last executing test programs: 8.611302578s ago: executing program 3 (id=7563): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x2, &(0x7f00000011c0)=[{0x44, 0x0, 0x0, 0x5}, {0x6}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000100)) timer_settime(r0, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}}, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200000bd, 0xa, 0xfffffff8, 0x40}, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) getdents(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000001a0001002cbd7000000000000220200200000000013000"], 0x2c}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) timer_gettime(r0, &(0x7f0000000240)) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f0000000080)=@v1={0x1000000, [{0x3, 0xeec3}]}, 0xc, 0x2) 7.955066552s ago: executing program 0 (id=7567): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080010000400000007"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x40000) socket$netlink(0x10, 0x3, 0x15) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@deltaction={0x208, 0x31, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc8}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8b}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40c00}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xde0}}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40001}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) 7.730132901s ago: executing program 3 (id=7570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r3, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) acct(&(0x7f0000000180)='./file1\x00') acct(0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(0xffffffffffffffff, 0x4068aea3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01114000010203010902930003010000020904000000010100000a24010000000201021324060000060000000000000000020000000009240300000000030009240500070000000009240300ff0104040006240504"], 0x0) 7.233793356s ago: executing program 1 (id=7572): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200), 0x0, 0x8020) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="5b51711fa0da2d73a4b0e9c72c28379d30eb171da02c1d734fb3f20678", 0x1d}], 0x1) 7.046386901s ago: executing program 1 (id=7574): r0 = io_uring_setup(0x77c8, &(0x7f0000000180)={0x0, 0x2951, 0x40, 0x0, 0x3}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0x9, @empty, 0x6}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r5, 0x0) listen(r3, 0x0) read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0001"], 0x0, 0x3f, 0xfffffffffffffe2d, 0x1}, 0x28) r7 = socket(0x10, 0x803, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000000)=0x11) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [{0x2, 0x4}], {0x4, 0x4}, [], {}, {0x20, 0x7}}, 0x3a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r9, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r6, &(0x7f0000000400)=[{{&(0x7f0000000580)={0x2, 0x4e5c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast2, @empty}}}], 0x38}}], 0x1, 0x4880) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) pwritev2(r7, &(0x7f0000000140)=[{&(0x7f00000001c0)="05c9d94ce968493cc523a0657b0d912fbc66c67068fb2aeb0eb2d8fb7b2988ee25adc4773bbfb067a0c7aece6b25dcf7607ce06f12f3a249861b3842ece79f00b688168008e996474e3f698f940a89e17fce5b4dd3f0552360c6a6ecb7d9d18fd404acf8694db37ff0d5f0e0feab8c45d4642bec52708ed3", 0x78}, {&(0x7f0000000300)="12b138d805434c24dd2cda0eb408c7917a5be19594d9fb573a7b6e5bb513aee360640a39dfa30a540ec70f29288d4733cb4c10bcfbba0d7bb93583e90858cf321219a967a5d7ca3b2bf474c2a9cb2975", 0x50}], 0x2, 0xffffffff, 0xd68a, 0xc) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300), 0x6c, 0x0, &(0x7f0000000480)="ba2c7a1e07a7cccb9d9621630c1cad96117cb89694d49ae2400a8d594bb31e17659ab39ac6049e60d9bac38513152c421cf55cbc0ea59d87e277f967767994cbf1245bad0284ed376c1d444ef517bb7ec24eed9e914a884419869fa090ea05824231177dc90033e070ac051a"}) 6.426257521s ago: executing program 1 (id=7575): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xffff, 0x0, 0x84, 0x0, @dev, @local}}}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$video(0x0, 0x0, 0x10b200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) unshare(0x8040600) r2 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) tee(r2, r2, 0x9, 0xb) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0x100000, 0x21d000}) 5.83608172s ago: executing program 0 (id=7576): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000140)={'#! ', './file1', [{0x20, '#! '}]}, 0xf) close(r3) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) r4 = io_uring_setup(0x1f1c, &(0x7f00000005c0)={0x0, 0x17d7, 0xa, 0x3, 0x283}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) syz_usb_connect(0x5, 0x3f, &(0x7f0000005100)=ANY=[@ANYBLOB="1201100381d7df08da0594008a380102030109022d00010bff504d0904f2e103dea33f0509057bfe080000ac0709050602773d85070709050e3b"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) r6 = accept$alg(r5, 0x0, 0x0) readv(r6, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/9, 0x9}, {&(0x7f00000003c0)=""/203, 0xcb}], 0x2) sendmmsg$alg(r6, &(0x7f0000003880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="d1039ed9d2390c58cf0022d8ce07314c59b6ba3d19e8809fe09a3a30f1039e4e4f258b3352d07883d35b555e0f1d0f47bf", 0x31}], 0x1, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)='\t', 0x1) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 5.163501125s ago: executing program 2 (id=7578): socket$unix(0x1, 0x5, 0x0) r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0xd9f, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_udp(0xa, 0x2, 0x0) accept$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000240)=0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x43) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.930155019s ago: executing program 2 (id=7580): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65f, 0x0, 0x9, 0x42}, &(0x7f00000011c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(r2, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 4.839625663s ago: executing program 4 (id=7581): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r0 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) 4.661518888s ago: executing program 2 (id=7582): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) 4.392488222s ago: executing program 2 (id=7583): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000240)="341addd455c01f7386f8ff0eea12df9233c084245cc764def24d8073535cfebc74480ed3fb4a719c3e52036f7d98a2c06cd17a29f84b51ea386a2846ae0b61664decdfd8954510ca0140ab30aaa284ccd526fc2c7c23836743597a8d38dbcc0ac615fa23019a5f8ad40c8fc8463b0c90b4c298cb7d42f00dffffef4579cbdb3b11e61ab2915084e1377b92a0bd60e20d745b798ab40da7", 0x97, 0x20000005, &(0x7f0000000100)={0x2, 0x4e24}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r3, 0x400000000000007c) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xe1) close_range(r2, 0xffffffffffffffff, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f2, 0x1, 0x70bd26, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, 0x0, &(0x7f0000000340)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0)=0xa, 0x4) recvfrom(r0, &(0x7f0000000140)=""/115, 0x73, 0x734, 0x0, 0x0) 4.028498419s ago: executing program 3 (id=7584): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802", 0x1b}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1c0000001d008103", 0x8}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0xfdef) 3.902274947s ago: executing program 0 (id=7585): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}, 0x1010000}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 3.798568863s ago: executing program 3 (id=7586): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x111, 0x9}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) capget(&(0x7f0000000180)={0x10040291}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$kcm(0x2, 0x200000000000004, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) setsockopt$sock_attach_bpf(r6, 0x1, 0x50, &(0x7f0000000100), 0x48) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x4) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000080)=0x0) capset(&(0x7f00000001c0)={0x20080522, r7}, &(0x7f0000000200)={0x5, 0x3, 0x3, 0x4, 0x1, 0xffffffff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.642683324s ago: executing program 0 (id=7587): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0x0, 0x1, 0xffffed05}}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000580)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r9 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79b2, 0x600, 0xfffffffb, 0x232, 0x0, r8}, 0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r9, 0x627, 0x4c1, 0x63, 0x0, 0x0) timerfd_create(0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) 3.394315365s ago: executing program 2 (id=7588): bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x40042, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r3 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000", @ANYRES16=r6, @ANYBLOB="00012bbd70dbdf2504000000050005000200000014000100200100000000000000000000000000010800020000000000080002000600000014000400fdffffff0600000008000000000000000200020001800000080003000700000014000100fe80000000000000000000000000002808000200040000000000"], 0x80}, 0x1, 0x0, 0x0, 0x810}, 0x8010) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f0000000080)={0x0, 0x7ff}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)=0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r8 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r9 = socket$netlink(0x10, 0x3, 0x2) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r10, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r11, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r11, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r10, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r11, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r10, 0x3b89, &(0x7f0000000100)={0x28, 0x1, r12, r11, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000000c0)}) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x9, &(0x7f0000000cc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r8, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 3.07324141s ago: executing program 3 (id=7589): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4480, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x64, &(0x7f0000000000)=0x2040, 0x4) syz_open_dev$loop(&(0x7f0000000080), 0x45ffffb, 0x122c42) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0xc000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(r1, &(0x7f00000057c0)={0x2020}, 0x2020) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000040)) timer_create(0x0, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x2}, 0x3e, [0x9, 0x1, 0x8, 0x42, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x80000800, 0x1000, 0x7, 0xe, 0x4623b, 0x0, 0x2, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0xc5, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x39cd, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x1, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0xfffffffc, 0xb, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0xbde, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8d, 0x6, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x4, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x5, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x1, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x132, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) readv(r5, &(0x7f0000001900)=[{0x0, 0xffffffffffffff96}], 0x1) write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x25001, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xe) 2.602612163s ago: executing program 4 (id=7590): mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0xd422864fd73fa2a8}, [@IFLA_IFNAME={0x14}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c800}, 0x8040002) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r3, 0x560b, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x0, &(0x7f0000000040)) (async) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) 2.069691921s ago: executing program 0 (id=7591): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000024c0)='net/udplite\x00') readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/169, 0xa9}], 0x1) 1.960961978s ago: executing program 4 (id=7592): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65f, 0x0, 0x9, 0x42}, &(0x7f00000011c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(r2, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 1.756356606s ago: executing program 4 (id=7593): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) 1.755458428s ago: executing program 0 (id=7594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r3, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) acct(&(0x7f0000000180)='./file1\x00') acct(0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(0xffffffffffffffff, 0x4068aea3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01114000010203010902930003010000020904000000010100000a24010000000201021324060000060000000000000000020000000009240300000000030009240500070000000009240300ff0104040006240504"], 0x0) 1.70227841s ago: executing program 4 (id=7595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r3, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_CAP_DISABLE_QUIRKS2(r6, 0x4068aea3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 1.51130827s ago: executing program 1 (id=7596): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r1 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x34000}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0, 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x1) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0xa6, 0x2) getdents(r3, 0x0, 0x0) 1.066378953s ago: executing program 1 (id=7597): r0 = semget(0x2, 0x1, 0x104) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7d, 0x1800}], 0x2) semop(r0, &(0x7f0000000380)=[{0x1, 0xbbdd, 0x1000}, {0x1, 0x2, 0x1000}], 0x2) 740.549645ms ago: executing program 1 (id=7598): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4038ae7a, &(0x7f0000000240)={[{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x6, 0xfffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}]}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000940), &(0x7f0000000700)='\x00', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r7, r7, r6}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384\x00'}}) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r8, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x100, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="b8010000190001000000000000000000e0000002000000000000000000000000000000000000000000000000000000004e240000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00"/112], 0xb8}}, 0x4004) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x4004, @fd, 0x823, &(0x7f00000001c0)=[{0x0}], 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="660f382285f5ff0f350f01c4b800008ee0baf80c66b81c88bb8e66efbafc0c66b80000000066efba4000b80090ef3e26f30f1ef90f68b40000ba6100ec65260fc7aa8000", 0x44}], 0x1, 0x5, &(0x7f0000000300), 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000ffffffffffdcffff000000000000000000000000000001000000000000000000fdfffffffffffffffbffffffffffffff00"/112], 0xb8}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 498.10578ms ago: executing program 2 (id=7599): syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x42801, 0x0) (fail_nth: 8) 134.50911ms ago: executing program 3 (id=7600): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="001800000004ceb63bb3db428a588531e7f3d6714e790c4d47fe6a2974b25756442c5a7adc21c7c06ffdb36692827c1243d38f6960d5f4da41e92f511a9ad24df4ecac8dc9f517b016fe64f91e07cc9d802c0d13"], 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=7601): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000780)=ANY=[@ANYBLOB="080000000000000000000000000000000000000000000000000000000000000004"], &(0x7f0000000080)=0x2c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000340)={0x385d, 0x1, "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"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2885bd82b5506811) rmdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) r5 = socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) r6 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="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"/4451], 0x1078}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): rface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1783.964463][ T9] usb 5-1: config 0 has no interface number 0 [ 1783.969089][T23109] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1783.971443][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1783.980440][T23109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1783.988635][T24886] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1784.007644][T24886] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1784.019756][T24886] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1784.032733][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1784.041886][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.044878][T23109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1784.050568][ T9] usb 5-1: Product: syz [ 1784.050589][ T9] usb 5-1: Manufacturer: syz [ 1784.050607][ T9] usb 5-1: SerialNumber: