last executing test programs: 2m57.057362012s ago: executing program 1 (id=1179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x8010) 2m56.881457077s ago: executing program 1 (id=1182): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=ANY=[@ANYRES16=r1, @ANYBLOB="2903fcfffffffedbdf2516"], 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x400c014) 2m56.24977119s ago: executing program 1 (id=1186): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x9, &(0x7f00000001c0)=@framed={{}, [@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x6}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m56.14795098s ago: executing program 1 (id=1188): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001480)={@fallback=r0, r0, 0x2f}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f00000023c0)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002480)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000002500)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m55.866135482s ago: executing program 1 (id=1192): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)=0x0) readv(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) 2m52.513425561s ago: executing program 1 (id=1242): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd\x00', 0x4) mount(0x0, &(0x7f0000000280)='./nfsd\x00', &(0x7f00000002c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)='1', 0x1) 2m36.228274726s ago: executing program 32 (id=1242): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd\x00', 0x4) mount(0x0, &(0x7f0000000280)='./nfsd\x00', &(0x7f00000002c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)='1', 0x1) 2m33.622808941s ago: executing program 3 (id=1360): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="0000000000303e97380e90231bdbdaf6a4bd77eabcd3866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9d00000c0a498396b28c7d1784d04aa38922721cb781608144284d90a72d7d2e3152d201ed78ffb6e711b889cda0346ce9bca2e6e9e46b15980456c43a659f427e3e6e9e16e0de93100734d409ca57c27d3bde66b2791c1b2f7032f3cc02c85c43e8652f13258bd412174ea931f1d39a9830e593761d91c56f637f0e1568ea66a15d9f0eba504ab3eb205fda13d1068e7692f8d00a2d92d2fb48887b6f71c6de43a923bbcaa9e3ac5bd82ac0ec000000000000000000", 0xf2}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 2m33.532495183s ago: executing program 3 (id=1363): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2m33.365304979s ago: executing program 3 (id=1366): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x4, &(0x7f0000000600)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x16}, [@exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000640)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xe, &(0x7f0000004280)=ANY=[@ANYBLOB="b702000024000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80c0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57abb1af00f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d586270f9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333aab1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486c9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d75007606000000b2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a082c5242c8fa7f01e0873c9c5c604108ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a0338c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b198246d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e91017343e3dc6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000000de00d23dd63b7761d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a38e7868dc32e132124ecf52327631b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f1370d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd038c1817f0d4652a29353b05b16b3c5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df625a47bade4ba41ee014184395a479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2a65246779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04eda001aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f4125377960604f521df5e325efe395a4e3b7ca8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd020000000000000000000000d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a244609ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e7a5dd7503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d58bb5603895f265685f0400000000000000ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0f6f03160ec875b92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c8e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a18668298a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c14233d597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a9adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cb2791add8279c491fa48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89f11a300510776934e87bb3c21394f46954a012b2a3b0760f1bad1dbd6b466e0000000000000000008e5f9004e01fe2b177c5f443d09de4ba8f72d534405f9e7807c864bbca5893376420e38cf47a3660a2ab17b20baa271aa9eaffc19b50f291f51a7cc935023382bd80d7bca313636f3aaa6b788b233097bd545d9bf9715fbf"], &(0x7f0000004f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000004f80), 0x0, 0x10, &(0x7f0000004fc0), 0xfe7d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000005080)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18006000, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = syz_open_dev$evdev(&(0x7f0000000280), 0xfffffffffffffffe, 0x400440) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f00000002c0)=""/8) io_setup(0x1c59, &(0x7f0000000000)) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/keys\x00', 0x0, 0x0) preadv(r6, &(0x7f00000004c0)=[{&(0x7f0000003280)=""/4096, 0x1000}], 0x1, 0x0, 0x0) getsockopt$sock_cred(r5, 0x1, 0x31, 0xffffffffffffffff, &(0x7f0000000080)) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_trace_dev_match', 0x42, 0x5bcfc7dc3ef51378) read$FUSE(r7, &(0x7f00000011c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r9 = dup(r8) readv(r9, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/37, 0x25}], 0x2) 2m32.31351116s ago: executing program 3 (id=1373): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000500)={0xc}) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000000700)=""/102392, 0x18ff8) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000180)={0xf0f002, 0x5}) 2m31.557138185s ago: executing program 3 (id=1380): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)='mydomain / 2147483647 0x2400 0 0 1\n', 0x23) 2m31.27409147s ago: executing program 3 (id=1383): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x11a}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 2m19.061385604s ago: executing program 5 (id=1464): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xa4d4, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) 2m19.018389303s ago: executing program 5 (id=1465): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r2 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2m18.090115396s ago: executing program 5 (id=1471): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/204, 0xcc}, {&(0x7f0000000740)=""/70, 0x46}, {&(0x7f0000000900)=""/16, 0x10}, {&(0x7f0000000940)=""/154, 0x9a}, {&(0x7f0000000a00)=""/4085, 0xff5}, {&(0x7f0000001a00)=""/220, 0xdc}, {&(0x7f0000001b00)=""/106, 0x6a}], 0x7}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x20, 0x0) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x800008}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x100, 0x0) 2m18.020415706s ago: executing program 5 (id=1472): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000740)=""/12, 0xc}], 0x1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x4008054) 2m17.080899548s ago: executing program 5 (id=1475): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x8, 0x20, 0xffffffff, 0x1, 0x1, 0xfffffffe}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000540), &(0x7f0000000740)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2m16.950035315s ago: executing program 5 (id=1478): sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x1ffffffffffe, 0x7, 0x8, 0x3}, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 2m14.652814395s ago: executing program 33 (id=1383): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x11a}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 2m0.762933197s ago: executing program 34 (id=1478): sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x1ffffffffffe, 0x7, 0x8, 0x3}, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 3.77488073s ago: executing program 6 (id=2477): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004005}, 0xc000) 3.720334325s ago: executing program 6 (id=2478): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000400)={r2, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000440)={r3}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.664873464s ago: executing program 6 (id=2479): fsopen(&(0x7f0000000280)='zonefs\x00', 0x0) 3.566303961s ago: executing program 6 (id=2480): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000100)={&(0x7f0000001d40)=[{0x5, 0x8010, 0x0, 0x0}], 0x1}) 3.276132874s ago: executing program 7 (id=2483): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x18, &(0x7f0000000280)={0x0, 0x11}, 0x0, 0x0, &(0x7f0000000380)={0xc0, 0x5, 0x1, ':'}, 0x0}) 2.852935925s ago: executing program 4 (id=2488): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004005}, 0xc000) 2.639639625s ago: executing program 4 (id=2491): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000003200)={0x60, 0x0, 0x0, {{0x1, 0x9, 0xffffffff, 0x4, 0x5, 0x7fff, 0xfffffffe, 0x81}}}, 0x60) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r1 = dup(r0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/37, 0x25}], 0x1) 2.164946987s ago: executing program 2 (id=2496): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r2 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.675434032s ago: executing program 4 (id=2497): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_AUTH_ENABLE={{0xfe}, 0x8}}}, 0x7) 1.164410153s ago: executing program 2 (id=2499): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/module/ueagle_atm/parameters/altsetting\x00', 0x1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000180)={0xb, 0x29, 0x1, {0x6}}, 0xb) 1.043309095s ago: executing program 6 (id=2501): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4004005}, 0xc000) 984.458815ms ago: executing program 2 (id=2502): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000400)={r2, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000440)={r3}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 983.635002ms ago: executing program 4 (id=2503): r0 = fsopen(&(0x7f0000000380)='ntfs3\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000200)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 926.323844ms ago: executing program 6 (id=2504): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000003c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000580)={0x0, &(0x7f00000004c0)=[0x0], 0x0, &(0x7f0000000540)=[0x0], 0x0, 0x1, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000400)={0x2, r2, 0x1, 0xffff, 0x81, 0x1ff, 0x1}) 873.330682ms ago: executing program 2 (id=2506): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000015c0)={'syzkaller0\x00', 0x312}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x1, 0x4, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000017c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000001800), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001840)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xffff8001, 0xf}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048074}, 0x4890) sendmsg$kcm(r4, &(0x7f0000001980)={&(0x7f00000019c0)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001a80)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 854.475876ms ago: executing program 4 (id=2507): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0xfe67c95f929d5cbc, 0x0, 0x0) 766.240764ms ago: executing program 7 (id=2508): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000380)=0xfffffe00) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x80002, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x4001c00) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x410042, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000300)='.\x00', 0x2) 740.631161ms ago: executing program 4 (id=2509): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r2 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 734.981736ms ago: executing program 0 (id=2510): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000040)=0x80000000, 0xfea2) syz_emit_ethernet(0x66, &(0x7f0000000200)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "000100", 0x30, 0x3a, 0x1, @private2, @mcast2, {[], @dest_unreach={0x1, 0x5, 0x0, 0x3, '\x00', {0x7, 0x6, "9aef12", 0x3fff, 0x11, 0xff, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}}}}}}}, 0x0) 565.387629ms ago: executing program 0 (id=2511): open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mkdirat(0xffffffffffffff9c, 0x0, 0xc) mount$bpf(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x3872c22, 0x0) 562.828351ms ago: executing program 7 (id=2512): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/module/ueagle_atm/parameters/altsetting\x00', 0x1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000180)={0xb, 0x29, 0x1, {0x6}}, 0xb) 529.87339ms ago: executing program 2 (id=2513): mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, 0x0) 393.993801ms ago: executing program 7 (id=2514): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4004005}, 0xc000) 393.721345ms ago: executing program 0 (id=2515): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x8, 0x20, 0xffffffff, 0x1, 0x1, 0xfffffffe}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000540), &(0x7f0000000740)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 368.981516ms ago: executing program 2 (id=2516): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$setregs(0xf, r2, 0x6, &(0x7f0000000300)) r5 = socket$inet(0x2, 0x2, 0x7) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x0, [0x3, 0x0, 0xfff]}, &(0x7f0000000180)=0x44) keyctl$set_reqkey_keyring(0xe, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r7, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @broadcast}}}}) close_range(r0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) 47.057981ms ago: executing program 7 (id=2517): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000380)={0x20004, r1, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000400)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000440)={r3}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 44.20616ms ago: executing program 0 (id=2518): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x73c1, &(0x7f0000000000)={0x0, 0xcd3b, 0x2, 0x20002, 0x297}, &(0x7f0000000080), &(0x7f00000000c0), 0x0) mount$overlay(0x0, 0x0, 0x0, 0x10004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./tracing\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='e:my_read_msr1 msr/read_msr', 0x1b) creat(&(0x7f0000000400)='./tracing/dynamic_events\x00', 0x21) prlimit64(0x0, 0xb, &(0x7f0000000440), 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = open(&(0x7f0000000480)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r3, 0xa, 0x21) fcntl$setlease(r3, 0x400, 0x0) truncate(&(0x7f00000004c0)='./file0\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x29) write(r4, &(0x7f0000000240)='7', 0x1) munmap$IORING_OFF_SQES(0x0, 0xc5059c) write(r0, &(0x7f0000000280)="240000002a0001039900000000000000000000000100"/36, 0x24) 43.971579ms ago: executing program 7 (id=2519): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffc, 0x101200) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys_sec\x00', &(0x7f00000001c0)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket(0x2b, 0x1, 0x1) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000300)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000340)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0xfffffffffffffffc, 0x1, 0x9}, 0x0, 0x0) 43.318623ms ago: executing program 0 (id=2520): sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x40801) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000006d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="2f000000000000000000000064779d669168b9e1304645e77f022de337a85facd02feb50e02ae32c2990070bf4a8fa7896ef4d93c8bf8ea9acf2fc1f3c926016c05b210b27567dff9c9b58f27214fc5d14fdda771c48a14b00000000000000000000200000005df859df29382b8c17b391fa15b80e7c1d1c434a5e082317cd98fae6f7bd52c2787bb940027253c4c4d9bd3bdc9d5380829ffe3536ea676c4acc2de312da0cda9bdefdd30101924e1b71da26b10000d3b51b2d8a", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) pread64(r2, &(0x7f0000001600)=""/219, 0xdb, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, &(0x7f0000000600)=ANY=[], &(0x7f0000001340)='syzkaller\x00'}, 0x94) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000001380), 0x12) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000001400), 0x12) sendmsg$NFT_BATCH(r5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000015c0)={'bond0\x00', 0x2000}) 0s ago: executing program 0 (id=2521): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @auto=[0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x37, 0x6c, 0x30, 0x30, 0x30, 0x32]}, 0x0, 0x0, r0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x30, 0x39, 0x61, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x43}, 0x48, r0) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x33, 0x31, 0x30, 0x63, 0x34, 0x63, 0x30, 0x32, 0x37, 0x30, 0x30, 0x36, 