last executing test programs: 3m5.60388719s ago: executing program 4 (id=329): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x48200, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, 0x0) 3m5.507891355s ago: executing program 4 (id=330): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000003, 0x204031, 0xffffffffffffffff, 0x97170000) clock_nanosleep(0x2, 0x0, 0x0, &(0x7f0000000040)) 3m3.65625386s ago: executing program 4 (id=335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x7}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x1, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000011}, 0x2000c080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 3m3.066333328s ago: executing program 4 (id=338): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x35}, 0x28) getsockopt(0xffffffffffffffff, 0x110, 0x6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$XFS_IOC_FSGEOMETRY_V4(r2, 0x8070587c, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) 3m2.567249227s ago: executing program 4 (id=343): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_emit_ethernet(0x52, &(0x7f0000000300)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x1c, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "00000000000000006000a359"}}}}}}}, 0x0) 3m1.290544548s ago: executing program 4 (id=345): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000001f40), &(0x7f00000022c0)=0x30) socket$kcm(0x2, 0x7, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1d}, 0x1, 0x0, 0x0, 0xc080}, 0x4004) getsockname$packet(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000390400000a673d69ffff000000", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@getaddr={0x14, 0x16, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4004050) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5}, @IFLA_MACSEC_SCB={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24028001}, 0x4008800) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 2m46.030529871s ago: executing program 32 (id=345): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000001f40), &(0x7f00000022c0)=0x30) socket$kcm(0x2, 0x7, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1d}, 0x1, 0x0, 0x0, 0xc080}, 0x4004) getsockname$packet(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000390400000a673d69ffff000000", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@getaddr={0x14, 0x16, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4004050) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5}, @IFLA_MACSEC_SCB={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24028001}, 0x4008800) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 10.463768047s ago: executing program 5 (id=857): syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x48000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) 8.529613227s ago: executing program 5 (id=861): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x44842, 0x1ef) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f00000000c0)='7', 0x1) sendfile(r0, r1, 0x0, 0xfffe82) 7.502641636s ago: executing program 1 (id=863): r0 = userfaultfd(0x801) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) ioctl$VIDIOC_STREAMOFF(r7, 0x40045613, &(0x7f0000000440)=0x8) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x800452d2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r9, 0x4, 0x42000) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x80, 0x0, 0x35b}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400), 0x2406, &(0x7f0000000680)={[{@nfs_export_on}, {@index_on}, {@verity_off}, {@index_on}, {@metacopy_off}, {@redirect_dir_nofollow}, {@index_off}, {@default_permissions}, {@redirect_dir_follow}, {@volatile}], [{@mask={'mask', 0x3d, 'MAY_READ'}}]}) 7.452839501s ago: executing program 2 (id=864): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x2) 7.330874931s ago: executing program 5 (id=865): r0 = memfd_create(0x0, 0x3) execveat(r0, 0x0, 0x0, 0x0, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) cachestat(r2, &(0x7f0000000000)={0x7ffc}, &(0x7f0000000040), 0x0) 6.996139165s ago: executing program 6 (id=867): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) 6.987590382s ago: executing program 3 (id=868): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) 6.660153881s ago: executing program 6 (id=869): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006400000000000008000000000000000000000000000000002bca04dbbd00001a7a3659bf572d40fcdc8cccea04300877b80a7321501d64a9a2e87c7a373c8eefda6db98193e2bb"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x20) writev(r1, &(0x7f0000019540)=[{&(0x7f0000019440)='3', 0x1}], 0x1) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x400, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x9, &(0x7f0000000880)=ANY=[@ANYBLOB="bfa20000000000000700000000ffffa300000000000007030080f0ff495c13d56c29ffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000000000085000000020000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000980)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x49, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xaa, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0xcb, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x2008, 0x4c74, 0xffff7dff, 0x7, 0x3, 0xe, 0x1, 0x80008071, 0x4, 0x17, 0xffffffff, 0x6, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff5, 0x129432f5, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x8, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c9368f, 0x40, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x101, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x8, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x9, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0xd5cf, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x5, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x20000000, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x2, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0xa, 0x9, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@fd={0x4, 0x2, 0x4, 0x1, 0x400, {}, {0x2, 0x0, 0x1, 0x4, 0x10, 0x0, "e27d63fd"}, 0x521}) sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_set$pid(0x2, r3, 0x4004) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r7 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff", @ANYRES8], 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000240)='9p\x80', 0x0, 0xffffffffffffff9c) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) mount$9p_tcp(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', 0x0, 0x4000, &(0x7f0000000340)={'trans=tcp,', {'port', 0x3d, 0x4e24}}) 6.588842538s ago: executing program 2 (id=870): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x57) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 6.322018506s ago: executing program 3 (id=871): ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000040)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000c80)={0xa, 0x4e20, 0x1, @mcast1, 0x40}, 0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$usbfs(0x0, 0xf, 0x450001) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@fwd={0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x2, 0x2}]}]}, {0x0, [0x5f, 0x4f]}}, 0x0, 0x40, 0x0, 0xa}, 0x28) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, &(0x7f0000000440)) 6.203807622s ago: executing program 1 (id=872): socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) 6.052296566s ago: executing program 1 (id=873): syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x48000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) 5.985626252s ago: executing program 3 (id=874): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x1, 0x32, 0x5, 0x80, 0x7, 0x5, 0xe37f, 0x8}, &(0x7f0000000080)={0x1, 0x0, 0xc, 0x0, 0x9, 0x8, 0x7, 0xff9}, 0x0, &(0x7f00000001c0)={r1, r2+10000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x8]}, 0x8}) 5.635891988s ago: executing program 5 (id=875): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ff", 0xd, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.612611792s ago: executing program 6 (id=876): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}}, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x40}, 0x94) syz_usb_connect(0x1, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x1a, 0x87, 0x70, 0x8, 0x10c4, 0x1601, 0x101c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x8, 0x1, 0x40, 0x60}}]}}, &(0x7f0000000080)={0x0, 0x0, 0xf, &(0x7f00000000c0)=ANY=[], 0x1, [{0x0, 0x0}]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 4.582278491s ago: executing program 1 (id=877): mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) 4.498743466s ago: executing program 2 (id=879): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x2020, 0x8, 0x3, 0x5, 0x1}, 0x8) 4.359931196s ago: executing program 3 (id=880): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x545c, 0x0) 4.359730792s ago: executing program 5 (id=881): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3.419437382s ago: executing program 5 (id=882): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000"], 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000004c0)={0x7, @pix={0x8, 0x8, 0x4f565559, 0x1, 0x3, 0xd2c8, 0x9, 0x400, 0x1, 0x8}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000240)=ANY=[@ANYRES64=r1], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) file_setattr(0xffffffffffffff9c, 0x0, &(0x7f0000000580)={0x0, 0xffd, 0x245b1f2a, 0x8, 0x10000}, 0x18, 0x1000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) syz_emit_ethernet(0x9a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0e86dd600101000064110000000000000000000000000000000000ff0200000000000000000001ffaaaaaa00"], 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000180)={0x10}) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.417278522s ago: executing program 0 (id=883): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) 3.358697624s ago: executing program 1 (id=884): r0 = userfaultfd(0x801) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) ioctl$VIDIOC_STREAMOFF(r7, 0x40045613, &(0x7f0000000440)=0x8) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x800452d2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r9, 0x4, 0x42000) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x80, 0x0, 0x35b}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400), 0x2406, &(0x7f0000000680)={[{@nfs_export_on}, {@index_on}, {@verity_off}, {@index_on}, {@metacopy_off}, {@redirect_dir_nofollow}, {@index_off}, {@default_permissions}, {@redirect_dir_follow}, {@volatile}], [{@mask={'mask', 0x3d, 'MAY_READ'}}]}) 3.357959902s ago: executing program 3 (id=885): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="45adc21547e71ec000cc9aa306c7173650b76454deb01470633d0b90aece1d342807eb", @ANYRES32=0x0, @ANYRES32=0x0], 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) close(0xffffffffffffffff) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000840)={0x5, &(0x7f0000000780)=[{0x4, 0x3d, &(0x7f0000000140)="01ec52a240d326c40d5c8e5b93f2f8a75c4943d8b092ffd4d5f3c391307a804c5f9c84e6160717e68c118eb382b9be5c6b21833919f2471c1e1ab9c9ce", 0x0, 0x1}, {0x4a7e3e4c, 0xf9, &(0x7f0000000400)="76bb02f3718a5ced817c0ed66af89d2075a5ebdc574ae63d908da694360c5d76d73497b719a50f27eca2aff168ea409c1069bfc196b316506467fcb01d88dd524177f27f8c8fc4a2a8270970fbd5851d480517d12fa50424ef7d8af6e2fda3d5db2fa876f692ce3ad2fd0010cc04dc469b892b0686d39970902ad0fecf4a636b7aa9cf9d8e37212402584091fcd014ad9718aa95978c2ef397d9e4c38fd250d196dab7770a8a29fd5879cbc9594240484ddb2e9571bc13d2d1d5c6703231e85a95b2f50037399a6828cb0f71fd3733737a80c7cf4eec08ea6c319a05bf5f99573090d982afe43f3f6962e436d34fa93fdeb00112f6d3594af9", 0x1, 0x1}, {0x5, 0x4f, &(0x7f0000000500)="837f941911f139caf2a40c2383bccc2ae55938e2c4410c6270bbbd5eb9ccde9f3d589882836901dfedb29a200d4eed3f1ab6ff5cf2f4ab01eb6933edaebfb6996c7e23fe1bc27968bd9da1de0af12d"}, {0x3, 0x44, &(0x7f0000000600)="59f207e235c9a155e128df82f55f3d0fa5524c1a394f8d3dc43df867d78ce27886b4d2d980425935f01c631b09a3520b4d52d48ec370a5d1b65c57188ac84a49dbda9ef9"}, {0x4, 0xeb, &(0x7f0000000680)="3a062ebeaba27c4c50c9a76d1d7aae95177faf5bf0cc68f3b5df76f5c664badcaddcd426eb720ac340c6548bddecda2cbdf8ada5b25df07f892c384fc9c0bd6e89db528cb72dce50fc632e67050c089540937eeca3c8156d99eccadc959587ae1f037b2f180820560432bfa63c7b299506dc72fbb68929818a74862db34b4247dfa3663aecba08c8ca5afe5c7fd2e6b5d5b8f2cd7c51988267780a57a75cd70e1269005565a9b7f84a433614174fa34455188c899b4555ced20f9a7eb584f60270a1f75f556c318c477fa57dc6ecf794c40cb8db1d0266e51f714787b8fea4fdd7f15272fe39140be1a600", 0x1, 0x1}]}) r2 = syz_usb_connect$hid(0x5, 0xa0, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x361}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x1, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.114919805s ago: executing program 2 (id=886): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x6b3, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) socket(0x10, 0x803, 0x9) setresuid(0xee01, 0x0, 0xee01) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.77140252s ago: executing program 0 (id=887): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.663035889s ago: executing program 6 (id=888): r0 = memfd_create(0x0, 0x3) execveat(r0, 0x0, 0x0, 0x0, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) cachestat(r2, &(0x7f0000000000)={0x7ffc}, &(0x7f0000000040), 0x0) 1.557657403s ago: executing program 1 (id=889): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300), 0x1000}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b00), 0x1000}], 0x1}, 0x0) 982.971205ms ago: executing program 3 (id=890): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000140)=[{0xff, 0x0, 0x1, &(0x7f0000000340)="81"}], 0x1}) 724.271731ms ago: executing program 0 (id=891): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb70067", 0x5c) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0x12}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) 637.16528ms ago: executing program 0 (id=892): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x23) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000"], 0x0) 537.230971ms ago: executing program 0 (id=893): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)) 356.093876ms ago: executing program 6 (id=894): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x2, 0x2143844, 0x4004, 0x9, 0x0, 0x6, 0x0, 0x0, 0x40, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3f, 0x4, 0x10, 0x100001, 0x5, 0x2, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0) 263.449234ms ago: executing program 0 (id=895): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 254.908317ms ago: executing program 2 (id=896): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r0, &(0x7f0000000000)='3', 0x4e) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x44005) getpid() ioctl$UBLK_U_CMD_ADD_DEV(r0, 0xc0207504, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 242.339908ms ago: executing program 6 (id=897): syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 0s ago: executing program 2 (id=898): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x2020, 0x8, 0x3, 0x5, 0x1}, 0x8) kernel console output (not intermixed with test programs): .0.1/share [ 211.083548][ T7024] CIFS: VFS: Error connecting to socket. Aborting operation. [ 211.083590][ T7024] CIFS: VFS: cifs_mount failed w/return code = -111 [ 211.234724][ T7030] FAULT_INJECTION: forcing a failure. [ 211.234724][ T7030] name failslab, interval 1, probability 0, space 0, times 0 [ 211.234782][ T7030] CPU: 1 UID: 0 PID: 7030 Comm: syz.2.407 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.234821][ T7030] Tainted: [L]=SOFTLOCKUP [ 211.234831][ T7030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 211.234846][ T7030] Call Trace: [ 211.234856][ T7030] [ 211.234866][ T7030] dump_stack_lvl+0xe8/0x150 [ 211.234908][ T7030] should_fail_ex+0x410/0x560 [ 211.234956][ T7030] should_failslab+0xa8/0x100 [ 211.234989][ T7030] __kmalloc_cache_noprof+0xa3/0x600 [ 211.235030][ T7030] ? snd_seq_port_use_ptr+0x29/0x260 [ 211.235057][ T7030] ? snd_seq_port_connect+0x6b/0x3a0 [ 211.235084][ T7030] ? snd_seq_port_connect+0x6b/0x3a0 [ 211.235121][ T7030] snd_seq_port_connect+0x6b/0x3a0 [ 211.235148][ T7030] ? snd_seq_port_use_ptr+0x29/0x260 [ 211.235173][ T7030] ? snd_seq_port_use_ptr+0x29/0x260 [ 211.235202][ T7030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.235232][ T7030] ? snd_seq_port_use_ptr+0x229/0x260 [ 211.235263][ T7030] snd_seq_ioctl_subscribe_port+0x351/0x790 [ 211.235309][ T7030] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 211.235342][ T7030] ? clientptr+0x17/0x160 [ 211.235367][ T7030] ? clientptr+0x17/0x160 [ 211.235390][ T7030] ? clientptr+0x17/0x160 [ 211.235416][ T7030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.235453][ T7030] snd_seq_oss_midi_open+0x558/0x890 [ 211.235498][ T7030] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 211.235546][ T7030] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 211.235583][ T7030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.235617][ T7030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.235648][ T7030] ? snd_seq_oss_midi_get_addr+0x19e/0x260 [ 211.235690][ T7030] snd_seq_oss_synth_setup_midi+0x12d/0x530 [ 211.235740][ T7030] snd_seq_oss_open+0x94f/0xf40 [ 211.235779][ T7030] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 211.235848][ T7030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.235878][ T7030] ? rcu_is_watching+0x16/0xb0 [ 211.235908][ T7030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.235942][ T7030] ? trace_contention_end+0x3d/0x140 [ 211.235999][ T7030] ? __pfx___mutex_lock+0x10/0x10 [ 211.236030][ T7030] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 211.236062][ T7030] ? __pfx_free_devinfo+0x10/0x10 [ 211.236091][ T7030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.236120][ T7030] ? do_raw_spin_unlock+0xf5/0x200 [ 211.236160][ T7030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.236190][ T7030] ? soundcore_open+0x2da/0x490 [ 211.236225][ T7030] odev_open+0x67/0xa0 [ 211.236254][ T7030] chrdev_open+0x4d9/0x600 [ 211.236287][ T7030] ? __pfx_chrdev_open+0x10/0x10 [ 211.236320][ T7030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.236350][ T7030] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 211.236385][ T7030] ? __pfx_chrdev_open+0x10/0x10 [ 211.236412][ T7030] do_dentry_open+0x816/0x1380 [ 211.236457][ T7030] vfs_open+0x3b/0x340 [ 211.236484][ T7030] ? path_openat+0x1428/0x1d60 [ 211.236527][ T7030] path_openat+0x1443/0x1d60 [ 211.236591][ T7030] do_file_open+0x23e/0x4a0 [ 211.236638][ T7030] ? __pfx_do_file_open+0x10/0x10 [ 211.236704][ T7030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.236733][ T7030] ? _raw_spin_unlock+0x28/0x50 [ 211.236766][ T7030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.236795][ T7030] ? alloc_fd+0x651/0x6c0 [ 211.236841][ T7030] do_sys_openat2+0x115/0x200 [ 211.236871][ T7030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.236901][ T7030] ? __se_sys_futex+0x3a8/0x450 [ 211.236936][ T7030] ? __pfx_do_sys_openat2+0x10/0x10 [ 211.236974][ T7030] ? rcu_is_watching+0x16/0xb0 [ 211.237004][ T7030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 211.237039][ T7030] __x64_sys_openat+0x138/0x170 [ 211.237078][ T7030] do_syscall_64+0x166/0x520 [ 211.237101][ T7030] ? trace_irq_disable+0x3b/0x140 [ 211.237126][ T7030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.237160][ T7030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.237186][ T7030] RIP: 0033:0x7f7a2d19e159 [ 211.237209][ T7030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.237231][ T7030] RSP: 002b:00007f7a2e0ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 211.237258][ T7030] RAX: ffffffffffffffda RBX: 00007f7a2d425fa0 RCX: 00007f7a2d19e159 [ 211.237277][ T7030] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 211.237301][ T7030] RBP: 00007f7a2d235024 R08: 0000000000000000 R09: 0000000000000000 [ 211.237318][ T7030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.237334][ T7030] R13: 00007f7a2d426038 R14: 00007f7a2d425fa0 R15: 00007ffdb547ae58 [ 211.237374][ T7030] [ 211.365111][ T6862] Set syz1 is full, maxelem 65536 reached [ 211.649663][ T7035] loop8: detected capacity change from 0 to 8 [ 211.693577][ T7035] Dev loop8: unable to read RDB block 8 [ 211.693613][ T7035] loop8: unable to read partition table [ 211.693822][ T7035] loop8: partition table beyond EOD, truncated [ 211.693842][ T7035] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 213.413013][ T5639] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.415204][ T5639] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.415788][ T5639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.417139][ T5639] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.417781][ T5639] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 213.840358][ T5760] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 213.999533][ T5760] usb 6-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice=10.1c [ 214.016478][ T5760] usb 6-1: config 8 has no interfaces? [ 215.409165][ T5760] usb 6-1: string descriptor 0 read error: -22 [ 215.409411][ T5760] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.452235][ T5639] Bluetooth: hci6: command tx timeout [ 216.081329][ T7085] capability: warning: `syz.1.421' uses deprecated v2 capabilities in a way that may be insecure [ 216.250091][ T981] usb 6-1: USB disconnect, device number 8 [ 216.517584][ T5956] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.691622][ T5639] Bluetooth: hci6: command tx timeout [ 219.859366][ T5630] Bluetooth: hci6: command tx timeout [ 220.148039][ T5956] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.092450][ T5956] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.478047][ T5956] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.540265][ T981] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 221.668253][ T7124] tipc: Enabled bearer , priority 0 [ 221.693668][ T981] usb 6-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice=10.1c [ 221.703379][ T981] usb 6-1: config 8 has no interfaces? [ 221.734220][ T981] usb 6-1: string descriptor 0 read error: -22 [ 221.734382][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.824244][ T7123] tipc: Disabling bearer [ 221.905122][ T7140] loop8: detected capacity change from 0 to 8 [ 221.920554][ T5630] Bluetooth: hci6: command tx timeout [ 221.933892][ T7140] Dev loop8: unable to read RDB block 8 [ 221.933977][ T7140] loop8: unable to read partition table [ 221.934220][ T7140] loop8: partition table beyond EOD, truncated [ 221.934267][ T7140] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 221.964007][ T5747] usb 6-1: USB disconnect, device number 9 [ 223.605428][ T5956] bridge_slave_1: left allmulticast mode [ 223.618329][ T5956] bridge_slave_1: left promiscuous mode [ 223.627411][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.467834][ T5956] bridge_slave_0: left allmulticast mode [ 224.467916][ T5956] bridge_slave_0: left promiscuous mode [ 224.468652][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.227487][ T5956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.274912][ T5956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.292287][ T5956] bond0 (unregistering): Released all slaves [ 227.992778][ T7198] syzkaller0: entered promiscuous mode [ 227.998598][ T7198] syzkaller0: entered allmulticast mode [ 229.327177][ T7221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.336422][ T7221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.568301][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.462'. [ 231.568392][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.462'. [ 231.568465][ T7232] FAULT_INJECTION: forcing a failure. [ 231.568465][ T7232] name failslab, interval 1, probability 0, space 0, times 0 [ 231.568530][ T7232] CPU: 0 UID: 0 PID: 7232 Comm: syz.5.462 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.568564][ T7232] Tainted: [L]=SOFTLOCKUP [ 231.568574][ T7232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 231.568589][ T7232] Call Trace: [ 231.568599][ T7232] [ 231.568609][ T7232] dump_stack_lvl+0xe8/0x150 [ 231.568655][ T7232] should_fail_ex+0x410/0x560 [ 231.568702][ T7232] should_failslab+0xa8/0x100 [ 231.568734][ T7232] __kmalloc_cache_noprof+0xa3/0x600 [ 231.568776][ T7232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.568806][ T7232] ? nft_setelem_insert+0x22e/0x3f0 [ 231.568841][ T7232] ? nft_setelem_insert+0x22e/0x3f0 [ 231.568878][ T7232] ? nft_trans_alloc+0x22/0x2a0 [ 231.568913][ T7232] nft_setelem_insert+0x22e/0x3f0 [ 231.568957][ T7232] nf_tables_newsetelem+0x2aa4/0x4200 [ 231.568985][ T7232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.569014][ T7232] ? do_trace_netlink_extack+0x80/0x1d0 [ 231.569088][ T7232] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 231.569119][ T7232] ? lock_acquire+0x115/0x350 [ 231.569156][ T7232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.569186][ T7232] ? nla_validate_array+0xfc/0x260 [ 231.569216][ T7232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.569280][ T7232] ? __pfx___nla_validate_parse+0x10/0x10 [ 231.569325][ T7232] ? __pfx_nf_tables_newset+0x10/0x10 [ 231.569358][ T7232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.569388][ T7232] ? lock_acquire+0x115/0x350 [ 231.569414][ T7232] ? nfnl_pernet+0x23/0x240 [ 231.569455][ T7232] ? __nla_parse+0x40/0x60 [ 231.569490][ T7232] nfnetlink_rcv+0x1288/0x28c0 [ 231.569559][ T7232] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 231.569608][ T7232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.569637][ T7232] ? ref_tracker_free+0x689/0x830 [ 231.569693][ T7232] ? skb_clone+0x246/0x3a0 [ 231.569727][ T7232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.569757][ T7232] ? __netlink_deliver_tap+0x811/0x860 [ 231.569796][ T7232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.569830][ T7232] ? netlink_deliver_tap+0x2e/0x1b0 [ 231.569862][ T7232] ? netlink_deliver_tap+0x2e/0x1b0 [ 231.569903][ T7232] netlink_unicast+0x7bd/0x940 [ 231.569946][ T7232] netlink_sendmsg+0x813/0xb40 [ 231.569991][ T7232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.570034][ T7232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.570063][ T7232] ? apparmor_socket_sendmsg+0x98/0x360 [ 231.570102][ T7232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.570135][ T7232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.570169][ T7232] sock_sendmsg_nosec+0x13a/0x180 [ 231.570209][ T7232] ____sys_sendmsg+0x54e/0x850 [ 231.570246][ T7232] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.570279][ T7232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.570320][ T7232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.570350][ T7232] ? import_iovec+0x73/0xa0 [ 231.570383][ T7232] ___sys_sendmsg+0x2a5/0x360 [ 231.570411][ T7232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.570440][ T7232] ? __lock_acquire+0x6df/0x2e50 [ 231.570472][ T7232] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.570506][ T7232] ? futex_wait+0x2a2/0x390 [ 231.570579][ T7232] ? __fget_files+0x2a/0x420 [ 231.570612][ T7232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.570641][ T7232] ? __fget_files+0x3a2/0x420 [ 231.570687][ T7232] __x64_sys_sendmsg+0x1b1/0x290 [ 231.570717][ T7232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.570750][ T7232] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 231.570790][ T7232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.570834][ T7232] do_syscall_64+0x166/0x520 [ 231.570858][ T7232] ? trace_irq_disable+0x3b/0x140 [ 231.570883][ T7232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.570919][ T7232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.570961][ T7232] RIP: 0033:0x7f915e99e159 [ 231.570984][ T7232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.571006][ T7232] RSP: 002b:00007f915f8d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.571033][ T7232] RAX: ffffffffffffffda RBX: 00007f915ec25fa0 RCX: 00007f915e99e159 [ 231.571052][ T7232] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 231.571071][ T7232] RBP: 00007f915ea35024 R08: 0000000000000000 R09: 0000000000000000 [ 231.571088][ T7232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.571104][ T7232] R13: 00007f915ec26038 R14: 00007f915ec25fa0 R15: 00007ffd2bdce9d8 [ 231.571144][ T7232] [ 232.130686][ T7235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.463'. [ 232.201357][ T5956] hsr_slave_0: left promiscuous mode [ 232.227231][ T5956] hsr_slave_1: left promiscuous mode [ 232.255822][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.255900][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.295886][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.295974][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.337677][ T5956] veth1_macvtap: left promiscuous mode [ 232.343643][ T5956] veth0_macvtap: left promiscuous mode [ 232.349380][ T5956] veth1_vlan: left promiscuous mode [ 232.355275][ T5956] veth0_vlan: left promiscuous mode [ 235.428518][ T5956] team0 (unregistering): Port device team_slave_1 removed [ 235.485247][ T5956] team0 (unregistering): Port device team_slave_0 removed [ 238.301631][ T7049] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.302598][ T7049] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.302765][ T7049] bridge_slave_0: entered allmulticast mode [ 238.308374][ T7049] bridge_slave_0: entered promiscuous mode [ 238.315017][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 238.388224][ T7049] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.388397][ T7049] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.388556][ T7049] bridge_slave_1: entered allmulticast mode [ 238.394988][ T7049] bridge_slave_1: entered promiscuous mode [ 238.558434][ T7285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.577128][ T7285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.655168][ T7049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.706806][ T7049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.889961][ T7290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.477'. [ 238.902203][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.478'. [ 238.902237][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.478'. [ 239.016940][ T7049] team0: Port device team_slave_0 added [ 239.057961][ T7049] team0: Port device team_slave_1 added [ 239.276690][ T5630] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 239.317195][ T7049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.317232][ T7049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.317316][ T7049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.357118][ T7049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.357135][ T7049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.357167][ T7049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.585618][ T7301] FAULT_INJECTION: forcing a failure. [ 239.585618][ T7301] name failslab, interval 1, probability 0, space 0, times 0 [ 239.585679][ T7301] CPU: 1 UID: 0 PID: 7301 Comm: syz.2.480 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.585715][ T7301] Tainted: [L]=SOFTLOCKUP [ 239.585725][ T7301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 239.585738][ T7301] Call Trace: [ 239.585747][ T7301] [ 239.585757][ T7301] dump_stack_lvl+0xe8/0x150 [ 239.585799][ T7301] should_fail_ex+0x410/0x560 [ 239.585855][ T7301] should_failslab+0xa8/0x100 [ 239.585891][ T7301] __kmalloc_cache_noprof+0xa3/0x600 [ 239.585933][ T7301] ? snd_seq_port_use_ptr+0x29/0x260 [ 239.585961][ T7301] ? snd_seq_port_connect+0x6b/0x3a0 [ 239.585988][ T7301] ? snd_seq_port_connect+0x6b/0x3a0 [ 239.586025][ T7301] snd_seq_port_connect+0x6b/0x3a0 [ 239.586053][ T7301] ? snd_seq_port_use_ptr+0x29/0x260 [ 239.586078][ T7301] ? snd_seq_port_use_ptr+0x29/0x260 [ 239.586107][ T7301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.586137][ T7301] ? snd_seq_port_use_ptr+0x229/0x260 [ 239.586169][ T7301] snd_seq_ioctl_subscribe_port+0x351/0x790 [ 239.586210][ T7301] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 239.586243][ T7301] ? clientptr+0x17/0x160 [ 239.586268][ T7301] ? clientptr+0x17/0x160 [ 239.586290][ T7301] ? clientptr+0x17/0x160 [ 239.586316][ T7301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.586353][ T7301] snd_seq_oss_midi_open+0x558/0x890 [ 239.586398][ T7301] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 239.586447][ T7301] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 239.586484][ T7301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.586519][ T7301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.586548][ T7301] ? snd_seq_oss_midi_get_addr+0x19e/0x260 [ 239.586590][ T7301] snd_seq_oss_synth_setup_midi+0x12d/0x530 [ 239.586640][ T7301] snd_seq_oss_open+0x94f/0xf40 [ 239.586679][ T7301] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 239.586750][ T7301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.586779][ T7301] ? rcu_is_watching+0x16/0xb0 [ 239.586816][ T7301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.586846][ T7301] ? trace_contention_end+0x3d/0x140 [ 239.586903][ T7301] ? __pfx___mutex_lock+0x10/0x10 [ 239.586935][ T7301] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 239.586968][ T7301] ? __pfx_free_devinfo+0x10/0x10 [ 239.586996][ T7301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.587026][ T7301] ? do_raw_spin_unlock+0xf5/0x200 [ 239.587066][ T7301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.587095][ T7301] ? soundcore_open+0x2da/0x490 [ 239.587131][ T7301] odev_open+0x67/0xa0 [ 239.587160][ T7301] chrdev_open+0x4d9/0x600 [ 239.587193][ T7301] ? __pfx_chrdev_open+0x10/0x10 [ 239.587222][ T7301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.587251][ T7301] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 239.587286][ T7301] ? __pfx_chrdev_open+0x10/0x10 [ 239.587314][ T7301] do_dentry_open+0x816/0x1380 [ 239.587359][ T7301] vfs_open+0x3b/0x340 [ 239.587386][ T7301] ? path_openat+0x1428/0x1d60 [ 239.587430][ T7301] path_openat+0x1443/0x1d60 [ 239.587494][ T7301] do_file_open+0x23e/0x4a0 [ 239.587540][ T7301] ? __pfx_do_file_open+0x10/0x10 [ 239.587606][ T7301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.587636][ T7301] ? _raw_spin_unlock+0x28/0x50 [ 239.587668][ T7301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.587698][ T7301] ? alloc_fd+0x651/0x6c0 [ 239.587744][ T7301] do_sys_openat2+0x115/0x200 [ 239.587775][ T7301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.587804][ T7301] ? __se_sys_futex+0x3a8/0x450 [ 239.587845][ T7301] ? __pfx_do_sys_openat2+0x10/0x10 [ 239.587884][ T7301] ? rcu_is_watching+0x16/0xb0 [ 239.587914][ T7301] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.587950][ T7301] __x64_sys_openat+0x138/0x170 [ 239.587989][ T7301] do_syscall_64+0x166/0x520 [ 239.588012][ T7301] ? trace_irq_disable+0x3b/0x140 [ 