syz [ 1784.093691][ T9] usb 5-1: config 0 descriptor?? [ 1784.104531][T24886] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1784.122140][T24886] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1784.133939][T24886] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1784.144463][T23109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1784.146434][T24886] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1784.203248][T24886] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1784.238100][T24886] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1784.246800][T24886] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1784.258836][T24886] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1784.271425][T24886] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1784.289334][T24886] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1784.317801][T24886] usb 1-1: string descriptor 0 read error: -22 [ 1784.324645][T24886] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1784.334997][T24886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.416928][T24886] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1784.532411][T24020] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 1784.704660][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1784.723306][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1784.732795][T24020] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1784.762751][T24020] usb 3-1: config 0 has no interfaces? [ 1784.784329][T24020] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1784.803328][T24020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.826938][T24020] usb 3-1: Product: syz [ 1784.840698][T24020] usb 3-1: Manufacturer: syz [ 1784.860383][T24020] usb 3-1: SerialNumber: syz [ 1784.927009][T24020] usb 3-1: config 0 descriptor?? [ 1784.965302][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 1784.986880][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 1784.997353][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1785.011499][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 1785.076592][T24907] usb 2-1: USB disconnect, device number 45 [ 1785.158143][T30427] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7332'. [ 1785.182346][T30427] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7332'. [ 1785.211199][ T9] usb 3-1: USB disconnect, device number 15 [ 1785.943204][T30446] xt_TCPMSS: Only works on TCP SYN packets [ 1786.452248][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1786.522678][T24020] usb 5-1: USB disconnect, device number 6 [ 1786.584324][T30455] FAULT_INJECTION: forcing a failure. [ 1786.584324][T30455] name failslab, interval 1, probability 0, space 0, times 0 [ 1786.603087][T30455] CPU: 0 UID: 0 PID: 30455 Comm: syz.4.7340 Tainted: G L syzkaller #0 PREEMPT(full) [ 1786.603112][T30455] Tainted: [L]=SOFTLOCKUP [ 1786.603117][T30455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1786.603125][T30455] Call Trace: [ 1786.603130][T30455] [ 1786.603136][T30455] dump_stack_lvl+0xe8/0x150 [ 1786.603159][T30455] should_fail_ex+0x412/0x560 [ 1786.603176][T30455] ? alloc_inode+0x6a/0x1b0 [ 1786.603194][T30455] should_failslab+0xa8/0x100 [ 1786.603211][T30455] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 1786.603225][T30455] ? simple_start_creating+0xcc/0x110 [ 1786.603247][T30455] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1786.603266][T30455] alloc_inode+0x6a/0x1b0 [ 1786.603285][T30455] new_inode+0x22/0x170 [ 1786.603308][T30455] __debugfs_create_file+0xb8/0x400 [ 1786.603328][T30455] debugfs_create_file_full+0x3f/0x60 [ 1786.603348][T30455] ref_tracker_dir_debugfs+0x197/0x360 [ 1786.603366][T30455] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1786.603398][T30455] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 1786.603413][T30455] ? alloc_netdev_mqs+0xa6/0x11b0 [ 1786.603429][T30455] ? __raw_spin_lock_init+0x45/0x100 [ 1786.603444][T30455] alloc_netdev_mqs+0x272/0x11b0 [ 1786.603457][T30455] ? __pfx_erspan_setup+0x10/0x10 [ 1786.603479][T30455] rtnl_create_link+0x31f/0xd70 [ 1786.603497][T30455] rtnl_newlink_create+0x277/0xb70 [ 1786.603519][T30455] ? __mutex_lock+0x5ac/0x1300 [ 1786.603535][T30455] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1786.603555][T30455] ? __pfx___mutex_lock+0x10/0x10 [ 1786.603574][T30455] ? ns_capable+0x89/0xe0 [ 1786.603592][T30455] rtnl_newlink+0x1666/0x1be0 [ 1786.603617][T30455] ? __pfx_rtnl_newlink+0x10/0x10 [ 1786.603632][T30455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.603665][T30455] ? kasan_quarantine_put+0xbb/0x1f0 [ 1786.603678][T30455] ? lockdep_hardirqs_on+0x7a/0x110 [ 1786.603699][T30455] ? kmem_cache_free+0x187/0x630 [ 1786.603712][T30455] ? nlmon_xmit+0xb0/0x100 [ 1786.603738][T30455] ? __lock_acquire+0x6b5/0x2cf0 [ 1786.603757][T30455] ? __local_bh_enable_ip+0xd0/0x130 [ 1786.603773][T30455] ? lockdep_hardirqs_on+0x7a/0x110 [ 1786.603798][T30455] ? __dev_queue_xmit+0x277/0x3890 [ 1786.603810][T30455] ? __local_bh_enable_ip+0xd0/0x130 [ 1786.603825][T30455] ? __dev_queue_xmit+0x277/0x3890 [ 1786.603852][T30455] ? __pfx_rtnl_newlink+0x10/0x10 [ 1786.603868][T30455] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1786.603887][T30455] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1786.603903][T30455] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1786.603918][T30455] ? ref_tracker_free+0x693/0x840 [ 1786.603933][T30455] ? __copy_skb_header+0xa3/0x4a0 [ 1786.603946][T30455] ? __pfx_ref_tracker_free+0x10/0x10 [ 1786.603961][T30455] ? __skb_clone+0x63/0x7a0 [ 1786.603979][T30455] netlink_rcv_skb+0x232/0x4b0 [ 1786.603996][T30455] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1786.604013][T30455] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1786.604036][T30455] ? netlink_deliver_tap+0x2e/0x1b0 [ 1786.604056][T30455] netlink_unicast+0x80f/0x9b0 [ 1786.604077][T30455] ? __pfx_netlink_unicast+0x10/0x10 [ 1786.604092][T30455] ? netlink_sendmsg+0x650/0xb40 [ 1786.604108][T30455] ? skb_put+0x11b/0x210 [ 1786.604127][T30455] netlink_sendmsg+0x813/0xb40 [ 1786.604149][T30455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1786.604167][T30455] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1786.604184][T30455] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1786.604200][T30455] ____sys_sendmsg+0x972/0x9f0 [ 1786.604219][T30455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1786.604236][T30455] ? import_iovec+0x73/0xa0 [ 1786.604257][T30455] ___sys_sendmsg+0x2a5/0x360 [ 1786.604272][T30455] ? __pfx____sys_sendmsg+0x10/0x10 [ 1786.604304][T30455] ? __fget_files+0x2a/0x420 [ 1786.604321][T30455] ? __fget_files+0x3a0/0x420 [ 1786.604344][T30455] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1786.604358][T30455] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1786.604377][T30455] ? __pfx_ksys_write+0x10/0x10 [ 1786.604398][T30455] do_syscall_64+0x14d/0xf80 [ 1786.604409][T30455] ? trace_irq_disable+0x3b/0x150 [ 1786.604425][T30455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.604438][T30455] ? clear_bhb_loop+0x40/0x90 [ 1786.604453][T30455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.604466][T30455] RIP: 0033:0x7fabe899c799 [ 1786.604478][T30455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1786.604490][T30455] RSP: 002b:00007fabe9868028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1786.604504][T30455] RAX: ffffffffffffffda RBX: 00007fabe8c15fa0 RCX: 00007fabe899c799 [ 1786.604513][T30455] RDX: 0000000000000810 RSI: 0000200000000300 RDI: 0000000000000003 [ 1786.604521][T30455] RBP: 00007fabe9868090 R08: 0000000000000000 R09: 0000000000000000 [ 1786.604529][T30455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1786.604536][T30455] R13: 00007fabe8c16038 R14: 00007fabe8c15fa0 R15: 00007fabe8d3fa48 [ 1786.604555][T30455] [ 1786.604562][T30455] debugfs: out of free dentries, can not create file 'netdev@ffff88807a4fc620' [ 1787.123463][T24907] usb 1-1: USB disconnect, device number 15 [ 1787.142278][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1787.191490][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1787.223676][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1787.267390][ T9] usb 3-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 1787.299445][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.322197][ T9] usb 3-1: Product: syz [ 1787.326390][ T9] usb 3-1: Manufacturer: syz [ 1787.373639][ T9] usb 3-1: SerialNumber: syz [ 1787.439498][ T9] usb 3-1: config 0 descriptor?? [ 1787.774952][T30446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7337'. [ 1787.796686][T30446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1787.813589][T30446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1787.862212][T30467] usb usb8: usbfs: process 30467 (syz.4.7343) did not claim interface 0 before use [ 1787.874914][T30467] usb usb8: selecting invalid altsetting 2047 [ 1787.899219][T30467] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1788.603232][T24886] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1788.882314][T24886] usb 2-1: Using ep0 maxpacket: 32 [ 1788.889877][T24886] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1789.002447][ T9] usb 3-1: USB disconnect, device number 16 [ 1789.045100][T24886] usb 2-1: config 0 has no interface number 0 [ 1789.079525][T24886] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1789.116082][T24886] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1789.126516][T24886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.138452][T24886] usb 2-1: Product: syz [ 1789.143276][T24886] usb 2-1: Manufacturer: syz [ 1789.151693][T24886] usb 2-1: SerialNumber: syz [ 1789.195100][T24886] usb 2-1: config 0 descriptor?? [ 1789.206077][T24886] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1789.312636][T11280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.322194][T11280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1789.351942][T24886] em28xx 2-1:0.132: Video interface 132 found: [ 1789.474966][T24886] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1789.598670][T24886] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1789.622164][T24886] em28xx 2-1:0.132: board has no eeprom [ 1789.702469][T24886] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1789.716853][T24886] em28xx 2-1:0.132: analog set to bulk mode. [ 1789.742257][ T9] em28xx 2-1:0.132: Registering V4L2 extension [ 1789.776824][T24886] usb 2-1: USB disconnect, device number 46 [ 1789.805588][T24886] em28xx 2-1:0.132: Disconnecting em28xx [ 1790.192225][T24907] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 1790.453914][T24907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1790.556592][T24907] usb 4-1: config 0 has no interfaces? [ 1790.602386][T24907] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1790.639889][T30496] usb usb8: usbfs: process 30496 (syz.4.7350) did not claim interface 0 before use [ 1790.652011][T30496] usb usb8: selecting invalid altsetting 2047 [ 1790.709984][T30496] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1790.774616][T24907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.812656][T24907] usb 4-1: Product: syz [ 1790.837687][T24907] usb 4-1: Manufacturer: syz [ 1790.847459][T24907] usb 4-1: SerialNumber: syz [ 1790.869247][T24907] usb 4-1: config 0 descriptor?? [ 1791.090902][T30487] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7349'. [ 1791.103631][T30487] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7349'. [ 1791.138015][ T9] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1791.155943][ T9] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1791.174459][ T9] em28xx 2-1:0.132: No AC97 audio processor [ 1791.323274][T30501] hub 1-0:1.0: USB hub found [ 1791.461678][T24888] usb 4-1: USB disconnect, device number 115 [ 1791.480870][ T9] usb 2-1: Decoder not found [ 1791.498770][T30501] hub 1-0:1.0: 1 port detected [ 1791.506594][ T9] em28xx 2-1:0.132: failed to create media graph [ 1791.529113][ T9] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1791.569778][ T9] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1791.582420][T24886] em28xx 2-1:0.132: Closing input extension [ 1791.682713][T24886] em28xx 2-1:0.132: Freeing device [ 1791.732571][T24907] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 1791.904513][T24907] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1791.920595][T24907] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1791.962890][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.969529][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.981038][T30510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7355'. [ 1792.022745][T24907] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1792.041812][T30510] netlink: 312 bytes leftover after parsing attributes in process `syz.0.7355'. [ 1792.090607][T24907] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1792.153778][T24907] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1792.206142][T24907] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1792.215512][T24907] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1792.246720][T24907] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1792.268859][T24907] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1792.289756][T24907] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1792.303285][T24907] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1792.311170][T24907] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1792.325073][T24907] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1792.370078][T24907] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1792.401424][T24907] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1792.418518][T24907] usb 3-1: string descriptor 0 read error: -22 [ 1792.427665][T24907] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1792.438890][T24907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.477035][T24907] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1792.630982][T30530] usb usb8: usbfs: process 30530 (syz.0.7360) did not claim interface 0 before use [ 1792.681989][T30530] usb usb8: selecting invalid altsetting 2047 [ 1792.875993][T30530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1793.045199][T30539] usb usb8: usbfs: process 30539 (syz.3.7361) did not claim interface 0 before use [ 1793.090551][T30539] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1794.692213][T24907] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1794.752494][ T5894] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 1794.854949][T24907] usb 5-1: config 0 has no interfaces? [ 1794.893137][T24907] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1794.912461][T24886] usb 3-1: USB disconnect, device number 17 [ 1794.945284][T24907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.955709][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1794.972168][ T5894] usb 1-1: config 0 has no interfaces? [ 1794.977774][T24907] usb 5-1: Product: syz [ 1794.981963][T24907] usb 5-1: Manufacturer: syz [ 1795.005795][ T5894] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1795.018204][T24907] usb 5-1: SerialNumber: syz [ 1795.025253][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.040018][T24907] usb 5-1: config 0 descriptor?? [ 1795.065962][ T5894] usb 1-1: Product: syz [ 1795.080225][ T5894] usb 1-1: Manufacturer: syz [ 1795.088628][ T5894] usb 1-1: SerialNumber: syz [ 1795.117076][ T5894] usb 1-1: config 0 descriptor?? [ 1795.282809][T30549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7366'. [ 1795.393327][T30579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7366'. [ 1795.466211][T30552] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7367'. [ 1795.494340][T24886] usb 5-1: USB disconnect, device number 7 [ 1795.512927][T30552] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7367'. [ 1795.631682][T24888] usb 1-1: USB disconnect, device number 16 [ 1796.418077][T30594] usb usb8: usbfs: process 30594 (syz.2.7375) did not claim interface 0 before use [ 1796.434736][T30594] usb usb8: selecting invalid altsetting 2047 [ 1796.495343][T30594] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1796.502248][T24886] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1796.684479][T24886] usb 5-1: Using ep0 maxpacket: 8 [ 1796.700684][T30605] usb usb8: usbfs: process 30605 (syz.1.7379) did not claim interface 0 before use [ 1796.722657][T30605] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1796.811321][T24886] usb 5-1: too many configurations: 129, using maximum allowed: 8 [ 1796.950819][T24886] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 1796.960557][T24886] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 1796.976440][T24886] usb 5-1: Product: syz [ 1797.058806][T24886] usb 5-1: Manufacturer: syz [ 1797.102220][T24886] usb 5-1: SerialNumber: syz [ 1797.186276][T24886] usb 5-1: config 0 descriptor?? [ 1797.597018][T30613] FAULT_INJECTION: forcing a failure. [ 1797.597018][T30613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1797.611103][T24888] usb 4-1: new low-speed USB device number 116 using dummy_hcd [ 1797.634448][T30613] CPU: 1 UID: 0 PID: 30613 Comm: syz.0.7383 Tainted: G L syzkaller #0 PREEMPT(full) [ 1797.634482][T30613] Tainted: [L]=SOFTLOCKUP [ 1797.634491][T30613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1797.634502][T30613] Call Trace: [ 1797.634511][T30613] [ 