last executing test programs: 4m43.913909846s ago: executing program 0 (id=982): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x4c}}, 0x4000000) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="8401", @ANYRES16=r1, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054"], 0x184}}, 0x0) 4m43.74404919s ago: executing program 0 (id=983): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x9, 0x2103}, &(0x7f0000000080)=0x90) 4m43.625072896s ago: executing program 0 (id=984): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x2}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 4m43.553098788s ago: executing program 0 (id=985): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macvtap0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 4m43.265455928s ago: executing program 0 (id=989): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 4m43.117276124s ago: executing program 0 (id=991): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x4c}}, 0x4000000) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="8401", @ANYRES16=r1, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054"], 0x184}}, 0x0) 4m28.064635512s ago: executing program 32 (id=991): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x4c}}, 0x4000000) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="8401", @ANYRES16=r1, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054"], 0x184}}, 0x0) 3m38.988573039s ago: executing program 2 (id=1700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 3m38.720305595s ago: executing program 2 (id=1705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 3m38.400119029s ago: executing program 2 (id=1710): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) semop(0x0, &(0x7f0000000240)=[{0x0, 0xe65b, 0x1800}], 0x1) 3m38.164917678s ago: executing program 2 (id=1714): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 3m37.232819356s ago: executing program 2 (id=1717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8845}, 0x84) 3m34.740630362s ago: executing program 2 (id=1735): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) unshare(0x2000400) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x4}, 0x10) 3m34.422039603s ago: executing program 33 (id=1735): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) unshare(0x2000400) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x4}, 0x10) 35.6943123s ago: executing program 3 (id=3083): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r0, &(0x7f00000000c0)=[{0x82, 0x77, 0x0, 0x40, @time={0x2, 0x428}, {0xfd}, {0x27, 0x4}, @result={0xffffffff, 0x8}}], 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a010200009500000000000100f24b7c47000000007a30000000000900030073797a310000000038000000030a01040000000000000000010000010a000700726f7574650000000c00024000000000000000010900030073797a3000000000140000001100010000000000000000000000000a"], 0xac}, 0x1, 0x20, 0x0, 0x8040}, 0x0) 35.56109562s ago: executing program 3 (id=3084): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) 32.5208767s ago: executing program 3 (id=3101): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="bc010000190001000200000000000000fc020000000000000000000000000000000000000000000000000000000000000000000300000000020000000c0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000401050000000000000000000000000000000000000000003200000000000000ac1e0101000000000000000000000000000000000000ff00000000000000000001000000fc02000000000000000000000000000000000000320000000000000000000000000000000000ffffac1414bb000000000003000000000000000000000000000000000899000000000000000000000001000000003c00000002"], 0x1bc}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="840000001a0001000000000000000000800020"], 0x84}}, 0x20048010) 32.509844653s ago: executing program 3 (id=3102): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 32.303070133s ago: executing program 3 (id=3103): syz_open_dev$video(&(0x7f0000000180), 0x7, 0x581082) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0xfffffffc}}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000003c0)={0x40, 0x4, 0x3}, 0x10) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x4002ce}, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 29.637402244s ago: executing program 3 (id=3114): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x1, 0x4}, 0xff}, 0x18, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000ee) (fail_nth: 3) 29.546280171s ago: executing program 34 (id=3114): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x1, 0x4}, 0xff}, 0x18, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000ee) (fail_nth: 3) 3.791774867s ago: executing program 4 (id=3223): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4080) 3.706116533s ago: executing program 4 (id=3225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000000c0)="61c38b22b957", 0x6) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000080)={0x6, 0x800003ff, [{0x100, 0x0, 0x1ff}, {0x0, 0x0, 0x8}, {0x3, 0x0, 0x6}, {0x7, 0x0, 0x3f}, {0xd, 0x0, 0xbbcd}, {0x81, 0x0, 0x3}, {0x7fff}, {0x2, 0x0, 0x5}, {0x3e, 0x0, 0x3}, {0xffffff81, 0x0, 0xb}, {0xe, 0x0, 0xffff}, {0x6}, {0x7ff, 0x0, 0x8}, {0xa, 0x0, 0x6}, {0x9a, 0x0, 0x3}, {0x2, 0x0, 0x3}]}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000240)=0x10, 0x800) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x818, [0x0, 0x2000000002c0, 0x200000000584, 0x2000000005b4], 0x0, &(0x7f0000000280), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x11, 0x28, 0x8884, 'veth0\x00', 'gre0\x00', 'pimreg1\x00', 'nr0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @random="220cc456c938", [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0xbe, 0x106, [], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x2, {0x5781}}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x6, 0x0, {0x480000000}}}}}, {0x9, 0x22, 0x0, 'veth0_vlan\x00', 'veth1_virt_wifi\x00', 'nr0\x00', 'dvmrp1\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff], @random="ffc9d548f92f", [0xff, 0x0, 0xff, 0x0, 0xff], 0xd6, 0x156, 0x18e, [@mac={{'mac\x00', 0x0, 0x10}, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0x1}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x3, {0x8}}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x11, 0x22, 0x8035, 'gretap0\x00', 'gre0\x00', 'syzkaller1\x00', 'virt_wifi0\x00', @random="0b9aea73d767", [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], @remote, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x9e, 0x1fe, 0x22e, [@state={{'state\x00', 0x0, 0x8}, {{0x7fffffff}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x1, 'system_u:object_r:crack_exec_t:s0\x00'}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x2}}}}, {0x5, 0x1, 0x9300, 'ip6gre0\x00', 'bridge0\x00', 'macvlan0\x00', 'bond_slave_1\x00', @empty, [0x0, 0x0, 0x0, 0xff], @broadcast, [0x0, 0x0, 0x0, 0xff], 0x196, 0x196, 0x2c6, [@comment={{'comment\x00', 0x0, 0x100}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x19, 'system_u:object_r:inetd_exec_t:s0\x00'}}}}]}]}, 0x890) 3.566012296s ago: executing program 6 (id=3227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x183301, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, 0x0, 0x0) 2.979949783s ago: executing program 6 (id=3231): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000140)={0x0, "704619c2b926747d9436bb4da2493000802c1e65cc3be47e593149c403f58291", 0x2, 0x80, 0xe3bf, 0x1, 0x4, 0x1, 0x57, 0x5}) 2.819214458s ago: executing program 5 (id=3235): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) setresuid(0x0, 0xee00, 0x0) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r3, 0x0, 0x6, 0xc) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000140)={0xfffffffd, "704619c2b926747d9436bb4da2493000802c1e65cc3be47e593149c403f58291", 0x2, 0x20, 0xf3bf, 0x5, 0x4, 0x1, 0x54, 0x1}) r4 = getpid() ptrace$ARCH_GET_CPUID(0x1e, r4, 0x0, 0x1011) 2.748098128s ago: executing program 6 (id=3236): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000240), &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, r1) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000002c0)="fb", 0x1, r1) keyctl$read(0xb, r1, &(0x7f0000000100)=""/112, 0x4) write$UHID_INPUT(r0, &(0x7f0000004200)={0xd, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f35006c090890e0878f0e1ac6e7049b336d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff462e2d7a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d2004001a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a868014ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc10700000032d0ad7bc946813591bd8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f0528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668d0800000000000000717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb792b2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e61f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108a1807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a20508758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbe52881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) r2 = socket(0x11, 0x3, 0x0) bind$packet(r2, &(0x7f0000000180), 0x14) r3 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0xe942) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={r4, 0x5}, 0x8) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000140)={0x100000000, 0x800, 0xf, 0x80000001, 0xfe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x74, 0x3, 0xa7, 0x7, 0x8, 0x7, 0x29}) write$UHID_INPUT(r0, &(0x7f0000000700)={0x8, {"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", 0x1000}}, 0x1006) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000001c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x232, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x0, 0xc9, "", [{{0x9, 0x4, 0x0, 0x82, 0x2, 0x3, 0x1, 0x2, 0x33, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xff1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xb, 0x5, 0x44}}}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 2.56117884s ago: executing program 5 (id=3237): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x40106) sendmsg$kcm(r1, 0x0, 0x4000) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.856866502s ago: executing program 4 (id=3240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.45864185s ago: executing program 1 (id=3241): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000200)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000500)={@local, 0x28e03ed2}) 1.357206775s ago: executing program 1 (id=3242): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4080) 1.276105279s ago: executing program 1 (id=3243): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="bc010000190001000200000000000000fc020000000000000000000000000000000000000000000000000000000000000000000300000000020000000c0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000401050000000000000000000000000000000000000000003200000000000000ac1e0101000000000000000000000000000000000000ff00000000000000000001000000fc02000000000000000000000000000000000000320000000000000000000000000000000000ffffac1414bb000000000003000000000000000000000000000000000899000000000000000000000001000000003c00000002"], 0x1bc}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x84}}, 0x20048010) 1.256108992s ago: executing program 4 (id=3244): socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x6, 0x0, 0x4f565559, 0x9, 0x0, 0x0, 0x8, 0xffffffff, 0x1, 0x3, 0x1, 0x6}}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x803, 0x0) pipe2$9p(&(0x7f0000000080), 0x800) socket$inet6(0xa, 0x1, 0x8010800000000084) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4126}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x1}}, 0x20) connect$x25(r1, &(0x7f00000001c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.164757014s ago: executing program 5 (id=3245): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) r1 = syz_open_dev$video4linux(&(0x7f0000000340), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000080)={0x0, 0x7}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x433b, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/187, 0xbb, 0x1, 0x0}, &(0x7f0000000100)=0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000fedbdf250600000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00\a\x00\t\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.14117827s ago: executing program 1 (id=3246): syz_open_dev$video(&(0x7f0000000180), 0x7, 0x581082) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0xfffffffc}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000003c0)={0x40, 0x4, 0x3}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.097691587s ago: executing program 5 (id=3247): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="37000000000000004043c68e04180a33", 0x10}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x0) 1.045204062s ago: executing program 6 (id=3248): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xc, 0x0) 1.0013571s ago: executing program 1 (id=3249): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000140)={0x18, 0x1, 0x0, 0x0, 0x0, 0x2}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r5, &(0x7f00000013c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001280)={0xc4, 0x3ed, 0x4, 0x70bd25, 0x25dfdbfb, "428c09759498b296641a521fd6927561e73b54f004d594968b3e5472155240d464f71869bcd6ffc8e0e87cf65c85cd33d9278dea9fc76f0a669d46ec2376a069616c550eabc0fdc321430b27d77841dd6c4f1c5366b4ca37ab90b516844feb91b7530b0830b3a83895a9289cf7966b58129d7c1bc5df25d21053ebf3970b2f7c2c33408b5722bb9983fa1c1e565db4da8b0baa3926c34a473f79b69212a7b8c05f0f6c9e0b26f5d227337dccaafdb46b9e33", ["", "", "", "", "", "", "", "", ""]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0xc844) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000280)={{}, 0x0, 0x0, @inherit={0x0, 0x0}, @name="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"}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="c8020000", @ANYRES16=r4, @ANYBLOB="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"/706], 0x2c8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 983.533224ms ago: executing program 4 (id=3250): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x80802, 0xcd) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) 832.113791ms ago: executing program 5 (id=3251): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4080) 568.725998ms ago: executing program 1 (id=3252): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000018c0), 0x3fffffffffffe83, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000040)={0x601, 0x5, &(0x7f0000000340)=[r3, r4, r5, r5, r3], 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r0], 0x48}}, 0x2404c054) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr(r7, &(0x7f00000002c0)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) r8 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f0000000140)={0x100000000, 0x800, 0xf, 0x80000001, 0xfe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x74, 0x3, 0xa7, 0x7, 0x8, 0x7, 0x29}) fremovexattr(r7, &(0x7f00000005c0)=@known='user.incfs.size\x00') ptrace(0x10, r6) ptrace$setregs(0x1a, r6, 0xc, 0x0) 522.802345ms ago: executing program 5 (id=3253): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x40106) sendmsg$kcm(r1, 0x0, 0x4000) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 340.444314ms ago: executing program 6 (id=3254): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="bc010000190001000200000000000000fc020000000000000000000000000000000000000000000000000000000000000000000300000000020000000c0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000401050000000000000000000000000000000000000000003200000000000000ac1e0101000000000000000000000000000000000000ff00000000000000000001000000fc02000000000000000000000000000000000000320000000000000000000000000000000000ffffac1414bb000000000003000000000000000000000000000000000899000000000000000000000001000000003c00000002"], 0x1bc}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x84}}, 0x20048010) 134.756428ms ago: executing program 4 (id=3255): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="30000000120001000000"], 0x30}], 0x1}, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000001380), 0x800000000005, 0x0) (async, rerun: 32) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) (rerun: 32) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_CAP_MAX_VCPU_ID(r4, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0xfe6}) utimensat(0xffffffffffffffff, &(0x7f0000004b40)='./file0\x00', 0x0, 0xc7c81e08fa67a461) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) r5 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@x86={0x0, 0x9, 0xc, 0x0, 0x8, 0x1, 0x86, 0x2, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x8004, 0xa, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) (async) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0xffff) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) (rerun: 64) 0s ago: executing program 6 (id=3256): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b8920000000109029009"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x0, 0x0, 0x0}], 0x2}) kernel console output (not intermixed with test programs): f f7 d8 64 89 01 48 [ 375.086543][T12941] RSP: 002b:00007efce851e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 375.086560][T12941] RAX: ffffffffffffffda RBX: 00007efcea545fa0 RCX: 00007efcea2cce59 [ 375.086571][T12941] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 375.086581][T12941] RBP: 00007efce851e090 R08: 0000000000000000 R09: 0000000000000000 [ 375.086590][T12941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.086601][T12941] R13: 00007efcea546038 R14: 00007efcea545fa0 R15: 00007ffe47e40988 [ 375.086626][T12941] [ 