last executing test programs: 5m20.354510349s ago: executing program 1 (id=31): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) close(r0) 5m18.446372103s ago: executing program 1 (id=42): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) close(r0) 5m16.71787708s ago: executing program 1 (id=44): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f00000001c0)}) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x800}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc4c0f01310f019c09000f01c2", 0x6e}], 0x1, 0x21, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m14.673458147s ago: executing program 1 (id=37): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0x4) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffc) 5m14.567154315s ago: executing program 1 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x1004000, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) 5m14.447998077s ago: executing program 1 (id=40): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xd6) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000140)={r1}) 5m10.072585493s ago: executing program 32 (id=20): syz_usb_connect$uac1(0x5, 0x7a, &(0x7f0000000400)=ANY=[@ANYBLOB="120110010000002082057d004000010203010902680003010048f30904000000010100000a240106000a000201020904010000010200000904e1010101020000082402010904040309050109080000037f0725010c0002000930082ec301020000090402"], 0x0) 5m5.480349735s ago: executing program 33 (id=29): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 4m59.416721145s ago: executing program 34 (id=40): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xd6) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000140)={r1}) 4m10.395542825s ago: executing program 4 (id=204): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "b79e5e602970a4f9", "7ae45252c9de55b4bc6a682567b902a1", "5dcf9f49", "c5cab4a5baa61761"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x11a, 0x4, 0x0, 0x0) 4m10.17609923s ago: executing program 4 (id=208): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 4m9.74956864s ago: executing program 4 (id=210): socket$inet(0x2, 0x8, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r1) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x1, 0x40000004) (fail_nth: 2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) 4m8.794295125s ago: executing program 4 (id=212): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m7.398585501s ago: executing program 6 (id=219): socket$inet(0x2, 0x8, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x60) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r4) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x1, 0x40000004) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) 4m7.371987911s ago: executing program 4 (id=220): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) mount$cgroup2(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x1004000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) 4m7.009336369s ago: executing program 6 (id=221): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x210, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x0, 0xd, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x2, 0xd, 0x5}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xf, 0x7, 0x5, 0x20, 0x21}, 0x2b, &(0x7f0000000180)={0x5, 0xf, 0x2b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0xd, 0xc1e}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x4, 0xf00f, 0x9, [0x30, 0xff0030]}, @wireless={0xb, 0x10, 0x1, 0x1ecc686df2e439ea, 0x52, 0x8, 0x2e, 0xe3e, 0x40}]}, 0x7, [{0x84, &(0x7f0000000280)=@string={0x84, 0x3, "23f973241d7fedf9ab9ea22dbe0a37e451c0dc7f53c06e7772f68fd7d226beac067188841af1ca5806b5b58c53d151651ad2a4ba683175f50a6331a1add22e472d743288aabfa078b33175b0f041809ed76ef939b36ffdb4ce6f28646575ade198266a54e2b0defa9378314f6c89bfa355ebf3dd658f72682c1b3649cdaf05bf8f0e"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x412}}, {0xcd, &(0x7f0000000440)=@string={0xcd, 0x3, "cb7a1fcf1eaef75c9b3ecda2bc79e61eeffda1ce89d653c5f2e6959be89aa6e8f5be2e174469698260c2266874b67ef4b1e1211d552bf9072118b12ef6c1b970dbfb3a99d41c0b81be0b4051d7d16ff29aee01de48da9bf82faf48537c77b3fcbb5d904ae0ef42007666ba5a2f170764c5a90ae493b813558b9a1ebbfbebf167a944939857641c2e48c5753aa2d4f9f908d943cfe22795b63d75ddb457145be3c998b9a2f9d55034ec0697cf35f19a4136de28c71067f549c0fe50765b96c49ab7439b088954a0138bc93a"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc0c}}]}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getpeername(r1, 0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) 4m6.881841284s ago: executing program 4 (id=223): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f07090000002a942183"], 0x0}, 0x0) 4m5.868919308s ago: executing program 3 (id=229): statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x10, &(0x7f0000000040)) faccessat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1, 0x100) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000001c0)={@hyper}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x8, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x481, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) clock_adjtime(0x2, &(0x7f0000000380)={0x8, 0x9, 0x5, 0x6, 0x3, 0xdcc9, 0x8, 0x7, 0x50c, 0xa, 0x0, 0x9, 0x80000001, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffb, 0x35b, 0x1000, 0x9, 0x35c0000000, 0x4, 0x140000000000, 0x8, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000480)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000004c0)={0xc, r3}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000500)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0xa, 0x0, 0x40, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xf}, [@mixer_unit={0x5, 0x24, 0x4, 0x2, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x3, 0x5, {0x7, 0x25, 0x1, 0xc, 0xc3, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x3, 0x1, 0x6, "32dfdd", "f368"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x92, 0x2, 0x33, 0x9, "fe", "1356"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xfbf6, 0x36, 0x1, "ec97"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x9, 0x1, 0x23, 0x8f, "9027"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0x3, 0x5, {0x7, 0x25, 0x1, 0x8, 0x8, 0xfff}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x201, 0x2, 0x9, 0x3, 0x8, 0xf9}, 0x1c, &(0x7f0000000600)={0x5, 0xf, 0x1c, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x3, 0x80, 0x8000, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x0, 0xf0f, 0x9}]}, 0x3, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x407}}, {0x86, &(0x7f0000000680)=@string={0x86, 0x3, "4fe86eba6381d9fda3a45d545f1127296c03dc7620b2aea42876847948f483ba6e6caa9a2b9ba5e26fe187ac7d0ab49b8107f609f6959f830dde5e19a61e668176148a947daeba7996f893d8a93f2adc2b47cc93bf55528a657fad2116fcce9d606af0507076cbddf63f2893d420853206434fbcec7ea3235bd5dbebcfcf99263b29401c"}}, {0x1d, &(0x7f0000000740)=@string={0x1d, 0x3, "eb531548957ca6601fcb5a07c2453f587ee126a8bff706e290b4b9"}}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbaf6}}, './file0\x00'}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000840)={0x48, 0x8, r2, 0x0, 0x8, 0xd, &(0x7f0000000800)="a9fb5dcc4f7a82a3c67cb0f420", 0x6}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40800, 0x0) syncfs(r5) syz_usb_connect(0x0, 0x3be, &(0x7f0000000900)={{0x12, 0x1, 0x310, 0xf0, 0xdf, 0x1b, 0x8, 0x69a, 0x320, 0xfb9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3ac, 0x1, 0x0, 0x6, 0x60, 0x6c, "", [{{0x9, 0x4, 0x1d, 0x6, 0x9, 0xbd, 0x35, 0x3c, 0xf, [@uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xe, 0x0, 0x5, "1d2cf8"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x2, 0x4, 0x8, 0x0, "337d820ed2294e6a"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0xc0, 0x0, 0x9, 0x2}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x94, 0x2, 0x5, 0xcd, "4e90"}]}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "97028c26"}, {0x5, 0x24, 0x0, 0xeb2}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x5, 0x5b8d, 0x5d}, {0x6, 0x24, 0x1a, 0x7, 0x38}, [@mdlm_detail={0xb, 0x24, 0x13, 0x0, "b1d895fc534896"}]}], [{{0x9, 0x5, 0x8, 0x2, 0x3ff, 0x7f, 0x0, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x4}]}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x1, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x7}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x3, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x455}, @generic={0xb5, 0x6, "587bba38179578abf51b272a5aaf35c0dfb738d3368566f2845a19f91d0267ccebb02b64ce895e10ff09feeb32c62a7bca7dbf79d22bcc43039855e5c18563a23f3dd4c34abb3eb5718ceb6a51fb2d3b02587524ed936c50d85fc8ac5214b3ebb263c052ee2d84dd23d713e7e83f7fbb9fabee95fe321a4514d96a23d94caa46c2015928264a09ba611aae3a911858f1cd5bd0fa16a52a0afba0c0c5c20105c9f3c30f983bc38d2ac48a6e03267e68b66abde6"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x5, 0x2, 0xc4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x401}]}}, {{0x9, 0x5, 0xa, 0x4, 0x10, 0x40, 0x2c, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x7}, @generic={0xfd, 0x0, "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"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x9, 0x3f, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x5}]}}, {{0x9, 0x5, 0x6, 0x8, 0x3ff, 0xd, 0x81, 0x9}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x2, 0x2, 0x9, [@generic={0xd2, 0x5, "8c535816f2bc49f88ebe523f1937d7e0ca60f305aca26b151cee68a13b16560489970a818f72a236b0da37265f4cf76426b3e17449e51155671eff285aee306cfcf86fa4be4cb00a33aeb0aaaa41c56f29f91a23b31eb094af40d1890e5a9b173ab036c7b1c4ac6a6a4a3b05f63680d06a2a4d5207dbd8d3fe1398b656b68f5711f64177d2b31a894153401826857d7cd27a72e912da2e9dd74922cce64508f6e600948faf6229214999f173d37ce76a8e49183ae1982f2d26c499c5343501766721a1bb2c505611fadba16587114aac"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x9, 0x8, 0x0, [@generic={0x32, 0x2, "b061c320da0f5f147c7ccadcccee301be67b9d7c3e43aedce4edce8b7005dfcc4b9ad34a6540846697cc03e557b34522"}, @uac_iso={0x7, 0x25, 0x1, 0xb08ad8bd8c245a69, 0x0, 0x3}]}}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x201, 0x8, 0x3, 0x7, 0x20, 0x6b}, 0x40, &(0x7f0000000d00)={0x5, 0xf, 0x40, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "28fd15f70fd2ba4de393f9515dcf7f7d"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa2, 0x7b, 0x5, 0x80, 0x8}, @ssp_cap={0x1c, 0x10, 0xa, 0xfd, 0x4, 0x3, 0x2dfe6d826f8d35cb, 0x3, [0x3f30, 0xc000, 0xf0, 0xff3f0f]}]}, 0x1, [{0x49, &(0x7f0000000d40)=@string={0x49, 0x3, "ac04928fccb0cf8719e43d4880b7194c9d1b1a90df437632b374b9b5e13a083344cb2d25fa18a60d6951ab42ccb3621c258d7e1720f4b4d58a938b754f3b5aa0808b3615c425d8"}}]}) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000e00)) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000e40), 0x101040, 0x0) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000e80)=@req={0x6, 0xfffffffe, 0x9, 0xf}, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r7, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c0c4}, 0x4048040) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000001000), 0x103500, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000002040)={0x28, 0x3, r3, 0x0, &(0x7f0000001040)="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", 0x1000, 0x8000000000000001}) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000002080)={@remote, @multicast1, 0x1, 0x4, [@remote, @private=0xa010101, @multicast2, @multicast2]}, 0x20) r9 = dup3(0xffffffffffffffff, r6, 0x80000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f00000020c0)={0x48, 0x7, r9, 0x0, 0x0, 0x0, 0x2, 0xcc4c0, 0x3e90db}) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000002140)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000002180)={{r2}, r10, 0x0, @inherit={0x0, 0xfffffffffffffffc}, @subvolid=0x80000001}) clock_adjtime(0x2, &(0x7f0000003180)={0x30000000000000, 0x81, 0x7, 0x2, 0x8, 0xe, 0x89, 0x8, 0x7, 0x80000001, 0x3, 0x0, 0xe7, 0x2, 0x1, 0x8, 0x8, 0x100, 0x9, 0xfffffffffffffffc, 0x7ff, 0xfffffffffffffff7, 0x4, 0x3, 0x100000000, 0x6}) 4m5.556053107s ago: executing program 6 (id=230): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) ioctl$TCSETA(r1, 0x560a, &(0x7f0000001040)={0xffff, 0x9, 0x8d, 0x0, 0x4, "0d00000100"}) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 4m5.473269304s ago: executing program 6 (id=231): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) (fail_nth: 2) 4m5.434460463s ago: executing program 6 (id=232): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) mount$cgroup2(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x1004000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) 4m5.116893713s ago: executing program 6 (id=234): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "b79e5e602970a4f9", "7ae45252c9de55b4bc6a682567b902a1", "5dcf9f49", "c5cab4a5baa61761"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) 4m4.393847791s ago: executing program 3 (id=236): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={0x3c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffffff8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044855}, 0x8000) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000340)=[{0x11, '\x00', @buffer={"895fbfe837964d26231fb8fabaf91b00746af589df6a522ef9320d8c9513fcaf", 0x20}, 0x54371935}]}) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) 4m4.290864251s ago: executing program 3 (id=237): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m4.061445521s ago: executing program 3 (id=238): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x210, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x0, 0xd, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x2, 0xd, 0x5}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xf, 0x7, 0x5, 0x20, 0x21}, 0x2b, &(0x7f0000000180)={0x5, 0xf, 0x2b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0xd, 0xc1e}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x4, 0xf00f, 0x9, [0x30, 0xff0030]}, @wireless={0xb, 0x10, 0x1, 0x1ecc686df2e439ea, 0x52, 0x8, 0x2e, 0xe3e, 0x40}]}, 0x7, [{0x84, &(0x7f0000000280)=@string={0x84, 0x3, "23f973241d7fedf9ab9ea22dbe0a37e451c0dc7f53c06e7772f68fd7d226beac067188841af1ca5806b5b58c53d151651ad2a4ba683175f50a6331a1add22e472d743288aabfa078b33175b0f041809ed76ef939b36ffdb4ce6f28646575ade198266a54e2b0defa9378314f6c89bfa355ebf3dd658f72682c1b3649cdaf05bf8f0e"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x412}}, {0xcd, &(0x7f0000000440)=@string={0xcd, 0x3, "cb7a1fcf1eaef75c9b3ecda2bc79e61eeffda1ce89d653c5f2e6959be89aa6e8f5be2e174469698260c2266874b67ef4b1e1211d552bf9072118b12ef6c1b970dbfb3a99d41c0b81be0b4051d7d16ff29aee01de48da9bf82faf48537c77b3fcbb5d904ae0ef42007666ba5a2f170764c5a90ae493b813558b9a1ebbfbebf167a944939857641c2e48c5753aa2d4f9f908d943cfe22795b63d75ddb457145be3c998b9a2f9d55034ec0697cf35f19a4136de28c71067f549c0fe50765b96c49ab7439b088954a0138bc93a"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc0c}}]}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000006c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) 4m2.663565804s ago: executing program 3 (id=242): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) mount$cgroup2(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x1004000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) 4m2.591087125s ago: executing program 3 (id=243): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x475c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x6c}, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) (fail_nth: 2) 4m2.036477237s ago: executing program 5 (id=246): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m1.754373269s ago: executing program 5 (id=247): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) 4m1.709331682s ago: executing program 5 (id=248): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="84010000100013072abd700000000000ff0100000000000000000000000000010000000000000000000000000000000100000000000000040200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000330000000a01010000000000000000000000000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000e800000000000000000016000000000000000000000000000000000000000000000000000200000000000000000000004800010078636263286165732900000000000000000000000000000000e9ff00000000000000000000000000000000000000000000000000000000000000000000000000000000004c0012007266633435343328726663343130362867636d0000000029292900000000000000000000000000000000000000000000e77841500f0500000000000000000000c27fd5746ac743d5"], 0x184}}, 0x0) (async, rerun: 64) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) (async, rerun: 64) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) 4m0.485471791s ago: executing program 5 (id=249): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 4m0.48292464s ago: executing program 5 (id=250): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x210, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x0, 0xd, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x2, 0xd, 0x5}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xf, 0x7, 0x5, 0x20, 0x21}, 0x2b, &(0x7f0000000180)={0x5, 0xf, 0x2b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0xd, 0xc1e}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x4, 0xf00f, 0x9, [0x30, 0xff0030]}, @wireless={0xb, 0x10, 0x1, 0x1ecc686df2e439ea, 0x52, 0x8, 0x2e, 0xe3e, 0x40}]}, 0x7, [{0x84, &(0x7f0000000280)=@string={0x84, 0x3, "23f973241d7fedf9ab9ea22dbe0a37e451c0dc7f53c06e7772f68fd7d226beac067188841af1ca5806b5b58c53d151651ad2a4ba683175f50a6331a1add22e472d743288aabfa078b33175b0f041809ed76ef939b36ffdb4ce6f28646575ade198266a54e2b0defa9378314f6c89bfa355ebf3dd658f72682c1b3649cdaf05bf8f0e"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x412}}, {0xcd, &(0x7f0000000440)=@string={0xcd, 0x3, "cb7a1fcf1eaef75c9b3ecda2bc79e61eeffda1ce89d653c5f2e6959be89aa6e8f5be2e174469698260c2266874b67ef4b1e1211d552bf9072118b12ef6c1b970dbfb3a99d41c0b81be0b4051d7d16ff29aee01de48da9bf82faf48537c77b3fcbb5d904ae0ef42007666ba5a2f170764c5a90ae493b813558b9a1ebbfbebf167a944939857641c2e48c5753aa2d4f9f908d943cfe22795b63d75ddb457145be3c998b9a2f9d55034ec0697cf35f19a4136de28c71067f549c0fe50765b96c49ab7439b088954a0138bc93a"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc0c}}]}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000006c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) 3m59.774516977s ago: executing program 5 (id=251): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 3m59.6450714s ago: executing program 35 (id=251): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 3m51.50990332s ago: executing program 36 (id=223): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f07090000002a942183"], 0x0}, 0x0) 3m49.185734911s ago: executing program 37 (id=234): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "b79e5e602970a4f9", "7ae45252c9de55b4bc6a682567b902a1", "5dcf9f49", "c5cab4a5baa61761"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) 3m47.235604359s ago: executing program 38 (id=243): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x475c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x6c}, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) (fail_nth: 2) 3m21.58383913s ago: executing program 8 (id=253): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) (fail_nth: 2) 3m21.177317282s ago: executing program 8 (id=290): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000006, 0x2) timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3}) sync() ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x15, 0x2, 0x1, "11010000001400000100b64c0000005c4b7c1500"}) 3m20.001377661s ago: executing program 8 (id=293): exit_group(0x80000000) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000080)) (async, rerun: 64) exit_group(0x2) (async, rerun: 64) preadv(r0, &(0x7f0000000080), 0x0, 0x7f, 0x2b7) (async) exit_group(0x81) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x54443, 0x0) 3m19.757993027s ago: executing program 39 (id=293): exit_group(0x80000000) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000080)) (async, rerun: 64) exit_group(0x2) (async, rerun: 64) preadv(r0, &(0x7f0000000080), 0x0, 0x7f, 0x2b7) (async) exit_group(0x81) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x54443, 0x0) 7.949161012s ago: executing program 0 (id=1205): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f00000014c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000200)={0x0, "0b85208b190309b08101928813f10b8d21785510657946bde8967500"}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x40, 0x1, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x1, 0xfe, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x2, 0xf, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0xea, 0x3}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x7, 0x8, 0x4, 0x40, 0x5}, 0xaf, &(0x7f00000000c0)={0x5, 0xf, 0xaf, 0x6, [@generic={0x56, 0x10, 0xb, "d7fa8694115132e5168e7b801279db8419f09a9034d23ca3851fa713b1cf94764d1d093d0597eac176c473ced9c2c492598928747558a365d60d1c06600ee4cd6586e76e8b9dccb79d24a5dc0d3c1ff2e075c4"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x2, 0x2, 0x9bda}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x3, 0x0, 0x9, [0xc000, 0xffffc0, 0x3f00, 0xff0000, 0xc0, 0xfffff7]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0xfc, 0x10}, @ssp_cap={0x1c, 0x10, 0xa, 0x68, 0x4, 0x8001, 0xf00, 0xa, [0xff3f0f, 0xc7, 0xf, 0xcf]}]}, 0x1c, [{0x4, &(0x7f0000000180)=@lang_id={0xfffffffffffffd6b, 0x3, 0x2c1d}}]}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000200)={0x0, 