1797.634520][T30613] dump_stack_lvl+0xe8/0x150 [ 1797.634555][T30613] should_fail_ex+0x412/0x560 [ 1797.634588][T30613] _copy_from_user+0x2d/0xb0 [ 1797.634619][T30613] vmemdup_user+0x5e/0xd0 [ 1797.634648][T30613] map_get_next_key+0x1c3/0x620 [ 1797.634681][T30613] ? bpf_lsm_bpf+0x9/0x20 [ 1797.634707][T30613] ? security_bpf+0x7e/0x2d0 [ 1797.634733][T30613] __sys_bpf+0x768/0x950 [ 1797.634765][T30613] ? __pfx___sys_bpf+0x10/0x10 [ 1797.634812][T30613] ? ksys_write+0x242/0x270 [ 1797.634838][T30613] ? __pfx_ksys_write+0x10/0x10 [ 1797.634866][T30613] __x64_sys_bpf+0x7c/0x90 [ 1797.634895][T30613] do_syscall_64+0x14d/0xf80 [ 1797.634914][T30613] ? trace_irq_disable+0x3b/0x150 [ 1797.634951][T30613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.634972][T30613] ? clear_bhb_loop+0x40/0x90 [ 1797.634996][T30613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.635014][T30613] RIP: 0033:0x7fc7ce59c799 [ 1797.635034][T30613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1797.635052][T30613] RSP: 002b:00007fc7cf490028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1797.635082][T30613] RAX: ffffffffffffffda RBX: 00007fc7ce815fa0 RCX: 00007fc7ce59c799 [ 1797.635098][T30613] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000004 [ 1797.635112][T30613] RBP: 00007fc7cf490090 R08: 0000000000000000 R09: 0000000000000000 [ 1797.635125][T30613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1797.635138][T30613] R13: 00007fc7ce816038 R14: 00007fc7ce815fa0 R15: 00007fc7ce93fa48 [ 1797.635170][T30613] [ 1797.887102][T24886] usb 5-1: USB disconnect, device number 8 [ 1797.933210][T24888] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1797.940644][T24888] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1798.035442][T24888] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1798.099076][T24888] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1798.160567][T24888] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1798.247427][T24888] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1798.257431][T24888] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1798.287893][T24888] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1798.330366][T24888] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1798.349258][T24888] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1798.364329][T24888] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1798.382756][T24888] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1798.397224][T24888] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1798.412197][T24888] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1798.424164][T24888] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1798.494665][T24888] usb 4-1: string descriptor 0 read error: -22 [ 1798.504978][T24888] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1798.518135][T24888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.567191][T24888] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1798.752213][T24888] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1798.912367][T24886] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1798.923120][T24888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1798.934347][T24888] usb 2-1: config 0 has no interfaces? [ 1798.942785][ T9] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1798.950673][T24888] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1798.965712][T24888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.974571][T24888] usb 2-1: Product: syz [ 1798.978790][T24888] usb 2-1: Manufacturer: syz [ 1798.984817][T24888] usb 2-1: SerialNumber: syz [ 1798.994729][T24888] usb 2-1: config 0 descriptor?? [ 1799.062987][T24886] usb 3-1: Using ep0 maxpacket: 16 [ 1799.071743][T24886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1799.084016][T24886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1799.095913][T24886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1799.107275][T24886] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1799.117988][T24886] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1799.134221][T24886] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1799.144483][T11274] wlan1: Trigger new scan to find an IBSS to join [ 1799.151477][T24886] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1799.163567][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1799.173379][T24886] usb 3-1: Manufacturer: syz [ 1799.180739][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 1799.195430][T24886] usb 3-1: config 0 descriptor?? [ 1799.200968][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1799.209791][ T9] usb 1-1: config 0 has no interface number 0 [ 1799.214747][T30625] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7388'. [ 1799.230571][ T9] usb 1-1: New USB device found, idVendor=16d8, idProduct=7251, bcdDevice=2c.bc [ 1799.231053][T30625] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7388'. [ 1799.371591][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.385648][T24888] usb 2-1: USB disconnect, device number 47 [ 1799.443798][ T9] usb 1-1: Product: syz [ 1799.458261][ T9] usb 1-1: Manufacturer: syz [ 1799.469385][ T9] usb 1-1: SerialNumber: syz [ 1799.481493][ T9] usb 1-1: config 0 descriptor?? [ 1799.786684][T30631] syzkaller1: entered promiscuous mode [ 1799.793102][T30631] syzkaller1: entered allmulticast mode [ 1799.802262][T24886] rc_core: IR keymap rc-hauppauge not found [ 1799.887230][T24886] Registered IR keymap rc-empty [ 1799.936621][T24886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1799.989035][ T9] usb 1-1: USB disconnect, device number 17 [ 1800.097333][T24886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1800.147347][T24886] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1800.169828][T24886] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input113 [ 1800.189103][T24886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1800.212384][T24886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1800.282284][T24886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1800.334586][T24886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1800.362352][T24886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1800.390133][T24886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1800.422444][T24886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1800.442910][T24886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1800.462883][T24886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1800.502306][T24886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1800.536133][T24886] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1800.568733][T24886] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1800.647806][T30649] FAULT_INJECTION: forcing a failure. [ 1800.647806][T30649] name failslab, interval 1, probability 0, space 0, times 0 [ 1800.662500][T30649] CPU: 0 UID: 0 PID: 30649 Comm: syz.0.7395 Tainted: G L syzkaller #0 PREEMPT(full) [ 1800.662540][T30649] Tainted: [L]=SOFTLOCKUP [ 1800.662547][T30649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1800.662559][T30649] Call Trace: [ 1800.662568][T30649] [ 1800.662577][T30649] dump_stack_lvl+0xe8/0x150 [ 1800.662611][T30649] should_fail_ex+0x412/0x560 [ 1800.662643][T30649] should_failslab+0xa8/0x100 [ 1800.662670][T30649] ? do_getname+0x2e/0x250 [ 1800.662696][T30649] kmem_cache_alloc_noprof+0x87/0x650 [ 1800.662716][T30649] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1800.662743][T30649] do_getname+0x2e/0x250 [ 1800.662776][T30649] ? getname_flags+0x11/0x20 [ 1800.662819][T30649] __se_sys_file_getattr+0x1a3/0x5b0 [ 1800.662850][T30649] ? __pfx___se_sys_file_getattr+0x10/0x10 [ 1800.662880][T30649] ? fput+0xa0/0xd0 [ 1800.662906][T30649] ? ksys_write+0x242/0x270 [ 1800.662937][T30649] ? __x64_sys_file_getattr+0x20/0xc0 [ 1800.662970][T30649] do_syscall_64+0x14d/0xf80 [ 1800.662988][T30649] ? trace_irq_disable+0x3b/0x150 [ 1800.663014][T30649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1800.663035][T30649] ? clear_bhb_loop+0x40/0x90 [ 1800.663058][T30649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1800.663078][T30649] RIP: 0033:0x7fc7ce59c799 [ 1800.663098][T30649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1800.663116][T30649] RSP: 002b:00007fc7cf490028 EFLAGS: 00000246 ORIG_RAX: 00000000000001d4 [ 1800.663138][T30649] RAX: ffffffffffffffda RBX: 00007fc7ce815fa0 RCX: 00007fc7ce59c799 [ 1800.663154][T30649] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: ffffffffffffffff [ 1800.663169][T30649] RBP: 00007fc7cf490090 R08: 0000000000000100 R09: 0000000000000000 [ 1800.663182][T30649] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 1800.663195][T30649] R13: 00007fc7ce816038 R14: 00007fc7ce815fa0 R15: 00007fc7ce93fa48 [ 1800.663225][T30649] [ 1801.085295][T30655] syzkaller0: entered promiscuous mode [ 1801.095479][T30655] syzkaller0: entered allmulticast mode [ 1801.114928][T30655] 0: reclassify loop, rule prio 0, protocol 800 [ 1801.287631][T30658] usb usb8: usbfs: process 30658 (syz.0.7397) did not claim interface 0 before use [ 1801.299459][T30658] usb usb8: selecting invalid altsetting 2047 [ 1801.391545][T30658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1801.832242][ T5894] usb 3-1: USB disconnect, device number 18 [ 1801.965914][T30666] usb usb8: usbfs: process 30666 (syz.1.7399) did not claim interface 0 before use [ 1801.984769][T30666] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1802.219222][T24907] usb 4-1: USB disconnect, device number 116 [ 1802.540250][T30674] FAULT_INJECTION: forcing a failure. [ 1802.540250][T30674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1802.592198][T30674] CPU: 1 UID: 0 PID: 30674 Comm: syz.4.7404 Tainted: G L syzkaller #0 PREEMPT(full) [ 1802.592224][T30674] Tainted: [L]=SOFTLOCKUP [ 1802.592229][T30674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1802.592237][T30674] Call Trace: [ 1802.592243][T30674] [ 1802.592249][T30674] dump_stack_lvl+0xe8/0x150 [ 1802.592272][T30674] should_fail_ex+0x412/0x560 [ 1802.592291][T30674] _copy_from_iter+0x1d3/0x1670 [ 1802.592311][T30674] ? rcu_is_watching+0x15/0xb0 [ 1802.592332][T30674] ? __pfx__copy_from_iter+0x10/0x10 [ 1802.592347][T30674] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 1802.592368][T30674] ? netlink_sendmsg+0x650/0xb40 [ 1802.592383][T30674] ? skb_put+0x11b/0x210 [ 1802.592403][T30674] netlink_sendmsg+0x6c0/0xb40 [ 1802.592424][T30674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1802.592442][T30674] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1802.592459][T30674] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1802.592475][T30674] ____sys_sendmsg+0x972/0x9f0 [ 1802.592493][T30674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1802.592510][T30674] ? import_iovec+0x73/0xa0 [ 1802.592529][T30674] ___sys_sendmsg+0x2a5/0x360 [ 1802.592544][T30674] ? __pfx____sys_sendmsg+0x10/0x10 [ 1802.592575][T30674] ? __fget_files+0x2a/0x420 [ 1802.592592][T30674] ? __fget_files+0x3a0/0x420 [ 1802.592614][T30674] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1802.592628][T30674] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1802.592645][T30674] ? __pfx_ksys_write+0x10/0x10 [ 1802.592664][T30674] do_syscall_64+0x14d/0xf80 [ 1802.592676][T30674] ? trace_irq_disable+0x3b/0x150 [ 1802.592693][T30674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.592705][T30674] ? clear_bhb_loop+0x40/0x90 [ 1802.592720][T30674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.592732][T30674] RIP: 0033:0x7fabe899c799 [ 1802.592745][T30674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1802.592757][T30674] RSP: 002b:00007fabe9868028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1802.592771][T30674] RAX: ffffffffffffffda RBX: 00007fabe8c15fa0 RCX: 00007fabe899c799 [ 1802.592781][T30674] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 1802.592789][T30674] RBP: 00007fabe9868090 R08: 0000000000000000 R09: 0000000000000000 [ 1802.592797][T30674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1802.592804][T30674] R13: 00007fabe8c16038 R14: 00007fabe8c15fa0 R15: 00007fabe8d3fa48 [ 1802.592822][T30674] [ 1802.869800][T30676] netlink: 'syz.2.7405': attribute type 2 has an invalid length. [ 1802.877815][T30676] netlink: 'syz.2.7405': attribute type 5 has an invalid length. [ 1802.885587][T30676] netlink: 'syz.2.7405': attribute type 2 has an invalid length. [ 1802.893387][T30676] netlink: 'syz.2.7405': attribute type 5 has an invalid length. [ 1803.062485][T24907] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 1803.073882][T23109] wlan1: Trigger new scan to find an IBSS to join [ 1803.249493][T24907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1803.269915][T24907] usb 4-1: config 0 has no interfaces? [ 1803.278093][T24907] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1803.287399][T24907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.295862][T24907] usb 4-1: Product: syz [ 1803.300453][T24907] usb 4-1: Manufacturer: syz [ 1803.305678][T24907] usb 4-1: SerialNumber: syz [ 1803.327338][T24907] usb 4-1: config 0 descriptor?? [ 1803.372590][T18522] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1803.412880][T24886] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1803.540436][T30672] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7403'. [ 1803.549884][T30672] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7403'. [ 1803.562628][T24907] usb 4-1: USB disconnect, device number 117 [ 1803.576949][T18522] usb 3-1: Using ep0 maxpacket: 8 [ 1803.593414][T18522] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1803.602703][T18522] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.611992][T18522] usb 3-1: Product: syz [ 1803.617772][T18522] usb 3-1: Manufacturer: syz [ 1803.622228][T24886] usb 5-1: Using ep0 maxpacket: 32 [ 1803.622768][T18522] usb 3-1: SerialNumber: syz [ 1803.729417][T24886] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1803.742287][T24886] usb 5-1: config 0 has no interface number 0 [ 1803.751360][T24886] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1803.766635][T18522] usb 3-1: config 0 descriptor?? [ 1803.766993][T24886] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1803.781533][T24886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.802974][T24886] usb 5-1: Product: syz [ 1803.958507][T24886] usb 5-1: Manufacturer: syz [ 1804.135475][T24886] usb 5-1: SerialNumber: syz [ 1804.139593][T18522] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1804.156738][T24886] usb 5-1: config 0 descriptor?? [ 1804.162832][T30683] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1804.212572][T23109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1804.566101][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 1804.569584][ T30] audit: type=1326 audit(1772958633.037:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30687 comm="syz.1.7409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873d19c799 code=0x7ffc0000 [ 1804.762508][ T30] audit: type=1326 audit(1772958633.037:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30687 comm="syz.1.7409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f873d19c799 code=0x7ffc0000 [ 1804.832462][ T30] audit: type=1326 audit(1772958633.037:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30687 comm="syz.1.7409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873d19c799 code=0x7ffc0000 [ 1804.863987][ T30] audit: type=1326 audit(1772958633.037:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30687 comm="syz.1.7409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f873d19c799 code=0x7ffc0000 [ 1804.897406][T30683] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1805.118496][ T30] audit: type=1326 audit(1772958633.037:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30687 comm="syz.1.7409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873d19c799 code=0x7ffc0000 [ 1805.152361][ T30] audit: type=1326 audit(1772958633.037:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30687 comm="syz.1.7409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f873d19c799 code=0x7ffc0000 [ 1805.177694][ T30] audit: type=1326 audit(1772958633.037:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30687 comm="syz.1.7409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873d19c799 code=0x7ffc0000 [ 1805.380492][ T30] audit: type=1326 audit(1772958633.037:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30687 comm="syz.1.7409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f873d19c799 code=0x7ffc0000 [ 1805.404762][ T30] audit: type=1326 audit(1772958633.037:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30687 comm="syz.1.7409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873d19c799 code=0x7ffc0000 [ 1805.469311][ T30] audit: type=1326 audit(1772958633.047:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30687 comm="syz.1.7409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f873d19c799 code=0x7ffc0000 [ 1806.065278][T30683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1806.089622][T30683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1806.101408][T30708] FAULT_INJECTION: forcing a failure. [ 1806.101408][T30708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1806.115135][T30708] CPU: 0 UID: 0 PID: 30708 Comm: syz.0.7414 Tainted: G L syzkaller #0 PREEMPT(full) [ 1806.115167][T30708] Tainted: [L]=SOFTLOCKUP [ 1806.115175][T30708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1806.115187][T30708] Call Trace: [ 1806.115198][T30708] [ 1806.115213][T30708] dump_stack_lvl+0xe8/0x150 [ 1806.115246][T30708] should_fail_ex+0x412/0x560 [ 1806.115277][T30708] _copy_from_iter+0x1d3/0x1670 [ 1806.115312][T30708] ? txopt_get+0x79/0x3f0 [ 1806.115333][T30708] ? txopt_get+0x79/0x3f0 [ 1806.115351][T30708] ? txopt_get+0x79/0x3f0 [ 1806.115370][T30708] ? __pfx__copy_from_iter+0x10/0x10 [ 1806.115395][T30708] ? txopt_get+0x343/0x3f0 [ 1806.115417][T30708] ? __pfx_txopt_get+0x10/0x10 [ 1806.115436][T30708] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1806.115459][T30708] ? tomoyo_check_inet_address+0x289/0x950 [ 1806.115492][T30708] rawv6_sendmsg+0xb51/0x18e0 [ 1806.115525][T30708] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1806.115558][T30708] ? aa_sk_perm+0x6d5/0x900 [ 1806.115591][T30708] ? __pfx_aa_sk_perm+0x10/0x10 [ 1806.115618][T30708] ? sock_rps_record_flow+0x19/0x400 [ 1806.115643][T30708] ? inet_sendmsg+0x2f4/0x370 [ 1806.115661][T30708] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1806.115688][T30708] ____sys_sendmsg+0x80a/0x9f0 [ 1806.115728][T30708] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1806.115759][T30708] ? import_iovec+0x73/0xa0 [ 1806.115791][T30708] ___sys_sendmsg+0x2a5/0x360 [ 1806.115815][T30708] ? __pfx____sys_sendmsg+0x10/0x10 [ 1806.115871][T30708] ? __fget_files+0x2a/0x420 [ 1806.115899][T30708] ? __fget_files+0x3a0/0x420 [ 1806.115936][T30708] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1806.115959][T30708] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1806.115988][T30708] ? __pfx_ksys_write+0x10/0x10 [ 1806.116019][T30708] do_syscall_64+0x14d/0xf80 [ 1806.116037][T30708] ? trace_irq_disable+0x3b/0x150 [ 1806.116064][T30708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1806.116085][T30708] ? clear_bhb_loop+0x40/0x90 [ 1806.116109][T30708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1806.116129][T30708] RIP: 0033:0x7fc7ce59c799 [ 1806.116149][T30708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1806.116167][T30708] RSP: 002b:00007fc7cf46f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1806.116190][T30708] RAX: ffffffffffffffda RBX: 00007fc7ce816090 RCX: 00007fc7ce59c799 [ 1806.116206][T30708] RDX: 0000000000008cc4 RSI: 0000200000000640 RDI: 0000000000000003 [ 1806.116219][T30708] RBP: 00007fc7cf46f090 R08: 0000000000000000 R09: 0000000000000000 [ 1806.116232][T30708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1806.116244][T30708] R13: 00007fc7ce816128 R14: 00007fc7ce816090 R15: 00007fc7ce93fa48 [ 1806.116276][T30708] [ 1806.170445][T30683] No such timeout policy "syz1" [ 1806.458608][T24886] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1806.482456][T24886] asix 5-1:0.188: probe with driver asix failed with error -71 [ 1806.510409][T24886] usb 5-1: USB disconnect, device number 9 [ 1807.052449][T18522] gspca_sonixj: reg_w1 err -110 [ 1807.091044][T30719] usb usb8: usbfs: process 30719 (syz.3.7416) did not claim interface 0 before use [ 1807.092283][T18522] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 1807.123638][T30721] FAULT_INJECTION: forcing a failure. [ 1807.123638][T30721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1807.149165][T30719] usb usb8: selecting invalid altsetting 2047 [ 1807.184497][T30721] CPU: 0 UID: 0 PID: 30721 Comm: syz.4.7417 Tainted: G L syzkaller #0 PREEMPT(full) [ 1807.184531][T30721] Tainted: [L]=SOFTLOCKUP [ 1807.184539][T30721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1807.184552][T30721] Call Trace: [ 1807.184560][T30721] [ 1807.184570][T30721] dump_stack_lvl+0xe8/0x150 [ 1807.184605][T30721] should_fail_ex+0x412/0x560 [ 1807.184635][T30721] _copy_from_user+0x2d/0xb0 [ 1807.184665][T30721] ___sys_sendmsg+0x1c6/0x360 [ 1807.184684][T30721] ? __pfx____sys_sendmsg+0x10/0x10 [ 1807.184718][T30721] ? __fget_files+0x2a/0x420 [ 1807.184743][T30721] ? __fget_files+0x3a0/0x420 [ 1807.184766][T30721] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1807.184779][T30721] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1807.184796][T30721] ? __pfx_ksys_write+0x10/0x10 [ 1807.184816][T30721] do_syscall_64+0x14d/0xf80 [ 1807.184828][T30721] ? trace_irq_disable+0x3b/0x150 [ 1807.184846][T30721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.184859][T30721] ? clear_bhb_loop+0x40/0x90 [ 1807.184873][T30721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.184886][T30721] RIP: 0033:0x7fabe899c799 [ 1807.184898][T30721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1807.184910][T30721] RSP: 002b:00007fabe9868028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1807.184924][T30721] RAX: ffffffffffffffda RBX: 00007fabe8c15fa0 RCX: 00007fabe899c799 [ 1807.184934][T30721] RDX: 0000000004000080 RSI: 0000200000000480 RDI: 0000000000000003 [ 1807.184942][T30721] RBP: 00007fabe9868090 R08: 0000000000000000 R09: 0000000000000000 [ 1807.184949][T30721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1807.184957][T30721] R13: 00007fabe8c16038 R14: 00007fabe8c15fa0 R15: 00007fabe8d3fa48 [ 1807.184975][T30721] [ 1808.206576][T30731] usb usb8: usbfs: process 30731 (syz.3.7419) did not claim interface 0 before use [ 1808.218802][T30731] usb usb8: selecting invalid altsetting 2047 [ 1808.271756][T30731] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1808.584889][ T49] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1809.104342][T18522] IPVS: starting estimator thread 0... [ 1809.202530][T30735] IPVS: using max 25 ests per chain, 60000 per kthread [ 1809.952206][T24886] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 1810.124663][T24886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1810.135118][T24886] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1810.147358][T24886] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1810.157247][T24886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.165557][T24886] usb 4-1: Product: syz [ 1810.169857][T24886] usb 4-1: Manufacturer: syz [ 1810.174813][T24886] usb 4-1: SerialNumber: syz [ 1810.183006][T24886] usb 4-1: config 0 descriptor?? [ 1810.405801][T30737] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7421'. [ 1810.724594][T30737] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7421'. [ 1810.753980][T24886] usb 3-1: USB disconnect, device number 19 [ 1810.813217][T18522] usb 4-1: USB disconnect, device number 118 [ 1811.083736][T30752] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7426'. [ 1811.099225][T30752] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7426'. [ 1811.700046][T30776] usb usb8: usbfs: process 30776 (syz.0.7429) did not claim interface 0 before use [ 1811.711577][T30776] usb usb8: selecting invalid altsetting 2047 [ 1812.169911][T30777] usb usb8: usbfs: process 30777 (syz.1.7431) did not claim interface 0 before use [ 1812.181270][T30777] usb usb8: selecting invalid altsetting 2047 [ 1812.232181][T30777] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1813.142331][T18522] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1813.305271][T18522] usb 5-1: Using ep0 maxpacket: 32 [ 1813.337422][T18522] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1813.356403][T18522] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1813.400605][T18522] usb 5-1: config 0 descriptor?? [ 1813.419575][T18522] as10x_usb: device has been detected [ 1813.433754][T18522] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1813.471754][T18522] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1813.530923][T18522] as10x_usb: error during firmware upload part1 [ 1813.554640][T18522] Registered device nBox DVB-T Dongle [ 1813.812232][T24886] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1813.901624][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1813.908448][ T30] audit: type=1800 audit(1772958642.637:1499): pid=30820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7444" name="bus" dev="tmpfs" ino=1889 res=0 errno=0 [ 1814.014148][T24886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1814.029833][T24886] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1814.045158][T24886] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1814.056673][T24886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.080200][T24886] usb 3-1: Product: syz [ 1814.101314][T24886] usb 3-1: Manufacturer: syz [ 1814.122643][T24886] usb 3-1: SerialNumber: syz [ 1814.155137][T24886] usb 3-1: config 0 descriptor?? [ 1814.439949][T30808] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7441'. [ 1814.450791][T18522] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1814.465882][T30808] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7441'. [ 1814.575576][T24886] usb 3-1: USB disconnect, device number 20 [ 1814.632247][T18522] usb 1-1: Using ep0 maxpacket: 8 [ 1814.638835][T18522] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1814.648090][T18522] usb 1-1: config 179 has no interface number 0 [ 1814.658072][T18522] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1814.671064][T18522] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1814.687068][T18522] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1814.687386][T30827] netlink: 'syz.3.7447': attribute type 3 has an invalid length. [ 1814.702213][T18522] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1814.718192][T18522] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1814.731797][T18522] usb 1-1: config 179 interface 65 has no altsetting 0 [ 1814.778104][T18522] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1814.787286][T18522] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.810814][T30827] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7447'. [ 1814.852699][T18522] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input114 [ 1814.928849][ T5177] input input114: unable to receive magic message: -110 [ 1815.017306][ T5177] input input114: unable to receive magic message: -32 [ 1815.061079][ T5177] input input114: unable to receive magic message: -32 [ 1815.071010][ T5177] input input114: unable to receive magic message: -32 [ 1815.081772][ T5177] input input114: unable to receive magic message: -32 [ 1815.152223][ T5177] input input114: unable to receive magic message: -32 [ 1815.242889][T18522] usb 1-1: USB disconnect, device number 18 [ 1815.242972][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1815.352241][T24886] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1815.430072][T30841] usb usb8: usbfs: process 30841 (syz.2.7450) did not claim interface 0 before use [ 1815.470773][T30841] usb usb8: selecting invalid altsetting 2047 [ 1815.512326][T24886] usb 4-1: Using ep0 maxpacket: 16 [ 1815.519290][T24886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1815.531757][T24886] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1815.543292][T30841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1815.560163][T30844] FAULT_INJECTION: forcing a failure. [ 1815.560163][T30844] name failslab, interval 1, probability 0, space 0, times 0 [ 1815.574365][T30844] CPU: 1 UID: 0 PID: 30844 Comm: syz.1.7452 Tainted: G L syzkaller #0 PREEMPT(full) [ 1815.574395][T30844] Tainted: [L]=SOFTLOCKUP [ 1815.574400][T30844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1815.574409][T30844] Call Trace: [ 1815.574415][T30844] [ 1815.574420][T30844] dump_stack_lvl+0xe8/0x150 [ 1815.574444][T30844] should_fail_ex+0x412/0x560 [ 1815.574463][T30844] should_failslab+0xa8/0x100 [ 1815.574480][T30844] __kmalloc_cache_noprof+0x88/0x660 [ 1815.574495][T30844] ? tcf_exts_init_ex+0x10e/0x7c0 [ 1815.574516][T30844] tcf_exts_init_ex+0x10e/0x7c0 [ 1815.574530][T30844] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1815.574544][T30844] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1815.574559][T30844] fw_change+0x64b/0xd60 [ 1815.574582][T30844] ? __pfx_fw_change+0x10/0x10 [ 1815.574604][T30844] tc_new_tfilter+0xff8/0x1780 [ 1815.574638][T30844] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1815.574655][T30844] ? is_bpf_text_address+0x26/0x2b0 [ 1815.574687][T30844] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1815.574704][T30844] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1815.574723][T30844] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1815.574739][T30844] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1815.574757][T30844] ? __lock_acquire+0x6b5/0x2cf0 [ 1815.574780][T30844] netlink_rcv_skb+0x232/0x4b0 [ 1815.574796][T30844] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1815.574813][T30844] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1815.574835][T30844] ? netlink_deliver_tap+0x2e/0x1b0 [ 1815.574856][T30844] netlink_unicast+0x80f/0x9b0 [ 1815.574875][T30844] ? __pfx_netlink_unicast+0x10/0x10 [ 1815.574891][T30844] ? netlink_sendmsg+0x650/0xb40 [ 1815.574905][T30844] ? skb_put+0x11b/0x210 [ 1815.574924][T30844] netlink_sendmsg+0x813/0xb40 [ 1815.574945][T30844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1815.574964][T30844] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1815.574981][T30844] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1815.574997][T30844] ____sys_sendmsg+0x972/0x9f0 [ 1815.575014][T30844] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1815.575032][T30844] ? import_iovec+0x73/0xa0 [ 1815.575052][T30844] ___sys_sendmsg+0x2a5/0x360 [ 1815.575067][T30844] ? __pfx____sys_sendmsg+0x10/0x10 [ 1815.575105][T30844] ? __fget_files+0x2a/0x420 [ 1815.575122][T30844] ? __fget_files+0x3a0/0x420 [ 1815.575145][T30844] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1815.575159][T30844] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1815.575176][T30844] ? __pfx_ksys_write+0x10/0x10 [ 1815.575196][T30844] do_syscall_64+0x14d/0xf80 [ 1815.575208][T30844] ? trace_irq_disable+0x3b/0x150 [ 1815.575224][T30844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.575237][T30844] ? clear_bhb_loop+0x40/0x90 [ 1815.575252][T30844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.575264][T30844] RIP: 0033:0x7f873d19c799 [ 1815.575277][T30844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1815.575288][T30844] RSP: 002b:00007f873e071028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1815.575303][T30844] RAX: ffffffffffffffda RBX: 00007f873d415fa0 RCX: 00007f873d19c799 [ 1815.575313][T30844] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 1815.575321][T30844] RBP: 00007f873e071090 R08: 0000000000000000 R09: 0000000000000000 [ 1815.575336][T30844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1815.575343][T30844] R13: 00007f873d416038 R14: 00007f873d415fa0 R15: 00007f873d53fa48 [ 1815.575362][T30844] [ 1816.180322][T24886] usb 4-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 1816.203595][T24886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.247723][T24888] usb 5-1: USB disconnect, device number 10 [ 1816.295904][T24886] usb 4-1: config 0 descriptor?? [ 1816.308713][T24888] Unregistered device nBox DVB-T Dongle [ 1816.337846][T24888] as10x_usb: device has been disconnected [ 1816.507753][T30854] usb usb8: usbfs: process 30854 (syz.1.7453) did not claim interface 0 before use [ 1816.792787][T30834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1816.820821][T30834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1816.850258][T24886] pantherlord 0003:0810:0002.0039: unknown main item tag 0x0 [ 1816.859166][T24886] pantherlord 0003:0810:0002.0039: unknown main item tag 0x0 [ 1816.880523][T24886] pantherlord 0003:0810:0002.0039: unknown main item tag 0x0 [ 1816.900543][T24886] pantherlord 0003:0810:0002.0039: unknown main item tag 0x0 [ 1816.926338][T24886] pantherlord 0003:0810:0002.0039: unknown main item tag 0x0 [ 1816.944575][T24886] pantherlord 0003:0810:0002.0039: unknown main item tag 0x0 [ 1816.965848][T24886] pantherlord 0003:0810:0002.0039: unknown main item tag 0x0 [ 1816.998194][T24886] pantherlord 0003:0810:0002.0039: unknown main item tag 0x1 [ 1817.019579][T24886] pantherlord 0003:0810:0002.0039: unknown main item tag 0x1 [ 1817.041854][T24886] pantherlord 0003:0810:0002.0039: unknown main item tag 0x7 [ 1817.115945][T24886] pantherlord 0003:0810:0002.0039: unexpected long global item [ 1817.166563][T24886] pantherlord 0003:0810:0002.0039: parse failed [ 1817.173609][T24886] pantherlord 0003:0810:0002.0039: probe with driver pantherlord failed with error -22 [ 1817.208493][T30858] FAULT_INJECTION: forcing a failure. [ 1817.208493][T30858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1817.267920][ T5894] usb 4-1: USB disconnect, device number 119 [ 1817.287241][T30858] CPU: 1 UID: 0 PID: 30858 Comm: syz.0.7456 Tainted: G L syzkaller #0 PREEMPT(full) [ 1817.287275][T30858] Tainted: [L]=SOFTLOCKUP [ 1817.287293][T30858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1817.287306][T30858] Call Trace: [ 1817.287315][T30858] [ 1817.287323][T30858] dump_stack_lvl+0xe8/0x150 [ 1817.287358][T30858] should_fail_ex+0x412/0x560 [ 1817.287391][T30858] _copy_to_user+0x31/0xb0 [ 1817.287424][T30858] simple_read_from_buffer+0xe1/0x170 [ 1817.287459][T30858] proc_fail_nth_read+0x1bb/0x230 [ 1817.287490][T30858] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1817.287521][T30858] ? rw_verify_area+0x2a6/0x4d0 [ 1817.287542][T30858] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1817.287572][T30858] vfs_read+0x20c/0xa70 [ 