375.252482][T12942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.253023][T12942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.697883][T12956] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2898'. [ 375.761761][ T5722] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 375.779454][ T5348] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 375.901749][ T5722] usb 6-1: device descriptor read/64, error -71 [ 375.939374][ T5348] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 375.939403][ T5348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.939421][ T5348] usb 5-1: Product: syz [ 375.939434][ T5348] usb 5-1: Manufacturer: syz [ 375.939446][ T5348] usb 5-1: SerialNumber: syz [ 375.964723][ T5348] usb 5-1: config 0 descriptor?? [ 376.004796][ T5348] ch341 5-1:0.0: ch341-uart converter detected [ 376.162100][ T5722] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 376.217484][ T5348] usb 5-1: failed to receive control message: -32 [ 376.218395][ T5348] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 376.263696][ T5348] usb 5-1: USB disconnect, device number 37 [ 376.274544][ T5348] ch341 5-1:0.0: device disconnected [ 376.319480][ T5722] usb 6-1: device descriptor read/64, error -71 [ 376.429860][ T5722] usb usb6-port1: attempt power cycle [ 376.480896][T12981] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2907'. [ 376.737975][T12986] mmap: syz.1.2909 (12986) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 376.781256][ T5722] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 376.800161][ T5722] usb 6-1: device descriptor read/8, error -71 [ 376.864859][T12992] FAULT_INJECTION: forcing a failure. [ 376.864859][T12992] name failslab, interval 1, probability 0, space 0, times 0 [ 376.864887][T12992] CPU: 0 UID: 0 PID: 12992 Comm: syz.4.2911 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 376.864900][T12992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 376.864907][T12992] Call Trace: [ 376.864911][T12992] [ 376.864916][T12992] dump_stack_lvl+0xe8/0x150 [ 376.864944][T12992] should_fail_ex+0x46b/0x600 [ 376.864962][T12992] should_failslab+0xa8/0x100 [ 376.864975][T12992] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 376.864987][T12992] ? __d_alloc+0x37/0x6f0 [ 376.865000][T12992] __d_alloc+0x37/0x6f0 [ 376.865013][T12992] d_alloc_parallel+0xe6/0x1610 [ 376.865026][T12992] ? do_raw_spin_lock+0x12b/0x2f0 [ 376.865038][T12992] ? register_lock_class+0x31/0x2e0 [ 376.865059][T12992] ? __lock_acquire+0x6b5/0x2d10 [ 376.865071][T12992] ? __pfx_d_alloc_parallel+0x10/0x10 [ 376.865091][T12992] ? __rt_spin_lock_init+0x3e/0x50 [ 376.865113][T12992] ? __init_waitqueue_head+0xae/0x160 [ 376.865134][T12992] __lookup_slow+0x152/0x440 [ 376.865152][T12992] ? __pfx___lookup_slow+0x10/0x10 [ 376.865178][T12992] ? down_read+0x156/0x200 [ 376.865200][T12992] ? __pfx_down_read+0x10/0x10 [ 376.865222][T12992] ? lookup_fast+0x1a3/0x5b0 [ 376.865241][T12992] lookup_slow+0x53/0x70 [ 376.865252][T12992] path_lookupat+0x3f5/0x8c0 [ 376.865269][T12992] filename_lookup+0x256/0x5d0 [ 376.865281][T12992] ? __pfx_filename_lookup+0x10/0x10 [ 376.865303][T12992] ? strncpy_from_user+0x150/0x2b0 [ 376.865317][T12992] ? do_getname+0x151/0x250 [ 376.865333][T12992] do_readlinkat+0xe3/0x510 [ 376.865344][T12992] ? __pfx_do_readlinkat+0x10/0x10 [ 376.865354][T12992] ? __pfx_ksys_write+0x10/0x10 [ 376.865365][T12992] ? fput+0xa0/0xd0 [ 376.865381][T12992] __x64_sys_readlinkat+0x9a/0xb0 [ 376.865396][T12992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.865407][T12992] do_syscall_64+0x15f/0x560 [ 376.865420][T12992] ? trace_irq_disable+0x3b/0x140 [ 376.865430][T12992] ? clear_bhb_loop+0x40/0x90 [ 376.865442][T12992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.865452][T12992] RIP: 0033:0x7f1be807ce59 [ 376.865462][T12992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.865472][T12992] RSP: 002b:00007f1be62ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 376.865488][T12992] RAX: ffffffffffffffda RBX: 00007f1be82f5fa0 RCX: 00007f1be807ce59 [ 376.865496][T12992] RDX: 00002000000021c0 RSI: 0000200000000040 RDI: 0000000000000003 [ 376.865502][T12992] RBP: 00007f1be62ce090 R08: 0000000000000000 R09: 0000000000000000 [ 376.865508][T12992] R10: 0000000000019000 R11: 0000000000000246 R12: 0000000000000001 [ 376.865514][T12992] R13: 00007f1be82f6038 R14: 00007f1be82f5fa0 R15: 00007ffdfc20bf38 [ 376.865530][T12992] [ 377.046446][T12998] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 377.046751][T12998] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 377.139435][ T5722] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 377.175440][ T5722] usb 6-1: device descriptor read/8, error -71 [ 377.267199][T13002] 9p: Bad value for 'rfdno' [ 377.290492][ T5722] usb usb6-port1: unable to enumerate USB device [ 377.314678][T13004] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2916'. [ 377.629450][ T5722] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 377.684596][T13011] FAULT_INJECTION: forcing a failure. [ 377.684596][T13011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.684618][T13011] CPU: 1 UID: 0 PID: 13011 Comm: syz.1.2919 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 377.684630][T13011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 377.684637][T13011] Call Trace: [ 377.684641][T13011] [ 377.684646][T13011] dump_stack_lvl+0xe8/0x150 [ 377.684664][T13011] should_fail_ex+0x46b/0x600 [ 377.684682][T13011] _copy_to_user+0x31/0xb0 [ 377.684694][T13011] simple_read_from_buffer+0xe1/0x170 [ 377.684713][T13011] proc_fail_nth_read+0x1be/0x230 [ 377.684727][T13011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 377.684754][T13011] ? rw_verify_area+0x2ac/0x4e0 [ 377.684773][T13011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 377.684790][T13011] vfs_read+0x212/0xa80 [ 377.684805][T13011] ? __pfx_vfs_read+0x10/0x10 [ 377.684817][T13011] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 377.684832][T13011] ? lockdep_hardirqs_on+0x7a/0x110 [ 377.684846][T13011] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 377.684858][T13011] ? mutex_lock_nested+0x152/0x1d0 [ 377.684868][T13011] ? fdget_pos+0x252/0x320 [ 377.684882][T13011] ksys_read+0x156/0x270 [ 377.684894][T13011] ? __pfx_ksys_read+0x10/0x10 [ 377.684905][T13011] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 377.684923][T13011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.684934][T13011] do_syscall_64+0x15f/0x560 [ 377.684954][T13011] ? trace_irq_disable+0x3b/0x140 [ 377.684965][T13011] ? clear_bhb_loop+0x40/0x90 [ 377.684978][T13011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.684987][T13011] RIP: 0033:0x7efcea28d68e [ 377.684997][T13011] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 377.685006][T13011] RSP: 002b:00007efce851dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 377.685017][T13011] RAX: ffffffffffffffda RBX: 00007efce851e6c0 RCX: 00007efcea28d68e [ 377.685024][T13011] RDX: 000000000000000f RSI: 00007efce851e0a0 RDI: 0000000000000006 [ 377.685030][T13011] RBP: 00007efce851e090 R08: 0000000000000000 R09: 0000000000000000 [ 377.685036][T13011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.685042][T13011] R13: 00007efcea546038 R14: 00007efcea545fa0 R15: 00007ffe47e40988 [ 377.685057][T13011] [ 377.928910][ T5722] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 377.928939][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.928955][ T5722] usb 5-1: Product: syz [ 377.928967][ T5722] usb 5-1: Manufacturer: syz [ 377.928980][ T5722] usb 5-1: SerialNumber: syz [ 377.970035][ T5722] usb 5-1: config 0 descriptor?? [ 377.977289][ T5722] ch341 5-1:0.0: ch341-uart converter detected [ 378.178633][ T5722] usb 5-1: failed to receive control message: -32 [ 378.178687][ T5722] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 378.204814][ T5722] usb 5-1: USB disconnect, device number 38 [ 378.205998][ T823] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 378.223500][ T5722] ch341 5-1:0.0: device disconnected [ 378.351719][ T823] usb 2-1: unable to get BOS descriptor or descriptor too short [ 378.352218][ T823] usb 2-1: not running at top speed; connect to a high speed hub [ 378.353600][ T823] usb 2-1: config 202 has an invalid interface number: 194 but max is 0 [ 378.353626][ T823] usb 2-1: config 202 has no interface number 0 [ 378.353656][ T823] usb 2-1: config 202 interface 194 has no altsetting 0 [ 378.355987][ T823] usb 2-1: New USB device found, idVendor=0c45, idProduct=6240, bcdDevice=a8.e2 [ 378.356014][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.356033][ T823] usb 2-1: Product: syz [ 378.356046][ T823] usb 2-1: Manufacturer: syz [ 378.356059][ T823] usb 2-1: SerialNumber: syz [ 378.588893][T13019] syzkaller1: entered promiscuous mode [ 378.588912][T13019] syzkaller1: entered allmulticast mode [ 378.628994][T13014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.646723][T13014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.655000][ T823] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6240 [ 378.655520][ T823] gspca_sn9c20x: Write register 1000 failed -71 [ 378.655540][ T823] gspca_sn9c20x: Device initialization failed [ 378.655617][ T823] gspca_sn9c20x 2-1:202.194: probe with driver gspca_sn9c20x failed with error -71 [ 378.668600][ T823] usb 2-1: USB disconnect, device number 39 [ 378.814443][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.814534][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.973709][T13024] 9p: Bad value for 'rfdno' [ 379.076301][T13030] FAULT_INJECTION: forcing a failure. [ 379.076301][T13030] name failslab, interval 1, probability 0, space 0, times 0 [ 379.076325][T13030] CPU: 1 UID: 0 PID: 13030 Comm: syz.5.2927 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 379.076337][T13030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 379.076344][T13030] Call Trace: [ 379.076349][T13030] [ 379.076353][T13030] dump_stack_lvl+0xe8/0x150 [ 379.076370][T13030] should_fail_ex+0x46b/0x600 [ 379.076388][T13030] should_failslab+0xa8/0x100 [ 379.076402][T13030] kmem_cache_alloc_noprof+0x87/0x680 [ 379.076413][T13030] ? security_inode_alloc+0x39/0x310 [ 379.076426][T13030] security_inode_alloc+0x39/0x310 [ 379.076438][T13030] inode_init_always_gfp+0x99a/0xd50 [ 379.076456][T13030] ? __pfx_sock_alloc_inode+0x10/0x10 [ 379.076467][T13030] alloc_inode+0x82/0x1b0 [ 379.076482][T13030] __sock_create+0x11e/0x960 [ 379.076497][T13030] mptcp_subflow_create_socket+0xfb/0x800 [ 379.076509][T13030] ? lockdep_hardirqs_on+0x7a/0x110 [ 379.076523][T13030] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 379.076532][T13030] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 379.076548][T13030] __mptcp_nmpc_sk+0x14e/0x790 [ 379.076557][T13030] ? __local_bh_enable+0x1e1/0x2f0 [ 379.076573][T13030] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 379.076583][T13030] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 379.076597][T13030] ? lockdep_hardirqs_on+0x7a/0x110 [ 379.076612][T13030] mptcp_setsockopt+0xf12/0x3540 [ 379.076628][T13030] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 379.076640][T13030] ? __pfx_aa_sk_perm+0x10/0x10 [ 379.076656][T13030] ? aa_sock_opt_perm+0x131/0x1f0 [ 379.076667][T13030] ? sock_common_setsockopt+0x36/0xc0 [ 379.076679][T13030] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 379.076691][T13030] do_sock_setsockopt+0x17c/0x1b0 [ 379.076707][T13030] __x64_sys_setsockopt+0x143/0x1b0 [ 379.076721][T13030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.076732][T13030] do_syscall_64+0x15f/0x560 [ 379.076745][T13030] ? trace_irq_disable+0x3b/0x140 [ 379.076756][T13030] ? clear_bhb_loop+0x40/0x90 [ 379.076768][T13030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.076777][T13030] RIP: 0033:0x7fa9c69ace59 [ 379.076788][T13030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.076802][T13030] RSP: 002b:00007fa9c4c06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 379.076814][T13030] RAX: ffffffffffffffda RBX: 00007fa9c6c25fa0 RCX: 00007fa9c69ace59 [ 379.076821][T13030] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000003 [ 379.076827][T13030] RBP: 00007fa9c4c06090 R08: 0000000000000001 R09: 0000000000000000 [ 379.076833][T13030] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 379.076839][T13030] R13: 00007fa9c6c26038 R14: 00007fa9c6c25fa0 R15: 00007fffcce49f88 [ 379.076854][T13030] [ 379.076875][T13030] socket: no more sockets [ 379.469417][ T5348] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 379.627339][ T5348] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.627359][ T5348] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.627380][ T5348] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 379.627392][ T5348] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.665069][ T5348] usb 6-1: config 0 descriptor?? [ 379.739505][ T32] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 379.849404][ T5720] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 379.897777][ T32] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 379.897796][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.897806][ T32] usb 2-1: Product: syz [ 379.897813][ T32] usb 2-1: Manufacturer: syz [ 379.897820][ T32] usb 2-1: SerialNumber: syz [ 379.905573][ T32] usb 2-1: config 0 descriptor?? [ 379.911707][ T32] ch341 2-1:0.0: ch341-uart converter detected [ 380.021512][ T5720] usb 5-1: config 2 has an invalid interface number: 228 but max is 0 [ 380.021603][ T5720] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 380.021622][ T5720] usb 5-1: config 2 has no interface number 0 [ 380.021661][ T5720] usb 5-1: config 2 interface 228 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 380.021687][ T5720] usb 5-1: config 2 interface 228 has no altsetting 0 [ 380.024593][ T5720] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 380.024623][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.024648][ T5720] usb 5-1: Product: syz [ 380.024661][ T5720] usb 5-1: Manufacturer: syz [ 380.024674][ T5720] usb 5-1: SerialNumber: syz [ 380.142236][ T32] usb 2-1: failed to receive control message: -32 [ 380.142272][ T32] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 380.165907][ T32] usb 2-1: USB disconnect, device number 40 [ 380.192876][ T32] ch341 2-1:0.0: device disconnected [ 380.267329][ T5348] hid-steam 0003:28DE:1142.000A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 380.278002][T13034] FAULT_INJECTION: forcing a failure. [ 380.278002][T13034] name failslab, interval 1, probability 0, space 0, times 0 [ 380.278038][T13034] CPU: 1 UID: 0 PID: 13034 Comm: syz.5.2928 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 380.278059][T13034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 380.278069][T13034] Call Trace: [ 380.278077][T13034] [ 380.278084][T13034] dump_stack_lvl+0xe8/0x150 [ 380.278111][T13034] should_fail_ex+0x46b/0x600 [ 380.278138][T13034] should_failslab+0xa8/0x100 [ 380.278159][T13034] kmem_cache_alloc_noprof+0x87/0x680 [ 380.278179][T13034] ? alloc_empty_file+0x5b/0x1d0 [ 380.278206][T13034] alloc_empty_file+0x5b/0x1d0 [ 380.278230][T13034] path_openat+0x11b/0x3960 [ 380.278257][T13034] ? try_to_take_rt_mutex+0x840/0xb00 [ 380.278277][T13034] ? arch_stack_walk+0xfb/0x150 [ 380.278309][T13034] ? __lock_acquire+0x6b5/0x2d10 [ 380.278335][T13034] ? __pfx_path_openat+0x10/0x10 [ 380.278358][T13034] ? kasan_save_track+0x4f/0x80 [ 380.278373][T13034] ? kasan_save_track+0x3e/0x80 [ 380.278387][T13034] ? __kasan_slab_alloc+0x6c/0x80 [ 380.278412][T13034] ? do_raw_spin_lock+0x12b/0x2f0 [ 380.278438][T13034] do_file_open+0x23e/0x4a0 [ 380.278457][T13034] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 380.278482][T13034] ? __pfx_do_file_open+0x10/0x10 [ 380.278499][T13034] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 380.278533][T13034] ? alloc_fd+0x679/0x6f0 [ 380.278563][T13034] do_sys_openat2+0x115/0x200 [ 380.278582][T13034] ? __pfx_do_sys_openat2+0x10/0x10 [ 380.278606][T13034] ? ksys_write+0x248/0x270 [ 380.278627][T13034] ? __pfx_ksys_write+0x10/0x10 [ 380.278650][T13034] __x64_sys_openat+0x138/0x170 [ 380.278678][T13034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.278700][T13034] do_syscall_64+0x15f/0x560 [ 380.278721][T13034] ? trace_irq_disable+0x3b/0x140 [ 380.278739][T13034] ? clear_bhb_loop+0x40/0x90 [ 380.278759][T13034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.278776][T13034] RIP: 0033:0x7fa9c696d68e [ 380.278793][T13034] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 380.278807][T13034] RSP: 002b:00007fa9c4c05b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 380.278826][T13034] RAX: ffffffffffffffda RBX: 00007fa9c4c066c0 RCX: 00007fa9c696d68e [ 380.278839][T13034] RDX: 0000000000000800 RSI: 00007fa9c4c05c00 RDI: ffffffffffffff9c [ 380.278850][T13034] RBP: 00007fa9c4c05c00 R08: 0000000000000000 R09: 0000000000000000 [ 380.278860][T13034] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 380.278871][T13034] R13: 00007fa9c6c26038 R14: 00007fa9c6c25fa0 R15: 00007fffcce49f88 [ 380.278899][T13034] [ 380.329659][ T5348] hid-steam 0003:28DE:1142.000A: Steam wireless receiver connected [ 380.598863][ T5720] ims_pcu 5-1:2.228: probe with driver ims_pcu failed with error -22 [ 380.628531][ T5348] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 380.628799][ T5720] usb 5-1: USB disconnect, device number 39 [ 380.747752][ T5348] usb 6-1: USB disconnect, device number 57 [ 380.800190][T13048] 9p: Bad value for 'rfdno' [ 381.026410][ T5348] hid-steam 0003:28DE:1142.000A: Steam wireless receiver disconnected [ 381.359556][ T5348] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 381.459476][ T32] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 381.521147][ T5348] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.521179][ T5348] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.521208][ T5348] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 381.521220][ T5348] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.528313][ T5348] usb 6-1: config 0 descriptor?? [ 381.627322][ T32] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 381.627352][ T32] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 381.627367][ T32] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 381.672000][ T32] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 381.674997][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.675016][ T32] usb 2-1: Product: syz [ 381.675023][ T32] usb 2-1: Manufacturer: syz [ 381.675030][ T32] usb 2-1: SerialNumber: syz [ 381.938441][T13058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.941678][T13058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.087707][T13062] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 382.087811][T13062] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 382.157337][ T5348] hid-steam 0003:28DE:1142.000C: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 382.235249][ T5348] hid-steam 0003:28DE:1142.000C: Steam wireless receiver connected [ 382.435417][ T5348] hid-steam 0003:28DE:1142.000D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 382.533854][ T5348] usb 6-1: USB disconnect, device number 58 [ 382.579933][T13073] ucma_write: process 1062 (syz.4.2943) changed security contexts after opening file descriptor, this is not allowed. [ 382.765879][T13058] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 382.765979][T13058] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 382.806784][ T5348] hid-steam 0003:28DE:1142.000C: Steam wireless receiver disconnected [ 382.847527][T13077] binder: 13074:13077 ioctl c0306201 200000000640 returned -22 [ 382.968035][ T32] cdc_ncm 2-1:1.0: failed to get mac address [ 383.181707][ T32] cdc_ncm 2-1:1.0: bind() failure [ 383.197736][ T32] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 383.199039][ T32] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 383.213154][ T32] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 383.228782][ T32] usb 2-1: USB disconnect, device number 41 [ 383.915606][T13098] dvmrp0: entered allmulticast mode [ 384.115572][T13108] FAULT_INJECTION: forcing a failure. [ 384.115572][T13108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.115606][T13108] CPU: 0 UID: 0 PID: 13108 Comm: syz.5.2957 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 384.115625][T13108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 384.115632][T13108] Call Trace: [ 384.115637][T13108] [ 384.115642][T13108] dump_stack_lvl+0xe8/0x150 [ 384.115659][T13108] should_fail_ex+0x46b/0x600 [ 384.115676][T13108] _copy_from_user+0x2d/0xb0 [ 384.115688][T13108] kstrtouint_from_user+0xd6/0x180 [ 384.115703][T13108] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 384.115725][T13108] proc_fail_nth_write+0x8e/0x210 [ 384.115737][T13108] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 384.115751][T13108] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 384.115762][T13108] vfs_write+0x2a3/0xba0 [ 384.115780][T13108] ? __pfx_vfs_write+0x10/0x10 [ 384.115793][T13108] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 384.115807][T13108] ? lockdep_hardirqs_on+0x7a/0x110 [ 384.115820][T13108] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 384.115833][T13108] ? mutex_lock_nested+0x152/0x1d0 [ 384.115843][T13108] ? fdget_pos+0x252/0x320 [ 384.115857][T13108] ksys_write+0x156/0x270 [ 384.115870][T13108] ? __pfx_ksys_write+0x10/0x10 [ 384.115886][T13108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.115896][T13108] do_syscall_64+0x15f/0x560 [ 384.115910][T13108] ? trace_irq_disable+0x3b/0x140 [ 384.115921][T13108] ? clear_bhb_loop+0x40/0x90 [ 384.115933][T13108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.115943][T13108] RIP: 0033:0x7fa9c696d68e [ 384.115953][T13108] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 384.115962][T13108] RSP: 002b:00007fa9c4c05fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 384.115973][T13108] RAX: ffffffffffffffda RBX: 00007fa9c4c066c0 RCX: 00007fa9c696d68e [ 384.115980][T13108] RDX: 0000000000000001 RSI: 00007fa9c4c060a0 RDI: 0000000000000004 [ 384.115986][T13108] RBP: 00007fa9c4c06090 R08: 0000000000000000 R09: 0000000000000000 [ 384.115992][T13108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.115998][T13108] R13: 00007fa9c6c26038 R14: 00007fa9c6c25fa0 R15: 00007fffcce49f88 [ 384.116014][T13108] [ 385.750709][ T5720] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 385.859417][ T5722] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 385.891176][ T5720] usb 5-1: device descriptor read/64, error -71 [ 385.929691][ T10] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 385.989568][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 386.045126][ T5722] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 386.045177][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.045187][ T5722] usb 2-1: Product: syz [ 386.045194][ T5722] usb 2-1: Manufacturer: syz [ 386.045201][ T5722] usb 2-1: SerialNumber: syz [ 386.048837][ T5722] usb 2-1: config 0 descriptor?? [ 386.061701][ T5722] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 386.067760][ T5722] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 386.068583][ T5722] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 386.068635][ T5722] usb 2-1: media controller created [ 386.144961][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 386.169475][ T10] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1987, setting to 64 [ 386.169506][ T10] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 386.169526][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 386.174830][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=b305, bcdDevice= 0.40 [ 386.174858][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.174876][ T10] usb 6-1: Product: 耺랻ꑓ빝﨓놵퇿ꖚ핒徆빘䦖잡주Œ墵 [ 386.174891][ T10] usb 6-1: Manufacturer: ᬌ낖ꨃꭷ̤月噎猜䨍짰첼╔ꊉ釖ꬢ탯൅ꢚ仗欎腩⢹ෘ贷佻灶뭒啒Ｖ넓໬럖ୀ냜꾸첂먳ī쫕騨䇑ꈱ [ 386.174910][ T10] usb 6-1: SerialNumber: Ё [ 386.181354][T13143] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 386.189610][ T5720] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 386.228671][ T5722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 386.335151][ T5720] usb 5-1: device descriptor read/64, error -71 [ 386.458835][ T5720] usb usb5-port1: attempt power cycle [ 386.494808][T13143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.495367][T13143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.641614][ T5722] DVB: Unable to find symbol mt352_attach() [ 386.691635][ T5722] DVB: Unable to find symbol nxt6000_attach() [ 386.691646][ T5722] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 386.735695][ T5722] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 386.835315][ T5720] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 386.855365][ T5720] usb 5-1: device descriptor read/8, error -71 [ 386.857406][ T5722] dvb-usb: schedule remote query interval to 1000 msecs. [ 386.857422][ T5722] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 386.857434][ T5722] dvb-usb: bulk message failed: -22 (7/0) [ 386.857442][ T5722] dvb-usb: bulk message failed: -22 (7/0) [ 386.909065][ T5722] usb 2-1: USB disconnect, device number 42 [ 387.125843][ T5720] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 387.153823][ T5720] usb 5-1: device descriptor read/8, error -71 [ 387.262022][ T5720] usb usb5-port1: unable to enumerate USB device [ 387.312774][ T10] usbhid 6-1:1.0: can't add hid device: -71 [ 387.312889][ T10] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 387.327827][ T10] usb 6-1: USB disconnect, device number 59 [ 387.445989][ T5722] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 387.839506][ T5722] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 388.004890][ T5722] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 388.004921][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.004939][ T5722] usb 2-1: Product: syz [ 388.004951][ T5722] usb 2-1: Manufacturer: syz [ 388.004961][ T5722] usb 2-1: SerialNumber: syz [ 388.007738][ T5722] usb 2-1: config 0 descriptor?? [ 388.058826][ T5722] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 388.086154][ T5722] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 388.086761][ T5722] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 388.086795][ T5722] usb 2-1: media controller created [ 388.103814][ T5722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 388.171309][ T5722] DVB: Unable to find symbol mt352_attach() [ 388.218908][ T5722] DVB: Unable to find symbol nxt6000_attach() [ 388.218925][ T5722] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 388.226178][ T5722] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 388.251803][ T5722] dvb-usb: schedule remote query interval to 1000 msecs. [ 388.251828][ T5722] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 388.251845][ T5722] dvb-usb: bulk message failed: -22 (7/0) [ 388.251860][ T5722] dvb-usb: bulk message failed: -22 (7/0) [ 388.262846][ T5722] usb 2-1: USB disconnect, device number 43 [ 388.392390][ T5722] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 388.415817][ T5348] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 388.564551][ T5348] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 388.564570][ T5348] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.564580][ T5348] usb 6-1: Product: syz [ 388.564586][ T5348] usb 6-1: Manufacturer: syz [ 388.564593][ T5348] usb 6-1: SerialNumber: syz [ 388.567510][ T5348] usb 6-1: config 0 descriptor?? [ 388.606996][ T5348] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 388.624115][ T5348] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 388.624824][ T5348] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 388.624864][ T5348] usb 6-1: media controller created [ 388.637339][ T5348] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 388.694052][ T5348] DVB: Unable to find symbol mt352_attach() [ 388.719513][ T5348] DVB: Unable to find symbol nxt6000_attach() [ 388.719525][ T5348] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 388.722238][ T5348] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input13 [ 388.724155][ T5348] dvb-usb: schedule remote query interval to 1000 msecs. [ 388.724180][ T5348] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 388.724195][ T5348] dvb-usb: bulk message failed: -22 (7/0) [ 388.724209][ T5348] dvb-usb: bulk message failed: -22 (7/0) [ 388.801210][T13170] FAULT_INJECTION: forcing a failure. [ 388.801210][T13170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.801242][T13170] CPU: 1 UID: 0 PID: 13170 Comm: syz.5.2984 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 388.801262][T13170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 388.801272][T13170] Call Trace: [ 388.801279][T13170] [ 388.801287][T13170] dump_stack_lvl+0xe8/0x150 [ 388.801313][T13170] should_fail_ex+0x46b/0x600 [ 388.801340][T13170] _copy_from_user+0x2d/0xb0 [ 388.801360][T13170] i2cdev_ioctl+0x129/0x890 [ 388.801383][T13170] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 388.801404][T13170] ? __fget_files+0x2a/0x420 [ 388.801418][T13170] ? __fget_files+0x3a6/0x420 [ 388.801436][T13170] ? bpf_lsm_file_ioctl+0x9/0x20 [ 388.801462][T13170] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 388.801482][T13170] __se_sys_ioctl+0xff/0x170 [ 388.801500][T13170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.801517][T13170] do_syscall_64+0x15f/0x560 [ 388.801538][T13170] ? trace_irq_disable+0x3b/0x140 [ 388.801556][T13170] ? clear_bhb_loop+0x40/0x90 [ 388.801577][T13170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.801594][T13170] RIP: 0033:0x7fa9c69ace59 [ 388.801610][T13170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.801625][T13170] RSP: 002b:00007fa9c4c06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.801641][T13170] RAX: ffffffffffffffda RBX: 00007fa9c6c25fa0 RCX: 00007fa9c69ace59 [ 388.801654][T13170] RDX: 0000200000000140 RSI: 0000000000000720 RDI: 0000000000000004 [ 388.801675][T13170] RBP: 00007fa9c4c06090 R08: 0000000000000000 R09: 0000000000000000 [ 388.801685][T13170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.801694][T13170] R13: 00007fa9c6c26038 R14: 00007fa9c6c25fa0 R15: 00007fffcce49f88 [ 388.801718][T13170] [ 388.810299][ T5348] usb 6-1: USB disconnect, device number 60 [ 388.999444][ T5767] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 389.108039][T13178] FAULT_INJECTION: forcing a failure. [ 389.108039][T13178] name failslab, interval 1, probability 0, space 0, times 0 [ 389.108070][T13178] CPU: 0 UID: 0 PID: 13178 Comm: syz.1.2987 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 389.108091][T13178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 389.108101][T13178] Call Trace: [ 389.108108][T13178] [ 389.108116][T13178] dump_stack_lvl+0xe8/0x150 [ 389.108143][T13178] should_fail_ex+0x46b/0x600 [ 389.108172][T13178] should_failslab+0xa8/0x100 [ 389.108193][T13178] __kmalloc_cache_noprof+0x84/0x690 [ 389.108214][T13178] ? __se_sys_mount+0x166/0x420 [ 389.108228][T13178] ? memdup_user+0x99/0xd0 [ 389.108254][T13178] __se_sys_mount+0x166/0x420 [ 389.108273][T13178] ? __pfx___se_sys_mount+0x10/0x10 [ 389.108293][T13178] ? __x64_sys_mount+0x20/0xc0 [ 389.108307][T13178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.108325][T13178] do_syscall_64+0x15f/0x560 [ 389.108345][T13178] ? trace_irq_disable+0x3b/0x140 [ 389.108361][T13178] ? clear_bhb_loop+0x40/0x90 [ 389.108383][T13178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.108400][T13178] RIP: 0033:0x7efcea2cce59 [ 389.108416][T13178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.108431][T13178] RSP: 002b:00007efce851e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 389.108450][T13178] RAX: ffffffffffffffda RBX: 00007efcea545fa0 RCX: 00007efcea2cce59 [ 389.108463][T13178] RDX: 0000200000002100 RSI: 0000200000000000 RDI: 0000000000000000 [ 389.108475][T13178] RBP: 00007efce851e090 R08: 0000200000002140 R09: 0000000000000000 [ 389.108486][T13178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.108497][T13178] R13: 00007efcea546038 R14: 00007efcea545fa0 R15: 00007ffe47e40988 [ 389.108525][T13178] [ 389.179367][ T5767] usb 5-1: Using ep0 maxpacket: 8 [ 389.190941][ T5767] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.190975][ T5767] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 389.190998][ T5767] usb 5-1: config 0 interface 0 has no altsetting 0 [ 389.191031][ T5767] usb 5-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 389.191050][ T5767] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.206047][ T5767] usb 5-1: config 0 descriptor?? [ 389.682097][ T5767] usbhid 5-1:0.0: can't add hid device: -71 [ 389.682201][ T5767] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 389.688414][ T5348] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 389.699699][ T5767] usb 5-1: USB disconnect, device number 44 [ 390.169541][ T5722] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 390.240864][T13197] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2995'. [ 390.319981][ T5722] usb 2-1: Using ep0 maxpacket: 32 [ 390.336497][ T5722] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 390.336527][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 390.336551][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 390.336570][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 390.336591][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 390.342243][ T5722] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 390.342271][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.342289][ T5722] usb 2-1: Product: syz [ 390.342301][ T5722] usb 2-1: Manufacturer: syz [ 390.342314][ T5722] usb 2-1: SerialNumber: syz [ 390.355564][ T5722] usb 2-1: config 0 descriptor?? [ 390.391117][ T824] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 390.487034][T13205] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2999'. [ 390.602567][ T824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.602598][ T824] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 390.602647][ T824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.612628][ T824] usb 6-1: config 0 descriptor?? [ 390.660341][ T5722] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 390.662865][ T5722] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 390.664674][ T5722] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 390.665132][ T5722] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 390.667000][ T5722] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 390.667332][ T5722] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 390.667638][ T5722] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 390.667933][ T5722] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 390.668241][ T5722] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 390.669159][ T5722] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 390.671006][ T5722] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 390.672090][ T5722] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 390.674176][ T5722] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 390.674681][ T5722] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 390.675178][ T5722] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 390.689027][ T5722] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 390.690612][ T5722] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 390.691507][ T5722] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 390.692315][ T5722] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 390.692973][ T5722] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 390.693239][ T5722] input