last executing test programs: 4m29.495491251s ago: executing program 1 (id=3971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x2000c851}, 0x4040080) 4m29.456431072s ago: executing program 1 (id=3972): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x28100, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 4m29.373897153s ago: executing program 1 (id=3973): socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xd, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x158}}, 0x0) ioctl(r1, 0xc4c85513, &(0x7f0000000200)) 4m23.561834858s ago: executing program 1 (id=3996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x103496, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x23fd080, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x2940, 0x2, 0x10}, 0x18) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x1, 0x84, &(0x7f0000000040)=[@in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e23, 0x2, @mcast2, 0x8}, @in6={0xa, 0x4e23, 0x5f, @rand_addr=' \x01\x00', 0x400}, @in6={0xa, 0x4e21, 0x8000, @local, 0x1000}, @in={0x2, 0x4e20, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={r2}, &(0x7f00000001c0)=0x8) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000027c0)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 4m23.452445953s ago: executing program 1 (id=3997): mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000080)='V\xed \x17\xcf+\xd2:', 0x3) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, 0x0, 0x0) sendmsg$rds(r1, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48004}, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) timer_create(0x5, 0x0, &(0x7f00000001c0)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/keys\x00', 0x0, 0x0) pread64(r3, &(0x7f00000005c0)=""/224, 0xe0, 0x8d35) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pwritev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)='E', 0x1}], 0x1, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa07, &(0x7f0000000300)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x101000, 0x0) readv(r5, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)=""/203, 0xcb}], 0x2) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000840)=""/88, &(0x7f00000008c0)=""/106, &(0x7f0000000940)=""/90, 0x80a0000}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000ffdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="2e003300d0000000ffffffffffff080211000000505050505050"], 0x4c}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846) 4m23.076596062s ago: executing program 1 (id=3998): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x2000c851}, 0x4040080) 4m22.746336666s ago: executing program 32 (id=3998): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x2000c851}, 0x4040080) 26.594660012s ago: executing program 0 (id=4955): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0xee00, 0xee00, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0xec6) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x8, @private2, 0xa8}}}, 0x84) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f00000000c0)={&(0x7f0000000340)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r1, 0x200, &(0x7f00000004c0)={&(0x7f0000000500)="c94522e546f93f6dedf11f1509685636", 0x60}) mount(&(0x7f0000000240)=@filename='./dev/sda1\x00', &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='ext4\x00', 0x8410, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000400)={0x0, 0x2904c, 0x17, 0x10003, '\x00', [{0x0, 0x5, 0xcd, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x8001}]}) 26.049465219s ago: executing program 0 (id=4959): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f260102030109021200010000000009"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 25.745202698s ago: executing program 4 (id=4965): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendto(r1, &(0x7f0000000000)="340000007b00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x0, 0xd, @remote}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x7b6, 0xc, 0xd, 0x4, 0x10000, 0x0, 0x4, 0x4]}}, 0x5c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x4, 0xb, 0x0, 0x8b, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x9, 0x7, 0x7c, 0x4}, 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r4) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x2, 0xb, 0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x6) shutdown(r3, 0x0) write(r0, &(0x7f0000000180)="841a2220b061b291ebd86c6adba882e488e61aead3fa9754ceedef92b5e6707fa7b3a4a95b0b796603be751975effa56eaf6ec4a576428c825fd0bafba14e80e80b8b94c1361a22bb5c2dd4dcfd5fccc656d54b8c59c8d96b0ad0fb7b5984a6f59a873accd73c841e1caeadbdb8cb9cd6e7902aef40daf74f1cf0548db72fd778073ecc87d2ff0804376629dd76ec1ee4abf904aacd4aaf34272f1f7508468e1baa0ec8472e9e83df675773c09ab806c182832", 0xb3) sendmmsg$inet6(r3, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @loopback, 0x3}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000140)="a311", 0x2}], 0x1}}], 0x1, 0x4008080) getsockname(r0, 0x0, &(0x7f0000000280)) 25.65173672s ago: executing program 4 (id=4967): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000200)={0x3, &(0x7f0000000300)=[{0xa, '\x00', @st={0x4, [{0x1, @uvalue=0x482}, {0x2, @svalue=0x9}, {0x0, @uvalue=0x8}, {0x2, @uvalue=0x6}]}, 0x3}, {0x17, '\x00', @st={0x4, [{0x2, @svalue=0x5787}, {0x1, @uvalue=0x9}, {0x0, @svalue=0x200}, {0x3, @uvalue=0x7ffffffffffffbff}]}}, {0xc, '\x00', @st={0x4, [{0x0, @uvalue=0x9}, {0x0, @svalue=0x5}, {0x3, @svalue=0x6}, {0x3, @svalue=0x1}]}, 0xe6}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c010000010a010800000000000000000200000ad20006008c5088e5a2378fbcc7b60f948dcb433ee580f6142e134d9833d7c4c476b7201850732f489ad8028e066e20762d047e957a34f617dce40b30c463c26e7bb839e78e2773209934f617154e1d5b7ee80cd1e4e7ab92530f15deb27accb8ff3076d97fb59ce5394efb09c51b05419b2419a0fa86c71e15c27b228c71487aff838b13feeb0fb06b79077b1d5181de59444db72f52504a6ad1e12de8801362077e0887fc6189d4a52ec65a921d9ea0fbf6154cb922bddf31f3f04f9fab145475edf5d7eaa8b0af20f6cd702fc270a6f2e10000080002400000000264000600b7819f1319c43b10221135748062399f66f614e3dd2431d78a0dce88217cd70178faf91e563eea25846bf549db3a9ffd327d73f4061a03ecf222f8b4827fa7620001000000000000b5a193aff86de8b46e835370937a38d6a4e0521d6fcd1b71090001"], 0x16c}, 0x1, 0x0, 0x0, 0x40000}, 0x240488c0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0xc, 0x145, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @fd=r1}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0x28}}, 0x2004c000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="4400000010000104000000000000000000000000000000000000000000000000240012000a00010076786c616e00000014000200080007007b00000008000a0001020304", 0x44}], 0x1}, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904"], 0x0) (async, rerun: 64) close(r1) (rerun: 64) 24.606879218s ago: executing program 2 (id=4974): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdadf251d00000008000300", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x20}}, 0x4000) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000201}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='/\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000429bd7000fedbdf250100000005000a005d0000000c0005000400000000000000"], 0x28}}, 0x4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x60, 0x80000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, &(0x7f0000000480)=0x388, 0x4) timer_create(0x7, &(0x7f0000000000)={0x0, 0x31, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r7, 0x0, &(0x7f0000000080)={{0x0, 0x989680}}, &(0x7f00000000c0)) connect$bt_sco(r5, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 24.477647467s ago: executing program 2 (id=4976): r0 = userfaultfd(0x80801) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000004100070127bd7000fefdffff047c000008004280040008000c0009800600cc00800a0000180002"], 0x40}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000574000/0x1000)=nil, 0x1000}}) 24.134450523s ago: executing program 4 (id=4978): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000480)=[{&(0x7f00000004c0)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000002c0)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "a1c15bf6e37a5c23", "26d89cfcd15121f85ce717bf8b37308e", "6ab10126", "2f79cf6bffbf43fc"}, 0x28) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x32c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10, 0x4}}}}}]}}]}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x1b) io_setup(0x251, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000400)=[&(0x7f0000000440)={0x25, 0x0, 0x41, 0x1, 0x0, r3, 0x0, 0x0, 0x4000}]) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r1, &(0x7f0000000480)=[{&(0x7f00000004c0)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x3) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) (async) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)='n', 0x1}], 0x1}, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000002c0)={0x0, 0x9, 0x7a8, 0x6}, 0x14) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "a1c15bf6e37a5c23", "26d89cfcd15121f85ce717bf8b37308e", "6ab10126", "2f79cf6bffbf43fc"}, 0x28) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x32c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10, 0x4}}}}}]}}]}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) creat(&(0x7f0000000380)='./bus\x00', 0x1b) (async) io_setup(0x251, &(0x7f00000003c0)) (async) io_submit(r4, 0x1, &(0x7f0000000400)=[&(0x7f0000000440)={0x25, 0x0, 0x41, 0x1, 0x0, r3, 0x0, 0x0, 0x4000}]) (async) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) (async) 24.0297701s ago: executing program 2 (id=4979): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) rmdir(&(0x7f0000000380)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='./file1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/acpi/parameters/ec_event_clearing\x00', 0x1, 0x0) write$9p(r3, &(0x7f00000000c0)="cbee80a0d9", 0x5) ioctl$UBLK_U_IO_COMMIT_AND_FETCH_REQ(r3, 0xc0107521, &(0x7f0000001480)={0x0, 0xf3, 0x8370, &(0x7f0000000480)=@buf_1k="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"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000400)="3e362e660f3881a6f3ffff7fc4e143af7de6e60fbaac07c7fa7e520d0fc7b38000c0fe66b8a8008ec8c4e2d9a622660f3882a005000000c744240000000000c744240205000000660f68f50f011c240f01cac4e1fa7f1dfeab0000", 0x5b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23.863261453s ago: executing program 2 (id=4980): r0 = open(&(0x7f0000000740)='./file0\x00', 0x60840, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) getsockname(r1, 0x0, &(0x7f00000002c0)) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23.862180666s ago: executing program 3 (id=4981): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x20241, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x81, 0xfffffbff, 0x40006}) (async) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, 0x0) (async) r1 = socket(0x1d, 0x2, 0x6) (async) r2 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r2, &(0x7f0000000100)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x33f81def, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000180)) (async) setsockopt$ALG_SET_KEY(r1, 0x6a, 0x1, 0x0, 0xc) (async) syz_open_dev$vcsu(&(0x7f0000000540), 0x5, 0x80000) (async) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000002c0), &(0x7f0000000340)=0x4) r3 = syz_open_dev$usbfs(&(0x7f0000000380), 0xffffffffffffffff, 0x1781) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000003c0)=@urb_type_control={0x2, {0x7}, 0x452, 0x7, &(0x7f0000000400)={0x0, 0x17, 0x6, 0x3, 0x3}, 0x8, 0x6, 0x7ff, 0x0, 0x3, 0x1, &(0x7f0000000440)="73967e79d63c047bcf0b2f392ccb607db8f705cd668c4f5dd8295b015f30b5c6d737d4a4c2ea665c2874e73360d732cf2d72fd820f25606f6b9cd41579234b2ac026bd5346c4a38a14dbef1afc0461b8d880ef2c46f48a5f844bdfb74308ae525a65aa72dd3c85abc58ce54f3cac296ea23d8d957df00c6cae0a15a9cca9cf9cc2158751781a447f2715423f6f3a5874b65d1c1eea4ff44ed1024d19a4f8dfeab0e5f71b9feb718c1321bff318e97dc83c1e8d6ee68f2cc89a7225cba87cb23a4b0ae0d31b63e59d07db64df144f09d02b809f3e689c05e468224ad39638d3b8bccbd37e86a2add83edfc0"}) (async) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000200)={0x1d, r5, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1e0}, 0x1, 0x0, 0x0, 0x8005}, 0x40084) landlock_restrict_self(0xffffffffffffffff, 0xc) (async) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, &(0x7f0000000300)=0xa) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) 23.660035053s ago: executing program 2 (id=4982): r0 = socket(0xa, 0x3, 