0xf, 0x1, "f1"}, 0x0, 0x0}) 7.948677606s ago: executing program 7 (id=1206): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x1100, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 7.912286378s ago: executing program 7 (id=1207): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x82, 0x0) r1 = syz_usb_connect(0x6, 0x36, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0], 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'veth1\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x20, 0x6, "faf554ccac80"}}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000280)={'bridge0\x00', 0x0}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000000)={0x3, "15f442"}, 0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x40044160, 0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r8, 0x0, 0x6, 0x0, &(0x7f0000000080)) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r9, 0x80045515, &(0x7f0000000000)={0x8}) sendmsg$netlink(r7, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180000002e003303"], 0x18}], 0x1, 0x0, 0x0, 0x20000000}, 0x40044000) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000540)=0x9) 5.392868082s ago: executing program 0 (id=1212): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x18, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$bt_hci(r2, 0x0, 0x2, 0x0, &(0x7f0000000080)) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x1, 0x5000002b, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000100)={0x20, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}]}, 0x20}], 0x1}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0x1f3, @time={0x6, 0x3}, 0xf, {0x0, 0x6}, 0x8, 0x0, 0x1}) r6 = socket$inet(0x2, 0x2, 0x1) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r8, 0x5b03, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="0800fbfaffab2be7", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x40}, 0x1c) 4.717570522s ago: executing program 7 (id=1214): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001040)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000080)={0x20, 0xf, 0x6a, {0x6a, 0x30, "1f3e45343d702dc06261390b26a70b96a690f573199becd9d80bca477d26678b51278ac1276ef222adb0f6fb88bfd9a2055f7880d7bbafb61464aaebfc4bad516837bd91f30e76c8e3bbe257fd9d75d0831fc6f1a3e5557288730c557be426fc337c05fcfa49f8c4"}}, &(0x7f0000000100)={0x0, 0x3, 0xd0, @string={0xd0, 0x3, "25aa901d38336defd3c505a0ed35327c2f998f9128e7b45214ea02cabad8d9abd12e8600b7549d2560136f673c3a302699e871e1f4677c2f17ec5952e66538b4ed3ae7d2b2f5b71ff360ca9d9a398fe116247d1e4aa585ab7d7be7094a373d3d4da81c09223521b9a1e0eee5554213afd5b46b31005661e1df1a673a620e1e44062ee3884be57828a2bfa87179962fd9fa4ea50c8bfd753aedd66f598d4b5b40a08dc3b1beed12d06e3298c6670109758dde8dc46e7e05ad6ebd3ad9d51c7168b26f2046d1a07fdfe1e4599adfeb"}}, &(0x7f0000000540)={0x0, 0x22, 0x17, {[@local=@item_012={0x2, 0x2, 0xa, "8d10"}, @global=@item_4={0x3, 0x1, 0x0, "0aa98b44"}, @global=@item_4={0x3, 0x1, 0x6, "b554f025"}, @global=@item_4={0x3, 0x1, 0x2, "f2959c2a"}, @global=@item_4={0x3, 0x1, 0x4, "89671d48"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0xa000, 0x6, 0x1, {0x22, 0x801}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0x7, 0xb3, "1f9397b8c963ea15f774d9819c081fbb94c604161976856f9b4afe6bb1314343b7b714eac96819c0c19b7a3ba42f97b7fbb4eb1a842575ceebc1f986d28eca278154109868cc3641efa1aeaed2add54f471ec17f2dae6a7daf8c15726e8b55e738180bc5bec516f8f8ff543f0cf10a3fdd460eeeac61525648b2f4c6b3eaedc9142f62c5f8480a826972223051329d11c2314eaf6cde7c5f7340155b3f9484d1c560189bdda87c16e2b47ccb1566f0620552b5"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x1, 0x9c, "fd1e7a82019568827f094c09b5a56f373ca390c45be5e699889521bbe14e8f4ddc18fc287bb29e01097b9342b2837f63a60847021f8da1c4d91c5a315637a7a1c553174475ad30d2b7299dcd05b2f32b1c310d894c82b0069b5a2ef3247c2c1110aa2b134cf38a6c9594f730c972981c01dcbe7ae7a14c2db06f3f40451dcde977e384a9164e5c823dd5e3899c48a2002c263f1f68838ade1402c21e"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x1e}}) 4.705636495s ago: executing program 2 (id=1215): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r2, 0x62}, &(0x7f0000000040)=0x8) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000500)={&(0x7f0000000280)='cbc-cast5-avx\x00', &(0x7f0000000340)='/dev/vbi#\x00', 0xff}) r3 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) getpriority(0x2, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, 0xffffffffffffff20) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) accept$nfc_llcp(r5, &(0x7f0000000000), &(0x7f0000000080)=0x60) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000300)=0x800) 4.378585927s ago: executing program 2 (id=1216): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 3.657067128s ago: executing program 0 (id=1217): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0x7}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host_nat=0x6c02, 0x80, 0x174e, 0x9}}, @nested_vmresume={0x130, 0x18}, @out_dx={0x6a, 0x28, {0xb4f2, 0x2, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0xeeee0000, 0xed3d}}, @nested_load_code={0x12e, 0x7a, {0x3, "67470ff243003667410f01ca0fbfc00f780fc7442400a2b40000c7442402b2000000c7442406000000000f011424f2f40fc7583266ba6100b801000000efc744240006000000c744240274d8eb8ac7442406000000000f011424420f009d00680000"}}, @nested_vmresume={0x130, 0x18, 0x1}, @wrmsr={0x65, 0x20, {0xbb9, 0x5}}, @set_irq_handler={0xc8, 0x20, {0x14}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @enable_nested={0x12c, 0x18}], 0x1d2}) ioctl$KVM_RUN(r0, 0xae80, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)={[{0x2b, 'io'}, {0x5a, 'hugetlb'}, {0x2d, 'freezer'}]}, 0x16) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x96, 0xc9, @any, 0x0, 0x1, 0x81, 0x549, 0x6, 0x2}}}, 0x14) r1 = syz_open_dev$dvb_dvr(&(0x7f00000002c0), 0x1, 0x64082) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$DVB_DVR_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000000300)={0x2000, 0x80000, r2}) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000340)="100581ce2a85c9f33f3858d0050cc7b27fda8ec0f6050d511ef23f9137a97fa0868e09d7cedc4f8ff126f2742e0aa9fada00d8899dc4ebfb9e3acea45887e7aa0f5ef21bc897929c9d1d9bf2122bbb4c45a787a0da3a8ed47485c1a2be50bbcd2b12709f3d31dc76950fa129eebb33e98e4e8e1a4b257f9cfe189d5b7f884c4380bcb8ffb308b8f23720feaf4ddd9535e4979e8fe999168ecd6e23f769f0a7fa9f8b0aa45b1284d914938c74703004a6e1074f500d9c6cf502f2025e2938e1334be1054ed1c09ebeafdd821445c60db25ba9ffe4ed6690409f8d2875656891ee15d7f24d86392241e395da8042dbd32abd", 0xf1}], 0x1) pipe(&(0x7f0000000480)) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000500)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000580)={0x4, &(0x7f0000000540)=[{0x5, 0xa4, 0x1, 0xe}, {0xfbff, 0xf6, 0x3, 0xb00f}, {0x80, 0xff, 0x8}, {0xd, 0x9, 0x5, 0x3}]}) 3.368684725s ago: executing program 0 (id=1218): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) 3.187050683s ago: executing program 0 (id=1219): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x210, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x0, 0xd, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x2, 0xd, 0x5}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xf, 0x7, 0x5, 0x20, 0x21}, 0x24, &(0x7f0000000180)={0x5, 0xf, 0x24, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x4, 0xf00f, 0x9, [0x30, 0xff0030]}, @wireless={0xb, 0x10, 0x1, 0x1ecc686df2e439ea, 0x52, 0x8, 0x2e, 0xe3e, 0x40}]}, 0x7, [{0x84, &(0x7f0000000280)=@string={0x84, 0x3, "23f973241d7fedf9ab9ea22dbe0a37e451c0dc7f53c06e7772f68fd7d226beac067188841af1ca5806b5b58c53d151651ad2a4ba683175f50a6331a1add22e472d743288aabfa078b33175b0f041809ed76ef939b36ffdb4ce6f28646575ade198266a54e2b0defa9378314f6c89bfa355ebf3dd658f72682c1b3649cdaf05bf8f0e"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x412}}, {0xcd, &(0x7f0000000440)=@string={0xcd, 0x3, "cb7a1fcf1eaef75c9b3ecda2bc79e61eeffda1ce89d653c5f2e6959be89aa6e8f5be2e174469698260c2266874b67ef4b1e1211d552bf9072118b12ef6c1b970dbfb3a99d41c0b81be0b4051d7d16ff29aee01de48da9bf82faf48537c77b3fcbb5d904ae0ef42007666ba5a2f170764c5a90ae493b813558b9a1ebbfbebf167a944939857641c2e48c5753aa2d4f9f908d943cfe22795b63d75ddb457145be3c998b9a2f9d55034ec0697cf35f19a4136de28c71067f549c0fe50765b96c49ab7439b088954a0138bc93a"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc0c}}]}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f00000006c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) getpeername(r1, 0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) 2.711000228s ago: executing program 9 (id=1223): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0x48, &(0x7f0000000600)=0xdfa, 0x4) ptrace(0x10, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ptrace$ARCH_SET_GS(0x1e, r0, 0x0, 0x1001) 2.600954904s ago: executing program 7 (id=1224): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 2.445204084s ago: executing program 9 (id=1225): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fsopen(&(0x7f0000000080)='hfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\xf3\xec\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\xff4\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n\xa9\x00\x16\x89N\x15\xa0\x19\x03\x88\x00\xce9%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x16c, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0xffffffff}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.396139729s ago: executing program 2 (id=1226): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x11e, 0x1, 0x0, &(0x7f0000000000)) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) socket(0x2b, 0x1, 0x1) socket(0x15, 0x80005, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0xd01, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffff}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x60}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r5, 0x107, 0x16, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1}}], 0x1, 0x0) 2.114500536s ago: executing program 9 (id=1227): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0x7}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host_nat=0x6c02, 0x80, 0x174e, 0x9}}, @nested_vmresume={0x130, 0x18}, @out_dx={0x6a, 0x28, {0xb4f2, 0x2, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0xeeee0000, 0xed3d}}, @nested_load_code={0x12e, 0x7a, {0x3, "67470ff243003667410f01ca0fbfc00f780fc7442400a2b40000c7442402b2000000c7442406000000000f011424f2f40fc7583266ba6100b801000000efc744240006000000c744240274d8eb8ac7442406000000000f011424420f009d00680000"}}, @nested_vmresume={0x130, 0x18, 0x1}, @wrmsr={0x65, 0x20, {0xbb9, 0x5}}, @set_irq_handler={0xc8, 0x20, {0x14}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @enable_nested={0x12c, 0x18}], 0x1d2}) ioctl$KVM_RUN(r0, 0xae80, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)={[{0x2b, 'io'}, {0x5a, 'hugetlb'}, {0x2d, 'freezer'}]}, 0x16) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x96, 0xc9, @any, 0x0, 0x1, 0x81, 0x549, 0x6, 0x2}}}, 0x14) r1 = syz_open_dev$dvb_dvr(&(0x7f00000002c0), 0x1, 0x64082) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$DVB_DVR_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000000300)={0x2000, 0x80000, r2}) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000340)="100581ce2a85c9f33f3858d0050cc7b27fda8ec0f6050d511ef23f9137a97fa0868e09d7cedc4f8ff126f2742e0aa9fada00d8899dc4ebfb9e3acea45887e7aa0f5ef21bc897929c9d1d9bf2122bbb4c45a787a0da3a8ed47485c1a2be50bbcd2b12709f3d31dc76950fa129eebb33e98e4e8e1a4b257f9cfe189d5b7f884c4380bcb8ffb308b8f23720feaf4ddd9535e4979e8fe999168ecd6e23f769f0a7fa9f8b0aa45b1284d914938c74703004a6e1074f500d9c6cf502f2025e2938e1334be1054ed1c09ebeafdd821445c60db25ba9ffe4ed6690409f8d2875656891ee15d7f24d86392241e395da8042dbd32abd", 0xf1}], 0x1) pipe(&(0x7f0000000480)) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000500)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000580)={0x4, &(0x7f0000000540)=[{0x5, 0xa4, 0x1, 0xe}, {0xfbff, 0xf6, 0x3, 0xb00f}, {0x80, 0xff, 0x8}, {0xd, 0x9, 0x5, 0x3}]}) 2.013260892s ago: executing program 2 (id=1228): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) 2.010410165s ago: executing program 9 (id=1236): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x4000, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}]}, 0x138}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x2000fb) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x3, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r2, 0x5412, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) r4 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000040)={0x10, 0x2, 0x5, 0x9}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x10001, 0x6, 0x3, 0x46d3, 0x9, 0x10001, 0xfffeffff, 0x5}) 1.866827482s ago: executing program 2 (id=1229): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x18, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$bt_hci(r2, 0x0, 0x2, 0x0, &(0x7f0000000080)) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x1, 0x5000002b, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000100)={0x20, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}]}, 0x20}], 0x1}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0x1f3, @time={0x6, 0x3}, 0xf, {0x0, 0x6}, 0x8, 0x0, 0x1}) r6 = socket$inet(0x2, 0x2, 0x1) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r8, 0x5b03, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="0800fbfaffab2be7", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x40}, 0x1c) 1.748050489s ago: executing program 0 (id=1230): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0x10000, 0x33524742, 0x640, 0x870, 0x3, @stepwise={{0x80000001, 0x9}, {0x97c1, 0xffffffff}, {0xffffffff, 0x32}}}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000380)={0x0, 0xe, 0x2, '#\t'}, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4a, &(0x7f0000000100)=0xffffffff, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r5, 0x932, 0x200000000005) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x8, 0x5, 0x5, 0x4, 0x0, 0x3ff, 0x8000, 0x2, 0x0, 0x10, 0x8, 0x6, 0xffffffff, 0x7f, 0x1, 0xfff, 0x6, 0x514f, 0x401, 0x6, 0x9, 0x2}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f0000000440)=@add_del={0x2, &(0x7f0000000400)='nicvf0\x00'}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(r9, r8, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r11 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x800, 0xd3, 0x4}, 0x18) renameat(r10, &(0x7f00000000c0)='./file0\x00', r11, &(0x7f0000000200)='./file0\x00') 1.67577672s ago: executing program 7 (id=1231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40805}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x200, 0x6, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x890d}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x120, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x4e}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_TTL={0x5, 0x2, 0xc}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x4}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x64, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6c}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x70}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_USERDATA={0x3f, 0x7, 0x1, 0x0, "def5df5a2e7f1f5facfb84e6a7702ba9f3e26c3110fa81e2698a920eaed60887dfad705b71a5943ee6b3c9a882b095b64eaae99b3c89df78fba5d8"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x228}, 0x1, 0x0, 0x0, 0x80}, 0x20000005) 1.6010825s ago: executing program 9 (id=1232): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x18) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) socket(0xa, 0x3, 0x3a) (async) r3 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'veth1\x00', &(0x7f0000000100)=@ethtool_rx_ntuple={0x35, {0xe, @udp_ip4_spec={@empty, @local, 0x4e23, 0x4e20, 0x1}, @tcp_ip4_spec={@dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010101, 0x4e20, 0x4e20, 0x10}, 0x7ff, 0x40, 0x8, 0x7fffffff, 0xfffffffffffffffe}}}) recvmsg$unix(r3, &(0x7f0000000900)={&(0x7f0000000140), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000480)=""/214, 0xd6}, {&(0x7f0000000580)=""/181, 0xb5}, {&(0x7f0000000640)=""/48, 0x30}, {&(0x7f0000000680)=""/118, 0x76}, {&(0x7f0000000700)=""/138, 0x8a}, {&(0x7f00000007c0)=""/98, 0x62}], 0x6, &(0x7f00000008c0)=[@cred={{0x1c}}], 0x20}, 0x2000) (async) recvmsg$unix(r3, &(0x7f0000000900)={&(0x7f0000000140), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000480)=""/214, 0xd6}, {&(0x7f0000000580)=""/181, 0xb5}, {&(0x7f0000000640)=""/48, 0x30}, {&(0x7f0000000680)=""/118, 0x76}, {&(0x7f0000000700)=""/138, 0x8a}, {&(0x7f00000007c0)=""/98, 0x62}], 0x6, &(0x7f00000008c0)=[@cred={{0x1c}}], 0x20}, 0x2000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r4, 0x9362, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100003d2ab420720c0d009b27010203010902120001000000000904"], 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100003d2ab420720c0d009b27010203010902120001000000000904"], 0x0) 226.128484ms ago: executing program 9 (id=1233): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001040)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000080)={0x20, 0xf, 0x6a, {0x6a, 0x30, "1f3e45343d702dc06261390b26a70b96a690f573199becd9d80bca477d26678b51278ac1276ef222adb0f6fb88bfd9a2055f7880d7bbafb61464aaebfc4bad516837bd91f30e76c8e3bbe257fd9d75d0831fc6f1a3e5557288730c557be426fc337c05fcfa49f8c4"}}, &(0x7f0000000100)={0x0, 0x3, 0xd0, @string={0xd0, 0x3, "25aa901d38336defd3c505a0ed35327c2f998f9128e7b45214ea02cabad8d9abd12e8600b7549d2560136f673c3a302699e871e1f4677c2f17ec5952e66538b4ed3ae7d2b2f5b71ff360ca9d9a398fe116247d1e4aa585ab7d7be7094a373d3d4da81c09223521b9a1e0eee5554213afd5b46b31005661e1df1a673a620e1e44062ee3884be57828a2bfa87179962fd9fa4ea50c8bfd753aedd66f598d4b5b40a08dc3b1beed12d06e3298c6670109758dde8dc46e7e05ad6ebd3ad9d51c7168b26f2046d1a07fdfe1e4599adfeb"}}, &(0x7f0000000540)={0x0, 0x22, 0x17, {[@local=@item_012={0x2, 0x2, 0xa, "8d10"}, @global=@item_4={0x3, 0x1, 0x0, "0aa98b44"}, @global=@item_4={0x3, 0x1, 0x6, "b554f025"}, @global=@item_4={0x3, 0x1, 0x2, "f2959c2a"}, @global=@item_4={0x3, 0x1, 0x4, "89671d48"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0xa000, 0x6, 0x1, {0x22, 0x801}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0x7, 0xb3, "1f9397b8c963ea15f774d9819c081fbb94c604161976856f9b4afe6bb1314343b7b714eac96819c0c19b7a3ba42f97b7fbb4eb1a842575ceebc1f986d28eca278154109868cc3641efa1aeaed2add54f471ec17f2dae6a7daf8c15726e8b55e738180bc5bec516f8f8ff543f0cf10a3fdd460eeeac61525648b2f4c6b3eaedc9142f62c5f8480a826972223051329d11c2314eaf6cde7c5f7340155b3f9484d1c560189bdda87c16e2b47ccb1566f0620552b5"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x1, 0x9c, "fd1e7a82019568827f094c09b5a56f373ca390c45be5e699889521bbe14e8f4ddc18fc287bb29e01097b9342b2837f63a60847021f8da1c4d91c5a315637a7a1c553174475ad30d2b7299dcd05b2f32b1c310d894c82b0069b5a2ef3247c2c1110aa2b134cf38a6c9594f730c972981c01dcbe7ae7a14c2db06f3f40451dcde977e384a9164e5c823dd5e3899c48a2002c263f1f68838ade1402c21e"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x1e}}) 225.737587ms ago: executing program 7 (id=1234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYBLOB], 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fe07124081173809"], 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005580)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x48410) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)=@arm64={0x1, 0x35, 0x96, '\x00', 0xe9}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="100000001900150f27bd7000fcffffffa53e2c3eb7ae722893d4f40cd6b492737aeb2c2a5d679a7af0fcb5615e7820c782fc63bfe2aa6dc729719673f145c574ee3c5616e8c2fb91491e705e2120b6bdf121c59e363f97cf076b1f3f7129c5385e5aecb86109366f668140426cb5fd546ce6e71d560344ea1135735dc62a7271527ce1c184ad0f1afa76917a46564ceef472f2bc4fa8a44fcfdbe77121ba49d5bc3f883e3db51760179dad3ef002bc036006eb"], 0x10}], 0x1}, 0x0) write$char_usb(r1, &(0x7f0000000000)="6bfa3be89c1986a7a6e1abcaf41a34973b617431a06aa7f759ebc8b6837b26", 0x1f) 0s ago: executing program 2 (id=1235): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): [T10299] [ 380.288641][ T4934] Bluetooth: hci4: unexpected event 0x0f length: 80 > 4 [ 380.926389][T10306] FAULT_INJECTION: forcing a failure. [ 380.926389][T10306] name failslab, interval 1, probability 0, space 0, times 0 [ 380.926424][T10306] CPU: 1 UID: 0 PID: 10306 Comm: syz.7.990 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 380.926448][T10306] Tainted: [L]=SOFTLOCKUP [ 380.926455][T10306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 380.926466][T10306] Call Trace: [ 380.926474][T10306] [ 380.926483][T10306] dump_stack_lvl+0xe8/0x150 [ 380.926512][T10306] should_fail_ex+0x46b/0x600 [ 380.926538][T10306] should_failslab+0xa8/0x100 [ 380.926561][T10306] __kmalloc_cache_noprof+0x84/0x690 [ 380.926583][T10306] ? alloc_pipe_info+0xe8/0x4d0 [ 380.926609][T10306] alloc_pipe_info+0xe8/0x4d0 [ 380.926634][T10306] splice_direct_to_actor+0xa19/0xc80 [ 380.926668][T10306] ? kstrtouint+0x6e/0xe0 [ 380.926691][T10306] ? __pfx_direct_splice_actor+0x10/0x10 [ 380.926721][T10306] ? __pfx_aa_file_perm+0x10/0x10 [ 380.926749][T10306] ? __lock_acquire+0x6b5/0x2d10 [ 380.926771][T10306] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 380.926809][T10306] do_splice_direct+0x19b/0x2a0 [ 380.926848][T10306] ? __pfx_do_splice_direct+0x10/0x10 [ 380.926879][T10306] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 380.926903][T10306] ? rw_verify_area+0x25b/0x4e0 [ 