input14: Timeout waiting for response from device. [ 390.730732][ T5722] usb 2-1: USB disconnect, device number 44 [ 390.819557][ T5767] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 390.971388][ T5767] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.971421][ T5767] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.971457][ T5767] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 390.971477][ T5767] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.989464][ T5767] usb 5-1: config 0 descriptor?? [ 391.436175][ T5767] hid-steam 0003:28DE:1142.000E: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 391.467480][ T824] usbhid 6-1:0.0: can't add hid device: -71 [ 391.467607][ T824] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 391.472208][ T824] usb 6-1: USB disconnect, device number 61 [ 391.489416][ T5767] hid-steam 0003:28DE:1142.000E: Steam wireless receiver connected [ 391.528961][ T5767] hid-steam 0003:28DE:1142.000F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 391.539384][ T5722] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 391.597733][ T10] usb 5-1: USB disconnect, device number 45 [ 391.657682][ T10] hid-steam 0003:28DE:1142.000E: Steam wireless receiver disconnected [ 391.689963][ T5722] usb 2-1: Using ep0 maxpacket: 8 [ 391.691758][ T5722] usb 2-1: New USB device found, idVendor=0e41, idProduct=414b, bcdDevice=52.ec [ 391.691774][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.694694][ T5722] usb 2-1: config 0 descriptor?? [ 391.702691][ T5722] snd_usb_podhd 2-1:0.0: Line 6 POD X3 LIVE found [ 391.702716][ T5722] usb 2-1: selecting invalid altsetting 1 [ 391.702730][ T5722] snd_usb_podhd 2-1:0.0: set_interface failed [ 391.702986][ T5722] snd_usb_podhd 2-1:0.0: Line 6 POD X3 LIVE now disconnected [ 391.703168][ T5722] snd_usb_podhd 2-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 392.003123][ T5767] usb 2-1: USB disconnect, device number 45 [ 392.259487][ T10] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 392.379601][ T5348] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 392.424462][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 392.424491][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.424509][ T10] usb 6-1: Product: syz [ 392.424519][ T10] usb 6-1: Manufacturer: syz [ 392.424526][ T10] usb 6-1: SerialNumber: syz [ 392.545690][ T5348] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 392.545719][ T5348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.545737][ T5348] usb 5-1: Product: syz [ 392.545749][ T5348] usb 5-1: Manufacturer: syz [ 392.545762][ T5348] usb 5-1: SerialNumber: syz [ 392.552135][ T5348] usb 5-1: config 0 descriptor?? [ 392.601967][ T5348] ch341 5-1:0.0: ch341-uart converter detected [ 392.806230][ T5348] usb 5-1: failed to receive control message: -32 [ 392.806282][ T5348] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 392.818236][ T5348] usb 5-1: USB disconnect, device number 46 [ 392.866564][ T5348] ch341 5-1:0.0: device disconnected [ 392.879738][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 392.879798][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 393.029587][ T5767] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 393.138363][T13225] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3008'. [ 393.184426][ T5767] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 393.184456][ T5767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.184480][ T5767] usb 2-1: Product: syz [ 393.184498][ T5767] usb 2-1: Manufacturer: syz [ 393.184511][ T5767] usb 2-1: SerialNumber: syz [ 393.230324][ T5767] usb 2-1: config 0 descriptor?? [ 393.236687][ T5767] ch341 2-1:0.0: ch341-uart converter detected [ 393.452787][ T5767] usb 2-1: failed to receive control message: -32 [ 393.452841][ T5767] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 393.475199][ T5767] usb 2-1: USB disconnect, device number 46 [ 393.484373][ T5767] ch341 2-1:0.0: device disconnected [ 393.707520][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 393.707578][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 393.742302][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 393.780739][ T10] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 393.830900][ T5706] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 393.982084][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.982132][ T5706] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 393.982154][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.988222][ T5706] usb 5-1: config 0 descriptor?? [ 394.289463][ T824] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 394.439399][ T824] usb 2-1: Using ep0 maxpacket: 8 [ 394.441802][ T824] usb 2-1: New USB device found, idVendor=0e41, idProduct=414b, bcdDevice=52.ec [ 394.441831][ T824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.446128][ T824] usb 2-1: config 0 descriptor?? [ 394.483211][ T824] snd_usb_podhd 2-1:0.0: Line 6 POD X3 LIVE found [ 394.483236][ T824] usb 2-1: selecting invalid altsetting 1 [ 394.483250][ T824] snd_usb_podhd 2-1:0.0: set_interface failed [ 394.483502][ T824] snd_usb_podhd 2-1:0.0: Line 6 POD X3 LIVE now disconnected [ 394.483693][ T824] snd_usb_podhd 2-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 394.736809][ T5767] usb 2-1: USB disconnect, device number 47 [ 394.822802][ T5706] usbhid 5-1:0.0: can't add hid device: -71 [ 394.822915][ T5706] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 394.828832][ T5706] usb 5-1: USB disconnect, device number 47 [ 395.494159][T13249] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3017'. [ 395.508628][ T5706] usb 6-1: USB disconnect, device number 62 [ 395.879569][ T824] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 395.969431][ T5706] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 396.044133][ T824] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 396.044163][ T824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.044179][ T824] usb 5-1: Product: syz [ 396.044298][ T824] usb 5-1: Manufacturer: syz [ 396.044305][ T824] usb 5-1: SerialNumber: syz [ 396.050097][ T824] usb 5-1: config 0 descriptor?? [ 396.069826][ T5767] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 396.116968][ T824] ch341 5-1:0.0: ch341-uart converter detected [ 396.124643][ T5706] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 396.124673][ T5706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.124690][ T5706] usb 6-1: Product: syz [ 396.124703][ T5706] usb 6-1: Manufacturer: syz [ 396.124715][ T5706] usb 6-1: SerialNumber: syz [ 396.135581][ T5706] usb 6-1: config 0 descriptor?? [ 396.144200][ T5706] ch341 6-1:0.0: ch341-uart converter detected [ 396.267621][ T5767] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.267729][ T5767] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 396.267752][ T5767] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.279891][ T5767] usb 2-1: config 0 descriptor?? [ 396.306689][ T824] usb 5-1: failed to receive control message: -32 [ 396.306743][ T824] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 396.346488][ T824] usb 5-1: USB disconnect, device number 48 [ 396.373392][ T5706] usb 6-1: failed to receive control message: -32 [ 396.373429][ T5706] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -32 [ 396.396538][ T824] ch341 5-1:0.0: device disconnected [ 396.438045][ T5706] usb 6-1: USB disconnect, device number 63 [ 396.528810][ T5706] ch341 6-1:0.0: device disconnected [ 397.048602][T13268] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3027'. [ 397.227620][ T5767] usbhid 2-1:0.0: can't add hid device: -71 [ 397.227739][ T5767] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 397.263633][ T5767] usb 2-1: USB disconnect, device number 48 [ 397.659514][ T5706] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 397.719490][ T824] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 397.809413][ T5706] usb 5-1: Using ep0 maxpacket: 32 [ 397.811430][ T5706] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 397.811449][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 397.811462][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 397.811473][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 397.811485][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 397.813534][ T5706] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 397.813560][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.813575][ T5706] usb 5-1: Product: syz [ 397.813589][ T5706] usb 5-1: Manufacturer: syz [ 397.813603][ T5706] usb 5-1: SerialNumber: syz [ 397.817027][ T5706] usb 5-1: config 0 descriptor?? [ 397.925666][ T824] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 397.925696][ T824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.925714][ T824] usb 6-1: Product: syz [ 397.925726][ T824] usb 6-1: Manufacturer: syz [ 397.925738][ T824] usb 6-1: SerialNumber: syz [ 397.965717][ T824] usb 6-1: config 0 descriptor?? [ 397.978499][ T824] ch341 6-1:0.0: ch341-uart converter detected [ 398.049438][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 398.191106][ T824] usb 6-1: failed to receive control message: -32 [ 398.191164][ T824] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 398.217947][ T824] usb 6-1: USB disconnect, device number 64 [ 398.233644][ T5706] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 398.233836][ T10] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 398.233859][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.233876][ T10] usb 2-1: Product: syz [ 398.233889][ T10] usb 2-1: Manufacturer: syz [ 398.233901][ T10] usb 2-1: SerialNumber: syz [ 398.234093][ T5706] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 398.236446][ T5706] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 398.237120][ T5706] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 398.237572][ T5706] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 398.238021][ T5706] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 398.238553][ T5706] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 398.241538][ T5706] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 398.243108][ T5706] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 398.244204][ T5706] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 398.244605][ T5706] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 398.244983][ T5706] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 398.245351][ T5706] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 398.245722][ T5706] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 398.246090][ T5706] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 398.246463][ T5706] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 398.246852][ T5706] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 398.247233][ T5706] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 398.247742][ T5706] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 398.247781][ T5706] input input15: Timeout waiting for response from device. [ 398.408559][ T824] ch341 6-1:0.0: device disconnected [ 398.422864][ T5706] usb 5-1: USB disconnect, device number 49 [ 398.426458][ T10] usb 2-1: config 0 descriptor?? [ 398.444940][ T10] ch341 2-1:0.0: ch341-uart converter detected [ 398.634962][ T10] usb 2-1: failed to receive control message: -121 [ 398.635020][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 398.837102][T13290] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3036'. [ 398.850746][ T824] usb 2-1: USB disconnect, device number 49 [ 398.863687][ T824] ch341 2-1:0.0: device disconnected [ 399.320215][ T824] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 399.396677][T13306] FAULT_INJECTION: forcing a failure. [ 399.396677][T13306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.396701][T13306] CPU: 0 UID: 0 PID: 13306 Comm: syz.1.3044 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 399.396713][T13306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 399.396720][T13306] Call Trace: [ 399.396724][T13306] [ 399.396729][T13306] dump_stack_lvl+0xe8/0x150 [ 399.396746][T13306] should_fail_ex+0x46b/0x600 [ 399.396762][T13306] _copy_from_user+0x2d/0xb0 [ 399.396774][T13306] copy_from_sockptr_offset+0x66/0xa0 [ 399.396787][T13306] do_tcp_getsockopt+0xda4/0x2940 [ 399.396803][T13306] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 399.396813][T13306] ? sock_recv_errqueue+0x580/0x590 [ 399.396827][T13306] ? aa_file_perm+0x192/0x15f0 [ 399.396841][T13306] ? aa_label_sk_perm+0x532/0x6e0 [ 399.396859][T13306] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 399.396874][T13306] ? _parse_integer_limit+0x192/0x1e0 [ 399.396891][T13306] ? __lock_acquire+0x6b5/0x2d10 [ 399.396910][T13306] ? __lock_acquire+0x6b5/0x2d10 [ 399.396930][T13306] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 399.396942][T13306] tcp_getsockopt+0x83/0x130 [ 399.396951][T13306] ? sock_recv_errqueue+0x580/0x590 [ 399.396961][T13306] ? sock_recv_errqueue+0x580/0x590 [ 399.396972][T13306] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 399.396983][T13306] do_sock_getsockopt+0x51d/0x7e0 [ 399.397000][T13306] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 399.397020][T13306] ? __fget_files+0x3a6/0x420 [ 399.397030][T13306] ? __fget_files+0x2a/0x420 [ 399.397042][T13306] __x64_sys_getsockopt+0x1aa/0x250 [ 399.397059][T13306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.397069][T13306] do_syscall_64+0x15f/0x560 [ 399.397083][T13306] ? trace_irq_disable+0x3b/0x140 [ 399.397094][T13306] ? clear_bhb_loop+0x40/0x90 [ 399.397106][T13306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.397115][T13306] RIP: 0033:0x7efcea2cce59 [ 399.397125][T13306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.397134][T13306] RSP: 002b:00007efce851e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 399.397145][T13306] RAX: ffffffffffffffda RBX: 00007efcea545fa0 RCX: 00007efcea2cce59 [ 399.397153][T13306] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 399.397159][T13306] RBP: 00007efce851e090 R08: 0000200000000480 R09: 0000000000000000 [ 399.397165][T13306] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 399.397171][T13306] R13: 00007efcea546038 R14: 00007efcea545fa0 R15: 00007ffe47e40988 [ 399.397186][T13306] [ 399.537844][ T10] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 399.552704][ T824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.552752][ T824] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 399.552770][ T824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.717056][ T824] usb 6-1: config 0 descriptor?? [ 399.769570][ T10] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 399.769599][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.769616][ T10] usb 5-1: Product: syz [ 399.769684][ T10] usb 5-1: Manufacturer: syz [ 399.769697][ T10] usb 5-1: SerialNumber: syz [ 399.787737][T13310] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3046'. [ 399.825434][ T10] usb 5-1: config 0 descriptor?? [ 399.839426][ T10] ch341 5-1:0.0: ch341-uart converter detected [ 400.036187][ T10] usb 5-1: failed to receive control message: -32 [ 400.036245][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 400.071860][ T10] usb 5-1: USB disconnect, device number 50 [ 400.090301][ T10] ch341 5-1:0.0: device disconnected [ 400.368146][T13321] syzkaller1: entered promiscuous mode [ 400.368163][T13321] syzkaller1: entered allmulticast mode [ 400.542349][ T824] usbhid 6-1:0.0: can't add hid device: -71 [ 400.542491][ T824] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 400.548417][ T824] usb 6-1: USB disconnect, device number 65 [ 400.839374][ T5722] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 400.929452][ T5706] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 401.013948][ T5722] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 401.013976][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.013987][ T5722] usb 5-1: Product: syz [ 401.013993][ T5722] usb 5-1: Manufacturer: syz [ 401.014000][ T5722] usb 5-1: SerialNumber: syz [ 401.018481][ T5722] usb 5-1: config 0 descriptor?? [ 401.064315][ T5722] ch341 5-1:0.0: ch341-uart converter detected [ 401.079782][ T5706] usb 2-1: Using ep0 maxpacket: 8 [ 401.087283][ T5706] usb 2-1: New USB device found, idVendor=0e41, idProduct=414b, bcdDevice=52.ec [ 401.087312][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.116891][ T5706] usb 2-1: config 0 descriptor?? [ 401.134285][ T5706] snd_usb_podhd 2-1:0.0: Line 6 POD X3 LIVE found [ 401.134308][ T5706] usb 2-1: selecting invalid altsetting 1 [ 401.134323][ T5706] snd_usb_podhd 2-1:0.0: set_interface failed [ 401.136157][ T5706] snd_usb_podhd 2-1:0.0: Line 6 POD X3 LIVE now disconnected [ 401.136367][ T5706] snd_usb_podhd 2-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 401.163595][T13328] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3054'. [ 401.177907][T13328] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3054'. [ 401.255770][T13328] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3054'. [ 401.261931][T13328] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3054'. [ 401.264024][T13328] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3054'. [ 401.275566][T13328] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3054'. [ 401.279181][T13328] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3054'. [ 401.281046][T13328] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3054'. [ 401.290576][T13328] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3054'. [ 401.292123][T13328] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3054'. [ 401.307687][ T5722] usb 5-1: failed to receive control message: -121 [ 401.307745][ T5722] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 401.492318][ T5722] usb 