last executing test programs: 7.906065992s ago: executing program 0 (id=1334): r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r0, &(0x7f00000009c0)='1', 0x1, 0xf, 0x0, 0x0, r0}]) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000540)={0x0, 0x0, 0x0, @raw}) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010000100000000000000017ffff1000000000000000a01040000000000000000010000000900010073797a300000000060000000030a010100000000000000000100000008000b400000000214000480080002400000000008000140000000000900010073797a300000000008000a40000000011c0008800b00024000000000000000000c000140000000000003000014000000100001ec15010000000000000000000a"], 0xa8}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x88802) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x20, 0x3, 0x41, {0x41, 0x22, "3cb03238ea1c9fe3e84eb4ccc255b7bd68179880bc0b958b5a9433de5a14f4044e6456508ee28e4f13c0d737a9b7990018dd6f1b1f4838be16f490b3eb18da"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}}, &(0x7f0000000480)={0x44, &(0x7f0000000140)={0x40, 0xb, 0xdd, "698e215f4b33ea3cdd6c1fb7d0ad5b7b0fadcfdf85a72bde0fadfa65de50438ed899174b3ef676aae6337d0aa8c6114a12c0255da4131bbeb8821efadada9e69fe14f785468ba736317e0f71a6ad1308637cca54439fc0eafbfd2a58489607a011a089bff1057af874a8552473fac45038f6e1c0f2928e59fa34c1dd1c679b130f007894087f431e07913b51c984a651d28e2b44b92efb33d53c8fb1d03091b83e9a565626c802dcbd5220d16cb34854052dd8a623efac2d413918b8e55d9d5e1b9b831bbf8325b52f50af000d7bbc2802aa1dcd72b4efd912411c844e"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000340)={0x20, 0x81, 0x3, "dae1b6"}, &(0x7f0000000380)={0x20, 0x82, 0x2, "819c"}, &(0x7f00000003c0)={0x20, 0x83, 0x2, '?b'}, &(0x7f0000000400)={0x20, 0x84, 0x4, "c28819f0"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "5f9c24"}}) 6.551726698s ago: executing program 1 (id=1344): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), 0x20, &(0x7f0000000200)={[{@redirect_dir_on}, {@redirect_dir_off}], [{@flag='nomand'}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@audit}, {@fowner_eq={'fowner', 0x3d, r0}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) 6.32618793s ago: executing program 1 (id=1348): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000090000000000000080000000000000000000000000000000fcffffff00000000000000000000000084010500fc000000000000000000000000000004000000003c00000000000000000000000000000000000000000000000235000000020000000000000000000000000000fe8000000000000000000000000000bb000000003c0000000a000000ffffffff000000000000000000000000fbffffff04"], 0x23c}, 0x1, 0x0, 0x0, 0x20006854}, 0x4000880) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000cab000)) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000300)={0x0, 0x3862}, &(0x7f0000000380)=0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x13) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) migrate_pages(r7, 0x1e86, &(0x7f0000000140)=0xffffffff, &(0x7f0000000180)=0xfffffffeffffffff) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a300000000030000380"], 0x110}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.587012972s ago: executing program 1 (id=1352): r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r0, &(0x7f00000009c0)='1', 0x1, 0xf, 0x0, 0x0, r0}]) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000540)={0x0, 0x0, 0x0, @raw}) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010000100000000000000017ffff1000000000000000a01040000000000000000010000000900010073797a300000000060000000030a010100000000000000000100000008000b400000000214000480080002400000000008000140000000000900010073797a300000000008000a40000000011c0008800b00024000000000000000000c000140000000000003000014000000100001ec15010000000000000000000a"], 0xa8}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x88802) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x20, 0x3, 0x41, {0x41, 0x22, "3cb03238ea1c9fe3e84eb4ccc255b7bd68179880bc0b958b5a9433de5a14f4044e6456508ee28e4f13c0d737a9b7990018dd6f1b1f4838be16f490b3eb18da"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}}, &(0x7f0000000480)={0x44, &(0x7f0000000140)={0x40, 0xb, 0xdd, "698e215f4b33ea3cdd6c1fb7d0ad5b7b0fadcfdf85a72bde0fadfa65de50438ed899174b3ef676aae6337d0aa8c6114a12c0255da4131bbeb8821efadada9e69fe14f785468ba736317e0f71a6ad1308637cca54439fc0eafbfd2a58489607a011a089bff1057af874a8552473fac45038f6e1c0f2928e59fa34c1dd1c679b130f007894087f431e07913b51c984a651d28e2b44b92efb33d53c8fb1d03091b83e9a565626c802dcbd5220d16cb34854052dd8a623efac2d413918b8e55d9d5e1b9b831bbf8325b52f50af000d7bbc2802aa1dcd72b4efd912411c844e"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000340)={0x20, 0x81, 0x3, "dae1b6"}, &(0x7f0000000380)={0x20, 0x82, 0x2, "819c"}, &(0x7f00000003c0)={0x20, 0x83, 0x2, '?b'}, &(0x7f0000000400)={0x20, 0x84, 0x4, "c28819f0"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "5f9c24"}}) 4.754059192s ago: executing program 0 (id=1358): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) socket$inet6(0xa, 0x800, 0xffffffff) r1 = syz_usb_connect$cdc_ecm(0x5, 0x5d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12011003020000082505a3a440000102030109024b0001017600030904008002020600090724060000939c05240000000d240f0105000000b00102004305241536000905810340003d030209058202"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x437}}]}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, 0x0, 0x0, 0x0}) 4.317779593s ago: executing program 2 (id=1362): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0x7, 0x4, 0x3b8, 0x0, 0x1d0, 0xe8, 0x2d0, 0x2d0, 0x2d0, 0x4, &(0x7f0000000000), {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff, 0xffffff00, 0x0, 0x4, {@empty, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0xff, 0xff]}}, 0x0, 0x8, 0xb7dc, 0x8, 0x404, 0x3, 'pim6reg0\x00', 'hsr0\x00', {0xff}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x800, 0x0, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xfff, 0x9}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x9, 0x80, {0x7}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000140)=[r4, 0x0, r5, 0x0, r6, r7], &(0x7f0000000180)=[0x40000000000, 0x10], 0x6}) landlock_restrict_self(0xffffffffffffffff, 0xc) 3.97837595s ago: executing program 3 (id=1363): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) ioctl$I2C_TENBIT(r0, 0x704, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4001b020, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) syz_usb_connect(0x0, 0x24, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) write$tun(r2, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) fchdir(r4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) stat(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.203567376s ago: executing program 0 (id=1364): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, 0x0, 0x111, 0x6}}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000001, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_mreqn(r1, 0x0, 0x34, 0x0, &(0x7f0000000a00)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="7549bde14e64a818", 0x8}, {&(0x7f0000000080)="58b03f", 0x3}, {&(0x7f0000000100)="8f6d56aaa97dac951d3da2e3616c853f3eeba90d40", 0x15}], 0x3}], 0x1, 0x40800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) recvmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/112, 0x70}], 0x1}, 0x10150) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x11, &(0x7f0000000100)=0x7, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESOCT], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0xc882) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x7fffffff, 0x40) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0xe1e4, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(0x0, 0x80, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x0) 3.136874179s ago: executing program 3 (id=1365): bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x9) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket$unix(0x1, 0x2, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000080), &(0x7f0000000100)={'L+', 0xf593}, 0x16, 0x2) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) r3 = dup2(r2, r1) close_range(r3, 0xffffffffffffffff, 0x0) 3.129134314s ago: executing program 2 (id=1366): r0 = memfd_secret(0x0) timerfd_gettime(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000700000000", 0x39}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xb}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 3.027664978s ago: executing program 0 (id=1367): r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r0, &(0x7f00000009c0)='1', 0x1, 0xf, 0x0, 0x0, r0}]) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000540)={0x0, 0x0, 0x0, @raw}) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010000100000000000000017ffff1000000000000000a01040000000000000000010000000900010073797a300000000060000000030a010100000000000000000100000008000b400000000214000480080002400000000008000140000000000900010073797a300000000008000a40000000011c0008800b00024000000000000000000c000140000000000003000014000000100001ec15010000000000000000000a"], 0xa8}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x88802) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x20, 0x3, 0x41, {0x41, 0x22, "3cb03238ea1c9fe3e84eb4ccc255b7bd68179880bc0b958b5a9433de5a14f4044e6456508ee28e4f13c0d737a9b7990018dd6f1b1f4838be16f490b3eb18da"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}}, &(0x7f0000000480)={0x44, &(0x7f0000000140)={0x40, 0xb, 0xdd, "698e215f4b33ea3cdd6c1fb7d0ad5b7b0fadcfdf85a72bde0fadfa65de50438ed899174b3ef676aae6337d0aa8c6114a12c0255da4131bbeb8821efadada9e69fe14f785468ba736317e0f71a6ad1308637cca54439fc0eafbfd2a58489607a011a089bff1057af874a8552473fac45038f6e1c0f2928e59fa34c1dd1c679b130f007894087f431e07913b51c984a651d28e2b44b92efb33d53c8fb1d03091b83e9a565626c802dcbd5220d16cb34854052dd8a623efac2d413918b8e55d9d5e1b9b831bbf8325b52f50af000d7bbc2802aa1dcd72b4efd912411c844e"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000340)={0x20, 0x81, 0x3, "dae1b6"}, &(0x7f0000000380)={0x20, 0x82, 0x2, "819c"}, &(0x7f00000003c0)={0x20, 0x83, 0x2, '?b'}, &(0x7f0000000400)={0x20, 0x84, 0x4, "c28819f0"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "5f9c24"}}) 2.985931322s ago: executing program 3 (id=1368): socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x30) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r2 = fanotify_init(0xf00, 0x2) fanotify_mark(r2, 0x105, 0x8971, r1, 0x0) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.94323245s ago: executing program 2 (id=1369): clock_gettime(0xa, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r0, 0xc1d, 0x0) 2.893910237s ago: executing program 2 (id=1370): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000"], 0x28}}, 0x0) (fail_nth: 7) 2.892426122s ago: executing program 3 (id=1371): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000021c0)={0x0, 0x1f, &(0x7f0000002180)={&(0x7f0000000280)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x0, 0xa, 0xfffe}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000c4}, 0x20000000) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001080)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)="cbe8a4", 0x3}, {&(0x7f0000000100)="fe40", 0x2}], 0x2, 0x0, 0x0, 0x40015}], 0x1, 0x40040040) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x80000000007, 0x7) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003200)={0x0, 0x0, &(0x7f0000001f40)=[{0x0}, {0x0}], 0x2}, 0x0, 0x4000804}) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) r10 = dup3(r5, r4, 0x0) r11 = creat(&(0x7f0000000400)='./file0\x00', 0x8) r12 = syz_open_dev$vcsn(&(0x7f0000000900), 0x9, 0x80040) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x0, 0xf004, 0x8807, 0x3, 0x17d}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x98b0, 0x20, 0x0, 0x3ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeb5d, 0x20, 0x0, 0x110, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x336d, 0x200, 0x0, 0x339, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xddef, 0x2000, 0x0, 0x3ae, 0x0, r11}}], 0x4, &(0x7f00000020c0)={0x2e, 0x10, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, '\x00', {0x1, 0xeac, 0x0, &(0x7f00000010c0)=@buf_512="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"}}, &(0x7f0000002140)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="c74424000f000000c74424020087b524c7442406000000000f011c240f20c035040000000f22c0ee362e660f38dcab1b880000a82c0fc7af0a0ce244650fc71fc4e289bb94e1e60b6425670f01c566baf80cb82479868def66bafc0c66b85a2c66ef", 0x62}], 0x1, 0x4, &(0x7f0000000140), 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_names\x00') getsockopt$WPAN_WANTACK(r13, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r14, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r14, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101"], 0x0) 2.787896025s ago: executing program 2 (id=1372): openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x5, 0x4) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000440)={0x34, r4, 0xb97534d5fe970ccf, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0x2d, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x34}}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd1, 0x0, 0x4) kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac", 0x94, 0x5, 0xffffffff}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x20005005) sendmmsg$alg(r8, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d930746", 0xe8}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xd0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a11", 0x1f}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r9 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r9, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) 2.77539442s ago: executing program 1 (id=1373): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) ioctl$I2C_TENBIT(r0, 0x704, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4001b020, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) write$tun(r2, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) fchdir(r4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) stat(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.418355381s ago: executing program 1 (id=1374): socket$phonet_pipe(0x23, 0x5, 0x2) userfaultfd(0x801) socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x5318, &(0x7f0000000140)={0x0, 0xd5a8, 0x2, 0x1, 0x382}, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x3371, &(0x7f0000000280)={0x0, 0x5561, 0x2, 0xfffffffc, 0x208f}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_clone3(&(0x7f0000000340)={0x4301100, &(0x7f0000000040), 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_usb_connect$rtl8150(0x3, 0x4, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902240001000000000904310002ff0107ff09058a02100000fa00090581"], 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) socket$rds(0x15, 0x5, 0x0) socket$inet6(0xa, 0x80001, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xc3) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xe2) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xffffffffffffffff) socket$can_bcm(0x1d, 0x2, 0x2) 1.271358948s ago: executing program 3 (id=1375): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, 0x0, 0x1e) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @local}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd70100400000005000000080009000200000008000b000000000808000c00a60a0000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20c00, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f0000000080)={r9, r10+10000000}, 0x0) r11 = syz_pidfd_open(r8, 0x0) ioctl$FS_IOC_GETVERSION(r11, 0xff04, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x12bc}, 0x1, 0x0, 0x0, 0x40000020}, 0x0) 972.027539ms ago: executing program 2 (id=1376): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x41, 0x1c0862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000640)={r1, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x18, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f35e7000000000000000e00", "32d8cc26f7061a74df2cfc72c89f3d9e234b30c50997d3bcf409ff2176ff7bfe55cd4a5d83cd4a5249d3ffe70c7f3f800b2f1c6aa54cc50a1fcaed33ba1fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce2]}}) r2 = epoll_create1(0x80000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r3, &(0x7f0000000380)=""/177, 0xb1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffe}}) timer_settime(0x0, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000240)={0x2, 0x47, 0xa, 0xf, 0xffffffff, 0x6, 0x2, 0x2}, 0x0, &(0x7f0000000080)={0x9, 0x7, 0x3, 0x2, 0x7, 0x1, 0x9}, &(0x7f0000000200)={0x77359400}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000180)={'veth0_to_bridge\x00', 0xd519}) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) sendfile(r5, r0, 0x0, 0x210) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r8, 0x89e3, &(0x7f0000000080)={0x4c, 0x3, 0x7, 0x9}) ioctl$XFS_IOC_FSGEOMETRY_V1(r8, 0x80705864, &(0x7f00000004c0)) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="c1170200", @ANYRES16=r7, @ANYBLOB="000828bd7000fedbdf25090000000800060009000000140001800600010008000000060001000a00000008000400040000000800040007000000"], 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESOCT=r3, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x497dced191a4904}, 0x24008494) 722.578526ms ago: executing program 1 (id=1377): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0003b8000000b803"]}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x6040094}, 0x24040858) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020) 275.291764ms ago: executing program 3 (id=1378): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r3, &(0x7f0000000880)=@abs, &(0x7f0000000900)=0x6e) keyctl$read(0xb, r2, &(0x7f0000000340)=""/200, 0xc8) connect$unix(r0, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000cc0)=ANY=[@ANYBLOB="200a83"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0xc, 0x7}]}, 0xc, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x7, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0x2, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000000, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000000, 0xffff, 0x2, 