last executing test programs: 1m55.351377975s ago: executing program 1 (id=850): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYRES16=r2, @ANYBLOB="010816c19a25244c04030098804a5a30327e96", @ANYRES16=r4], 0x58}, 0x1, 0x0, 0x0, 0x4044881}, 0x8000) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x400200, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x44000, 0x0) ioctl$BTRFS_IOC_SEND(r5, 0x40489426, &(0x7f0000000100)={{r6}, 0x0, &(0x7f00000000c0), 0x24c5, 0x1}) syz_clone3(&(0x7f00000003c0)={0x208800000, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 1m55.169463048s ago: executing program 1 (id=851): syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x24, 0x0, &(0x7f0000000000)=0x5a96966c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x40, r3, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x4f, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000000c0)="61c38b22b957", 0x6) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="58000000e606054095bf1f09000000000000000000000005000400000000000900020073797a32000000000500010007000000050005000a0000000c000780050015000000000011000300686173683a69702c706f727400000000"], 0x58}}, 0x0) getpid() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1m53.691003208s ago: executing program 1 (id=866): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0x200f, {"20e30a30ed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19300305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a027d5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf050000008000000000f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b3f3f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2f5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d21488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e09d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a603336c00000077cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046ca5b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe6531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e6586df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59555e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb601203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000930dedf800", 0x1000}}, 0x1006) write(r0, &(0x7f0000000000)="1c0040001a94", 0x6) 1m52.015206339s ago: executing program 1 (id=879): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) 1m51.940538487s ago: executing program 0 (id=880): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000a40)="80", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) 1m51.670952176s ago: executing program 0 (id=882): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000ae80)={0x0, 0x0, &(0x7f000000ae40)={&(0x7f0000002a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0x104, 0x18, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_FLOWTABLE_HOOK={0xdc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'bond0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2af4, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1b98, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_SET_ELEM_USERDATA={0x4c, 0x6, 0x1, 0x0, "fbc1a5a594eefd5c369bee8dc3d8c7bca89d063b1099eae5c5a08af17b17d28612b1da3f42fe3c0265096d34578f1f208fc935900ed8de1d2650a990448d70ee7e073824f80b6620"}]}, {0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0xc0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0xb4, 0x6, 0x1, 0x0, "9d51c5316c6d7b783c8264e21a82fd4a29a5ced494c1a1f5eddcaa3c4d8a256d14d6760011bf90a802dbe7ba41a6ded49a58f19091f881ba56ee223def50550fa0431c45db7ef3bba0d5ec25b4b6a774cb8cd317806cdef09f6d5b5ee08da4966f4a04d4fd1320b965361506ed1ead68814403e9ac690a554aead1a6edbfde9153bf1af6855c3643ee5f4e547a56b2d7714ed8052d552ec709b4b58aa436442f424a0c4d051853b5050af1c016e19c35"}]}, {0x1ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xe6, 0x6, 0x1, 0x0, "f6f82119c416aa352a21215a7c46b7c8e2da4b60913ab5190e812d03b61a3f0498b5f24f49179ef3c1c74dda5fe97ec3b7e4dee8f2d4585ad318770ab28bba7e5d92a23f5c33927d9837e9d246023ea971f2b4a08f0e71219864a51ab190358271911e9579c1fe25e962423c2ac5e089a0116330d4b96b0bc191e8872eac566154fe3f6389aae6e16667bd45a1d1c3661544ab61cfd923bf6e8093b253b7ab7c92545883cd20bee17e2a4bdddf74f898449ccf3a7ec6ff2e239b66988107cb1dcb8d9da63622a97a2db5b414e92afc5eac218eda1bf34ef5799bb050309479bd9af3"}, @NFTA_SET_ELEM_KEY={0xc0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xa4, 0x1, "ead0914b085db4079af89b1fa82f6fa6698eaf632c78a8e43639ff60b22f325a63de198b6a90ed0129332047a6250f1c3aaff5041a3347fc20fad89dbeb92d1c70cf1ad84e9fc596a3796e6073941fff1c9ff43775c097fe47542907e8722b3dc7332cabebf5be27ff074c9a4cdc3f2e4465502ebc29e8012074974becbf0ef36ba6665ce3752d5abc1db7ea07d1d6f0575cc53a93cb5252f9ce0bbf3044f756"}]}]}, {0x1448, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1ff}, @NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1b6}, @NFTA_SET_ELEM_USERDATA={0xd8, 0x6, 0x1, 0x0, "06aa45bf46490096f6ba60fe90296a5abbf1be44849ed6f51c27707ba2c96bd8412e3d627ff95d46779e1d7e1464abe1239d8312f2cad46805a7ce51ad14e46938822365609a189b8e69951e6e5555f5015941817e5b562f938873373a5a19132976b823310b4a5db11a5d78c86facc789974f44acc98c9d416d8474da3360933294ae223e842765417484b2c13f19dd14aa079f7cee59288a4ea31c068c8b418465d85576c38ef91e0d7b32d2287994c01cc11f347908f97e59a860542f9fad1e312e28e13576c5026281cd7efa9e52681a5cd1"}, @NFTA_SET_ELEM_KEY={0x1060, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x33, 0x1, "23e2778be97151ab1c2abe2df1b2d817e898fa404a134e847e186a284815f57b3ad20e632e05e5f9136ce95d6715f3"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_DATA={0xfc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "f483e5a022a2b2953477c6517e01504a71ebc3f6b168"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "d2685d9a5764789dbb4f440b67fc619dc61def77b80e1fd3b3ddc3e6b090e0526884cbb05eb865f4f42720cc5c9df4be4eef0a45a709ddadbef52ef7223c8fbd70af07e14fabe533300dfd742e25f380ff620783043496bf11945f0a3c55cc2fdab4608f6451b19ebb89587254b9ddbecc3ffa1a0f223f6536b44c83086b95f6299e163abc2cbd3c3fdb2db4fb9102454354ce939d055f89af8c1e7780597bccd00daa38064114086cecf39b241ee6764acc4b270add05de7005f80037c7c0cd3de8b14cd1ae92"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0xd0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4e, 0x1, "98033f2c7430a87f39dad0fe9c06d2ea14ba5f38da8b92f35bb28e2f456c11badbcca83e8799a69b7a0ea290e6784aa853f70efe7cc8637f4431697777389a15a48b41985d1e60cc167b"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fffffff}]}, {0x41c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x68, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7ff}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x29d}, @NFTA_SET_ELEM_USERDATA={0x6b, 0x6, 0x1, 0x0, "9d2d30c8eaab4cc17f07a116f6b80fabba022704831c034d112e8cb7a7e8edeb419decdbc6e7faaf90ad4411bcd19223deccb10f98f66dd00f355be13e153fa499ba580767a6932c6d0df108055529a303dec66ea69179e15459a83527f1639d5770d4c6694554"}, @NFTA_SET_ELEM_KEY_END={0x320, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x2d, 0x1, "fbcdd1a3753f50dc73024403920ba0807d4986cc084b9fd781e6839118be726ba2c486923f89965314"}, @NFTA_DATA_VALUE={0x40, 0x1, "3f1e1fc60ba5bdcb2c7e435d358376cae44a13c46ace099a3cab9b8cc9588f4752f8b1429d7c43750ed42f92a51b892f60458286b45a18f33c34d4aa"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xc2, 0x1, "66505a0b18642608e5de27605cd3bb3bea12dcae7115596ec97dc417bee9eec28262a292f023073284a8c7659d400711af79137aa38560ae9fa3d48401450dd4a8f4eeb07967f10b1c81557bce3f6929ae35f563985fd9ef127b3859ca17476c0cf66a7ee21a034a338a2f49b4b4df1101af9ef48e169437e9c422f2b045bad47960653cd9881791346cf0d6a096edb2534bb60262220745387451295b860aa7d43e61fff73a481fe61731ffab4857c3c0c2e2ee9d4fcaea51738f0540ba"}, @NFTA_DATA_VALUE={0xad, 0x1, "3bddcaff36aa98e6e397b29a2043a452a9de31002d0ee975d268dce3021c3e0612a4ed33758bd2bb105df8b52ccf4247897e230c70d8df481df98ef6af6036d3d50e3473e7e8ee5e222f4ef1a025c536386203601a80ee18f2222eec4bf6491bdb4bde5a5dae2145075b171e8b6d0def536f2ba8497b61d61157422f15329517c7b4b4ed65478cc16f42e3faaf6edbe95f0a14351dd953e79ead0b1a39462b6333a89435d0509177fe"}, @NFTA_DATA_VALUE={0xa0, 0x1, "feab5028f45338df59ecb792a580a84017d5e3703d6c11b5868f08b58e9be2a6ba4037616510dba16ff6b70dcb0104c357387f1640f1cb6895c8500cace6aa7f1f6ff1cf721ab3e8d475ea983336c307e581a9ef4a689bfa5b0d8c5924dbad1fcec2fa5035a1fa312b256c2d05af50905624771a711f4cd5f41b9034096146797389886fd17d894f3d8a1af83461c75b0b9f18c57505211a7dc4616f"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xf38, 0x3, 0x0, 0x1, [{0xf30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0xefc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xef4, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fib={{0x8}, @void}}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2c20}, 0x1, 0x0, 0x0, 0x4880}, 0x100) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 1m51.670003645s ago: executing program 1 (id=883): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000a40)="80", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) (fail_nth: 1) 1m51.669566083s ago: executing program 0 (id=884): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000280)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x2c}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x8004094) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r3, 0x80186e82, &(0x7f0000000440)={0x0, 0x0, 0x38, 0x1, 0x8}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m51.557498861s ago: executing program 0 (id=886): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) (fail_nth: 8) 1m51.327069667s ago: executing program 0 (id=887): r0 = getpgrp(0x0) kcmp(r0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="403114bc366aca"], 0x0, 0x0}) ftruncate(0xffffffffffffffff, 0x400000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2000000000000) read$FUSE(0xffffffffffffffff, &(0x7f0000002200)={0x2020}, 0x593) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000280), 0x5dfc01) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001000)={0x0, 0x5, 0x0, [0x0, 0x7, 0x9, 0xfffffffffffffff8, 0x1], [0x8, 0x2000000000, 0x10001, 0x4, 0x7, 0x5, 0xfff, 0x1000, 0x5, 0x80, 0x7, 0xe, 0xfc00000000000000, 0x1, 0xc0, 0x8, 0xfffffffffffff800, 0x10000, 0x1, 0x7, 0xca19, 0x7, 0x5, 0x6, 0x4, 0x4, 0x669, 0x5, 0x0, 0xfb, 0x7, 0x0, 0x80000000, 0x1, 0x0, 0x7, 0x1, 0xc, 0x8, 0x3, 0x2, 0xfffffffffffffffc, 0x9, 0x1, 0x40, 0x5, 0x7, 0x3, 0x8000000000000000, 0x7962, 0xffffffffffffffff, 0x10001, 0x10000, 0x8, 0x9, 0x2, 0x8, 0x8000000000000041, 0x1ff, 0x1, 0x6, 0x7c66b462, 0x6, 0xffffffffffffff01, 0x9, 0x8, 0x6ef6, 0x401, 0x7, 0x8, 0x12a, 0xfffffffffffffffa, 0x2, 0x3f, 0x6, 0x401, 0x9, 0x1ff800000, 0x8001, 0x101, 0x1, 0x4, 0xa, 0x3, 0x80000001, 0x4, 0xc33, 0xff, 0x3, 0x2, 0x3ff, 0x9, 0xde, 0x4000000, 0x8, 0x3ff, 0x7, 0x41, 0xe, 0x7, 0x6, 0x4, 0xfffffffffffffff8, 0x6, 0x3, 0xe, 0x3, 0x2a, 0x0, 0x3, 0xffffffffffff0d45, 0xde4, 0x1, 0x1, 0x2, 0xce, 0x5, 0x8, 0x4, 0x0, 0x7fffffffffffffff]}) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) 1m50.330972808s ago: executing program 1 (id=888): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = socket(0x15, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x400000006, 0x0, r4}) r6 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1}}], 0x1, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, 0x1405, 0x400, 0x70bd2a, 0x25dfdbff, "", [{{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x5}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x4010) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x5, 0x2, 0x52, @dev={0xfe, 0x80, '\x00', 0x2b}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x80, 0x2, 0xc}}) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) close(r1) 1m50.066212269s ago: executing program 32 (id=888): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = socket(0x15, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x400000006, 0x0, r4}) r6 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1}}], 0x1, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, 0x1405, 0x400, 0x70bd2a, 0x25dfdbff, "", [{{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x5}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x4010) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x5, 0x2, 0x52, @dev={0xfe, 0x80, '\x00', 0x2b}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x80, 0x2, 0xc}}) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) close(r1) 1m49.882199217s ago: executing program 0 (id=890): r0 = syz_open_dev$radio(&(0x7f0000000580), 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card3/oss_mixer\x00', 0x200000, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000380)={0x40, 0x3, 0x1}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000140), 0x80, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r9, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r9, 0x6, 0x1e, &(0x7f00000000c0)=0xf, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000280)='westwood', 0x8) shutdown(r9, 0x1) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, r6, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="e5"}, @crypto_settings]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x810) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0xf030000, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x7ffe, '\x00', @p_u8=0x0}}) 1m49.286983353s ago: executing program 33 (id=890): r0 = syz_open_dev$radio(&(0x7f0000000580), 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card3/oss_mixer\x00', 0x200000, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000380)={0x40, 0x3, 0x1}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000140), 0x80, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r9, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r9, 0x6, 0x1e, &(0x7f00000000c0)=0xf, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000280)='westwood', 0x8) shutdown(r9, 0x1) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, r6, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="e5"}, @crypto_settings]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x810) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0xf030000, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x7ffe, '\x00', @p_u8=0x0}}) 4.984827309s ago: executing program 3 (id=1347): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000002a000000000500000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000080)=0x100000b7, 0x4) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) stat(&(0x7f00000066c0)='./file0/file1\x00', &(0x7f0000006700)) 4.689690692s ago: executing program 3 (id=1349): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0xfff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x5}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) 4.23862284s ago: executing program 3 (id=1352): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4090) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000002140)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES16=r0], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) syz_usb_disconnect(r1) r3 = socket(0x22, 0xa3a776665b870ac1, 0xf) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002a00)={0x14, 0x52, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0485510, 0x0) 3.286041267s ago: executing program 5 (id=1355): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000002400)={&(0x7f00000023c0)=[r1, r1, r1], 0x3, 0x80800}) 3.2117502s ago: executing program 5 (id=1356): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001440)={0x2c, r1, 0x101, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}]]}, 0x2c}}, 0x20004800) (fail_nth: 5) 3.16059668s ago: executing program 5 (id=1357): r0 = semget$private(0x0, 0x1, 0x2c) semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f0000001480)=""/220) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r1, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000000880)=""/4088, 0xff8}], 0x2) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg(r3, &(0x7f0000000640)={&(0x7f0000000540)=@ll={0x11, 0x5, r4, 0x1, 0x4, 0x6, @broadcast}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="4ba72c4cfd81685544f46c3f0800", 0xe}, {&(0x7f0000000080)="4987a09fe61f4b9dcf50f27612a522c55482cf98", 0x14}], 0x100001aa, 0x0, 0x0, 0x11000000}, 0x20008014) 2.510202124s ago: executing program 5 (id=1360): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0xfff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x5}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) 2.461649752s ago: executing program 5 (id=1361): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$packet(r0, &(0x7f0000000100)={0x11, 0x7, r3, 0x1, 0x7d, 0x6, @local}, 0x14) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001143f11002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYBLOB="363d60be312a894a0ad8b1847ecd706f971fd8ba38e2dcccbc09c00700e2aeacc799fc70e1a37aab31c9c653530627fd6245fa47050af6"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) 2.325420611s ago: executing program 5 (id=1362): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905"], 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x7c, 0x0, 0x1, 0x20000002, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd9b9fafd212acc2a}], @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_TYPE={0x8}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 1.644761087s ago: executing program 2 (id=1366): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) chdir(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000005c0)={0x2c, &(0x7f0000000040)={0x40, 0x6, 0x2, {0x2, 0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r6, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x501c4814, &(0x7f0000000000)={0x2, 0x200, 0x4, 0x401, 0x0, 0xfffffffc}) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r6, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x1, '\x00', 0xc94}) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$incfs(r0, &(0x7f0000000040)='.pending_reads\x00', 0x40040, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.251230297s ago: executing program 4 (id=1367): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10, 0x800}, 0x400, "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"}, 0x418, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000100)={0x0, 0x1804, 0x40}) (fail_nth: 5) 1.183324665s ago: executing program 4 (id=1368): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x40082) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x7fffffffffffffff, 