last executing test programs: 3m13.86464851s ago: executing program 2 (id=191): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000340)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f37e9140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe955, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x4e24, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) 3m13.055371402s ago: executing program 2 (id=194): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0xd, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x337, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f00000005c0)="50fbdf12", 0x4, 0x44, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000380)="01a4acc7cf", 0x5, 0x800, 0x0, 0x0) 3m13.003848246s ago: executing program 2 (id=195): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x14) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r2, 0x0, 0x0, 0x1001f0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(&(0x7f0000000100)=ANY=[@ANYBLOB='#/yz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./file1\x00', 0x101000, 0x4) copy_file_range(r3, 0x0, r1, 0x0, 0x20000000008, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3m12.816139514s ago: executing program 2 (id=196): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x204) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3m10.591909329s ago: executing program 2 (id=206): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="1401000027000100000000000000000001"], 0x114}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mbind(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x4001, 0x0, 0x4, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000100)) ioctl$NS_GET_NSTYPE(r2, 0x8004b709, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x218}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 3m9.386177252s ago: executing program 2 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fchdir(0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r1, r3, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000000c0)={0x0, r3}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xe9) ppoll(&(0x7f0000003880)=[{0xffffffffffffffff, 0x12}], 0x1, &(0x7f0000003900)={0x0, 0x989680}, 0x0, 0x0) 3m9.169943523s ago: executing program 32 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fchdir(0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r1, r3, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000000c0)={0x0, r3}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xe9) ppoll(&(0x7f0000003880)=[{0xffffffffffffffff, 0x12}], 0x1, &(0x7f0000003900)={0x0, 0x989680}, 0x0, 0x0) 6.668817373s ago: executing program 0 (id=1018): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}]}) 6.603058288s ago: executing program 0 (id=1020): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x327b80, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000002140)=0x20) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='nsdelegate', &(0x7f0000000140)='&)\x00', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="0f01c50f01c4f3d8e90f09b815013e66660f1ee23e34eb66c9648ee866b99e000040660f3880a22600b85f008ec8", 0x2e}], 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0xfffffffffffffffd, 0x100) creat(0x0, 0x0) r3 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000002c0)={0xa, @vbi={0x3, 0x3, 0x0, 0x9280c8ffd565c630, [0x54, 0xfeffffff], [0x6, 0x2], 0x13a}}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) 6.230704625s ago: executing program 0 (id=1025): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0xa0000) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0xa, 0x1, 0x4, {0x740, 0x4, 0x8, 0xfff}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2040) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="200100004000"], 0x0}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000040)=0xb) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newsa={0xf0, 0x1a, 0x633, 0x0, 0x5dfdbfd, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, @in6=@mcast1, 0x0, 0x4000, 0x4e23, 0x8001, 0x0, 0x20}, {@in=@local, 0x200, 0x32}, @in=@empty, {0x323, 0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x92be}, {0x0, 0x40000, 0x0, 0x3}, {0xfffffffb, 0xfffffbff, 0xca09}, 0x70bd29, 0x3502, 0x2, 0x1, 0x0, 0x10}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="010000001e00210000000000000000000700000005000000000000000a00020077a9e20000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="6f733249b67b2d28292f2e7d2b00"]) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0x30000004}) epoll_pwait(r8, &(0x7f0000000240)=[{}], 0x1, 0xfffffffb, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 5.231525156s ago: executing program 1 (id=1031): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SET_MM(0x46, 0x1cee7696426a4fe8, &(0x7f0000ffe000/0x2000)=nil) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 5.100659657s ago: executing program 1 (id=1033): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xfffb, 0x2}, 0x6) write$bt_hci(r1, 0x0, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001f0001"], 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x10) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000002500)=[{0x0}], 0x1}, 0x40000000) creat(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xae) 4.99041983s ago: executing program 1 (id=1034): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000001040)={0x2, 0x4e21, @local}, 0x13) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, 0x0, 0x815) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, &(0x7f0000000280)={0x40, 0x22, 0x2, {0x2, 0x21}}, 0x0, &(0x7f00000004c0)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x9, "9660f5e1"}, @main=@item_4={0x3, 0x0, 0x9, "d091ba0f"}]}}, 0x0}, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x2}}) 4.05382592s ago: executing program 4 (id=1037): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}]}) 3.976667635s ago: executing program 3 (id=1038): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000b40)={{0x12, 0x1, 0x201, 0xd6, 0x62, 0xb, 0x40, 0x2040, 0x9941, 0x5e8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x6, 0x5, 0x110, 0x9, "", [{{0x9, 0x4, 0xc5, 0x2, 0x0, 0x15, 0x4, 0x75, 0x3}}, {{0x9, 0x4, 0xa0, 0x6, 0x0, 0x9, 0x89, 0x54, 0x6}}]}}]}}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000011000100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 3.862964654s ago: executing program 4 (id=1039): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002180)=""/82, 0xfffffffffffffe6f) madvise(&(0x7f000023f000/0x2000)=nil, 0x2000, 0x17) 3.718813196s ago: executing program 4 (id=1040): r0 = syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x400001, 0x0) pidfd_send_signal(r2, 0x3a, &(0x7f0000000040)={0x7, 0x2, 0x8}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x44, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3ff, 0x5f}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1ff}, @NL80211_ATTR_PMK={0x14, 0xfe, "52f2c65c3ab8368ec7c5724b21f43a2f"}]}, 0x44}, 0x1, 0x0, 0x0, 0x80080a4}, 0x20000000) landlock_restrict_self(r1, 0x0) process_vm_readv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/70, 0x46}], 0x1, &(0x7f0000002ac0)=[{&(0x7f0000001880)=""/4096, 0x1000}], 0x1, 0x0) 3.598810634s ago: executing program 4 (id=1041): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x18, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000080)=""/162) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d"], 0x0) syz_usb_disconnect(r2) syz_usb_disconnect(r2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') syz_usb_connect$midi(0x1, 0x5f, &(0x7f0000002580)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0xd, 0xc0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x2, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x6, 0x3f}, @midi_out_jack={0xb, 0x24, 0x3, 0x3, 0x3, 0x2, [{0x6, 0x9}, {0x7, 0x1}], 0x1}, @ms_header={0x7, 0x24, 0x1, 0xff16, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x7, 0x6}], [{{0x9, 0x5, 0xf, 0xc, 0x8, 0x7, 0x6, 0x8, {0x14, 0x25, 0x1, 0x10, "469aaff43c2f24ee002cad43cb8f9692"}}}]}}}}}]}}, &(0x7f0000002780)={0xa, &(0x7f0000002600)={0xa, 0x6, 0x341, 0x1, 0x7, 0x28, 0x8, 0x4}, 0x10, &(0x7f0000002640)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x0, 0x31, 0x1, 0x1, 0x4, 0x8}]}, 0x1, [{0xfb, &(0x7f0000002680)=@string={0xfb, 0x3, "2d1982ef54b32b165e69ce3265cc91c2bbb65edc392796ce8fd2139af203073cf4cc0c5705d5ae3f4dba49c95d789b84575405a491592ac866bb13c1a3c71b96687f8611dee12a9bf2e117d2c57cce64026de2924b9cc516d345f5e300613a809f47e54f8511e854c947d5cf257cd4a2e62c94de35aa9bf1c2df0d8274f8ae326ad8b59b7a0d910e69f0266aad4544205f238a75742bcdb49d010b3c5a9c6aab017765a50eddd99eebd8260d313035cd702768465ca56b3ea1521ecd418b89cd6a1f400f9a5bdc3dc33755da668242357de74dd47858a086d11da1b61912aeba0ca76b1ee73bcad1f23e6c1e8ecf8d786b12fc9084c0f3500d"}}]}) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:11 2', 0x1b) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r3, 0x40786e88, &(0x7f0000002500)={{&(0x7f0000002200)=[{0x80000000000008, 0x200, 0x700000000002, {0x3, 0x3}, 0x1, 0x1, 0xffffffff}, {0x1, 0x2, 0x1, {0x0, 0x955}, 0x9, 0x1800000, 0x4}, {0x4, 0x2, 0x1, {0x4, 0xffffffff}, 0x5, 0x2, 0x9}, {0x2, 0x22, 0x10, {0x5, 0x5}, 0xd94, 0x3ca2}, {0x0, 0x2, 0x1b3a9e05, {0x4, 0x10}, 0x5, 0x10001, 0x2}, {0x7, 0x8, 0x4, {0x1, 0x10001}, 0x1, 0x4, 0x34}, {0x0, 0x1, 0x9, {0x0, 0x2}, 0x7, 0xffffffffffffe96f, 0x10000}, {0xa9f8, 0x9, 0x7, {0x3, 0x7c}, 0x0, 0xffffffff, 0x4d5}], 0x8, 0x40, 0x4, 0x2}, {&(0x7f0000002400), 0x0, 0x10, 0x2, 0x2}, {&(0x7f0000002440)=[0x5a, 0x4, 0x80000000], 0x3, 0x8, 0x60, 0x4}, {&(0x7f0000002480)=[{0x0, 0x0, 0x200000000081, 0x1, 0x1}], 0x1, 0x28, 0x21, 0xb1}, {&(0x7f00000024c0), 0x0, 0x8, 0xc0, 0x40000ffff}}) read$FUSE(r4, &(0x7f00000001c0)={0x2020}, 0x2020) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="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"], 0x159c}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000780)) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000002400)=0xfffffffe) r7 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x4, &(0x7f0000000b00)=ANY=[]) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0x9}}, './file0\x00'}) ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f00000027c0)) 3.570092821s ago: executing program 0 (id=1042): socket(0x21, 0x2, 0xa) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) close(0x3) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000500)=0xffff0080) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0xa, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}}, 0xff47, 0x3}, &(0x7f0000000240)=0x90) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) socket$kcm(0x2, 0xa, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280", @ANYRES16], 0xc4}}, 0x0) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000000), 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x21, 0x3, 0x80000000002) 2.957580708s ago: executing program 1 (id=1043): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x3b) accept$alg(r0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e945fff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES16=r1, @ANYRES16=r2], 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000805a, 0x3}) 2.278799231s ago: executing program 0 (id=1044): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=[{0x408, 0x1, 0x1, "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"}], 0x408}}], 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x9, 0x20, 0x4, 0x100}) close(0x3) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={r4, 0x3c, &(0x7f0000000080)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e24, 0x8, @local, 0xfffffffc}]}, &(0x7f0000000140)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0000000000802089", 0x8) 2.135744105s ago: executing program 0 (id=1045): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x11, 0xd8, {0xd8, 0x21, "fe3f8b323c63e30f418a847fc45e4ef19c8aeb5fad620d9d5775caf68256d3a3cdc54bf91ba216f92363770c7856aaf2a984d9060f833b6bd4a753307359e23fa76266a8b5c6bd5a7c34d5474b675bdbae4fc06544695d22e8e4440263cab2aa91aeae31fa9f9e9547544969485669b89423d361ff12c4f2cd73355432bdba236c775999337e2e6e564dae596c71315e4ee0a7ff6972ca0e5049e92124a869a241eb2158c808c4aaadf491b049ccb98eda291156c07deeadaecd5c373a698777e55a93bb7d55e308a1a48c044118c20c88765c3a971a"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43e}}}, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x0, 0x36, 0x35, "5298ae2f4776855dd6d3e097c3da484c0ab6f40b5383f20884256d65cf01a4211d11fb60f56b7d542955018c62cb9b857f0d8cb709"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000280)={0x20, 0x0, 0xd0, {0xce, "3fcd223bfd264fc8a140f98c69f99e15575ac3abc1626c2b2525aac330175fc546a3b9ce454a91d24400c5000c58d689284fa240b44aed66eb22d73eb5c549d6b74d0f3ba8a84043ef485ef22fc21173a12d5ebf90e30d576c087af478ad03e9a1ff7e0e54d00428cef68a9c519a368723db020e05bec22e05cc83de982c1759cc75545c4bea2228a70941bc6fc18b6c8e8572b190077dd1d4d31581807b56a602fa77b97433b220ecd75f65d5454cd84cd8eb12327180b7a9d2b286459d90e2dc4574d45b2326967ddfccc4a146"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x58}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x6}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000380)={0x0, 0xc, 0x6, "fdd7048f8adf"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.52077909s ago: executing program 1 (id=1046): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) mkdir(&(0x7f0000000000)='./file0\x00', 0x408) 810.776982ms ago: executing program 3 (id=1047): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 655.0941ms ago: executing program 3 (id=1048): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002180)=""/82, 0xfffffffffffffe6f) madvise(&(0x7f000023f000/0x2000)=nil, 0x2000, 0x17) 306.095624ms ago: executing program 4 (id=1049): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x65, 0x0, [{0x1d9, 0x0, 0x1}]}) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000000c0)='source', 0x0, r3) 278.433125ms ago: executing program 1 (id=1050): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0xa0000) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0xa, 0x1, 0x4, {0x740, 0x4, 0x8, 0xfff}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2040) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="200100004000"], 0x0}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000040)=0xb) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newsa={0xf0, 0x1a, 0x633, 0x0, 0x5dfdbfd, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, @in6=@mcast1, 0x0, 0x4000, 0x4e23, 0x8001, 0x0, 0x20}, {@in=@local, 0x200, 0x32}, @in=@empty, {0x323, 0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x92be}, {0x0, 0x40000, 0x0, 0x3}, {0xfffffffb, 0xfffffbff, 0xca09}, 0x70bd29, 0x3502, 0x2, 0x1, 0x0, 0x10}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="010000001e00210000000000000000000700000005000000000000000a00020077a9e20000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="6f733249b67b2d28292f2e7d2b00"]) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0x30000004}) epoll_pwait(r8, &(0x7f0000000240)=[{}], 0x1, 0xfffffffb, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 274.587195ms ago: executing program 3 (id=1051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a320000000005000400000000"], 0x64}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) 142.207938ms ago: executing program 3 (id=1052): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000003f00019f2cbd70000000000003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket(0x2b, 0x1, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) write$cgroup_int(r1, &(0x7f0000000040)=0x1f00, 0x12) r2 = socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x298869, 0x0) mount$nfs(&(0x7f0000000080)='7\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0xff, 0x6, 0x75, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', 0x1, 0x40, 0xc000000, 0x9}}) 29.452365ms ago: executing program 3 (id=1053): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_test', 0x8a881, 0xbb) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7305b74df2ce0fa7c19d1309abf30890997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f4cc50a1fcaed1e831fa79a00", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x8]}}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) writev(r4, &(0x7f00000028c0)=[{&(0x7f0000002600)='u', 0x4000}, {0x0, 0x2}], 0x2) r5 = socket$kcm(0x2, 0x2, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000280)) sendmsg$unix(r5, &(0x7f0000000a00)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40018}, 0x24048004) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x100c1, 0x0) write$tun(r3, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1], 0x8c) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = accept4$phonet_pipe(r3, &(0x7f00000003c0), &(0x7f00000004c0)=0x10, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r9, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) ppoll(&(0x7f0000000500)=[{r3, 0x84}, {r6, 0x104}, {r8, 0x1000}, {r5, 0x20}, {r7}, {r2, 0x7084}, {r7, 0x88}, {r5, 0x2000}], 0x8, &(0x7f0000000640)={r10, r11+60000000}, &(0x7f0000000680)={[0x10]}, 0x8) sendmsg$sock(r7, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @empty, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000200)=[@mark={{0x14, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0xc840) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) r12 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) ioctl$FBIOPUT_VSCREENINFO(r12, 0x4601, &(0x7f0000000040)={0x60, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) 0s ago: executing program 4 (id=1054): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x3b) accept$alg(r0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e945fff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES16=r1, @ANYRES16=r2], 