1817.287597][T30858] ? bpf_lsm_bpf+0x9/0x20 [ 1817.287627][T30858] ? __pfx_vfs_read+0x10/0x10 [ 1817.287645][T30858] ? __sys_bpf+0x6fa/0x950 [ 1817.287676][T30858] ? __pfx___sys_bpf+0x10/0x10 [ 1817.287702][T30858] ? kmem_cache_free+0x187/0x630 [ 1817.287742][T30858] ksys_read+0x150/0x270 [ 1817.287765][T30858] ? __pfx_ksys_read+0x10/0x10 [ 1817.287799][T30858] do_syscall_64+0x14d/0xf80 [ 1817.287819][T30858] ? trace_irq_disable+0x3b/0x150 [ 1817.287848][T30858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1817.287870][T30858] ? clear_bhb_loop+0x40/0x90 [ 1817.287895][T30858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1817.287915][T30858] RIP: 0033:0x7fc7ce55cfce [ 1817.287935][T30858] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1817.287953][T30858] RSP: 002b:00007fc7cf48ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1817.287977][T30858] RAX: ffffffffffffffda RBX: 00007fc7cf4906c0 RCX: 00007fc7ce55cfce [ 1817.287992][T30858] RDX: 000000000000000f RSI: 00007fc7cf4900a0 RDI: 0000000000000004 [ 1817.288005][T30858] RBP: 00007fc7cf490090 R08: 0000000000000000 R09: 0000000000000000 [ 1817.288018][T30858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1817.288030][T30858] R13: 00007fc7ce816038 R14: 00007fc7ce815fa0 R15: 00007fc7ce93fa48 [ 1817.288061][T30858] [ 1818.107114][T30873] FAULT_INJECTION: forcing a failure. [ 1818.107114][T30873] name failslab, interval 1, probability 0, space 0, times 0 [ 1818.121989][T30873] CPU: 1 UID: 0 PID: 30873 Comm: syz.4.7462 Tainted: G L syzkaller #0 PREEMPT(full) [ 1818.122024][T30873] Tainted: [L]=SOFTLOCKUP [ 1818.122033][T30873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1818.122045][T30873] Call Trace: [ 1818.122054][T30873] [ 1818.122069][T30873] dump_stack_lvl+0xe8/0x150 [ 1818.122105][T30873] should_fail_ex+0x412/0x560 [ 1818.122138][T30873] should_failslab+0xa8/0x100 [ 1818.122189][T30873] ? dst_alloc+0x105/0x170 [ 1818.122212][T30873] kmem_cache_alloc_noprof+0x87/0x650 [ 1818.122240][T30873] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1818.122265][T30873] dst_alloc+0x105/0x170 [ 1818.122292][T30873] ip6_rt_cache_alloc+0x3c3/0xa50 [ 1818.122329][T30873] ? __pfx_ip6_rt_cache_alloc+0x10/0x10 [ 1818.122366][T30873] ip6_pol_route+0x117d/0x13d0 [ 1818.122391][T30873] ? ip6_pol_route+0x160/0x13d0 [ 1818.122420][T30873] ? __pfx_ip6_pol_route+0x10/0x10 [ 1818.122442][T30873] ? __lock_acquire+0x6b5/0x2cf0 [ 1818.122477][T30873] ? __lock_acquire+0x6b5/0x2cf0 [ 1818.122508][T30873] fib6_rule_action+0x265/0xc00 [ 1818.122542][T30873] ? __pfx_fib6_rule_action+0x10/0x10 [ 1818.122577][T30873] ? fib6_rule_match+0x79a/0xa80 [ 1818.122610][T30873] ? __pfx_fib6_rule_action+0x10/0x10 [ 1818.122638][T30873] fib_rules_lookup+0x768/0xea0 [ 1818.122672][T30873] ? fib_rules_lookup+0x9b/0xea0 [ 1818.122706][T30873] ? __pfx_fib_rules_lookup+0x10/0x10 [ 1818.122733][T30873] ? l3mdev_update_flow+0x29/0x640 [ 1818.122757][T30873] ? l3mdev_update_flow+0x4d1/0x640 [ 1818.122784][T30873] fib6_rule_lookup+0x1a0/0x730 [ 1818.122810][T30873] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1818.122837][T30873] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1818.122869][T30873] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1818.122913][T30873] ip6_route_output_flags+0x364/0x5d0 [ 1818.122939][T30873] ? ip6_route_output_flags+0x2e/0x5d0 [ 1818.122968][T30873] ip6_dst_lookup_tail+0x1c3/0x15a0 [ 1818.123013][T30873] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 1818.123043][T30873] ? txopt_get+0x79/0x3f0 [ 1818.123062][T30873] ? txopt_get+0x79/0x3f0 [ 1818.123080][T30873] ? txopt_get+0x79/0x3f0 [ 1818.123101][T30873] ? txopt_get+0x343/0x3f0 [ 1818.123123][T30873] ? __pfx_txopt_get+0x10/0x10 [ 1818.123149][T30873] ip6_dst_lookup_flow+0x47/0xe0 [ 1818.123181][T30873] rawv6_sendmsg+0xe1d/0x18e0 [ 1818.123217][T30873] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1818.123252][T30873] ? aa_sk_perm+0x6d5/0x900 [ 1818.123287][T30873] ? __pfx_aa_sk_perm+0x10/0x10 [ 1818.123315][T30873] ? sock_rps_record_flow+0x19/0x400 [ 1818.123339][T30873] ? inet_sendmsg+0x2f4/0x370 [ 1818.123358][T30873] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1818.123385][T30873] ____sys_sendmsg+0x80a/0x9f0 [ 1818.123418][T30873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1818.123449][T30873] ? import_iovec+0x73/0xa0 [ 1818.123485][T30873] ___sys_sendmsg+0x2a5/0x360 [ 1818.123513][T30873] ? __pfx____sys_sendmsg+0x10/0x10 [ 1818.123575][T30873] ? __fget_files+0x2a/0x420 [ 1818.123613][T30873] ? __fget_files+0x3a0/0x420 [ 1818.123653][T30873] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1818.123678][T30873] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1818.123710][T30873] ? __pfx_ksys_write+0x10/0x10 [ 1818.123747][T30873] do_syscall_64+0x14d/0xf80 [ 1818.123766][T30873] ? trace_irq_disable+0x3b/0x150 [ 1818.123793][T30873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1818.123814][T30873] ? clear_bhb_loop+0x40/0x90 [ 1818.123840][T30873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1818.123861][T30873] RIP: 0033:0x7fabe899c799 [ 1818.123883][T30873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1818.123899][T30873] RSP: 002b:00007fabe9868028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1818.123921][T30873] RAX: ffffffffffffffda RBX: 00007fabe8c15fa0 RCX: 00007fabe899c799 [ 1818.123935][T30873] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1818.123948][T30873] RBP: 00007fabe9868090 R08: 0000000000000000 R09: 0000000000000000 [ 1818.123959][T30873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1818.123972][T30873] R13: 00007fabe8c16038 R14: 00007fabe8c15fa0 R15: 00007fabe8d3fa48 [ 1818.124005][T30873] [ 1818.132242][T24886] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 1818.237530][T30877] netlink: 'syz.2.7464': attribute type 14 has an invalid length. [ 1818.434382][T24886] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 1818.436688][T30877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7464'. [ 1818.465098][T24886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.588137][T24886] usb 1-1: config 0 has no interface number 0 [ 1818.594461][T24886] usb 1-1: config 0 interface 113 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1818.610747][T24886] usb 1-1: config 0 interface 113 has no altsetting 0 [ 1818.620970][T24886] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1818.630304][T24886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.639988][T24886] usb 1-1: Product: syz [ 1818.644606][T24886] usb 1-1: Manufacturer: syz [ 1818.681875][T24886] usb 1-1: SerialNumber: syz [ 1818.694445][T30560] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1818.704291][T30560] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1818.729354][T30877] netlink: 'syz.2.7464': attribute type 14 has an invalid length. [ 1818.740996][T30560] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1818.773437][T30877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7464'. [ 1818.782618][T30560] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1818.791713][T24886] usb 1-1: config 0 descriptor?? [ 1819.109372][T30894] input: syz1 as /devices/virtual/input/input115 [ 1819.177521][T24886] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1819.228878][T30896] usb usb8: usbfs: process 30896 (syz.1.7468) did not claim interface 0 before use [ 1819.238822][T30896] usb usb8: selecting invalid altsetting 2047 [ 1819.255934][T30896] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1819.418962][T30866] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7460'. [ 1819.431573][T30866] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7460'. [ 1819.462319][T24888] usb 1-1: USB disconnect, device number 19 [ 1819.592612][ T5894] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1819.928296][ C0] blk_print_req_error: 9 callbacks suppressed [ 1819.928311][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1819.944136][ C0] buffer_io_error: 28 callbacks suppressed [ 1819.944147][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1819.952264][ T5192] Buffer I/O error on dev loop5, logical block 1, async page read [ 1819.982681][ T5192] Buffer I/O error on dev loop5, logical block 1, async page read [ 1819.986672][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1820.000147][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1820.012179][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 1820.012330][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1820.017575][ T5192] Buffer I/O error on dev loop5, logical block 1, async page read [ 1820.027030][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1820.085655][ T5894] usb 3-1: config 1 has an invalid interface number: 216 but max is 0 [ 1820.093990][ T5894] usb 3-1: config 1 has no interface number 0 [ 1820.112258][ T5894] usb 3-1: config 1 interface 216 has no altsetting 0 [ 1820.119521][ T5192] Buffer I/O error on dev loop5, logical block 1, async page read [ 1820.119651][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1820.137103][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1820.156019][ T5894] usb 3-1: New USB device found, idVendor=0bb4, idProduct=00ce, bcdDevice=f3.2a [ 1820.182457][ T5192] Buffer I/O error on dev loop5, logical block 1, async page read [ 1820.182509][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1820.190799][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.200014][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1820.242140][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1820.262855][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1820.272031][ T5894] usb 3-1: Product: syz [ 1820.278167][ T5192] ldm_validate_partition_table(): Disk read failed. [ 1820.287355][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1820.297406][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1820.307555][ T5894] usb 3-1: Manufacturer: syz [ 1820.312280][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1820.312815][ T5894] usb 3-1: SerialNumber: syz [ 1820.330142][ T5192] Dev loop5: unable to read RDB block 0 [ 1820.345172][ T5192] loop5: unable to read partition table [ 1820.352365][T24886] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1820.363766][ T5192] loop5: partition table beyond EOD, truncated [ 1820.512186][T24886] usb 4-1: Using ep0 maxpacket: 16 [ 1820.584899][T24886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1820.621181][T24886] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1820.657214][T24886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.686314][T24886] usb 4-1: Product: syz [ 1820.706685][T24886] usb 4-1: Manufacturer: syz [ 1820.711359][T24886] usb 4-1: SerialNumber: syz [ 1820.719653][T24886] usb 4-1: config 0 descriptor?? [ 1820.745396][T24886] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1820.761367][T24886] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1820.779318][T30908] FAULT_INJECTION: forcing a failure. [ 1820.779318][T30908] name failslab, interval 1, probability 0, space 0, times 0 [ 1820.802517][T30908] CPU: 0 UID: 0 PID: 30908 Comm: syz.4.7474 Tainted: G L syzkaller #0 PREEMPT(full) [ 1820.802563][T30908] Tainted: [L]=SOFTLOCKUP [ 1820.802571][T30908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1820.802588][T30908] Call Trace: [ 1820.802596][T30908] [ 1820.802604][T30908] dump_stack_lvl+0xe8/0x150 [ 1820.802626][T30908] should_fail_ex+0x412/0x560 [ 1820.802645][T30908] should_failslab+0xa8/0x100 [ 1820.802667][T30908] ? do_getname+0x2e/0x250 [ 1820.802691][T30908] kmem_cache_alloc_noprof+0x87/0x650 [ 1820.802715][T30908] ? lock_vma_under_rcu+0x45a/0x500 [ 1820.802740][T30908] do_getname+0x2e/0x250 [ 1820.802761][T30908] ? getname_flags+0x11/0x20 [ 1820.802778][T30908] do_sys_openat2+0xca/0x200 [ 1820.802798][T30908] ? __pfx_do_sys_openat2+0x10/0x10 [ 1820.802824][T30908] ? exc_page_fault+0x6a/0xc0 [ 1820.802856][T30908] ? do_user_addr_fault+0xc6f/0x1340 [ 1820.802884][T30908] __x64_sys_openat+0x138/0x170 [ 1820.802915][T30908] do_syscall_64+0x14d/0xf80 [ 1820.802927][T30908] ? trace_irq_disable+0x3b/0x150 [ 1820.802944][T30908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1820.802957][T30908] ? clear_bhb_loop+0x40/0x90 [ 1820.802974][T30908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1820.802994][T30908] RIP: 0033:0x7fabe895cfce [ 1820.803014][T30908] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1820.803032][T30908] RSP: 002b:00007fabe9865ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1820.803053][T30908] RAX: ffffffffffffffda RBX: 00007fabe98686c0 RCX: 00007fabe895cfce [ 1820.803068][T30908] RDX: 0000000000000002 RSI: 00007fabe8a31ed0 RDI: ffffffffffffff9c [ 1820.803082][T30908] RBP: 00007fabe9868090 R08: 0000000000000000 R09: 0000000000000000 [ 1820.803095][T30908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 1820.803108][T30908] R13: 0000200000000600 R14: 0000000000000005 R15: 00007fabe8d3fa48 [ 1820.803138][T30908] [ 1821.288941][ T5894] usb 3-1: USB disconnect, device number 21 [ 1821.361869][T30914] usb usb8: usbfs: process 30914 (syz.0.7473) did not claim interface 0 before use [ 1821.371777][T30914] usb usb8: selecting invalid altsetting 2047 [ 1821.455240][T24886] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1821.602506][T24888] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1821.671849][T30900] netlink: 'syz.3.7470': attribute type 2 has an invalid length. [ 1821.681246][T30900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7470'. [ 1821.762295][T24888] usb 2-1: Using ep0 maxpacket: 16 [ 1821.769549][T24888] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1821.787693][T24888] usb 2-1: can't read configurations, error -61 [ 1821.802251][ T5894] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1821.914451][T24886] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1821.931511][T24886] em28xx 4-1:0.0: board has no eeprom [ 1821.942346][T24888] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1821.962346][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 1821.971589][ T5894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1821.993622][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1822.006543][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1822.030697][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1822.044835][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1822.060661][ T5894] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1822.070218][ T5894] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1822.079900][ T5894] usb 3-1: Manufacturer: syz [ 1822.088444][ T5894] usb 3-1: config 0 descriptor?? [ 1822.112296][T24888] usb 2-1: Using ep0 maxpacket: 16 [ 1822.126226][T24888] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1822.141881][T24888] usb 2-1: can't read configurations, error -61 [ 1822.149904][T24888] usb usb2-port1: attempt power cycle [ 1822.514474][T24888] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1822.522206][ T5894] rc_core: IR keymap rc-hauppauge not found [ 1822.522226][ T5894] Registered IR keymap rc-empty [ 1822.532659][ T5894] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1822.562257][ T5894] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1822.569856][T24888] usb 2-1: Using ep0 maxpacket: 16 [ 1822.578812][T24888] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1822.588147][T24888] usb 2-1: can't read configurations, error -61 [ 1822.604125][ T5894] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1822.663060][ T5894] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input116 [ 1822.695124][ T5894] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1822.722394][T24888] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1822.722444][ T5894] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1822.833700][ T5894] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1822.902642][T24888] usb 2-1: Using ep0 maxpacket: 16 [ 1822.913418][T24888] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1822.921691][T24888] usb 2-1: can't read configurations, error -61 [ 1822.930789][T24888] usb usb2-port1: unable to enumerate USB device [ 1822.962246][ T5894] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1823.003858][ T5894] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1823.043408][ T5894] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1823.072317][ T5894] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1823.112224][ T5894] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1823.122174][T24886] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1823.149845][T24886] em28xx 4-1:0.0: dvb set to bulk mode. [ 1823.156338][T24888] em28xx 4-1:0.0: Binding DVB extension [ 1823.162254][ T5894] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1823.180572][T24886] usb 4-1: USB disconnect, device number 120 [ 1823.182254][ T5894] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1823.188360][T24886] em28xx 4-1:0.0: Disconnecting em28xx [ 1823.241730][T24888] em28xx 4-1:0.0: Registering input extension [ 1823.242251][ T5894] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1823.248377][T24886] em28xx 4-1:0.0: Closing input extension [ 1823.290862][T24886] em28xx 4-1:0.0: Freeing device [ 1823.324381][ T5894] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1823.347613][ T5894] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1823.398859][ T5894] usb 