380.926923][T10306] do_sendfile+0x547/0x7e0 [ 380.926957][T10306] ? __pfx_do_sendfile+0x10/0x10 [ 380.926997][T10306] __se_sys_sendfile64+0xdf/0x1a0 [ 380.927024][T10306] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 380.927056][T10306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.927077][T10306] do_syscall_64+0x15f/0x560 [ 380.927096][T10306] ? trace_irq_disable+0x3b/0x140 [ 380.927112][T10306] ? clear_bhb_loop+0x40/0x90 [ 380.927132][T10306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.927151][T10306] RIP: 0033:0x7f0d36b6ce59 [ 380.927169][T10306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.927186][T10306] RSP: 002b:00007f0d34dc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 380.927206][T10306] RAX: ffffffffffffffda RBX: 00007f0d36de5fa0 RCX: 00007f0d36b6ce59 [ 380.927220][T10306] RDX: 0000200000000080 RSI: 0000000000000004 RDI: 0000000000000005 [ 380.927233][T10306] RBP: 00007f0d34dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 380.927246][T10306] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 380.927258][T10306] R13: 00007f0d36de6038 R14: 00007f0d36de5fa0 R15: 00007ffd1de2f0e8 [ 380.927288][T10306] [ 381.096483][ T37] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 381.246854][ T37] usb 1-1: Using ep0 maxpacket: 16 [ 381.251980][ T37] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 381.252025][ T37] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 381.252049][ T37] usb 1-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 381.252061][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.264429][ T37] usb 1-1: config 0 descriptor?? [ 381.350226][ T824] usb 3-1: USB disconnect, device number 49 [ 381.732607][ T37] holtek_mouse 0003:04D9:A072.000E: ignoring exceeding usage max [ 381.734014][ T37] holtek_mouse 0003:04D9:A072.000E: ignoring exceeding usage max [ 381.734032][ T37] holtek_mouse 0003:04D9:A072.000E: usage index exceeded [ 381.734044][ T37] holtek_mouse 0003:04D9:A072.000E: item 0 2 2 2 parsing failed [ 381.734597][ T37] holtek_mouse 0003:04D9:A072.000E: hid parse failed: -22 [ 381.734654][ T37] holtek_mouse 0003:04D9:A072.000E: probe with driver holtek_mouse failed with error -22 [ 381.748428][T10324] FAULT_INJECTION: forcing a failure. [ 381.748428][T10324] name failslab, interval 1, probability 0, space 0, times 0 [ 381.748464][T10324] CPU: 1 UID: 0 PID: 10324 Comm: syz.9.998 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 381.748492][T10324] Tainted: [L]=SOFTLOCKUP [ 381.748499][T10324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 381.748511][T10324] Call Trace: [ 381.748519][T10324] [ 381.748527][T10324] dump_stack_lvl+0xe8/0x150 [ 381.748558][T10324] should_fail_ex+0x46b/0x600 [ 381.748586][T10324] should_failslab+0xa8/0x100 [ 381.748609][T10324] __kmalloc_noprof+0xdf/0x7b0 [ 381.748630][T10324] ? tomoyo_encode+0x28b/0x550 [ 381.748662][T10324] tomoyo_encode+0x28b/0x550 [ 381.748694][T10324] tomoyo_realpath_from_path+0x58d/0x5d0 [ 381.748731][T10324] ? tomoyo_path_number_perm+0x219/0x630 [ 381.748755][T10324] tomoyo_path_number_perm+0x246/0x630 [ 381.748779][T10324] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 381.748801][T10324] ? __lock_acquire+0x6b5/0x2d10 [ 381.748827][T10324] ? do_raw_spin_lock+0x12b/0x2f0 [ 381.748873][T10324] ? __fget_files+0x2a/0x420 [ 381.748902][T10324] ? __fget_files+0x2a/0x420 [ 381.748927][T10324] ? __fget_files+0x3a6/0x420 [ 381.748954][T10324] ? __fget_files+0x2a/0x420 [ 381.748984][T10324] security_file_ioctl+0xc3/0x2a0 [ 381.749008][T10324] __se_sys_ioctl+0x47/0x170 [ 381.749030][T10324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.749053][T10324] do_syscall_64+0x15f/0x560 [ 381.749081][T10324] ? trace_irq_disable+0x3b/0x140 [ 381.749102][T10324] ? clear_bhb_loop+0x40/0x90 [ 381.749125][T10324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.749143][T10324] RIP: 0033:0x7fa7088bce59 [ 381.749161][T10324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.749178][T10324] RSP: 002b:00007fa706b0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.749198][T10324] RAX: ffffffffffffffda RBX: 00007fa708b35fa0 RCX: 00007fa7088bce59 [ 381.749211][T10324] RDX: 0000200000000300 RSI: 0000000040085618 RDI: 0000000000000003 [ 381.749221][T10324] RBP: 00007fa706b0e090 R08: 0000000000000000 R09: 0000000000000000 [ 381.749232][T10324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.749244][T10324] R13: 00007fa708b36038 R14: 00007fa708b35fa0 R15: 00007fff6e0fdee8 [ 381.749275][T10324] [ 381.749294][T10324] ERROR: Out of memory at tomoyo_realpath_from_path. [ 381.993267][T10304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.993904][T10304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.021304][ T37] usb 1-1: USB disconnect, device number 34 [ 382.046621][ T824] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 382.196571][ T824] usb 8-1: Using ep0 maxpacket: 16 [ 382.200523][ T824] usb 8-1: config 254 has an invalid interface number: 235 but max is 0 [ 382.200549][ T824] usb 8-1: config 254 has no interface number 0 [ 382.200594][ T824] usb 8-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 382.200618][ T824] usb 8-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 382.200643][ T824] usb 8-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 382.200667][ T824] usb 8-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 382.200688][ T824] usb 8-1: config 254 interface 235 has no altsetting 0 [ 382.203800][ T824] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 382.203828][ T824] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.203848][ T824] usb 8-1: Product: syz [ 382.203862][ T824] usb 8-1: Manufacturer: syz [ 382.203877][ T824] usb 8-1: SerialNumber: syz [ 382.258223][T10322] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 382.297404][ T5715] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 382.350702][ T37] kernel write not supported for file /input/mice (pid: 37 comm: kworker/1:1) [ 382.456844][ T5715] usb 3-1: Using ep0 maxpacket: 8 [ 382.463101][ T824] usbtest 8-1:254.235: couldn't get endpoints, -71 [ 382.463228][ T824] usbtest 8-1:254.235: probe with driver usbtest failed with error -71 [ 382.463465][ T5715] usb 3-1: config 8 has an invalid interface number: 137 but max is 0 [ 382.463487][ T5715] usb 3-1: config 8 has no interface number 0 [ 382.463518][ T5715] usb 3-1: config 8 interface 137 has no altsetting 0 [ 382.465785][ T5715] usb 3-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=7c.79 [ 382.465810][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.465825][ T5715] usb 3-1: Product: syz [ 382.465833][ T5715] usb 3-1: Manufacturer: syz [ 382.465840][ T5715] usb 3-1: SerialNumber: syz [ 382.494246][ T824] usb 8-1: USB disconnect, device number 51 [ 382.793617][ T5715] quatech2 3-1:8.137: Quatech 2nd gen USB to Serial Driver converter detected [ 382.794082][ T5715] usb 3-1: qt2_attach - failed to power on unit: -71 [ 382.794191][ T5715] quatech2 3-1:8.137: probe with driver quatech2 failed with error -71 [ 382.796568][ T824] kernel write not supported for file /input/mice (pid: 824 comm: kworker/1:2) [ 382.855340][ T5715] usb 3-1: USB disconnect, device number 50 [ 382.964315][T10340] FAULT_INJECTION: forcing a failure. [ 382.964315][T10340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.964352][T10340] CPU: 0 UID: 0 PID: 10340 Comm: syz.9.1005 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 382.964379][T10340] Tainted: [L]=SOFTLOCKUP [ 382.964386][T10340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 382.964399][T10340] Call Trace: [ 382.964407][T10340] [ 382.964416][T10340] dump_stack_lvl+0xe8/0x150 [ 382.964445][T10340] should_fail_ex+0x46b/0x600 [ 382.964472][T10340] _copy_from_user+0x2d/0xb0 [ 382.964501][T10340] memdup_user+0x5e/0xd0 [ 382.964529][T10340] strndup_user+0x68/0xd0 [ 382.964558][T10340] __se_sys_mount+0x9d/0x420 [ 382.964587][T10340] ? ksys_write+0x248/0x270 [ 382.964615][T10340] ? __pfx___se_sys_mount+0x10/0x10 [ 382.964647][T10340] ? __x64_sys_mount+0x20/0xc0 [ 382.964670][T10340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.964691][T10340] do_syscall_64+0x15f/0x560 [ 382.964713][T10340] ? trace_irq_disable+0x3b/0x140 [ 382.964733][T10340] ? clear_bhb_loop+0x40/0x90 [ 382.964758][T10340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.964778][T10340] RIP: 0033:0x7fa7088bce59 [ 382.964796][T10340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.964815][T10340] RSP: 002b:00007fa706b0e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 382.964836][T10340] RAX: ffffffffffffffda RBX: 00007fa708b35fa0 RCX: 00007fa7088bce59 [ 382.964852][T10340] RDX: 0000200000000040 RSI: 0000200000000580 RDI: 0000000000000000 [ 382.964866][T10340] RBP: 00007fa706b0e090 R08: 0000200000000400 R09: 0000000000000000 [ 382.964880][T10340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.964893][T10340] R13: 00007fa708b36038 R14: 00007fa708b35fa0 R15: 00007fff6e0fdee8 [ 382.964928][T10340] [ 383.196281][T10344] CUSE: info not properly terminated [ 383.559587][T10363] FAULT_INJECTION: forcing a failure. [ 383.559587][T10363] name failslab, interval 1, probability 0, space 0, times 0 [ 383.559623][T10363] CPU: 0 UID: 0 PID: 10363 Comm: syz.9.1011 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 383.559651][T10363] Tainted: [L]=SOFTLOCKUP [ 383.559659][T10363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 383.559670][T10363] Call Trace: [ 383.559678][T10363] [ 383.559688][T10363] dump_stack_lvl+0xe8/0x150 [ 383.559718][T10363] should_fail_ex+0x46b/0x600 [ 383.559745][T10363] should_failslab+0xa8/0x100 [ 383.559769][T10363] __kmalloc_noprof+0xdf/0x7b0 [ 383.559791][T10363] ? tomoyo_encode+0x28b/0x550 [ 383.559823][T10363] tomoyo_encode+0x28b/0x550 [ 383.559855][T10363] tomoyo_realpath_from_path+0x58d/0x5d0 [ 383.559893][T10363] ? tomoyo_path_number_perm+0x219/0x630 [ 383.559923][T10363] tomoyo_path_number_perm+0x246/0x630 [ 383.559949][T10363] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 383.559972][T10363] ? __lock_acquire+0x6b5/0x2d10 [ 383.559997][T10363] ? do_raw_spin_lock+0x12b/0x2f0 [ 383.560047][T10363] ? __fget_files+0x2a/0x420 [ 383.560079][T10363] ? __fget_files+0x2a/0x420 [ 383.560105][T10363] ? __fget_files+0x3a6/0x420 [ 383.560132][T10363] ? __fget_files+0x2a/0x420 [ 383.560164][T10363] security_file_ioctl+0xc3/0x2a0 [ 383.560188][T10363] __se_sys_ioctl+0x47/0x170 [ 383.560211][T10363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.560233][T10363] do_syscall_64+0x15f/0x560 [ 383.560254][T10363] ? trace_irq_disable+0x3b/0x140 [ 383.560276][T10363] ? clear_bhb_loop+0x40/0x90 [ 383.560300][T10363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.560323][T10363] RIP: 0033:0x7fa7088bce59 [ 383.560342][T10363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.560359][T10363] RSP: 002b:00007fa706b0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 383.560380][T10363] RAX: ffffffffffffffda RBX: 00007fa708b35fa0 RCX: 00007fa7088bce59 [ 383.560395][T10363] RDX: 0000200000000180 RSI: 0000000040946400 RDI: 0000000000000003 [ 383.560409][T10363] RBP: 00007fa706b0e090 R08: 0000000000000000 R09: 0000000000000000 [ 383.560422][T10363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.560433][T10363] R13: 00007fa708b36038 R14: 00007fa708b35fa0 R15: 00007fff6e0fdee8 [ 383.560462][T10363] [ 383.561377][T10363] ERROR: Out of memory at tomoyo_realpath_from_path. [ 383.672717][T10365] FAULT_INJECTION: forcing a failure. [ 383.672717][T10365] name failslab, interval 1, probability 0, space 0, times 0 [ 383.672753][T10365] CPU: 1 UID: 0 PID: 10365 Comm: syz.2.1015 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 383.672779][T10365] Tainted: [L]=SOFTLOCKUP [ 383.672787][T10365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 383.672799][T10365] Call Trace: [ 383.672807][T10365] [ 383.672815][T10365] dump_stack_lvl+0xe8/0x150 [ 383.672844][T10365] should_fail_ex+0x46b/0x600 [ 383.672870][T10365] should_failslab+0xa8/0x100 [ 383.672893][T10365] __kmalloc_noprof+0xdf/0x7b0 [ 383.672913][T10365] ? tomoyo_encode+0x28b/0x550 [ 383.672943][T10365] tomoyo_encode+0x28b/0x550 [ 383.672973][T10365] tomoyo_realpath_from_path+0x58d/0x5d0 [ 383.673008][T10365] ? tomoyo_path_number_perm+0x219/0x630 [ 383.673031][T10365] tomoyo_path_number_perm+0x246/0x630 [ 383.673059][T10365] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 383.673080][T10365] ? __lock_acquire+0x6b5/0x2d10 [ 383.673104][T10365] ? do_raw_spin_lock+0x12b/0x2f0 [ 383.673151][T10365] ? __fget_files+0x2a/0x420 [ 383.673178][T10365] ? __fget_files+0x2a/0x420 [ 383.673202][T10365] ? __fget_files+0x3a6/0x420 [ 383.673225][T10365] ? __fget_files+0x2a/0x420 [ 383.673254][T10365] security_file_ioctl+0xc3/0x2a0 [ 383.673277][T10365] __se_sys_ioctl+0x47/0x170 [ 383.673299][T10365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.673320][T10365] do_syscall_64+0x15f/0x560 [ 383.673341][T10365] ? trace_irq_disable+0x3b/0x140 [ 383.673361][T10365] ? clear_bhb_loop+0x40/0x90 [ 383.673384][T10365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.673403][T10365] RIP: 0033:0x7fb0e474ce59 [ 383.673421][T10365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.673438][T10365] RSP: 002b:00007fb0e29a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 383.673458][T10365] RAX: ffffffffffffffda RBX: 00007fb0e49c5fa0 RCX: 00007fb0e474ce59 [ 383.673472][T10365] RDX: 0000200000000080 RSI: 00000000000007a6 RDI: 0000000000000003 [ 383.673485][T10365] RBP: 00007fb0e29a6090 R08: 0000000000000000 R09: 0000000000000000 [ 383.673498][T10365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.673509][T10365] R13: 00007fb0e49c6038 R14: 00007fb0e49c5fa0 R15: 00007ffca4b7a188 [ 383.673540][T10365] [ 383.673581][T10365] ERROR: Out of memory at tomoyo_realpath_from_path. [ 384.144186][T10371] can: request_module (can-proto-4) failed. [ 384.288311][T10383] FAULT_INJECTION: forcing a failure. [ 384.288311][T10383] name failslab, interval 1, probability 0, space 0, times 0 [ 384.288347][T10383] CPU: 1 UID: 0 PID: 10383 Comm: syz.0.1020 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 384.288374][T10383] Tainted: [L]=SOFTLOCKUP [ 384.288382][T10383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 384.288395][T10383] Call Trace: [ 384.288403][T10383] [ 384.288412][T10383] dump_stack_lvl+0xe8/0x150 [ 384.288442][T10383] should_fail_ex+0x46b/0x600 [ 384.288470][T10383] should_failslab+0xa8/0x100 [ 384.288493][T10383] __kmalloc_cache_noprof+0x84/0x690 [ 384.288515][T10383] ? sctp_association_new+0x89/0x25e0 [ 384.288543][T10383] sctp_association_new+0x89/0x25e0 [ 384.288581][T10383] sctp_connect_new_asoc+0x2e4/0x6b0 [ 384.288608][T10383] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 384.288640][T10383] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 384.288663][T10383] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 384.288685][T10383] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 384.288708][T10383] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 384.288732][T10383] ? security_sctp_bind_connect+0x7e/0x2c0 [ 384.288756][T10383] sctp_sendmsg+0x14f2/0x29b0 [ 384.288792][T10383] ? __pfx_sctp_sendmsg+0x10/0x10 [ 384.288823][T10383] ? aa_sk_perm+0x703/0x950 [ 384.288853][T10383] ? __pfx_aa_sk_perm+0x10/0x10 [ 384.288875][T10383] ? sock_rps_record_flow+0x19/0x350 [ 384.288907][T10383] ? inet_sendmsg+0x2f4/0x370 [ 384.288934][T10383] ? aa_sock_msg_perm+0x122/0x200 [ 384.288960][T10383] ? __pfx_inet_sendmsg+0x10/0x10 [ 384.288988][T10383] sock_sendmsg_nosec+0xf9/0x150 [ 384.289018][T10383] __sys_sendto+0x402/0x590 [ 384.289044][T10383] ? __pfx___sys_sendto+0x10/0x10 [ 384.289088][T10383] ? ksys_write+0x248/0x270 [ 384.289111][T10383] ? __pfx_ksys_write+0x10/0x10 [ 384.289136][T10383] __x64_sys_sendto+0xde/0x100 [ 384.289160][T10383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.289182][T10383] do_syscall_64+0x15f/0x560 [ 384.289204][T10383] ? trace_irq_disable+0x3b/0x140 [ 384.289224][T10383] ? clear_bhb_loop+0x40/0x90 [ 384.289249][T10383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.289269][T10383] RIP: 0033:0x7f679573ce59 [ 384.289288][T10383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.289305][T10383] RSP: 002b:00007f679398e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 384.289326][T10383] RAX: ffffffffffffffda RBX: 00007f67959b5fa0 RCX: 00007f679573ce59 [ 384.289341][T10383] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 384.289354][T10383] RBP: 00007f679398e090 R08: 00002000000000c0 R09: 000000000000001c [ 384.289368][T10383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.289381][T10383] R13: 00007f67959b6038 R14: 00007f67959b5fa0 R15: 00007ffcb57f18a8 [ 384.289412][T10383] [ 384.565228][T10389] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1023'. [ 384.821165][T10396] FAULT_INJECTION: forcing a failure. [ 384.821165][T10396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.821200][T10396] CPU: 0 UID: 0 PID: 10396 Comm: syz.9.1027 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 384.821226][T10396] Tainted: [L]=SOFTLOCKUP [ 384.821232][T10396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 384.821243][T10396] Call Trace: [ 384.821251][T10396] [ 384.821259][T10396] dump_stack_lvl+0xe8/0x150 [ 384.821286][T10396] should_fail_ex+0x46b/0x600 [ 384.821312][T10396] _copy_from_iter+0x1d3/0x1670 [ 384.821346][T10396] ? __pfx__copy_from_iter+0x10/0x10 [ 384.821369][T10396] ? trace_kmalloc+0x2a/0xf0 [ 384.821392][T10396] ? rcu_is_watching+0x15/0xb0 [ 384.821425][T10396] file_tty_write+0x4c9/0xa10 [ 384.821456][T10396] vfs_write+0x629/0xba0 [ 384.821483][T10396] ? __pfx_vfs_write+0x10/0x10 [ 384.821513][T10396] ? __fget_files+0x2a/0x420 [ 384.821552][T10396] ksys_write+0x156/0x270 [ 384.821583][T10396] ? __pfx_ksys_write+0x10/0x10 [ 384.821611][T10396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.821632][T10396] do_syscall_64+0x15f/0x560 [ 384.821652][T10396] ? trace_irq_disable+0x3b/0x140 [ 384.821673][T10396] ? clear_bhb_loop+0x40/0x90 [ 384.821698][T10396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.821715][T10396] RIP: 0033:0x7fa7088bce59 [ 384.821733][T10396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.821749][T10396] RSP: 002b:00007fa706b0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 384.821769][T10396] RAX: ffffffffffffffda RBX: 00007fa708b35fa0 RCX: 00007fa7088bce59 [ 384.821783][T10396] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000003 [ 384.821795][T10396] RBP: 00007fa706b0e090 R08: 0000000000000000 R09: 0000000000000000 [ 384.821808][T10396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.821819][T10396] R13: 00007fa708b36038 R14: 00007fa708b35fa0 R15: 00007fff6e0fdee8 [ 384.821850][T10396] [ 385.016496][ T5715] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 385.190662][ T5715] usb 1-1: unable to get BOS descriptor or descriptor too short [ 385.191178][ T5715] usb 1-1: not running at top speed; connect to a high speed hub [ 385.191236][ T5715] usb 1-1: no configurations [ 385.191244][ T5715] usb 1-1: can't read configurations, error -22 [ 385.318300][ T5715] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 385.372101][T10411] FAULT_INJECTION: forcing a failure. [ 385.372101][T10411] name failslab, interval 1, probability 0, space 0, times 0 [ 385.372138][T10411] CPU: 0 UID: 0 PID: 10411 Comm: syz.2.1032 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 385.372167][T10411] Tainted: [L]=SOFTLOCKUP [ 385.372175][T10411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 385.372187][T10411] Call Trace: [ 385.372194][T10411] [ 385.372203][T10411] dump_stack_lvl+0xe8/0x150 [ 385.372231][T10411] should_fail_ex+0x46b/0x600 [ 385.372255][T10411] should_failslab+0xa8/0x100 [ 385.372277][T10411] __kmalloc_noprof+0xdf/0x7b0 [ 385.372299][T10411] ? sock_kmalloc+0xd6/0x160 [ 385.372320][T10411] ? __local_bh_enable+0x1e1/0x2f0 [ 385.372370][T10411] sock_kmalloc+0xd6/0x160 [ 385.372395][T10411] af_alg_alloc_areq+0x99/0x200 [ 385.372425][T10411] skcipher_recvmsg+0x321/0x1140 [ 385.372463][T10411] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 385.372481][T10411] ? __lock_acquire+0x6b5/0x2d10 [ 385.372507][T10411] ? aa_sock_msg_perm+0x122/0x200 [ 385.372532][T10411] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 385.372552][T10411] sock_recvmsg_nosec+0x10c/0x140 [ 385.372581][T10411] ____sys_recvmsg+0x23d/0x4f0 [ 385.372611][T10411] ? __pfx_____sys_recvmsg+0x10/0x10 [ 385.372647][T10411] ? import_iovec+0x73/0xa0 [ 385.372674][T10411] ___sys_recvmsg+0x215/0x590 [ 385.372693][T10411] ? get_pid_task+0x20/0x1f0 [ 385.372717][T10411] ? __pfx____sys_recvmsg+0x10/0x10 [ 385.372744][T10411] ? __fget_files+0x2a/0x420 [ 385.372796][T10411] ? __fget_files+0x3a6/0x420 [ 385.372831][T10411] __x64_sys_recvmsg+0x1c0/0x2a0 [ 385.372857][T10411] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 385.372887][T10411] ? __pfx_ksys_write+0x10/0x10 [ 385.372915][T10411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.372935][T10411] do_syscall_64+0x15f/0x560 [ 385.372953][T10411] ? trace_irq_disable+0x3b/0x140 [ 385.372973][T10411] ? clear_bhb_loop+0x40/0x90 [ 385.372996][T10411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.373015][T10411] RIP: 0033:0x7fb0e474ce59 [ 385.373033][T10411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.373049][T10411] RSP: 002b:00007fb0e29a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 385.373071][T10411] RAX: ffffffffffffffda RBX: 00007fb0e49c5fa0 RCX: 00007fb0e474ce59 [ 385.373086][T10411] RDX: 0000000000010150 RSI: 00002000000000c0 RDI: 0000000000000004 [ 385.373099][T10411] RBP: 00007fb0e29a6090 R08: 0000000000000000 R09: 0000000000000000 [ 385.373112][T10411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.373124][T10411] R13: 00007fb0e49c6038 R14: 00007fb0e49c5fa0 R15: 00007ffca4b7a188 [ 385.373154][T10411] [ 385.594444][ T5715] usb 1-1: unable to get BOS descriptor or descriptor too short [ 385.626491][ T5715] usb 1-1: not running at top speed; connect to a high speed hub [ 385.626563][ T5715] usb 1-1: no configurations [ 385.626574][ T5715] usb 1-1: can't read configurations, error -22 [ 385.627806][ T824] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 385.714474][ T5715] usb usb1-port1: attempt power cycle [ 385.856460][ T824] usb 10-1: Using ep0 maxpacket: 8 [ 385.861201][ T824] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 385.861242][ T824] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 385.861255][ T824] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 385.861267][ T824] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 385.861279][ T824] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.861305][ T824] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 385.861317][ T824] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.066641][ T5715] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 386.068135][ T824] usb 10-1: usb_control_msg returned -32 [ 386.068176][ T824] usbtmc 10-1:16.0: can't read capabilities [ 386.069720][ T10] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 386.107886][ T5715] usb 1-1: unable to get BOS descriptor or descriptor too short [ 386.119191][ T5715] usb 1-1: not running at top speed; connect to a high speed hub [ 386.119236][ T5715] usb 1-1: no configurations [ 386.119243][ T5715] usb 1-1: can't read configurations, error -22 [ 386.220663][ T10] usb 8-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 386.220699][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.220710][ T10] usb 8-1: Product: syz [ 386.220717][ T10] usb 8-1: Manufacturer: syz [ 386.220725][ T10] usb 8-1: SerialNumber: syz [ 386.225110][ T10] usb 8-1: config 0 descriptor?? [ 386.266964][ T5715] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 386.267112][ T5797] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 386.311425][ T5715] usb 1-1: unable to get BOS descriptor or descriptor too short [ 386.312012][ T5715] usb 1-1: not running at top speed; connect to a high speed hub [ 386.312075][ T5715] usb 1-1: no configurations [ 386.312088][ T5715] usb 1-1: can't read configurations, error -22 [ 386.312491][ T5715] usb usb1-port1: unable to enumerate USB device [ 386.439312][ T5797] usb 3-1: Using ep0 maxpacket: 8 [ 386.444083][T10406] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 386.468952][ T5715] usb 10-1: USB disconnect, device number 50 [ 386.471566][ T5797] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 386.471594][ T5797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.471612][ T5797] usb 3-1: Product: syz [ 386.471624][ T5797] usb 3-1: Manufacturer: syz [ 386.471638][ T5797] usb 3-1: SerialNumber: syz [ 386.582816][ T5797] usb 3-1: config 0 descriptor?? [ 386.613255][ T5797] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 386.668901][ T10] usb 8-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 386.668932][ T10] f81604 8-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 386.668967][ T10] f81604 8-1:0.0: probe with driver f81604 failed with error -71 [ 386.683717][ T10] usb 8-1: USB disconnect, device number 52 [ 387.766488][ T5715] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 387.826695][ T10] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 387.928990][ T5715] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 387.929023][ T5715] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 387.929198][ T5715] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 387.932569][ T5715] usb 8-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 387.932597][ T5715] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.932616][ T5715] usb 8-1: Product: syz [ 387.932840][ T5715] usb 8-1: Manufacturer: syz [ 387.932856][ T5715] usb 8-1: SerialNumber: syz [ 387.976540][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 387.980585][ T10] usb 10-1: config 1 has an invalid interface number: 5 but max is 2 [ 387.980611][ T10] usb 10-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 387.980640][ T10] usb 10-1: config 1 has no interface number 3 [ 387.980728][ T10] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 237, changing to 7 [ 387.980754][ T10] usb 10-1: config 1 interface 2 has no altsetting 0 [ 387.983084][ T10] usb 10-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 387.983110][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.983130][ T10] usb 10-1: Product: syz [ 387.983144][ T10] usb 10-1: Manufacturer: syz [ 387.983159][ T10] usb 10-1: SerialNumber: syz [ 388.029062][ T10] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 388.056405][ T5797] gspca_sonixj: i2c_w8 err -71 [ 388.093372][ T5715] usb 8-1: config 0 descriptor?? [ 388.107554][ T5797] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 388.125634][ T5797] usb 3-1: USB disconnect, device number 51 [ 388.141931][ T5715] iguanair 8-1:0.0: probe with driver iguanair failed with error -12 [ 388.215026][ T10] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 388.215051][ T10] usb 10-1: selecting invalid altsetting 0 [ 388.215072][ T10] usb 10-1: 0:3 : does not exist [ 388.311952][ T5351] usb 8-1: USB disconnect, device number 53 [ 388.414237][ T10] usb 10-1: USB disconnect, device number 51 [ 388.557472][ T9337] udevd[9337]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 389.020907][T10462] FAULT_INJECTION: forcing a failure. [ 389.020907][T10462] name failslab, interval 1, probability 0, space 0, times 0 [ 389.020943][T10462] CPU: 0 UID: 0 PID: 10462 Comm: syz.7.1051 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 389.020972][T10462] Tainted: [L]=SOFTLOCKUP [ 389.020979][T10462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 389.020992][T10462] Call Trace: [ 389.021000][T10462] [ 389.021008][T10462] dump_stack_lvl+0xe8/0x150 [ 389.021038][T10462] should_fail_ex+0x46b/0x600 [ 389.021066][T10462] should_failslab+0xa8/0x100 [ 389.021090][T10462] __kmalloc_noprof+0xdf/0x7b0 [ 389.021111][T10462] ? tomoyo_encode+0x28b/0x550 [ 389.021142][T10462] tomoyo_encode+0x28b/0x550 [ 389.021173][T10462] tomoyo_realpath_from_path+0x58d/0x5d0 [ 389.021210][T10462] ? tomoyo_path_number_perm+0x219/0x630 [ 389.021233][T10462] tomoyo_path_number_perm+0x246/0x630 [ 389.021259][T10462] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 389.021281][T10462] ? __lock_acquire+0x6b5/0x2d10 [ 389.021316][T10462] ? do_raw_spin_lock+0x12b/0x2f0 [ 389.021365][T10462] ? __fget_files+0x2a/0x420 [ 389.021397][T10462] ? __fget_files+0x2a/0x420 [ 389.021423][T10462] ? __fget_files+0x3a6/0x420 [ 389.021454][T10462] ? __fget_files+0x2a/0x420 [ 389.021486][T10462] security_file_ioctl+0xc3/0x2a0 [ 389.021513][T10462] __se_sys_ioctl+0x47/0x170 [ 389.021539][T10462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.021560][T10462] do_syscall_64+0x15f/0x560 [ 389.021580][T10462] ? trace_irq_disable+0x3b/0x140 [ 389.021606][T10462] ? clear_bhb_loop+0x40/0x90 [ 389.021630][T10462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.021653][T10462] RIP: 0033:0x7f0d36b6ce59 [ 389.021671][T10462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.021689][T10462] RSP: 002b:00007f0d34dc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 389.021711][T10462] RAX: ffffffffffffffda RBX: 00007f0d36de5fa0 RCX: 00007f0d36b6ce59 [ 389.021724][T10462] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 389.021737][T10462] RBP: 00007f0d34dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 389.021749][T10462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.021762][T10462] R13: 00007f0d36de6038 R14: 00007f0d36de5fa0 R15: 00007ffd1de2f0e8 [ 389.021792][T10462] [ 389.021833][T10462] ERROR: Out of memory at tomoyo_realpath_from_path. [ 389.429104][ T5821] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 389.586737][ T5821] usb 10-1: Using ep0 maxpacket: 16 [ 389.588848][ T5821] usb 10-1: config index 0 descriptor too short (expected 51443, got 18) [ 389.608067][ T5821] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 389.608093][ T5821] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.608104][ T5821] usb 10-1: Product: syz [ 389.608112][ T5821] usb 10-1: Manufacturer: syz [ 389.608120][ T5821] usb 10-1: SerialNumber: syz [ 389.653805][ T5821] r8152-cfgselector 10-1: Unknown version 0x0000 [ 389.653832][ T5821] r8152-cfgselector 10-1: config 0 descriptor?? [ 389.717000][ T5351] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 389.796744][ T824] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 389.865900][T10466] kAFS: No cell specified [ 389.889462][ T5351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.889493][ T5351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.889513][ T5351] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 389.889551][ T5351] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 389.889571][ T5351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.954984][ T5351] usb 1-1: config 0 descriptor?? [ 389.962586][ T5715] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 389.999894][ T824] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.999930][ T824] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 389.999942][ T824] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.010974][ T824] usb 8-1: config 0 descriptor?? [ 390.022865][ T824] pwc: Askey VC010 type 2 USB webcam detected. [ 390.113016][ T5797] r8152-cfgselector 10-1: USB disconnect, device number 52 [ 390.119663][ T5715] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 390.119693][ T5715] usb 3-1: config 0 interface 0 has no altsetting 0 [ 390.126665][ T5715] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 390.126693][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 390.126774][ T5715] usb 3-1: Product: syz [ 390.126789][ T5715] usb 3-1: Manufacturer: syz [ 390.126803][ T5715] usb 3-1: SerialNumber: syz [ 390.180716][ T5715] usb 3-1: config 0 descriptor?? [ 390.239336][T10475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.251709][T10475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.287134][ T5715] usb 3-1: selecting invalid altsetting 0 [ 390.479023][T10478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.482167][T10478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.493406][ T824] pwc: recv_control_msg error -32 req 02 val 2b00 [ 390.501561][ T824] pwc: recv_control_msg error -32 req 02 val 2700 [ 390.703603][ T824] pwc: recv_control_msg error -32 req 04 val 1000 [ 390.965136][ T5715] usb 3-1: USB disconnect, device number 52 [ 390.967541][ T824] pwc: recv_control_msg error -71 req 04 val 1400 [ 390.969781][ T824] pwc: recv_control_msg error -71 req 02 val 2000 [ 390.970372][ T824] pwc: recv_control_msg error -71 req 02 val 2100 [ 390.970948][ T824] pwc: recv_control_msg error -71 req 04 val 1500 [ 390.971400][ T824] pwc: recv_control_msg error -71 req 02 val 2500 [ 390.971858][ T824] pwc: recv_control_msg error -71 req 02 val 2400 [ 390.972411][ T824] pwc: recv_control_msg error -71 req 02 val 2600 [ 390.972859][ T824] pwc: recv_control_msg error -71 req 02 val 2900 [ 390.973288][ T824] pwc: recv_control_msg error -71 req 02 val 2800 [ 390.975140][ T824] pwc: recv_control_msg error -71 req 04 val 1100 [ 390.979333][ T824] pwc: recv_control_msg error -71 req 04 val 1200 [ 391.369590][ T824] pwc: Registered as video103. [ 391.386693][ T5797] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 391.434633][ T824] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input28 [ 391.543873][ T5797] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 391.543906][ T5797] usb 10-1: config 0 interface 0 has no altsetting 0 [ 391.574492][ T5797] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 391.574522][ T5797] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 391.574542][ T5797] usb 10-1: Product: syz [ 391.574556][ T5797] usb 10-1: Manufacturer: syz [ 391.574570][ T5797] usb 10-1: SerialNumber: syz [ 391.594882][ T824] usb 8-1: USB disconnect, device number 54 [ 391.643631][ T9470] udevd[9470]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 391.793140][T10494] vxcan0: tx address claim with different name [ 391.821843][ T5797] usb 10-1: config 0 descriptor?? [ 391.950098][ T5797] usb 10-1: selecting invalid altsetting 0 [ 392.278012][ T5351] usbhid 1-1:0.0: can't add hid device: -71 [ 392.278139][ T5351] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 392.308286][ T5351] usb 1-1: USB disconnect, device number 39 [ 392.410335][T10500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.431805][T10500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.600382][ T5797] usb 10-1: USB disconnect, device number 53 [ 392.659089][ T9519] udevd[9519]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 392.879372][ T824] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 392.910456][T10504] Lens A: ================= START STATUS ================= [ 392.910507][T10504] Lens A: Focus, Absolute: 0 [ 392.910534][T10504] Lens A: ================== END STATUS ================== [ 393.050194][ T824] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 393.050225][ T824] usb 8-1: config 0 interface 0 has no altsetting 0 [ 393.074893][ T824] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 393.074923][ T824] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 393.074941][ T824] usb 8-1: Product: syz [ 393.074954][ T824] usb 8-1: Manufacturer: syz [ 393.074967][ T824] usb 8-1: SerialNumber: syz [ 393.102576][ T824] usb 8-1: config 0 descriptor?? [ 393.180487][ T824] usb 8-1: selecting invalid altsetting 0 [ 393.346967][ T5821] usb 8-1: USB disconnect, device number 55 [ 393.386790][ T5351] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 393.399652][T10512] FAULT_INJECTION: forcing a failure. [ 393.399652][T10512] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 393.399675][T10512] CPU: 1 UID: 0 PID: 10512 Comm: syz.9.1068 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 393.399691][T10512] Tainted: [L]=SOFTLOCKUP [ 393.399695][T10512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 393.399702][T10512] Call Trace: [ 393.399706][T10512] [ 393.399712][T10512] dump_stack_lvl+0xe8/0x150 [ 393.399730][T10512] should_fail_ex+0x46b/0x600 [ 393.399745][T10512] prepare_alloc_pages+0x22a/0x6b0 [ 393.399761][T10512] __alloc_frozen_pages_noprof+0x12f/0x380 [ 393.399776][T10512] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 393.399791][T10512] ? __pfx_policy_nodemask+0x10/0x10 [ 393.399802][T10512] ? rcu_is_watching+0x15/0xb0 [ 393.399816][T10512] ? trace_kmalloc+0x2a/0xf0 [ 393.399830][T10512] alloc_pages_mpol+0xd1/0x380 [ 393.399844][T10512] alloc_pages_noprof+0xd2/0x2f0 [ 393.399857][T10512] af_alg_sendmsg+0x136f/0x21f0 [ 393.399873][T10512] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 393.399895][T10512] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 393.399909][T10512] ? lockdep_hardirqs_on+0x7a/0x110 [ 393.399922][T10512] ? skcipher_check_key+0x173/0x1e0 [ 393.399935][T10512] ? skcipher_sendmsg_nokey+0x59/0x120 [ 393.399946][T10512] ? __pfx_skcipher_sendmsg_nokey+0x10/0x10 [ 393.399964][T10512] sock_sendmsg_nosec+0x112/0x150 [ 393.399981][T10512] __sys_sendto+0x402/0x590 [ 393.399994][T10512] ? __pfx___sys_sendto+0x10/0x10 [ 393.400015][T10512] ? ksys_write+0x248/0x270 [ 393.400028][T10512] ? __pfx_ksys_write+0x10/0x10 [ 393.400042][T10512] __x64_sys_sendto+0xde/0x100 [ 393.400052][T10512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.400063][T10512] do_syscall_64+0x15f/0x560 [ 393.400074][T10512] ? trace_irq_disable+0x3b/0x140 [ 393.400086][T10512] ? clear_bhb_loop+0x40/0x90 [ 393.400099][T10512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.400109][T10512] RIP: 0033:0x7fa7088bce59 [ 393.400120][T10512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.400133][T10512] RSP: 002b:00007fa706b0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 393.400144][T10512] RAX: ffffffffffffffda RBX: 00007fa708b35fa0 RCX: 00007fa7088bce59 [ 393.400152][T10512] RDX: 703d59595f6742a8 RSI: 0000200000000440 RDI: 0000000000000006 [ 393.400159][T10512] RBP: 00007fa706b0e090 R08: 0000000000000000 R09: 0000000000000000 [ 393.400166][T10512] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 393.400172][T10512] R13: 00007fa708b36038 R14: 00007fa708b35fa0 R15: 00007fff6e0fdee8 [ 393.400188][T10512] [ 393.710270][ T5351] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 393.710301][ T5351] usb 1-1: config 0 interface 0 has no altsetting 0 [ 393.714268][ T5351] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 393.714299][ T5351] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 393.714318][ T5351] usb 1-1: Product: syz [ 393.714332][ T5351] usb 1-1: Manufacturer: syz [ 393.714346][ T5351] usb 1-1: SerialNumber: syz [ 393.774127][ T9519] udevd[9519]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.781651][T10521] syz.2.1071 (10521): /proc/10519/oom_adj is deprecated, please use /proc/10519/oom_score_adj instead. [ 393.829774][ T5351] usb 1-1: config 0 descriptor?? [ 393.904255][ T5351] usb 1-1: selecting invalid altsetting 0 [ 394.058393][ T5715] usb 1-1: USB disconnect, device number 40 [ 394.158444][T10532] netlink: 'syz.7.1073': attribute type 1 has an invalid length. [ 394.184514][T10532] x_tables: ip_tables: DNAT.0 target: invalid size 24 (kernel) != (user) 32 [ 394.259188][T10510] FAULT_INJECTION: forcing a failure. [ 394.259188][T10510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.259212][T10510] CPU: 1 UID: 0 PID: 10510 Comm: syz.0.1065 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 394.259228][T10510] Tainted: [L]=SOFTLOCKUP [ 394.259240][T10510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 394.259248][T10510] Call Trace: [ 394.259253][T10510] [ 394.259258][T10510] dump_stack_lvl+0xe8/0x150 [ 394.259277][T10510] should_fail_ex+0x46b/0x600 [ 394.259292][T10510] _copy_to_user+0x31/0xb0 [ 394.259309][T10510] simple_read_from_buffer+0xe1/0x170 [ 394.259334][T10510] proc_fail_nth_read+0x1be/0x230 [ 394.259351][T10510] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 394.259368][T10510] ? rw_verify_area+0x2ac/0x4e0 [ 394.259385][T10510] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 394.259401][T10510] vfs_read+0x212/0xa80 [ 394.259420][T10510] ? __pfx_vfs_read+0x10/0x10 [ 394.259431][T10510] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 394.259443][T10510] ? lockdep_hardirqs_on+0x7a/0x110 [ 394.259455][T10510] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 394.259465][T10510] ? mutex_lock_nested+0x152/0x1d0 [ 394.259478][T10510] ? fdget_pos+0x252/0x320 [ 394.259501][T10510] ksys_read+0x156/0x270 [ 394.259513][T10510] ? __pfx_ksys_read+0x10/0x10 [ 394.259528][T10510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.259539][T10510] do_syscall_64+0x15f/0x560 [ 394.259554][T10510] ? trace_irq_disable+0x3b/0x140 [ 394.259565][T10510] ? clear_bhb_loop+0x40/0x90 [ 394.259578][T10510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.259589][T10510] RIP: 0033:0x7f67956fd68e [ 394.259599][T10510] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 394.259609][T10510] RSP: 002b:00007f679398dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 394.259621][T10510] RAX: ffffffffffffffda RBX: 00007f679398e6c0 RCX: 00007f67956fd68e [ 394.259629][T10510] RDX: 000000000000000f RSI: 00007f679398e0a0 RDI: 0000000000000003 [ 394.259636][T10510] RBP: 00007f679398e090 R08: 0000000000000000 R09: 0000000000000000 [ 394.259643][T10510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.259649][T10510] R13: 00007f67959b6038 R14: 00007f67959b5fa0 R15: 00007ffcb57f18a8 [ 394.259665][T10510] [ 396.797935][T10523] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 396.815256][T10550] FAULT_INJECTION: forcing a failure. [ 396.815256][T10550] name failslab, interval 1, probability 0, space 0, times 0 [ 396.815293][T10550] CPU: 1 UID: 0 PID: 10550 Comm: syz.2.1077 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 396.815318][T10550] Tainted: [L]=SOFTLOCKUP [ 396.815326][T10550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 396.815338][T10550] Call Trace: [ 396.815346][T10550] [ 396.815354][T10550] dump_stack_lvl+0xe8/0x150 [ 396.815383][T10550] should_fail_ex+0x46b/0x600 [ 396.815409][T10550] should_failslab+0xa8/0x100 [ 396.815431][T10550] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 396.815451][T10550] ? __alloc_skb+0x1d0/0x7d0 [ 396.815467][T10550] ? lockdep_hardirqs_on+0x7a/0x110 [ 396.815504][T10550] __alloc_skb+0x1d0/0x7d0 [ 396.815522][T10550] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 396.815550][T10550] netlink_sendmsg+0x5d4/0xb40 [ 396.815579][T10550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.815600][T10550] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 396.815632][T10550] ? aa_sock_msg_perm+0x122/0x200 [ 396.815664][T10550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.815685][T10550] sock_sendmsg_nosec+0x112/0x150 [ 396.815714][T10550] ____sys_sendmsg+0x55c/0x870 [ 396.815739][T10550] ? __pfx_____sys_sendmsg+0x10/0x10 [ 396.815768][T10550] ? import_iovec+0x73/0xa0 [ 396.815796][T10550] ___sys_sendmsg+0x2a5/0x360 [ 396.815817][T10550] ? __lock_acquire+0x6b5/0x2d10 [ 396.815842][T10550] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.815891][T10550] ? __fget_files+0x2a/0x420 [ 396.815918][T10550] ? __fget_files+0x3a6/0x420 [ 396.815955][T10550] __x64_sys_sendmsg+0x1c3/0x2a0 [ 396.815979][T10550] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 396.816009][T10550] ? __pfx_ksys_write+0x10/0x10 [ 396.816037][T10550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.816058][T10550] do_syscall_64+0x15f/0x560 [ 396.816077][T10550] ? trace_irq_disable+0x3b/0x140 [ 396.816097][T10550] ? clear_bhb_loop+0x40/0x90 [ 396.816120][T10550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.816140][T10550] RIP: 0033:0x7fb0e474ce59 [ 396.816157][T10550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.816173][T10550] RSP: 002b:00007fb0e29a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.816194][T10550] RAX: ffffffffffffffda RBX: 00007fb0e49c5fa0 RCX: 00007fb0e474ce59 [ 396.816209][T10550] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000005 [ 396.816222][T10550] RBP: 00007fb0e29a6090 R08: 0000000000000000 R09: 0000000000000000 [ 396.816234][T10550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.816247][T10550] R13: 00007fb0e49c6038 R14: 00007fb0e49c5fa0 R15: 00007ffca4b7a188 [ 396.816275][T10550] [ 397.301159][T10563] FAULT_INJECTION: forcing a failure. [ 397.301159][T10563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.301194][T10563] CPU: 0 UID: 0 PID: 10563 Comm: syz.2.1082 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 397.301218][T10563] Tainted: [L]=SOFTLOCKUP [ 397.301226][T10563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 397.301238][T10563] Call Trace: [ 397.301246][T10563] [ 397.301254][T10563] dump_stack_lvl+0xe8/0x150 [ 397.301278][T10563] should_fail_ex+0x46b/0x600 [ 397.301298][T10563] strncpy_from_user+0x36/0x2b0 [ 397.301317][T10563] do_getname+0x77/0x250 [ 397.301338][T10563] __se_sys_linkat+0x3a/0x2d0 [ 397.301358][T10563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.301374][T10563] do_syscall_64+0x15f/0x560 [ 397.301391][T10563] ? clear_bhb_loop+0x40/0x90 [ 397.301409][T10563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.301423][T10563] RIP: 0033:0x7fb0e474ce59 [ 397.301438][T10563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.301452][T10563] RSP: 002b:00007fb0e29a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 397.301469][T10563] RAX: ffffffffffffffda RBX: 00007fb0e49c5fa0 RCX: 00007fb0e474ce59 [ 397.301480][T10563] RDX: ffffffffffffff9c RSI: 00002000000006c0 RDI: ffffffffffffff9c [ 397.301491][T10563] RBP: 00007fb0e29a6090 R08: 0000000000001000 R09: 0000000000000000 [ 397.301501][T10563] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 397.301511][T10563] R13: 00007fb0e49c6038 R14: 00007fb0e49c5fa0 R15: 00007ffca4b7a188 [ 397.301535][T10563] [ 397.336548][ T10] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 397.506568][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 397.508907][ T10] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 397.508942][ T10] usb 8-1: config 0 has no interface number 0 [ 397.508989][ T10] usb 8-1: config 0 interface 12 has no altsetting 0 [ 397.562179][ T10] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 397.562200][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.562211][ T10] usb 8-1: Product: syz [ 397.562218][ T10] usb 8-1: Manufacturer: syz [ 397.562226][ T10] usb 8-1: SerialNumber: syz [ 397.565848][ T10] usb 8-1: config 0 descriptor?? [ 397.960471][T10566] cgroup: Unknown subsys name 'euid' [ 397.975747][T10568] smc: net device team0 erased user defined pnetid SYZ2 [ 398.286763][ T5351] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 398.419898][T10576] FAULT_INJECTION: forcing a failure. [ 398.419898][T10576] name failslab, interval 1, probability 0, space 0, times 0 [ 398.419992][T10576] CPU: 0 UID: 0 PID: 10576 Comm: syz.0.1088 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 398.420022][T10576] Tainted: [L]=SOFTLOCKUP [ 398.420029][T10576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 398.420042][T10576] Call Trace: [ 398.420048][T10576] [ 398.420057][T10576] dump_stack_lvl+0xe8/0x150 [ 398.420091][T10576] should_fail_ex+0x46b/0x600 [ 398.420128][T10576] should_failslab+0xa8/0x100 [ 398.420152][T10576] __kmalloc_noprof+0xdf/0x7b0 [ 398.420174][T10576] ? sock_kmalloc+0xd6/0x160 [ 398.420195][T10576] ? __local_bh_enable+0x1e1/0x2f0 [ 398.420227][T10576] sock_kmalloc+0xd6/0x160 [ 398.420253][T10576] af_alg_alloc_areq+0x99/0x200 [ 398.420286][T10576] skcipher_recvmsg+0x321/0x1140 [ 398.420323][T10576] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 398.420342][T10576] ? __lock_acquire+0x6b5/0x2d10 [ 398.420369][T10576] ? aa_sock_msg_perm+0x122/0x200 [ 398.420394][T10576] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 398.420414][T10576] sock_recvmsg_nosec+0x10c/0x140 [ 398.420444][T10576] ____sys_recvmsg+0x23d/0x4f0 [ 398.420474][T10576] ? __pfx_____sys_recvmsg+0x10/0x10 [ 398.420508][T10576] ? import_iovec+0x73/0xa0 [ 398.420537][T10576] ___sys_recvmsg+0x215/0x590 [ 398.420557][T10576] ? get_pid_task+0x20/0x1f0 [ 398.420581][T10576] ? __pfx____sys_recvmsg+0x10/0x10 [ 398.420607][T10576] ? __fget_files+0x2a/0x420 [ 398.420652][T10576] ? __fget_files+0x3a6/0x420 [ 398.420685][T10576] __x64_sys_recvmsg+0x1c0/0x2a0 [ 398.420707][T10576] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 398.420737][T10576] ? __pfx_ksys_write+0x10/0x10 [ 398.420767][T10576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.420788][T10576] do_syscall_64+0x15f/0x560 [ 398.420818][T10576] ? clear_bhb_loop+0x40/0x90 [ 398.420840][T10576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.420858][T10576] RIP: 0033:0x7f679573ce59 [ 398.420876][T10576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.420893][T10576] RSP: 002b:00007f679398e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 398.420914][T10576] RAX: ffffffffffffffda RBX: 00007f67959b5fa0 RCX: 00007f679573ce59 [ 398.420929][T10576] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 398.420941][T10576] RBP: 00007f679398e090 R08: 0000000000000000 R09: 0000000000000000 [ 398.420953][T10576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.420965][T10576] R13: 00007f67959b6038 R14: 00007f67959b5fa0 R15: 00007ffcb57f18a8 [ 398.420994][T10576] [ 398.583789][ T5351] usb 10-1: Using ep0 maxpacket: 32 [ 398.590821][ T5351] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.590854][ T5351] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.590892][ T5351] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 398.590914][ T5351] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.775496][ T5351] usb 10-1: config 0 descriptor?? [ 398.817158][ T5351] hub 10-1:0.0: USB hub found [ 399.043624][ T5351] hub 10-1:0.0: 1 port detected [ 399.201588][ T5351] hub 10-1:0.0: hub_hub_status failed (err = -71) [ 399.201614][ T5351] hub 10-1:0.0: config failed, can't get hub status (err -71) [ 399.234674][ T5351] usbhid 10-1:0.0: can't add hid device: -71 [ 399.235096][ T5351] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 399.308925][ T5351] usb 10-1: USB disconnect, device number 54 [ 399.408414][ T10] f81534 8-1:0.12: f81534_set_register: reg: 1003 data: 50 failed: -71 [ 399.408469][ T10] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 399.408487][ T10] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 399.408577][ T10] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 399.422294][ T10] usb 8-1: USB disconnect, device number 56 [ 399.536563][ T5715] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 399.576489][ T5797] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 399.666642][ T5715] usb 3-1: device descriptor read/64, error -71 [ 399.727412][ T5797] usb 1-1: Using ep0 maxpacket: 8 [ 399.736560][ T5797] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 399.736615][ T5797] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 399.736637][ T5797] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 399.736660][ T5797] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 399.736682][ T5797] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.736722][ T5797] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 399.736745][ T5797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.926955][ T5715] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 399.996042][ T5797] usb 1-1: usb_control_msg returned -32 [ 399.996088][ T5797] usbtmc 1-1:16.0: can't read capabilities [ 400.058111][T10604] FAULT_INJECTION: forcing a failure. [ 400.058111][T10604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.058145][T10604] CPU: 0 UID: 0 PID: 10604 Comm: syz.7.1097 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 400.058171][T10604] Tainted: [L]=SOFTLOCKUP [ 400.058178][T10604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 400.058189][T10604] Call Trace: [ 400.058196][T10604] [ 400.058205][T10604] dump_stack_lvl+0xe8/0x150 [ 400.058230][T10604] should_fail_ex+0x46b/0x600 [ 400.058254][T10604] _copy_to_user+0x31/0xb0 [ 400.058282][T10604] simple_read_from_buffer+0xe1/0x170 [ 400.058314][T10604] proc_fail_nth_read+0x1be/0x230 [ 400.058345][T10604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 400.058376][T10604] ? rw_verify_area+0x2ac/0x4e0 [ 400.058396][T10604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 400.058425][T10604] vfs_read+0x212/0xa80 [ 400.058451][T10604] ? __pfx_vfs_read+0x10/0x10 [ 400.058482][T10604] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 400.058504][T10604] ? lockdep_hardirqs_on+0x7a/0x110 [ 400.058526][T10604] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 400.058545][T10604] ? mutex_lock_nested+0x152/0x1d0 [ 400.058569][T10604] ? fdget_pos+0x252/0x320 [ 400.058605][T10604] ksys_read+0x156/0x270 [ 400.058628][T10604] ? __pfx_ksys_read+0x10/0x10 [ 400.058656][T10604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.058678][T10604] do_syscall_64+0x15f/0x560 [ 400.058698][T10604] ? trace_irq_disable+0x3b/0x140 [ 400.058719][T10604] ? clear_bhb_loop+0x40/0x90 [ 400.058743][T10604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.058768][T10604] RIP: 0033:0x7f0d36b2d68e [ 400.058785][T10604] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 400.058802][T10604] RSP: 002b:00007f0d34dc5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 400.058823][T10604] RAX: ffffffffffffffda RBX: 00007f0d34dc66c0 RCX: 00007f0d36b2d68e [ 400.058839][T10604] RDX: 000000000000000f RSI: 00007f0d34dc60a0 RDI: 0000000000000003 [ 400.058852][T10604] RBP: 00007f0d34dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 400.058865][T10604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.058877][T10604] R13: 00007f0d36de6038 R14: 00007f0d36de5fa0 R15: 00007ffd1de2f0e8 [ 400.058908][T10604] [ 400.066507][ T5715] usb 3-1: device descriptor read/64, error -71 [ 400.106593][ T32] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 400.178409][ T5715] usb usb3-port1: attempt power cycle [ 400.256429][ T32] usb 10-1: Using ep0 maxpacket: 8 [ 400.258845][ T32] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 400.258896][ T32] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 400.258918][ T32] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 400.258942][ T32] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 400.258965][ T32] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 400.259005][ T32] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 400.259027][ T32] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.486598][ T32] usb 10-1: usb_control_msg returned -32 [ 400.486645][ T32] usbtmc 10-1:16.0: can't read capabilities [ 400.536597][ T5715] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 400.557534][ T5715] usb 3-1: device descriptor read/8, error -71 [ 400.696547][ T10] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 400.806522][ T5715] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 400.828585][ T5715] usb 3-1: device descriptor read/8, error -71 [ 400.846544][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 400.852713][ T10] usb 8-1: config 13 has an invalid interface number: 53 but max is 1 [ 400.852740][ T10] usb 8-1: config 13 has an invalid interface number: 53 but max is 1 [ 400.852760][ T10] usb 8-1: config 13 has 1 interface, different from the descriptor's value: 2 [ 400.852782][ T10] usb 8-1: config 13 has no interface number 0 [ 400.852824][ T10] usb 8-1: config 13 interface 53 altsetting 8 bulk endpoint 0x7 has invalid maxpacket 8 [ 400.852849][ T10] usb 8-1: config 13 interface 53 has no altsetting 0 [ 400.852866][ T10] usb 8-1: config 13 interface 53 has no altsetting 1 [ 400.861797][ T10] usb 8-1: New USB device found, idVendor=054c, idProduct=0058, bcdDevice=4b.48 [ 400.861829][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.861849][ T10] usb 8-1: Product: syz [ 400.861863][ T10] usb 8-1: Manufacturer: ဉ [ 400.861878][ T10] usb 8-1: SerialNumber: syz [ 400.940058][ T5715] usb usb3-port1: unable to enumerate USB device [ 400.960129][ T32] usb 10-1: USB disconnect, device number 55 [ 400.981058][T10609] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 401.040170][T10613] 9p: Bad value for 'wfdno' [ 401.103820][T10616] FAULT_INJECTION: forcing a failure. [ 401.103820][T10616] name failslab, interval 1, probability 0, space 0, times 0 [ 401.103845][T10616] CPU: 0 UID: 0 PID: 10616 Comm: syz.9.1101 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 401.103863][T10616] Tainted: [L]=SOFTLOCKUP [ 401.103867][T10616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 401.103873][T10616] Call Trace: [ 401.103878][T10616] [ 401.103883][T10616] dump_stack_lvl+0xe8/0x150 [ 401.103900][T10616] should_fail_ex+0x46b/0x600 [ 401.103914][T10616] should_failslab+0xa8/0x100 [ 401.103927][T10616] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 401.103939][T10616] ? __alloc_skb+0x1d0/0x7d0 [ 401.103948][T10616] ? lockdep_hardirqs_on+0x7a/0x110 [ 401.103962][T10616] __alloc_skb+0x1d0/0x7d0 [ 401.103972][T10616] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 401.103987][T10616] netlink_sendmsg+0x5d4/0xb40 [ 401.104003][T10616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.104016][T10616] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 401.104034][T10616] ? aa_sock_msg_perm+0x122/0x200 [ 401.104048][T10616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.104059][T10616] sock_sendmsg_nosec+0x112/0x150 [ 401.104075][T10616] ____sys_sendmsg+0x55c/0x870 [ 401.104089][T10616] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.104105][T10616] ? import_iovec+0x73/0xa0 [ 401.104121][T10616] ___sys_sendmsg+0x2a5/0x360 [ 401.104132][T10616] ? __lock_acquire+0x6b5/0x2d10 [ 401.104146][T10616] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.104176][T10616] ? __fget_files+0x2a/0x420 [ 401.104191][T10616] ? __fget_files+0x3a6/0x420 [ 401.104210][T10616] __x64_sys_sendmsg+0x1c3/0x2a0 [ 401.104223][T10616] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 401.104239][T10616] ? __pfx_ksys_write+0x10/0x10 [ 401.104254][T10616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.104266][T10616] do_syscall_64+0x15f/0x560 [ 401.104276][T10616] ? trace_irq_disable+0x3b/0x140 [ 401.104288][T10616] ? clear_bhb_loop+0x40/0x90 [ 401.104301][T10616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.104311][T10616] RIP: 0033:0x7fa7088bce59 [ 401.104321][T10616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.104331][T10616] RSP: 002b:00007fa706b0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.104343][T10616] RAX: ffffffffffffffda RBX: 00007fa708b35fa0 RCX: 00007fa7088bce59 [ 401.104351][T10616] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000004 [ 401.104360][T10616] RBP: 00007fa706b0e090 R08: 0000000000000000 R09: 0000000000000000 [ 401.104367][T10616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.104373][T10616] R13: 00007fa708b36038 R14: 00007fa708b35fa0 R15: 00007fff6e0fdee8 [ 401.104389][T10616] [ 401.158752][T10614] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 401.308835][ T32] usb 1-1: USB disconnect, device number 41 [ 401.412068][ T10] usb-storage 8-1:13.53: USB Mass Storage device detected [ 401.434402][ T10] usb-storage 8-1:13.53: Quirks match for vid 054c pid 0058: 8 [ 401.512993][ T10] usb 8-1: USB disconnect, device number 57 [ 401.528715][ T9388] udevd[9388]: setting mode of /dev/bus/usb/008/057 to 020664 failed: No such file or directory [ 401.528851][ T9388] udevd[9388]: setting owner of /dev/bus/usb/008/057 to uid=0, gid=0 failed: No such file or directory [ 401.785770][T10623] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1103'. [ 401.793696][T10623] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1103'. [ 402.234008][T10638] FAULT_INJECTION: forcing a failure. [ 402.234008][T10638] name failslab, interval 1, probability 0, space 0, times 0 [ 402.234031][T10638] CPU: 1 UID: 0 PID: 10638 Comm: syz.9.1109 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 402.234047][T10638] Tainted: [L]=SOFTLOCKUP [ 402.234050][T10638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 402.234058][T10638] Call Trace: [ 402.234062][T10638] [ 402.234067][T10638] dump_stack_lvl+0xe8/0x150 [ 402.234085][T10638] should_fail_ex+0x46b/0x600 [ 402.234100][T10638] should_failslab+0xa8/0x100 [ 402.234122][T10638] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 402.234142][T10638] ? __alloc_skb+0x1d0/0x7d0 [ 402.234158][T10638] ? lockdep_hardirqs_on+0x7a/0x110 [ 402.234181][T10638] __alloc_skb+0x1d0/0x7d0 [ 402.234203][T10638] netlink_sendmsg+0x5d4/0xb40 [ 402.234227][T10638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.234240][T10638] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 402.234258][T10638] ? aa_sock_msg_perm+0x122/0x200 [ 402.234273][T10638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.234284][T10638] sock_sendmsg_nosec+0x112/0x150 [ 402.234301][T10638] ____sys_sendmsg+0x55c/0x870 [ 402.234315][T10638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.234332][T10638] ? import_iovec+0x73/0xa0 [ 402.234350][T10638] ___sys_sendmsg+0x2a5/0x360 [ 402.234361][T10638] ? __lock_acquire+0x6b5/0x2d10 [ 402.234376][T10638] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.234403][T10638] ? __fget_files+0x2a/0x420 [ 402.234420][T10638] ? __fget_files+0x3a6/0x420 [ 402.234440][T10638] __x64_sys_sendmsg+0x1c3/0x2a0 [ 402.234454][T10638] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 402.234469][T10638] ? __pfx_ksys_write+0x10/0x10 [ 402.234484][T10638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.234496][T10638] do_syscall_64+0x15f/0x560 [ 402.234507][T10638] ? trace_irq_disable+0x3b/0x140 [ 402.234522][T10638] ? clear_bhb_loop+0x40/0x90 [ 402.234535][T10638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.234545][T10638] RIP: 0033:0x7fa7088bce59 [ 402.234556][T10638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.234565][T10638] RSP: 002b:00007fa706b0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.234577][T10638] RAX: ffffffffffffffda RBX: 00007fa708b35fa0 RCX: 00007fa7088bce59 [ 402.234592][T10638] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 402.234599][T10638] RBP: 00007fa706b0e090 R08: 0000000000000000 R09: 0000000000000000 [ 402.234605][T10638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.234612][T10638] R13: 00007fa708b36038 R14: 00007fa708b35fa0 R15: 00007fff6e0fdee8 [ 402.234627][T10638] [ 402.246509][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 402.466640][ T10] usb 1-1: device descriptor read/64, error -71 [ 402.709386][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 402.791744][T10653] FAULT_INJECTION: forcing a failure. [ 402.791744][T10653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.791782][T10653] CPU: 1 UID: 0 PID: 10653 Comm: syz.7.1115 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 402.791810][T10653] Tainted: [L]=SOFTLOCKUP [ 402.791817][T10653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 402.791830][T10653] Call Trace: [ 402.791838][T10653] [ 402.791847][T10653] dump_stack_lvl+0xe8/0x150 [ 402.791876][T10653] should_fail_ex+0x46b/0x600 [ 402.791904][T10653] _copy_from_user+0x2d/0xb0 [ 402.791932][T10653] ucma_create_id+0xe9/0x380 [ 402.791963][T10653] ? __pfx_ucma_create_id+0x10/0x10 [ 402.792003][T10653] ucma_write+0x257/0x2f0 [ 402.792032][T10653] ? __pfx_ucma_write+0x10/0x10 [ 402.792059][T10653] ? rw_verify_area+0x25b/0x4e0 [ 402.792084][T10653] vfs_writev+0x4c6/0x9a0 [ 402.792112][T10653] ? __pfx_ucma_write+0x10/0x10 [ 402.792138][T10653] ? __pfx_vfs_writev+0x10/0x10 [ 402.792175][T10653] ? __fget_files+0x2a/0x420 [ 402.792193][T10653] ? __fget_files+0x3a6/0x420 [ 402.792207][T10653] ? __fget_files+0x2a/0x420 [ 402.792225][T10653] do_writev+0x15a/0x2e0 [ 402.792240][T10653] ? __pfx_do_writev+0x10/0x10 [ 402.792259][T10653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.792270][T10653] do_syscall_64+0x15f/0x560 [ 402.792283][T10653] ? trace_irq_disable+0x3b/0x140 [ 402.792295][T10653] ? clear_bhb_loop+0x40/0x90 [ 402.792307][T10653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.792317][T10653] RIP: 0033:0x7f0d36b6ce59 [ 