0x7, 0x65, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "0011223344336677887baebbcdddeeff0011d8f45e36794672b8aabbccccddeeff000d2200805a20567218761c587eeeffe44600", 0x13}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x42}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000780)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(0x0, &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x35, 0x60, 0x30, 0x39, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, 0x0, 0x0, r0) kernel console output (not intermixed with test programs): 08/05/2026 [ 231.326041][ T5607] Workqueue: hci3 hci_rx_work [ 231.326060][ T5607] Call Trace: [ 231.326064][ T5607] [ 231.326069][ T5607] dump_stack_lvl+0x100/0x190 [ 231.326089][ T5607] sysfs_warn_dup.cold+0x1c/0x28 [ 231.326109][ T5607] sysfs_create_dir_ns+0x24b/0x2b0 [ 231.326128][ T5607] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 231.326145][ T5607] ? find_held_lock+0x2b/0x80 [ 231.326160][ T5607] ? kobject_add_internal+0x25f/0x930 [ 231.326175][ T5607] ? kobject_add_internal+0x25f/0x930 [ 231.326192][ T5607] ? do_raw_spin_unlock+0x145/0x1e0 [ 231.326207][ T5607] kobject_add_internal+0x2c8/0x930 [ 231.326225][ T5607] kobject_add+0x16a/0x1e0 [ 231.326239][ T5607] ? __pfx_kobject_add+0x10/0x10 [ 231.326252][ T5607] ? class_to_subsys+0x10f/0x150 [ 231.326270][ T5607] ? kobject_put+0xb9/0x640 [ 231.326282][ T5607] ? _raw_spin_unlock+0x28/0x50 [ 231.326301][ T5607] device_add+0x294/0x1970 [ 231.326316][ T5607] ? __pfx_dev_set_name+0x10/0x10 [ 231.326333][ T5607] ? __pfx_device_add+0x10/0x10 [ 231.326347][ T5607] ? mgmt_send_event_skb+0x2fb/0x460 [ 231.326368][ T5607] hci_conn_add_sysfs+0x1a3/0x260 [ 231.326387][ T5607] le_conn_complete_evt+0x122f/0x2130 [ 231.326407][ T5607] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 231.326422][ T5607] ? hci_event_packet+0x186/0xcd0 [ 231.326439][ T5607] hci_le_conn_complete_evt+0x23c/0x3a0 [ 231.326456][ T5607] ? skb_pull_data+0x15f/0x1e0 [ 231.326474][ T5607] hci_le_meta_evt+0x34a/0x5f0 [ 231.326491][ T5607] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 231.326508][ T5607] hci_event_packet+0x51c/0xcd0 [ 231.326524][ T5607] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 231.326540][ T5607] ? __pfx_hci_event_packet+0x10/0x10 [ 231.326558][ T5607] ? lockdep_hardirqs_on+0x7d/0x110 [ 231.326578][ T5607] hci_rx_work+0x451/0xfc0 [ 231.326596][ T5607] process_one_work+0xac7/0x1b10 [ 231.326619][ T5607] ? __pfx_process_one_work+0x10/0x10 [ 231.326636][ T5607] ? lock_acquire+0x1d1/0x380 [ 231.326651][ T5607] ? __pfx_hci_rx_work+0x10/0x10 [ 231.326667][ T5607] worker_thread+0x5ef/0xe50 [ 231.326687][ T5607] ? __pfx_worker_thread+0x10/0x10 [ 231.326704][ T5607] ? kthread+0x13a/0x450 [ 231.326718][ T5607] ? __pfx_worker_thread+0x10/0x10 [ 231.326732][ T5607] kthread+0x373/0x450 [ 231.326746][ T5607] ? __pfx_kthread+0x10/0x10 [ 231.326771][ T5607] ret_from_fork+0x730/0xd60 [ 231.326786][ T5607] ? __pfx_ret_from_fork+0x10/0x10 [ 231.326802][ T5607] ? __switch_to+0x800/0x10e0 [ 231.326819][ T5607] ? __pfx_kthread+0x10/0x10 [ 231.326836][ T5607] ret_from_fork_asm+0x1a/0x30 [ 231.326857][ T5607] [ 231.327524][ T5607] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 231.327545][ T5607] Bluetooth: hci3: failed to register connection device [ 232.004682][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 232.132494][ T5602] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 232.166618][ T9] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 232.167419][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.168591][ T9] usb 7-1: config 0 descriptor?? [ 232.293399][ T5602] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 232.294154][ T5602] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 232.294178][ T5602] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 232.294189][ T5602] usb 1-1: config 4 has no interface number 0 [ 232.294207][ T5602] usb 1-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 232.295807][ T5602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.295820][ T5602] usb 1-1: Product: syz [ 232.295828][ T5602] usb 1-1: Manufacturer: syz [ 232.295836][ T5602] usb 1-1: SerialNumber: syz [ 232.397146][ T9] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 232.450841][T10809] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1719'. [ 232.503507][ T30] audit: type=1400 audit(1792660612.229:621): avc: denied { cmd } for pid=10806 comm="iou-wrk-10810" path="socket:[29760]" dev="sockfs" ino=29760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 232.693889][ T9] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 1 [ 232.693905][ T9] [drm] Initialized udl on minor 1 [ 232.759015][ T5602] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 232.772695][ T5602] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 232.785801][ T5602] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 232.785838][ T5602] usb 1-1: media controller created [ 232.788248][ T5602] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.897920][ T5602] DVB: Unable to find symbol dib7000p_attach() [ 232.897928][ T5602] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 232.943437][T10823] netlink: 'syz.7.1723': attribute type 1 has an invalid length. [ 232.943447][T10823] netlink: 'syz.7.1723': attribute type 2 has an invalid length. [ 232.976126][ T30] audit: type=1400 audit(1792660612.669:622): avc: denied { append } for pid=10800 comm="syz.0.1715" name="i2c-1" dev="devtmpfs" ino=4020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 233.051643][ T5602] rc_core: IR keymap rc-dib0700-rc5 not found [ 233.051652][ T5602] Registered IR keymap rc-empty [ 233.051789][ T5602] dvb-usb: could not initialize remote control. [ 233.051794][ T5602] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 233.090496][ T5602] usb 1-1: USB disconnect, device number 16 [ 233.119460][ T5602] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 233.163993][ T30] audit: type=1400 audit(1792660612.837:623): avc: denied { read } for pid=5597 comm="syz-executor" name="loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 233.164020][ T30] audit: type=1400 audit(1792660612.847:624): avc: denied { open } for pid=5597 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 233.164042][ T30] audit: type=1400 audit(1792660612.847:625): avc: denied { ioctl } for pid=5597 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 233.433289][T10837] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 233.548628][T10843] ip_tables: iptables: counters copy to user failed while replacing table [ 233.566277][ T30] audit: type=1400 audit(1792660613.230:626): avc: denied { read write } for pid=10844 comm="syz.2.1733" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 233.567448][ T30] audit: type=1400 audit(1792660613.230:627): avc: denied { open } for pid=10844 comm="syz.2.1733" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 233.571380][ T30] audit: type=1400 audit(1792660613.230:628): avc: denied { ioctl } for pid=10844 comm="syz.2.1733" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 233.923165][T10866] mmap: syz.2.1741 (10866) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 233.966253][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1742'. [ 234.027965][ T30] audit: type=1400 audit(1792660613.661:629): avc: denied { sys_module } for pid=10870 comm="syz.2.1743" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 234.121819][ T5602] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 234.282055][ T5602] usb 8-1: Using ep0 maxpacket: 32 [ 234.282475][ T5602] usb 8-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 234.284810][ T5602] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.284823][ T5602] usb 8-1: Product: syz [ 234.284832][ T5602] usb 8-1: Manufacturer: syz [ 234.284840][ T5602] usb 8-1: SerialNumber: syz [ 234.286242][ T5602] usb 8-1: config 0 descriptor?? [ 234.290796][ T5602] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 234.416604][T10891] capability: warning: `syz.2.1748' uses deprecated v2 capabilities in a way that may be insecure [ 235.660178][ T5697] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 235.801194][ T5602] gspca_topro: reg_r err -71 [ 235.801204][ T5602] gspca_topro: Sensor soi763a [ 235.822475][ T5697] usb 1-1: Using ep0 maxpacket: 32 [ 235.823947][ T5697] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 235.826203][ T5697] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.826225][ T5697] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 235.826241][ T5697] usb 1-1: config 0 interface 0 has no altsetting 0 [ 235.829458][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.829472][ T5697] usb 1-1: Product: syz [ 235.829480][ T5697] usb 1-1: Manufacturer: syz [ 235.829489][ T5697] usb 1-1: SerialNumber: syz [ 235.871353][ T5697] usb 1-1: config 0 descriptor?? [ 235.914132][ T5697] gs_usb 1-1:0.0: Required endpoints not found [ 235.921904][ T5602] usb 8-1: USB disconnect, device number 3 [ 236.148124][T10952] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 236.207052][T10955] syzkaller0: entered promiscuous mode [ 236.207102][T10955] syzkaller0: entered allmulticast mode [ 237.649976][T10973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1776'. [ 237.751158][T10979] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 238.031209][ T5602] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 238.052561][ T5697] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 238.096428][ T9] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 238.100613][ T9] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 238.105894][ T5698] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 238.136942][ T9] usb 7-1: USB disconnect, device number 4 [ 238.162098][ T5698] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 238.193913][ T5697] usb 5-1: device descriptor read/64, error -71 [ 238.202374][ T5602] usb 3-1: Using ep0 maxpacket: 32 [ 238.217771][ T5602] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 238.220648][ T5602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.220662][ T5602] usb 3-1: Product: syz [ 238.220670][ T5602] usb 3-1: Manufacturer: syz [ 238.220679][ T5602] usb 3-1: SerialNumber: syz [ 238.222955][ T5602] usb 3-1: config 0 descriptor?? [ 238.271488][ T5602] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 238.447929][ T5697] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 238.587745][ T5697] usb 5-1: device descriptor read/64, error -71 [ 238.623717][ T5698] usb 1-1: USB disconnect, device number 17 [ 238.708082][ T5697] usb usb5-port1: attempt power cycle [ 238.738376][T11000] syzkaller0: entered promiscuous mode [ 238.738389][T11000] syzkaller0: entered allmulticast mode [ 239.068102][ T5697] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 239.096088][ T5697] usb 5-1: device descriptor read/8, error -71 [ 239.346720][ T5697] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 239.368496][ T5697] usb 5-1: device descriptor read/8, error -71 [ 239.442549][T11004] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1788'. [ 239.487628][ T5697] usb usb5-port1: unable to enumerate USB device [ 239.506702][ T5698] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 239.674298][ T5698] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 239.693415][ T5698] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.693439][ T5698] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.694836][ T5698] usb 7-1: config 0 descriptor?? [ 239.781401][ T5602] gspca_topro: reg_r err -71 [ 239.781411][ T5602] gspca_topro: Sensor soi763a [ 239.783374][ T5602] usb 3-1: USB disconnect, device number 16 [ 239.949599][ T5698] usbhid 7-1:0.0: can't add hid device: -71 [ 239.949676][ T5698] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 239.950816][ T5698] usb 7-1: USB disconnect, device number 5 [ 240.414732][ T5698] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 240.578360][ T5698] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 240.579190][ T5698] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.579226][ T5698] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.580833][ T5698] usb 7-1: config 0 descriptor?? [ 242.111852][ T30] audit: type=1800 audit(1792660621.222:630): pid=11048 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1801" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 242.365071][ T30] audit: type=1400 audit(1792660621.456:631): avc: denied { name_bind } for pid=11050 comm="syz.2.1802" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 242.500373][ T5698] aiptek 7-1:0.0: Aiptek using 400 ms programming speed [ 242.501635][ T5698] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input18 [ 242.555409][ T5698] usb 7-1: USB disconnect, device number 6 [ 242.555462][ C0] aiptek 7-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 242.623823][T11057] ip_tables: iptables: counters copy to user failed while replacing table [ 242.625192][T11057] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1805'. [ 242.655565][T11056] syzkaller0: entered promiscuous mode [ 242.655575][T11056] syzkaller0: entered allmulticast mode [ 242.712313][T11061] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 243.078001][T11090] FAULT_INJECTION: forcing a failure. [ 243.078001][T11090] name fail_futex, interval 1, probability 0, space 0, times 0 [ 243.078023][T11090] CPU: 0 UID: 0 PID: 11090 Comm: syz.0.1814 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.078038][T11090] Tainted: [L]=SOFTLOCKUP [ 243.078043][T11090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 243.078050][T11090] Call Trace: [ 243.078054][T11090] [ 243.078059][T11090] dump_stack_lvl+0x100/0x190 [ 243.078079][T11090] should_fail_ex.cold+0x5/0xa [ 243.078095][T11090] get_futex_key+0x1c9/0x13e0 [ 243.078111][T11090] ? __pfx_get_futex_key+0x10/0x10 [ 243.078127][T11090] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 243.078144][T11090] futex_wait_setup+0x91/0x540 [ 243.078165][T11090] __futex_wait+0x19f/0x360 [ 243.078184][T11090] ? __pfx___futex_wait+0x10/0x10 [ 243.078200][T11090] ? __pfx_try_to_wake_up+0x10/0x10 [ 243.078213][T11090] ? futex_hash+0x311/0x400 [ 243.078228][T11090] ? __pfx_futex_wake_mark+0x10/0x10 [ 243.078251][T11090] ? find_held_lock+0x2b/0x80 [ 243.078266][T11090] ? futex_wake+0x4ea/0x5e0 [ 243.078286][T11090] futex_wait+0xe6/0x370 [ 243.078296][T11090] ? __pfx_futex_wait+0x10/0x10 [ 243.078321][T11090] do_futex+0x265/0x440 [ 243.078337][T11090] ? __pfx_do_futex+0x10/0x10 [ 243.078352][T11090] ? __fget_files+0x21f/0x3d0 [ 243.078370][T11090] __x64_sys_futex+0x34f/0x4d0 [ 243.078386][T11090] ? __pfx___x64_sys_futex+0x10/0x10 [ 243.078407][T11090] do_syscall_64+0x123/0x790 [ 243.078427][T11090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.078438][T11090] RIP: 0033:0x7f454f19f559 [ 243.078449][T11090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.078459][T11090] RSP: 002b:00007f454d3f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 243.078471][T11090] RAX: ffffffffffffffda RBX: 00007f454f425fa8 RCX: 00007f454f19f559 [ 243.078478][T11090] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f454f425fa8 [ 243.078484][T11090] RBP: 00007f454f425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 243.078491][T11090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.078497][T11090] R13: 00007f454f426038 R14: 00007fff9b5b4800 R15: 00007fff9b5b48e8 [ 243.078512][T11090] [ 243.734044][T11104] ip_tables: iptables: counters copy to user failed while replacing table [ 243.757170][T11104] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1818'. [ 243.877906][T11109] syzkaller0: entered promiscuous mode [ 243.877917][T11109] syzkaller0: entered allmulticast mode [ 244.314914][ T5602] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 244.470254][T11149] ip_tables: iptables: counters copy to user failed while replacing table [ 244.486741][ T5602] usb 8-1: not running at top speed; connect to a high speed hub [ 244.486759][ T5602] usb 8-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 244.487495][ T5602] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.487516][ T5602] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.487536][ T5602] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.492349][ T5602] port100 8-1:1.0: NFC: Could not find bulk-in or bulk-out endpoint [ 244.564020][T11149] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1831'. [ 244.727692][T11160] syzkaller0: entered promiscuous mode [ 244.727704][T11160] syzkaller0: entered allmulticast mode [ 244.932687][ T5602] usb 8-1: USB disconnect, device number 4 [ 245.641376][T11187] ip_tables: iptables: counters copy to user failed while replacing table [ 245.649058][T11187] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1844'. [ 245.814588][T11194] syzkaller0: entered promiscuous mode [ 245.814601][T11194] syzkaller0: entered allmulticast mode [ 245.818534][T11195] syzkaller0: entered promiscuous mode [ 245.818544][T11195] syzkaller0: entered allmulticast mode [ 245.945517][T11202] overlayfs: missing 'lowerdir' [ 246.441807][ T5697] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 246.612790][ T5697] usb 7-1: not running at top speed; connect to a high speed hub [ 246.612809][ T5697] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 246.620854][ T5697] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.620877][ T5697] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.620898][ T5697] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.640550][ T5697] port100 7-1:1.0: NFC: Could not find bulk-in or bulk-out endpoint [ 246.746585][T11217] ip_tables: iptables: counters copy to user failed while replacing table [ 246.760521][T11217] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1856'. [ 247.126095][ T9] usb 7-1: USB disconnect, device number 7 [ 247.811139][T11233] syzkaller0: entered promiscuous mode [ 247.811152][T11233] syzkaller0: entered allmulticast mode [ 247.881656][T11241] overlayfs: missing 'lowerdir' [ 248.038967][T11257] ip_tables: iptables: counters copy to user failed while replacing table [ 248.041939][T11257] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1869'. [ 248.228526][T11268] syzkaller0: entered promiscuous mode [ 248.228540][T11268] syzkaller0: entered allmulticast mode [ 248.546568][ T5602] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 248.815805][ T5602] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 248.816605][ T5602] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 248.816617][ T5602] usb 7-1: config 1 has no interface number 0 [ 248.818887][ T5602] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.818901][ T5602] usb 7-1: Product: syz [ 248.818909][ T5602] usb 7-1: Manufacturer: syz [ 248.818918][ T5602] usb 7-1: SerialNumber: syz [ 248.882930][ T5602] usb 7-1: cannot find UAC_HEADER [ 248.943783][ T5602] snd-usb-audio 7-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 249.004561][ T9531] udevd[9531]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.994064][T11295] syzkaller0: entered promiscuous mode [ 249.994079][T11295] syzkaller0: entered allmulticast mode [ 250.120499][T11308] ip_tables: iptables: counters copy to user failed while replacing table [ 250.144238][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1881'. [ 250.374915][ T5602] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 250.535346][ T5602] usb 5-1: Using ep0 maxpacket: 32 [ 250.539245][ T5602] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 250.547119][ T5602] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.571016][ T5602] usb 5-1: config 0 descriptor?? [ 250.572626][ T5602] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 250.573738][ T5602] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 250.793007][ T9] usb 5-1: USB disconnect, device number 25 [ 251.462539][ T5602] usb 7-1: USB disconnect, device number 8 [ 251.489658][T11322] overlayfs: missing 'lowerdir' [ 251.712757][T11335] syzkaller0: entered promiscuous mode [ 251.712773][T11335] syzkaller0: entered allmulticast mode [ 252.355159][T11357] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 252.355173][T11357] block device autoloading is deprecated and will be removed. [ 252.389833][T11357] md: superblock version -4 not known [ 252.389842][T11357] md: couldn't set array info. -22 [ 252.576733][T11363] ip_tables: iptables: counters copy to user failed while replacing table [ 252.583402][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1898'. [ 252.886748][ T5602] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 253.052210][ T5602] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 253.065530][ T5602] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 253.065544][ T5602] usb 5-1: config 1 has no interface number 0 [ 253.087509][ T5602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.087522][ T5602] usb 5-1: Product: syz [ 253.087530][ T5602] usb 5-1: Manufacturer: syz [ 253.087539][ T5602] usb 5-1: SerialNumber: syz [ 253.120804][ T5602] usb 5-1: cannot find UAC_HEADER [ 253.161865][ T5602] snd-usb-audio 5-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 253.199123][ T9531] udevd[9531]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.533597][T11369] syzkaller0: entered promiscuous mode [ 253.533610][T11369] syzkaller0: entered allmulticast mode [ 253.657894][T11374] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 253.805912][ T1166] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 253.810944][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1906'. [ 253.985840][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 254.069247][T11392] ip_tables: iptables: counters copy to user failed while replacing table [ 254.082463][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1909'. [ 254.082474][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1909'. [ 254.147395][ T9] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 254.148138][ T9] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 254.148152][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.148163][ T9] usb 7-1: config 0 has no interface number 0 [ 254.148182][ T9] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 254.148198][ T9] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 254.148210][ T9] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.149868][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.149881][ T9] usb 7-1: Product: syz [ 254.149890][ T9] usb 7-1: Manufacturer: syz [ 254.149898][ T9] usb 7-1: SerialNumber: syz [ 254.151089][ T9] usb 7-1: config 0 descriptor?? [ 254.284169][T11394] syzkaller0: entered promiscuous mode [ 254.284199][T11394] syzkaller0: entered allmulticast mode [ 254.831393][ T9] usb 7-1: USB disconnect, device number 9 [ 255.586847][T11410] syzkaller0: entered promiscuous mode [ 255.586861][T11410] syzkaller0: entered allmulticast mode [ 255.756458][ T5602] usb 5-1: USB disconnect, device number 26 [ 255.815079][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1919'. [ 255.841313][T11425] ip_tables: iptables: counters copy to user failed while replacing table [ 255.855049][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'. [ 255.855060][T11425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1921'. [ 255.911200][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 256.033640][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1922'. [ 256.111978][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 256.112439][ T9] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 256.113306][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.113329][ T9] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.113343][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 256.114991][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.115004][ T9] usb 1-1: Product: syz [ 256.115012][ T9] usb 1-1: Manufacturer: syz [ 256.115019][ T9] usb 1-1: SerialNumber: syz [ 256.116282][ T9] usb 1-1: config 0 descriptor?? [ 256.121335][ T9] gs_usb 1-1:0.0: Required endpoints not found [ 256.563816][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.563846][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.564088][ T1308] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 256.672430][T11440] syzkaller0: entered promiscuous mode [ 256.672442][T11440] syzkaller0: entered allmulticast mode [ 256.783196][T11444] syzkaller0: entered promiscuous mode [ 256.783208][T11444] syzkaller0: entered allmulticast mode [ 257.829177][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1932'. [ 257.858646][T11459] ip_tables: iptables: counters copy to user failed while replacing table [ 257.885723][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1933'. [ 257.885734][T11459] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1933'. [ 257.978335][T11466] syzkaller0: entered promiscuous mode [ 257.978348][T11466] syzkaller0: entered allmulticast mode [ 258.078336][ T5697] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 258.078688][T11472] md: superblock version -4 not known [ 258.078808][T11472] md: couldn't set array info. -22 [ 258.217117][ T5697] usb 3-1: device descriptor read/64, error -71 [ 258.473596][ T5697] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 258.613169][ T5697] usb 3-1: device descriptor read/64, error -71 [ 258.731841][ T5697] usb usb3-port1: attempt power cycle [ 258.801149][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1940'. [ 258.878829][T11483] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 258.878854][T11483] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 258.906917][ T5602] usb 1-1: USB disconnect, device number 18 [ 258.985286][T11485] syzkaller0: entered promiscuous mode [ 258.985299][T11485] syzkaller0: entered allmulticast mode [ 259.066015][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1945'. [ 259.094647][ T5697] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 259.116150][ T5697] usb 3-1: device descriptor read/8, error -71 [ 259.120898][T11494] ip_tables: iptables: counters copy to user failed while replacing table [ 259.144484][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1946'. [ 259.234643][T11499] syzkaller0: entered promiscuous mode [ 259.234654][T11499] syzkaller0: entered allmulticast mode [ 259.371341][ T5697] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 259.393234][ T5697] usb 3-1: device descriptor read/8, error -71 [ 259.452104][T11511] overlayfs: missing 'lowerdir' [ 259.510471][ T5697] usb usb3-port1: unable to enumerate USB device [ 259.574785][T11522] syzkaller0: entered promiscuous mode [ 259.574797][T11522] syzkaller0: entered allmulticast mode [ 259.704982][T11526] ip_tables: iptables: counters copy to user failed while replacing table [ 259.793310][T11531] syzkaller0: entered promiscuous mode [ 259.793321][T11531] syzkaller0: entered allmulticast mode [ 259.866120][T11536] overlayfs: missing 'lowerdir' [ 260.025714][ T5697] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 260.087225][ T10] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 260.183579][ T5697] usb 8-1: Using ep0 maxpacket: 32 [ 260.184546][ T5697] usb 8-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 260.187350][ T5697] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.187363][ T5697] usb 8-1: Product: syz [ 260.187372][ T5697] usb 8-1: Manufacturer: syz [ 260.187387][ T5697] usb 8-1: SerialNumber: syz [ 260.188577][ T5697] usb 8-1: config 0 descriptor?? [ 260.192886][ T5697] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 260.248731][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 260.248747][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 260.249934][ T10] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 260.249954][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.255311][ T10] port100 5-1:1.0: NFC: Could not find bulk-in or bulk-out endpoint [ 260.344354][T11552] syzkaller0: entered promiscuous mode [ 260.344412][T11552] syzkaller0: entered allmulticast mode [ 260.450262][T11556] ip_tables: iptables: counters copy to user failed while replacing table [ 260.495659][T11558] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 260.542896][T11560] syzkaller0: entered promiscuous mode [ 260.542907][T11560] syzkaller0: entered allmulticast mode [ 260.618349][T11564] overlayfs: missing 'lowerdir' [ 260.697011][ T10] usb 5-1: USB disconnect, device number 27 [ 261.644821][ T5697] gspca_topro: reg_w err -110 [ 261.675417][ T5697] gspca_topro: Sensor soi763a [ 261.838986][T11580] syzkaller0: entered promiscuous mode [ 261.838999][T11580] syzkaller0: entered allmulticast mode [ 261.912590][T11586] __nla_validate_parse: 7 callbacks suppressed [ 261.912601][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1983'. [ 261.951724][T11588] ip_tables: iptables: counters copy to user failed while replacing table [ 261.953323][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1984'. [ 261.957400][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 262.007160][T11590] FAULT_INJECTION: forcing a failure. [ 262.007160][T11590] name failslab, interval 1, probability 0, space 0, times 0 [ 262.007179][T11590] CPU: 0 UID: 0 PID: 11590 Comm: syz.0.1985 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.007195][T11590] Tainted: [L]=SOFTLOCKUP [ 262.007199][T11590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 262.007206][T11590] Call Trace: [ 262.007210][T11590] [ 262.007215][T11590] dump_stack_lvl+0x100/0x190 [ 262.007235][T11590] should_fail_ex.cold+0x5/0xa [ 262.007253][T11590] should_failslab+0xc2/0x120 [ 262.007269][T11590] __kmalloc_cache_noprof+0x91/0x6d0 [ 262.007280][T11590] ? snd_seq_port_use_ptr+0x3c/0x300 [ 262.007294][T11590] ? snd_seq_port_connect+0x61/0x540 [ 262.007310][T11590] snd_seq_port_connect+0x61/0x540 [ 262.007323][T11590] ? check_subscription_permission.isra.0+0x146/0x240 [ 262.007339][T11590] snd_seq_ioctl_subscribe_port+0x219/0x490 [ 262.007355][T11590] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 262.007379][T11590] ? lock_acquire+0x1d1/0x380 [ 262.007391][T11590] ? clientptr+0x20/0x190 [ 262.007404][T11590] ? find_held_lock+0x2b/0x80 [ 262.007419][T11590] ? clientptr+0x80/0x190 [ 262.007434][T11590] call_seq_client_ctl+0xa3/0x130 [ 262.007448][T11590] snd_seq_kernel_client_ctl+0x35/0x50 [ 262.007463][T11590] snd_seq_oss_midi_open+0x465/0x680 [ 262.007482][T11590] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 262.007504][T11590] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 262.007517][T11590] snd_seq_oss_midi_open_all+0x95/0xf0 [ 262.007539][T11590] snd_seq_oss_open+0x81c/0xa10 [ 262.007556][T11590] odev_open+0x6f/0x90 [ 262.007568][T11590] ? __pfx_odev_open+0x10/0x10 [ 262.007580][T11590] soundcore_open+0x2e3/0x5a0 [ 262.007596][T11590] ? __pfx_soundcore_open+0x10/0x10 [ 262.007609][T11590] chrdev_open+0x234/0x6a0 [ 262.007624][T11590] ? __pfx_chrdev_open+0x10/0x10 [ 262.007640][T11590] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 262.007655][T11590] do_dentry_open+0x674/0x1470 [ 262.007667][T11590] ? __pfx_chrdev_open+0x10/0x10 [ 262.007684][T11590] vfs_open_consume+0xcc/0x460 [ 262.007703][T11590] path_openat+0x1547/0x23f0 [ 262.007721][T11590] ? __pfx_path_openat+0x10/0x10 [ 262.007741][T11590] do_file_open+0x20e/0x430 [ 262.007757][T11590] ? __pfx_do_file_open+0x10/0x10 [ 262.007783][T11590] ? _raw_spin_unlock+0x28/0x50 [ 262.007798][T11590] ? alloc_fd+0x471/0x7a0 [ 262.007818][T11590] do_sys_openat2+0x163/0x1d0 [ 262.007835][T11590] ? __pfx_do_sys_openat2+0x10/0x10 [ 262.007857][T11590] __x64_sys_openat+0x12d/0x210 [ 262.007874][T11590] ? __pfx___x64_sys_openat+0x10/0x10 [ 262.007897][T11590] do_syscall_64+0x123/0x790 [ 262.007916][T11590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.007927][T11590] RIP: 0033:0x7f454f19f559 [ 262.007937][T11590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.007948][T11590] RSP: 002b:00007f454d3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 262.007960][T11590] RAX: ffffffffffffffda RBX: 00007f454f425fa0 RCX: 00007f454f19f559 [ 262.007967][T11590] RDX: 0000000000080200 RSI: 00002000000060c0 RDI: ffffffffffffff9c [ 262.007974][T11590] RBP: 00007f454f236b20 R08: 0000000000000000 R09: 0000000000000000 [ 262.007981][T11590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.007987][T11590] R13: 00007f454f426038 R14: 00007f454f425fa0 R15: 00007fff9b5b48e8 [ 262.008002][T11590] [ 262.100524][ T9] usb 7-1: device descriptor read/64, error -71 [ 262.439372][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 262.474669][T11596] syzkaller0: entered promiscuous mode [ 262.474680][T11596] syzkaller0: entered allmulticast mode [ 262.572716][T11599] overlayfs: missing 'workdir' [ 262.577076][ T9] usb 7-1: device descriptor read/64, error -71 [ 262.694796][ T9] usb usb7-port1: attempt power cycle [ 262.984529][ T10] usb 8-1: USB disconnect, device number 5 [ 263.026686][ T5697] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 263.030501][T11615] syzkaller0: entered promiscuous mode [ 263.030512][T11615] syzkaller0: entered allmulticast mode [ 263.057970][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 263.080776][ T9] usb 7-1: device descriptor read/8, error -71 [ 263.179266][T11619] ip_tables: iptables: counters copy to user failed while replacing table [ 263.180640][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1995'. [ 263.204031][ T5697] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 263.220687][ T5697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.220714][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.225832][ T5697] usb 5-1: config 0 descriptor?? [ 263.346886][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 263.368857][ T9] usb 7-1: device descriptor read/8, error -71 [ 263.397265][T11625] syzkaller0: entered promiscuous mode [ 263.397277][T11625] syzkaller0: entered allmulticast mode [ 263.446217][T11611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.446439][T11611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.485713][ T9] usb usb7-port1: unable to enumerate USB device [ 263.602916][ T10] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 263.764714][ T10] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 263.765460][ T10] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 263.765473][ T10] usb 8-1: config 0 has no interface number 0 [ 263.765491][ T10] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 263.765523][ T10] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 263.765537][ T10] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 263.765552][ T10] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 263.765566][ T10] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 263.765579][ T10] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 263.765599][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.768963][ T10] usb 8-1: config 0 descriptor?? [ 263.769442][T11623] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 263.848477][ T10] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 263.976102][T11639] syzkaller0: entered promiscuous mode [ 263.976114][T11639] syzkaller0: entered allmulticast mode [ 263.997129][T11623] ldusb 8-1:0.55: Couldn't submit interrupt_in_urb -90 [ 264.010876][ T5698] usb 8-1: USB disconnect, device number 6 [ 264.028489][ T5698] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 264.073642][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 264.121452][T11643] ip_tables: iptables: counters copy to user failed while replacing table [ 264.123046][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2006'. [ 264.234284][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 264.235235][ T9] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 264.238024][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.238052][ T9] usb 3-1: Product: syz [ 264.238061][ T9] usb 3-1: Manufacturer: syz [ 264.238069][ T9] usb 3-1: SerialNumber: syz [ 264.240276][ T9] usb 3-1: config 0 descriptor?? [ 264.268924][ T9] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 264.502766][T11650] syzkaller0: entered promiscuous mode [ 264.502779][T11650] syzkaller0: entered allmulticast mode [ 264.777514][T11662] syzkaller0: entered promiscuous mode [ 264.777528][T11662] syzkaller0: entered allmulticast mode [ 265.206372][ T5698] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 265.366159][ T5698] usb 8-1: Using ep0 maxpacket: 32 [ 265.366580][ T5698] usb 8-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 265.367407][ T5698] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.371583][ T5698] usb 8-1: config 0 descriptor?? [ 265.375388][ T5698] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 265.416678][ T5698] input: xirlink-cit as /devices/platform/dummy_hcd.7/usb8/8-1/input/input21 [ 265.602244][ T5698] usb 8-1: USB disconnect, device number 7 [ 265.746090][ T9] gspca_topro: reg_r err -71 [ 265.746101][ T9] gspca_topro: Sensor soi763a [ 265.769377][ T9] usb 3-1: USB disconnect, device number 21 [ 265.925084][T11678] syzkaller0: entered promiscuous mode [ 265.925096][T11678] syzkaller0: entered allmulticast mode [ 266.008648][ T5697] usbhid 5-1:0.0: can't add hid device: -71 [ 266.008701][ T5697] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 266.014283][ T5697] usb 5-1: USB disconnect, device number 28 [ 266.371913][T11696] syzkaller0: entered promiscuous mode [ 266.371927][T11696] syzkaller0: entered allmulticast mode [ 266.523745][T11704] syzkaller0: entered promiscuous mode [ 266.523758][T11704] syzkaller0: entered allmulticast mode [ 266.766005][ T5724] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 266.927263][ T5724] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 266.928026][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.928049][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.930607][ T5724] usb 3-1: config 0 descriptor?? [ 267.150388][T11707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.163827][T11707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.583302][T11734] syzkaller0: entered promiscuous mode [ 267.583329][T11734] syzkaller0: entered allmulticast mode [ 268.572278][ T5698] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 268.572338][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 268.732216][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 268.732288][ T5698] usb 5-1: Using ep0 maxpacket: 32 [ 268.732714][ T9] usb 8-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 268.732818][ T5698] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 268.733759][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.735604][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.735617][ T5698] usb 5-1: Product: syz [ 268.735625][ T5698] usb 5-1: Manufacturer: syz [ 268.735633][ T5698] usb 5-1: SerialNumber: syz [ 268.738031][ T9] usb 8-1: config 0 descriptor?? [ 268.741414][ T5698] usb 5-1: config 0 descriptor?? [ 268.765577][ T9] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 268.800458][ T5698] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 268.836638][ T9] input: xirlink-cit as /devices/platform/dummy_hcd.7/usb8/8-1/input/input22 [ 268.848482][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 268.861530][ T5697] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 268.972343][ T9] usb 8-1: USB disconnect, device number 8 [ 268.978121][ T10] usb 7-1: device descriptor read/64, error -71 [ 269.001085][ T5697] usb 1-1: device descriptor read/64, error -71 [ 269.235173][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 269.256277][ T5697] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 269.373833][ T10] usb 7-1: device descriptor read/64, error -71 [ 269.394734][ T5697] usb 1-1: device descriptor read/64, error -71 [ 269.491499][ T10] usb usb7-port1: attempt power cycle [ 269.512483][ T5697] usb usb1-port1: attempt power cycle [ 269.721226][ T5724] usbhid 3-1:0.0: can't add hid device: -71 [ 269.721291][ T5724] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 269.749556][ T5724] usb 3-1: USB disconnect, device number 22 [ 269.800874][ T9] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 269.854705][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 269.875649][ T5697] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 269.877363][ T10] usb 7-1: device descriptor read/8, error -71 [ 269.903097][ T5697] usb 1-1: device descriptor read/8, error -71 [ 269.962197][ T9] usb 8-1: not running at top speed; connect to a high speed hub [ 269.962227][ T9] usb 8-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 269.963080][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 269.963099][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.969491][ T9] port100 8-1:1.0: NFC: Could not get supported command types [ 270.142833][ T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 270.162158][ T5697] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 270.172737][ T10] usb 7-1: device descriptor read/8, error -71 [ 270.181288][ T5697] usb 1-1: device descriptor read/8, error -71 [ 270.282701][ T10] usb usb7-port1: unable to enumerate USB device [ 270.298874][ T5697] usb usb1-port1: unable to enumerate USB device [ 270.333078][ T5698] gspca_topro: reg_r err -71 [ 270.333088][ T5698] gspca_topro: Sensor soi763a [ 270.349876][ T5698] usb 5-1: USB disconnect, device number 29 [ 270.406430][ T5697] usb 8-1: USB disconnect, device number 9 [ 270.694899][ T30] audit: type=1400 audit(1792660647.967:632): avc: denied { write } for pid=11749 comm="syz.2.2048" name="rpc" dev="proc" ino=4026533604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 270.725911][T11750] FAULT_INJECTION: forcing a failure. [ 270.725911][T11750] name failslab, interval 1, probability 0, space 0, times 0 [ 270.725932][T11750] CPU: 0 UID: 0 PID: 11750 Comm: syz.2.2048 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.725949][T11750] Tainted: [L]=SOFTLOCKUP [ 270.725953][T11750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 270.725961][T11750] Call Trace: [ 270.725965][T11750] [ 270.725970][T11750] dump_stack_lvl+0x100/0x190 [ 270.725992][T11750] should_fail_ex.cold+0x5/0xa [ 270.726008][T11750] should_failslab+0xc2/0x120 [ 270.726025][T11750] __kmalloc_cache_noprof+0x91/0x6d0 [ 270.726037][T11750] ? rpc_new_client+0x190/0x1300 [ 270.726056][T11750] rpc_new_client+0x190/0x1300 [ 270.726074][T11750] rpc_create_xprt+0xd9/0x440 [ 270.726091][T11750] rpc_create+0x46e/0x7f0 [ 270.726107][T11750] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 270.726125][T11750] ? __pfx_rpc_create+0x10/0x10 [ 270.726158][T11750] ? rcu_is_watching+0x13/0xc0 [ 270.726173][T11750] ? trace_contention_end+0x126/0x160 [ 270.726187][T11750] ? __mutex_lock+0x267/0x1c10 [ 270.726199][T11750] gssp_rpc_create+0xe1/0x180 [ 270.726211][T11750] ? __pfx_gssp_rpc_create+0x10/0x10 [ 270.726230][T11750] ? net_generic+0xea/0x2a0 [ 270.726253][T11750] set_gssp_clnt+0xc3/0x1b0 [ 270.726265][T11750] ? __pfx_set_gssp_clnt+0x10/0x10 [ 270.726283][T11750] write_gssp+0x1f7/0x380 [ 270.726301][T11750] ? __pfx_write_gssp+0x10/0x10 [ 270.726322][T11750] ? lock_acquire+0x1d1/0x380 [ 270.726334][T11750] ? ksys_write+0x12a/0x250 [ 270.726350][T11750] ? __pfx_write_gssp+0x10/0x10 [ 270.726368][T11750] proc_reg_write+0x240/0x330 [ 270.726382][T11750] vfs_write+0x2aa/0x1050 [ 270.726396][T11750] ? __pfx_proc_reg_write+0x10/0x10 [ 270.726410][T11750] ? lock_acquire+0x1d1/0x380 [ 270.726421][T11750] ? __fget_files+0x34/0x3d0 [ 270.726437][T11750] ? __pfx_vfs_write+0x10/0x10 [ 270.726448][T11750] ? find_held_lock+0x2b/0x80 [ 270.726464][T11750] ? __fget_files+0x215/0x3d0 [ 270.726482][T11750] ? __fget_files+0x21f/0x3d0 [ 270.726502][T11750] ksys_write+0x12a/0x250 [ 270.726515][T11750] ? __pfx_ksys_write+0x10/0x10 [ 270.726532][T11750] do_syscall_64+0x123/0x790 [ 270.726551][T11750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.726563][T11750] RIP: 0033:0x7fedea99f559 [ 270.726574][T11750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.726585][T11750] RSP: 002b:00007fedeb87b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 270.726596][T11750] RAX: ffffffffffffffda RBX: 00007fedeac25fa0 RCX: 00007fedea99f559 [ 270.726604][T11750] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005 [ 270.726610][T11750] RBP: 00007fedeaa36b20 R08: 0000000000000000 R09: 0000000000000000 [ 270.726617][T11750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.726624][T11750] R13: 00007fedeac26038 R14: 00007fedeac25fa0 R15: 00007ffe05ead428 [ 270.726640][T11750] [ 271.219734][ T30] audit: type=1400 audit(1792660648.454:633): avc: denied { create } for pid=11755 comm="syz.4.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 271.304695][T11767] syzkaller0: entered promiscuous mode [ 271.304707][T11767] syzkaller0: entered allmulticast mode [ 272.369597][T11783] 0x000000000000-0x000000010000 : "" [ 272.375608][T11783] ftl_cs: FTL header not found. [ 272.398440][ T5697] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 272.560657][ T5697] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 272.562162][ T5697] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.562186][ T5697] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.563309][ T5697] usb 8-1: config 0 descriptor?? [ 272.577878][ T5698] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 272.707836][ T5698] usb 5-1: device descriptor read/64, error -71 [ 272.753973][ T30] audit: type=1400 audit(1792660649.895:634): avc: denied { ioctl } for pid=11796 comm="syz.2.2066" path="socket:[33463]" dev="sockfs" ino=33463 ioctlcmd=0x4048587b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 272.795113][T11772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.795331][T11772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.814706][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 272.966078][ T5698] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 272.985291][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 272.985741][ T10] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 272.988264][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.988277][ T10] usb 7-1: Product: syz [ 272.988285][ T10] usb 7-1: Manufacturer: syz [ 272.988294][ T10] usb 7-1: SerialNumber: syz [ 272.989634][ T10] usb 7-1: config 0 descriptor?? [ 272.994593][ T10] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 273.113491][ T5698] usb 5-1: device descriptor read/64, error -71 [ 273.145559][ T5724] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 273.232674][ T5698] usb usb5-port1: attempt power cycle [ 273.308238][ T5724] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 273.308987][ T5724] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 273.309000][ T5724] usb 3-1: config 0 has no interface number 0 [ 273.309017][ T5724] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 273.309029][ T5724] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 273.309055][ T5724] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 273.309069][ T5724] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 273.309083][ T5724] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 273.309097][ T5724] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 273.309117][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.310943][ T5724] usb 3-1: config 0 descriptor?? [ 273.312009][T11805] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 273.312085][T11805] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 273.449897][ T5724] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 273.536411][ T5726] usb 3-1: USB disconnect, device number 23 [ 273.549350][ T5726] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 273.594371][ T5698] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 273.616145][ T5698] usb 5-1: device descriptor read/8, error -71 [ 273.872181][ T5698] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 273.893978][ T5698] usb 5-1: device descriptor read/8, error -71 [ 274.011402][ T5698] usb usb5-port1: unable to enumerate USB device [ 274.438572][ T5698] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 274.538149][ T10] gspca_topro: reg_r err -71 [ 274.538159][ T10] gspca_topro: Sensor soi763a [ 274.897195][ T10] usb 7-1: USB disconnect, device number 18 [ 274.910617][ T5698] usb 3-1: Using ep0 maxpacket: 32 [ 274.911165][ T5698] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 274.916102][ T5698] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 274.916118][ T5698] usb 3-1: config 0 interface 0 has no altsetting 0 [ 274.962623][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.962647][ T5698] usb 3-1: Product: syz [ 274.962684][ T5698] usb 3-1: Manufacturer: syz [ 274.962692][ T5698] usb 3-1: SerialNumber: syz [ 274.971073][ T5698] usb 3-1: config 0 descriptor?? [ 275.007900][ T5698] gs_usb 3-1:0.0: Required endpoints not found [ 275.059354][ T5697] usbhid 8-1:0.0: can't add hid device: -71 [ 275.059401][ T5697] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 275.066442][ T5697] usb 8-1: USB disconnect, device number 10 [ 275.688824][ T5697] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 275.849804][ T5697] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 275.850659][ T5697] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 275.850675][ T5697] usb 7-1: config 0 has no interface number 0 [ 275.850693][ T5697] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 275.850706][ T5697] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 275.850720][ T5697] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 275.850733][ T5697] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 275.850747][ T5697] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 275.850761][ T5697] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 275.850782][ T5697] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.853235][ T5697] usb 7-1: config 0 descriptor?? [ 275.853867][T11837] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 275.854963][T11837] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 275.869056][ T5697] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 276.090377][ T10] usb 7-1: USB disconnect, device number 19 [ 276.104700][ T10] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 276.781230][ T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 276.940986][ T10] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 276.941010][ T10] usb 8-1: no configurations [ 276.941017][ T10] usb 8-1: can't read configurations, error -22 [ 276.981324][T11867] netlink: 'syz.0.2094': attribute type 2 has an invalid length. [ 277.078131][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 277.139397][T11871] ip_tables: iptables: counters copy to user failed while replacing table [ 277.238799][ T10] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 277.238822][ T10] usb 8-1: no configurations [ 277.238829][ T10] usb 8-1: can't read configurations, error -22 [ 277.239000][ T10] usb usb8-port1: attempt power cycle [ 277.405623][ T5697] usb 3-1: USB disconnect, device number 24 [ 277.601694][ T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 277.624155][ T10] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 277.624177][ T10] usb 8-1: no configurations [ 277.624185][ T10] usb 8-1: can't read configurations, error -22 [ 277.740795][T11880] md: superblock version -4 not known [ 277.740804][T11880] md: couldn't set array info. -22 [ 277.764462][ T10] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 277.783427][ T5697] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 277.785434][ T10] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 277.785456][ T10] usb 8-1: no configurations [ 277.785463][ T10] usb 8-1: can't read configurations, error -22 [ 277.785657][ T10] usb usb8-port1: unable to enumerate USB device [ 277.944603][ T5697] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 277.945349][ T5697] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 277.945363][ T5697] usb 3-1: config 0 has no interface number 0 [ 277.945381][ T5697] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 277.945393][ T5697] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 277.945408][ T5697] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 277.945421][ T5697] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 277.945435][ T5697] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 277.945449][ T5697] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 277.945470][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.948338][ T5697] usb 3-1: config 0 descriptor?? [ 277.948923][T11878] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 277.948971][T11878] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 278.090940][ T5697] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 278.146362][T11895] ip_tables: iptables: counters copy to user failed while replacing table [ 278.172122][ T5697] usb 3-1: USB disconnect, device number 25 [ 278.178521][ T5697] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 278.221771][ T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 278.381701][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 278.382133][ T10] usb 7-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 278.382950][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.384136][ T10] usb 7-1: config 0 descriptor?? [ 278.388691][ T10] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 278.390342][ T10] input: xirlink-cit as /devices/platform/dummy_hcd.6/usb7/7-1/input/input23 [ 278.499403][ T5726] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 278.602297][ T10] usb 7-1: USB disconnect, device number 20 [ 278.660526][ T5726] usb 5-1: Using ep0 maxpacket: 32 [ 278.660974][ T5726] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 278.661807][ T5726] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 278.661822][ T5726] usb 5-1: config 0 interface 0 has no altsetting 0 [ 278.663419][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.663431][ T5726] usb 5-1: Product: syz [ 278.663439][ T5726] usb 5-1: Manufacturer: syz [ 278.663448][ T5726] usb 5-1: SerialNumber: syz [ 278.664590][ T5726] usb 5-1: config 0 descriptor?? [ 278.668035][ T5726] gs_usb 5-1:0.0: Required endpoints not found [ 279.040150][T11905] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 279.040164][T11905] block device autoloading is deprecated and will be removed. [ 279.062706][T11905] md: superblock version -4 not known [ 279.062714][T11905] md: couldn't set array info. -22 [ 279.177548][T11913] netlink: 'syz.0.2114': attribute type 2 has an invalid length. [ 279.638123][T11921] ip_tables: iptables: counters copy to user failed while replacing table [ 281.055271][T11941] md: superblock version -4 not known [ 281.055282][T11941] md: couldn't set array info. -22 [ 281.171501][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 281.309844][ T10] usb 3-1: device descriptor read/64, error -71 [ 281.466883][ T5697] usb 5-1: USB disconnect, device number 34 [ 281.567710][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 281.586356][ T30] audit: type=1400 audit(1792660658.149:635): avc: denied { write } for pid=11949 comm="syz.4.2127" name="rpc" dev="proc" ino=4026532875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 281.625910][T11952] ip_tables: iptables: counters copy to user failed while replacing table [ 281.640330][T11950] FAULT_INJECTION: forcing a failure. [ 281.640330][T11950] name failslab, interval 1, probability 0, space 0, times 0 [ 281.640349][T11950] CPU: 0 UID: 0 PID: 11950 Comm: syz.4.2127 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.640366][T11950] Tainted: [L]=SOFTLOCKUP [ 281.640371][T11950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 281.640378][T11950] Call Trace: [ 281.640382][T11950] [ 281.640387][T11950] dump_stack_lvl+0x100/0x190 [ 281.640408][T11950] should_fail_ex.cold+0x5/0xa [ 281.640425][T11950] should_failslab+0xc2/0x120 [ 281.640442][T11950] __kmalloc_cache_noprof+0x91/0x6d0 [ 281.640455][T11950] ? rpc_new_client+0x190/0x1300 [ 281.640476][T11950] rpc_new_client+0x190/0x1300 [ 281.640494][T11950] rpc_create_xprt+0xd9/0x440 [ 281.640511][T11950] rpc_create+0x46e/0x7f0 [ 281.640527][T11950] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 281.640545][T11950] ? __pfx_rpc_create+0x10/0x10 [ 281.640579][T11950] ? rcu_is_watching+0x13/0xc0 [ 281.640594][T11950] ? trace_contention_end+0x126/0x160 [ 281.640608][T11950] ? __mutex_lock+0x267/0x1c10 [ 281.640621][T11950] gssp_rpc_create+0xe1/0x180 [ 281.640633][T11950] ? __pfx_gssp_rpc_create+0x10/0x10 [ 281.640651][T11950] ? net_generic+0xea/0x2a0 [ 281.640667][T11950] set_gssp_clnt+0xc3/0x1b0 [ 281.640678][T11950] ? __pfx_set_gssp_clnt+0x10/0x10 [ 281.640694][T11950] write_gssp+0x1f7/0x380 [ 281.640711][T11950] ? __pfx_write_gssp+0x10/0x10 [ 281.640731][T11950] ? lock_acquire+0x1d1/0x380 [ 281.640742][T11950] ? ksys_write+0x12a/0x250 [ 281.640756][T11950] ? __pfx_write_gssp+0x10/0x10 [ 281.640774][T11950] proc_reg_write+0x240/0x330 [ 281.640788][T11950] vfs_write+0x2aa/0x1050 [ 281.640800][T11950] ? __pfx_proc_reg_write+0x10/0x10 [ 281.640812][T11950] ? lock_acquire+0x1d1/0x380 [ 281.640822][T11950] ? __fget_files+0x34/0x3d0 [ 281.640838][T11950] ? __pfx_vfs_write+0x10/0x10 [ 281.640849][T11950] ? find_held_lock+0x2b/0x80 [ 281.640864][T11950] ? __fget_files+0x215/0x3d0 [ 281.640882][T11950] ? __fget_files+0x21f/0x3d0 [ 281.640902][T11950] ksys_write+0x12a/0x250 [ 281.640914][T11950] ? __pfx_ksys_write+0x10/0x10 [ 281.640931][T11950] do_syscall_64+0x123/0x790 [ 281.640950][T11950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.640962][T11950] RIP: 0033:0x7fafbc59f559 [ 281.640973][T11950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.640983][T11950] RSP: 002b:00007fafbd4f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 281.640995][T11950] RAX: ffffffffffffffda RBX: 00007fafbc825fa0 RCX: 00007fafbc59f559 [ 281.641002][T11950] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005 [ 281.641009][T11950] RBP: 00007fafbc636b20 R08: 0000000000000000 R09: 0000000000000000 [ 281.641015][T11950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.641022][T11950] R13: 00007fafbc826038 R14: 00007fafbc825fa0 R15: 00007ffd9e2cfc98 [ 281.641037][T11950] [ 281.719956][ T10] usb 3-1: device descriptor read/64, error -71 [ 281.837640][ T10] usb usb3-port1: attempt power cycle [ 281.873611][T11952] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2128'. [ 282.198934][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 282.220154][ T10] usb 3-1: device descriptor read/8, error -71 [ 282.323655][T11959] netlink: 'syz.0.2131': attribute type 2 has an invalid length. [ 282.475301][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 282.497778][ T10] usb 3-1: device descriptor read/8, error -71 [ 282.615696][ T10] usb usb3-port1: unable to enumerate USB device [ 283.361620][ T5726] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 283.380892][ T10] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 283.533284][ T5726] usb 3-1: Using ep0 maxpacket: 8 [ 283.534541][ T5726] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 283.535297][ T5726] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 283.535321][ T5726] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.535341][ T5726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.541163][ T5726] usbtmc 3-1:16.0: bulk endpoints not found [ 284.490880][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 284.490899][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 284.518187][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.746230][ C0] port100 5-1:1.0: NFC: Received an invalid ack [ 284.748278][ T10] port100 5-1:1.0: NFC: Could not get supported command types [ 284.794015][ T5698] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 284.828438][T12017] netlink: 'syz.0.2153': attribute type 2 has an invalid length. [ 284.932280][ T5698] usb 7-1: device descriptor read/64, error -71 [ 284.961831][ T10] usb 5-1: USB disconnect, device number 35 [ 285.189617][ T5698] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 285.327647][ T5698] usb 7-1: device descriptor read/64, error -71 [ 285.445779][ T5698] usb usb7-port1: attempt power cycle [ 285.922050][ T5698] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 285.947837][ T5698] usb 7-1: device descriptor read/8, error -71 [ 286.199917][ T5602] usb 3-1: USB disconnect, device number 30 [ 286.209898][ T5698] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 286.237142][ T5698] usb 7-1: device descriptor read/8, error -71 [ 286.353911][ T5698] usb usb7-port1: unable to enumerate USB device [ 286.797085][ T30] audit: type=1400 audit(1792660663.024:636): avc: denied { write } for pid=12051 comm="syz.2.2165" name="rpc" dev="proc" ino=4026533604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 286.799369][T12052] FAULT_INJECTION: forcing a failure. [ 286.799369][T12052] name failslab, interval 1, probability 0, space 0, times 0 [ 286.799388][T12052] CPU: 0 UID: 0 PID: 12052 Comm: syz.2.2165 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.799403][T12052] Tainted: [L]=SOFTLOCKUP [ 286.799408][T12052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 286.799415][T12052] Call Trace: [ 286.799420][T12052] [ 286.799424][T12052] dump_stack_lvl+0x100/0x190 [ 286.799446][T12052] should_fail_ex.cold+0x5/0xa [ 286.799463][T12052] should_failslab+0xc2/0x120 [ 286.799480][T12052] kmem_cache_alloc_noprof+0x92/0x6a0 [ 286.799495][T12052] ? skb_clone+0x190/0x400 [ 286.799512][T12052] skb_clone+0x190/0x400 [ 286.799526][T12052] netlink_broadcast_filtered+0xbaa/0xfd0 [ 286.799541][T12052] ? netlink_has_listeners+0x21b/0x430 [ 286.799554][T12052] netlink_broadcast+0x39/0x50 [ 286.799568][T12052] kobject_uevent_env+0xcdd/0x18b0 [ 286.799587][T12052] ? rpc_sysfs_xprt_setup+0xe1/0x300 [ 286.799604][T12052] rpc_sysfs_xprt_setup+0x21a/0x300 [ 286.799618][T12052] xprt_switch_alloc+0x2ce/0x3c0 [ 286.799635][T12052] rpc_create_xprt+0x2dc/0x440 [ 286.799653][T12052] rpc_create+0x46e/0x7f0 [ 286.799668][T12052] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 286.799685][T12052] ? __pfx_rpc_create+0x10/0x10 [ 286.799721][T12052] ? rcu_is_watching+0x13/0xc0 [ 286.799735][T12052] ? trace_contention_end+0x126/0x160 [ 286.799749][T12052] ? __mutex_lock+0x267/0x1c10 [ 286.799761][T12052] gssp_rpc_create+0xe1/0x180 [ 286.799773][T12052] ? __pfx_gssp_rpc_create+0x10/0x10 [ 286.799796][T12052] ? net_generic+0xea/0x2a0 [ 286.799811][T12052] set_gssp_clnt+0xc3/0x1b0 [ 286.799823][T12052] ? __pfx_set_gssp_clnt+0x10/0x10 [ 286.799839][T12052] write_gssp+0x1f7/0x380 [ 286.799856][T12052] ? __pfx_write_gssp+0x10/0x10 [ 286.799876][T12052] ? lock_acquire+0x1d1/0x380 [ 286.799887][T12052] ? ksys_write+0x12a/0x250 [ 286.799903][T12052] ? __pfx_write_gssp+0x10/0x10 [ 286.799922][T12052] proc_reg_write+0x240/0x330 [ 286.799936][T12052] vfs_write+0x2aa/0x1050 [ 286.799949][T12052] ? __pfx_proc_reg_write+0x10/0x10 [ 286.799961][T12052] ? lock_acquire+0x1d1/0x380 [ 286.799971][T12052] ? __fget_files+0x34/0x3d0 [ 286.799987][T12052] ? __pfx_vfs_write+0x10/0x10 [ 286.799999][T12052] ? find_held_lock+0x2b/0x80 [ 286.800014][T12052] ? __fget_files+0x215/0x3d0 [ 286.800036][T12052] ? __fget_files+0x21f/0x3d0 [ 286.800056][T12052] ksys_write+0x12a/0x250 [ 286.800069][T12052] ? __pfx_ksys_write+0x10/0x10 [ 286.800086][T12052] do_syscall_64+0x123/0x790 [ 286.800105][T12052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.800118][T12052] RIP: 0033:0x7fedea99f559 [ 286.800128][T12052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.800139][T12052] RSP: 002b:00007fedeb87b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 286.800151][T12052] RAX: ffffffffffffffda RBX: 00007fedeac25fa0 RCX: 00007fedea99f559 [ 286.800159][T12052] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005 [ 286.800165][T12052] RBP: 00007fedeaa36b20 R08: 0000000000000000 R09: 0000000000000000 [ 286.800172][T12052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.800178][T12052] R13: 00007fedeac26038 R14: 00007fedeac25fa0 R15: 00007ffe05ead428 [ 286.800193][T12052] [ 286.860222][ T261] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 287.344703][T12059] netlink: 'syz.7.2169': attribute type 2 has an invalid length. [ 289.623614][ T5726] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 289.648802][T12109] netlink: 'syz.2.2186': attribute type 2 has an invalid length. [ 289.852482][ T5726] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 289.854632][ T5726] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.854645][ T5726] usb 8-1: config 0 has no interfaces? [ 289.854659][ T5726] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.855861][ T5726] usb 8-1: config 0 descriptor?? [ 290.096451][ T5726] usb 8-1: USB disconnect, device number 15 [ 292.170111][T12164] netlink: 'syz.2.2205': attribute type 2 has an invalid length. [ 293.931603][ T5698] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 294.091523][ T5698] usb 1-1: Using ep0 maxpacket: 16 [ 294.093252][ T5698] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 294.098730][ T5698] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.098752][ T5698] usb 1-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.098767][ T5698] usb 1-1: config 0 interface 0 has no altsetting 0 [ 294.098783][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.101219][ T5698] usb 1-1: config 0 descriptor?? [ 294.176330][ T5698] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 294.603180][ T5698] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 294.742869][ T5698] usb 3-1: device descriptor read/64, error -71 [ 294.962374][T12212] netlink: 'syz.4.2222': attribute type 2 has an invalid length. [ 294.998674][ T5698] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 295.185086][ T5698] usb 3-1: device descriptor read/64, error -71 [ 295.301966][ T5698] usb usb3-port1: attempt power cycle [ 295.662063][ T5698] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 295.683278][ T5698] usb 3-1: device descriptor read/8, error -71 [ 295.939682][ T5698] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 295.963731][ T5698] usb 3-1: device descriptor read/8, error -71 [ 296.078389][ T5698] usb usb3-port1: unable to enumerate USB device [ 296.413693][ T5698] usb 1-1: USB disconnect, device number 23 [ 296.813878][T12266] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 297.393590][ T30] audit: type=1400 audit(1792660672.962:637): avc: denied { unlink } for pid=12283 comm="syz.7.2252" name="#1" dev="tmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 301.367487][ T5698] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 301.410156][ T5602] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 301.506674][ T5698] usb 5-1: device descriptor read/64, error -71 [ 301.570511][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 301.574691][ T5602] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 301.575486][ T5602] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 301.575500][ T5602] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.575511][ T5602] usb 8-1: config 0 has no interface number 0 [ 301.575529][ T5602] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 301.575541][ T5602] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 301.575562][ T5602] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.576751][ T5602] usb 8-1: config 0 descriptor?? [ 301.577204][T12347] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 301.578156][ T5602] ldusb 8-1:0.55: Interrupt in endpoint not found [ 301.598052][ T5726] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 301.731310][ T10] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 301.732077][ T10] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 301.732090][ T10] usb 3-1: config 1 has no interface number 0 [ 301.740259][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.740273][ T10] usb 3-1: Product: syz [ 301.740281][ T10] usb 3-1: Manufacturer: syz [ 301.740289][ T10] usb 3-1: SerialNumber: syz [ 301.793800][ T5726] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 301.793820][ T5726] usb 1-1: no configurations [ 301.793828][ T5726] usb 1-1: can't read configurations, error -22 [ 301.820300][ T10] usb 3-1: cannot find UAC_HEADER [ 301.833619][ T5602] usb 8-1: USB disconnect, device number 16 [ 301.839774][ T5698] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 301.888009][ T10] snd-usb-audio 3-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 301.934205][ T5726] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 301.987383][ T5698] usb 5-1: device descriptor read/64, error -71 [ 302.013660][ T10] usb 3-1: USB disconnect, device number 35 [ 302.096658][ T5726] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 302.096691][ T5726] usb 1-1: no configurations [ 302.096699][ T5726] usb 1-1: can't read configurations, error -22 [ 302.096864][ T5726] usb usb1-port1: attempt power cycle [ 302.114017][ T5698] usb usb5-port1: attempt power cycle [ 302.457419][ T5726] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 302.459613][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2273'. [ 302.487753][ T5698] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 302.489188][ T5726] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 302.489211][ T5726] usb 1-1: no configurations [ 302.489217][ T5726] usb 1-1: can't read configurations, error -22 [ 302.525552][ T5698] usb 5-1: device descriptor read/8, error -71 [ 302.660868][ T5726] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 302.683333][ T5726] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 302.683355][ T5726] usb 1-1: no configurations [ 302.683362][ T5726] usb 1-1: can't read configurations, error -22 [ 302.685049][ T5726] usb usb1-port1: unable to enumerate USB device [ 302.779411][ T5698] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 302.803672][ T5698] usb 5-1: device descriptor read/8, error -71 [ 302.918421][ T5698] usb usb5-port1: unable to