last executing test programs: 5m5.921377302s ago: executing program 0 (id=4656): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x51}}) (fail_nth: 4) 5m5.214540286s ago: executing program 0 (id=4662): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{}], 0x1}}], 0x1, 0x24008094) ppoll(&(0x7f0000000400)=[{0xffffffffffffffff, 0x3500}, {0xffffffffffffffff, 0x226}, {r0, 0x120}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x8404}, {0xffffffffffffffff, 0x80}, {r1, 0x400}, {0xffffffffffffffff, 0x8050}, {r1, 0x2}], 0x9, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000540)={[0x8000000000000000]}, 0x8) 5m5.036514152s ago: executing program 0 (id=4665): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002780), 0x82001, 0x0) write$binfmt_script(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000003f00019f2cbd70000000000003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 5m4.825941204s ago: executing program 0 (id=4670): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x0}) r3 = socket$kcm(0x10, 0x2, 0x0) write(r3, &(0x7f0000000340)="120000001d005f0214fffffffffffff80700", 0x12) sendto$packet(r1, &(0x7f0000000380)='|', 0x1, 0x100400c1, &(0x7f0000000140)={0x11, 0x8100, r2, 0x1, 0x7}, 0x14) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000280003802400008004000180040002800c00044000000000000000090c0005"], 0xe8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)={0x18, r7, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x8014) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000000)={'dummy0\x00', @broadcast}) 5m4.347224295s ago: executing program 0 (id=4677): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x40000, 0x120) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x888000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x1214040, 0x0) mount$overlay(0x3a, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) 5m4.115332776s ago: executing program 0 (id=4681): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)={0x24, 0x13, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0x14, 0x33, 0x0, 0x1, [@nested={0x10, 0x24, 0x0, 0x1, [@nested={0x4, 0x8b}, @nested={0x4, 0x125}, @nested={0x4, 0x32}]}]}]}, 0x24}], 0x1}, 0x0) (fail_nth: 6) 4m58.604350485s ago: executing program 2 (id=4745): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mi'], 0x86) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r3, r2, 0x0) 4m58.572652349s ago: executing program 2 (id=4746): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x22882, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) accept(r2, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0xc00) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4, @private=0xa010102}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x4000054) openat(0xffffffffffffff9c, 0x0, 0x2d41, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x10, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) write$FUSE_INIT(r5, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x8916) timer_settime(r4, 0x1, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000180)) 4m58.390292278s ago: executing program 2 (id=4747): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x100) fanotify_mark(0xffffffffffffffff, 0x2, 0x40009975, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'dummy0\x00', @random="0100002010ff"}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x4, {0x3, 0x1000, 0xff, 0x11a8}}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x24000, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100300000008f00304004000010203010900010000400301024000020e00"/45], &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x8, 0x4, 0x66, 0x20, 0x3}, 0x1fd, &(0x7f0000000080)={0x5, 0xf, 0x1fd, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x4, 0xa0, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x17, 0x7f}, @generic={0xe9, 0x10, 0x1, "bbbbd248dcb0f9d710433c867caa0615c20b461860e5a39bb2ac014b0f574116887a32e9ea9e73c251dd747822c7fd5a639ab36407602b651f0a8fbcfdf84a238498af752d6fccf96723bc519c3d0b809c97a02c83c443a83a9ba9c964a367b259d3a4c56f3956354e1f4aa6ae8d8a6bb0eb63ca14c04da410ff8761a3a9f0b535a30a48faaf6783875b3ce1e295bcaf46161b23a5f81c22aeab2a9f7c28cef86b68ed638d8d1af5c501e02b7a56b10db7704e58eb572cf6a737c08b8a95847773b123e09573409eb317495ffab21bb6b340ea502818863a5feb1c3ae4eef25a716ab5b79c57"}, @ptm_cap={0x3}, @generic={0xf5, 0x10, 0xa, "d2f3540f90194c7040597ec20d0371851f5ab538b1c69914458d8aed173934bc7ceb0559e89e084c775522a828ef636ebd8d764855e3600a057d6c8d7ee6954d4e907d548f9d51f6826ccf3b3baa87ec1f528cfe72fb123c9e32df85fa7c58f5f97b1c37ae6c6f363a571efbc4748a5afb046931fa068800c625def175e8e9c86a2a5839d066246fa5f05bfe0105fe9f98af4958a127cd3d7682883d2c30326e6baa8fc772a7d33e7250e8861c84193e9de66181fde4d5773fef3b610bcbcc6566db9dcd67f70856e6f7c9480c6c10b5c3b469e454433042d008ad58a91315e13b21c0f6e72b9b46ced297fdfbed117999c0"}]}, 0x2, [{0x86, &(0x7f0000000280)=@string={0x86, 0x3, "2dc8a8e7da4e4a3bae0a7ef6ce26fdc3daf368931bae2a7a1a8effd342991c314c3cd929fbc3b2117f73586aa635357308a927b47ca503c339e95b19c32f7209cbb6c12a78c30050c7d8b0b491467b99f5e0eb5cd9bee37466c77bc909706694345fda493cbda5964beff53be63c212659d5efa0fbfe00f1b1b54d65145f6547467e94a5"}}, {0xdd, &(0x7f0000000340)=@string={0xdd, 0x3, "074b8192dfaa23b372272a01cd290051e55d42236ed9e7c18365d320c90358033362ae600153325d8111453a257b56f3035a05f5e273cda6960c3a235a9099da34868e04c1277db2db9905c6ae327ebe3a7f633da04e3ea5054170f699f67b66ae1833f91590d452cf8f0efc5304ca17de2c08f196931fce290e78e091a9c1c0afdb1ac5bb210c4ad9f24863031c43a616f8e1835c40f389dbd4940d726038328adc57be99c513d983fd64b391472984319738001a76d32720f286af2ec1ba7779d4ac42dcb6ad69b7d3fb0f66b65ac1318d6751e8ac92f53bfaa8"}}]}) 4m55.342592018s ago: executing program 2 (id=4784): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14) sendmmsg(r0, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x80, 0x0}}], 0x2, 0x404c000) 4m55.314617818s ago: executing program 2 (id=4785): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) read$alg(r2, 0x0, 0x6c) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0xc127}}, {0x0, 0x0, 0x0, 0x0, @time={0x7fffffff, 0x8}}], 0x38) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) r3 = signalfd(r0, &(0x7f0000000000)={[0x6]}, 0x8) mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0x10, r3, 0x80000001) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14) write$sndseq(r2, &(0x7f0000000280)=[{0x4, 0x9, 0x4, 0x6, @time={0x80000000, 0x42}, {0x3, 0xe7}, {0x6, 0xc6}, @raw8={"11dab2137f324e0d212f1ec8"}}, {0x80, 0xb7, 0x8, 0x46, @tick=0x2, {0x7, 0x10}, {0x2, 0x8}, @result={0x1, 0x2}}, {0x5, 0x7f, 0x49, 0x4d, @time={0x2, 0x4}, {0x6, 0x5}, {0x0, 0x5}, @control={0x0, 0x6ed, 0x4}}, {0x9, 0x46, 0x6, 0x3, @tick=0x7, {0x5, 0xb7}, {0x4, 0xff}, @connect={{0x7, 0x6}, {0x4, 0x9}}}, {0x5, 0x80, 0x0, 0x2, @time={0xd, 0x4}, {0x0, 0x81}, {0xc, 0x9}, @connect={{0x3, 0x8f}, {0xcc, 0xf2}}}, {0xb, 0x91, 0x2, 0x81, @tick=0x3a7c, {0x6, 0x8}, {0x40, 0x6}, @note={0x0, 0x6, 0x4, 0x9}}, {0x3, 0xc, 0x1, 0x1, @time={0xdd2, 0x7}, {0xf1, 0xc}, {0x78, 0x5}, @quote={{0x1, 0x40}, 0x3, &(0x7f0000000100)={0x8, 0x6, 0x7, 0x9, @time={0x0, 0x547}, {0x7, 0x3}, {0x9, 0x8}, @time=@time={0x3, 0x4}}}}], 0xc4) sendmmsg(r0, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x80, 0x0}}], 0x2, 0x404c000) 4m55.191509656s ago: executing program 2 (id=4786): ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0x3, 0x4, 0x9}, {0xb3, 0x9, 0x8, 0x40}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000002c0)) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000052c0)=ANY=[@ANYBLOB="1201eb02033dd608f80600b0a85d0102030109022400020908b00609040509016b435f0709050900"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x7) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xc38, &(0x7f0000000100)=ANY=[@ANYBLOB="545e9ad663766052c8ef666096d7e6a26abb7a668ff56706284a501369a55a94f3a454ce5dcd63de719d0066d872a5633e920821cfb5000000", @ANYBLOB="4f0cff66dac50e65f4944faabbeb020c8e57572456bec593e0d2ecf32e6dddf38e8aff27f9a893cb516339027ad68134cc76951dd7b7ef951b95e92f41e5a68772e12edfe4c5eeb8cd72677beed3d4ff11"]) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 4m48.249378224s ago: executing program 32 (id=4681): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)={0x24, 0x13, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0x14, 0x33, 0x0, 0x1, [@nested={0x10, 0x24, 0x0, 0x1, [@nested={0x4, 0x8b}, @nested={0x4, 0x125}, @nested={0x4, 0x32}]}]}]}, 0x24}], 0x1}, 0x0) (fail_nth: 6) 4m39.845716517s ago: executing program 33 (id=4786): ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0x3, 0x4, 0x9}, {0xb3, 0x9, 0x8, 0x40}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000002c0)) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000052c0)=ANY=[@ANYBLOB="1201eb02033dd608f80600b0a85d0102030109022400020908b00609040509016b435f0709050900"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x7) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xc38, &(0x7f0000000100)=ANY=[@ANYBLOB="545e9ad663766052c8ef666096d7e6a26abb7a668ff56706284a501369a55a94f3a454ce5dcd63de719d0066d872a5633e920821cfb5000000", @ANYBLOB="4f0cff66dac50e65f4944faabbeb020c8e57572456bec593e0d2ecf32e6dddf38e8aff27f9a893cb516339027ad68134cc76951dd7b7ef951b95e92f41e5a68772e12edfe4c5eeb8cd72677beed3d4ff11"]) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 4.549615357s ago: executing program 4 (id=6689): socket(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x200800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB, @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 4.494830193s ago: executing program 4 (id=6690): sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000044}, 0x80) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f00000000c0)={0x1, 0x11, 0x0, 0xe5b, 0x2, 0x6}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x1}) sendmsg$802154_dgram(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)="51803efce6eca86d3535a8cd56956aeaed59f72dda545c99ce4c638521323fa9009c80f2f9a44ea5005811f1f21759f4d3d43685fb6e130d024d947846f8b0c6550641578e14ce0fa2b89a562e77761efb40fec638998d52e13bb22d48746ca782ae5fbb47cbd7bd", 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40050) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x37, @time={0x65757100, 0x4}}) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x95, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d2903a4e"}]}}, 0x0}, 0x0) 4.10191101s ago: executing program 3 (id=6694): write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f4070009041f8100000801", 0x15) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00&\x00'], 0xfe33) 4.057191655s ago: executing program 3 (id=6695): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000000040)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x50) 3.955325356s ago: executing program 3 (id=6697): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000e35000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 3.387206426s ago: executing program 3 (id=6700): kexec_load(0x3, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61edca4fc06d78b964868e16d82c97be81055b072720c06a8b8b3daad5131e84447a4809d131ce0927ee8ec587e37e0f2df349", 0xd9, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b414330e5cff90a", 0xee, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0), 0x0, 0x5, 0x6}], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000007c00)=[{{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0xfffffff8}], 0x2, 0x40010102, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r1, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.666101194s ago: executing program 4 (id=6704): write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f4070009041f8100000801", 0x15) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00&\x00'], 0xfe33) 2.598714027s ago: executing program 4 (id=6705): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x8000, 0x8, 0xa, 0xb1e0, {{0x19, 0x4, 0x0, 0x1, 0x64, 0x68, 0x0, 0x5, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@rr={0x7, 0x17, 0x9f, [@broadcast, @private=0xa010100, @rand_addr=0x64010102, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x7, 0xb5, [@multicast1]}, @ra={0x94, 0x4}, @noop, @end, @end, @generic={0x86, 0x6, "27e63b69"}, @timestamp_prespec={0x44, 0x24, 0x1d, 0x3, 0x8, [{@loopback, 0xd5b9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff7}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x20000005}, {@local, 0x8}]}, @end]}}}}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={@empty, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x8, 0x9, 0x3, 0x600, 0x3, 0x7230000, r1}) 2.555782724s ago: executing program 4 (id=6706): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x2a, &(0x7f00000000c0)="d1f156a40476319b0796121f65bb3f9aee6d0a44d7631c92e2bc5626a89e45266e9f8c99469150032e7d669c70aeda9c118e182c3d6be78321838368c4ab208615b68bc44cdc526c82d85431104d94d86a5c9150487b303224c3a4b247f2cc8aad587ace00175cd4ba47410878fcc6de14c1b8acfcfb18042a363503b996a852540dda5ebcdfb561", 0x88) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000280)=[{0x8, 0x8000, 0x0, 0x0}, {0x0, 0x200, 0x0, 0x0}], 0x2}) 2.403998521s ago: executing program 3 (id=6708): syz_usb_connect(0x0, 0x506, &(0x7f00000010c0)=ANY=[@ANYBLOB="1201100122188d20f60d5600f709010203010902f4040303058008090418"], 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000) 1.971151633s ago: executing program 5 (id=6712): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x11) r1 = fanotify_init(0x20, 0x80000) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000c00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0xb, 0x0, &(0x7f0000000640)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x13, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20040014}, 0x4004804) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f00000000c0)={0x70007, 0x200}, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x2) 1.139282777s ago: executing program 1 (id=6717): socket(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x200800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 1.091624861s ago: executing program 3 (id=6718): timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f00000001c0)) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4002) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002540)={0x172c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1cc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe7, 0x4, "085ed70f0700227ccea61d1cf5934cc3ce305f90cfd24247a9b7f8ba7faea9830f155354279136018b5be2c94fa4b14a2bf172d591ab5f0394a931c65d7ff0cb44e28648f1b9be9496f61d69b7b8acbf0f96720b049b01b025b695fadd8ba2f7ee89e5e2cc6e94c79806e2198351ea87cf0cfe53c564c3bfcb66f4d5ec666d2a84148d5b94f9e32139fffa95ff823251c04dee5934ac593bdc030e3af60014e688643dd7b823ad6a92b4f6b1a8bd38e8f7716d9992721af0d24be4ba6548aa6fdc90ca0a70b12362cd2e2dc019ef5f2b121e02f6294ca1f8bf09d317f932997352f972"}, @ETHTOOL_A_BITSET_VALUE={0x4b, 0x4, "18cba8c8de460cd2764ae609fc06583ac74f4d4c6847be06d4ecb78dda9478c8756a64bfe9042a8f2fea96aeec01b1b8f9ad27526208c27e0b18aced95b666bed7f2aa6dd5ab93"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe}, @ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/hidraw#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',\xc6\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/hidraw#\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-\\[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x300, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffc0}, @ETHTOOL_A_BITSET_VALUE={0x82, 0x4, "c3b269a83da861c0b6df4152cfcd920d93c42dd74287345f48e370cb44a93acec4923eea4129aca62e6f90c1771220dbd2f6bc14157c513a4fa73dd7ed80ae80f5c3721f18b04a0b4fb7ac7b9a1b2cae13367be58acb216e95f5b584ab5006a726f80ad03a0a67286a79edc1d2c4ef42e12f6720845407513e4482d22c25"}, @ETHTOOL_A_BITSET_VALUE={0xb3, 0x4, "0b5f71a988cc7759e43bfecbd06b267d3496724afe1344ba83073da38f4c8952eafcfeb08d0dad6f3b31234ad10a85893a809f489a306d597e822434f56b8a8a446afd73a7a091d304080047645d1614b5096677af5562372386462773df9b7111eb12a24726ab5eb9426544d02554813bb9e80c9765e170f169407dccbd6daf66bcef32ab7f0f2224139fbbb7c3acfea8bfdbb38004cd9a867b26cee997d368cd429b1be7ad2147836757a4617988"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_VALUE={0x75, 0x4, "47489fa3114d23f13339070f761e6eb9a2a4e7bd256e1c0992dfbc6495c08f674e15cf9a30ee3ec4b299185074fbe0c4d4cbcfca487ca97fb46dec9bc5571231396007bae049deaa7d6ef4649b39b7b60d07d13db084ca184ecf979e35c9092bf1a719bda361663f34bfbfa791e5808f90"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffe15}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/hidraw#\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%\'}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%&%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&\'\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x10d4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x85, 