0x2, 0x2, 0xae3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x6, 0xff, 0x6, 0x75, @dev={0xfe, 0x80, '\x00', 0x3b}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x40, 0xc000000, 0x9}}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x28, r2, 0x100, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008010}, 0x4800) 1.022806769s ago: executing program 3 (id=1369): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0xfff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x5}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) 910.487479ms ago: executing program 4 (id=1370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001440)={0x2c, r3, 0x101, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}]]}, 0x2c}}, 0x20004800) 908.578787ms ago: executing program 3 (id=1371): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x9, &(0x7f0000000080)=[{0x2, 0x7, 0x0, 0x2}, {0x401, 0x9, 0x0, 0x3}, {0x7, 0x5}, {0x36b, 0x0, 0x7, 0x8}, {0x3, 0x6, 0xd, 0x52}, {0x5, 0x6, 0x2, 0x3}, {0x6, 0x7, 0x9, 0x2}, {0x9, 0x4, 0x3, 0xc40}, {0x7ff, 0x1, 0xc}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)={0x0}) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000280)={r2, 0x1, r3, 0x3, 0x80000}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r6, 0x0, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000002100)={0x0, 0x5}, &(0x7f0000002140)=0x8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)={r2, 0x2, r5, 0x7, 0x80000}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x388, 0x800}) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000000)) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$MRT_DONE(r4, 0x0, 0xc9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd7000fedbdf2555000000080001002c00000008000300", @ANYRES32=r11], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x8004084) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket(0x1, 0x2, 0x0) 659.495564ms ago: executing program 4 (id=1372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_TARGET_INFO={0xa, 0x3, '\x00\x00\x00\x00\x00\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_TARGET_INFO={0xa, 0x3, '\x00\x00\x00\x00\x00\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'pimreg1\x00', {}, 0x1}) 587.325506ms ago: executing program 2 (id=1373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) 534.940178ms ago: executing program 4 (id=1374): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002cc0)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1}) 512.727014ms ago: executing program 2 (id=1375): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101301) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x9101) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000001c0)={0xe, {{0x2, 0x4e22, @remote}}}, 0x88) socket(0xf, 0x80c, 0x8) r4 = socket$inet6(0x10, 0x3, 0x9) write$sndseq(0xffffffffffffffff, &(0x7f00000006c0)=[{0xe, 0x81, 0x0, 0xfd, @tick=0x80000001, {}, {0xe}, @connect={{0x81, 0x2}, {0xb, 0x10}}}], 0x1c) r5 = fanotify_init(0x8, 0x80000) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925001900fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000080)={0x1, 0x1}) accept4(r4, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000380)=0x80, 0x800) 419.671312ms ago: executing program 4 (id=1376): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x20000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r5, 0x1}, 0x8) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000080)=0x81) syz_usb_connect$cdc_ncm(0x3, 0x77, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x3, 0x20, 0x80, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "e6"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1, 0x1, 0x22}, {0x6, 0x24, 0x1a, 0x8, 0x10}, [@acm={0x4, 0x24, 0x2, 0x1}, @acm={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x81, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x2, 0x4}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x9, 0x8, 0x9, 0x20, 0xe}, 0x19, &(0x7f0000000240)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "4a5287051a31aaeef8810dbac736d5c9"}]}, 0x6, [{0x81, &(0x7f0000000280)=@string={0x81, 0x3, "7d067535d3b8e74c2a08765ab32de8d6789ec27c3f04a332c6adab9ea6e420c5783a7e1ef42bebda138503a4d94e3db35fb61b2bef6ded61171c7419e5c86f3b779da4f605da1adc6c4c868400ee0b765f3981c186bbc4dc9b6e35279bb2d24772b9c004061a0f6d5b8fc31ad1f05ceb8bbb0cfdb3c132e0450438c1521852"}}, {0xc7, &(0x7f0000000340)=@string={0xc7, 0x3, "73e16fd74a2052b07f7054227b19dc4086e4ac25141d99186e8adfdf4b3e23a62234134c4112063e18d3735d691e9340aa507819afb3132c53f99d56f49b509ca7d6e9c17db0f56fa45262b6bea21ec2e4e767799888cfb7bc59b39c5983b5673c20a7b296c2612799dedc7aa54c7d4154a7437c6698e1618c0a9ff920021ff1af4b08ca0112871836042229625035891cc8518eb7e72230754d3e226a03d156c1d0d1313424448ccdbf69ee2d62ea64a6af2229a9bd60d2bc2d82c575198d30565b1a8d03"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x40a}}, {0x87, &(0x7f0000000680)=ANY=[@ANYBLOB="970305dfd4d628d5085aeaf47ef2306fd2368ce0b718a81cf73c8a079f52d44048056c3d1e1176b6e3ac8b3083f44c9f2bb0fb14f12035f8d1a91e26b1e86c273c4b8bfea468c76a7bfd52e44dcd9bb6f16b9b56aa83bc8f2569b4aaec5ad8ff6dbbfe21dc8fdfdf11e9637b0c3cfc4944a870273c9fc80700000000000000b28dbd750011d145a7acda07e771f8081fbcbcdae3a4e728ae847299b8"]}, {0xc, &(0x7f0000000540)=@string={0xc, 0x3, "2b9cabec954a9a883cd6"}}, {0x50, &(0x7f0000000580)=@string={0x50, 0x3, "d79871291f1503cf33aa41d8359469e735f0fdb0c884814d3ced38cf8b10f182d76a50f1f1c54d94a93f5520039c5f7b472f8cef3b9606f4a4da6395318e08685adefa9e6b74da8edc5bf1c1c787"}}]}) syz_usb_ep_read(r0, 0x6, 0xa8, &(0x7f00000000c0)=""/168) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0485510, 0x0) 319.487962ms ago: executing program 2 (id=1377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x3e7, &(0x7f0000000580)={&(0x7f0000001440)={0x2c, r1, 0x101, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}]]}, 0x2c}}, 0x20004800) 313.371392ms ago: executing program 2 (id=1378): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) prctl$PR_GET_NO_NEW_PRIVS(0x27) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x80802, 0xcd) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5ac6100", [0xfffffffffffffce8, 0x6]}}) 45.468996ms ago: executing program 2 (id=1379): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0x8}, {0x0, 0x60}, {&(0x7f0000000380)="87352a", 0x3}], 0x3, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0x20000000) r1 = fanotify_init(0x0, 0x401) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) fanotify_mark(r1, 0x1, 0x40000028, r3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x1000000, 0x8000}, 0x8010) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=1380): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0xfff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x5}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) kernel console output (not intermixed with test programs): 61.428101][ T8985] ? __fget_files+0x3a6/0x420 [ 261.428117][ T8985] ? __fget_files+0x2a/0x420 [ 261.428136][ T8985] ? bpf_lsm_file_ioctl+0x9/0x20 [ 261.428159][ T8985] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 261.428182][ T8985] __se_sys_ioctl+0xff/0x170 [ 261.428203][ T8985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.428221][ T8985] do_syscall_64+0x15f/0x560 [ 261.428242][ T8985] ? trace_irq_disable+0x3b/0x140 [ 261.428260][ T8985] ? clear_bhb_loop+0x40/0x90 [ 261.428281][ T8985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.428297][ T8985] RIP: 0033:0x7f525480ce59 [ 261.428313][ T8985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.428329][ T8985] RSP: 002b:00007f5252a66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.428348][ T8985] RAX: ffffffffffffffda RBX: 00007f5254a85fa0 RCX: 00007f525480ce59 [ 261.428360][ T8985] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 261.428371][ T8985] RBP: 00007f5252a66090 R08: 0000000000000000 R09: 0000000000000000 [ 261.428382][ T8985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.428392][ T8985] R13: 00007f5254a86038 R14: 00007f5254a85fa0 R15: 00007ffd1cb2d748 [ 261.428421][ T8985] [ 261.887135][ T8993] netlink: 'syz.3.1098': attribute type 5 has an invalid length. [ 261.887168][ T8993] netlink: 'syz.3.1098': attribute type 9 has an invalid length. [ 262.242624][ T5772] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 262.416319][ T5772] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 262.416349][ T5772] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 262.416373][ T5772] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 262.434153][ T5772] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 262.434180][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.434198][ T5772] usb 3-1: Product: syz [ 262.434211][ T5772] usb 3-1: Manufacturer: syz [ 262.434224][ T5772] usb 3-1: SerialNumber: syz [ 262.444272][ T5772] usb 3-1: config 0 descriptor?? [ 262.445050][ T8997] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 262.445168][ T8997] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 262.456144][ T5772] usb 3-1: ucan: probing device on interface #0 [ 262.655522][ T5772] usb 3-1: ucan: device reported invalid tx-fifo size [ 262.655538][ T5772] usb 3-1: ucan: probe failed; try to update the device firmware [ 262.702019][ T8997] dvmrp2: entered allmulticast mode [ 262.796663][ T9003] FAULT_INJECTION: forcing a failure. [ 262.796663][ T9003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.796687][ T9003] CPU: 1 UID: 0 PID: 9003 Comm: syz.3.1101 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 262.796702][ T9003] Tainted: [L]=SOFTLOCKUP [ 262.796706][ T9003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.796712][ T9003] Call Trace: [ 262.796717][ T9003] [ 262.796722][ T9003] dump_stack_lvl+0xe8/0x150 [ 262.796739][ T9003] should_fail_ex+0x46b/0x600 [ 262.796757][ T9003] _copy_to_user+0x31/0xb0 [ 262.796768][ T9003] simple_read_from_buffer+0xe1/0x170 [ 262.796788][ T9003] proc_fail_nth_read+0x1be/0x230 [ 262.796801][ T9003] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 262.796813][ T9003] ? rw_verify_area+0x2ac/0x4e0 [ 262.796824][ T9003] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 262.796836][ T9003] vfs_read+0x212/0xa80 [ 262.796851][ T9003] ? __pfx_vfs_read+0x10/0x10 [ 262.796863][ T9003] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 262.796877][ T9003] ? lockdep_hardirqs_on+0x7a/0x110 [ 262.796891][ T9003] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 262.796903][ T9003] ? mutex_lock_nested+0x152/0x1d0 [ 262.796913][ T9003] ? fdget_pos+0x252/0x320 [ 262.796927][ T9003] ksys_read+0x156/0x270 [ 262.796939][ T9003] ? __pfx_ksys_read+0x10/0x10 [ 262.796962][ T9003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.796972][ T9003] do_syscall_64+0x15f/0x560 [ 262.796985][ T9003] ? trace_irq_disable+0x3b/0x140 [ 262.796996][ T9003] ? clear_bhb_loop+0x40/0x90 [ 262.797009][ T9003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.797018][ T9003] RIP: 0033:0x7f9ab60ad68e [ 262.797029][ T9003] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 262.797037][ T9003] RSP: 002b:00007f9ab433dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 262.797048][ T9003] RAX: ffffffffffffffda RBX: 00007f9ab433e6c0 RCX: 00007f9ab60ad68e [ 262.797055][ T9003] RDX: 000000000000000f RSI: 00007f9ab433e0a0 RDI: 0000000000000004 [ 262.797062][ T9003] RBP: 00007f9ab433e090 R08: 0000000000000000 R09: 0000000000000000 [ 262.797068][ T9003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.797073][ T9003] R13: 00007f9ab6366038 R14: 00007f9ab6365fa0 R15: 00007ffe030b74d8 [ 262.797089][ T9003] [ 262.855404][ T5772] usb 3-1: USB disconnect, device number 51 [ 263.289328][ T5627] usb 5-1: USB disconnect, device number 19 [ 263.372887][ T5708] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 263.487269][ T9024] FAULT_INJECTION: forcing a failure. [ 263.487269][ T9024] name failslab, interval 1, probability 0, space 0, times 0 [ 263.487298][ T9024] CPU: 0 UID: 0 PID: 9024 Comm: syz.2.1108 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 263.487318][ T9024] Tainted: [L]=SOFTLOCKUP [ 263.487323][ T9024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 263.487331][ T9024] Call Trace: [ 263.487336][ T9024] [ 263.487343][ T9024] dump_stack_lvl+0xe8/0x150 [ 263.487364][ T9024] should_fail_ex+0x46b/0x600 [ 263.487388][ T9024] should_failslab+0xa8/0x100 [ 263.487407][ T9024] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 263.487423][ T9024] ? __alloc_skb+0x1d0/0x7d0 [ 263.487437][ T9024] ? __pfx_tcp_current_mss+0x10/0x10 [ 263.487455][ T9024] __alloc_skb+0x1d0/0x7d0 [ 263.487476][ T9024] tcp_stream_alloc_skb+0x3f/0x5c0 [ 263.487497][ T9024] tcp_sendmsg_locked+0x134b/0x5370 [ 263.487554][ T9024] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 263.487578][ T9024] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 263.487599][ T9024] ? lockdep_hardirqs_on+0x7a/0x110 [ 263.487622][ T9024] tcp_sendmsg+0x2f/0x50 [ 263.487638][ T9024] ? __pfx_inet_sendmsg+0x10/0x10 [ 263.487652][ T9024] sock_sendmsg_nosec+0xf9/0x150 [ 263.487719][ T9024] ____sys_sendmsg+0x55c/0x870 [ 263.487744][ T9024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.487767][ T9024] ? import_iovec+0x73/0xa0 [ 263.487784][ T9024] ___sys_sendmsg+0x2a5/0x360 [ 263.487801][ T9024] ? __lock_acquire+0x6b5/0x2d10 [ 263.487819][ T9024] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.487835][ T9024] ? __lock_acquire+0x6b5/0x2d10 [ 263.487853][ T9024] ? kstrtouint+0x6e/0xe0 [ 263.487909][ T9024] __sys_sendmmsg+0x282/0x4e0 [ 263.487933][ T9024] ? __pfx___sys_sendmmsg+0x10/0x10 [ 263.487960][ T9024] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 263.487986][ T9024] ? ksys_write+0x248/0x270 [ 263.488003][ T9024] ? __pfx_ksys_write+0x10/0x10 [ 263.488027][ T9024] __x64_sys_sendmmsg+0xa0/0xc0 [ 263.488047][ T9024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.488064][ T9024] do_syscall_64+0x15f/0x560 [ 263.488080][ T9024] ? trace_irq_disable+0x3b/0x140 [ 263.488096][ T9024] ? clear_bhb_loop+0x40/0x90 [ 263.488120][ T9024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.488133][ T9024] RIP: 0033:0x7f525480ce59 [ 263.488146][ T9024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.488157][ T9024] RSP: 002b:00007f5252a66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 263.488171][ T9024] RAX: ffffffffffffffda RBX: 00007f5254a85fa0 RCX: 00007f525480ce59 [ 263.488181][ T9024] RDX: 0000000000000002 RSI: 00002000000060c0 RDI: 0000000000000003 [ 263.488189][ T9024] RBP: 00007f5252a66090 R08: 0000000000000000 R09: 0000000000000000 [ 263.488197][ T9024] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.488205][ T9024] R13: 00007f5254a86038 R14: 00007f5254a85fa0 R15: 00007ffd1cb2d748 [ 263.488227][ T9024] [ 263.522586][ T5708] usb 4-1: Using ep0 maxpacket: 8 [ 263.542720][ T5708] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 263.542776][ T5708] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 263.542800][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 263.542823][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 263.618078][ T5708] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 263.618097][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.618108][ T5708] usb 4-1: Product: syz [ 263.618115][ T5708] usb 4-1: Manufacturer: syz [ 263.618122][ T5708] usb 4-1: SerialNumber: syz [ 263.807069][ T5708] usb 4-1: config 0 descriptor?? [ 263.814756][ T9017] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 264.023543][ T5708] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 264.052832][ T5708] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input34 [ 264.359123][ C0] powermate: config urb returned -71 [ 264.359375][ C0] powermate: config urb returned -71 [ 264.359587][ C0] powermate: config urb returned -71 [ 264.359797][ C0] powermate: config urb returned -71 [ 264.360020][ C0] powermate: config urb returned -71 [ 264.393799][ T5708] usb 4-1: USB disconnect, device number 51 [ 264.393891][ C0] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 264.770544][ T9042] FAULT_INJECTION: forcing a failure. [ 264.770544][ T9042] name failslab, interval 1, probability 0, space 0, times 0 [ 264.770579][ T9042] CPU: 0 UID: 0 PID: 9042 Comm: syz.4.1115 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 264.770605][ T9042] Tainted: [L]=SOFTLOCKUP [ 264.770611][ T9042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 264.770622][ T9042] Call Trace: [ 264.770629][ T9042] [ 264.770637][ T9042] dump_stack_lvl+0xe8/0x150 [ 264.770664][ T9042] should_fail_ex+0x46b/0x600 [ 264.770693][ T9042] should_failslab+0xa8/0x100 [ 264.770716][ T9042] __kmalloc_cache_noprof+0x84/0x690 [ 264.770744][ T9042] ? snd_pcm_oss_change_params_locked+0x1da/0x3e00 [ 264.770772][ T9042] snd_pcm_oss_change_params_locked+0x1da/0x3e00 [ 264.770793][ T9042] ? __lock_acquire+0x6b5/0x2d10 [ 264.770825][ T9042] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 264.770856][ T9042] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 264.770887][ T9042] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 264.770911][ T9042] ? lockdep_hardirqs_on+0x7a/0x110 [ 264.770934][ T9042] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 264.770956][ T9042] ? mutex_lock_interruptible_nested+0x152/0x1d0 [ 264.770975][ T9042] ? snd_pcm_oss_sync+0x313/0xfc0 [ 264.770997][ T9042] snd_pcm_oss_sync+0x570/0xfc0 [ 264.771024][ T9042] snd_pcm_oss_ioctl+0x1f7/0xe00 [ 264.771045][ T9042] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 264.771065][ T9042] __se_sys_ioctl+0xff/0x170 [ 264.771085][ T9042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.771104][ T9042] do_syscall_64+0x15f/0x560 [ 264.771127][ T9042] ? clear_bhb_loop+0x40/0x90 [ 264.771148][ T9042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.771165][ T9042] RIP: 0033:0x7f72b3b0ce59 [ 264.771182][ T9042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.771196][ T9042] RSP: 002b:00007f72b1d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.771216][ T9042] RAX: ffffffffffffffda RBX: 00007f72b3d85fa0 RCX: 00007f72b3b0ce59 [ 264.771229][ T9042] RDX: 0000000000000000 RSI: 0000000000005001 RDI: 0000000000000003 [ 264.771239][ T9042] RBP: 00007f72b1d5e090 R08: 0000000000000000 R09: 0000000000000000 [ 264.771250][ T9042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.771260][ T9042] R13: 00007f72b3d86038 R14: 00007f72b3d85fa0 R15: 00007ffe17b3e568 [ 264.771289][ T9042] [ 264.803531][ T4949] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 264.975464][ T4949] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.975489][ T4949] usb 6-1: config 0 has no interfaces? [ 264.975517][ T4949] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 264.975537][ T4949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.065727][ T4949] usb 6-1: config 0 descriptor?? [ 265.620821][ T9057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.621369][ T9057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.662810][ T5772] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 265.793213][ T5772] usb 5-1: device descriptor read/64, error -71 [ 266.032596][ T5772] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 266.166073][ T5772] usb 5-1: device descriptor read/64, error -71 [ 266.274367][ T5772] usb usb5-port1: attempt power cycle [ 266.316742][ T9063] FAULT_INJECTION: forcing a failure. [ 266.316742][ T9063] name failslab, interval 1, probability 0, space 0, times 0 [ 266.316765][ T9063] CPU: 1 UID: 0 PID: 9063 Comm: syz.3.1124 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 266.316780][ T9063] Tainted: [L]=SOFTLOCKUP [ 266.316784][ T9063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 266.316790][ T9063] Call Trace: [ 266.316794][ T9063] [ 266.316799][ T9063] dump_stack_lvl+0xe8/0x150 [ 266.316816][ T9063] should_fail_ex+0x46b/0x600 [ 266.316841][ T9063] should_failslab+0xa8/0x100 [ 266.316855][ T9063] __kmalloc_cache_noprof+0x84/0x690 [ 266.316867][ T9063] ? snd_pcm_oss_change_params_locked+0x6e5/0x3e00 [ 266.316880][ T9063] ? snd_pcm_oss_change_params_locked+0x8eb/0x3e00 [ 266.316894][ T9063] snd_pcm_oss_change_params_locked+0x8eb/0x3e00 [ 266.316911][ T9063] ? aa_file_perm+0x192/0x15f0 [ 266.316928][ T9063] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 266.316957][ T9063] ? lockdep_hardirqs_on+0x7a/0x110 [ 266.316981][ T9063] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 266.317005][ T9063] ? snd_pcm_oss_write+0x20d/0xbe0 [ 266.317026][ T9063] snd_pcm_oss_write+0x282/0xbe0 [ 266.317044][ T9063] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 266.317056][ T9063] vfs_write+0x2a3/0xba0 [ 266.317071][ T9063] ? __pfx_vfs_write+0x10/0x10 [ 266.317083][ T9063] ? __fget_files+0x2a/0x420 [ 266.317094][ T9063] ? __fget_files+0x2a/0x420 [ 266.317103][ T9063] ? __fget_files+0x3a6/0x420 [ 266.317111][ T9063] ? __fget_files+0x2a/0x420 [ 266.317124][ T9063] ksys_write+0x156/0x270 [ 266.317137][ T9063] ? __pfx_ksys_write+0x10/0x10 [ 266.317152][ T9063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.317163][ T9063] do_syscall_64+0x15f/0x560 [ 266.317175][ T9063] ? trace_irq_disable+0x3b/0x140 [ 266.317186][ T9063] ? clear_bhb_loop+0x40/0x90 [ 266.317198][ T9063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.317207][ T9063] RIP: 0033:0x7f9ab60ece59 [ 266.317218][ T9063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.317226][ T9063] RSP: 002b:00007f9ab433e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 266.317237][ T9063] RAX: ffffffffffffffda RBX: 00007f9ab6365fa0 RCX: 00007f9ab60ece59 [ 266.317244][ T9063] RDX: 00000000ffffffd9 RSI: 00002000000001c0 RDI: 0000000000000003 [ 266.317250][ T9063] RBP: 00007f9ab433e090 R08: 0000000000000000 R09: 0000000000000000 [ 266.317256][ T9063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.317262][ T9063] R13: 00007f9ab6366038 R14: 00007f9ab6365fa0 R15: 00007ffe030b74d8 [ 266.317277][ T9063] [ 266.474610][ T9065] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1125'. [ 266.616315][ T5772] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 266.648683][ T5772] usb 5-1: device descriptor read/8, error -71 [ 266.863960][ T5627] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 266.882605][ T5772] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 266.904530][ T5772] usb 5-1: device descriptor read/8, error -71 [ 267.012859][ T5627] usb 4-1: Using ep0 maxpacket: 8 [ 267.013237][ T5772] usb usb5-port1: unable to enumerate USB device [ 267.043321][ T5627] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 267.043376][ T5627] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.043399][ T5627] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 267.043421][ T5627] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 267.094357][ T5627] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 267.094385][ T5627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.094397][ T5627] usb 4-1: Product: syz [ 267.094404][ T5627] usb 4-1: Manufacturer: syz [ 267.094410][ T5627] usb 4-1: SerialNumber: syz [ 267.133564][ T5627] usb 4-1: config 0 descriptor?? [ 267.134316][ T9068] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 267.351858][ T5627] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 267.374069][ T5627] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input35 [ 267.431115][ T9078] FAULT_INJECTION: forcing a failure. [ 267.431115][ T9078] name failslab, interval 1, probability 0, space 0, times 0 [ 267.431149][ T9078] CPU: 0 UID: 0 PID: 9078 Comm: syz.2.1130 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 267.431173][ T9078] Tainted: [L]=SOFTLOCKUP [ 267.431179][ T9078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 267.431190][ T9078] Call Trace: [ 267.431198][ T9078] [ 267.431205][ T9078] dump_stack_lvl+0xe8/0x150 [ 267.431233][ T9078] should_fail_ex+0x46b/0x600 [ 267.431262][ T9078] should_failslab+0xa8/0x100 [ 267.431285][ T9078] __kmalloc_cache_noprof+0x84/0x690 [ 267.431306][ T9078] ? drm_atomic_commit_alloc+0xa9/0x100 [ 267.431330][ T9078] drm_atomic_commit_alloc+0xa9/0x100 [ 267.431351][ T9078] drm_atomic_helper_disable_plane+0x41/0x200 [ 267.431376][ T9078] drm_mode_setplane+0x816/0xd90 [ 267.431409][ T9078] ? __pfx_drm_mode_setplane+0x10/0x10 [ 267.431459][ T9078] ? rt_spin_unlock+0x160/0x200 [ 267.431491][ T9078] ? drm_is_current_master+0x1a2/0x210 [ 267.431518][ T9078] drm_ioctl_kernel+0x2e2/0x3b0 [ 267.431542][ T9078] ? __pfx_drm_mode_setplane+0x10/0x10 [ 267.431563][ T9078] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 267.431592][ T9078] drm_ioctl+0x6c0/0xb80 [ 267.431619][ T9078] ? __pfx_drm_mode_setplane+0x10/0x10 [ 267.431644][ T9078] ? __pfx_drm_ioctl+0x10/0x10 [ 267.431675][ T9078] ? __fget_files+0x2a/0x420 [ 267.431696][ T9078] ? bpf_lsm_file_ioctl+0x9/0x20 [ 267.431719][ T9078] ? __pfx_drm_ioctl+0x10/0x10 [ 267.431738][ T9078] __se_sys_ioctl+0xff/0x170 [ 267.431759][ T9078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.431779][ T9078] do_syscall_64+0x15f/0x560 [ 267.431800][ T9078] ? trace_irq_disable+0x3b/0x140 [ 267.431818][ T9078] ? clear_bhb_loop+0x40/0x90 [ 267.431840][ T9078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.431857][ T9078] RIP: 0033:0x7f525480ce59 [ 267.431874][ T9078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.431890][ T9078] RSP: 002b:00007f5252a66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.431909][ T9078] RAX: ffffffffffffffda RBX: 00007f5254a85fa0 RCX: 00007f525480ce59 [ 267.431922][ T9078] RDX: 00002000000002c0 RSI: 00000000c03064b7 RDI: 0000000000000003 [ 267.431933][ T9078] RBP: 00007f5252a66090 R08: 0000000000000000 R09: 0000000000000000 [ 267.431945][ T9078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.431956][ T9078] R13: 00007f5254a86038 R14: 00007f5254a85fa0 R15: 00007ffd1cb2d748 [ 267.431986][ T9078] [ 267.628286][ T5708] usb 6-1: USB disconnect, device number 16 [ 267.665767][ C1] powermate: config urb returned -71 [ 267.665954][ C1] powermate: config urb returned -71 [ 267.666147][ C1] powermate: config urb returned -71 [ 267.666341][ C1] powermate: config urb returned -71 [ 267.666544][ C1] powermate: config urb returned -71 [ 267.684469][ T5709] usb 4-1: USB disconnect, device number 52 [ 267.684536][ C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 268.495557][ T5627] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 268.612526][ T5709] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 268.642530][ T5627] usb 4-1: Using ep0 maxpacket: 16 [ 268.644624][ T5627] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.644673][ T5627] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 268.644697][ T5627] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 268.644717][ T5627] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 268.644737][ T5627] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.646533][ T5627] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 268.646555][ T5627] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 268.646572][ T5627] usb 4-1: Manufacturer: syz [ 268.652195][ T5627] usb 4-1: config 0 descriptor?? [ 268.772739][ T5709] usb 6-1: Using ep0 maxpacket: 32 [ 268.776534][ T5709] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 268.776558][ T5709] usb 6-1: config 0 has no interface number 0 [ 268.776600][ T5709] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 268.776623][ T5709] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 268.776642][ T5709] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 268.776662][ T5709] usb 6-1: config 0 interface 196 has no altsetting 0 [ 268.779493][ T5709] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 268.779519][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.779536][ T5709] usb 6-1: Product: syz [ 268.779549][ T5709] usb 6-1: Manufacturer: syz [ 268.779562][ T5709] usb 6-1: SerialNumber: syz [ 268.793642][ T5709] usb 6-1: config 0 descriptor?? [ 268.802903][ T9087] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 269.060795][ T4936] Bluetooth: hci1: link tx timeout [ 269.060966][ T4936] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 269.132589][ T5627] rc_core: IR keymap rc-hauppauge not found [ 269.132608][ T5627] Registered IR keymap rc-empty [ 269.132760][ T5627] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 269.155751][ T5627] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 269.174659][ T5627] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 269.185193][ T5627] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input36 [ 269.230541][ T5627] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 269.242730][ T5627] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 269.268040][ T5627] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 269.268988][ C1] rc rc0: IR event FIFO is full! [ 269.269203][ C1] rc rc0: IR event FIFO is full! [ 269.269626][ C1] rc rc0: IR event FIFO is full! [ 269.269643][ C1] rc rc0: IR event FIFO is full! [ 269.269655][ C1] rc rc0: IR event FIFO is full! [ 269.269667][ C1] rc rc0: IR event FIFO is full! [ 269.269680][ C1] rc rc0: IR event FIFO is full! [ 269.269899][ C1] rc rc0: IR event FIFO is full! [ 269.269913][ C1] rc rc0: IR event FIFO is full! [ 269.270135][ C1] rc rc0: IR event FIFO is full! [ 269.270364][ C1] rc rc0: IR event FIFO is full! [ 269.270396][ C1] rc rc0: IR event FIFO is full! [ 269.270410][ C1] rc rc0: IR event FIFO is full! [ 269.270427][ C1] rc rc0: IR event FIFO is full! [ 269.270645][ C1] rc rc0: IR event FIFO is full! [ 269.270658][ C1] rc rc0: IR event FIFO is full! [ 269.270672][ C1] rc rc0: IR event FIFO is full! [ 269.270685][ C1] rc rc0: IR event FIFO is full! [ 269.270697][ C1] rc rc0: IR event FIFO is full! [ 269.270914][ C1] rc rc0: IR event FIFO is full! [ 269.270928][ C1] rc rc0: IR event FIFO is full! [ 269.270940][ C1] rc rc0: IR event FIFO is full! [ 269.270952][ C1] rc rc0: IR event FIFO is full! [ 269.270965][ C1] rc rc0: IR event FIFO is full! [ 269.271181][ C1] rc rc0: IR event FIFO is full! [ 269.271196][ C1] rc rc0: IR event FIFO is full! [ 269.271209][ C1] rc rc0: IR event FIFO is full! [ 269.271222][ C1] rc rc0: IR event FIFO is full! [ 269.271234][ C1] rc rc0: IR event FIFO is full! [ 269.271664][ C1] rc rc0: IR event FIFO is full! [ 269.271677][ C1] rc rc0: IR event FIFO is full! [ 269.271690][ C1] rc rc0: IR event FIFO is full! [ 269.271701][ C1] rc rc0: IR event FIFO is full! [ 269.271712][ C1] rc rc0: IR event FIFO is full! [ 269.271725][ C1] rc rc0: IR event FIFO is full! [ 269.271737][ C1] rc rc0: IR event FIFO is full! [ 269.271960][ C1] rc rc0: IR event FIFO is full! [ 269.271972][ C1] rc rc0: IR event FIFO is full! [ 269.271984][ C1] rc rc0: IR event FIFO is full! [ 269.271996][ C1] rc rc0: IR event FIFO is full! [ 269.272008][ C1] rc rc0: IR event FIFO is full! [ 269.272020][ C1] rc rc0: IR event FIFO is full! [ 269.272033][ C1] rc rc0: IR event FIFO is full! [ 269.272251][ C1] rc rc0: IR event FIFO is full! [ 269.272262][ C1] rc rc0: IR event FIFO is full! [ 269.272271][ C1] rc rc0: IR event FIFO is full! [ 269.272280][ C1] rc rc0: IR event FIFO is full! [ 269.275204][ C1] rc rc0: IR event FIFO is full! [ 269.275224][ C1] rc rc0: IR event FIFO is full! [ 269.275236][ C1] rc rc0: IR event FIFO is full! [ 269.275247][ C1] rc rc0: IR event FIFO is full! [ 269.275258][ C1] rc rc0: IR event FIFO is full! [ 269.275482][ C1] rc rc0: IR event FIFO is full! [ 269.275521][ C1] rc rc0: IR event FIFO is full! [ 269.275738][ C1] rc rc0: IR event FIFO is full! [ 269.275751][ C1] rc rc0: IR event FIFO is full! [ 269.275764][ C1] rc rc0: IR event FIFO is full! [ 269.275777][ C1] rc rc0: IR event FIFO is full! [ 269.275789][ C1] rc rc0: IR event FIFO is full! [ 269.275802][ C1] rc rc0: IR event FIFO is full! [ 269.275814][ C1] rc rc0: IR event FIFO is full! [ 269.275827][ C1] rc rc0: IR event FIFO is full! [ 269.275839][ C1] rc rc0: IR event FIFO is full! [ 269.275852][ C1] rc rc0: IR event FIFO is full! [ 269.276080][ C1] rc rc0: IR event FIFO is full! [ 269.276094][ C1] rc rc0: IR event FIFO is full! [ 269.276107][ C1] rc rc0: IR event FIFO is full! [ 269.276119][ C1] rc rc0: IR event FIFO is full! [ 269.276131][ C1] rc rc0: IR event FIFO is full! [ 269.276144][ C1] rc rc0: IR event FIFO is full! [ 269.276369][ C1] rc rc0: IR event FIFO is full! [ 269.276382][ C1] rc rc0: IR event FIFO is full! [ 269.276395][ C1] rc rc0: IR event FIFO is full! [ 269.276407][ C1] rc rc0: IR event FIFO is full! [ 269.276420][ C1] rc rc0: IR event FIFO is full! [ 269.276432][ C1] rc rc0: IR event FIFO is full! [ 269.276446][ C1] rc rc0: IR event FIFO is full! [ 269.276664][ C1] rc rc0: IR event FIFO is full! [ 269.276678][ C1] rc rc0: IR event FIFO is full! [ 269.276689][ C1] rc rc0: IR event FIFO is full! [ 269.276909][ C1] rc rc0: IR event FIFO is full! [ 269.276922][ C1] rc rc0: IR event FIFO is full! [ 269.276934][ C1] rc rc0: IR event FIFO is full! [ 269.276946][ C1] rc rc0: IR event FIFO is full! [ 269.276958][ C1] rc rc0: IR event FIFO is full! [ 269.276970][ C1] rc rc0: IR event FIFO is full! [ 269.276982][ C1] rc rc0: IR event FIFO is full! [ 269.276994][ C1] rc rc0: IR event FIFO is full! [ 269.277006][ C1] rc rc0: IR event FIFO is full! [ 269.277019][ C1] rc rc0: IR event FIFO is full! [ 269.283072][ T5627] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 269.321893][ T5627] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 269.344673][ T5627] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 269.373533][ T5627] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 269.411585][ T5627] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 269.444242][ T5627] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 269.478148][ T5627] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 269.540714][ T9099] loop9: detected capacity change from 0 to 2640 [ 269.796811][ T9109] sg_write: data in/out 422876/114 bytes for SCSI command 0x0-- guessing data in; [ 269.796811][ T9109] program syz.4.1139 not setting count and/or reply_len properly [ 269.843331][ T9099] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.851099][ T9099] Buffer I/O error on dev loop9, logical block 0, async page read [ 269.877452][ T9099] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.877473][ T9099] Buffer I/O error on dev loop9, logical block 0, async page read [ 269.877636][ T9099] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.877650][ T9099] Buffer I/O error on dev loop9, logical block 0, async page read [ 269.877972][ T9099] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.878052][ T9099] Buffer I/O error on dev loop9, logical block 0, async page read [ 269.878276][ T9099] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.878297][ T9099] Buffer I/O error on dev loop9, logical block 0, async page read [ 269.947726][ T9099] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.947758][ T9099] Buffer I/O error on dev loop9, logical block 0, async page read [ 269.948050][ T9099] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.948073][ T9099] Buffer I/O error on dev loop9, logical block 0, async page read [ 269.948252][ T9099] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.948330][ T9099] Buffer I/O error on dev loop9, logical block 0, async page read [ 269.948410][ T9099] ldm_validate_partition_table(): Disk read failed. [ 269.954333][ T9099] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.954363][ T9099] Buffer I/O error on dev loop9, logical block 0, async page read [ 269.954771][ T9099] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.954798][ T9099] Buffer I/O error on dev loop9, logical block 0, async page read [ 269.973422][ T9099] Dev loop9: unable to read RDB block 0 [ 270.038364][ T9099] loop9: unable to read partition table [ 270.039468][ T9099] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 270.087158][ T5708] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 270.087435][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 270.161073][ T5627] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 270.161118][ T5627] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 270.222688][ T5708] usb 3-1: device descriptor read/64, error -32 [ 270.284890][ T5709] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 270.285163][ T5709] ipheth 6-1:0.196: probe with driver ipheth failed with error -71 [ 270.322881][ T5709] usb 6-1: USB disconnect, device number 17 [ 270.467689][ T5708] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 270.624703][ T5708] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.624723][ T5708] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 270.624756][ T5708] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 270.624778][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.634664][ T5708] usb 3-1: config 0 descriptor?? [ 271.107700][ T4936] Bluetooth: hci1: command 0x0406 tx timeout [ 271.308957][ T9121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.316797][ T9121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.354458][ T5708] usb 4-1: USB disconnect, device number 53 [ 271.383630][ T9123] FAULT_INJECTION: forcing a failure. [ 271.383630][ T9123] name failslab, interval 1, probability 0, space 0, times 0 [ 271.383663][ T9123] CPU: 1 UID: 0 PID: 9123 Comm: syz.3.1144 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 271.383680][ T9123] Tainted: [L]=SOFTLOCKUP [ 271.383684][ T9123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 271.383690][ T9123] Call Trace: [ 271.383694][ T9123] [ 271.383699][ T9123] dump_stack_lvl+0xe8/0x150 [ 271.383714][ T9123] should_fail_ex+0x46b/0x600 [ 271.383731][ T9123] should_failslab+0xa8/0x100 [ 271.383744][ T9123] kmem_cache_alloc_noprof+0x87/0x680 [ 271.383756][ T9123] ? skb_clone+0x212/0x3a0 [ 271.383772][ T9123] skb_clone+0x212/0x3a0 [ 271.383788][ T9123] __netlink_deliver_tap+0x424/0x8b0 [ 271.383808][ T9123] ? netlink_deliver_tap+0x2e/0x1b0 [ 271.383823][ T9123] netlink_deliver_tap+0x19c/0x1b0 [ 271.383844][ T9123] netlink_unicast+0x754/0x920 [ 271.383862][ T9123] netlink_sendmsg+0x813/0xb40 [ 271.383880][ T9123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.383895][ T9123] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 271.383909][ T9123] ? aa_sock_msg_perm+0x122/0x200 [ 271.383922][ T9123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.383939][ T9123] sock_sendmsg_nosec+0x112/0x150 [ 271.383951][ T9123] ____sys_sendmsg+0x55c/0x870 [ 271.383968][ T9123] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.383986][ T9123] ? import_iovec+0x73/0xa0 [ 271.383998][ T9123] ___sys_sendmsg+0x2a5/0x360 [ 271.384018][ T9123] ? __lock_acquire+0x6b5/0x2d10 [ 271.384032][ T9123] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.384062][ T9123] ? __fget_files+0x2a/0x420 [ 271.384071][ T9123] ? __fget_files+0x3a6/0x420 [ 271.384085][ T9123] __x64_sys_sendmsg+0x1c3/0x2a0 [ 271.384108][ T9123] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 271.384127][ T9123] ? __pfx_ksys_write+0x10/0x10 [ 271.384143][ T9123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.384154][ T9123] do_syscall_64+0x15f/0x560 [ 271.384168][ T9123] ? trace_irq_disable+0x3b/0x140 [ 271.384179][ T9123] ? clear_bhb_loop+0x40/0x90 [ 271.384192][ T9123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.384201][ T9123] RIP: 0033:0x7f9ab60ece59 [ 271.384212][ T9123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.384220][ T9123] RSP: 002b:00007f9ab433e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.384231][ T9123] RAX: ffffffffffffffda RBX: 00007f9ab6365fa0 RCX: 00007f9ab60ece59 [ 271.384239][ T9123] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 271.384245][ T9123] RBP: 00007f9ab433e090 R08: 0000000000000000 R09: 0000000000000000 [ 271.384251][ T9123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.384258][ T9123] R13: 00007f9ab6366038 R14: 00007f9ab6365fa0 R15: 00007ffe030b74d8 [ 271.384275][ T9123] [ 272.135797][ T5708] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 272.300426][ T5708] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.300481][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.300505][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.300541][ T5708] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 272.300584][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.311518][ T5708] usb 4-1: config 0 descriptor?? [ 272.783172][ T5953] usb 3-1: USB disconnect, device number 53 [ 272.840219][ T5708] usbhid 4-1:0.0: can't add hid device: -71 [ 272.840332][ T5708] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 272.898719][ T5708] usb 4-1: USB disconnect, device number 54 [ 273.432670][ T5953] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 273.592267][ T5953] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 273.592292][ T5953] usb 5-1: config 1 has no interface number 0 [ 273.592353][ T5953] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 273.592374][ T5953] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 273.592397][ T5953] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.647757][ T5953] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 273.647785][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.647803][ T5953] usb 5-1: Product: syz [ 273.647815][ T5953] usb 5-1: Manufacturer: syz [ 273.647827][ T5953] usb 5-1: SerialNumber: syz [ 273.684609][ T9149] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 273.702760][ T5799] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 273.852517][ T5799] usb 6-1: Using ep0 maxpacket: 16 [ 273.856543][ T5799] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 273.856570][ T5799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.856589][ T5799] usb 6-1: Product: syz [ 273.856601][ T5799] usb 6-1: Manufacturer: syz [ 273.856614][ T5799] usb 6-1: SerialNumber: syz [ 273.861816][ T5799] usb 6-1: config 0 descriptor?? [ 273.893321][ T9149] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 274.286910][ T5799] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 274.299870][ T5799] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 274.300757][ T5799] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 274.300808][ T5799] usb 6-1: media controller created [ 274.351993][ T5799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 274.462598][ T5610] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 274.497027][ T9153] FAULT_INJECTION: forcing a failure. [ 274.497027][ T9153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.497064][ T9153] CPU: 1 UID: 0 PID: 9153 Comm: syz.5.1154 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 274.497090][ T9153] Tainted: [L]=SOFTLOCKUP [ 274.497096][ T9153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 274.497106][ T9153] Call Trace: [ 274.497116][ T9153] [ 274.497124][ T9153] dump_stack_lvl+0xe8/0x150 [ 274.497150][ T9153] should_fail_ex+0x46b/0x600 [ 274.497178][ T9153] _copy_from_user+0x2d/0xb0 [ 274.497198][ T9153] memdup_user+0x5e/0xd0 [ 274.497223][ T9153] i2cdev_ioctl+0x659/0x890 [ 274.497246][ T9153] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 274.497269][ T9153] ? __fget_files+0x3a6/0x420 [ 274.497286][ T9153] ? __fget_files+0x2a/0x420 [ 274.497306][ T9153] ? bpf_lsm_file_ioctl+0x9/0x20 [ 274.497330][ T9153] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 274.497352][ T9153] __se_sys_ioctl+0xff/0x170 [ 274.497372][ T9153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.497391][ T9153] do_syscall_64+0x15f/0x560 [ 274.497415][ T9153] ? clear_bhb_loop+0x40/0x90 [ 274.497437][ T9153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.497455][ T9153] RIP: 0033:0x7f5b5d16ce59 [ 274.497471][ T9153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.497486][ T9153] RSP: 002b:00007f5b5b3c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.497505][ T9153] RAX: ffffffffffffffda RBX: 00007f5b5d3e5fa0 RCX: 00007f5b5d16ce59 [ 274.497519][ T9153] RDX: 0000200000000040 RSI: 0000000000000707 RDI: 0000000000000004 [ 274.497530][ T9153] RBP: 00007f5b5b3c6090 R08: 0000000000000000 R09: 0000000000000000 [ 274.497541][ T9153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.497551][ T9153] R13: 00007f5b5d3e6038 R14: 00007f5b5d3e5fa0 R15: 00007ffe17b80478 [ 274.497578][ T9153] [ 274.502599][ T5799] zl10353_read_register: readreg error (reg=127, ret==0) [ 274.502659][ T5799] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 274.502685][ T5799] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 274.516466][ T5799] usb 6-1: USB disconnect, device number 18 [ 274.615833][ T9163] FAULT_INJECTION: forcing a failure. [ 274.615833][ T9163] name failslab, interval 1, probability 0, space 0, times 0 [ 274.615866][ T9163] CPU: 0 UID: 0 PID: 9163 Comm: syz.3.1158 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 274.615894][ T9163] Tainted: [L]=SOFTLOCKUP [ 274.615899][ T9163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 274.615909][ T9163] Call Trace: [ 274.615917][ T9163] [ 274.615924][ T9163] dump_stack_lvl+0xe8/0x150 [ 274.615949][ T9163] should_fail_ex+0x46b/0x600 [ 274.615977][ T9163] should_failslab+0xa8/0x100 [ 274.615999][ T9163] kmem_cache_alloc_noprof+0x87/0x680 [ 274.616016][ T9163] ? skb_clone+0x212/0x3a0 [ 274.616044][ T9163] skb_clone+0x212/0x3a0 [ 274.616070][ T9163] __netlink_deliver_tap+0x424/0x8b0 [ 274.616105][ T9163] ? netlink_deliver_tap+0x2e/0x1b0 [ 274.616130][ T9163] netlink_deliver_tap+0x19c/0x1b0 [ 274.616153][ T9163] netlink_unicast+0x754/0x920 [ 274.616184][ T9163] netlink_sendmsg+0x813/0xb40 [ 274.616215][ T9163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.616240][ T9163] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 274.616265][ T9163] ? aa_sock_msg_perm+0x122/0x200 [ 274.616281][ T9163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.616303][ T9163] sock_sendmsg_nosec+0x112/0x150 [ 274.616324][ T9163] ____sys_sendmsg+0x55c/0x870 [ 274.616352][ T9163] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.616383][ T9163] ? import_iovec+0x73/0xa0 [ 274.616405][ T9163] ___sys_sendmsg+0x2a5/0x360 [ 274.616426][ T9163] ? __lock_acquire+0x6b5/0x2d10 [ 274.616450][ T9163] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.616504][ T9163] ? __fget_files+0x2a/0x420 [ 274.616519][ T9163] ? __fget_files+0x3a6/0x420 [ 274.616546][ T9163] __x64_sys_sendmsg+0x1c3/0x2a0 [ 274.616571][ T9163] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 274.616602][ T9163] ? __pfx_ksys_write+0x10/0x10 [ 274.616630][ T9163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.616648][ T9163] do_syscall_64+0x15f/0x560 [ 274.616669][ T9163] ? trace_irq_disable+0x3b/0x140 [ 274.616687][ T9163] ? clear_bhb_loop+0x40/0x90 [ 274.616708][ T9163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.616726][ T9163] RIP: 0033:0x7f9ab60ece59 [ 274.616742][ T9163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.616763][ T9163] RSP: 002b:00007f9ab433e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.616781][ T9163] RAX: ffffffffffffffda RBX: 00007f9ab6365fa0 RCX: 00007f9ab60ece59 [ 274.616793][ T9163] RDX: 0000000004000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 274.616804][ T9163] RBP: 00007f9ab433e090 R08: 0000000000000000 R09: 0000000000000000 [ 274.616814][ T9163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.616824][ T9163] R13: 00007f9ab6366038 R14: 00007f9ab6365fa0 R15: 00007ffe030b74d8 [ 274.616852][ T9163] [ 274.654320][ T5610] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 274.654364][ T5610] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 274.654387][ T5610] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 274.654425][ T5610] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 274.654446][ T5610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.750459][ T5610] usb 3-1: config 0 descriptor?? [ 274.755447][ T9161] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 274.757274][ T5799] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 275.046231][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1157'. [ 275.712051][ T5610] hid-multitouch 0003:1FD2:6007.0006: ignoring exceeding usage max [ 275.715965][ T5610] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x0 [ 275.716003][ T5610] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x0 [ 275.716033][ T5610] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x0 [ 275.716071][ T5610] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x0 [ 275.716097][ T5610] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x0 [ 275.716123][ T5610] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x0 [ 275.716149][ T5610] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x0 [ 275.716172][ T5610] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x0 [ 275.716196][ T5610] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x0 [ 275.716220][ T5610] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x0 [ 275.771194][ T5610] hid-multitouch 0003:1FD2:6007.0006: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 275.960424][ T5772] usb 3-1: USB disconnect, device number 54 [ 276.054311][ T9177] FAULT_INJECTION: forcing a failure. [ 276.054311][ T9177] name failslab, interval 1, probability 0, space 0, times 0 [ 276.054341][ T9177] CPU: 0 UID: 0 PID: 9177 Comm: syz.3.1163 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 276.054362][ T9177] Tainted: [L]=SOFTLOCKUP [ 276.054367][ T9177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 276.054376][ T9177] Call Trace: [ 276.054381][ T9177] [ 276.054388][ T9177] dump_stack_lvl+0xe8/0x150 [ 276.054408][ T9177] should_fail_ex+0x46b/0x600 [ 276.054433][ T9177] should_failslab+0xa8/0x100 [ 276.054451][ T9177] kmem_cache_alloc_noprof+0x87/0x680 [ 276.054467][ T9177] ? skb_clone+0x212/0x3a0 [ 276.054491][ T9177] skb_clone+0x212/0x3a0 [ 276.054515][ T9177] __netlink_deliver_tap+0x424/0x8b0 [ 276.054543][ T9177] ? netlink_deliver_tap+0x2e/0x1b0 [ 276.054563][ T9177] netlink_deliver_tap+0x19c/0x1b0 [ 276.054583][ T9177] netlink_unicast+0x754/0x920 [ 276.054611][ T9177] netlink_sendmsg+0x813/0xb40 [ 276.054635][ T9177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.054671][ T9177] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 276.054692][ T9177] ? aa_sock_msg_perm+0x122/0x200 [ 276.054708][ T9177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.054729][ T9177] sock_sendmsg_nosec+0x112/0x150 [ 276.054749][ T9177] ____sys_sendmsg+0x55c/0x870 [ 276.054777][ T9177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.054807][ T9177] ? import_iovec+0x73/0xa0 [ 276.054826][ T9177] ___sys_sendmsg+0x2a5/0x360 [ 276.054846][ T9177] ? __lock_acquire+0x6b5/0x2d10 [ 276.054868][ T9177] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.054920][ T9177] ? __fget_files+0x2a/0x420 [ 276.054936][ T9177] ? __fget_files+0x3a6/0x420 [ 276.054963][ T9177] __x64_sys_sendmsg+0x1c3/0x2a0 [ 276.054989][ T9177] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 276.055019][ T9177] ? __pfx_ksys_write+0x10/0x10 [ 276.055038][ T9177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.055049][ T9177] do_syscall_64+0x15f/0x560 [ 276.055063][ T9177] ? trace_irq_disable+0x3b/0x140 [ 276.055079][ T9177] ? clear_bhb_loop+0x40/0x90 [ 276.055098][ T9177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.055115][ T9177] RIP: 0033:0x7f9ab60ece59 [ 276.055133][ T9177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.055147][ T9177] RSP: 002b:00007f9ab433e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.055166][ T9177] RAX: ffffffffffffffda RBX: 00007f9ab6365fa0 RCX: 00007f9ab60ece59 [ 276.055179][ T9177] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 276.055190][ T9177] RBP: 00007f9ab433e090 R08: 0000000000000000 R09: 0000000000000000 [ 276.055198][ T9177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.055204][ T9177] R13: 00007f9ab6366038 R14: 00007f9ab6365fa0 R15: 00007ffe030b74d8 [ 276.055220][ T9177] [ 276.079972][ T9177] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1163'. [ 276.532377][ T9180] syzkaller1: entered promiscuous mode [ 276.548035][ T5953] usb 5-1: Incompatible driver and firmware versions [ 276.566197][ T9180] syzkaller1: entered allmulticast mode [ 276.572159][ T5953] usb 5-1: USB disconnect, device number 24 [ 276.721294][ T9188] syz.2.1167 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 277.075692][ T9199] tipc: Enabling of bearer rejected, media not registered [ 277.317569][ T5610] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 277.462538][ T5610] usb 6-1: Using ep0 maxpacket: 32 [ 277.464757][ T5610] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 277.464786][ T5610] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 277.467062][ T5610] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 277.467087][ T5610] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 277.467106][ T5610] usb 6-1: Product: syz [ 277.467223][ T5610] usb 6-1: Manufacturer: syz [ 277.487042][ T5610] hub 6-1:4.0: bad descriptor, ignoring hub [ 277.487077][ T5610] hub 6-1:4.0: probe with driver hub failed with error -5 [ 277.490278][ T5610] usbhid 6-1:4.0: couldn't find an input interrupt endpoint [ 277.689503][ T9201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.690041][ T9201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.722583][ T5772] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 277.878875][ T5772] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 277.878900][ T5772] usb 3-1: config 1 has no interface number 0 [ 277.878943][ T5772] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 277.878967][ T5772] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 277.878990][ T5772] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.924997][ T5772] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 277.934175][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.934199][ T5772] usb 3-1: Product: syz [ 277.934213][ T5772] usb 3-1: Manufacturer: syz [ 277.934225][ T5772] usb 3-1: SerialNumber: syz [ 277.998005][ T9209] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 278.221715][ T9209] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 278.307664][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1180'. [ 278.542580][ T5610] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 278.682713][ T5610] usb 4-1: device descriptor read/64, error -71 [ 278.699354][ T5794] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 278.845783][ T5794] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.845809][ T5794] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.848423][ T5794] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 278.848448][ T5794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 278.848467][ T5794] usb 5-1: SerialNumber: syz [ 278.922600][ T5610] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 279.052570][ T5610] usb 4-1: device descriptor read/64, error -71 [ 279.127637][ T9228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.143579][ T9228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.173077][ T5610] usb usb4-port1: attempt power cycle [ 279.178309][ T5794] usb 5-1: invalid UAC_HEADER (v1) [ 279.422728][ T5794] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 279.443345][ T5794] usb 5-1: USB disconnect, device number 25 [ 279.522802][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.532745][ T5610] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 