090859][ T5894] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 224.090918][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.231906][ T5894] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 224.467752][ T7953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.484210][ T7953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.549212][ T5894] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 224.959357][ T5912] usb 1-1: USB disconnect, device number 24 [ 224.964713][ T5912] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 226.105707][ T1249] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 226.259050][ T1249] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 226.259105][ T1249] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 226.259154][ T1249] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.263407][ T1249] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 226.263444][ T1249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 226.263472][ T1249] usb 5-1: Product: syz [ 226.263492][ T1249] usb 5-1: Manufacturer: syz [ 226.263511][ T1249] usb 5-1: SerialNumber: syz [ 226.581958][ T1249] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 226.695719][ T5929] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 226.794369][ T1249] usb 5-1: USB disconnect, device number 8 [ 226.810654][ T1249] usblp0: removed [ 226.846906][ T5929] usb 3-1: Using ep0 maxpacket: 32 [ 226.850700][ T5929] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 226.850727][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.896700][ T5929] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 227.890084][ T8024] netlink: 'syz.4.728': attribute type 25 has an invalid length. [ 227.890106][ T8024] netlink: 'syz.4.728': attribute type 28 has an invalid length. [ 227.898484][ T8024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.728'. [ 228.323379][ T5929] gspca_nw80x: reg_w err -71 [ 228.323472][ T5929] nw80x 3-1:3.0: probe with driver nw80x failed with error -71 [ 228.372422][ T5929] usb 3-1: USB disconnect, device number 22 [ 228.869333][ T5894] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 229.016584][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 229.018618][ T5894] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 229.018643][ T5894] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 229.018664][ T5894] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 229.018685][ T5894] usb 4-1: config 1 has no interface number 0 [ 229.018747][ T5894] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.018775][ T5894] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 229.018818][ T5894] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 229.018842][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.097774][ T5894] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 229.275084][ T8046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.296239][ T8046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.303079][ T5894] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 229.610676][ T5929] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 229.731304][ T1249] usb 4-1: USB disconnect, device number 27 [ 229.747232][ T1249] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 229.787783][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 229.790219][ T5929] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 229.790251][ T5929] usb 3-1: config 0 has no interface number 0 [ 229.794079][ T5929] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 229.794108][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.794121][ T5929] usb 3-1: Product: syz [ 229.794131][ T5929] usb 3-1: Manufacturer: syz [ 229.794141][ T5929] usb 3-1: SerialNumber: syz [ 229.841939][ T5929] usb 3-1: config 0 descriptor?? [ 229.861865][ T5929] hub 3-1:0.132: bad descriptor, ignoring hub [ 229.861892][ T5929] hub 3-1:0.132: probe with driver hub failed with error -5 [ 229.872542][ T5929] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input8 [ 230.503610][ T8075] IPVS: Scheduler module ip_vs_ not found [ 231.675738][ T5894] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 231.826401][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 231.829764][ T5894] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 231.829789][ T5894] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 231.829811][ T5894] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 231.829831][ T5894] usb 5-1: config 1 has no interface number 0 [ 231.829861][ T5894] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 231.829879][ T5894] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 231.829908][ T5894] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 231.829923][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.928849][ T5894] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 232.126892][ T8108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.136880][ T8108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.200650][ T5894] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 232.600168][ T1249] usb 5-1: USB disconnect, device number 9 [ 232.646163][ T1249] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 233.754247][ T5929] usb 3-1: USB disconnect, device number 23 [ 234.436804][ T820] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 234.598184][ T820] usb 1-1: Using ep0 maxpacket: 32 [ 234.603019][ T820] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 234.603046][ T820] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 234.603067][ T820] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 234.603088][ T820] usb 1-1: config 1 has no interface number 0 [ 234.603130][ T820] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 234.603175][ T820] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 234.603219][ T820] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 234.603243][ T820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.709446][ T820] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 234.911051][ T8165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.911794][ T8165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.936568][ T820] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 235.354483][ T5929] usb 1-1: USB disconnect, device number 25 [ 235.370765][ T5929] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 235.765712][ T32] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 235.917956][ T32] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 235.917989][ T32] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 235.918009][ T32] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.920346][ T32] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 235.920378][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 235.920393][ T32] usb 3-1: Product: syz [ 235.920404][ T32] usb 3-1: Manufacturer: syz [ 235.920414][ T32] usb 3-1: SerialNumber: syz [ 236.201569][ T32] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 236.391536][ T32] usb 3-1: USB disconnect, device number 24 [ 236.461396][ T32] usblp0: removed [ 237.686038][ T32] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 237.835744][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 237.845134][ T32] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 237.845161][ T32] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 237.845182][ T32] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 237.845203][ T32] usb 3-1: config 1 has no interface number 0 [ 237.845245][ T32] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 237.845271][ T32] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 237.845345][ T32] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 237.845383][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.984187][ T32] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 238.153526][ T8227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.154203][ T8227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.178171][ T32] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 238.583092][ T5929] usb 3-1: USB disconnect, device number 25 [ 238.585387][ T5929] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 238.756470][ T1249] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 238.907730][ T1249] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 238.907782][ T1249] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 238.907800][ T1249] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.914544][ T1249] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 238.914576][ T1249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 238.914597][ T1249] usb 4-1: Product: syz [ 238.914615][ T1249] usb 4-1: Manufacturer: syz [ 238.914626][ T1249] usb 4-1: SerialNumber: syz [ 239.242058][ T1249] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 239.269105][ T1249] usb 4-1: USB disconnect, device number 28 [ 239.287377][ T1249] usblp0: removed [ 239.439860][ T8272] netlink: 'syz.0.804': attribute type 4 has an invalid length. [ 239.977666][ T8283] netlink: 'syz.4.808': attribute type 10 has an invalid length. [ 240.074442][ T8283] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 240.088965][ T8283] team0: Port device netdevsim0 added [ 240.123066][ T8284] netlink: 'syz.4.808': attribute type 10 has an invalid length. [ 240.514181][ T5929] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 240.765732][ T5929] usb 3-1: Using ep0 maxpacket: 32 [ 240.770085][ T5929] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 240.770114][ T5929] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 240.770136][ T5929] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 240.770159][ T5929] usb 3-1: config 1 has no interface number 0 [ 240.770218][ T5929] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 240.770247][ T5929] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 240.770306][ T5929] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 240.770331][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.877793][ T5929] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 241.000539][ T8291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.002512][ T8291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.023952][ T5929] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 241.188145][ T6342] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 241.370094][ T6342] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 241.370138][ T6342] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 241.370161][ T6342] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.411359][ T6342] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 241.411839][ T6342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 241.411865][ T6342] usb 4-1: Product: syz [ 241.411882][ T6342] usb 4-1: Manufacturer: syz [ 241.412356][ T6342] usb 4-1: SerialNumber: syz [ 241.468458][ T820] usb 3-1: USB disconnect, device number 26 [ 241.507627][ T820] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 241.731821][ T6342] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 241.766549][ T6342] usb 4-1: USB disconnect, device number 29 [ 241.774210][ T6342] usblp0: removed [ 242.160040][ T8322] netlink: 'syz.0.821': attribute type 4 has an invalid length. [ 242.265758][ T6342] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 242.428128][ T6342] usb 5-1: Using ep0 maxpacket: 16 [ 242.430863][ T6342] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 242.430905][ T6342] usb 5-1: config 0 has no interface number 0 [ 242.433742][ T6342] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 242.433767][ T6342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.433787][ T6342] usb 5-1: Product: syz [ 242.433799][ T6342] usb 5-1: Manufacturer: syz [ 242.433813][ T6342] usb 5-1: SerialNumber: syz [ 242.497209][ T6342] usb 5-1: config 0 descriptor?? [ 242.502885][ T6342] hub 5-1:0.132: bad descriptor, ignoring hub [ 242.502927][ T6342] hub 5-1:0.132: probe with driver hub failed with error -5 [ 242.542116][ T6342] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input9 [ 242.916631][ T8331] IPVS: Scheduler module ip_vs_ not found [ 243.825897][ T5929] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 243.985609][ T5929] usb 1-1: Using ep0 maxpacket: 32 [ 243.988148][ T5929] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 243.988173][ T5929] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 243.988194][ T5929] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 243.988215][ T5929] usb 1-1: config 1 has no interface number 0 [ 243.988244][ T5929] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 243.988261][ T5929] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 243.988288][ T5929] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 243.988304][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.101422][ T5929] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 244.289731][ T8352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.290619][ T8352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.305910][ T5929] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 244.665682][ T820] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 244.724134][ T5963] usb 1-1: USB disconnect, device number 26 [ 244.734596][ T5963] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 244.832195][ T820] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 244.832233][ T820] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 244.832258][ T820] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.872521][ T820] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 244.872565][ T820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 244.872579][ T820] usb 3-1: Product: syz [ 244.872589][ T820] usb 3-1: Manufacturer: syz [ 244.872598][ T820] usb 3-1: SerialNumber: syz [ 245.148398][ T820] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 245.192488][ T820] usb 3-1: USB disconnect, device number 27 [ 245.207291][ T820] usblp0: removed [ 245.474234][ T8375] netlink: 'syz.4.836': attribute type 4 has an invalid length. [ 246.293833][ T32] usb 5-1: USB disconnect, device number 10 [ 247.097539][ T5881] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 247.215700][ T32] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 247.222588][ T8417] netlink: 'syz.2.849': attribute type 4 has an invalid length. [ 247.247925][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 247.254537][ T5881] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 247.254564][ T5881] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 247.254592][ T5881] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 247.254608][ T5881] usb 1-1: config 1 has no interface number 0 [ 247.254660][ T5881] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 247.254680][ T5881] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 247.254710][ T5881] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 247.254728][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.374737][ T5881] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 247.416142][ T32] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 247.416199][ T32] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 247.416217][ T32] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.419778][ T32] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 247.419806][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 247.420030][ T32] usb 4-1: Product: syz [ 247.420041][ T32] usb 4-1: Manufacturer: syz [ 247.420052][ T32] usb 4-1: SerialNumber: syz [ 247.448063][ T5838] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 247.582464][ T8405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.593608][ T8405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.609297][ T5881] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 247.741883][ T32] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 247.772442][ T32] usb 4-1: USB disconnect, device number 30 [ 247.821193][ T32] usblp0: removed [ 248.068353][ T6342] usb 1-1: USB disconnect, device number 27 [ 248.077520][ T6342] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 248.800519][ T8448] netlink: 'syz.0.859': attribute type 4 has an invalid length. [ 248.870641][ T5838] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 249.745672][ T5929] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 249.901225][ T5929] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 249.901257][ T5929] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 249.901284][ T5929] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.905418][ T5929] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 249.920684][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 249.920714][ T5929] usb 5-1: Product: syz [ 249.920730][ T5929] usb 5-1: Manufacturer: syz [ 249.920745][ T5929] usb 5-1: SerialNumber: syz [ 250.246014][ T5929] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 250.268327][ T5929] usb 5-1: USB disconnect, device number 11 [ 250.293098][ T5929] usblp0: removed [ 250.435817][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 250.585600][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 250.589479][ T10] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 250.589505][ T10] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 250.589527][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 250.589550][ T10] usb 1-1: config 1 has no interface number 0 [ 250.589596][ T10] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 250.589624][ T10] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 250.589667][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 250.589692][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.701989][ T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 250.864356][ T8493] netlink: 'syz.4.874': attribute type 4 has an invalid length. [ 250.908802][ T8478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.910626][ T8478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.940735][ T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 250.962003][ T5838] Bluetooth: hci4: link tx timeout [ 250.962219][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 251.346580][ T10] usb 1-1: USB disconnect, device number 28 [ 251.367587][ T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 252.165141][ T8513] gfs2: not a GFS2 filesystem [ 252.595810][ T5929] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 252.748914][ T5929] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 252.748943][ T5929] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 252.748967][ T5929] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.777119][ T5929] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 252.777150][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 252.777173][ T5929] usb 4-1: Product: syz [ 252.777188][ T5929] usb 4-1: Manufacturer: syz [ 252.777204][ T5929] usb 4-1: SerialNumber: syz [ 252.988204][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 253.051452][ T8535] netlink: 'syz.2.887': attribute type 4 has an invalid length. [ 253.120160][ T5929] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 253.133916][ T5929] usb 4-1: USB disconnect, device number 31 [ 253.149918][ T5929] usblp0: removed [ 253.166821][ T5143] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 253.646392][ T5881] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 253.795745][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 253.798993][ T5881] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 253.799018][ T5881] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 253.799040][ T5881] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 253.799061][ T5881] usb 5-1: config 1 has no interface number 0 [ 253.799178][ T5881] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 253.799205][ T5881] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 253.799254][ T5881] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 253.799276][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.942973][ T5881] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 254.137850][ T8543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.142934][ T8543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.200867][ T5881] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 254.639518][ T5929] usb 5-1: USB disconnect, device number 12 [ 254.663185][ T5929] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 255.238829][ T8581] netlink: 'syz.4.902': attribute type 4 has an invalid length. [ 255.345822][ T5929] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 255.502520][ T5929] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 255.502551][ T5929] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 255.502576][ T5929] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.510735][ T5929] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 255.510765][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 255.510786][ T5929] usb 3-1: Product: syz [ 255.510800][ T5929] usb 3-1: Manufacturer: syz [ 255.510814][ T5929] usb 3-1: SerialNumber: syz [ 255.814908][ T5929] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 255.882097][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.882214][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.020198][ T820] usb 3-1: USB disconnect, device number 28 [ 256.049885][ T820] usblp0: removed [ 256.595626][ T5929] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 256.756704][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 256.760122][ T5929] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 256.760150][ T5929] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 256.760173][ T5929] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 256.760194][ T5929] usb 4-1: config 1 has no interface number 0 [ 256.760261][ T5929] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 256.760282][ T5929] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 256.760312][ T5929] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 256.760334][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.867858][ T5929] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 257.075396][ T8606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.086409][ T8606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.093259][ T5929] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 257.513209][ T8625] netlink: 'syz.2.916': attribute type 4 has an invalid length. [ 257.537683][ T32] usb 4-1: USB disconnect, device number 32 [ 257.571266][ T32] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 257.636225][ T5143] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 258.307175][ T5929] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 258.457932][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 258.462192][ T5929] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 258.462222][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.504817][ T5929] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 259.723580][ T5929] gspca_nw80x: reg_w err -71 [ 259.723648][ T5929] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 259.777738][ T5894] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 259.779262][ T5929] usb 5-1: USB disconnect, device number 13 [ 259.836556][ T8669] netlink: 'syz.2.932': attribute type 4 has an invalid length. [ 