0x87) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010f3044d0700000000000109022400010000200009040103020300020009210000401322180009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000380)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="200e04000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000004c0)={0x84, &(0x7f00000005c0)=ANY=[@ANYBLOB="400c00000000cea27799fb142def2c2d47ed0f5914890fdaa93a47597084bc854bd46d4854c0ac5c72f7fff858f93281342e4306d99aa9d0f414c076d695edc75749f624b5d6425a898329cbe500ed8a94c859a34fe1bded2f16a2d44fe57d24dab3ff69208496bdf1cbb62faef5705c222739a785dae4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x41000, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f00000000c0)={0x3, 0x0, 0x2000000}) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f0000000040)={0x10000112}) r4 = epoll_create1(0x0) epoll_pwait(r4, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x6003c0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES64=r5], 0xb2) 22.862910164s ago: executing program 3 (id=4983): r0 = openat$kvm(0xffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x102080, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2840, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000100)="f26d0f38cb960800440f20c066350f000000440f22c0f30f08ad660f38dce3f2af260fa166b8000000800f23c00f21f86635000001000f23f86565f2ab", 0x3d}], 0x1, 0x29, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000240)={{0x2000, 0x30000, 0x8, 0xd, 0x3, 0xe5, 0x40, 0x2d, 0x0, 0x30, 0x19}, {0x10000, 0x4, 0xe, 0x0, 0x40, 0x3, 0x7e, 0x9, 0x58, 0x3, 0x23, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x30000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xe}, {0x0, 0x0, 0x10, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x47, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0x13, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x800b000, 0xe, 0x15, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xe000, 0x2d}, {0x0, 0x7fff}, 0x22, 0x0, 0x8000000, 0x42024, 0x9, 0xa801, 0x3000, [0x6840000000000002, 0x3, 0x91, 0xff]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 22.77276508s ago: executing program 0 (id=4984): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) ftruncate(r0, 0x87) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r1, 0x10e, 0x3, 0x0, &(0x7f00000001c0)) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f00030100000009"], 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f0000000180)=0x8, 0x4) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x44c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140), 0x6) ioctl$sock_bt_hci(r4, 0x800448d5, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000900)={0x9}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000940)={[{0x10000, 0xc000, 0x4, 0xfb, 0x1, 0x8, 0x3, 0xa, 0x2, 0x6, 0x12, 0x5, 0x40}, {0x8, 0x2, 0x1, 0x4d, 0x7, 0x0, 0x44, 0x9, 0x9, 0xc, 0x6, 0x6f, 0x20e}, {0x0, 0x5, 0x38, 0x4, 0x84, 0x7, 0x3, 0x50, 0xc, 0x2, 0x7, 0x8, 0x20024a9}], 0xdfffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000009c0)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000a00)={[0x60800000001, 0xd6, 0x801, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x3, 0x206, 0x4000000000000f, 0x5, 0x8000000000000006, 0x7, 0x48000000000, 0x6, 0xf73c], 0x80a0000, 0x40}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\t', @ANYRES64=0x0], 0x48}}, 0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x3f9, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) 22.560989161s ago: executing program 3 (id=4985): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x40, @mcast2, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) socket$packet(0x11, 0x2, 0x300) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='100', 0x3) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0xc000) 22.223392098s ago: executing program 3 (id=4986): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f00000000c0)=ANY=[]) setresgid(0xffffffffffffffff, 0xee01, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2000010, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002280)={0x50, 0x0, r2, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000002300)="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", 0x2000, &(0x7f0000004300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000043c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./file0\x00', 0x22801, 0x0) ioctl$OCFS2_IOC_REFLINK(r3, 0x40186f04, 0x0) fsopen(&(0x7f0000000000)='ubifs\x00', 0x0) 20.952174142s ago: executing program 4 (id=4987): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) setns(0xc9, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) getsockopt$inet6_buf(r2, 0x29, 0x18, 0x0, &(0x7f00000000c0)) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 20.858030123s ago: executing program 4 (id=4988): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x7420, 0xf58, 0x8) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) timer_create(0xb, &(0x7f0000000680)={0x0, 0xf, 0x1}, &(0x7f00000006c0)=0x0) timer_settime(r4, 0x0, &(0x7f0000000700)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000740)={{}, {0x77359400}}, &(0x7f0000000780)) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00220500ffff8278e7a687"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='0 0 -', 0x5) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) socket(0xa, 0x3, 0x3a) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/raw6\x00') socket$igmp6(0xa, 0x3, 0x2) preadv(r8, &(0x7f0000000280)=[{&(0x7f0000000540)=""/275, 0x113}], 0x1, 0x1000a3, 0xf9f) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) 20.291298648s ago: executing program 2 (id=4989): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x5b24, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2503feffffff0000000016000000140001800d0001007564703a73797a506b"], 0x28}}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="5c00000011006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af36514001ac0080002008100030006a101c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) 19.529807128s ago: executing program 0 (id=4990): r0 = open(&(0x7f0000000740)='./file0\x00', 0x60840, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) getsockname(r1, 0x0, &(0x7f00000002c0)) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19.239891833s ago: executing program 0 (id=4991): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./proc\x00', 0x2000, 0x118) r1 = openat(r0, &(0x7f0000001d80)='./proc/thread-self/fail-nth\x00', 0x802, 0x0) write(r1, &(0x7f0000001dc0)='7', 0x6) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffffd) 19.141145993s ago: executing program 0 (id=4992): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f260102030109021200010000000009"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 18.808874489s ago: executing program 3 (id=4993): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0xa96) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x4) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) splice(r1, &(0x7f0000000000)=0xa, r2, &(0x7f0000000080)=0x10, 0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x2004c000, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=@expire={0xfc, 0x18, 0x60c, 0x70bd28, 0x25dfdbfc, {{{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010101, 0x4e21, 0x1, 0x4e22, 0x101, 0xa, 0xa0, 0xa0, 0x0, r3, r4}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@local, {0x4, 0x2, 0x5, 0x5, 0xe890, 0x3, 0x8, 0x5}, {0x7, 0x1, 0x1000, 0x80}, {0x100, 0xa, 0x6}, 0x70bd2b, 0x3500, 0x0, 0x965453431c2e7c66, 0x4, 0x28}, 0xf}, [@iptfs_dont_frag={0x4}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4004}, 0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r5, 0x0, 0xf3a, 0x0) 18.59331789s ago: executing program 4 (id=4994): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) munlock(&(0x7f0000003000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) (async) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120150026ae63240cd0c800086b201020301090224000202ecb08d0904"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) r1 = socket$netlink(0x10, 0x3, 0x0) (async) syz_clone(0x110c8000, &(0x7f0000000240)="2de728bd92e9f3e74fec09d9b5e5e586ab39766e03c512231afdb29ac2db404fa72f53d663795d0550824df6bd7f6bffc100ccd602154a83e7971fdce239e6ad787b6ed283eb896d1fcc69537b697595b5cfa3252b54873ecba5addceb7711d5a4528d001d075400f5a0bc7e1dee6fb78cfc62ca35ac7e44f0865b59a1c19a1889366d0d22f53718ea92dc6c3c", 0x8d, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="85fade9fea44bbb0f5d3015a4714dc877577db7c73b4c901b3536cc6fb56d386aa8a24999ef72c40245821ac1c070624ced5b37ddf4174e616254848bbc2083e9cef31098b47b3d9c69480126a016cdce7421c663d1490af2c0fa5bf31191e16ffe2141baff114256cb2bfdc0c843392eac06910dbb4df9e5a63779000fe65fe554f7b8614c47c10280be3549e8319fd69257a7ed9babeaa82c12bd3277335409f87e433bf0995b6ee41a5b3ae4e4b0d684d2311cb7f93a2faa9a33464d715ff7f6c5ec7d7a2c186e8a02e75c07482d4cd4c") (async) syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x400) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x91}, 0x20040080) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000480)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000004c0), 0x4) (async) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000500)="020000000980ffff", 0x8) (async) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="201108000000eb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 18.468431984s ago: executing program 3 (id=4995): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8f}, "7ae830548bbe9f563574b235fbb15904ed04debf3b7b903d58bfa53ba48ec672ebfbaa55b5362c36d59b95fae9bb6ae283d54258ec90767da0d913cf1468504141a92064c2555bd03e9dba7f3e82b8788de15ee3eda55424bad88edd1f9f04ad2fe322c26eb1d874ecb0033fa8a48522ed2bcdd44338d3128a5e55d2fe96ff6facd4026ea43f19b1b0c9984f87b984"}, 0x93) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x48, 0x1, 0x200000, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x10, 0x0, 0x0, @u32}, @nested={0x4, 0x1}]}, 0x20}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89a2, &(0x7f00000002c0)={'bridge0\x00', @ifru_ivalue=0x8}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601020000000000000000000000000c000780080012400000000616000300686173683a6e65742c706f72742c6e6574000000050005000a000000"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000200)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000000a00)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0xfe, "d92984bd1ca44c226af5160e961711a07775b78411e08509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r4, 0xf5f) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000a80)={0x1, &(0x7f0000000ac0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x280, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000640)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000b00)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000b40)={0x3, 0x0, 0x2000000}) setsockopt$inet6_buf(r3, 0x29, 0x1f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000005c0)={0x1}, 0x4) r9 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f00000008c0)='127.0.0.1:/export\x00', &(0x7f0000000900)='./mnt\x00', &(0x7f0000000940), 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,lock']) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x40, 0x3, 0xfffffffffffffffe, 0x1, 0x4, 0x1}, {0x2, 0x200, 0x8, 0x3}, 0x0, 0x6e6bb0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0xfffffffd, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x28}, 0x1000, 0x3, 0x3, 0xb9, 0x2, 0x8000000}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x4008810) 0s ago: executing program 33 (id=4989): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x5b24, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2503feffffff0000000016000000140001800d0001007564703a73797a506b"], 0x28}}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="5c00000011006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af36514001ac0080002008100030006a101c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) kernel console output (not intermixed with test programs): T9] usb 3-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 989.867372][ T9] usb 3-1: no configurations [ 989.867386][ T9] usb 3-1: can't read configurations, error -22 [ 989.867694][ T9] usb usb3-port1: unable to enumerate USB device [ 990.006293][T18678] FAULT_INJECTION: forcing a failure. [ 990.006293][T18678] name failslab, interval 1, probability 0, space 0, times 0 [ 990.006331][T18678] CPU: 1 UID: 0 PID: 18678 Comm: syz.0.4696 Tainted: G L syzkaller #0 PREEMPT(full) [ 990.006365][T18678] Tainted: [L]=SOFTLOCKUP [ 990.006374][T18678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 990.006389][T18678] Call Trace: [ 990.006399][T18678] [ 990.006409][T18678] dump_stack_lvl+0xe8/0x150 [ 990.006451][T18678] should_fail_ex+0x3eb/0x540 [ 990.006486][T18678] should_failslab+0xa8/0x100 [ 990.006520][T18678] __kmalloc_cache_noprof+0x9e/0x600 [ 990.006547][T18678] ? alloc_fs_context+0x66/0xd00 [ 990.006575][T18678] ? alloc_fs_context+0x66/0xd00 [ 990.006604][T18678] ? __get_fs_type+0x21/0x280 [ 990.006644][T18678] alloc_fs_context+0x66/0xd00 [ 990.006670][T18678] ? __get_fs_type+0x267/0x280 [ 990.006693][T18678] ? __get_fs_type+0x21/0x280 [ 990.006726][T18678] do_new_mount+0x177/0xb00 [ 990.006754][T18678] ? __pfx_do_new_mount+0x10/0x10 [ 990.006778][T18678] ? ns_capable+0x84/0xe0 [ 990.006808][T18678] ? path_mount+0x647/0x1050 [ 990.006835][T18678] ? user_path_at+0xd4/0x160 [ 990.006865][T18678] __se_sys_mount+0x31d/0x420 [ 990.006896][T18678] ? __pfx___se_sys_mount+0x10/0x10 [ 990.006927][T18678] ? __x64_sys_mount+0x20/0xc0 [ 990.006955][T18678] do_syscall_64+0x166/0x520 [ 990.006987][T18678] ? trace_irq_disable+0x3b/0x140 [ 990.007014][T18678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.007046][T18678] ? clear_bhb_loop+0x70/0xc0 [ 990.007075][T18678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.007099][T18678] RIP: 0033:0x7f83a179f559 [ 990.007122][T18678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.007143][T18678] RSP: 002b:00007f83a2658028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 990.007170][T18678] RAX: ffffffffffffffda RBX: 00007f83a1a25fa0 RCX: 00007f83a179f559 [ 990.007191][T18678] RDX: 0000200000000500 RSI: 00002000000004c0 RDI: 0000000000000000 [ 990.007207][T18678] RBP: 00007f83a1836b20 R08: 0000000000000000 R09: 0000000000000000 [ 990.007222][T18678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 990.007236][T18678] R13: 00007f83a1a26038 R14: 00007f83a1a25fa0 R15: 00007fff82af3d48 [ 990.007273][T18678] [ 990.552741][T18692] jffs2: notice: (18692) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 990.614976][T18507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 990.754976][T18507] veth0_vlan: entered promiscuous mode [ 990.792488][T18507] veth1_vlan: entered promiscuous mode [ 990.854548][ T1718] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 990.882849][T18507] veth0_macvtap: entered promiscuous mode [ 990.896651][T18507] veth1_macvtap: entered promiscuous mode [ 990.924480][T18507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 990.950809][T18507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.027465][T17358] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.027534][T17358] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.027631][T17358] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.027669][T17358] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.030484][ T1718] usb 1-1: unable to get BOS descriptor or descriptor too short [ 991.030550][ T1718] usb 1-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00 [ 991.036270][ T1718] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 991.106464][T16394] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 991.112485][ T1718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 991.112527][ T1718] usb 1-1: Product: syz [ 991.112544][ T1718] usb 1-1: Manufacturer: syz [ 991.195122][ T1718] uvcvideo 1-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 991.195344][ T1718] uvcvideo 1-1:1.0: No streaming interface found for terminal 32770. [ 991.248755][T17358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.248782][T17358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.273458][T17339] Bluetooth: hci4: command tx timeout [ 991.274301][T16394] usb 5-1: Using ep0 maxpacket: 16 [ 991.278141][T16394] usb 5-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 991.281067][T16394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 991.286762][T16394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.286866][T16394] usb 5-1: Product: syz [ 991.286914][T16394] usb 5-1: Manufacturer: syz [ 991.286957][T16394] usb 5-1: SerialNumber: syz [ 991.321328][T16394] usb 5-1: config 0 descriptor?? [ 991.359802][T16394] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 991.359842][T16394] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 991.415670][T17374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.415694][T17374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.728749][T18692] overlayfs: upper fs does not support tmpfile. [ 991.743606][T18692] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 991.803722][ T5746] usb 1-1: USB disconnect, device number 56 [ 991.973754][T16394] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 992.263153][ T10] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 992.399392][T16394] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 992.399428][T16394] em28xx 5-1:0.0: board has no eeprom [ 992.417756][ T10] usb 4-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 992.419469][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 992.419494][ T10] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 992.453628][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.453659][ T10] usb 4-1: Product: syz [ 992.453677][ T10] usb 4-1: Manufacturer: syz [ 992.453694][ T10] usb 4-1: SerialNumber: syz [ 992.672926][ T10] usb 4-1: USB disconnect, device number 59 [ 992.703294][T16394] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 992.703327][T16394] em28xx 5-1:0.0: dvb set to bulk mode. [ 992.704679][ T1718] em28xx 5-1:0.0: Binding DVB extension [ 993.058049][ T5746] usb 5-1: USB disconnect, device number 95 [ 993.072933][ T5746] em28xx 5-1:0.0: Disconnecting em28xx [ 993.176779][ T1718] em28xx 5-1:0.0: Registering input extension [ 993.179556][ T5746] em28xx 5-1:0.0: Closing input extension [ 993.230503][ T5746] em28xx: Freeing device [ 993.344956][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.345013][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.447583][ T32] audit: type=1800 audit(1792816965.090:83): pid=18726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4704" name="syzkaller0" dev="sda1" ino=2051 res=0 errno=-4 [ 993.753943][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 993.903178][ T10] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 993.904068][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 993.905028][ T9] usb 4-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 993.905069][ T9] usb 4-1: no configurations [ 993.905083][ T9] usb 4-1: can't read configurations, error -22 [ 994.034240][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 994.053911][ T10] usb 3-1: New USB device found: idVendor=1199, idProduct=b000, bcdDevice=0.00 [ 994.054837][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 994.054856][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 994.054885][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.153346][T13825] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 994.183290][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 994.183938][ T9] usb 4-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 994.183982][ T9] usb 4-1: no configurations [ 994.184003][ T9] usb 4-1: can't read configurations, error -22 [ 994.184319][ T9] usb usb4-port1: attempt power cycle [ 994.233184][ T10] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 994.260971][ T5746] usb 3-1: USB disconnect, device number 91 [ 994.304119][T13825] usb 5-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 994.305585][T13825] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 994.305611][T13825] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 994.307886][T13825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.307913][T13825] usb 5-1: Product: syz [ 994.307936][T13825] usb 5-1: Manufacturer: syz [ 994.307948][T13825] usb 5-1: SerialNumber: syz [ 994.383978][ T10] usb 1-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 994.385082][ T10] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 994.385110][ T10] usb 1-1: config 1 has no interface number 0 [ 994.387590][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.387617][ T10] usb 1-1: Product: syz [ 994.387634][ T10] usb 1-1: Manufacturer: syz [ 994.387657][ T10] usb 1-1: SerialNumber: syz [ 994.441249][ T10] usb 1-1: skipping empty audio interface (v1) [ 994.484532][ T10] snd-usb-audio 1-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 994.511354][T14167] udevd[14167]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 994.523454][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 994.531165][ T10] usb 5-1: USB disconnect, device number 96 [ 994.547025][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 994.549148][ T9] usb 4-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 994.549178][ T9] usb 4-1: no configurations [ 994.549188][ T9] usb 4-1: can't read configurations, error -22 [ 994.596352][ T5746] usb 1-1: USB disconnect, device number 57 [ 994.673266][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 994.694953][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 994.695564][ T9] usb 4-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 994.695604][ T9] usb 4-1: no configurations [ 994.695614][ T9] usb 4-1: can't read configurations, error -22 [ 994.695874][ T9] usb usb4-port1: unable to enumerate USB device [ 994.826379][T18783] 9p: Unknown access argument 18446744073709551615: -34 [ 995.195558][T18791] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4721'. [ 995.414956][ T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 995.563191][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 995.563956][ T9] usb 1-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 995.567785][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 995.570163][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.570190][ T9] usb 1-1: Product: syz [ 995.570205][ T9] usb 1-1: Manufacturer: syz [ 995.570222][ T9] usb 1-1: SerialNumber: syz [ 995.598381][ T9] usb 1-1: config 0 descriptor?? [ 995.629791][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 995.629829][ T9] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 995.793188][ T5746] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 995.944182][ T5746] usb 3-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 995.947103][ T5746] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 995.947126][ T5746] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 995.949872][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.949906][ T5746] usb 3-1: Product: syz [ 995.949922][ T5746] usb 3-1: Manufacturer: syz [ 995.949941][ T5746] usb 3-1: SerialNumber: syz [ 996.181025][ T5746] usb 3-1: USB disconnect, device number 92 [ 996.236970][ T9] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 996.360954][ T32] audit: type=1800 audit(1792816968.000:84): pid=18802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4728" name="syzkaller0" dev="sda1" ino=2051 res=0 errno=-4 [ 996.361508][ T32] audit: type=1800 audit(1792816968.000:85): pid=18805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4728" name="syzkaller0" dev="sda1" ino=2051 res=0 errno=-4 [ 996.652024][ T9] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 996.652067][ T9] em28xx 1-1:0.0: board has no eeprom [ 996.873286][T18814] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4733'. [ 996.982192][ T5744] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 997.075279][ T9] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 997.075304][ T9] em28xx 1-1:0.0: dvb set to bulk mode. [ 997.076146][T13825] em28xx 1-1:0.0: Binding DVB extension [ 997.220300][ T5744] usb 4-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 997.221972][ T5744] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 997.222011][ T5744] usb 4-1: config 1 has no interface number 0 [ 997.249652][ T5744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.249684][ T5744] usb 4-1: Product: syz [ 997.249730][ T5744] usb 4-1: Manufacturer: syz [ 997.249747][ T5744] usb 4-1: SerialNumber: syz [ 997.284769][ T5744] usb 4-1: skipping empty audio interface (v1) [ 997.388808][T17823] usb 1-1: USB disconnect, device number 58 [ 997.391697][T17823] em28xx 1-1:0.0: Disconnecting em28xx [ 997.407150][ T5744] snd-usb-audio 4-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 997.477642][T13825] em28xx 1-1:0.0: Registering input extension [ 997.477899][T17823] em28xx 1-1:0.0: Closing input extension [ 997.496927][T14167] udevd[14167]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 997.540943][ T5746] usb 4-1: USB disconnect, device number 64 [ 997.561704][T17823] em28xx: Freeing device [ 998.053193][T17823] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 998.159146][T18843] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4742'. [ 998.203203][T17823] usb 5-1: Using ep0 maxpacket: 32 [ 998.204040][T17823] usb 5-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 