2-1: USB disconnect, device number 50 [ 401.513652][ T824] usb 5-1: USB disconnect, device number 51 [ 401.529055][ T824] ch341 5-1:0.0: device disconnected [ 402.095930][T13345] syzkaller1: entered promiscuous mode [ 402.095953][T13345] syzkaller1: entered allmulticast mode [ 402.221423][ T824] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 402.329456][ T5706] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 402.385445][ T824] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 402.385471][ T824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.385482][ T824] usb 6-1: Product: syz [ 402.385489][ T824] usb 6-1: Manufacturer: syz [ 402.385496][ T824] usb 6-1: SerialNumber: syz [ 402.413079][ T824] usb 6-1: config 0 descriptor?? [ 402.436701][ T824] ch341 6-1:0.0: ch341-uart converter detected [ 402.514131][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.514178][ T5706] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 402.514200][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.550861][ T5706] usb 5-1: config 0 descriptor?? [ 402.646231][ T824] usb 6-1: failed to receive control message: -32 [ 402.646286][ T824] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 402.710862][ T824] usb 6-1: USB disconnect, device number 66 [ 402.727926][ T824] ch341 6-1:0.0: device disconnected [ 402.996391][ T5706] usbhid 5-1:0.0: can't add hid device: -71 [ 402.996504][ T5706] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 403.041809][ T5706] usb 5-1: USB disconnect, device number 52 [ 403.121540][T13356] netlink: 'syz.3.3066': attribute type 1 has an invalid length. [ 403.121561][T13356] netlink: 'syz.3.3066': attribute type 2 has an invalid length. [ 403.209383][T13355] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 403.209414][T13355] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 403.248207][T13355] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 403.248233][T13355] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 403.841344][ T5722] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 403.999389][ T5722] usb 5-1: Using ep0 maxpacket: 8 [ 404.002300][ T5722] usb 5-1: New USB device found, idVendor=0e41, idProduct=414b, bcdDevice=52.ec [ 404.002328][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.023340][ T5722] usb 5-1: config 0 descriptor?? [ 404.043988][ T5722] snd_usb_podhd 5-1:0.0: Line 6 POD X3 LIVE found [ 404.044011][ T5722] usb 5-1: selecting invalid altsetting 1 [ 404.044025][ T5722] snd_usb_podhd 5-1:0.0: set_interface failed [ 404.044310][ T5722] snd_usb_podhd 5-1:0.0: Line 6 POD X3 LIVE now disconnected [ 404.044497][ T5722] snd_usb_podhd 5-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 404.059463][ T5706] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 404.215007][ T5706] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 404.215037][ T5706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.215054][ T5706] usb 6-1: Product: syz [ 404.215067][ T5706] usb 6-1: Manufacturer: syz [ 404.215080][ T5706] usb 6-1: SerialNumber: syz [ 404.249477][ T824] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 404.260197][ T5706] usb 6-1: config 0 descriptor?? [ 404.267191][ T5706] ch341 6-1:0.0: ch341-uart converter detected [ 404.409828][ T824] usb 2-1: Using ep0 maxpacket: 32 [ 404.417888][ T824] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 404.417919][ T824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 404.417941][ T824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 404.417962][ T824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 404.417984][ T824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 404.442179][ T824] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 404.442207][ T824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.442225][ T824] usb 2-1: Product: syz [ 404.442238][ T824] usb 2-1: Manufacturer: syz [ 404.442250][ T824] usb 2-1: SerialNumber: syz [ 404.498184][ T824] usb 2-1: config 0 descriptor?? [ 404.512216][ T5706] usb 6-1: failed to receive control message: -121 [ 404.512262][ T5706] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 404.535878][ T10] usb 5-1: USB disconnect, device number 53 [ 404.715193][ T5767] usb 6-1: USB disconnect, device number 67 [ 404.728046][ T5767] ch341 6-1:0.0: device disconnected [ 404.908675][ T824] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 404.909124][ T824] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 404.913666][ T824] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 404.914131][ T824] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 404.914560][ T824] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 404.914992][ T824] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 404.918487][ T824] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 404.918932][ T824] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 404.920188][ T824] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 404.920626][ T824] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 404.921051][ T824] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 404.921467][ T824] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 404.921879][ T824] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 404.922296][ T824] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 404.922708][ T824] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 404.923122][ T824] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 404.923718][ T824] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 404.924198][ T824] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 404.924663][ T824] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 404.924702][ T824] input input16: Timeout waiting for response from device. [ 404.946569][ T824] usb 2-1: USB disconnect, device number 51 [ 405.649427][ T824] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 405.709519][ T5706] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 405.815332][ T824] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 405.815361][ T824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.815380][ T824] usb 6-1: Product: syz [ 405.815392][ T824] usb 6-1: Manufacturer: syz [ 405.815404][ T824] usb 6-1: SerialNumber: syz [ 405.830465][ T824] usb 6-1: config 0 descriptor?? [ 405.868273][ T824] ch341 6-1:0.0: ch341-uart converter detected [ 405.878007][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.878054][ T5706] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 405.878066][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.916209][ T5706] usb 5-1: config 0 descriptor?? [ 406.120941][ T824] usb 6-1: failed to receive control message: -32 [ 406.120990][ T824] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 406.150611][ T5706] usbhid 5-1:0.0: can't add hid device: -71 [ 406.150832][ T5706] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 406.170343][ T5706] usb 5-1: USB disconnect, device number 54 [ 406.181131][ T824] usb 6-1: USB disconnect, device number 68 [ 406.236012][ T824] ch341 6-1:0.0: device disconnected [ 406.252053][T13443] __nla_validate_parse: 58 callbacks suppressed [ 406.252071][T13443] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3082'. [ 406.328974][T13445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3083'. [ 406.489391][ T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 406.639403][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 406.642226][ T10] usb 2-1: New USB device found, idVendor=0e41, idProduct=414b, bcdDevice=52.ec [ 406.642258][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.647017][ T10] usb 2-1: config 0 descriptor?? [ 406.655553][ T10] snd_usb_podhd 2-1:0.0: Line 6 POD X3 LIVE found [ 406.655576][ T10] usb 2-1: selecting invalid altsetting 1 [ 406.655590][ T10] snd_usb_podhd 2-1:0.0: set_interface failed [ 406.655841][ T10] snd_usb_podhd 2-1:0.0: Line 6 POD X3 LIVE now disconnected [ 406.656021][ T10] snd_usb_podhd 2-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 406.921001][ T5706] usb 2-1: USB disconnect, device number 52 [ 407.019451][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 407.179511][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 407.199882][ T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 407.199913][ T10] usb 5-1: config 179 has no interface number 0 [ 407.199953][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 407.199975][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 407.199998][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 407.200120][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 407.200135][ T10] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 407.200167][ T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 407.200180][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.207128][T13451] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 407.439614][T13451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.445352][T13451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.501679][T13465] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3091'. [ 407.654449][ T5767] usb 5-1: USB disconnect, device number 55 [ 407.654453][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 407.654510][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 407.819458][ T5706] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 407.859533][ T10] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 407.969479][ T5706] usb 2-1: Using ep0 maxpacket: 8 [ 407.971793][ T5706] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 407.971820][ T5706] usb 2-1: config 0 has no interface number 0 [ 407.971861][ T5706] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 407.971877][ T5706] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 407.971890][ T5706] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 407.971903][ T5706] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 407.971926][ T5706] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 407.971992][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.976692][ T5706] usb 2-1: config 0 descriptor?? [ 408.013610][ T10] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 408.013637][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.013655][ T10] usb 6-1: Product: syz [ 408.013667][ T10] usb 6-1: Manufacturer: syz [ 408.013679][ T10] usb 6-1: SerialNumber: syz [ 408.084024][ T10] usb 6-1: config 0 descriptor?? [ 408.095064][ T10] ch341 6-1:0.0: ch341-uart converter detected [ 408.131482][ T5706] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 408.377869][ T5706] usb 2-1: USB disconnect, device number 53 [ 408.403580][ T5706] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 408.459366][ T10] usb 6-1: failed to receive control message: -32 [ 408.459421][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 408.489047][ T823] usb 6-1: USB disconnect, device number 69 [ 408.510518][ T823] ch341 6-1:0.0: device disconnected [ 409.071255][ T823] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 409.219442][ T823] usb 5-1: Using ep0 maxpacket: 8 [ 409.223721][ T823] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 409.223763][ T823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.223781][ T823] usb 5-1: Product: syz [ 409.223794][ T823] usb 5-1: Manufacturer: syz [ 409.223806][ T823] usb 5-1: SerialNumber: syz [ 409.228376][ T823] usb 5-1: config 0 descriptor?? [ 409.339377][ T824] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 409.339399][ T5706] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 409.449703][T13491] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3101'. [ 409.482119][ T823] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 409.489473][ T5706] usb 2-1: device descriptor read/64, error -71 [ 409.512929][ T824] usb 6-1: Using ep0 maxpacket: 8 [ 409.562607][ T824] usb 6-1: New USB device found, idVendor=0e41, idProduct=414b, bcdDevice=52.ec [ 409.562652][ T824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.602801][ T824] usb 6-1: config 0 descriptor?? [ 409.623639][ T824] snd_usb_podhd 6-1:0.0: Line 6 POD X3 LIVE found [ 409.623663][ T824] usb 6-1: selecting invalid altsetting 1 [ 409.623675][ T824] snd_usb_podhd 6-1:0.0: set_interface failed [ 409.623892][ T824] snd_usb_podhd 6-1:0.0: Line 6 POD X3 LIVE now disconnected [ 409.624053][ T824] snd_usb_podhd 6-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 409.729415][ T5706] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 409.859446][ T5706] usb 2-1: device descriptor read/64, error -71 [ 409.884026][ T824] usb 6-1: USB disconnect, device number 70 [ 409.970439][ T5706] usb usb2-port1: attempt power cycle [ 410.103508][ T823] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 410.107475][ T823] usb 5-1: USB disconnect, device number 56 [ 410.309645][ T5706] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 410.330302][ T5706] usb 2-1: device descriptor read/8, error -71 [ 410.570942][ T5706] usb 2-1: new low-speed USB device number 57 using dummy_hcd [ 410.592747][ T5706] usb 2-1: device descriptor read/8, error -71 [ 410.699936][ T5706] usb usb2-port1: unable to enumerate USB device [ 411.099395][ T824] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 411.253766][ T824] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 411.253792][ T824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.253802][ T824] usb 5-1: Product: syz [ 411.253809][ T824] usb 5-1: Manufacturer: syz [ 411.253816][ T824] usb 5-1: SerialNumber: syz [ 411.296024][ T824] usb 5-1: config 0 descriptor?? [ 411.307765][ T824] ch341 5-1:0.0: ch341-uart converter detected [ 411.439598][ T5706] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 411.506076][ T824] usb 5-1: failed to receive control message: -32 [ 411.506129][ T824] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 411.532183][ T824] usb 5-1: USB disconnect, device number 57 [ 411.536859][ T824] ch341 5-1:0.0: device disconnected [ 411.589552][ T5620] Bluetooth: hci0: command 0x0406 tx timeout [ 411.614054][ T5706] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 411.614072][ T5706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.614082][ T5706] usb 6-1: Product: syz [ 411.614089][ T5706] usb 6-1: Manufacturer: syz [ 411.614096][ T5706] usb 6-1: SerialNumber: syz [ 411.618802][ T5706] usb 6-1: config 0 descriptor?? [ 411.657997][ T5706] ch341 6-1:0.0: ch341-uart converter detected [ 411.862836][ T5706] usb 6-1: failed to receive control message: -121 [ 411.862872][ T5706] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 412.106462][ T5767] usb 6-1: USB disconnect, device number 71 [ 412.123606][ T5767] ch341 6-1:0.0: device disconnected [ 412.156810][T11255] syz_tun (unregistering): left allmulticast mode [ 412.202381][T13516] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3110'. [ 412.499661][ T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 412.519647][ T5706] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 412.647831][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 412.701743][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 412.701966][ T5706] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 412.701985][ T5706] usb 5-1: config 0 has no interface number 0 [ 412.703811][ T10] usb 2-1: New USB device found, idVendor=0e41, idProduct=414b, bcdDevice=52.ec [ 412.703836][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.709155][ T10] usb 2-1: config 0 descriptor?? [ 412.712789][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 412.724482][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 412.774746][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 412.776561][ T5706] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 412.776587][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.776604][ T5706] usb 5-1: Product: syz [ 412.776615][ T5706] usb 5-1: Manufacturer: syz [ 412.776627][ T5706] usb 5-1: SerialNumber: syz [ 412.781276][ T5706] usb 5-1: config 0 descriptor?? [ 412.834520][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 412.849188][ T5706] usb 5-1: selecting invalid altsetting 1 [ 412.906094][ T10] snd_usb_podhd 2-1:0.0: Line 6 POD X3 LIVE found [ 412.906120][ T10] usb 2-1: selecting invalid altsetting 1 [ 412.906134][ T10] snd_usb_podhd 2-1:0.0: set_interface failed [ 412.906366][ T10] snd_usb_podhd 2-1:0.0: Line 6 POD X3 LIVE now disconnected [ 412.906533][ T10] snd_usb_podhd 2-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 412.962308][ T5706] dvb_ttusb_budget: ttusb_init_controller: error [ 412.962328][ T5706] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 413.087329][ T2924] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.168653][ T823] usb 2-1: USB disconnect, device number 58 [ 413.222431][ T5706] DVB: Unable to find symbol stv0299_attach() [ 413.330241][ T5706] DVB: Unable to find symbol tda8083_attach() [ 413.330252][ T5706] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 413.362785][ T5706] usb 5-1: USB disconnect, device number 58 [ 413.573510][T13536] usb usb8: usbfs: process 13536 (syz.5.3117) did not claim interface 0 before use [ 413.573545][T13536] FAULT_INJECTION: forcing a failure. [ 413.573545][T13536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.573572][T13536] CPU: 0 UID: 0 PID: 13536 Comm: syz.5.3117 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 413.573592][T13536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 413.573602][T13536] Call Trace: [ 413.573609][T13536] [ 413.573617][T13536] dump_stack_lvl+0xe8/0x150 [ 413.573644][T13536] should_fail_ex+0x46b/0x600 [ 413.573673][T13536] _copy_to_user+0x31/0xb0 [ 413.573702][T13536] simple_read_from_buffer+0xe1/0x170 [ 413.573734][T13536] proc_fail_nth_read+0x1be/0x230 [ 413.573757][T13536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 