0x6, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x1, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10004, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x9d, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000106b1d010140000102030109028b00030103c0050904000000011d00000a2401faf935000201020924030203040201000c24020404049b8b9bba0560072407030000010624040206b109240305000403050609040100000102000009040101010102008409cc23eb2c97601620e5d02d000b05010920000702000701020000090402010101020000090582090004a709e407250108010200a63cdd2d5af4da96d72aa1e6e3da16233f843491a942c7267659253294964718b3326b4ce1c9305a6752b7d3b5ca9f113bc164d8a75d053210946d34e2424d64579ec16d5c72630fe019c4983b20b556b2b95de415381d54d2d4c23ad661f8c53448e3ccdb45da6ec3ab5df5088d"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) 87.131967ms ago: executing program 0 (id=1379): socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x30) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r2 = fanotify_init(0xf00, 0x2) fanotify_mark(r2, 0x105, 0x8971, r1, 0x0) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=1380): syz_usb_connect(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f010203010902240001000000000904"], 0x0) kexec_load(0x3, 0x2, &(0x7f0000000580)=[{&(0x7f00000002c0)="86cd0f12f1148bb5a6513400c6d4a0d80679c326797c8de2f486b32766effa502c69dc88b4eab2f9eb3cd7ad1caf27d48098187011a74c4cf7bb1ab1e810974e90ae6203eb96e1a1e349d30c57aa521061822a0b5c576c8d6870e19b8f7abd850469fa11b3cd646926320957a34f4a7f890e63641a5f4b673e960f894584f07b339418688a9bc9708f2a494927aee359618a0759756d278b609cb2", 0x9b, 0x10, 0x5}, {&(0x7f0000000600)="529042bcfa1d46864e9e52469d6008e92bce4a995380bf27f5a6ccf664b714fdfa375e3b334182257d0578a964e0299b8447df8b087d4c1e6e852843ac6a938770043073717a49bc25e5ec77073333d8d6a5183d93f21f8a32b6756958b4edd7a5f4fdf309d3cbe446eba5823f8ef48fedeac863680d0cf336e738e513351f74f83280d2bffb1ce0e7f0f3941a8af7c2530e5d10594fa7e19e362ec4a22502dde4ff5a85d0a8502535f1c503f036a07534421afa32155184dbcb71772fd29cc612341df1b52b37279c77197c7b49f1f27dcccf975867c51f6005c1859719fd81fed9e49aa1758915fc761b1538fe5f6fce56edb126", 0xf5, 0x0, 0x6}], 0x280000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x820c2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xd0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c05442", 0x39}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d6b", 0xb2}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000100050c100000000000224e0000", 0x58}], 0x1) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000007c0)={0x60, 0x1, &(0x7f0000008000/0x1000)=nil, &(0x7f0000010000/0x4000)=nil, 0x3, &(0x7f0000000500)=[{0x3, 0x4, 0x71}], 0x1, 0x9, 0x4, 0x30, 0x42, 0x39}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.026934][ T7928] RSP: 002b:00007ff77061e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 228.026955][ T7928] RAX: ffffffffffffffda RBX: 00007ff772645fa0 RCX: 00007ff7723cce59 [ 228.026969][ T7928] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 228.026983][ T7928] RBP: 00007ff77061e090 R08: 0000200000002440 R09: 0000000000000000 [ 228.026996][ T7928] R10: 000000000000804a R11: 0000000000000246 R12: 0000000000000002 [ 228.027008][ T7928] R13: 00007ff772646038 R14: 00007ff772645fa0 R15: 00007ffc4fc6e448 [ 228.027039][ T7928] [ 228.027170][ T7928] ERROR: Out of memory at tomoyo_realpath_from_path. [ 228.244716][ T7930] fuse: Unknown parameter 'group_id00000000000000000000' [ 228.581394][ T5602] usb 3-1: USB disconnect, device number 45 [ 228.748201][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 228.912144][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 228.912175][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.943060][ T9] usb 2-1: config 0 descriptor?? [ 228.954269][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 229.671461][ T1009] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 229.757004][ T7955] fuse: Bad value for 'user_id' [ 229.762102][ T7955] fuse: Bad value for 'user_id' [ 229.824626][ T1009] usb 1-1: Using ep0 maxpacket: 16 [ 229.829841][ T1009] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.829874][ T1009] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 229.829913][ T1009] usb 1-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 229.829937][ T1009] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.849511][ T1009] usb 1-1: config 0 descriptor?? [ 230.118211][ T9] usb 2-1: USB disconnect, device number 33 [ 230.313482][ T1009] waltop 0003:172F:0500.000A: unknown main item tag 0x7 [ 230.313517][ T1009] waltop 0003:172F:0500.000A: collection stack underflow [ 230.313541][ T1009] waltop 0003:172F:0500.000A: item 0 2 0 12 parsing failed [ 230.314280][ T1009] waltop 0003:172F:0500.000A: probe with driver waltop failed with error -22 [ 230.466692][ T7962] kAFS: unable to lookup cell '' [ 230.508006][ T9] usb 1-1: USB disconnect, device number 49 [ 230.853088][ T7978] fuse: Bad value for 'user_id' [ 230.853108][ T7978] fuse: Bad value for 'user_id' [ 231.983259][ T8005] program syz.2.723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.167253][ T8011] kAFS: unable to lookup cell '' [ 232.442099][ T8014] fuse: Bad value for 'user_id' [ 232.442119][ T8014] fuse: Bad value for 'user_id' [ 232.852969][ T822] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 232.976609][ T822] usb 4-1: device descriptor read/64, error -71 [ 233.205300][ T822] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 233.386467][ T822] usb 4-1: device descriptor read/64, error -71 [ 233.491481][ T822] usb usb4-port1: attempt power cycle [ 233.815226][ T822] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 233.834431][ T822] usb 4-1: device descriptor read/8, error -71 [ 233.996031][ T5712] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 234.072347][ T822] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 234.092027][ T822] usb 4-1: device descriptor read/8, error -71 [ 234.161915][ T5712] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 234.161951][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.161982][ T5712] usb 2-1: Product: syz [ 234.161990][ T5712] usb 2-1: Manufacturer: syz [ 234.161997][ T5712] usb 2-1: SerialNumber: syz [ 234.165729][ T5712] usb 2-1: config 0 descriptor?? [ 234.199119][ T822] usb usb4-port1: unable to enumerate USB device [ 234.291228][ T1009] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 234.359545][ T5712] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 234.451279][ T1009] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 234.451310][ T1009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.451372][ T1009] usb 3-1: Product: syz [ 234.451380][ T1009] usb 3-1: Manufacturer: syz [ 234.451387][ T1009] usb 3-1: SerialNumber: syz [ 234.460570][ T1009] usb 3-1: config 0 descriptor?? [ 234.684191][ T1009] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 235.482760][ T8039] fuse: Bad value for 'fd' [ 235.817816][ T5712] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 235.828053][ T5712] usb 2-1: USB disconnect, device number 34 [ 236.115323][ T1009] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 236.125699][ T1009] usb 3-1: USB disconnect, device number 46 [ 236.600424][ T8063] netlink: 104 bytes leftover after parsing attributes in process `syz.3.743'. [ 236.809250][ T8067] fuse: Bad value for 'fd' [ 237.182935][ T8078] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 237.240354][ T8081] usb usb8: usbfs: process 8081 (syz.0.747) did not claim interface 0 before use [ 237.240744][ T8081] program syz.0.747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.434648][ T822] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 237.591569][ T822] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 237.591601][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.591620][ T822] usb 4-1: Product: syz [ 237.591634][ T822] usb 4-1: Manufacturer: syz [ 237.591649][ T822] usb 4-1: SerialNumber: syz [ 237.777697][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 237.795792][ T8080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.798592][ T8080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.939505][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 237.941588][ T9] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 237.941617][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.946665][ T9] usb 3-1: config 0 descriptor?? [ 238.071180][ T8080] nvme_fabrics: missing parameter 'transport=%s' [ 238.071198][ T8080] nvme_fabrics: missing parameter 'nqn=%s' [ 238.146188][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 238.312705][ T9] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 238.312735][ T9] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 238.438406][ T822] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 238.438476][ T822] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 238.499249][ T822] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 238.534844][ T822] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 238.552766][ T822] usb 4-1: USB disconnect, device number 45 [ 239.062044][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.752'. [ 239.072250][ T8095] fuse: Bad value for 'fd' [ 239.386260][ T8106] FAULT_INJECTION: forcing a failure. [ 239.386260][ T8106] name failslab, interval 1, probability 0, space 0, times 0 [ 239.386286][ T8106] CPU: 1 UID: 0 PID: 8106 Comm: syz.2.757 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 239.386302][ T8106] Tainted: [L]=SOFTLOCKUP [ 239.386306][ T8106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 239.386313][ T8106] Call Trace: [ 239.386318][ T8106] [ 239.386323][ T8106] dump_stack_lvl+0xe8/0x150 [ 239.386342][ T8106] should_fail_ex+0x46b/0x600 [ 239.386361][ T8106] should_failslab+0xa8/0x100 [ 239.386383][ T8106] __kmalloc_cache_noprof+0x84/0x690 [ 239.386406][ T8106] ? __kthread_create_on_node+0x115/0x3f0 [ 239.386426][ T8106] ? __pfx_psi_rtpoll_worker+0x10/0x10 [ 239.386457][ T8106] __kthread_create_on_node+0x115/0x3f0 [ 239.386479][ T8106] ? __pfx___kthread_create_on_node+0x10/0x10 [ 239.386511][ T8106] ? __pfx_psi_rtpoll_worker+0x10/0x10 [ 239.386539][ T8106] ? __pfx_psi_rtpoll_worker+0x10/0x10 [ 239.386568][ T8106] kthread_create_on_node+0xeb/0x140 [ 239.386602][ T8106] ? __pfx_kthread_create_on_node+0x10/0x10 [ 239.386620][ T8106] ? lockdep_hardirqs_on+0x7a/0x110 [ 239.386636][ T8106] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 239.386653][ T8106] ? mutex_lock_nested+0x152/0x1d0 [ 239.386664][ T8106] ? psi_trigger_create+0x500/0xb60 [ 239.386684][ T8106] psi_trigger_create+0x54e/0xb60 [ 239.386700][ T8106] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 239.386716][ T8106] ? __pfx_psi_trigger_create+0x10/0x10 [ 239.386732][ T8106] ? mutex_lock_nested+0x152/0x1d0 [ 239.386751][ T8106] ? cgroup_kn_lock_live+0x13c/0x230 [ 239.386778][ T8106] cgroup_memory_pressure_write+0x1c6/0x240 [ 239.386804][ T8106] ? __pfx_cgroup_memory_pressure_write+0x10/0x10 [ 239.386824][ T8106] cgroup_file_write+0x331/0x8f0 [ 239.386857][ T8106] ? __pfx_cgroup_file_write+0x10/0x10 [ 239.386872][ T8106] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 239.386887][ T8106] ? lockdep_hardirqs_on+0x7a/0x110 [ 239.386906][ T8106] ? __pfx_cgroup_file_write+0x10/0x10 [ 239.386920][ T8106] kernfs_fop_write_iter+0x3b0/0x540 [ 239.386939][ T8106] vfs_write+0x629/0xba0 [ 239.386959][ T8106] ? __pfx_vfs_write+0x10/0x10 [ 239.386974][ T8106] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 239.386988][ T8106] ? lockdep_hardirqs_on+0x7a/0x110 [ 239.387004][ T8106] ? mutex_lock_nested+0x152/0x1d0 [ 239.387015][ T8106] ? fdget_pos+0x252/0x320 [ 239.387032][ T8106] ksys_write+0x156/0x270 [ 239.387047][ T8106] ? __pfx_ksys_write+0x10/0x10 [ 239.387065][ T8106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.387077][ T8106] do_syscall_64+0x174/0x580 [ 239.387091][ T8106] ? trace_irq_disable+0x3b/0x140 [ 239.387103][ T8106] ? clear_bhb_loop+0x40/0x90 [ 239.387116][ T8106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.387127][ T8106] RIP: 0033:0x7f484fc9ce59 [ 239.387138][ T8106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.387147][ T8106] RSP: 002b:00007f484def6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 239.387159][ T8106] RAX: ffffffffffffffda RBX: 00007f484ff15fa0 RCX: 00007f484fc9ce59 [ 239.387173][ T8106] RDX: 000000000000002f RSI: 0000200000000080 RDI: 0000000000000004 [ 239.387180][ T8106] RBP: 00007f484def6090 R08: 0000000000000000 R09: 0000000000000000 [ 239.387186][ T8106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.387192][ T8106] R13: 00007f484ff16038 R14: 00007f484ff15fa0 R15: 00007fff2ebe7118 [ 239.387210][ T8106] [ 239.603926][ T1009] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 239.837489][ T1009] usb 4-1: unable to get BOS descriptor or descriptor too short [ 239.838878][ T1009] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.838930][ T1009] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 239.838954][ T1009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 239.838974][ T1009] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 239.841375][ T1009] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 239.841403][ T1009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.841423][ T1009] usb 4-1: Product: syz [ 239.841437][ T1009] usb 4-1: Manufacturer: syz [ 239.841445][ T1009] usb 4-1: SerialNumber: syz [ 239.854284][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 239.894208][ T1009] usb 4-1: config 0 descriptor?? [ 239.895270][ T8103] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 240.007227][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 240.015574][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 240.015604][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.042190][ T10] usb 2-1: config 0 descriptor?? [ 240.126630][ C1] usb 4-1: NFC: Urb failure (status -71) [ 240.133872][ T1009] usb 4-1: NFC: Unable to get FW version [ 240.137364][ T1009] pn533_usb 4-1:0.0: probe with driver pn533_usb failed with error -90 [ 240.174010][ T1009] usb 4-1: USB disconnect, device number 46 [ 240.258348][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 240.475756][ T8121] fuse: Bad value for 'fd' [ 241.081960][ T8130] netlink: 'syz.1.767': attribute type 46 has an invalid length. [ 241.432749][ T8143] fuse: Bad value for 'fd' [ 243.725579][ T8177] fuse: Bad value for 'fd' [ 244.526353][ T8198] fuse: Invalid rootmode [ 245.490042][ T8218] netlink: 292 bytes leftover after parsing attributes in process `syz.1.796'. [ 246.584437][ T8237] fuse: Invalid rootmode [ 247.575893][ T8248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.865257][ T5712] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 248.011430][ T5712] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.011483][ T5712] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.011525][ T5712] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 248.011548][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.038217][ T5712] usb 4-1: config 0 descriptor?? [ 248.045778][ T5712] qmi_wwan 4-1:0.0: bogus CDC Union: master=25, slave=0 [ 248.046025][ T5712] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 248.202370][ T8256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.806'. [ 248.233464][ T5602] usb 4-1: USB disconnect, device number 47 [ 248.420930][ T8261] fuse: Invalid rootmode [ 249.520770][ T8291] fuse: Bad value for 'rootmode' [ 250.261469][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.261571][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.542257][ T8311] fuse: Bad value for 'rootmode' [ 250.824075][ T8322] macvtap0: entered promiscuous mode [ 250.824324][ T8322] macvtap0: entered allmulticast mode [ 250.824339][ T8322] veth0_macvtap: entered allmulticast mode [ 251.022332][ T8324] binder: 8323:8324 ioctl c0306201 2000000001c0 returned -22 [ 251.389619][ T5721] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 251.567694][ T5721] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 251.567726][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.567747][ T5721] usb 1-1: Product: syz [ 251.567761][ T5721] usb 1-1: Manufacturer: syz [ 251.567776][ T5721] usb 1-1: SerialNumber: syz [ 251.586874][ T5721] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 251.741473][ T5602] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 252.142607][ T5712] usb 1-1: USB disconnect, device number 50 [ 252.183976][ T8340] fuse: Bad value for 'rootmode' [ 252.240699][ T8342] netlink: 164 bytes leftover after parsing attributes in process `syz.2.842'. [ 252.651389][ T8356] FAULT_INJECTION: forcing a failure. [ 252.651389][ T8356] name failslab, interval 1, probability 0, space 0, times 0 [ 252.651424][ T8356] CPU: 0 UID: 0 PID: 8356 Comm: syz.1.846 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 252.651451][ T8356] Tainted: [L]=SOFTLOCKUP [ 252.651458][ T8356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 252.651468][ T8356] Call Trace: [ 252.651476][ T8356] [ 252.651484][ T8356] dump_stack_lvl+0xe8/0x150 [ 252.651512][ T8356] should_fail_ex+0x46b/0x600 [ 252.651546][ T8356] should_failslab+0xa8/0x100 [ 252.651573][ T8356] __kmalloc_noprof+0xdf/0x7b0 [ 252.651594][ T8356] ? kfree+0x4d/0x6c0 [ 252.651613][ T8356] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 252.651642][ T8356] tomoyo_realpath_from_path+0xe3/0x5d0 [ 252.651670][ T8356] ? tomoyo_domain+0xd7/0x130 [ 252.651697][ T8356] ? tomoyo_path_number_perm+0x219/0x630 [ 252.651726][ T8356] tomoyo_path_number_perm+0x246/0x630 [ 252.651758][ T8356] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 252.651786][ T8356] ? __lock_acquire+0x6b5/0x2d10 [ 252.651811][ T8356] ? do_raw_spin_lock+0x12b/0x2f0 [ 252.651860][ T8356] ? __fget_files+0x2a/0x420 [ 252.651884][ T8356] ? __fget_files+0x2a/0x420 [ 252.651903][ T8356] ? __fget_files+0x3a6/0x420 [ 252.651923][ T8356] ? __fget_files+0x2a/0x420 [ 252.651947][ T8356] security_file_ioctl+0xc3/0x2a0 [ 252.651976][ T8356] __se_sys_ioctl+0x47/0x170 [ 252.652002][ T8356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.652023][ T8356] do_syscall_64+0x174/0x580 [ 252.652050][ T8356] ? trace_irq_disable+0x3b/0x140 [ 252.652072][ T8356] ? clear_bhb_loop+0x40/0x90 [ 252.652097][ T8356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.652116][ T8356] RIP: 0033:0x7ff7723cce59 [ 252.652133][ T8356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.652150][ T8356] RSP: 002b:00007ff77061e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.652170][ T8356] RAX: ffffffffffffffda RBX: 00007ff772645fa0 RCX: 00007ff7723cce59 [ 252.652184][ T8356] RDX: 0000000000000000 RSI: 0000000040304580 RDI: 0000000000000003 [ 252.652196][ T8356] RBP: 00007ff77061e090 R08: 0000000000000000 R09: 0000000000000000 [ 252.652209][ T8356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.652220][ T8356] R13: 00007ff772646038 R14: 00007ff772645fa0 R15: 00007ffc4fc6e448 [ 252.652258][ T8356] [ 252.652376][ T8356] ERROR: Out of memory at tomoyo_realpath_from_path. [ 252.857054][ T5602] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 252.932967][ T5602] ath9k_htc: Failed to initialize the device [ 252.933442][ T5712] usb 1-1: ath9k_htc: USB layer deinitialized [ 253.361578][ T5712] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 253.508791][ T5712] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 253.508823][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.508843][ T5712] usb 1-1: Product: syz [ 253.508858][ T5712] usb 1-1: Manufacturer: syz [ 253.508866][ T5712] usb 1-1: SerialNumber: syz [ 253.512591][ T5712] usb 1-1: config 0 descriptor?? [ 253.708548][ T5712] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 254.926757][ T5712] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 254.948340][ T5712] usb 1-1: USB disconnect, device number 51 [ 256.083820][ T8404] netlink: 140 bytes leftover after parsing attributes in process `syz.0.862'. [ 256.600197][ T32] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 256.748034][ T32] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 256.748064][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.748084][ T32] usb 1-1: Product: syz [ 256.748098][ T32] usb 1-1: Manufacturer: syz [ 256.748112][ T32] usb 1-1: SerialNumber: syz [ 256.752120][ T32] usb 1-1: config 0 descriptor?? [ 256.952681][ T5712] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 256.977630][ T32] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 257.096768][ T5712] usb 4-1: not running at top speed; connect to a high speed hub [ 257.097889][ T5712] usb 4-1: config 5 has an invalid interface number: 104 but max is 0 [ 257.097915][ T5712] usb 4-1: config 5 has no interface number 0 [ 257.097999][ T5712] usb 4-1: config 5 interface 104 altsetting 255 endpoint 0xD has invalid wMaxPacketSize 0 [ 257.098014][ T5712] usb 4-1: config 5 interface 104 altsetting 255 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 257.098028][ T5712] usb 4-1: config 5 interface 104 altsetting 255 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 257.098042][ T5712] usb 4-1: config 5 interface 104 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 257.098054][ T5712] usb 4-1: config 5 interface 104 has no altsetting 0 [ 257.167137][ T5712] usb 4-1: string descriptor 0 read error: -22 [ 257.167490][ T5712] usb 4-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=40.d3 [ 257.167514][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.183133][ T8423] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 257.204232][ T5712] usb 4-1: selecting invalid altsetting 1 [ 257.204312][ T5712] catc 4-1:5.104: Can't set altsetting 1. [ 257.204374][ T5712] catc 4-1:5.104: probe with driver catc failed with error -5 [ 257.412680][ T822] usb 4-1: USB disconnect, device number 48 [ 258.238711][ T32] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 258.245919][ T32] usb 1-1: USB disconnect, device number 52 [ 258.779384][ T8436] kAFS: unable to lookup cell '' [ 259.616275][ T8456] kvm: pic: non byte read [ 259.616370][ T8456] kvm: pic: non byte read [ 259.926372][ T8465] kAFS: unable to lookup cell '' [ 260.554166][ T32] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 260.697104][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 260.702023][ T32] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 260.702057][ T32] usb 1-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 32 [ 260.702074][ T32] usb 1-1: config 1 interface 0 has no altsetting 0 [ 260.704578][ T32] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.704595][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.704606][ T32] usb 1-1: Product: syz [ 260.704613][ T32] usb 1-1: Manufacturer: syz [ 260.704620][ T32] usb 1-1: SerialNumber: syz [ 260.795475][ T8476] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 261.013845][ T32] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 261.034058][ T32] usb 1-1: USB disconnect, device number 53 [ 261.977927][ T8499] kAFS: unable to lookup cell '' [ 262.600924][ T8512] netlink: 24 bytes leftover after parsing attributes in process `syz.1.902'. [ 262.600959][ T8512] openvswitch: netlink: Flow key attr not present in new flow. [ 262.684255][ T8514] overlay: Unknown parameter 'e0' [ 262.850442][ T8520] kAFS: unable to lookup cell '' [ 263.658751][ T32] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 263.811111][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 263.813942][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 166, changing to 11 [ 263.813976][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59123, setting to 1024 [ 263.814018][ T32] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 263.814032][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.818645][ T32] usb 4-1: config 0 descriptor?? [ 263.873181][ T8535] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 264.259119][ T32] apple 0003:05AC:024B.000B: fixing up MacBook JIS keyboard report descriptor [ 264.260675][ T32] apple 0003:05AC:024B.000B: unknown global tag 0xe [ 264.260696][ T32] apple 0003:05AC:024B.000B: item 0 1 1 14 parsing failed [ 264.261834][ T32] apple 0003:05AC:024B.000B: parse failed [ 264.261938][ T32] apple 0003:05AC:024B.000B: probe with driver apple failed with error -22 [ 264.487350][ T8541] kAFS: unable to lookup cell '' [ 265.320730][ T821] usb 4-1: USB disconnect, device number 49 [ 266.976063][ T8590] FAULT_INJECTION: forcing a failure. [ 266.976063][ T8590] name failslab, interval 1, probability 0, space 0, times 0 [ 266.976096][ T8590] CPU: 1 UID: 0 PID: 8590 Comm: syz.2.932 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 266.976121][ T8590] Tainted: [L]=SOFTLOCKUP [ 266.976128][ T8590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 266.976138][ T8590] Call Trace: [ 266.976144][ T8590] [ 266.976152][ T8590] dump_stack_lvl+0xe8/0x150 [ 266.976180][ T8590] should_fail_ex+0x46b/0x600 [ 266.976216][ T8590] should_failslab+0xa8/0x100 [ 266.976240][ T8590] kmem_cache_alloc_noprof+0x87/0x680 [ 266.976254][ T8590] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 266.976270][ T8590] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 266.976289][ T8590] mmu_topup_memory_caches+0x21/0x170 [ 266.976304][ T8590] kvm_mmu_load+0x9d/0x2320 [ 266.976316][ T8590] ? kvm_msr_allowed+0x9a/0x490 [ 266.976332][ T8590] ? kvm_msr_allowed+0x9a/0x490 [ 266.976346][ T8590] ? kvm_msr_allowed+0x3f4/0x490 [ 266.976361][ T8590] ? kvm_msr_allowed+0x9a/0x490 [ 266.976378][ T8590] ? kvm_apic_has_interrupt+0x73c/0x770 [ 266.976394][ T8590] ? vmx_recalc_intercepts+0xec4/0x1b10 [ 266.976414][ T8590] vcpu_run+0x5c68/0x7830 [ 266.976443][ T8590] ? ___ratelimit+0x1ea/0x8d0 [ 266.976473][ T8590] ? __pfx_vcpu_run+0x10/0x10 [ 266.976483][ T8590] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 266.976494][ T8590] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 266.976512][ T8590] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 266.976529][ T8590] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 266.976539][ T8590] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 266.976552][ T8590] ? do_raw_spin_lock+0x12b/0x2f0 [ 266.976568][ T8590] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 266.976584][ T8590] ? lockdep_hardirqs_on+0x7a/0x110 [ 266.976599][ T8590] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 266.976613][ T8590] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 266.976628][ T8590] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 266.976641][ T8590] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 266.976655][ T8590] ? lockdep_hardirqs_on+0x7a/0x110 [ 266.976669][ T8590] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 266.976683][ T8590] ? rt_write_unlock+0x190/0x230 [ 266.976697][ T8590] kvm_vcpu_ioctl+0xa65/0xfe0 [ 266.976714][ T8590] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 266.976739][ T8590] ? __fget_files+0x2a/0x420 [ 266.976753][ T8590] ? __fget_files+0x2a/0x420 [ 266.976763][ T8590] ? __fget_files+0x3a6/0x420 [ 266.976774][ T8590] ? __fget_files+0x2a/0x420 [ 266.976787][ T8590] ? bpf_lsm_file_ioctl+0x9/0x20 [ 266.976802][ T8590] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 266.976817][ T8590] __se_sys_ioctl+0xff/0x170 [ 266.976831][ T8590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.976842][ T8590] do_syscall_64+0x174/0x580 [ 266.976856][ T8590] ? trace_irq_disable+0x3b/0x140 [ 266.976880][ T8590] ? clear_bhb_loop+0x40/0x90 [ 266.976902][ T8590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.976918][ T8590] RIP: 0033:0x7f484fc9ce59 [ 266.976930][ T8590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.976939][ T8590] RSP: 002b:00007f484ded5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.976950][ T8590] RAX: ffffffffffffffda RBX: 00007f484ff16090 RCX: 00007f484fc9ce59 [ 266.976958][ T8590] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 266.976965][ T8590] RBP: 00007f484ded5090 R08: 0000000000000000 R09: 0000000000000000 [ 266.976971][ T8590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 266.976977][ T8590] R13: 00007f484ff16128 R14: 00007f484ff16090 R15: 00007fff2ebe7118 [ 266.976993][ T8590] [ 267.155298][ T5712] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 267.310351][ T5712] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 267.310379][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.310399][ T5712] usb 1-1: Product: syz [ 267.310412][ T5712] usb 1-1: Manufacturer: syz [ 267.310426][ T5712] usb 1-1: SerialNumber: syz [ 267.322384][ T5712] usb 1-1: config 0 descriptor?? [ 267.522166][ T5712] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 268.926906][ T5712] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 268.941449][ T5712] usb 1-1: USB disconnect, device number 54 [ 268.962482][ T8623] Unsupported ieee802154 address type: 0 [ 269.016318][ T8624] binder: 8622:8624 ioctl c0306201 2000000001c0 returned -22 [ 269.478995][ T5712] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 269.626916][ T5712] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 269.626946][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.626965][ T5712] usb 4-1: Product: syz [ 269.626975][ T5712] usb 4-1: Manufacturer: syz [ 269.626982][ T5712] usb 4-1: SerialNumber: syz [ 269.635113][ T5712] usb 4-1: config 0 descriptor?? [ 269.865645][ T5712] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 270.431516][ T822] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 270.576744][ T822] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 270.576772][ T822] usb 1-1: config 1 has no interface number 0 [ 270.576814][ T822] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 270.576840][ T822] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 270.576866][ T822] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.579153][ T822] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 270.579180][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.579197][ T822] usb 1-1: Product: syz [ 270.579205][ T822] usb 1-1: Manufacturer: syz [ 270.579212][ T822] usb 1-1: SerialNumber: syz [ 270.593939][ T8650] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 270.789975][ T822] usb 1-1: Error in usbnet_get_endpoints (-71) [ 270.811550][ T822] usb 1-1: USB disconnect, device number 55 [ 271.465757][ T5712] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 271.479863][ T5712] usb 4-1: USB disconnect, device number 50 [ 272.336615][ T5602] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 272.483593][ T5602] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 272.483625][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.483636][ T5602] usb 4-1: Product: syz [ 272.483648][ T5602] usb 4-1: Manufacturer: syz [ 272.483661][ T5602] usb 4-1: SerialNumber: syz [ 272.487565][ T5602] usb 4-1: config 0 descriptor?? [ 272.685131][ T5602] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 274.130963][ T5602] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 274.141676][ T5602] usb 4-1: USB disconnect, device number 51 [ 275.222874][ T5602] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 275.346884][ T5602] usb 4-1: device descriptor read/64, error -71 [ 275.575327][ T5602] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 275.699180][ T5602] usb 4-1: device descriptor read/64, error -71 [ 275.804217][ T5602] usb usb4-port1: attempt power cycle [ 275.861118][ T1009] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 276.028429][ T1009] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 276.028461][ T1009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.028481][ T1009] usb 1-1: Product: syz [ 276.028495][ T1009] usb 1-1: Manufacturer: syz [ 276.028506][ T1009] usb 1-1: SerialNumber: syz [ 276.032274][ T1009] usb 1-1: config 0 descriptor?? [ 276.166189][ T5602] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 276.185635][ T5602] usb 4-1: device descriptor read/8, error -71 [ 276.229926][ T1009] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 276.413568][ T5602] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 276.435297][ T5602] usb 4-1: device descriptor read/8, error -71 [ 276.538493][ T5602] usb usb4-port1: unable to enumerate USB device [ 277.671673][ T1009] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 277.681197][ T1009] usb 1-1: USB disconnect, device number 56 [ 278.608496][ T8773] Process accounting resumed [ 278.632773][ T8775] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 279.355449][ T38] audit: type=1326 audit(1780755633.309:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8796 comm="syz.0.1012" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65f4ace59 code=0x7ffc0000 [ 279.356948][ T38] audit: type=1326 audit(1780755633.309:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8796 comm="syz.0.1012" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65f4ace59 code=0x7ffc0000 [ 279.356998][ T38] audit: type=1326 audit(1780755633.309:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8796 comm="syz.0.1012" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65f4ace59 code=0x7ffc0000 [ 279.357039][ T38] audit: type=1326 audit(1780755633.309:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8796 comm="syz.0.1012" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65f4ace59 code=0x7ffc0000 [ 279.359235][ T38] audit: type=1326 audit(1780755633.320:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8796 comm="syz.0.1012" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65f4ace59 code=0x7ffc0000 [ 279.359285][ T38] audit: type=1326 audit(1780755633.320:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8796 comm="syz.0.1012" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65f4ace59 code=0x7ffc0000 [ 279.373335][ T38] audit: type=1326 audit(1780755633.330:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8796 comm="syz.0.1012" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff65f4ace59 code=0x7ffc0000 [ 279.373769][ T38] audit: type=1326 audit(1780755633.330:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8796 comm="syz.0.1012" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65f4ace59 code=0x7ffc0000 [ 279.374098][ T38] audit: type=1326 audit(1780755633.330:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8796 comm="syz.0.1012" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65f4ace59 code=0x7ffc0000 [ 279.375650][ T38] audit: type=1326 audit(1780755633.330:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8796 comm="syz.0.1012" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65f4ace59 code=0x7ffc0000 [ 279.433565][ T5602] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 279.624748][ T5602] usb 4-1: Using ep0 maxpacket: 16 [ 279.635742][ T5602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.635774][ T5602] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 279.635814][ T5602] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 279.635835][ T5602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.687140][ T5602] usb 4-1: config 0 descriptor?? [ 280.975351][ T8819] sctp: [Deprecated]: syz.1.1021 (pid 8819) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.975351][ T8819] Use struct sctp_sack_info instead [ 281.103793][ T8823] binder: 8822:8823 ioctl c0306201 200000000080 returned -14 [ 281.104324][ T8823] binder: 8822:8823 ioctl c0306201 2000000003c0 returned -14 [ 281.212242][ T8827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.213175][ T8827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.290018][ T5602] usbhid 4-1:0.0: can't add hid device: -71 [ 282.290184][ T5602] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 282.323872][ T5602] usb 4-1: USB disconnect, device number 56 [ 282.491299][ T821] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 282.640212][ T821] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 282.640245][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.640265][ T821] usb 1-1: Product: syz [ 282.640277][ T821] usb 1-1: Manufacturer: syz [ 282.640288][ T821] usb 1-1: SerialNumber: syz [ 282.650864][ T821] usb 1-1: config 0 descriptor?? [ 282.884739][ T821] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 283.482758][ T5602] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 283.634117][ T5602] usb 4-1: Using ep0 maxpacket: 16 [ 283.636643][ T5602] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 283.636673][ T5602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 283.640025][ T5602] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 283.640053][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.640072][ T5602] usb 4-1: Product: syz [ 283.640086][ T5602] usb 4-1: Manufacturer: syz [ 283.640101][ T5602] usb 4-1: SerialNumber: syz [ 283.656562][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1039'. [ 283.659439][ T8866] kAFS: unparsable volume name [ 283.717817][ T5602] usb 4-1: config 0 descriptor?? [ 283.733361][ T5602] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 283.733393][ T5602] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 284.303020][ T5602] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 284.312734][ T5602] em28xx 4-1:0.0: Config register raw data: 0x41 [ 284.442662][ T5602] usb 4-1: USB disconnect, device number 57 [ 284.448500][ T5602] em28xx 4-1:0.0: Disconnecting em28xx [ 284.564742][ T821] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 284.621366][ T821] usb 1-1: USB disconnect, device number 57 [ 284.729908][ T5602] em28xx 4-1:0.0: Freeing device [ 284.842236][ T8891] FAULT_INJECTION: forcing a failure. [ 284.842236][ T8891] name failslab, interval 1, probability 0, space 0, times 0 [ 284.842259][ T8891] CPU: 1 UID: 0 PID: 8891 Comm: syz.1.1045 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 284.842275][ T8891] Tainted: [L]=SOFTLOCKUP [ 284.842278][ T8891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 284.842285][ T8891] Call Trace: [ 284.842290][ T8891] [ 284.842295][ T8891] dump_stack_lvl+0xe8/0x150 [ 284.842312][ T8891] should_fail_ex+0x46b/0x600 [ 284.842331][ T8891] should_failslab+0xa8/0x100 [ 284.842346][ T8891] kmem_cache_alloc_noprof+0x87/0x680 [ 284.842359][ T8891] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 284.842375][ T8891] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 284.842394][ T8891] mmu_topup_memory_caches+0x21/0x170 [ 284.842409][ T8891] kvm_mmu_load+0x9d/0x2320 [ 284.842422][ T8891] ? kvm_msr_allowed+0x9a/0x490 [ 284.842438][ T8891] ? kvm_msr_allowed+0x9a/0x490 [ 284.842451][ T8891] ? kvm_msr_allowed+0x3f4/0x490 [ 284.842465][ T8891] ? kvm_msr_allowed+0x9a/0x490 [ 284.842480][ T8891] ? kvm_apic_has_interrupt+0x73c/0x770 [ 284.842496][ T8891] ? vmx_recalc_intercepts+0xec4/0x1b10 [ 284.842516][ T8891] vcpu_run+0x5c68/0x7830 [ 284.842544][ T8891] ? ___ratelimit+0x1ea/0x8d0 [ 284.842575][ T8891] ? __pfx_vcpu_run+0x10/0x10 [ 284.842584][ T8891] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 284.842596][ T8891] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 284.842613][ T8891] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 284.842630][ T8891] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 284.842640][ T8891] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 284.842653][ T8891] ? do_raw_spin_lock+0x12b/0x2f0 [ 284.842669][ T8891] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 284.842685][ T8891] ? lockdep_hardirqs_on+0x7a/0x110 [ 284.842702][ T8891] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 284.842716][ T8891] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 284.842731][ T8891] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 284.842744][ T8891] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 284.842759][ T8891] ? lockdep_hardirqs_on+0x7a/0x110 [ 284.842772][ T8891] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 284.842786][ T8891] ? rt_write_unlock+0x190/0x230 [ 284.842800][ T8891] kvm_vcpu_ioctl+0xa65/0xfe0 [ 284.842818][ T8891] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 284.842842][ T8891] ? __fget_files+0x2a/0x420 [ 284.842856][ T8891] ? __fget_files+0x2a/0x420 [ 284.842867][ T8891] ? __fget_files+0x3a6/0x420 [ 284.842878][ T8891] ? __fget_files+0x2a/0x420 [ 284.842890][ T8891] ? bpf_lsm_file_ioctl+0x9/0x20 [ 284.842905][ T8891] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 284.842919][ T8891] __se_sys_ioctl+0xff/0x170 [ 284.842934][ T8891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.842945][ T8891] do_syscall_64+0x174/0x580 [ 284.842960][ T8891] ? trace_irq_disable+0x3b/0x140 [ 284.842972][ T8891] ? clear_bhb_loop+0x40/0x90 [ 284.842984][ T8891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.842995][ T8891] RIP: 0033:0x7ff7723cce59 [ 284.843005][ T8891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.843015][ T8891] RSP: 002b:00007ff7705fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.843027][ T8891] RAX: ffffffffffffffda RBX: 00007ff772646090 RCX: 00007ff7723cce59 [ 284.843035][ T8891] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 284.843041][ T8891] RBP: 00007ff7705fd090 R08: 0000000000000000 R09: 0000000000000000 [ 284.843048][ T8891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 284.843054][ T8891] R13: 00007ff772646128 R14: 00007ff772646090 R15: 00007ffc4fc6e448 [ 284.843070][ T8891] [ 286.120171][ T821] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 286.215792][ T5602] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 286.268282][ T821] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 286.268311][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.268328][ T821] usb 1-1: Product: syz [ 286.268342][ T821] usb 1-1: Manufacturer: syz [ 286.268355][ T821] usb 1-1: SerialNumber: syz [ 286.303680][ T821] usb 1-1: config 0 descriptor?? [ 286.372929][ T5602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 286.372965][ T5602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 286.375736][ T5602] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 286.375765][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.375786][ T5602] usb 4-1: Product: syz [ 286.375799][ T5602] usb 4-1: Manufacturer: syz [ 286.375814][ T5602] usb 4-1: SerialNumber: syz [ 286.442453][ T5602] usb 4-1: config 0 descriptor?? [ 286.452567][ T5602] hub 4-1:0.0: bad descriptor, ignoring hub [ 286.452606][ T5602] hub 4-1:0.0: probe with driver hub failed with error -5 [ 286.459885][ T5602] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input28 [ 286.498705][ T821] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 286.653315][ T8925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.672966][ T8925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.844972][ T8943] kvm: pic: non byte read [ 287.845110][ T8943] kvm: pic: non byte read [ 287.845247][ T8943] kvm: pic: non byte read [ 287.845406][ T8943] kvm: pic: non byte read [ 288.009459][ T8957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.108305][ T821] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 288.145093][ T821] usb 1-1: USB disconnect, device number 58 [ 288.382430][ T8967] FAULT_INJECTION: forcing a failure. [ 288.382430][ T8967] name failslab, interval 1, probability 0, space 0, times 0 [ 288.382465][ T8967] CPU: 0 UID: 0 PID: 8967 Comm: syz.3.1076 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 288.382491][ T8967] Tainted: [L]=SOFTLOCKUP [ 288.382497][ T8967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 288.382509][ T8967] Call Trace: [ 288.382516][ T8967] [ 288.382524][ T8967] dump_stack_lvl+0xe8/0x150 [ 288.382551][ T8967] should_fail_ex+0x46b/0x600 [ 288.382583][ T8967] should_failslab+0xa8/0x100 [ 288.382609][ T8967] __kmalloc_noprof+0xdf/0x7b0 [ 288.382630][ T8967] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 288.382652][ T8967] ? mpi_alloc+0x77/0x140 [ 288.382684][ T8967] ? mpi_alloc+0x52/0x140 [ 288.382711][ T8967] mpi_alloc+0x77/0x140 [ 288.382740][ T8967] mpi_read_raw_data+0x139/0x970 [ 288.382774][ T8967] dh_set_secret+0x200/0x320 [ 288.382796][ T8967] ? crypto_create_tfm_node+0x83/0x3f0 [ 288.382830][ T8967] ? __pfx_dh_set_secret+0x10/0x10 [ 288.382855][ T8967] ? crypto_alloc_tfm_node+0x3c0/0x3f0 [ 288.382883][ T8967] ? __keyctl_dh_compute+0x3df/0xd10 [ 288.382908][ T8967] __keyctl_dh_compute+0x5ae/0xd10 [ 288.382942][ T8967] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 288.382986][ T8967] ? __lock_acquire+0x6b5/0x2d10 [ 288.383012][ T8967] ? get_pid_task+0x20/0x1f0 [ 288.383035][ T8967] keyctl_dh_compute+0x124/0x180 [ 288.383060][ T8967] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 288.383088][ T8967] ? do_raw_spin_lock+0x12b/0x2f0 [ 288.383115][ T8967] __se_sys_keyctl+0x44c/0x9e0 [ 288.383145][ T8967] ? __pfx___se_sys_keyctl+0x10/0x10 [ 288.383169][ T8967] ? lockdep_hardirqs_on+0x7a/0x110 [ 288.383197][ T8967] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 288.383224][ T8967] ? rt_mutex_slowunlock+0x1cb/0x300 [ 288.383246][ T8967] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 288.383277][ T8967] ? fput+0xa0/0xd0 [ 288.383299][ T8967] ? ksys_write+0x248/0x270 [ 288.383327][ T8967] ? __pfx_ksys_write+0x10/0x10 [ 288.383358][ T8967] ? __x64_sys_keyctl+0x20/0xc0 [ 288.383383][ T8967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.383404][ T8967] do_syscall_64+0x174/0x580 [ 288.383431][ T8967] ? trace_irq_disable+0x3b/0x140 [ 288.383451][ T8967] ? clear_bhb_loop+0x40/0x90 [ 288.383474][ T8967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.383492][ T8967] RIP: 0033:0x7fd6752cce59 [ 288.383510][ T8967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.383527][ T8967] RSP: 002b:00007fd673526028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 288.383547][ T8967] RAX: ffffffffffffffda RBX: 00007fd675545fa0 RCX: 00007fd6752cce59 [ 288.383561][ T8967] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 0000000000000017 [ 288.383574][ T8967] RBP: 00007fd673526090 R08: 0000000000000000 R09: 0000000000000000 [ 288.383587][ T8967] R10: 0000000000000053 R11: 0000000000000246 R12: 0000000000000002 [ 288.383598][ T8967] R13: 00007fd675546038 R14: 00007fd675545fa0 R15: 00007ffc6c9f8378 [ 288.383628][ T8967] [ 288.734779][ T8975] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 288.861395][ T8980] FAULT_INJECTION: forcing a failure. [ 288.861395][ T8980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.861430][ T8980] CPU: 1 UID: 0 PID: 8980 Comm: syz.0.1079 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 288.861456][ T8980] Tainted: [L]=SOFTLOCKUP [ 288.861463][ T8980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 288.861474][ T8980] Call Trace: [ 288.861482][ T8980] [ 288.861490][ T8980] dump_stack_lvl+0xe8/0x150 [ 288.861519][ T8980] should_fail_ex+0x46b/0x600 [ 288.861552][ T8980] _copy_from_user+0x2d/0xb0 [ 288.861575][ T8980] do_sys_poll+0x2a0/0xf50 [ 288.861608][ T8980] ? __lock_acquire+0x6b5/0x2d10 [ 288.861631][ T8980] ? __pfx_do_sys_poll+0x10/0x10 [ 288.861665][ T8980] ? aa_file_perm+0x192/0x15f0 [ 288.861774][ T8980] ? set_user_sigmask+0xcd/0x1c0 [ 288.861802][ T8980] ? __pfx_set_user_sigmask+0x10/0x10 [ 288.861828][ T8980] ? rt_mutex_slowunlock+0x1cb/0x300 [ 288.861851][ T8980] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 288.861883][ T8980] __se_sys_ppoll+0x209/0x2b0 [ 288.861903][ T8980] ? fput+0xa0/0xd0 [ 288.861928][ T8980] ? __pfx___se_sys_ppoll+0x10/0x10 [ 288.861956][ T8980] ? __x64_sys_ppoll+0x20/0xc0 [ 288.861974][ T8980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.861994][ T8980] do_syscall_64+0x174/0x580 [ 288.862020][ T8980] ? trace_irq_disable+0x3b/0x140 [ 288.862042][ T8980] ? clear_bhb_loop+0x40/0x90 [ 288.862065][ T8980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.862082][ T8980] RIP: 0033:0x7ff65f4ace59 [ 288.862099][ T8980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.862114][ T8980] RSP: 002b:00007ff65d706028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 288.862132][ T8980] RAX: ffffffffffffffda RBX: 00007ff65f725fa0 RCX: 00007ff65f4ace59 [ 288.862144][ T8980] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 288.862158][ T8980] RBP: 00007ff65d706090 R08: 0000000000000000 R09: 0000000000000000 [ 288.862169][ T8980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.862180][ T8980] R13: 00007ff65f726038 R14: 00007ff65f725fa0 R15: 00007ffc61b537c8 [ 288.862209][ T8980] [ 289.328231][ T8988] kvm: pic: non byte read [ 289.328307][ T8988] kvm: pic: non byte read [ 289.328373][ T8988] kvm: pic: non byte read [ 289.328432][ T8988] kvm: pic: non byte read [ 289.687810][ T4966] usb 4-1: reset full-speed USB device number 58 using dummy_hcd [ 289.715317][ T4966] usb 4-1: device reset changed ep0 maxpacket size! [ 289.780447][ T5602] usb 4-1: USB disconnect, device number 58 [ 289.938395][ T9016] input: syz0 as /devices/virtual/input/input29 [ 290.110097][ T9021] input: syz0 as /devices/virtual/input/input30 [ 290.131122][ T5602] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 290.152469][ T9022] FAULT_INJECTION: forcing a failure. [ 290.152469][ T9022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.152502][ T9022] CPU: 1 UID: 0 PID: 9022 Comm: syz.1.1095 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 290.152528][ T9022] Tainted: [L]=SOFTLOCKUP [ 290.152534][ T9022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 290.152545][ T9022] Call Trace: [ 290.152552][ T9022] [ 290.152560][ T9022] dump_stack_lvl+0xe8/0x150 [ 290.152589][ T9022] should_fail_ex+0x46b/0x600 [ 290.152620][ T9022] _copy_to_user+0x31/0xb0 [ 290.152644][ T9022] simple_read_from_buffer+0xe1/0x170 [ 290.152671][ T9022] proc_fail_nth_read+0x1be/0x230 [ 290.152699][ T9022] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.152724][ T9022] ? rw_verify_area+0x2ac/0x4e0 [ 290.152748][ T9022] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.152771][ T9022] vfs_read+0x212/0xa80 [ 290.152803][ T9022] ? __pfx_vfs_read+0x10/0x10 [ 290.152831][ T9022] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 290.152858][ T9022] ? lockdep_hardirqs_on+0x7a/0x110 [ 290.152885][ T9022] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 290.152909][ T9022] ? mutex_lock_nested+0x152/0x1d0 [ 290.152928][ T9022] ? fdget_pos+0x252/0x320 [ 290.152955][ T9022] ksys_read+0x156/0x270 [ 290.152980][ T9022] ? __pfx_ksys_read+0x10/0x10 [ 290.153010][ T9022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.153030][ T9022] do_syscall_64+0x174/0x580 [ 290.153056][ T9022] ? trace_irq_disable+0x3b/0x140 [ 290.153079][ T9022] ? clear_bhb_loop+0x40/0x90 [ 290.153103][ T9022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.153128][ T9022] RIP: 0033:0x7ff77238d68e [ 290.153146][ T9022] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 290.153161][ T9022] RSP: 002b:00007ff7705fcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 290.153181][ T9022] RAX: ffffffffffffffda RBX: 00007ff7705fd6c0 RCX: 00007ff77238d68e [ 290.153195][ T9022] RDX: 000000000000000f RSI: 00007ff7705fd0a0 RDI: 0000000000000004 [ 290.153206][ T9022] RBP: 00007ff7705fd090 R08: 0000000000000000 R09: 0000000000000000 [ 290.153217][ T9022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.153227][ T9022] R13: 00007ff772646128 R14: 00007ff772646090 R15: 00007ffc4fc6e448 [ 290.153257][ T9022] [ 290.301265][ T5602] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 290.301296][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.301315][ T5602] usb 4-1: Product: syz [ 290.301329][ T5602] usb 4-1: Manufacturer: syz [ 290.301342][ T5602] usb 4-1: SerialNumber: syz [ 290.376909][ T5602] usb 4-1: config 0 descriptor?? [ 290.576352][ T5602] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 290.704138][ T9029] input: syz0 as /devices/virtual/input/input31 [ 290.826715][ T9032] kvm: pic: non byte read [ 290.826791][ T9032] kvm: pic: non byte read [ 292.177882][ T5602] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 292.197470][ T5602] usb 4-1: USB disconnect, device number 59 [ 292.531002][ T821] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 292.687282][ T821] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.689532][ T821] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 292.689561][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.689581][ T821] usb 1-1: Product: syz [ 292.689595][ T821] usb 1-1: Manufacturer: syz [ 292.689605][ T821] usb 1-1: SerialNumber: syz [ 292.694881][ T821] usb 1-1: config 0 descriptor?? [ 292.746519][ T821] usb 1-1: ucan: probing device on interface #0 [ 292.746595][ T821] usb 1-1: ucan: invalid EP count (0) [ 292.746609][ T821] usb 1-1: ucan: probe failed; try to update the device firmware [ 292.937171][ T9052] dlm: non-version read from control device 0 [ 292.938034][ T5602] usb 1-1: USB disconnect, device number 59 [ 292.972862][ T9058] picdev_read: 2 callbacks suppressed [ 292.972875][ T9058] kvm: pic: non byte read [ 292.972922][ T9058] kvm: pic: non byte read [ 294.343972][ T9085] FAULT_INJECTION: forcing a failure. [ 294.343972][ T9085] name failslab, interval 1, probability 0, space 0, times 0 [ 294.344007][ T9085] CPU: 0 UID: 0 PID: 9085 Comm: syz.1.1117 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 294.344033][ T9085] Tainted: [L]=SOFTLOCKUP [ 294.344040][ T9085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 294.344050][ T9085] Call Trace: [ 294.344057][ T9085] [ 294.344065][ T9085] dump_stack_lvl+0xe8/0x150 [ 294.344105][ T9085] should_fail_ex+0x46b/0x600 [ 294.344139][ T9085] should_failslab+0xa8/0x100 [ 294.344163][ T9085] kmem_cache_alloc_noprof+0x87/0x680 [ 294.344186][ T9085] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 294.344214][ T9085] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 294.344247][ T9085] mmu_topup_memory_caches+0x21/0x170 [ 294.344274][ T9085] kvm_mmu_load+0x9d/0x2320 [ 294.344297][ T9085] ? kvm_msr_allowed+0x9a/0x490 [ 294.344326][ T9085] ? kvm_msr_allowed+0x9a/0x490 [ 294.344350][ T9085] ? kvm_msr_allowed+0x3f4/0x490 [ 294.344379][ T9085] ? kvm_msr_allowed+0x9a/0x490 [ 294.344405][ T9085] ? kvm_apic_has_interrupt+0x73c/0x770 [ 294.344435][ T9085] ? vmx_recalc_intercepts+0xec4/0x1b10 [ 294.344472][ T9085] vcpu_run+0x5c68/0x7830 [ 294.344528][ T9085] ? ___ratelimit+0x1ea/0x8d0 [ 294.344603][ T9085] ? __pfx_vcpu_run+0x10/0x10 [ 294.344622][ T9085] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 294.344643][ T9085] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 294.344676][ T9085] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 294.344710][ T9085] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 294.344729][ T9085] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 294.344751][ T9085] ? do_raw_spin_lock+0x12b/0x2f0 [ 294.344783][ T9085] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 294.344811][ T9085] ? lockdep_hardirqs_on+0x7a/0x110 [ 294.344838][ T9085] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 294.344861][ T9085] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 294.344890][ T9085] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 294.344913][ T9085] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 294.344939][ T9085] ? lockdep_hardirqs_on+0x7a/0x110 [ 294.344967][ T9085] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 294.344993][ T9085] ? rt_write_unlock+0x190/0x230 [ 294.345018][ T9085] kvm_vcpu_ioctl+0xa65/0xfe0 [ 294.345050][ T9085] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 294.345102][ T9085] ? __fget_files+0x2a/0x420 [ 294.345129][ T9085] ? __fget_files+0x2a/0x420 [ 294.345149][ T9085] ? __fget_files+0x3a6/0x420 [ 294.345169][ T9085] ? __fget_files+0x2a/0x420 [ 294.345194][ T9085] ? bpf_lsm_file_ioctl+0x9/0x20 [ 294.345221][ T9085] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 294.345246][ T9085] __se_sys_ioctl+0xff/0x170 [ 294.345273][ T9085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.345294][ T9085] do_syscall_64+0x174/0x580 [ 294.345319][ T9085] ? trace_irq_disable+0x3b/0x140 [ 294.345339][ T9085] ? clear_bhb_loop+0x40/0x90 [ 294.345363][ T9085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.345381][ T9085] RIP: 0033:0x7ff7723cce59 [ 294.345400][ T9085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.345416][ T9085] RSP: 002b:00007ff7705fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.345435][ T9085] RAX: ffffffffffffffda RBX: 00007ff772646090 RCX: 00007ff7723cce59 [ 294.345448][ T9085] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 294.345460][ T9085] RBP: 00007ff7705fd090 R08: 0000000000000000 R09: 0000000000000000 [ 294.345471][ T9085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 294.345481][ T9085] R13: 00007ff772646128 R14: 00007ff772646090 R15: 00007ffc4fc6e448 [ 294.345512][ T9085] [ 295.413230][ T9099] kvm: pic: non byte read [ 295.413304][ T9099] kvm: pic: non byte read [ 297.027996][ T9135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1134'. [ 297.402379][ T9140] kvm: pic: non byte read [ 297.402453][ T9140] kvm: pic: non byte read [ 298.726059][ T821] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 298.848715][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1147'. [ 298.889957][ T821] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 298.889989][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.890009][ T821] usb 1-1: Product: syz [ 298.890020][ T821] usb 1-1: Manufacturer: syz [ 298.890028][ T821] usb 1-1: SerialNumber: syz [ 298.893371][ T821] usb 1-1: config 0 descriptor?? [ 298.976557][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1147'. [ 299.053058][ T10] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 299.053139][ T10] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 299.097582][ T10] usb 2-1: USB disconnect, device number 35 [ 299.129462][ T821] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 299.206031][ T9] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 299.206130][ T9] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 299.240838][ T9] usb 3-1: USB disconnect, device number 47 [ 299.293195][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1147'. [ 299.551324][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 299.695173][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 299.699208][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 299.699237][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 299.699261][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 299.699283][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 299.699307][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.699404][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 299.699426][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.723499][ T9] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 299.921125][ T9144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.931558][ T9144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.937096][ T9] usb 3-1: USB disconnect, device number 48 [ 300.787362][ T821] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 300.812833][ T821] usb 1-1: USB disconnect, device number 60 [ 301.008912][ T32] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 301.161721][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 301.165370][ T32] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 301.165401][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.188661][ T32] usb 3-1: config 0 descriptor?? [ 301.388253][ T32] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 301.398122][ T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 301.402449][ T32] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 301.402503][ T32] usb 3-1: media controller created [ 301.452386][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 301.579423][ T32] az6027: usb out operation failed. (-71) [ 301.580381][ T32] az6027: usb out operation failed. (-71) [ 301.580396][ T32] stb0899_attach: Driver disabled by Kconfig [ 301.580405][ T32] az6027: no front-end attached [ 301.580405][ T32] [ 301.580894][ T32] az6027: usb out operation failed. (-71) [ 301.580908][ T32] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 301.602174][ T32] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 301.614058][ T32] dvb-usb: schedule remote query interval to 400 msecs. [ 301.614079][ T32] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 301.617529][ T32] usb 3-1: USB disconnect, device number 49 [ 301.810912][ T32] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 302.370845][ T32] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 302.540222][ T32] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 302.540246][ T32] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 302.540257][ T32] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 302.540288][ T32] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 302.540302][ T32] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 302.540316][ T32] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 302.542033][ T32] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 302.542064][ T32] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 302.542079][ T32] usb 3-1: Product: syz [ 302.542087][ T32] usb 3-1: Manufacturer: syz [ 302.618715][ T9229] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 302.628883][ T32] cdc_wdm 3-1:1.0: skipping garbage [ 302.628902][ T32] cdc_wdm 3-1:1.0: skipping garbage [ 302.784844][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1171'. [ 302.786673][ T32] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 302.786695][ T32] cdc_wdm 3-1:1.0: Unknown control protocol [ 302.818383][ T9240] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 302.818407][ T9240] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 302.834170][ T9240] vhci_hcd vhci_hcd.0: Device attached [ 302.914357][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 302.915362][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 302.915630][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 302.915646][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 302.915857][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 302.915873][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 302.916095][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 302.916109][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 302.916325][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 302.916350][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 302.916553][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 302.916567][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 302.916776][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 302.916793][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 302.917010][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 302.917025][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 302.918110][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 302.918130][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 302.918351][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 302.918370][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 303.057626][ T1009] usb 3-1: USB disconnect, device number 50 [ 303.057788][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 303.170925][ T5602] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 303.425484][ T9242] vhci_hcd: connection reset by peer [ 303.437288][ T5979] vhci_hcd vhci_hcd.0: stop threads [ 303.437306][ T5979] vhci_hcd vhci_hcd.0: release socket [ 303.437365][ T5979] vhci_hcd vhci_hcd.0: disconnect device [ 303.704529][ T9] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 303.811565][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 303.860856][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 303.860897][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.860917][ T9] usb 1-1: Product: syz [ 303.860931][ T9] usb 1-1: Manufacturer: syz [ 303.860945][ T9] usb 1-1: SerialNumber: syz [ 303.902586][ T9] usb 1-1: config 0 descriptor?? [ 303.971255][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 303.976310][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 303.976549][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.018837][ T10] usb 2-1: config 0 descriptor?? [ 304.102564][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 304.219821][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 304.227495][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 304.245836][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 304.245927][ T10] usb 2-1: media controller created [ 304.277747][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 304.420701][ T10] az6027: usb out operation failed. (-71) [ 304.421228][ T10] az6027: usb out operation failed. (-71) [ 304.421242][ T10] stb0899_attach: Driver disabled by Kconfig [ 304.421251][ T10] az6027: no front-end attached [ 304.421251][ T10] [ 304.421615][ T10] az6027: usb out operation failed. (-71) [ 304.421657][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 304.471372][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input33 [ 304.492440][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 304.492462][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 304.518687][ T10] usb 2-1: USB disconnect, device number 36 [ 304.678060][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 305.270775][ T9289] binder: 9288:9289 ioctl c0306201 0 returned -14 [ 305.270919][ T9290] binder: 9288:9290 ioctl c0306201 0 returned -14 [ 305.273324][ T9289] binder: BINDER_SET_CONTEXT_MGR already set [ 305.273338][ T9289] binder: 9288:9289 ioctl 4018620d 200000004a80 returned -16 [ 305.279534][ T9290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.280074][ T9290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.332182][ T9290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.332380][ T9292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.341469][ T9290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.344099][ T9292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.504967][ T1009] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 305.665444][ T1009] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.665471][ T1009] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 305.686677][ T1009] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 305.686708][ T1009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 305.686727][ T1009] usb 4-1: SerialNumber: syz [ 305.808660][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 305.837979][ T9] usb 1-1: USB disconnect, device number 61 [ 305.918964][ T1009] usb 4-1: 0:2 : does not exist [ 305.959822][ T1009] usb 4-1: USB disconnect, device number 60 [ 306.049158][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.415267][ T9305] netlink: 'syz.0.1192': attribute type 2 has an invalid length. [ 306.591062][ T821] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 306.753346][ T821] usb 2-1: Using ep0 maxpacket: 32 [ 306.755982][ T821] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 306.756011][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.764099][ T821] usb 2-1: config 0 descriptor?? [ 306.989369][ T821] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 307.007503][ T821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 307.011138][ T821] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 307.011191][ T821] usb 2-1: media controller created [ 307.035844][ T821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 307.184966][ T821] az6027: usb out operation failed. (-71) [ 307.185255][ T821] az6027: usb out operation failed. (-71) [ 307.185263][ T821] stb0899_attach: Driver disabled by Kconfig [ 307.185268][ T821] az6027: no front-end attached [ 307.185268][ T821] [ 307.185586][ T821] az6027: usb out operation failed. (-71) [ 307.185599][ T821] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 307.188014][ T821] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input34 [ 307.203156][ T821] dvb-usb: schedule remote query interval to 400 msecs. [ 307.203178][ T821] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 307.218353][ T821] usb 2-1: USB disconnect, device number 37 [ 307.381603][ T821] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 308.086838][ T5602] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 308.785402][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 308.785480][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 309.162730][ T821] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 309.316332][ T821] usb 1-1: Using ep0 maxpacket: 32 [ 309.318561][ T821] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 309.318591][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.322289][ T821] usb 1-1: config 0 descriptor?? [ 309.520856][ T821] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 309.534746][ T821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 309.537085][ T821] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 309.537147][ T821] usb 1-1: media controller created [ 309.573404][ T821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 309.715594][ T821] az6027: usb out operation failed. (-71) [ 309.715884][ T821] az6027: usb out operation failed. (-71) [ 309.715893][ T821] stb0899_attach: Driver disabled by Kconfig [ 309.715898][ T821] az6027: no front-end attached [ 309.715898][ T821] [ 309.716781][ T821] az6027: usb out operation failed. (-71) [ 309.716790][ T821] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 309.722710][ T821] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input35 [ 309.801460][ T821] dvb-usb: schedule remote query interval to 400 msecs. [ 309.801482][ T821] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 309.809780][ T821] usb 1-1: USB disconnect, device number 62 [ 309.954290][ T821] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 310.486668][ T5721] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 310.631079][ T5721] usb 1-1: Using ep0 maxpacket: 32 [ 310.635788][ T5721] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.635844][ T5721] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.635872][ T5721] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.635895][ T5721] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.635922][ T5721] usb 1-1: config 0 interface 0 has no altsetting 0 [ 310.635955][ T5721] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 310.635977][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.651293][ T5721] usb 1-1: config 0 descriptor?? [ 311.045549][ T5721] corsair-psu 0003:1B1C:1C09.000C: unknown main item tag 0x0 [ 311.045574][ T5721] corsair-psu 0003:1B1C:1C09.000C: unknown main item tag 0x0 [ 311.045590][ T5721] corsair-psu 0003:1B1C:1C09.000C: unknown main item tag 0x0 [ 311.045606][ T5721] corsair-psu 0003:1B1C:1C09.000C: unknown main item tag 0x0 [ 311.045624][ T5721] corsair-psu 0003:1B1C:1C09.000C: unknown main item tag 0x0 [ 311.050634][ T5721] corsair-psu 0003:1B1C:1C09.000C: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 311.105899][ T5721] corsair-psu 0003:1B1C:1C09.000C: unable to initialize device (-38) [ 311.131650][ T5721] corsair-psu 0003:1B1C:1C09.000C: probe with driver corsair-psu failed with error -38 [ 311.280559][ T5602] usb 1-1: USB disconnect, device number 63 [ 311.382662][ T5721] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 311.396501][ T9376] fido_id[9376]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 311.443325][ T9383] sg_write: data in/out 275420/50 bytes for SCSI command 0x0-- guessing data in; [ 311.443325][ T9383] program syz.2.1217 not setting count and/or reply_len properly [ 311.548250][ T5721] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 311.548281][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.548301][ T5721] usb 4-1: Product: syz [ 311.548313][ T5721] usb 4-1: Manufacturer: syz [ 311.548321][ T5721] usb 4-1: SerialNumber: syz [ 311.552841][ T5721] usb 4-1: config 0 descriptor?? [ 311.788616][ T5721] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 312.277492][ T9] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 312.420407][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 312.422591][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 312.422612][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.427586][ T9] usb 1-1: config 0 descriptor?? [ 312.616416][ T9398] binder: 9397:9398 ioctl 4018620d 0 returned -22 [ 312.626468][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 312.646252][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 312.647565][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 312.647666][ T9] usb 1-1: media controller created [ 312.702640][ T9399] binder: 9397:9399 ioctl c0306201 0 returned -14 [ 312.725735][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 312.833325][ T9] az6027: usb out operation failed. (-71) [ 312.834780][ T9] az6027: usb out operation failed. (-71) [ 312.834797][ T9] stb0899_attach: Driver disabled by Kconfig [ 312.834807][ T9] az6027: no front-end attached [ 312.834807][ T9] [ 312.835568][ T9] az6027: usb out operation failed. (-71) [ 312.835581][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 312.854006][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input36 [ 312.860286][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 312.860355][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 312.870858][ T9] usb 1-1: USB disconnect, device number 64 [ 312.990291][ T9401] sg_write: data in/out 255806/136 bytes for SCSI command 0x0-- guessing data in; [ 312.990291][ T9401] program syz.2.1223 not setting count and/or reply_len properly [ 313.139713][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 