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000805a, 0x3}) kernel console output (not intermixed with test programs): ][ T8207] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 296.203218][ T8207] RBP: 00007fc3e2cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 296.203227][ T8207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.203235][ T8207] R13: 00007fc3e4d16038 R14: 00007fc3e4d15fa0 R15: 00007ffe28489ce8 [ 296.203256][ T8207] [ 296.881683][ T6657] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 296.974903][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 297.047713][ T6657] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 297.047747][ T6657] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.047762][ T6657] usb 1-1: Product: syz [ 297.047774][ T6657] usb 1-1: Manufacturer: syz [ 297.047785][ T6657] usb 1-1: SerialNumber: syz [ 297.117817][ T6657] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 297.141632][ T9] usb 4-1: device descriptor read/64, error -71 [ 297.331072][ T32] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 297.376384][ T8224] FAULT_INJECTION: forcing a failure. [ 297.376384][ T8224] name failslab, interval 1, probability 0, space 0, times 0 [ 297.376420][ T8224] CPU: 0 UID: 0 PID: 8224 Comm: syz.4.761 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 297.376449][ T8224] Tainted: [L]=SOFTLOCKUP [ 297.376456][ T8224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 297.376468][ T8224] Call Trace: [ 297.376476][ T8224] [ 297.376485][ T8224] dump_stack_lvl+0xe8/0x150 [ 297.376512][ T8224] should_fail_ex+0x46b/0x600 [ 297.376535][ T8224] should_failslab+0xa8/0x100 [ 297.376555][ T8224] kmem_cache_alloc_noprof+0x87/0x680 [ 297.376573][ T8224] ? vm_area_dup+0x2b/0x670 [ 297.376596][ T8224] vm_area_dup+0x2b/0x670 [ 297.376619][ T8224] __split_vma+0x1e4/0xa40 [ 297.376648][ T8224] ? mas_next_slot+0xc3e/0xd10 [ 297.376671][ T8224] ? __pfx___split_vma+0x10/0x10 [ 297.376703][ T8224] ? mas_find+0xb0e/0xd30 [ 297.376725][ T8224] vms_gather_munmap_vmas+0x4fa/0x1380 [ 297.376748][ T8224] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 297.376792][ T8224] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 297.376823][ T8224] ? mas_find+0xa7d/0xd30 [ 297.376845][ T8224] mmap_region+0x945/0x2280 [ 297.376883][ T8224] ? __pfx_mmap_region+0x10/0x10 [ 297.376906][ T8224] ? __lock_acquire+0x6b5/0x2d10 [ 297.376931][ T8224] ? __lock_acquire+0x6b5/0x2d10 [ 297.376954][ T8224] ? __lock_acquire+0x6b5/0x2d10 [ 297.377040][ T8224] ? __lock_acquire+0x6b5/0x2d10 [ 297.377076][ T8224] ? __lock_acquire+0x6b5/0x2d10 [ 297.377099][ T8224] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 297.377122][ T8224] ? aa_file_perm+0x51a/0x15f0 [ 297.377155][ T8224] ? cap_mmap_addr+0xaf/0x100 [ 297.377174][ T8224] ? bpf_lsm_mmap_addr+0x9/0x50 [ 297.377200][ T8224] ? shmem_mapping+0xd/0x50 [ 297.377225][ T8224] ? memfd_check_seals_mmap+0x16e/0x210 [ 297.377255][ T8224] do_mmap+0xc2f/0x10c0 [ 297.377289][ T8224] ? lockdep_hardirqs_on+0x7a/0x110 [ 297.377307][ T8224] ? __pfx_do_mmap+0x10/0x10 [ 297.377331][ T8224] ? rwbase_write_lock+0x568/0x730 [ 297.377361][ T8224] vm_mmap_pgoff+0x2cc/0x4f0 [ 297.377394][ T8224] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 297.377425][ T8224] ? __fget_files+0x2a/0x420 [ 297.377456][ T8224] ? __fget_files+0x3a6/0x420 [ 297.377481][ T8224] ? __fget_files+0x2a/0x420 [ 297.377527][ T8224] ksys_mmap_pgoff+0x4e8/0x720 [ 297.377556][ T8224] ? __x64_sys_mmap+0x7f/0x140 [ 297.377578][ T8224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.377602][ T8224] do_syscall_64+0x15f/0x560 [ 297.377624][ T8224] ? trace_irq_disable+0x3b/0x140 [ 297.377647][ T8224] ? clear_bhb_loop+0x40/0x90 [ 297.377675][ T8224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.377694][ T8224] RIP: 0033:0x7f1fbeefce59 [ 297.377710][ T8224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.377726][ T8224] RSP: 002b:00007f1fbd156028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 297.377745][ T8224] RAX: ffffffffffffffda RBX: 00007f1fbf175fa0 RCX: 00007f1fbeefce59 [ 297.377758][ T8224] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 00002000009c5000 [ 297.377771][ T8224] RBP: 00007f1fbd156090 R08: 0000000000000003 R09: 0000000000000000 [ 297.377782][ T8224] R10: 0000000000028012 R11: 0000000000000246 R12: 0000000000000001 [ 297.377793][ T8224] R13: 00007f1fbf176038 R14: 00007f1fbf175fa0 R15: 00007ffd07b13e18 [ 297.377820][ T8224] [ 297.405608][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 297.613178][ T9] usb 4-1: device descriptor read/64, error -71 [ 297.744947][ T9] usb usb4-port1: attempt power cycle [ 297.937541][ T8226] netlink: 36 bytes leftover after parsing attributes in process `syz.4.762'. [ 298.095003][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 298.114438][ T9] usb 4-1: device descriptor read/8, error -71 [ 298.178368][ T8233] overlayfs: failed to resolve './file0': -2 [ 298.237449][ T8229] netlink: 112 bytes leftover after parsing attributes in process `syz.1.763'. [ 298.351596][ T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 298.372510][ T9] usb 4-1: device descriptor read/8, error -71 [ 298.481938][ T9] usb usb4-port1: unable to enumerate USB device [ 298.656713][ T8239] FAULT_INJECTION: forcing a failure. [ 298.656713][ T8239] name failslab, interval 1, probability 0, space 0, times 0 [ 298.656763][ T8239] CPU: 0 UID: 0 PID: 8239 Comm: syz.4.768 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 298.656793][ T8239] Tainted: [L]=SOFTLOCKUP [ 298.656801][ T8239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 298.656814][ T8239] Call Trace: [ 298.656822][ T8239] [ 298.656831][ T8239] dump_stack_lvl+0xe8/0x150 [ 298.656861][ T8239] should_fail_ex+0x46b/0x600 [ 298.656889][ T8239] should_failslab+0xa8/0x100 [ 298.656920][ T8239] __kmalloc_noprof+0xdf/0x7b0 [ 298.656935][ T8239] ? kfree+0x4d/0x6c0 [ 298.656975][ T8239] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 298.657012][ T8239] tomoyo_realpath_from_path+0xe3/0x5d0 [ 298.657044][ T8239] ? tomoyo_domain+0xd7/0x130 [ 298.657082][ T8239] ? tomoyo_path_number_perm+0x219/0x630 [ 298.657107][ T8239] tomoyo_path_number_perm+0x246/0x630 [ 298.657134][ T8239] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 298.657181][ T8239] ? __lock_acquire+0x6b5/0x2d10 [ 298.657210][ T8239] ? do_raw_spin_lock+0x12b/0x2f0 [ 298.657263][ T8239] ? __fget_files+0x2a/0x420 [ 298.657296][ T8239] ? __fget_files+0x2a/0x420 [ 298.657327][ T8239] ? __fget_files+0x3a6/0x420 [ 298.657347][ T8239] ? __fget_files+0x2a/0x420 [ 298.657394][ T8239] security_file_ioctl+0xc3/0x2a0 [ 298.657420][ T8239] __se_sys_ioctl+0x47/0x170 [ 298.657444][ T8239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.657468][ T8239] do_syscall_64+0x15f/0x560 [ 298.657507][ T8239] ? trace_irq_disable+0x3b/0x140 [ 298.657532][ T8239] ? clear_bhb_loop+0x40/0x90 [ 298.657551][ T8239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.657586][ T8239] RIP: 0033:0x7f1fbeefce59 [ 298.657606][ T8239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.657626][ T8239] RSP: 002b:00007f1fbd156028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.657649][ T8239] RAX: ffffffffffffffda RBX: 00007f1fbf175fa0 RCX: 00007f1fbeefce59 [ 298.657665][ T8239] RDX: 0000200000000140 RSI: 000000000000541c RDI: 0000000000000004 [ 298.657678][ T8239] RBP: 00007f1fbd156090 R08: 0000000000000000 R09: 0000000000000000 [ 298.657691][ T8239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.657702][ T8239] R13: 00007f1fbf176038 R14: 00007f1fbf175fa0 R15: 00007ffd07b13e18 [ 298.657735][ T8239] [ 298.657957][ T8239] ERROR: Out of memory at tomoyo_realpath_from_path. [ 299.131681][ T32] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 299.221006][ T32] ath9k_htc: Failed to initialize the device [ 299.346078][ T32] usb 1-1: ath9k_htc: USB layer deinitialized [ 299.433046][ T6657] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 299.547522][ T824] usb 1-1: USB disconnect, device number 51 [ 299.604661][ T6657] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.604680][ T6657] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 299.605839][ T6657] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 299.605868][ T6657] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 299.605882][ T6657] usb 5-1: SerialNumber: syz [ 299.869152][ T8246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.869749][ T8246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.925036][ T6657] usb 5-1: 0:2 : does not exist [ 300.071682][ T6657] usb 5-1: USB disconnect, device number 33 [ 300.134575][ T38] audit: type=1326 audit(1779398677.507:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.3.776" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3e4a9ce59 code=0x0 [ 300.351730][ T974] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 300.585252][ T974] usb 2-1: Using ep0 maxpacket: 32 [ 300.597851][ T974] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 300.597880][ T974] usb 2-1: config 0 has no interface number 0 [ 300.621086][ T974] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 300.621113][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.621186][ T974] usb 2-1: Product: syz [ 300.621201][ T974] usb 2-1: Manufacturer: syz [ 300.621388][ T974] usb 2-1: SerialNumber: syz [ 300.671003][ T974] usb 2-1: config 0 descriptor?? [ 301.121882][ T974] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 301.121916][ T974] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 301.327171][ T974] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 301.327501][ T974] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 301.368373][ T974] usb 2-1: USB disconnect, device number 57 [ 301.668877][ T8284] FAULT_INJECTION: forcing a failure. [ 301.668877][ T8284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.668925][ T8284] CPU: 0 UID: 0 PID: 8284 Comm: syz.4.786 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 301.668955][ T8284] Tainted: [L]=SOFTLOCKUP [ 301.668963][ T8284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 301.668975][ T8284] Call Trace: [ 301.668988][ T8284] [ 301.668997][ T8284] dump_stack_lvl+0xe8/0x150 [ 301.669030][ T8284] should_fail_ex+0x46b/0x600 [ 301.669060][ T8284] _copy_from_iter+0x1d3/0x1670 [ 301.669097][ T8284] ? trace_kmem_cache_alloc+0x29/0xe0 [ 301.669119][ T8284] ? __alloc_skb+0x27d/0x7d0 [ 301.669140][ T8284] ? __pfx__copy_from_iter+0x10/0x10 [ 301.669165][ T8284] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 301.669187][ T8284] ? __alloc_skb+0x27d/0x7d0 [ 301.669213][ T8284] ? netlink_sendmsg+0x650/0xb40 [ 301.669237][ T8284] ? skb_put+0x11b/0x210 [ 301.669262][ T8284] netlink_sendmsg+0x6c0/0xb40 [ 301.669298][ T8284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.669326][ T8284] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 301.669364][ T8284] ? aa_sock_msg_perm+0x122/0x200 [ 301.669394][ T8284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.669418][ T8284] sock_sendmsg_nosec+0x112/0x150 [ 301.669452][ T8284] ____sys_sendmsg+0x55c/0x870 [ 301.669482][ T8284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.669515][ T8284] ? import_iovec+0x73/0xa0 [ 301.669550][ T8284] ___sys_sendmsg+0x2a5/0x360 [ 301.669573][ T8284] ? __lock_acquire+0x6b5/0x2d10 [ 301.669602][ T8284] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.669661][ T8284] ? __fget_files+0x2a/0x420 [ 301.669694][ T8284] ? __fget_files+0x3a6/0x420 [ 301.669735][ T8284] __x64_sys_sendmsg+0x1c3/0x2a0 [ 301.669763][ T8284] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 301.669799][ T8284] ? __pfx_ksys_write+0x10/0x10 [ 301.669831][ T8284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.669855][ T8284] do_syscall_64+0x15f/0x560 [ 301.669877][ T8284] ? trace_irq_disable+0x3b/0x140 [ 301.669899][ T8284] ? clear_bhb_loop+0x40/0x90 [ 301.669932][ T8284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.669955][ T8284] RIP: 0033:0x7f1fbeefce59 [ 301.669975][ T8284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.669994][ T8284] RSP: 002b:00007f1fbd156028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.670018][ T8284] RAX: ffffffffffffffda RBX: 00007f1fbf175fa0 RCX: 00007f1fbeefce59 [ 301.670034][ T8284] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 301.670059][ T8284] RBP: 00007f1fbd156090 R08: 0000000000000000 R09: 0000000000000000 [ 301.670072][ T8284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.670085][ T8284] R13: 00007f1fbf176038 R14: 00007f1fbf175fa0 R15: 00007ffd07b13e18 [ 301.670118][ T8284] [ 302.271651][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 302.430852][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.430879][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.455150][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 302.455173][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 302.455187][ T9] usb 1-1: SerialNumber: syz [ 302.484876][ T974] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 302.631588][ T974] usb 5-1: Using ep0 maxpacket: 32 [ 302.633913][ T974] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.633991][ T974] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.635860][ T974] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 302.635887][ T974] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 302.635970][ T974] usb 5-1: Product: syz [ 302.635981][ T974] usb 5-1: Manufacturer: syz [ 302.708209][ T974] hub 5-1:4.0: USB hub found [ 302.792655][ T9] usb 1-1: 0:2 : does not exist [ 302.881882][ T9] usb 1-1: USB disconnect, device number 52 [ 302.999912][ T974] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 303.084149][ T7634] udevd[7634]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.084909][ T974] usb 5-1: USB disconnect, device number 34 [ 303.504159][ T8310] netlink: 40 bytes leftover after parsing attributes in process `syz.0.796'. [ 303.679058][ T8319] FAULT_INJECTION: forcing a failure. [ 303.679058][ T8319] name failslab, interval 1, probability 0, space 0, times 0 [ 303.680589][ T8319] CPU: 1 UID: 0 PID: 8319 Comm: syz.0.798 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 303.680620][ T8319] Tainted: [L]=SOFTLOCKUP [ 303.680640][ T8319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 303.680663][ T8319] Call Trace: [ 303.680672][ T8319] [ 303.680680][ T8319] dump_stack_lvl+0xe8/0x150 [ 303.680711][ T8319] should_fail_ex+0x46b/0x600 [ 303.680737][ T8319] should_failslab+0xa8/0x100 [ 303.680760][ T8319] kmem_cache_alloc_noprof+0x87/0x680 [ 303.680789][ T8319] ? dst_alloc+0x105/0x170 [ 303.680812][ T8319] ? fib_lookup+0x76/0x440 [ 303.680843][ T8319] dst_alloc+0x105/0x170 [ 303.680873][ T8319] ip_route_output_key_hash_rcu+0x14d0/0x25e0 [ 303.680913][ T8319] ? ip_route_output_key_hash+0xd8/0x2a0 [ 303.680945][ T8319] ip_route_output_key_hash+0x18d/0x2a0 [ 303.680977][ T8319] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 303.681017][ T8319] ? icmp_route_lookup+0x370/0xb50 [ 303.681043][ T8319] icmp_route_lookup+0x50a/0xb50 [ 303.681069][ T8319] ? __pfx_icmp_route_lookup+0x10/0x10 [ 303.681088][ T8319] ? __asan_memset+0x22/0x50 [ 303.681150][ T8319] ? __pfx___ip_options_echo+0x10/0x10 [ 303.681197][ T8319] ? __icmp_send+0x22b/0x16f0 [ 303.681216][ T8319] __icmp_send+0xfbd/0x16f0 [ 303.681239][ T8319] ? __icmp_send+0x22b/0x16f0 [ 303.681271][ T8319] ? __pfx___icmp_send+0x10/0x10 [ 303.681305][ T8319] ? lockdep_unlock+0x5d/0xd0 [ 303.681333][ T8319] ? __lock_acquire+0x6b5/0x2d10 [ 303.681362][ T8319] ? do_raw_spin_lock+0x12b/0x2f0 [ 303.681392][ T8319] ipv4_link_failure+0x66c/0xa70 [ 303.681432][ T8319] ? __pfx_ipv4_link_failure+0x10/0x10 [ 303.681466][ T8319] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 303.681497][ T8319] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 303.681521][ T8319] ? __pfx_ipv4_link_failure+0x10/0x10 [ 303.681552][ T8319] arp_error_report+0x118/0x160 [ 303.681584][ T8319] neigh_invalidate+0x235/0x460 [ 303.681617][ T8319] __neigh_update+0x1e68/0x2830 [ 303.681654][ T8319] ? __neigh_update+0xcd/0x2830 [ 303.681695][ T8319] arp_invalidate+0x194/0x320 [ 303.681728][ T8319] ? __pfx_arp_invalidate+0x10/0x10 [ 303.681767][ T8319] arp_req_delete+0xf3/0x450 [ 303.681803][ T8319] ? __pfx_arp_req_delete+0x10/0x10 [ 303.681831][ T8319] ? lockdep_hardirqs_on+0x7a/0x110 [ 303.681850][ T8319] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 303.681870][ T8319] ? mutex_lock_nested+0x152/0x1d0 [ 303.681895][ T8319] ? arp_ioctl+0x390/0x490 [ 303.681927][ T8319] arp_ioctl+0x39f/0x490 [ 303.681958][ T8319] ? __pfx_arp_ioctl+0x10/0x10 [ 303.682007][ T8319] inet_ioctl+0x3c4/0x560 [ 303.682042][ T8319] ? __pfx_inet_ioctl+0x10/0x10 [ 303.682095][ T8319] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 303.682126][ T8319] sock_do_ioctl+0x101/0x320 [ 303.682156][ T8319] ? __pfx_sock_do_ioctl+0x10/0x10 [ 303.682199][ T8319] sock_ioctl+0x5c9/0x7f0 [ 303.682228][ T8319] ? __pfx_sock_ioctl+0x10/0x10 [ 303.682255][ T8319] ? __fget_files+0x2a/0x420 [ 303.682283][ T8319] ? __fget_files+0x3a6/0x420 [ 303.682311][ T8319] ? __fget_files+0x2a/0x420 [ 303.682343][ T8319] ? bpf_lsm_file_ioctl+0x9/0x20 [ 303.682369][ T8319] ? __pfx_sock_ioctl+0x10/0x10 [ 303.682395][ T8319] __se_sys_ioctl+0xff/0x170 [ 303.682417][ T8319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.682438][ T8319] do_syscall_64+0x15f/0x560 [ 303.682459][ T8319] ? trace_irq_disable+0x3b/0x140 [ 303.682480][ T8319] ? clear_bhb_loop+0x40/0x90 [ 303.682505][ T8319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.682524][ T8319] RIP: 0033:0x7f250231ce59 [ 303.682544][ T8319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.682560][ T8319] RSP: 002b:00007f2500555028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.682581][ T8319] RAX: ffffffffffffffda RBX: 00007f2502596090 RCX: 00007f250231ce59 [ 303.682595][ T8319] RDX: 0000200000000300 RSI: 0000000000008953 RDI: 0000000000000003 [ 303.682608][ T8319] RBP: 00007f2500555090 R08: 0000000000000000 R09: 0000000000000000 [ 303.682620][ T8319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.682631][ T8319] R13: 00007f2502596128 R14: 00007f2502596090 R15: 00007ffeb4f23958 [ 303.682663][ T8319] [ 303.901827][ T32] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 304.031717][ T32] usb 4-1: device descriptor read/64, error -71 [ 304.271628][ T32] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 304.401658][ T32] usb 4-1: device descriptor read/64, error -71 [ 304.441916][ T5750] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 304.522640][ T32] usb usb4-port1: attempt power cycle [ 304.593438][ T6657] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 304.621633][ T5750] usb 2-1: Using ep0 maxpacket: 32 [ 304.624207][ T5750] usb 2-1: unable to get BOS descriptor or descriptor too short [ 304.625483][ T5750] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 173, changing to 7 [ 304.625516][ T5750] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1064, setting to 1024 [ 304.627905][ T5750] usb 2-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 304.627939][ T5750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.627954][ T5750] usb 2-1: Product: syz [ 304.627965][ T5750] usb 2-1: Manufacturer: syz [ 304.627976][ T5750] usb 2-1: SerialNumber: syz [ 304.710134][ T5750] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 304.781604][ T6657] usb 5-1: Using ep0 maxpacket: 32 [ 304.781749][ T824] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 304.783342][ T6657] usb 5-1: no configurations [ 304.783354][ T6657] usb 5-1: can't read configurations, error -22 [ 304.866010][ T32] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 304.893532][ T32] usb 4-1: device descriptor read/8, error -71 [ 304.938559][ T5750] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 304.938897][ T5750] usb 2-1: 0:3 : does not exist [ 304.938910][ T5750] usb 2-1: 0:4 : does not exist [ 304.938921][ T5750] usb 2-1: 0:5 : does not exist [ 304.938932][ T5750] usb 2-1: 0:6 : does not exist [ 304.938943][ T5750] usb 2-1: 0:7 : does not exist [ 304.938954][ T5750] usb 2-1: 0:8 : does not exist [ 304.938965][ T5750] usb 2-1: 0:9 : does not exist [ 304.938976][ T5750] usb 2-1: 0:10 : does not exist [ 304.938987][ T5750] usb 2-1: 0:11 : does not exist [ 304.938998][ T5750] usb 2-1: 0:12 : does not exist [ 304.939009][ T5750] usb 2-1: 0:13 : does not exist [ 304.939019][ T5750] usb 2-1: 0:14 : does not exist [ 304.939030][ T5750] usb 2-1: 0:15 : does not exist [ 304.939041][ T5750] usb 2-1: 0:16 : does not exist [ 304.939052][ T5750] usb 2-1: 0:17 : does not exist [ 304.939064][ T5750] usb 2-1: 0:18 : does not exist [ 304.939074][ T5750] usb 2-1: 0:19 : does not exist [ 304.939085][ T5750] usb 2-1: 0:20 : does not exist [ 304.939096][ T5750] usb 2-1: 0:21 : does not exist [ 304.939107][ T5750] usb 2-1: 0:22 : does not exist [ 304.939118][ T5750] usb 2-1: 0:23 : does not exist [ 304.939129][ T5750] usb 2-1: 0:24 : does not exist [ 304.939139][ T5750] usb 2-1: 0:25 : does not exist [ 304.939150][ T5750] usb 2-1: 0:26 : does not exist [ 304.939161][ T5750] usb 2-1: 0:27 : does not exist [ 304.939172][ T5750] usb 2-1: 0:28 : does not exist [ 304.939182][ T5750] usb 2-1: 0:29 : does not exist [ 304.939193][ T5750] usb 2-1: 0:30 : does not exist [ 304.939204][ T5750] usb 2-1: 0:31 : does not exist [ 304.939215][ T5750] usb 2-1: 0:32 : does not exist [ 304.939226][ T5750] usb 2-1: 0:33 : does not exist [ 304.939237][ T5750] usb 2-1: 0:34 : does not exist [ 304.939247][ T5750] usb 2-1: 0:35 : does not exist [ 304.939258][ T5750] usb 2-1: 0:36 : does not exist [ 304.939269][ T5750] usb 2-1: 0:37 : does not exist [ 304.939280][ T5750] usb 2-1: 0:38 : does not exist [ 304.939291][ T5750] usb 2-1: 0:39 : does not exist [ 304.939302][ T5750] usb 2-1: 0:40 : does not exist [ 304.939312][ T5750] usb 2-1: 0:41 : does not exist [ 304.939323][ T5750] usb 2-1: 0:42 : does not exist [ 304.939334][ T5750] usb 2-1: 0:43 : does not exist [ 304.939345][ T5750] usb 2-1: 0:44 : does not exist [ 304.939358][ T5750] usb 2-1: 0:45 : does not exist [ 304.939386][ T5750] usb 2-1: 0:46 : does not exist [ 304.939398][ T5750] usb 2-1: 0:47 : does not exist [ 304.939409][ T5750] usb 2-1: 0:48 : does not exist [ 304.939420][ T5750] usb 2-1: 0:49 : does not exist [ 304.939431][ T5750] usb 2-1: 0:50 : does not exist [ 304.939442][ T5750] usb 2-1: 0:51 : does not exist [ 304.939452][ T5750] usb 2-1: 0:52 : does not exist [ 304.939464][ T5750] usb 2-1: 0:53 : does not exist [ 304.939475][ T5750] usb 2-1: 0:54 : does not exist [ 304.939485][ T5750] usb 2-1: 0:55 : does not exist [ 304.939496][ T5750] usb 2-1: 0:56 : does not exist [ 304.939507][ T5750] usb 2-1: 0:57 : does not exist [ 304.939518][ T5750] usb 2-1: 0:58 : does not exist [ 304.939529][ T5750] usb 2-1: 0:59 : does not exist [ 304.939539][ T5750] usb 2-1: 0:60 : does not exist [ 304.939550][ T5750] usb 2-1: 0:61 : does not exist [ 304.939561][ T5750] usb 2-1: 0:62 : does not exist [ 304.939572][ T5750] usb 2-1: 0:63 : does not exist [ 304.939583][ T5750] usb 2-1: 0:64 : does not exist [ 304.939594][ T5750] usb 2-1: 0:65 : does not exist [ 304.939604][ T5750] usb 2-1: 0:66 : does not exist [ 304.939615][ T5750] usb 2-1: 0:67 : does not exist [ 304.939632][ T5750] usb 2-1: 0:68 : does not exist [ 304.939642][ T5750] usb 2-1: 0:69 : does not exist [ 304.939654][ T5750] usb 2-1: 0:70 : does not exist [ 304.939692][ T5750] usb 2-1: 0:71 : does not exist [ 304.939708][ T5750] usb 2-1: 0:72 : does not exist [ 304.939723][ T5750] usb 2-1: 0:73 : does not exist [ 304.939739][ T5750] usb 2-1: 0:74 : does not exist [ 304.939754][ T5750] usb 2-1: 0:75 : does not exist [ 304.939768][ T5750] usb 2-1: 0:76 : does not exist [ 304.939783][ T5750] usb 2-1: 0:77 : does not exist [ 304.939799][ T5750] usb 2-1: 0:78 : does not exist [ 304.939819][ T5750] usb 2-1: 0:79 : does not exist [ 304.939830][ T5750] usb 2-1: 0:80 : does not exist [ 304.939840][ T5750] usb 2-1: 0:81 : does not exist [ 304.939851][ T5750] usb 2-1: 0:82 : does not exist [ 304.939862][ T5750] usb 2-1: 0:83 : does not exist [ 304.939872][ T5750] usb 2-1: 0:84 : does not exist [ 304.939883][ T5750] usb 2-1: 0:85 : does not exist [ 304.939894][ T5750] usb 2-1: 0:86 : does not exist [ 304.939922][ T5750] usb 2-1: 0:87 : does not exist [ 304.939939][ T5750] usb 2-1: 0:88 : does not exist [ 304.939953][ T5750] usb 2-1: 0:89 : does not exist [ 304.939969][ T5750] usb 2-1: 0:90 : does not exist [ 304.939983][ T5750] usb 2-1: 0:91 : does not exist [ 304.939998][ T5750] usb 2-1: 0:92 : does not exist [ 304.940014][ T5750] usb 2-1: 0:93 : does not exist [ 304.940029][ T5750] usb 2-1: 0:94 : does not exist [ 304.940047][ T5750] usb 2-1: 0:95 : does not exist [ 304.940058][ T5750] usb 2-1: 0:96 : does not exist [ 304.940069][ T5750] usb 2-1: 0:97 : does not exist [ 304.940079][ T5750] usb 2-1: 0:98 : does not exist [ 304.940090][ T5750] usb 2-1: 0:99 : does not exist [ 304.940101][ T5750] usb 2-1: 0:100 : does not exist [ 304.940112][ T5750] usb 2-1: 0:101 : does not exist [ 304.940123][ T5750] usb 2-1: 0:102 : does not exist [ 304.940134][ T5750] usb 2-1: 0:103 : does not exist [ 304.940145][ T5750] usb 2-1: 0:104 : does not exist [ 304.940156][ T5750] usb 2-1: 0:105 : does not exist [ 304.940167][ T5750] usb 2-1: 0:106 : does not exist [ 304.940177][ T5750] usb 2-1: 0:107 : does not exist [ 304.940188][ T5750] usb 2-1: 0:108 : does not exist [ 304.940199][ T5750] usb 2-1: 0:109 : does not exist [ 304.940210][ T5750] usb 2-1: 0:110 : does not exist [ 304.940220][ T5750] usb 2-1: 0:111 : does not exist [ 304.940231][ T5750] usb 2-1: 0:112 : does not exist [ 304.940242][ T5750] usb 2-1: 0:113 : does not exist [ 304.940253][ T5750] usb 2-1: 0:114 : does not exist [ 304.940264][ T5750] usb 2-1: 0:115 : does not exist [ 304.940275][ T5750] usb 2-1: 0:116 : does not exist [ 304.940286][ T5750] usb 2-1: 0:117 : does not exist [ 304.940297][ T5750] usb 2-1: 0:118 : does not exist [ 304.940320][ T5750] usb 2-1: 0:119 : does not exist [ 304.940331][ T5750] usb 2-1: 0:120 : does not exist [ 304.940342][ T5750] usb 2-1: 0:121 : does not exist [ 304.940353][ T5750] usb 2-1: 0:122 : does not exist [ 304.940364][ T5750] usb 2-1: 0:123 : does not exist [ 304.940376][ T5750] usb 2-1: 0:124 : does not exist [ 304.940387][ T5750] usb 2-1: 0:125 : does not exist [ 304.940398][ T5750] usb 2-1: 0:126 : does not exist [ 304.940409][ T5750] usb 2-1: 0:127 : does not exist [ 304.940421][ T5750] usb 2-1: 0:128 : does not exist [ 304.940432][ T5750] usb 2-1: 0:129 : does not exist [ 304.940443][ T5750] usb 2-1: 0:130 : does not exist [ 304.940454][ T5750] usb 2-1: 0:131 : does not exist [ 304.940465][ T5750] usb 2-1: 0:132 : does not exist [ 304.942560][ T5750] usb 2-1: 0:133 : does not exist [ 304.942628][ T5750] usb 2-1: 0:134 : does not exist [ 304.942677][ T5750] usb 2-1: 0:135 : does not exist [ 304.942719][ T5750] usb 2-1: 0:136 : does not exist [ 304.942768][ T5750] usb 2-1: 0:137 : does not exist [ 304.942811][ T5750] usb 2-1: 0:138 : does not exist [ 304.942846][ T5750] usb 2-1: 0:139 : does not exist [ 304.942881][ T5750] usb 2-1: 0:140 : does not exist [ 304.942959][ T5750] usb 2-1: 0:141 : does not exist [ 304.943007][ T5750] usb 2-1: 0:142 : does not exist [ 304.943037][ T5750] usb 2-1: 0:143 : does not exist [ 304.943053][ T5750] usb 2-1: 0:144 : does not exist [ 304.943068][ T5750] usb 2-1: 0:145 : does not exist [ 304.943117][ T5750] usb 2-1: 0:146 : does not exist [ 304.943179][ T5750] usb 2-1: 0:147 : does not exist [ 304.943238][ T5750] usb 2-1: 0:148 : does not exist [ 304.943280][ T5750] usb 2-1: 0:149 : does not exist [ 304.943326][ T5750] usb 2-1: 0:150 : does not exist [ 304.943368][ T5750] usb 2-1: 0:151 : does not exist [ 304.943404][ T5750] usb 2-1: 0:152 : does not exist [ 304.943445][ T5750] usb 2-1: 0:153 : does not exist [ 304.943491][ T5750] usb 2-1: 0:154 : does not exist [ 304.943532][ T5750] usb 2-1: 0:155 : does not exist [ 304.943577][ T5750] usb 2-1: 0:156 : does not exist [ 304.943626][ T5750] usb 2-1: 0:157 : does not exist [ 304.943667][ T5750] usb 2-1: 0:158 : does not exist [ 304.943715][ T5750] usb 2-1: 0:159 : does not exist [ 304.943758][ T5750] usb 2-1: 0:160 : does not exist [ 304.943800][ T5750] usb 2-1: 0:161 : does not exist [ 304.943842][ T5750] usb 2-1: 0:162 : does not exist [ 304.943886][ T5750] usb 2-1: 0:163 : does not exist [ 304.943927][ T5750] usb 2-1: 0:164 : does not exist [ 304.943969][ T5750] usb 2-1: 0:165 : does not exist [ 304.944012][ T5750] usb 2-1: 0:166 : does not exist [ 304.944069][ T5750] usb 2-1: 0:167 : does not exist [ 304.944112][ T5750] usb 2-1: 0:168 : does not exist [ 304.947678][ T5750] usb 2-1: 0:169 : does not exist [ 304.947714][ T5750] usb 2-1: 0:170 : does not exist [ 304.947771][ T5750] usb 2-1: 0:171 : does not exist [ 304.947814][ T5750] usb 2-1: 0:172 : does not exist [ 304.947864][ T5750] usb 2-1: 0:173 : does not exist [ 304.947908][ T5750] usb 2-1: 0:174 : does not exist [ 304.947957][ T5750] usb 2-1: 0:175 : does not exist [ 304.948000][ T5750] usb 2-1: 0:176 : does not exist [ 304.948050][ T5750] usb 2-1: 0:177 : does not exist [ 304.948093][ T5750] usb 2-1: 0:178 : does not exist [ 304.948142][ T5750] usb 2-1: 0:179 : does not exist [ 304.948186][ T5750] usb 2-1: 0:180 : does not exist [ 304.948236][ T5750] usb 2-1: 0:181 : does not exist [ 304.948267][ T5750] usb 2-1: 0:182 : does not exist [ 304.948297][ T5750] usb 2-1: 0:183 : does not exist [ 304.948315][ T5750] usb 2-1: 0:184 : does not exist [ 304.948343][ T5750] usb 2-1: 0:185 : does not exist [ 304.948360][ T5750] usb 2-1: 0:186 : does not exist [ 304.948377][ T5750] usb 2-1: 0:187 : does not exist [ 304.948478][ T5750] usb 2-1: 0:188 : does not exist [ 304.948534][ T5750] usb 2-1: 0:189 : does not exist [ 304.948586][ T5750] usb 2-1: 0:190 : does not exist [ 304.948647][ T5750] usb 2-1: 0:191 : does not exist [ 304.948705][ T5750] usb 2-1: 0:192 : does not exist [ 304.948748][ T5750] usb 2-1: 0:193 : does not exist [ 304.948789][ T5750] usb 2-1: 0:194 : does not exist [ 304.948831][ T5750] usb 2-1: 0:195 : does not exist [ 304.948872][ T5750] usb 2-1: 0:196 : does not exist [ 304.948919][ T5750] usb 2-1: 0:197 : does not exist [ 304.948959][ T5750] usb 2-1: 0:198 : does not exist [ 304.949000][ T5750] usb 2-1: 0:199 : does not exist [ 304.949048][ T5750] usb 2-1: 0:200 : does not exist [ 304.949089][ T5750] usb 2-1: 0:201 : does not exist [ 304.949130][ T5750] usb 2-1: 0:202 : does not exist [ 304.949176][ T5750] usb 2-1: 0:203 : does not exist [ 304.949216][ T5750] usb 2-1: 0:204 : does not exist [ 304.949258][ T5750] usb 2-1: 0:205 : does not exist [ 304.954238][ T6657] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 304.956609][ T5750] usb 2-1: 0:206 : does not exist [ 304.956830][ T5750] usb 2-1: 0:207 : does not exist [ 304.956880][ T5750] usb 2-1: 0:208 : does not exist [ 304.958152][ T5750] usb 2-1: 0:209 : does not exist [ 304.958173][ T5750] usb 2-1: 0:210 : does not exist [ 304.959320][ T5750] usb 2-1: 0:211 : does not exist [ 304.964453][ T5750] usb 2-1: 0:212 : does not exist [ 304.965679][ T5750] usb 2-1: 0:213 : does not exist [ 304.965705][ T5750] usb 2-1: 0:214 : does not exist [ 304.967027][ T5750] usb 2-1: 0:215 : does not exist [ 304.967084][ T5750] usb 2-1: 0:216 : does not exist [ 304.968175][ T5750] usb 2-1: 0:217 : does not exist [ 304.969272][ T5750] usb 2-1: 0:218 : does not exist [ 304.969330][ T5750] usb 2-1: 0:219 : does not exist [ 304.971066][ T5750] usb 2-1: 0:220 : does not exist [ 304.971132][ T5750] usb 2-1: 0:221 : does not exist [ 304.971824][ T5750] usb 2-1: 0:222 : does not exist [ 304.971875][ T5750] usb 2-1: 0:223 : does not exist [ 304.973127][ T5750] usb 2-1: 0:224 : does not exist [ 304.974471][ T5750] usb 2-1: 0:225 : does not exist [ 304.974490][ T5750] usb 2-1: 0:226 : does not exist [ 304.974560][ T5750] usb 2-1: 0:227 : does not exist [ 304.975222][ T5750] usb 2-1: 0:228 : does not exist [ 304.975275][ T5750] usb 2-1: 0:229 : does not exist [ 304.976185][ T5750] usb 2-1: 0:230 : does not exist [ 304.976236][ T5750] usb 2-1: 0:231 : does not exist [ 304.977043][ T5750] usb 2-1: 0:232 : does not exist [ 304.977753][ T5750] usb 2-1: 0:233 : does not exist [ 304.977807][ T5750] usb 2-1: 0:234 : does not exist [ 304.978215][ T5750] usb 2-1: 0:235 : does not exist [ 304.978670][ T5750] usb 2-1: 0:236 : does not exist [ 304.979316][ T5750] usb 2-1: 0:237 : does not exist [ 304.979341][ T5750] usb 2-1: 0:238 : does not exist [ 304.980434][ T5750] usb 2-1: 0:239 : does not exist [ 304.981280][ T5750] usb 2-1: 0:240 : does not exist [ 304.981338][ T5750] usb 2-1: 0:241 : does not exist [ 304.982020][ T5750] usb 2-1: 0:242 : does not exist [ 304.982819][ T5750] usb 2-1: 0:243 : does not exist [ 304.982904][ T5750] usb 2-1: 0:244 : does not exist [ 304.983611][ T5750] usb 2-1: 0:245 : does not exist [ 304.984241][ T5750] usb 2-1: 0:246 : does not exist [ 304.984311][ T5750] usb 2-1: 0:247 : does not exist [ 304.985437][ T5750] usb 2-1: 0:248 : does not exist [ 304.985487][ T5750] usb 2-1: 0:249 : does not exist [ 304.986309][ T5750] usb 2-1: 0:250 : does not exist [ 304.986357][ T5750] usb 2-1: 0:251 : does not exist [ 304.986754][ T5750] usb 2-1: 0:252 : does not exist [ 304.986804][ T5750] usb 2-1: 0:253 : does not exist [ 304.987475][ T5750] usb 2-1: 0:254 : does not exist [ 305.252090][ T824] usb 1-1: unable to get BOS descriptor or descriptor too short [ 305.316071][ T824] usb 1-1: not running at top speed; connect to a high speed hub [ 305.469833][ T6657] usb 5-1: Using ep0 maxpacket: 32 [ 305.507042][ T824] usb 1-1: config 1 interface 0 altsetting 130 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 305.507117][ T824] usb 1-1: config 1 interface 0 altsetting 130 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.507192][ T824] usb 1-1: config 1 interface 0 has no altsetting 0 [ 305.620739][ T824] usb 1-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 305.620829][ T824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.620884][ T824] usb 1-1: Product: syz [ 305.620925][ T824] usb 1-1: Manufacturer: syz [ 305.620959][ T824] usb 1-1: SerialNumber: syz [ 305.724863][ T6657] usb 5-1: no configurations [ 305.724920][ T6657] usb 5-1: can't read configurations, error -22 [ 305.730917][ T6657] usb usb5-port1: attempt power cycle [ 305.771659][ T32] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 305.796550][ T32] usb 4-1: device descriptor read/8, error -71 [ 305.908231][ T32] usb usb4-port1: unable to enumerate USB device [ 305.941974][ T8330] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 306.394956][ T5750] usb 2-1: unable to issue vendor read request (ret = -71) [ 306.395456][ T5750] usb 2-1: unable to issue vendor read request (ret = -71) [ 306.395901][ T5750] usb 2-1: unable to issue vendor read request (ret = -71) [ 306.396301][ T5750] usb 2-1: unable to issue vendor read request (ret = -71) [ 306.397125][ T5750] usb 2-1: unable to issue vendor read request (ret = -71) [ 306.397561][ T5750] usb 2-1: unable to issue vendor read request (ret = -71) [ 306.397989][ T5750] usb 2-1: unable to issue vendor read request (ret = -71) [ 306.398409][ T5750] usb 2-1: unable to issue vendor read request (ret = -71) [ 306.451786][ T6657] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 306.480109][ T824] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input10 [ 306.492813][ T6657] usb 5-1: Using ep0 maxpacket: 32 [ 306.493491][ T6657] usb 5-1: no configurations [ 306.493515][ T6657] usb 5-1: can't read configurations, error -22 [ 306.575934][ T824] usb 1-1: USB disconnect, device number 53 [ 306.626120][ T4966] bcm5974 