enumerate USB device [ 303.229139][ T5698] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 303.326078][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2285'. [ 303.390057][ T5698] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 303.391894][ T5698] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 303.391908][ T5698] usb 3-1: config 0 has no interface number 0 [ 303.391925][ T5698] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 303.391937][ T5698] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 303.391951][ T5698] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 303.391965][ T5698] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 303.391979][ T5698] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 303.391993][ T5698] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 303.392013][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.395695][ T5698] usb 3-1: config 0 descriptor?? [ 303.396152][T12380] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 303.396219][T12380] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 303.528124][ T5698] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 303.618842][ T5698] usb 3-1: USB disconnect, device number 36 [ 303.622068][ T5698] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 303.889449][ T5602] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 304.054239][ T5602] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 304.056687][ T5602] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 304.056702][ T5602] usb 8-1: config 1 has no interface number 0 [ 304.060013][ T5602] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.060027][ T5602] usb 8-1: Product: syz [ 304.060035][ T5602] usb 8-1: Manufacturer: syz [ 304.060043][ T5602] usb 8-1: SerialNumber: syz [ 304.117355][ T5602] usb 8-1: cannot find UAC_HEADER [ 304.178745][ T5602] snd-usb-audio 8-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 304.689812][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2296'. [ 305.082712][T12431] FAULT_INJECTION: forcing a failure. [ 305.082712][T12431] name fail_futex, interval 1, probability 0, space 0, times 0 [ 305.082736][T12431] CPU: 0 UID: 0 PID: 12431 Comm: syz.0.2303 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.082751][T12431] Tainted: [L]=SOFTLOCKUP [ 305.082755][T12431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 305.082761][T12431] Call Trace: [ 305.082766][T12431] [ 305.082770][T12431] dump_stack_lvl+0x100/0x190 [ 305.082792][T12431] should_fail_ex.cold+0x5/0xa [ 305.082815][T12431] get_futex_key+0x1c9/0x13e0 [ 305.082831][T12431] ? __pfx_get_futex_key+0x10/0x10 [ 305.082844][T12431] ? find_held_lock+0x2b/0x80 [ 305.082859][T12431] ? get_pid_task+0xfc/0x250 [ 305.082873][T12431] ? get_pid_task+0xfc/0x250 [ 305.082888][T12431] futex_wake+0xf4/0x5e0 [ 305.082906][T12431] ? find_held_lock+0x2b/0x80 [ 305.082921][T12431] ? __pfx_futex_wake+0x10/0x10 [ 305.082939][T12431] ? rcu_read_lock_any_held+0x6a/0x90 [ 305.082955][T12431] ? find_held_lock+0x2b/0x80 [ 305.082969][T12431] ? ksys_write+0x190/0x250 [ 305.082982][T12431] ? ksys_write+0x190/0x250 [ 305.082995][T12431] do_futex+0x2b2/0x440 [ 305.083010][T12431] ? __pfx_do_futex+0x10/0x10 [ 305.083026][T12431] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 305.083048][T12431] __x64_sys_futex+0x34f/0x4d0 [ 305.083064][T12431] ? fput+0x7c/0x100 [ 305.083078][T12431] ? __pfx___x64_sys_futex+0x10/0x10 [ 305.083092][T12431] ? ksys_write+0x1ac/0x250 [ 305.083104][T12431] ? __pfx_ksys_write+0x10/0x10 [ 305.083121][T12431] do_syscall_64+0x123/0x790 [ 305.083139][T12431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.083152][T12431] RIP: 0033:0x7f454f19f559 [ 305.083162][T12431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.083174][T12431] RSP: 002b:00007f454d3f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 305.083186][T12431] RAX: ffffffffffffffda RBX: 00007f454f425fa8 RCX: 00007f454f19f559 [ 305.083195][T12431] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f454f425fac [ 305.083202][T12431] RBP: 00007f454f425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 305.083209][T12431] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 305.083216][T12431] R13: 00007f454f426038 R14: 00007fff9b5b4800 R15: 00007fff9b5b48e8 [ 305.083230][T12431] [ 305.242442][ T5726] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 305.398025][ T5726] usb 7-1: device descriptor read/64, error -71 [ 305.572943][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2307'. [ 305.653360][ T5726] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 305.791778][ T5726] usb 7-1: device descriptor read/64, error -71 [ 305.910143][ T5726] usb usb7-port1: attempt power cycle [ 306.023597][T12461] FAULT_INJECTION: forcing a failure. [ 306.023597][T12461] name fail_futex, interval 1, probability 0, space 0, times 0 [ 306.023618][T12461] CPU: 0 UID: 0 PID: 12461 Comm: syz.0.2315 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.023634][T12461] Tainted: [L]=SOFTLOCKUP [ 306.023638][T12461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 306.023645][T12461] Call Trace: [ 306.023649][T12461] [ 306.023653][T12461] dump_stack_lvl+0x100/0x190 [ 306.023674][T12461] should_fail_ex.cold+0x5/0xa [ 306.023691][T12461] get_futex_key+0x1c9/0x13e0 [ 306.023707][T12461] ? __pfx_get_futex_key+0x10/0x10 [ 306.023720][T12461] ? find_held_lock+0x2b/0x80 [ 306.023735][T12461] ? get_pid_task+0xfc/0x250 [ 306.023748][T12461] ? get_pid_task+0xfc/0x250 [ 306.023764][T12461] futex_wake+0xf4/0x5e0 [ 306.023791][T12461] ? find_held_lock+0x2b/0x80 [ 306.023806][T12461] ? __pfx_futex_wake+0x10/0x10 [ 306.023824][T12461] ? rcu_read_lock_any_held+0x6a/0x90 [ 306.023840][T12461] ? find_held_lock+0x2b/0x80 [ 306.023855][T12461] ? ksys_write+0x190/0x250 [ 306.023869][T12461] ? ksys_write+0x190/0x250 [ 306.023882][T12461] do_futex+0x2b2/0x440 [ 306.023899][T12461] ? __pfx_do_futex+0x10/0x10 [ 306.023914][T12461] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 306.023936][T12461] __x64_sys_futex+0x34f/0x4d0 [ 306.023951][T12461] ? fput+0x7c/0x100 [ 306.023966][T12461] ? __pfx___x64_sys_futex+0x10/0x10 [ 306.023981][T12461] ? ksys_write+0x1ac/0x250 [ 306.023993][T12461] ? __pfx_ksys_write+0x10/0x10 [ 306.024009][T12461] do_syscall_64+0x123/0x790 [ 306.024028][T12461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.024040][T12461] RIP: 0033:0x7f454f19f559 [ 306.024050][T12461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.024062][T12461] RSP: 002b:00007f454d3f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 306.024073][T12461] RAX: ffffffffffffffda RBX: 00007f454f425fa8 RCX: 00007f454f19f559 [ 306.024080][T12461] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f454f425fac [ 306.024087][T12461] RBP: 00007f454f425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 306.024094][T12461] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 306.024100][T12461] R13: 00007f454f426038 R14: 00007fff9b5b4800 R15: 00007fff9b5b48e8 [ 306.024115][T12461] [ 306.052403][ T5698] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 306.231287][ T5698] usb 3-1: Using ep0 maxpacket: 32 [ 306.231692][ T5698] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 306.298554][ T5726] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 306.324367][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.324381][ T5698] usb 3-1: Product: syz [ 306.324389][ T5698] usb 3-1: Manufacturer: syz [ 306.324397][ T5698] usb 3-1: SerialNumber: syz [ 306.345653][ T5698] usb 3-1: config 0 descriptor?? [ 306.357978][ T5726] usb 7-1: device descriptor read/8, error -71 [ 306.370987][ T5698] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 306.493550][T12468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2318'. [ 306.615056][ T5726] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 306.636577][ T5726] usb 7-1: device descriptor read/8, error -71 [ 306.762093][ T5726] usb usb7-port1: unable to enumerate USB device [ 306.810092][ T5726] usb 8-1: USB disconnect, device number 17 [ 307.076229][T12490] FAULT_INJECTION: forcing a failure. [ 307.076229][T12490] name fail_futex, interval 1, probability 0, space 0, times 0 [ 307.076251][T12490] CPU: 0 UID: 0 PID: 12490 Comm: syz.7.2327 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.076266][T12490] Tainted: [L]=SOFTLOCKUP [ 307.076270][T12490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 307.076277][T12490] Call Trace: [ 307.076282][T12490] [ 307.076286][T12490] dump_stack_lvl+0x100/0x190 [ 307.076307][T12490] should_fail_ex.cold+0x5/0xa [ 307.076326][T12490] get_futex_key+0x1c9/0x13e0 [ 307.076343][T12490] ? __pfx_get_futex_key+0x10/0x10 [ 307.076356][T12490] ? find_held_lock+0x2b/0x80 [ 307.076372][T12490] ? get_pid_task+0xfc/0x250 [ 307.076385][T12490] ? get_pid_task+0xfc/0x250 [ 307.076401][T12490] futex_wake+0xf4/0x5e0 [ 307.076419][T12490] ? find_held_lock+0x2b/0x80 [ 307.076434][T12490] ? __pfx_futex_wake+0x10/0x10 [ 307.076452][T12490] ? rcu_read_lock_any_held+0x6a/0x90 [ 307.076470][T12490] ? find_held_lock+0x2b/0x80 [ 307.076485][T12490] ? ksys_write+0x190/0x250 [ 307.076497][T12490] ? ksys_write+0x190/0x250 [ 307.076510][T12490] do_futex+0x2b2/0x440 [ 307.076526][T12490] ? __pfx_do_futex+0x10/0x10 [ 307.076542][T12490] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 307.076563][T12490] __x64_sys_futex+0x34f/0x4d0 [ 307.076579][T12490] ? fput+0x7c/0x100 [ 307.076594][T12490] ? __pfx___x64_sys_futex+0x10/0x10 [ 307.076609][T12490] ? ksys_write+0x1ac/0x250 [ 307.076620][T12490] ? __pfx_ksys_write+0x10/0x10 [ 307.076637][T12490] do_syscall_64+0x123/0x790 [ 307.076656][T12490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.076668][T12490] RIP: 0033:0x7f111719f559 [ 307.076678][T12490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.076689][T12490] RSP: 002b:00007f1117fa70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 307.076700][T12490] RAX: ffffffffffffffda RBX: 00007f1117425fa8 RCX: 00007f111719f559 [ 307.076708][T12490] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1117425fac [ 307.076714][T12490] RBP: 00007f1117425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 307.076721][T12490] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 307.076727][T12490] R13: 00007f1117426038 R14: 00007ffc0d4f5470 R15: 00007ffc0d4f5558 [ 307.076742][T12490] [ 307.487283][T12497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2330'. [ 307.862581][T12513] syzkaller1: entered promiscuous mode [ 307.862595][T12513] syzkaller1: entered allmulticast mode [ 307.914062][ T5698] gspca_topro: reg_r err -71 [ 307.914071][ T5698] gspca_topro: Sensor soi763a [ 307.933314][ T5698] usb 3-1: USB disconnect, device number 37 [ 308.014312][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 308.174458][ T5602] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 308.175092][ T10] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 308.175826][ T10] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 308.175839][ T10] usb 1-1: config 1 has no interface number 0 [ 308.177343][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.177355][ T10] usb 1-1: Product: syz [ 308.177363][ T10] usb 1-1: Manufacturer: syz [ 308.177371][ T10] usb 1-1: SerialNumber: syz [ 308.182394][ T10] usb 1-1: cannot find UAC_HEADER [ 308.325990][ T10] snd-usb-audio 1-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 308.335197][ T5602] usb 5-1: Using ep0 maxpacket: 8 [ 308.350550][ T5602] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 308.351993][ T5602] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.352006][ T5602] usb 5-1: config 0 has no interfaces? [ 308.352020][ T5602] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.353313][ T5602] usb 5-1: config 0 descriptor?? [ 308.527880][T12527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2342'. [ 308.599592][T12515] FAULT_INJECTION: forcing a failure. [ 308.599592][T12515] name failslab, interval 1, probability 0, space 0, times 0 [ 308.599611][T12515] CPU: 0 UID: 0 PID: 12515 Comm: syz.4.2338 Tainted: G L syzkaller #0 PREEMPT(full) [ 308.599628][T12515] Tainted: [L]=SOFTLOCKUP [ 308.599633][T12515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 308.599639][T12515] Call Trace: [ 308.599643][T12515] [ 308.599648][T12515] dump_stack_lvl+0x100/0x190 [ 308.599668][T12515] should_fail_ex.cold+0x5/0xa [ 308.599687][T12515] should_failslab+0xc2/0x120 [ 308.599703][T12515] kmem_cache_alloc_noprof+0x92/0x6a0 [ 308.599717][T12515] ? __asan_memcpy+0x3c/0x60 [ 308.599728][T12515] ? __kernfs_new_node+0xd2/0xa10 [ 308.599744][T12515] __kernfs_new_node+0xd2/0xa10 [ 308.599765][T12515] ? __pfx___kernfs_new_node+0x10/0x10 [ 308.599778][T12515] ? lock_acquire+0x1d1/0x380 [ 308.599790][T12515] ? kernfs_root+0x23/0x2a0 [ 308.599800][T12515] ? find_held_lock+0x2b/0x80 [ 308.599815][T12515] ? kernfs_root+0xee/0x2a0 [ 308.599825][T12515] ? kernfs_root+0xee/0x2a0 [ 308.599838][T12515] kernfs_new_node+0x194/0x200 [ 308.599852][T12515] ? __pfx_kernfs_new_node+0x10/0x10 [ 308.599864][T12515] ? kernfs_create_link+0xe4/0x280 [ 308.599880][T12515] ? kernfs_create_link+0xe4/0x280 [ 308.599899][T12515] kernfs_create_link+0x100/0x280 [ 308.599915][T12515] sysfs_do_create_link_sd+0x90/0x140 [ 308.599935][T12515] sysfs_create_link+0x61/0xc0 [ 308.599952][T12515] module_add_driver+0x1c0/0x420 [ 308.599970][T12515] bus_add_driver+0x34a/0x5b0 [ 308.599989][T12515] driver_register+0x1e2/0x360 [ 308.600001][T12515] ? rcu_is_watching+0x13/0xc0 [ 308.600017][T12515] usb_gadget_register_driver_owner+0x132/0x210 [ 308.600032][T12515] raw_ioctl+0x1a85/0x2b80 [ 308.600054][T12515] ? __pfx_raw_ioctl+0x10/0x10 [ 308.600071][T12515] ? selinux_file_ioctl+0x1e0/0x290 [ 308.600087][T12515] ? selinux_file_ioctl+0x1e7/0x290 [ 308.600104][T12515] ? __pfx_raw_ioctl+0x10/0x10 [ 308.600121][T12515] __x64_sys_ioctl+0x18e/0x210 [ 308.600135][T12515] do_syscall_64+0x123/0x790 [ 308.600155][T12515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.600166][T12515] RIP: 0033:0x7fafbc59f1eb [ 308.600176][T12515] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 308.600187][T12515] RSP: 002b:00007fafbd4f4f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.600199][T12515] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fafbc59f1eb [ 308.600206][T12515] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 308.600213][T12515] RBP: 00007fafbd4f5fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 308.600220][T12515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.600226][T12515] R13: 0000200000000280 R14: 0000000000000005 R15: 00000000000010d0 [ 308.600242][T12515] [ 308.600298][T12515] bus_add_driver: failed to create module links for raw-gadget.2 [ 308.600334][T12515] UDC core: USB Raw Gadget: driver registration failed: -12 [ 308.600344][T12515] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 308.797429][ T10] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 308.968141][ T5602] usb 5-1: USB disconnect, device number 40 [ 309.051847][ T30] audit: type=1400 audit(1792660683.864:638): avc: denied { getopt } for pid=12531 comm="syz.7.