3-1: USB disconnect, device number 22 [ 1823.772191][T24886] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 1823.955828][T24886] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1823.975168][T30957] usb usb8: usbfs: process 30957 (syz.2.7485) did not claim interface 0 before use [ 1823.985105][T30957] usb usb8: selecting invalid altsetting 2047 [ 1824.002051][T30957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1824.040785][T24886] usb 1-1: not running at top speed; connect to a high speed hub [ 1824.050054][T24886] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1824.058744][T24886] usb 1-1: config 0 has no interface number 0 [ 1824.068816][T24886] usb 1-1: New USB device found, idVendor=16d8, idProduct=7251, bcdDevice=2c.bc [ 1824.196830][T24886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.207621][T24886] usb 1-1: Product: syz [ 1824.211944][T24886] usb 1-1: Manufacturer: syz [ 1824.218964][T24886] usb 1-1: SerialNumber: syz [ 1824.237769][T30959] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1824.252635][T24886] usb 1-1: config 0 descriptor?? [ 1824.477325][T30967] usb usb8: usbfs: process 30967 (syz.1.7489) did not claim interface 0 before use [ 1824.708901][T24886] usb 1-1: USB disconnect, device number 20 [ 1825.292813][T18522] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1825.469951][T18522] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1825.501666][T18522] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 1825.528717][T18522] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 1825.557853][T18522] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1825.598091][T18522] usb 4-1: config 129 has no interface number 0 [ 1825.634611][T18522] usb 4-1: config 129 has no interface number 1 [ 1825.670226][T18522] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1825.751512][T18522] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1825.762569][T24886] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1825.802259][T18522] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1825.822523][T18522] usb 4-1: config 129 interface 135 has no altsetting 0 [ 1825.836045][T18522] usb 4-1: config 129 interface 5 has no altsetting 0 [ 1825.868230][T18522] usb 4-1: string descriptor 0 read error: -22 [ 1825.875704][T18522] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1825.892120][T18522] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.912397][T24886] usb 1-1: Using ep0 maxpacket: 16 [ 1825.926496][T24886] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 1825.935186][T24886] usb 1-1: config 0 has no interface number 0 [ 1825.940200][T18522] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1825.941344][T24886] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1826.030186][T18522] usb 4-1: MIDIStreaming interface descriptor not found [ 1826.052618][T24886] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1826.077352][T24886] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1826.102364][ T7484] wlan0: Trigger new scan to find an IBSS to join [ 1826.142443][T24886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.191382][T24886] usb 1-1: config 0 descriptor?? [ 1826.462457][T30970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.473227][T30970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.544417][T18522] usb 4-1: USB disconnect, device number 121 [ 1826.732190][ T5894] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1826.741363][T30980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.757210][T30980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.765188][T24907] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1826.779361][T24886] hid (null): unknown global tag 0xc [ 1826.785209][T24886] hid (null): unknown global tag 0xc [ 1826.790765][T24886] hid (null): unknown global tag 0xd [ 1826.916585][ T5894] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1826.926062][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.936039][T24907] usb 2-1: Using ep0 maxpacket: 16 [ 1826.944436][ T5894] usb 3-1: Product: syz [ 1826.952376][ T5894] usb 3-1: Manufacturer: syz [ 1826.958125][T24907] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 1826.972179][ T5894] usb 3-1: SerialNumber: syz [ 1826.982182][T24907] usb 2-1: config 0 has no interface number 0 [ 1827.003805][T30980] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7494'. [ 1827.014554][T24907] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1827.026218][ T5894] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1827.036442][T24907] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1827.065033][T18522] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1827.088009][T24907] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1827.118730][T24907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.133380][T24907] usb 2-1: Product: syz [ 1827.137733][T24907] usb 2-1: Manufacturer: syz [ 1827.153249][T24907] usb 2-1: SerialNumber: syz [ 1827.173322][T24907] usb 2-1: config 0 descriptor?? [ 1827.179829][T30998] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1827.189275][T30998] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1827.275287][ T30] audit: type=1326 audit(1772958655.957:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30999 comm="syz.4.7501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe899c799 code=0x7ffc0000 [ 1827.336353][ T30] audit: type=1326 audit(1772958655.957:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30999 comm="syz.4.7501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe899c799 code=0x7ffc0000 [ 1827.388024][ T30] audit: type=1326 audit(1772958655.957:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30999 comm="syz.4.7501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fabe899c799 code=0x7ffc0000 [ 1827.433170][T30998] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1827.445295][T30998] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1827.455795][ T30] audit: type=1326 audit(1772958655.967:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30999 comm="syz.4.7501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe899c799 code=0x7ffc0000 [ 1827.482839][ T30] audit: type=1326 audit(1772958655.967:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30999 comm="syz.4.7501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fabe899c799 code=0x7ffc0000 [ 1827.507535][T30993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1827.520256][T30993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1827.541368][ T5894] usb 3-1: USB disconnect, device number 23 [ 1827.562260][ T30] audit: type=1326 audit(1772958655.967:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30999 comm="syz.4.7501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe899c799 code=0x7ffc0000 [ 1827.651288][ T30] audit: type=1326 audit(1772958655.967:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30999 comm="syz.4.7501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fabe899c799 code=0x7ffc0000 [ 1827.692236][T24886] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 1827.692280][T24907] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1827.720079][ T30] audit: type=1326 audit(1772958655.967:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30999 comm="syz.4.7501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe899c799 code=0x7ffc0000 [ 1827.766282][ T30] audit: type=1326 audit(1772958655.967:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30999 comm="syz.4.7501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fabe899c799 code=0x7ffc0000 [ 1827.788994][ T30] audit: type=1326 audit(1772958655.967:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30999 comm="syz.4.7501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe899c799 code=0x7ffc0000 [ 1827.844350][T24886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1827.866404][T24886] usb 4-1: config 0 has no interfaces? [ 1827.881228][T24886] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1827.900438][T24886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.901340][T24907] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1827.920222][T24907] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1827.930707][T24886] usb 4-1: Product: syz [ 1827.933039][T24907] asix 2-1:0.34: probe with driver asix failed with error -71 [ 1827.945059][T24886] usb 4-1: Manufacturer: syz [ 1827.949605][T24907] usb 2-1: USB disconnect, device number 52 [ 1827.962435][T24886] usb 4-1: SerialNumber: syz [ 1827.979516][T24886] usb 4-1: config 0 descriptor?? [ 1828.136492][T31009] FAULT_INJECTION: forcing a failure. [ 1828.136492][T31009] name failslab, interval 1, probability 0, space 0, times 0 [ 1828.149414][T31009] CPU: 0 UID: 0 PID: 31009 Comm: syz.2.7504 Tainted: G L syzkaller #0 PREEMPT(full) [ 1828.149449][T31009] Tainted: [L]=SOFTLOCKUP [ 1828.149457][T31009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1828.149469][T31009] Call Trace: [ 1828.149478][T31009] [ 1828.149487][T31009] dump_stack_lvl+0xe8/0x150 [ 1828.149522][T31009] should_fail_ex+0x412/0x560 [ 1828.149554][T31009] should_failslab+0xa8/0x100 [ 1828.149582][T31009] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1828.149606][T31009] ? __alloc_skb+0x186/0x7d0 [ 1828.149632][T31009] ? __alloc_skb+0x1d0/0x7d0 [ 1828.149656][T31009] ? __local_bh_enable_ip+0xd0/0x130 [ 1828.149686][T31009] __alloc_skb+0x1d0/0x7d0 [ 1828.149718][T31009] netlink_sendmsg+0x5d4/0xb40 [ 1828.149755][T31009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1828.149785][T31009] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1828.149814][T31009] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1828.149842][T31009] ____sys_sendmsg+0x972/0x9f0 [ 1828.149870][T31009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1828.149901][T31009] ? import_iovec+0x73/0xa0 [ 1828.149937][T31009] ___sys_sendmsg+0x2a5/0x360 [ 1828.149963][T31009] ? __pfx____sys_sendmsg+0x10/0x10 [ 1828.150020][T31009] ? __fget_files+0x2a/0x420 [ 1828.150048][T31009] ? __fget_files+0x3a0/0x420 [ 1828.150088][T31009] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1828.150111][T31009] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1828.150141][T31009] ? rcu_is_watching+0x15/0xb0 [ 1828.150193][T31009] do_syscall_64+0x14d/0xf80 [ 1828.150212][T31009] ? trace_irq_disable+0x3b/0x150 [ 1828.150241][T31009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1828.150263][T31009] ? clear_bhb_loop+0x40/0x90 [ 1828.150289][T31009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1828.150310][T31009] RIP: 0033:0x7ffb6a79c799 [ 1828.150330][T31009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1828.150349][T31009] RSP: 002b:00007ffb6b594028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1828.150378][T31009] RAX: ffffffffffffffda RBX: 00007ffb6aa15fa0 RCX: 00007ffb6a79c799 [ 1828.150393][T31009] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000003 [ 1828.150407][T31009] RBP: 00007ffb6b594090 R08: 0000000000000000 R09: 0000000000000000 [ 1828.150421][T31009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1828.150434][T31009] R13: 00007ffb6aa16038 R14: 00007ffb6aa15fa0 R15: 00007ffb6ab3fa48 [ 1828.150467][T31009] [ 1828.201405][T31007] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7503'. [ 1828.412571][T18522] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1828.419666][T18522] ath9k_htc: Failed to initialize the device [ 1828.436320][ T5894] usb 3-1: ath9k_htc: USB layer deinitialized [ 1828.448886][T24888] usb 4-1: USB disconnect, device number 122 [ 1828.509223][T24886] usb 1-1: USB disconnect, device number 21 [ 1828.922171][ T5894] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1828.972658][T31028] usb usb8: usbfs: process 31028 (syz.4.7509) did not claim interface 0 before use [ 1828.994719][T31028] usb usb8: selecting invalid altsetting 2047 [ 1829.119071][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 1829.128027][ T5894] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1829.138196][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.142869][T30561] wlan0: Trigger new scan to find an IBSS to join [ 1829.153051][ T5894] usb 3-1: Product: syz [ 1829.157268][ T5894] usb 3-1: Manufacturer: syz [ 1829.161893][ T5894] usb 3-1: SerialNumber: syz [ 1829.196318][ T5894] usb 3-1: config 0 descriptor?? [ 1829.218718][ T5894] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 1829.504635][T18522] usb 3-1: USB disconnect, device number 24 [ 1829.845529][T31040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7512'. [ 1829.896780][T31041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7512'. [ 1830.197602][T31045] netlink: 'syz.1.7514': attribute type 12 has an invalid length. [ 1830.232668][T31045] netlink: 'syz.1.7514': attribute type 42 has an invalid length. [ 1830.712187][T24886] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1830.866562][T18522] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 1830.904377][T24886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1830.916775][T24886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1830.927443][T24886] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1830.948648][T24886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.973760][T24886] usb 2-1: config 0 descriptor?? [ 1831.022213][T24888] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1831.077598][T18522] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1831.088441][T18522] usb 4-1: config 0 has no interfaces? [ 1831.129883][T18522] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1831.139180][T18522] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.147907][T18522] usb 4-1: Product: syz [ 1831.152362][T18522] usb 4-1: Manufacturer: syz [ 1831.170142][T18522] usb 4-1: SerialNumber: syz [ 1831.182812][T24888] usb 3-1: Using ep0 maxpacket: 32 [ 1831.190774][T18522] usb 4-1: config 0 descriptor?? [ 1831.201729][T31054] IPVS: set_ctl: invalid protocol: 43 172.30.1.2:20002 [ 1831.227939][T24888] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1831.246586][T24888] usb 3-1: config 0 has no interface number 0 [ 1831.259197][T24888] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1831.326862][T24888] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1831.336589][T24888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.345489][T24888] usb 3-1: Product: syz [ 1831.350013][T24888] usb 3-1: Manufacturer: syz [ 1831.355411][T24888] usb 3-1: SerialNumber: syz [ 1831.365633][T24888] usb 3-1: config 0 descriptor?? [ 1831.372893][T31067] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1831.423619][T31063] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7521'. [ 1831.423935][T24886] hid_parser_main: 2 callbacks suppressed [ 1831.423953][T24886] cp2112 0003:10C4:EA90.003B: unknown main item tag 0x0 [ 1831.484062][T24886] cp2112 0003:10C4:EA90.003B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1831.596110][T31067] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1831.622316][T24886] cp2112 0003:10C4:EA90.003B: Part Number: 0x82 Device Version: 0xFE [ 1831.838921][T24886] cp2112 0003:10C4:EA90.003B: error requesting SMBus config [ 1831.861145][T24886] cp2112 0003:10C4:EA90.003B: probe with driver cp2112 failed with error -71 [ 1831.898114][T24886] usb 2-1: USB disconnect, device number 53 [ 1832.110389][T23109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1832.395482][T24888] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1832.424718][T24888] asix 3-1:0.188: probe with driver asix failed with error -32 [ 1833.859432][T31084] netlink: 13 bytes leftover after parsing attributes in process `syz.1.7525'. [ 1834.182215][T24886] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1834.366424][T24886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1834.377086][T24886] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1834.387117][T24886] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1834.396455][T24886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.432884][T24886] usb 2-1: Product: syz [ 1834.437289][T24886] usb 2-1: Manufacturer: syz [ 1834.441890][T24886] usb 2-1: SerialNumber: syz [ 1834.460424][T24886] usb 2-1: config 0 descriptor?? [ 1834.472684][T24888] usb 3-1: USB disconnect, device number 25 [ 1834.508756][T24886] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1834.566201][T24886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1834.578418][T24886] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1834.587223][T24886] usb 2-1: media controller created [ 1834.619547][T24886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1834.817531][T24886] DVB: Unable to find symbol tda10046_attach() [ 1834.824184][T24886] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1834.838262][T24886] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1835.099142][T18522] usb 4-1: USB disconnect, device number 123 [ 1835.415864][T31100] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1836.057285][T31111] usb usb8: usbfs: process 31111 (syz.3.7532) did not claim interface 0 before use [ 1836.067080][T31111] usb usb8: selecting invalid altsetting 2047 [ 1836.080989][T31111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1836.179693][T30561] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1836.875318][T24886] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1837.198117][T24886] usb 