413.573780][T13536] ? rw_verify_area+0x2ac/0x4e0 [ 413.573799][T13536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 413.573820][T13536] vfs_read+0x212/0xa80 [ 413.573847][T13536] ? __pfx_vfs_read+0x10/0x10 [ 413.573873][T13536] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 413.573897][T13536] ? lockdep_hardirqs_on+0x7a/0x110 [ 413.573919][T13536] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 413.573941][T13536] ? mutex_lock_nested+0x152/0x1d0 [ 413.573958][T13536] ? fdget_pos+0x252/0x320 [ 413.573984][T13536] ksys_read+0x156/0x270 [ 413.574005][T13536] ? __pfx_ksys_read+0x10/0x10 [ 413.574029][T13536] ? __pfx_usbdev_ioctl+0x10/0x10 [ 413.574056][T13536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.574075][T13536] do_syscall_64+0x15f/0x560 [ 413.574097][T13536] ? trace_irq_disable+0x3b/0x140 [ 413.574115][T13536] ? clear_bhb_loop+0x40/0x90 [ 413.574135][T13536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.574150][T13536] RIP: 0033:0x7fa9c696d68e [ 413.574166][T13536] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 413.574180][T13536] RSP: 002b:00007fa9c4c05fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 413.574196][T13536] RAX: ffffffffffffffda RBX: 00007fa9c4c066c0 RCX: 00007fa9c696d68e [ 413.574208][T13536] RDX: 000000000000000f RSI: 00007fa9c4c060a0 RDI: 0000000000000004 [ 413.574219][T13536] RBP: 00007fa9c4c06090 R08: 0000000000000000 R09: 0000000000000000 [ 413.574230][T13536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.574239][T13536] R13: 00007fa9c6c26038 R14: 00007fa9c6c25fa0 R15: 00007fffcce49f88 [ 413.574265][T13536] [ 413.945052][T13542] syzkaller1: entered promiscuous mode [ 413.945079][T13542] syzkaller1: entered allmulticast mode [ 413.980070][ T5706] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 414.155093][ T5706] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 414.155122][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.155141][ T5706] usb 5-1: Product: syz [ 414.155158][ T5706] usb 5-1: Manufacturer: syz [ 414.155169][ T5706] usb 5-1: SerialNumber: syz [ 414.167192][ T5706] usb 5-1: config 0 descriptor?? [ 414.201410][ T5706] ch341 5-1:0.0: ch341-uart converter detected [ 414.414849][ T5706] usb 5-1: failed to receive control message: -71 [ 414.414907][ T5706] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 414.443044][T13549] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3121'. [ 414.446582][ T5706] usb 5-1: USB disconnect, device number 59 [ 414.455297][ T5706] ch341 5-1:0.0: device disconnected [ 414.724561][ T2924] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.819525][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 414.949439][ T5625] Bluetooth: hci0: command tx timeout [ 414.979632][ T10] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 414.979661][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.979680][ T10] usb 2-1: Product: syz [ 414.979692][ T10] usb 2-1: Manufacturer: syz [ 414.979705][ T10] usb 2-1: SerialNumber: syz [ 415.001514][ T10] usb 2-1: config 0 descriptor?? [ 415.044449][ T10] ch341 2-1:0.0: ch341-uart converter detected [ 415.228340][ T10] usb 2-1: failed to receive control message: -121 [ 415.228399][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 415.263472][ T2924] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.351076][ T5767] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 415.411683][T13567] usb usb7: usbfs: process 13567 (syz.5.3127) did not claim interface 0 before use [ 415.455143][ T10] usb 2-1: USB disconnect, device number 59 [ 415.485801][ T10] ch341 2-1:0.0: device disconnected [ 415.510990][ T5767] usb 5-1: Using ep0 maxpacket: 8 [ 415.512591][ T5767] usb 5-1: New USB device found, idVendor=0e41, idProduct=414b, bcdDevice=52.ec [ 415.512616][ T5767] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.542060][ T5767] usb 5-1: config 0 descriptor?? [ 415.569655][ T5767] snd_usb_podhd 5-1:0.0: Line 6 POD X3 LIVE found [ 415.569680][ T5767] usb 5-1: selecting invalid altsetting 1 [ 415.569693][ T5767] snd_usb_podhd 5-1:0.0: set_interface failed [ 415.569961][ T5767] snd_usb_podhd 5-1:0.0: Line 6 POD X3 LIVE now disconnected [ 415.570156][ T5767] snd_usb_podhd 5-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 415.705366][ T5722] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 415.741591][ T2924] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.801286][ T10] usb 5-1: USB disconnect, device number 60 [ 415.874192][ T5722] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 415.874221][ T5722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.874238][ T5722] usb 6-1: Product: syz [ 415.874251][ T5722] usb 6-1: Manufacturer: syz [ 415.874263][ T5722] usb 6-1: SerialNumber: syz [ 415.903856][ T5722] usb 6-1: config 0 descriptor?? [ 416.025888][T13522] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.026265][T13522] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.026537][T13522] bridge_slave_0: entered allmulticast mode [ 416.054855][T13522] bridge_slave_0: entered promiscuous mode [ 416.078996][T13522] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.079934][T13522] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.080406][T13522] bridge_slave_1: entered allmulticast mode [ 416.085766][T13522] bridge_slave_1: entered promiscuous mode [ 416.093803][T13574] batadv0: entered promiscuous mode [ 416.093824][T13574] batadv0: entered allmulticast mode [ 416.135839][ T5722] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 416.201723][T13522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.208496][T13522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.274624][T13522] team0: Port device team_slave_0 added [ 416.280097][T13522] team0: Port device team_slave_1 added [ 416.327127][T13522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.327142][T13522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.327162][T13522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.332140][T13522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.332155][T13522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.332180][T13522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.463590][T13522] hsr_slave_0: entered promiscuous mode [ 416.465445][T13522] hsr_slave_1: entered promiscuous mode [ 416.466979][T13522] debugfs: 'hsr0' already exists in 'hsr' [ 416.467001][T13522] Cannot create hsr debugfs directory [ 416.896656][T13577] syzkaller1: entered promiscuous mode [ 416.896680][T13577] syzkaller1: entered allmulticast mode [ 417.029600][ T5625] Bluetooth: hci0: command tx timeout [ 417.996663][ T5722] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 418.021613][ T5722] usb 6-1: USB disconnect, device number 72 [ 418.045301][ T5706] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 418.139858][ T2924] bridge_slave_1: left allmulticast mode [ 418.139883][ T2924] bridge_slave_1: left promiscuous mode [ 418.140148][ T2924] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.204281][ T5706] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 418.204309][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.204328][ T5706] usb 2-1: Product: syz [ 418.204339][ T5706] usb 2-1: Manufacturer: syz [ 418.204346][ T5706] usb 2-1: SerialNumber: syz [ 418.207784][ T5706] usb 2-1: config 0 descriptor?? [ 418.249843][ T824] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 418.250567][ T5706] ch341 2-1:0.0: ch341-uart converter detected [ 418.301910][ T2924] bridge_slave_0: left allmulticast mode [ 418.302000][ T2924] bridge_slave_0: left promiscuous mode [ 418.302309][ T2924] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.400491][ T824] usb 5-1: device descriptor read/64, error -71 [ 418.434465][ T5706] usb 2-1: failed to receive control message: -32 [ 418.434523][ T5706] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 418.442335][ T5706] usb 2-1: USB disconnect, device number 60 [ 418.449140][ T5706] ch341 2-1:0.0: device disconnected [ 418.649679][ T824] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 418.789493][ T824] usb 5-1: device descriptor read/64, error -71 [ 418.899883][ T824] usb usb5-port1: attempt power cycle [ 419.110063][ T5625] Bluetooth: hci0: command tx timeout [ 419.249402][ T5722] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 419.249551][ T824] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 419.267873][ T2924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.284929][ T824] usb 5-1: device descriptor read/8, error -71 [ 419.340156][ T2924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.361887][ T2924] bond0 (unregistering): Released all slaves [ 419.509971][ T5722] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 419.510001][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.510018][ T5722] usb 2-1: Product: syz [ 419.510031][ T5722] usb 2-1: Manufacturer: syz [ 419.510043][ T5722] usb 2-1: SerialNumber: syz [ 419.532168][ T5722] usb 2-1: config 0 descriptor?? [ 419.545163][ T5722] ch341 2-1:0.0: ch341-uart converter detected [ 419.574734][ T824] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 419.595150][ T824] usb 5-1: device descriptor read/8, error -71 [ 419.710179][ T824] usb usb5-port1: unable to enumerate USB device [ 419.764782][ T5722] usb 2-1: failed to receive control message: -121 [ 419.764837][ T5722] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 419.975089][ T823] usb 2-1: USB disconnect, device number 61 [ 419.977857][ T823] ch341 2-1:0.0: device disconnected [ 420.461003][ T5277] 8021q: adding VLAN 0 to HW filter on device eth9 [ 420.809496][ T824] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 420.829980][T13522] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 420.887133][T13522] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 420.969661][ T824] usb 2-1: Using ep0 maxpacket: 8 [ 420.997457][ T824] usb 2-1: New USB device found, idVendor=0e41, idProduct=414b, bcdDevice=52.ec [ 420.997483][ T824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.017011][ T824] usb 2-1: config 0 descriptor?? [ 421.042574][ T824] snd_usb_podhd 2-1:0.0: Line 6 POD X3 LIVE found [ 421.042591][ T824] usb 2-1: selecting invalid altsetting 1 [ 421.042599][ T824] snd_usb_podhd 2-1:0.0: set_interface failed [ 421.068709][ T824] snd_usb_podhd 2-1:0.0: Line 6 POD X3 LIVE now disconnected [ 421.068841][ T824] snd_usb_podhd 2-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 421.182930][T13621] binder: 13620:13621 ioctl 40046205 0 returned -22 [ 421.189552][ T5625] Bluetooth: hci0: command tx timeout [ 421.241152][T13522] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 421.260379][ T824] usb 2-1: USB disconnect, device number 62 [ 421.293428][T13522] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.392626][T13522] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 421.514561][T13522] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.640112][T13522] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 421.720533][T13522] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.911139][ T2924] hsr_slave_0: left promiscuous mode [ 421.959981][ T2924] hsr_slave_1: left promiscuous mode [ 421.961201][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.961228][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.002798][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.002827][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.134512][ T2924] veth1_macvtap: left promiscuous mode [ 422.134614][ T2924] veth0_macvtap: left promiscuous mode [ 422.134885][ T2924] veth1_vlan: left promiscuous mode [ 422.135078][ T2924] veth0_vlan: left promiscuous mode [ 422.170848][ T5722] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 422.326721][ T5722] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 422.326953][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.326973][ T5722] usb 2-1: Product: syz [ 422.326985][ T5722] usb 2-1: Manufacturer: syz [ 422.327004][ T5722] usb 2-1: SerialNumber: syz [ 422.374580][ T5722] usb 2-1: config 0 descriptor?? [ 422.390699][ T5722] ch341 2-1:0.0: ch341-uart converter detected [ 422.632313][ T5722] usb 2-1: failed to receive control message: -32 [ 422.632363][ T5722] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 422.662160][ T5722] usb 2-1: USB disconnect, device number 63 [ 422.665609][ T5722] ch341 2-1:0.0: device disconnected [ 423.030245][ T2924] team0 (unregistering): Port device team_slave_1 removed [ 423.070197][ T2924] team0 (unregistering): Port device team_slave_0 removed [ 423.317981][ T5277] 8021q: adding VLAN 0 to HW filter on device eth10 [ 423.449416][ T823] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 423.624438][ T823] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 423.624465][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.624481][ T823] usb 2-1: Product: syz [ 423.624491][ T823] usb 2-1: Manufacturer: syz [ 423.624578][ T823] usb 2-1: SerialNumber: syz [ 423.674536][ T823] usb 2-1: config 0 descriptor?? [ 423.705532][ T823] ch341 2-1:0.0: ch341-uart converter detected [ 423.851008][T13672] FAULT_INJECTION: forcing a failure. [ 423.851008][T13672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.851040][T13672] CPU: 1 UID: 0 PID: 13672 Comm: syz.4.3147 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 423.851061][T13672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 423.851070][T13672] Call Trace: [ 423.851080][T13672] [ 423.851088][T13672] dump_stack_lvl+0xe8/0x150 [ 423.851114][T13672] should_fail_ex+0x46b/0x600 [ 423.851143][T13672] _copy_to_user+0x31/0xb0 [ 423.851164][T13672] simple_read_from_buffer+0xe1/0x170 [ 423.851196][T13672] proc_fail_nth_read+0x1be/0x230 [ 423.851218][T13672] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 423.851241][T13672] ? rw_verify_area+0x2ac/0x4e0 [ 423.851261][T13672] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 423.851281][T13672] vfs_read+0x212/0xa80 [ 423.851308][T13672] ? __pfx_vfs_read+0x10/0x10 [ 423.851330][T13672] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 423.851354][T13672] ? lockdep_hardirqs_on+0x7a/0x110 [ 423.851376][T13672] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 423.851398][T13672] ? mutex_lock_nested+0x152/0x1d0 [ 423.851415][T13672] ? fdget_pos+0x252/0x320 [ 423.851440][T13672] ksys_read+0x156/0x270 [ 423.851462][T13672] ? __pfx_ksys_read+0x10/0x10 [ 423.851479][T13672] ? __se_sys_kcmp+0x80e/0x950 [ 423.851510][T13672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.851530][T13672] do_syscall_64+0x15f/0x560 [ 423.851551][T13672] ? trace_irq_disable+0x3b/0x140 [ 423.851569][T13672] ? clear_bhb_loop+0x40/0x90 [ 423.851590][T13672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.851608][T13672] RIP: 0033:0x7f1be803d68e [ 423.851624][T13672] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 423.851637][T13672] RSP: 002b:00007f1be62cdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 423.851656][T13672] RAX: ffffffffffffffda RBX: 00007f1be62ce6c0 RCX: 00007f1be803d68e [ 423.851668][T13672] RDX: 000000000000000f RSI: 00007f1be62ce0a0 RDI: 0000000000000003 [ 423.851678][T13672] RBP: 00007f1be62ce090 R08: 0000000000000000 R09: 0000000000000000 [ 423.851687][T13672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.851697][T13672] R13: 00007f1be82f6038 R14: 00007f1be82f5fa0 R15: 00007ffdfc20bf38 [ 423.851723][T13672] [ 423.997254][ T823] usb 2-1: failed to receive control message: -121 [ 423.997313][ T823] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 424.078760][T13522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.203583][ T5720] usb 2-1: USB disconnect, device number 64 [ 424.207769][ T5720] ch341 2-1:0.0: device disconnected [ 424.218175][T13522] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.299130][ T1063] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.306860][ T1063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.421700][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.421903][ T1063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.069450][ T5348] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 425.262350][ T5348] usb 5-1: Using ep0 maxpacket: 8 [ 425.274853][ T5277] 8021q: adding VLAN 0 to HW filter on device eth11 [ 425.276074][ T5348] usb 5-1: New USB device found, idVendor=0e41, idProduct=414b, bcdDevice=52.ec [ 425.276101][ T5348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.370975][ T5720] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 425.403359][ T5348] usb 5-1: config 0 descriptor?? [ 425.426383][ T5348] snd_usb_podhd 5-1:0.0: Line 6 POD X3 LIVE found [ 425.426409][ T5348] usb 5-1: selecting invalid altsetting 1 [ 425.426423][ T5348] snd_usb_podhd 5-1:0.0: set_interface failed [ 425.426688][ T5348] snd_usb_podhd 5-1:0.0: Line 6 POD X3 LIVE now disconnected [ 425.426879][ T5348] snd_usb_podhd 5-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 425.575509][ T5720] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 425.575539][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.575556][ T5720] usb 2-1: Product: syz [ 425.575569][ T5720] usb 2-1: Manufacturer: syz [ 425.575582][ T5720] usb 2-1: SerialNumber: syz [ 425.667984][ T5720] usb 2-1: config 0 descriptor?? [ 425.674687][ T823] usb 5-1: USB disconnect, device number 65 [ 425.705378][ T5720] ch341 2-1:0.0: ch341-uart converter detected [ 425.750657][ T5348] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 425.907476][ T5720] usb 2-1: failed to receive control message: -32 [ 425.907530][ T5720] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 425.928271][ T5348] usb 6-1: Using ep0 maxpacket: 32 [ 425.937057][ T5348] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 425.937110][ T5348] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 