998.204070][T17823] usb 5-1: no configurations [ 998.204080][T17823] usb 5-1: can't read configurations, error -22 [ 998.213189][ T5747] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 998.334215][T17823] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 998.406369][ T5747] usb 1-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 998.408056][ T5747] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 998.408094][ T5747] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 998.411413][ T5747] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.411440][ T5747] usb 1-1: Product: syz [ 998.411456][ T5747] usb 1-1: Manufacturer: syz [ 998.411471][ T5747] usb 1-1: SerialNumber: syz [ 998.494033][T17823] usb 5-1: Using ep0 maxpacket: 32 [ 998.494766][T17823] usb 5-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 998.494808][T17823] usb 5-1: no configurations [ 998.494824][T17823] usb 5-1: can't read configurations, error -22 [ 998.495100][T17823] usb usb5-port1: attempt power cycle [ 998.702384][ T5744] usb 1-1: USB disconnect, device number 59 [ 998.833373][T17823] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 998.853962][T17823] usb 5-1: Using ep0 maxpacket: 32 [ 998.854617][T17823] usb 5-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 998.854646][T17823] usb 5-1: no configurations [ 998.854656][T17823] usb 5-1: can't read configurations, error -22 [ 998.983346][T17823] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 999.006877][T17823] usb 5-1: Using ep0 maxpacket: 32 [ 999.007716][T17823] usb 5-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 999.007757][T17823] usb 5-1: no configurations [ 999.007767][T17823] usb 5-1: can't read configurations, error -22 [ 999.008091][T17823] usb usb5-port1: unable to enumerate USB device [ 999.018693][ T5747] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 999.053950][ T5746] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 999.203247][ T5747] usb 3-1: Using ep0 maxpacket: 16 [ 999.204216][ T5746] usb 4-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 999.204447][ T5747] usb 3-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 999.205611][ T5746] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 999.205637][ T5746] usb 4-1: config 1 has no interface number 0 [ 999.205909][ T5747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 999.209332][ T5747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.209366][ T5747] usb 3-1: Product: syz [ 999.209412][ T5747] usb 3-1: Manufacturer: syz [ 999.209429][ T5747] usb 3-1: SerialNumber: syz [ 999.210977][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.211004][ T5746] usb 4-1: Product: syz [ 999.211022][ T5746] usb 4-1: Manufacturer: syz [ 999.211040][ T5746] usb 4-1: SerialNumber: syz [ 999.319375][ T5747] usb 3-1: config 0 descriptor?? [ 999.334587][ T5747] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 999.334627][ T5747] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 999.335128][ T5746] usb 4-1: skipping empty audio interface (v1) [ 999.415318][ T5746] snd-usb-audio 4-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 999.456791][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 999.528796][ T5746] usb 4-1: USB disconnect, device number 65 [ 999.926207][T18871] jffs2: notice: (18871) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 4 orphan) and 4 of xref (1 dead, 3 orphan) found. [ 999.931894][ T5747] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1000.324304][ T5746] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1000.345703][ T5747] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1000.345737][ T5747] em28xx 3-1:0.0: board has no eeprom [ 1000.488936][ T5746] usb 1-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 1000.490373][ T5746] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.490402][ T5746] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1000.503500][ T5746] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.503533][ T5746] usb 1-1: Product: syz [ 1000.503550][ T5746] usb 1-1: Manufacturer: syz [ 1000.503565][ T5746] usb 1-1: SerialNumber: syz [ 1000.633203][ T5747] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1000.633236][ T5747] em28xx 3-1:0.0: dvb set to bulk mode. [ 1000.634311][ T5746] em28xx 3-1:0.0: Binding DVB extension [ 1000.756073][ T5747] usb 1-1: USB disconnect, device number 60 [ 1000.964243][ T1718] usb 3-1: USB disconnect, device number 93 [ 1000.967076][ T1718] em28xx 3-1:0.0: Disconnecting em28xx [ 1001.022574][ T5746] em28xx 3-1:0.0: Registering input extension [ 1001.022831][ T1718] em28xx 3-1:0.0: Closing input extension [ 1001.062735][ T1718] em28xx: Freeing device [ 1001.173205][T17823] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1001.326785][T17823] usb 4-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 1001.328267][T17823] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 1001.328295][T17823] usb 4-1: config 1 has no interface number 0 [ 1001.332226][T17823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.332258][T17823] usb 4-1: Product: syz [ 1001.332275][T17823] usb 4-1: Manufacturer: syz [ 1001.332292][T17823] usb 4-1: SerialNumber: syz [ 1001.385229][T17823] usb 4-1: skipping empty audio interface (v1) [ 1001.490364][T17823] snd-usb-audio 4-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 1001.552012][T14167] udevd[14167]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1001.602262][T17823] usb 4-1: USB disconnect, device number 66 [ 1001.833252][ T5746] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1001.983196][ T5746] usb 1-1: Using ep0 maxpacket: 32 [ 1001.985200][ T5746] usb 1-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1001.986513][ T5746] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.986542][ T5746] usb 1-1: config 0 has no interfaces? [ 1001.990647][ T5746] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.990678][ T5746] usb 1-1: Product: syz [ 1001.990694][ T5746] usb 1-1: Manufacturer: syz [ 1001.990711][ T5746] usb 1-1: SerialNumber: syz [ 1002.050320][ T5746] usb 1-1: config 0 descriptor?? [ 1002.853648][T17823] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1003.004459][T17823] usb 3-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 1003.005531][T17823] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.005557][T17823] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1003.010787][T17823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.010815][T17823] usb 3-1: Product: syz [ 1003.010832][T17823] usb 3-1: Manufacturer: syz [ 1003.010848][T17823] usb 3-1: SerialNumber: syz [ 1003.128980][ T32] audit: type=1800 audit(1792816974.770:86): pid=18918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4775" name="syzkaller0" dev="sda1" ino=2051 res=0 errno=-4 [ 1003.313246][T17823] usb 3-1: USB disconnect, device number 94 [ 1003.643178][ T5746] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1003.793236][ T5746] usb 4-1: Using ep0 maxpacket: 16 [ 1003.794020][ T5746] usb 4-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1003.794938][ T5746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1003.796735][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.796762][ T5746] usb 4-1: Product: syz [ 1003.796778][ T5746] usb 4-1: Manufacturer: syz [ 1003.796794][ T5746] usb 4-1: SerialNumber: syz [ 1003.799129][ T5746] usb 4-1: config 0 descriptor?? [ 1003.856107][ T5746] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1003.856150][ T5746] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1003.943660][T17823] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 1004.073292][T17823] usb 5-1: device descriptor read/64, error -71 [ 1004.100519][T18953] FAULT_INJECTION: forcing a failure. [ 1004.100519][T18953] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.100569][T18953] CPU: 1 UID: 0 PID: 18953 Comm: syz.2.4788 Tainted: G L syzkaller #0 PREEMPT(full) [ 1004.100593][T18953] Tainted: [L]=SOFTLOCKUP [ 1004.100600][T18953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1004.100611][T18953] Call Trace: [ 1004.100618][T18953] [ 1004.100626][T18953] dump_stack_lvl+0xe8/0x150 [ 1004.100657][T18953] should_fail_ex+0x3eb/0x540 [ 1004.100684][T18953] should_failslab+0xa8/0x100 [ 1004.100707][T18953] ? alloc_empty_file+0x5b/0x1d0 [ 1004.100805][T18953] kmem_cache_alloc_noprof+0x9c/0x600 [ 1004.100832][T18953] ? stack_depot_save_flags+0x33/0x810 [ 1004.100879][T18953] ? alloc_empty_file+0x5b/0x1d0 [ 1004.100907][T18953] alloc_empty_file+0x5b/0x1d0 [ 1004.100933][T18953] path_openat+0x96/0x20f0 [ 1004.100972][T18953] do_file_open+0x23e/0x4a0 [ 1004.100998][T18953] ? __pfx_do_file_open+0x10/0x10 [ 1004.101034][T18953] ? _raw_spin_unlock+0x28/0x50 [ 1004.101056][T18953] ? alloc_fd+0x6af/0x760 [ 1004.101080][T18953] do_sys_openat2+0x115/0x200 [ 1004.101124][T18953] ? __pfx_do_sys_openat2+0x10/0x10 [ 1004.101155][T18953] ? do_user_addr_fault+0xd3f/0x1480 [ 1004.101176][T18953] __x64_sys_openat+0x138/0x170 [ 1004.101205][T18953] do_syscall_64+0x166/0x520 [ 1004.101228][T18953] ? trace_irq_disable+0x3b/0x140 [ 1004.101247][T18953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.101264][T18953] ? clear_bhb_loop+0x70/0xc0 [ 1004.101283][T18953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.101300][T18953] RIP: 0033:0x7fafe615fd8e [ 1004.101315][T18953] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1004.101330][T18953] RSP: 002b:00007fafe70feea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1004.101348][T18953] RAX: ffffffffffffffda RBX: 00007fafe71016c0 RCX: 00007fafe615fd8e [ 1004.101367][T18953] RDX: 0000000000000002 RSI: 00007fafe6235eb2 RDI: ffffffffffffff9c [ 1004.101378][T18953] RBP: 00007fafe6236b20 R08: 0000000000000000 R09: 0000000000000000 [ 1004.101395][T18953] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000e2 [ 1004.101406][T18953] R13: 00002000000006c0 R14: 0000000000000005 R15: 00007ffdaeb81a68 [ 1004.101430][T18953] [ 1004.373318][T17823] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 1004.412550][ T5746] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1004.503211][T17823] usb 5-1: device descriptor read/64, error -71 [ 1004.616043][ T1718] usb 1-1: USB disconnect, device number 61 [ 1004.632130][T17823] usb usb5-port1: attempt power cycle [ 1004.819475][ T5746] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1004.819501][ T5746] em28xx 4-1:0.0: board has no eeprom [ 1004.983216][ T1718] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1004.983347][T17823] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 1005.013921][T17823] usb 5-1: device descriptor read/8, error -71 [ 1005.133214][ T1718] usb 1-1: Using ep0 maxpacket: 8 [ 1005.134097][ T1718] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1005.135503][ T1718] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1005.135551][ T1718] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1005.135576][ T1718] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1005.135619][ T1718] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1005.135645][ T1718] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1005.135693][ T1718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.187801][ T5746] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1005.187833][ T5746] em28xx 4-1:0.0: dvb set to bulk mode. [ 1005.234664][ T5747] em28xx 4-1:0.0: Binding DVB extension [ 1005.253332][T17823] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 1005.279722][T17823] usb 5-1: device descriptor read/8, error -71 [ 1005.344611][ T1718] usb 1-1: usb_control_msg returned -32 [ 1005.344668][ T1718] usbtmc 1-1:16.0: can't read capabilities [ 1005.383853][T17823] usb usb5-port1: unable to enumerate USB device [ 1005.731503][T18961] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1005.872371][T18961] md/raid10:md0: not clean -- starting background reconstruction [ 1005.872398][T18961] md/raid10:md0: active with 1 out of 2 devices [ 1005.891903][T18961] md0: detected capacity change from 0 to 2048 [ 1005.926750][T18964] md_update_sb: can't update sb for read-only array md0 [ 1005.929422][T18961] usbtmc 1-1:16.0: stb usb_control_msg returned -32 [ 1005.944128][T17823] usb 1-1: USB disconnect, device number 62 [ 1006.304581][T18942] em28xx 4-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 1006.305785][T17823] usb 4-1: USB disconnect, device number 67 [ 1006.308850][T17823] em28xx 4-1:0.0: Disconnecting em28xx [ 1006.364682][ T5747] em28xx 4-1:0.0: Registering input extension [ 1006.365610][T17823] em28xx 4-1:0.0: Closing input extension [ 1006.390472][T17823] em28xx: Freeing device [ 1007.109848][T17326] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1007.122135][ T5747] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1007.122403][T17326] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1007.129476][T17326] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1007.141097][T17326] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1007.155262][T17326] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1007.182609][T18987] netlink: 'syz.3.4798': attribute type 2 has an invalid length. [ 1007.235771][T18987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4798'. [ 1007.284083][ T5747] usb 5-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 1007.285144][ T5747] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.285171][ T5747] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1007.287596][ T5747] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.287625][ T5747] usb 5-1: Product: syz [ 1007.287643][ T5747] usb 5-1: Manufacturer: syz [ 1007.287659][ T5747] usb 5-1: SerialNumber: syz [ 1007.571256][ T5747] usb 5-1: USB disconnect, device number 105 [ 1007.921248][T17374] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.003009][T18985] rxe_eth0 speed is unknown, defaulting to 1000 [ 1008.078138][T17374] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.203736][T17823] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1008.280248][T17374] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.353784][T17823] usb 3-1: Using ep0 maxpacket: 16 [ 1008.354657][T17823] usb 3-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1008.356080][T17823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1008.358419][T17823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.358446][T17823] usb 3-1: Product: syz [ 1008.358463][T17823] usb 3-1: Manufacturer: syz [ 1008.358480][T17823] usb 3-1: SerialNumber: syz [ 1008.361743][T17823] usb 3-1: config 0 descriptor?? [ 1008.428431][T17823] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1008.428489][T17823] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1008.478933][T19021] FAULT_INJECTION: forcing a failure. [ 1008.478933][T19021] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.478999][T19021] CPU: 0 UID: 0 PID: 19021 Comm: syz.3.4809 Tainted: G L syzkaller #0 PREEMPT(full) [ 1008.479030][T19021] Tainted: [L]=SOFTLOCKUP [ 1008.479039][T19021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1008.479053][T19021] Call Trace: [ 1008.479062][T19021] [ 1008.479072][T19021] dump_stack_lvl+0xe8/0x150 [ 1008.479116][T19021] should_fail_ex+0x3eb/0x540 [ 1008.479150][T19021] should_failslab+0xa8/0x100 [ 1008.479182][T19021] __kvmalloc_node_noprof+0x171/0x820 [ 1008.479208][T19021] ? __kmalloc_cache_noprof+0x31c/0x600 [ 1008.479233][T19021] ? __kmalloc_cache_noprof+0x148/0x600 [ 1008.479255][T19021] ? percpu_ref_init+0xc5/0x350 [ 1008.479277][T19021] ? io_alloc_cache_init+0x42/0x140 [ 1008.479320][T19021] ? io_alloc_cache_init+0x42/0x140 [ 1008.479358][T19021] io_alloc_cache_init+0x42/0x140 [ 1008.479386][T19021] io_ring_ctx_alloc+0x508/0xb80 [ 1008.479422][T19021] io_uring_create+0x50/0x980 [ 1008.479451][T19021] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1008.479490][T19021] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1008.479526][T19021] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1008.479570][T19021] ? rcu_is_watching+0x16/0xb0 [ 1008.479615][T19021] do_syscall_64+0x166/0x520 [ 1008.479647][T19021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.479671][T19021] ? clear_bhb_loop+0x70/0xc0 [ 1008.479699][T19021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.479723][T19021] RIP: 0033:0x7f36edb9f559 [ 1008.479744][T19021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.479764][T19021] RSP: 002b:00007f36ee98afb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1008.479788][T19021] RAX: ffffffffffffffda RBX: 0000200000000300 RCX: 00007f36edb9f559 [ 1008.479805][T19021] RDX: 00002000000003c0 RSI: 0000200000000300 RDI: 0000000000000f00 [ 1008.479821][T19021] RBP: 00007f36edc36b20 R08: 0000000000000000 R09: 00007f36ee98b9c8 [ 1008.479837][T19021] R10: 0000200000000400 R11: 0000000000000206 R12: 00002000000003c0 [ 1008.479853][T19021] R13: 0000200000000400 R14: 0000200000000380 R15: 00007ffd77e6ed58 [ 1008.479889][T19021] [ 1008.759193][T17374] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.133988][T17823] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1009.263154][T17339] Bluetooth: hci1: command tx timeout [ 1009.295008][T17374] bridge_slave_1: left allmulticast mode [ 1009.295039][T17374] bridge_slave_1: left promiscuous mode [ 1009.295260][T17374] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.298672][T17374] bridge_slave_0: left allmulticast mode [ 1009.298701][T17374] bridge_slave_0: left promiscuous mode [ 1009.298949][T17374] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.572337][T17823] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1009.572373][T17823] em28xx 3-1:0.0: board has no eeprom [ 1009.620140][T17374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1009.622921][T17374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1009.647536][T17374] bond0 (unregistering): Released all slaves [ 1009.739043][T17374] tipc: Left network mode [ 1009.865214][ T9] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1009.943281][T17823] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1009.943344][T17823] em28xx 3-1:0.0: dvb set to bulk mode. [ 1009.944646][ T5744] em28xx 3-1:0.0: Binding DVB extension [ 1010.039434][ T9] usb 5-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 1010.047567][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.047722][ T9] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1010.082670][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.082732][ T9] usb 5-1: Product: syz [ 1010.082750][ T9] usb 5-1: Manufacturer: syz [ 1010.082767][ T9] usb 5-1: SerialNumber: syz [ 1010.390766][ T9] usb 5-1: USB disconnect, device number 106 [ 1010.764755][ T5290] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1010.846670][T17374] hsr_slave_0: left promiscuous mode [ 1010.847421][T17374] hsr_slave_1: left promiscuous mode [ 1010.848337][T17374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1010.848354][T17374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1010.849217][T17374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1010.849237][T17374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1010.889988][T17374] veth1_macvtap: left promiscuous mode [ 1010.892447][T17374] veth0_macvtap: left promiscuous mode [ 1010.893375][T17374] veth1_vlan: left promiscuous mode [ 1010.893701][T17374] veth0_vlan: left promiscuous mode [ 1011.195145][T19007] em28xx 3-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 1011.247326][ T9] usb 3-1: USB disconnect, device number 95 [ 1011.261566][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 1011.288156][T17374] team0 (unregistering): Port device team_slave_1 removed [ 1011.317677][T17374] team0 (unregistering): Port device team_slave_0 removed [ 1011.338704][ T5744] em28xx 3-1:0.0: Registering input extension [ 1011.340413][ T9] em28xx 3-1:0.0: Closing input extension [ 1011.356961][T17339] Bluetooth: hci1: command tx timeout [ 1011.366623][T17823] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1011.416110][ T9] em28xx: Freeing device [ 1011.513401][T17823] usb 5-1: Using ep0 maxpacket: 8 [ 1011.516337][T17823] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1011.516391][T17823] usb 5-1: New USB device found: idVendor=0271, idProduct=0103, bcdDevice=2.09 [ 1011.518969][T17823] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1011.519080][T17823] usb 5-1: can't read configurations, error -61 [ 1011.607279][T18985] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.607413][T18985] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.607517][T18985] bridge_slave_0: entered allmulticast mode [ 1011.608807][T18985] bridge_slave_0: entered promiscuous mode [ 1011.646139][T17823] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1011.679740][T18985] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.680304][T18985] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.680442][T18985] bridge_slave_1: entered allmulticast mode [ 1011.682877][T18985] bridge_slave_1: entered promiscuous mode [ 1011.833851][T17823] usb 5-1: Using ep0 maxpacket: 8 [ 1011.836396][T17823] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1011.836459][T17823] usb 5-1: New USB device found: idVendor=0271, idProduct=0103, bcdDevice=2.09 [ 1011.840726][T17823] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1011.840771][T17823] usb 5-1: can't read configurations, error -61 [ 1011.841148][T17823] usb usb5-port1: attempt power cycle [ 1011.929708][T18985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1011.951990][T18985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.091503][T18985] team0: Port device team_slave_0 added [ 1012.110431][T18985] team0: Port device team_slave_1 added [ 1012.150237][T18985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.150258][T18985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.150287][T18985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.152894][T19091] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4822'. [ 1012.152923][T19091] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4822'. [ 1012.152939][T19091] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4822'. [ 1012.228578][T18985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.228598][T18985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.228654][T18985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1012.233217][T17823] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1012.277684][T17823] usb 5-1: Using ep0 maxpacket: 8 [ 1012.290055][T17823] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1012.290211][T17823] usb 5-1: New USB device found: idVendor=0271, idProduct=0103, bcdDevice=2.09 [ 1012.310987][T17823] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1012.311031][T17823] usb 5-1: can't read configurations, error -61 [ 1012.409135][T18985] hsr_slave_0: entered promiscuous mode [ 1012.411701][T18985] hsr_slave_1: entered promiscuous mode [ 1012.412747][T18985] debugfs: 'hsr0' already exists in 'hsr' [ 1012.412770][T18985] Cannot create hsr debugfs directory [ 1012.443264][T17823] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1012.467444][T17823] usb 5-1: Using ep0 maxpacket: 8 [ 1012.471842][T17823] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1012.471895][T17823] usb 5-1: New USB device found: idVendor=0271, idProduct=0103, bcdDevice=2.09 [ 1012.475184][T17823] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1012.475272][T17823] usb 5-1: can't read configurations, error -61 [ 1012.476867][T17823] usb usb5-port1: unable to enumerate USB device [ 1012.992997][ T5290] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1012.995369][T17823] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1013.146846][T17823] usb 3-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 1013.149248][T17823] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.149276][T17823] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1013.152469][T17823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.152498][T17823] usb 3-1: Product: syz [ 1013.152515][T17823] usb 3-1: Manufacturer: syz [ 1013.152532][T17823] usb 3-1: SerialNumber: syz [ 1013.163220][ T5747] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1013.343225][ T5747] usb 4-1: Using ep0 maxpacket: 16 [ 1013.344057][ T5747] usb 4-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1013.345474][ T5747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1013.347642][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.347667][ T5747] usb 4-1: Product: syz [ 1013.347684][ T5747] usb 4-1: Manufacturer: syz [ 1013.347701][ T5747] usb 4-1: SerialNumber: syz [ 1013.352336][ T5747] usb 4-1: config 0 descriptor?? [ 1013.418401][ T5747] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1013.418439][ T5747] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1013.424728][T17339] Bluetooth: hci1: command tx timeout [ 1013.452199][T17823] usb 3-1: USB disconnect, device number 96 [ 1013.548018][T18985] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1013.552429][T18985] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1013.561817][T18985] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1013.578481][T18985] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1013.579764][T18985] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1013.590057][T18985] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1013.598331][T18985] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1013.621094][T18985] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1013.752432][T18985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1013.780860][T18985] 