0x5, "c74ecf099566651e4563cb77750720d80eef05e4473e26243e2f70d2dc20ea1ce35f8bc253387e45719c6c4b6daad6235e1f5a2cbe4ae68eb741f736feece8b530105200949fa39dd52a70b575eeb74d48cb23f946049606dee7bd04c18db52f035a9a79dd134ff400d84a1ebb043ddb5c1fbfb5f42713fd59bb19af37f158803e"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "1fd5d395f037ca3d2f1e220c88d738e65aee6cf09190607e86c6c392cda3a6dcdeaf235f1ed1928e9ce3f2cfa80d311ee8ef0f82fa6157f78a63d2a3ebcd708cb9cb1f40f868e6034eed2aee975235455ea3a548c512694fe24f4388933aa65d13856267771df48e55d479a73a83a500442c2d0674d605323eb15e9220e5d213b1b90855a05bf3ae2694b9cd9bb9e9712b6e0affe5b2b1416935e7f89d16c7ab02de4a7a5a991a8af4194699d70f56c1932d01ad9dbba7d3fd2a79711362e013e96448e550f30c0c96f266a2b0656b81a95238eb6d6fd64e51f0f5efdcd943cfe6da40b2f1dc3b29ee1067f49092ddb4c60cc90a3b0dd2cbf85418eca05b05129886e15349a8b976e9c41d3b6adf15dac5e28ca0c4ccd29104857de295f80e2d36448a603caba47c2cfff81d3ec5f3443ba0dd4c65fa17510d7f6f930c8ff9dcbb2628cd172b207ee2f7f8bdc1a5dcf83b5d871d032622e6b7a1d35d3fc087b59545a256ecdf036f830dced15fd6e86641aff199e1b545dc9f61a7bb098f23186647722170cf9b11f2b063ccfbf2be545447340147400da8215e1d0431a367084c5be54dd1955f387ac6d77a853c86eba62a21a8af405d08820cc4190e537fa41bb29a1bf84ecb2896549fee424ebd38d258c463ce14ae8ed3e5c2703817cb89c60c1eaf60758fae5d40f5d9371bff680d154b138e11c7580c4e9c2a48c810232562781578e6e4f62a17af45aaea4294cada7e175236906ea6fa171dcf0982b3b0f0534216b38420dacfa977299a8e150c1e018e22ca61d480869a71fa5214e84413ebfc076a38f2ae2d3e248833a3f636763fd8040983a1bdaed6d4f07f03fbce0ff27854cd635104d9ae5b3578a7e1a4023534e64c5e8a36469f9b7506b2c616650f106b7343e1c092314fc93bad0b0776ca6c83c7c72675c5534f996b7e772073882d6a2e435b954c4cb55666e9c6acf2a4ab5f3ae44288bd4f6ab42c9a9a71089298c6a3ceb2dcfcb3ff9cb454c4d049b80ff2fe810adaf5e7bfd314626ef1daae65bec1c2d4228db25d292189f6f7d10c036112b6f9e3443993efffc60247588fa5aca99cbb7153e773399f89a350271015d11fb9e120a489c3a78bfe2cf812c0ce0b5e4227610d9cc8823a8b2b06e8dbc1b1ec01d610cfbf85506d6a74f04cd0f36b5df34fe5e77b2a03d806daf40e1d2709da363046c61adf808e463b7d17ca8981bd7f6d66dbe940b3065ac8de5bafb744275f68d782bc445444a6de262f6271e08ac88a892e63dd60694bed67f3b1750a82c5516130253ddec21869313043e197a446aa1d6d8315f57663bad4a7908b538c15fbfd69aa8c76de1c7e0b4e48908a62a9674f578faf409d93dc4a62a2744d0c806e1484b7bd8ebfccbb0b436b29df8e0f73ba3ec1e2b29168b6b626dcf5a5cc69e4334091e301902ad651dd1edd99c14b31bfbbbfbfd076eb6c2c68003ee609b11fc8366cf6c7b943a555eb4308639d485036bf92cb1165c3d185bd768ee3b9ed160c237dd4e04dc4513824983c36419b5e1706a8f6a14fd6778a3b5f5f0532b6009e8112c4f213fb2c3d6c24950dedd06048f60bc4cac3221115fb2f1cbf122c26677df8b84a36ba0ab8319dc56ac947393780f9e5dee359b2fc27be843b415f4810239f5e2f7551900052efb8df4374737fa054ad7181b94ee0710947ea1b460458f3427495f87132c9c720e558b7de19d5abc5df051ec0c08041832edce8ecdfaeeef205b5f363a9415a720de891ed410045d380f83ccbd431d5afeff0a6b485390e8d5b4d300988293e534724e928ff3080f6e84aea56d6c8f5887d177e03d4ef0f2674eb6a105c75bf00c7e2b4bc8d1b7c3509aa1b7d14ee0efa3506e5a722451d7f65df74d3b5ac3322344fa58e0fa3bf81a6f66944bb234428fa4fed3a7fa3509998f667521dd01ae10b08a2ee285485f54b637cb64b534d82f5b5c6cff004d2b9b34fc9f01a23d5ca3a7b02398d3304457bf3d562c0f394f24fb26b9f5709f7064953495749fecd1b29e22f9144308c4ea2363550459f1e7af9921574bb39997fd53bb7bd3665aafa8a046a88acdf4134f67aefc0508d787e640cb71fb69c91ef1923abfce6f0e3b263b9a472760d11cc536e00e0cb9df2cf7d8fade34f712683b24310a5fc0474b747933750d2f3bc2383d1b1eadd30b9c9a7d439e52568da0c6cc666696225118613e0c1e5522b7fbe67117f465bbe17344ed36322d011d339c4c877d789575a37d9c41658616007ff31f7482a8adb8928c801b989c14f34a38337203f95994121c2bb9a1efa3a620f690ee1d47f85d058c814bac1b65ec07cbc05a7210c369656e692fd1706b0969dcb18139a75d79963adf4681845b1b0d925c8b7279ae58bd028914dcab65eb1eea89929c1e2855d2c205b99302fc6425041b531628db2c3b487e66376bdb1455e49995dc8d23294c6ba9c3090ef2ad7fa7e2c35fa79812b3ee82e53f157379577cefc7d5df80eae68eea518ec839aad6ffbc8c091e11e8dabafc0032063efc6d3f434fc5e866e0dbba262da3ba8c53530b97b43e3b4a5509e225eb253bad12eba128a8727eaa3a84062fccca094411d84735a752887b531241cdfc1a42315e5533200944b085e07492880789b926fee624d6200d053c92fd04db129b8ba41461ced6e8ef6088b22be3940be6f0e0960d6fbd41f3e493e86983b7cd048dd3394c927d883bb0f1b31cc5dcb39205d2330fc7d3fecc846a8faceb3538377bc053357cf8f0d734adf0d851f16cbcc6d07f84ae40feb4691fc676935c249c184b5bb8eb4bd6c7cb5db34b8694eb6537a8f6af8ae128978eca7fdcf41bcd5bec3f46f53ed538ff5ed0d747bf154cdabfa4e3ddfca1754c75cc529d74b1d365d1c10e84fa6311805300098863ec434bf5afc6e9b0fabf133c4306998c00ceb861beaf92baba83c93712d23b5abd97e68ef4bc148ddbd876e17cd560cf9066f43aea60d70f3743b40c67a84afb4c9c310164998989742a6904f7c164edc5fd14a8e4f937234ff4cde010d93d6a486964f21944eb2e353d7f01b1911369efa26119a8dc7c7e87a1a7afc6172d46b9f9fa15ab06c58929eaf0c1269520b9174249b81642361f4c56976a3cfd1c2cf6cdd45c7f1a8b68fefcea20d8b00d041ba34c506d0176258c6e46acc62552f7df0840020443178935bde78b34c321b4b6765bc04112d3510c1acfe50860babc4a9d51b7074cd951ba57b2ada79de9d0c3e1e8409ac3ce579f4d8374cb9f24a33e44d66235f612905d793a6b8f3b41f6da13af170a05bb8356d74c36559f62335f19cdbb1f3e47858e0a3b5159c6b0ce3fecad59f85c28f455b1a7f7dc53544b112f3f3dd5b160839b3051c5e5326346fb8ea26ffdc1d8dcc93a12cff5d38b8b1b69b7910c47f4ced77e2008352acb53557da50204f4e603d6b7bc194c45974326b9bba52b8113a215da3a22f2e868fb42c44c2b73f049e5926e9b76b19b27b8b0910b60a70c771c3f496bd40d39f1e74f92497870d0e96241de6d62e2f4a3a10ff2943ce67a6123678042da952fa91ab4e386133b40e58511616ee93e41990e68487c2e0340eaa74fd89f3a64a55befe47219120a3cb9d242818c509e8fefeb3d70b8b8b01f620f5653a6a33b322280d7da5d11bdfed15e771544982edab1e6e24f5b581da9809cbbee6616b632838df0bb05fcf2146d2cce7d690c38a175c60b1aac523dd648da79a227645a79d8062e86f1003c5abbc3a52b8351df7da64f9a47745226e782c39bdc6655d68f6f8c49c3db7630af02bf52a0b542ea707578fb3c0c99ce1972c1dc4d9928fead0527aa2ae49605f2905af5d9d691db4dd3a59773d5a0b50d89be1ffb7393481688fda5c549e059ee2fb7010d298cad3aa44a50b48452cd5c0f2e9fc0e02f04066e9343611c4d0962e8e8d50f2018e1c2765304bef9311a00ca1f701232958e6efaa040b20082704960270de732dc2770d242bdc8ce982c95a5a8df3cb25500ab83fb9e89d125ba3644fe7d9cf07cc89e3a019917dc5164c588071c5ea0796b508f685d3e1f9c7ae10a9ca78bd36e7770eece2b42620d49cb662774711b009a228239b7e36b3715fc3dd8180d16e3038f1d164b04e936f64efb093cdf97128d11747063496e7e57e26ad9aad812cbe548b2be96178eeaa4883480b98df21f099b4eb565a89604f5f71dd8838445758c42f82656e958ca5766862b8b47afcbd43e84df2439d3c3629dda42f822cb6976c39194676d6656385ead073531156ea7688df9b7f5c69957b36fe5d64bea2c649b49854d0f1637ce2d050ec30f3222f14abdb92740da6d3153f65c8e1b98e430b617bb414c12a79ee7559f6079bb3006296811e4f7413f7915f7e7873cafa559b44c93fe22b6c7902b59ac7eb07795ac61a8fee51f3b17a25a5a99787b47eecaf45ee7b0c96c12ed65885a6536b63813c350c33034647c49f3adb8b8f0c1b9908a0dbfba70ac1b56780b943bcea05225361ff4e0a8269735c7ad622e8177c5ed4ef856bfbe917c27e87f16c800eec8fe78c6b3699c0470ff11a4f30e129a3ab08f6149c001fac3db4ed1977aaaf8afef545926ad57e98515032a2b571ea97f497a7e1f16a89c0aaae561661f6e8891f8d65feb6832d3a7053b0dffa7ea73ffdf2cd18935b49f84b2da854c337f74d8d969c2f3a031951c3a6e780ad8a9a10d60d4f0553cfce19f6abb02165801aed10ab9a3cd709b3c7c95be9e56ac99f6587aaa73b8c6695a0e9b883497a8775ba3abb8479ff51a7fc02a79142eab9ec9696812c4adadee4045286c69caabab10c64dc5a49f99b15bdc6c4d8c9631a802edb8e6160e9c0edc9101efac7cf57b55d2552485ac499b9666519b6679312c4b78e06f37a91ccd099b6ccddeb9c0df0ad3166cb74594df5b1c6d228516929b7f6639dd36e205dba94e4c653929642923346d32c9293d2b3900c01926e994819e0c2efc6aa43b869eefd4101c670aee212680bdfad1588526e3ed15cf0c3e322a7ddabb94e5f2e72d882f39cbc78da9f97d9b1dd23721cbc9858bc0a308d078e4f12bc19019dd08fbfc82c099f3427865853bf5a4249f00c0542d34fdfa39237b25a49c5e1b3ad6f164db32b5c387b1f8adc108a43bbe8d02b1c1fb6e0ae382a3c04ef54d949f0b524ded3f77d73dedc1cab425dbebee884b71a91ec8f7d6449f417c6570e5ebbc68fac3b1ecfd0fece819171107fb05dd3e45a709c733a9a510af8691b883def0532681ab37e539b8c1e7da895e2cb847d4abe5b767573508bdc5c76554681f00e23871f58cfa5d48c383299aa077266a47e341ea2de22a35d2c3be7af27399d9469f88dbbd52b844d3c3323ef14b5c621dd4b771824af872a40e758914ba9ffa014edc6c2c871d2cfb28e6a16efe8207682c99d42cd9ea17d4aa0d0c6792391c8f94c45d581da3c928c45574f83d71c69e10ffbcfbe101ebe7bf0fba14cacd2b1b6b499eab1d58c1b5640bf487c65e1e8df6afe9325dae0bb1d7caa281d9e04e11b58c4737a17a586b7d2a11e8fdc624278cac653a5070deeb32afa47b08e8d017a63cbb3520f9851599fb2032e1811838fea952188997064552b38ad9de646febd9cddb917fab0558cc67ce21bd9e4ec08dafa5d9e38403122a0aaf26fc0b089d0d185f72130245cf0b9b7c04fe297aed5e860e8bbe9260368c794fa94c75f2fb59c2fe57236d700837e844173c1f204f983aef54ee8ef3bdb42279d80e1855fd7a92963b4319f345ca7"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff}, @ETHTOOL_A_BITSET_VALUE={0x33, 0x4, "d91030d5c41ecc625a4cd722d5fbdeb46fcaf41c547c0b02923b400b662311c23f6df3312786cfa9b7d5ff41f08810"}]}, @ETHTOOL_A_FEATURES_WANTED={0x16c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xae, 0x4, "d7ba6ad207ba0b007a7894ce59cd9a395b9d39d862f50182a6f49874eca2bc5f6c220ba5d36688cc8e664272853c90a19a92444eb2ab56e4464baca36593b6dc8728d04316f25a04b8fa4066b67b6886b7711adc53bd675024ec597b1a552c0b8e08cadcd278d07c145ddd64fd68b1584468a362be147585791874b710c61e0ba8265a100730b8bab8a794d9d813abf19b448a2539a2200c87e2f9ec990c7e63c7256c13372d48e9740e"}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "5fd01e33"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xab, 0x4, "c2388540e5bd007e61fbcdfb694b9df220e979ebfc527d6d5c11abcdf39bf7e0411a62b6b4dff3173050776b20b7585d1d56de3b3571c79834187f171a52b776132eb64ad9fb8064abc16317e9f6c7215a830815d458ad7ec5186495d2f12c0254ea7faee4d03d143339f0c46f7ad9c84e3206749177a68a0a563d14d2e962525146de386381e3009d8b6bebe1f897c46792ced63ccd3abfd576ea8ed31a6d68d2c9df50cdd50c"}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x172c}}, 0xc011) 1.035413874s ago: executing program 5 (id=6719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r3, 0x4b41, 0x10000000000004) pwritev2(r2, &(0x7f0000000080)=[{&(0x7f0000000340)="a4", 0x1}], 0x1, 0x9, 0xffdffffc, 0xa0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x4000) wait4(r1, 0x0, 0x1000000, &(0x7f00000000c0)) r6 = syz_open_procfs(r1, &(0x7f0000000080)='net/netfilter\x00') socket$can_bcm(0x1d, 0x2, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0x400000b5, 0x0, 0x7}]}) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000380)="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", 0x1dd) getdents64(r6, &(0x7f0000000000)=""/45, 0x2d) 1.027207541s ago: executing program 1 (id=6720): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async) ioctl$UFFDIO_POISON(r2, 0xc020aa08, &(0x7f0000000000)={{&(0x7f00001f8000/0x4000)=nil, 0x4000}, 0x1}) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 335.277087ms ago: executing program 1 (id=6721): prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2005}) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r2, 0x1, 0x3) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000343000/0x3000)=nil, 0x3000, 0x8}) getrandom(&(0x7f0000001b00)=""/27, 0x1b, 0x2) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xfffffffffffffffa, 0x3fff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000203a4b0ecce390000000000050000030800034000"/36], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r5, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x44}}, 0x0) r6 = getpid() syz_pidfd_open(r6, 0x0) syz_clone3(&(0x7f0000000440)={0x200000, &(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280), {0x1e}, &(0x7f0000000300)=""/115, 0x73, &(0x7f0000000380), &(0x7f00000003c0)=[0xffffffffffffffff, 0x0], 0x2, {r2}}, 0x58) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000680)={0x48, 0x2, r1}) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xac, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x4c010) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r1, 0x0, &(0x7f0000000080)="3cc8aefd73dd23bb17bf856745f66554bfc4fb57ef7441177dc2ed6f3f649496c68e3033af0b4a70a16846e0", 0x2c, 0x2d8f}) accept$alg(r2, 0x0, 0x0) 334.901253ms ago: executing program 5 (id=6722): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/1, &(0x7f00000000c0)=0x1) 313.636828ms ago: executing program 5 (id=6723): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x8000, 0x8, 0xa, 0xb1e0, {{0x19, 0x4, 0x0, 0x1, 0x64, 0x68, 0x0, 0x5, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@rr={0x7, 0x17, 0x9f, [@broadcast, @private=0xa010100, @rand_addr=0x64010102, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x7, 0xb5, [@multicast1]}, @ra={0x94, 0x4}, @noop, @end, @end, @generic={0x86, 0x6, "27e63b69"}, @timestamp_prespec={0x44, 0x24, 0x1d, 0x3, 0x8, [{@loopback, 0xd5b9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff7}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x20000005}, {@local, 0x8}]}, @end]}}}}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={@empty, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x8, 0x9, 0x3, 0x600, 0x3, 0x7230000, r1}) 246.802887ms ago: executing program 5 (id=6724): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 111.323717ms ago: executing program 1 (id=6725): kexec_load(0x3, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61edca4fc06d78b964868e16d82c97be81055b072720c06a8b8b3daad5131e84447a4809d131ce0927ee8ec587e37e0f2df349", 0xd9, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b414330e5cff90a", 0xee, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0), 0x0, 0x5, 0x6}], 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000007c00)=[{{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0xfffffff8}], 0x2, 0x40010102, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 111.157146ms ago: executing program 4 (id=6726): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x40084) recvmsg(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1, 0x0, 0x0, 0x10000000}, 0x10002) 110.110509ms ago: executing program 5 (id=6727): arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) read$FUSE(r0, &(0x7f0000005bc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000040)) r3 = socket(0x1a, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000340)=@assoc_value, &(0x7f0000000140)=0x8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) r6 = landlock_create_ruleset(&(0x7f0000000200)={0x6010, 0x1, 0x3}, 0x18, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x6, 'pim6reg0\x00', {0xffff}, 0xffff}) landlock_restrict_self(r6, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000002680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002640)={&(0x7f00000026c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf256c00000008000300", @ANYRES32=0x0, @ANYBLOB="0800a1000100000008002700020000000800220171030000050019010e00000008002201370300007a5d144ba0133aad37ce5b47f1a093ba805d67d3e889f45a3b670933d8f7b4b0d18f0be32e7cb901bfdde5d418e8b387370c9ec232722044b11b75f54a6035a53f75eb13393603a4d97c045da104ab029133419cdba39a7182304ef222ee82537a26"], 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(r0, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fedbdf0e3b00040008000300", @ANYRES32=r9, @ANYRESDEC], 0x44}}, 0x40) ioctl$TCSBRKP(r4, 0x5425, 0x2) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827", 0x45}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}], 0x2, 0x20000044) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e008000000008", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000002480)=ANY=[@ANYBLOB="7c0100", @ANYRES32=r2, @ANYRESHEX=r11, @ANYRESDEC=r1, @ANYRESOCT=r10, @ANYBLOB="400001801400020070696d36726567305ceb83466a2d53d4049260bd7a226a2664d0b34c2f1a4fc8b269a06c17e458d0548a00008007b2edf14b920dd6dea8692496ce97864f071fb81db8faf9b41e56a77249150dd7100adf7ec98cbcb81e68593fb8474b06075b8f706f4452b074b23b304bfaee919520cc1c36efaf7a5a922ed01ddb971609226ea11da40fd33251634ff9", @ANYRESHEX=r0, @ANYRES16=r8, @ANYRESHEX=r9, @ANYRES64=r11], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) 57.375722ms ago: executing program 1 (id=6728): socket(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x200800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d80", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 0s ago: executing program 1 (id=6729): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2, 0x7}, 0x1c) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000180)={&(0x7f00000001c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) listen(r0, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r6, 0x80106f53, &(0x7f0000000000)={0x13, &(0x7f0000000040)=[{0x2c, '\x00', @st={0x4, [{0x1, @svalue=0x7}, {0x3, @uvalue=0x9}, {0x0, @svalue=0x5}, {0x2, @uvalue=0x1}]}, 0x1000001}]}) syz_usb_control_io(r5, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000280)={0x40, 0x19, 0x2, "ee98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_usb_connect$midi(0x3, 0x0, 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r8, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0xc38, &(0x7f0000000100)=ANY=[@ANYBLOB="545e9ad663766052c8ef666096d7e6a26abb7a668ff56706284a501369a55a94f3a454ce5dcd63de719d0066d872a5633e920821cfb5000000", @ANYBLOB="4f0cff66dac50e65f4944faabbeb020c8e57572456bec593e0d2ecf32e6dddf38e8aff27f9a893cb516339027ad68134cc76951dd7b7ef951b95e92f41e5a68772e12edfe4c5eeb8cd72677beed3d4ff11"]) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$uac2(r7, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) sendto$inet(r4, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e24, 0x4, @private0}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r10, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) kernel console output (not intermixed with test programs): 817.972661][T22312] Node 0 active_anon:28440kB inactive_anon:0kB active_file:0kB inactive_file:235336kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123612kB dirty:696kB writeback:0kB shmem:3636kB kernel_stack:13836kB pagetables:5412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 817.972706][T22312] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:256kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 817.972729][T22312] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 817.972764][T22312] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 817.972795][T22312] Node 0 DMA32 free:1198968kB boost:0kB min:3912kB low:6436kB high:8960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28440kB inactive_anon:0kB active_file:0kB inactive_file:235336kB unevictable:1536kB writepending:696kB zspages:0kB present:3129332kB managed:2552404kB mlocked:0kB bounce:0kB free_pcp:6804kB local_pcp:4768kB free_cma:0kB [ 817.972850][T22312] lowmem_reserve[]: 0 0 0 0 0 [ 817.972876][T22312] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 817.972903][T22312] lowmem_reserve[]: 0 0 0 0 0 [ 817.972918][T22312] Node 1 Normal free:3929320kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:256kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 817.972968][T22312] lowmem_reserve[]: 0 0 0 0 0 [ 817.972997][T22312] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 817.973071][T22312] Node 0 DMA32: 752*4kB (UM) 1033*8kB (UME) 546*16kB (UME) 637*32kB (UME) 249*64kB (UME) 175*128kB (UME) 116*256kB (UME) 42*512kB (ME) 28*1024kB (UME) 16*2048kB (M) 246*4096kB (UM) = 1198984kB [ 817.973195][T22312] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 817.973246][T22312] Node 1 Normal: 0*4kB 1*8kB (U) 0*16kB 5*32kB (UM) 5*64kB (UM) 2*128kB (M) 2*256kB (UM) 2*512kB (M) 1*1024kB (M) 3*2048kB (UM) 957*4096kB (UM) = 3929320kB [ 817.973373][T22312] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 817.973382][T22312] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 817.973390][T22312] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 817.973398][T22312] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 817.973406][T22312] 60187 total pagecache pages [ 817.973410][T22312] 0 pages in swap cache [ 817.973414][T22312] Free swap = 124996kB [ 817.973418][T22312] Total swap = 124996kB [ 817.973422][T22312] 2097051 pages RAM [ 817.973428][T22312] 0 pages HighMem/MovableOnly [ 817.973435][T22312] 427116 pages reserved [ 817.973441][T22312] 0 pages cma reserved [ 818.015275][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.015370][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.031311][ T44] usb 2-1: usb_control_msg returned -32 [ 818.031356][ T44] usbtmc 2-1:16.0: can't read capabilities [ 818.051319][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 818.054235][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.054287][ T9] usb 6-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 818.054312][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 818.054342][ T9] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 818.054363][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.059127][ T9] usb 6-1: config 0 descriptor?? [ 818.083456][ T821] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 818.098278][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 818.114400][ T821] usb 5-1: Using ep0 maxpacket: 8 [ 818.120959][ T821] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 818.121235][ T821] usb 5-1: can't read configurations, error -61 [ 818.121602][ T821] usb usb5-port1: unable to enumerate USB device [ 818.400675][T22319] usbtmc 2-1:16.0: INITIATE_CLEAR returned 0 [ 818.756664][ T44] usb 2-1: USB disconnect, device number 39 [ 819.246319][T22324] FAULT_INJECTION: forcing a failure. [ 819.246319][T22324] name failslab, interval 1, probability 0, space 0, times 0 [ 819.246343][T22324] CPU: 0 UID: 0 PID: 22324 Comm: syz.1.6407 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 819.246358][T22324] Tainted: [L]=SOFTLOCKUP [ 819.246362][T22324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 819.246368][T22324] Call Trace: [ 819.246373][T22324] [ 819.246378][T22324] dump_stack_lvl+0xe8/0x150 [ 819.246395][T22324] should_fail_ex+0x46b/0x600 [ 819.246414][T22324] should_failslab+0xa8/0x100 [ 819.246426][T22324] __kmalloc_noprof+0xdf/0x7b0 [ 819.246435][T22324] ? kfree+0x161/0x6c0 [ 819.246448][T22324] ? snd_interval_refine+0x609/0xa50 [ 819.246459][T22324] ? snd_pcm_hw_refine+0x9b1/0x1710 [ 819.246472][T22324] snd_pcm_hw_refine+0x9b1/0x1710 [ 819.246490][T22324] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 819.246515][T22324] ? __kasan_kmalloc+0x93/0xb0 [ 819.246531][T22324] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 819.246544][T22324] snd_pcm_oss_change_params_locked+0xb21/0x3e00 [ 819.246572][T22324] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 819.246591][T22324] ? lockdep_hardirqs_on+0x7a/0x110 [ 819.246606][T22324] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 819.246622][T22324] ? snd_pcm_oss_write+0x20d/0xbe0 [ 819.246635][T22324] snd_pcm_oss_write+0x282/0xbe0 [ 