279.555590][ T5610] usb 4-1: device descriptor read/8, error -71 [ 279.794505][ T5610] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 279.813389][ T5610] usb 4-1: device descriptor read/8, error -71 [ 279.922951][ T5610] usb usb4-port1: unable to enumerate USB device [ 280.187761][ T9233] FAULT_INJECTION: forcing a failure. [ 280.187761][ T9233] name failslab, interval 1, probability 0, space 0, times 0 [ 280.187796][ T9233] CPU: 0 UID: 0 PID: 9233 Comm: syz.5.1183 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 280.187821][ T9233] Tainted: [L]=SOFTLOCKUP [ 280.187827][ T9233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 280.187839][ T9233] Call Trace: [ 280.187847][ T9233] [ 280.187855][ T9233] dump_stack_lvl+0xe8/0x150 [ 280.187881][ T9233] should_fail_ex+0x46b/0x600 [ 280.187911][ T9233] should_failslab+0xa8/0x100 [ 280.187934][ T9233] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 280.187955][ T9233] ? __alloc_skb+0x1d0/0x7d0 [ 280.187975][ T9233] ? lockdep_hardirqs_on+0x7a/0x110 [ 280.188004][ T9233] __alloc_skb+0x1d0/0x7d0 [ 280.188029][ T9233] netlink_sendmsg+0x5d4/0xb40 [ 280.188059][ T9233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.188085][ T9233] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 280.188110][ T9233] ? aa_sock_msg_perm+0x122/0x200 [ 280.188129][ T9233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.188152][ T9233] sock_sendmsg_nosec+0x112/0x150 [ 280.188175][ T9233] ____sys_sendmsg+0x55c/0x870 [ 280.188204][ T9233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.188236][ T9233] ? import_iovec+0x73/0xa0 [ 280.188258][ T9233] ___sys_sendmsg+0x2a5/0x360 [ 280.188280][ T9233] ? __lock_acquire+0x6b5/0x2d10 [ 280.188304][ T9233] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.188358][ T9233] ? __fget_files+0x2a/0x420 [ 280.188376][ T9233] ? __fget_files+0x3a6/0x420 [ 280.188411][ T9233] __x64_sys_sendmsg+0x1c3/0x2a0 [ 280.188437][ T9233] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 280.188469][ T9233] ? __pfx_ksys_write+0x10/0x10 [ 280.188497][ T9233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.188517][ T9233] do_syscall_64+0x15f/0x560 [ 280.188543][ T9233] ? trace_irq_disable+0x3b/0x140 [ 280.188563][ T9233] ? clear_bhb_loop+0x40/0x90 [ 280.188585][ T9233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.188604][ T9233] RIP: 0033:0x7f5b5d16ce59 [ 280.188621][ T9233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.188636][ T9233] RSP: 002b:00007f5b5b3c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.188656][ T9233] RAX: ffffffffffffffda RBX: 00007f5b5d3e5fa0 RCX: 00007f5b5d16ce59 [ 280.188670][ T9233] RDX: 0000000000000890 RSI: 00002000000000c0 RDI: 0000000000000005 [ 280.188682][ T9233] RBP: 00007f5b5b3c6090 R08: 0000000000000000 R09: 0000000000000000 [ 280.188694][ T9233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.188705][ T9233] R13: 00007f5b5d3e6038 R14: 00007f5b5d3e5fa0 R15: 00007ffe17b80478 [ 280.188735][ T9233] [ 280.234056][ T5799] usb 6-1: USB disconnect, device number 19 [ 280.503447][ T5772] usb 3-1: Incompatible driver and firmware versions [ 280.531045][ T5772] usb 3-1: USB disconnect, device number 55 [ 280.645509][ T9241] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1186'. [ 280.711920][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1186'. [ 281.799601][ T9264] tmpfs: Bad value for 'mpol' [ 281.827238][ T9265] FAULT_INJECTION: forcing a failure. [ 281.827238][ T9265] name failslab, interval 1, probability 0, space 0, times 0 [ 281.827269][ T9265] CPU: 0 UID: 0 PID: 9265 Comm: syz.2.1195 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 281.827293][ T9265] Tainted: [L]=SOFTLOCKUP [ 281.827299][ T9265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 281.827310][ T9265] Call Trace: [ 281.827324][ T9265] [ 281.827331][ T9265] dump_stack_lvl+0xe8/0x150 [ 281.827356][ T9265] should_fail_ex+0x46b/0x600 [ 281.827390][ T9265] should_failslab+0xa8/0x100 [ 281.827411][ T9265] kmem_cache_alloc_noprof+0x87/0x680 [ 281.827429][ T9265] ? skb_clone+0x212/0x3a0 [ 281.827455][ T9265] skb_clone+0x212/0x3a0 [ 281.827481][ T9265] __netlink_deliver_tap+0x424/0x8b0 [ 281.827517][ T9265] ? netlink_deliver_tap+0x2e/0x1b0 [ 281.827540][ T9265] netlink_deliver_tap+0x19c/0x1b0 [ 281.827563][ T9265] netlink_unicast+0x754/0x920 [ 281.827591][ T9265] netlink_sendmsg+0x813/0xb40 [ 281.827621][ T9265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.827646][ T9265] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 281.827672][ T9265] ? aa_sock_msg_perm+0x122/0x200 [ 281.827691][ T9265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.827717][ T9265] sock_sendmsg_nosec+0x112/0x150 [ 281.827739][ T9265] ____sys_sendmsg+0x55c/0x870 [ 281.827767][ T9265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.827800][ T9265] ? import_iovec+0x73/0xa0 [ 281.827822][ T9265] ___sys_sendmsg+0x2a5/0x360 [ 281.827845][ T9265] ? __lock_acquire+0x6b5/0x2d10 [ 281.827870][ T9265] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.827928][ T9265] ? __fget_files+0x2a/0x420 [ 281.827945][ T9265] ? __fget_files+0x3a6/0x420 [ 281.827972][ T9265] __x64_sys_sendmsg+0x1c3/0x2a0 [ 281.827999][ T9265] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 281.828032][ T9265] ? __pfx_ksys_write+0x10/0x10 [ 281.828068][ T9265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.828088][ T9265] do_syscall_64+0x15f/0x560 [ 281.828111][ T9265] ? trace_irq_disable+0x3b/0x140 [ 281.828131][ T9265] ? clear_bhb_loop+0x40/0x90 [ 281.828153][ T9265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.828171][ T9265] RIP: 0033:0x7f525480ce59 [ 281.828188][ T9265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.828204][ T9265] RSP: 002b:00007f5252a45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.828224][ T9265] RAX: ffffffffffffffda RBX: 00007f5254a86090 RCX: 00007f525480ce59 [ 281.828238][ T9265] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 281.828250][ T9265] RBP: 00007f5252a45090 R08: 0000000000000000 R09: 0000000000000000 [ 281.828261][ T9265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.828273][ T9265] R13: 00007f5254a86128 R14: 00007f5254a86090 R15: 00007ffd1cb2d748 [ 281.828302][ T9265] [ 282.672561][ T5772] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 283.524270][ T5772] usb 3-1: device descriptor read/64, error -71 [ 283.704656][ T5627] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 283.731799][ T9304] FAULT_INJECTION: forcing a failure. [ 283.731799][ T9304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.731823][ T9304] CPU: 1 UID: 0 PID: 9304 Comm: syz.4.1211 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 283.731838][ T9304] Tainted: [L]=SOFTLOCKUP [ 283.731842][ T9304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 283.731849][ T9304] Call Trace: [ 283.731853][ T9304] [ 283.731858][ T9304] dump_stack_lvl+0xe8/0x150 [ 283.731884][ T9304] should_fail_ex+0x46b/0x600 [ 283.731901][ T9304] _copy_from_user+0x2d/0xb0 [ 283.731913][ T9304] memdup_user+0x5e/0xd0 [ 283.731929][ T9304] strndup_user+0x68/0xd0 [ 283.731943][ T9304] __se_sys_mount+0x9d/0x420 [ 283.731953][ T9304] ? ksys_write+0x248/0x270 [ 283.731967][ T9304] ? __pfx___se_sys_mount+0x10/0x10 [ 283.731980][ T9304] ? __x64_sys_mount+0x20/0xc0 [ 283.731989][ T9304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.731999][ T9304] do_syscall_64+0x15f/0x560 [ 283.732014][ T9304] ? trace_irq_disable+0x3b/0x140 [ 283.732025][ T9304] ? clear_bhb_loop+0x40/0x90 [ 283.732038][ T9304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.732047][ T9304] RIP: 0033:0x7f72b3b0ce59 [ 283.732058][ T9304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.732067][ T9304] RSP: 002b:00007f72b1d5e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 283.732079][ T9304] RAX: ffffffffffffffda RBX: 00007f72b3d85fa0 RCX: 00007f72b3b0ce59 [ 283.732086][ T9304] RDX: 0000200000000000 RSI: 0000200000000240 RDI: 0000200000000180 [ 283.732093][ T9304] RBP: 00007f72b1d5e090 R08: 00002000000001c0 R09: 0000000000000000 [ 283.732100][ T9304] R10: 0000000000800041 R11: 0000000000000246 R12: 0000000000000001 [ 283.732106][ T9304] R13: 00007f72b3d86038 R14: 00007f72b3d85fa0 R15: 00007ffe17b3e568 [ 283.732124][ T9304] [ 283.762662][ T5772] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 283.832640][ T5627] usb 4-1: device descriptor read/64, error -71 [ 283.893317][ T5772] usb 3-1: device descriptor read/64, error -71 [ 284.003483][ T5772] usb usb3-port1: attempt power cycle [ 284.074531][ T5627] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 284.202655][ T5627] usb 4-1: device descriptor read/64, error -71 [ 284.314671][ T5627] usb usb4-port1: attempt power cycle [ 284.342817][ T5772] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 284.365694][ T5772] usb 3-1: device descriptor read/8, error -71 [ 284.602631][ T5772] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 284.623417][ T5772] usb 3-1: device descriptor read/8, error -71 [ 284.652597][ T5627] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 284.673409][ T5627] usb 4-1: device descriptor read/8, error -71 [ 284.732840][ T5772] usb usb3-port1: unable to enumerate USB device [ 284.912530][ T5627] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 284.933359][ T5627] usb 4-1: device descriptor read/8, error -71 [ 285.042943][ T5627] usb usb4-port1: unable to enumerate USB device [ 285.125768][ T5632] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 285.214907][ T9322] ntfs3: Unknown parameter 'discard./bus' [ 285.369042][ T9326] ntfs3: Unknown parameter 'discard./bus' [ 286.180962][ T9346] FAULT_INJECTION: forcing a failure. [ 286.180962][ T9346] name failslab, interval 1, probability 0, space 0, times 0 [ 286.181000][ T9346] CPU: 0 UID: 0 PID: 9346 Comm: syz.4.1228 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 286.181025][ T9346] Tainted: [L]=SOFTLOCKUP [ 286.181031][ T9346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 286.181044][ T9346] Call Trace: [ 286.181051][ T9346] [ 286.181059][ T9346] dump_stack_lvl+0xe8/0x150 [ 286.181088][ T9346] should_fail_ex+0x46b/0x600 [ 286.181118][ T9346] should_failslab+0xa8/0x100 [ 286.181141][ T9346] __kmalloc_noprof+0xdf/0x7b0 [ 286.181160][ T9346] ? sock_kmalloc+0xd6/0x160 [ 286.181186][ T9346] sock_kmalloc+0xd6/0x160 [ 286.181212][ T9346] skcipher_recvmsg+0x517/0x1140 [ 286.181252][ T9346] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 286.181272][ T9346] ? __lock_acquire+0x6b5/0x2d10 [ 286.181298][ T9346] ? aa_sock_msg_perm+0x122/0x200 [ 286.181315][ T9346] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 286.181338][ T9346] sock_recvmsg_nosec+0x10c/0x140 [ 286.181361][ T9346] ____sys_recvmsg+0x23d/0x4f0 [ 286.181393][ T9346] ? __pfx_____sys_recvmsg+0x10/0x10 [ 286.181432][ T9346] ? import_iovec+0x73/0xa0 [ 286.181455][ T9346] ___sys_recvmsg+0x215/0x590 [ 286.181477][ T9346] ? get_pid_task+0x20/0x1f0 [ 286.181501][ T9346] ? __pfx____sys_recvmsg+0x10/0x10 [ 286.181538][ T9346] ? __fget_files+0x2a/0x420 [ 286.181574][ T9346] ? __fget_files+0x3a6/0x420 [ 286.181601][ T9346] __x64_sys_recvmsg+0x1c0/0x2a0 [ 286.181628][ T9346] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 286.181662][ T9346] ? __pfx_ksys_write+0x10/0x10 [ 286.181692][ T9346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.181712][ T9346] do_syscall_64+0x15f/0x560 [ 286.181735][ T9346] ? trace_irq_disable+0x3b/0x140 [ 286.181755][ T9346] ? clear_bhb_loop+0x40/0x90 [ 286.181780][ T9346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.181798][ T9346] RIP: 0033:0x7f72b3b0ce59 [ 286.181816][ T9346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.181832][ T9346] RSP: 002b:00007f72b1d5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 286.181852][ T9346] RAX: ffffffffffffffda RBX: 00007f72b3d85fa0 RCX: 00007f72b3b0ce59 [ 286.181866][ T9346] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 286.181877][ T9346] RBP: 00007f72b1d5e090 R08: 0000000000000000 R09: 0000000000000000 [ 286.181889][ T9346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.181900][ T9346] R13: 00007f72b3d86038 R14: 00007f72b3d85fa0 R15: 00007ffe17b3e568 [ 286.181930][ T9346] [ 287.480946][ T9376] dvmrp8: entered allmulticast mode [ 287.542676][ T5799] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 287.690271][ T9386] FAULT_INJECTION: forcing a failure. [ 287.690271][ T9386] name failslab, interval 1, probability 0, space 0, times 0 [ 287.690304][ T9386] CPU: 1 UID: 0 PID: 9386 Comm: syz.3.1243 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 287.690324][ T9386] Tainted: [L]=SOFTLOCKUP [ 287.690329][ T9386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 287.690337][ T9386] Call Trace: [ 287.690343][ T9386] [ 287.690349][ T9386] dump_stack_lvl+0xe8/0x150 [ 287.690369][ T9386] should_fail_ex+0x46b/0x600 [ 287.690391][ T9386] should_failslab+0xa8/0x100 [ 287.690419][ T9386] kmem_cache_alloc_noprof+0x87/0x680 [ 287.690434][ T9386] ? skb_clone+0x212/0x3a0 [ 287.690457][ T9386] skb_clone+0x212/0x3a0 [ 287.690477][ T9386] __netlink_deliver_tap+0x424/0x8b0 [ 287.690504][ T9386] ? netlink_deliver_tap+0x2e/0x1b0 [ 287.690524][ T9386] netlink_deliver_tap+0x19c/0x1b0 [ 287.690544][ T9386] netlink_unicast+0x754/0x920 [ 287.690571][ T9386] netlink_sendmsg+0x813/0xb40 [ 287.690599][ T9386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.690619][ T9386] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 287.690639][ T9386] ? aa_sock_msg_perm+0x122/0x200 [ 287.690653][ T9386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.690672][ T9386] sock_sendmsg_nosec+0x112/0x150 [ 287.690692][ T9386] ____sys_sendmsg+0x55c/0x870 [ 287.690715][ T9386] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.690740][ T9386] ? import_iovec+0x73/0xa0 [ 287.690757][ T9386] ___sys_sendmsg+0x2a5/0x360 [ 287.690776][ T9386] ? __lock_acquire+0x6b5/0x2d10 [ 287.690796][ T9386] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.690841][ T9386] ? __fget_files+0x2a/0x420 [ 287.690855][ T9386] ? __fget_files+0x3a6/0x420 [ 287.690876][ T9386] __x64_sys_sendmsg+0x1c3/0x2a0 [ 287.690897][ T9386] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 287.690923][ T9386] ? __pfx_ksys_write+0x10/0x10 [ 287.690948][ T9386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.690966][ T9386] do_syscall_64+0x15f/0x560 [ 287.690987][ T9386] ? trace_irq_disable+0x3b/0x140 [ 287.691003][ T9386] ? clear_bhb_loop+0x40/0x90 [ 287.691021][ T9386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.691036][ T9386] RIP: 0033:0x7f9ab60ece59 [ 287.691052][ T9386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.691065][ T9386] RSP: 002b:00007f9ab433e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.691082][ T9386] RAX: ffffffffffffffda RBX: 00007f9ab6365fa0 RCX: 00007f9ab60ece59 [ 287.691092][ T9386] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 287.691101][ T9386] RBP: 00007f9ab433e090 R08: 0000000000000000 R09: 0000000000000000 [ 287.691109][ T9386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.691117][ T9386] R13: 00007f9ab6366038 R14: 00007f9ab6365fa0 R15: 00007ffe030b74d8 [ 287.691143][ T9386] [ 287.722793][ T5799] usb 5-1: Using ep0 maxpacket: 32 [ 287.726529][ T5799] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 287.726556][ T5799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.752749][ T5799] usb 5-1: config 0 descriptor?? [ 288.022383][ T5799] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 288.070411][ T5799] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 288.080566][ T5799] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 288.080622][ T5799] usb 5-1: media controller created [ 288.203332][ T5799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 288.639768][ T9404] FAULT_INJECTION: forcing a failure. [ 288.639768][ T9404] name failslab, interval 1, probability 0, space 0, times 0 [ 288.639856][ T9404] CPU: 0 UID: 0 PID: 9404 Comm: syz.2.1249 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 288.639879][ T9404] Tainted: [L]=SOFTLOCKUP [ 288.639885][ T9404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 288.639894][ T9404] Call Trace: [ 288.639902][ T9404] [ 288.639909][ T9404] dump_stack_lvl+0xe8/0x150 [ 288.639935][ T9404] should_fail_ex+0x46b/0x600 [ 288.639965][ T9404] should_failslab+0xa8/0x100 [ 288.639987][ T9404] kmem_cache_alloc_noprof+0x87/0x680 [ 288.640006][ T9404] ? security_inode_alloc+0x39/0x310 [ 288.640030][ T9404] security_inode_alloc+0x39/0x310 [ 288.640050][ T9404] inode_init_always_gfp+0x99a/0xd50 [ 288.640082][ T9404] ? __pfx_proc_alloc_inode+0x10/0x10 [ 288.640102][ T9404] alloc_inode+0x82/0x1b0 [ 288.640127][ T9404] new_inode+0x22/0x170 [ 288.640148][ T9404] proc_pid_make_inode+0x21/0x130 [ 288.640173][ T9404] proc_fd_instantiate+0x54/0x2f0 [ 288.640190][ T9404] ? fput+0xa0/0xd0 [ 288.640217][ T9404] proc_lookupfd_common+0x145/0x250 [ 288.640236][ T9404] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 288.640253][ T9404] ? __pfx_proc_lookupfd_common+0x10/0x10 [ 288.640271][ T9404] ? __rt_spin_lock_init+0x3e/0x50 [ 288.640297][ T9404] ? __init_waitqueue_head+0xae/0x160 [ 288.640321][ T9404] __lookup_slow+0x2d2/0x440 [ 288.640340][ T9404] ? __pfx___lookup_slow+0x10/0x10 [ 288.640372][ T9404] ? down_read+0x156/0x200 [ 288.640397][ T9404] ? __pfx_down_read+0x10/0x10 [ 288.640422][ T9404] ? lookup_fast+0x1a3/0x5b0 [ 288.640445][ T9404] lookup_slow+0x53/0x70 [ 288.640464][ T9404] path_lookupat+0x3f5/0x8c0 [ 288.640497][ T9404] filename_lookup+0x256/0x5d0 [ 288.640520][ T9404] ? __pfx_filename_lookup+0x10/0x10 [ 288.640561][ T9404] ? strncpy_from_user+0x150/0x2b0 [ 288.640594][ T9404] ? do_getname+0x151/0x250 [ 288.640620][ T9404] do_readlinkat+0xe3/0x510 [ 288.640642][ T9404] ? __pfx_do_readlinkat+0x10/0x10 [ 288.640660][ T9404] ? __pfx_ksys_write+0x10/0x10 [ 288.640687][ T9404] __x64_sys_readlinkat+0x9a/0xb0 [ 288.640712][ T9404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.640731][ T9404] do_syscall_64+0x15f/0x560 [ 288.640753][ T9404] ? trace_irq_disable+0x3b/0x140 [ 288.640773][ T9404] ? clear_bhb_loop+0x40/0x90 [ 288.640795][ T9404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.640813][ T9404] RIP: 0033:0x7f525480ce59 [ 288.640830][ T9404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.640846][ T9404] RSP: 002b:00007f5252a66028 EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 288.640866][ T9404] RAX: ffffffffffffffda