239.588038][ T7301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.588072][ T7301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.588098][ T7301] RIP: 0033:0x7f7a2d19e159 [ 239.588121][ T7301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.588143][ T7301] RSP: 002b:00007f7a2e0ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 239.588169][ T7301] RAX: ffffffffffffffda RBX: 00007f7a2d425fa0 RCX: 00007f7a2d19e159 [ 239.588189][ T7301] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 239.588206][ T7301] RBP: 00007f7a2d235024 R08: 0000000000000000 R09: 0000000000000000 [ 239.588223][ T7301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.588239][ T7301] R13: 00007f7a2d426038 R14: 00007f7a2d425fa0 R15: 00007ffdb547ae58 [ 239.588279][ T7301] [ 242.580238][ T981] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 244.681482][ T7049] hsr_slave_0: entered promiscuous mode [ 244.711411][ T7049] hsr_slave_1: entered promiscuous mode [ 244.727681][ T7049] debugfs: 'hsr0' already exists in 'hsr' [ 244.736232][ T7049] Cannot create hsr debugfs directory [ 245.242547][ T7334] netlink: 24 bytes leftover after parsing attributes in process `syz.0.491'. [ 245.405992][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 245.460249][ T981] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 245.638678][ T981] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 245.653562][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 245.653615][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 245.653662][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 245.692037][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.692084][ T981] usb 6-1: Product: syz [ 245.692127][ T981] usb 6-1: Manufacturer: syz [ 245.692153][ T981] usb 6-1: SerialNumber: syz [ 245.729339][ T981] usb 6-1: config 0 descriptor?? [ 245.898966][ T7347] loop8: detected capacity change from 0 to 8 [ 245.900101][ T7347] Dev loop8: unable to read RDB block 8 [ 245.907682][ T7347] loop8: unable to read partition table [ 245.907962][ T7347] loop8: partition table beyond EOD, truncated [ 245.907983][ T7347] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 245.948303][ T981] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 246.157739][ T981] usb 6-1: USB disconnect, device number 11 [ 246.312180][ T5630] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 246.433854][ T7049] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 246.556532][ T7049] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 246.576287][ T7049] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 249.317276][ T7049] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 249.318214][ T7049] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 249.354849][ T7049] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 251.060916][ T7049] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 251.219278][ T7049] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 251.627992][ T7049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.680051][ T7049] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.775962][ T1265] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.776102][ T1265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.829640][ T6441] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.829765][ T6441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.883920][ T7386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.503'. [ 253.071606][ T7049] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 253.071664][ T7049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.913063][ T5630] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 254.962311][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.969104][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.260269][ T5746] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 255.470346][ T5746] usb 2-1: device descriptor read/64, error -71 [ 255.920270][ T5746] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 256.077787][ T5746] usb 2-1: device descriptor read/64, error -71 [ 256.078931][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 257.983783][ T5746] usb usb2-port1: attempt power cycle [ 258.441165][ T981] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 258.610259][ T981] usb 4-1: Using ep0 maxpacket: 32 [ 258.616201][ T981] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 258.636736][ T981] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 258.636807][ T981] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 258.636868][ T981] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 258.636907][ T981] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 258.700041][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.700089][ T981] usb 4-1: Product: syz [ 258.700125][ T981] usb 4-1: Manufacturer: syz [ 258.700524][ T981] usb 4-1: SerialNumber: syz [ 258.732878][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 258.750874][ T981] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input11 [ 258.939935][ T7049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.954170][ T7446] netlink: 20 bytes leftover after parsing attributes in process `syz.5.514'. [ 258.963854][ T981] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 258.963892][ T981] (id 0x00) [ 258.970741][ T7445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.515'. [ 259.110317][ T981] rc_core: IR keymap rc-imon-pad not found [ 259.110357][ T981] Registered IR keymap rc-empty [ 259.110450][ T981] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 259.110479][ T981] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 259.178935][ T981] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 259.193794][ T981] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input12 [ 259.213723][ T981] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:12> initialized [ 260.178377][ T7472] imon:send_packet: task interrupted [ 260.178416][ T7472] imon:send_packet: packet tx failed (-512) [ 260.197286][ T7472] imon:vfd_write: send packet #2 failed [ 260.322579][ T9] usb 4-1: USB disconnect, device number 12 [ 260.416922][ T7049] veth0_vlan: entered promiscuous mode [ 260.480649][ T7049] veth1_vlan: entered promiscuous mode [ 260.558424][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 260.595314][ T5630] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 261.758569][ T7049] veth0_macvtap: entered promiscuous mode [ 261.815746][ T7049] veth1_macvtap: entered promiscuous mode [ 261.982527][ T7049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.011031][ T7049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.025810][ T7491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.039003][ T7491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.957389][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.963380][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.963454][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.963498][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.355038][ T5956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.355113][ T5956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.450523][ T6374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.450598][ T6374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.476265][ T7500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.527'. [ 264.961133][ T7508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.528'. [ 265.143032][ T7510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.528'. [ 266.343178][ T5630] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 267.640458][ T5778] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 267.803011][ T5778] usb 6-1: Using ep0 maxpacket: 32 [ 267.809342][ T5778] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 267.823228][ T5778] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 267.823555][ T5778] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 267.823690][ T5778] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 267.823749][ T5778] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 267.891439][ T5778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.908160][ T5778] usb 6-1: Product: syz [ 267.908316][ T5778] usb 6-1: Manufacturer: syz [ 267.908426][ T5778] usb 6-1: SerialNumber: syz [ 268.132713][ T5746] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 268.153601][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 268.185032][ T5778] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input13 [ 268.280293][ T5746] usb 3-1: device descriptor read/64, error -71 [ 268.370294][ T5778] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 268.370346][ T5778] (id 0x00) [ 268.530619][ T5746] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 268.582274][ T5778] rc_core: IR keymap rc-imon-pad not found [ 268.588365][ T5778] Registered IR keymap rc-empty [ 268.594244][ T5778] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 268.604757][ T5778] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 268.693779][ T5778] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 268.722560][ T5778] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input14 [ 268.777924][ T5778] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:12> initialized [ 268.861950][ T7555] kAFS: unable to lookup cell '.' [ 269.132217][ T5746] usb 3-1: device descriptor read/64, error -71 [ 269.170357][ T5732] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 269.224997][ T7561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.545'. [ 269.251505][ T5746] usb usb3-port1: attempt power cycle [ 269.330443][ T5732] usb 7-1: Using ep0 maxpacket: 8 [ 269.338541][ T5732] usb 7-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 269.349580][ T5732] usb 7-1: config 0 has an invalid interface number: 6 but max is 2 [ 269.349626][ T5732] usb 7-1: config 0 has an invalid interface number: 176 but max is 2 [ 269.349703][ T5732] usb 7-1: config 0 has no interface number 1 [ 269.349730][ T5732] usb 7-1: config 0 has no interface number 2 [ 269.349806][ T5732] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.396441][ T5732] usb 7-1: config 0 descriptor?? [ 269.520579][ T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 269.591459][ T5746] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 269.614269][ T5746] usb 3-1: device descriptor read/8, error -71 [ 269.676546][ T25] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 269.679600][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.679628][ T25] usb 2-1: Product: syz [ 269.679645][ T25] usb 2-1: Manufacturer: syz [ 269.679663][ T25] usb 2-1: SerialNumber: syz [ 269.683966][ T25] usb 2-1: config 0 descriptor?? [ 269.710727][ T7572] imon:send_packet: task interrupted [ 269.710743][ T7572] imon:send_packet: packet tx failed (-512) [ 269.710786][ T7572] imon:vfd_write: send packet #2 failed [ 269.717187][ T7555] fuse: root generation should be zero [ 269.739790][ T5732] usb 7-1: Could not set interface, error -71 [ 269.789956][ T5732] usb 7-1: USB disconnect, device number 2 [ 269.861646][ T5746] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 269.891022][ T5746] usb 3-1: device descriptor read/8, error -71 [ 269.926124][ T981] usb 6-1: USB disconnect, device number 12 [ 270.002306][ T5746] usb usb3-port1: unable to enumerate USB device [ 270.367571][ T7580] FAULT_INJECTION: forcing a failure. [ 270.367571][ T7580] name failslab, interval 1, probability 0, space 0, times 0 [ 270.367656][ T7580] CPU: 1 UID: 0 PID: 7580 Comm: syz.3.551 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.367695][ T7580] Tainted: [L]=SOFTLOCKUP [ 270.367706][ T7580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 270.367721][ T7580] Call Trace: [ 270.367731][ T7580] [ 270.367743][ T7580] dump_stack_lvl+0xe8/0x150 [ 270.367786][ T7580] should_fail_ex+0x410/0x560 [ 270.367835][ T7580] should_failslab+0xa8/0x100 [ 270.367875][ T7580] __kmalloc_cache_noprof+0xa3/0x600 [ 270.367918][ T7580] ? snd_seq_port_use_ptr+0x29/0x260 [ 270.367945][ T7580] ? snd_seq_port_connect+0x6b/0x3a0 [ 270.367972][ T7580] ? snd_seq_port_connect+0x6b/0x3a0 [ 270.368010][ T7580] snd_seq_port_connect+0x6b/0x3a0 [ 270.368038][ T7580] ? snd_seq_port_use_ptr+0x29/0x260 [ 270.368064][ T7580] ? snd_seq_port_use_ptr+0x29/0x260 [ 270.368096][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.368128][ T7580] ? snd_seq_port_use_ptr+0x229/0x260 [ 270.368158][ T7580] snd_seq_ioctl_subscribe_port+0x351/0x790 [ 270.368196][ T7580] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 270.368230][ T7580] ? clientptr+0x17/0x160 [ 270.368255][ T7580] ? clientptr+0x17/0x160 [ 270.368277][ T7580] ? clientptr+0x17/0x160 [ 270.368302][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.368339][ T7580] snd_seq_oss_midi_open+0x558/0x890 [ 270.368385][ T7580] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 270.368434][ T7580] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 270.368471][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.368505][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.368535][ T7580] ? snd_seq_oss_midi_get_addr+0x19e/0x260 [ 270.368577][ T7580] snd_seq_oss_synth_setup_midi+0x12d/0x530 [ 270.368628][ T7580] snd_seq_oss_open+0x94f/0xf40 [ 270.368666][ T7580] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 270.368736][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.368766][ T7580] ? rcu_is_watching+0x16/0xb0 [ 270.368797][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.368827][ T7580] ? trace_contention_end+0x3d/0x140 [ 270.368890][ T7580] ? __pfx___mutex_lock+0x10/0x10 [ 270.368921][ T7580] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 270.368953][ T7580] ? __pfx_free_devinfo+0x10/0x10 [ 270.368982][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.369011][ T7580] ? do_raw_spin_unlock+0xf5/0x200 [ 270.369052][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.369081][ T7580] ? soundcore_open+0x2da/0x490 [ 270.369117][ T7580] odev_open+0x67/0xa0 [ 270.369146][ T7580] chrdev_open+0x4d9/0x600 [ 270.369179][ T7580] ? __pfx_chrdev_open+0x10/0x10 [ 270.369207][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.369236][ T7580] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 270.369272][ T7580] ? __pfx_chrdev_open+0x10/0x10 [ 270.369300][ T7580] do_dentry_open+0x816/0x1380 [ 270.369344][ T7580] vfs_open+0x3b/0x340 [ 270.369371][ T7580] ? path_openat+0x1428/0x1d60 [ 270.369415][ T7580] path_openat+0x1443/0x1d60 [ 270.369479][ T7580] do_file_open+0x23e/0x4a0 [ 270.369526][ T7580] ? __pfx_do_file_open+0x10/0x10 [ 270.369591][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.369621][ T7580] ? _raw_spin_unlock+0x28/0x50 [ 270.369654][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.369684][ T7580] ? alloc_fd+0x651/0x6c0 [ 270.369730][ T7580] do_sys_openat2+0x115/0x200 [ 270.369760][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.369790][ T7580] ? __se_sys_futex+0x3a8/0x450 [ 270.369824][ T7580] ? __pfx_do_sys_openat2+0x10/0x10 [ 270.369869][ T7580] ? rcu_is_watching+0x16/0xb0 [ 270.369899][ T7580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.369934][ T7580] __x64_sys_openat+0x138/0x170 [ 270.369973][ T7580] do_syscall_64+0x166/0x520 [ 270.369996][ T7580] ? trace_irq_disable+0x3b/0x140 [ 270.370022][ T7580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.370055][ T7580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.370081][ T7580] RIP: 0033:0x7f5e5c39e159 [ 270.370105][ T7580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.370127][ T7580] RSP: 002b:00007f5e5d320028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 270.370153][ T7580] RAX: ffffffffffffffda RBX: 00007f5e5c625fa0 RCX: 00007f5e5c39e159 [ 270.370173][ T7580] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 270.370190][ T7580] RBP: 00007f5e5c435024 R08: 0000000000000000 R09: 0000000000000000 [ 270.370207][ T7580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.370223][ T7580] R13: 00007f5e5c626038 R14: 00007f5e5c625fa0 R15: 00007ffdbd95e3a8 [ 270.370264][ T7580] [ 270.745123][ T25] usb 2-1: non-Atmel transceiver xxxx251f [ 270.950055][ T25] usb 2-1: Firmware version (0.0) predates our first public release. [ 270.950109][ T25] usb 2-1: Please update to version 0.2 or newer [ 270.953182][ T25] usb 2-1: atusb_probe: initialization failed, error = -19 [ 271.010295][ T25] usb 2-1: USB disconnect, device number 9 [ 271.371158][ T7590] FAULT_INJECTION: forcing a failure. [ 271.371158][ T7590] name fail_futex, interval 1, probability 0, space 0, times 0 [ 271.371246][ T7590] CPU: 0 UID: 0 PID: 7590 Comm: syz.2.555 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.371284][ T7590] Tainted: [L]=SOFTLOCKUP [ 271.371295][ T7590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 271.371311][ T7590] Call Trace: [ 271.371321][ T7590] [ 271.371332][ T7590] dump_stack_lvl+0xe8/0x150 [ 271.371383][ T7590] should_fail_ex+0x410/0x560 [ 271.371431][ T7590] get_futex_key+0x1b4/0x1580 [ 271.371466][ T7590] ? __pfx_futex_wake_mark+0x10/0x10 [ 271.371512][ T7590] ? __pfx_get_futex_key+0x10/0x10 [ 271.371540][ T7590] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.371571][ T7590] ? __lock_acquire+0x6df/0x2e50 [ 271.371611][ T7590] futex_wake+0x119/0x5f0 [ 271.371653][ T7590] ? __pfx_futex_wait+0x10/0x10 [ 271.371692][ T7590] ? __pfx_futex_wake+0x10/0x10 [ 271.371729][ T7590] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.371759][ T7590] ? lock_acquire+0x115/0x350 [ 271.371790][ T7590] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.371824][ T7590] do_futex+0x458/0x4e0 [ 271.371858][ T7590] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.371891][ T7590] ? __pfx_do_futex+0x10/0x10 [ 271.371934][ T7590] __se_sys_futex+0x3a8/0x450 [ 271.371975][ T7590] ? __pfx___se_sys_futex+0x10/0x10 [ 271.372008][ T7590] ? rcu_is_watching+0x16/0xb0 [ 271.372045][ T7590] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.372075][ T7590] ? __x64_sys_futex+0x21/0xf0 [ 271.372112][ T7590] do_syscall_64+0x166/0x520 [ 271.372136][ T7590] ? trace_irq_disable+0x3b/0x140 [ 271.372161][ T7590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.372194][ T7590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.372220][ T7590] RIP: 0033:0x7f7a2d19e159 [ 271.372242][ T7590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.372265][ T7590] RSP: 002b:00007f7a2e0ff0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 271.372294][ T7590] RAX: ffffffffffffffda RBX: 00007f7a2d425fa8 RCX: 00007f7a2d19e159 [ 271.372313][ T7590] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7a2d425fac [ 271.372331][ T7590] RBP: 00007f7a2d425fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 271.372356][ T7590] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 271.372374][ T7590] R13: 00007f7a2d426038 R14: 00007ffdb547ad70 R15: 00007ffdb547ae58 [ 271.372413][ T7590] [ 272.000775][ T5630] Bluetooth: hci0: command 0x0406 tx timeout [ 272.060011][ T7605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.560'. [ 272.634513][ T7615] FAULT_INJECTION: forcing a failure. [ 272.634513][ T7615] name failslab, interval 1, probability 0, space 0, times 0 [ 272.634576][ T7615] CPU: 1 UID: 0 PID: 7615 Comm: syz.2.565 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.634614][ T7615] Tainted: [L]=SOFTLOCKUP [ 272.634624][ T7615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 272.634639][ T7615] Call Trace: [ 272.634650][ T7615] [ 272.634661][ T7615] dump_stack_lvl+0xe8/0x150 [ 272.634704][ T7615] should_fail_ex+0x410/0x560 [ 272.634753][ T7615] should_failslab+0xa8/0x100 [ 272.634786][ T7615] __kmalloc_cache_noprof+0xa3/0x600 [ 272.634829][ T7615] ? snd_seq_port_use_ptr+0x29/0x260 [ 272.634862][ T7615] ? snd_seq_port_connect+0x6b/0x3a0 [ 272.634889][ T7615] ? snd_seq_port_connect+0x6b/0x3a0 [ 272.634926][ T7615] snd_seq_port_connect+0x6b/0x3a0 [ 272.634953][ T7615] ? snd_seq_port_use_ptr+0x29/0x260 [ 272.634980][ T7615] ? snd_seq_port_use_ptr+0x29/0x260 [ 272.635008][ T7615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.635040][ T7615] ? snd_seq_port_use_ptr+0x229/0x260 [ 272.635072][ T7615] snd_seq_ioctl_subscribe_port+0x351/0x790 [ 272.635110][ T7615] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 272.635142][ T7615] ? clientptr+0x17/0x160 [ 272.635168][ T7615] ? clientptr+0x17/0x160 [ 272.635190][ T7615] ? clientptr+0x17/0x160 [ 272.635216][ T7615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.635253][ T7615] snd_seq_oss_midi_open+0x558/0x890 [ 272.635298][ T7615] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 272.635347][ T7615] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 272.635384][ T7615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.635419][ T7615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.635448][ T7615] ? snd_seq_oss_midi_get_addr+0x19e/0x260 [ 272.635491][ T7615] snd_seq_oss_synth_setup_midi+0x12d/0x530 [ 272.635541][ T7615] snd_seq_oss_open+0x94f/0xf40 [ 272.635580][ T7615] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 272.635653][ T7615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.635683][ T7615] ? rcu_is_watching+0x16/0xb0 [ 272.635714][ T7615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.635745][ T7615] ? trace_contention_end+0x3d/0x140 [ 272.635802][ T7615] ? __pfx___mutex_lock+0x10/0x10 [ 272.635833][ T7615] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 272.635870][ T7615] ? __pfx_free_devinfo+0x10/0x10 [ 272.635898][ T7615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.635928][ T7615] ? do_raw_spin_unlock+0xf5/0x200 [ 272.635969][ T7615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.635998][ T7615] ? soundcore_open+0x2da/0x490 [ 272.636034][ T7615] odev_open+0x67/0xa0 [ 272.636064][ T7615] chrdev_open+0x4d9/0x600 [ 272.636096][ T7615] ? __pfx_chrdev_open+0x10/0x10 [ 272.636125][ T7615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.636154][ T7615] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 272.636189][ T7615] ? __pfx_chrdev_open+0x10/0x10 [ 272.636217][ T7615] do_dentry_open+0x816/0x1380 [ 272.636262][ T7615] vfs_open+0x3b/0x340 [ 272.636290][ T7615] ? path_openat+0x1428/0x1d60 [ 272.636334][ T7615] path_openat+0x1443/0x1d60 [ 272.636398][ T7615] do_file_open+0x23e/0x4a0 [ 272.636445][ T7615] ? __pfx_do_file_open+0x10/0x10 [ 272.636511][ T7615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.636541][ T7615] ? _raw_spin_unlock+0x28/0x50 [ 272.636574][ T7615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.636604][ T7615] ? alloc_fd+0x651/0x6c0 [ 272.636650][ T7615] do_sys_openat2+0x115/0x200 [ 272.636681][ T7615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.636711][ T7615] ? __se_sys_futex+0x3a8/0x450 [ 272.636746][ T7615] ? __pfx_do_sys_openat2+0x10/0x10 [ 272.636785][ T7615] ? rcu_is_watching+0x16/0xb0 [ 272.636816][ T7615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 272.636856][ T7615] __x64_sys_openat+0x138/0x170 [ 272.636895][ T7615] do_syscall_64+0x166/0x520 [ 272.636918][ T7615] ? trace_irq_disable+0x3b/0x140 [ 272.636944][ T7615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.636977][ T7615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.637004][ T7615] RIP: 0033:0x7f7a2d19e159 [ 272.637027][ T7615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.637049][ T7615] RSP: 002b:00007f7a2e0ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 272.637076][ T7615] RAX: ffffffffffffffda RBX: 00007f7a2d425fa0 RCX: 00007f7a2d19e159 [ 272.637095][ T7615] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 272.637113][ T7615] RBP: 00007f7a2d235024 R08: 0000000000000000 R09: 0000000000000000 [ 272.637129][ T7615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.637145][ T7615] R13: 00007f7a2d426038 R14: 00007f7a2d425fa0 R15: 00007ffdb547ae58 [ 272.637185][ T7615] [ 272.865472][ T5778] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 273.011321][ T981] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 273.260261][ T981] usb 4-1: Using ep0 maxpacket: 32 [ 273.267116][ T981] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 273.286316][ T981] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 273.286385][ T981] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 273.286435][ T981] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 273.286475][ T981] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 273.353091][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.353141][ T981] usb 4-1: Product: syz [ 273.353177][ T981] usb 4-1: Manufacturer: syz [ 273.353202][ T981] usb 4-1: SerialNumber: syz [ 273.430905][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 273.458225][ T981] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input15 [ 273.510326][ T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 273.590516][ T5778] usb 2-1: Using ep0 maxpacket: 32 [ 273.594797][ T5778] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 273.601928][ T5778] usb 2-1: config index 0 descriptor too short (expected 27632, got 27) [ 273.601956][ T5778] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 273.601981][ T5778] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 273.602006][ T5778] usb 2-1: config 1 has no interface number 0 [ 273.602077][ T5778] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 273.602108][ T5778] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 273.602154][ T5778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.673520][ T25] usb 7-1: device descriptor read/64, error -71 [ 273.675852][ T5778] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 273.710292][ T981] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 273.718620][ T981] (id 0x00) [ 273.872650][ T5778] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 273.910793][ T25] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 274.041280][ T981] rc_core: IR keymap rc-imon-pad not found [ 274.046091][ T981] Registered IR keymap rc-empty [ 274.048377][ T981] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 274.048408][ T981] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 274.054587][ T25] usb 7-1: device descriptor read/64, error -71 [ 274.092347][ T981] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 274.109855][ T981] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input16 [ 274.152290][ T981] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:13> initialized [ 274.161533][ T25] usb usb7-port1: attempt power cycle [ 274.363490][ T5732] usb 2-1: USB disconnect, device number 10 [ 274.368302][ T5732] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 274.426615][ T7642] FAULT_INJECTION: forcing a failure. [ 274.426615][ T7642] name fail_futex, interval 1, probability 0, space 0, times 0 [ 274.426709][ T7642] CPU: 0 UID: 0 PID: 7642 Comm: syz.5.571 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.426749][ T7642] Tainted: [L]=SOFTLOCKUP [ 274.426759][ T7642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 274.426776][ T7642] Call Trace: [ 274.426787][ T7642] [ 274.426799][ T7642] dump_stack_lvl+0xe8/0x150 [ 274.426843][ T7642] should_fail_ex+0x410/0x560 [ 274.426898][ T7642] get_futex_key+0x1b4/0x1580 [ 274.426933][ T7642] ? __pfx_futex_wake_mark+0x10/0x10 [ 274.426977][ T7642] ? __pfx_get_futex_key+0x10/0x10 [ 274.427004][ T7642] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.427035][ T7642] ? __lock_acquire+0x6df/0x2e50 [ 274.427076][ T7642] futex_wake+0x119/0x5f0 [ 274.427117][ T7642] ? __pfx_futex_wait+0x10/0x10 [ 274.427157][ T7642] ? __pfx_futex_wake+0x10/0x10 [ 274.427197][ T7642] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.427226][ T7642] ? lock_acquire+0x115/0x350 [ 274.427258][ T7642] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.427293][ T7642] do_futex+0x458/0x4e0 [ 274.427329][ T7642] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.427362][ T7642] ? __pfx_do_futex+0x10/0x10 [ 274.427405][ T7642] __se_sys_futex+0x3a8/0x450 [ 274.427447][ T7642] ? __pfx___se_sys_futex+0x10/0x10 [ 274.427480][ T7642] ? rcu_is_watching+0x16/0xb0 [ 274.427518][ T7642] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.427548][ T7642] ? __x64_sys_futex+0x21/0xf0 [ 274.427585][ T7642] do_syscall_64+0x166/0x520 [ 274.427610][ T7642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.427643][ T7642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.427670][ T7642] RIP: 0033:0x7f915e99e159 [ 274.427693][ T7642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.427715][ T7642] RSP: 002b:00007f915f8d20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 274.427742][ T7642] RAX: ffffffffffffffda RBX: 00007f915ec25fa8 RCX: 00007f915e99e159 [ 274.427762][ T7642] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f915ec25fac [ 274.427779][ T7642] RBP: 00007f915ec25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 274.427797][ T7642] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 274.427814][ T7642] R13: 00007f915ec26038 R14: 00007ffd2bdce8f0 R15: 00007ffd2bdce9d8 [ 274.427853][ T7642] [ 274.456025][ T7609] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 274.556493][ T25] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 274.591405][ T25] usb 7-1: device descriptor read/8, error -71 [ 274.911142][ T25] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 274.930987][ T25] usb 7-1: device descriptor read/8, error -71 [ 275.042239][ T25] usb usb7-port1: unable to enumerate USB device [ 275.053830][ T7648] imon:send_packet: task interrupted [ 275.060290][ T7648] imon:send_packet: packet tx failed (-512) [ 275.068475][ T7648] imon:vfd_write: send packet #2 failed [ 275.680356][ T981] usb 4-1: USB disconnect, device number 13 [ 276.538509][ T7663] binder: 7662:7663 ioctl c0306201 0 returned -14 [ 276.890000][ T981] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 277.052344][ T981] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 277.064593][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 277.075783][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 277.075815][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 277.100666][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.108717][ T981] usb 3-1: Product: syz [ 277.108736][ T981] usb 3-1: Manufacturer: syz [ 277.108755][ T981] usb 3-1: SerialNumber: syz [ 277.128030][ T981] usb 3-1: config 0 descriptor?? [ 277.389022][ T981] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 277.545494][ T981] usb 3-1: USB disconnect, device number 14 [ 278.777576][ T5639] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 279.031249][ T7686] netlink: 564 bytes leftover after parsing attributes in process `syz.0.585'. [ 279.955749][ T7689] FAULT_INJECTION: forcing a failure. [ 279.955749][ T7689] name fail_futex, interval 1, probability 0, space 0, times 0 [ 279.957666][ T7689] CPU: 0 UID: 0 PID: 7689 Comm: syz.2.586 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.957702][ T7689] Tainted: [L]=SOFTLOCKUP [ 279.957711][ T7689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 279.957727][ T7689] Call Trace: [ 279.957737][ T7689] [ 279.957748][ T7689] dump_stack_lvl+0xe8/0x150 [ 279.957790][ T7689] should_fail_ex+0x410/0x560 [ 279.957836][ T7689] get_futex_key+0x1b4/0x1580 [ 279.957870][ T7689] ? __pfx_futex_wake_mark+0x10/0x10 [ 279.957916][ T7689] ? __pfx_get_futex_key+0x10/0x10 [ 279.957943][ T7689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.957973][ T7689] ? __lock_acquire+0x6df/0x2e50 [ 279.958013][ T7689] futex_wake+0x119/0x5f0 [ 279.958054][ T7689] ? __pfx_futex_wait+0x10/0x10 [ 279.958093][ T7689] ? __pfx_futex_wake+0x10/0x10 [ 279.958132][ T7689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.958161][ T7689] ? lock_acquire+0x115/0x350 [ 279.958193][ T7689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.958228][ T7689] do_futex+0x458/0x4e0 [ 279.958262][ T7689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.958295][ T7689] ? __pfx_do_futex+0x10/0x10 [ 279.958339][ T7689] __se_sys_futex+0x3a8/0x450 [ 279.958384][ T7689] ? __pfx___se_sys_futex+0x10/0x10 [ 279.958417][ T7689] ? rcu_is_watching+0x16/0xb0 [ 279.958456][ T7689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.958485][ T7689] ? __x64_sys_futex+0x21/0xf0 [ 279.958522][ T7689] do_syscall_64+0x166/0x520 [ 279.958546][ T7689] ? trace_irq_disable+0x3b/0x140 [ 279.958571][ T7689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.958604][ T7689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.958631][ T7689] RIP: 0033:0x7f7a2d19e159 [ 279.958654][ T7689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.958675][ T7689] RSP: 002b:00007f7a2e0ff0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 279.958703][ T7689] RAX: ffffffffffffffda RBX: 00007f7a2d425fa8 RCX: 00007f7a2d19e159 [ 279.958722][ T7689] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7a2d425fac [ 279.958740][ T7689] RBP: 00007f7a2d425fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 279.958758][ T7689] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 279.958775][ T7689] R13: 00007f7a2d426038 R14: 00007ffdb547ad70 R15: 00007ffdb547ae58 [ 279.958814][ T7689] [ 280.564098][ T7697] trusted_key: syz.3.588 sent an empty control message without MSG_MORE. [ 280.880580][ T7705] netlink: 55 bytes leftover after parsing attributes in process `syz.5.591'. [ 281.578211][ T7722] FAULT_INJECTION: forcing a failure. [ 281.578211][ T7722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.578275][ T7722] CPU: 1 UID: 0 PID: 7722 Comm: syz.3.596 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.578311][ T7722] Tainted: [L]=SOFTLOCKUP [ 281.578321][ T7722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 281.578334][ T7722] Call Trace: [ 281.578342][ T7722] [ 281.578351][ T7722] dump_stack_lvl+0xe8/0x150 [ 281.578388][ T7722] should_fail_ex+0x410/0x560 [ 281.578440][ T7722] _copy_from_user+0x2d/0xb0 [ 281.578469][ T7722] __x64_sys_timer_create+0x118/0x1c0 [ 281.578501][ T7722] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 281.578531][ T7722] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.578578][ T7722] do_syscall_64+0x166/0x520 [ 281.578601][ T7722] ? trace_irq_disable+0x3b/0x140 [ 281.578627][ T7722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.578652][ T7722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.578671][ T7722] RIP: 0033:0x7f5e5c39e159 [ 281.578692][ T7722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.578715][ T7722] RSP: 002b:00007f5e5d320028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 281.578741][ T7722] RAX: ffffffffffffffda RBX: 00007f5e5c625fa0 RCX: 00007f5e5c39e159 [ 281.578760][ T7722] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000000 [ 281.578777][ T7722] RBP: 00007f5e5c435024 R08: 0000000000000000 R09: 0000000000000000 [ 281.578789][ T7722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.578801][ T7722] R13: 00007f5e5c626038 R14: 00007f5e5c625fa0 R15: 00007ffdbd95e3a8 [ 281.578831][ T7722] [ 281.663560][ T7721] binder: 