819.246653][T22324] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 819.246669][T22324] vfs_write+0x2a3/0xba0 [ 819.246683][T22324] ? __pfx_vfs_write+0x10/0x10 [ 819.246693][T22324] ? __fget_files+0x2a/0x420 [ 819.246708][T22324] ? __fget_files+0x2a/0x420 [ 819.246721][T22324] ? __fget_files+0x3a6/0x420 [ 819.246733][T22324] ? __fget_files+0x2a/0x420 [ 819.246750][T22324] ksys_write+0x156/0x270 [ 819.246761][T22324] ? __pfx_ksys_write+0x10/0x10 [ 819.246775][T22324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.246786][T22324] do_syscall_64+0x15f/0x560 [ 819.246800][T22324] ? trace_irq_disable+0x3b/0x140 [ 819.246810][T22324] ? clear_bhb_loop+0x40/0x90 [ 819.246822][T22324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.246832][T22324] RIP: 0033:0x7f653345ce59 [ 819.246842][T22324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.246851][T22324] RSP: 002b:00007f65316ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 819.246863][T22324] RAX: ffffffffffffffda RBX: 00007f65336d5fa0 RCX: 00007f653345ce59 [ 819.246871][T22324] RDX: 000000000000fdbc RSI: 0000200000000500 RDI: 0000000000000003 [ 819.246877][T22324] RBP: 00007f65316ae090 R08: 0000000000000000 R09: 0000000000000000 [ 819.246883][T22324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.246889][T22324] R13: 00007f65336d6038 R14: 00007f65336d5fa0 R15: 00007fff968f0718 [ 819.246905][T22324] [ 820.228631][T22336] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6411'. [ 820.270034][T22338] FAULT_INJECTION: forcing a failure. [ 820.270034][T22338] name failslab, interval 1, probability 0, space 0, times 0 [ 820.270056][T22338] CPU: 0 UID: 0 PID: 22338 Comm: syz.1.6412 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 820.270072][T22338] Tainted: [L]=SOFTLOCKUP [ 820.270076][T22338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 820.270083][T22338] Call Trace: [ 820.270088][T22338] [ 820.270093][T22338] dump_stack_lvl+0xe8/0x150 [ 820.270108][T22338] should_fail_ex+0x46b/0x600 [ 820.270127][T22338] should_failslab+0xa8/0x100 [ 820.270139][T22338] kmem_cache_alloc_noprof+0x87/0x680 [ 820.270154][T22338] ? skb_clone+0x212/0x3a0 [ 820.270166][T22338] skb_clone+0x212/0x3a0 [ 820.270175][T22338] ? nfnetlink_rcv+0x4b0/0x27b0 [ 820.270192][T22338] nfnetlink_rcv+0x4e2/0x27b0 [ 820.270208][T22338] ? sock_sendmsg_nosec+0x112/0x150 [ 820.270220][T22338] ? __pfx_snprintf+0x10/0x10 [ 820.270234][T22338] ? unwind_get_return_address+0x4d/0x90 [ 820.270252][T22338] ? trim_netdev_trace+0x7ac/0x840 [ 820.270265][T22338] ? __pfx_trim_netdev_trace+0x10/0x10 [ 820.270275][T22338] ? stack_trace_save+0xa9/0x100 [ 820.270292][T22338] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 820.270323][T22338] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 820.270343][T22338] ? ref_tracker_free+0x673/0x820 [ 820.270360][T22338] ? __netlink_deliver_tap+0x636/0x8b0 [ 820.270376][T22338] ? netlink_deliver_tap+0x19c/0x1b0 [ 820.270392][T22338] ? netlink_unicast+0x754/0x920 [ 820.270404][T22338] ? netlink_sendmsg+0x813/0xb40 [ 820.270413][T22338] ? sock_sendmsg_nosec+0x112/0x150 [ 820.270431][T22338] ? ____sys_sendmsg+0x55c/0x870 [ 820.270445][T22338] ? ___sys_sendmsg+0x2a5/0x360 [ 820.270453][T22338] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 820.270462][T22338] ? do_syscall_64+0x15f/0x560 [ 820.270476][T22338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.270493][T22338] ? skb_clone+0x246/0x3a0 [ 820.270504][T22338] ? __netlink_deliver_tap+0x866/0x8b0 [ 820.270514][T22338] ? netlink_deliver_tap+0x2e/0x1b0 [ 820.270526][T22338] ? netlink_deliver_tap+0x2e/0x1b0 [ 820.270535][T22338] ? netlink_deliver_tap+0x2e/0x1b0 [ 820.270547][T22338] netlink_unicast+0x780/0x920 [ 820.270566][T22338] netlink_sendmsg+0x813/0xb40 [ 820.270580][T22338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 820.270591][T22338] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 820.270607][T22338] ? aa_sock_msg_perm+0x122/0x200 [ 820.270621][T22338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 820.270630][T22338] sock_sendmsg_nosec+0x112/0x150 [ 820.270647][T22338] ____sys_sendmsg+0x55c/0x870 [ 820.270676][T22338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 820.270707][T22338] ? import_iovec+0x73/0xa0 [ 820.270730][T22338] ___sys_sendmsg+0x2a5/0x360 [ 820.270745][T22338] ? __lock_acquire+0x6b5/0x2d10 [ 820.270768][T22338] ? __pfx____sys_sendmsg+0x10/0x10 [ 820.270814][T22338] ? __fget_files+0x2a/0x420 [ 820.270837][T22338] ? __fget_files+0x3a6/0x420 [ 820.270868][T22338] __x64_sys_sendmsg+0x1c3/0x2a0 [ 820.270889][T22338] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 820.270908][T22338] ? __pfx_ksys_write+0x10/0x10 [ 820.270925][T22338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.270935][T22338] do_syscall_64+0x15f/0x560 [ 820.270950][T22338] ? trace_irq_disable+0x3b/0x140 [ 820.270960][T22338] ? clear_bhb_loop+0x40/0x90 [ 820.270973][T22338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.270983][T22338] RIP: 0033:0x7f653345ce59 [ 820.270993][T22338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.271002][T22338] RSP: 002b:00007f65316ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 820.271014][T22338] RAX: ffffffffffffffda RBX: 00007f65336d5fa0 RCX: 00007f653345ce59 [ 820.271021][T22338] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000009 [ 820.271028][T22338] RBP: 00007f65316ae090 R08: 0000000000000000 R09: 0000000000000000 [ 820.271034][T22338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.271040][T22338] R13: 00007f65336d6038 R14: 00007f65336d5fa0 R15: 00007fff968f0718 [ 820.271055][T22338] [ 820.437442][ T9] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 820.466368][ T5715] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 820.594620][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 820.599500][ T9] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 820.599527][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.599545][ T9] usb 5-1: Product: syz [ 820.599558][ T9] usb 5-1: Manufacturer: syz [ 820.599571][ T9] usb 5-1: SerialNumber: syz [ 820.614722][ T9] usb 5-1: config 0 descriptor?? [ 820.776258][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 820.778919][ T5715] usb 4-1: config 3 has an invalid interface number: 24 but max is 2 [ 820.778944][ T5715] usb 4-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 820.778961][ T5715] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 3 [ 820.778980][ T5715] usb 4-1: config 3 has no interface number 0 [ 820.779028][ T5715] usb 4-1: config 3 interface 24 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 820.779053][ T5715] usb 4-1: config 3 interface 24 has no altsetting 0 [ 820.841290][ T5715] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice= 9.f7 [ 820.841319][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.841337][ T5715] usb 4-1: Product: у [ 820.841350][ T5715] usb 4-1: Manufacturer: Ђ [ 820.841363][ T5715] usb 4-1: SerialNumber: Џ [ 820.936129][ T821] usb 6-1: USB disconnect, device number 67 [ 820.968959][ T9] airspy 5-1:0.0: usb_control_msg() failed -71 request 09 [ 820.968985][ T9] airspy 5-1:0.0: Could not detect board [ 820.969090][ T9] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 821.019257][ T9] usb 5-1: USB disconnect, device number 85 [ 821.093473][ T5715] asix 4-1:3.24: probe with driver asix failed with error -22 [ 821.115370][ T5715] usb 4-1: USB disconnect, device number 9 [ 821.380029][T22360] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6420'. [ 821.556421][ T821] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 821.718678][ T821] usb 6-1: Using ep0 maxpacket: 8 [ 821.723866][ T821] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 821.723899][ T821] usb 6-1: can't read configurations, error -61 [ 821.825288][T22377] FAULT_INJECTION: forcing a failure. [ 821.825288][T22377] name failslab, interval 1, probability 0, space 0, times 0 [ 821.825311][T22377] CPU: 0 UID: 0 PID: 22377 Comm: syz.3.6427 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 821.825327][T22377] Tainted: [L]=SOFTLOCKUP [ 821.825331][T22377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 821.825338][T22377] Call Trace: [ 821.825343][T22377] [ 821.825348][T22377] dump_stack_lvl+0xe8/0x150 [ 821.825364][T22377] should_fail_ex+0x46b/0x600 [ 821.825384][T22377] should_failslab+0xa8/0x100 [ 821.825396][T22377] __kmalloc_noprof+0xdf/0x7b0 [ 821.825406][T22377] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 821.825422][T22377] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 821.825439][T22377] genl_family_rcv_msg_doit+0xd9/0x330 [ 821.825452][T22377] ? __asan_memcpy+0x40/0x70 [ 821.825471][T22377] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 821.825499][T22377] ? apparmor_capable+0x126/0x170 [ 821.825519][T22377] ? bpf_lsm_capable+0x9/0x20 [ 821.825533][T22377] ? security_capable+0x7e/0x2c0 [ 821.825548][T22377] genl_rcv_msg+0x61c/0x7a0 [ 821.825563][T22377] ? __pfx_genl_rcv_msg+0x10/0x10 [ 821.825574][T22377] ? ref_tracker_free+0x673/0x820 [ 821.825585][T22377] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 821.825601][T22377] ? ____sys_sendmsg+0x55c/0x870 [ 821.825616][T22377] ? ___sys_sendmsg+0x2a5/0x360 [ 821.825624][T22377] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 821.825632][T22377] ? do_syscall_64+0x15f/0x560 [ 821.825646][T22377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.825661][T22377] netlink_rcv_skb+0x232/0x4b0 [ 821.825676][T22377] ? __pfx_genl_rcv_msg+0x10/0x10 [ 821.825689][T22377] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 821.825711][T22377] ? netlink_deliver_tap+0x2e/0x1b0 [ 821.825720][T22377] ? netlink_deliver_tap+0x2e/0x1b0 [ 821.825731][T22377] genl_rcv+0x28/0x40 [ 821.825742][T22377] netlink_unicast+0x780/0x920 [ 821.825764][T22377] netlink_sendmsg+0x813/0xb40 [ 821.825779][T22377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 821.825790][T22377] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 821.825806][T22377] ? aa_sock_msg_perm+0x122/0x200 [ 821.825819][T22377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 821.825828][T22377] sock_sendmsg_nosec+0x112/0x150 [ 821.825841][T22377] ____sys_sendmsg+0x55c/0x870 [ 821.825859][T22377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 821.825879][T22377] ? import_iovec+0x73/0xa0 [ 821.825893][T22377] ___sys_sendmsg+0x2a5/0x360 [ 821.825902][T22377] ? __lock_acquire+0x6b5/0x2d10 [ 821.825915][T22377] ? __pfx____sys_sendmsg+0x10/0x10 [ 821.825942][T22377] ? __fget_files+0x2a/0x420 [ 821.825955][T22377] ? __fget_files+0x3a6/0x420 [ 821.825974][T22377] __x64_sys_sendmsg+0x1c3/0x2a0 [ 821.825985][T22377] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 821.825999][T22377] ? __pfx_ksys_write+0x10/0x10 [ 821.826013][T22377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.826024][T22377] do_syscall_64+0x15f/0x560 [ 821.826038][T22377] ? trace_irq_disable+0x3b/0x140 [ 821.826048][T22377] ? clear_bhb_loop+0x40/0x90 [ 821.826060][T22377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.826070][T22377] RIP: 0033:0x7f37a8b2ce59 [ 821.826083][T22377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.826092][T22377] RSP: 002b:00007f37a6d65028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.826104][T22377] RAX: ffffffffffffffda RBX: 00007f37a8da6090 RCX: 00007f37a8b2ce59 [ 821.826111][T22377] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 0000000000000005 [ 821.826118][T22377] RBP: 00007f37a6d65090 R08: 0000000000000000 R09: 0000000000000000 [ 821.826125][T22377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.826131][T22377] R13: 00007f37a8da6128 R14: 00007f37a8da6090 R15: 00007fff7e63bf88 [ 821.826147][T22377] [ 821.870000][ T821] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 821.887604][ T5715] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 822.027082][ T821] usb 6-1: Using ep0 maxpacket: 8 [ 822.036783][ T821] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 822.036903][ T821] usb 6-1: can't read configurations, error -61 [ 822.038932][ T821] usb usb6-port1: attempt power cycle [ 822.230430][ T5715] usb 5-1: Using ep0 maxpacket: 32 [ 822.264849][ T5715] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.264881][ T5715] usb 5-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 822.264895][ T5715] usb 5-1: config 0 interface 0 has no altsetting 0 [ 822.264915][ T5715] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 822.264927][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.320489][ T5715] usb 5-1: config 0 descriptor?? [ 822.332355][ T5715] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 822.475426][ T821] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 822.498504][ T821] usb 6-1: Using ep0 maxpacket: 8 [ 822.502085][ T821] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 822.502120][ T821] usb 6-1: can't read configurations, error -61 [ 822.635680][ T821] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 822.658435][ T821] usb 6-1: Using ep0 maxpacket: 8 [ 822.668910][ T821] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 822.668946][ T821] usb 6-1: can't read configurations, error -61 [ 822.669346][ T821] usb usb6-port1: unable to enumerate USB device [ 822.871600][T22383] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6430'. [ 822.999033][ T821] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 823.159351][ T821] usb 4-1: Using ep0 maxpacket: 8 [ 823.162373][ T821] usb 4-1: unable to get BOS descriptor or descriptor too short [ 823.163479][ T821] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 823.163501][ T821] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 823.165713][ T821] usb 4-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 823.165737][ T821] usb 4-1: New USB device strings: Mfr=244, Product=1, SerialNumber=3 [ 823.165756][ T821] usb 4-1: Product: syz [ 823.165769][ T821] usb 4-1: Manufacturer: syz [ 823.165777][ T821] usb 4-1: SerialNumber: syz [ 823.457027][ T821] usb 4-1: 0:1 : does not exist [ 823.457520][ T821] usb 4-1: 6:0: failed to get current value for ch 0 (-71) [ 823.458192][ T821] usb 4-1: 6:0: cannot get min/max values for control 2 (id 6) [ 823.458206][ T821] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 823.458215][ T821] usb 4-1: [6] FU [PCM Capture Volume] ch = 1, val = 0/1/1 [ 823.462752][ T821] usb 4-1: 6:0: failed to get current value for ch 0 (-71) [ 823.468279][ T821] usb 4-1: 6:0: failed to get current value for ch 1 (-71) [ 823.501964][ T821] usb 4-1: unit 0 not found! [ 823.564861][ T821] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 823.570326][ T821] usb 4-1: USB disconnect, device number 10 [ 823.592884][T22170] udevd[22170]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 824.066768][T22393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6434'. [ 824.067075][T22393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6434'. [ 824.067274][T22393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6434'. [ 824.121043][ T5715] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 824.291992][ T5715] usb 2-1: Using ep0 maxpacket: 32 [ 824.294153][ T5715] usb 2-1: config 3 has an invalid interface number: 24 but max is 2 [ 824.294176][ T5715] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 824.294194][ T5715] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 3 [ 824.294214][ T5715] usb 2-1: config 3 has no interface number 0 [ 824.294244][ T5715] usb 2-1: config 3 interface 24 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 824.294257][ T5715] usb 2-1: config 3 interface 24 has no altsetting 0 [ 824.297604][ T5715] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice= 9.f7 [ 824.297628][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.297646][ T5715] usb 2-1: Product: у [ 824.297660][ T5715] usb 2-1: Manufacturer: Ђ [ 824.297673][ T5715] usb 2-1: SerialNumber: Џ [ 824.587371][ T5715] asix 2-1:3.24: probe with driver asix failed with error -22 [ 824.601024][ T5715] usb 2-1: USB disconnect, device number 40 [ 824.849316][ T8019] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 824.849557][ T44] usb 5-1: USB disconnect, device number 86 [ 825.129185][T22415] FAULT_INJECTION: forcing a failure. [ 825.129185][T22415] name failslab, interval 1, probability 0, space 0, times 0 [ 825.129220][T22415] CPU: 1 UID: 0 PID: 22415 Comm: syz.3.6441 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 825.129246][T22415] Tainted: [L]=SOFTLOCKUP [ 825.129252][T22415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 825.129264][T22415] Call Trace: [ 825.129272][T22415] [ 825.129280][T22415] dump_stack_lvl+0xe8/0x150 [ 825.129306][T22415] should_fail_ex+0x46b/0x600 [ 825.129338][T22415] should_failslab+0xa8/0x100 [ 825.129362][T22415] kmem_cache_alloc_noprof+0x87/0x680 [ 825.129388][T22415] ? skb_clone+0x212/0x3a0 [ 825.129411][T22415] skb_clone+0x212/0x3a0 [ 825.129440][T22415] __netlink_deliver_tap+0x424/0x8b0 [ 825.129471][T22415] ? netlink_deliver_tap+0x2e/0x1b0 [ 825.129491][T22415] netlink_deliver_tap+0x19c/0x1b0 [ 825.129511][T22415] __netlink_sendskb+0x47/0x90 [ 825.129537][T22415] netlink_dump+0xa0f/0xe10 [ 825.129574][T22415] ? __pfx_netlink_dump+0x10/0x10 [ 825.129611][T22415] ? lockdep_hardirqs_on+0x7a/0x110 [ 825.129647][T22415] __netlink_dump_start+0x5cb/0x7e0 [ 825.129682][T22415] ctnetlink_get_ct_dying+0x139/0x1c0 [ 825.129708][T22415] ? __pfx_ctnetlink_get_ct_dying+0x10/0x10 [ 825.129732][T22415] ? __pfx_ctnetlink_dump_dying+0x10/0x10 [ 825.129758][T22415] ? lockdep_hardirqs_on+0x7a/0x110 [ 825.129782][T22415] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 825.129815][T22415] nfnetlink_rcv_msg+0xbc9/0x1260 [ 825.129840][T22415] ? nfnetlink_rcv_msg+0x230/0x1260 [ 825.129881][T22415] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 825.129936][T22415] ? __lock_acquire+0x6b5/0x2d10 [ 825.129959][T22415] ? __lock_acquire+0x6b5/0x2d10 [ 825.129977][T22415] ? sock_sendmsg_nosec+0x112/0x150 [ 825.130006][T22415] netlink_rcv_skb+0x232/0x4b0 [ 825.130033][T22415] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 825.130060][T22415] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 825.130098][T22415] ? bpf_lsm_capable+0x9/0x20 [ 825.130119][T22415] ? security_capable+0x7e/0x2c0 [ 825.130146][T22415] nfnetlink_rcv+0x2c0/0x27b0 [ 825.130172][T22415] ? sock_sendmsg_nosec+0x112/0x150 [ 825.130195][T22415] ? __pfx_snprintf+0x10/0x10 [ 825.130218][T22415] ? unwind_get_return_address+0x4d/0x90 [ 825.130242][T22415] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 825.130276][T22415] ? trim_netdev_trace+0x7ac/0x840 [ 825.130300][T22415] ? __pfx_trim_netdev_trace+0x10/0x10 [ 825.130319][T22415] ? stack_trace_save+0xa9/0x100 [ 825.130346][T22415] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 825.130373][T22415] ? save_netdev_trace_buffer+0x18f/0x5f0 [ 825.130397][T22415] ? save_netdev_trace_buffer+0x4cf/0x5f0 [ 825.130431][T22415] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 825.130451][T22415] ? ref_tracker_free+0x673/0x820 [ 825.130470][T22415] ? __netlink_deliver_tap+0x636/0x8b0 [ 825.130486][T22415] ? netlink_deliver_tap+0x19c/0x1b0 [ 825.130502][T22415] ? netlink_unicast+0x754/0x920 [ 825.130524][T22415] ? netlink_sendmsg+0x813/0xb40 [ 825.130541][T22415] ? sock_sendmsg_nosec+0x112/0x150 [ 825.130560][T22415] ? ____sys_sendmsg+0x55c/0x870 [ 825.130584][T22415] ? ___sys_sendmsg+0x2a5/0x360 [ 825.130599][T22415] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 825.130616][T22415] ? do_syscall_64+0x15f/0x560 [ 825.130639][T22415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.130674][T22415] ? skb_clone+0x246/0x3a0 [ 825.130696][T22415] ? __netlink_deliver_tap+0x866/0x8b0 [ 825.130715][T22415] ? netlink_deliver_tap+0x2e/0x1b0 [ 825.130740][T22415] ? netlink_deliver_tap+0x2e/0x1b0 [ 825.130757][T22415] ? netlink_deliver_tap+0x2e/0x1b0 [ 825.130781][T22415] netlink_unicast+0x780/0x920 [ 825.130817][T22415] netlink_sendmsg+0x813/0xb40 [ 825.130845][T22415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.130866][T22415] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 825.130895][T22415] ? aa_sock_msg_perm+0x122/0x200 [ 825.130918][T22415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.130934][T22415] sock_sendmsg_nosec+0x112/0x150 [ 825.130959][T22415] ____sys_sendmsg+0x55c/0x870 [ 825.130989][T22415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 825.131022][T22415] ? import_iovec+0x73/0xa0 [ 825.131048][T22415] ___sys_sendmsg+0x2a5/0x360 [ 825.131065][T22415] ? __lock_acquire+0x6b5/0x2d10 [ 825.131089][T22415] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.131144][T22415] ? __fget_files+0x2a/0x420 [ 825.131167][T22415] ? __fget_files+0x3a6/0x420 [ 825.131200][T22415] __x64_sys_sendmsg+0x1c3/0x2a0 [ 825.131220][T22415] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 825.131248][T22415] ? __pfx_ksys_write+0x10/0x10 [ 825.131276][T22415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.131296][T22415] do_syscall_64+0x15f/0x560 [ 825.131320][T22415] ? trace_irq_disable+0x3b/0x140 [ 825.131338][T22415] ? clear_bhb_loop+0x40/0x90 [ 825.131361][T22415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.131379][T22415] RIP: 0033:0x7f37a8b2ce59 [ 825.131398][T22415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.131413][T22415] RSP: 002b:00007f37a6d86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 825.131440][T22415] RAX: ffffffffffffffda RBX: 00007f37a8da5fa0 RCX: 00007f37a8b2ce59 [ 825.131454][T22415] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000006 [ 825.131466][T22415] RBP: 00007f37a6d86090 R08: 0000000000000000 R09: 0000000000000000 [ 825.131478][T22415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.131490][T22415] R13: 00007f37a8da6038 R14: 00007f37a8da5fa0 R15: 00007fff7e63bf88 [ 825.131521][T22415] [ 825.282981][T22419] netlink: 'syz.3.6442': attribute type 6 has an invalid length. [ 825.585083][ T44] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 825.749406][ T44] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 825.749423][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.749434][ T44] usb 2-1: Product: syz [ 825.749442][ T44] usb 2-1: Manufacturer: syz [ 825.749450][ T44] usb 2-1: SerialNumber: syz [ 825.753477][ T44] usb 2-1: config 0 descriptor?? [ 825.971441][ T44] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 825.988868][ T821] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 826.172949][ T821] usb 6-1: Using ep0 maxpacket: 8 [ 826.178583][ T821] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 826.178617][ T821] usb 6-1: can't read configurations, error -61 [ 826.249533][T22431] FAULT_INJECTION: forcing a failure. [ 826.249533][T22431] name failslab, interval 1, probability 0, space 0, times 0 [ 826.249556][T22431] CPU: 1 UID: 0 PID: 22431 Comm: syz.3.6447 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 826.249573][T22431] Tainted: [L]=SOFTLOCKUP [ 826.249577][T22431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 826.249583][T22431] Call Trace: [ 826.249588][T22431] [ 826.249593][T22431] dump_stack_lvl+0xe8/0x150 [ 826.249611][T22431] should_fail_ex+0x46b/0x600 [ 826.249630][T22431] should_failslab+0xa8/0x100 [ 826.249642][T22431] __kmalloc_cache_noprof+0x84/0x690 [ 826.249653][T22431] ? drm_atomic_commit_alloc+0xa9/0x100 [ 826.249669][T22431] drm_atomic_commit_alloc+0xa9/0x100 [ 826.249683][T22431] drm_atomic_helper_set_config+0x5c/0x160 [ 826.249699][T22431] drm_mode_setcrtc+0xa6b/0x1d20 [ 826.249731][T22431] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 826.249747][T22431] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 826.249776][T22431] ? rt_spin_unlock+0x160/0x200 [ 826.249798][T22431] ? drm_is_current_master+0x1a2/0x210 [ 826.249820][T22431] drm_ioctl_kernel+0x2e2/0x3b0 [ 826.249846][T22431] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 826.249868][T22431] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 826.249897][T22431] drm_ioctl+0x6c0/0xb80 [ 826.249922][T22431] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 826.249949][T22431] ? __pfx_drm_ioctl+0x10/0x10 [ 826.249970][T22431] ? __fget_files+0x2a/0x420 [ 826.249985][T22431] ? bpf_lsm_file_ioctl+0x9/0x20 [ 826.249999][T22431] ? __pfx_drm_ioctl+0x10/0x10 [ 826.250012][T22431] __se_sys_ioctl+0xff/0x170 [ 826.250022][T22431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.250033][T22431] do_syscall_64+0x15f/0x560 [ 826.250047][T22431] ? trace_irq_disable+0x3b/0x140 [ 826.250057][T22431] ? clear_bhb_loop+0x40/0x90 [ 826.250070][T22431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.250080][T22431] RIP: 0033:0x7f37a8b2ce59 [ 826.250090][T22431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.250100][T22431] RSP: 002b:00007f37a6d86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 826.250112][T22431] RAX: ffffffffffffffda RBX: 00007f37a8da5fa0 RCX: 00007f37a8b2ce59 [ 826.250119][T22431] RDX: 0000200000000580 RSI: 00000000c06864a2 RDI: 0000000000000003 [ 826.250126][T22431] RBP: 00007f37a6d86090 R08: 0000000000000000 R09: 0000000000000000 [ 826.250133][T22431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.250139][T22431] R13: 00007f37a8da6038 R14: 00007f37a8da5fa0 R15: 00007fff7e63bf88 [ 826.250155][T22431] [ 826.359057][ T821] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 826.546823][ T821] usb 6-1: Using ep0 maxpacket: 8 [ 826.553249][ T821] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 826.553284][ T821] usb 6-1: can't read configurations, error -61 [ 826.572804][ T821] usb usb6-port1: attempt power cycle [ 826.834986][ T44] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 826.851594][ T44] usb 2-1: USB disconnect, device number 41 [ 826.952752][ T821] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 826.987461][ T821] usb 6-1: Using ep0 maxpacket: 8 [ 826.993817][ T821] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 826.993853][ T821] usb 6-1: can't read configurations, error -61 [ 827.147952][ T821] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 827.178332][ T821] usb 6-1: Using ep0 maxpacket: 8 [ 827.181897][ T821] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 827.181928][ T821] usb 6-1: can't read configurations, error -61 [ 827.182285][ T821] usb usb6-port1: unable to enumerate USB device [ 827.278344][T22432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 827.452012][T22439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6450'. [ 828.409814][ T821] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 828.488756][T22464] usb usb7: usbfs: process 22464 (syz.1.6458) did not claim interface 0 before use [ 828.569184][ T821] usb 4-1: not running at top speed; connect to a high speed hub [ 828.570544][ T821] usb 4-1: config 6 has an invalid interface number: 197 but max is 2 [ 828.570568][ T821] usb 4-1: config 6 has an invalid interface number: 103 but max is 2 [ 828.570586][ T821] usb 4-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 828.570601][ T821] usb 4-1: config 6 has an invalid interface number: 129 but max is 2 [ 828.570611][ T821] usb 4-1: config 6 has no interface number 0 [ 828.570619][ T821] usb 4-1: config 6 has no interface number 1 [ 828.570627][ T821] usb 4-1: config 6 has no interface number 2 [ 828.570663][ T821] usb 4-1: config 6 interface 197 altsetting 2 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 828.570676][ T821] usb 4-1: config 6 interface 197 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 828.570704][ T821] usb 4-1: config 6 interface 103 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 828.570715][ T821] usb 4-1: config 6 interface 103 altsetting 129 has an endpoint descriptor with address 0x24, changing to 0x4 [ 828.570728][ T821] usb 4-1: config 6 interface 103 altsetting 129 endpoint 0x4 has invalid maxpacket 53859, setting to 64 [ 828.570741][ T821] usb 4-1: config 6 interface 103 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 828.570753][ T821] usb 4-1: config 6 interface 103 altsetting 129 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 828.570766][ T821] usb 4-1: config 6 interface 103 altsetting 129 has a duplicate endpoint with address 0x4, skipping [ 828.570777][ T821] usb 4-1: config 6 interface 103 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 828.570788][ T821] usb 4-1: config 6 interface 103 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 828.570798][ T821] usb 4-1: config 6 interface 103 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 828.570809][ T821] usb 4-1: config 6 interface 103 altsetting 129 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 828.570821][ T821] usb 4-1: config 6 interface 103 altsetting 129 has a duplicate endpoint with address 0x3, skipping [ 828.570832][ T821] usb 4-1: config 6 interface 103 altsetting 129 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 828.570853][ T821] usb 4-1: config 6 interface 129 altsetting 242 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 828.570867][ T821] usb 4-1: config 6 interface 129 altsetting 242 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 828.570879][ T821] usb 4-1: config 6 interface 129 altsetting 242 has a duplicate endpoint with address 0xA, skipping [ 828.570890][ T821] usb 4-1: config 6 interface 129 altsetting 242 has a duplicate endpoint with address 0x3, skipping [ 828.570902][ T821] usb 4-1: config 6 interface 129 altsetting 242 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 828.570915][ T821] usb 4-1: config 6 interface 129 altsetting 242 has a duplicate endpoint with address 0x6, skipping [ 828.570926][ T821] usb 4-1: config 6 interface 129 altsetting 242 has an invalid descriptor for endpoint zero, skipping [ 828.570936][ T821] usb 4-1: config 6 interface 129 altsetting 242 has a duplicate endpoint with address 0xC, skipping [ 828.570946][ T821] usb 4-1: config 6 interface 129 altsetting 242 has a duplicate endpoint with address 0xC, skipping [ 828.570956][ T821] usb 4-1: config 6 interface 129 altsetting 242 has a duplicate endpoint with address 0x3, skipping [ 828.570967][ T821] usb 4-1: config 6 interface 129 altsetting 242 has a duplicate endpoint with address 0x8, skipping [ 828.570977][ T821] usb 4-1: config 6 interface 129 altsetting 242 has a duplicate endpoint with address 0x4, skipping [ 828.570987][ T821] usb 4-1: config 6 interface 129 altsetting 242 has a duplicate endpoint with address 0xD, skipping [ 828.570998][ T821] usb 4-1: config 6 interface 129 altsetting 242 has a duplicate endpoint with address 0xC, skipping [ 828.571008][ T821] usb 4-1: config 6 interface 129 altsetting 242 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 828.571020][ T821] usb 4-1: config 6 interface 129 altsetting 242 has a duplicate endpoint with address 0x3, skipping [ 828.571031][ T821] usb 4-1: config 6 interface 197 has no altsetting 0 [ 828.571039][ T821] usb 4-1: config 6 interface 103 has no altsetting 0 [ 828.571047][ T821] usb 4-1: config 6 interface 129 has no altsetting 0 [ 828.573119][ T821] usb 4-1: New USB device found, idVendor=2040, idProduct=9941, bcdDevice=5e.8e [ 828.573144][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.573163][ T821] usb 4-1: Product: syz [ 828.573175][ T821] usb 4-1: Manufacturer: syz [ 828.573187][ T821] usb 4-1: SerialNumber: syz [ 828.619102][T22450] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 828.694783][ T10] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 828.908333][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 829.083776][ T821] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 829.087231][ T821] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 829.087333][ T821] dib0700: firmware download failed at 7 with -8 [ 829.127739][T22470] CIFS mount error: No usable UNC path provided in device string! [ 829.127739][T22470] [ 829.127759][T22470] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 829.162360][ T821] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 829.180740][ T821] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 829.180845][ T821] dib0700: firmware download failed at 7 with -8 [ 829.208389][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 829.214106][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.214136][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.214171][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 829.214193][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.261819][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 829.261847][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.269544][ T9] usb 2-1: config 0 descriptor?? [ 829.294109][ T10] usb 5-1: config 0 descriptor?? [ 829.301167][ T9] hub 2-1:0.0: USB hub found [ 829.318020][ T10] cp210x 5-1:0.0: cp210x converter detected [ 829.318836][ T821] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 829.350160][ T821] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 829.350330][ T821] dib0700: firmware download failed at 7 with -8 [ 829.385949][ T821] usb 4-1: USB disconnect, device number 11 [ 829.493906][ T9] hub 2-1:0.0: 26 ports detected [ 829.494372][ T9] hub 2-1:0.0: insufficient power available to use all downstream ports [ 829.537727][ T10] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 829.538452][ T10] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 829.538556][ T10] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 829.569594][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 829.583766][ T10] usb 5-1: USB disconnect, device number 87 [ 829.612550][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 829.617433][ T10] cp210x 5-1:0.0: device disconnected [ 829.710565][T22466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.711157][T22466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.788656][ T9] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 829.788674][ T9] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 829.824104][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 829.824215][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 829.918215][ T9] usb 2-1: USB disconnect, device number 42 [ 829.953214][T22473] tipc: Failed to remove unknown binding: 66,1,1/0:175598754/175598756 [ 829.953248][T22473] tipc: Failed to remove unknown binding: 66,1,1/0:175598754/175598756 [ 830.024625][T22481] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6463'. [ 830.418382][T22499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6472'. [ 830.419249][T22499] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 830.470167][ T44] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 830.554112][ T5632] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 830.630004][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 830.640431][ T44] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 830.640462][ T44] usb 4-1: can't read configurations, error -61 [ 830.661646][ T821] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 830.714325][ T5632] usb 6-1: Using ep0 maxpacket: 32 [ 830.723971][ T5632] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.724029][ T5632] usb 6-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 830.724046][ T5632] usb 6-1: config 0 interface 0 has no altsetting 0 [ 830.724064][ T5632] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 830.724076][ T5632] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.732295][ T5632] usb 6-1: config 0 descriptor?? [ 830.771058][ T5632] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 830.789167][ T44] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 830.868474][T22508] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6475'. [ 830.884282][ T821] usb 5-1: Using ep0 maxpacket: 16 [ 830.895658][ T821] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 830.895682][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.895693][ T821] usb 5-1: Product: syz [ 830.895702][ T821] usb 5-1: Manufacturer: syz [ 830.895714][ T821] usb 5-1: SerialNumber: syz [ 830.949438][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 830.950804][ T821] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 830.954333][ T44] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 830.954367][ T44] usb 4-1: can't read configurations, error -61 [ 830.954755][ T44] usb usb4-port1: attempt power cycle [ 831.063544][T22512] FAULT_INJECTION: forcing a failure. [ 831.063544][T22512] name failslab, interval 1, probability 0, space 0, times 0 [ 831.063579][T22512] CPU: 1 UID: 0 PID: 22512 Comm: syz.1.6477 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 831.063603][T22512] Tainted: [L]=SOFTLOCKUP [ 831.063610][T22512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 831.063617][T22512] Call Trace: [ 831.063622][T22512] [ 831.063627][T22512] dump_stack_lvl+0xe8/0x150 [ 831.063644][T22512] should_fail_ex+0x46b/0x600 [ 831.063666][T22512] should_failslab+0xa8/0x100 [ 831.063687][T22512] __kmalloc_cache_noprof+0x84/0x690 [ 831.063706][T22512] ? binder_transaction+0x22c9/0x6fa0 [ 831.063737][T22512] binder_transaction+0x22c9/0x6fa0 [ 831.063797][T22512] ? __pfx_binder_transaction+0x10/0x10 [ 831.063813][T22512] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 831.063835][T22512] ? __lock_acquire+0x6b5/0x2d10 [ 831.063861][T22512] ? __lock_acquire+0x6b5/0x2d10 [ 831.063890][T22512] ? __lock_acquire+0x6b5/0x2d10 [ 831.063911][T22512] ? __lock_acquire+0x6b5/0x2d10 [ 831.063947][T22512] ? __might_fault+0xaf/0x130 [ 831.063959][T22512] ? __might_fault+0xaf/0x130 [ 831.063977][T22512] binder_ioctl_write_read+0xb37/0xa490 [ 831.063999][T22512] ? is_bpf_text_address+0x26/0x2b0 [ 831.064039][T22512] ? __kernel_text_address+0xd/0x30 [ 831.064078][T22512] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 831.064105][T22512] ? stack_depot_save_flags+0x33/0x810 [ 831.064125][T22512] ? do_raw_spin_lock+0x12b/0x2f0 [ 831.064147][T22512] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 831.064159][T22512] ? reacquire_held_locks+0x104/0x190 [ 831.064177][T22512] ? rt_spin_lock+0x1e0/0x400 [ 831.064198][T22512] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 831.064222][T22512] ? rt_spin_unlock+0x14f/0x200 [ 831.064251][T22512] ? binder_get_thread+0x177/0x6d0 [ 831.064277][T22512] binder_ioctl+0x426/0x1b10 [ 831.064294][T22512] ? tomoyo_path_number_perm+0x219/0x630 [ 831.064306][T22512] ? tomoyo_path_number_perm+0x219/0x630 [ 831.064317][T22512] ? do_vfs_ioctl+0x117b/0x1540 [ 831.064328][T22512] ? __pfx_binder_ioctl+0x10/0x10 [ 831.064349][T22512] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 831.064398][T22512] ? __fget_files+0x2a/0x420 [ 831.064424][T22512] ? __fget_files+0x2a/0x420 [ 831.064444][T22512] ? __fget_files+0x3a6/0x420 [ 831.064458][T22512] ? __fget_files+0x2a/0x420 [ 831.064472][T22512] ? bpf_lsm_file_ioctl+0x9/0x20 [ 831.064488][T22512] ? __pfx_binder_ioctl+0x10/0x10 [ 831.064504][T22512] __se_sys_ioctl+0xff/0x170 [ 831.064522][T22512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.064542][T22512] do_syscall_64+0x15f/0x560 [ 831.064566][T22512] ? trace_irq_disable+0x3b/0x140 [ 831.064583][T22512] ? clear_bhb_loop+0x40/0x90 [ 831.064611][T22512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.064622][T22512] RIP: 0033:0x7f653345ce59 [ 831.064633][T22512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.064642][T22512] RSP: 002b:00007f65316ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 831.064654][T22512] RAX: ffffffffffffffda RBX: 00007f65336d5fa0 RCX: 00007f653345ce59 [ 