402.792329][T10653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.792338][T10653] RSP: 002b:00007f0d34dc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 402.792352][T10653] RAX: ffffffffffffffda RBX: 00007f0d36de5fa0 RCX: 00007f0d36b6ce59 [ 402.792360][T10653] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000012 [ 402.792367][T10653] RBP: 00007f0d34dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 402.792374][T10653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.792380][T10653] R13: 00007f0d36de6038 R14: 00007f0d36de5fa0 R15: 00007ffd1de2f0e8 [ 402.792395][T10653] [ 402.836737][ T10] usb 1-1: device descriptor read/64, error -71 [ 402.886599][ T5351] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 402.995555][ T10] usb usb1-port1: attempt power cycle [ 403.049319][ T5351] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 403.049352][ T5351] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 403.049378][ T5351] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 403.049418][ T5351] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 403.049448][ T5351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.054942][T10649] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 403.268155][ T32] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 403.386590][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 403.407472][ T10] usb 1-1: device descriptor read/8, error -71 [ 403.426828][ T32] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 403.426858][ T32] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 403.426878][ T32] usb 8-1: Product: syz [ 403.426893][ T32] usb 8-1: Manufacturer: syz [ 403.426907][ T32] usb 8-1: SerialNumber: syz [ 403.432081][ T32] usb 8-1: config 0 descriptor?? [ 403.437029][ T32] ch341 8-1:0.0: ch341-uart converter detected [ 403.646649][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 403.669347][ T5351] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 403.674295][ T10] usb 1-1: device descriptor read/8, error -71 [ 403.692764][ T5351] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input29 [ 403.743699][ T5351] usb 3-1: USB disconnect, device number 57 [ 403.743773][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 403.778537][ T10] usb usb1-port1: unable to enumerate USB device [ 403.788801][ T5715] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 403.939780][ T5715] usb 10-1: Using ep0 maxpacket: 8 [ 403.944040][ T5715] usb 10-1: config 0 has no interfaces? [ 403.947477][ T5715] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 403.947556][ T5715] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.947577][ T5715] usb 10-1: Product: syz [ 403.947591][ T5715] usb 10-1: Manufacturer: syz [ 403.947604][ T5715] usb 10-1: SerialNumber: syz [ 403.974959][ T5715] usb 10-1: config 0 descriptor?? [ 404.226888][ T5351] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 404.258636][ T824] usb 10-1: USB disconnect, device number 56 [ 404.356590][ T5351] usb 3-1: device descriptor read/64, error -71 [ 404.690186][ T5351] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 404.708811][T10666] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 404.709072][T10666] block device autoloading is deprecated and will be removed. [ 404.799371][ T32] ch341-uart ttyUSB0: failed to read break control: -71 [ 404.799408][ T32] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 404.804139][ T32] usb 8-1: USB disconnect, device number 58 [ 404.818491][ T32] ch341 8-1:0.0: device disconnected [ 404.828279][ T5351] usb 3-1: device descriptor read/64, error -71 [ 404.936884][ T5351] usb usb3-port1: attempt power cycle [ 405.276683][ T5351] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 405.297059][ T5351] usb 3-1: device descriptor read/8, error -71 [ 405.316748][ T5820] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 405.447728][T10678] FAULT_INJECTION: forcing a failure. [ 405.447728][T10678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.447752][T10678] CPU: 0 UID: 0 PID: 10678 Comm: syz.7.1124 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 405.447768][T10678] Tainted: [L]=SOFTLOCKUP [ 405.447772][T10678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 405.447779][T10678] Call Trace: [ 405.447783][T10678] [ 405.447788][T10678] dump_stack_lvl+0xe8/0x150 [ 405.447806][T10678] should_fail_ex+0x46b/0x600 [ 405.447828][T10678] _copy_from_user+0x2d/0xb0 [ 405.447843][T10678] ucma_create_id+0xe9/0x380 [ 405.447860][T10678] ? __pfx_ucma_create_id+0x10/0x10 [ 405.447881][T10678] ucma_write+0x257/0x2f0 [ 405.447896][T10678] ? __pfx_ucma_write+0x10/0x10 [ 405.447911][T10678] ? rw_verify_area+0x25b/0x4e0 [ 405.447933][T10678] vfs_writev+0x4c6/0x9a0 [ 405.447959][T10678] ? __pfx_ucma_write+0x10/0x10 [ 405.447974][T10678] ? __pfx_vfs_writev+0x10/0x10 [ 405.447994][T10678] ? __fget_files+0x2a/0x420 [ 405.448014][T10678] ? __fget_files+0x3a6/0x420 [ 405.448028][T10678] ? __fget_files+0x2a/0x420 [ 405.448046][T10678] do_writev+0x15a/0x2e0 [ 405.448061][T10678] ? __pfx_do_writev+0x10/0x10 [ 405.448078][T10678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.448089][T10678] do_syscall_64+0x15f/0x560 [ 405.448100][T10678] ? trace_irq_disable+0x3b/0x140 [ 405.448114][T10678] ? clear_bhb_loop+0x40/0x90 [ 405.448127][T10678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.448138][T10678] RIP: 0033:0x7f0d36b6ce59 [ 405.448150][T10678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.448159][T10678] RSP: 002b:00007f0d34dc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 405.448171][T10678] RAX: ffffffffffffffda RBX: 00007f0d36de5fa0 RCX: 00007f0d36b6ce59 [ 405.448179][T10678] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000011 [ 405.448185][T10678] RBP: 00007f0d34dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 405.448192][T10678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.448199][T10678] R13: 00007f0d36de6038 R14: 00007f0d36de5fa0 R15: 00007ffd1de2f0e8 [ 405.448214][T10678] [ 405.477674][ T5820] usb 10-1: Using ep0 maxpacket: 8 [ 405.537732][ T5351] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 405.538756][ T5820] usb 10-1: config 0 has no interfaces? [ 405.544381][ T5820] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 405.544410][ T5820] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.544428][ T5820] usb 10-1: Product: syz [ 405.544443][ T5820] usb 10-1: Manufacturer: syz [ 405.544456][ T5820] usb 10-1: SerialNumber: syz [ 405.556693][ T5820] usb 10-1: config 0 descriptor?? [ 405.570218][ T5351] usb 3-1: device descriptor read/8, error -71 [ 405.678151][ T5351] usb usb3-port1: unable to enumerate USB device [ 405.760035][ T824] usb 10-1: USB disconnect, device number 57 [ 405.906756][ T5820] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 406.058447][ T5820] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.058473][ T5820] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.058496][ T5820] usb 8-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 406.058509][ T5820] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.061890][ T5820] usb 8-1: config 0 descriptor?? [ 406.176545][ T32] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 406.306530][ T32] usb 1-1: device descriptor read/64, error -71 [ 406.556580][ T32] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 406.570131][ T5351] usb 10-1: new low-speed USB device number 58 using dummy_hcd [ 406.688308][ T32] usb 1-1: device descriptor read/64, error -71 [ 406.708290][ T5351] usb 10-1: device descriptor read/64, error -71 [ 406.809906][ T32] usb usb1-port1: attempt power cycle [ 406.850981][T10695] FAULT_INJECTION: forcing a failure. [ 406.850981][T10695] name failslab, interval 1, probability 0, space 0, times 0 [ 406.851017][T10695] CPU: 1 UID: 0 PID: 10695 Comm: syz.2.1131 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 406.851045][T10695] Tainted: [L]=SOFTLOCKUP [ 406.851053][T10695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 406.851065][T10695] Call Trace: [ 406.851073][T10695] [ 406.851079][T10695] dump_stack_lvl+0xe8/0x150 [ 406.851097][T10695] should_fail_ex+0x46b/0x600 [ 406.851111][T10695] should_failslab+0xa8/0x100 [ 406.851126][T10695] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 406.851147][T10695] ? __alloc_skb+0x1d0/0x7d0 [ 406.851164][T10695] ? lockdep_hardirqs_on+0x7a/0x110 [ 406.851189][T10695] __alloc_skb+0x1d0/0x7d0 [ 406.851207][T10695] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 406.851234][T10695] netlink_sendmsg+0x5d4/0xb40 [ 406.851255][T10695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.851267][T10695] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 406.851290][T10695] ? aa_sock_msg_perm+0x122/0x200 [ 406.851315][T10695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.851336][T10695] sock_sendmsg_nosec+0x112/0x150 [ 406.851366][T10695] ____sys_sendmsg+0x55c/0x870 [ 406.851393][T10695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.851416][T10695] ? import_iovec+0x73/0xa0 [ 406.851433][T10695] ___sys_sendmsg+0x2a5/0x360 [ 406.851444][T10695] ? __lock_acquire+0x6b5/0x2d10 [ 406.851458][T10695] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.851509][T10695] ? __fget_files+0x2a/0x420 [ 406.851538][T10695] ? __fget_files+0x3a6/0x420 [ 406.851574][T10695] __x64_sys_sendmsg+0x1c3/0x2a0 [ 406.851587][T10695] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 406.851603][T10695] ? __pfx_ksys_write+0x10/0x10 [ 406.851618][T10695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.851635][T10695] do_syscall_64+0x15f/0x560 [ 406.851655][T10695] ? trace_irq_disable+0x3b/0x140 [ 406.851676][T10695] ? clear_bhb_loop+0x40/0x90 [ 406.851700][T10695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.851720][T10695] RIP: 0033:0x7fb0e474ce59 [ 406.851738][T10695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.851748][T10695] RSP: 002b:00007fb0e29a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.851760][T10695] RAX: ffffffffffffffda RBX: 00007fb0e49c5fa0 RCX: 00007fb0e474ce59 [ 406.851768][T10695] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 406.851775][T10695] RBP: 00007fb0e29a6090 R08: 0000000000000000 R09: 0000000000000000 [ 406.851781][T10695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.851789][T10695] R13: 00007fb0e49c6038 R14: 00007fb0e49c5fa0 R15: 00007ffca4b7a188 [ 406.851817][T10695] [ 407.151539][ T32] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 407.168287][ T32] usb 1-1: device descriptor read/8, error -71 [ 407.206954][ T5351] usb 10-1: new low-speed USB device number 59 using dummy_hcd [ 407.356948][ T5351] usb 10-1: device descriptor read/64, error -71 [ 407.408151][ T32] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 407.427601][ T32] usb 1-1: device descriptor read/8, error -71 [ 407.467404][ T5351] usb usb10-port1: attempt power cycle [ 407.538116][ T32] usb usb1-port1: unable to enumerate USB device [ 407.626503][ T5715] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 407.791794][ T5715] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 407.791826][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.791845][ T5715] usb 3-1: Product: syz [ 407.791860][ T5715] usb 3-1: Manufacturer: syz [ 407.791881][ T5715] usb 3-1: SerialNumber: syz [ 407.811291][ T5351] usb 10-1: new low-speed USB device number 60 using dummy_hcd [ 407.812339][ T5715] usb 3-1: config 0 descriptor?? [ 407.853030][ T5351] usb 10-1: device descriptor read/8, error -71 [ 408.086903][ T5351] usb 10-1: new low-speed USB device number 61 using dummy_hcd [ 408.107246][ T5351] usb 10-1: device descriptor read/8, error -71 [ 408.220486][ T5351] usb usb10-port1: unable to enumerate USB device [ 408.463385][T10699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.466630][T10699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.479483][T10699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.482646][T10699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.492864][ T5715] usb 3-1: Firmware version (0.0) predates our first public release. [ 408.492889][ T5715] usb 3-1: Please update to version 0.2 or newer [ 408.591888][ T5715] usb 3-1: USB disconnect, device number 62 [ 409.233745][ T3335] Bluetooth: hci2: Frame reassembly failed (-84) [ 409.235164][ T3335] Bluetooth: hci2: Frame reassembly failed (-84) [ 409.236098][ T1028] Bluetooth: hci2: Frame reassembly failed (-84) [ 409.677115][ T824] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 409.826782][ T824] usb 1-1: Using ep0 maxpacket: 8 [ 409.831940][ T824] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 409.831970][ T824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.831988][ T824] usb 1-1: Product: syz [ 409.832003][ T824] usb 1-1: Manufacturer: syz [ 409.832017][ T824] usb 1-1: SerialNumber: syz [ 409.866612][ T5351] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 409.883360][ T824] usb 1-1: config 0 descriptor?? [ 409.907634][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 410.034227][ T5351] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 410.034258][ T5351] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.042240][ T5351] usb 10-1: config 0 descriptor?? [ 410.059492][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 410.078810][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 410.078835][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.078911][ T10] usb 3-1: Product: syz [ 410.078926][ T10] usb 3-1: Manufacturer: syz [ 410.078940][ T10] usb 3-1: SerialNumber: syz [ 410.100624][ T824] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 410.103479][T10703] dlm: non-version read from control device 0 [ 410.105060][ T5351] cp210x 10-1:0.0: cp210x converter detected [ 410.106896][ T10] usb 3-1: config 0 descriptor?? [ 410.251798][ T5351] cp210x 10-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 410.251891][ T5351] cp210x 10-1:0.0: querying part number failed [ 410.273827][ T5351] usb 10-1: cp210x converter now attached to ttyUSB0 [ 410.324084][ T5351] usb 10-1: USB disconnect, device number 62 [ 410.354000][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 410.402452][ T5351] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 410.420080][ T5351] cp210x 10-1:0.0: device disconnected [ 410.788542][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 410.821612][ T10] usb 3-1: USB disconnect, device number 63 [ 411.078008][T10719] FAULT_INJECTION: forcing a failure. [ 411.078008][T10719] name failslab, interval 1, probability 0, space 0, times 0 [ 411.078045][T10719] CPU: 0 UID: 0 PID: 10719 Comm: syz.9.1141 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 411.078076][T10719] Tainted: [L]=SOFTLOCKUP [ 411.078084][T10719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 411.078096][T10719] Call Trace: [ 411.078104][T10719] [ 411.078113][T10719] dump_stack_lvl+0xe8/0x150 [ 411.078144][T10719] should_fail_ex+0x46b/0x600 [ 411.078171][T10719] should_failslab+0xa8/0x100 [ 411.078195][T10719] __kmalloc_noprof+0xdf/0x7b0 [ 411.078216][T10719] ? tomoyo_encode+0x28b/0x550 [ 411.078245][T10719] tomoyo_encode+0x28b/0x550 [ 411.078276][T10719] tomoyo_realpath_from_path+0x58d/0x5d0 [ 411.078319][T10719] ? tomoyo_path_number_perm+0x219/0x630 [ 411.078343][T10719] tomoyo_path_number_perm+0x246/0x630 [ 411.078369][T10719] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 411.078391][T10719] ? __lock_acquire+0x6b5/0x2d10 [ 411.078416][T10719] ? do_raw_spin_lock+0x12b/0x2f0 [ 411.078457][T10719] ? __fget_files+0x2a/0x420 [ 411.078486][T10719] ? __fget_files+0x2a/0x420 [ 411.078513][T10719] ? __fget_files+0x3a6/0x420 [ 411.078538][T10719] ? __fget_files+0x2a/0x420 [ 411.078569][T10719] security_file_ioctl+0xc3/0x2a0 [ 411.078591][T10719] __se_sys_ioctl+0x47/0x170 [ 411.078611][T10719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.078633][T10719] do_syscall_64+0x15f/0x560 [ 411.078654][T10719] ? trace_irq_disable+0x3b/0x140 [ 411.078674][T10719] ? clear_bhb_loop+0x40/0x90 [ 411.078692][T10719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.078709][T10719] RIP: 0033:0x7fa7088bce59 [ 411.078728][T10719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.078745][T10719] RSP: 002b:00007fa706b0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 411.078766][T10719] RAX: ffffffffffffffda RBX: 00007fa708b35fa0 RCX: 00007fa7088bce59 [ 411.078782][T10719] RDX: 0000000000000000 RSI: 00000000000007a6 RDI: 0000000000000003 [ 411.078794][T10719] RBP: 00007fa706b0e090 R08: 0000000000000000 R09: 0000000000000000 [ 411.078807][T10719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.078819][T10719] R13: 00007fa708b36038 R14: 00007fa708b35fa0 R15: 00007fff6e0fdee8 [ 411.078840][T10719] [ 411.078905][T10719] ERROR: Out of memory at tomoyo_realpath_from_path. [ 411.166576][ T4934] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 411.370151][ T824] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 411.377960][ T5820] usbhid 8-1:0.0: can't add hid device: -32 [ 411.378115][ T5820] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 411.448690][ T824] usb 8-1: USB disconnect, device number 59 [ 411.616266][T10727] FAULT_INJECTION: forcing a failure. [ 411.616266][T10727] name failslab, interval 1, probability 0, space 0, times 0 [ 411.616302][T10727] CPU: 1 UID: 0 PID: 10727 Comm: syz.2.1145 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 411.616327][T10727] Tainted: [L]=SOFTLOCKUP [ 411.616333][T10727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 411.616348][T10727] Call Trace: [ 411.616356][T10727] [ 411.616364][T10727] dump_stack_lvl+0xe8/0x150 [ 411.616392][T10727] should_fail_ex+0x46b/0x600 [ 411.616419][T10727] should_failslab+0xa8/0x100 [ 411.616442][T10727] __kmalloc_noprof+0xdf/0x7b0 [ 411.616463][T10727] ? tomoyo_encode+0x28b/0x550 [ 411.616487][T10727] tomoyo_encode+0x28b/0x550 [ 411.616511][T10727] tomoyo_realpath_from_path+0x58d/0x5d0 [ 411.616537][T10727] ? tomoyo_path_number_perm+0x219/0x630 [ 411.616563][T10727] tomoyo_path_number_perm+0x246/0x630 [ 411.616582][T10727] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 411.616598][T10727] ? __lock_acquire+0x6b5/0x2d10 [ 411.616617][T10727] ? do_raw_spin_lock+0x12b/0x2f0 [ 411.616674][T10727] ? __fget_files+0x2a/0x420 [ 411.616703][T10727] ? __fget_files+0x2a/0x420 [ 411.616722][T10727] ? __fget_files+0x3a6/0x420 [ 411.616742][T10727] ? __fget_files+0x2a/0x420 [ 411.616776][T10727] security_file_ioctl+0xc3/0x2a0 [ 411.616797][T10727] __se_sys_ioctl+0x47/0x170 [ 411.616816][T10727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.616833][T10727] do_syscall_64+0x15f/0x560 [ 411.616850][T10727] ? trace_irq_disable+0x3b/0x140 [ 411.616866][T10727] ? clear_bhb_loop+0x40/0x90 [ 411.616895][T10727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.616912][T10727] RIP: 0033:0x7fb0e474ce59 [ 411.616929][T10727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.616945][T10727] RSP: 002b:00007fb0e29a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 411.616965][T10727] RAX: ffffffffffffffda RBX: 00007fb0e49c5fa0 RCX: 00007fb0e474ce59 [ 411.616976][T10727] RDX: 0000200000000300 RSI: 0000000040085618 RDI: 0000000000000003 [ 411.616986][T10727] RBP: 00007fb0e29a6090 R08: 0000000000000000 R09: 0000000000000000 [ 411.616995][T10727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.617003][T10727] R13: 00007fb0e49c6038 R14: 00007fb0e49c5fa0 R15: 00007ffca4b7a188 [ 411.617026][T10727] [ 411.648209][T10727] ERROR: Out of memory at tomoyo_realpath_from_path. [ 411.860214][T10730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.873257][T10730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.890146][T10730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.890694][T10730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.059739][T10736] FAULT_INJECTION: forcing a failure. [ 412.059739][T10736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.059774][T10736] CPU: 1 UID: 0 PID: 10736 Comm: syz.9.1148 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 412.059800][T10736] Tainted: [L]=SOFTLOCKUP [ 412.059807][T10736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 412.059819][T10736] Call Trace: [ 412.059827][T10736] [ 412.059836][T10736] dump_stack_lvl+0xe8/0x150 [ 412.059866][T10736] should_fail_ex+0x46b/0x600 [ 412.059892][T10736] strncpy_from_user+0x36/0x2b0 [ 412.059915][T10736] do_getname+0x77/0x250 [ 412.059942][T10736] do_sys_openat2+0xcc/0x200 [ 412.059969][T10736] ? __pfx_do_sys_openat2+0x10/0x10 [ 412.059996][T10736] ? ksys_write+0x248/0x270 [ 412.060018][T10736] ? __pfx_ksys_write+0x10/0x10 [ 412.060042][T10736] __x64_sys_openat+0x138/0x170 [ 412.060071][T10736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.060092][T10736] do_syscall_64+0x15f/0x560 [ 412.060112][T10736] ? trace_irq_disable+0x3b/0x140 [ 412.060139][T10736] ? clear_bhb_loop+0x40/0x90 [ 412.060164][T10736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.060183][T10736] RIP: 0033:0x7fa70887d68e [ 412.060199][T10736] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 412.060215][T10736] RSP: 002b:00007fa706b0db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 412.060239][T10736] RAX: ffffffffffffffda RBX: 00007fa706b0e6c0 RCX: 00007fa70887d68e [ 412.060255][T10736] RDX: 0000000000108383 RSI: 00007fa706b0dc00 RDI: ffffffffffffff9c [ 412.060268][T10736] RBP: 00007fa706b0dc00 R08: 0000000000000000 R09: 0000000000000000 [ 412.060281][T10736] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 