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 309.083168][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 309.083856][ T10] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 309.099800][ T10] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 309.099815][ T10] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 309.099826][ T10] usb 7-1: config 0 has no interface number 0 [ 309.099844][ T10] usb 7-1: config 0 interface 21 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 309.141579][ T10] usb 7-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 309.141594][ T10] usb 7-1: Product: syz [ 309.162082][ T10] usb 7-1: config 0 descriptor?? [ 309.606156][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2353'. [ 310.849295][ T10] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 310.896545][ T5726] usb 1-1: USB disconnect, device number 28 [ 311.011584][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 311.013813][ T10] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 311.015268][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.015289][ T10] usb 8-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 311.015305][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 311.015321][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.031776][ T10] usb 8-1: config 0 descriptor?? [ 311.079961][ T10] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 311.277265][ T5607] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 311.280302][ T5607] Bluetooth: hci0: command 0x0c24 tx timeout [ 311.737729][ T5726] usb 7-1: USB disconnect, device number 29 [ 311.815577][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2365'. [ 313.496768][ T4916] Bluetooth: hci5: command 0x0406 tx timeout [ 313.835344][ T10] usb 8-1: USB disconnect, device number 18 [ 314.311848][ T10] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 314.470444][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 314.470871][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 314.470889][ T10] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 314.476092][ T10] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 314.476106][ T10] usb 5-1: config 0 has no interface number 0 [ 314.476124][ T10] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 314.476140][ T10] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 87, setting to 64 [ 314.476154][ T10] usb 5-1: config 0 interface 88 has no altsetting 0 [ 314.478064][ T10] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 314.478078][ T10] usb 5-1: Product: syz [ 314.478086][ T10] usb 5-1: Manufacturer: syz [ 314.478095][ T10] usb 5-1: SerialNumber: syz [ 314.479794][ T10] usb 5-1: config 0 descriptor?? [ 314.487807][T12639] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 314.737792][ T10] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input24 [ 314.759584][ C0] Unknown status report in ack skb [ 314.783401][ T10] usb 5-1: USB disconnect, device number 41 [ 315.164934][ T5602] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 315.173924][ T5698] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 315.324640][ T5602] usb 3-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 315.325405][ T5602] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 315.325422][ T5602] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 315.326883][ T5602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.326896][ T5602] usb 3-1: Product: syz [ 315.326905][ T5602] usb 3-1: Manufacturer: syz [ 315.326913][ T5602] usb 3-1: SerialNumber: syz [ 315.355770][ T5698] usb 8-1: Using ep0 maxpacket: 16 [ 315.366064][ T5698] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 315.378712][ T5698] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.378734][ T5698] usb 8-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 315.378749][ T5698] usb 8-1: config 0 interface 0 has no altsetting 0 [ 315.378765][ T5698] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.389201][ T5698] usb 8-1: config 0 descriptor?? [ 315.464618][ T5698] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 315.598273][ T5602] kaweth 3-1:1.0: Firmware present in device. [ 315.784705][ T5602] kaweth 3-1:1.0: Statistics collection: 0 [ 315.784719][ T5602] kaweth 3-1:1.0: Multicast filter limit: 0 [ 315.784728][ T5602] kaweth 3-1:1.0: MTU: 0 [ 315.784735][ T5602] kaweth 3-1:1.0: Read MAC address 00:00:00:00:00:00 [ 318.144440][ T5726] usb 8-1: USB disconnect, device number 19 [ 319.046474][ T5602] kaweth 3-1:1.0: kaweth interface created at eth1 [ 319.050796][ T5602] usb 3-1: USB disconnect, device number 38 [ 319.511147][T12728] FAULT_INJECTION: forcing a failure. [ 319.511147][T12728] name fail_futex, interval 1, probability 0, space 0, times 0 [ 319.511169][T12728] CPU: 0 UID: 0 PID: 12728 Comm: syz.4.2417 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.511186][T12728] Tainted: [L]=SOFTLOCKUP [ 319.511191][T12728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 319.511198][T12728] Call Trace: [ 319.511202][T12728] [ 319.511207][T12728] dump_stack_lvl+0x100/0x190 [ 319.511227][T12728] should_fail_ex.cold+0x5/0xa [ 319.511244][T12728] get_futex_key+0x1c9/0x13e0 [ 319.511260][T12728] ? __pfx_get_futex_key+0x10/0x10 [ 319.511274][T12728] ? wakeup_preempt_fair+0x4fc/0xf60 [ 319.511290][T12728] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 319.511307][T12728] futex_wait_setup+0x91/0x540 [ 319.511329][T12728] __futex_wait+0x19f/0x360 [ 319.511348][T12728] ? __pfx___futex_wait+0x10/0x10 [ 319.511364][T12728] ? __pfx_try_to_wake_up+0x10/0x10 [ 319.511376][T12728] ? futex_hash+0x311/0x400 [ 319.511390][T12728] ? __pfx_futex_wake_mark+0x10/0x10 [ 319.511410][T12728] ? find_held_lock+0x2b/0x80 [ 319.511425][T12728] ? futex_wake+0x4ea/0x5e0 [ 319.511446][T12728] futex_wait+0xe6/0x370 [ 319.511456][T12728] ? __pfx_futex_wait+0x10/0x10 [ 319.511481][T12728] do_futex+0x265/0x440 [ 319.511496][T12728] ? __pfx_do_futex+0x10/0x10 [ 319.511512][T12728] ? __fget_files+0x21f/0x3d0 [ 319.511529][T12728] __x64_sys_futex+0x34f/0x4d0 [ 319.511546][T12728] ? __pfx___x64_sys_futex+0x10/0x10 [ 319.511566][T12728] do_syscall_64+0x123/0x790 [ 319.511585][T12728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.511597][T12728] RIP: 0033:0x7fafbc59f559 [ 319.511612][T12728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.511623][T12728] RSP: 002b:00007fafbd4f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 319.511635][T12728] RAX: ffffffffffffffda RBX: 00007fafbc825fa8 RCX: 00007fafbc59f559 [ 319.511642][T12728] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fafbc825fa8 [ 319.511649][T12728] RBP: 00007fafbc825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 319.511656][T12728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.511663][T12728] R13: 00007fafbc826038 R14: 00007ffd9e2cfbb0 R15: 00007ffd9e2cfc98 [ 319.511678][T12728] [ 319.895771][T12739] FAULT_INJECTION: forcing a failure. [ 319.895771][T12739] name fail_futex, interval 1, probability 0, space 0, times 0 [ 319.895792][T12739] CPU: 0 UID: 0 PID: 12739 Comm: syz.6.2421 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.895808][T12739] Tainted: [L]=SOFTLOCKUP [ 319.895812][T12739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 319.895819][T12739] Call Trace: [ 319.895823][T12739] [ 319.895828][T12739] dump_stack_lvl+0x100/0x190 [ 319.895849][T12739] should_fail_ex.cold+0x5/0xa [ 319.895865][T12739] get_futex_key+0x1c9/0x13e0 [ 319.895882][T12739] ? __pfx_get_futex_key+0x10/0x10 [ 319.895896][T12739] ? wakeup_preempt_fair+0x4fc/0xf60 [ 319.895912][T12739] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 319.895929][T12739] futex_wait_setup+0x91/0x540 [ 319.895953][T12739] __futex_wait+0x19f/0x360 [ 319.895972][T12739] ? __pfx___futex_wait+0x10/0x10 [ 319.895988][T12739] ? __pfx_try_to_wake_up+0x10/0x10 [ 319.896000][T12739] ? futex_hash+0x311/0x400 [ 319.896015][T12739] ? __pfx_futex_wake_mark+0x10/0x10 [ 319.896035][T12739] ? find_held_lock+0x2b/0x80 [ 319.896050][T12739] ? futex_wake+0x4ea/0x5e0 [ 319.896070][T12739] futex_wait+0xe6/0x370 [ 319.896080][T12739] ? __pfx_futex_wait+0x10/0x10 [ 319.896101][T12739] ? rcu_read_lock_any_held+0x6a/0x90 [ 319.896117][T12739] ? find_held_lock+0x2b/0x80 [ 319.896131][T12739] ? ksys_write+0x190/0x250 [ 319.896143][T12739] ? ksys_write+0x190/0x250 [ 319.896157][T12739] do_futex+0x265/0x440 [ 319.896172][T12739] ? __pfx_do_futex+0x10/0x10 [ 319.896188][T12739] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 319.896209][T12739] __x64_sys_futex+0x34f/0x4d0 [ 319.896225][T12739] ? fput+0x7c/0x100 [ 319.896241][T12739] ? __pfx___x64_sys_futex+0x10/0x10 [ 319.896256][T12739] ? ksys_write+0x1ac/0x250 [ 319.896268][T12739] ? __pfx_ksys_write+0x10/0x10 [ 319.896284][T12739] do_syscall_64+0x123/0x790 [ 319.896303][T12739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.896315][T12739] RIP: 0033:0x7ff758d9f559 [ 319.896326][T12739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.896338][T12739] RSP: 002b:00007ff759c380e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 319.896349][T12739] RAX: ffffffffffffffda RBX: 00007ff759025fa8 RCX: 00007ff758d9f559 [ 319.896356][T12739] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff759025fa8 [ 319.896363][T12739] RBP: 00007ff759025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 319.896370][T12739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.896377][T12739] R13: 00007ff759026038 R14: 00007ffd53d77f20 R15: 00007ffd53d78008 [ 319.896392][T12739] [ 320.737953][ T112] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 321.755308][T12778] FAULT_INJECTION: forcing a failure. [ 321.755308][T12778] name fail_futex, interval 1, probability 0, space 0, times 0 [ 321.755331][T12778] CPU: 0 UID: 0 PID: 12778 Comm: syz.4.2436 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.755347][T12778] Tainted: [L]=SOFTLOCKUP [ 321.755351][T12778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 321.755358][T12778] Call Trace: [ 321.755362][T12778] [ 321.755367][T12778] dump_stack_lvl+0x100/0x190 [ 321.755388][T12778] should_fail_ex.cold+0x5/0xa [ 321.755404][T12778] get_futex_key+0x1c9/0x13e0 [ 321.755422][T12778] ? __pfx_get_futex_key+0x10/0x10 [ 321.755435][T12778] ? wakeup_preempt_fair+0x4fc/0xf60 [ 321.755451][T12778] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 321.755468][T12778] futex_wait_setup+0x91/0x540 [ 321.755490][T12778] __futex_wait+0x19f/0x360 [ 321.755509][T12778] ? __pfx___futex_wait+0x10/0x10 [ 321.755526][T12778] ? __pfx_try_to_wake_up+0x10/0x10 [ 321.755537][T12778] ? futex_hash+0x311/0x400 [ 321.755552][T12778] ? __pfx_futex_wake_mark+0x10/0x10 [ 321.755571][T12778] ? find_held_lock+0x2b/0x80 [ 321.755593][T12778] ? futex_wake+0x4ea/0x5e0 [ 321.755615][T12778] futex_wait+0xe6/0x370 [ 321.755626][T12778] ? __pfx_futex_wait+0x10/0x10 [ 321.755648][T12778] ? rcu_read_lock_any_held+0x6a/0x90 [ 321.755666][T12778] ? find_held_lock+0x2b/0x80 [ 321.755681][T12778] ? ksys_write+0x190/0x250 [ 321.755694][T12778] ? ksys_write+0x190/0x250 [ 321.755708][T12778] do_futex+0x265/0x440 [ 321.755725][T12778] ? __pfx_do_futex+0x10/0x10 [ 321.755741][T12778] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 321.755762][T12778] __x64_sys_futex+0x34f/0x4d0 [ 321.755778][T12778] ? fput+0x7c/0x100 [ 321.755793][T12778] ? __pfx___x64_sys_futex+0x10/0x10 [ 321.755808][T12778] ? ksys_write+0x1ac/0x250 [ 321.755820][T12778] ? __pfx_ksys_write+0x10/0x10 [ 321.755836][T12778] do_syscall_64+0x123/0x790 [ 321.755856][T12778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.755868][T12778] RIP: 0033:0x7fafbc59f559 [ 321.755879][T12778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.755890][T12778] RSP: 002b:00007fafbd4f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 321.755901][T12778] RAX: ffffffffffffffda RBX: 00007fafbc825fa8 RCX: 00007fafbc59f559 [ 321.755909][T12778] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fafbc825fa8 [ 321.755915][T12778] RBP: 00007fafbc825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 321.755922][T12778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.755928][T12778] R13: 00007fafbc826038 R14: 00007ffd9e2cfbb0 R15: 00007ffd9e2cfc98 [ 321.755942][T12778] [ 322.223725][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.223753][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.223987][ T1308] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 322.323060][ T5698] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 322.415934][ T30] audit: type=1400 audit(1792660696.367:639): avc: denied { write } for pid=12790 comm="syz.6.2441" name="rpc" dev="proc" ino=4026534193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 322.455284][T12791] FAULT_INJECTION: forcing a failure. [ 322.455284][T12791] name failslab, interval 1, probability 0, space 0, times 0 [ 322.455305][T12791] CPU: 0 UID: 0 PID: 12791 Comm: syz.6.2441 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.455323][T12791] Tainted: [L]=SOFTLOCKUP [ 322.455328][T12791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 322.455335][T12791] Call Trace: [ 322.455339][T12791] [ 322.455344][T12791] dump_stack_lvl+0x100/0x190 [ 322.455365][T12791] should_fail_ex.cold+0x5/0xa [ 322.455382][T12791] should_failslab+0xc2/0x120 [ 322.455398][T12791] kmem_cache_alloc_noprof+0x92/0x6a0 [ 322.455414][T12791] ? skb_clone+0x190/0x400 [ 322.455430][T12791] skb_clone+0x190/0x400 [ 322.455444][T12791] netlink_broadcast_filtered+0xbaa/0xfd0 [ 322.455460][T12791] ? netlink_has_listeners+0x21b/0x430 [ 322.455474][T12791] netlink_broadcast+0x39/0x50 [ 322.455486][T12791] kobject_uevent_env+0xcdd/0x18b0 [ 322.455505][T12791] ? rpc_sysfs_xprt_setup+0xe1/0x300 [ 322.455520][T12791] rpc_sysfs_xprt_setup+0x21a/0x300 [ 322.455535][T12791] xprt_switch_alloc+0x2ce/0x3c0 [ 322.455552][T12791] rpc_create_xprt+0x2dc/0x440 [ 322.455576][T12791] rpc_create+0x46e/0x7f0 [ 322.455593][T12791] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 322.455612][T12791] ? __pfx_rpc_create+0x10/0x10 [ 322.455646][T12791] ? rcu_is_watching+0x13/0xc0 [ 322.455662][T12791] ? trace_contention_end+0x126/0x160 [ 322.455676][T12791] ? __mutex_lock+0x267/0x1c10 [ 322.455689][T12791] gssp_rpc_create+0xe1/0x180 [ 322.455701][T12791] ? __pfx_gssp_rpc_create+0x10/0x10 [ 322.455720][T12791] ? net_generic+0xea/0x2a0 [ 322.455738][T12791] set_gssp_clnt+0xc3/0x1b0 [ 322.455750][T12791] ? __pfx_set_gssp_clnt+0x10/0x10 [ 322.455766][T12791] write_gssp+0x1f7/0x380 [ 322.455783][T12791] ? __pfx_write_gssp+0x10/0x10 [ 322.455803][T12791] ? lock_acquire+0x1d1/0x380 [ 322.455814][T12791] ? ksys_write+0x12a/0x250 [ 322.455828][T12791] ? __pfx_write_gssp+0x10/0x10 [ 322.455845][T12791] proc_reg_write+0x240/0x330 [ 322.455859][T12791] vfs_write+0x2aa/0x1050 [ 322.455872][T12791] ? __pfx_proc_reg_write+0x10/0x10 [ 322.455883][T12791] ? lock_acquire+0x1d1/0x380 [ 322.455894][T12791] ? __fget_files+0x34/0x3d0 [ 322.455909][T12791] ? __pfx_vfs_write+0x10/0x10 [ 322.455920][T12791] ? find_held_lock+0x2b/0x80 [ 322.455936][T12791] ? __fget_files+0x215/0x3d0 [ 322.455953][T12791] ? __fget_files+0x21f/0x3d0 [ 322.455973][T12791] ksys_write+0x12a/0x250 [ 322.455985][T12791] ? __pfx_ksys_write+0x10/0x10 [ 322.456002][T12791] do_syscall_64+0x123/0x790 [ 322.456021][T12791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.456033][T12791] RIP: 0033:0x7ff758d9f559 [ 322.456044][T12791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.456055][T12791] RSP: 002b:00007ff759c38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 322.456067][T12791] RAX: ffffffffffffffda RBX: 00007ff759025fa0 RCX: 00007ff758d9f559 [ 322.456074][T12791] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005 [ 322.456081][T12791] RBP: 00007ff758e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 322.456087][T12791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.456094][T12791] R13: 00007ff759026038 R14: 00007ff759025fa0 R15: 00007ffd53d78008 [ 322.456109][T12791] [ 322.558844][ T5698] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 322.591580][ T5698] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.591606][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.709650][ T5698] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 322.709745][ T5698] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 322.709774][ T5698] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 322.888400][ T5698] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 322.888437][ T5698] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 322.908347][ T5698] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 322.909144][ T5698] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 322.909179][ T5698] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 322.943132][ T5698] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 322.969468][ T5698] usb 1-1: USB disconnect, device number 29 [ 322.973616][ T5698] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 323.000080][ T5698] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 323.000384][ T5698] keyspan 1-1:1.0: device disconnected [ 323.841564][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 324.003565][ T10] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 324.004355][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.004370][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 324.011392][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.011406][ T10] usb 1-1: Product: syz [ 324.011415][ T10] usb 1-1: Manufacturer: syz [ 324.011423][ T10] usb 1-1: SerialNumber: syz [ 324.067494][ T10] usb 1-1: config 0 descriptor?? [ 324.630994][ T10] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 324.792339][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 324.795807][ T10] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 324.796984][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.798167][ T10] usb 7-1: config 0 descriptor?? [ 324.799746][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 325.494055][ T10] gspca_vc032x: reg_w err -71 [ 325.494066][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.494072][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.494077][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.494082][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.494087][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.494092][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.494096][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.494101][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.494106][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.494111][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.494116][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.494121][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.494125][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.494129][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.494134][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.494139][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.494143][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.494148][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.494153][ T10] gspca_vc032x: Unknown sensor... [ 325.494183][ T10] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 325.495169][ T10] usb 7-1: USB disconnect, device number 30 [ 325.812714][T12821] syzkaller0: entered promiscuous mode [ 325.812728][T12821] syzkaller0: entered allmulticast mode [ 326.810712][ T5726] usb 1-1: USB disconnect, device number 30 [ 326.947066][ T30] audit: type=1400 audit(1792660700.606:640): avc: denied { write } for pid=12854 comm="syz.7.2462" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 327.228322][ T5698] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 327.397648][ T5698] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 327.411612][ T5698] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.411637][ T5698] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.415090][ T5698] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 327.415224][ T5698] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 327.415253][ T5698] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 327.415816][ T5698] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 327.415849][ T5698] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 327.481050][ T5698] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 327.483301][ T5698] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 327.483335][ T5698] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 327.512324][ T5698] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 328.025746][ T5726] usb 8-1: USB disconnect, device number 20 [ 328.041867][ T5726] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 328.069187][ T5726] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 328.069489][ T5726] keyspan 8-1:1.0: device disconnected [ 329.023022][ T5698] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 329.188183][ T5698] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 329.189496][ T5698] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 329.189514][ T5698] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 329.189529][ T5698] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 329.189541][ T5698] usb 8-1: config 0 interface 0 has no altsetting 0 [ 329.190988][ T5698] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 329.191002][ T5698] usb 8-1: Product: syz [ 329.191010][ T5698] usb 8-1: Manufacturer: syz [ 329.191018][ T5698] usb 8-1: SerialNumber: syz [ 329.192227][ T5698] usb 8-1: config 0 descriptor?? [ 329.285186][ T5698] usb 8-1: selecting invalid altsetting 0 [ 329.503485][ T5698] usb 8-1: USB disconnect, device number 21 [ 329.788206][ T30] audit: type=1400 audit(1792660703.273:641): avc: denied { read write } for pid=12878 comm="syz.6.2473" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 329.790707][ T30] audit: type=1400 audit(1792660703.273:642): avc: denied { open } for pid=12878 comm="syz.6.2473" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 329.917621][ T4916] Bluetooth: hci6: command 0x0406 tx timeout [ 330.346346][T12897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2481'. [ 330.346387][T12897] bridge_slave_1: left allmulticast mode [ 330.346400][T12897] bridge_slave_1: left promiscuous mode [ 330.346513][T12897] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.381667][T12897] bridge_slave_0: left allmulticast mode [ 330.381681][T12897] bridge_slave_0: left promiscuous mode [ 330.381776][T12897] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.424094][ T5698] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 330.583132][ T5698] usb 7-1: Using ep0 maxpacket: 16 [ 330.586888][ T5698] usb 7-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 330.590253][ T5698] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.590267][ T5698] usb 7-1: Product: syz [ 330.590274][ T5698] usb 7-1: Manufacturer: syz [ 330.590281][ T5698] usb 7-1: SerialNumber: syz [ 330.591449][ T5698] usb 7-1: config 0 descriptor?? [ 330.599829][ T5698] usb 7-1: selecting invalid altsetting 1 [ 330.599839][ T5698] technisat-usb2: could not set alternate setting to 0 [ 330.757028][T12907] tipc: Started in network mode [ 330.757044][T12907] tipc: Node identity ac14140f, cluster identity 4711 [ 330.757678][T12907] tipc: New replicast peer: 255.255.255.255 [ 330.758005][T12907] tipc: Enabled bearer , priority 10 [ 330.777387][ T10] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 330.836204][ T5698] technisat-usb2: firmware version: 0.0 [ 330.836224][ T5698] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 330.935866][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 330.936423][ T10] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 330.937580][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 330.945201][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.945214][ T10] usb 8-1: Product: syz [ 330.945222][ T10] usb 8-1: Manufacturer: syz [ 330.945230][ T10] usb 8-1: SerialNumber: syz [ 330.973187][ T10] usb 8-1: config 0 descriptor?? [ 331.001583][ T10] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 331.001600][ T10] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 331.171764][ T30] audit: type=1400 audit(1792660704.564:643): avc: denied { create } for pid=12916 comm="syz.2.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 331.175052][ T30] audit: type=1400 audit(1792660704.564:644): avc: denied { bind } for pid=12916 comm="syz.2.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 331.287852][ T5698] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 331.298589][ T5698] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 331.298613][ T5698] usb 7-1: media controller created [ 331.298822][ T5698] technisat-usb2: i2c-error: out failed 53 = -22 [ 331.314230][ T5698] dvb-usb: MAC address reading failed. [ 331.355585][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 331.472975][ T5698] DVB: Unable to find symbol stv090x_attach() [ 331.672031][ T10] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 331.966264][ T5724] tipc: Node number set to 2886997007 [ 332.020686][T12895] technisat-usb2: i2c-error: out failed 05 = -22 [ 332.020805][ T5698] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 332.122093][ T5698] rc_core: IR keymap rc-technisat-usb2 not found [ 332.122103][ T5698] Registered IR keymap rc-empty [ 332.128449][ T5698] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 332.159680][ T5698] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input25 [ 332.160245][ T5607] Bluetooth: hci0: unexpected event for opcode 0x0c20 [ 332.184523][ T5698] dvb-usb: schedule remote query interval to 100 msecs. [ 332.192213][ T5698] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 332.195299][ T5698] usb 7-1: USB disconnect, device number 31 [ 332.270325][ T5698] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 332.330521][ T10] em28xx 8-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 332.330537][ T10] em28xx 8-1:0.0: board has no eeprom [ 332.423237][ T10] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 332.424288][ T10] em28xx 8-1:0.0: dvb set to bulk mode. [ 332.428413][ T5726] em28xx 8-1:0.0: Binding DVB extension [ 332.445505][ T10] usb 8-1: USB disconnect, device number 22 [ 332.446167][ T10] em28xx 8-1:0.0: Disconnecting em28xx [ 332.548519][ T5726] em28xx 8-1:0.0: Registering input extension [ 332.557331][ T10] em28xx 8-1:0.0: Closing input extension [ 332.642686][ T10] em28xx: Freeing device [ 333.065938][ T30] audit: type=1400 audit(1792660706.333:645): avc: denied { mount } for pid=12959 comm="syz.7.2508" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 333.147859][ T10] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 333.261734][ T30] audit: type=1400 audit(1792660706.520:646): avc: denied { remount } for pid=12967 comm="syz.0.2511" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 333.286711][ T10] usb 7-1: device descriptor read/64, error -71 [ 333.322362][ T30] audit: type=1400 audit(1792660706.576:647): avc: denied { getopt } for pid=12971 comm="syz.2.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 333.543466][ T10] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 333.619600][ T30] audit: type=1400 audit(1792660706.857:648): avc: denied { mount } for pid=12988 comm="syz.7.2519" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 333.687335][ T10] usb 7-1: device descriptor read/64, error -71 [ 333.801414][ T10] usb usb7-port1: attempt power cycle [ 333.821073][ T5698] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 333.842563][ T32] INFO: task syz.1.1242:9197 blocked for more than 143 seconds. [ 333.842577][ T32] Tainted: G L syzkaller #0 [ 333.842584][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.842589][ T32] task:syz.1.1242 state:D stack:28592 pid:9197 tgid:9190 ppid:5595 task_flags:0x400040 flags:0x00080002 [ 333.842619][ T32] Call Trace: [ 333.842623][ T32] [ 333.842630][ T32] __schedule+0x125e/0x6990 [ 333.842649][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 333.842664][ T32] ? do_raw_spin_lock+0x128/0x260 [ 333.842682][ T32] ? __pfx___schedule+0x10/0x10 [ 333.843246][ T32] ? find_held_lock+0x2b/0x80 [ 333.843263][ T32] ? schedule+0x225/0x2c0 [ 333.843280][ T32] schedule+0xdd/0x2c0 [ 333.843295][ T32] schedule_preempt_disabled+0x13/0x30 [ 333.843311][ T32] __mutex_lock+0xcca/0x1c10 [ 333.843322][ T32] ? write_ports+0xa5/0xcc0 [ 333.843338][ T32] ? nfsctl_transaction_write+0xcd/0x1a0 [ 333.843353][ T32] ? ksys_write+0x12a/0x250 [ 333.843365][ T32] ? do_syscall_64+0x123/0x790 [ 333.843383][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 333.843400][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 333.843413][ T32] ? write_ports+0xa5/0xcc0 [ 333.843433][ T32] write_ports+0xa5/0xcc0 [ 333.843450][ T32] ? __pfx_write_ports+0x10/0x10 [ 333.843466][ T32] ? lock_acquire+0x1d1/0x380 [ 333.843477][ T32] ? __might_fault+0xc5/0x140 [ 333.843495][ T32] ? find_held_lock+0x2b/0x80 [ 333.843509][ T32] ? __might_fault+0xc5/0x140 [ 333.843526][ T32] ? __might_fault+0xc5/0x140 [ 333.843544][ T32] ? __pfx_write_ports+0x10/0x10 [ 333.843562][ T32] ? _copy_from_user+0x59/0xd0 [ 333.843579][ T32] ? __pfx_write_ports+0x10/0x10 [ 333.843595][ T32] nfsctl_transaction_write+0x106/0x1a0 [ 333.843612][ T32] vfs_write+0x2aa/0x1050 [ 333.843625][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 333.843640][ T32] ? lock_acquire+0x1d1/0x380 [ 333.843651][ T32] ? __fget_files+0x34/0x3d0 [ 333.843666][ T32] ? __pfx_vfs_write+0x10/0x10 [ 333.843677][ T32] ? find_held_lock+0x2b/0x80 [ 333.843693][ T32] ? __fget_files+0x215/0x3d0 [ 333.843710][ T32] ? __fget_files+0x21f/0x3d0 [ 333.843729][ T32] ksys_write+0x12a/0x250 [ 333.843741][ T32] ? __pfx_ksys_write+0x10/0x10 [ 333.843758][ T32] do_syscall_64+0x123/0x790 [ 333.843776][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.843788][ T32] RIP: 0033:0x7fa8a6f9f559 [ 333.843797][ T32] RSP: 002b:00007fa8a7e19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 333.843808][ T32] RAX: ffffffffffffffda RBX: 00007fa8a7226090 RCX: 00007fa8a6f9f559 [ 333.843815][ T32] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000004 [ 333.843822][ T32] RBP: 00007fa8a7036b20 R08: 0000000000000000 R09: 0000000000000000 [ 333.843829][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.843835][ T32] R13: 00007fa8a7226128 R14: 00007fa8a7226090 R15: 00007ffd606f3bf8 [ 333.843850][ T32] [ 333.843867][ T32] [ 333.843867][ T32] Showing all locks held in the system: [ 333.843872][ T32] locks held by kworker/0:1/10: 6, on CPU#0: [ 333.843880][ T32] #0: ffff8880256d1540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 333.843911][ T32] #1: ffffc900000f7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 333.843942][ T32] #2: ffff88802c40e1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 333.843970][ T32] #3: ffff88802c871568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2b3e/0x4420 [ 333.844064][ T32] #4: ffff88802c82e460 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2b67/0x4420 [ 333.844169][ T32] #5: ffffffff9128ae28 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a1/0x1bd0 [ 333.844198][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 333.844206][ T32] #0: ffffffff8fdeb1e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 333.844255][ T32] locks held by udevd/4966: 3, last CPU#0: [ 333.844263][ T32] #0: ffff88807e204460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 333.844296][ T32] #1: ffff888037e27b28 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x262/0x730 [ 333.844332][ T32] #2: ffffffff8fdeb1e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 333.844364][ T32] locks held by syz-executor/5596: 4, last CPU#0: [ 333.844372][ T32] #0: ffffffff8ff3cbd0 (dup_mmap_sem){++++}-{0:0}, at: copy_process+0x79fc/0x84c0 [ 333.844396][ T32] #1: ffff888038d24cc0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 333.844429][ T32] #2: ffff8880370ec080 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 333.844460][ T32] #3: ffffffff8fdeb1e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire.constprop.0+0x7/0x30 [ 333.844487][ T32] locks held by syz-executor/5609: 2, on CPU#0: [ 333.844494][ T32] #0: ffff88804764c0e8 (&type->s_umount_key#85){++++}-{4:4}, at: deactivate_super+0xe2/0x110 [ 333.844524][ T32] #1: ffffffff90289780 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 333.844555][ T32] locks held by kworker/0:5/5698: 6, on CPU#0: [ 333.844562][ T32] #0: ffff8880256d1540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 333.844592][ T32] #1: ffffc90002eafd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 333.844622][ T32] #2: ffff88802c73e1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 333.844649][ T32] #3: ffff88802c7f3568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2b3e/0x4420 [ 333.844676][ T32] #4: ffff88802c573660 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2b67/0x4420 [ 333.844703][ T32] #5: ffffffff9128ae28 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a1/0x1bd0 [ 333.844741][ T32] locks held by syz.1.1242/9191: 3, on CPU#0: [ 333.844748][ T32] #0: ffff88807cfb77b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 333.847263][ T32] #1: ffff88807e37a460 (sb_writers#18){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 333.847293][ T32] #2: ffffffff90289780 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 333.847323][ T32] locks held by syz.1.1242/9197: 3, on CPU#0: [ 333.847331][ T32] #0: ffff88807d2c9970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 333.847360][ T32] #1: ffff88807e37a460 (sb_writers#18){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 333.847388][ T32] #2: ffffffff90289780 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 333.847423][ T32] locks held by getty/9516: 2, on CPU#1: [ 333.847430][ T32] #0: ffff8880361bd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 333.847461][ T32] #1: ffffc9000f3f12e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1540 [ 333.847492][ T32] locks held by syz.5.1478/9997: 1, on CPU#1: [ 333.847499][ T32] #0: ffff88804764c0e8 (&type->s_umount_key#85){++++}-{4:4}, at: super_lock+0x321/0x3f0 [ 333.847548][ T32] locks held by syz-executor/12995: 4, last CPU#0: [ 333.847555][ T32] #0: ffff88807bf12460 (sb_writers#6){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 333.847585][ T32] #1: ffff88806b026f18 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 333.847617][ T32] #2: ffffffff90911778 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x262/0x460 [ 333.847646][ T32] #3: ffffffff8fdeb1e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 333.847677][ T32] [ 333.847680][ T32] ============================================= [ 333.847680][ T32] [ 333.847685][ T32] NMI backtrace for cpu 0 [ 333.847693][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 333.847708][ T32] Tainted: [L]=SOFTLOCKUP [ 333.847712][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 333.847718][ T32] Call Trace: [ 333.847722][ T32] [ 333.847726][ T32] dump_stack_lvl+0x100/0x190 [ 333.847744][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 333.847762][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 333.847776][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 333.847793][ T32] sys_info+0x141/0x190 [ 333.847805][ T32] watchdog+0xcb1/0x1030 [ 333.847820][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 333.847836][ T32] ? __pfx_watchdog+0x10/0x10 [ 333.847848][ T32] ? __kthread_parkme+0x18f/0x230 [ 333.847862][ T32] ? kthread+0x13a/0x450 [ 333.847875][ T32] ? __pfx_watchdog+0x10/0x10 [ 333.847886][ T32] kthread+0x373/0x450 [ 333.847899][ T32] ? __pfx_kthread+0x10/0x10 [ 333.847914][ T32] ret_from_fork+0x730/0xd60 [ 333.847927][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 333.847940][ T32] ? __switch_to+0x800/0x10e0 [ 333.847957][ T32] ? __pfx_kthread+0x10/0x10 [ 333.847971][ T32] ret_from_fork_asm+0x1a/0x30 [ 333.847989][ T32] [ 333.847996][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 334.685453][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 334.696097][ T32] Tainted: [L]=SOFTLOCKUP [ 334.700388][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 334.710417][ T32] Call Trace: [ 334.713671][ T32] [ 334.716585][ T32] dump_stack_lvl+0x100/0x190 [ 334.721241][ T32] vpanic+0x553/0x970 [ 334.725205][ T32] ? __pfx_vpanic+0x10/0x10 [ 334.729691][ T32] panic+0xd1/0xe0 [ 334.733382][ T32] ? __pfx_panic+0x10/0x10 [ 334.737772][ T32] ? nmi_cpu_backtrace+0x79/0x200 [ 334.742772][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 334.748899][ T32] ? watchdog.cold+0x1ec/0x234 [ 334.753636][ T32] watchdog.cold+0x1fd/0x234 [ 334.758199][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 334.763988][ T32] ? __pfx_watchdog+0x10/0x10 [ 334.768636][ T32] ? __kthread_parkme+0x18f/0x230 [ 334.773638][ T32] ? kthread+0x13a/0x450 [ 334.777852][ T32] ? __pfx_watchdog+0x10/0x10 [ 334.782500][ T32] kthread+0x373/0x450 [ 334.786551][ T32] ? __pfx_kthread+0x10/0x10 [ 334.791114][ T32] ret_from_fork+0x730/0xd60 [ 334.795681][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 334.800765][ T32] ? __switch_to+0x800/0x10e0 [ 334.805417][ T32] ? __pfx_kthread+0x10/0x10 [ 334.809980][ T32] ret_from_fork_asm+0x1a/0x30 [ 334.814721][ T32] [ 334.817757][ T32] Kernel Offset: disabled [ 334.822054][ T32] Rebooting in 86400 seconds..