259.890117][ T5143] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 259.925657][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 259.929507][ T5894] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 259.929531][ T5894] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 259.929552][ T5894] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 259.929572][ T5894] usb 4-1: config 1 has no interface number 0 [ 259.929619][ T5894] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 259.929637][ T5894] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 259.929683][ T5894] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 259.929706][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.033206][ T5894] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 260.233396][ T8663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.234145][ T8663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.260816][ T5894] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 260.638105][ T8678] netlink: 'syz.0.935': attribute type 25 has an invalid length. [ 260.638129][ T8678] netlink: 'syz.0.935': attribute type 28 has an invalid length. [ 260.664086][ T8678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.935'. [ 260.678752][ T5929] usb 4-1: USB disconnect, device number 33 [ 260.694202][ T5929] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 261.908954][ T8706] netlink: 'syz.0.944': attribute type 4 has an invalid length. [ 261.968029][ T5143] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 262.385718][ T5881] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 262.535961][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 262.540374][ T5881] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 262.540408][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.580892][ T5881] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 263.267111][ T6342] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 263.425658][ T6342] usb 3-1: Using ep0 maxpacket: 32 [ 263.429962][ T6342] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 263.430093][ T6342] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 263.430118][ T6342] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 263.430142][ T6342] usb 3-1: config 1 has no interface number 0 [ 263.430206][ T6342] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 263.430237][ T6342] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 263.430283][ T6342] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 263.430309][ T6342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.533183][ T6342] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 263.593771][ T5881] gspca_nw80x: reg_w err -71 [ 263.593871][ T5881] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 263.650541][ T5881] usb 5-1: USB disconnect, device number 14 [ 263.738826][ T8726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.739554][ T8726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.774426][ T6342] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 264.184292][ T6342] usb 3-1: USB disconnect, device number 29 [ 264.245835][ T6342] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 264.443510][ T8742] netlink: 'syz.3.957': attribute type 4 has an invalid length. [ 264.541279][ T5143] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 265.706616][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 265.950051][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 265.974268][ T10] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 265.974307][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.083451][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 266.715737][ T5929] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 266.821412][ T10] gspca_nw80x: reg_r err -71 [ 266.821522][ T10] nw80x 3-1:3.0: probe with driver nw80x failed with error -71 [ 266.856957][ T10] usb 3-1: USB disconnect, device number 30 [ 266.885796][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 266.888337][ T5929] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 266.888364][ T5929] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 266.888387][ T5929] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 266.888410][ T5929] usb 4-1: config 1 has no interface number 0 [ 266.888465][ T5929] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 266.888493][ T5929] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 266.888538][ T5929] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 266.888563][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.986194][ T5929] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 267.184987][ T8771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.187587][ T8771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.206181][ T5929] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 267.304200][ T8788] netlink: 'syz.0.973': attribute type 4 has an invalid length. [ 267.404048][ T5838] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 267.636143][ T10] usb 4-1: USB disconnect, device number 34 [ 267.660875][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 268.266131][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 268.867739][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 269.035570][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 269.038167][ T10] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 269.038197][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.086363][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 269.823089][ T8835] netlink: 'syz.4.990': attribute type 4 has an invalid length. [ 269.825712][ T820] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 269.890195][ T10] gspca_nw80x: reg_r err -71 [ 269.890263][ T10] nw80x 1-1:3.0: probe with driver nw80x failed with error -71 [ 269.910882][ T10] usb 1-1: USB disconnect, device