412.060294][T10736] R13: 00007fa708b36038 R14: 00007fa708b35fa0 R15: 00007fff6e0fdee8 [ 412.060324][T10736] [ 412.225910][ T5351] usb 1-1: USB disconnect, device number 50 [ 412.296513][ T824] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 412.453116][T10750] FAULT_INJECTION: forcing a failure. [ 412.453116][T10750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.453152][T10750] CPU: 1 UID: 0 PID: 10750 Comm: syz.0.1152 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 412.453179][T10750] Tainted: [L]=SOFTLOCKUP [ 412.453187][T10750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 412.453199][T10750] Call Trace: [ 412.453207][T10750] [ 412.453216][T10750] dump_stack_lvl+0xe8/0x150 [ 412.453245][T10750] should_fail_ex+0x46b/0x600 [ 412.453270][T10750] strncpy_from_user+0x36/0x2b0 [ 412.453293][T10750] do_getname+0x77/0x250 [ 412.453318][T10750] do_sys_openat2+0xcc/0x200 [ 412.453345][T10750] ? __pfx_do_sys_openat2+0x10/0x10 [ 412.453371][T10750] ? ksys_write+0x248/0x270 [ 412.453391][T10750] ? __pfx_ksys_write+0x10/0x10 [ 412.453413][T10750] __x64_sys_openat+0x138/0x170 [ 412.453440][T10750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.453461][T10750] do_syscall_64+0x15f/0x560 [ 412.453480][T10750] ? trace_irq_disable+0x3b/0x140 [ 412.453500][T10750] ? clear_bhb_loop+0x40/0x90 [ 412.453523][T10750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.453542][T10750] RIP: 0033:0x7f67956fd68e [ 412.453561][T10750] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 412.453578][T10750] RSP: 002b:00007f679398db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 412.453599][T10750] RAX: ffffffffffffffda RBX: 00007f679398e6c0 RCX: 00007f67956fd68e [ 412.453614][T10750] RDX: 0000000000108383 RSI: 00007f679398dc00 RDI: ffffffffffffff9c [ 412.453628][T10750] RBP: 00007f679398dc00 R08: 0000000000000000 R09: 0000000000000000 [ 412.453640][T10750] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 412.453652][T10750] R13: 00007f67959b6038 R14: 00007f67959b5fa0 R15: 00007ffcb57f18a8 [ 412.453681][T10750] [ 412.568356][ T824] usb 8-1: Using ep0 maxpacket: 8 [ 412.655626][ T824] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.655684][ T824] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 412.655706][ T824] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.712964][ T824] usb 8-1: config 0 descriptor?? [ 412.732057][ T824] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 412.803353][T10753] pimreg: entered allmulticast mode [ 413.677037][ T5715] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 413.836592][ T5715] usb 3-1: Using ep0 maxpacket: 32 [ 413.837926][ T32] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 413.843825][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.843912][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.843950][ T5715] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 413.843973][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.913873][T10783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1164'. [ 413.913928][T10783] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 413.952420][ T5715] usb 3-1: config 0 descriptor?? [ 413.975011][ T32] usb 10-1: device descriptor read/64, error -71 [ 414.141556][ T824] usb 8-1: USB disconnect, device number 60 [ 414.207883][ T32] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 414.236597][ T5820] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 414.376099][ T5715] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 414.376133][ T5715] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 414.376634][ T32] usb 10-1: device descriptor read/64, error -71 [ 414.389015][ T5820] usb 1-1: Using ep0 maxpacket: 16 [ 414.392965][ T5820] usb 1-1: unable to get BOS descriptor or descriptor too short [ 414.397911][ T5820] usb 1-1: config 189 has an invalid interface number: 214 but max is 0 [ 414.397937][ T5820] usb 1-1: config 189 has no interface number 0 [ 414.397967][ T5820] usb 1-1: config 189 interface 214 has no altsetting 0 [ 414.402243][ T5820] usb 1-1: New USB device found, idVendor=2770, idProduct=9051, bcdDevice=68.83 [ 414.402271][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.402290][ T5820] usb 1-1: Product: syz [ 414.402304][ T5820] usb 1-1: Manufacturer: syz [ 414.402318][ T5820] usb 1-1: SerialNumber: syz [ 414.486926][ T32] usb usb10-port1: attempt power cycle [ 414.579351][T10773] sock: sock_timestamping_bind_phc: sock not bind to device [ 414.585557][ T5715] ft260 0003:0403:6030.000F: chip code: 0000 0000 [ 414.640070][ T5820] gspca_main: sq905c-2.14.0 probing 2770:9051 [ 414.640825][ T5820] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 414.640842][ T5820] sq905c 1-1:189.214: Get version command failed [ 414.640892][ T5820] sq905c 1-1:189.214: probe with driver sq905c failed with error -71 [ 414.645591][ T5820] usb 1-1: USB disconnect, device number 51 [ 414.785547][ T5715] ft260 0003:0403:6030.000F: failed to retrieve system status [ 414.785871][ T5715] ft260 0003:0403:6030.000F: probe with driver ft260 failed with error -5 [ 414.826532][ T32] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 414.848455][ T32] usb 10-1: device descriptor read/8, error -71 [ 414.988724][ T5820] usb 3-1: USB disconnect, device number 65 [ 415.096563][ T32] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 415.126746][ T5715] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 415.127811][ T32] usb 10-1: device descriptor read/8, error -71 [ 415.236911][ T32] usb usb10-port1: unable to enumerate USB device [ 415.256639][ T5715] usb 8-1: device descriptor read/64, error -71 [ 415.507247][ T5715] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 415.607474][ T5820] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 415.646629][ T5715] usb 8-1: device descriptor read/64, error -71 [ 415.758397][ T5715] usb usb8-port1: attempt power cycle [ 415.771242][ T5820] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 415.771273][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.771294][ T5820] usb 1-1: Product: syz [ 415.771308][ T5820] usb 1-1: Manufacturer: syz [ 415.771323][ T5820] usb 1-1: SerialNumber: syz [ 415.814501][ T5820] usb 1-1: config 0 descriptor?? [ 415.936530][ T10] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 416.086537][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 416.094533][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 416.094560][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 416.098330][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 416.098357][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.098376][ T10] usb 3-1: Product: syz [ 416.098438][ T10] usb 3-1: Manufacturer: syz [ 416.098452][ T10] usb 3-1: SerialNumber: syz [ 416.111732][ T10] usb 3-1: config 0 descriptor?? [ 416.113559][ T5715] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 416.163454][ T5715] usb 8-1: device descriptor read/8, error -71 [ 416.165981][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 416.166013][ T10] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 416.224682][ T5820] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 416.224798][ T5820] usb 1-1: Firmware version (0.0) predates our first public release. [ 416.224816][ T5820] usb 1-1: Please update to version 0.2 or newer [ 416.396475][ T5715] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 416.417824][ T5715] usb 8-1: device descriptor read/8, error -71 [ 416.535857][ T5715] usb usb8-port1: unable to enumerate USB device [ 416.681374][T10801] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 416.799988][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 416.829681][ T10] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 417.257150][ T10] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 417.257174][ T10] em28xx 3-1:0.0: No AC97 audio processor [ 417.380100][ T5820] usb 1-1: USB disconnect, device number 52 [ 417.998843][T10820] FAULT_INJECTION: forcing a failure. [ 417.998843][T10820] name failslab, interval 1, probability 0, space 0, times 0 [ 417.998879][T10820] CPU: 0 UID: 0 PID: 10820 Comm: syz.7.1177 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 417.998906][T10820] Tainted: [L]=SOFTLOCKUP [ 417.998914][T10820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 417.998927][T10820] Call Trace: [ 417.998935][T10820] [ 417.998945][T10820] dump_stack_lvl+0xe8/0x150 [ 417.998975][T10820] should_fail_ex+0x46b/0x600 [ 417.999003][T10820] should_failslab+0xa8/0x100 [ 417.999027][T10820] kmem_cache_alloc_noprof+0x87/0x680 [ 417.999049][T10820] ? dst_alloc+0x105/0x170 [ 417.999072][T10820] ? fib_lookup+0x76/0x440 [ 417.999103][T10820] dst_alloc+0x105/0x170 [ 417.999131][T10820] ip_route_output_key_hash_rcu+0x14d0/0x25e0 [ 417.999176][T10820] ? ip_route_output_key_hash+0xd8/0x2a0 [ 417.999199][T10820] ip_route_output_key_hash+0x18d/0x2a0 [ 417.999214][T10820] ? unwind_next_frame+0xa6/0x2550 [ 417.999230][T10820] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 417.999253][T10820] tcp_v4_connect+0x74e/0x19b0 [ 417.999275][T10820] ? __pfx_tcp_v4_connect+0x10/0x10 [ 417.999291][T10820] __inet_stream_connect+0x25a/0xdd0 [ 417.999313][T10820] ? __pfx___inet_stream_connect+0x10/0x10 [ 417.999327][T10820] ? __local_bh_enable+0x1e1/0x2f0 [ 417.999345][T10820] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 417.999359][T10820] ? lockdep_hardirqs_on+0x7a/0x110 [ 417.999374][T10820] inet_stream_connect+0x66/0xa0 [ 417.999391][T10820] kernel_connect+0x141/0x1c0 [ 417.999406][T10820] ? __pfx_kernel_connect+0x10/0x10 [ 417.999431][T10820] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 417.999446][T10820] ? lockdep_hardirqs_on+0x7a/0x110 [ 417.999459][T10820] smc_connect+0x7a5/0xd90 [ 417.999480][T10820] __sys_connect+0x315/0x450 [ 417.999498][T10820] ? __pfx___sys_connect+0x10/0x10 [ 417.999520][T10820] ? __pfx_ksys_write+0x10/0x10 [ 417.999534][T10820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.999546][T10820] __x64_sys_connect+0x7a/0x90 [ 417.999557][T10820] do_syscall_64+0x15f/0x560 [ 417.999568][T10820] ? trace_irq_disable+0x3b/0x140 [ 417.999579][T10820] ? clear_bhb_loop+0x40/0x90 [ 417.999592][T10820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.999602][T10820] RIP: 0033:0x7f0d36b6ce59 [ 417.999613][T10820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.999623][T10820] RSP: 002b:00007f0d34dc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 417.999635][T10820] RAX: ffffffffffffffda RBX: 00007f0d36de5fa0 RCX: 00007f0d36b6ce59 [ 417.999643][T10820] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 417.999650][T10820] RBP: 00007f0d34dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 417.999657][T10820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.999663][T10820] R13: 00007f0d36de6038 R14: 00007f0d36de5fa0 R15: 00007ffd1de2f0e8 [ 417.999679][T10820] [ 418.264375][T10825] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 418.706506][ T5715] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 418.712935][ T5820] usb 3-1: USB disconnect, device number 66 [ 418.730747][ T5820] em28xx 3-1:0.0: Disconnecting em28xx [ 418.757631][ T10] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 418.802864][T10840] netlink: 812 bytes leftover after parsing attributes in process `syz.9.1185'. [ 418.876547][ T5715] usb 1-1: Using ep0 maxpacket: 8 [ 418.884617][ T5820] em28xx 3-1:0.0: Freeing device [ 418.884629][ T5715] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.884677][ T5715] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 418.884699][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.908571][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 418.920154][ T10] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 418.920183][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.920202][ T10] usb 8-1: Product: syz [ 418.920216][ T10] usb 8-1: Manufacturer: syz [ 418.920230][ T10] usb 8-1: SerialNumber: syz [ 418.972744][ T5715] usb 1-1: config 0 descriptor?? [ 418.987467][ T5715] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 418.990395][ T10] usb 8-1: config 0 descriptor?? [ 419.161974][T10847] pimreg: left allmulticast mode [ 419.211669][ T10] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 419.292088][T10835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.293047][T10835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.506753][ T5715] gspca_vc032x: reg_r err -110 [ 419.506843][ T5715] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 419.561680][T10850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.562681][T10850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.614426][T10850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.623842][T10850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.857179][ T10] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 419.860590][ T10] usb 8-1: USB disconnect, device number 65 [ 419.986542][ T5819] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 420.116519][ T5819] usb 10-1: device descriptor read/64, error -71 [ 420.356636][ T5819] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 420.498026][ T5819] usb 10-1: device descriptor read/64, error -71 [ 420.523288][T10859] 9pnet: p9_errstr2errno: server reported unknown error [ 420.607539][ T5819] usb usb10-port1: attempt power cycle [ 420.947459][ T5819] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 420.970617][ T5819] usb 10-1: device descriptor read/8, error -71 [ 421.206538][ T5819] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 421.227473][ T5819] usb 10-1: device descriptor read/8, error -71 [ 421.338514][ T5819] usb usb10-port1: unable to enumerate USB device [ 421.597364][ T5715] usb 1-1: USB disconnect, device number 53 [ 422.238400][ T5819] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 422.388521][ T5819] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 422.388550][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.388568][ T5819] usb 3-1: config 0 has no interface number 0 [ 422.388596][ T5819] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 255 [ 422.388609][ T5819] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 422.391231][ T5819] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 422.391266][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.391277][ T5819] usb 3-1: Product: syz [ 422.391285][ T5819] usb 3-1: Manufacturer: syz [ 422.391293][ T5819] usb 3-1: SerialNumber: syz [ 422.394907][ T5819] usb 3-1: config 0 descriptor?? [ 422.398276][T10889] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 422.402542][ T5819] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 422.404449][ T5819] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 422.407264][ T5819] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 422.496957][ T5351] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 422.547074][ T5820] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 422.625457][ T5715] usb 3-1: USB disconnect, device number 67 [ 422.653122][ T5351] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.653180][ T5351] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 422.653203][ T5351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.653987][ T5715] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 422.655303][ T5715] cyberjack 3-1:0.69: device disconnected [ 422.673171][ T5351] usb 1-1: config 0 descriptor?? [ 422.690632][ T5820] usb 8-1: device descriptor read/64, error -71 [ 422.700512][ T5351] pwc: Askey VC010 type 2 USB webcam detected. [ 422.878474][ T5351] pwc: send_video_command error -71 [ 422.878487][ T5351] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 422.878561][ T5351] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 422.883016][ T5351] usb 1-1: USB disconnect, device number 54 [ 422.927472][ T5820] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 423.056750][ T5820] usb 8-1: device descriptor read/64, error -71 [ 423.157775][ T824] usb 10-1: new full-speed USB device number 71 using dummy_hcd [ 423.166885][ T5820] usb usb8-port1: attempt power cycle [ 423.310915][ T824] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.313559][ T824] usb 10-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 423.313589][ T824] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.313604][ T824] usb 10-1: Product: syz [ 423.313612][ T824] usb 10-1: Manufacturer: syz [ 423.313619][ T824] usb 10-1: SerialNumber: syz [ 423.359472][ T5715] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 423.369017][ T824] usb 10-1: config 0 descriptor?? [ 423.373866][ T824] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 423.456505][ T5797] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 423.506563][ T5820] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 423.529097][ T5820] usb 8-1: device descriptor read/8, error -71 [ 423.532696][ T5715] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.532750][ T5715] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 423.532825][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.537773][ T5715] usb 1-1: config 0 descriptor?? [ 423.563480][ T5715] pwc: Askey VC010 type 2 USB webcam detected. [ 423.616482][ T5797] usb 3-1: Using ep0 maxpacket: 32 [ 423.621935][ T5797] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 423.622004][ T5797] usb 3-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.622019][ T5797] usb 3-1: config 1 interface 0 has no altsetting 0 [ 423.624344][ T5797] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 423.624366][ T5797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.624420][ T5797] usb 3-1: Product: Щ [ 423.624429][ T5797] usb 3-1: Manufacturer: ᠌ [ 423.624437][ T5797] usb 3-1: SerialNumber: ဉ [ 423.692803][T10907] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 423.789892][T10905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.790421][T10905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.813333][ T5820] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 423.837671][ T5820] usb 8-1: device descriptor read/8, error -71 [ 423.959486][ T5820] usb usb8-port1: unable to enumerate USB device [ 423.993855][ T5715] pwc: recv_control_msg error -32 req 02 val 2b00 [ 423.994242][ T824] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 423.994441][ T824] gspca_pac7302 10-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 423.995851][ T5715] pwc: recv_control_msg error -32 req 02 val 2700 [ 424.025855][ T5715] pwc: recv_control_msg error -32 req 02 val 2c00 [ 424.036649][ T5715] pwc: recv_control_msg error -32 req 04 val 1000 [ 424.039914][ T5715] pwc: recv_control_msg error -32 req 04 val 1300 [ 424.041012][ T5715] pwc: recv_control_msg error -32 req 04 val 1400 [ 424.043283][ T5715] pwc: recv_control_msg error -32 req 02 val 2000 [ 424.094768][ T824] usb 10-1: USB disconnect, device number 71 [ 424.176507][ T5797] usb 3-1: USB disconnect, device number 68 [ 424.273072][ T5715] pwc: recv_control_msg error -71 req 04 val 1500 [ 424.273405][ T5715] pwc: recv_control_msg error -71 req 02 val 2500 [ 424.273759][ T5715] pwc: recv_control_msg error -71 req 02 val 2400 [ 424.274189][ T5715] pwc: recv_control_msg error -71 req 02 val 2600 [ 424.275192][ T5715] pwc: recv_control_msg error -71 req 02 val 2900 [ 424.275647][ T5715] pwc: recv_control_msg error -71 req 02 val 2800 [ 424.277460][ T5715] pwc: recv_control_msg error -71 req 04 val 1100 [ 424.278104][ T5715] pwc: recv_control_msg error -71 req 04 val 1200 [ 424.315455][ T5715] pwc: Registered as video103. [ 424.319307][ T5715] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input30 [ 424.325298][ T5715] usb 1-1: USB disconnect, device number 55 [ 424.641986][T10913] binder: 10912:10913 ioctl c0306201 0 returned -14 [ 425.146530][ T5715] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 425.146687][ T5797] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 425.297031][ T5715] usb 1-1: Using ep0 maxpacket: 8 [ 425.300578][ T5715] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 425.300632][ T5715] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 425.300715][ T5715] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 425.300745][ T5715] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 425.300768][ T5715] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 425.300807][ T5715] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 425.300884][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.359035][ T5797] usb 10-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 425.359065][ T5797] usb 10-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 425.359085][ T5797] usb 10-1: Product: syz [ 425.359099][ T5797] usb 10-1: Manufacturer: syz [ 425.359114][ T5797] usb 10-1: SerialNumber: syz [ 425.389000][ T5797] usb 10-1: config 0 descriptor?? [ 425.460244][ T5797] ch341 10-1:0.0: ch341-uart converter detected [ 425.624496][ T5715] usb 1-1: usb_control_msg returned -32 [ 425.624526][ T5715] usbtmc 1-1:16.0: can't read capabilities [ 425.856614][ T5351] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 425.984396][T10919] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 425.995482][ T5715] usb 1-1: USB disconnect, device number 56 [ 426.012896][ T5351] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 426.012924][ T5351] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.012942][ T5351] usb 8-1: Product: syz [ 426.012953][ T5351] usb 8-1: Manufacturer: syz [ 426.012965][ T5351] usb 8-1: SerialNumber: syz [ 426.071251][ T5351] usb 8-1: config 0 descriptor?? [ 426.376637][ T824] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 426.488597][ T5351] usb 8-1: Firmware: major: 0, minor: 100, hardware type: UNKNOWN (47) [ 426.546537][ T824] usb 3-1: Using ep0 maxpacket: 8 [ 426.563037][ T824] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 426.563068][ T824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.563141][ T824] usb 3-1: Product: syz [ 426.563157][ T824] usb 3-1: Manufacturer: syz [ 426.563170][ T824] usb 3-1: SerialNumber: syz [ 426.577193][ T824] usb 3-1: config 0 descriptor?? [ 426.661034][ T5797] ch341-uart ttyUSB0: failed to read break control: -71 [ 426.661308][ T5797] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 426.683766][ T5797] usb 10-1: USB disconnect, device number 72 [ 426.698434][ T5351] usb 8-1: Firmware: build ctفvoJk1CChz;/%uҎ'Th6AҭOG-j}rnU8 žT? [ 426.698434][ T5351] ?FaRVHƳ/bH [ 426.698434][ T5351] ir"0Q21Nl|_s@[?