RBX: 00007f5254a85fa0 RCX: 00007f525480ce59 [ 288.640880][ T9404] RDX: 00002000000021c0 RSI: 0000200000000040 RDI: 0000000000000003 [ 288.640892][ T9404] RBP: 00007f5252a66090 R08: 0000000000000000 R09: 0000000000000000 [ 288.640905][ T9404] R10: 0000000000019000 R11: 0000000000000246 R12: 0000000000000001 [ 288.640916][ T9404] R13: 00007f5254a86038 R14: 00007f5254a85fa0 R15: 00007ffd1cb2d748 [ 288.640946][ T9404] [ 288.721478][ T5799] az6027: usb out operation failed. (-71) [ 288.721873][ T5799] az6027: usb out operation failed. (-71) [ 288.721885][ T5799] stb0899_attach: Driver disabled by Kconfig [ 288.721895][ T5799] az6027: no front-end attached [ 288.721895][ T5799] [ 288.723741][ T5799] az6027: usb out operation failed. (-71) [ 288.723760][ T5799] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 288.738894][ T5799] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input37 [ 288.751247][ T5799] dvb-usb: schedule remote query interval to 400 msecs. [ 288.756527][ T5799] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 288.788947][ T5799] usb 5-1: USB disconnect, device number 27 [ 289.229474][ T5799] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 289.705393][ T821] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 289.762636][ T5772] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 289.826192][ T5709] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 289.855577][ T821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.855608][ T821] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 289.855642][ T821] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 289.855664][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.864372][ T821] usb 4-1: config 0 descriptor?? [ 289.916438][ T5772] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 289.916465][ T5772] usb 5-1: config 0 has no interface number 0 [ 289.916506][ T5772] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 289.916544][ T5772] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 289.916570][ T5772] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 289.916582][ T5772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.972525][ T5709] usb 6-1: Using ep0 maxpacket: 8 [ 289.974929][ T5709] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 289.974979][ T5709] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 289.975003][ T5709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 289.975027][ T5709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 289.977794][ T5709] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 289.977820][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.977838][ T5709] usb 6-1: Product: syz [ 289.977851][ T5709] usb 6-1: Manufacturer: syz [ 289.977864][ T5709] usb 6-1: SerialNumber: syz [ 290.042189][ T5709] usb 6-1: config 0 descriptor?? [ 290.044572][ T5772] usb 5-1: config 0 descriptor?? [ 290.047391][ T9423] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 290.050090][ T9425] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 290.132793][ T5772] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 290.265859][ T5709] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 290.311260][ T5709] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input38 [ 290.435616][ T9429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.441581][ T9429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.664455][ C0] powermate: config urb returned -71 [ 290.664679][ C0] powermate: config urb returned -71 [ 290.664899][ C0] powermate: config urb returned -71 [ 290.665111][ C0] powermate: config urb returned -71 [ 290.666251][ C0] powermate: config urb returned -71 [ 290.709308][ T5772] usb 6-1: USB disconnect, device number 20 [ 290.711388][ C0] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 290.741553][ T5709] usb 5-1: USB disconnect, device number 28 [ 291.499444][ T9443] FAULT_INJECTION: forcing a failure. [ 291.499444][ T9443] name failslab, interval 1, probability 0, space 0, times 0 [ 291.499480][ T9443] CPU: 0 UID: 0 PID: 9443 Comm: syz.5.1263 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 291.499506][ T9443] Tainted: [L]=SOFTLOCKUP [ 291.499512][ T9443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 291.499523][ T9443] Call Trace: [ 291.499530][ T9443] [ 291.499538][ T9443] dump_stack_lvl+0xe8/0x150 [ 291.499569][ T9443] should_fail_ex+0x46b/0x600 [ 291.499598][ T9443] should_failslab+0xa8/0x100 [ 291.499620][ T9443] __kmalloc_noprof+0xdf/0x7b0 [ 291.499639][ T9443] ? trace_kmem_cache_alloc+0x29/0xe0 [ 291.499656][ T9443] ? security_sk_alloc+0x52/0x360 [ 291.499683][ T9443] security_sk_alloc+0x52/0x360 [ 291.499705][ T9443] sk_prot_alloc+0x101/0x210 [ 291.499733][ T9443] sk_alloc+0x3a/0x390 [ 291.499760][ T9443] inet_create+0x7a0/0x1010 [ 291.499782][ T9443] ? inet_create+0x9c/0x1010 [ 291.499806][ T9443] __sock_create+0x4e3/0x960 [ 291.499826][ T9443] ? __sock_create+0x344/0x960 [ 291.499848][ T9443] mptcp_subflow_create_socket+0xfb/0x800 [ 291.499870][ T9443] ? lockdep_hardirqs_on+0x7a/0x110 [ 291.499895][ T9443] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 291.499912][ T9443] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 291.499941][ T9443] __mptcp_nmpc_sk+0x14e/0x790 [ 291.499956][ T9443] ? __local_bh_enable+0x1e1/0x2f0 [ 291.499983][ T9443] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 291.500001][ T9443] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 291.500023][ T9443] ? lockdep_hardirqs_on+0x7a/0x110 [ 291.500049][ T9443] mptcp_setsockopt+0xf12/0x3540 [ 291.500075][ T9443] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 291.500098][ T9443] ? __pfx_aa_sk_perm+0x10/0x10 [ 291.500125][ T9443] ? aa_sock_opt_perm+0x131/0x1f0 [ 291.500145][ T9443] ? sock_common_setsockopt+0x36/0xc0 [ 291.500166][ T9443] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 291.500188][ T9443] do_sock_setsockopt+0x17c/0x1b0 [ 291.500215][ T9443] __x64_sys_setsockopt+0x143/0x1b0 [ 291.500240][ T9443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.500261][ T9443] do_syscall_64+0x15f/0x560 [ 291.500282][ T9443] ? trace_irq_disable+0x3b/0x140 [ 291.500301][ T9443] ? clear_bhb_loop+0x40/0x90 [ 291.500329][ T9443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.500347][ T9443] RIP: 0033:0x7f5b5d16ce59 [ 291.500365][ T9443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.500381][ T9443] RSP: 002b:00007f5b5b3c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 291.500401][ T9443] RAX: ffffffffffffffda RBX: 00007f5b5d3e5fa0 RCX: 00007f5b5d16ce59 [ 291.500414][ T9443] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000003 [ 291.500426][ T9443] RBP: 00007f5b5b3c6090 R08: 0000000000000001 R09: 0000000000000000 [ 291.500437][ T9443] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 291.500449][ T9443] R13: 00007f5b5d3e6038 R14: 00007f5b5d3e5fa0 R15: 00007ffe17b80478 [ 291.500478][ T9443] [ 291.653356][ T38] audit: type=1800 audit(1779514034.411:5): pid=9438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.1262" name="/fuse" dev="devtmpfs" ino=99 res=0 errno=0 [ 292.152582][ T5953] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 292.282616][ T5709] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 292.314271][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.314305][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.314341][ T5953] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 292.314359][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.318358][ T5953] usb 3-1: config 0 descriptor?? [ 292.452559][ T5709] usb 5-1: Using ep0 maxpacket: 8 [ 292.454680][ T5709] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 292.454731][ T5709] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 292.454756][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 292.454780][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 292.457956][ T5709] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 292.457985][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.458002][ T5709] usb 5-1: Product: syz [ 292.458015][ T5709] usb 5-1: Manufacturer: syz [ 292.458028][ T5709] usb 5-1: SerialNumber: syz [ 292.499771][ T5709] usb 5-1: config 0 descriptor?? [ 292.502796][ T9456] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 292.559691][ T821] usb 4-1: USB disconnect, device number 63 [ 292.707344][ T5709] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 292.740428][ T5709] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input39 [ 292.944831][ T5953] hid-steam 0003:28DE:1142.0007: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 293.005981][ T9449] FAULT_INJECTION: forcing a failure. [ 293.005981][ T9449] name failslab, interval 1, probability 0, space 0, times 0 [ 293.006017][ T9449] CPU: 1 UID: 0 PID: 9449 Comm: syz.2.1265 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 293.006042][ T9449] Tainted: [L]=SOFTLOCKUP [ 293.006049][ T9449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 293.006059][ T9449] Call Trace: [ 293.006067][ T9449] [ 293.006076][ T9449] dump_stack_lvl+0xe8/0x150 [ 293.006102][ T9449] should_fail_ex+0x46b/0x600 [ 293.006130][ T9449] should_failslab+0xa8/0x100 [ 293.006147][ T9449] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 293.006158][ T9449] ? __d_alloc+0x37/0x6f0 [ 293.006172][ T9449] __d_alloc+0x37/0x6f0 [ 293.006193][ T9449] d_alloc_parallel+0xe6/0x1610 [ 293.006215][ T9449] ? __d_lookup+0x66/0x780 [ 293.006238][ T9449] ? __d_lookup+0x66/0x780 [ 293.006262][ T9449] ? __d_lookup+0x66/0x780 [ 293.006285][ T9449] ? __pfx_d_alloc_parallel+0x10/0x10 [ 293.006306][ T9449] ? d_lookup+0x1f/0xc0 [ 293.006328][ T9449] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 293.006356][ T9449] path_openat+0xccb/0x3960 [ 293.006384][ T9449] ? __pfx_path_openat+0x10/0x10 [ 293.006425][ T9449] ? do_raw_spin_lock+0x12b/0x2f0 [ 293.006454][ T9449] do_file_open+0x23e/0x4a0 [ 293.006479][ T9449] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 293.006506][ T9449] ? __pfx_do_file_open+0x10/0x10 [ 293.006524][ T9449] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 293.006560][ T9449] ? alloc_fd+0x679/0x6f0 [ 293.006581][ T9449] do_sys_openat2+0x115/0x200 [ 293.006593][ T9449] ? __pfx_do_sys_openat2+0x10/0x10 [ 293.006617][ T9449] ? ksys_write+0x248/0x270 [ 293.006640][ T9449] ? __pfx_ksys_write+0x10/0x10 [ 293.006664][ T9449] __x64_sys_openat+0x138/0x170 [ 293.006684][ T9449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.006703][ T9449] do_syscall_64+0x15f/0x560 [ 293.006728][ T9449] ? clear_bhb_loop+0x40/0x90 [ 293.006749][ T9449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.006766][ T9449] RIP: 0033:0x7f52547cd68e [ 293.006777][ T9449] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 293.006785][ T9449] RSP: 002b:00007f5252a65b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 293.006801][ T9449] RAX: ffffffffffffffda RBX: 00007f5252a666c0 RCX: 00007f52547cd68e [ 293.006812][ T9449] RDX: 0000000000000800 RSI: 00007f5252a65c00 RDI: ffffffffffffff9c [ 293.006824][ T9449] RBP: 00007f5252a65c00 R08: 0000000000000000 R09: 0000000000000000 [ 293.006836][ T9449] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 293.006847][ T9449] R13: 00007f5254a86038 R14: 00007f5254a85fa0 R15: 00007ffd1cb2d748 [ 293.006883][ T9449] [ 293.061410][ T5953] hid-steam 0003:28DE:1142.0007: Steam wireless receiver connected [ 293.129085][ C0] powermate: config urb returned -71 [ 293.130074][ C0] powermate: config urb returned -71 [ 293.130295][ C0] powermate: config urb returned -71 [ 293.130517][ C0] powermate: config urb returned -71 [ 293.130727][ C0] powermate: config urb returned -71 [ 293.140048][ T5627] usb 5-1: USB disconnect, device number 29 [ 293.140205][ C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 293.197923][ T821] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 293.355190][ T821] usb 4-1: Using ep0 maxpacket: 8 [ 293.376560][ T821] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 293.376608][ T821] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 293.376622][ T821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 293.376635][ T821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 293.413283][ T821] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 293.413313][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.413331][ T821] usb 4-1: Product: syz [ 293.413344][ T821] usb 4-1: Manufacturer: syz [ 293.413357][ T821] usb 4-1: SerialNumber: syz [ 293.479381][ T821] usb 4-1: config 0 descriptor?? [ 293.483906][ T9460] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 293.706223][ T821] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 293.871675][ T821] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input40 [ 293.982671][ T5953] hid-steam 0003:28DE:1142.0008: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 293.994173][ C1] powermate: config urb returned -71 [ 293.994357][ C1] powermate: config urb returned -71 [ 293.994525][ C1] powermate: config urb returned -71 [ 293.994712][ C1] powermate: config urb returned -71 [ 294.034394][ T821] usb 4-1: USB disconnect, device number 64 [ 294.034480][ C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 294.652583][ T5709] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 294.826015][ T5709] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.826042][ T5709] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 294.826077][ T5709] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 294.826097][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.831630][ T5709] usb 5-1: config 0 descriptor?? [ 294.856216][ T821] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 294.990354][ T5953] usb 3-1: USB disconnect, device number 60 [ 295.003346][ T821] usb 6-1: Using ep0 maxpacket: 32 [ 295.015830][ T821] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 295.015859][ T821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.032076][ T821] usb 6-1: config 0 descriptor?? [ 295.199681][ T5953] hid-steam 0003:28DE:1142.0007: Steam wireless receiver disconnected [ 295.306301][ T821] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 295.350116][ T821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 295.355090][ T821] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 295.355145][ T821] usb 6-1: media controller created [ 295.410977][ T821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.446665][ T9491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.447299][ T9491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.645076][ T9497] FAULT_INJECTION: forcing a failure. [ 295.645076][ T9497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.645101][ T9497] CPU: 1 UID: 0 PID: 9497 Comm: syz.3.1284 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 295.645115][ T9497] Tainted: [L]=SOFTLOCKUP [ 295.645119][ T9497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 295.645126][ T9497] Call Trace: [ 295.645131][ T9497] [ 295.645136][ T9497] dump_stack_lvl+0xe8/0x150 [ 295.645154][ T9497] should_fail_ex+0x46b/0x600 [ 295.645171][ T9497] _copy_from_iter+0x4ff/0x1670 [ 295.645195][ T9497] ? __alloc_skb+0x27d/0x7d0 [ 295.645208][ T9497] ? __pfx__copy_from_iter+0x10/0x10 [ 295.645222][ T9497] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 295.645233][ T9497] ? __alloc_skb+0x27d/0x7d0 [ 295.645247][ T9497] ? netlink_sendmsg+0x650/0xb40 [ 295.645262][ T9497] ? skb_put+0x11b/0x210 [ 295.645276][ T9497] netlink_sendmsg+0x6c0/0xb40 [ 295.645294][ T9497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.645310][ T9497] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 295.645323][ T9497] ? aa_sock_msg_perm+0x122/0x200 [ 295.645334][ T9497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.645348][ T9497] sock_sendmsg_nosec+0x112/0x150 [ 295.645360][ T9497] ____sys_sendmsg+0x55c/0x870 [ 295.645376][ T9497] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.645394][ T9497] ? import_iovec+0x73/0xa0 [ 295.645406][ T9497] ___sys_sendmsg+0x2a5/0x360 [ 295.645419][ T9497] ? __lock_acquire+0x6b5/0x2d10 [ 295.645433][ T9497] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.645463][ T9497] ? __fget_files+0x2a/0x420 [ 295.645472][ T9497] ? __fget_files+0x3a6/0x420 [ 295.645486][ T9497] __x64_sys_sendmsg+0x1c3/0x2a0 [ 295.645501][ T9497] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 295.645520][ T9497] ? __pfx_ksys_write+0x10/0x10 [ 295.645536][ T9497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.645547][ T9497] do_syscall_64+0x15f/0x560 [ 295.645560][ T9497] ? trace_irq_disable+0x3b/0x140 [ 295.645572][ T9497] ? clear_bhb_loop+0x40/0x90 [ 295.645584][ T9497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.645593][ T9497] RIP: 0033:0x7f9ab60ece59 [ 295.645603][ T9497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.645612][ T9497] RSP: 002b:00007f9ab433e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.645623][ T9497] RAX: ffffffffffffffda RBX: 00007f9ab6365fa0 RCX: 00007f9ab60ece59 [ 295.645631][ T9497] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 295.645638][ T9497] RBP: 00007f9ab433e090 R08: 0000000000000000 R09: 0000000000000000 [ 295.645644][ T9497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.645650][ T9497] R13: 00007f9ab6366038 R14: 00007f9ab6365fa0 R15: 00007ffe030b74d8 [ 295.645665][ T9497] [ 295.697668][ T821] az6027: usb out operation failed. (-71) [ 295.700779][ T821] az6027: usb out operation failed. (-71) [ 295.700796][ T821] stb0899_attach: Driver disabled by Kconfig [ 295.700805][ T821] az6027: no front-end attached [ 295.700805][ T821] [ 295.701196][ T821] az6027: usb out operation failed. (-71) [ 295.701209][ T821] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 295.717408][ T821] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input41 [ 295.724411][ T5953] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 295.736040][ T821] dvb-usb: schedule remote query interval to 400 msecs. [ 295.736076][ T821] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 295.756806][ T821] usb 6-1: USB disconnect, device number 21 [ 295.873399][ T5953] usb 3-1: Using ep0 maxpacket: 8 [ 295.876030][ T5953] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 295.876081][ T5953] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.876104][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 295.876127][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 295.885945][ T5953] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 295.885972][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.885990][ T5953] usb 3-1: Product: syz [ 295.886002][ T5953] usb 3-1: Manufacturer: syz [ 295.886015][ T5953] usb 3-1: SerialNumber: syz [ 295.917355][ T5953] usb 3-1: config 0 descriptor?? [ 295.918326][ T9493] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 296.128222][ T5953] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 296.200340][ T5953] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input42 [ 296.202939][ T821] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 296.465523][ C1] powermate: config urb returned -71 [ 296.465702][ C1] powermate: config urb returned -71 [ 296.465883][ C1] powermate: config urb returned -71 [ 296.466092][ C1] powermate: config urb returned -71 [ 296.466319][ C1] powermate: config urb returned -71 [ 296.467314][ T5610] usb 3-1: USB disconnect, device number 61 [ 296.467466][ C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 297.190963][ T3333] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.391858][ T5953] usb 5-1: USB disconnect, device number 30 [ 297.574503][ T5610] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 297.752787][ T5610] usb 6-1: Using ep0 maxpacket: 8 [ 297.760642][ T5610] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 297.760696][ T5610] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 297.760719][ T5610] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 297.760743][ T5610] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 297.819499][ T5610] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 297.826830][ T5610] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.826853][ T5610] usb 6-1: Product: syz [ 297.826865][ T5610] usb 6-1: Manufacturer: syz [ 297.826877][ T5610] usb 6-1: SerialNumber: syz [ 297.878209][ T5610] usb 6-1: config 0 descriptor?? [ 297.880670][ T9510] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 298.036585][ T3333] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.086732][ T5610] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 298.102685][ T5610] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input45 [ 298.471966][ C0] powermate: config urb returned -71 [ 298.472194][ C0] powermate: config urb returned -71 [ 298.472450][ C0] powermate: config urb returned -71 [ 298.472768][ T32] usb 6-1: USB disconnect, device number 22 [ 298.472900][ C0] powermate: config urb returned -71 [ 298.472948][ C0] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 298.895632][ T3333] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.263671][ T5627] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 299.385603][ T5708] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 299.411686][ T3333] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.425657][ T5627] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.425682][ T5627] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 299.425729][ T5627] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 299.425751][ T5627] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.480987][ T5627] usb 5-1: config 0 descriptor?? [ 299.540387][ T5708] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 299.540416][ T5708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.540435][ T5708] usb 6-1: Product: syz [ 299.540449][ T5708] usb 6-1: Manufacturer: syz [ 299.540461][ T5708] usb 6-1: SerialNumber: syz [ 299.552965][ T5708] usb 6-1: config 0 descriptor?? [ 299.574531][ T5708] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 299.614008][ T5708] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 299.614815][ T5708] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 299.614881][ T5708] usb 6-1: media controller created [ 299.635738][ T5708] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.689144][ T5627] Bluetooth: Can't get state to change to load ram patch err [ 299.689163][ T5627] Bluetooth: Loading patch file failed [ 299.689196][ T5627] ath3k 5-1:0.0: probe with driver ath3k failed with error -32 [ 299.715432][ T9536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.718067][ T9536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.728783][ T5709] usb 5-1: USB disconnect, device number 31 [ 299.772376][ T9539] FAULT_INJECTION: forcing a failure. [ 299.772376][ T9539] name failslab, interval 1, probability 0, space 0, times 0 [ 299.772540][ T9539] CPU: 1 UID: 0 PID: 9539 Comm: syz.5.1300 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 299.772565][ T9539] Tainted: [L]=SOFTLOCKUP [ 299.772571][ T9539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 299.772582][ T9539] Call Trace: [ 299.772589][ T9539] [ 299.772597][ T9539] dump_stack_lvl+0xe8/0x150 [ 299.772625][ T9539] should_fail_ex+0x46b/0x600 [ 299.772654][ T9539] should_failslab+0xa8/0x100 [ 299.772677][ T9539] __kmalloc_cache_noprof+0x84/0x690 [ 299.772699][ T9539] ? __i2c_smbus_xfer+0xb3f/0x2060 [ 299.772723][ T9539] __i2c_smbus_xfer+0xb3f/0x2060 [ 299.772754][ T9539] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 299.772790][ T9539] ? lockdep_hardirqs_on+0x7a/0x110 [ 299.772815][ T9539] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 299.772838][ T9539] ? rt_mutex_lock_nested+0x15c/0x1d0 [ 299.772868][ T9539] i2c_smbus_xfer+0x1f4/0x310 [ 299.772892][ T9539] i2cdev_ioctl_smbus+0x434/0x730 [ 299.772927][ T9539] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 299.772966][ T9539] i2cdev_ioctl+0x618/0x890 [ 299.772989][ T9539] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 299.773012][ T9539] ? __fget_files+0x2a/0x420 [ 299.773029][ T9539] ? __fget_files+0x3a6/0x420 [ 299.773051][ T9539] ? bpf_lsm_file_ioctl+0x9/0x20 [ 299.773075][ T9539] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 299.773098][ T9539] __se_sys_ioctl+0xff/0x170 [ 299.773119][ T9539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.773138][ T9539] do_syscall_64+0x15f/0x560 [ 299.773159][ T9539] ? trace_irq_disable+0x3b/0x140 [ 299.773177][ T9539] ? clear_bhb_loop+0x40/0x90 [ 299.773199][ T9539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.773217][ T9539] RIP: 0033:0x7f5b5d16ce59 [ 299.773234][ T9539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.773249][ T9539] RSP: 002b:00007f5b5b3c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.773269][ T9539] RAX: ffffffffffffffda RBX: 00007f5b5d3e5fa0 RCX: 00007f5b5d16ce59 [ 299.773283][ T9539] RDX: 0000200000000140 RSI: 0000000000000720 RDI: 0000000000000004 [ 299.773295][ T9539] RBP: 00007f5b5b3c6090 R08: 0000000000000000 R09: 0000000000000000 [ 299.773306][ T9539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.773318][ T9539] R13: 00007f5b5d3e6038 R14: 00007f5b5d3e5fa0 R15: 00007ffe17b80478 [ 299.773348][ T9539] [ 299.888632][ T5708] DVB: Unable to find symbol mt352_attach() [ 300.028928][ T5708] DVB: Unable to find symbol nxt6000_attach() [ 300.028945][ T5708] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 300.061545][ T5708] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input47 [ 300.089792][ T5708] dvb-usb: schedule remote query interval to 1000 msecs. [ 300.089808][ T5708] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 300.089818][ T5708] dvb-usb: bulk message failed: -22 (7/0) [ 300.089827][ T5708] dvb-usb: bulk message failed: -22 (7/0) [ 300.115385][ T5708] usb 6-1: USB disconnect, device number 23 [ 300.490930][ T5708] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 301.157662][ T3333] bridge_slave_1: left allmulticast mode [ 301.157697][ T3333] bridge_slave_1: left promiscuous mode [ 301.157980][ T3333] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.320192][ T3333] bridge_slave_0: left allmulticast mode [ 301.320227][ T3333] bridge_slave_0: left promiscuous mode [ 301.320585][ T3333] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.636665][ T5610] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 301.798464][ T5610] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.798490][ T5610] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 301.798539][ T5610] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 301.798561][ T5610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.854804][ T5610] usb 4-1: config 0 descriptor?? [ 302.058611][ T5610] Bluetooth: Can't get state to change to load ram patch err [ 302.058630][ T5610] Bluetooth: Loading patch file failed [ 302.058665][ T5610] ath3k 4-1:0.0: probe with driver ath3k failed with error -32 [ 302.076708][ T9587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.095242][ T9587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.115526][ T5610] usb 4-1: USB disconnect, device number 65 [ 302.391412][ T9597] netlink: 'syz.5.1318': attribute type 10 has an invalid length. [ 302.391433][ T9597] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1318'. [ 302.592588][ T821] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 302.742876][ T821] usb 3-1: Using ep0 maxpacket: 8 [ 302.744999][ T821] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 302.745074][ T821] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 302.745092][ T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 302.745116][ T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 302.747266][ T821] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 302.747293][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.747312][ T821] usb 3-1: Product: syz [ 302.747321][ T821] usb 3-1: Manufacturer: syz [ 302.747329][ T821] usb 3-1: SerialNumber: syz [ 302.751375][ T821] usb 3-1: config 0 descriptor?? [ 302.754319][ T9602] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 302.956671][ T821] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 302.960042][ T821] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input48 [ 302.976514][ T32] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 302.995398][ T3333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.138595][ T3333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.152544][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 303.163552][ T32] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 303.163581][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.163904][ T32] usb 4-1: Product: syz [ 303.163919][ T32] usb 4-1: Manufacturer: syz [ 303.163932][ T32] usb 4-1: SerialNumber: syz [ 303.250819][ T10] usb 3-1: USB disconnect, device number 62 [ 303.252097][ C1] powermate: config urb returned -71 [ 303.252116][ C1] powermate: usb_submit_urb(config) failed [ 303.252159][ C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 303.287288][ T3333] bond0 (unregistering): Released all slaves [ 303.298242][ T32] usb 4-1: config 0 descriptor?? [ 303.330931][ T32] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 303.456231][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 303.466732][ T9597] team0: entered promiscuous mode [ 303.466753][ T9597] team_slave_0: entered promiscuous mode [ 303.467071][ T9597] team_slave_1: entered promiscuous mode [ 303.467273][ T9597] team0: entered allmulticast mode [ 303.467287][ T9597] team_slave_0: entered allmulticast mode [ 303.467306][ T9597] team_slave_1: entered allmulticast mode [ 303.468309][ T9597] bridge0: port 3(team0) entered blocking state [ 303.468587][ T9597] bridge0: port 3(team0) entered disabled state [ 303.608329][ T9597] bridge0: port 3(team0) entered blocking state [ 303.608782][ T9597] bridge0: port 3(team0) entered forwarding state [ 303.702781][ T3333] tipc: Left network mode [ 304.354506][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1322'. [ 304.550671][ T32] usb 4-1: USB disconnect, device number 66 [ 305.078703][ T5283] 8021q: adding VLAN 0 to HW filter on device eth6 [ 305.544029][ T9660] 8021q: VLANs not supported on wg0 [ 305.790985][ T9671] vcan0: tx drop: invalid da for name 0x000000000e000000 [ 305.992595][ T3333] hsr_slave_0: left promiscuous mode [ 306.032603][ T3333] hsr_slave_1: left promiscuous mode [ 306.033298][ T3333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.033315][ T3333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.073412][ T3333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.073432][ T3333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.122709][ T32] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 306.205587][ T821] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 306.263284][ T3333] veth1_macvtap: left promiscuous mode [ 306.263381][ T3333] veth0_macvtap: left promiscuous mode [ 306.263649][ T3333] veth1_vlan: left promiscuous mode [ 306.263825][ T3333] veth0_vlan: left promiscuous mode [ 306.288345][ T32] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 306.288392][ T32] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 306.288419][ T32] usb 6-1: config 0 interface 0 has no altsetting 0 [ 306.288465][ T32] usb 6-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 306.288487][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.346976][ T32] usb 6-1: config 0 descriptor?? [ 306.396354][ T821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.396384][ T821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.396465][ T821] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 306.396487][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.448270][ T821] usb 4-1: config 0 descriptor?? [ 306.529172][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1339'. [ 306.842329][ T32] lenovo 0003:17EF:60EE.0009: collection stack underflow [ 306.842363][ T32] lenovo 0003:17EF:60EE.0009: item 0 2 0 12 parsing failed [ 306.846126][ T32] lenovo 0003:17EF:60EE.0009: hid_parse failed [ 306.846528][ T32] lenovo 0003:17EF:60EE.0009: probe with driver lenovo failed with error -22 [ 306.877164][ T9678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.877716][ T9678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.151453][ T821] hid-steam 0003:28DE:1142.000A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 307.203831][ T821] hid-steam 0003:28DE:1142.000A: Steam wireless receiver connected [ 307.287401][ T821] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 307.318680][ T9699] overlayfs: failed to resolve './file2': -2 [ 307.402608][ T32] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 307.552520][ T32] usb 5-1: Using ep0 maxpacket: 8 [ 307.555920][ T32] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 307.555945][ T32] usb 5-1: config 0 has no interface number 0 [ 307.555985][ T32] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 307.556008][ T32] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 307.556031][ T32] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 307.556055][ T32] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 307.556091][ T32] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 307.556111][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.654675][ T32] usb 5-1: config 0 descriptor?? [ 307.711809][ T32] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 307.926316][ T5708] usb 5-1: USB disconnect, device number 32 [ 307.960850][ T5708] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 307.962661][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 308.123500][ T10] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 308.124817][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.124839][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.152516][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.152542][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.154875][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.154897][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.156285][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.156305][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.203428][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.203453][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.208777][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.208800][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.240776][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.240802][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.251843][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.251868][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.256947][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 308.256973][ T10] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 308.256992][ T10] usb 3-1: Product: syz [ 308.257004][ T10] usb 3-1: Manufacturer: syz [ 308.257018][ T10] usb 3-1: SerialNumber: syz [ 308.267268][ T10] usb 3-1: config 0 descriptor?? [ 308.278036][ T10] yurex 3-1:0.0: Could not find endpoints [ 308.443679][ T3333] team0 (unregistering): Port device team_slave_1 removed [ 308.492641][ T32] usb 4-1: reset high-speed USB device number 67 using dummy_hcd [ 308.521935][ T10] usb 3-1: USB disconnect, device number 63 [ 308.627199][ T3333] team0 (unregistering): Port device team_slave_0 removed [ 309.066366][ T5283] 8021q: adding VLAN 0 to HW filter on device eth7 [ 309.100046][ T10] usb 6-1: USB disconnect, device number 24 [ 309.983148][ T5953] usb 4-1: USB disconnect, device number 67 [ 310.023107][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 310.065962][ T5953] hid-steam 0003:28DE:1142.000A: Steam wireless receiver disconnected [ 310.165181][ T10] usb 5-1: device descriptor read/64, error -71 [ 310.435577][ T5953] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 310.462699][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 310.572609][ T5953] usb 4-1: device descriptor read/64, error -71 [ 310.602726][ T10] usb 5-1: device descriptor read/64, error -71 [ 310.713669][ T10] usb usb5-port1: attempt power cycle [ 310.779266][ T9758] FAULT_INJECTION: forcing a failure. [ 310.779266][ T9758] name failslab, interval 1, probability 0, space 0, times 0 [ 310.779300][ T9758] CPU: 0 UID: 0 PID: 9758 Comm: syz.5.1356 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 310.779325][ T9758] Tainted: [L]=SOFTLOCKUP [ 310.779331][ T9758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 310.779341][ T9758] Call Trace: [ 310.779348][ T9758] [ 310.779356][ T9758] dump_stack_lvl+0xe8/0x150 [ 310.779382][ T9758] should_fail_ex+0x46b/0x600 [ 310.779418][ T9758] should_failslab+0xa8/0x100 [ 310.779441][ T9758] kmem_cache_alloc_noprof+0x87/0x680 [ 310.779460][ T9758] ? skb_clone+0x212/0x3a0 [ 310.779485][ T9758] skb_clone+0x212/0x3a0 [ 310.779510][ T9758] __netlink_deliver_tap+0x424/0x8b0 [ 310.779536][ T9758] ? netlink_deliver_tap+0x2e/0x1b0 [ 310.779551][ T9758] netlink_deliver_tap+0x19c/0x1b0 [ 310.779566][ T9758] netlink_unicast+0x754/0x920 [ 310.779584][ T9758] netlink_sendmsg+0x813/0xb40 [ 310.779603][ T9758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.779619][ T9758] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 310.779635][ T9758] ? aa_sock_msg_perm+0x122/0x200 [ 310.779649][ T9758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.779663][ T9758] sock_sendmsg_nosec+0x112/0x150 [ 310.779675][ T9758] ____sys_sendmsg+0x55c/0x870 [ 310.779693][ T9758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.779712][ T9758] ? import_iovec+0x73/0xa0 [ 310.779724][ T9758] ___sys_sendmsg+0x2a5/0x360 [ 310.779738][ T9758] ? __lock_acquire+0x6b5/0x2d10 [ 310.779753][ T9758] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.779784][ T9758] ? __fget_files+0x2a/0x420 [ 310.779793][ T9758] ? __fget_files+0x3a6/0x420 [ 310.779808][ T9758] __x64_sys_sendmsg+0x1c3/0x2a0 [ 310.779823][ T9758] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 310.779842][ T9758] ? __pfx_ksys_write+0x10/0x10 [ 310.779858][ T9758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.779869][ T9758] do_syscall_64+0x15f/0x560 [ 310.779886][ T9758] ? trace_irq_disable+0x3b/0x140 [ 310.779898][ T9758] ? clear_bhb_loop+0x40/0x90 [ 310.779910][ T9758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.779920][ T9758] RIP: 0033:0x7f5b5d16ce59 [ 310.779931][ T9758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.779940][ T9758] RSP: 002b:00007f5b5b3c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.779951][ T9758] RAX: ffffffffffffffda RBX: 00007f5b5d3e5fa0 RCX: 00007f5b5d16ce59 [ 310.779959][ T9758] RDX: 0000000020004800 RSI: 0000200000000300 RDI: 0000000000000003 [ 310.779966][ T9758] RBP: 00007f5b5b3c6090 R08: 0000000000000000 R09: 0000000000000000 [ 310.779973][ T9758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.779979][ T9758] R13: 00007f5b5d3e6038 R14: 00007f5b5d3e5fa0 R15: 00007ffe17b80478 [ 310.779994][ T9758] [ 310.812557][ T5953] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 310.825163][ T5283] 8021q: adding VLAN 0 to HW filter on device eth8 [ 310.898811][ T3333] IPVS: stop unused estimator thread 0... [ 311.011335][ T5953] usb 4-1: device descriptor read/64, error -71 [ 311.067728][ T9764] FAULT_INJECTION: forcing a failure. [ 311.067728][ T9764] name failslab, interval 1, probability 0, space 0, times 0 [ 311.067762][ T9764] CPU: 0 UID: 0 PID: 9764 Comm: syz.2.1358 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 311.067787][ T9764] Tainted: [L]=SOFTLOCKUP [ 311.067793][ T9764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 311.067804][ T9764] Call Trace: [ 311.067811][ T9764] [ 311.067819][ T9764] dump_stack_lvl+0xe8/0x150 [ 311.067843][ T9764] should_fail_ex+0x46b/0x600 [ 311.067871][ T9764] should_failslab+0xa8/0x100 [ 311.067893][ T9764] kmem_cache_alloc_noprof+0x87/0x680 [ 311.067913][ T9764] ? skb_clone+0x212/0x3a0 [ 311.067941][ T9764] skb_clone+0x212/0x3a0 [ 311.067967][ T9764] __netlink_deliver_tap+0x424/0x8b0 [ 311.068001][ T9764] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.068026][ T9764] netlink_deliver_tap+0x19c/0x1b0 [ 311.068050][ T9764] netlink_unicast+0x754/0x920 [ 311.068081][ T9764] netlink_sendmsg+0x813/0xb40 [ 311.068120][ T9764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.068146][ T9764] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 311.068170][ T9764] ? aa_sock_msg_perm+0x122/0x200 [ 311.068188][ T9764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.068211][ T9764] sock_sendmsg_nosec+0x112/0x150 [ 311.068232][ T9764] ____sys_sendmsg+0x55c/0x870 [ 311.068264][ T9764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.068294][ T9764] ? import_iovec+0x73/0xa0 [ 311.068317][ T9764] ___sys_sendmsg+0x2a5/0x360 [ 311.068338][ T9764] ? __lock_acquire+0x6b5/0x2d10 [ 311.068362][ T9764] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.068412][ T9764] ? __fget_files+0x2a/0x420 [ 311.068428][ T9764] ? __fget_files+0x3a6/0x420 [ 311.068455][ T9764] __x64_sys_sendmsg+0x1c3/0x2a0 [ 311.068480][ T9764] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.068507][ T9764] ? __pfx_ksys_write+0x10/0x10 [ 311.068534][ T9764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.068553][ T9764] do_syscall_64+0x15f/0x560 [ 311.068576][ T9764] ? trace_irq_disable+0x3b/0x140 [ 311.068596][ T9764] ? clear_bhb_loop+0x40/0x90 [ 311.068617][ T9764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.068636][ T9764] RIP: 0033:0x7f525480ce59 [ 311.068652][ T9764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.068667][ T9764] RSP: 002b:00007f5252a66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.068686][ T9764] RAX: ffffffffffffffda RBX: 00007f5254a85fa0 RCX: 00007f525480ce59 [ 311.068699][ T9764] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000010 [ 311.068711][ T9764] RBP: 00007f5252a66090 R08: 0000000000000000 R09: 0000000000000000 [ 311.068722][ T9764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.068732][ T9764] R13: 00007f5254a86038 R14: 00007f5254a85fa0 R15: 00007ffd1cb2d748 [ 311.068760][ T9764] [ 311.075437][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 311.094117][ T10] usb 5-1: device descriptor read/8, error -71 [ 311.144312][ T5953] usb usb4-port1: attempt power cycle [ 311.414241][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 311.447446][ T10] usb 5-1: device descriptor read/8, error -71 [ 311.563479][ T10] usb usb5-port1: unable to enumerate USB device [ 311.632981][ T5953] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 311.653115][ T5953] usb 4-1: device descriptor read/8, error -71 [ 311.892748][ T5953] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 311.914594][ T5953] usb 4-1: device descriptor read/8, error -71 [ 311.942509][ T32] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 312.024451][ T5953] usb usb4-port1: unable to enumerate USB device [ 312.092608][ T32] usb 6-1: Using ep0 maxpacket: 8 [ 312.096712][ T32] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 312.096781][ T32] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 312.130310][ T32] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 312.130340][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.130359][ T32] usb 6-1: Product: syz [ 312.130372][ T32] usb 6-1: Manufacturer: syz [ 312.130385][ T32] usb 6-1: SerialNumber: syz [ 312.142799][ T32] usb 6-1: config 0 descriptor?? [ 312.151068][ T32] powermate 6-1:0.0: probe with driver powermate failed with error -22 [ 312.764282][ T9797] FAULT_INJECTION: forcing a failure. [ 312.764282][ T9797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.764317][ T9797] CPU: 1 UID: 0 PID: 9797 Comm: syz.4.1367 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 312.764342][ T9797] Tainted: [L]=SOFTLOCKUP [ 312.764349][ T9797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 312.764361][ T9797] Call Trace: [ 312.764369][ T9797] [ 312.764377][ T9797] dump_stack_lvl+0xe8/0x150 [ 312.764405][ T9797] should_fail_ex+0x46b/0x600 [ 312.764433][ T9797] _copy_to_user+0x31/0xb0 [ 312.764457][ T9797] simple_read_from_buffer+0xe1/0x170 [ 312.764489][ T9797] proc_fail_nth_read+0x1be/0x230 [ 312.764513][ T9797] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.764536][ T9797] ? rw_verify_area+0x2ac/0x4e0 [ 312.764556][ T9797] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.764578][ T9797] vfs_read+0x212/0xa80 [ 312.764605][ T9797] ? __pfx_vfs_read+0x10/0x10 [ 312.764628][ T9797] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 312.764653][ T9797] ? lockdep_hardirqs_on+0x7a/0x110 [ 312.764680][ T9797] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 312.764703][ T9797] ? mutex_lock_nested+0x152/0x1d0 [ 312.764720][ T9797] ? fdget_pos+0x252/0x320 [ 312.764746][ T9797] ksys_read+0x156/0x270 [ 312.764768][ T9797] ? __pfx_ksys_read+0x10/0x10 [ 312.764788][ T9797] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 312.764817][ T9797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.764837][ T9797] do_syscall_64+0x15f/0x560 [ 312.764859][ T9797] ? trace_irq_disable+0x3b/0x140 [ 312.764879][ T9797] ? clear_bhb_loop+0x40/0x90 [ 312.764901][ T9797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.764919][ T9797] RIP: 0033:0x7f72b3acd68e [ 312.764936][ T9797] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 312.764952][ T9797] RSP: 002b:00007f72b1d5dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.764970][ T9797] RAX: ffffffffffffffda RBX: 00007f72b1d5e6c0 RCX: 00007f72b3acd68e [ 312.764984][ T9797] RDX: 000000000000000f RSI: 00007f72b1d5e0a0 RDI: 0000000000000004 [ 312.765003][ T9797] RBP: 00007f72b1d5e090 R08: 0000000000000000 R09: 0000000000000000 [ 312.765014][ T9797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.765025][ T9797] R13: 00007f72b3d86038 R14: 00007f72b3d85fa0 R15: 00007ffe17b3e568 [ 312.765055][ T9797] [ 313.571562][ T9819] usb usb8: usbfs: process 9819 (syz.2.1375) did not claim interface 0 before use [ 313.734750][ T9825] loop7: detected capacity change from 0 to 7 [ 313.892678][ T5799] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 313.914094][ T9825] Dev loop7: unable to read RDB block 7 [ 313.914150][ T9825] loop7: unable to read partition table [ 313.914278][ T9825] loop7: partition table beyond EOD, truncated [ 313.914303][ T9825] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 314.013364][ T5636] [ 314.013375][ T5636] ====================================================== [ 314.013384][ T5636] WARNING: possible circular locking dependency detected [ 314.013399][ T5636] syzkaller #0 Tainted: G L [ 314.013409][ T5636] ------------------------------------------------------ [ 314.013417][ T5636] udevd/5636 is trying to acquire lock: [ 314.013428][ T5636] ffff88802cb0e938 ((wq_completion)loop7){+.+.}-{0:0}, at: touch_wq_lockdep_map+0xb5/0x180 [ 314.013473][ T5636] [ 314.013473][ T5636] but task is already holding lock: [ 314.013480][ T5636] ffff8880269a34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1af/0x660 [ 314.013522][ T5636] [ 314.013522][ T5636] which lock already depends on the new lock. [ 314.013522][ T5636] [ 314.013529][ T5636] [ 314.013529][ T5636] the existing dependency chain (in reverse order) is: [ 314.013537][ T5636] [ 314.013537][ T5636] -> #5 (&disk->open_mutex){+.+.}-{4:4}: [ 314.013560][ T5636] mutex_lock_nested+0x5a/0x1d0 [ 314.013578][ T5636] bdev_open+0xe0/0xcc0 [ 314.013597][ T5636] bdev_file_open_by_dev+0x1be/0x240 [ 314.013618][ T5636] swsusp_check+0x56/0x490 [ 314.013635][ T5636] software_resume+0x51/0x4c0 [ 314.013657][ T5636] resume_store+0x333/0x4f0 [ 314.013671][ T5636] kernfs_fop_write_iter+0x3b0/0x540 [ 314.013693][ T5636] vfs_write+0x629/0xba0 [ 314.013710][ T5636] ksys_write+0x156/0x270 [ 314.013726][ T5636] do_syscall_64+0x15f/0x560 [ 314.013746][ T5636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.013761][ T5636] [ 314.013761][ T5636] -> #4 (system_transition_mutex){+.+.}-{4:4}: [ 314.013781][ T5636] mutex_lock_nested+0x5a/0x1d0 [ 314.013796][ T5636] lock_system_sleep+0x49/0x70 [ 314.013812][ T5636] resume_store+0x2ff/0x4f0 [ 314.013824][ T5636] kernfs_fop_write_iter+0x3b0/0x540 [ 314.013842][ T5636] vfs_write+0x629/0xba0 [ 314.013858][ T5636] ksys_write+0x156/0x270 [ 314.013874][ T5636] do_syscall_64+0x15f/0x560 [ 314.013894][ T5636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.013910][ T5636] [ 314.013910][ T5636] -> #3 (&of->mutex){+.+.}-{4:4}: [ 314.013933][ T5636] mutex_lock_nested+0x5a/0x1d0 [ 314.013948][ T5636] kernfs_seq_start+0x5c/0x420 [ 314.013969][ T5636] traverse+0x164/0x580 [ 314.013985][ T5636] seq_read_iter+0xd09/0xe20 [ 314.014003][ T5636] lo_rw_aio+0xc80/0xf00 [ 314.014020][ T5636] loop_process_work+0x92a/0x11b0 [ 314.014037][ T5636] process_one_work+0x98b/0x1630 [ 314.014056][ T5636] worker_thread+0xb49/0x1140 [ 314.014076][ T5636] kthread+0x388/0x470 [ 314.014099][ T5636] ret_from_fork+0x514/0xb70 [ 314.014115][ T5636] ret_from_fork_asm+0x1a/0x30 [ 314.014133][ T5636] [ 314.014133][ T5636] -> #2 (&p->lock){+.+.}-{4:4}: [ 314.014154][ T5636] mutex_lock_nested+0x5a/0x1d0 [ 314.014168][ T5636] seq_read_iter+0xb8/0xe20 [ 314.014187][ T5636] lo_rw_aio+0xc80/0xf00 [ 314.014202][ T5636] loop_process_work+0x92a/0x11b0 [ 314.014220][ T5636] process_one_work+0x98b/0x1630 [ 314.014238][ T5636] worker_thread+0xb49/0x1140 [ 314.014258][ T5636] kthread+0x388/0x470 [ 314.014274][ T5636] ret_from_fork+0x514/0xb70 [ 314.014291][ T5636] ret_from_fork_asm+0x1a/0x30 [ 314.014309][ T5636] [ 314.014309][ T5636] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 314.014333][ T5636] process_one_work+0x8d7/0x1630 [ 314.014352][ T5636] worker_thread+0xb49/0x1140 [ 314.014371][ T5636] kthread+0x388/0x470 [ 314.014386][ T5636] ret_from_fork+0x514/0xb70 [ 314.014403][ T5636] ret_from_fork_asm+0x1a/0x30 [ 314.014421][ T5636] [ 314.014421][ T5636] -> #0 ((wq_completion)loop7){+.+.}-{0:0}: [ 314.014443][ T5636] __lock_acquire+0x15a5/0x2d10 [ 314.014461][ T5636] lock_acquire+0x106/0x350 [ 314.014476][ T5636] touch_wq_lockdep_map+0xcb/0x180 [ 314.014491][ T5636] __flush_workqueue+0x14b/0x14f0 [ 314.014510][ T5636] drain_workqueue+0xd3/0x390 [ 314.014524][ T5636] lo_release+0x287/0x8f0 [ 314.014542][ T5636] bdev_release+0x541/0x660 [ 314.014562][ T5636] blkdev_release+0x15/0x20 [ 314.014583][ T5636] __fput+0x461/0xa70 [ 314.014597][ T5636] fput_close_sync+0x11f/0x240 [ 314.014611][ T5636] __x64_sys_close+0x7e/0x110 [ 314.014626][ T5636] do_syscall_64+0x15f/0x560 [ 314.014645][ T5636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.014660][ T5636] [ 314.014660][ T5636] other info that might help us debug this: [ 314.014660][ T5636] [ 314.014666][ T5636] Chain exists of: [ 314.014666][ T5636] (wq_completion)loop7 --> system_transition_mutex --> &disk->open_mutex [ 314.014666][ T5636] [ 314.014695][ T5636] Possible unsafe locking scenario: [ 314.014695][ T5636] [ 314.014701][ T5636] CPU0 CPU1 [ 314.014707][ T5636] ---- ---- [ 314.014714][ T5636] lock(&disk->open_mutex); [ 314.014725][ T5636] lock(system_transition_mutex); [ 314.014738][ T5636] lock(&disk->open_mutex); [ 314.014749][ T5636] lock((wq_completion)loop7); [ 314.014761][ T5636] [ 314.014761][ T5636] *** DEADLOCK *** [ 314.014761][ T5636] [ 314.014767][ T5636] 1 lock held by udevd/5636: [ 314.014778][ T5636] #0: ffff8880269a34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1af/0x660 [ 314.014821][ T5636] [ 314.014821][ T5636] stack backtrace: [ 314.014834][ T5636] CPU: 1 UID: 0 PID: 5636 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 314.014858][ T5636] Tainted: [L]=SOFTLOCKUP [ 314.014864][ T5636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 314.014875][ T5636] Call Trace: [ 314.014883][ T5636] [ 314.014891][ T5636] dump_stack_lvl+0xe8/0x150 [ 314.014911][ T5636] print_circular_bug+0x2e1/0x300 [ 314.014936][ T5636] check_noncircular+0x12e/0x150 [ 314.014960][ T5636] __lock_acquire+0x15a5/0x2d10 [ 314.014979][ T5636] ? lockdep_hardirqs_on+0x7a/0x110 [ 314.015004][ T5636] ? synchronize_rcu_normal+0x1cf/0x330 [ 314.015027][ T5636] ? __pfx_synchronize_rcu_normal+0x10/0x10 [ 314.015048][ T5636] ? find_get_entries+0x712/0x830 [ 314.015068][ T5636] ? __pfx_filemap_get_entry+0x10/0x10 [ 314.015087][ T5636] ? touch_wq_lockdep_map+0xb5/0x180 [ 314.015108][ T5636] lock_acquire+0x106/0x350 [ 314.015126][ T5636] ? touch_wq_lockdep_map+0xb5/0x180 [ 314.015146][ T5636] ? touch_wq_lockdep_map+0xb5/0x180 [ 314.015161][ T5636] touch_wq_lockdep_map+0xcb/0x180 [ 314.015177][ T5636] ? touch_wq_lockdep_map+0xb5/0x180 [ 314.015192][ T5636] __flush_workqueue+0x14b/0x14f0 [ 314.015208][ T5636] ? do_raw_spin_lock+0x12b/0x2f0 [ 314.015230][ T5636] ? __pfx___flush_workqueue+0x10/0x10 [ 314.015254][ T5636] drain_workqueue+0xd3/0x390 [ 314.015272][ T5636] lo_release+0x287/0x8f0 [ 314.015292][ T5636] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 314.015334][ T5636] ? __pfx_lo_release+0x10/0x10 [ 314.015352][ T5636] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 314.015369][ T5636] ? reacquire_held_locks+0x104/0x190 [ 314.015390][ T5636] ? rt_spin_lock+0x1e0/0x400 [ 314.015407][ T5636] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 314.015424][ T5636] ? rt_spin_unlock+0x14f/0x200 [ 314.015443][ T5636] ? rt_spin_unlock+0x160/0x200 [ 314.015463][ T5636] ? __pfx_lo_release+0x10/0x10 [ 314.015482][ T5636] bdev_release+0x541/0x660 [ 314.015512][ T5636] ? __pfx_blkdev_release+0x10/0x10 [ 314.015534][ T5636] blkdev_release+0x15/0x20 [ 314.015555][ T5636] __fput+0x461/0xa70 [ 314.015574][ T5636] fput_close_sync+0x11f/0x240 [ 314.015590][ T5636] ? __pfx_fput_close_sync+0x10/0x10 [ 314.015607][ T5636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.015626][ T5636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.015643][ T5636] __x64_sys_close+0x7e/0x110 [ 314.015660][ T5636] do_syscall_64+0x15f/0x560 [ 314.015682][ T5636] ? clear_bhb_loop+0x40/0x90 [ 314.015700][ T5636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.015716][ T5636] RIP: 0033:0x7fbeef326407 [ 314.015732][ T5636] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 314.015747][ T5636] RSP: 002b:00007ffd7e916e10 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 314.015766][ T5636] RAX: ffffffffffffffda RBX: 00007fbeef238880 RCX: 00007fbeef326407 [ 314.015779][ T5636] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 314.015790][ T5636] RBP: 00007fbeef2386e8 R08: 0000000000000000 R09: 0000000000000000 [ 314.015802][ T5636] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 314.015813][ T5636] R13: 000055ebb39a1190 R14: 0000000000000008 R15: 000055ebb39a7fa0 [ 314.015831][ T5636] [ 314.022873][ T5799] usb 5-1: device descriptor read/64, error -71 [ 314.332518][ T5799] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 314.492494][ T5799] usb 5-1: device descriptor read/64, error -71 [ 314.622486][ T5799] usb usb5-port1: attempt power cycle [ 314.720855][ T32] usb 6-1: USB disconnect, device number 25 [ 315.052537][ T5799] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 315.074002][ T5799] usb 5-1: device descriptor read/8, error -71 [ 315.322512][ T5799] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 315.343445][ T5799] usb 5-1: device descriptor read/8, error -71 [ 315.452666][ T5799] usb usb5-port1: unable to enumerate USB device [ 317.183882][ T1337] ieee802154 phy1 wpan1: encryption failed: -22