1-1:1.0: could not read from device [ 306.632115][ T6657] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 306.649874][ T5750] usb 2-1: USB disconnect, device number 58 [ 306.655467][ T6657] usb 5-1: Using ep0 maxpacket: 32 [ 306.657506][ T6657] usb 5-1: no configurations [ 306.657548][ T6657] usb 5-1: can't read configurations, error -22 [ 306.658249][ T6657] usb usb5-port1: unable to enumerate USB device [ 306.868221][ T7634] udevd[7634]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.557359][ T8363] FAULT_INJECTION: forcing a failure. [ 307.557359][ T8363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.557398][ T8363] CPU: 1 UID: 0 PID: 8363 Comm: syz.1.815 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 307.557436][ T8363] Tainted: [L]=SOFTLOCKUP [ 307.557444][ T8363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 307.557457][ T8363] Call Trace: [ 307.557466][ T8363] [ 307.557475][ T8363] dump_stack_lvl+0xe8/0x150 [ 307.557524][ T8363] should_fail_ex+0x46b/0x600 [ 307.557563][ T8363] _copy_from_user+0x2d/0xb0 [ 307.557595][ T8363] __se_sys_sendfile64+0xac/0x1a0 [ 307.557626][ T8363] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 307.557665][ T8363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.557689][ T8363] do_syscall_64+0x15f/0x560 [ 307.557712][ T8363] ? trace_irq_disable+0x3b/0x140 [ 307.557736][ T8363] ? clear_bhb_loop+0x40/0x90 [ 307.557763][ T8363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.557785][ T8363] RIP: 0033:0x7fae7431ce59 [ 307.557804][ T8363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.557823][ T8363] RSP: 002b:00007fae7256e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 307.557847][ T8363] RAX: ffffffffffffffda RBX: 00007fae74595fa0 RCX: 00007fae7431ce59 [ 307.557864][ T8363] RDX: 00002000000000c0 RSI: 0000000000000003 RDI: 0000000000000004 [ 307.557878][ T8363] RBP: 00007fae7256e090 R08: 0000000000000000 R09: 0000000000000000 [ 307.557891][ T8363] R10: 0000000100000500 R11: 0000000000000246 R12: 0000000000000001 [ 307.557905][ T8363] R13: 00007fae74596038 R14: 00007fae74595fa0 R15: 00007ffd337181e8 [ 307.557939][ T8363] [ 307.591649][ T824] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 307.801741][ T974] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 307.834720][ T824] usb 4-1: Using ep0 maxpacket: 32 [ 307.838399][ T824] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.838433][ T824] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.879806][ T824] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 307.879829][ T824] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 307.879844][ T824] usb 4-1: Product: syz [ 307.879855][ T824] usb 4-1: Manufacturer: syz [ 307.931662][ T974] usb 1-1: device descriptor read/64, error -71 [ 307.947996][ T824] hub 4-1:4.0: USB hub found [ 308.153100][ T824] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 308.171775][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 308.171953][ T974] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 308.252969][ T824] usb 4-1: USB disconnect, device number 70 [ 308.304580][ T974] usb 1-1: device descriptor read/64, error -71 [ 308.353237][ T9] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 308.353269][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.358891][ T9] usb 5-1: config 0 descriptor?? [ 308.412234][ T974] usb usb1-port1: attempt power cycle [ 308.751676][ T974] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 308.772479][ T974] usb 1-1: device descriptor read/8, error -71 [ 309.021782][ T974] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 309.046622][ T974] usb 1-1: device descriptor read/8, error -71 [ 309.129689][ T8382] FAULT_INJECTION: forcing a failure. [ 309.129689][ T8382] name failslab, interval 1, probability 0, space 0, times 0 [ 309.129720][ T8382] CPU: 1 UID: 0 PID: 8382 Comm: syz.3.823 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 309.129743][ T8382] Tainted: [L]=SOFTLOCKUP [ 309.129749][ T8382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 309.129759][ T8382] Call Trace: [ 309.129765][ T8382] [ 309.129772][ T8382] dump_stack_lvl+0xe8/0x150 [ 309.129795][ T8382] should_fail_ex+0x46b/0x600 [ 309.129817][ T8382] should_failslab+0xa8/0x100 [ 309.129839][ T8382] kmem_cache_alloc_noprof+0x87/0x680 [ 309.129854][ T8382] ? rcu_is_watching+0x15/0xb0 [ 309.129874][ T8382] ? security_file_alloc+0x34/0x310 [ 309.129893][ T8382] security_file_alloc+0x34/0x310 [ 309.129911][ T8382] init_file+0x96/0x2d0 [ 309.129935][ T8382] alloc_empty_file+0x74/0x1d0 [ 309.129958][ T8382] path_openat+0x11b/0x3960 [ 309.129983][ T8382] ? try_to_take_rt_mutex+0x840/0xb00 [ 309.130007][ T8382] ? arch_stack_walk+0xfb/0x150 [ 309.130041][ T8382] ? __lock_acquire+0x6b5/0x2d10 [ 309.130067][ T8382] ? __pfx_path_openat+0x10/0x10 [ 309.130088][ T8382] ? kasan_save_track+0x4f/0x80 [ 309.130116][ T8382] ? kasan_save_track+0x3e/0x80 [ 309.130142][ T8382] ? __kasan_slab_alloc+0x6c/0x80 [ 309.130163][ T8382] ? do_raw_spin_lock+0x12b/0x2f0 [ 309.130184][ T8382] do_file_open+0x23e/0x4a0 [ 309.130201][ T8382] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 309.130220][ T8382] ? __pfx_do_file_open+0x10/0x10 [ 309.130235][ T8382] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 309.130277][ T8382] ? alloc_fd+0x679/0x6f0 [ 309.130318][ T8382] do_sys_openat2+0x115/0x200 [ 309.130345][ T8382] ? __pfx_do_sys_openat2+0x10/0x10 [ 309.130368][ T8382] ? ksys_write+0x248/0x270 [ 309.130386][ T8382] ? __pfx_ksys_write+0x10/0x10 [ 309.130405][ T8382] __x64_sys_openat+0x138/0x170 [ 309.130431][ T8382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.130447][ T8382] do_syscall_64+0x15f/0x560 [ 309.130464][ T8382] ? trace_irq_disable+0x3b/0x140 [ 309.130481][ T8382] ? clear_bhb_loop+0x40/0x90 [ 309.130501][ T8382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.130517][ T8382] RIP: 0033:0x7fc3e4a5d68e [ 309.130533][ T8382] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 309.130548][ T8382] RSP: 002b:00007fc3e2cf5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 309.130565][ T8382] RAX: ffffffffffffffda RBX: 00007fc3e2cf66c0 RCX: 00007fc3e4a5d68e [ 309.130576][ T8382] RDX: 0000000000000002 RSI: 00007fc3e2cf5f90 RDI: ffffffffffffff9c [ 309.130587][ T8382] RBP: 00007fc3e2cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 309.130596][ T8382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.130605][ T8382] R13: 00007fc3e4d16038 R14: 00007fc3e4d15fa0 R15: 00007ffe28489ce8 [ 309.130632][ T8382] [ 309.165488][ T974] usb usb1-port1: unable to enumerate USB device [ 309.436824][ T9] usb 5-1: Cannot set autoneg [ 309.436999][ T9] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 309.585130][ T8387] atomic_op ffff888050baf218 conn xmit_atomic 0000000000000000 [ 310.241555][ T5705] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 310.391554][ T5705] usb 4-1: Using ep0 maxpacket: 32 [ 310.393594][ T5705] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.393688][ T5705] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.395457][ T5705] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 310.395483][ T5705] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 310.395503][ T5705] usb 4-1: Product: syz [ 310.395521][ T5705] usb 4-1: Manufacturer: syz [ 310.463382][ T5705] hub 4-1:4.0: USB hub found [ 310.642018][ T8409] FAULT_INJECTION: forcing a failure. [ 310.642018][ T8409] name failslab, interval 1, probability 0, space 0, times 0 [ 310.642045][ T8409] CPU: 0 UID: 0 PID: 8409 Comm: syz.1.833 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 310.642065][ T8409] Tainted: [L]=SOFTLOCKUP [ 310.642070][ T8409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 310.642083][ T8409] Call Trace: [ 310.642088][ T8409] [ 310.642094][ T8409] dump_stack_lvl+0xe8/0x150 [ 310.642116][ T8409] should_fail_ex+0x46b/0x600 [ 310.642136][ T8409] should_failslab+0xa8/0x100 [ 310.642154][ T8409] __kmalloc_noprof+0xdf/0x7b0 [ 310.642168][ T8409] ? kfree+0x4d/0x6c0 [ 310.642189][ T8409] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 310.642215][ T8409] tomoyo_realpath_from_path+0xe3/0x5d0 [ 310.642242][ T8409] ? tomoyo_domain+0xd7/0x130 [ 310.642266][ T8409] ? tomoyo_path_number_perm+0x219/0x630 [ 310.642283][ T8409] tomoyo_path_number_perm+0x246/0x630 [ 310.642302][ T8409] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 310.642318][ T8409] ? __lock_acquire+0x6b5/0x2d10 [ 310.642337][ T8409] ? do_raw_spin_lock+0x12b/0x2f0 [ 310.642371][ T8409] ? __fget_files+0x2a/0x420 [ 310.642394][ T8409] ? __fget_files+0x2a/0x420 [ 310.642414][ T8409] ? __fget_files+0x3a6/0x420 [ 310.642434][ T8409] ? __fget_files+0x2a/0x420 [ 310.642457][ T8409] security_file_ioctl+0xc3/0x2a0 [ 310.642475][ T8409] __se_sys_ioctl+0x47/0x170 [ 310.642491][ T8409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.642507][ T8409] do_syscall_64+0x15f/0x560 [ 310.642522][ T8409] ? trace_irq_disable+0x3b/0x140 [ 310.642537][ T8409] ? clear_bhb_loop+0x40/0x90 [ 310.642554][ T8409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.642569][ T8409] RIP: 0033:0x7fae7431ce59 [ 310.642582][ T8409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.642595][ T8409] RSP: 002b:00007fae7256e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.642611][ T8409] RAX: ffffffffffffffda RBX: 00007fae74595fa0 RCX: 00007fae7431ce59 [ 310.642621][ T8409] RDX: 0000200000000180 RSI: 00000000c028aa05 RDI: 0000000000000003 [ 310.642653][ T8409] RBP: 00007fae7256e090 R08: 0000000000000000 R09: 0000000000000000 [ 310.642665][ T8409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.642676][ T8409] R13: 00007fae74596038 R14: 00007fae74595fa0 R15: 00007ffd337181e8 [ 310.642707][ T8409] [ 310.644350][ T8409] ERROR: Out of memory at tomoyo_realpath_from_path. [ 310.956060][ T824] usb 5-1: USB disconnect, device number 39 [ 311.064138][ T5705] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 311.183322][ T5705] usb 4-1: USB disconnect, device number 71 [ 311.214782][ T60] Bluetooth: hci0: unexpected event for opcode 0x0803 [ 311.381685][ T824] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 311.557700][ T824] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.561110][ T824] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 311.561137][ T824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.561164][ T824] usb 5-1: Product: syz [ 311.561178][ T824] usb 5-1: Manufacturer: syz [ 311.561192][ T824] usb 5-1: SerialNumber: syz [ 311.615165][ T824] usb 5-1: config 0 descriptor?? [ 311.779387][ T824] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 311.825308][ T7634] udevd[7634]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.826931][ T5719] usb 5-1: USB disconnect, device number 40 [ 312.221682][ T5705] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 312.351710][ T5705] usb 1-1: device descriptor read/64, error -71 [ 312.591689][ T5705] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 312.763360][ T5705] usb 1-1: device descriptor read/64, error -71 [ 312.881763][ T5705] usb usb1-port1: attempt power cycle [ 313.037353][ T8460] FAULT_INJECTION: forcing a failure. [ 313.037353][ T8460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.037383][ T8460] CPU: 0 UID: 0 PID: 8460 Comm: syz.4.850 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 313.037411][ T8460] Tainted: [L]=SOFTLOCKUP [ 313.037417][ T8460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 313.037428][ T8460] Call Trace: [ 313.037434][ T8460] [ 313.037442][ T8460] dump_stack_lvl+0xe8/0x150 [ 313.037468][ T8460] should_fail_ex+0x46b/0x600 [ 313.037508][ T8460] _copy_from_user+0x2d/0xb0 [ 313.037534][ T8460] binder_ioctl_write_read+0x167/0xa490 [ 313.037554][ T8460] ? kernel_text_address+0xa5/0xe0 [ 313.037583][ T8460] ? __kernel_text_address+0xd/0x30 [ 313.037607][ T8460] ? unwind_get_return_address+0x4d/0x90 [ 313.037662][ T8460] ? try_to_take_rt_mutex+0x840/0xb00 [ 313.037716][ T8460] ? __lock_acquire+0x6b5/0x2d10 [ 313.037747][ T8460] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 313.037770][ T8460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.037804][ T8460] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.037836][ T8460] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 313.037859][ T8460] ? lockdep_hardirqs_on+0x7a/0x110 [ 313.037881][ T8460] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 313.037903][ T8460] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 313.037933][ T8460] ? reacquire_held_locks+0x104/0x190 [ 313.037961][ T8460] ? rt_spin_lock+0x1e0/0x400 [ 313.037993][ T8460] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 313.038027][ T8460] ? rt_spin_unlock+0x14f/0x200 [ 313.038075][ T8460] ? binder_get_thread+0x595/0x6d0 [ 313.038112][ T8460] binder_ioctl+0x426/0x1b10 [ 313.038132][ T8460] ? tomoyo_path_number_perm+0x219/0x630 [ 313.038160][ T8460] ? tomoyo_path_number_perm+0x219/0x630 [ 313.038189][ T8460] ? do_vfs_ioctl+0x117b/0x1540 [ 313.038214][ T8460] ? __pfx_binder_ioctl+0x10/0x10 [ 313.038234][ T8460] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 313.038290][ T8460] ? __fget_files+0x2a/0x420 [ 313.038319][ T8460] ? __fget_files+0x2a/0x420 [ 313.038344][ T8460] ? __fget_files+0x3a6/0x420 [ 313.038369][ T8460] ? __fget_files+0x2a/0x420 [ 313.038399][ T8460] ? bpf_lsm_file_ioctl+0x9/0x20 [ 313.038425][ T8460] ? __pfx_binder_ioctl+0x10/0x10 [ 313.038442][ T8460] __se_sys_ioctl+0xff/0x170 [ 313.038462][ T8460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.038481][ T8460] do_syscall_64+0x15f/0x560 [ 313.038499][ T8460] ? trace_irq_disable+0x3b/0x140 [ 313.038517][ T8460] ? clear_bhb_loop+0x40/0x90 [ 313.038540][ T8460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.038559][ T8460] RIP: 0033:0x7f1fbeefce59 [ 313.038577][ T8460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.038594][ T8460] RSP: 002b:00007f1fbd135028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.038615][ T8460] RAX: ffffffffffffffda RBX: 00007f1fbf176090 RCX: 00007f1fbeefce59 [ 313.038630][ T8460] RDX: 0000200000000640 RSI: 00000000c0306201 RDI: 0000000000000003 [ 313.038643][ T8460] RBP: 00007f1fbd135090 R08: 0000000000000000 R09: 0000000000000000 [ 313.038655][ T8460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.038667][ T8460] R13: 00007f1fbf176128 R14: 00007f1fbf176090 R15: 00007ffd07b13e18 [ 313.038706][ T8460] [ 313.038760][ T8460] binder: 8453:8460 ioctl c0306201 200000000640 returned -14 [ 313.246464][ T5705] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 313.360683][ T5705] usb 1-1: device descriptor read/8, error -71 [ 313.597617][ T5705] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 313.612527][ T5705] usb 1-1: device descriptor read/8, error -71 [ 313.722274][ T5705] usb usb1-port1: unable to enumerate USB device [ 313.863969][ T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 314.015213][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 314.017617][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.017674][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 314.017694][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 314.017713][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 314.017730][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 314.020107][ T9] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 314.020135][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 314.020156][ T9] usb 2-1: Product: syz [ 314.020167][ T9] usb 2-1: Manufacturer: syz [ 314.020178][ T9] usb 2-1: SerialNumber: syz [ 314.123046][ T9] usb 2-1: config 0 descriptor?? [ 314.327166][ T9] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 314.327526][ T9] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 314.355257][ T9] usb 2-1: USB disconnect, device number 59 [ 314.459412][ T8479] binder: 8478:8479 ioctl c0385868 200000000280 returned -22 [ 314.512769][ T8480] binder: 8478:8480 ioctl c0306201 200000000640 returned -22 [ 315.142578][ T5705] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 315.261758][ T6657] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 315.296341][ T5705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.296394][ T5705] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 315.296410][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.339446][ T5705] usb 4-1: config 0 descriptor?? [ 315.355848][ T5705] pwc: Askey VC010 type 2 USB webcam detected. [ 315.381790][ T824] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 315.417191][ T6657] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 315.417225][ T6657] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.417247][ T6657] usb 2-1: Product: syz [ 315.417262][ T6657] usb 2-1: Manufacturer: syz [ 315.417277][ T6657] usb 2-1: SerialNumber: syz [ 315.430288][ T6657] usb 2-1: config 0 descriptor?? [ 315.511726][ T824] usb 1-1: device descriptor read/64, error -71 [ 315.544035][ T5705] pwc: send_video_command error -71 [ 315.544051][ T5705] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 315.544179][ T5705] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 315.572962][ T5705] usb 4-1: USB disconnect, device number 72 [ 315.675210][ T6657] usb 2-1: Firmware version (0.0) predates our first public release. [ 315.675237][ T6657] usb 2-1: Please update to version 0.2 or newer [ 315.764611][ T824] usb 1-1: new low-speed USB device number 63 using dummy_hcd [ 315.790656][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 315.891680][ T824] usb 1-1: device descriptor read/64, error -71 [ 315.905881][ T6657] usb 2-1: USB disconnect, device number 60 [ 316.002048][ T824] usb usb1-port1: attempt power cycle [ 316.041673][ T5705] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 316.193668][ T5705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.193721][ T5705] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 