`ݨ||fbR [ 426.711685][ T5797] ch341 10-1:0.0: device disconnected [ 426.783923][ T824] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 426.885301][T10933] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1218'. [ 426.904110][ T5351] usb 8-1: failed to fetch extended address, random address set [ 426.904145][ T5351] usb 8-1: atusb_probe: initialization failed, error = -524 [ 426.904360][ T5351] atusb 8-1:0.0: probe with driver atusb failed with error -524 [ 426.950860][ T5351] usb 8-1: USB disconnect, device number 70 [ 427.204234][ T824] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 427.219818][ T824] usb 3-1: USB disconnect, device number 69 [ 427.286646][ T10] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 427.436601][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 427.442647][ T10] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 427.442676][ T10] usb 1-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 427.442702][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 427.445713][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 427.445742][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.445760][ T10] usb 1-1: Product: Щ [ 427.445774][ T10] usb 1-1: Manufacturer: ᠌ [ 427.445788][ T10] usb 1-1: SerialNumber: ဉ [ 427.525922][T10935] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 427.630182][T10944] binder: 10943:10944 ioctl c0306201 0 returned -14 [ 427.887826][ T10] usb 1-1: USB disconnect, device number 57 [ 428.183411][T10961] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1228'. [ 428.692300][T10973] could not open pipe file descriptor [ 428.716786][T10974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.717985][T10974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.736548][ T824] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 428.806778][ T5715] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 428.906611][ T824] usb 3-1: Using ep0 maxpacket: 8 [ 428.911507][ T824] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 428.911562][ T824] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 428.911583][ T824] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 428.911622][ T824] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 428.911644][ T824] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 428.911669][ T824] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 428.911681][ T824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.937313][ T10] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 429.007259][ T5715] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 429.007290][ T5715] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 429.007567][ T5715] usb 1-1: Product: syz [ 429.007583][ T5715] usb 1-1: Manufacturer: syz [ 429.007596][ T5715] usb 1-1: SerialNumber: syz [ 429.048106][ T5715] usb 1-1: config 0 descriptor?? [ 429.058953][ T5715] ch341 1-1:0.0: ch341-uart converter detected [ 429.116566][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 429.122449][ T10] usb 10-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 429.122480][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.122500][ T10] usb 10-1: Product: syz [ 429.122514][ T10] usb 10-1: Manufacturer: syz [ 429.122594][ T10] usb 10-1: SerialNumber: syz [ 429.164702][ T10] usb 10-1: config 0 descriptor?? [ 429.221822][ T824] usb 3-1: usb_control_msg returned -32 [ 429.222082][ T824] usbtmc 3-1:16.0: can't read capabilities [ 429.382339][ T10] peak_usb 10-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 429.382362][ T10] peak_usb 10-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 429.527009][ T10] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -71 [ 429.542373][ T10] usb 10-1: USB disconnect, device number 73 [ 429.627114][T10969] md: md2 stopped. [ 429.642334][T10967] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 429.689797][ T5351] usb 3-1: USB disconnect, device number 70 [ 430.256694][ T5351] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 430.286603][ T10] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 430.427846][ T5351] usb 8-1: Using ep0 maxpacket: 32 [ 430.429385][ T5715] ch341-uart ttyUSB0: failed to read break control: -71 [ 430.429445][ T5715] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 430.441185][ T5351] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.441212][ T5351] usb 8-1: config 0 has no interfaces? [ 430.441239][ T5351] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 430.441262][ T5351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.468230][ T10] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 430.468261][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.468281][ T10] usb 10-1: Product: syz [ 430.468295][ T10] usb 10-1: Manufacturer: syz [ 430.468309][ T10] usb 10-1: SerialNumber: syz [ 430.501950][ T824] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 430.585345][ T5819] [ 430.585358][ T5819] ====================================================== [ 430.585365][ T5819] WARNING: possible circular locking dependency detected [ 430.585381][ T5819] syzkaller #0 Tainted: G L [ 430.585390][ T5819] ------------------------------------------------------ [ 430.585369][ C1] BUG: workqueue leaked atomic, lock or RCU: kworker/1:5[5715] [ 430.585369][ C1] preempt=0x00000000 lock=9->0 RCU=2->2 workfn=usb_giveback_urb_bh [ 430.585398][ T5819] kworker/0:6/5819 is trying to acquire lock: [ 430.585409][ T5819] ffff88802e22f4c8 ( [ 430.585419][ C1] INFO: lockdep is turned off. [ 430.585422][ T5819] &disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x127/0x980 [ 430.585438][ C1] CPU: 1 UID: 0 PID: 5715 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 430.585469][ C1] Tainted: [L]=SOFTLOCKUP [ 430.585462][ T5819] [ 430.585462][ T5819] but task is already holding lock: [ 430.585478][ T5819] ffffc90005b2fc40 [ 430.585477][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 430.585487][ T5819] ((work_completion)(&mddev->del_work)){+.+.}-{0:0} [ 430.585493][ C1] Workqueue: usb_hub_wq hub_event [ 430.585504][ T5819] , at: process_one_work+0x8be/0x1630 [ 430.585517][ C1] [ 430.585524][ C1] Call Trace: [ 430.585531][ T5819] [ 430.585531][ T5819] which lock already depends on the new lock. [ 430.585531][ T5819] [ 430.585532][ C1] [ 430.585539][ T5819] [ 430.585539][ T5819] the existing dependency chain (in reverse order) is: [ 430.585547][ T5819] [ 430.585547][ T5819] -> #8 ( [ 430.585543][ C1] dump_stack_lvl+0xe8/0x150 [ 430.585555][ T5819] (work_completion)(&mddev->del_work) [ 430.585562][ T5819] ){+.+.}-{0:0}: [ 430.585575][ C1] process_one_work+0x1097/0x1630 [ 430.585577][ T5819] process_one_work+0x8d7/0x1630 [ 430.585602][ T5819] worker_thread+0xb49/0x1140 [ 430.585614][ C1] ? __pfx_process_one_work+0x10/0x10 [ 430.585629][ T5819] kthread+0x389/0x470 [ 430.585642][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 430.585647][ T5819] ret_from_fork+0x514/0xb70 [ 430.585664][ C1] ? assign_work+0x3d5/0x5e0 [ 430.585669][ T5819] ret_from_fork_asm+0x1a/0x30 [ 430.585693][ T5819] [ 430.585693][ T5819] -> #7 ((wq_completion)md_misc){+.+.}-{0:0} [ 430.585694][ C1] bh_worker+0x5db/0x9d0 [ 430.585716][ T5819] : [ 430.585722][ T5819] touch_wq_lockdep_map+0xcb/0x180 [ 430.585733][ C1] tasklet_action+0xc/0x70 [ 430.585749][ T5819] __flush_workqueue+0x14b/0x14f0 [ 430.585765][ C1] handle_softirqs+0x1de/0x6d0 [ 430.585777][ T5819] md_alloc+0x32/0xf30 [ 430.585792][ T5819] md_alloc_and_put+0x1a/0x1f0 [ 430.585799][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 430.585815][ T5819] blk_request_module+0x27d/0x2a0 [ 430.585830][ C1] ? __alloc_skb+0x186/0x7d0 [ 430.585838][ T5819] blkdev_get_no_open+0x3f/0xe0 [ 430.585850][ C1] __alloc_skb+0x1aa/0x7d0 [ 430.585858][ T5819] blkdev_open+0x1f5/0x620 [ 430.585871][ C1] alloc_uevent_skb+0x7d/0x230 [ 430.585879][ T5819] do_dentry_open+0x83d/0x13e0 [ 430.585903][ T5819] vfs_open+0x3b/0x350 [ 430.585904][ C1] kobject_uevent_net_broadcast+0x2fd/0x560 [ 430.585926][ T5819] path_openat+0x2eea/0x3960 [ 430.585938][ C1] kobject_uevent_env+0x55f/0x9e0 [ 430.585944][ T5819] do_file_open+0x23e/0x4a0 [ 430.585962][ T5819] do_sys_openat2+0x115/0x200 [ 430.585972][ C1] really_probe+0x789/0xaf0 [ 430.585986][ T5819] __x64_sys_openat+0x138/0x170 [ 430.586006][ C1] __driver_probe_device+0x1e2/0x350 [ 430.586012][ T5819] do_syscall_64+0x15f/0x560 [ 430.586032][ T5819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.586039][ C1] driver_probe_device+0x4f/0x240 [ 430.586056][ T5819] [ 430.586056][ T5819] -> #6 (major_names_lock){+.+.}-{4:4}: [ 430.586071][ C1] __device_attach_driver+0x270/0x410 [ 430.586082][ T5819] mutex_lock_nested+0x5a/0x1d0 [ 430.586104][ C1] bus_for_each_drv+0x25b/0x2f0 [ 430.586107][ T5819] blk_request_module+0x35/0x2a0 [ 430.586130][ T5819] blkdev_get_no_open+0x3f/0xe0 [ 430.586127][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 430.586149][ T5819] bdev_file_open_by_dev+0xa0/0x240 [ 430.586159][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 430.586168][ T5819] swsusp_check+0x56/0x490 [ 430.586182][ C1] ? rt_spin_unlock+0x160/0x200 [ 430.586188][ T5819] software_resume+0x51/0x4c0 [ 430.586214][ T5819] resume_store+0x333/0x4f0 [ 430.586221][ C1] __device_attach+0x2c8/0x450 [ 430.586239][ T5819] kernfs_fop_write_iter+0x3b0/0x540 [ 430.586250][ C1] ? __pfx___device_attach+0x10/0x10 [ 430.586262][ T5819] vfs_write+0x629/0xba0 [ 430.586279][ T5819] ksys_write+0x156/0x270 [ 430.586281][ C1] ? rt_spin_unlock+0x160/0x200 [ 430.586297][ T5819] do_syscall_64+0x15f/0x560 [ 430.586316][ T5819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.586313][ C1] device_initial_probe+0xa1/0xd0 [ 430.586334][ T5819] [ 430.586334][ T5819] -> #5 (system_transition_mutex){+.+.}-{4:4}: [ 430.586348][ C1] bus_probe_device+0x12d/0x220 [ 430.586359][ T5819] mutex_lock_nested+0x5a/0x1d0 [ 430.586374][ C1] device_add+0x7ec/0xb90 [ 430.586383][ T5819] lock_system_sleep+0x49/0x70 [ 430.586402][ T5819] resume_store+0x2ff/0x4f0 [ 430.586403][ C1] usb_set_configuration+0x1a87/0x2110 [ 430.586428][ T5819] kernfs_fop_write_iter+0x3b0/0x540 [ 430.586442][ C1] usb_generic_driver_probe+0x8d/0x150 [ 430.586449][ T5819] vfs_write+0x629/0xba0 [ 430.586473][ T5819] ksys_write+0x156/0x270 [ 430.586470][ C1] usb_probe_device+0x1c4/0x3b0 [ 430.586490][ T5819] do_syscall_64+0x15f/0x560 [ 430.586501][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 430.586508][ T5819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.586527][ T5819] [ 430.586527][ T5819] -> #4 (&of->mutex){+.+.}-{4:4} [ 430.586530][ C1] really_probe+0x267/0xaf0 [ 430.586549][ T5819] : [ 430.586554][ T5819] mutex_lock_nested+0x5a/0x1d0 [ 430.586564][ C1] __driver_probe_device+0x1e2/0x350 [ 430.586579][ T5819] kernfs_seq_start+0x5c/0x420 [ 430.586595][ C1] driver_probe_device+0x4f/0x240 [ 430.586600][ T5819] traverse+0x164/0x580 [ 430.586621][ T5819] seq_read_iter+0xd09/0xe20 [ 430.586629][ C1] __device_attach_driver+0x270/0x410 [ 430.586641][ T5819] lo_rw_aio+0xc80/0xf00 [ 430.586658][ T5819] loop_process_work+0x92a/0x11b0 [ 430.586662][ C1] bus_for_each_drv+0x25b/0x2f0 [ 430.586675][ T5819] process_one_work+0x98b/0x1630 [ 430.586686][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 430.586699][ T5819] worker_thread+0xb49/0x1140 [ 430.586718][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 430.586724][ T5819] kthread+0x389/0x470 [ 430.586742][ T5819] ret_from_fork+0x514/0xb70 [ 430.586742][ C1] ? rt_spin_unlock+0x160/0x200 [ 430.586763][ T5819] ret_from_fork_asm+0x1a/0x30 [ 430.586774][ C1] __device_attach+0x2c8/0x450 [ 430.586787][ T5819] [ 430.586787][ T5819] -> #3 (&p->lock){+.+.}-{4:4}: [ 430.586804][ C1] ? __pfx___device_attach+0x10/0x10 [ 430.586812][ T5819] mutex_lock_nested+0x5a/0x1d0 [ 430.586836][ T5819] seq_read_iter+0xb8/0xe20 [ 430.586834][ C1] ? rt_spin_unlock+0x160/0x200 [ 430.586857][ T5819] lo_rw_aio+0xc80/0xf00 [ 430.586865][ C1] device_initial_probe+0xa1/0xd0 [ 430.586873][ T5819] loop_process_work+0x92a/0x11b0 [ 430.586889][ T5819] process_one_work+0x98b/0x1630 [ 430.586896][ C1] bus_probe_device+0x12d/0x220 [ 430.586913][ T5819] worker_thread+0xb49/0x1140 [ 430.586921][ C1] device_add+0x7ec/0xb90 [ 430.586939][ T5819] kthread+0x389/0x470 [ 430.586949][ C1] usb_new_device+0x9f8/0x16e0 [ 430.586957][ T5819] ret_from_fork+0x514/0xb70 [ 430.586977][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 430.586977][ T5819] ret_from_fork_asm+0x1a/0x30 [ 430.587000][ T5819] [ 430.587000][ T5819] -> #2 ((work_completion)(&worker->work) [ 430.587003][ C1] hub_event+0x2a49/0x4f60 [ 430.587015][ T5819] ){+.+.}-{0:0}: [ 430.587027][ T5819] process_one_work+0x8d7/0x1630 [ 430.587050][ C1] ? __pfx_hub_event+0x10/0x10 [ 430.587052][ T5819] worker_thread+0xb49/0x1140 [ 430.587077][ T5819] kthread+0x389/0x470 [ 430.587075][ C1] ? process_one_work+0x8be/0x1630 [ 430.587096][ T5819] ret_from_fork+0x514/0xb70 [ 430.587109][ C1] ? process_one_work+0x8be/0x1630 [ 430.587116][ T5819] ret_from_fork_asm+0x1a/0x30 [ 430.587140][ T5819] [ 430.587140][ T5819] -> #1 ( [ 430.587138][ C1] process_one_work+0x98b/0x1630 [ 430.587149][ T5819] (wq_completion)loop2){+.+.}-{0:0}: [ 430.587168][ T5819] touch_wq_lockdep_map+0xcb/0x180 [ 430.587176][ C1] ? __pfx_process_one_work+0x10/0x10 [ 430.587196][ T5819] __flush_workqueue+0x14b/0x14f0 [ 430.587204][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 430.587223][ T5819] drain_workqueue+0xd3/0x390 [ 430.587240][ T5819] lo_release+0x287/0x8f0 [ 430.587236][ C1] worker_thread+0xb49/0x1140 [ 430.587256][ T5819] bdev_release+0x541/0x660 [ 430.587270][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 430.587275][ T5819] blkdev_release+0x15/0x20 [ 430.587298][ C1] kthread+0x389/0x470 [ 430.587297][ T5819] __fput+0x461/0xa70 [ 430.587321][ T5819] task_work_run+0x1d9/0x270 [ 430.587320][ C1] ? __pfx_worker_thread+0x10/0x10 [ 430.587341][ T5819] exit_to_user_mode_loop+0xf3/0x4d0 [ 430.587349][ C1] ? __pfx_kthread+0x10/0x10 [ 430.587361][ T5819] do_syscall_64+0x33e/0x560 [ 430.587372][ C1] ret_from_fork+0x514/0xb70 [ 430.587380][ T5819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.587400][ T5819] [ 430.587400][ T5819] -> #0 ( [ 430.587398][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 430.587408][ T5819] &disk->open_mutex){+.+.}-{4:4}: [ 430.587427][ T5819] __lock_acquire+0x15a5/0x2d10 [ 430.587425][ C1] ? __switch_to+0xc79/0x1410 [ 430.587446][ T5819] lock_acquire+0x106/0x350 [ 430.587455][ C1] ? __pfx_kthread+0x10/0x10 [ 430.587470][ T5819] mutex_lock_nested+0x5a/0x1d0 [ 430.587477][ C1] ret_from_fork_asm+0x1a/0x30 [ 430.587493][ T5819] __del_gendisk+0x127/0x980 [ 430.587511][ C1] [ 430.587516][ T5819] md_kobj_release+0xbf/0xf0 [ 430.587537][ T5819] kobject_put+0x228/0x560 [ 430.587554][ T5819] process_one_work+0x98b/0x1630 [ 430.587573][ T5819] worker_thread+0xb49/0x1140 [ 430.587595][ T5819] kthread+0x389/0x470 [ 430.587610][ T5819] ret_from_fork+0x514/0xb70 [ 430.587628][ T5819] ret_from_fork_asm+0x1a/0x30 [ 430.587645][ T5819] [ 430.587645][ T5819] other info that might help us debug this: [ 430.587645][ T5819] [ 430.587651][ T5819] Chain exists of: [ 430.587651][ T5819] &disk->open_mutex --> (wq_completion)md_misc --> (work_completion)(&mddev->del_work) [ 430.587651][ T5819] [ 430.587681][ T5819] Possible unsafe locking scenario: [ 430.587681][ T5819] [ 430.587688][ T5819] CPU0 CPU1 [ 430.587694][ T5819] ---- ---- [ 430.587700][ T5819] lock((work_completion)(&mddev->del_work)); [ 430.587714][ T5819] lock((wq_completion)md_misc); [ 430.587729][ T5819] lock((work_completion)(&mddev->del_work)); [ 430.587743][ T5819] lock(&disk->open_mutex); [ 430.587756][ T5819] [ 430.587756][ T5819] *** DEADLOCK *** [ 430.587756][ T5819] [ 430.587761][ T5819] 2 locks held by kworker/0:6/5819: [ 430.587771][ T5819] #0: ffff888020ad8538 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 430.587820][ T5819] #1: ffffc90005b2fc40 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 430.587868][ T5819] [ 430.587868][ T5819] stack backtrace: [ 430.587881][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 430.587907][ T5819] Tainted: [L]=SOFTLOCKUP [ 430.587914][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 430.587927][ T5819] Workqueue: md_misc mddev_delayed_delete [ 430.587953][ T5819] Call Trace: [ 430.587960][ T5819] [ 430.587969][ T5819] dump_stack_lvl+0xe8/0x150 [ 430.587991][ T5819] print_circular_bug+0x2e1/0x300 [ 430.588017][ T5819] check_noncircular+0x12e/0x150 [ 430.588043][ T5819] __lock_acquire+0x15a5/0x2d10 [ 430.588064][ T5819] ? lockdep_hardirqs_on+0x7a/0x110 [ 430.588088][ T5819] ? preempt_schedule_thunk+0x16/0x40 [ 430.588118][ T5819] ? __del_gendisk+0x127/0x980 [ 430.588140][ T5819] lock_acquire+0x106/0x350 [ 430.588159][ T5819] ? __del_gendisk+0x127/0x980 [ 430.588184][ T5819] ? __del_gendisk+0x127/0x980 [ 430.588208][ T5819] ? __del_gendisk+0x127/0x980 [ 430.588230][ T5819] mutex_lock_nested+0x5a/0x1d0 [ 430.588253][ T5819] ? __del_gendisk+0x127/0x980 [ 430.588277][ T5819] __del_gendisk+0x127/0x980 [ 430.588304][ T5819] ? __pfx___del_gendisk+0x10/0x10 [ 430.588327][ T5819] ? kernfs_put+0x6dd/0x700 [ 430.588355][ T5819] ? del_gendisk+0x117/0x160 [ 430.588378][ T5819] md_kobj_release+0xbf/0xf0 [ 430.588403][ T5819] kobject_put+0x228/0x560 [ 430.588427][ T5819] ? process_one_work+0x8be/0x1630 [ 430.588451][ T5819] process_one_work+0x98b/0x1630 [ 430.588488][ T5819] ? __pfx_process_one_work+0x10/0x10 [ 430.588510][ T5819] ? do_raw_spin_lock+0x12b/0x2f0 [ 430.588532][ T5819] worker_thread+0xb49/0x1140 [ 430.588567][ T5819] kthread+0x389/0x470 [ 430.588586][ T5819] ? __pfx_worker_thread+0x10/0x10 [ 430.588611][ T5819] ? __pfx_kthread+0x10/0x10 [ 430.588630][ T5819] ret_from_fork+0x514/0xb70 [ 430.588653][ T5819] ? __pfx_ret_from_fork+0x10/0x10 [ 430.588674][ T5819] ? __switch_to+0xc79/0x1410 [ 430.588692][ T5819] ? __pfx_kthread+0x10/0x10 [ 430.588711][ T5819] ret_from_fork_asm+0x1a/0x30 [ 430.588740][ T5819] [ 430.629691][ T10] usb 10-1: config 0 descriptor?? [ 430.629893][ T5351] usb 8-1: config 0 descriptor?? [ 430.716487][ T824] usb 3-1: device descriptor read/64, error -71 [ 430.877957][ T5715] usb 1-1: USB disconnect, device number 58 [ 430.890090][ T5715] ch341 1-1:0.0: device disconnected [ 430.930955][T10978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.932421][T10978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.935763][ T5351] usb 8-1: USB disconnect, device number 71 [ 431.014545][ T824] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 431.043220][ T10] usb 10-1: Firmware: major: 0, minor: 100, hardware type: UNKNOWN (47) [ 431.231819][ T824] usb 3-1: device descriptor read/64, error -71 [ 431.244258][ T10] usb 10-1: Firmware: build ctفvoJk1CChz;/%uҎ'Th6AҭOG-j}rnU8 žT? [ 431.244258][ T10] ?FaRVHƳ/bH [ 431.244258][ T10] ir"0Q21Nl|_s@[?`ݨ||fbR [ 431.374654][ T824] usb usb3-port1: attempt power cycle [ 431.446271][ T10] usb 10-1: failed to fetch extended address, random address set [ 431.446301][ T10] usb 10-1: atusb_probe: initialization failed, error = -524 [ 431.446829][ T5351] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 431.449750][ T10] atusb 10-1:0.0: probe with driver atusb failed with error -524 [ 431.461368][ T10] usb 10-1: USB disconnect, device number 74 [ 431.599699][ T5351] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 431.599731][ T5351] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 431.599752][ T5351] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 431.601925][ T5351] usb 8-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=31.68 [ 431.601953][ T5351] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.601971][ T5351] usb 8-1: Product: syz [ 431.601984][ T5351] usb 8-1: Manufacturer: syz [ 431.601998][ T5351] usb 8-1: SerialNumber: syz [ 431.604505][ T5351] usb 8-1: config 0 descriptor?? [ 431.820532][ T10] usb 8-1: USB disconnect, device number 72 [ 431.857855][ T824] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 431.883329][ T824] usb 3-1: device descriptor read/8, error -71 [ 432.226535][ T824] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 432.247466][ T824] usb 3-1: device descriptor read/8, error -71 [ 432.357985][ T824] usb usb3-port1: unable to enumerate USB device [ 439.649737][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.649787][ T1337] ieee802154 phy1 wpan1: encryption failed: -22