2-1: USB disconnect, device number 54 [ 1837.485965][T31129] FAULT_INJECTION: forcing a failure. [ 1837.485965][T31129] name failslab, interval 1, probability 0, space 0, times 0 [ 1837.536271][T31129] CPU: 0 UID: 0 PID: 31129 Comm: syz.0.7538 Tainted: G L syzkaller #0 PREEMPT(full) [ 1837.536297][T31129] Tainted: [L]=SOFTLOCKUP [ 1837.536302][T31129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1837.536310][T31129] Call Trace: [ 1837.536315][T31129] [ 1837.536322][T31129] dump_stack_lvl+0xe8/0x150 [ 1837.536345][T31129] should_fail_ex+0x412/0x560 [ 1837.536364][T31129] should_failslab+0xa8/0x100 [ 1837.536382][T31129] __kmalloc_cache_noprof+0x88/0x660 [ 1837.536397][T31129] ? call_usermodehelper_setup+0x8e/0x270 [ 1837.536416][T31129] call_usermodehelper_setup+0x8e/0x270 [ 1837.536430][T31129] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1837.536449][T31129] __request_module+0x3ba/0x660 [ 1837.536467][T31129] ? rtnl_link_ops_get+0x23/0x250 [ 1837.536485][T31129] ? __pfx___request_module+0x10/0x10 [ 1837.536507][T31129] ? rtnl_link_ops_get+0x23/0x250 [ 1837.536523][T31129] ? rtnl_link_ops_get+0x23/0x250 [ 1837.536541][T31129] ? rtnl_link_ops_get+0x215/0x250 [ 1837.536560][T31129] rtnl_newlink+0x620/0x1be0 [ 1837.536577][T31129] ? unwind_next_frame+0xa5/0x23c0 [ 1837.536599][T31129] ? __pfx_rtnl_newlink+0x10/0x10 [ 1837.536619][T31129] ? __lock_acquire+0x6b5/0x2cf0 [ 1837.536639][T31129] ? __lock_acquire+0x6b5/0x2cf0 [ 1837.536655][T31129] ? __lock_acquire+0x6b5/0x2cf0 [ 1837.536675][T31129] ? unwind_next_frame+0xa5/0x23c0 [ 1837.536703][T31129] ? __lock_acquire+0x6b5/0x2cf0 [ 1837.536720][T31129] ? is_bpf_text_address+0x26/0x2b0 [ 1837.536735][T31129] ? kernel_text_address+0xa5/0xe0 [ 1837.536762][T31129] ? __pfx_rtnl_newlink+0x10/0x10 [ 1837.536777][T31129] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1837.536796][T31129] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1837.536812][T31129] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1837.536830][T31129] ? __lock_acquire+0x6b5/0x2cf0 [ 1837.536850][T31129] netlink_rcv_skb+0x232/0x4b0 [ 1837.536866][T31129] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1837.536883][T31129] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1837.536905][T31129] ? netlink_deliver_tap+0x2e/0x1b0 [ 1837.536924][T31129] netlink_unicast+0x80f/0x9b0 [ 1837.536946][T31129] ? __pfx_netlink_unicast+0x10/0x10 [ 1837.536963][T31129] ? netlink_sendmsg+0x650/0xb40 [ 1837.536978][T31129] ? skb_put+0x11b/0x210 [ 1837.536996][T31129] netlink_sendmsg+0x813/0xb40 [ 1837.537017][T31129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1837.537034][T31129] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1837.537051][T31129] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1837.537067][T31129] ____sys_sendmsg+0x972/0x9f0 [ 1837.537092][T31129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1837.537109][T31129] ? import_iovec+0x73/0xa0 [ 1837.537129][T31129] ___sys_sendmsg+0x2a5/0x360 [ 1837.537144][T31129] ? __pfx____sys_sendmsg+0x10/0x10 [ 1837.537179][T31129] ? __fget_files+0x2a/0x420 [ 1837.537197][T31129] ? __fget_files+0x3a0/0x420 [ 1837.537219][T31129] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1837.537233][T31129] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1837.537251][T31129] ? __pfx_ksys_write+0x10/0x10 [ 1837.537271][T31129] do_syscall_64+0x14d/0xf80 [ 1837.537283][T31129] ? trace_irq_disable+0x3b/0x150 [ 1837.537299][T31129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1837.537312][T31129] ? clear_bhb_loop+0x40/0x90 [ 1837.537327][T31129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1837.537340][T31129] RIP: 0033:0x7fc7ce59c799 [ 1837.537353][T31129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1837.537364][T31129] RSP: 002b:00007fc7cf490028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1837.537379][T31129] RAX: ffffffffffffffda RBX: 00007fc7ce815fa0 RCX: 00007fc7ce59c799 [ 1837.537389][T31129] RDX: 0000000000004040 RSI: 0000200000000180 RDI: 0000000000000003 [ 1837.537397][T31129] RBP: 00007fc7cf490090 R08: 0000000000000000 R09: 0000000000000000 [ 1837.537405][T31129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1837.537412][T31129] R13: 00007fc7ce816038 R14: 00007fc7ce815fa0 R15: 00007fc7ce93fa48 [ 1837.537433][T31129] [ 1837.537571][T31129] netlink: 'syz.0.7538': attribute type 40 has an invalid length. [ 1838.792013][T31147] loop2: detected capacity change from 0 to 7 [ 1838.803848][ T5965] Dev loop2: unable to read RDB block 7 [ 1838.809835][ T5965] loop2: AHDI p1 p2 p3 [ 1838.814483][ T5965] loop2: partition table partially beyond EOD, truncated [ 1838.824098][ T5965] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1838.832210][ T5965] loop2: p3 start 335544320 is beyond EOD, truncated [ 1838.866714][T31147] Dev loop2: unable to read RDB block 7 [ 1838.875972][T31147] loop2: AHDI p1 p2 p3 [ 1838.880209][T31147] loop2: partition table partially beyond EOD, truncated [ 1838.910476][T31147] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1838.951362][T31147] loop2: p3 start 335544320 is beyond EOD, truncated [ 1838.968717][T31154] FAULT_INJECTION: forcing a failure. [ 1838.968717][T31154] name failslab, interval 1, probability 0, space 0, times 0 [ 1839.001467][T31154] CPU: 0 UID: 0 PID: 31154 Comm: syz.4.7548 Tainted: G L syzkaller #0 PREEMPT(full) [ 1839.001490][T31154] Tainted: [L]=SOFTLOCKUP [ 1839.001495][T31154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1839.001503][T31154] Call Trace: [ 1839.001509][T31154] [ 1839.001515][T31154] dump_stack_lvl+0xe8/0x150 [ 1839.001538][T31154] should_fail_ex+0x412/0x560 [ 1839.001556][T31154] ? alloc_inode+0x6a/0x1b0 [ 1839.001573][T31154] should_failslab+0xa8/0x100 [ 1839.001592][T31154] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 1839.001605][T31154] ? simple_start_creating+0xcc/0x110 [ 1839.001627][T31154] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1839.001645][T31154] alloc_inode+0x6a/0x1b0 [ 1839.001663][T31154] new_inode+0x22/0x170 [ 1839.001682][T31154] __debugfs_create_file+0xb8/0x400 [ 1839.001703][T31154] debugfs_create_file_full+0x3f/0x60 [ 1839.001723][T31154] ref_tracker_dir_debugfs+0x197/0x360 [ 1839.001740][T31154] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1839.001772][T31154] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 1839.001786][T31154] ? alloc_netdev_mqs+0xa6/0x11b0 [ 1839.001802][T31154] ? __raw_spin_lock_init+0x45/0x100 [ 1839.001817][T31154] alloc_netdev_mqs+0x272/0x11b0 [ 1839.001831][T31154] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 1839.001878][T31154] rtnl_create_link+0x31f/0xd70 [ 1839.001897][T31154] rtnl_newlink_create+0x277/0xb70 [ 1839.001915][T31154] ? __pfx___nla_validate_parse+0x10/0x10 [ 1839.001939][T31154] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1839.001959][T31154] ? __pfx___mutex_lock+0x10/0x10 [ 1839.001978][T31154] ? ns_capable+0x89/0xe0 [ 1839.002008][T31154] rtnl_newlink+0x1666/0x1be0 [ 1839.002034][T31154] ? __pfx_rtnl_newlink+0x10/0x10 [ 1839.002060][T31154] ? __lock_acquire+0x6b5/0x2cf0 [ 1839.002091][T31154] ? __lock_acquire+0x6b5/0x2cf0 [ 1839.002118][T31154] ? __lock_acquire+0x6b5/0x2cf0 [ 1839.002156][T31154] ? unwind_next_frame+0xa5/0x23c0 [ 1839.002211][T31154] ? __lock_acquire+0x6b5/0x2cf0 [ 1839.002234][T31154] ? is_bpf_text_address+0x26/0x2b0 [ 1839.002249][T31154] ? kernel_text_address+0xa5/0xe0 [ 1839.002279][T31154] ? __pfx_rtnl_newlink+0x10/0x10 [ 1839.002295][T31154] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1839.002314][T31154] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1839.002330][T31154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1839.002349][T31154] ? __lock_acquire+0x6b5/0x2cf0 [ 1839.002370][T31154] netlink_rcv_skb+0x232/0x4b0 [ 1839.002387][T31154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1839.002405][T31154] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1839.002427][T31154] ? netlink_deliver_tap+0x2e/0x1b0 [ 1839.002448][T31154] netlink_unicast+0x80f/0x9b0 [ 1839.002468][T31154] ? __pfx_netlink_unicast+0x10/0x10 [ 1839.002484][T31154] ? netlink_sendmsg+0x650/0xb40 [ 1839.002499][T31154] ? skb_put+0x11b/0x210 [ 1839.002518][T31154] netlink_sendmsg+0x813/0xb40 [ 1839.002540][T31154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1839.002559][T31154] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1839.002576][T31154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1839.002593][T31154] ____sys_sendmsg+0x972/0x9f0 [ 1839.002611][T31154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1839.002629][T31154] ? import_iovec+0x73/0xa0 [ 1839.002649][T31154] ___sys_sendmsg+0x2a5/0x360 [ 1839.002665][T31154] ? __pfx____sys_sendmsg+0x10/0x10 [ 1839.002698][T31154] ? __fget_files+0x2a/0x420 [ 1839.002715][T31154] ? __fget_files+0x3a0/0x420 [ 1839.002739][T31154] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1839.002753][T31154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1839.002772][T31154] ? __pfx_ksys_write+0x10/0x10 [ 1839.002792][T31154] do_syscall_64+0x14d/0xf80 [ 1839.002803][T31154] ? trace_irq_disable+0x3b/0x150 [ 1839.002820][T31154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.002833][T31154] ? clear_bhb_loop+0x40/0x90 [ 1839.002848][T31154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.002860][T31154] RIP: 0033:0x7fabe899c799 [ 1839.002874][T31154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1839.002885][T31154] RSP: 002b:00007fabe9868028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1839.002900][T31154] RAX: ffffffffffffffda RBX: 00007fabe8c15fa0 RCX: 00007fabe899c799 [ 1839.002909][T31154] RDX: 0000000000040004 RSI: 0000200000000200 RDI: 0000000000000003 [ 1839.002917][T31154] RBP: 00007fabe9868090 R08: 0000000000000000 R09: 0000000000000000 [ 1839.002925][T31154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1839.002933][T31154] R13: 00007fabe8c16038 R14: 00007fabe8c15fa0 R15: 00007fabe8d3fa48 [ 1839.002952][T31154] [ 1839.443683][T18522] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1839.611472][T31154] debugfs: out of free dentries, can not create file 'netdev@ffff88809f2ba620' [ 1839.763554][T24888] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1839.906496][T18522] usb 3-1: config 251 has an invalid interface number: 243 but max is 0 [ 1839.915287][T18522] usb 3-1: config 251 has no interface number 0 [ 1839.923968][T18522] usb 3-1: config 251 interface 243 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1839.956332][T18522] usb 3-1: config 251 interface 243 has no altsetting 0 [ 1839.963897][ T5894] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1839.972411][T24888] usb 4-1: Using ep0 maxpacket: 32 [ 1839.984287][T18522] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice=b8.82 [ 1839.993568][T18522] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.001584][T18522] usb 3-1: Product: syz [ 1840.006077][T18522] usb 3-1: Manufacturer: syz [ 1840.014619][T18522] usb 3-1: SerialNumber: syz [ 1840.019594][T24888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1840.067053][T24888] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1840.087604][T24888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.115076][T24888] usb 4-1: Product: syz [ 1840.127407][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 1840.127881][T24888] usb 4-1: Manufacturer: syz [ 1840.149815][ T5894] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1840.161382][ T5894] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1840.180589][ T5894] usb 1-1: New USB device found, idVendor=1d6b, idProduct=1101, bcdDevice= 0.40 [ 1840.192168][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.211055][ T5894] usb 1-1: Product: syz [ 1840.220335][ T5894] usb 1-1: Manufacturer: syz [ 1840.231353][ T5894] usb 1-1: SerialNumber: syz [ 1840.236205][T24888] usb 4-1: SerialNumber: syz [ 1840.265624][T18522] sisusb 3-1:251.243: Invalid USB2VGA device [ 1840.271760][T18522] sisusb 3-1:251.243: probe with driver sisusb failed with error -22 [ 1840.305936][T24888] usb 4-1: config 0 descriptor?? [ 1840.345585][T18522] usb 3-1: USB disconnect, device number 26 [ 1840.389615][T24888] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input118 [ 1840.442234][T24888] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 1840.609347][T24888] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 1840.659576][T24888] usb 4-1: USB disconnect, device number 124 [ 1840.821591][T31168] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7553'. [ 1841.694849][T31186] usb usb8: usbfs: process 31186 (syz.3.7555) did not claim interface 0 before use [ 1841.718579][T31186] usb usb8: selecting invalid altsetting 2047 [ 1841.743654][T31182] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1842.103150][ T5894] usb 1-1: 0:2 : does not exist [ 1842.311076][ T5894] usb 1-1: USB disconnect, device number 22 [ 1842.328685][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1842.456317][T18522] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1842.916120][T31204] usb usb8: usbfs: process 31204 (syz.1.7562) did not claim interface 0 before use [ 1842.925568][T18522] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 1842.925601][T18522] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1842.925620][T18522] usb 5-1: config 0 has no interface number 0 [ 1842.954723][T18522] usb 5-1: config 0 interface 113 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1842.968129][T18522] usb 5-1: config 0 interface 113 has no altsetting 0 [ 1842.980302][T18522] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1842.993369][T18522] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.001840][T18522] usb 5-1: Product: syz [ 1843.002215][T31204] usb usb8: selecting invalid altsetting 2047 [ 1843.012592][T18522] usb 5-1: Manufacturer: syz [ 1843.017455][T18522] usb 5-1: SerialNumber: syz [ 1843.025643][T18522] usb 5-1: config 0 descriptor?? [ 1843.070088][T18522] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1843.150869][T31204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1843.296509][T31195] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7559'. [ 1843.307234][T31195] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7559'. [ 1843.355825][T18522] usb 5-1: USB disconnect, device number 11 [ 1843.856368][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1843.856384][ T30] audit: type=1326 audit(1772958672.557:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31206 comm="syz.3.7563" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d28b9c799 code=0x0 [ 1845.232263][ T9] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1845.458068][T31241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7574'. [ 1845.472511][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1845.524209][T31245] usb usb8: usbfs: process 31245 (syz.4.7573) did not claim interface 0 before use [ 1845.535286][T31245] usb usb8: selecting invalid altsetting 2047 [ 1845.558444][T31245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1845.595159][T24888] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 1845.681830][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1845.706833][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1845.749157][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=1101, bcdDevice= 0.40 [ 1845.762814][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.772039][T24888] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1845.779725][T24888] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1845.804067][ T9] usb 4-1: Product: syz [ 1845.811299][T24888] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1845.832447][ T9] usb 4-1: Manufacturer: syz [ 1845.837178][ T9] usb 4-1: SerialNumber: syz [ 1845.847340][T24888] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1845.884039][T24888] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1846.166835][T24888] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1846.174541][T24888] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1846.188894][T24888] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1846.231457][T24888] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1846.260747][T24888] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1846.286744][T24888] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1846.295491][T24888] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1846.312237][T24907] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1846.342566][T24888] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1846.369072][T24888] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1846.397592][T24888] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1846.435513][T24888] usb 3-1: string descriptor 0 read error: -22 [ 1846.444182][T24888] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1846.462226][T24907] usb 2-1: Using ep0 maxpacket: 32 [ 1846.463588][T24888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.479185][T24907] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1846.489197][T24907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.554615][T24907] usb 2-1: config 0 descriptor?? [ 1846.569402][T24888] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1846.611970][T24907] as10x_usb: device has been detected [ 1846.639095][T24907] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1846.680785][T24907] usb 