316.193744][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.233938][ T5705] usb 4-1: config 0 descriptor?? [ 316.239594][ T5705] pwc: Askey VC010 type 2 USB webcam detected. [ 316.349683][ T824] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 316.376956][ T824] usb 1-1: device descriptor read/8, error -71 [ 316.611679][ T824] usb 1-1: new low-speed USB device number 65 using dummy_hcd [ 316.633337][ T824] usb 1-1: device descriptor read/8, error -71 [ 316.638223][ T5705] pwc: recv_control_msg error -32 req 02 val 2b00 [ 316.639150][ T5705] pwc: recv_control_msg error -32 req 02 val 2700 [ 316.641175][ T5705] pwc: recv_control_msg error -32 req 02 val 2c00 [ 316.671253][ T5705] pwc: recv_control_msg error -32 req 04 val 1000 [ 316.678887][ T5705] pwc: recv_control_msg error -32 req 04 val 1300 [ 316.680446][ T5705] pwc: recv_control_msg error -32 req 04 val 1400 [ 316.705374][ T5705] pwc: recv_control_msg error -32 req 02 val 2000 [ 316.742162][ T824] usb usb1-port1: unable to enumerate USB device [ 316.750658][ T5705] pwc: recv_control_msg error -71 req 02 val 2100 [ 316.764335][ T5705] pwc: recv_control_msg error -71 req 04 val 1500 [ 316.766274][ T5705] pwc: recv_control_msg error -71 req 02 val 2500 [ 316.766763][ T5705] pwc: recv_control_msg error -71 req 02 val 2400 [ 316.767212][ T5705] pwc: recv_control_msg error -71 req 02 val 2600 [ 316.769123][ T5705] pwc: recv_control_msg error -71 req 02 val 2900 [ 316.771062][ T5705] pwc: recv_control_msg error -71 req 02 val 2800 [ 316.800648][ T5705] pwc: recv_control_msg error -71 req 04 val 1100 [ 316.815668][ T5705] pwc: recv_control_msg error -71 req 04 val 1200 [ 316.855116][ T5705] pwc: Registered as video103. [ 316.858744][ T5705] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 316.880915][ T5705] usb 4-1: USB disconnect, device number 73 [ 317.126155][ T8520] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.870'. [ 317.243388][ T8522] syzkaller1: entered promiscuous mode [ 317.243408][ T8522] syzkaller1: entered allmulticast mode [ 317.291895][ T5705] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 317.441630][ T5705] usb 4-1: device descriptor read/64, error -71 [ 317.461184][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.469443][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.681681][ T5705] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 317.812747][ T5705] usb 4-1: device descriptor read/64, error -71 [ 317.921953][ T5705] usb usb4-port1: attempt power cycle [ 318.021302][ T824] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 318.102616][ T6657] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 318.181611][ T824] usb 5-1: Using ep0 maxpacket: 16 [ 318.184798][ T824] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.184822][ T824] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.187308][ T824] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.187369][ T824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.187420][ T824] usb 5-1: Product: syz [ 318.187453][ T824] usb 5-1: Manufacturer: syz [ 318.187520][ T824] usb 5-1: SerialNumber: syz [ 318.253387][ T824] usb 5-1: 0:2 : does not exist [ 318.265592][ T6657] usb 2-1: too many configurations: 59, using maximum allowed: 8 [ 318.267545][ T6657] usb 2-1: config index 0 descriptor too short (expected 65509, got 45) [ 318.268848][ T6657] usb 2-1: config index 1 descriptor too short (expected 65509, got 45) [ 318.270196][ T6657] usb 2-1: config index 2 descriptor too short (expected 65509, got 45) [ 318.271357][ T6657] usb 2-1: config index 3 descriptor too short (expected 65509, got 45) [ 318.314356][ T5705] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 318.319695][ T6657] usb 2-1: config index 4 descriptor too short (expected 65509, got 45) [ 318.334427][ T6657] usb 2-1: config index 5 descriptor too short (expected 65509, got 45) [ 318.338013][ T6657] usb 2-1: config index 6 descriptor too short (expected 65509, got 45) [ 318.352441][ T6657] usb 2-1: config index 7 descriptor too short (expected 65509, got 45) [ 318.353097][ T5705] usb 4-1: device descriptor read/8, error -71 [ 318.375053][ T6657] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 318.375074][ T6657] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.375124][ T6657] usb 2-1: Product: syz [ 318.375133][ T6657] usb 2-1: Manufacturer: syz [ 318.375143][ T6657] usb 2-1: SerialNumber: syz [ 318.591753][ T5705] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 318.613666][ T5705] usb 4-1: device descriptor read/8, error -71 [ 318.706337][ T824] usb 5-1: USB disconnect, device number 41 [ 318.722636][ T5705] usb usb4-port1: unable to enumerate USB device [ 318.770632][ T8536] FAULT_INJECTION: forcing a failure. [ 318.770632][ T8536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.770667][ T8536] CPU: 0 UID: 0 PID: 8536 Comm: syz.0.877 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 318.770694][ T8536] Tainted: [L]=SOFTLOCKUP [ 318.770701][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 318.770713][ T8536] Call Trace: [ 318.770720][ T8536] [ 318.770729][ T8536] dump_stack_lvl+0xe8/0x150 [ 318.770761][ T8536] should_fail_ex+0x46b/0x600 [ 318.770788][ T8536] _copy_from_user+0x2d/0xb0 [ 318.770817][ T8536] ___sys_sendmsg+0x1c6/0x360 [ 318.770839][ T8536] ? __lock_acquire+0x6b5/0x2d10 [ 318.770867][ T8536] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.770921][ T8536] ? __fget_files+0x2a/0x420 [ 318.770951][ T8536] ? __fget_files+0x3a6/0x420 [ 318.770990][ T8536] __x64_sys_sendmsg+0x1c3/0x2a0 [ 318.771016][ T8536] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.771046][ T8536] ? __pfx_ksys_write+0x10/0x10 [ 318.771075][ T8536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.771098][ T8536] do_syscall_64+0x15f/0x560 [ 318.771119][ T8536] ? trace_irq_disable+0x3b/0x140 [ 318.771139][ T8536] ? clear_bhb_loop+0x40/0x90 [ 318.771164][ T8536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.771184][ T8536] RIP: 0033:0x7f250231ce59 [ 318.771201][ T8536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.771220][ T8536] RSP: 002b:00007f2500576028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.771242][ T8536] RAX: ffffffffffffffda RBX: 00007f2502595fa0 RCX: 00007f250231ce59 [ 318.771257][ T8536] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 318.771270][ T8536] RBP: 00007f2500576090 R08: 0000000000000000 R09: 0000000000000000 [ 318.771282][ T8536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.771295][ T8536] R13: 00007f2502596038 R14: 00007f2502595fa0 R15: 00007ffeb4f23958 [ 318.771324][ T8536] [ 319.143965][ T8538] netlink: 20 bytes leftover after parsing attributes in process `syz.0.878'. [ 319.175659][ T8538] netlink: 68 bytes leftover after parsing attributes in process `syz.0.878'. [ 319.299508][ T8540] netlink: 'syz.4.879': attribute type 21 has an invalid length. [ 319.299593][ T8540] netlink: 'syz.4.879': attribute type 6 has an invalid length. [ 319.299607][ T8540] netlink: 132 bytes leftover after parsing attributes in process `syz.4.879'. [ 319.410316][ T8542] 9pnet_fd: Insufficient options for proto=fd [ 319.413856][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.880'. [ 319.595009][ T6657] rtl8150 2-1:1.0: couldn't reset the device [ 319.598116][ T6657] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 320.621626][ T6657] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 320.775772][ T6657] usb 4-1: unable to get BOS descriptor or descriptor too short [ 320.776402][ T6657] usb 4-1: not running at top speed; connect to a high speed hub [ 320.777800][ T6657] usb 4-1: config 2 has an invalid interface number: 222 but max is 0 [ 320.777824][ T6657] usb 4-1: config 2 has no interface number 0 [ 320.777851][ T6657] usb 4-1: config 2 interface 222 has no altsetting 0 [ 320.822292][ T6657] usb 4-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.d9 [ 320.822322][ T6657] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.822343][ T6657] usb 4-1: Product: syz [ 320.822356][ T6657] usb 4-1: Manufacturer: syz [ 320.822371][ T6657] usb 4-1: SerialNumber: syz [ 320.903418][ T9] usb 2-1: USB disconnect, device number 61 [ 321.112328][ T6657] usb-storage 4-1:2.222: USB Mass Storage device detected [ 321.135325][ T6657] usb-storage 4-1:2.222: Quirks match for vid 04e6 pid 0007: 1 [ 321.135351][ T6657] usb-storage 4-1:2.222: This device (04e6,0007,01d9 S 87 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 321.135351][ T6657] Please send a copy of this message to and [ 321.277010][ T6657] usb 4-1: USB disconnect, device number 78 [ 321.643316][ T7497] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 321.781640][ T7497] usb 5-1: device descriptor read/64, error -71 [ 322.034083][ T6657] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 322.034192][ T7497] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 322.171875][ T7497] usb 5-1: device descriptor read/64, error -71 [ 322.193422][ T6657] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.193521][ T6657] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 322.194689][ T6657] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 322.194717][ T6657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 322.194748][ T6657] usb 2-1: SerialNumber: syz [ 322.282230][ T7497] usb usb5-port1: attempt power cycle [ 322.301569][ T9] usb 1-1: new low-speed USB device number 66 using dummy_hcd [ 322.415611][ T6657] usb 2-1: 0:2 : does not exist [ 322.453443][ T6657] usb 2-1: USB disconnect, device number 62 [ 322.457893][ T9] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 322.457919][ T9] usb 1-1: config 0 has no interface number 0 [ 322.457963][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 322.457987][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 322.458026][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 322.458051][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 322.458085][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 322.458113][ T9] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 322.458315][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 322.458341][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.595682][ T9] usb 1-1: config 0 descriptor?? [ 322.596994][ T8588] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 322.597124][ T8588] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 322.635490][ T7497] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 322.637497][ T9] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 322.673220][ T7497] usb 5-1: device descriptor read/8, error -71 [ 322.741019][ T7634] udevd[7634]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.844771][ T9] usb 1-1: USB disconnect, device number 66 [ 322.877122][ T9] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 322.898835][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.900'. [ 322.921599][ T7497] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 322.943034][ T7497] usb 5-1: device descriptor read/8, error -71 [ 323.006790][ T8603] FAULT_INJECTION: forcing a failure. [ 323.006790][ T8603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.006827][ T8603] CPU: 0 UID: 0 PID: 8603 Comm: syz.3.901 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 323.006853][ T8603] Tainted: [L]=SOFTLOCKUP [ 323.006861][ T8603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 323.006873][ T8603] Call Trace: [ 323.006880][ T8603] [ 323.006889][ T8603] dump_stack_lvl+0xe8/0x150 [ 323.006918][ T8603] should_fail_ex+0x46b/0x600 [ 323.006945][ T8603] _copy_from_user+0x2d/0xb0 [ 323.006974][ T8603] ip_tunnel_parm_from_user+0xbd/0x3b0 [ 323.007026][ T8603] ? __pfx_ip_tunnel_parm_from_user+0x10/0x10 [ 323.007075][ T8603] ip_tunnel_siocdevprivate+0xb0/0x1d0 [ 323.007110][ T8603] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 323.007140][ T8603] ? do_raw_spin_lock+0x12b/0x2f0 [ 323.007167][ T8603] ? full_name_hash+0x92/0xe0 [ 323.007204][ T8603] dev_ifsioc+0xb6b/0x1330 [ 323.007246][ T8603] dev_ioctl+0x84c/0x1150 [ 323.007290][ T8603] sock_ioctl+0x762/0x7f0 [ 323.007320][ T8603] ? __pfx_sock_ioctl+0x10/0x10 [ 323.007349][ T8603] ? __fget_files+0x3a6/0x420 [ 323.007379][ T8603] ? __fget_files+0x2a/0x420 [ 323.007412][ T8603] ? bpf_lsm_file_ioctl+0x9/0x20 [ 323.007440][ T8603] ? __pfx_sock_ioctl+0x10/0x10 [ 323.007472][ T8603] __se_sys_ioctl+0xff/0x170 [ 323.007512][ T8603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.007536][ T8603] do_syscall_64+0x15f/0x560 [ 323.007559][ T8603] ? trace_irq_disable+0x3b/0x140 [ 323.007581][ T8603] ? clear_bhb_loop+0x40/0x90 [ 323.007607][ T8603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.007629][ T8603] RIP: 0033:0x7fc3e4a9ce59 [ 323.007650][ T8603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.007669][ T8603] RSP: 002b:00007fc3e2cf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 323.007692][ T8603] RAX: ffffffffffffffda RBX: 00007fc3e4d15fa0 RCX: 00007fc3e4a9ce59 [ 323.007708][ T8603] RDX: 0000200000000180 RSI: 00000000000089f2 RDI: 0000000000000003 [ 323.007722][ T8603] RBP: 00007fc3e2cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 323.007736][ T8603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.007749][ T8603] R13: 00007fc3e4d16038 R14: 00007fc3e4d15fa0 R15: 00007ffe28489ce8 [ 323.007788][ T8603] [ 323.101669][ T7497] usb usb5-port1: unable to enumerate USB device [ 323.543491][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 323.705726][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.705775][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 323.708060][ T9] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 323.708092][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.708106][ T9] usb 2-1: Product: syz [ 323.708116][ T9] usb 2-1: Manufacturer: syz [ 323.708127][ T9] usb 2-1: SerialNumber: syz [ 323.770144][ T9] usb 2-1: config 0 descriptor?? [ 323.790185][ T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 323.822422][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 323.824540][ T9] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 323.824595][ T9] usb 2-1: media controller created [ 323.882898][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 323.957807][ T9] DVB: Unable to find symbol tda10046_attach() [ 323.957820][ T9] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 323.957831][ T9] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 324.632230][ T9] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 324.648497][ T9] usb 2-1: USB disconnect, device number 63 [ 324.894170][ T8640] FAULT_INJECTION: forcing a failure. [ 324.894170][ T8640] name failslab, interval 1, probability 0, space 0, times 0 [ 324.894208][ T8640] CPU: 1 UID: 0 PID: 8640 Comm: syz.3.914 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 324.894238][ T8640] Tainted: [L]=SOFTLOCKUP [ 324.894245][ T8640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 324.894259][ T8640] Call Trace: [ 324.894267][ T8640] [ 324.894276][ T8640] dump_stack_lvl+0xe8/0x150 [ 324.894307][ T8640] should_fail_ex+0x46b/0x600 [ 324.894337][ T8640] should_failslab+0xa8/0x100 [ 324.894362][ T8640] kmem_cache_alloc_noprof+0x87/0x680 [ 324.894384][ T8640] ? ptlock_alloc+0x20/0x70 [ 324.894411][ T8640] ptlock_alloc+0x20/0x70 [ 324.894433][ T8640] pte_alloc_one+0x7e/0x380 [ 324.894470][ T8640] __do_fault+0xd1/0x2a0 [ 324.894496][ T8640] do_pte_missing+0x65b/0x2940 [ 324.894528][ T8640] ? mt_find+0x481/0x630 [ 324.894560][ T8640] handle_mm_fault+0xdc4/0x14d0 [ 324.894586][ T8640] ? handle_mm_fault+0xed/0x14d0 [ 324.894612][ T8640] ? __pfx_handle_mm_fault+0x10/0x10 [ 324.894648][ T8640] ? __lock_acquire+0x6b5/0x2d10 [ 324.894677][ T8640] ? lock_mm_and_find_vma+0xa7/0x340 [ 324.894716][ T8640] do_user_addr_fault+0x75b/0x1340 [ 324.894754][ T8640] exc_page_fault+0x6a/0xc0 [ 324.894776][ T8640] asm_exc_page_fault+0x26/0x30 [ 324.894796][ T8640] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 324.894832][ T8640] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 324.894850][ T8640] RSP: 0018:ffffc90007e878d8 EFLAGS: 00050206 [ 324.894868][ T8640] RAX: ffffffff84b4c801 RBX: ffff88802cd86000 RCX: 0000000000000eda [ 324.894882][ T8640] RDX: 0000000000000000 RSI: ffff88802cd86000 RDI: 0000200000000640 [ 324.894895][ T8640] RBP: ffffc90007e87a50 R08: ffff88802cd86ed9 R09: 1ffff110059b0ddb [ 324.894910][ T8640] R10: dffffc0000000000 R11: ffffed10059b0ddc R12: dffffc0000000000 [ 324.894925][ T8640] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000eda [ 324.894945][ T8640] ? _copy_to_iter+0x461/0x17d0 [ 324.894976][ T8640] _copy_to_iter+0x493/0x17d0 [ 324.895015][ T8640] ? __pfx__copy_to_iter+0x10/0x10 [ 324.895041][ T8640] ? mmput+0xe/0x70 [ 324.895071][ T8640] ? m_stop+0x269/0x300 [ 324.895103][ T8640] seq_read_iter+0xbf6/0xe20 [ 324.895147][ T8640] seq_read+0x36a/0x490 [ 324.895178][ T8640] ? __pfx_seq_read+0x10/0x10 [ 324.895214][ T8640] ? rw_verify_area+0x2ac/0x4e0 [ 324.895234][ T8640] ? __pfx_seq_read+0x10/0x10 [ 324.895259][ T8640] vfs_read+0x212/0xa80 [ 324.895287][ T8640] ? __pfx_vfs_read+0x10/0x10 [ 324.895309][ T8640] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 324.895330][ T8640] ? lockdep_hardirqs_on+0x7a/0x110 [ 324.895350][ T8640] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 324.895371][ T8640] ? mutex_lock_nested+0x152/0x1d0 [ 324.895396][ T8640] ? fdget_pos+0x252/0x320 [ 324.895432][ T8640] ksys_read+0x156/0x270 [ 324.895455][ T8640] ? __pfx_ksys_read+0x10/0x10 [ 324.895484][ T8640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.895506][ T8640] do_syscall_64+0x15f/0x560 [ 324.895525][ T8640] ? trace_irq_disable+0x3b/0x140 [ 324.895547][ T8640] ? clear_bhb_loop+0x40/0x90 [ 324.895571][ T8640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.895610][ T8640] RIP: 0033:0x7fc3e4a9ce59 [ 324.895628][ T8640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.895645][ T8640] RSP: 002b:00007fc3e2cf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 324.895665][ T8640] RAX: ffffffffffffffda RBX: 00007fc3e4d15fa0 RCX: 00007fc3e4a9ce59 [ 324.895681][ T8640] RDX: 0000000000002020 RSI: 0000200000000640 RDI: 0000000000000003 [ 324.895695][ T8640] RBP: 00007fc3e2cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 324.895708][ T8640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.895721][ T8640] R13: 00007fc3e4d16038 R14: 00007fc3e4d15fa0 R15: 00007ffe28489ce8 [ 324.895755][ T8640] [ 325.714237][ T8657] netlink: 36 bytes leftover after parsing attributes in process `syz.1.918'. [ 325.939142][ T8665] sctp: [Deprecated]: syz.3.922 (pid 8665) Use of int in max_burst socket option. [ 325.939142][ T8665] Use struct sctp_assoc_value instead [ 325.970599][ T8665] sctp: [Deprecated]: syz.3.922 (pid 8665) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.970599][ T8665] Use struct sctp_sack_info instead [ 326.078784][ T8671] FAULT_INJECTION: forcing a failure. [ 326.078784][ T8671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.078825][ T8671] CPU: 1 UID: 0 PID: 8671 Comm: syz.1.925 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 326.078854][ T8671] Tainted: [L]=SOFTLOCKUP [ 326.078862][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 326.078876][ T8671] Call Trace: [ 326.078885][ T8671] [ 326.078894][ T8671] dump_stack_lvl+0xe8/0x150 [ 326.078936][ T8671] should_fail_ex+0x46b/0x600 [ 326.078964][ T8671] _copy_from_iter+0x1d3/0x1670 [ 326.078997][ T8671] ? trace_kmem_cache_alloc+0x29/0xe0 [ 326.079016][ T8671] ? __alloc_skb+0x27d/0x7d0 [ 326.079035][ T8671] ? __pfx__copy_from_iter+0x10/0x10 [ 326.079058][ T8671] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 326.079078][ T8671] ? __alloc_skb+0x27d/0x7d0 [ 326.079102][ T8671] ? netlink_sendmsg+0x650/0xb40 [ 326.079123][ T8671] ? skb_put+0x11b/0x210 [ 326.079146][ T8671] netlink_sendmsg+0x6c0/0xb40 [ 326.079182][ T8671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.079207][ T8671] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 326.079241][ T8671] ? aa_sock_msg_perm+0x122/0x200 [ 326.079267][ T8671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.079289][ T8671] sock_sendmsg_nosec+0x112/0x150 [ 326.079318][ T8671] ____sys_sendmsg+0x55c/0x870 [ 326.079344][ T8671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.079373][ T8671] ? import_iovec+0x73/0xa0 [ 326.079402][ T8671] ___sys_sendmsg+0x2a5/0x360 [ 326.079422][ T8671] ? __lock_acquire+0x6b5/0x2d10 [ 326.079448][ T8671] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.079500][ T8671] ? __fget_files+0x2a/0x420 [ 326.079527][ T8671] ? __fget_files+0x3a6/0x420 [ 326.079563][ T8671] __x64_sys_sendmsg+0x1c3/0x2a0 [ 326.079586][ T8671] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 326.079616][ T8671] ? __pfx_ksys_write+0x10/0x10 [ 326.079642][ T8671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.079662][ T8671] do_syscall_64+0x15f/0x560 [ 326.079681][ T8671] ? trace_irq_disable+0x3b/0x140 [ 326.079701][ T8671] ? clear_bhb_loop+0x40/0x90 [ 326.079734][ T8671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.079754][ T8671] RIP: 0033:0x7fae7431ce59 [ 326.079772][ T8671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.079790][ T8671] RSP: 002b:00007fae7256e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.079811][ T8671] RAX: ffffffffffffffda RBX: 00007fae74595fa0 RCX: 00007fae7431ce59 [ 326.079825][ T8671] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 326.079838][ T8671] RBP: 00007fae7256e090 R08: 0000000000000000 R09: 0000000000000000 [ 326.079852][ T8671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.079866][ T8671] R13: 00007fae74596038 R14: 00007fae74595fa0 R15: 00007ffd337181e8 [ 326.079900][ T8671] [ 326.094881][ T8669] netlink: 84 bytes leftover after parsing attributes in process `syz.3.924'. [ 326.104383][ T8669] sctp: [Deprecated]: syz.3.924 (pid 8669) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.104383][ T8669] Use struct sctp_sack_info instead [ 326.144498][ T8669] netlink: 60 bytes leftover after parsing attributes in process `syz.3.924'. [ 326.150691][ T8669] netlink: 60 bytes leftover after parsing attributes in process `syz.3.924'. [ 326.624771][ T8680] netlink: 36 bytes leftover after parsing attributes in process `syz.1.929'. [ 326.791660][ T6657] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 326.980069][ T6657] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 326.980100][ T6657] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 326.980123][ T6657] usb 1-1: Product: syz [ 326.990954][ T6657] usb 1-1: config 0 descriptor?? [ 327.022603][ T6657] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 327.024517][ T6657] usb 1-1: Detected FT232H [ 327.083308][ T5705] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 327.215191][ T6657] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 327.217383][ T6657] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 327.217949][ T6657] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 327.244180][ T5705] usb 4-1: Using ep0 maxpacket: 8 [ 327.260777][ T5705] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 327.260831][ T5705] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 327.260852][ T5705] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 327.260874][ T5705] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 327.260898][ T5705] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.260938][ T5705] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 327.260959][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.310727][ T6657] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 327.368174][ T6657] usb 1-1: USB disconnect, device number 67 [ 327.416457][ T6657] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 327.418720][ T6657] ftdi_sio 1-1:0.0: device disconnected [ 327.431586][ T7497] usb 2-1: new low-speed USB device number 64 using dummy_hcd [ 327.561639][ T5705] usb 4-1: GET_CAPABILITIES returned 0 [ 327.561683][ T5705] usbtmc 4-1:16.0: can't read capabilities [ 327.593562][ T7497] usb 2-1: Invalid ep0 maxpacket: 32 [ 327.721698][ T7497] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 327.764312][ T8689] FAULT_INJECTION: forcing a failure. [ 327.764312][ T8689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.764338][ T8689] CPU: 0 UID: 0 PID: 8689 Comm: syz.3.933 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 327.764358][ T8689] Tainted: [L]=SOFTLOCKUP [ 327.764364][ T8689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 327.764373][ T8689] Call Trace: [ 327.764378][ T8689] [ 327.764384][ T8689] dump_stack_lvl+0xe8/0x150 [ 327.764406][ T8689] should_fail_ex+0x46b/0x600 [ 327.764425][ T8689] _copy_from_user+0x2d/0xb0 [ 327.764447][ T8689] ___sys_sendmsg+0x1c6/0x360 [ 327.764463][ T8689] ? __lock_acquire+0x6b5/0x2d10 [ 327.764483][ T8689] ? __pfx____sys_sendmsg+0x10/0x10 [ 327.764522][ T8689] ? __fget_files+0x2a/0x420 [ 327.764543][ T8689] ? __fget_files+0x3a6/0x420 [ 327.764570][ T8689] __x64_sys_sendmsg+0x1c3/0x2a0 [ 327.764588][ T8689] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 327.764610][ T8689] ? __pfx_ksys_write+0x10/0x10 [ 327.764638][ T8689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.764654][ T8689] do_syscall_64+0x15f/0x560 [ 327.764669][ T8689] ? trace_irq_disable+0x3b/0x140 [ 327.764702][ T8689] ? clear_bhb_loop+0x40/0x90 [ 327.764721][ T8689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.764736][ T8689] RIP: 0033:0x7fc3e4a9ce59 [ 327.764750][ T8689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.764763][ T8689] RSP: 002b:00007fc3e2cf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.764779][ T8689] RAX: ffffffffffffffda RBX: 00007fc3e4d15fa0 RCX: 00007fc3e4a9ce59 [ 327.764790][ T8689] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000014 [ 327.764800][ T8689] RBP: 00007fc3e2cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 327.764810][ T8689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.764819][ T8689] R13: 00007fc3e4d16038 R14: 00007fc3e4d15fa0 R15: 00007ffe28489ce8 [ 327.764841][ T8689] [ 327.767844][ T824] usb 4-1: USB disconnect, device number 79 [ 327.911621][ T7497] usb 2-1: Invalid ep0 maxpacket: 32 [ 328.005176][ T7497] usb usb2-port1: attempt power cycle [ 328.062463][ T6657] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 328.211712][ T6657] usb 5-1: Using ep0 maxpacket: 16 [ 328.214287][ T6657] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 328.214314][ T6657] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.234026][ T6657] usb 5-1: config 0 descriptor?? [ 328.254006][ T6657] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 328.401629][ T7497] usb 2-1: new low-speed USB device number 66 using dummy_hcd [ 328.422353][ T7497] usb 2-1: Invalid ep0 maxpacket: 32 [ 328.441847][ T6657] usb 5-1: Detected FT232B [ 328.553290][ T7497] usb 2-1: new low-speed USB device number 67 using dummy_hcd [ 328.577572][ T7497] usb 2-1: Invalid ep0 maxpacket: 32 [ 328.592045][ T7497] usb usb2-port1: unable to enumerate USB device [ 328.743902][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.939'. [ 328.843035][ T6657] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 328.843456][ T6657] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 328.847988][ T6657] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 328.855622][ T6657] usb 5-1: USB disconnect, device number 46 [ 328.893655][ T6657] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 328.899810][ T6657] ftdi_sio 5-1:0.0: device disconnected [ 329.669098][ T8726] overlayfs: missing 'lowerdir' [ 329.903013][ T8736] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 329.961743][ T5705] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 330.111943][ T5705] usb 5-1: Using ep0 maxpacket: 16 [ 330.114588][ T5705] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 330.114613][ T5705] usb 5-1: config 0 has no interface number 0 [ 330.114653][ T5705] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 330.114670][ T5705] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 330.118293][ T5705] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 330.118326][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.118341][ T5705] usb 5-1: Product: syz [ 330.118351][ T5705] usb 5-1: Manufacturer: syz [ 330.118362][ T5705] usb 5-1: SerialNumber: syz [ 330.133107][ T5705] usb 5-1: config 0 descriptor?? [ 330.200499][ T8729] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 330.200697][ T8729] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 330.427792][ T8729] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 330.428078][ T8729] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 330.524300][ T8749] overlayfs: missing 'lowerdir' [ 330.661739][ T5705] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 330.903882][ T8757] netlink: 36 bytes leftover after parsing attributes in process `syz.1.960'. [ 331.060642][ T8766] FAULT_INJECTION: forcing a failure. [ 331.060642][ T8766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.060677][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz.1.963 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 331.060704][ T8766] Tainted: [L]=SOFTLOCKUP [ 331.060711][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 331.060722][ T8766] Call Trace: [ 331.060730][ T8766] [ 331.060739][ T8766] dump_stack_lvl+0xe8/0x150 [ 331.060767][ T8766] should_fail_ex+0x46b/0x600 [ 331.060796][ T8766] _copy_to_user+0x31/0xb0 [ 331.060828][ T8766] simple_read_from_buffer+0xe1/0x170 [ 331.060862][ T8766] proc_fail_nth_read+0x1be/0x230 [ 331.060894][ T8766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 331.060923][ T8766] ? rw_verify_area+0x2ac/0x4e0 [ 331.060941][ T8766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 331.060970][ T8766] vfs_read+0x212/0xa80 [ 331.061001][ T8766] ? __pfx_vfs_read+0x10/0x10 [ 331.061020][ T8766] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 331.061039][ T8766] ? lockdep_hardirqs_on+0x7a/0x110 [ 331.061057][ T8766] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 331.061073][ T8766] ? mutex_lock_nested+0x152/0x1d0 [ 331.061094][ T8766] ? fdget_pos+0x252/0x320 [ 331.061123][ T8766] ksys_read+0x156/0x270 [ 331.061142][ T8766] ? __pfx_ksys_read+0x10/0x10 [ 331.061164][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.061181][ T8766] do_syscall_64+0x15f/0x560 [ 331.061198][ T8766] ? trace_irq_disable+0x3b/0x140 [ 331.061215][ T8766] ? clear_bhb_loop+0x40/0x90 [ 331.061235][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.061252][ T8766] RIP: 0033:0x7fae742dd68e [ 331.061268][ T8766] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 331.061283][ T8766] RSP: 002b:00007fae7256dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 331.061301][ T8766] RAX: ffffffffffffffda RBX: 00007fae7256e6c0 RCX: 00007fae742dd68e [ 331.061315][ T8766] RDX: 000000000000000f RSI: 00007fae7256e0a0 RDI: 0000000000000004 [ 331.061326][ T8766] RBP: 00007fae7256e090 R08: 0000000000000000 R09: 0000000000000000 [ 331.061337][ T8766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.061348][ T8766] R13: 00007fae74596038 R14: 00007fae74595fa0 R15: 00007ffd337181e8 [ 331.061383][ T8766] [ 331.468068][ T60] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 331.553740][ T8772] overlayfs: missing 'lowerdir' [ 331.556834][ T5705] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 331.557099][ T5705] asix 5-1:0.34: probe with driver asix failed with error -71 [ 331.683506][ T5705] usb 5-1: USB disconnect, device number 47 [ 331.833727][ T8778] netlink: 36 bytes leftover after parsing attributes in process `syz.1.969'. [ 331.976583][ T8783] FAULT_INJECTION: forcing a failure. [ 331.976583][ T8783] name failslab, interval 1, probability 0, space 0, times 0 [ 331.976622][ T8783] CPU: 0 UID: 0 PID: 8783 Comm: syz.0.971 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 331.976651][ T8783] Tainted: [L]=SOFTLOCKUP [ 331.976659][ T8783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 331.976673][ T8783] Call Trace: [ 331.976681][ T8783] [ 331.976690][ T8783] dump_stack_lvl+0xe8/0x150 [ 331.976720][ T8783] should_fail_ex+0x46b/0x600 [ 331.976749][ T8783] should_failslab+0xa8/0x100 [ 331.976774][ T8783] kmem_cache_alloc_noprof+0x87/0x680 [ 331.976796][ T8783] ? skb_clone+0x212/0x3a0 [ 331.976825][ T8783] skb_clone+0x212/0x3a0 [ 331.976854][ T8783] __netlink_deliver_tap+0x424/0x8b0 [ 331.976890][ T8783] ? netlink_deliver_tap+0x2e/0x1b0 [ 331.976916][ T8783] netlink_deliver_tap+0x19c/0x1b0 [ 331.976941][ T8783] netlink_unicast+0x754/0x920 [ 331.976973][ T8783] netlink_sendmsg+0x813/0xb40 [ 331.977006][ T8783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.977033][ T8783] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 331.977069][ T8783] ? aa_sock_msg_perm+0x122/0x200 [ 331.977099][ T8783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.977122][ T8783] sock_sendmsg_nosec+0x112/0x150 [ 331.977154][ T8783] ____sys_sendmsg+0x55c/0x870 [ 331.977183][ T8783] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.977222][ T8783] ? import_iovec+0x73/0xa0 [ 331.977269][ T8783] ___sys_sendmsg+0x2a5/0x360 [ 331.977292][ T8783] ? __lock_acquire+0x6b5/0x2d10 [ 331.977321][ T8783] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.977380][ T8783] ? __fget_files+0x2a/0x420 [ 331.977411][ T8783] ? __fget_files+0x3a6/0x420 [ 331.977451][ T8783] __x64_sys_sendmsg+0x1c3/0x2a0 [ 331.977478][ T8783] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 331.977547][ T8783] ? __pfx_ksys_write+0x10/0x10 [ 331.977580][ T8783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.977603][ T8783] do_syscall_64+0x15f/0x560 [ 331.977626][ T8783] ? trace_irq_disable+0x3b/0x140 [ 331.977648][ T8783] ? clear_bhb_loop+0x40/0x90 [ 331.977675][ T8783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.977697][ T8783] RIP: 0033:0x7f250231ce59 [ 331.977718][ T8783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.977737][ T8783] RSP: 002b:00007f2500576028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.977761][ T8783] RAX: ffffffffffffffda RBX: 00007f2502595fa0 RCX: 00007f250231ce59 [ 331.977777][ T8783] RDX: 0000000024040808 RSI: 00002000000001c0 RDI: 0000000000000003 [ 331.977791][ T8783] RBP: 00007f2500576090 R08: 0000000000000000 R09: 0000000000000000 [ 331.977804][ T8783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.977817][ T8783] R13: 00007f2502596038 R14: 00007f2502595fa0 R15: 00007ffeb4f23958 [ 331.977851][ T8783] [ 332.665515][ T8800] overlayfs: missing 'lowerdir' [ 333.072255][ T7497] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 333.226204][ T7497] usb 1-1: Using ep0 maxpacket: 32 [ 333.238844][ T7497] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.238877][ T7497] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.241040][ T7497] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 333.241066][ T7497] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 333.241085][ T7497] usb 1-1: Product: syz [ 333.241099][ T7497] usb 1-1: Manufacturer: syz [ 333.312067][ T7497] hub 1-1:4.0: USB hub found [ 333.421671][ T824] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 333.525962][ T8823] FAULT_INJECTION: forcing a failure. [ 333.525962][ T8823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.525999][ T8823] CPU: 1 UID: 0 PID: 8823 Comm: syz.3.987 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 333.526026][ T8823] Tainted: [L]=SOFTLOCKUP [ 333.526033][ T8823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 333.526046][ T8823] Call Trace: [ 333.526053][ T8823] [ 333.526062][ T8823] dump_stack_lvl+0xe8/0x150 [ 333.526096][ T8823] should_fail_ex+0x46b/0x600 [ 333.526123][ T8823] _copy_from_user+0x2d/0xb0 [ 333.526153][ T8823] kstrtouint_from_user+0xd6/0x180 [ 333.526188][ T8823] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 333.526228][ T8823] proc_fail_nth_write+0x8e/0x210 [ 333.526259][ T8823] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 333.526296][ T8823] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 333.526328][ T8823] vfs_write+0x2a3/0xba0 [ 333.526359][ T8823] ? __pfx_vfs_write+0x10/0x10 [ 333.526382][ T8823] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 333.526405][ T8823] ? lockdep_hardirqs_on+0x7a/0x110 [ 333.526427][ T8823] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 333.526450][ T8823] ? mutex_lock_nested+0x152/0x1d0 [ 333.526476][ T8823] ? fdget_pos+0x252/0x320 [ 333.526514][ T8823] ksys_write+0x156/0x270 [ 333.526539][ T8823] ? __pfx_ksys_write+0x10/0x10 [ 333.526569][ T8823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.526592][ T8823] do_syscall_64+0x15f/0x560 [ 333.526615][ T8823] ? clear_bhb_loop+0x40/0x90 [ 333.526641][ T8823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.526662][ T8823] RIP: 0033:0x7fc3e4a5d68e [ 333.526681][ T8823] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 333.526699][ T8823] RSP: 002b:00007fc3e2cf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 333.526720][ T8823] RAX: ffffffffffffffda RBX: 00007fc3e2cf66c0 RCX: 00007fc3e4a5d68e [ 333.526736][ T8823] RDX: 0000000000000001 RSI: 00007fc3e2cf60a0 RDI: 0000000000000004 [ 333.526749][ T8823] RBP: 00007fc3e2cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 333.526763][ T8823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.526775][ T8823] R13: 00007fc3e4d16038 R14: 00007fc3e4d15fa0 R15: 00007ffe28489ce8 [ 333.526808][ T8823] [ 333.581816][ T824] usb 2-1: Using ep0 maxpacket: 8 [ 333.647905][ T824] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 333.647964][ T824] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 333.664858][ T824] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 333.664892][ T824] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 333.664918][ T824] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.682002][ T5705] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 333.688167][ T824] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 333.688200][ T824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.858347][ T5705] usb 5-1: Using ep0 maxpacket: 16 [ 333.908370][ T5705] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 333.908422][ T5705] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 333.908468][ T5705] usb 5-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 333.908494][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.937535][ T5705] usb 5-1: config 0 descriptor?? [ 334.025184][ T7497] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 334.094423][ T824] usb 2-1: GET_CAPABILITIES returned 0 [ 334.094464][ T824] usbtmc 2-1:16.0: can't read capabilities [ 334.096066][ T7497] usb 1-1: USB disconnect, device number 68 [ 334.374634][ T5705] holtek_mouse 0003:04D9:A072.0005: ignoring exceeding usage max [ 334.376401][ T5705] holtek_mouse 0003:04D9:A072.0005: ignoring exceeding usage max [ 334.376420][ T5705] holtek_mouse 0003:04D9:A072.0005: usage index exceeded [ 334.376436][ T5705] holtek_mouse 0003:04D9:A072.0005: item 0 2 2 2 parsing failed [ 334.377176][ T5705] holtek_mouse 0003:04D9:A072.0005: hid parse failed: -22 [ 334.377256][ T5705] holtek_mouse 0003:04D9:A072.0005: probe with driver holtek_mouse failed with error -22 [ 334.442904][ T5705] usb 2-1: USB disconnect, device number 68 [ 334.643762][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.986'. [ 334.716113][ T8835] FAULT_INJECTION: forcing a failure. [ 334.716113][ T8835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.716148][ T8835] CPU: 0 UID: 0 PID: 8835 Comm: syz.3.991 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 334.716175][ T8835] Tainted: [L]=SOFTLOCKUP [ 334.716182][ T8835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 334.716194][ T8835] Call Trace: [ 334.716202][ T8835] [ 334.716211][ T8835] dump_stack_lvl+0xe8/0x150 [ 334.716240][ T8835] should_fail_ex+0x46b/0x600 [ 334.716266][ T8835] _copy_from_user+0x2d/0xb0 [ 334.716295][ T8835] memdup_user+0x5e/0xd0 [ 334.716322][ T8835] kvm_arch_vcpu_ioctl+0xc38/0x2ff0 [ 334.716351][ T8835] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 334.716376][ T8835] ? unwind_next_frame+0xa6/0x2550 [ 334.716403][ T8835] ? is_bpf_text_address+0x26/0x2b0 [ 334.716434][ T8835] ? is_bpf_text_address+0x26/0x2b0 [ 334.716460][ T8835] ? is_bpf_text_address+0x292/0x2b0 [ 334.716481][ T8835] ? is_bpf_text_address+0x26/0x2b0 [ 334.716504][ T8835] ? kernel_text_address+0xa5/0xe0 [ 334.716529][ T8835] ? __kernel_text_address+0xd/0x30 [ 334.716552][ T8835] ? unwind_get_return_address+0x4d/0x90 [ 334.716580][ T8835] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 334.716601][ T8835] ? arch_stack_walk+0xfb/0x150 [ 334.716635][ T8835] ? stack_trace_save+0xa9/0x100 [ 334.716652][ T8835] ? __pfx_stack_trace_save+0x10/0x10 [ 334.716668][ T8835] ? kasan_save_free_info+0x46/0x50 [ 334.716696][ T8835] ? stack_depot_save_flags+0x33/0x810 [ 334.716721][ T8835] ? kasan_save_track+0x4f/0x80 [ 334.716747][ T8835] ? kasan_save_track+0x3e/0x80 [ 334.716772][ T8835] ? kasan_save_free_info+0x46/0x50 [ 334.716794][ T8835] ? __kasan_slab_free+0x5c/0x80 [ 334.716828][ T8835] ? kfree+0x1c5/0x6c0 [ 334.716855][ T8835] ? tomoyo_path_number_perm+0x501/0x630 [ 334.716876][ T8835] ? security_file_ioctl+0xc3/0x2a0 [ 334.716895][ T8835] ? __se_sys_ioctl+0x47/0x170 [ 334.716930][ T8835] ? do_syscall_64+0x15f/0x560 [ 334.716951][ T8835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.716988][ T8835] ? __lock_acquire+0x6b5/0x2d10 [ 334.717062][ T8835] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 334.717085][ T8835] ? lockdep_hardirqs_on+0x7a/0x110 [ 334.717116][ T8835] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 334.717136][ T8835] ? _mutex_lock_killable+0x152/0x1d0 [ 334.717162][ T8835] ? kvm_vcpu_ioctl+0x283/0xfe0 [ 334.717193][ T8835] kvm_vcpu_ioctl+0x7e7/0xfe0 [ 334.717228][ T8835] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 334.717297][ T8835] ? __fget_files+0x2a/0x420 [ 334.717335][ T8835] ? __fget_files+0x2a/0x420 [ 334.717364][ T8835] ? __fget_files+0x3a6/0x420 [ 334.717391][ T8835] ? __fget_files+0x2a/0x420 [ 334.717423][ T8835] ? bpf_lsm_file_ioctl+0x9/0x20 [ 334.717451][ T8835] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 334.717483][ T8835] __se_sys_ioctl+0xff/0x170 [ 334.717506][ T8835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.717529][ T8835] do_syscall_64+0x15f/0x560 [ 334.717552][ T8835] ? trace_irq_disable+0x3b/0x140 [ 334.717576][ T8835] ? clear_bhb_loop+0x40/0x90 [ 334.717604][ T8835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.717625][ T8835] RIP: 0033:0x7fc3e4a9ce59 [ 334.717645][ T8835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.717664][ T8835] RSP: 002b:00007fc3e2cf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 334.717687][ T8835] RAX: ffffffffffffffda RBX: 00007fc3e4d15fa0 RCX: 00007fc3e4a9ce59 [ 334.717702][ T8835] RDX: 0000200000000140 RSI: 000000004400ae8f RDI: 0000000000000005 [ 334.717716][ T8835] RBP: 00007fc3e2cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 334.717730][ T8835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.717742][ T8835] R13: 00007fc3e4d16038 R14: 00007fc3e4d15fa0 R15: 00007ffe28489ce8 [ 334.717774][ T8835] [ 335.306273][ T824] usb 5-1: USB disconnect, device number 48 [ 335.491836][ T8850] netlink: 'syz.1.996': attribute type 4 has an invalid length. [ 335.671612][ T974] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 335.831552][ T974] usb 4-1: Using ep0 maxpacket: 8 [ 335.832269][ T974] usb 4-1: no configurations [ 335.832358][ T974] usb 4-1: can't read configurations, error -22 [ 335.871584][ T5705] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 335.961918][ T974] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 336.021810][ T5705] usb 2-1: Using ep0 maxpacket: 32 [ 336.023625][ T5705] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.023653][ T5705] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.025408][ T5705] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 336.025441][ T5705] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 336.025455][ T5705] usb 2-1: Product: syz [ 336.025465][ T5705] usb 2-1: Manufacturer: syz [ 336.090927][ T5705] hub 2-1:4.0: USB hub found [ 336.111604][ T974] usb 4-1: Using ep0 maxpacket: 8 [ 336.112479][ T974] usb 4-1: no configurations [ 336.112508][ T974] usb 4-1: can't read configurations, error -22 [ 336.112988][ T974] usb usb4-port1: attempt power cycle [ 336.291344][ T5705] hub 2-1:4.0: 3 ports detected [ 336.292974][ T5705] hub 2-1:4.0: insufficient power available to use all downstream ports [ 336.481629][ T5719] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 336.481768][ T974] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 336.515628][ T974] usb 4-1: Using ep0 maxpacket: 8 [ 336.517806][ T974] usb 4-1: no configurations [ 336.517823][ T974] usb 4-1: can't read configurations, error -22 [ 336.541679][ T5705] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 336.541698][ T5705] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 336.586102][ T5705] usb 2-1: USB disconnect, device number 69 [ 336.641692][ T974] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 336.644043][ T5719] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 336.644072][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.644094][ T5719] usb 1-1: Product: syz [ 336.644110][ T5719] usb 1-1: Manufacturer: syz [ 336.644126][ T5719] usb 1-1: SerialNumber: syz [ 336.673979][ T974] usb 4-1: Using ep0 maxpacket: 8 [ 336.674976][ T974] usb 4-1: no configurations [ 336.675020][ T974] usb 4-1: can't read configurations, error -22 [ 336.677477][ T974] usb usb4-port1: unable to enumerate USB device [ 337.071725][ T5705] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 337.241781][ T5705] usb 5-1: Using ep0 maxpacket: 32 [ 337.245242][ T5705] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.245276][ T5705] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.247177][ T5705] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 337.247207][ T5705] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 337.247263][ T5705] usb 5-1: Product: syz [ 337.247274][ T5705] usb 5-1: Manufacturer: syz [ 337.335491][ T5705] hub 5-1:4.0: USB hub found [ 337.339696][ T5719] (unnamed net_device) (uninitialized): Assigned a random MAC address: ce:88:4a:1c:d7:c6 [ 337.355092][ T6657] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 337.451994][ T5719] rtl8150 1-1:1.0: eth5: rtl8150 is detected [ 337.468303][ T5719] usb 1-1: USB disconnect, device number 69 [ 337.514566][ T6657] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.514613][ T6657] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.514654][ T6657] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 337.514679][ T6657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.523757][ T6657] usb 2-1: config 0 descriptor?? [ 337.988316][ T5705] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 338.054884][ T5705] usb 5-1: USB disconnect, device number 49 [ 338.489863][ T8877] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1007'. [ 338.751596][ T824] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 338.844697][ T8879] overlayfs: missing 'lowerdir' [ 338.901733][ T824] usb 4-1: Using ep0 maxpacket: 8 [ 338.907700][ T824] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 338.908223][ T824] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 338.908255][ T824] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 338.908280][ T824] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.908715][ T824] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 338.908742][ T824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.181016][ T60] Bluetooth: hci1: unexpected event for opcode 0x0804 [ 339.224450][ T824] usb 4-1: GET_CAPABILITIES returned 0 [ 339.224566][ T824] usbtmc 4-1:16.0: can't read capabilities [ 339.505873][ T7497] usb 4-1: USB disconnect, device number 84 [ 340.011613][ T5705] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 340.079407][ T8897] binder: 8896:8897 ioctl 402c542d 200000000340 returned -22 [ 340.163825][ T5705] usb 5-1: Using ep0 maxpacket: 8 [ 340.170508][ T6657] usbhid 2-1:0.0: can't add hid device: -71 [ 340.170637][ T6657] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 340.176447][ T5705] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.176512][ T5705] usb 5-1: config 0 has no interfaces? [ 340.220041][ T6657] usb 2-1: USB disconnect, device number 70 [ 340.220945][ T5705] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 340.220973][ T5705] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 340.220995][ T5705] usb 5-1: Product: syz [ 340.221010][ T5705] usb 5-1: Manufacturer: syz [ 340.221026][ T5705] usb 5-1: SerialNumber: syz [ 340.289150][ T5705] usb 5-1: config 0 descriptor?? [ 340.337967][ T8899] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1016'. [ 340.388001][ T8901] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 340.388062][ T8901] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 340.545190][ T8910] trusted_key: encrypted_key: master key parameter '¸>ffâ>4ëfÉdŽèf¹ž' is invalid [ 340.985641][ T8930] FAULT_INJECTION: forcing a failure. [ 340.985641][ T8930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.985673][ T8930] CPU: 0 UID: 0 PID: 8930 Comm: syz.1.1027 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 340.985696][ T8930] Tainted: [L]=SOFTLOCKUP [ 340.985702][ T8930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 340.985713][ T8930] Call Trace: [ 340.985720][ T8930] [ 340.985728][ T8930] dump_stack_lvl+0xe8/0x150 [ 340.985754][ T8930] should_fail_ex+0x46b/0x600 [ 340.985779][ T8930] _copy_from_user+0x2d/0xb0 [ 340.985807][ T8930] kstrtouint_from_user+0xd6/0x180 [ 340.985831][ T8930] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 340.985865][ T8930] proc_fail_nth_write+0x8e/0x210 [ 340.985894][ T8930] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 340.985926][ T8930] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 340.985952][ T8930] vfs_write+0x2a3/0xba0 [ 340.985976][ T8930] ? __pfx_vfs_write+0x10/0x10 [ 340.985995][ T8930] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 340.986013][ T8930] ? lockdep_hardirqs_on+0x7a/0x110 [ 340.986030][ T8930] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 340.986046][ T8930] ? mutex_lock_nested+0x152/0x1d0 [ 340.986067][ T8930] ? fdget_pos+0x252/0x320 [ 340.986099][ T8930] ksys_write+0x156/0x270 [ 340.986117][ T8930] ? __pfx_ksys_write+0x10/0x10 [ 340.986141][ T8930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.986159][ T8930] do_syscall_64+0x15f/0x560 [ 340.986176][ T8930] ? trace_irq_disable+0x3b/0x140 [ 340.986195][ T8930] ? clear_bhb_loop+0x40/0x90 [ 340.986215][ T8930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.986231][ T8930] RIP: 0033:0x7fae742dd68e [ 340.986247][ T8930] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 340.986262][ T8930] RSP: 002b:00007fae7254cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 340.986280][ T8930] RAX: ffffffffffffffda RBX: 00007fae7254d6c0 RCX: 00007fae742dd68e [ 340.986293][ T8930] RDX: 0000000000000001 RSI: 00007fae7254d0a0 RDI: 0000000000000005 [ 340.986303][ T8930] RBP: 00007fae7254d090 R08: 0000000000000000 R09: 0000000000000000 [ 340.986313][ T8930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.986323][ T8930] R13: 00007fae74596128 R14: 00007fae74596090 R15: 00007ffd337181e8 [ 340.986348][ T8930] [ 341.123212][ T5705] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 341.325435][ T5705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.325471][ T5705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.325512][ T5705] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 341.325538][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.389033][ T5705] usb 1-1: config 0 descriptor?? [ 341.415596][ T8936] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 341.415656][ T8936] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 342.157834][ T8953] FAULT_INJECTION: forcing a failure. [ 342.157834][ T8953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.157875][ T8953] CPU: 1 UID: 0 PID: 8953 Comm: syz.3.1032 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 342.157905][ T8953] Tainted: [L]=SOFTLOCKUP [ 342.157914][ T8953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 342.157928][ T8953] Call Trace: [ 342.157938][ T8953] [ 342.157951][ T8953] dump_stack_lvl+0xe8/0x150 [ 342.158012][ T8953] should_fail_ex+0x46b/0x600 [ 342.158043][ T8953] strncpy_from_user+0x36/0x2b0 [ 342.158072][ T8953] getname_long+0x88/0x130 [ 342.158104][ T8953] do_getname+0x181/0x250 [ 342.158138][ T8953] do_sys_openat2+0xcc/0x200 [ 342.158164][ T8953] ? __pfx_do_sys_openat2+0x10/0x10 [ 342.158212][ T8953] ? ksys_write+0x248/0x270 [ 342.158240][ T8953] ? __pfx_ksys_write+0x10/0x10 [ 342.158265][ T8953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.158288][ T8953] __x64_sys_creat+0x8f/0xc0 [ 342.158323][ T8953] do_syscall_64+0x15f/0x560 [ 342.158340][ T8953] ? trace_irq_disable+0x3b/0x140 [ 342.158379][ T8953] ? clear_bhb_loop+0x40/0x90 [ 342.158407][ T8953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.158430][ T8953] RIP: 0033:0x7fc3e4a9ce59 [ 342.158450][ T8953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.158470][ T8953] RSP: 002b:00007fc3e2cf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 342.158500][ T8953] RAX: ffffffffffffffda RBX: 00007fc3e4d15fa0 RCX: 00007fc3e4a9ce59 [ 342.158513][ T8953] RDX: 0000000000000000 RSI: 00000000000000ae RDI: 00002000000000c0 [ 342.158539][ T8953] RBP: 