425.937133][ T5348] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 425.937154][ T5348] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 425.946002][ T5720] usb 2-1: USB disconnect, device number 65 [ 425.954025][ T5720] ch341 2-1:0.0: device disconnected [ 425.987112][ T5348] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 425.987139][ T5348] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.987157][ T5348] usb 6-1: Product: syz [ 425.987168][ T5348] usb 6-1: Manufacturer: syz [ 425.987179][ T5348] usb 6-1: SerialNumber: syz [ 426.074123][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 426.126020][ T5348] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input17 [ 426.339376][ T5348] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 426.339395][ T5348] (id 0x00) [ 426.449333][ T5348] rc_core: IR keymap rc-imon-pad not found [ 426.449352][ T5348] Registered IR keymap rc-empty [ 426.480582][ T5348] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 426.480603][ T5348] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 426.553899][ T5348] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 426.571183][ T5348] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input18 [ 426.606613][ T5348] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:73> initialized [ 426.902437][T13522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.940526][ T5720] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 427.001109][ T5277] 8021q: adding VLAN 0 to HW filter on device eth12 [ 427.097917][ T5720] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 427.097946][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.097962][ T5720] usb 2-1: Product: syz [ 427.097974][ T5720] usb 2-1: Manufacturer: syz [ 427.097985][ T5720] usb 2-1: SerialNumber: syz [ 427.130024][ T5720] usb 2-1: config 0 descriptor?? [ 427.150107][ T5720] ch341 2-1:0.0: ch341-uart converter detected [ 427.368835][ T5720] usb 2-1: failed to receive control message: -121 [ 427.368894][ T5720] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 427.514132][T13752] sctp: [Deprecated]: syz.5.3155 (pid 13752) Use of struct sctp_assoc_value in delayed_ack socket option. [ 427.514132][T13752] Use struct sctp_sack_info instead [ 427.581576][ T5706] usb 2-1: USB disconnect, device number 66 [ 427.587304][ T5706] ch341 2-1:0.0: device disconnected [ 427.836110][T13522] veth0_vlan: entered promiscuous mode [ 427.856997][T13522] veth1_vlan: entered promiscuous mode [ 427.921271][T13522] veth0_macvtap: entered promiscuous mode [ 427.946515][T13522] veth1_macvtap: entered promiscuous mode [ 427.985113][T13522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.016830][T13522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.055300][ T152] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.055570][ T152] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.055602][ T152] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.055631][ T152] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.061004][ T5720] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 428.283618][ T5720] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 428.283648][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.283665][ T5720] usb 5-1: Product: syz [ 428.283678][ T5720] usb 5-1: Manufacturer: syz [ 428.283690][ T5720] usb 5-1: SerialNumber: syz [ 428.347692][ T5720] usb 5-1: config 0 descriptor?? [ 428.701271][ T5722] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 428.917634][ T5722] usb 2-1: Using ep0 maxpacket: 8 [ 428.942380][ T5722] usb 2-1: New USB device found, idVendor=0e41, idProduct=414b, bcdDevice=52.ec [ 428.942410][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.978493][ T5722] usb 2-1: config 0 descriptor?? [ 429.057469][ T5722] snd_usb_podhd 2-1:0.0: Line 6 POD X3 LIVE found [ 429.057493][ T5722] usb 2-1: selecting invalid altsetting 1 [ 429.057508][ T5722] snd_usb_podhd 2-1:0.0: set_interface failed [ 429.057759][ T5722] snd_usb_podhd 2-1:0.0: Line 6 POD X3 LIVE now disconnected [ 429.058024][ T5722] snd_usb_podhd 2-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 429.367108][T13747] imon:send_packet: task interrupted [ 429.379884][T13747] imon:send_packet: packet tx failed (-512) [ 429.380159][T13747] imon:vfd_write: send packet #4 failed [ 429.493223][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.493357][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.584948][ T5722] usb 6-1: USB disconnect, device number 73 [ 429.716333][ T10] usb 2-1: USB disconnect, device number 67 [ 429.867698][T13776] C: renamed from veth1_to_team (while UP) [ 429.919129][T13776] netlink: 'syz.5.3164': attribute type 1 has an invalid length. [ 429.919143][T13776] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3164'. [ 429.922744][T13776] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 430.148031][ T1188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.148052][ T1188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.564527][ T5720] usb 5-1: USB disconnect, device number 66 [ 430.668131][T13787] FAULT_INJECTION: forcing a failure. [ 430.668131][T13787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.668155][T13787] CPU: 0 UID: 0 PID: 13787 Comm: syz.1.3169 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 430.668168][T13787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 430.668175][T13787] Call Trace: [ 430.668179][T13787] [ 430.668183][T13787] dump_stack_lvl+0xe8/0x150 [ 430.668200][T13787] should_fail_ex+0x46b/0x600 [ 430.668218][T13787] _copy_from_user+0x2d/0xb0 [ 430.668230][T13787] do_sys_poll+0x2a0/0xf50 [ 430.668252][T13787] ? __lock_acquire+0x6b5/0x2d10 [ 430.668265][T13787] ? __pfx_do_sys_poll+0x10/0x10 [ 430.668281][T13787] ? aa_file_perm+0x192/0x15f0 [ 430.668336][T13787] ? set_user_sigmask+0xcd/0x1c0 [ 430.668351][T13787] ? __pfx_set_user_sigmask+0x10/0x10 [ 430.668364][T13787] ? rt_mutex_slowunlock+0x1cb/0x300 [ 430.668377][T13787] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 430.668390][T13787] __se_sys_ppoll+0x209/0x2b0 [ 430.668404][T13787] ? fput+0xa0/0xd0 [ 430.668420][T13787] ? __pfx___se_sys_ppoll+0x10/0x10 [ 430.668434][T13787] ? __pfx_ksys_write+0x10/0x10 [ 430.668448][T13787] ? __x64_sys_ppoll+0x20/0xc0 [ 430.668462][T13787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.668472][T13787] do_syscall_64+0x15f/0x560 [ 430.668485][T13787] ? trace_irq_disable+0x3b/0x140 [ 430.668497][T13787] ? clear_bhb_loop+0x40/0x90 [ 430.668509][T13787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.668518][T13787] RIP: 0033:0x7efcea2cce59 [ 430.668529][T13787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.668536][T13787] RSP: 002b:00007efce851e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 430.668561][T13787] RAX: ffffffffffffffda RBX: 00007efcea545fa0 RCX: 00007efcea2cce59 [ 430.668568][T13787] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 430.668574][T13787] RBP: 00007efce851e090 R08: 0000000000000000 R09: 0000000000000000 [ 430.668580][T13787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.668585][T13787] R13: 00007efcea546038 R14: 00007efcea545fa0 R15: 00007ffe47e40988 [ 430.668601][T13787] [ 431.142013][T13799] FAULT_INJECTION: forcing a failure. [ 431.142013][T13799] name failslab, interval 1, probability 0, space 0, times 0 [ 431.142046][T13799] CPU: 1 UID: 0 PID: 13799 Comm: syz.6.3173 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 431.142066][T13799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 431.142076][T13799] Call Trace: [ 431.142081][T13799] [ 431.142089][T13799] dump_stack_lvl+0xe8/0x150 [ 431.142112][T13799] should_fail_ex+0x46b/0x600 [ 431.142140][T13799] should_failslab+0xa8/0x100 [ 431.142162][T13799] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 431.142181][T13799] ? __alloc_skb+0x1d0/0x7d0 [ 431.142200][T13799] ? lockdep_hardirqs_on+0x7a/0x110 [ 431.142228][T13799] __alloc_skb+0x1d0/0x7d0 [ 431.142247][T13799] ? __might_fault+0xaf/0x130 [ 431.142267][T13799] alloc_skb_with_frags+0xc8/0x760 [ 431.142299][T13799] sock_alloc_send_pskb+0x884/0x9a0 [ 431.142329][T13799] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 431.142360][T13799] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 431.142390][T13799] ? packet_cached_dev_get+0x1c/0x2c0 [ 431.142408][T13799] ? packet_cached_dev_get+0x1c/0x2c0 [ 431.142433][T13799] packet_sendmsg+0x3167/0x4fd0 [ 431.142467][T13799] ? aa_label_sk_perm+0x532/0x6e0 [ 431.142495][T13799] ? __lock_acquire+0x6b5/0x2d10 [ 431.142517][T13799] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 431.142539][T13799] ? __lock_acquire+0x6b5/0x2d10 [ 431.142568][T13799] ? unwind_next_frame+0xa6/0x2550 [ 431.142606][T13799] ? __pfx_packet_sendmsg+0x10/0x10 [ 431.142626][T13799] ? aa_sk_perm+0x703/0x950 [ 431.142663][T13799] ? __pfx_aa_sk_perm+0x10/0x10 [ 431.142683][T13799] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 431.142707][T13799] ? aa_sock_msg_perm+0x122/0x200 [ 431.142729][T13799] ? __pfx_packet_sendmsg+0x10/0x10 [ 431.142745][T13799] sock_sendmsg_nosec+0x112/0x150 [ 431.142765][T13799] ____sys_sendmsg+0x55c/0x870 [ 431.142793][T13799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 431.142825][T13799] ? import_iovec+0x73/0xa0 [ 431.142846][T13799] ___sys_sendmsg+0x2a5/0x360 [ 431.142867][T13799] ? __lock_acquire+0x6b5/0x2d10 [ 431.142890][T13799] ? __pfx____sys_sendmsg+0x10/0x10 [ 431.142945][T13799] ? __fget_files+0x2a/0x420 [ 431.142962][T13799] ? __fget_files+0x3a6/0x420 [ 431.142986][T13799] __x64_sys_sendmsg+0x1c3/0x2a0 [ 431.143011][T13799] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 431.143042][T13799] ? __pfx_ksys_write+0x10/0x10 [ 431.143070][T13799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.143090][T13799] do_syscall_64+0x15f/0x560 [ 431.143111][T13799] ? trace_irq_disable+0x3b/0x140 [ 431.143130][T13799] ? clear_bhb_loop+0x40/0x90 [ 431.143150][T13799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.143168][T13799] RIP: 0033:0x7fde53aace59 [ 431.143184][T13799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.143199][T13799] RSP: 002b:00007fde51cfe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.143219][T13799] RAX: ffffffffffffffda RBX: 00007fde53d25fa0 RCX: 00007fde53aace59 [ 431.143232][T13799] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000004 [ 431.143244][T13799] RBP: 00007fde51cfe090 R08: 0000000000000000 R09: 0000000000000000 [ 431.143255][T13799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.143265][T13799] R13: 00007fde53d26038 R14: 00007fde53d25fa0 R15: 00007ffc2ac2f5a8 [ 431.143293][T13799] [ 431.410523][ T5719] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 431.619424][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 431.621214][ T5719] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.621271][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 431.621287][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 431.621299][ T5719] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 431.621310][ T5719] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 431.634585][ T5719] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 431.634612][ T5719] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 431.634638][ T5719] usb 2-1: Manufacturer: syz [ 431.644084][ T5719] usb 2-1: config 0 descriptor?? [ 431.755370][T11894] udevd[11894]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 431.923025][ T5722] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 431.999725][ T5720] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 431.999887][ T5719] rc_core: IR keymap rc-hauppauge not found [ 431.999901][ T5719] Registered IR keymap rc-empty [ 432.014215][ T5719] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 432.029977][ T5719] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 432.050789][ T5719] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 432.053919][ T5719] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input19 [ 432.057045][ T5719] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 432.079080][ T5719] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 432.100536][ T5719] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 432.100728][ T5722] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 432.100751][ T5722] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.100771][ T5722] usb 7-1: Product: syz [ 432.100815][ T5722] usb 7-1: Manufacturer: syz [ 432.100822][ T5722] usb 7-1: SerialNumber: syz [ 432.125748][ T5719] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 432.139402][ T5719] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 432.159518][ T5719] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 432.177933][ T5720] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 432.177951][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.177962][ T5720] usb 5-1: Product: syz [ 432.177969][ T5720] usb 5-1: Manufacturer: syz [ 432.177975][ T5720] usb 5-1: SerialNumber: syz [ 432.189625][ T5719] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 432.213537][ T5719] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 432.234996][ T5720] usb 5-1: config 0 descriptor?? [ 432.239865][ T5719] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 432.244872][ T5720] ch341 5-1:0.0: ch341-uart converter detected [ 432.260003][ T5719] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 432.306327][ T5722] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 432.449668][ T5720] usb 5-1: failed to receive control message: -32 [ 432.449723][ T5720] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 432.504352][ T5720] usb 5-1: USB disconnect, device number 67 [ 432.525568][ T5719] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 432.525595][ T5719] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 432.537907][ T5720] ch341 5-1:0.0: device disconnected [ 432.639195][ T5719] usb 2-1: USB disconnect, device number 68 [ 432.817729][ T10] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 433.317802][T13822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.426854][T13822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.990262][ T10] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 434.008699][T13839] usb usb8: usbfs: process 13839 (syz.4.3187) did not claim interface 0 before use [ 434.974449][ T10] ath9k_htc: Failed to initialize the device [ 435.009335][ T5720] usb 7-1: USB disconnect, device number 2 [ 435.069417][ T5720] usb 7-1: ath9k_htc: USB layer deinitialized [ 435.082230][ C0] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 435.193215][ T37] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 435.193290][ T37] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 435.289407][ T5706] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 435.354384][ T37] usb 4-1: USB disconnect, device number 40 [ 435.401635][ T5720] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 435.439373][ T5706] usb 5-1: Using ep0 maxpacket: 16 [ 435.453575][ T5706] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 435.453605][ T5706] usb 5-1: config 1 interface 0 has no altsetting 0 [ 435.482124][ T5706] usb 5-1: string descriptor 0 read error: -22 [ 435.482433][ T5706] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 435.482469][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.518072][T13849] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 435.570817][ T5720] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 435.570847][ T5720] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.570863][ T5720] usb 7-1: Product: syz [ 435.570873][ T5720] usb 7-1: Manufacturer: syz [ 435.570884][ T5720] usb 7-1: SerialNumber: syz [ 435.638599][ T5720] usb 7-1: config 0 descriptor?? [ 435.647918][ T5720] ch341 7-1:0.0: ch341-uart converter detected [ 435.725467][ T5706] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 68 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 435.866859][ T5720] usb 7-1: failed to receive control message: -32 [ 435.866912][ T5720] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 435.871164][ T5722] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 435.895941][ T5720] usb 7-1: USB disconnect, device number 3 [ 435.899010][ T5720] ch341 7-1:0.0: device disconnected [ 435.968584][ T5706] usb 5-1: USB disconnect, device number 68 [ 436.017601][ T5706] usblp0: removed [ 436.029443][ T5722] usb 6-1: Using ep0 maxpacket: 16 [ 436.031792][ T5722] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 436.041920][ T5722] usb 6-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 436.041950][ T5722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.041979][ T5722] usb 6-1: Product: syz [ 436.041992][ T5722] usb 6-1: Manufacturer: syz [ 436.042004][ T5722] usb 6-1: SerialNumber: syz [ 436.117001][T13869] warning: `syz.1.3199' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 436.273166][ T5722] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 436.299187][ T5722] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 436.387075][ T5722] usb 6-1: USB disconnect, device number 74 [ 436.798496][T13884] team_slave_0: entered promiscuous mode [ 436.798521][T13884] team_slave_0: entered allmulticast mode [ 436.897023][T13891] FAULT_INJECTION: forcing a failure. [ 436.897023][T13891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.897056][T13891] CPU: 0 UID: 0 PID: 13891 Comm: syz.1.3208 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 436.897076][T13891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 436.897085][T13891] Call Trace: [ 436.897091][T13891] [ 436.897099][T13891] dump_stack_lvl+0xe8/0x150 [ 436.897125][T13891] should_fail_ex+0x46b/0x600 [ 436.897151][T13891] _copy_from_user+0x2d/0xb0 [ 436.897171][T13891] vmci_host_unlocked_ioctl+0x71c/0x2850 [ 436.897197][T13891] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 436.897234][T13891] ? kasan_quarantine_put+0xbb/0x1f0 [ 436.897260][T13891] ? tomoyo_path_number_perm+0x219/0x630 [ 436.897285][T13891] ? tomoyo_path_number_perm+0x219/0x630 [ 436.897319][T13891] ? do_vfs_ioctl+0x117b/0x1540 [ 436.897341][T13891] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 436.897396][T13891] ? __fget_files+0x2a/0x420 [ 436.897412][T13891] ? __fget_files+0x3a6/0x420 [ 436.897427][T13891] ? __fget_files+0x2a/0x420 [ 436.897446][T13891] ? bpf_lsm_file_ioctl+0x9/0x20 [ 436.897469][T13891] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 436.897490][T13891] __se_sys_ioctl+0xff/0x170 [ 436.897509][T13891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.897528][T13891] do_syscall_64+0x15f/0x560 [ 436.897553][T13891] ? trace_irq_disable+0x3b/0x140 [ 436.897571][T13891] ? clear_bhb_loop+0x40/0x90 [ 436.897592][T13891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.897609][T13891] RIP: 0033:0x7efcea2cce59 [ 436.897627][T13891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.897641][T13891] RSP: 002b:00007efce851e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.897659][T13891] RAX: ffffffffffffffda RBX: 00007efcea545fa0 RCX: 00007efcea2cce59 [ 436.897671][T13891] RDX: 0000200000000100 RSI: 00000000000007ac RDI: 0000000000000003 [ 436.897681][T13891] RBP: 00007efce851e090 R08: 0000000000000000 R09: 0000000000000000 [ 436.897691][T13891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.897701][T13891] R13: 00007efcea546038 R14: 00007efcea545fa0 R15: 00007ffe47e40988 [ 436.897726][T13891] [ 437.205733][T13902] sctp: [Deprecated]: syz.1.3212 (pid 13902) Use of int in max_burst socket option. [ 437.205733][T13902] Use struct sctp_assoc_value instead [ 437.267545][T13905] syzkaller1: entered promiscuous mode [ 437.267572][T13905] syzkaller1: entered allmulticast mode [ 437.312845][T13898] CIFS: bad ip= option (%RHe'ˠ/1C~1WexEAeSb{~R) [ 437.504635][T13911] ALSA: mixer_oss: invalid OSS volume 'i:{i84u^QƂD{' [ 437.504652][T13911] ALSA: mixer_oss: invalid OSS volume '' [ 437.549467][ T5720] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 437.712153][ T5720] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 437.712181][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.712200][ T5720] usb 6-1: Product: syz [ 437.712212][ T5720] usb 6-1: Manufacturer: syz [ 437.712224][ T5720] usb 6-1: SerialNumber: syz [ 437.756817][ T5720] usb 6-1: config 0 descriptor?? [ 437.771870][ T5720] ch341 6-1:0.0: ch341-uart converter detected [ 437.988437][ T5720] usb 6-1: failed to receive control message: -32 [ 437.988495][ T5720] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 438.004282][ T5720] usb 6-1: USB disconnect, device number 75 [ 438.013176][ T5720] ch341 6-1:0.0: device disconnected [ 438.505143][T13949] syzkaller1: entered promiscuous mode [ 438.505168][T13949] syzkaller1: entered allmulticast mode [ 438.629999][ T5720] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 438.829567][ T5720] usb 5-1: Using ep0 maxpacket: 8 [ 438.837547][ T5720] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.837603][ T5720] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 438.837621][ T5720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.883587][ T5720] usb 5-1: config 0 descriptor?? [ 438.905183][ T5720] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 439.329341][ T5720] gspca_vc032x: reg_w err -71 [ 439.329459][ T5720] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 439.352648][ T5720] usb 5-1: USB disconnect, device number 69 [ 439.739393][ T5722] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 439.804486][T13994] syzkaller1: entered promiscuous mode [ 439.804510][T13994] syzkaller1: entered allmulticast mode [ 439.820548][T13713] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 439.906590][ T5722] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 439.906621][ T5722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.906638][ T5722] usb 6-1: Product: syz [ 439.906651][ T5722] usb 6-1: Manufacturer: syz [ 439.906663][ T5722] usb 6-1: SerialNumber: syz [ 439.948679][ T5722] usb 6-1: config 0 descriptor?? [ 439.963057][ T5722] ch341 6-1:0.0: ch341-uart converter detected [ 439.985475][T13713] usb 7-1: unable to get BOS descriptor or descriptor too short [ 439.986339][T13713] usb 7-1: not running at top speed; connect to a high speed hub [ 439.987945][T13713] usb 7-1: config 1 interface 0 altsetting 130 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 439.987975][T13713] usb 7-1: config 1 interface 0 altsetting 130 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 439.988001][T13713] usb 7-1: config 1 interface 0 has no altsetting 0 [ 439.992468][T13713] usb 7-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 439.992495][T13713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.992612][T13713] usb 7-1: Product: syz [ 439.992626][T13713] usb 7-1: Manufacturer: syz [ 439.992639][T13713] usb 7-1: SerialNumber: syz [ 440.003647][T13986] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 440.193519][ T5722] usb 6-1: failed to receive control message: -32 [ 440.193589][ T5722] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 440.218498][ T5722] usb 6-1: USB disconnect, device number 76 [ 440.235896][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.235977][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.310730][ T5722] ch341 6-1:0.0: device disconnected [ 440.392070][T13713] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input20 [ 440.436273][ T4967] bcm5974 7-1:1.0: could not read from device [ 440.437699][T13713] usb 7-1: USB disconnect, device number 4 [ 441.045289][T14022] loop7: detected capacity change from 0 to 7 [ 441.076959][T14021] tipc: Enabling of bearer rejected, failed to enable media [ 441.748272][T14022] Dev loop7: unable to read RDB block 7 [ 441.748322][T14022] loop7: unable to read partition table [ 441.748510][T14022] loop7: partition table beyond EOD, truncated [ 441.759426][T14022] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 441.821808][ T5706] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 441.952810][ T5774] [ 441.952823][ T5774] ====================================================== [ 441.952830][ T5774] WARNING: possible circular locking dependency detected [ 441.952843][ T5774] syzkaller #0 Not tainted [ 441.952851][ T5774] ------------------------------------------------------ [ 441.952858][ T5774] udevd/5774 is trying to acquire lock: [ 441.952869][ T5774] ffff888037a00938 ((wq_completion)loop7){+.+.}-{0:0}, at: touch_wq_lockdep_map+0xb5/0x180 [ 441.952913][ T5774] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 441.952913][ T5774] but task is already holding lock: [ 441.952918][ T5774] ffff8880274064c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1af/0x660 [ 441.952956][ T5774] [ 441.952956][ T5774] which lock already depends on the new lock. [ 441.952956][ T5774] [ 441.952963][ T5774] [ 441.952963][ T5774] the existing dependency chain (in reverse order) is: [ 441.952969][ T5774] [ 441.952969][ T5774] -> #5 (&disk->open_mutex){+.+.}-{4:4}: [ 441.952989][ T5774] mutex_lock_nested+0x5a/0x1d0 [ 441.953005][ T5774] bdev_open+0xe0/0xcc0 [ 441.953021][ T5774] bdev_file_open_by_dev+0x1be/0x240 [ 441.953039][ T5774] swsusp_check+0x56/0x490 [ 441.953056][ T5774] software_resume+0x51/0x4c0 [ 441.953076][ T5774] resume_store+0x333/0x4f0 [ 441.953087][ T5774] kernfs_fop_write_iter+0x3b0/0x540 [ 441.953106][ T5774] vfs_write+0x629/0xba0 [ 441.953121][ T5774] ksys_write+0x156/0x270 [ 441.953135][ T5774] do_syscall_64+0x15f/0x560 [ 441.953154][ T5774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.953169][ T5774] [ 441.953169][ T5774] -> #4 (system_transition_mutex){+.+.}-{4:4}: [ 441.953190][ T5774] mutex_lock_nested+0x5a/0x1d0 [ 441.953202][ T5774] lock_system_sleep+0x49/0x70 [ 441.953217][ T5774] resume_store+0x2ff/0x4f0 [ 441.953230][ T5774] kernfs_fop_write_iter+0x3b0/0x540 [ 441.953249][ T5774] vfs_write+0x629/0xba0 [ 441.953262][ T5774] ksys_write+0x156/0x270 [ 441.953277][ T5774] do_syscall_64+0x15f/0x560 [ 441.953294][ T5774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.953310][ T5774] [ 441.953310][ T5774] -> #3 (&of->mutex){+.+.}-{4:4}: [ 441.953332][ T5774] mutex_lock_nested+0x5a/0x1d0 [ 441.953344][ T5774] kernfs_seq_start+0x5c/0x420 [ 441.953362][ T5774] seq_read_iter+0x3f8/0xe20 [ 441.953381][ T5774] copy_splice_read+0x605/0xab0 [ 441.953399][ T5774] splice_direct_to_actor+0x483/0xc80 [ 441.953414][ T5774] do_splice_direct+0x19b/0x2a0 [ 441.953426][ T5774] do_sendfile+0x547/0x7e0 [ 441.953444][ T5774] __se_sys_sendfile64+0x144/0x1a0 [ 441.953463][ T5774] do_syscall_64+0x15f/0x560 [ 441.953480][ T5774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.953493][ T5774] [ 441.953493][ T5774] -> #2 (&p->lock){+.+.}-{4:4}: [ 441.953514][ T5774] mutex_lock_nested+0x5a/0x1d0 [ 441.953529][ T5774] seq_read_iter+0xb8/0xe20 [ 441.953545][ T5774] lo_rw_aio+0xc80/0xf00 [ 441.953562][ T5774] loop_process_work+0x92a/0x11b0 [ 441.953579][ T5774] process_one_work+0x98b/0x1630 [ 441.953599][ T5774] worker_thread+0xb49/0x1140 [ 441.953617][ T5774] kthread+0x388/0x470 [ 441.953631][ T5774] ret_from_fork+0x514/0xb70 [ 441.953647][ T5774] ret_from_fork_asm+0x1a/0x30 [ 441.953664][ T5774] [ 441.953664][ T5774] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 441.953686][ T5774] process_one_work+0x8d7/0x1630 [ 441.953704][ T5774] worker_thread+0xb49/0x1140 [ 441.953731][ T5774] kthread+0x388/0x470 [ 441.953745][ T5774] ret_from_fork+0x514/0xb70 [ 441.953761][ T5774] ret_from_fork_asm+0x1a/0x30 [ 441.953779][ T5774] [ 441.953779][ T5774] -> #0 ((wq_completion)loop7){+.+.}-{0:0}: [ 441.953800][ T5774] __lock_acquire+0x15a5/0x2d10 [ 441.953815][ T5774] lock_acquire+0x106/0x350 [ 441.953830][ T5774] touch_wq_lockdep_map+0xcb/0x180 [ 441.953843][ T5774] __flush_workqueue+0x14b/0x14f0 [ 441.953855][ T5774] drain_workqueue+0xd3/0x390 [ 441.953867][ T5774] lo_release+0x287/0x8f0 [ 441.953883][ T5774] bdev_release+0x541/0x660 [ 441.953901][ T5774] blkdev_release+0x15/0x20 [ 441.953919][ T5774] __fput+0x461/0xa70 [ 441.953932][ T5774] fput_close_sync+0x11f/0x240 [ 441.953944][ T5774] __x64_sys_close+0x7e/0x110 [ 441.953957][ T5774] do_syscall_64+0x15f/0x560 [ 441.953975][ T5774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.953989][ T5774] [ 441.953989][ T5774] other info that might help us debug this: [ 441.953989][ T5774] [ 441.953995][ T5774] Chain exists of: [ 441.953995][ T5774] (wq_completion)loop7 --> system_transition_mutex --> &disk->open_mutex [ 441.953995][ T5774] [ 441.954023][ T5774] Possible unsafe locking scenario: [ 441.954023][ T5774] [ 441.954028][ T5774] CPU0 CPU1 [ 441.954034][ T5774] ---- ---- [ 441.954039][ T5774] lock(&disk->open_mutex); [ 441.954050][ T5774] lock(system_transition_mutex); [ 441.954064][ T5774] lock(&disk->open_mutex); [ 441.954077][ T5774] lock((wq_completion)loop7); [ 441.954088][ T5774] [ 441.954088][ T5774] *** DEADLOCK *** [ 441.954088][ T5774] [ 441.954093][ T5774] 1 lock held by udevd/5774: [ 441.954103][ T5774] #0: ffff8880274064c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1af/0x660 [ 441.954146][ T5774] [ 441.954146][ T5774] stack backtrace: [ 441.954158][ T5774] CPU: 1 UID: 0 PID: 5774 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 441.954177][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 441.954188][ T5774] Call Trace: [ 441.954195][ T5774] [ 441.954203][ T5774] dump_stack_lvl+0xe8/0x150 [ 441.954222][ T5774] print_circular_bug+0x2e1/0x300 [ 441.954246][ T5774] check_noncircular+0x12e/0x150 [ 441.954269][ T5774] __lock_acquire+0x15a5/0x2d10 [ 441.954289][ T5774] ? lockdep_hardirqs_on+0x7a/0x110 [ 441.954313][ T5774] ? synchronize_rcu_normal+0x1cf/0x330 [ 441.954335][ T5774] ? __pfx_synchronize_rcu_normal+0x10/0x10 [ 441.954356][ T5774] ? find_get_entries+0x712/0x830 [ 441.954375][ T5774] ? __pfx_filemap_get_entry+0x10/0x10 [ 441.954394][ T5774] ? touch_wq_lockdep_map+0xb5/0x180 [ 441.954410][ T5774] lock_acquire+0x106/0x350 [ 441.954428][ T5774] ? touch_wq_lockdep_map+0xb5/0x180 [ 441.954448][ T5774] ? touch_wq_lockdep_map+0xb5/0x180 [ 441.954464][ T5774] touch_wq_lockdep_map+0xcb/0x180 [ 441.954478][ T5774] ? touch_wq_lockdep_map+0xb5/0x180 [ 441.954495][ T5774] __flush_workqueue+0x14b/0x14f0 [ 441.954511][ T5774] ? do_raw_spin_lock+0x12b/0x2f0 [ 441.954531][ T5774] ? __pfx___flush_workqueue+0x10/0x10 [ 441.954555][ T5774] drain_workqueue+0xd3/0x390 [ 441.954573][ T5774] lo_release+0x287/0x8f0 [ 441.954593][ T5774] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 441.954615][ T5774] ? __pfx_lo_release+0x10/0x10 [ 441.954634][ T5774] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 441.954650][ T5774] ? reacquire_held_locks+0x104/0x190 [ 441.954671][ T5774] ? rt_spin_lock+0x1e0/0x400 [ 441.954688][ T5774] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 441.954707][ T5774] ? rt_spin_unlock+0x14f/0x200 [ 441.954732][ T5774] ? rt_spin_unlock+0x160/0x200 [ 441.954751][ T5774] ? __pfx_lo_release+0x10/0x10 [ 441.954770][ T5774] bdev_release+0x541/0x660 [ 441.954794][ T5774] ? __pfx_blkdev_release+0x10/0x10 [ 441.954816][ T5774] blkdev_release+0x15/0x20 [ 441.954837][ T5774] __fput+0x461/0xa70 [ 441.954856][ T5774] fput_close_sync+0x11f/0x240 [ 441.954870][ T5774] ? __pfx_fput_close_sync+0x10/0x10 [ 441.954888][ T5774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.954905][ T5774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.954922][ T5774] __x64_sys_close+0x7e/0x110 [ 441.954946][ T5774] do_syscall_64+0x15f/0x560 [ 441.954967][ T5774] ? clear_bhb_loop+0x40/0x90 [ 441.954985][ T5774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.955001][ T5774] RIP: 0033:0x7fdb3b947407 [ 441.955017][ T5774] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 441.955032][ T5774] RSP: 002b:00007ffed7f8ac20 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 441.955049][ T5774] RAX: ffffffffffffffda RBX: 00007fdb3b859880 RCX: 00007fdb3b947407 [ 441.955063][ T5774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 441.955073][ T5774] RBP: 00007fdb3b8596e8 R08: 0000000000000000 R09: 0000000000000000 [ 441.955084][ T5774] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 441.955095][ T5774] R13: 0000559fb758a190 R14: 0000000000000008 R15: 0000559fb7599f10 [ 441.955114][ T5774] [ 441.972618][ T5706] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 441.972646][ T5706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.972664][ T5706] usb 6-1: Product: syz [ 441.972676][ T5706] usb 6-1: Manufacturer: syz [ 441.972688][ T5706] usb 6-1: SerialNumber: syz [ 441.984798][ T5706] usb 6-1: config 0 descriptor?? [ 441.995469][ T5706] ch341 6-1:0.0: ch341-uart converter detected [ 442.269068][ T5706] usb 6-1: failed to receive control message: -32 [ 442.269109][ T5706] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 442.294902][ T5706] usb 6-1: USB disconnect, device number 77 [ 442.296248][ T5706] ch341 6-1:0.0: device disconnected [ 442.431033][T13713] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 444.493532][ T3355] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.960586][ T3355] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.170683][ T3355] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.400633][ T3355] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.750548][ T3355] bridge_slave_1: left allmulticast mode [ 445.750573][ T3355] bridge_slave_1: left promiscuous mode [ 445.750749][ T3355] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.930974][ T3355] bridge_slave_0: left allmulticast mode [ 445.931042][ T3355] bridge_slave_0: left promiscuous mode [ 445.931225][ T3355] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.519773][ T3355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.600128][ T3355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.620401][ T3355] bond0 (unregistering): Released all slaves [ 446.662097][ T5277] 8021q: adding VLAN 0 to HW filter on device eth13 [ 446.968058][ T5277] 8021q: adding VLAN 0 to HW filter on device eth14 [ 447.322141][ T5277] 8021q: adding VLAN 0 to HW filter on device eth15 [ 447.761992][ T5277] 8021q: adding VLAN 0 to HW filter on device eth16 [ 447.999587][ T3355] hsr_slave_0: left promiscuous mode [ 448.039523][ T3355] hsr_slave_1: left promiscuous mode [ 448.040147][ T3355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.040164][ T3355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.060672][ T3355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.060701][ T3355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.139952][ T3355] veth1_macvtap: left promiscuous mode [ 448.139998][ T3355] veth0_macvtap: left promiscuous mode [ 448.140100][ T3355] veth1_vlan: left promiscuous mode [ 448.140161][ T3355] veth0_vlan: left promiscuous mode [ 448.640200][ T3355] team0 (unregistering): Port device team_slave_1 removed [ 448.659741][ T3355] team0 (unregistering): Port device team_slave_0 removed [ 450.070741][ T3355] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.280813][ T3355] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.491198][ T3355] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.700556][ T3355] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.091613][ T3355] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.131724][ T5277] 8021q: adding VLAN 0 to HW filter on device eth17 [ 451.370962][ T3355] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.410751][ T5277] 8021q: adding VLAN 0 to HW filter on device eth18 [ 451.650300][ T3355] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.690772][ T5277] 8021q: adding VLAN 0 to HW filter on device eth19