2-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1846.723838][T24907] as10x_usb: error during firmware upload part1 [ 1846.769235][T24907] Registered device nBox DVB-T Dongle [ 1846.972241][T24888] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1847.006497][T24020] usb 3-1: USB disconnect, device number 27 [ 1847.183170][T24888] usb 1-1: Using ep0 maxpacket: 8 [ 1847.199229][T24888] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1847.211800][T24888] usb 1-1: config 11 has an invalid interface number: 242 but max is 0 [ 1847.221053][T24888] usb 1-1: config 11 has no interface number 0 [ 1847.231845][T24888] usb 1-1: config 11 interface 242 altsetting 225 has an endpoint descriptor with address 0x7B, changing to 0xB [ 1847.256440][T24888] usb 1-1: config 11 interface 242 altsetting 225 bulk endpoint 0xB has invalid maxpacket 8 [ 1847.266762][T24888] usb 1-1: config 11 interface 242 altsetting 225 endpoint 0x6 has invalid maxpacket 15735, setting to 1024 [ 1847.278759][T24888] usb 1-1: config 11 interface 242 altsetting 225 bulk endpoint 0x6 has invalid maxpacket 1024 [ 1847.298650][T24888] usb 1-1: config 11 interface 242 altsetting 225 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1847.330214][T24888] usb 1-1: config 11 interface 242 altsetting 225 endpoint 0xE has invalid wMaxPacketSize 0 [ 1847.341694][T24888] usb 1-1: config 11 interface 242 has no altsetting 0 [ 1847.358895][T24888] usb 1-1: New USB device found, idVendor=05da, idProduct=0094, bcdDevice=38.8a [ 1847.371136][T24888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.388001][T24888] usb 1-1: Product: syz [ 1847.396369][T24888] usb 1-1: Manufacturer: syz [ 1847.418973][T24888] usb 1-1: SerialNumber: syz [ 1847.444652][T31252] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1847.452451][T31252] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1847.699978][T24888] microtek usb (rev 0.4.3): can only deal with one output endpoints. Bailing out. [ 1847.844297][T24888] usb 1-1: USB disconnect, device number 23 [ 1848.289595][ T9] usb 4-1: 0:2 : does not exist [ 1848.486684][ T9] usb 4-1: USB disconnect, device number 125 [ 1849.429527][T31295] usb usb8: usbfs: process 31295 (syz.2.7588) did not claim interface 0 before use [ 1849.439339][T31295] usb usb8: selecting invalid altsetting 2047 [ 1849.451215][T31295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1850.435973][T31305] input: syz1 as /devices/virtual/input/input119 [ 1850.754050][T24888] usb 2-1: USB disconnect, device number 55 [ 1850.884439][T24888] Unregistered device nBox DVB-T Dongle [ 1850.886574][T24888] as10x_usb: device has been disconnected [ 1851.026271][ T5192] buffer_io_error: 28 callbacks suppressed [ 1851.026290][ T5192] Buffer I/O error on dev loop5, logical block 1, async page read [ 1851.040443][ C0] blk_print_req_error: 9 callbacks suppressed [ 1851.040465][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1851.056285][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1851.082945][ T5192] Buffer I/O error on dev loop5, logical block 1, async page read [ 1851.086915][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1851.100414][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1851.117794][ T5192] Buffer I/O error on dev loop5, logical block 1, async page read [ 1851.132126][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1851.142108][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1851.152231][ T5192] Buffer I/O error on dev loop5, logical block 1, async page read [ 1851.153459][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1851.170056][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1851.202367][ T5192] Buffer I/O error on dev loop5, logical block 1, async page read [ 1851.202412][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1851.220073][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1851.242234][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1851.249326][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1851.259768][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1851.270184][ T5192] ldm_validate_partition_table(): Disk read failed. [ 1851.293238][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1851.303343][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1851.314259][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1851.324203][ T5192] Dev loop5: unable to read RDB block 0 [ 1851.593073][ T5192] loop5: unable to read partition table [ 1851.622645][ T5192] loop5: partition table beyond EOD, truncated [ 1851.832175][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1851.840417][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1851.862504][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1851.944712][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=1101, bcdDevice= 0.40 [ 1851.985062][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.009936][ T9] usb 1-1: Product: syz [ 1852.014480][ T9] usb 1-1: Manufacturer: syz [ 1852.023638][ T9] usb 1-1: SerialNumber: syz [ 1852.192220][T24888] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1852.362301][T24888] usb 3-1: Using ep0 maxpacket: 16 [ 1852.374533][T24888] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1852.384316][T24888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.393147][T24888] usb 3-1: Product: syz [ 1852.397389][T24888] usb 3-1: Manufacturer: syz [ 1852.405049][T24888] usb 3-1: SerialNumber: syz [ 1852.416261][T24888] usb 3-1: config 0 descriptor?? [ 1852.426294][T24888] as10x_usb: device has been detected [ 1852.433050][T24888] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1852.449983][T24888] usb 3-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 1852.467964][T24888] as10x_usb: error during firmware upload part1 [ 1852.479485][T24888] Registered device Sky IT Digital Key (green led) [ 1852.502257][T24907] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1852.625100][T31330] random: crng reseeded on system resumption [ 1852.645505][T31330] FAULT_INJECTION: forcing a failure. [ 1852.645505][T31330] name failslab, interval 1, probability 0, space 0, times 0 [ 1852.687564][T31337] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7601'. [ 1852.775069][T31330] CPU: 0 UID: 0 PID: 31330 Comm: syz.2.7599 Tainted: G L syzkaller #0 PREEMPT(full) [ 1852.775097][T31330] Tainted: [L]=SOFTLOCKUP [ 1852.775102][T31330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1852.775111][T31330] Call Trace: [ 1852.775118][T31330] [ 1852.775128][T31330] dump_stack_lvl+0xe8/0x150 [ 1852.775151][T31330] should_fail_ex+0x412/0x560 [ 1852.775171][T31330] should_failslab+0xa8/0x100 [ 1852.775189][T31330] __kmalloc_cache_noprof+0x88/0x660 [ 1852.775204][T31330] ? async_schedule_node_domain+0x5b/0x120 [ 1852.775222][T31330] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 1852.775242][T31330] async_schedule_node_domain+0x5b/0x120 [ 1852.775261][T31330] dev_cache_fw_image+0x36c/0x3f0 [ 1852.775283][T31330] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 1852.775303][T31330] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 1852.775321][T31330] dpm_for_each_dev+0x56/0xb0 [ 1852.775341][T31330] fw_pm_notify+0x20c/0x2d0 [ 1852.775358][T31330] ? __pfx_fw_pm_notify+0x10/0x10 [ 1852.775375][T31330] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1852.775397][T31330] notifier_call_chain+0x1be/0x400 [ 1852.775422][T31330] blocking_notifier_call_chain_robust+0x85/0x100 [ 1852.775445][T31330] pm_notifier_call_chain_robust+0x2c/0x60 [ 1852.775462][T31330] snapshot_open+0x133/0x280 [ 1852.775480][T31330] ? __pfx_snapshot_open+0x10/0x10 [ 1852.775494][T31330] misc_open+0x2d5/0x350 [ 1852.775512][T31330] chrdev_open+0x4cd/0x5e0 [ 1852.775530][T31330] ? __pfx_chrdev_open+0x10/0x10 [ 1852.775545][T31330] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1852.775562][T31330] ? __pfx_chrdev_open+0x10/0x10 [ 1852.775576][T31330] do_dentry_open+0x785/0x14e0 [ 1852.775602][T31330] vfs_open+0x3b/0x340 [ 1852.775617][T31330] ? path_openat+0x2df0/0x3860 [ 1852.775633][T31330] path_openat+0x2e08/0x3860 [ 1852.775656][T31330] ? __pfx_stack_trace_save+0x10/0x10 [ 1852.775672][T31330] ? stack_depot_save_flags+0x33/0x810 [ 1852.775694][T31330] ? __pfx_path_openat+0x10/0x10 [ 1852.775706][T31330] ? __x64_sys_openat+0x138/0x170 [ 1852.775721][T31330] ? do_syscall_64+0x14d/0xf80 [ 1852.775732][T31330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.775750][T31330] ? __lock_acquire+0x6b5/0x2cf0 [ 1852.775771][T31330] do_file_open+0x23e/0x4a0 [ 1852.775788][T31330] ? __pfx_do_file_open+0x10/0x10 [ 1852.775815][T31330] ? _raw_spin_unlock+0x28/0x50 [ 1852.775831][T31330] ? alloc_fd+0x64b/0x6c0 [ 1852.775856][T31330] do_sys_openat2+0x113/0x200 [ 1852.775881][T31330] ? __pfx_do_sys_openat2+0x10/0x10 [ 1852.775900][T31330] ? ksys_write+0x242/0x270 [ 1852.775914][T31330] ? __pfx_ksys_write+0x10/0x10 [ 1852.775930][T31330] __x64_sys_openat+0x138/0x170 [ 1852.775951][T31330] do_syscall_64+0x14d/0xf80 [ 1852.775962][T31330] ? trace_irq_disable+0x3b/0x150 [ 1852.775979][T31330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.775991][T31330] ? clear_bhb_loop+0x40/0x90 [ 1852.776007][T31330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.776019][T31330] RIP: 0033:0x7ffb6a79c799 [ 1852.776033][T31330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1852.776045][T31330] RSP: 002b:00007ffb6b594028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1852.776059][T31330] RAX: ffffffffffffffda RBX: 00007ffb6aa15fa0 RCX: 00007ffb6a79c799 [ 1852.776069][T31330] RDX: 0000000000042801 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 1852.776078][T31330] RBP: 00007ffb6b594090 R08: 0000000000000000 R09: 0000000000000000 [ 1852.776085][T31330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1852.776093][T31330] R13: 00007ffb6aa16038 R14: 00007ffb6aa15fa0 R15: 00007ffb6ab3fa48 [ 1852.776116][T31330] [ 1852.832138][T24907] usb 4-1: Using ep0 maxpacket: 32 [ 1853.235325][T31330] [ 1853.237710][T31330] ============================================ [ 1853.243870][T31330] WARNING: possible recursive locking detected [ 1853.250213][T31330] syzkaller #0 Tainted: G L [ 1853.256215][T31330] -------------------------------------------- [ 1853.262460][T31330] syz.2.7599/31330 is trying to acquire lock: [ 1853.268601][T31330] ffffffff8f191368 (fw_lock){+.+.}-{4:4}, at: assign_fw+0x52/0x8d0 [ 1853.276548][T31330] [ 1853.276548][T31330] but task is already holding lock: [ 1853.283930][T31330] ffffffff8f191368 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x1f4/0x2d0 [ 1853.292306][T31330] [ 1853.292306][T31330] other info that might help us debug this: [ 1853.300461][T31330] Possible unsafe locking scenario: [ 1853.300461][T31330] [ 1853.307995][T31330] CPU0 [ 1853.311284][T31330] ---- [ 1853.314557][T31330] lock(fw_lock); [ 1853.318292][T31330] lock(fw_lock); [ 1853.322013][T31330] [ 1853.322013][T31330] *** DEADLOCK *** [ 1853.322013][T31330] [ 1853.330196][T31330] May be due to missing lock nesting notation [ 1853.330196][T31330] [ 1853.338711][T31330] 5 locks held by syz.2.7599/31330: [ 1853.343909][T31330] #0: ffffffff8f017ae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1853.352376][T31330] #1: ffffffff8e607d68 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x49/0x70 [ 1853.362851][T31330] #2: ffffffff8e62f350 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0x65/0x100 [ 1853.374699][T31330] #3: ffffffff8f191368 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x1f4/0x2d0 [ 1853.383423][T31330] #4: ffffffff8f18c208 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x29/0xb0 [ 1853.392897][T31330] [ 1853.392897][T31330] stack backtrace: [ 1853.398815][T31330] CPU: 1 UID: 0 PID: 31330 Comm: syz.2.7599 Tainted: G L syzkaller #0 PREEMPT(full) [ 1853.398838][T31330] Tainted: [L]=SOFTLOCKUP [ 1853.398844][T31330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1853.398851][T31330] Call Trace: [ 1853.398858][T31330] [ 1853.398864][T31330] dump_stack_lvl+0xe8/0x150 [ 1853.398885][T31330] print_deadlock_bug+0x279/0x290 [ 1853.398904][T31330] __lock_acquire+0x253f/0x2cf0 [ 1853.398922][T31330] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1853.398939][T31330] ? lockdep_hardirqs_on+0x7a/0x110 [ 1853.398956][T31330] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1853.398972][T31330] ? stack_depot_save_flags+0x3f3/0x810 [ 1853.398988][T31330] lock_acquire+0xf0/0x2e0 [ 1853.399002][T31330] ? assign_fw+0x52/0x8d0 [ 1853.399022][T31330] __mutex_lock+0x19f/0x1300 [ 1853.399035][T31330] ? assign_fw+0x52/0x8d0 [ 1853.399049][T31330] ? path_openat+0x2e08/0x3860 [ 1853.399062][T31330] ? do_sys_openat2+0x113/0x200 [ 1853.399077][T31330] ? __x64_sys_openat+0x138/0x170 [ 1853.399092][T31330] ? do_syscall_64+0x14d/0xf80 [ 1853.399109][T31330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1853.399123][T31330] ? assign_fw+0x52/0x8d0 [ 1853.399138][T31330] ? __pfx___mutex_lock+0x10/0x10 [ 1853.399152][T31330] ? kasan_quarantine_put+0xbb/0x1f0 [ 1853.399165][T31330] ? lockdep_hardirqs_on+0x7a/0x110 [ 1853.399182][T31330] assign_fw+0x52/0x8d0 [ 1853.399197][T31330] ? kfree+0x1c1/0x630 [ 1853.399208][T31330] ? _request_firmware+0xf11/0x1780 [ 1853.399222][T31330] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1853.399244][T31330] _request_firmware+0xfb6/0x1780 [ 1853.399264][T31330] ? __pfx__request_firmware+0x10/0x10 [ 1853.399278][T31330] ? do_raw_spin_lock+0x12b/0x2f0 [ 1853.399292][T31330] __async_dev_cache_fw_image+0x7f/0x2d0 [ 1853.399313][T31330] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 1853.399330][T31330] async_schedule_node_domain+0xe1/0x120 [ 1853.399346][T31330] dev_cache_fw_image+0x36c/0x3f0 [ 1853.399364][T31330] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 1853.399380][T31330] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 1853.399396][T31330] dpm_for_each_dev+0x56/0xb0 [ 1853.399413][T31330] fw_pm_notify+0x20c/0x2d0 [ 1853.399429][T31330] ? __pfx_fw_pm_notify+0x10/0x10 [ 1853.399445][T31330] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1853.399460][T31330] notifier_call_chain+0x1be/0x400 [ 1853.399480][T31330] blocking_notifier_call_chain_robust+0x85/0x100 [ 1853.399499][T31330] pm_notifier_call_chain_robust+0x2c/0x60 [ 1853.399514][T31330] snapshot_open+0x133/0x280 [ 1853.399529][T31330] ? __pfx_snapshot_open+0x10/0x10 [ 1853.399544][T31330] misc_open+0x2d5/0x350 [ 1853.399558][T31330] chrdev_open+0x4cd/0x5e0 [ 1853.399573][T31330] ? __pfx_chrdev_open+0x10/0x10 [ 1853.399587][T31330] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1853.399600][T31330] ? __pfx_chrdev_open+0x10/0x10 [ 1853.399613][T31330] do_dentry_open+0x785/0x14e0 [ 1853.399631][T31330] vfs_open+0x3b/0x340 [ 1853.399646][T31330] ? path_openat+0x2df0/0x3860 [ 1853.399658][T31330] path_openat+0x2e08/0x3860 [ 1853.399673][T31330] ? __pfx_stack_trace_save+0x10/0x10 [ 1853.399687][T31330] ? stack_depot_save_flags+0x33/0x810 [ 1853.399703][T31330] ? __pfx_path_openat+0x10/0x10 [ 1853.399715][T31330] ? __x64_sys_openat+0x138/0x170 [ 1853.399730][T31330] ? do_syscall_64+0x14d/0xf80 [ 1853.399740][T31330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1853.399754][T31330] ? __lock_acquire+0x6b5/0x2cf0 [ 1853.399776][T31330] do_file_open+0x23e/0x4a0 [ 1853.399789][T31330] ? __pfx_do_file_open+0x10/0x10 [ 1853.399806][T31330] ? _raw_spin_unlock+0x28/0x50 [ 1853.399821][T31330] ? alloc_fd+0x64b/0x6c0 [ 1853.399839][T31330] do_sys_openat2+0x113/0x200 [ 1853.399855][T31330] ? __pfx_do_sys_openat2+0x10/0x10 [ 1853.399871][T31330] ? ksys_write+0x242/0x270 [ 1853.399884][T31330] ? __pfx_ksys_write+0x10/0x10 [ 1853.399896][T31330] __x64_sys_openat+0x138/0x170 [ 1853.399913][T31330] do_syscall_64+0x14d/0xf80 [ 1853.399923][T31330] ? trace_irq_disable+0x3b/0x150 [ 1853.399940][T31330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1853.399952][T31330] ? clear_bhb_loop+0x40/0x90 [ 1853.399964][T31330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1853.399976][T31330] RIP: 0033:0x7ffb6a79c799 [ 1853.399990][T31330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1853.400001][T31330] RSP: 002b:00007ffb6b594028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1853.400017][T31330] RAX: ffffffffffffffda RBX: 00007ffb6aa15fa0 RCX: 00007ffb6a79c799 [ 1853.400028][T31330] RDX: 0000000000042801 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 1853.400036][T31330] RBP: 00007ffb6b594090 R08: 0000000000000000 R09: 0000000000000000 [ 1853.400044][T31330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1853.400051][T31330] R13: 00007ffb6aa16038 R14: 00007ffb6aa15fa0 R15: 00007ffb6ab3fa48 [ 1853.400064][T31330] [ 1853.912554][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.919381][T24907] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1853.927525][T24907] usb 4-1: config 0 has no interface number 0 [ 1853.933676][T24907] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1853.943666][T24907] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1853.953249][T24907] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1853.962373][T24907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.970409][T24907] usb 4-1: Product: syz [ 1853.974602][T24907] usb 4-1: Manufacturer: syz [ 1853.979333][T24907] usb 4-1: SerialNumber: syz [ 1853.985360][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.005361][ T9] usb 1-1: 0:2 : does not exist