number 29 [ 269.924785][ T5143] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 269.985784][ T820] usb 3-1: Using ep0 maxpacket: 32 [ 269.987974][ T820] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 269.988001][ T820] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 269.988033][ T820] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 269.988054][ T820] usb 3-1: config 1 has no interface number 0 [ 269.988087][ T820] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 269.988106][ T820] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 269.988136][ T820] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 269.988153][ T820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.007654][ T820] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 270.265425][ T8833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.267372][ T8833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.323466][ T820] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 270.708547][ T820] usb 3-1: USB disconnect, device number 31 [ 270.711526][ T820] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 271.655415][ T8869] netlink: 'syz.0.1003': attribute type 4 has an invalid length. [ 271.732364][ T5143] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 271.935926][ T1249] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 272.095594][ T1249] usb 5-1: Using ep0 maxpacket: 32 [ 272.098671][ T1249] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 272.098769][ T1249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.139422][ T1249] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 272.455709][ T820] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 272.605979][ T820] usb 3-1: Using ep0 maxpacket: 32 [ 272.608865][ T820] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 272.608892][ T820] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 272.608914][ T820] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 272.608937][ T820] usb 3-1: config 1 has no interface number 0 [ 272.608983][ T820] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 272.609027][ T820] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 272.609072][ T820] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 272.609096][ T820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.749449][ T820] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 272.925126][ T1249] gspca_nw80x: reg_r err -71 [ 272.925222][ T1249] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 272.955275][ T1249] usb 5-1: USB disconnect, device number 15 [ 273.014337][ T8882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.032702][ T8882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.076192][ T820] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 273.476441][ T1249] usb 3-1: USB disconnect, device number 32 [ 273.479915][ T1249] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 274.182927][ T8913] netlink: 'syz.4.1018': attribute type 4 has an invalid length. [ 274.240724][ T5143] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 274.815724][ T1249] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 274.969429][ T1249] usb 1-1: Using ep0 maxpacket: 32 [ 274.973217][ T1249] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 274.973248][ T1249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.022368][ T1249] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 275.455658][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 275.647183][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 275.673740][ T10] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 275.673831][ T10] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 275.673855][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 275.673879][ T10] usb 4-1: config 1 has no interface number 0 [ 275.674151][ T10] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 275.674181][ T10] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 275.674227][ T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 275.674529][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.809904][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 275.889937][ T1249] gspca_nw80x: reg_r err -71 [ 275.890092][ T1249] nw80x 1-1:3.0: probe with driver nw80x failed with error -71 [ 275.962929][ T1249] usb 1-1: USB disconnect, device number 30 [ 276.017288][ T8932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.024468][ T8932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.059317][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 276.351092][ T39] INFO: tas[ 276.351092][ T39] INFO: task syz-executor:5833 blocked for more than 143 seconds. [ 276.351123][ T39] Tainted: G L syzkaller #0 [ 276.351134][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.351142][ T39] task:syz-executor state:D stack:21120 pid:5833 tgid:5833 ppid:1 task_flags:0x400140 flags:0x00080002 [ 276.351199][ T39] Call Trace: [ 276.351205][ T39] [ 276.351278][ T39] __schedule+0x169e/0x54f0 [ 276.351322][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 276.351352][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 276.351381][ T39] ? rt_spin_lock+0x1e0/0x400 [ 276.351404][ T39] ? __pfx___schedule+0x10/0x10 [ 276.351445][ T39] ? schedule+0x90/0x360 [ 276.351472][ T39] schedule+0x164/0x360 [ 276.351498][ T39] fuse_chan_wait_aborted+0x15b/0x250 [ 276.351521][ T39] ? __pfx_fuse_chan_wait_aborted+0x10/0x10 [ 276.351540][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 276.351610][ T39] ? __pfx_fuse_chan_abort+0x10/0x10 [ 276.351630][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 276.351655][ T39] fuse_conn_destroy+0x1e7/0x3e0 [ 276.351681][ T39] ? __pfx_fuse_conn_destroy+0x10/0x10 [ 276.351704][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 276.351730][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 276.351757][ T39] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 276.351780][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 276.351802][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 276.351830][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 276.351856][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 276.351885][ T39] fuse_kill_sb_anon+0x1ef/0x270 [ 276.351913][ T39] deactivate_locked_super+0xbc/0x130 [ 276.351938][ T39] cleanup_mnt+0x437/0x4d0 [ 276.351962][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 276.351991][ T39] task_work_run+0x1d9/0x270 [ 276.352019][ T39] ? __pfx_task_work_run+0x10/0x10 [ 276.352048][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.352068][ T39] exit_to_user_mode_loop+0xed/0x480 [ 276.352089][ T39] ? rcu_is_watching+0x15/0xb0 [ 276.352125][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.352144][ T39] do_syscall_64+0x33e/0xf80 [ 276.352169][ T39] ? trace_irq_disable+0x3b/0x140 [ 276.352189][ T39] ? clear_bhb_loop+0x40/0x90 [ 276.352210][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.352228][ T39] RIP: 0033:0x7f764486da57 [ 276.352243][ T39] RSP: 002b:00007ffde56edfc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 276.352261][ T39] RAX: 0000000000000000 RBX: 00007f7644902048 RCX: 00007f764486da57 [ 276.352273][ T39] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde56ee080 [ 276.352299][ T39] RBP: 00007ffde56ee080 R08: 00007ffde56ef080 R09: 00000000ffffffff [ 276.352312][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffde56ef110 [ 276.352340][ T39] R13: 00007f7644902048 R14: 000000000001eb06 R15: 00007ffde56ef150 [ 276.352367][ T39] [ 276.352435][ T39] [ 276.352435][ T39] Showing all locks held in the system: [ 276.352446][ T39] 1 lock held by khungtaskd/39: [ 276.352456][ T39] #0: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 276.352517][ T39] 11 locks held by kworker/u8:7/158: [ 276.352528][ T39] #0: ffff88805ea7d938 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 276.352573][ T39] #1: ffffc90003a07c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 276.352617][ T39] #2: ffffffff8e25f260 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 276.352659][ T39] #3: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 276.352701][ T39] #4: ffff888033194ce0 (&peer->endpoint_lock){++..}-{3:3}, at: wg_socket_send_skb_to_peer+0x6e/0x200 [ 276.352751][ T39] #5: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x277/0x4b0 [ 276.352816][ T39] #6: ffffffff8e25f260 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 276.352858][ T39] #7: ffffffff8e3c8160 (rcu_read_lock_bh){....}-{1:3}, at: send6+0x255/0x910 [ 276.352901][ T39] #8: ffffe8ffffc887a0 ((&({ do { const void *__vpp_verify = (typeof((dst_cache->cache) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((dst_cache->cache))) *)(( unsigned long)((dst_cache->cache)))))((unsigned long)((__typeof_unqual__(*((dst_cache->cache))) *)(( unsigned long)((dst_cache->cache)))) + (((__per_cpu_offset[(i)]))))); })->bh_lock)){+...}-{3:3}, at: dst_cache_set_ip6+0xb9/0x580 [ 276.352981][ T39] #9: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 276.353068][ T39] #10: ffff8880b863b9a0 (&rq->__lock){-...}-{2:2}, at: finish_task_switch+0x15f/0xbe0 [ 276.353151][ T39] 3 locks held by kworker/0:2/1249: [ 276.353161][ T39] #0: ffff88813fe46938 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 276.353202][ T39] #1: ffffc900065cfc40 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 276.353241][ T39] #2: ffff88802aed2210 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x23/0x120 [ 276.353303][ T39] 2 locks held by getty/5577: [ 276.353312][ T39] #0: ffff8880379de0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 276.353356][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 276.353398][ T39] 1 lock held by syz-executor/5833: [ 276.353408][ T39] #0: ffff88803cbe80d0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 276.353481][ T39] [ 276.353486][ T39] ============================================= [ 276.353486][ T39] [ 276.353506][ T39] NMI backtrace for cpu 1 [ 276.353523][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 276.353550][ T39] Tainted: [L]=SOFTLOCKUP [ 276.353556][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 276.353567][ T39] Call Trace: [ 276.353576][ T39] [ 276.353584][ T39] dump_stack_lvl+0xe8/0x150 [ 276.353608][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 276.353632][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 276.353654][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 276.353681][ T39] sys_info+0x135/0x170 [ 276.353701][ T39] watchdog+0xfd3/0x1030 [ 276.353728][ T39] ? watchdog+0x1c9/0x1030 [ 276.353755][ T39] kthread+0x388/0x470 [ 276.353778][ T39] ? __pfx_watchdog+0x10/0x10 [ 276.353794][ T39] ? __pfx_kthread+0x10/0x10 [ 276.353817][ T39] ret_from_fork+0x514/0xb70 [ 276.353837][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 276.353854][ T39] ? __switch_to+0xc79/0x1410 [ 276.353882][ T39] ? __pfx_kthread+0x10/0x10 [ 276.353905][ T39] ret_from_fork_asm+0x1a/0x30 [ 276.353939][ T39] [ 276.353946][ T39] Sending NMI from CPU 1 to CPUs 0: [ 276.353978][ C0] NMI backtrace for cpu 0 [ 276.353997][ C0] CPU: 0 UID: 0 PID: 158 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 276.354023][ C0] Tainted: [L]=SOFTLOCKUP [ 276.354030][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 276.354042][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 276.354067][ C0] RIP: 0010:__lock_acquire+0x1978/0x2cf0 [ 276.354093][ C0] Code: de c3 23 14 25 ff 0f 00 00 39 05 9f c3 22 12 73 06 89 05 97 c3 22 12 48 8b 02 48 89 df 4c 39 e8 0f 84 2c fe ff ff 4c 89 60 30 <48> 8b 00 4c 39 e8 75 f4 48 89 df e9 18 fe ff ff 48 89 fb 48 c7 c7 [ 276.354109][ C0] RSP: 0018:ffffc90003a06f10 EFLAGS: 00000002 [ 276.354123][ C0] RAX: ffffffff965719b8 RBX: 00000000000003cd RCX: 