7718:7721 ioctl c0306201 0 returned -14 [ 282.879908][ T7748] netlink: 564 bytes leftover after parsing attributes in process `syz.1.601'. [ 283.273273][ T7758] netlink: 55 bytes leftover after parsing attributes in process `syz.3.606'. [ 283.603236][ T7767] jffs2: notice: (7767) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 283.672230][ T7768] loop0: detected capacity change from 0 to 8 [ 283.673493][ T7768] squashfs: Unknown parameter 'ƒ(ã²ÙS(¯u «²ÿÖW±|`é;¤' [ 285.028718][ T7780] Bluetooth: hci0: service_discovery: too big uuid_count value 36441 [ 285.170280][ T5778] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 285.521068][ T5778] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 285.540805][ T5778] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.816109][ T5778] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 285.989250][ T7791] FAULT_INJECTION: forcing a failure. [ 285.989250][ T7791] name failslab, interval 1, probability 0, space 0, times 0 [ 285.989308][ T7791] CPU: 1 UID: 0 PID: 7791 Comm: syz.0.615 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.989345][ T7791] Tainted: [L]=SOFTLOCKUP [ 285.989355][ T7791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 285.989374][ T7791] Call Trace: [ 285.989385][ T7791] [ 285.989396][ T7791] dump_stack_lvl+0xe8/0x150 [ 285.989430][ T7791] should_fail_ex+0x410/0x560 [ 285.989472][ T7791] should_failslab+0xa8/0x100 [ 285.989503][ T7791] ? do_timer_create+0x247/0x1100 [ 285.989541][ T7791] kmem_cache_alloc_noprof+0xa1/0x600 [ 285.989573][ T7791] ? do_timer_create+0x247/0x1100 [ 285.989610][ T7791] do_timer_create+0x247/0x1100 [ 285.989647][ T7791] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.989689][ T7791] ? __pfx_do_timer_create+0x10/0x10 [ 285.989728][ T7791] __x64_sys_timer_create+0x169/0x1c0 [ 285.989758][ T7791] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 285.989798][ T7791] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.989842][ T7791] do_syscall_64+0x166/0x520 [ 285.989862][ T7791] ? trace_irq_disable+0x3b/0x140 [ 285.989881][ T7791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.989907][ T7791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.989935][ T7791] RIP: 0033:0x7ff67459e159 [ 285.989957][ T7791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.989978][ T7791] RSP: 002b:00007ff67538b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 285.990003][ T7791] RAX: ffffffffffffffda RBX: 00007ff674825fa0 RCX: 00007ff67459e159 [ 285.990017][ T7791] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000000 [ 285.990029][ T7791] RBP: 00007ff674635024 R08: 0000000000000000 R09: 0000000000000000 [ 285.990042][ T7791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.990054][ T7791] R13: 00007ff674826038 R14: 00007ff674825fa0 R15: 00007fff1c2a9688 [ 285.990095][ T7791] [ 286.047085][ T7774] usb usb7: usbfs: process 7774 (syz.6.612) did not claim interface 0 before use [ 286.325689][ T7795] tipc: Enabled bearer , priority 0 [ 286.388641][ T7792] tipc: Disabling bearer [ 288.330586][ T7814] netlink: 55 bytes leftover after parsing attributes in process `syz.0.621'. [ 291.188240][ T981] usb 7-1: USB disconnect, device number 7 [ 293.600241][ T25] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 293.794942][ T25] usb 3-1: LPM exit latency is zeroed, disabling LPM. [ 293.794998][ T25] usb 3-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice=10.1c [ 293.812578][ T25] usb 3-1: config 8 has no interfaces? [ 293.825286][ T25] usb 3-1: string descriptor 0 read error: -22 [ 293.825435][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.933809][ T7846] tipc: Started in network mode [ 293.933906][ T7846] tipc: Node identity beb97bf3d954, cluster identity 4711 [ 293.934093][ T7846] tipc: Enabled bearer , priority 0 [ 293.973174][ T7841] tipc: Disabling bearer [ 294.010248][ T981] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 294.069267][ T5747] usb 3-1: USB disconnect, device number 15 [ 294.164277][ T981] usb 4-1: Using ep0 maxpacket: 8 [ 294.170506][ T981] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 294.188124][ T981] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 294.209937][ T981] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 294.219376][ T981] usb 4-1: Product: syz [ 294.219424][ T981] usb 4-1: Manufacturer: syz [ 294.219449][ T981] usb 4-1: SerialNumber: syz [ 294.360281][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 294.486519][ T981] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 294.486572][ T981] usb 4-1: Handspring Visor / Palm OS: port 231, is for unknown use [ 294.486617][ T981] usb 4-1: Handspring Visor / Palm OS: port 193, is for Debugger use [ 294.486647][ T981] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 294.540468][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 294.547059][ T25] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 294.557875][ T25] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 294.557969][ T25] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 294.558023][ T25] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 294.558062][ T25] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 294.619623][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.619699][ T25] usb 2-1: Product: syz [ 294.619737][ T25] usb 2-1: Manufacturer: syz [ 294.619761][ T25] usb 2-1: SerialNumber: syz [ 294.654223][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 294.664945][ T25] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input17 [ 294.721970][ T981] usb 4-1: palm_os_3_probe - error -32 getting bytes available request [ 294.731534][ T981] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 294.758856][ T981] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 294.775555][ T981] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 294.794936][ T981] usb 4-1: USB disconnect, device number 14 [ 294.814406][ T981] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 294.837775][ T981] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 294.853610][ T981] visor 4-1:1.0: device disconnected [ 294.890240][ T25] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 294.898658][ T25] (id 0x00) [ 295.000480][ T25] rc_core: IR keymap rc-imon-pad not found [ 295.001684][ T25] Registered IR keymap rc-empty [ 295.001777][ T25] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 295.001806][ T25] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 295.101422][ T25] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 295.117258][ T25] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input18 [ 295.130915][ T5732] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 295.156477][ T25] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:11> initialized [ 295.182017][ T7862] FAULT_INJECTION: forcing a failure. [ 295.182017][ T7862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.182112][ T7862] CPU: 0 UID: 0 PID: 7862 Comm: syz.2.634 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.182149][ T7862] Tainted: [L]=SOFTLOCKUP [ 295.182158][ T7862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 295.182173][ T7862] Call Trace: [ 295.182184][ T7862] [ 295.182197][ T7862] dump_stack_lvl+0xe8/0x150 [ 295.182240][ T7862] should_fail_ex+0x410/0x560 [ 295.182286][ T7862] strncpy_from_user+0x36/0x2c0 [ 295.182331][ T7862] __se_sys_add_key+0xdb/0x420 [ 295.182371][ T7862] ? __pfx___se_sys_add_key+0x10/0x10 [ 295.182409][ T7862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 295.182447][ T7862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 295.182476][ T7862] ? __x64_sys_add_key+0x20/0xc0 [ 295.182514][ T7862] do_syscall_64+0x166/0x520 [ 295.182538][ T7862] ? trace_irq_disable+0x3b/0x140 [ 295.182563][ T7862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.182597][ T7862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.182623][ T7862] RIP: 0033:0x7f7a2d19e159 [ 295.182646][ T7862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.182668][ T7862] RSP: 002b:00007f7a2e0ff028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 295.182695][ T7862] RAX: ffffffffffffffda RBX: 00007f7a2d425fa0 RCX: 00007f7a2d19e159 [ 295.182714][ T7862] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 295.182731][ T7862] RBP: 00007f7a2d235024 R08: ffffffffffffffff R09: 0000000000000000 [ 295.182749][ T7862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.182765][ T7862] R13: 00007f7a2d426038 R14: 00007f7a2d425fa0 R15: 00007ffdb547ae58 [ 295.182804][ T7862] [ 295.283338][ T5732] usb 7-1: device descriptor read/64, error -71 [ 295.524639][ T5732] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 295.850256][ T5732] usb 7-1: device descriptor read/64, error -71 [ 295.960944][ T5732] usb usb7-port1: attempt power cycle [ 297.793837][ T25] usb 2-1: USB disconnect, device number 11 [ 297.800867][ T981] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 297.951978][ T981] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 297.958208][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.010376][ T5732] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 298.030695][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 298.037997][ T5732] usb 7-1: device descriptor read/8, error -32 [ 298.225333][ T981] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 298.278984][ T7879] netlink: 564 bytes leftover after parsing attributes in process `syz.1.640'. [ 300.901889][ T7902] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 302.540606][ T31] audit: type=1800 audit(1788711517.183:11): pid=7895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.645" name="bus" dev="ramfs" ino=15773 res=0 errno=0 [ 302.552765][ T7909] netlink: 132 bytes leftover after parsing attributes in process `syz.5.650'. [ 302.605151][ T7910] FAULT_INJECTION: forcing a failure. [ 302.605151][ T7910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.605299][ T7910] CPU: 1 UID: 0 PID: 7910 Comm: syz.1.649 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.605335][ T7910] Tainted: [L]=SOFTLOCKUP [ 302.605345][ T7910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 302.605361][ T7910] Call Trace: [ 302.605371][ T7910] [ 302.605382][ T7910] dump_stack_lvl+0xe8/0x150 [ 302.605425][ T7910] should_fail_ex+0x410/0x560 [ 302.605474][ T7910] strncpy_from_user+0x36/0x2c0 [ 302.605518][ T7910] __se_sys_add_key+0xdb/0x420 [ 302.605559][ T7910] ? __pfx___se_sys_add_key+0x10/0x10 [ 302.605597][ T7910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 302.605636][ T7910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 302.605665][ T7910] ? __x64_sys_add_key+0x20/0xc0 [ 302.605703][ T7910] do_syscall_64+0x166/0x520 [ 302.605728][ T7910] ? trace_irq_disable+0x3b/0x140 [ 302.605753][ T7910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.605786][ T7910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.605812][ T7910] RIP: 0033:0x7f8affd9e159 [ 302.605836][ T7910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.605861][ T7910] RSP: 002b:00007f8b00c87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 302.605893][ T7910] RAX: ffffffffffffffda RBX: 00007f8b00025fa0 RCX: 00007f8affd9e159 [ 302.605913][ T7910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 302.605930][ T7910] RBP: 00007f8affe35024 R08: ffffffffffffffff R09: 0000000000000000 [ 302.605948][ T7910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.605963][ T7910] R13: 00007f8b00026038 R14: 00007f8b00025fa0 R15: 00007ffe87e8a218 [ 302.606003][ T7910] [ 302.957783][ T7914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.968489][ T7914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.613542][ T5747] usb 4-1: USB disconnect, device number 15 [ 303.774855][ T7921] CIFS: Attempting to mount //127.0.0.1/share [ 303.797269][ T7921] CIFS: VFS: Error connecting to socket. Aborting operation. [ 303.810632][ T7921] CIFS: VFS: cifs_mount failed w/return code = -111 [ 304.678619][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.6.659'. [ 304.678671][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.6.659'. [ 305.205468][ T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 305.235411][ T7942] netlink: 564 bytes leftover after parsing attributes in process `syz.5.661'. [ 305.308109][ T7946] FAULT_INJECTION: forcing a failure. [ 305.308109][ T7946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.308258][ T7946] CPU: 1 UID: 0 PID: 7946 Comm: syz.2.663 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.308294][ T7946] Tainted: [L]=SOFTLOCKUP [ 305.308302][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 305.308316][ T7946] Call Trace: [ 305.308326][ T7946] [ 305.308337][ T7946] dump_stack_lvl+0xe8/0x150 [ 305.308379][ T7946] should_fail_ex+0x410/0x560 [ 305.308427][ T7946] strncpy_from_user+0x36/0x2c0 [ 305.308473][ T7946] __se_sys_add_key+0xdb/0x420 [ 305.308513][ T7946] ? __pfx___se_sys_add_key+0x10/0x10 [ 305.308550][ T7946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 305.308588][ T7946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 305.308618][ T7946] ? __x64_sys_add_key+0x20/0xc0 [ 305.308656][ T7946] do_syscall_64+0x166/0x520 [ 305.308680][ T7946] ? trace_irq_disable+0x3b/0x140 [ 305.308706][ T7946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.308739][ T7946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.308765][ T7946] RIP: 0033:0x7f7a2d19e159 [ 305.308788][ T7946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.308810][ T7946] RSP: 002b:00007f7a2e0ff028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 305.308837][ T7946] RAX: ffffffffffffffda RBX: 00007f7a2d425fa0 RCX: 00007f7a2d19e159 [ 305.308857][ T7946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 305.308879][ T7946] RBP: 00007f7a2d235024 R08: ffffffffffffffff R09: 0000000000000000 [ 305.308896][ T7946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.308912][ T7946] R13: 00007f7a2d426038 R14: 00007f7a2d425fa0 R15: 00007ffdb547ae58 [ 305.308952][ T7946] [ 305.360548][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 305.361453][ T25] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 305.362947][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.362974][ T25] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 305.368147][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.368176][ T25] usb 2-1: Product: syz [ 305.368193][ T25] usb 2-1: Manufacturer: syz [ 305.368211][ T25] usb 2-1: SerialNumber: syz [ 305.393894][ T25] usb 2-1: config 0 descriptor?? [ 305.752410][ T7951] netlink: 132 bytes leftover after parsing attributes in process `syz.5.666'. [ 308.229722][ T31] audit: type=1800 audit(1788711522.863:12): pid=7947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.664" name="bus" dev="ramfs" ino=17029 res=0 errno=0 [ 308.418458][ T5732] usb 2-1: USB disconnect, device number 12 [ 308.645383][ T7964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.775690][ T7964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.688384][ T7976] CIFS: Attempting to mount //127.0.0.1/share [ 309.807302][ T7976] CIFS: VFS: Error connecting to socket. Aborting operation. [ 309.808940][ T7976] CIFS: VFS: cifs_mount failed w/return code = -111 [ 311.664018][ T7990] netlink: 564 bytes leftover after parsing attributes in process `syz.2.678'. [ 311.785994][ T7994] netlink: 55 bytes leftover after parsing attributes in process `syz.1.679'. [ 312.010525][ T7998] netlink: 132 bytes leftover after parsing attributes in process `syz.1.682'. [ 315.398529][ T8019] kAFS: unable to lookup cell '.' [ 315.411028][ T5732] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 315.583389][ T8020] CIFS: Attempting to mount //127.0.0.1/share [ 315.592933][ T8020] CIFS: VFS: Error connecting to socket. Aborting operation. [ 315.606233][ T8020] CIFS: VFS: cifs_mount failed w/return code = -111 [ 315.616062][ T5732] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 315.616153][ T5732] usb 6-1: no configurations [ 315.616186][ T5732] usb 6-1: can't read configurations, error -22 [ 315.664456][ T5778] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 315.773412][ T5732] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 315.830348][ T5778] usb 7-1: Using ep0 maxpacket: 8 [ 315.836274][ T5778] usb 7-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 315.853864][ T5778] usb 7-1: config 0 has an invalid interface number: 6 but max is 2 [ 316.047164][ T5778] usb 7-1: config 0 has an invalid interface number: 176 but max is 2 [ 316.047227][ T5778] usb 7-1: config 0 has no interface number 1 [ 316.047253][ T5778] usb 7-1: config 0 has no interface number 2 [ 316.047358][ T5778] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.431282][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.438603][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.078004][ T5778] usb 7-1: config 0 descriptor?? [ 317.098659][ T5732] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 317.098729][ T5732] usb 6-1: no configurations [ 317.098744][ T5732] usb 6-1: can't read configurations, error -22 [ 317.100959][ T5732] usb usb6-port1: attempt power cycle [ 317.386138][ T5778] usb 7-1: Could not set interface, error -71 [ 317.748236][ T8036] netlink: 'syz.3.693': attribute type 1 has an invalid length. [ 318.376458][ T5778] usb 7-1: USB disconnect, device number 12 [ 318.390986][ T5732] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 318.583515][ T5732] usb 6-1: device descriptor read/8, error -71 [ 318.645347][ T8040] netlink: 55 bytes leftover after parsing attributes in process `syz.0.695'. [ 318.875306][ T8052] netlink: 132 bytes leftover after parsing attributes in process `syz.6.701'. [ 318.990380][ T981] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 319.030413][ T5732] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 319.050769][ T5778] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 319.052979][ T5732] usb 6-1: device descriptor read/8, error -71 [ 319.162734][ T5732] usb usb6-port1: unable to enumerate USB device [ 319.180765][ T981] usb 4-1: Using ep0 maxpacket: 16 [ 319.194491][ T981] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 319.208885][ T5778] usb 2-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 319.218232][ T981] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 319.218295][ T981] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.218377][ T981] usb 4-1: config 0 has no interface number 0 [ 319.218819][ T5778] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.218851][ T5778] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.218924][ T5778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.226895][ T981] usb 4-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 319.226984][ T981] usb 4-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.329382][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.337735][ T981] usb 4-1: Product: syz [ 319.337819][ T981] usb 4-1: Manufacturer: syz [ 319.337899][ T981] usb 4-1: SerialNumber: syz [ 319.387114][ T981] usb 4-1: config 0 descriptor?? [ 319.469653][ T981] asix 4-1:0.34: probe with driver asix failed with error -22 [ 319.770945][ T5778] usbhid 2-1:1.0: can't add hid device: -71 [ 319.771161][ T5778] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 319.798042][ T5778] usb 2-1: USB disconnect, device number 13 [ 320.133529][ T8065] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 321.533693][ T8075] kAFS: unable to lookup cell '.' [ 321.802406][ T981] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 321.915735][ T5778] usb 4-1: USB disconnect, device number 16 [ 321.970481][ T981] usb 7-1: Using ep0 maxpacket: 8 [ 321.975792][ T5639] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 321.984952][ T981] usb 7-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 321.995748][ T981] usb 7-1: config 0 has an invalid interface number: 6 but max is 2 [ 321.995799][ T981] usb 7-1: config 0 has an invalid interface number: 176 but max is 2 [ 321.995843][ T981] usb 7-1: config 0 has no interface number 1 [ 321.995870][ T981] usb 7-1: config 0 has no interface number 2 [ 321.995949][ T981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.252070][ T981] usb 7-1: config 0 descriptor?? [ 323.085379][ T981] usb 7-1: Could not set interface, error -71 [ 323.148588][ T981] usb 7-1: USB disconnect, device number 13 [ 323.694810][ T8080] loop5: detected capacity change from 0 to 32768 [ 323.737070][ T8096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.771873][ T8096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.926244][ T8080] XFS (loop5): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 323.968579][ T8107] netlink: 564 bytes leftover after parsing attributes in process `syz.2.717'. [ 324.125510][ T8080] XFS (loop5): Ending clean mount [ 324.183205][ T31] audit: type=1800 audit(1788711538.833:13): pid=8080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.712" name="file1" dev="loop5" ino=7430 res=0 errno=0 [ 324.599448][ T5618] XFS (loop5): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 325.060294][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 325.177279][ T8128] tipc: Started in network mode [ 325.201104][ T8128] tipc: Node identity d2ef1d09d06f, cluster identity 4711 [ 325.201317][ T8128] tipc: Enabled bearer , priority 0 [ 325.247824][ T5746] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 325.289370][ T8127] tipc: Disabling bearer [ 325.421095][ T5746] usb 2-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 325.432147][ T5746] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 325.432204][ T5746] usb 2-1: config 0 interface 0 has no altsetting 0 [ 325.432260][ T5746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.475877][ T5746] usb 2-1: config 0 descriptor?? [ 325.483894][ T8124] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 325.843541][ T9] usb 7-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 325.844970][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.845007][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.845078][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.910288][ T5746] usbhid 2-1:0.0: can't add hid device: -71 [ 325.910537][ T5746] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 325.933124][ T5746] usb 2-1: USB disconnect, device number 14 [ 326.299834][ T9] usbhid 7-1:1.0: can't add hid device: -71 [ 326.300113][ T9] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 326.309924][ T9] usb 7-1: USB disconnect, device number 14 [ 326.553462][ T8143] kAFS: unable to lookup cell '.' [ 326.595538][ T8143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.596255][ T8143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.251695][ T5778] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 327.380350][ T8158] tipc: Enabled bearer , priority 0 [ 327.635254][ T5778] usb 6-1: Using ep0 maxpacket: 8 [ 327.636057][ T5778] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 327.639356][ T5778] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 328.168042][ T8157] tipc: Disabling bearer [ 328.430884][ T5778] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 328.430968][ T5778] usb 6-1: Product: syz [ 328.431009][ T5778] usb 6-1: Manufacturer: syz [ 328.431050][ T5778] usb 6-1: SerialNumber: syz [ 328.748882][ T5778] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 328.748964][ T5778] usb 6-1: Handspring Visor / Palm OS: port 231, is for unknown use [ 328.748988][ T5778] usb 6-1: Handspring Visor / Palm OS: port 193, is for Debugger use [ 328.749009][ T5778] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 328.949968][ T5778] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 328.962373][ T5778] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 329.999786][ T8191] netlink: 564 bytes leftover after parsing attributes in process `syz.1.745'. [ 330.266865][ T5778] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 330.352840][ T5760] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 330.405119][ T5746] usb 6-1: USB disconnect, device number 17 [ 330.421216][ T5746] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 330.464217][ T5746] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 330.469613][ T5746] visor 6-1:1.0: device disconnected [ 330.520985][ T5760] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 330.531742][ T5760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 330.531823][ T5760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.531873][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.574226][ T5760] usb 4-1: config 0 descriptor?? [ 330.760770][ T8199] kAFS: unable to lookup cell '.' [ 331.122309][ T5746] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 331.189591][ T5760] aquacomputer_d5next 0003:0C70:F0B6.0006: item fetching failed at offset 5/7 [ 331.190763][ T5760] aquacomputer_d5next 0003:0C70:F0B6.0006: probe with driver aquacomputer_d5next failed with error -22 [ 331.248510][ T8205] tipc: Enabled bearer , priority 0 [ 331.265041][ T981] usb 4-1: USB disconnect, device number 17 [ 331.299108][ T8204] tipc: Disabling bearer [ 331.305232][ T5746] usb 6-1: Using ep0 maxpacket: 8 [ 331.314028][ T5746] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 331.328623][ T5746] usb 6-1: config 0 has an invalid interface number: 6 but max is 2 [ 331.328686][ T5746] usb 6-1: config 0 has an invalid interface number: 176 but max is 2 [ 331.328722][ T5746] usb 6-1: config 0 has no interface number 1 [ 331.328748][ T5746] usb 6-1: config 0 has no interface number 2 [ 331.328823][ T5746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.375796][ T5746] usb 6-1: config 0 descriptor?? [ 331.771555][ T5746] usb 6-1: Could not set interface, error -71 [ 331.965016][ T5746] usb 6-1: USB disconnect, device number 18 [ 332.390291][ T981] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 332.530837][ T5746] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 332.555861][ T981] usb 3-1: Using ep0 maxpacket: 8 [ 332.568251][ T981] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 332.578544][ T981] usb 3-1: no configurations [ 332.582477][ T981] usb 3-1: can't read configurations, error -22 [ 332.691043][ T5746] usb 4-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 332.703716][ T5746] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 332.703800][ T5746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 332.703841][ T5746] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 332.703895][ T5746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.750016][ T981] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 332.763498][ T5746] usb 4-1: config 0 descriptor?? [ 332.770705][ T8217] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 332.867525][ T6441] Bluetooth: hci4: Frame reassembly failed (-84) [ 332.867857][ T8222] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 332.911894][ T981] usb 3-1: Using ep0 maxpacket: 8 [ 332.917692][ T981] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 332.917794][ T981] usb 3-1: no configurations [ 332.917818][ T981] usb 3-1: can't read configurations, error -22 [ 332.918126][ T981] usb usb3-port1: attempt power cycle [ 333.301056][ T5778] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 333.301092][ T981] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 333.352450][ T981] usb 3-1: Using ep0 maxpacket: 8 [ 333.364458][ T981] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 333.376700][ T981] usb 3-1: no configurations [ 333.381729][ T981] usb 3-1: can't read configurations, error -22 [ 333.453907][ T5778] usb 2-1: Using ep0 maxpacket: 8 [ 333.454778][ T5778] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 333.461109][ T5778] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 333.475263][ T5778] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 333.475294][ T5778] usb 2-1: Product: syz [ 333.475313][ T5778] usb 2-1: Manufacturer: syz [ 333.475357][ T5778] usb 2-1: SerialNumber: syz [ 333.580815][ T981] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 333.614771][ T981] usb 3-1: Using ep0 maxpacket: 8 [ 333.624600][ T981] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 333.633834][ T981] usb 3-1: no configurations [ 333.633852][ T981] usb 3-1: can't read configurations, error -22 [ 333.647802][ T981] usb usb3-port1: unable to enumerate USB device [ 333.718712][ T5746] usbhid 4-1:0.0: can't add hid device: -71 [ 333.724884][ T5746] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 333.733877][ T5778] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 333.733953][ T5778] usb 2-1: Handspring Visor / Palm OS: port 231, is for unknown use [ 333.733978][ T5778] usb 2-1: Handspring Visor / Palm OS: port 193, is for Debugger use [ 333.734005][ T5778] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 333.775329][ T5746] usb 4-1: USB disconnect, device number 18 [ 335.134136][ T5630] Bluetooth: hci4: command 0x1003 tx timeout [ 335.134294][ T5639] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 335.147331][ T5778] usb 2-1: palm_os_3_probe - error -110 getting bytes available request [ 335.147919][ T5778] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 335.522949][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.768'. [ 335.578416][ T5778] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 335.612497][ T5778] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 335.954229][ T8249] kAFS: unable to lookup cell '.' [ 336.823748][ T5778] usb 2-1: USB disconnect, device number 15 [ 336.863674][ T5778] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 336.900898][ T5778] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 336.901683][ T5778] visor 2-1:1.0: device disconnected [ 337.004435][ T25] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 339.181507][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 339.420476][ T8268] tipc: Enabled bearer , priority 0 [ 339.423685][ T8268] tipc: Resetting bearer [ 339.443958][ T25] usb 3-1: device descriptor read/all, error -71 [ 339.502119][ T8267] tipc: Disabling bearer [ 340.133974][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.785'. [ 340.505821][ T5747] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 340.731060][ T8293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.731717][ T8293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.770485][ T5780] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 340.922076][ T5747] usb 7-1: Using ep0 maxpacket: 8 [ 340.928509][ T5780] usb 2-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 340.930600][ T5747] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 340.930639][ T5747] usb 7-1: no configurations [ 340.930655][ T5747] usb 7-1: can't read configurations, error -22 [ 340.950302][ T5780] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 340.950337][ T5780] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 340.994365][ T5780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.994446][ T5780] usb 2-1: Product: syz [ 340.994483][ T5780] usb 2-1: Manufacturer: syz [ 340.994509][ T5780] usb 2-1: SerialNumber: syz [ 341.250286][ T5747] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 341.310040][ T5780] kaweth 2-1:1.0: Firmware present in device. [ 341.411530][ T5747] usb 7-1: Using ep0 maxpacket: 8 [ 341.413661][ T5747] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 341.413703][ T5747] usb 7-1: no configurations [ 341.413719][ T5747] usb 7-1: can't read configurations, error -22 [ 341.414221][ T5747] usb usb7-port1: attempt power cycle [ 341.476705][ T5780] kaweth 2-1:1.0: Statistics collection: 0 [ 341.476782][ T5780] kaweth 2-1:1.0: Multicast filter limit: 0 [ 341.476831][ T5780] kaweth 2-1:1.0: MTU: 0 [ 341.476855][ T5780] kaweth 2-1:1.0: Read MAC address 00:00:00:00:00:00 [ 341.846273][ T5747] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 341.860879][ T5747] usb 7-1: Using ep0 maxpacket: 8 [ 341.861453][ T5747] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 341.861495][ T5747] usb 7-1: no configurations [ 341.861510][ T5747] usb 7-1: can't read configurations, error -22 [ 342.940395][ T5747] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 342.966011][ T5747] usb 7-1: Using ep0 maxpacket: 8 [ 343.480319][ T8309] kAFS: unable to lookup cell '.' [ 343.538856][ T8309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.539513][ T8309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.646313][ T5747] usb 7-1: device descriptor read/all, error -71 [ 343.646627][ T5747] usb usb7-port1: unable to enumerate USB device [ 343.653625][ T8291] Mount JFS Failure: -22 [ 343.653640][ T8291] jfs_mount failed w/return code = -22 [ 343.673084][ T5780] kaweth 2-1:1.0: Error setting SOFS wait [ 343.673380][ T5780] kaweth 2-1:1.0: probe with driver kaweth failed with error -5 [ 343.718018][ T5780] usb 2-1: USB disconnect, device number 16 [ 343.954907][ T8315] syzkaller0: entered promiscuous mode [ 343.954952][ T8315] syzkaller0: entered allmulticast mode [ 343.974118][ T8315] tipc: Enabled bearer , priority 0 [ 343.981259][ T8314] tipc: Resetting bearer [ 344.029508][ T8314] tipc: Disabling bearer [ 347.061509][ T8342] CIFS: Attempting to mount //127.0.0.1/share [ 347.220971][ T8345] comedi comedi1: Minor 2 specified more than once! [ 347.262874][ T8342] CIFS: VFS: Error connecting to socket. Aborting operation. [ 347.262976][ T8342] CIFS: VFS: cifs_mount failed w/return code = -111 [ 349.173457][ T8355] netlink: 564 bytes leftover after parsing attributes in process `syz.3.810'. [ 350.493795][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'. [ 350.941665][ T8370] kAFS: unable to lookup cell '.' [ 351.100370][ T5747] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 351.210433][ T30] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 351.251157][ T5747] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 351.254328][ T5747] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.254382][ T5747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.277505][ T5747] usb 2-1: config 0 descriptor?? [ 351.306096][ T5747] pwc: Askey VC010 type 2 USB webcam detected. [ 351.360795][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 351.362256][ T30] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 351.369555][ T30] usb 3-1: config 0 has an invalid interface number: 6 but max is 2 [ 351.369583][ T30] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 351.369607][ T30] usb 3-1: config 0 has no interface number 1 [ 351.369654][ T30] usb 3-1: config 0 has no interface number 2 [ 351.369723][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.385433][ T30] usb 3-1: config 0 descriptor?? [ 351.710037][ T5747] pwc: recv_control_msg error -32 req 02 val 2b00 [ 351.712337][ T5747] pwc: recv_control_msg error -32 req 02 val 2700 [ 351.719047][ T5747] pwc: recv_control_msg error -32 req 02 val 2c00 [ 351.724527][ T5747] pwc: recv_control_msg error -32 req 04 val 1000 [ 351.725493][ T5747] pwc: recv_control_msg error -32 req 04 val 1300 [ 351.726709][ T5747] pwc: recv_control_msg error -32 req 04 val 1400 [ 351.738538][ T5747] pwc: recv_control_msg error -32 req 02 val 2000 [ 351.739772][ T5747] pwc: recv_control_msg error -32 req 02 val 2100 [ 351.746452][ T30] usb 3-1: Could not set interface, error -71 [ 351.755369][ T5747] pwc: recv_control_msg error -32 req 04 val 1500 [ 351.779810][ T5747] pwc: recv_control_msg error -32 req 02 val 2500 [ 351.845134][ T30] usb 3-1: USB disconnect, device number 22 [ 351.985918][ T5747] pwc: recv_control_msg error -71 req 02 val 2600 [ 351.987418][ T5747] pwc: recv_control_msg error -71 req 02 val 2900 [ 351.988068][ T5747] pwc: recv_control_msg error -71 req 02 val 2800 [ 351.992671][ T5747] pwc: recv_control_msg error -71 req 04 val 1100 [ 351.993522][ T5747] pwc: recv_control_msg error -71 req 04 val 1200 [ 352.040135][ T5747] pwc: Registered as video103. [ 352.059771][ T5747] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input21 [ 352.142661][ T5747] usb 2-1: USB disconnect, device number 17 [ 354.032054][ T5747] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 354.046455][ T8390] CIFS: Attempting to mount //127.0.0.1/share [ 354.047422][ T8390] CIFS: VFS: Error connecting to socket. Aborting operation. [ 354.047488][ T8390] CIFS: VFS: cifs_mount failed w/return code = -111 [ 354.064400][ T8390] comedi comedi1: Minor 2 specified more than once! [ 354.180264][ T5747] usb 7-1: Using ep0 maxpacket: 16 [ 354.181203][ T5747] usb 7-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 354.187202][ T5747] usb 7-1: config 0 has an invalid interface number: 126 but max is 0 [ 354.187230][ T5747] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.187283][ T5747] usb 7-1: config 0 has no interface number 0 [ 354.187327][ T5747] usb 7-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 354.187358][ T5747] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 354.187390][ T5747] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 354.187421][ T5747] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 28524, setting to 1024 [ 354.187451][ T5747] usb 7-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 354.187479][ T5747] usb 7-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 354.187526][ T5747] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.230002][ T5747] usb 7-1: config 0 descriptor?? [ 354.238035][ T8384] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 354.238309][ T8384] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 354.288951][ T5747] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 355.679556][ T8404] random: crng reseeded on system resumption [ 356.092436][ T5747] usb 7-1: USB disconnect, device number 19 [ 357.968764][ T8433] overlayfs: missing 'workdir' [ 358.054389][ T8429] loop2: detected capacity change from 0 to 4096 [ 358.107172][ T8429] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 358.107215][ T8429] EXT4-fs (loop2): Test dummy encryption mode enabled [ 358.161900][ T8429] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 358.164799][ T8429] System zones: 0-5 [ 359.283301][ T8429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.415702][ T8429] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 360.173947][ T8444] workqueue: Failed to create a rescuer kthread for wq "blk_crypto_wq": -EINTR [ 360.248722][ T8444] fscrypt (loop2): Error -12 starting to use blk-crypto [ 360.249358][ T8444] overlayfs: upper fs does not support tmpfile. [ 360.258791][ T8444] workqueue: Failed to create a rescuer kthread for wq "blk_crypto_wq": -EINTR [ 360.304581][ T8444] fscrypt (loop2): Error -12 starting to use blk-crypto [ 360.532646][ T8451] CIFS: Attempting to mount //127.0.0.1/share [ 360.533745][ T8451] CIFS: VFS: Error connecting to socket. Aborting operation. [ 360.533815][ T8451] CIFS: VFS: cifs_mount failed w/return code = -111 [ 360.559891][ T8451] comedi comedi1: Minor 2 specified more than once! [ 360.660574][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.091739][ T8458] syzkaller0: entered promiscuous mode [ 361.091818][ T8458] syzkaller0: entered allmulticast mode [ 361.170905][ T8458] tipc: Enabled bearer , priority 0 [ 361.241925][ T8456] tipc: Resetting bearer [ 362.047969][ T8456] tipc: Disabling bearer [ 363.835184][ T5747] hid_parser_main: 453 callbacks suppressed [ 363.835262][ T5747] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 363.963940][ T5747] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 366.175147][ T8497] fido_id[8497]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 366.261399][ T9] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 366.461122][ T9] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 366.463185][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 366.463776][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.463868][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.484203][ T9] usb 7-1: config 0 descriptor?? [ 366.590591][ T5760] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 366.661112][ T8507] FAULT_INJECTION: forcing a failure. [ 366.661112][ T8507] name failslab, interval 1, probability 0, space 0, times 0 [ 366.661178][ T8507] CPU: 1 UID: 0 PID: 8507 Comm: syz.0.855 Tainted: G L syzkaller #0 PREEMPT(full) [ 366.661212][ T8507] Tainted: [L]=SOFTLOCKUP [ 366.661222][ T8507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 366.661237][ T8507] Call Trace: [ 366.661248][ T8507] [ 366.661263][ T8507] dump_stack_lvl+0xe8/0x150 [ 366.661306][ T8507] should_fail_ex+0x410/0x560 [ 366.661353][ T8507] should_failslab+0xa8/0x100 [ 366.661386][ T8507] __kmalloc_cache_noprof+0xa3/0x600 [ 366.661428][ T8507] ? snd_seq_port_use_ptr+0x29/0x260 [ 366.661461][ T8507] ? snd_seq_port_connect+0x6b/0x3a0 [ 366.661488][ T8507] ? snd_seq_port_connect+0x6b/0x3a0 [ 366.661524][ T8507] snd_seq_port_connect+0x6b/0x3a0 [ 366.661552][ T8507] ? snd_seq_port_use_ptr+0x29/0x260 [ 366.661576][ T8507] ? snd_seq_port_use_ptr+0x29/0x260 [ 366.661605][ T8507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 366.661635][ T8507] ? snd_seq_port_use_ptr+0x229/0x260 [ 366.661666][ T8507] snd_seq_ioctl_subscribe_port+0x351/0x790 [ 366.661707][ T8507] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 366.661740][ T8507] ? clientptr+0x17/0x160 [ 366.661765][ T8507] ? clientptr+0x17/0x160 [ 366.661787][ T8507] ? clientptr+0x17/0x160 [ 366.661812][ T8507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 366.661849][ T8507] snd_seq_oss_midi_open+0x558/0x890 [ 366.661894][ T8507] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 366.661942][ T8507] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 366.661978][ T8507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 366.662013][ T8507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 366.662042][ T8507] ? snd_seq_oss_midi_get_addr+0x19e/0x260 [ 366.662084][ T8507] snd_seq_oss_synth_setup_midi+0x12d/0x530 [ 366.662135][ T8507] snd_seq_oss_open+0x94f/0xf40 [ 366.662173][ T8507] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 366.662243][ T8507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 366.662273][ T8507] ? rcu_is_watching+0x16/0xb0 [ 366.662304][ T8507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 366.662333][ T8507] ? trace_contention_end+0x3d/0x140 [ 366.662389][ T8507] ? __pfx___mutex_lock+0x10/0x10 [ 366.662421][ T8507] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 366.662458][ T8507] ? __pfx_free_devinfo+0x10/0x10 [ 366.662487][ T8507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 366.662517][ T8507] ? do_raw_spin_unlock+0xf5/0x200 [ 366.662557][ T8507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 366.662587][ T8507] ? soundcore_open+0x2da/0x490 [ 366.662622][ T8507] odev_open+0x67/0xa0 [ 366.662652][ T8507] chrdev_open+0x4d9/0x600 [ 366.662684][ T8507] ? __pfx_chrdev_open+0x10/0x10 [ 366.662713][ T8507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 366.662742][ T8507] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 366.662779][ T8507] ? __pfx_chrdev_open+0x10/0x10 [ 366.662806][ T8507] do_dentry_open+0x816/0x1380 [ 366.662850][ T8507] vfs_open+0x3b/0x340 [ 366.662877][ T8507] ? path_openat+0x1428/0x1d60 [ 366.662921][ T8507] path_openat+0x1443/0x1d60 [ 366.662984][ T8507] do_file_open+0x23e/0x4a0 [ 366.663031][ T8507] ? __pfx_do_file_open+0x10/0x10 [ 366.663097][ T8507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 366.663126][ T8507] ? _raw_spin_unlock+0x28/0x50 [ 366.663159][ T8507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 366.663188][ T8507] ? alloc_fd+0x651/0x6c0 [ 366.663234][ T8507] do_sys_openat2+0x115/0x200 [ 366.663264][ T8507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 366.663294][ T8507] ? __se_sys_futex+0x3a8/0x450 [ 366.663328][ T8507] ? __pfx_do_sys_openat2+0x10/0x10 [ 366.663367][ T8507] ? rcu_is_watching+0x16/0xb0 [ 366.663397][ T8507] ? srso_alias_return_thunk+0x5/0xfbef5 [ 366.663432][ T8507] __x64_sys_openat+0x138/0x170 [ 366.663476][ T8507] do_syscall_64+0x166/0x520 [ 366.663500][ T8507] ? trace_irq_disable+0x3b/0x140 [ 366.663525][ T8507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.663558][ T8507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.663585][ T8507] RIP: 0033:0x7ff67459e159 [ 366.663608][ T8507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.663629][ T8507] RSP: 002b:00007ff67538b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 366.663656][ T8507] RAX: ffffffffffffffda RBX: 00007ff674825fa0 RCX: 00007ff67459e159 [ 366.663676][ T8507] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 366.663693][ T8507] RBP: 00007ff674635024 R08: 0000000000000000 R09: 0000000000000000 [ 366.663710][ T8507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.663725][ T8507] R13: 00007ff674826038 R14: 00007ff674825fa0 R15: 00007fff1c2a9688 [ 366.663765][ T8507] [ 367.033352][ T5760] usb 2-1: unable to get BOS descriptor or descriptor too short [ 367.033496][ T5760] usb 2-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice=10.1c [ 367.055222][ T5760] usb 2-1: config 8 has no interfaces? [ 367.061039][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 367.061173][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 367.215197][ T5760] usb 2-1: string descriptor 0 read error: -22 [ 367.221803][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.233154][ T9] usb 7-1: USB disconnect, device number 20 [ 368.798780][ T9] usb 2-1: USB disconnect, device number 18 [ 370.705679][ T8543] FAULT_INJECTION: forcing a failure. [ 370.705679][ T8543] name failslab, interval 1, probability 0, space 0, times 0 [ 370.722730][ T8543] CPU: 0 UID: 0 PID: 8543 Comm: syz.3.868 Tainted: G L syzkaller #0 PREEMPT(full) [ 370.722771][ T8543] Tainted: [L]=SOFTLOCKUP [ 370.722781][ T8543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 370.722797][ T8543] Call Trace: [ 370.722807][ T8543] [ 370.722818][ T8543] dump_stack_lvl+0xe8/0x150 [ 370.722862][ T8543] should_fail_ex+0x410/0x560 [ 370.722911][ T8543] should_failslab+0xa8/0x100 [ 370.722946][ T8543] __kmalloc_cache_noprof+0xa3/0x600 [ 370.722989][ T8543] ? snd_seq_port_use_ptr+0x29/0x260 [ 370.723017][ T8543] ? snd_seq_port_connect+0x6b/0x3a0 [ 370.723044][ T8543] ? snd_seq_port_connect+0x6b/0x3a0 [ 370.723081][ T8543] snd_seq_port_connect+0x6b/0x3a0 [ 370.723108][ T8543] ? snd_seq_port_use_ptr+0x29/0x260 [ 370.723134][ T8543] ? snd_seq_port_use_ptr+0x29/0x260 [ 370.723163][ T8543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.723194][ T8543] ? snd_seq_port_use_ptr+0x229/0x260 [ 370.723225][ T8543] snd_seq_ioctl_subscribe_port+0x351/0x790 [ 370.723266][ T8543] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 370.723304][ T8543] ? clientptr+0x17/0x160 [ 370.723331][ T8543] ? clientptr+0x17/0x160 [ 370.723356][ T8543] ? clientptr+0x17/0x160 [ 370.723383][ T8543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.723421][ T8543] snd_seq_oss_midi_open+0x558/0x890 [ 370.723474][ T8543] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 370.723524][ T8543] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 370.723562][ T8543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.723597][ T8543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.723627][ T8543] ? snd_seq_oss_midi_get_addr+0x19e/0x260 [ 370.723671][ T8543] snd_seq_oss_synth_setup_midi+0x12d/0x530 [ 370.723722][ T8543] snd_seq_oss_open+0x94f/0xf40 [ 370.723762][ T8543] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 370.723834][ T8543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.723865][ T8543] ? rcu_is_watching+0x16/0xb0 [ 370.723897][ T8543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.723927][ T8543] ? trace_contention_end+0x3d/0x140 [ 370.723988][ T8543] ? __pfx___mutex_lock+0x10/0x10 [ 370.724020][ T8543] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 370.724053][ T8543] ? __pfx_free_devinfo+0x10/0x10 [ 370.724083][ T8543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.724113][ T8543] ? do_raw_spin_unlock+0xf5/0x200 [ 370.724154][ T8543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.724184][ T8543] ? soundcore_open+0x2da/0x490 [ 370.724221][ T8543] odev_open+0x67/0xa0 [ 370.724251][ T8543] chrdev_open+0x4d9/0x600 [ 370.724283][ T8543] ? __pfx_chrdev_open+0x10/0x10 [ 370.724312][ T8543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.724341][ T8543] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 370.724377][ T8543] ? __pfx_chrdev_open+0x10/0x10 [ 370.724404][ T8543] do_dentry_open+0x816/0x1380 [ 370.724456][ T8543] vfs_open+0x3b/0x340 [ 370.724484][ T8543] ? path_openat+0x1428/0x1d60 [ 370.724530][ T8543] path_openat+0x1443/0x1d60 [ 370.724595][ T8543] do_file_open+0x23e/0x4a0 [ 370.724643][ T8543] ? __pfx_do_file_open+0x10/0x10 [ 370.724711][ T8543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.724741][ T8543] ? _raw_spin_unlock+0x28/0x50 [ 370.724775][ T8543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.724805][ T8543] ? alloc_fd+0x651/0x6c0 [ 370.724851][ T8543] do_sys_openat2+0x115/0x200 [ 370.724883][ T8543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.724913][ T8543] ? __se_sys_futex+0x3a8/0x450 [ 370.724948][ T8543] ? __pfx_do_sys_openat2+0x10/0x10 [ 370.724988][ T8543] ? rcu_is_watching+0x16/0xb0 [ 370.725019][ T8543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.725055][ T8543] __x64_sys_openat+0x138/0x170 [ 370.725092][ T8543] do_syscall_64+0x166/0x520 [ 370.725114][ T8543] ? trace_irq_disable+0x3b/0x140 [ 370.725140][ T8543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.725173][ T8543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.725200][ T8543] RIP: 0033:0x7f5e5c39e159 [ 370.725223][ T8543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.725245][ T8543] RSP: 002b:00007f5e5d320028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 370.725272][ T8543] RAX: ffffffffffffffda RBX: 00007f5e5c625fa0 RCX: 00007f5e5c39e159 [ 370.725292][ T8543] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 370.725310][ T8543] RBP: 00007f5e5c435024 R08: 0000000000000000 R09: 0000000000000000 [ 370.725326][ T8543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.725342][ T8543] R13: 00007f5e5c626038 R14: 00007f5e5c625fa0 R15: 00007ffdbd95e3a8 [ 370.725383][ T8543] [ 371.314077][ T25] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 371.516406][ T25] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 371.520514][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 371.520548][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 371.520575][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 371.534173][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.534203][ T25] usb 7-1: Product: syz [ 371.534220][ T25] usb 7-1: Manufacturer: syz [ 371.534238][ T25] usb 7-1: SerialNumber: syz [ 371.595690][ T25] usb 7-1: config 0 descriptor?? [ 371.888532][ T25] adutux 7-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 372.055742][ T25] usb 7-1: USB disconnect, device number 21 [ 374.120482][ T25] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 374.287317][ T25] usb 7-1: unable to get BOS descriptor or descriptor too short [ 374.287395][ T25] usb 7-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice=10.1c [ 374.306168][ T25] usb 7-1: config 8 has no interfaces? [ 374.318846][ T25] usb 7-1: string descriptor 0 read error: -22 [ 374.319009][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.577972][ T9] usb 7-1: USB disconnect, device number 22 [ 374.774398][ T25] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 375.035125][ T25] usb 4-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 375.048185][ T8595] FAULT_INJECTION: forcing a failure. [ 375.048185][ T8595] name failslab, interval 1, probability 0, space 0, times 0 [ 375.063452][ T25] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 375.075057][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 375.075100][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.099226][ T25] usb 4-1: config 0 descriptor?? [ 375.110785][ T8587] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 375.130567][ T8595] CPU: 1 UID: 0 PID: 8595 Comm: syz.0.883 Tainted: G L syzkaller #0 PREEMPT(full) [ 375.130611][ T8595] Tainted: [L]=SOFTLOCKUP [ 375.130621][ T8595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 375.130638][ T8595] Call Trace: [ 375.130648][ T8595] [ 375.130659][ T8595] dump_stack_lvl+0xe8/0x150 [ 375.130704][ T8595] should_fail_ex+0x410/0x560 [ 375.130754][ T8595] should_failslab+0xa8/0x100 [ 375.130789][ T8595] __kmalloc_cache_noprof+0xa3/0x600 [ 375.130832][ T8595] ? snd_seq_port_use_ptr+0x29/0x260 [ 375.130860][ T8595] ? snd_seq_port_connect+0x6b/0x3a0 [ 375.130888][ T8595] ? snd_seq_port_connect+0x6b/0x3a0 [ 375.130927][ T8595] snd_seq_port_connect+0x6b/0x3a0 [ 375.130960][ T8595] ? snd_seq_port_use_ptr+0x29/0x260 [ 375.130987][ T8595] ? snd_seq_port_use_ptr+0x29/0x260 [ 375.131016][ T8595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.131048][ T8595] ? snd_seq_port_use_ptr+0x229/0x260 [ 375.131096][ T8595] snd_seq_ioctl_subscribe_port+0x351/0x790 [ 375.131139][ T8595] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 375.131173][ T8595] ? clientptr+0x17/0x160 [ 375.131217][ T8595] ? clientptr+0x17/0x160 [ 375.131240][ T8595] ? clientptr+0x17/0x160 [ 375.131266][ T8595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.131305][ T8595] snd_seq_oss_midi_open+0x558/0x890 [ 375.131355][ T8595] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 375.131406][ T8595] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 375.131445][ T8595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.131481][ T8595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.131511][ T8595] ? snd_seq_oss_midi_get_addr+0x19e/0x260 [ 375.131555][ T8595] snd_seq_oss_synth_setup_midi+0x12d/0x530 [ 375.131608][ T8595] snd_seq_oss_open+0x94f/0xf40 [ 375.131648][ T8595] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 375.131720][ T8595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.131751][ T8595] ? rcu_is_watching+0x16/0xb0 [ 375.131783][ T8595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.131814][ T8595] ? trace_contention_end+0x3d/0x140 [ 375.131873][ T8595] ? __pfx___mutex_lock+0x10/0x10 [ 375.131905][ T8595] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 375.131943][ T8595] ? __pfx_free_devinfo+0x10/0x10 [ 375.131973][ T8595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.132004][ T8595] ? do_raw_spin_unlock+0xf5/0x200 [ 375.132046][ T8595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.132077][ T8595] ? soundcore_open+0x2da/0x490 [ 375.132114][ T8595] odev_open+0x67/0xa0 [ 375.132144][ T8595] chrdev_open+0x4d9/0x600 [ 375.132178][ T8595] ? __pfx_chrdev_open+0x10/0x10 [ 375.132207][ T8595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.132238][ T8595] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 375.132274][ T8595] ? __pfx_chrdev_open+0x10/0x10 [ 375.132302][ T8595] do_dentry_open+0x816/0x1380 [ 375.132348][ T8595] vfs_open+0x3b/0x340 [ 375.132376][ T8595] ? path_openat+0x1428/0x1d60 [ 375.132423][ T8595] path_openat+0x1443/0x1d60 [ 375.132488][ T8595] do_file_open+0x23e/0x4a0 [ 375.132529][ T8595] ? lockdep_hardirqs_on+0x7b/0x110 [ 375.132569][ T8595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.132606][ T8595] ? __pfx_do_file_open+0x10/0x10 [ 375.132674][ T8595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.132705][ T8595] ? _raw_spin_unlock+0x28/0x50 [ 375.132739][ T8595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.132770][ T8595] ? alloc_fd+0x651/0x6c0 [ 375.132817][ T8595] do_sys_openat2+0x115/0x200 [ 375.132849][ T8595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.132880][ T8595] ? __se_sys_futex+0x3a8/0x450 [ 375.132916][ T8595] ? __pfx_do_sys_openat2+0x10/0x10 [ 375.132959][ T8595] ? rcu_is_watching+0x16/0xb0 [ 375.132991][ T8595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.133028][ T8595] __x64_sys_openat+0x138/0x170 [ 375.133068][ T8595] do_syscall_64+0x166/0x520 [ 375.133093][ T8595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.133120][ T8595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.133156][ T8595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.133184][ T8595] RIP: 0033:0x7ff67459e159 [ 375.133207][ T8595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.133230][ T8595] RSP: 002b:00007ff67538b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 375.133258][ T8595] RAX: ffffffffffffffda RBX: 00007ff674825fa0 RCX: 00007ff67459e159 [ 375.133278][ T8595] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 375.133296][ T8595] RBP: 00007ff674635024 R08: 0000000000000000 R09: 0000000000000000 [ 375.133313][ T8595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.133330][ T8595] R13: 00007ff674826038 R14: 00007ff674825fa0 R15: 00007fff1c2a9688 [ 375.133371][ T8595] [ 375.608627][ T25] hid (null): unknown global tag 0xe [ 375.608654][ T25] hid (null): unknown global tag 0xc [ 375.640252][ T5760] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 375.664709][ T25] hid (null): invalid report_size 699 [ 375.672072][ T25] hid (null): invalid report_count 47066 [ 375.677784][ T25] hid (null): invalid report_size -47609334 [ 375.683822][ T25] hid (null): unknown global tag 0x37 [ 375.694305][ T25] razer 0003:1532:010D.0008: unknown main item tag 0x0 [ 375.701305][ T25] razer 0003:1532:010D.0008: unknown main item tag 0x0 [ 375.708260][ T25] razer 0003:1532:010D.0008: unknown main item tag 0x0 [ 375.716150][ T25] razer 0003:1532:010D.0008: unknown main item tag 0x0 [ 375.723519][ T25] razer 0003:1532:010D.0008: unknown main item tag 0x0 [ 375.731397][ T25] razer 0003:1532:010D.0008: unknown main item tag 0x0 [ 375.738339][ T25] razer 0003:1532:010D.0008: unknown main item tag 0x0 [ 375.738366][ T25] razer 0003:1532:010D.0008: unknown main item tag 0x0 [ 375.738390][ T25] razer 0003:1532:010D.0008: unknown main item tag 0x0 [ 375.738414][ T25] razer 0003:1532:010D.0008: unknown main item tag 0x0 [ 375.739534][ T25] razer 0003:1532:010D.0008: collection stack underflow [ 375.774120][ T25] razer 0003:1532:010D.0008: item 0 2 0 12 parsing failed [ 375.782104][ T25] razer 0003:1532:010D.0008: probe with driver razer failed with error -22 [ 375.814257][ T5760] usb 6-1: Using ep0 maxpacket: 8 [ 375.827662][ T5760] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 375.845973][ T5778] usb 4-1: USB disconnect, device number 19 [ 375.857132][ T5760] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.857196][ T5760] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 375.903712][ T5760] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.903800][ T5760] usb 6-1: Product: syz [ 375.903816][ T5760] usb 6-1: Manufacturer: syz [ 375.903833][ T5760] usb 6-1: SerialNumber: syz [ 375.942875][ T5760] usb 6-1: config 0 descriptor?? [ 375.949636][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 376.017629][ T8603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.055890][ T8603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.102996][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 376.110526][ T9] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 376.110554][ T9] usb 3-1: Product: syz [ 376.110571][ T9] usb 3-1: SerialNumber: syz [ 376.191903][ T9] usb 3-1: config 0 descriptor?? [ 376.409212][ T9] hso 3-1:0.0: Failed to find BULK eps [ 376.609594][ T5760] usb 3-1: USB disconnect, device number 23 [ 376.821420][ T5747] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 376.980992][ T5747] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 376.991540][ T5747] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 377.003214][ T5747] usb 4-1: config 0 has no interface number 0 [ 377.014658][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.023016][ T5747] usb 4-1: Product: syz [ 377.027338][ T5747] usb 4-1: Manufacturer: syz [ 377.032413][ T5747] usb 4-1: SerialNumber: syz [ 377.041696][ T5747] usb 4-1: config 0 descriptor?? [ 377.255641][ T5747] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 377.283430][ T5747] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 377.295413][ T5747] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 377.304177][ T5747] usb 4-1: media controller created [ 377.342645][ T5747] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 377.892040][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.892183][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.675753][ T5747] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 378.678662][ T8614] ================================================================== [ 378.678680][ T8614] BUG: KASAN: slab-out-of-bounds in ec168_i2c_xfer+0x4d4/0x630 [ 378.678718][ T8614] Read of size 1 at addr ffff8880766d0921 by task syz.3.890/8614 [ 378.678740][ T8614] [ 378.678755][ T8614] CPU: 1 UID: 0 PID: 8614 Comm: syz.3.890 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.678790][ T8614] Tainted: [L]=SOFTLOCKUP [ 378.678800][ T8614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 378.678817][ T8614] Call Trace: [ 378.678827][ T8614] [ 378.678838][ T8614] dump_stack_lvl+0xe8/0x150 [ 378.678878][ T8614] print_address_description+0x55/0x1e0 [ 378.678914][ T8614] ? ec168_i2c_xfer+0x4d4/0x630 [ 378.678949][ T8614] print_report+0x58/0x70 [ 378.678982][ T8614] kasan_report+0x117/0x150 [ 378.679016][ T8614] ? ec168_i2c_xfer+0x4d4/0x630 [ 378.679051][ T8614] ec168_i2c_xfer+0x4d4/0x630 [ 378.679090][ T8614] __i2c_transfer+0x7bf/0x1fe0 [ 378.679135][ T8614] ? rt_mutex_lock_nested+0x167/0x1c0 [ 378.679165][ T8614] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.679196][ T8614] ? i2c_transfer+0xc7/0x2d0 [ 378.679239][ T8614] i2c_transfer+0x1cb/0x2d0 [ 378.679278][ T8614] i2cdev_ioctl_rdwr+0x460/0x740 [ 378.679325][ T8614] i2cdev_ioctl+0x6a5/0x880 [ 378.679364][ T8614] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 378.679404][ T8614] ? __fget_files+0x3a2/0x420 [ 378.679439][ T8614] ? __fget_files+0x2a/0x420 [ 378.679476][ T8614] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.679507][ T8614] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.679539][ T8614] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 378.679578][ T8614] __se_sys_ioctl+0xfc/0x170 [ 378.679606][ T8614] do_syscall_64+0x166/0x520 [ 378.679629][ T8614] ? trace_irq_disable+0x3b/0x140 [ 378.679655][ T8614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.679686][ T8614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.679712][ T8614] RIP: 0033:0x7f5e5c39e159 [ 378.679735][ T8614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.679758][ T8614] RSP: 002b:00007f5e5d320028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 378.679786][ T8614] RAX: ffffffffffffffda RBX: 00007f5e5c625fa0 RCX: 00007f5e5c39e159 [ 378.679807][ T8614] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 378.679824][ T8614] RBP: 00007f5e5c435024 R08: 0000000000000000 R09: 0000000000000000 [ 378.679842][ T8614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.679858][ T8614] R13: 00007f5e5c626038 R14: 00007f5e5c625fa0 R15: 00007ffdbd95e3a8 [ 378.679890][ T8614] [ 378.679900][ T8614] [ 378.679906][ T8614] Allocated by task 8614: [ 378.679919][ T8614] kasan_save_track+0x3e/0x80 [ 378.679948][ T8614] __kasan_kmalloc+0x93/0xb0 [ 378.679973][ T8614] __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 378.680015][ T8614] memdup_user+0x2b/0xd0 [ 378.680038][ T8614] i2cdev_ioctl_rdwr+0x1c6/0x740 [ 378.680075][ T8614] i2cdev_ioctl+0x6a5/0x880 [ 378.680110][ T8614] __se_sys_ioctl+0xfc/0x170 [ 378.680132][ T8614] do_syscall_64+0x166/0x520 [ 378.680153][ T8614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.680178][ T8614] [ 378.680184][ T8614] The buggy address belongs to the object at ffff8880766d0920 [ 378.680184][ T8614] which belongs to the cache kmalloc-8 of size 8 [ 378.680205][ T8614] The buggy address is located 0 bytes to the right of [ 378.680205][ T8614] allocated 1-byte region [ffff8880766d0920, ffff8880766d0921) [ 378.680231][ T8614] [ 378.680238][ T8614] The buggy address belongs to the physical page: [ 378.680250][ T8614] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880766d0e80 pfn:0x766d0 [ 378.680275][ T8614] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 378.680298][ T8614] page_type: f5(slab) [ 378.680322][ T8614] raw: 00fff00000000200 ffff88801b041500 ffffea0000c37750 ffffea0000d1a710 [ 378.680346][ T8614] raw: ffff8880766d0e80 000000000080006f 00000000f5000000 0000000000000000 [ 378.680360][ T8614] page dumped because: kasan: bad access detected [ 378.680372][ T8614] page_owner tracks the page as allocated [ 378.680382][ T8614] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5616, tgid 5616 (syz-executor), ts 108757864886 [ 378.680422][ T8614] post_alloc_hook+0x1f9/0x250 [ 378.680458][ T8614] get_page_from_freelist+0x2209/0x2280 [ 378.680483][ T8614] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 378.680508][ T8614] allocate_slab+0x7d/0x620 [ 378.680537][ T8614] refill_objects+0x2d5/0x350 [ 378.680568][ T8614] __pcs_replace_empty_main+0x2c8/0x6c0 [ 378.680598][ T8614] __kmalloc_node_noprof+0x54d/0x720 [ 378.680635][ T8614] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 378.680671][ T8614] vzalloc_noprof+0xb2/0xe0 [ 378.680705][ T8614] alloc_counters+0x63/0x5d0 [ 378.680742][ T8614] do_ip6t_get_ctl+0xb17/0x12f0 [ 378.680779][ T8614] nf_getsockopt+0x26e/0x290 [ 378.680804][ T8614] ipv6_getsockopt+0x213/0x2c0 [ 378.680832][ T8614] do_sock_getsockopt+0x51d/0x7e0 [ 378.680858][ T8614] __x64_sys_getsockopt+0x1a4/0x240 [ 378.680884][ T8614] do_syscall_64+0x166/0x520 [ 378.680906][ T8614] page last free pid 5616 tgid 5616 ts 108757839386 stack trace: [ 378.680924][ T8614] __free_frozen_pages+0xc93/0xd90 [ 378.680965][ T8614] __kasan_populate_vmalloc+0x1a8/0x1c0 [ 378.681002][ T8614] alloc_vmap_area+0xd1a/0x1420 [ 378.681034][ T8614] __get_vm_area_node+0x200/0x2f0 [ 378.681066][ T8614] __vmalloc_node_range_noprof+0x343/0x1540 [ 378.681101][ T8614] vzalloc_noprof+0xb2/0xe0 [ 378.681134][ T8614] alloc_counters+0x63/0x5d0 [ 378.681171][ T8614] do_ip6t_get_ctl+0xb17/0x12f0 [ 378.681207][ T8614] nf_getsockopt+0x26e/0x290 [ 378.681231][ T8614] ipv6_getsockopt+0x213/0x2c0 [ 378.681258][ T8614] do_sock_getsockopt+0x51d/0x7e0 [ 378.681284][ T8614] __x64_sys_getsockopt+0x1a4/0x240 [ 378.681310][ T8614] do_syscall_64+0x166/0x520 [ 378.681331][ T8614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.681356][ T8614] [ 378.681362][ T8614] Memory state around the buggy address: [ 378.681376][ T8614] ffff8880766d0800: 05 fc fc fc fa fc fc fc 05 fc fc fc fa fc fc fc [ 378.681394][ T8614] ffff8880766d0880: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 378.681412][ T8614] >ffff8880766d0900: fa fc fc fc 01 fc fc fc 05 fc fc fc fa fc fc fc [ 378.681426][ T8614] ^ [ 378.681439][ T8614] ffff8880766d0980: fa fc fc fc 05 fc fc fc fa fc fc fc 00 fc fc fc [ 378.681458][ T8614] ffff8880766d0a00: fa fc fc fc 00 fc fc fc fa fc fc fc 06 fc fc fc [ 378.681472][ T8614] ================================================================== [ 378.693922][ T8614] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 379.340998][ T8614] CPU: 1 UID: 0 PID: 8614 Comm: syz.3.890 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.351760][ T8614] Tainted: [L]=SOFTLOCKUP [ 379.356066][ T8614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 379.366108][ T8614] Call Trace: [ 379.369379][ T8614] [ 379.372297][ T8614] vpanic+0x56d/0xa60 [ 379.376291][ T8614] ? __pfx_vpanic+0x10/0x10 [ 379.380796][ T8614] ? __pfx___schedule+0x10/0x10 [ 379.385655][ T8614] panic+0xc5/0xd0 [ 379.389382][ T8614] ? __pfx_panic+0x10/0x10 [ 379.393803][ T8614] ? srso_alias_return_thunk+0x5/0xfbef5 [ 379.399431][ T8614] ? preempt_schedule_common+0x7f/0xd0 [ 379.404899][ T8614] ? ec168_i2c_xfer+0x4d4/0x630 [ 379.409754][ T8614] check_panic_on_warn+0x89/0xb0 [ 379.414690][ T8614] ? ec168_i2c_xfer+0x4d4/0x630 [ 379.419548][ T8614] end_report+0x73/0x170 [ 379.423790][ T8614] ? ec168_i2c_xfer+0x4d4/0x630 [ 379.428635][ T8614] kasan_report+0x128/0x150 [ 379.433135][ T8614] ? ec168_i2c_xfer+0x4d4/0x630 [ 379.437988][ T8614] ec168_i2c_xfer+0x4d4/0x630 [ 379.442671][ T8614] __i2c_transfer+0x7bf/0x1fe0 [ 379.447446][ T8614] ? rt_mutex_lock_nested+0x167/0x1c0 [ 379.452813][ T8614] ? srso_alias_return_thunk+0x5/0xfbef5 [ 379.458447][ T8614] ? i2c_transfer+0xc7/0x2d0 [ 379.463047][ T8614] i2c_transfer+0x1cb/0x2d0 [ 379.467555][ T8614] i2cdev_ioctl_rdwr+0x460/0x740 [ 379.472528][ T8614] i2cdev_ioctl+0x6a5/0x880 [ 379.477035][ T8614] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 379.482063][ T8614] ? __fget_files+0x3a2/0x420 [ 379.486741][ T8614] ? __fget_files+0x2a/0x420 [ 379.491334][ T8614] ? srso_alias_return_thunk+0x5/0xfbef5 [ 379.496962][ T8614] ? srso_alias_return_thunk+0x5/0xfbef5 [ 379.502590][ T8614] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 379.507622][ T8614] __se_sys_ioctl+0xfc/0x170 [ 379.512207][ T8614] do_syscall_64+0x166/0x520 [ 379.516793][ T8614] ? trace_irq_disable+0x3b/0x140 [ 379.521821][ T8614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.527892][ T8614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.533783][ T8614] RIP: 0033:0x7f5e5c39e159 [ 379.538197][ T8614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.557801][ T8614] RSP: 002b:00007f5e5d320028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 379.566220][ T8614] RAX: ffffffffffffffda RBX: 00007f5e5c625fa0 RCX: 00007f5e5c39e159 [ 379.574184][ T8614] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 379.582151][ T8614] RBP: 00007f5e5c435024 R08: 0000000000000000 R09: 0000000000000000 [ 379.590113][ T8614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.598081][ T8614] R13: 00007f5e5c626038 R14: 00007f5e5c625fa0 R15: 00007ffdbd95e3a8 [ 379.606057][ T8614] [ 379.609300][ T8614] Kernel Offset: disabled [ 379.613612][ T8614] Rebooting in 86400 seconds..