831.064661][T22512] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 831.064673][T22512] RBP: 00007f65316ae090 R08: 0000000000000000 R09: 0000000000000000 [ 831.064684][T22512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.064696][T22512] R13: 00007f65336d6038 R14: 00007f65336d5fa0 R15: 00007fff968f0718 [ 831.064725][T22512] [ 831.312817][ T44] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 831.339262][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 831.362102][T22514] FAULT_INJECTION: forcing a failure. [ 831.362102][T22514] name failslab, interval 1, probability 0, space 0, times 0 [ 831.362136][T22514] CPU: 1 UID: 0 PID: 22514 Comm: syz.1.6478 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 831.362162][T22514] Tainted: [L]=SOFTLOCKUP [ 831.362169][T22514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 831.362180][T22514] Call Trace: [ 831.362188][T22514] [ 831.362199][T22514] dump_stack_lvl+0xe8/0x150 [ 831.362225][T22514] should_fail_ex+0x46b/0x600 [ 831.362256][T22514] should_failslab+0xa8/0x100 [ 831.362276][T22514] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 831.362302][T22514] ? __alloc_skb+0x1d0/0x7d0 [ 831.362323][T22514] ? lockdep_hardirqs_on+0x7a/0x110 [ 831.362353][T22514] __alloc_skb+0x1d0/0x7d0 [ 831.362374][T22514] ? netlink_dump+0xe2/0xe10 [ 831.362401][T22514] netlink_dump+0x1d8/0xe10 [ 831.362427][T22514] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 831.362474][T22514] ? __pfx_netlink_dump+0x10/0x10 [ 831.362519][T22514] netlink_recvmsg+0x690/0xa50 [ 831.362545][T22514] ? __pfx_netlink_recvmsg+0x10/0x10 [ 831.362567][T22514] ? __lock_acquire+0x6b5/0x2d10 [ 831.362590][T22514] ? aa_sock_msg_perm+0x122/0x200 [ 831.362611][T22514] ? __pfx_netlink_recvmsg+0x10/0x10 [ 831.362630][T22514] sock_recvmsg_nosec+0x10c/0x140 [ 831.362654][T22514] ____sys_recvmsg+0x23d/0x4f0 [ 831.362680][T22514] ? __pfx_____sys_recvmsg+0x10/0x10 [ 831.362713][T22514] ? import_iovec+0x73/0xa0 [ 831.362738][T22514] ___sys_recvmsg+0x215/0x590 [ 831.362762][T22514] ? __pfx____sys_recvmsg+0x10/0x10 [ 831.362782][T22514] ? __fget_files+0x2a/0x420 [ 831.362832][T22514] do_recvmmsg+0x33a/0x800 [ 831.362859][T22514] ? __pfx_do_recvmmsg+0x10/0x10 [ 831.362894][T22514] ? rt_mutex_slowunlock+0x1cb/0x300 [ 831.362930][T22514] __x64_sys_recvmmsg+0x198/0x250 [ 831.362951][T22514] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 831.362978][T22514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.362997][T22514] do_syscall_64+0x15f/0x560 [ 831.363023][T22514] ? clear_bhb_loop+0x40/0x90 [ 831.363045][T22514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.363062][T22514] RIP: 0033:0x7f653345ce59 [ 831.363080][T22514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.363095][T22514] RSP: 002b:00007f65316ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 831.363114][T22514] RAX: ffffffffffffffda RBX: 00007f65336d5fa0 RCX: 00007f653345ce59 [ 831.363128][T22514] RDX: 0000000000000344 RSI: 0000200000005c80 RDI: 0000000000000003 [ 831.363140][T22514] RBP: 00007f65316ae090 R08: 0000000000000000 R09: 0000000000000000 [ 831.363151][T22514] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001 [ 831.363162][T22514] R13: 00007f65336d6038 R14: 00007f65336d5fa0 R15: 00007fff968f0718 [ 831.363191][T22514] [ 831.384583][ T44] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 831.384616][ T44] usb 4-1: can't read configurations, error -61 [ 831.394685][T22500] netlink: 'syz.4.6471': attribute type 11 has an invalid length. [ 831.534252][ T44] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 831.548710][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 831.553710][ T44] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 831.553741][ T44] usb 4-1: can't read configurations, error -61 [ 831.554247][ T44] usb usb4-port1: unable to enumerate USB device [ 831.587565][T22500] comedi comedi2: comedi_config --init_data is deprecated [ 831.761626][ T5632] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 831.863539][ T821] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 831.876409][ T821] usb 5-1: USB disconnect, device number 88 [ 831.896775][T22170] udevd[22170]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 831.932577][ T5632] usb 2-1: Using ep0 maxpacket: 32 [ 831.935278][ T5632] usb 2-1: config 3 has an invalid interface number: 24 but max is 2 [ 831.935294][ T5632] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 831.935304][ T5632] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 3 [ 831.935315][ T5632] usb 2-1: config 3 has no interface number 0 [ 831.935341][ T5632] usb 2-1: config 3 interface 24 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 831.935355][ T5632] usb 2-1: config 3 interface 24 has no altsetting 0 [ 831.937793][ T5632] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice= 9.f7 [ 831.937809][ T5632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.937825][ T5632] usb 2-1: Product: у [ 831.937833][ T5632] usb 2-1: Manufacturer: Ђ [ 831.937840][ T5632] usb 2-1: SerialNumber: Џ [ 832.169586][ T5632] asix 2-1:3.24: probe with driver asix failed with error -22 [ 832.175483][ T5632] usb 2-1: USB disconnect, device number 43 [ 832.784326][T22527] netlink: 'syz.4.6482': attribute type 28 has an invalid length. [ 832.879716][T22532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6484'. [ 832.944917][T22524] ceph: No mds server is up or the cluster is laggy [ 833.495653][ T5715] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 833.528956][ T44] usb 6-1: USB disconnect, device number 76 [ 833.713832][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.713864][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.713901][ T5715] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 833.713922][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.725732][ T5715] usb 2-1: config 0 descriptor?? [ 834.262094][ T44] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 834.358246][ T5760] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 834.369700][T18367] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 834.378291][T22540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.379028][T22540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.388710][ T5715] usbhid 2-1:0.0: can't add hid device: -71 [ 834.388819][ T5715] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 834.407382][ T5715] usb 2-1: USB disconnect, device number 44 [ 834.441470][ T44] usb 6-1: Using ep0 maxpacket: 8 [ 834.501905][ T44] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 834.501942][ T44] usb 6-1: can't read configurations, error -61 [ 834.539951][T18367] usb 4-1: device descriptor read/64, error -71 [ 834.561547][ T5760] usb 5-1: Using ep0 maxpacket: 32 [ 834.563173][ T5760] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.563219][ T5760] usb 5-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 834.563240][ T5760] usb 5-1: config 0 interface 0 has no altsetting 0 [ 834.563259][ T5760] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 834.563271][ T5760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.567687][ T5760] usb 5-1: config 0 descriptor?? [ 834.635135][ T5760] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 834.636181][ T44] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 834.796400][T18367] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 834.796567][ T44] usb 6-1: Using ep0 maxpacket: 8 [ 834.800030][ T44] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 834.800063][ T44] usb 6-1: can't read configurations, error -61 [ 834.800384][ T44] usb usb6-port1: attempt power cycle [ 834.936284][T18367] usb 4-1: device descriptor read/64, error -71 [ 835.053210][T18367] usb usb4-port1: attempt power cycle [ 835.159791][ T44] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 835.182552][ T44] usb 6-1: Using ep0 maxpacket: 8 [ 835.185874][ T44] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 835.185909][ T44] usb 6-1: can't read configurations, error -61 [ 835.272402][T22582] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6504'. [ 835.320821][ T44] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 835.344462][ T44] usb 6-1: Using ep0 maxpacket: 8 [ 835.353702][ T44] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 835.353735][ T44] usb 6-1: can't read configurations, error -61 [ 835.354101][ T44] usb usb6-port1: unable to enumerate USB device [ 835.416186][T18367] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 835.438270][T18367] usb 4-1: device descriptor read/8, error -71 [ 835.694154][T18367] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 835.715991][T18367] usb 4-1: device descriptor read/8, error -71 [ 835.833990][T18367] usb usb4-port1: unable to enumerate USB device [ 836.345867][T18367] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 836.506131][T18367] usb 2-1: Using ep0 maxpacket: 32 [ 836.507773][T18367] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 836.507797][T18367] usb 2-1: config 0 has no interface number 0 [ 836.509997][T18367] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 836.510021][T18367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.510040][T18367] usb 2-1: Product: syz [ 836.510054][T18367] usb 2-1: Manufacturer: syz [ 836.510067][T18367] usb 2-1: SerialNumber: syz [ 836.515273][T18367] usb 2-1: config 0 descriptor?? [ 837.289035][T22601] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6513'. [ 837.365547][ T5708] usb 5-1: USB disconnect, device number 89 [ 837.809904][ T5708] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 837.841498][T22596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.858136][T22596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.880242][T18367] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 837.880260][T18367] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 837.880942][T18367] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 837.881219][T18367] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 837.903554][T18367] usb 2-1: USB disconnect, device number 45 [ 837.906355][ T5715] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 837.974741][ T5708] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 247, changing to 4 [ 837.974786][ T5708] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 837.992083][ T5708] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 837.992110][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.992129][ T5708] usb 5-1: Product: syz [ 837.992142][ T5708] usb 5-1: Manufacturer: ы [ 837.992154][ T5708] usb 5-1: SerialNumber: syz [ 838.066308][ T5715] usb 4-1: Using ep0 maxpacket: 8 [ 838.073171][ T5715] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 838.073203][ T5715] usb 4-1: can't read configurations, error -61 [ 838.111880][T22620] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6521'. [ 838.205827][T22622] FAULT_INJECTION: forcing a failure. [ 838.205827][T22622] name failslab, interval 1, probability 0, space 0, times 0 [ 838.205860][T22622] CPU: 0 UID: 0 PID: 22622 Comm: syz.5.6522 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 838.205885][T22622] Tainted: [L]=SOFTLOCKUP [ 838.205892][T22622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 838.205902][T22622] Call Trace: [ 838.205910][T22622] [ 838.205919][T22622] dump_stack_lvl+0xe8/0x150 [ 838.205945][T22622] should_fail_ex+0x46b/0x600 [ 838.205976][T22622] should_failslab+0xa8/0x100 [ 838.205997][T22622] kmem_cache_alloc_noprof+0x87/0x680 [ 838.206022][T22622] ? skb_clone+0x212/0x3a0 [ 838.206044][T22622] skb_clone+0x212/0x3a0 [ 838.206066][T22622] __netlink_deliver_tap+0x424/0x8b0 [ 838.206095][T22622] ? netlink_deliver_tap+0x2e/0x1b0 [ 838.206114][T22622] netlink_deliver_tap+0x19c/0x1b0 [ 838.206133][T22622] netlink_unicast+0x754/0x920 [ 838.206167][T22622] netlink_sendmsg+0x813/0xb40 [ 838.206194][T22622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 838.206223][T22622] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 838.206251][T22622] ? aa_sock_msg_perm+0x122/0x200 [ 838.206273][T22622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 838.206290][T22622] sock_sendmsg_nosec+0x112/0x150 [ 838.206314][T22622] ____sys_sendmsg+0x55c/0x870 [ 838.206345][T22622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 838.206380][T22622] ? import_iovec+0x73/0xa0 [ 838.206405][T22622] ___sys_sendmsg+0x2a5/0x360 [ 838.206421][T22622] ? __lock_acquire+0x6b5/0x2d10 [ 838.206445][T22622] ? __pfx____sys_sendmsg+0x10/0x10 [ 838.206496][T22622] ? __fget_files+0x2a/0x420 [ 838.206518][T22622] ? __fget_files+0x3a6/0x420 [ 838.206552][T22622] __x64_sys_sendmsg+0x1c3/0x2a0 [ 838.206573][T22622] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 838.206600][T22622] ? __pfx_ksys_write+0x10/0x10 [ 838.206626][T22622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.206645][T22622] do_syscall_64+0x15f/0x560 [ 838.206669][T22622] ? trace_irq_disable+0x3b/0x140 [ 838.206686][T22622] ? clear_bhb_loop+0x40/0x90 [ 838.206707][T22622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.206724][T22622] RIP: 0033:0x7f17658bce59 [ 838.206741][T22622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.206757][T22622] RSP: 002b:00007f1763b0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 838.206777][T22622] RAX: ffffffffffffffda RBX: 00007f1765b35fa0 RCX: 00007f17658bce59 [ 838.206791][T22622] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 838.206803][T22622] RBP: 00007f1763b0e090 R08: 0000000000000000 R09: 0000000000000000 [ 838.206815][T22622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.206826][T22622] R13: 00007f1765b36038 R14: 00007f1765b35fa0 R15: 00007fff88936528 [ 838.206856][T22622] [ 838.206913][T22622] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6522'. [ 838.229284][ T5715] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 838.257956][T22607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.264006][T22607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.280412][T22607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.285823][T22607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.318588][T22607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.321086][T22607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.336398][T22607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.347990][T22607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.397938][ T5715] usb 4-1: Using ep0 maxpacket: 8 [ 838.414391][ T5715] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 838.414424][ T5715] usb 4-1: can't read configurations, error -61 [ 838.427953][ T5715] usb usb4-port1: attempt power cycle [ 838.448083][ T5708] usb 5-1: 1:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 838.448108][ T5708] usb 5-1: found format II with max.bitrate = 1025, frame size=32767 [ 838.448126][ T5708] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 838.450262][ T5708] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 838.514678][T22624] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.6523'. [ 838.664098][ T5708] usb 5-1: USB disconnect, device number 90 [ 838.793614][ T5715] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 838.816860][ T5715] usb 4-1: Using ep0 maxpacket: 8 [ 838.834306][ T5715] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 838.834342][ T5715] usb 4-1: can't read configurations, error -61 [ 838.930549][T22634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6528'. [ 838.976887][ T5715] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 838.998069][T18367] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 838.998544][ T5715] usb 4-1: Using ep0 maxpacket: 8 [ 839.007786][ T5715] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 839.007818][ T5715] usb 4-1: can't read configurations, error -61 [ 839.008169][ T5715] usb usb4-port1: unable to enumerate USB device [ 839.051453][T22637] 9p: Bad value for 'rfdno' [ 839.106990][T22638] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6528'. [ 839.107291][T22637] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6528'. [ 839.156292][T18367] usb 6-1: Using ep0 maxpacket: 32 [ 839.159543][T18367] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.159592][T18367] usb 6-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 839.159625][T18367] usb 6-1: config 0 interface 0 has no altsetting 0 [ 839.159643][T18367] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 839.159655][T18367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.163857][T18367] usb 6-1: config 0 descriptor?? [ 839.176709][T18367] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 839.273931][ T5715] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 839.412768][ T5715] usb 5-1: device descriptor read/64, error -71 [ 839.669240][ T5715] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 839.809726][ T5715] usb 5-1: device descriptor read/64, error -71 [ 839.952487][ T5715] usb usb5-port1: attempt power cycle [ 840.108777][T22641] FAULT_INJECTION: forcing a failure. [ 840.108777][T22641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.108800][T22641] CPU: 1 UID: 0 PID: 22641 Comm: syz.1.6530 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 840.108815][T22641] Tainted: [L]=SOFTLOCKUP [ 840.108819][T22641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 840.108826][T22641] Call Trace: [ 840.108830][T22641] [ 840.108839][T22641] dump_stack_lvl+0xe8/0x150 [ 840.108856][T22641] should_fail_ex+0x46b/0x600 [ 840.108875][T22641] _copy_from_user+0x2d/0xb0 [ 840.108889][T22641] snd_seq_ioctl+0x21d/0x4a0 [ 840.108910][T22641] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 840.108931][T22641] ? __fget_files+0x3a6/0x420 [ 840.108944][T22641] ? __fget_files+0x2a/0x420 [ 840.108958][T22641] ? bpf_lsm_file_ioctl+0x9/0x20 [ 840.108972][T22641] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 840.108984][T22641] __se_sys_ioctl+0xff/0x170 [ 840.109007][T22641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.109018][T22641] do_syscall_64+0x15f/0x560 [ 840.109032][T22641] ? trace_irq_disable+0x3b/0x140 [ 840.109042][T22641] ? clear_bhb_loop+0x40/0x90 [ 840.109054][T22641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.109064][T22641] RIP: 0033:0x7f653345ce59 [ 840.109074][T22641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.109083][T22641] RSP: 002b:00007f65316ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 840.109095][T22641] RAX: ffffffffffffffda RBX: 00007f65336d5fa0 RCX: 00007f653345ce59 [ 840.109102][T22641] RDX: 0000200000000100 RSI: 00000000c08c5332 RDI: 0000000000000003 [ 840.109109][T22641] RBP: 00007f65316ae090 R08: 0000000000000000 R09: 0000000000000000 [ 840.109115][T22641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.109121][T22641] R13: 00007f65336d6038 R14: 00007f65336d5fa0 R15: 00007fff968f0718 [ 840.109137][T22641] [ 840.213087][T22646] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6532'. [ 840.331812][ T5715] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 840.353696][ T5715] usb 5-1: device descriptor read/8, error -71 [ 840.556174][T18367] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 840.609566][ T5715] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 840.631884][ T5715] usb 5-1: device descriptor read/8, error -71 [ 840.719013][T18367] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 840.719039][T18367] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 840.719058][T18367] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 840.719093][T18367] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 840.719107][T18367] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 840.720717][T18367] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 840.720743][T18367] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 