313.214837][ T5721] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 313.225051][ T5721] usb 4-1: USB disconnect, device number 61 [ 313.498663][ T9412] syzkaller1: entered promiscuous mode [ 313.498688][ T9412] syzkaller1: entered allmulticast mode [ 314.068315][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 314.211614][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 314.215709][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 130, changing to 11 [ 314.215741][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 1024 [ 314.215767][ T9] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.215801][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 314.215845][ T9] usb 4-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 314.215867][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.259912][ T9] usb 4-1: config 0 descriptor?? [ 314.713367][ T9] input: HID 28bd:0935 Mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0935.000D/input/input37 [ 314.792757][ T1009] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 314.925597][ T1009] usb 1-1: Using ep0 maxpacket: 32 [ 314.930043][ T1009] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 314.930073][ T1009] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.992832][ T1009] usb 1-1: config 0 descriptor?? [ 315.024803][ T9] uclogic 0003:28BD:0935.000D: input,hidraw0: USB HID v1.00 Mouse [HID 28bd:0935] on usb-dummy_hcd.3-1/input0 [ 315.088049][ T9] usb 4-1: USB disconnect, device number 62 [ 315.210125][ T1009] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 315.228639][ T1009] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 315.230003][ T1009] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 315.230052][ T1009] usb 1-1: media controller created [ 315.247033][ T9438] fido_id[9438]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 315.281745][ T1009] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 315.402778][ T1009] az6027: usb out operation failed. (-71) [ 315.403164][ T1009] az6027: usb out operation failed. (-71) [ 315.403182][ T1009] stb0899_attach: Driver disabled by Kconfig [ 315.403191][ T1009] az6027: no front-end attached [ 315.403191][ T1009] [ 315.403563][ T1009] az6027: usb out operation failed. (-71) [ 315.403576][ T1009] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 315.407065][ T1009] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input38 [ 315.492296][ T10] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 315.499363][ T1009] dvb-usb: schedule remote query interval to 400 msecs. [ 315.499385][ T1009] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 315.525920][ T1009] usb 1-1: USB disconnect, device number 65 [ 315.638213][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 315.638244][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.638262][ T10] usb 2-1: Product: syz [ 315.638275][ T10] usb 2-1: Manufacturer: syz [ 315.638289][ T10] usb 2-1: SerialNumber: syz [ 315.721200][ T10] usb 2-1: config 0 descriptor?? [ 315.806715][ T1009] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 315.917752][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 316.030261][ T9451] blk_print_req_error: 138 callbacks suppressed [ 316.030285][ T9451] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 316.030312][ T9451] buffer_io_error: 138 callbacks suppressed [ 316.030324][ T9451] Buffer I/O error on dev nbd0, logical block 0, async page read [ 316.052557][ T9451] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 316.052591][ T9451] Buffer I/O error on dev nbd0, logical block 1, async page read [ 316.052863][ T9451] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 316.052888][ T9451] Buffer I/O error on dev nbd0, logical block 2, async page read [ 316.053076][ T9451] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 316.053150][ T9451] Buffer I/O error on dev nbd0, logical block 3, async page read [ 316.053366][ T9451] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 316.053511][ T9451] Buffer I/O error on dev nbd0, logical block 0, async page read [ 316.053716][ T9451] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 316.053789][ T9451] Buffer I/O error on dev nbd0, logical block 1, async page read [ 316.053975][ T9451] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 316.053999][ T9451] Buffer I/O error on dev nbd0, logical block 2, async page read [ 316.054183][ T9451] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 316.054269][ T9451] Buffer I/O error on dev nbd0, logical block 3, async page read [ 316.054672][ T9451] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 316.054771][ T9451] Buffer I/O error on dev nbd0, logical block 0, async page read [ 316.054962][ T9451] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 316.054986][ T9451] Buffer I/O error on dev nbd0, logical block 1, async page read [ 316.143998][ T9451] ldm_validate_partition_table(): Disk read failed. [ 316.162509][ T9451] Dev nbd0: unable to read RDB block 0 [ 316.275772][ T9451] nbd0: unable to read partition table [ 316.355580][ T5602] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 316.497331][ T5602] usb 1-1: Using ep0 maxpacket: 8 [ 316.499177][ T5602] usb 1-1: config 0 has no interfaces? [ 316.502011][ T5602] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 316.502029][ T5602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.502040][ T5602] usb 1-1: Product: syz [ 316.502047][ T5602] usb 1-1: Manufacturer: syz [ 316.502054][ T5602] usb 1-1: SerialNumber: syz [ 316.509151][ T5602] usb 1-1: config 0 descriptor?? [ 316.938383][ T1009] usb 1-1: USB disconnect, device number 66 [ 317.443281][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 317.453437][ T10] usb 2-1: USB disconnect, device number 38 [ 317.512264][ T9471] netlink: 'syz.0.1246': attribute type 1 has an invalid length. [ 317.830996][ T5602] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 317.973803][ T5602] usb 4-1: Using ep0 maxpacket: 8 [ 317.975577][ T5602] usb 4-1: config 186 has an invalid interface number: 10 but max is 1 [ 317.975606][ T5602] usb 4-1: config 186 has an invalid interface number: 31 but max is 1 [ 317.975626][ T5602] usb 4-1: config 186 has an invalid interface number: 181 but max is 1 [ 317.975645][ T5602] usb 4-1: config 186 has 3 interfaces, different from the descriptor's value: 2 [ 317.975657][ T5602] usb 4-1: config 186 has no interface number 0 [ 317.975665][ T5602] usb 4-1: config 186 has no interface number 1 [ 317.975674][ T5602] usb 4-1: config 186 has no interface number 2 [ 317.975712][ T5602] usb 4-1: config 186 interface 10 altsetting 132 has a duplicate endpoint with address 0x7, skipping [ 317.975725][ T5602] usb 4-1: config 186 interface 10 altsetting 132 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 317.975738][ T5602] usb 4-1: config 186 interface 10 altsetting 132 has an invalid descriptor for endpoint zero, skipping [ 317.975749][ T5602] usb 4-1: config 186 interface 10 altsetting 132 has an invalid descriptor for endpoint zero, skipping [ 317.975761][ T5602] usb 4-1: config 186 interface 10 altsetting 132 has an invalid descriptor for endpoint zero, skipping [ 317.975772][ T5602] usb 4-1: config 186 interface 10 altsetting 132 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 317.975788][ T5602] usb 4-1: too many endpoints for config 186 interface 31 altsetting 185: 231, using maximum allowed: 30 [ 317.975808][ T5602] usb 4-1: config 186 interface 31 altsetting 185 has 0 endpoint descriptors, different from the interface descriptor's value: 231 [ 317.975829][ T5602] usb 4-1: config 186 interface 181 altsetting 129 has a duplicate endpoint with address 0x7, skipping [ 317.975841][ T5602] usb 4-1: config 186 interface 10 has no altsetting 0 [ 317.975851][ T5602] usb 4-1: config 186 interface 31 has no altsetting 0 [ 317.975860][ T5602] usb 4-1: config 186 interface 181 has no altsetting 0 [ 317.978695][ T5602] usb 4-1: New USB device found, idVendor=2955, idProduct=0001, bcdDevice=f0.1d [ 317.978722][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.978743][ T5602] usb 4-1: Product: syz [ 317.978757][ T5602] usb 4-1: Manufacturer: syz [ 317.978766][ T5602] usb 4-1: SerialNumber: syz [ 318.282553][ T9475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.299910][ T9475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.485582][ T5602] usb 4-1: USB disconnect, device number 63 [ 318.653336][ T9489] IPVS: persistence engine module ip_vs_pe_ not found [ 319.260113][ T1009] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 319.336433][ T5712] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 319.408206][ T9500] netlink: 'syz.1.1257': attribute type 2 has an invalid length. [ 319.408242][ T9500] netlink: 'syz.1.1257': attribute type 2 has an invalid length. [ 319.410118][ T9500] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1257'. [ 319.440844][ T1009] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 319.440889][ T1009] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 319.440917][ T1009] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 319.443397][ T1009] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 319.443426][ T1009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 319.443445][ T1009] usb 4-1: SerialNumber: syz [ 319.517107][ T5712] usb 3-1: Using ep0 maxpacket: 32 [ 319.519583][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.519614][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.519692][ T5712] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 319.519706][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.529362][ T5712] usb 3-1: config 0 descriptor?? [ 319.590463][ T5712] hub 3-1:0.0: USB hub found [ 319.703513][ T9495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.716568][ T9495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.727788][ T1009] rndis_host 4-1:253.0: RNDIS init failed, -71 [ 319.728236][ T1009] rndis_host 4-1:253.0: probe with driver rndis_host failed with error -71 [ 319.734228][ T5712] hub 3-1:0.0: 26 ports detected [ 319.735577][ T5712] hub 3-1:0.0: insufficient power available to use all downstream ports [ 319.778997][ T1009] usb 4-1: USB disconnect, device number 64 [ 319.898115][ T9] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 319.926638][ T5712] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 319.926659][ T5712] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 319.938995][ T5712] usbhid 3-1:0.0: can't add hid device: -71 [ 319.939110][ T5712] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 319.986102][ T5712] usb 3-1: USB disconnect, device number 51 [ 320.048106][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 320.048136][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.048156][ T9] usb 2-1: Product: syz [ 320.048170][ T9] usb 2-1: Manufacturer: syz [ 320.048184][ T9] usb 2-1: SerialNumber: syz [ 320.084378][ T9] usb 2-1: config 0 descriptor?? [ 320.260182][ T1009] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 320.279690][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 320.414675][ T1009] usb 1-1: unable to get BOS descriptor or descriptor too short [ 320.415319][ T1009] usb 1-1: not running at top speed; connect to a high speed hub [ 320.416454][ T1009] usb 1-1: config 9 has an invalid interface number: 65 but max is 0 [ 320.416478][ T1009] usb 1-1: config 9 has no interface number 0 [ 320.416516][ T1009] usb 1-1: config 9 interface 65 has no altsetting 0 [ 320.419192][ T1009] usb 1-1: New USB device found, idVendor=12d1, idProduct=ccef, bcdDevice=e5.56 [ 320.419219][ T1009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.419238][ T1009] usb 1-1: Product: syz [ 320.419252][ T1009] usb 1-1: Manufacturer: syz [ 320.419267][ T1009] usb 1-1: SerialNumber: syz [ 321.035803][ T4930] Bluetooth: hci2: unexpected event for opcode 0x0c12 [ 321.344740][ T1009] cdc_mbim 1-1:9.65: More than one union descriptor, skipping ... [ 321.344763][ T1009] cdc_mbim 1-1:9.65: CDC Union missing and no IAD found [ 321.344803][ T1009] cdc_mbim 1-1:9.65: bind() failure [ 321.356888][ T1009] usb 1-1: USB disconnect, device number 67 [ 321.645980][ T9529] FAULT_INJECTION: forcing a failure. [ 321.645980][ T9529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.646005][ T9529] CPU: 0 UID: 0 PID: 9529 Comm: syz.3.1265 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 321.646019][ T9529] Tainted: [L]=SOFTLOCKUP [ 321.646023][ T9529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 321.646030][ T9529] Call Trace: [ 321.646035][ T9529] [ 321.646039][ T9529] dump_stack_lvl+0xe8/0x150 [ 321.646057][ T9529] should_fail_ex+0x46b/0x600 [ 321.646078][ T9529] strncpy_from_user+0x36/0x2b0 [ 321.646095][ T9529] do_getname+0x77/0x250 [ 321.646107][ T9529] __se_sys_renameat2+0x34/0x2c0 [ 321.646118][ T9529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.646130][ T9529] do_syscall_64+0x174/0x580 [ 321.646146][ T9529] ? clear_bhb_loop+0x40/0x90 [ 321.646158][ T9529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.646168][ T9529] RIP: 0033:0x7fd6752cce59 [ 321.646179][ T9529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.646188][ T9529] RSP: 002b:00007fd673526028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 321.646200][ T9529] RAX: ffffffffffffffda RBX: 00007fd675545fa0 RCX: 00007fd6752cce59 [ 321.646208][ T9529] RDX: ffffffffffffff9c RSI: 0000200000000480 RDI: ffffffffffffff9c [ 321.646216][ T9529] RBP: 00007fd673526090 R08: 0000000000000002 R09: 0000000000000000 [ 321.646222][ T9529] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 321.646229][ T9529] R13: 00007fd675546038 R14: 00007fd675545fa0 R15: 00007ffc6c9f8378 [ 321.646244][ T9529] [ 321.758751][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 321.832374][ T9] usb 2-1: USB disconnect, device number 39 [ 321.894376][ T9532] sctp: [Deprecated]: syz.3.1266 (pid 9532) Use of int in max_burst socket option. [ 321.894376][ T9532] Use struct sctp_assoc_value instead [ 321.960102][ T9536] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 322.528894][ T9546] FAULT_INJECTION: forcing a failure. [ 322.528894][ T9546] name failslab, interval 1, probability 0, space 0, times 0 [ 322.528930][ T9546] CPU: 1 UID: 0 PID: 9546 Comm: syz.1.1272 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 322.528957][ T9546] Tainted: [L]=SOFTLOCKUP [ 322.528964][ T9546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 322.528975][ T9546] Call Trace: [ 322.528982][ T9546] [ 322.528991][ T9546] dump_stack_lvl+0xe8/0x150 [ 322.529019][ T9546] should_fail_ex+0x46b/0x600 [ 322.529062][ T9546] should_failslab+0xa8/0x100 [ 322.529088][ T9546] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 322.529112][ T9546] ? __alloc_skb+0x1d0/0x7d0 [ 322.529136][ T9546] ? lockdep_hardirqs_on+0x7a/0x110 [ 322.529169][ T9546] __alloc_skb+0x1d0/0x7d0 [ 322.529193][ T9546] ? lockdep_hardirqs_on+0x7a/0x110 [ 322.529223][ T9546] __pskb_copy_fclone+0xa9/0x11e0 [ 322.529243][ T9546] ? tipc_dest_pop+0x19c/0x230 [ 322.529270][ T9546] ? tipc_dest_pop+0x19c/0x230 [ 322.529293][ T9546] tipc_sk_mcast_rcv+0x64b/0x1020 [ 322.529317][ T9546] ? tipc_sk_mcast_rcv+0x244/0x1020 [ 322.529345][ T9546] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 322.529364][ T9546] ? __alloc_skb+0x27d/0x7d0 [ 322.529404][ T9546] ? tipc_mcast_xmit+0x1292/0x1a90 [ 322.529438][ T9546] ? tipc_mcast_xmit+0x1292/0x1a90 [ 322.529466][ T9546] tipc_mcast_xmit+0x1423/0x1a90 [ 322.529499][ T9546] ? __lock_acquire+0x6b5/0x2d10 [ 322.529521][ T9546] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 322.529544][ T9546] ? __alloc_skb+0x27d/0x7d0 [ 322.529570][ T9546] ? kasan_save_track+0x4f/0x80 [ 322.529589][ T9546] ? kasan_save_track+0x3e/0x80 [ 322.529608][ T9546] ? __kasan_slab_alloc+0x6c/0x80 [ 322.529629][ T9546] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 322.529650][ T9546] ? __alloc_skb+0x27d/0x7d0 [ 322.529673][ T9546] ? tipc_msg_build+0x162/0xf00 [ 322.529697][ T9546] ? __tipc_sendmsg+0x1ca5/0x2c00 [ 322.529721][ T9546] ? __tipc_sendstream+0x104e/0x1280 [ 322.529745][ T9546] ? tipc_send_packet+0x7c/0xa0 [ 322.529769][ T9546] ? sock_sendmsg_nosec+0x13a/0x180 [ 322.529790][ T9546] ? ____sys_sendmsg+0x55c/0x870 [ 322.529816][ T9546] ? ___sys_sendmsg+0x2a5/0x360 [ 322.529842][ T9546] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 322.529869][ T9546] ? do_syscall_64+0x174/0x580 [ 322.529894][ T9546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.529918][ T9546] ? __might_fault+0xaf/0x130 [ 322.529941][ T9546] ? __might_fault+0xaf/0x130 [ 322.529974][ T9546] ? __might_fault+0xaf/0x130 [ 322.530000][ T9546] ? _copy_from_iter+0x2d3/0x1670 [ 322.530035][ T9546] ? trace_kmem_cache_alloc+0x29/0xe0 [ 322.530055][ T9546] ? __alloc_skb+0x27d/0x7d0 [ 322.530083][ T9546] ? __pfx__copy_from_iter+0x10/0x10 [ 322.530118][ T9546] ? tipc_msg_build+0x482/0xf00 [ 322.530162][ T9546] ? tipc_sk_filtering+0x13c/0x510 [ 322.530189][ T9546] ? trace_tipc_sk_sendmcast+0x93/0x230 [ 322.530219][ T9546] __tipc_sendmsg+0x21cc/0x2c00 [ 322.530244][ T9546] ? __lock_acquire+0x6b5/0x2d10 [ 322.530281][ T9546] ? __pfx___tipc_sendmsg+0x10/0x10 [ 322.530319][ T9546] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 322.530347][ T9546] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 322.530370][ T9546] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 322.530389][ T9546] ? __pfx_woken_wake_function+0x10/0x10 [ 322.530415][ T9546] ? try_to_take_rt_mutex+0x840/0xb00 [ 322.530437][ T9546] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 322.530474][ T9546] ? __lock_acquire+0x6b5/0x2d10 [ 322.530501][ T9546] ? try_to_take_rt_mutex+0x840/0xb00 [ 322.530536][ T9546] ? __lock_acquire+0x6b5/0x2d10 [ 322.530564][ T9546] ? __lock_acquire+0x6b5/0x2d10 [ 322.530587][ T9546] ? __lock_acquire+0x6b5/0x2d10 [ 322.530614][ T9546] __tipc_sendstream+0x104e/0x1280 [ 322.530641][ T9546] ? __lock_acquire+0x6b5/0x2d10 [ 322.530677][ T9546] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 322.530707][ T9546] ? __pfx___tipc_sendstream+0x10/0x10 [ 322.530731][ T9546] ? __local_bh_enable+0x1e1/0x2f0 [ 322.530760][ T9546] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 322.530786][ T9546] ? lockdep_hardirqs_on+0x7a/0x110 [ 322.530818][ T9546] tipc_send_packet+0x7c/0xa0 [ 322.530845][ T9546] ? __pfx_tipc_send_packet+0x10/0x10 [ 322.530869][ T9546] sock_sendmsg_nosec+0x13a/0x180 [ 322.530893][ T9546] ____sys_sendmsg+0x55c/0x870 [ 322.530924][ T9546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.530956][ T9546] ? import_iovec+0x73/0xa0 [ 322.530980][ T9546] ___sys_sendmsg+0x2a5/0x360 [ 322.531005][ T9546] ? __lock_acquire+0x6b5/0x2d10 [ 322.531035][ T9546] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.531096][ T9546] ? __fget_files+0x2a/0x420 [ 322.531116][ T9546] ? __fget_files+0x3a6/0x420 [ 322.531147][ T9546] __x64_sys_sendmsg+0x1c3/0x2a0 [ 322.531175][ T9546] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 322.531211][ T9546] ? __pfx_ksys_write+0x10/0x10 [ 322.531244][ T9546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.531263][ T9546] do_syscall_64+0x174/0x580 [ 322.531289][ T9546] ? trace_irq_disable+0x3b/0x140 [ 322.531310][ T9546] ? clear_bhb_loop+0x40/0x90 [ 322.531332][ T9546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.531350][ T9546] RIP: 0033:0x7ff7723cce59 [ 322.531368][ T9546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.531384][ T9546] RSP: 002b:00007ff77061e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.531406][ T9546] RAX: ffffffffffffffda RBX: 00007ff772645fa0 RCX: 00007ff7723cce59 [ 322.531420][ T9546] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000006 [ 322.531431][ T9546] RBP: 00007ff77061e090 R08: 0000000000000000 R09: 0000000000000000 [ 322.531443][ T9546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.531454][ T9546] R13: 00007ff772646038 R14: 00007ff772645fa0 R15: 00007ffc4fc6e448 [ 322.531481][ T9546] [ 322.544420][ T9546] tipc: Failed to clone mcast rcv buffer [ 322.639710][ T9552] FAULT_INJECTION: forcing a failure. [ 322.639710][ T9552] name failslab, interval 1, probability 0, space 0, times 0 [ 322.639746][ T9552] CPU: 1 UID: 0 PID: 9552 Comm: syz.2.1274 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 322.639772][ T9552] Tainted: [L]=SOFTLOCKUP [ 322.639779][ T9552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 322.639794][ T9552] Call Trace: [ 322.639801][ T9552] [ 322.639808][ T9552] dump_stack_lvl+0xe8/0x150 [ 322.639839][ T9552] should_fail_ex+0x46b/0x600 [ 322.639871][ T9552] should_failslab+0xa8/0x100 [ 322.639897][ T9552] __kmalloc_noprof+0xdf/0x7b0 [ 322.639920][ T9552] ? mpi_powm+0x1c4/0x2410 [ 322.639952][ T9552] mpi_powm+0x1c4/0x2410 [ 322.639997][ T9552] ? __pfx_mpi_powm+0x10/0x10 [ 322.640028][ T9552] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 322.640054][ T9552] ? __asan_memset+0x22/0x50 [ 322.640075][ T9552] dh_compute_value+0x1d5/0x390 [ 322.640104][ T9552] ? __pfx_dh_compute_value+0x10/0x10 [ 322.640127][ T9552] ? __kmalloc_noprof+0x408/0x7b0 [ 322.640149][ T9552] ? __keyctl_dh_compute+0x6b4/0xd10 [ 322.640175][ T9552] __keyctl_dh_compute+0x81b/0xd10 [ 322.640207][ T9552] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 322.640251][ T9552] ? __lock_acquire+0x6b5/0x2d10 [ 322.640276][ T9552] ? get_pid_task+0x20/0x1f0 [ 322.640305][ T9552] keyctl_dh_compute+0x124/0x180 [ 322.640330][ T9552] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 322.640358][ T9552] ? do_raw_spin_lock+0x12b/0x2f0 [ 322.640380][ T9552] __se_sys_keyctl+0x44c/0x9e0 [ 322.640409][ T9552] ? __pfx___se_sys_keyctl+0x10/0x10 [ 322.640436][ T9552] ? lockdep_hardirqs_on+0x7a/0x110 [ 322.640463][ T9552] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 322.640488][ T9552] ? rt_mutex_slowunlock+0x1cb/0x300 [ 322.640509][ T9552] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 322.640540][ T9552] ? fput+0xa0/0xd0 [ 322.640560][ T9552] ? ksys_write+0x248/0x270 [ 322.640586][ T9552] ? __pfx_ksys_write+0x10/0x10 [ 322.640616][ T9552] ? __x64_sys_keyctl+0x20/0xc0 [ 322.640641][ T9552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.640661][ T9552] do_syscall_64+0x174/0x580 [ 322.640686][ T9552] ? trace_irq_disable+0x3b/0x140 [ 322.640706][ T9552] ? clear_bhb_loop+0x40/0x90 [ 322.640729][ T9552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.640747][ T9552] RIP: 0033:0x7f484fc9ce59 [ 322.640765][ T9552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.640780][ T9552] RSP: 002b:00007f484def6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 322.640799][ T9552] RAX: ffffffffffffffda RBX: 00007f484ff15fa0 RCX: 00007f484fc9ce59 [ 322.640813][ T9552] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 0000000000000017 [ 322.640824][ T9552] RBP: 00007f484def6090 R08: 0000000000000000 R09: 0000000000000000 [ 322.640835][ T9552] R10: 0000000000000053 R11: 0000000000000246 R12: 0000000000000002 [ 322.640846][ T9552] R13: 00007f484ff16038 R14: 00007f484ff15fa0 R15: 00007fff2ebe7118 [ 322.640874][ T9552] [ 323.068068][ T5602] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 323.095953][ T9562] netlink: 'syz.2.1278': attribute type 27 has an invalid length. [ 323.228962][ T9565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1279'. [ 323.344111][ T5602] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.344128][ T5602] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.392024][ T5602] usb 1-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 323.392055][ T5602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.392075][ T5602] usb 1-1: Product: syz [ 323.392090][ T5602] usb 1-1: Manufacturer: syz [ 323.392104][ T5602] usb 1-1: SerialNumber: syz [ 323.708708][ T32] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 323.716265][ T5602] usb 1-1: unit 5 not found! [ 323.843347][ T5602] usb 1-1: USB disconnect, device number 68 [ 323.871837][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 323.894833][ T32] usb 3-1: unable to get BOS descriptor or descriptor too short [ 323.909156][ T32] usb 3-1: config 6 has an invalid interface number: 239 but max is 0 [ 323.909180][ T32] usb 3-1: config 6 has no interface number 0 [ 323.909205][ T32] usb 3-1: config 6 interface 239 has no altsetting 0 [ 323.911302][ T32] usb 3-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=f2.cb [ 323.911327][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.911357][ T32] usb 3-1: Product: syz [ 323.911371][ T32] usb 3-1: Manufacturer: syz [ 323.911385][ T32] usb 3-1: SerialNumber: syz [ 323.922069][ T32] r8152-cfgselector 3-1: Unknown version 0x0000 [ 323.997206][ T5879] udevd[5879]: setting mode of /dev/bus/usb/001/068 to 020664 failed: No such file or directory [ 323.997577][ T5879] udevd[5879]: setting owner of /dev/bus/usb/001/068 to uid=0, gid=0 failed: No such file or directory [ 324.026743][ T6092] udevd[6092]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.115904][ T9567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.116393][ T9567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.177417][ T32] r8152 3-1:6.239: Expected endpoints are not found [ 324.227524][ T32] r8152-cfgselector 3-1: USB disconnect, device number 52 [ 324.402092][ T9586] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1287'. [ 324.402534][ T9586] netlink: 'syz.0.1287': attribute type 10 has an invalid length. [ 324.538143][ T9586] veth0_macvtap (unregistering): left allmulticast mode [ 324.679966][ T32] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 324.822714][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 324.824556][ T32] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 324.824610][ T32] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 324.824631][ T32] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 324.824646][ T32] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 324.824658][ T32] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 324.824682][ T32] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 324.824694][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.874323][ T4930] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 324.874543][ T4930] Bluetooth: hci2: Injecting HCI hardware error event [ 324.881054][ T60] Bluetooth: hci2: hardware error 0x00 [ 325.030076][ T32] usb 3-1: usb_control_msg returned -32 [ 325.030123][ T32] usbtmc 3-1:16.0: can't read capabilities [ 325.392711][ T32] usb 3-1: USB disconnect, device number 53 [ 325.544409][ T9617] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1295'. [ 325.661013][ T5602] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 325.804046][ T5602] usb 1-1: Using ep0 maxpacket: 16 [ 325.864426][ T9620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.871413][ T32] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 325.877971][ T9620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.975337][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 326.025631][ T32] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 326.025661][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.025681][ T32] usb 3-1: config 0 has no interface number 0 [ 326.025729][ T32] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 326.025755][ T32] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 326.025777][ T32] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.029303][ T32] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 326.029331][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.029350][ T32] usb 3-1: Product: syz [ 326.029363][ T32] usb 3-1: Manufacturer: syz [ 326.029377][ T32] usb 3-1: SerialNumber: syz [ 326.039417][ T32] usb 3-1: config 0 descriptor?? [ 326.198540][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 326.203359][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.203435][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 326.249558][ T9] usb 2-1: string descriptor 0 read error: -22 [ 326.249807][ T9] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 326.249832][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.253794][ T9612] block device autoloading is deprecated and will be removed. [ 326.345125][ T9] usb 2-1: selecting invalid altsetting 1 [ 326.346261][ T9] usb 2-1: unit 6 not found! [ 326.475973][ T5602] usb 1-1: unable to get BOS descriptor or descriptor too short [ 326.477307][ T5602] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 326.477391][ T5602] usb 1-1: can't read configurations, error -71 [ 327.086027][ T9] usb 2-1: 2:0: sticky mixer values (0/238/1 => 0), disabling [ 327.133839][ T38] kauditd_printk_skb: 32 callbacks suppressed [ 327.133857][ T38] audit: type=1326 audit(1780755683.458:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9626 comm="syz.3.1298" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fd6752c6bd7 code=0x0 [ 327.152838][ T60] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 327.155166][ T9631] netlink: 'syz.0.1299': attribute type 3 has an invalid length. [ 327.274687][ T9619] binder: 9618:9619 ioctl c0306201 200000000180 returned -14 [ 327.381158][ T9] usb 2-1: USB disconnect, device number 40 [ 327.768306][ T5602] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 327.934190][ T5602] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 327.934217][ T5602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.934234][ T5602] usb 1-1: Product: syz [ 327.934246][ T5602] usb 1-1: Manufacturer: syz [ 327.934257][ T5602] usb 1-1: SerialNumber: syz [ 327.942294][ T5602] usb 1-1: config 0 descriptor?? [ 328.135346][ T5602] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 328.459045][ T9] usb 3-1: USB disconnect, device number 54 [ 329.762741][ T9636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.765154][ T9636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.770525][ T5602] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 329.795114][ T5602] usb 1-1: USB disconnect, device number 71 [ 330.566655][ T32] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 330.714335][ T32] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 330.714468][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.714484][ T32] usb 3-1: Product: syz [ 330.714491][ T32] usb 3-1: Manufacturer: syz [ 330.714498][ T32] usb 3-1: SerialNumber: syz [ 330.752338][ T32] usb 3-1: config 0 descriptor?? [ 330.958255][ T32] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 331.081310][ T9709] Bluetooth: MGMT ver 1.23 [ 331.262507][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 331.408503][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 331.414104][ T9] usb 2-1: config 208 has an invalid interface number: 37 but max is 0 [ 331.414132][ T9] usb 2-1: config 208 has no interface number 0 [ 331.414163][ T9] usb 2-1: config 208 interface 37 has no altsetting 0 [ 331.451334][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=02ae, bcdDevice=e5.8e [ 331.451366][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.451387][ T9] usb 2-1: Product: syz [ 331.451401][ T9] usb 2-1: Manufacturer: syz [ 331.451414][ T9] usb 2-1: SerialNumber: syz [ 331.534177][ T9718] sctp: [Deprecated]: syz.0.1330 (pid 9718) Use of int in maxseg socket option. [ 331.534177][ T9718] Use struct sctp_assoc_value instead [ 331.841280][ T9] gspca_main: kinect-2.14.0 probing 045e:02ae [ 331.884106][ T9] usb 2-1: USB disconnect, device number 41 [ 332.364958][ T32] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 332.392783][ T32] usb 3-1: USB disconnect, device number 55 [ 333.079313][ T9748] 9p: Bad value for 'rfdno' [ 333.081479][ T5602] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 333.249207][ T5602] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 333.249238][ T5602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.249257][ T5602] usb 1-1: Product: syz [ 333.249268][ T5602] usb 1-1: Manufacturer: syz [ 333.249276][ T5602] usb 1-1: SerialNumber: syz [ 333.290656][ T5602] usb 1-1: config 0 descriptor?? [ 333.485857][ T5602] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 334.338340][ T9773] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1347'. [ 334.773935][ T9782] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1348'. [ 335.185538][ T5602] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 335.210020][ T5602] usb 1-1: USB disconnect, device number 72 [ 335.320012][ T5721] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 335.497140][ T5721] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 335.497171][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.497192][ T5721] usb 2-1: Product: syz [ 335.497207][ T5721] usb 2-1: Manufacturer: syz [ 335.497221][ T5721] usb 2-1: SerialNumber: syz [ 335.508550][ T5721] usb 2-1: config 0 descriptor?? [ 335.733052][ T5721] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 335.952396][ T9804] netlink: 'syz.0.1358': attribute type 2 has an invalid length. [ 336.032170][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1359'. [ 336.134916][ T9811] FAULT_INJECTION: forcing a failure. [ 336.134916][ T9811] name failslab, interval 1, probability 0, space 0, times 0 [ 336.134954][ T9811] CPU: 0 UID: 0 PID: 9811 Comm: syz.2.1359 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 336.134982][ T9811] Tainted: [L]=SOFTLOCKUP [ 336.134988][ T9811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 336.135006][ T9811] Call Trace: [ 336.135014][ T9811] [ 336.135022][ T9811] dump_stack_lvl+0xe8/0x150 [ 336.135050][ T9811] should_fail_ex+0x46b/0x600 [ 336.135082][ T9811] should_failslab+0xa8/0x100 [ 336.135107][ T9811] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 336.135129][ T9811] ? __alloc_skb+0x1d0/0x7d0 [ 336.135154][ T9811] ? lockdep_hardirqs_on+0x7a/0x110 [ 336.135187][ T9811] __alloc_skb+0x1d0/0x7d0 [ 336.135209][ T9811] ? netlink_ack_tlv_len+0x6c/0x210 [ 336.135234][ T9811] netlink_ack+0x146/0xa50 [ 336.135253][ T9811] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 336.135272][ T9811] ? ref_tracker_free+0x673/0x820 [ 336.135292][ T9811] ? __netlink_deliver_tap+0x636/0x8b0 [ 336.135313][ T9811] ? netlink_unicast+0x754/0x920 [ 336.135331][ T9811] ? netlink_sendmsg+0x813/0xb40 [ 336.135344][ T9811] ? __sys_sendto+0x402/0x590 [ 336.135362][ T9811] ? __x64_sys_sendto+0xde/0x100 [ 336.135380][ T9811] ? do_syscall_64+0x174/0x580 [ 336.135400][ T9811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.135421][ T9811] netlink_rcv_skb+0x2b6/0x4b0 [ 336.135445][ T9811] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 336.135467][ T9811] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 336.135498][ T9811] ? netlink_deliver_tap+0x2e/0x1b0 [ 336.135519][ T9811] ? netlink_deliver_tap+0x2e/0x1b0 [ 336.135544][ T9811] netlink_unicast+0x780/0x920 [ 336.135571][ T9811] netlink_sendmsg+0x813/0xb40 [ 336.135591][ T9811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.135606][ T9811] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 336.135628][ T9811] ? aa_sock_msg_perm+0x122/0x200 [ 336.135644][ T9811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.135657][ T9811] sock_sendmsg_nosec+0x13a/0x180 [ 336.135676][ T9811] __sys_sendto+0x402/0x590 [ 336.135699][ T9811] ? __pfx___sys_sendto+0x10/0x10 [ 336.135736][ T9811] ? exc_page_fault+0x6a/0xc0 [ 336.135758][ T9811] ? do_user_addr_fault+0xc6f/0x1340 [ 336.135778][ T9811] __x64_sys_sendto+0xde/0x100 [ 336.135799][ T9811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.135815][ T9811] do_syscall_64+0x174/0x580 [ 336.135834][ T9811] ? trace_irq_disable+0x3b/0x140 [ 336.135851][ T9811] ? clear_bhb_loop+0x40/0x90 [ 336.135868][ T9811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.135882][ T9811] RIP: 0033:0x7f484fc5d68e [ 336.135897][ T9811] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 336.135910][ T9811] RSP: 002b:00007f484ded3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 336.135926][ T9811] RAX: ffffffffffffffda RBX: 00007f484ded56c0 RCX: 00007f484fc5d68e [ 336.135937][ T9811] RDX: 0000000000000024 RSI: 00007f484ded4000 RDI: 0000000000000003 [ 336.135946][ T9811] RBP: 0000000000000000 R08: 00007f484ded3f04 R09: 000000000000000c [ 336.135956][ T9811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 336.135964][ T9811] R13: 00007f484ded3f58 R14: 00007f484ded4000 R15: 0000000000000000 [ 336.135986][ T9811] [ 336.234500][ T5712] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 336.424902][ T5712] usb 1-1: Using ep0 maxpacket: 8 [ 336.507436][ T5712] usb 1-1: unable to get BOS descriptor or descriptor too short [ 336.512919][ T5712] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.512971][ T5712] usb 1-1: config 1 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 61, changing to 9 [ 336.513000][ T5712] usb 1-1: config 1 interface 0 altsetting 128 endpoint 0x82 has invalid wMaxPacketSize 0 [ 336.513023][ T5712] usb 1-1: config 1 interface 0 altsetting 128 bulk endpoint 0x82 has invalid maxpacket 0 [ 336.513046][ T5712] usb 1-1: config 1 interface 0 has no altsetting 0 [ 336.515700][ T5712] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 336.515728][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.515748][ T5712] usb 1-1: Product: syz [ 336.515762][ T5712] usb 1-1: Manufacturer: syz [ 336.515776][ T5712] usb 1-1: SerialNumber: syz [ 336.852421][ T5712] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 336.863278][ T5712] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 336.863367][ T5712] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 336.883540][ T5712] usb 1-1: USB disconnect, device number 73 [ 337.219930][ T5721] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 337.227460][ T5721] usb 2-1: USB disconnect, device number 42 [ 337.565644][ T9828] sit0: entered promiscuous mode [ 337.574403][ T9828] netlink: 'syz.2.1366': attribute type 1 has an invalid length. [ 337.574433][ T9828] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1366'. [ 337.583702][ T9828] netlink: 'syz.2.1366': attribute type 2 has an invalid length. [ 337.728020][ T9836] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1370'. [ 337.844268][ T5602] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 338.001167][ T5602] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 338.001212][ T5602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.001231][ T5602] usb 1-1: Product: syz [ 338.001238][ T5602] usb 1-1: Manufacturer: syz [ 338.001245][ T5602] usb 1-1: SerialNumber: syz [ 338.011277][ T5602] usb 1-1: config 0 descriptor?? [ 338.016515][ T5721] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 338.111725][ T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 338.224744][ T5602] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 338.235906][ T5721] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 338.235935][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.236005][ T5721] usb 3-1: Product: syz [ 338.236020][ T5721] usb 3-1: Manufacturer: syz [ 338.236034][ T5721] usb 3-1: SerialNumber: syz [ 338.249082][ T5721] usb 3-1: config 0 descriptor?? [ 338.290140][ T5721] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 338.303930][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 338.305986][ T9] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 338.306010][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.306078][ T9] usb 4-1: config 0 has no interface number 0 [ 338.339469][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 338.339486][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.339497][ T9] usb 4-1: Product: syz [ 338.339504][ T9] usb 4-1: Manufacturer: syz [ 338.339512][ T9] usb 4-1: SerialNumber: syz [ 338.389135][ T9] usb 4-1: config 0 descriptor?? [ 338.393886][ T9] uvcvideo 4-1:0.105: Found Unit with invalid ID 0 [ 338.393961][ T9] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 338.393977][ T9] uvcvideo 4-1:0.105: No valid video chain found. [ 338.584900][ T821] usb 4-1: USB disconnect, device number 65 [ 338.587389][ T5779] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 338.749121][ T5779] usb 2-1: Using ep0 maxpacket: 16 [ 338.750979][ T5779] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 338.751004][ T5779] usb 2-1: config 0 has no interface number 0 [ 338.751029][ T5779] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 338.753235][ T5779] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 338.753301][ T5779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.753312][ T5779] usb 2-1: Product: syz [ 338.753320][ T5779] usb 2-1: Manufacturer: syz [ 338.753328][ T5779] usb 2-1: SerialNumber: syz [ 338.765784][ T5779] usb 2-1: config 0 descriptor?? [ 338.796429][ T9849] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 338.860129][ T9841] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1372'. [ 339.103139][ T5721] gspca_stk1135: reg_w 0x3 err -71 [ 339.104201][ T5721] gspca_stk1135: serial bus timeout: status=0x00 [ 339.104216][ T5721] gspca_stk1135: Sensor write failed [ 339.104243][ T5721] gspca_stk1135: serial bus timeout: status=0x00 [ 339.104253][ T5721] gspca_stk1135: Sensor write failed [ 339.105269][ T5721] gspca_stk1135: serial bus timeout: status=0x00 [ 339.105283][ T5721] gspca_stk1135: Sensor read failed [ 339.105312][ T5721] gspca_stk1135: serial bus timeout: status=0x00 [ 339.105321][ T5721] gspca_stk1135: Sensor read failed [ 339.105328][ T5721] gspca_stk1135: Detected sensor type unknown (0x0) [ 339.105358][ T5721] gspca_stk1135: serial bus timeout: status=0x00 [ 339.105368][ T5721] gspca_stk1135: Sensor read failed [ 339.106422][ T5721] gspca_stk1135: serial bus timeout: status=0x00 [ 339.106436][ T5721] gspca_stk1135: Sensor read failed [ 339.106463][ T5721] gspca_stk1135: serial bus timeout: status=0x00 [ 339.106479][ T5721] gspca_stk1135: Sensor write failed [ 339.107498][ T5721] gspca_stk1135: serial bus timeout: status=0x00 [ 339.107511][ T5721] gspca_stk1135: Sensor write failed [ 339.107594][ T5721] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 339.241346][ T5779] usb 2-1: USB disconnect, device number 43 [ 339.252509][ T5721] usb 3-1: USB disconnect, device number 56 [ 339.317175][ T9856] netlink: 'syz.3.1375': attribute type 27 has an invalid length. [ 339.450480][ T9859] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.1375'. [ 339.450518][ T9859] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.1375'. [ 339.697454][ T9861] loop5: detected capacity change from 0 to 8 [ 339.877837][ T5602] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 339.934938][ T5602] usb 1-1: USB disconnect, device number 74 [ 340.107887][ T9856] ipvlan0: left promiscuous mode [ 340.174599][ T9861] Dev loop5: unable to read RDB block 8 [ 340.174647][ T9861] loop5: unable to read partition table [ 340.217019][ T9861] loop5: partition table beyond EOD, truncated [ 340.217048][ T9861] loop_reread_partitions: partition scan of loop5 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 340.223838][ T9856] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 340.647754][ T10] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 340.693886][ T9861] [ 340.693898][ T9861] ====================================================== [ 340.693905][ T9861] WARNING: possible circular locking dependency detected [ 340.693930][ T9861] syzkaller #0 Tainted: G L [ 340.693940][ T9861] ------------------------------------------------------ [ 340.693947][ T9861] syz.2.1376/9861 is trying to acquire lock: [ 340.693957][ T9861] ffff88805cee1938 ((wq_completion)loop5){+.+.}-{0:0}, at: touch_wq_lockdep_map+0xb5/0x180 [ 340.694001][ T9861] [ 340.694001][ T9861] but task is already holding lock: [ 340.694007][ T9861] ffff888026e174c8 (&disk->open_mutex#4){+.+.}-{4:4}, at: bdev_release+0x1af/0x660 [ 340.694057][ T9861] [ 340.694057][ T9861] which lock already depends on the new lock. [ 340.694057][ T9861] [ 340.694063][ T9861] [ 340.694063][ T9861] the existing dependency chain (in reverse order) is: [ 340.694069][ T9861] [ 340.694069][ T9861] -> #7 (&disk->open_mutex#4){+.+.}-{4:4}: [ 340.694090][ T9861] mutex_lock_nested+0x5a/0x1d0 [ 340.694102][ T9861] __del_gendisk+0x127/0x980 [ 340.694112][ T9861] del_gendisk+0xe7/0x160 [ 340.694120][ T9861] loop_remove+0x42/0xc0 [ 340.694133][ T9861] loop_control_ioctl+0x4ba/0x5b0 [ 340.694145][ T9861] __se_sys_ioctl+0xff/0x170 [ 340.694158][ T9861] do_syscall_64+0x174/0x580 [ 340.694171][ T9861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.694180][ T9861] [ 340.694180][ T9861] -> #6 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 340.694201][ T9861] down_read+0x97/0x200 [ 340.694208][ T9861] add_disk_fwnode+0xe7/0x480 [ 340.694217][ T9861] loop_add+0x86e/0xb50 [ 340.694228][ T9861] blk_request_module+0x27d/0x2a0 [ 340.694238][ T9861] blkdev_get_no_open+0x3f/0xe0 [ 340.694251][ T9861] blkdev_open+0x1f5/0x620 [ 340.694258][ T9861] do_dentry_open+0x83d/0x13e0 [ 340.694268][ T9861] vfs_open+0x3b/0x350 [ 340.694276][ T9861] path_openat+0x2eea/0x3960 [ 340.694289][ T9861] do_file_open+0x23e/0x4a0 [ 340.694300][ T9861] do_sys_openat2+0x115/0x200 [ 340.694309][ T9861] __x64_sys_creat+0x8f/0xc0 [ 340.694319][ T9861] do_syscall_64+0x174/0x580 [ 340.694331][ T9861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.694341][ T9861] [ 340.694341][ T9861] -> #5 (major_names_lock){+.+.}-{4:4}: [ 340.694353][ T9861] mutex_lock_nested+0x5a/0x1d0 [ 340.694363][ T9861] blk_request_module+0x35/0x2a0 [ 340.694372][ T9861] blkdev_get_no_open+0x3f/0xe0 [ 340.694384][ T9861] bdev_file_open_by_dev+0xa0/0x240 [ 340.694397][ T9861] swsusp_check+0x56/0x490 [ 340.694407][ T9861] software_resume+0x51/0x4c0 [ 340.694420][ T9861] resume_store+0x333/0x4f0 [ 340.694428][ T9861] kernfs_fop_write_iter+0x3b0/0x540 [ 340.694441][ T9861] vfs_write+0x629/0xba0 [ 340.694453][ T9861] ksys_write+0x156/0x270 [ 340.694464][ T9861] do_syscall_64+0x174/0x580 [ 340.694476][ T9861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.694485][ T9861] [ 340.694485][ T9861] -> #4 (system_transition_mutex){+.+.}-{4:4}: [ 340.694498][ T9861] mutex_lock_nested+0x5a/0x1d0 [ 340.694508][ T9861] lock_system_sleep+0x49/0x70 [ 340.694517][ T9861] resume_store+0x2ff/0x4f0 [ 340.694524][ T9861] kernfs_fop_write_iter+0x3b0/0x540 [ 340.694539][ T9861] vfs_write+0x629/0xba0 [ 340.694550][ T9861] ksys_write+0x156/0x270 [ 340.694562][ T9861] do_syscall_64+0x174/0x580 [ 340.694574][ T9861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.694583][ T9861] [ 340.694583][ T9861] -> #3 (&of->mutex){+.+.}-{4:4}: [ 340.694596][ T9861] mutex_lock_nested+0x5a/0x1d0 [ 340.694605][ T9861] kernfs_seq_start+0x5c/0x420 [ 340.694618][ T9861] seq_read_iter+0x3f8/0xe20 [ 340.694631][ T9861] vfs_read+0x58b/0xa80 [ 340.694642][ T9861] ksys_read+0x156/0x270 [ 340.694653][ T9861] do_syscall_64+0x174/0x580 [ 340.694673][ T9861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.694688][ T9861] [ 340.694688][ T9861] -> #2 (&p->lock){+.+.}-{4:4}: [ 340.694709][ T9861] mutex_lock_nested+0x5a/0x1d0 [ 340.694719][ T9861] seq_read_iter+0xb8/0xe20 [ 340.694731][ T9861] lo_rw_aio+0xc80/0xf00 [ 340.694743][ T9861] loop_process_work+0x92a/0x11b0 [ 340.694755][ T9861] process_one_work+0x98b/0x1630 [ 340.694767][ T9861] worker_thread+0xb49/0x1140 [ 340.694780][ T9861] kthread+0x388/0x470 [ 340.694789][ T9861] ret_from_fork+0x514/0xb70 [ 340.694800][ T9861] ret_from_fork_asm+0x1a/0x30 [ 340.694812][ T9861] [ 340.694812][ T9861] -> #1 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}: [ 340.694825][ T9861] process_one_work+0x8d7/0x1630 [ 340.694837][ T9861] worker_thread+0xb49/0x1140 [ 340.694849][ T9861] kthread+0x388/0x470 [ 340.694858][ T9861] ret_from_fork+0x514/0xb70 [ 340.694868][ T9861] ret_from_fork_asm+0x1a/0x30 [ 340.694879][ T9861] [ 340.694879][ T9861] -> #0 ((wq_completion)loop5){+.+.}-{0:0}: [ 340.694891][ T9861] __lock_acquire+0x15a5/0x2d10 [ 340.694901][ T9861] lock_acquire+0x106/0x350 [ 340.694911][ T9861] touch_wq_lockdep_map+0xcb/0x180 [ 340.694919][ T9861] __flush_workqueue+0x14b/0x14f0 [ 340.694927][ T9861] drain_workqueue+0xd3/0x390 [ 340.694935][ T9861] lo_release+0x287/0x8f0 [ 340.694946][ T9861] bdev_release+0x541/0x660 [ 340.694958][ T9861] blkdev_release+0x15/0x20 [ 340.694966][ T9861] __fput+0x461/0xa70 [ 340.694976][ T9861] task_work_run+0x1d9/0x270 [ 340.694986][ T9861] do_exit+0x70f/0x22c0 [ 340.694995][ T9861] do_group_exit+0x21b/0x2d0 [ 340.695005][ T9861] get_signal+0x1284/0x1330 [ 340.695017][ T9861] arch_do_signal_or_restart+0xbc/0x840 [ 340.695026][ T9861] exit_to_user_mode_loop+0xa9/0x680 [ 340.695037][ T9861] do_syscall_64+0x353/0x580 [ 340.695049][ T9861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.695058][ T9861] [ 340.695058][ T9861] other info that might help us debug this: [ 340.695058][ T9861] [ 340.695062][ T9861] Chain exists of: [ 340.695062][ T9861] (wq_completion)loop5 --> &set->update_nr_hwq_lock --> &disk->open_mutex#4 [ 340.695062][ T9861] [ 340.695079][ T9861] Possible unsafe locking scenario: [ 340.695079][ T9861] [ 340.695082][ T9861] CPU0 CPU1 [ 340.695085][ T9861] ---- ---- [ 340.695089][ T9861] lock(&disk->open_mutex#4); [ 340.695097][ T9861] lock(&set->update_nr_hwq_lock); [ 340.695104][ T9861] lock(&disk->open_mutex#4); [ 340.695114][ T9861] lock((wq_completion)loop5); [ 340.695120][ T9861] [ 340.695120][ T9861] *** DEADLOCK *** [ 340.695120][ T9861] [ 340.695123][ T9861] 1 lock held by syz.2.1376/9861: [ 340.695129][ T9861] #0: ffff888026e174c8 (&disk->open_mutex#4){+.+.}-{4:4}, at: bdev_release+0x1af/0x660 [ 340.695157][ T9861] [ 340.695157][ T9861] stack backtrace: [ 340.695165][ T9861] CPU: 1 UID: 0 PID: 9861 Comm: syz.2.1376 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 340.695180][ T9861] Tainted: [L]=SOFTLOCKUP [ 340.695189][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 340.695195][ T9861] Call Trace: [ 340.695200][ T9861] [ 340.695204][ T9861] dump_stack_lvl+0xe8/0x150 [ 340.695216][ T9861] print_circular_bug+0x2e1/0x300 [ 340.695230][ T9861] check_noncircular+0x12e/0x150 [ 340.695244][ T9861] __lock_acquire+0x15a5/0x2d10 [ 340.695258][ T9861] ? __bfs+0x153/0x290 [ 340.695269][ T9861] ? __pfx_hlock_conflict+0x10/0x10 [ 340.695282][ T9861] ? touch_wq_lockdep_map+0xb5/0x180 [ 340.695291][ T9861] lock_acquire+0x106/0x350 [ 340.695301][ T9861] ? touch_wq_lockdep_map+0xb5/0x180 [ 340.695312][ T9861] ? touch_wq_lockdep_map+0xb5/0x180 [ 340.695321][ T9861] touch_wq_lockdep_map+0xcb/0x180 [ 340.695330][ T9861] ? touch_wq_lockdep_map+0xb5/0x180 [ 340.695339][ T9861] __flush_workqueue+0x14b/0x14f0 [ 340.695349][ T9861] ? do_raw_spin_lock+0x12b/0x2f0 [ 340.695360][ T9861] ? __pfx___flush_workqueue+0x10/0x10 [ 340.695373][ T9861] drain_workqueue+0xd3/0x390 [ 340.695383][ T9861] lo_release+0x287/0x8f0 [ 340.695396][ T9861] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 340.695411][ T9861] ? __pfx_lo_release+0x10/0x10 [ 340.695423][ T9861] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 340.695434][ T9861] ? reacquire_held_locks+0x104/0x190 [ 340.695446][ T9861] ? rt_spin_lock+0x1e0/0x400 [ 340.695457][ T9861] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 340.695468][ T9861] ? rt_spin_unlock+0x14f/0x200 [ 340.695480][ T9861] ? rt_spin_unlock+0x160/0x200 [ 340.695493][ T9861] ? __pfx_lo_release+0x10/0x10 [ 340.695505][ T9861] bdev_release+0x541/0x660 [ 340.695520][ T9861] ? __pfx_blkdev_release+0x10/0x10 [ 340.695530][ T9861] blkdev_release+0x15/0x20 [ 340.695538][ T9861] __fput+0x461/0xa70 [ 340.695550][ T9861] task_work_run+0x1d9/0x270 [ 340.695562][ T9861] ? __pfx_task_work_run+0x10/0x10 [ 340.695573][ T9861] ? rt_spin_unlock+0x160/0x200 [ 340.695585][ T9861] do_exit+0x70f/0x22c0 [ 340.695596][ T9861] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 340.695610][ T9861] ? __pfx_do_exit+0x10/0x10 [ 340.695619][ T9861] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 340.695631][ T9861] ? reacquire_held_locks+0x104/0x190 [ 340.695643][ T9861] ? rt_spin_lock+0x1e0/0x400 [ 340.695656][ T9861] do_group_exit+0x21b/0x2d0 [ 340.695666][ T9861] ? rt_spin_unlock+0x160/0x200 [ 340.695677][ T9861] get_signal+0x1284/0x1330 [ 340.695694][ T9861] arch_do_signal_or_restart+0xbc/0x840 [ 340.695704][ T9861] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 340.695717][ T9861] exit_to_user_mode_loop+0xa9/0x680 [ 340.695728][ T9861] ? rcu_is_watching+0x15/0xb0 [ 340.695741][ T9861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.695751][ T9861] do_syscall_64+0x353/0x580 [ 340.695765][ T9861] ? clear_bhb_loop+0x40/0x90 [ 340.695776][ T9861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.695786][ T9861] RIP: 0033:0x7f484fc9ce59 [ 340.695795][ T9861] Code: Unable to access opcode bytes at 0x7f484fc9ce2f. [ 340.695800][ T9861] RSP: 002b:00007f484def60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 340.695811][ T9861] RAX: fffffffffffffe00 RBX: 00007f484ff15fa8 RCX: 00007f484fc9ce59 [ 340.695819][ T9861] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f484ff15fa8 [ 340.695825][ T9861] RBP: 00007f484ff15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 340.695831][ T9861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.695838][ T9861] R13: 00007f484ff16038 R14: 00007fff2ebe7030 R15: 00007fff2ebe7118 [ 340.695848][ T9861] [ 340.792365][ T9876] sg_write: data in/out 548948/136 bytes for SCSI command 0x0-- guessing data in; [ 340.792365][ T9876] program syz.2.1381 not setting count and/or reply_len properly [ 340.806705][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 340.814824][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 340.814853][ T10] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 340.814877][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 340.844929][ T10] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 340.844960][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.844980][ T10] usb 4-1: Product: syz [ 340.844995][ T10] usb 4-1: Manufacturer: syz [ 340.845009][ T10] usb 4-1: SerialNumber: syz [ 340.865855][ T32] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 340.938462][ T10] usb 4-1: config 0 descriptor?? [ 341.027715][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.031347][ T32] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 341.031376][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.031396][ T32] usb 1-1: Product: syz [ 341.031409][ T32] usb 1-1: Manufacturer: syz [ 341.031422][ T32] usb 1-1: SerialNumber: syz [ 341.038667][ T32] usb 1-1: config 0 descriptor?? [ 341.079988][ T32] dm9601 1-1:0.0: probe with driver dm9601 failed with error -22 [ 341.113949][ T9876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1381'. [ 341.269106][ T32] usb 1-1: USB disconnect, device number 75 [ 341.330606][ T10] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 341.517912][ T9869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.518954][ T9869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.312087][ T10] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-ETIMEDOUT) [ 342.312142][ T10] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110 [ 343.177250][ T10] usb 4-1: USB disconnect, device number 66