00007fc3e2cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 342.158554][ T8953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.158568][ T8953] R13: 00007fc3e4d16038 R14: 00007fc3e4d15fa0 R15: 00007ffe28489ce8 [ 342.158603][ T8953] [ 342.411695][ T6657] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 342.487105][ T8956] FAULT_INJECTION: forcing a failure. [ 342.487105][ T8956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.487139][ T8956] CPU: 0 UID: 0 PID: 8956 Comm: syz.3.1035 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 342.487161][ T8956] Tainted: [L]=SOFTLOCKUP [ 342.487168][ T8956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 342.487178][ T8956] Call Trace: [ 342.487185][ T8956] [ 342.487195][ T8956] dump_stack_lvl+0xe8/0x150 [ 342.487220][ T8956] should_fail_ex+0x46b/0x600 [ 342.487242][ T8956] _copy_to_user+0x31/0xb0 [ 342.487268][ T8956] simple_read_from_buffer+0xe1/0x170 [ 342.487296][ T8956] proc_fail_nth_read+0x1be/0x230 [ 342.487324][ T8956] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 342.487351][ T8956] ? rw_verify_area+0x2ac/0x4e0 [ 342.487368][ T8956] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 342.487394][ T8956] vfs_read+0x212/0xa80 [ 342.487422][ T8956] ? __pfx_vfs_read+0x10/0x10 [ 342.487441][ T8956] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 342.487461][ T8956] ? lockdep_hardirqs_on+0x7a/0x110 [ 342.487479][ T8956] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 342.487495][ T8956] ? mutex_lock_nested+0x152/0x1d0 [ 342.487517][ T8956] ? fdget_pos+0x252/0x320 [ 342.487547][ T8956] ksys_read+0x156/0x270 [ 342.487565][ T8956] ? __pfx_ksys_read+0x10/0x10 [ 342.487580][ T8956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.487603][ T8956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.487621][ T8956] do_syscall_64+0x15f/0x560 [ 342.487638][ T8956] ? trace_irq_disable+0x3b/0x140 [ 342.487655][ T8956] ? clear_bhb_loop+0x40/0x90 [ 342.487677][ T8956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.487694][ T8956] RIP: 0033:0x7fc3e4a5d68e [ 342.487709][ T8956] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 342.487723][ T8956] RSP: 002b:00007fc3e2cf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 342.487740][ T8956] RAX: ffffffffffffffda RBX: 00007fc3e2cf66c0 RCX: 00007fc3e4a5d68e [ 342.487752][ T8956] RDX: 000000000000000f RSI: 00007fc3e2cf60a0 RDI: 0000000000000004 [ 342.487763][ T8956] RBP: 00007fc3e2cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 342.487773][ T8956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.487782][ T8956] R13: 00007fc3e4d16038 R14: 00007fc3e4d15fa0 R15: 00007ffe28489ce8 [ 342.487807][ T8956] [ 342.744874][ T6657] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.744907][ T6657] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.744944][ T6657] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 342.744967][ T6657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.792295][ T6657] usb 2-1: config 0 descriptor?? [ 342.825009][ T5705] usbhid 1-1:0.0: can't add hid device: -71 [ 342.825131][ T5705] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 342.914023][ T5705] usb 1-1: USB disconnect, device number 70 [ 342.944575][ T10] usb 5-1: USB disconnect, device number 50 [ 343.112557][ T8965] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 343.112610][ T8965] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 343.250097][ T6657] cp2112 0003:10C4:EA90.0006: invalid report_count -504012650 [ 343.250122][ T6657] cp2112 0003:10C4:EA90.0006: item 0 4 1 9 parsing failed [ 343.250805][ T6657] cp2112 0003:10C4:EA90.0006: parse failed [ 343.275912][ T6657] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -22 [ 343.373433][ T9] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 343.437769][ T5705] usb 2-1: USB disconnect, device number 71 [ 343.537284][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 343.537876][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 343.539180][ T9] usb 4-1: config 6 has an invalid interface number: 197 but max is 1 [ 343.539206][ T9] usb 4-1: config 6 has an invalid interface number: 160 but max is 1 [ 343.539227][ T9] usb 4-1: config 6 has no interface number 0 [ 343.539245][ T9] usb 4-1: config 6 has no interface number 1 [ 343.539286][ T9] usb 4-1: config 6 interface 197 has no altsetting 0 [ 343.539300][ T9] usb 4-1: config 6 interface 160 has no altsetting 0 [ 343.584905][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=9941, bcdDevice=5e.8e [ 343.584990][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.585038][ T9] usb 4-1: Product: syz [ 343.585082][ T9] usb 4-1: Manufacturer: syz [ 343.585111][ T9] usb 4-1: SerialNumber: syz [ 343.801875][ T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 343.837958][ T8975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1042'. [ 343.914913][ T8977] binder: 8962:8977 ioctl c0306201 200000000640 returned -22 [ 343.915900][ T8977] netlink: 'syz.3.1038': attribute type 27 has an invalid length. [ 343.961718][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 343.969455][ T10] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 343.969485][ T10] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 343.969508][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 343.969779][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 343.969804][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 343.969830][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 343.970114][ T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 343.970141][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.153123][ T10] usb 5-1: config 0 descriptor?? [ 344.357472][ T8973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.364178][ T8973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.415879][ T10] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 344.431576][ T6657] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 344.448499][ T10] usb 5-1: USB disconnect, device number 51 [ 344.469796][ T10] usblp0: removed [ 344.593927][ T6657] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.593955][ T6657] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 344.610001][ T6657] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 344.610033][ T6657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 344.610055][ T6657] usb 2-1: SerialNumber: syz [ 344.874096][ T6657] usb 2-1: 0:2 : does not exist [ 344.967049][ T6657] usb 2-1: USB disconnect, device number 72 [ 345.028626][ T5783] udevd[5783]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.082064][ T5750] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 345.211881][ T10] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 345.237470][ T5750] usb 5-1: No LPM exit latency info found, disabling LPM. [ 345.381581][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 345.384401][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.384425][ T10] usb 1-1: config 0 has no interfaces? [ 345.387630][ T10] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 345.387661][ T10] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 345.387742][ T10] usb 1-1: Product: syz [ 345.387758][ T10] usb 1-1: Manufacturer: syz [ 345.387774][ T10] usb 1-1: SerialNumber: syz [ 345.419819][ T10] usb 1-1: config 0 descriptor?? [ 346.203061][ T9] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 346.293335][ T8989] overlayfs: missing 'lowerdir' [ 346.485139][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 346.485207][ T9] dib0700: firmware download failed at 7 with -22 [ 346.511644][ T5750] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 346.511673][ T5750] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.554901][ T9] hub 4-1:6.160: Invalid hub with more than one config or interface [ 346.554936][ T9] hub 4-1:6.160: probe with driver hub failed with error -22 [ 346.557814][ T9] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 346.565677][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 346.565719][ T9] dib0700: firmware download failed at 7 with -22 [ 346.616682][ T5750] usb 5-1: can't set config #1, error -71 [ 346.626889][ T5750] usb 5-1: USB disconnect, device number 52 [ 346.655713][ T9] usb 4-1: USB disconnect, device number 85 [ 346.845730][ T8996] kvm_intel: kvm [8994]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 346.865099][ T8998] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1051'. [ 346.995181][ T9002] loop4: detected capacity change from 0 to 7 [ 347.041641][ T824] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 347.066332][ T156] [ 347.066344][ T156] ====================================================== [ 347.066354][ T156] WARNING: possible circular locking dependency detected [ 347.066372][ T156] syzkaller #0 Tainted: G L [ 347.066397][ T156] ------------------------------------------------------ [ 347.066405][ T156] kworker/u8:7/156 is trying to acquire lock: [ 347.066417][ T156] ffff88803c1bcc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 347.066470][ T156] [ 347.066470][ T156] but task is already holding lock: [ 347.066476][ T156] ffff88805b090720 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 347.066515][ T156] [ 347.066515][ T156] which lock already depends on the new lock. [ 347.066515][ T156] [ 347.066521][ T156] [ 347.066521][ T156] the existing dependency chain (in reverse order) is: [ 347.066528][ T156] [ 347.066528][ T156] -> #5 (&p->lock){+.+.}-{4:4}: [ 347.066550][ T156] mutex_lock_nested+0x5a/0x1d0 [ 347.066573][ T156] seq_read_iter+0xb8/0xe20 [ 347.066592][ T156] lo_rw_aio+0xc80/0xf00 [ 347.066606][ T156] loop_process_work+0x92a/0x11b0 [ 347.066621][ T156] process_one_work+0x98b/0x1630 [ 347.066643][ T156] worker_thread+0xb49/0x1140 [ 347.066666][ T156] kthread+0x389/0x470 [ 347.066685][ T156] ret_from_fork+0x514/0xb70 [ 347.066704][ T156] ret_from_fork_asm+0x1a/0x30 [ 347.066726][ T156] [ 347.066726][ T156] -> #4 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 347.066749][ T156] process_one_work+0x8d7/0x1630 [ 347.066771][ T156] worker_thread+0xb49/0x1140 [ 347.066794][ T156] kthread+0x389/0x470 [ 347.066810][ T156] ret_from_fork+0x514/0xb70 [ 347.066828][ T156] ret_from_fork_asm+0x1a/0x30 [ 347.066849][ T156] [ 347.066849][ T156] -> #3 ((wq_completion)loop4){+.+.}-{0:0}: [ 347.066871][ T156] touch_wq_lockdep_map+0xcb/0x180 [ 347.066898][ T156] __flush_workqueue+0x14b/0x14f0 [ 347.066923][ T156] drain_workqueue+0xd3/0x390 [ 347.066937][ T156] lo_release+0x287/0x8f0 [ 347.066952][ T156] bdev_release+0x541/0x660 [ 347.066969][ T156] blkdev_release+0x15/0x20 [ 347.066988][ T156] __fput+0x461/0xa70 [ 347.067011][ T156] task_work_run+0x1d9/0x270 [ 347.067029][ T156] exit_to_user_mode_loop+0xf3/0x4d0 [ 347.067046][ T156] do_syscall_64+0x33e/0x560 [ 347.067071][ T156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.067089][ T156] [ 347.067089][ T156] -> #2 (&disk->open_mutex){+.+.}-{4:4}: [ 347.067111][ T156] mutex_lock_nested+0x5a/0x1d0 [ 347.067132][ T156] bdev_open+0xe0/0xcc0 [ 347.067148][ T156] bdev_file_open_by_dev+0x1be/0x240 [ 347.067166][ T156] swsusp_check+0x56/0x490 [ 347.067183][ T156] software_resume+0x51/0x4c0 [ 347.067207][ T156] resume_store+0x333/0x4f0 [ 347.067231][ T156] kernfs_fop_write_iter+0x3b0/0x540 [ 347.067250][ T156] vfs_write+0x629/0xba0 [ 347.067265][ T156] ksys_write+0x156/0x270 [ 347.067280][ T156] do_syscall_64+0x15f/0x560 [ 347.067296][ T156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.067313][ T156] [ 347.067313][ T156] -> #1 (system_transition_mutex){+.+.}-{4:4}: [ 347.067337][ T156] mutex_lock_nested+0x5a/0x1d0 [ 347.067359][ T156] lock_system_sleep+0x49/0x70 [ 347.067375][ T156] resume_store+0x2ff/0x4f0 [ 347.067399][ T156] kernfs_fop_write_iter+0x3b0/0x540 [ 347.067419][ T156] vfs_write+0x629/0xba0 [ 347.067438][ T156] ksys_write+0x156/0x270 [ 347.067455][ T156] do_syscall_64+0x15f/0x560 [ 347.067471][ T156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.067488][ T156] [ 347.067488][ T156] -> #0 (&of->mutex){+.+.}-{4:4}: [ 347.067527][ T156] __lock_acquire+0x15a5/0x2d10 [ 347.067546][ T156] lock_acquire+0x106/0x350 [ 347.067564][ T156] mutex_lock_nested+0x5a/0x1d0 [ 347.067585][ T156] kernfs_seq_start+0x5c/0x420 [ 347.067605][ T156] traverse+0x164/0x580 [ 347.067623][ T156] seq_read_iter+0xd09/0xe20 [ 347.067642][ T156] lo_rw_aio+0xc80/0xf00 [ 347.067656][ T156] loop_process_work+0x92a/0x11b0 [ 347.067671][ T156] process_one_work+0x98b/0x1630 [ 347.067694][ T156] worker_thread+0xb49/0x1140 [ 347.067718][ T156] kthread+0x389/0x470 [ 347.067734][ T156] ret_from_fork+0x514/0xb70 [ 347.067754][ T156] ret_from_fork_asm+0x1a/0x30 [ 347.067776][ T156] [ 347.067776][ T156] other info that might help us debug this: [ 347.067776][ T156] [ 347.067782][ T156] Chain exists of: [ 347.067782][ T156] &of->mutex --> (work_completion)(&worker->work) --> &p->lock [ 347.067782][ T156] [ 347.067810][ T156] Possible unsafe locking scenario: [ 347.067810][ T156] [ 347.067816][ T156] CPU0 CPU1 [ 347.067822][ T156] ---- ---- [ 347.067828][ T156] lock(&p->lock); [ 347.067840][ T156] lock((work_completion)(&worker->work)); [ 347.067854][ T156] lock(&p->lock); [ 347.067866][ T156] lock(&of->mutex); [ 347.067878][ T156] [ 347.067878][ T156] *** DEADLOCK *** [ 347.067878][ T156] [ 347.067883][ T156] 3 locks held by kworker/u8:7/156: [ 347.067894][ T156] #0: ffff888063753938 ((wq_completion)loop4){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 347.067941][ T156] #1: ffffc90003a37c40 ((work_completion)(&worker->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 347.067989][ T156] #2: ffff88805b090720 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 347.068031][ T156] [ 347.068031][ T156] stack backtrace: [ 347.068043][ T156] CPU: 0 UID: 0 PID: 156 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 347.068074][ T156] Tainted: [L]=SOFTLOCKUP [ 347.068081][ T156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 347.068094][ T156] Workqueue: loop4 loop_workfn [ 347.068110][ T156] Call Trace: [ 347.068117][ T156] [ 347.068125][ T156] dump_stack_lvl+0xe8/0x150 [ 347.068146][ T156] print_circular_bug+0x2e1/0x300 [ 347.068173][ T156] check_noncircular+0x12e/0x150 [ 347.068199][ T156] __lock_acquire+0x15a5/0x2d10 [ 347.068229][ T156] ? kernfs_seq_start+0x5c/0x420 [ 347.068249][ T156] lock_acquire+0x106/0x350 [ 347.068268][ T156] ? kernfs_seq_start+0x5c/0x420 [ 347.068292][ T156] ? kernfs_seq_start+0x5c/0x420 [ 347.068316][ T156] ? kernfs_seq_start+0x5c/0x420 [ 347.068337][ T156] mutex_lock_nested+0x5a/0x1d0 [ 347.068360][ T156] ? kernfs_seq_start+0x5c/0x420 [ 347.068383][ T156] kernfs_seq_start+0x5c/0x420 [ 347.068406][ T156] traverse+0x164/0x580 [ 347.068427][ T156] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 347.068449][ T156] seq_read_iter+0xd09/0xe20 [ 347.068475][ T156] ? __lock_acquire+0x6b5/0x2d10 [ 347.068497][ T156] ? __asan_memset+0x22/0x50 [ 347.068524][ T156] lo_rw_aio+0xc80/0xf00 [ 347.068546][ T156] ? __pfx_lo_rw_aio+0x10/0x10 [ 347.068565][ T156] ? kthread_associate_blkcg+0x490/0x600 [ 347.068585][ T156] ? rt_spin_unlock+0x160/0x200 [ 347.068610][ T156] loop_process_work+0x92a/0x11b0 [ 347.068633][ T156] ? __pfx_loop_process_work+0x10/0x10 [ 347.068652][ T156] ? add_lock_to_list+0xc7/0x100 [ 347.068677][ T156] ? lockdep_unlock+0x5d/0xd0 [ 347.068693][ T156] ? __lock_acquire+0x146e/0x2d10 [ 347.068722][ T156] ? process_one_work+0x8be/0x1630 [ 347.068746][ T156] ? process_one_work+0x8be/0x1630 [ 347.068775][ T156] ? process_one_work+0x8be/0x1630 [ 347.068798][ T156] process_one_work+0x98b/0x1630 [ 347.068830][ T156] ? __pfx_process_one_work+0x10/0x10 [ 347.068854][ T156] ? do_raw_spin_lock+0x12b/0x2f0 [ 347.068876][ T156] worker_thread+0xb49/0x1140 [ 347.068911][ T156] kthread+0x389/0x470 [ 347.068929][ T156] ? __pfx_worker_thread+0x10/0x10 [ 347.068953][ T156] ? __pfx_kthread+0x10/0x10 [ 347.068971][ T156] ret_from_fork+0x514/0xb70 [ 347.068993][ T156] ? __pfx_ret_from_fork+0x10/0x10 [ 347.069013][ T156] ? __switch_to+0xc79/0x1410 [ 347.069031][ T156] ? __pfx_kthread+0x10/0x10 [ 347.069049][ T156] ret_from_fork_asm+0x1a/0x30 [ 347.069085][ T156] [ 347.138442][ T9002] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 347.138528][ T9002] loop4: partition table partially beyond EOD, truncated [ 347.138931][ T9002] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 347.143254][ T9003] sg_write: data in/out 808464396/98 bytes for SCSI command 0x0-- guessing data in; [ 347.143254][ T9003] program syz.3.1053 not setting count and/or reply_len properly [ 347.256326][ T824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.256363][ T824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.256399][ T824] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 347.256424][ T824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.295220][ T9001] ALSA: mixer_oss: invalid OSS volume 'u' [ 347.357219][ T824] usb 2-1: config 0 descriptor?? [ 347.681551][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 347.732762][ T7634] udevd[7634]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 347.836996][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.837024][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.839949][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 347.839978][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 347.840041][ T10] usb 5-1: SerialNumber: syz [ 348.027821][ T9] usb 1-1: USB disconnect, device number 71 [ 348.065415][ T10] usb 5-1: 0:2 : does not exist [ 348.091398][ T10] usb 5-1: USB disconnect, device number 53 [ 348.126721][ T7634] udevd[7634]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.342741][ T824] usbhid 2-1:0.0: can't add hid device: -71 [ 348.342828][ T824] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 348.350834][ T824] usb 2-1: USB disconnect, device number 73