840.720761][T18367] usb 2-1: Product: syz [ 840.720768][T18367] usb 2-1: Manufacturer: syz [ 840.750579][ T5715] usb usb5-port1: unable to enumerate USB device [ 840.769580][T18367] cdc_wdm 2-1:1.0: skipping garbage [ 840.769598][T18367] cdc_wdm 2-1:1.0: skipping garbage [ 840.772517][T18367] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 840.772535][T18367] cdc_wdm 2-1:1.0: Unknown control protocol [ 841.250734][T18367] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 841.410998][T18367] usb 4-1: Using ep0 maxpacket: 8 [ 841.413409][T18367] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.413438][T18367] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 841.413725][T18367] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 841.413748][T18367] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.420388][T22656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6533'. [ 841.427600][T18367] usb 4-1: config 0 descriptor?? [ 841.469788][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 841.899041][ T5708] usb 6-1: USB disconnect, device number 81 [ 841.962778][T18367] hid (null): report_id 370376188 is invalid [ 841.989698][T18367] hid-rmi 0003:06CB:81A7.002C: report_id 370376188 is invalid [ 841.989721][T18367] hid-rmi 0003:06CB:81A7.002C: item 0 4 1 8 parsing failed [ 841.990385][T18367] hid-rmi 0003:06CB:81A7.002C: parse failed [ 841.990493][T18367] hid-rmi 0003:06CB:81A7.002C: probe with driver hid-rmi failed with error -22 [ 842.274249][ T5708] usb 4-1: USB disconnect, device number 24 [ 842.347559][T22662] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6539'. [ 842.448652][T22665] 9p: Bad value for 'rfdno' [ 842.693355][ T5760] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 842.853632][ T5760] usb 5-1: Using ep0 maxpacket: 32 [ 842.856173][ T5760] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 842.856207][ T5760] usb 5-1: can't read configurations, error -22 [ 842.916962][T22668] __nla_validate_parse: 2 callbacks suppressed [ 842.916976][T22668] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6541'. [ 842.993234][ T5760] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 843.152980][ T5760] usb 5-1: Using ep0 maxpacket: 32 [ 843.162318][ T5760] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 843.162353][ T5760] usb 5-1: can't read configurations, error -22 [ 843.162727][ T5760] usb usb5-port1: attempt power cycle [ 843.238421][ T5708] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 843.400443][ T5708] usb 4-1: Using ep0 maxpacket: 8 [ 843.411558][ T5708] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 843.411593][ T5708] usb 4-1: can't read configurations, error -61 [ 843.548566][ T5760] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 843.558951][ T5708] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 843.603703][ T5760] usb 5-1: Using ep0 maxpacket: 32 [ 843.617852][ T5760] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 843.617882][ T5760] usb 5-1: can't read configurations, error -22 [ 843.698774][ T9] usb 2-1: USB disconnect, device number 46 [ 843.719693][ T5708] usb 4-1: Using ep0 maxpacket: 8 [ 843.736889][ T5708] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 843.736924][ T5708] usb 4-1: can't read configurations, error -61 [ 843.745119][ T5708] usb usb4-port1: attempt power cycle [ 843.772737][ T5760] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 843.796818][ T5760] usb 5-1: Using ep0 maxpacket: 32 [ 843.807037][ T5760] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 843.807072][ T5760] usb 5-1: can't read configurations, error -22 [ 843.807400][ T5760] usb usb5-port1: unable to enumerate USB device [ 844.114627][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 844.114661][ T5708] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 844.136494][ T5708] usb 4-1: Using ep0 maxpacket: 8 [ 844.144738][ T5708] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 844.144772][ T5708] usb 4-1: can't read configurations, error -61 [ 844.274934][ T5708] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 844.285579][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 844.289276][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.289324][ T9] usb 2-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 844.289349][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 844.289379][ T9] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 844.289400][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.304259][ T5708] usb 4-1: Using ep0 maxpacket: 8 [ 844.304653][ T9] usb 2-1: config 0 descriptor?? [ 844.333992][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 844.361982][ T5708] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 844.362017][ T5708] usb 4-1: can't read configurations, error -61 [ 844.362381][ T5708] usb usb4-port1: unable to enumerate USB device [ 845.032578][T22684] binder: BINDER_SET_CONTEXT_MGR already set [ 845.032588][T22684] binder: 22683:22684 ioctl 4018620d 200000000040 returned -16 [ 845.033187][T22684] binder: 22683:22684 ioctl c0306201 200000000240 returned -11 [ 845.169152][T22689] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.6550'. [ 845.244690][T22691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 845.721942][ T5708] usb 6-1: new low-speed USB device number 82 using dummy_hcd [ 845.745221][T22702] befs: (loop4): No write support. Marking filesystem read-only [ 845.747155][T22702] befs: (loop4): unable to read superblock [ 845.890752][ T5708] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 845.890784][ T5708] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.890806][ T5708] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 845.890818][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.893777][ T5708] usb 6-1: config 0 descriptor?? [ 846.102220][ T5701] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 846.262486][ T5701] usb 5-1: Using ep0 maxpacket: 8 [ 846.266042][ T5701] usb 5-1: config 3 has an invalid interface number: 5 but max is 3 [ 846.266066][ T5701] usb 5-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 846.266083][ T5701] usb 5-1: config 3 has an invalid interface number: 127 but max is 3 [ 846.266102][ T5701] usb 5-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 846.266120][ T5701] usb 5-1: config 3 has 2 interfaces, different from the descriptor's value: 4 [ 846.266138][ T5701] usb 5-1: config 3 has no interface number 0 [ 846.266153][ T5701] usb 5-1: config 3 has no interface number 1 [ 846.266202][ T5701] usb 5-1: config 3 interface 5 altsetting 7 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 846.266217][ T5701] usb 5-1: config 3 interface 5 altsetting 7 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 846.266230][ T5701] usb 5-1: config 3 interface 5 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 846.266255][ T5701] usb 5-1: config 3 interface 127 altsetting 2 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 846.266278][ T5701] usb 5-1: config 3 interface 127 altsetting 2 has an endpoint descriptor with address 0x4E, changing to 0xE [ 846.266301][ T5701] usb 5-1: config 3 interface 127 altsetting 2 endpoint 0xE has invalid maxpacket 8701, setting to 1024 [ 846.266325][ T5701] usb 5-1: config 3 interface 127 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 846.266345][ T5701] usb 5-1: config 3 interface 127 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 846.266364][ T5701] usb 5-1: config 3 interface 127 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 846.266375][ T5701] usb 5-1: config 3 interface 127 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 846.266385][ T5701] usb 5-1: config 3 interface 127 altsetting 2 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 846.266397][ T5701] usb 5-1: config 3 interface 5 has no altsetting 0 [ 846.266406][ T5701] usb 5-1: config 3 interface 127 has no altsetting 0 [ 846.269893][ T5701] usb 5-1: New USB device found, idVendor=04cc, idProduct=8116, bcdDevice=e9.a1 [ 846.269918][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.269937][ T5701] usb 5-1: Product: syz [ 846.269951][ T5701] usb 5-1: Manufacturer: syz [ 846.269964][ T5701] usb 5-1: SerialNumber: syz [ 846.416182][ T5708] aquacomputer_d5next 0003:0C70:F0B6.002D: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.5-1/input0 [ 846.740459][ T5708] usb 6-1: USB disconnect, device number 82 [ 846.742862][T22711] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6559'. [ 846.803441][ T5701] usb 5-1: USB disconnect, device number 99 [ 847.004940][ T5632] usb 2-1: USB disconnect, device number 47 [ 847.238254][T22730] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6568'. [ 847.383683][ T5701] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 847.406271][T22732] lo speed is unknown, defaulting to 1000 [ 847.544896][ T5701] usb 4-1: Using ep0 maxpacket: 8 [ 847.548859][ T5701] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 847.548892][ T5701] usb 4-1: can't read configurations, error -61 [ 847.549651][T22733] lo speed is unknown, defaulting to 1000 [ 847.686598][ T5701] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 847.769269][ T821] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 847.866193][ T5701] usb 4-1: Using ep0 maxpacket: 8 [ 847.870251][ T5701] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 847.870362][ T5701] usb 4-1: can't read configurations, error -61 [ 847.870737][ T5701] usb usb4-port1: attempt power cycle [ 847.934433][ T821] usb 5-1: Using ep0 maxpacket: 32 [ 847.936392][ T821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.936441][ T821] usb 5-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 847.936464][ T821] usb 5-1: config 0 interface 0 has no altsetting 0 [ 847.936494][ T821] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 847.936514][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.996897][ T821] usb 5-1: config 0 descriptor?? [ 848.041705][ T821] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 848.297911][ T5701] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 848.310549][T22752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6576'. [ 848.326897][ T5701] usb 4-1: Using ep0 maxpacket: 8 [ 848.355648][ T5701] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 848.355683][ T5701] usb 4-1: can't read configurations, error -61 [ 848.485291][ T5701] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 848.512936][ T5701] usb 4-1: Using ep0 maxpacket: 8 [ 848.522837][ T5701] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 848.522870][ T5701] usb 4-1: can't read configurations, error -61 [ 848.527342][ T5701] usb usb4-port1: unable to enumerate USB device [ 848.709654][ T821] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 848.894407][ T821] usb 6-1: config 0 has no interfaces? [ 848.894442][ T821] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 848.894464][ T821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.928658][ T821] usb 6-1: config 0 descriptor?? [ 849.624536][T22765] autofs4:pid:22765:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1088.8192), cmd(0xc0189375) [ 849.624629][T22765] autofs4:pid:22765:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 850.388889][T22777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6585'. [ 850.697026][ T821] usb 5-1: USB disconnect, device number 100 [ 851.124672][ T821] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 851.308460][ T821] usb 5-1: Using ep0 maxpacket: 8 [ 851.316503][ T821] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 851.316538][ T821] usb 5-1: can't read configurations, error -61 [ 851.466709][ T821] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 851.658972][ T821] usb 5-1: Using ep0 maxpacket: 8 [ 851.664528][ T821] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 851.664562][ T821] usb 5-1: can't read configurations, error -61 [ 851.665093][ T821] usb usb5-port1: attempt power cycle [ 851.699936][ T5632] usb 6-1: USB disconnect, device number 83 [ 851.787257][ T5708] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 851.947551][ T5708] usb 4-1: Using ep0 maxpacket: 32 [ 851.954426][ T5708] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 851.954449][ T5708] usb 4-1: config 3 has 0 interfaces, different from the descriptor's value: 3 [ 851.957156][ T5708] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice= 9.f7 [ 851.957181][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.957200][ T5708] usb 4-1: Product: у [ 851.957212][ T5708] usb 4-1: Manufacturer: Ђ [ 851.957224][ T5708] usb 4-1: SerialNumber: Џ [ 852.038648][ T821] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 852.066174][ T821] usb 5-1: Using ep0 maxpacket: 8 [ 852.071453][ T821] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 852.071489][ T821] usb 5-1: can't read configurations, error -61 [ 852.232737][ T821] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 852.259039][ T821] usb 5-1: Using ep0 maxpacket: 8 [ 852.281555][ T821] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 852.281587][ T821] usb 5-1: can't read configurations, error -61 [ 852.282006][ T821] usb usb5-port1: unable to enumerate USB device [ 852.313024][ T5708] usb 4-1: USB disconnect, device number 33 [ 852.684841][ T821] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 852.853358][T22815] bpf: Bad value for 'mode' [ 852.858364][ T821] usb 2-1: Using ep0 maxpacket: 32 [ 852.867577][ T821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.867626][ T821] usb 2-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 852.867653][ T821] usb 2-1: config 0 interface 0 has no altsetting 0 [ 852.867684][ T821] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 852.867706][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.875554][ T821] usb 2-1: config 0 descriptor?? [ 852.911298][ T821] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 853.447624][T22819] FAULT_INJECTION: forcing a failure. [ 853.447624][T22819] name failslab, interval 1, probability 0, space 0, times 0 [ 853.447647][T22819] CPU: 0 UID: 0 PID: 22819 Comm: syz.5.6604 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 853.447662][T22819] Tainted: [L]=SOFTLOCKUP [ 853.447666][T22819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 853.447672][T22819] Call Trace: [ 853.447676][T22819] [ 853.447681][T22819] dump_stack_lvl+0xe8/0x150 [ 853.447699][T22819] should_fail_ex+0x46b/0x600 [ 853.447718][T22819] should_failslab+0xa8/0x100 [ 853.447737][T22819] kmem_cache_alloc_noprof+0x87/0x680 [ 853.447753][T22819] ? __pmd_alloc+0xa4/0x5e0 [ 853.447770][T22819] __pmd_alloc+0xa4/0x5e0 [ 853.447787][T22819] handle_mm_fault+0xf4f/0x14d0 [ 853.447804][T22819] ? handle_mm_fault+0xed/0x14d0 [ 853.447820][T22819] ? __pfx_handle_mm_fault+0x10/0x10 [ 853.447841][T22819] ? __lock_acquire+0x6b5/0x2d10 [ 853.447854][T22819] ? lock_mm_and_find_vma+0xa7/0x340 [ 853.447867][T22819] do_user_addr_fault+0x75b/0x1340 [ 853.447887][T22819] exc_page_fault+0x6a/0xc0 [ 853.447903][T22819] asm_exc_page_fault+0x26/0x30 [ 853.447913][T22819] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 853.447926][T22819] Code: c4 10 e9 54 2a 05 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 853.447935][T22819] RSP: 0018:ffffc90011e17cb8 EFLAGS: 00050202 [ 853.447946][T22819] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 853.447953][T22819] RDX: 0000000000000001 RSI: 0000200000000180 RDI: ffffc90011e17d70 [ 853.447960][T22819] RBP: ffffc90011e17e68 R08: 0000000000000003 R09: 0000000000000004 [ 853.447966][T22819] R10: dffffc0000000000 R11: fffff520023c2fae R12: 1ffff920023c2fa4 [ 853.447973][T22819] R13: 0000200000000180 R14: ffffc90011e17d70 R15: 0000200000000180 [ 853.447988][T22819] _copy_from_user+0x7a/0xb0 [ 853.448002][T22819] do_sock_getsockopt+0x200/0x7e0 [ 853.448020][T22819] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 853.448042][T22819] ? __fget_files+0x3a6/0x420 [ 853.448058][T22819] ? __fget_files+0x2a/0x420 [ 853.448086][T22819] __x64_sys_getsockopt+0x1aa/0x250 [ 853.448114][T22819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.448134][T22819] do_syscall_64+0x15f/0x560 [ 853.448155][T22819] ? trace_irq_disable+0x3b/0x140 [ 853.448173][T22819] ? clear_bhb_loop+0x40/0x90 [ 853.448195][T22819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.448213][T22819] RIP: 0033:0x7f17658bce59 [ 853.448228][T22819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.448237][T22819] RSP: 002b:00007f1763b0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 853.448248][T22819] RAX: ffffffffffffffda RBX: 00007f1765b35fa0 RCX: 00007f17658bce59 [ 853.448255][T22819] RDX: 0000000000000064 RSI: 0000000000000011 RDI: 0000000000000003 [ 853.448261][T22819] RBP: 00007f1763b0e090 R08: 0000200000000180 R09: 0000000000000000 [ 853.448268][T22819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.448274][T22819] R13: 00007f1765b36038 R14: 00007f1765b35fa0 R15: 00007fff88936528 [ 853.448289][T22819] [ 853.944030][T22831] FAULT_INJECTION: forcing a failure. [ 853.944030][T22831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.944146][T22831] CPU: 1 UID: 0 PID: 22831 Comm: syz.5.6608 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 853.944172][T22831] Tainted: [L]=SOFTLOCKUP [ 853.944179][T22831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 853.944190][T22831] Call Trace: [ 853.944198][T22831] [ 853.944206][T22831] dump_stack_lvl+0xe8/0x150 [ 853.944233][T22831] should_fail_ex+0x46b/0x600 [ 853.944265][T22831] _copy_to_user+0x31/0xb0 [ 853.944289][T22831] simple_read_from_buffer+0xe1/0x170 [ 853.944318][T22831] proc_fail_nth_read+0x1be/0x230 [ 853.944345][T22831] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 853.944372][T22831] ? rw_verify_area+0x2ac/0x4e0 [ 853.944395][T22831] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 853.944419][T22831] vfs_read+0x212/0xa80 [ 853.944450][T22831] ? __pfx_vfs_read+0x10/0x10 [ 853.944477][T22831] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 853.944502][T22831] ? lockdep_hardirqs_on+0x7a/0x110 [ 853.944526][T22831] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 853.944550][T22831] ? mutex_lock_nested+0x152/0x1d0 [ 853.944569][T22831] ? fdget_pos+0x252/0x320 [ 853.944599][T22831] ksys_read+0x156/0x270 [ 853.944619][T22831] ? __pfx_ksys_read+0x10/0x10 [ 853.944644][T22831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.944662][T22831] do_syscall_64+0x15f/0x560 [ 853.944694][T22831] ? trace_irq_disable+0x3b/0x140 [ 853.944712][T22831] ? clear_bhb_loop+0x40/0x90 [ 853.944734][T22831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.944750][T22831] RIP: 0033:0x7f176587d68e [ 853.944767][T22831] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 853.944782][T22831] RSP: 002b:00007f1763b0dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 853.944802][T22831] RAX: ffffffffffffffda RBX: 00007f1763b0e6c0 RCX: 00007f176587d68e [ 853.944816][T22831] RDX: 000000000000000f RSI: 00007f1763b0e0a0 RDI: 0000000000000005 [ 853.944827][T22831] RBP: 00007f1763b0e090 R08: 0000000000000000 R09: 0000000000000000 [ 853.944839][T22831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.944849][T22831] R13: 00007f1765b36038 R14: 00007f1765b35fa0 R15: 00007fff88936528 [ 853.944878][T22831] [ 854.109448][T22833] FAULT_INJECTION: forcing a failure. [ 854.109448][T22833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 854.109481][T22833] CPU: 0 UID: 0 PID: 22833 Comm: syz.3.6609 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 854.109505][T22833] Tainted: [L]=SOFTLOCKUP [ 854.109512][T22833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 854.109522][T22833] Call Trace: [ 854.109529][T22833] [ 854.109537][T22833] dump_stack_lvl+0xe8/0x150 [ 854.109564][T22833] should_fail_ex+0x46b/0x600 [ 854.109595][T22833] _copy_from_user+0x2d/0xb0 [ 854.109617][T22833] __se_sys_mount+0x18b/0x420 [ 854.109645][T22833] ? __pfx___se_sys_mount+0x10/0x10 [ 854.109673][T22833] ? __x64_sys_mount+0x20/0xc0 [ 854.109695][T22833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.109713][T22833] do_syscall_64+0x15f/0x560 [ 854.109736][T22833] ? trace_irq_disable+0x3b/0x140 [ 854.109754][T22833] ? clear_bhb_loop+0x40/0x90 [ 854.109775][T22833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.109792][T22833] RIP: 0033:0x7f37a8b2ce59 [ 854.109812][T22833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.109827][T22833] RSP: 002b:00007f37a6d86028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 854.109846][T22833] RAX: ffffffffffffffda RBX: 00007f37a8da5fa0 RCX: 00007f37a8b2ce59 [ 854.109859][T22833] RDX: 00002000000001c0 RSI: 0000200000000000 RDI: 0000000000000000 [ 854.109871][T22833] RBP: 00007f37a6d86090 R08: 00002000000000c0 R09: 0000000000000000 [ 854.109883][T22833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.109894][T22833] R13: 00007f37a8da6038 R14: 00007f37a8da5fa0 R15: 00007fff7e63bf88 [ 854.109921][T22833] [ 854.466454][T22840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6612'. [ 854.619081][ T5632] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 854.779233][ T5632] usb 4-1: Using ep0 maxpacket: 32 [ 854.781882][ T5632] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 854.781905][ T5632] usb 4-1: config 3 has 0 interfaces, different from the descriptor's value: 3 [ 854.784916][ T5632] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice= 9.f7 [ 854.784941][ T5632] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.784959][ T5632] usb 4-1: Product: у [ 854.784972][ T5632] usb 4-1: Manufacturer: Ђ [ 854.784985][ T5632] usb 4-1: SerialNumber: Џ [ 855.055543][T22848] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6615'. [ 855.055576][T22848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6615'. [ 855.070786][T22847] loop8: detected capacity change from 0 to 8 [ 855.074163][T22847] Dev loop8: unable to read RDB block 8 [ 855.074202][T22847] loop8: unable to read partition table [ 855.074388][T22847] loop8: partition table beyond EOD, truncated [ 855.075475][T22847] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 855.182262][ T5632] usb 4-1: USB disconnect, device number 34 [ 855.662535][ T5715] usb 2-1: USB disconnect, device number 48 [ 855.719782][ T5632] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 855.836284][T22865] FAULT_INJECTION: forcing a failure. [ 855.836284][T22865] name failslab, interval 1, probability 0, space 0, times 0 [ 855.836306][T22865] CPU: 0 UID: 0 PID: 22865 Comm: syz.3.6621 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 855.836321][T22865] Tainted: [L]=SOFTLOCKUP [ 855.836325][T22865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 855.836331][T22865] Call Trace: [ 855.836336][T22865] [ 855.836340][T22865] dump_stack_lvl+0xe8/0x150 [ 855.836358][T22865] should_fail_ex+0x46b/0x600 [ 855.836377][T22865] should_failslab+0xa8/0x100 [ 855.836389][T22865] kmem_cache_alloc_noprof+0x87/0x680 [ 855.836404][T22865] ? alloc_empty_file+0x5b/0x1d0 [ 855.836419][T22865] alloc_empty_file+0x5b/0x1d0 [ 855.836432][T22865] alloc_file_pseudo+0x155/0x240 [ 855.836447][T22865] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 855.836466][T22865] anon_inode_getfile+0xc5/0x1a0 [ 855.836479][T22865] sync_file_ioctl+0xc78/0x1180 [ 855.836505][T22865] ? __pfx_sync_file_ioctl+0x10/0x10 [ 855.836528][T22865] ? __fget_files+0x2a/0x420 [ 855.836547][T22865] ? bpf_lsm_file_ioctl+0x9/0x20 [ 855.836560][T22865] ? __pfx_sync_file_ioctl+0x10/0x10 [ 855.836573][T22865] __se_sys_ioctl+0xff/0x170 [ 855.836584][T22865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.836595][T22865] do_syscall_64+0x15f/0x560 [ 855.836610][T22865] ? trace_irq_disable+0x3b/0x140 [ 855.836619][T22865] ? clear_bhb_loop+0x40/0x90 [ 855.836631][T22865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.836641][T22865] RIP: 0033:0x7f37a8b2ce59 [ 855.836652][T22865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.836660][T22865] RSP: 002b:00007f37a6d86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 855.836672][T22865] RAX: ffffffffffffffda RBX: 00007f37a8da5fa0 RCX: 00007f37a8b2ce59 [ 855.836680][T22865] RDX: 00002000000001c0 RSI: 00000000c0303e03 RDI: 0000000000000006 [ 855.836686][T22865] RBP: 00007f37a6d86090 R08: 0000000000000000 R09: 0000000000000000 [ 855.836692][T22865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.836699][T22865] R13: 00007f37a8da6038 R14: 00007f37a8da5fa0 R15: 00007fff7e63bf88 [ 855.836714][T22865] [ 855.891657][ T5632] usb 6-1: Using ep0 maxpacket: 8 [ 856.027101][ T5632] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 856.027136][ T5632] usb 6-1: can't read configurations, error -61 [ 856.128501][T22867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6622'. [ 856.168529][ T5715] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 856.201308][ T5632] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 856.361171][ T5715] usb 2-1: Using ep0 maxpacket: 16 [ 856.361327][ T5632] usb 6-1: Using ep0 maxpacket: 8 [ 856.365326][ T5715] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 856.365675][ T5715] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 856.367161][ T5632] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 856.367193][ T5632] usb 6-1: can't read configurations, error -61 [ 856.368121][ T5632] usb usb6-port1: attempt power cycle [ 856.368674][ T5715] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 856.368698][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.368716][ T5715] usb 2-1: Product: syz [ 856.368729][ T5715] usb 2-1: Manufacturer: syz [ 856.368742][ T5715] usb 2-1: SerialNumber: syz [ 856.385653][T22869] kvm: Disabled LAPIC found during irq injection [ 856.470813][T22873] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6623'. [ 856.478008][ T5715] usb 2-1: 0:2 : does not exist [ 856.618389][T22875] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 856.681480][T22859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6619'. [ 856.702476][ T5715] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 856.777557][ T5632] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 856.793956][ T5715] usb 2-1: USB disconnect, device number 49 [ 856.799926][ T5632] usb 6-1: Using ep0 maxpacket: 8 [ 856.804207][ T5632] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 856.804241][ T5632] usb 6-1: can't read configurations, error -61 [ 856.901232][T22879] IPv6: NLM_F_CREATE should be specified when creating new route [ 856.932182][T22170] udevd[22170]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 856.948580][ T5632] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 856.970656][ T5632] usb 6-1: Using ep0 maxpacket: 8 [ 856.977795][ T5632] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 856.977829][ T5632] usb 6-1: can't read configurations, error -61 [ 856.979140][ T5632] usb usb6-port1: unable to enumerate USB device [ 857.161579][ T5626] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 857.418727][ T5715] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 857.478857][T22890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6631'. [ 857.579172][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 857.581118][ T5715] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.581166][ T5715] usb 4-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 857.581182][ T5715] usb 4-1: config 0 interface 0 has no altsetting 0 [ 857.581200][ T5715] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 857.581211][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.586629][ T5715] usb 4-1: config 0 descriptor?? [ 857.649509][ T5715] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 857.953091][ T5760] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 858.114264][ T5760] usb 2-1: Using ep0 maxpacket: 32 [ 858.117743][ T5760] usb 2-1: unable to get BOS descriptor or descriptor too short [ 858.118834][ T5760] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 858.118856][ T5760] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 858.118876][ T5760] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 858.118905][ T5760] usb 2-1: config 128 has no interface number 0 [ 858.118937][ T5760] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 858.118950][ T5760] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 858.118962][ T5760] usb 2-1: config 128 interface 127 has no altsetting 0 [ 858.121157][ T5760] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 858.121182][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.121200][ T5760] usb 2-1: Product: syz [ 858.121213][ T5760] usb 2-1: Manufacturer: syz [ 858.121222][ T5760] usb 2-1: SerialNumber: syz [ 858.361375][ T3310] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 858.499497][T22898] FAULT_INJECTION: forcing a failure. [ 858.499497][T22898] name failslab, interval 1, probability 0, space 0, times 0 [ 858.499533][T22898] CPU: 1 UID: 0 PID: 22898 Comm: syz.4.6634 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 858.499558][T22898] Tainted: [L]=SOFTLOCKUP [ 858.499564][T22898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 858.499574][T22898] Call Trace: [ 858.499582][T22898] [ 858.499590][T22898] dump_stack_lvl+0xe8/0x150 [ 858.499618][T22898] should_fail_ex+0x46b/0x600 [ 858.499651][T22898] should_failslab+0xa8/0x100 [ 858.499672][T22898] __kmalloc_noprof+0xdf/0x7b0 [ 858.499689][T22898] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 858.499705][T22898] ? netlbl_mgmt_add_common+0x156/0x13b0 [ 858.499724][T22898] ? netlbl_mgmt_add_common+0x57/0x13b0 [ 858.499746][T22898] netlbl_mgmt_add_common+0x156/0x13b0 [ 858.499773][T22898] ? apparmor_current_getlsmprop_subj+0xce/0x150 [ 858.499796][T22898] netlbl_mgmt_add+0x2bf/0x360 [ 858.499818][T22898] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 858.499850][T22898] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 858.499872][T22898] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 858.499902][T22898] genl_family_rcv_msg_doit+0x22a/0x330 [ 858.499929][T22898] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 858.499963][T22898] ? bpf_lsm_capable+0x9/0x20 [ 858.499985][T22898] ? security_capable+0x7e/0x2c0 [ 858.500011][T22898] genl_rcv_msg+0x61c/0x7a0 [ 858.500036][T22898] ? __pfx_genl_rcv_msg+0x10/0x10 [ 858.500056][T22898] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 858.500089][T22898] netlink_rcv_skb+0x232/0x4b0 [ 858.500115][T22898] ? __pfx_genl_rcv_msg+0x10/0x10 [ 858.500137][T22898] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 858.500176][T22898] ? netlink_deliver_tap+0x2e/0x1b0 [ 858.500193][T22898] ? netlink_deliver_tap+0x2e/0x1b0 [ 858.500215][T22898] genl_rcv+0x28/0x40 [ 858.500234][T22898] netlink_unicast+0x780/0x920 [ 858.500268][T22898] netlink_sendmsg+0x813/0xb40 [ 858.500295][T22898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 858.500315][T22898] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 858.500342][T22898] ? aa_sock_msg_perm+0x122/0x200 [ 858.500364][T22898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 858.500381][T22898] sock_sendmsg_nosec+0x112/0x150 [ 858.500406][T22898] ____sys_sendmsg+0x55c/0x870 [ 858.500436][T22898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 858.500469][T22898] ? import_iovec+0x73/0xa0 [ 858.500493][T22898] ___sys_sendmsg+0x2a5/0x360 [ 858.500510][T22898] ? __lock_acquire+0x6b5/0x2d10 [ 858.500534][T22898] ? __pfx____sys_sendmsg+0x10/0x10 [ 858.500583][T22898] ? __fget_files+0x2a/0x420 [ 858.500604][T22898] ? __fget_files+0x3a6/0x420 [ 858.500631][T22898] __x64_sys_sendmsg+0x1c3/0x2a0 [ 858.500646][T22898] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 858.500667][T22898] ? __pfx_ksys_write+0x10/0x10 [ 858.500687][T22898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.500702][T22898] do_syscall_64+0x15f/0x560 [ 858.500720][T22898] ? trace_irq_disable+0x3b/0x140 [ 858.500734][T22898] ? clear_bhb_loop+0x40/0x90 [ 858.500750][T22898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.500763][T22898] RIP: 0033:0x7ff25e7ace59 [ 858.500778][T22898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.500790][T22898] RSP: 002b:00007ff25c9fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 858.500805][T22898] RAX: ffffffffffffffda RBX: 00007ff25ea25fa0 RCX: 00007ff25e7ace59 [ 858.500815][T22898] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000004 [ 858.500824][T22898] RBP: 00007ff25c9fe090 R08: 0000000000000000 R09: 0000000000000000 [ 858.500832][T22898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.500848][T22898] R13: 00007ff25ea26038 R14: 00007ff25ea25fa0 R15: 00007ffd64e72d08 [ 858.500871][T22898] [ 858.579017][ T5760] usb 2-1: USB disconnect, device number 50 [ 858.624645][T22170] udevd[22170]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 859.089743][T22909] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 859.159770][T22911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6640'. [ 859.250796][T22913] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 859.620056][ T5715] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 859.759933][ T5715] usb 5-1: device descriptor read/64, error -71 [ 859.833834][ T5632] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 859.994849][ T5632] usb 2-1: Using ep0 maxpacket: 8 [ 859.998687][ T5632] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 859.998722][ T5632] usb 2-1: can't read configurations, error -61 [ 860.025393][ T5715] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 860.051721][T22930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6649'. [ 860.133488][ T5632] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 860.165125][ T5715] usb 5-1: device descriptor read/64, error -71 [ 860.171085][T22934] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 860.283217][ T5715] usb usb5-port1: attempt power cycle [ 860.293368][ T5632] usb 2-1: Using ep0 maxpacket: 8 [ 860.296624][ T5632] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 860.296656][ T5632] usb 2-1: can't read configurations, error -61 [ 860.297306][ T5632] usb usb2-port1: attempt power cycle [ 860.374840][ T5760] usb 4-1: USB disconnect, device number 35 [ 860.517707][ T5708] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 860.645963][ T5715] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 860.656788][ T5632] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 860.667988][ T5715] usb 5-1: device descriptor read/8, error -71 [ 860.681526][ T5632] usb 2-1: Using ep0 maxpacket: 8 [ 860.683011][ T5708] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 247, changing to 4 [ 860.683036][ T5708] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 860.686461][ T5632] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 860.686493][ T5632] usb 2-1: can't read configurations, error -61 [ 860.687033][ T5708] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 860.687047][ T5708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.687058][ T5708] usb 6-1: Product: syz [ 860.687065][ T5708] usb 6-1: Manufacturer: ы [ 860.687079][ T5708] usb 6-1: SerialNumber: syz [ 860.817855][ T5632] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 860.839146][ T5632] usb 2-1: Using ep0 maxpacket: 8 [ 860.842801][ T5632] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 860.842835][ T5632] usb 2-1: can't read configurations, error -61 [ 860.843505][ T5632] usb usb2-port1: unable to enumerate USB device [ 860.925588][ T5715] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 860.946018][ T5715] usb 5-1: device descriptor read/8, error -71 [ 860.947837][T22936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.952777][T22936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.967783][T22936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.971275][T22936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.984161][T22936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.990460][T22936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.005208][T22936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.006589][T22936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.030911][ T5708] usb 6-1: 1:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 861.030934][ T5708] usb 6-1: found format II with max.bitrate = 1025, frame size=32767 [ 861.030948][ T5708] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 861.031648][ T5708] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 861.064034][ T5715] usb usb5-port1: unable to enumerate USB device [ 861.154454][ T5708] usb 6-1: USB disconnect, device number 88 [ 861.401244][T22951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6658'. [ 861.693572][ T821] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 861.875919][ T821] usb 4-1: Using ep0 maxpacket: 16 [ 861.891748][ T821] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.891772][ T821] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.891794][ T821] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 861.891806][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.548968][ T5760] usb 6-1: new full-speed USB device number 89 using dummy_hcd [ 862.593198][ T821] usbhid 4-1:128.0: can't add hid device: -71 [ 862.593326][ T821] usbhid 4-1:128.0: probe with driver usbhid failed with error -71 [ 862.608162][ T821] usb 4-1: USB disconnect, device number 36 [ 862.653624][T22962] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6663'. [ 862.727553][ T5760] usb 6-1: not running at top speed; connect to a high speed hub [ 862.751064][ T5760] usb 6-1: config 6 has an invalid interface number: 197 but max is 1 [ 862.751091][ T5760] usb 6-1: config 6 has an invalid interface number: 160 but max is 1 [ 862.751108][ T5760] usb 6-1: config 6 has no interface number 0 [ 862.751123][ T5760] usb 6-1: config 6 has no interface number 1 [ 862.751196][ T5760] usb 6-1: config 6 interface 197 altsetting 2 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 862.751220][ T5760] usb 6-1: config 6 interface 197 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 862.751244][ T5760] usb 6-1: config 6 interface 197 has no altsetting 0 [ 862.751260][ T5760] usb 6-1: config 6 interface 160 has no altsetting 0 [ 862.759495][ T5760] usb 6-1: New USB device found, idVendor=2040, idProduct=9941, bcdDevice=5e.8e [ 862.759514][ T5760] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.759525][ T5760] usb 6-1: Product: syz [ 862.759532][ T5760] usb 6-1: Manufacturer: syz [ 862.759539][ T5760] usb 6-1: SerialNumber: syz [ 862.801613][T22960] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 863.042462][T22971] netlink: 16406 bytes leftover after parsing attributes in process `syz.1.6667'. [ 863.296045][ T5760] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 863.297272][ T5760] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 863.297298][ T5760] dib0700: firmware download failed at 7 with -22 [ 863.323146][ T5760] hub 6-1:6.160: Invalid hub with more than one config or interface [ 863.323182][ T5760] hub 6-1:6.160: probe with driver hub failed with error -22 [ 863.327480][ T5760] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 863.330418][ T5760] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 863.330459][ T5760] dib0700: firmware download failed at 7 with -22 [ 863.343255][ T5760] usb 6-1: USB disconnect, device number 89 [ 863.435051][ T5715] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 863.575609][ T821] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 863.595257][ T5715] usb 2-1: Using ep0 maxpacket: 32 [ 863.599239][ T5715] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 863.599263][ T5715] usb 2-1: config 0 has no interface number 0 [ 863.599294][ T5715] usb 2-1: config 0 interface 119 has no altsetting 0 [ 863.601873][ T5715] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=26.36 [ 863.601898][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.601916][ T5715] usb 2-1: Product: syz [ 863.601930][ T5715] usb 2-1: Manufacturer: syz [ 863.601943][ T5715] usb 2-1: SerialNumber: syz [ 863.611019][ T5715] usb 2-1: config 0 descriptor?? [ 863.755586][ T821] usb 5-1: Using ep0 maxpacket: 32 [ 863.757870][ T821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.757919][ T821] usb 5-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 863.757944][ T821] usb 5-1: config 0 interface 0 has no altsetting 0 [ 863.757975][ T821] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 863.757996][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.819899][ T821] usb 5-1: config 0 descriptor?? [ 863.848682][ T821] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 863.997969][ T5715] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 863.999010][ T5715] gspca_sn9c2028: read1 error -71 [ 863.999445][ T5715] gspca_sn9c2028: read1 error -71 [ 864.005460][ T5715] gspca_sn9c2028: read1 error -71 [ 864.005544][ T5715] sn9c2028 2-1:0.119: probe with driver sn9c2028 failed with error -71 [ 864.032894][ T5715] usb 2-1: USB disconnect, device number 55 [ 864.148818][T22985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6673'. [ 864.222291][T22986] 9p: Bad value for 'rfdno' [ 864.277925][T22987] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6673'. [ 864.289195][T22986] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6673'. [ 864.364724][ T821] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 864.503603][ T821] usb 6-1: device descriptor read/64, error -71 [ 864.682309][T22994] netlink: 16406 bytes leftover after parsing attributes in process `syz.1.6676'. [ 864.771884][ T821] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 864.909688][ T821] usb 6-1: device descriptor read/64, error -71 [ 864.995144][ T5715] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 865.040708][ T821] usb usb6-port1: attempt power cycle [ 865.155452][ T5715] usb 2-1: Using ep0 maxpacket: 32 [ 865.158120][ T5715] usb 2-1: config 3 has an invalid interface number: 24 but max is 2 [ 865.158144][ T5715] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 865.158161][ T5715] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 3 [ 865.158180][ T5715] usb 2-1: config 3 has no interface number 0 [ 865.160352][ T5715] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice= 9.f7 [ 865.160377][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.160395][ T5715] usb 2-1: Product: syz [ 865.160406][ T5715] usb 2-1: Manufacturer: syz [ 865.160413][ T5715] usb 2-1: SerialNumber: syz [ 865.395491][ T5715] asix 2-1:3.24: probe with driver asix failed with error -22 [ 865.415695][ T821] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 865.427352][ T5715] usb 2-1: USB disconnect, device number 56 [ 865.459529][ T821] usb 6-1: device descriptor read/8, error -71 [ 865.711306][ T821] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 865.733407][ T821] usb 6-1: device descriptor read/8, error -71 [ 865.850718][ T821] usb usb6-port1: unable to enumerate USB device [ 865.955677][T23004] loop8: detected capacity change from 0 to 8 [ 865.979238][T23004] Dev loop8: unable to read RDB block 8 [ 865.979281][T23004] loop8: unable to read partition table [ 865.979477][T23004] loop8: partition table beyond EOD, truncated [ 865.980186][T23004] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 866.170757][ T5760] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 866.212782][T23012] netlink: 16406 bytes leftover after parsing attributes in process `syz.1.6685'. [ 866.345354][ T5760] usb 4-1: not running at top speed; connect to a high speed hub [ 866.346513][ T5760] usb 4-1: config 6 has an invalid interface number: 197 but max is 1 [ 866.346537][ T5760] usb 4-1: config 6 has an invalid interface number: 160 but max is 1 [ 866.346556][ T5760] usb 4-1: config 6 has no interface number 0 [ 866.346572][ T5760] usb 4-1: config 6 has no interface number 1 [ 866.346608][ T5760] usb 4-1: config 6 interface 197 has no altsetting 0 [ 866.346626][ T5760] usb 4-1: config 6 interface 160 has no altsetting 0 [ 866.401144][ T5760] usb 4-1: New USB device found, idVendor=2040, idProduct=9941, bcdDevice=5e.8e [ 866.401173][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.401191][ T5760] usb 4-1: Product: syz [ 866.401202][ T5760] usb 4-1: Manufacturer: syz [ 866.401214][ T5760] usb 4-1: SerialNumber: syz [ 866.528920][T18367] usb 5-1: USB disconnect, device number 109 [ 866.901730][ T5760] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 866.903605][ T5760] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 866.903647][ T5760] dib0700: firmware download failed at 7 with -22 [ 866.934505][ T5760] hub 4-1:6.160: Invalid hub with more than one config or interface [ 866.934542][ T5760] hub 4-1:6.160: probe with driver hub failed with error -22 [ 866.936409][ T5760] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 866.937425][ T5760] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 866.937451][ T5760] dib0700: firmware download failed at 7 with -22 [ 866.983357][ T5760] usb 4-1: USB disconnect, device number 37 [ 867.044792][T23021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6689'. [ 867.169444][T18367] kernel read not supported for file /vcs (pid: 18367 comm: kworker/1:0) [ 867.445101][T18367] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 867.485699][T23035] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6694'. [ 867.602531][T18367] usb 5-1: Using ep0 maxpacket: 16 [ 867.605115][T18367] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.605135][T18367] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.605158][T18367] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 867.605171][T18367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.816320][ T5715] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 867.976622][ T5715] usb 2-1: Using ep0 maxpacket: 32 [ 867.978568][ T5715] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.978616][ T5715] usb 2-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 867.978699][ T5715] usb 2-1: config 0 interface 0 has no altsetting 0 [ 867.978732][ T5715] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 867.978752][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.983700][ T5715] usb 2-1: config 0 descriptor?? [ 867.996363][ T5715] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 868.078445][T18367] mcp2221 0003:04D8:00DD.002E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 868.112253][ T5760] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 868.286260][T18367] usb 5-1: USB disconnect, device number 110 [ 868.307889][ T5760] usb 6-1: Using ep0 maxpacket: 8 [ 868.312867][ T5760] usb 6-1: config 16 has an invalid interface number: 255 but max is 0 [ 868.312881][ T5760] usb 6-1: config 16 has an invalid descriptor of length 242, skipping remainder of the config [ 868.312891][ T5760] usb 6-1: config 16 has no interface number 0 [ 868.312908][ T5760] usb 6-1: too many endpoints for config 16 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 868.312932][ T5760] usb 6-1: config 16 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 868.312945][ T5760] usb 6-1: config 16 interface 255 has no altsetting 0 [ 868.312962][ T5760] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 868.312974][ T5760] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.547246][ T5760] usb 6-1: string descriptor 0 read error: -71 [ 868.584512][ T5760] usb 6-1: USB disconnect, device number 94 [ 868.633302][ T5701] usb 2-1: USB disconnect, device number 57 [ 868.942183][T23057] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6704'. [ 869.184215][ T5701] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 869.291138][T18367] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 869.361496][ T5701] usb 2-1: unable to get BOS descriptor or descriptor too short [ 869.363474][ T5701] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 869.363507][ T5701] usb 2-1: can't read configurations, error -71 [ 869.441812][ T5708] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 869.461922][T18367] usb 5-1: Using ep0 maxpacket: 32 [ 869.463869][T18367] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 869.463893][T18367] usb 5-1: config 0 has no interface number 0 [ 869.466480][T18367] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 869.466505][T18367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.466525][T18367] usb 5-1: Product: syz [ 869.466539][T18367] usb 5-1: Manufacturer: syz [ 869.466552][T18367] usb 5-1: SerialNumber: syz [ 869.476048][T18367] usb 5-1: config 0 descriptor?? [ 869.486572][T18367] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 869.486597][T18367] usb 5-1: selecting invalid altsetting 1 [ 869.486612][T18367] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 869.509392][T18367] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 869.509808][T18367] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 869.509855][T18367] usb 5-1: media controller created [ 869.525097][T18367] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 869.601518][ T5708] usb 4-1: Using ep0 maxpacket: 32 [ 869.605320][ T5708] usb 4-1: config 3 has an invalid interface number: 24 but max is 2 [ 869.605337][ T5708] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 869.605347][ T5708] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 3 [ 869.605357][ T5708] usb 4-1: config 3 has no interface number 0 [ 869.614751][ T5708] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice= 9.f7 [ 869.614779][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.614865][ T5708] usb 4-1: Product: syz [ 869.614879][ T5708] usb 4-1: Manufacturer: syz [ 869.614892][ T5708] usb 4-1: SerialNumber: syz [ 869.916279][ T5708] asix 4-1:3.24: probe with driver asix failed with error -22 [ 869.930508][ T5708] usb 4-1: USB disconnect, device number 38 [ 870.045191][T23075] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6713'. [ 870.585128][ T57] wlan1: Trigger new scan to find an IBSS to join [ 870.670189][T18367] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 870.675638][T18367] zl10353_read_register: readreg error (reg=127, ret==-110) [ 870.815276][T23061] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 870.835633][T23091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6719'. [ 870.883366][T18367] usb 5-1: USB disconnect, device number 111 [ 871.340432][T23101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 871.529651][T23111] [ 871.529664][T23111] ====================================================== [ 871.529673][T23111] WARNING: possible circular locking dependency detected [ 871.529805][T23111] syzkaller #0 Tainted: G L [ 871.529816][T23111] ------------------------------------------------------ [ 871.529825][T23111] syz.5.6727/23111 is trying to acquire lock: [ 871.529837][T23111] ffff8880384b7478 (&of->mutex){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 871.529916][T23111] [ 871.529916][T23111] but task is already holding lock: [ 871.529923][T23111] ffff88805ebacc98 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 871.529964][T23111] [ 871.529964][T23111] which lock already depends on the new lock. [ 871.529964][T23111] [ 871.529972][T23111] [ 871.529972][T23111] the existing dependency chain (in reverse order) is: [ 871.529980][T23111] [ 871.529980][T23111] -> #5 (&p->lock){+.+.}-{4:4}: [ 871.530029][T23111] mutex_lock_nested+0x5a/0x1d0 [ 871.530052][T23111] seq_read_iter+0xb8/0xe20 [ 871.530069][T23111] lo_rw_aio+0xc80/0xf00 [ 871.530099][T23111] loop_process_work+0x92a/0x11b0 [ 871.530122][T23111] process_one_work+0x98b/0x1630 [ 871.530141][T23111] worker_thread+0xb49/0x1140 [ 871.530164][T23111] kthread+0x389/0x470 [ 871.530181][T23111] ret_from_fork+0x514/0xb70 [ 871.530200][T23111] ret_from_fork_asm+0x1a/0x30 [ 871.530220][T23111] [ 871.530220][T23111] -> #4 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 871.530246][T23111] process_one_work+0x8d7/0x1630 [ 871.530265][T23111] worker_thread+0xb49/0x1140 [ 871.530286][T23111] kthread+0x389/0x470 [ 871.530299][T23111] ret_from_fork+0x514/0xb70 [ 871.530316][T23111] ret_from_fork_asm+0x1a/0x30 [ 871.530335][T23111] [ 871.530335][T23111] -> #3 ((wq_completion)loop8){+.+.}-{0:0}: [ 871.530357][T23111] touch_wq_lockdep_map+0xcb/0x180 [ 871.530372][T23111] __flush_workqueue+0x14b/0x14f0 [ 871.530395][T23111] drain_workqueue+0xd3/0x390 [ 871.530408][T23111] lo_release+0x287/0x8f0 [ 871.530428][T23111] bdev_release+0x541/0x660 [ 871.530444][T23111] blkdev_release+0x15/0x20 [ 871.530461][T23111] __fput+0x461/0xa70 [ 871.530481][T23111] task_work_run+0x1d9/0x270 [ 871.530500][T23111] exit_to_user_mode_loop+0xf3/0x4d0 [ 871.530517][T23111] do_syscall_64+0x33e/0x560 [ 871.530540][T23111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.530558][T23111] [ 871.530558][T23111] -> #2 (&disk->open_mutex){+.+.}-{4:4}: [ 871.530582][T23111] mutex_lock_nested+0x5a/0x1d0 [ 871.530601][T23111] bdev_open+0xe0/0xcc0 [ 871.530616][T23111] bdev_file_open_by_dev+0x1be/0x240 [ 871.530633][T23111] swsusp_check+0x56/0x490 [ 871.530649][T23111] software_resume+0x51/0x4c0 [ 871.530672][T23111] resume_store+0x333/0x4f0 [ 871.530693][T23111] kernfs_fop_write_iter+0x3b0/0x540 [ 871.530712][T23111] vfs_write+0x629/0xba0 [ 871.530726][T23111] ksys_write+0x156/0x270 [ 871.530741][T23111] do_syscall_64+0x15f/0x560 [ 871.530764][T23111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.530781][T23111] [ 871.530781][T23111] -> #1 (system_transition_mutex){+.+.}-{4:4}: [ 871.530807][T23111] mutex_lock_nested+0x5a/0x1d0 [ 871.530825][T23111] lock_system_sleep+0x49/0x70 [ 871.530841][T23111] resume_store+0x2ff/0x4f0 [ 871.530863][T23111] kernfs_fop_write_iter+0x3b0/0x540 [ 871.530880][T23111] vfs_write+0x629/0xba0 [ 871.530898][T23111] ksys_write+0x156/0x270 [ 871.530913][T23111] do_syscall_64+0x15f/0x560 [ 871.530935][T23111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.530952][T23111] [ 871.530952][T23111] -> #0 (&of->mutex){+.+.}-{4:4}: [ 871.530976][T23111] __lock_acquire+0x15a5/0x2d10 [ 871.530993][T23111] lock_acquire+0x106/0x350 [ 871.531009][T23111] mutex_lock_nested+0x5a/0x1d0 [ 871.531027][T23111] kernfs_seq_start+0x5c/0x420 [ 871.531045][T23111] seq_read_iter+0x3f8/0xe20 [ 871.531063][T23111] vfs_read+0x58b/0xa80 [ 871.531093][T23111] ksys_read+0x156/0x270 [ 871.531108][T23111] do_syscall_64+0x15f/0x560 [ 871.531131][T23111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.531149][T23111] [ 871.531149][T23111] other info that might help us debug this: [ 871.531149][T23111] [ 871.531156][T23111] Chain exists of: [ 871.531156][T23111] &of->mutex --> (work_completion)(&worker->work) --> &p->lock [ 871.531156][T23111] [ 871.531188][T23111] Possible unsafe locking scenario: [ 871.531188][T23111] [ 871.531195][T23111] CPU0 CPU1 [ 871.531202][T23111] ---- ---- [ 871.531222][T23111] lock(&p->lock); [ 871.531235][T23111] lock((work_completion)(&worker->work)); [ 871.531251][T23111] lock(&p->lock); [ 871.531265][T23111] lock(&of->mutex); [ 871.531278][T23111] [ 871.531278][T23111] *** DEADLOCK *** [ 871.531278][T23111] [ 871.531284][T23111] 2 locks held by syz.5.6727/23111: [ 871.531296][T23111] #0: ffff88801fbdab28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 871.531345][T23111] #1: ffff88805ebacc98 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 871.531387][T23111] [ 871.531387][T23111] stack backtrace: [ 871.531400][T23111] CPU: 0 UID: 0 PID: 23111 Comm: syz.5.6727 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 871.531425][T23111] Tainted: [L]=SOFTLOCKUP [ 871.531432][T23111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 871.531444][T23111] Call Trace: [ 871.531451][T23111] [ 871.531461][T23111] dump_stack_lvl+0xe8/0x150 [ 871.531484][T23111] print_circular_bug+0x2e1/0x300 [ 871.531508][T23111] check_noncircular+0x12e/0x150 [ 871.531532][T23111] __lock_acquire+0x15a5/0x2d10 [ 871.531559][T23111] ? kernfs_seq_start+0x5c/0x420 [ 871.531578][T23111] lock_acquire+0x106/0x350 [ 871.531595][T23111] ? kernfs_seq_start+0x5c/0x420 [ 871.531616][T23111] ? kernfs_seq_start+0x5c/0x420 [ 871.531637][T23111] ? kernfs_seq_start+0x5c/0x420 [ 871.531655][T23111] mutex_lock_nested+0x5a/0x1d0 [ 871.531675][T23111] ? kernfs_seq_start+0x5c/0x420 [ 871.531696][T23111] kernfs_seq_start+0x5c/0x420 [ 871.531717][T23111] seq_read_iter+0x3f8/0xe20 [ 871.531743][T23111] vfs_read+0x58b/0xa80 [ 871.531770][T23111] ? __pfx_vfs_read+0x10/0x10 [ 871.531796][T23111] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 871.531820][T23111] ? lockdep_hardirqs_on+0x7a/0x110 [ 871.531846][T23111] ? mutex_lock_nested+0x152/0x1d0 [ 871.531865][T23111] ? fdget_pos+0x252/0x320 [ 871.531890][T23111] ksys_read+0x156/0x270 [ 871.531907][T23111] ? __pfx_ksys_read+0x10/0x10 [ 871.531927][T23111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.531945][T23111] do_syscall_64+0x15f/0x560 [ 871.531969][T23111] ? trace_irq_disable+0x3b/0x140 [ 871.531986][T23111] ? clear_bhb_loop+0x40/0x90 [ 871.532006][T23111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.532025][T23111] RIP: 0033:0x7f17658bce59 [ 871.532042][T23111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.532059][T23111] RSP: 002b:00007f1763b0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 871.532085][T23111] RAX: ffffffffffffffda RBX: 00007f1765b35fa0 RCX: 00007f17658bce59 [ 871.532100][T23111] RDX: 0000000000002020 RSI: 0000200000000440 RDI: 0000000000000004 [ 871.532113][T23111] RBP: 00007f1765952d6f R08: 0000000000000000 R09: 0000000000000000 [ 871.532126][T23111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 871.532138][T23111] R13: 00007f1765b36038 R14: 00007f1765b35fa0 R15: 00007fff88936528 [ 871.532160][T23111] [ 871.626369][T23111] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6727'. [ 871.941042][T18367] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 872.101329][T18367] usb 2-1: Using ep0 maxpacket: 16 [ 872.102943][T18367] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 872.102970][T18367] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 872.105468][T18367] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 872.105494][T18367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.105512][T18367] usb 2-1: Product: syz [ 872.105525][T18367] usb 2-1: Manufacturer: syz [ 872.105538][T18367] usb 2-1: SerialNumber: syz [ 872.109110][T18367] usb 2-1: config 0 descriptor?? [ 872.115256][T18367] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 872.115284][T18367] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 872.760699][T18367] em28xx 2-1:0.0: unknown em28xx chip ID (238) [ 872.976624][T23115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.977038][T23115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.981724][T18367] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 873.013776][T18367] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 873.013796][T18367] em28xx 2-1:0.0: No AC97 audio processor [ 873.019380][T18367] usb 2-1: USB disconnect, device number 60 [ 873.019931][T18367] em28xx 2-1:0.0: Disconnecting em28xx [ 873.022674][T18367] em28xx 2-1:0.0: Freeing device [ 875.884747][ T8018] wlan1: Trigger new scan to find an IBSS to join [ 876.878087][ T8018] wlan1: Creating new IBSS network, BSSID b6:55:4c:db:b4:6a