0000000000000369 [ 276.354136][ C0] RDX: ffffffff96477fc8 RSI: ffff888020f28db0 RDI: 00000000000003cd [ 276.354150][ C0] RBP: 196e6afe0f5a91c2 R08: ffffc90003a06ed8 R09: 0000000000000020 [ 276.354163][ C0] R10: dffffc0000000000 R11: ffffffff81a12540 R12: ffffffff9667fae8 [ 276.354177][ C0] R13: ffffffff9364ca10 R14: ffff888020f28000 R15: 0000000000000368 [ 276.354191][ C0] FS: 0000000000000000(0000) GS:ffff888125a64000(0000) knlGS:0000000000000000 [ 276.354206][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.354220][ C0] CR2: 00007fbccf915980 CR3: 0000000034bf4000 CR4: 00000000003526f0 [ 276.354238][ C0] Call Trace: [ 276.354244][ C0] [ 276.354265][ C0] ? check_path+0x21/0x40 [ 276.354298][ C0] ? debug_object_assert_init+0x70/0x340 [ 276.354319][ C0] lock_acquire+0x106/0x350 [ 276.354340][ C0] ? debug_object_assert_init+0x70/0x340 [ 276.354366][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 276.354392][ C0] ? debug_object_assert_init+0x70/0x340 [ 276.354411][ C0] debug_object_assert_init+0x70/0x340 [ 276.354434][ C0] hrtimer_start_range_ns+0x3f/0xef0 [ 276.354459][ C0] ? ktime_get+0x45/0x220 [ 276.354478][ C0] ? ktime_get+0x45/0x220 [ 276.354497][ C0] ? ktime_get+0x1f5/0x220 [ 276.354516][ C0] finish_task_switch+0x3cd/0xbe0 [ 276.354545][ C0] __schedule+0x16a6/0x54f0 [ 276.354569][ C0] ? unwind_next_frame+0xa6/0x2550 [ 276.354596][ C0] ? unwind_next_frame+0xa6/0x2550 [ 276.354618][ C0] ? unwind_next_frame+0xa6/0x2550 [ 276.354652][ C0] ? unwind_next_frame+0xa6/0x2550 [ 276.354671][ C0] ? unwind_next_frame+0x1bbf/0x2550 [ 276.354696][ C0] ? __pfx___schedule+0x10/0x10 [ 276.354719][ C0] ? unwind_next_frame+0xa6/0x2550 [ 276.354743][ C0] preempt_schedule_irq+0x4d/0xa0 [ 276.354767][ C0] irqentry_exit+0x14f/0x730 [ 276.354791][ C0] ? trace_irq_disable+0x3b/0x140 [ 276.354811][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 276.354829][ C0] RIP: 0010:save_dst_trace_buffer+0x1a2/0x5b0 [ 276.354869][ C0] Code: f7 dc 48 89 1c 24 48 8d 9b a0 42 84 9a 48 b8 00 00 00 00 00 fc ff df 41 80 3c 06 00 74 08 48 89 df e8 b2 31 19 f9 48 83 3b 00 <74> 07 e8 37 c7 af f8 eb 23 48 89 df be 08 00 00 00 e8 38 34 19 f9 [ 276.354884][ C0] RSP: 0018:ffffc90003a075c0 EFLAGS: 00000286 [ 276.354899][ C0] RAX: dffffc0000000000 RBX: ffffffff9a84b860 RCX: ffff888020f28000 [ 276.354913][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 276.354923][ C0] RBP: ffffc90003a07760 R08: 0000000000000000 R09: 0000000000000000 [ 276.354935][ C0] R10: ffffc90003a07520 R11: fffff52000740ea8 R12: e00000000caf68f3 [ 276.354949][ C0] R13: e00000000caf68f2 R14: 1ffffffff350970c R15: e00000000caf68f2 [ 276.354973][ C0] ? __pfx_save_dst_trace_buffer+0x10/0x10 [ 276.354995][ C0] ? dst_cache_per_cpu_dst_set+0xe4/0x1c0 [ 276.355020][ C0] ? dst_cache_set_ip6+0x40a/0x580 [ 276.355044][ C0] ? send6+0x533/0x910 [ 276.355062][ C0] ? wg_socket_send_skb_to_peer+0x128/0x200 [ 276.355083][ C0] ? wg_packet_handshake_send_worker+0x203/0x350 [ 276.355103][ C0] ? process_one_work+0x9a3/0x1710 [ 276.355119][ C0] ? worker_thread+0xba8/0x11e0 [ 276.355135][ C0] ? kthread+0x388/0x470 [ 276.355155][ C0] ? ret_from_fork+0x514/0xb70 [ 276.355171][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 276.355195][ C0] ? dst_cache_set_ip6+0x170/0x580 [ 276.355222][ C0] ? dst_release+0x7f/0x1b0 [ 276.355244][ C0] dst_cache_per_cpu_dst_set+0xe4/0x1c0 [ 276.355272][ C0] dst_cache_set_ip6+0x40a/0x580 [ 276.355296][ C0] ? dst_cache_set_ip6+0x170/0x580 [ 276.355322][ C0] send6+0x533/0x910 [ 276.355345][ C0] ? send6+0x255/0x910 [ 276.355363][ C0] ? __pfx_send6+0x10/0x10 [ 276.355382][ C0] ? rcu_is_watching+0x15/0xb0 [ 276.355409][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 276.355427][ C0] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 276.355452][ C0] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 276.355475][ C0] wg_socket_send_skb_to_peer+0x128/0x200 [ 276.355501][ C0] wg_packet_handshake_send_worker+0x203/0x350 [ 276.355524][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 276.355557][ C0] ? process_one_work+0x8b7/0x1710 [ 276.355572][ C0] process_one_work+0x9a3/0x1710 [ 276.355597][ C0] ? __pfx_process_one_work+0x10/0x10 [ 276.355613][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 276.355638][ C0] worker_thread+0xba8/0x11e0 [ 276.355667][ C0] kthread+0x388/0x470 [ 276.355695][ C0] ? __pfx_worker_thread+0x10/0x10 [ 276.355712][ C0] ? __pfx_kthread+0x10/0x10 [ 276.355734][ C0] ret_from_fork+0x514/0xb70 [ 276.355753][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 276.355771][ C0] ? __switch_to+0xc79/0x1410 [ 276.355796][ C0] ? __pfx_kthread+0x10/0x10 [ 276.355818][ C0] ret_from_fork_asm+0x1a/0x30 [ 276.355845][ C0] [ 276.359446][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 276.359517][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 276.359556][ T39] Tainted: [L]=SOFTLOCKUP [ 276.359565][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 276.359580][ T39] Call Trace: [ 276.359589][ T39] [ 276.359613][ T39] vpanic+0x56c/0xa60 [ 276.359701][ T39] ? __pfx___schedule+0x10/0x10 [ 276.359734][ T39] ? __pfx_vpanic+0x10/0x10 [ 276.359799][ T39] panic+0xc5/0xd0 [ 276.359868][ T39] ? __pfx_panic+0x10/0x10 [ 276.359896][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 276.359958][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 276.360034][ T39] watchdog+0x102c/0x1030 [ 276.360068][ T39] ? watchdog+0x1c9/0x1030 [ 276.360143][ T39] kthread+0x388/0x470 [ 276.360209][ T39] ? __pfx_watchdog+0x10/0x10 [ 276.360232][ T39] ? __pfx_kthread+0x10/0x10 [ 276.360260][ T39] ret_from_fork+0x514/0xb70 [ 276.360286][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 276.360341][ T39] ? __switch_to+0xc79/0x1410 [ 276.360384][ T39] ? __pfx_kthread+0x10/0x10 [ 276.360448][ T39] ret_from_fork_asm+0x1a/0x30 [ 276.360512][ T39] [ 276.361299][ T39] Kernel Offset: disabled