8021q: adding VLAN 0 to HW filter on device team0 [ 1013.794404][T17375] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.794534][T17375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1013.805386][T17375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.805689][T17375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.044160][ T5747] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1014.179535][T19146] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1014.179569][T19146] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1014.182447][T19146] vhci_hcd vhci_hcd.0: Device attached [ 1014.237637][T19147] vhci_hcd: connection closed [ 1014.263772][T17375] vhci_hcd vhci_hcd.2: stop threads [ 1014.264951][T17375] vhci_hcd vhci_hcd.2: release socket [ 1014.264995][T17375] vhci_hcd vhci_hcd.2: disconnect device [ 1014.468037][ T5747] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1014.468072][ T5747] em28xx 4-1:0.0: board has no eeprom [ 1014.824141][ T5747] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1014.824178][ T5747] em28xx 4-1:0.0: dvb set to bulk mode. [ 1014.825253][ T1718] em28xx 4-1:0.0: Binding DVB extension [ 1014.929002][T18985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.032359][T18985] veth0_vlan: entered promiscuous mode [ 1015.050864][T18985] veth1_vlan: entered promiscuous mode [ 1015.099413][T18985] veth0_macvtap: entered promiscuous mode [ 1015.118863][T18985] veth1_macvtap: entered promiscuous mode [ 1015.148882][T18985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1015.174268][T18985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1015.215905][T17361] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.216214][T17361] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.216285][T17361] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.216336][T17361] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.370790][T17372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.370815][T17372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.435198][T17374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.435221][T17374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.515356][T17339] Bluetooth: hci1: command tx timeout [ 1015.773335][T16394] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1015.793587][ T5746] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1015.923298][T16394] usb 1-1: Using ep0 maxpacket: 32 [ 1015.924392][T16394] usb 1-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1015.926138][T16394] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.926161][T16394] usb 1-1: config 0 has no interfaces? [ 1015.929489][T16394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.929530][T16394] usb 1-1: Product: syz [ 1015.929547][T16394] usb 1-1: Manufacturer: syz [ 1015.929565][T16394] usb 1-1: SerialNumber: syz [ 1015.946141][ T5746] usb 5-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 1015.951122][ T5746] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.951199][ T5746] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1015.959206][T16394] usb 1-1: config 0 descriptor?? [ 1015.969539][ T5746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.969617][ T5746] usb 5-1: Product: syz [ 1015.969661][ T5746] usb 5-1: Manufacturer: syz [ 1015.969705][ T5746] usb 5-1: SerialNumber: syz [ 1015.983906][T19116] em28xx 4-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 1016.112954][ T5746] usb 4-1: USB disconnect, device number 68 [ 1016.127393][ T5746] em28xx 4-1:0.0: Disconnecting em28xx [ 1016.155037][ T1718] em28xx 4-1:0.0: Registering input extension [ 1016.155600][ T5746] em28xx 4-1:0.0: Closing input extension [ 1016.189223][ T5746] em28xx: Freeing device [ 1016.217246][T19193] ./bus: Can't lookup blockdev [ 1016.219160][T19193] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1016.219196][T19193] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1016.220523][T19193] vhci_hcd vhci_hcd.0: Device attached [ 1016.262597][ T5744] usb 5-1: USB disconnect, device number 111 [ 1016.306451][T19194] vhci_hcd: connection closed [ 1016.310188][T17374] vhci_hcd vhci_hcd.3: stop threads [ 1016.310212][T17374] vhci_hcd vhci_hcd.3: release socket [ 1016.310235][T17374] vhci_hcd vhci_hcd.3: disconnect device [ 1017.143326][ T5744] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 1017.269455][T19218] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4842'. [ 1017.269478][T19218] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1017.308983][T19204] use of bytesused == 0 is deprecated and will be removed in the future, [ 1017.309003][T19204] use the actual size instead. [ 1017.378428][ T5744] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1017.379300][ T5744] usb 4-1: New USB device found: idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 1017.379344][ T5744] usb 4-1: no configurations [ 1017.379360][ T5744] usb 4-1: can't read configurations, error -22 [ 1017.693197][ T1718] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1017.843244][ T1718] usb 5-1: Using ep0 maxpacket: 16 [ 1017.844429][ T1718] usb 5-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1017.845491][ T1718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1017.847541][ T1718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.847568][ T1718] usb 5-1: Product: syz [ 1017.847584][ T1718] usb 5-1: Manufacturer: syz [ 1017.847599][ T1718] usb 5-1: SerialNumber: syz [ 1017.849941][ T1718] usb 5-1: config 0 descriptor?? [ 1017.907524][ T1718] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1017.907564][ T1718] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1018.253232][ T9] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1018.403954][ T9] usb 3-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 1018.405101][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.405127][ T9] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1018.407431][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.407458][ T9] usb 3-1: Product: syz [ 1018.407475][ T9] usb 3-1: Manufacturer: syz [ 1018.407492][ T9] usb 3-1: SerialNumber: syz [ 1018.469418][ T1718] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1018.586885][ T9] usb 1-1: USB disconnect, device number 63 [ 1018.640148][ T5746] usb 3-1: USB disconnect, device number 97 [ 1018.801248][T19238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4850'. [ 1018.877054][ T1718] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1018.877078][ T1718] em28xx 5-1:0.0: board has no eeprom [ 1019.213235][ T1718] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1019.213268][ T1718] em28xx 5-1:0.0: dvb set to bulk mode. [ 1019.214574][T16394] em28xx 5-1:0.0: Binding DVB extension [ 1019.573203][ T5744] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1019.725682][ T5744] usb 3-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 1019.727560][ T5744] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.729752][ T5744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1019.729797][ T5744] usb 3-1: Product: syz [ 1019.729814][ T5744] usb 3-1: Manufacturer: syz [ 1019.774696][ T5744] usb 3-1: selecting invalid altsetting 1 [ 1019.781159][ T5744] dvb_ttusb_budget: ttusb_init_controller: error [ 1019.781175][ T5744] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1019.888064][ T5744] DVB: Unable to find symbol cx22700_attach() [ 1019.934174][ T9] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1019.963247][T19248] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 1019.965269][ T5744] DVB: Unable to find symbol tda10046_attach() [ 1019.965281][ T5744] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1020.027772][ T5744] usb 3-1: USB disconnect, device number 98 [ 1020.085438][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1020.086601][ T9] usb 1-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1020.089607][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.089639][ T9] usb 1-1: config 0 has no interfaces? [ 1020.092227][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.092254][ T9] usb 1-1: Product: syz [ 1020.092271][ T9] usb 1-1: Manufacturer: syz [ 1020.092288][ T9] usb 1-1: SerialNumber: syz [ 1020.115799][ T9] usb 1-1: config 0 descriptor?? [ 1020.386625][T19222] em28xx 5-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 1020.389780][ T5746] usb 5-1: USB disconnect, device number 112 [ 1020.393551][ T5746] em28xx 5-1:0.0: Disconnecting em28xx [ 1020.452920][T16394] em28xx 5-1:0.0: Registering input extension [ 1020.460479][ T5746] em28xx 5-1:0.0: Closing input extension [ 1020.488452][ T5746] em28xx: Freeing device [ 1020.843188][ T5744] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1020.951674][T17339] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1020.994009][ T5744] usb 3-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 1020.995783][ T5744] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.995813][ T5744] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1020.998713][ T5744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.998741][ T5744] usb 3-1: Product: syz [ 1020.998759][ T5744] usb 3-1: Manufacturer: syz [ 1020.998775][ T5744] usb 3-1: SerialNumber: syz [ 1021.222838][ T5746] usb 3-1: USB disconnect, device number 99 [ 1021.983289][ T5744] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1022.133269][ T5744] usb 5-1: Using ep0 maxpacket: 16 [ 1022.134095][ T5744] usb 5-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1022.135079][ T5744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1022.136874][ T5744] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.136894][ T5744] usb 5-1: Product: syz [ 1022.136905][ T5744] usb 5-1: Manufacturer: syz [ 1022.136917][ T5744] usb 5-1: SerialNumber: syz [ 1022.139401][ T5744] usb 5-1: config 0 descriptor?? [ 1022.169224][ T5744] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1022.169266][ T5744] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1022.185504][ T9] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1022.344733][ T9] usb 3-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 1022.348130][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.348194][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.353023][ T9] usb 3-1: config 0 descriptor?? [ 1022.723971][T17823] usb 1-1: USB disconnect, device number 64 [ 1022.756385][ T5744] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1022.810230][T19315] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1023.007895][T19304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1023.008509][T19304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1023.079188][T19325] CUSE: unknown device info "" [ 1023.079202][T19325] CUSE: unknown device info "Ö" [ 1023.079209][T19325] CUSE: unknown device info "" [ 1023.079216][T19325] CUSE: unknown device info "" [ 1023.079222][T19325] CUSE: unknown device info "ðÿÿÿ" [ 1023.079228][T19325] CUSE: unknown device info "å" [ 1023.079235][T19325] CUSE: unknown device info "" [ 1023.079262][T19325] CUSE: unknown device info "" [ 1023.079269][T19325] CUSE: unknown device info "" [ 1023.079275][T19325] CUSE: unknown device info "r" [ 1023.079281][T19325] CUSE: unknown device info "" [ 1023.079288][T19325] CUSE: unknown device info "#Û" [ 1023.079295][T19325] CUSE: unknown device info "ÿÿÿÿ" [ 1023.079301][T19325] CUSE: unknown device info "" [ 1023.079308][T19325] CUSE: unknown device info "ÿ" [ 1023.079316][T19325] CUSE: DEVNAME unspecified [ 1023.180550][ T5744] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1023.180609][ T5744] em28xx 5-1:0.0: board has no eeprom [ 1023.303198][T17823] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1023.454510][T17823] usb 1-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 1023.456014][T17823] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.456040][T17823] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1023.458850][T17823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.458877][T17823] usb 1-1: Product: syz [ 1023.458892][T17823] usb 1-1: Manufacturer: syz [ 1023.458938][T17823] usb 1-1: SerialNumber: syz [ 1023.523194][ T5744] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1023.523234][ T5744] em28xx 5-1:0.0: dvb set to bulk mode. [ 1023.525889][T17823] em28xx 5-1:0.0: Binding DVB extension [ 1023.583533][T13825] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1023.725601][ T5746] usb 1-1: USB disconnect, device number 65 [ 1023.734344][T13825] usb 4-1: Using ep0 maxpacket: 32 [ 1023.749456][T13825] usb 4-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1023.752312][T13825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.752341][T13825] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1023.787825][T13825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.787862][T13825] usb 4-1: Product: syz [ 1023.787885][T13825] usb 4-1: Manufacturer: syz [ 1023.788027][T13825] usb 4-1: SerialNumber: syz [ 1023.806759][T13825] usb 4-1: config 0 descriptor?? [ 1024.513244][ T5746] usb 1-1: new low-speed USB device number 66 using dummy_hcd [ 1024.674001][ T5746] usb 1-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1024.675567][ T5746] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1024.675633][ T5746] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1024.675665][ T5746] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1024.675693][ T5746] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1024.675721][ T5746] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1024.677131][ T5746] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1024.677185][ T5746] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1024.677215][ T5746] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1024.677242][ T5746] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1024.677269][ T5746] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1024.678620][ T5746] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1024.678671][ T5746] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1024.678701][ T5746] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1024.678731][ T5746] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1024.678760][ T5746] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1024.682707][ T5746] usb 1-1: string descriptor 0 read error: -22 [ 1024.682852][ T5746] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.710966][T19299] em28xx 5-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 1024.838919][T13825] usb 5-1: USB disconnect, device number 113 [ 1024.890268][T13825] em28xx 5-1:0.0: Disconnecting em28xx [ 1024.912255][ T5746] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1024.988501][T17823] em28xx 5-1:0.0: Registering input extension [ 1024.988884][T13825] em28xx 5-1:0.0: Closing input extension [ 1025.019249][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1025.019333][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1025.047886][ T9] usb 3-1: USB disconnect, device number 100 [ 1025.062926][T13825] em28xx: Freeing device [ 1025.189841][T17823] usb 1-1: USB disconnect, device number 66 [ 1025.683282][ T5746] usb 5-1: new low-speed USB device number 114 using dummy_hcd [ 1025.843997][ T5746] usb 5-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1025.845087][ T5746] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1025.845140][ T5746] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1025.845169][ T5746] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1025.845242][ T5746] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1025.845272][ T5746] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1025.846286][ T5746] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1025.846333][ T5746] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1025.846363][ T5746] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1025.846391][ T5746] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1025.846418][ T5746] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1025.847535][ T5746] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1025.847579][ T5746] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1025.847599][ T5746] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1025.847617][ T5746] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1025.847636][ T5746] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1025.850910][ T5746] usb 5-1: string descriptor 0 read error: -22 [ 1025.851059][ T5746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.853303][ T9] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 1026.009166][ T9] usb 3-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1026.015346][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1026.015516][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1026.015596][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1026.015672][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1026.015751][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1026.034429][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1026.034634][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1026.034711][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1026.034793][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1026.034878][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1026.055970][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1026.056037][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1026.056066][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1026.056096][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1026.056124][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1026.078722][ T9] usb 3-1: string descriptor 0 read error: -22 [ 1026.079519][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.142088][T19348] FAULT_INJECTION: forcing a failure. [ 1026.142088][T19348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1026.142187][T19348] CPU: 0 UID: 0 PID: 19348 Comm: syz.4.4885 Tainted: G L syzkaller #0 PREEMPT(full) [ 1026.142280][T19348] Tainted: [L]=SOFTLOCKUP [ 1026.142324][T19348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1026.142354][T19348] Call Trace: [ 1026.142376][T19348] [ 1026.142406][T19348] dump_stack_lvl+0xe8/0x150 [ 1026.142513][T19348] should_fail_ex+0x3eb/0x540 [ 1026.142605][T19348] _copy_to_user+0x31/0xb0 [ 1026.142690][T19348] simple_read_from_buffer+0xe1/0x170 [ 1026.142765][T19348] proc_fail_nth_read+0x1bb/0x230 [ 1026.142882][T19348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1026.142977][T19348] ? rw_verify_area+0x24a/0x4c0 [ 1026.143052][T19348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1026.143129][T19348] vfs_read+0x213/0xa80 [ 1026.143214][T19348] ? __pfx___mutex_lock+0x10/0x10 [ 1026.143300][T19348] ? __pfx_vfs_read+0x10/0x10 [ 1026.143362][T19348] ? __fget_files+0x2a/0x420 [ 1026.143427][T19348] ? __fget_files+0x3a2/0x420 [ 1026.143483][T19348] ? __fget_files+0x2a/0x420 [ 1026.143558][T19348] ? fdget+0x1ac/0x250 [ 1026.143658][T19348] ksys_read+0x150/0x270 [ 1026.143742][T19348] ? __pfx_ksys_read+0x10/0x10 [ 1026.143859][T19348] do_syscall_64+0x166/0x520 [ 1026.143936][T19348] ? trace_irq_disable+0x3b/0x140 [ 1026.144012][T19348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.144079][T19348] ? clear_bhb_loop+0x70/0xc0 [ 1026.144154][T19348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.144217][T19348] RIP: 0033:0x7feb7ab5fd8e [ 1026.144273][T19348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1026.144325][T19348] RSP: 002b:00007feb7bb31fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1026.144384][T19348] RAX: ffffffffffffffda RBX: 00007feb7bb326c0 RCX: 00007feb7ab5fd8e [ 1026.144430][T19348] RDX: 000000000000000f RSI: 00007feb7bb320a0 RDI: 0000000000000005 [ 1026.144472][T19348] RBP: 00007feb7bb32090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.144515][T19348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.144550][T19348] R13: 00007feb7ae26038 R14: 00007feb7ae25fa0 R15: 00007ffeb3db3bf8 [ 1026.144645][T19348] [ 1026.255274][ T9] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1026.347198][ T5746] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1026.504165][ T5746] usb 5-1: USB disconnect, device number 114 [ 1026.585702][T19353] 9p: Unknown access argument 18446744073709551615: -34 [ 1026.619668][T19357] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4888'. [ 1026.622485][T16394] usb 4-1: USB disconnect, device number 71 [ 1026.722835][ T5747] usb 3-1: USB disconnect, device number 101 [ 1026.760519][T19367] NILFS (nullb0): couldn't find nilfs on the device [ 1027.133171][T16394] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1027.163332][ T5746] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1027.284419][T16394] usb 5-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 1027.285901][T16394] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.285921][T16394] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1027.287876][T16394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.287897][T16394] usb 5-1: Product: syz [ 1027.287908][T16394] usb 5-1: Manufacturer: syz [ 1027.287920][T16394] usb 5-1: SerialNumber: syz [ 1027.353257][ T5746] usb 4-1: Using ep0 maxpacket: 32 [ 1027.355208][ T5746] usb 4-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1027.356264][ T5746] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.356352][ T5746] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1027.356386][ T5746] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1027.356406][ T5746] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1027.358519][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.358546][ T5746] usb 4-1: Product: syz [ 1027.358561][ T5746] usb 4-1: Manufacturer: syz [ 1027.358577][ T5746] usb 4-1: SerialNumber: syz [ 1027.448316][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1027.450038][ T5746] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input205 [ 1027.500109][ T9] usb 5-1: USB disconnect, device number 115 [ 1027.603230][ T5746] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1027.603257][ T5746] (id 0x00) [ 1027.673338][ T5746] rc_core: IR keymap rc-imon-pad not found [ 1027.673360][ T5746] Registered IR keymap rc-empty [ 1027.673447][ T5746] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1027.673469][ T5746] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1027.804525][ T5746] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 1027.806708][ T5746] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input206 [ 1027.810372][ T5746] imon 4-1:155.0: iMON device (15c2:ffdc) on usb<4:72> initialized [ 1027.980137][ T1718] usb 4-1: USB disconnect, device number 72 [ 1028.013230][T16394] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1028.077302][T19381] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4894'. [ 1028.110370][T19381] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1028.183313][T16394] usb 1-1: Using ep0 maxpacket: 16 [ 1028.184224][T16394] usb 1-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1028.185374][T16394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1028.188144][T16394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.188178][T16394] usb 1-1: Product: syz [ 1028.188194][T16394] usb 1-1: Manufacturer: syz [ 1028.188209][T16394] usb 1-1: SerialNumber: syz [ 1028.245114][T16394] usb 1-1: config 0 descriptor?? [ 1028.252602][T16394] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1028.252643][T16394] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1028.344849][T19385] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4896'. [ 1028.583202][ T9] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 1028.734759][ T9] usb 5-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 1028.738766][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1028.738865][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1028.738993][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.793229][ T5746] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1028.853871][T16394] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1028.943187][ T5746] usb 4-1: Using ep0 maxpacket: 32 [ 1028.944012][ T5746] usb 4-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1028.945419][ T5746] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.945445][ T5746] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1028.948191][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.948218][ T5746] usb 4-1: Product: syz [ 1028.948264][ T5746] usb 4-1: Manufacturer: syz [ 1028.948280][ T5746] usb 4-1: SerialNumber: syz [ 1028.951828][ T5746] usb 4-1: config 0 descriptor?? [ 1029.262264][T16394] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1029.262300][T16394] em28xx 1-1:0.0: board has no eeprom [ 1029.360322][T19395] CUSE: unknown device info "" [ 1029.360342][T19395] CUSE: unknown device info "Ö" [ 1029.360380][T19395] CUSE: unknown device info "" [ 1029.360390][T19395] CUSE: unknown device info "" [ 1029.360400][T19395] CUSE: unknown device info "ðÿÿÿ" [ 1029.360409][T19395] CUSE: unknown device info "å" [ 1029.360420][T19395] CUSE: unknown device info "" [ 1029.360432][T19395] CUSE: unknown device info "" [ 1029.360439][T19395] CUSE: unknown device info "" [ 1029.360446][T19395] CUSE: unknown device info "r" [ 1029.360452][T19395] CUSE: unknown device info "" [ 1029.360458][T19395] CUSE: unknown device info "#Û" [ 1029.360465][T19395] CUSE: unknown device info "ÿÿÿÿ" [ 1029.360496][T19395] CUSE: unknown device info "" [ 1029.360507][T19395] CUSE: unknown device info "ÿ" [ 1029.360544][T19395] CUSE: DEVNAME unspecified [ 1029.613180][T16394] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1029.613220][T16394] em28xx 1-1:0.0: dvb set to bulk mode. [ 1029.615196][ T5747] em28xx 1-1:0.0: Binding DVB extension [ 1029.648643][ T9] pegasus 5-1:1.0: probe with driver pegasus failed with error -121 [ 1029.733247][ T1718] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1029.884051][ T1718] usb 3-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 1029.885265][ T1718] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.885291][ T1718] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1029.887455][ T1718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.887482][ T1718] usb 3-1: Product: syz [ 1029.887499][ T1718] usb 3-1: Manufacturer: syz [ 1029.887516][ T1718] usb 3-1: SerialNumber: syz [ 1030.138782][ T1718] usb 3-1: USB disconnect, device number 102 [ 1030.205986][T19401] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1030.784741][T19379] em28xx 1-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 1030.815204][ T1718] usb 1-1: USB disconnect, device number 67 [ 1030.823966][ T1718] em28xx 1-1:0.0: Disconnecting em28xx [ 1030.862439][ T5747] em28xx 1-1:0.0: Registering input extension [ 1030.864025][ T1718] em28xx 1-1:0.0: Closing input extension [ 1030.894687][ T1718] em28xx: Freeing device [ 1031.391718][ T1718] usb 5-1: USB disconnect, device number 116 [ 1031.642534][T19423] hpfs: hpfs_map_sector(): read error [ 1031.652424][T19424] hpfs: hpfs_map_sector(): read error [ 1031.668586][ T1718] usb 4-1: USB disconnect, device number 73 [ 1031.838022][T19429] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4911'. [ 1031.995640][T19431] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4914'. [ 1032.274366][ T1718] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1032.424634][ T1718] usb 5-1: Using ep0 maxpacket: 16 [ 1032.425386][ T1718] usb 5-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1032.428569][ T1718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1032.438225][ T1718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.438290][ T1718] usb 5-1: Product: syz [ 1032.438334][ T1718] usb 5-1: Manufacturer: syz [ 1032.438378][ T1718] usb 5-1: SerialNumber: syz [ 1032.469517][ T1718] usb 5-1: config 0 descriptor?? [ 1032.496243][ T1718] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1032.496283][ T1718] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1032.602417][T19438] NILFS (nullb0): couldn't find nilfs on the device [ 1032.673906][T16394] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1032.813631][ T5747] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1032.833298][T16394] usb 1-1: Using ep0 maxpacket: 32 [ 1032.834751][T16394] usb 1-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1032.835790][T16394] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.835842][T16394] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1032.835875][T16394] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1032.835896][T16394] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1032.838203][T16394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.838231][T16394] usb 1-1: Product: syz [ 1032.838288][T16394] usb 1-1: Manufacturer: syz [ 1032.838314][T16394] usb 1-1: SerialNumber: syz [ 1032.931074][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1032.951996][T16394] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input208 [ 1033.013199][ T5747] usb 3-1: Using ep0 maxpacket: 32 [ 1033.019370][ T5747] usb 3-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1033.030584][ T5747] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.030619][ T5747] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1033.054025][ T5747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.054091][ T5747] usb 3-1: Product: syz [ 1033.054109][ T5747] usb 3-1: Manufacturer: syz [ 1033.054126][ T5747] usb 3-1: SerialNumber: syz [ 1033.090063][ T5747] usb 3-1: config 0 descriptor?? [ 1033.108875][ T1718] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1033.153185][T16394] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1033.153217][T16394] (id 0x00) [ 1033.253437][T16394] rc_core: IR keymap rc-imon-pad not found [ 1033.253460][T16394] Registered IR keymap rc-empty [ 1033.253544][T16394] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1033.253566][T16394] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1033.354591][T16394] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 1033.356337][T16394] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input209 [ 1033.359548][T16394] imon 1-1:155.0: iMON device (15c2:ffdc) on usb<1:68> initialized [ 1033.518757][ T1718] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1033.518781][ T1718] em28xx 5-1:0.0: board has no eeprom [ 1033.544286][T17823] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1033.693233][T17823] usb 4-1: Using ep0 maxpacket: 32 [ 1033.694034][T17823] usb 4-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1033.695443][T17823] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.695500][T17823] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1033.695529][T17823] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1033.695558][T17823] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1033.697871][T17823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.697898][T17823] usb 4-1: Product: syz [ 1033.697915][T17823] usb 4-1: Manufacturer: syz [ 1033.697932][T17823] usb 4-1: SerialNumber: syz [ 1033.708210][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1033.715918][T17823] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input210 [ 1033.873136][ T1718] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1033.873171][ T1718] em28xx 5-1:0.0: dvb set to bulk mode. [ 1033.875053][T16394] em28xx 5-1:0.0: Binding DVB extension [ 1033.901634][T19456] FAULT_INJECTION: forcing a failure. [ 1033.901634][T19456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.901809][T19456] CPU: 0 UID: 0 PID: 19456 Comm: syz.0.4917 Tainted: G L syzkaller #0 PREEMPT(full) [ 1033.901905][T19456] Tainted: [L]=SOFTLOCKUP [ 1033.901927][T19456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1033.901969][T19456] Call Trace: [ 1033.901990][T19456] [ 1033.902020][T19456] dump_stack_lvl+0xe8/0x150 [ 1033.902117][T19456] should_fail_ex+0x3eb/0x540 [ 1033.902221][T19456] _copy_from_user+0x2d/0xb0 [ 1033.902311][T19456] vfd_write+0x16b/0x620 [ 1033.902554][T19456] ? __pfx_vfd_write+0x10/0x10 [ 1033.902628][T19456] vfs_write+0x296/0xba0 [ 1033.902729][T19456] ? __pfx_vfs_write+0x10/0x10 [ 1033.902804][T19456] ? __fget_files+0x2a/0x420 [ 1033.902867][T19456] ? __fget_files+0x3a2/0x420 [ 1033.902929][T19456] ? __fget_files+0x2a/0x420 [ 1033.903004][T19456] ? fdget+0x1ac/0x250 [ 1033.903073][T19456] ksys_write+0x150/0x270 [ 1033.903148][T19456] ? __pfx_ksys_write+0x10/0x10 [ 1033.903226][T19456] ? handle_softirqs+0x6d0/0x8d0 [ 1033.903324][T19456] do_syscall_64+0x166/0x520 [ 1033.903404][T19456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.903474][T19456] ? clear_bhb_loop+0x70/0xc0 [ 1033.903531][T19456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.903553][T19456] RIP: 0033:0x7ff9de39f559 [ 1033.903574][T19456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.903593][T19456] RSP: 002b:00007ff9df19b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1033.903617][T19456] RAX: ffffffffffffffda RBX: 00007ff9de626090 RCX: 00007ff9de39f559 [ 1033.903651][T19456] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000004 [ 1033.903705][T19456] RBP: 00007ff9df19b090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.903753][T19456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.903799][T19456] R13: 00007ff9de626128 R14: 00007ff9de626090 R15: 00007ffdc1863628 [ 1033.903895][T19456] [ 1033.969318][T17823] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1033.969383][T17823] (id 0x00) [ 1034.152036][ T9] usb 1-1: USB disconnect, device number 68 [ 1034.213950][T17823] rc_core: IR keymap rc-imon-pad not found [ 1034.213971][T17823] Registered IR keymap rc-empty [ 1034.214082][T17823] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1034.214103][T17823] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1034.254794][T17823] rc rc1: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc1 [ 1034.271309][T17823] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc1/input211 [ 1034.289448][T17823] imon 4-1:155.0: iMON device (15c2:ffdc) on usb<4:74> initialized [ 1034.945531][ T1718] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1035.035256][T19463] imon:send_packet: task interrupted [ 1035.035274][T19463] imon:send_packet: packet tx failed (-512) [ 1035.035307][T19463] imon:vfd_write: send packet #2 failed [ 1035.038926][ T9] usb 4-1: USB disconnect, device number 74 [ 1035.093279][ T1718] usb 1-1: Using ep0 maxpacket: 32 [ 1035.096619][ T1718] usb 1-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1035.098744][ T1718] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.098797][ T1718] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1035.098826][ T1718] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1035.098855][ T1718] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1035.101367][ T1718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.101398][ T1718] usb 1-1: Product: syz [ 1035.101415][ T1718] usb 1-1: Manufacturer: syz [ 1035.101431][ T1718] usb 1-1: SerialNumber: syz [ 1035.192247][T19433] em28xx 5-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 1035.203290][T17823] usb 5-1: USB disconnect, device number 117 [ 1035.230587][T17823] em28xx 5-1:0.0: Disconnecting em28xx [ 1035.231823][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1035.248967][ T1718] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input212 [ 1035.290182][T16394] em28xx 5-1:0.0: Registering input extension [ 1035.290490][T17823] em28xx 5-1:0.0: Closing input extension [ 1035.329918][T17823] em28xx: Freeing device [ 1035.423185][ T1718] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1035.423210][ T1718] (id 0x00) [ 1035.493249][ T1718] rc_core: IR keymap rc-imon-pad not found [ 1035.493271][ T1718] Registered IR keymap rc-empty [ 1035.493356][ T1718] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1035.493389][ T1718] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1035.614832][T16394] usb 3-1: USB disconnect, device number 103 [ 1035.630205][ T1718] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 1035.648856][ T1718] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input213 [ 1035.681267][ T1718] imon 1-1:155.0: iMON device (15c2:ffdc) on usb<1:69> initialized [ 1036.031452][T19484] FAULT_INJECTION: forcing a failure. [ 1036.031452][T19484] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.031508][T19484] CPU: 0 UID: 0 PID: 19484 Comm: syz.3.4929 Tainted: G L syzkaller #0 PREEMPT(full) [ 1036.031540][T19484] Tainted: [L]=SOFTLOCKUP [ 1036.031549][T19484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1036.031563][T19484] Call Trace: [ 1036.031572][T19484] [ 1036.031583][T19484] dump_stack_lvl+0xe8/0x150 [ 1036.031623][T19484] should_fail_ex+0x3eb/0x540 [ 1036.031655][T19484] ? zswap_store+0xb70/0x2280 [ 1036.031804][T19484] should_failslab+0xa8/0x100 [ 1036.031835][T19484] ? zswap_store+0xb70/0x2280 [ 1036.031864][T19484] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 1036.031900][T19484] ? percpu_ref_put+0x1e/0x230 [ 1036.031933][T19484] ? percpu_ref_put+0x1e/0x230 [ 1036.031963][T19484] ? zswap_store+0xb70/0x2280 [ 1036.032001][T19484] zswap_store+0xb70/0x2280 [ 1036.032039][T19484] ? zswap_store+0x524/0x2280 [ 1036.032093][T19484] ? __pfx_zswap_store+0x10/0x10 [ 1036.032125][T19484] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1036.032169][T19484] ? do_raw_spin_unlock+0xf5/0x200 [ 1036.032207][T19484] swap_writeout+0x9bf/0x15d0 [ 1036.032272][T19484] ? try_to_unmap_flush_dirty+0x96/0x100 [ 1036.032359][T19484] shrink_folio_list+0x3039/0x4d90 [ 1036.032474][T19484] ? __pfx_shrink_folio_list+0x10/0x10 [ 1036.032558][T19484] ? __lock_acquire+0x747/0x2de0 [ 1036.032596][T19484] ? __pfx___css_rstat_updated+0x10/0x10 [ 1036.032652][T19484] reclaim_folio_list+0x100/0x430 [ 1036.032704][T19484] ? __pfx_reclaim_folio_list+0x10/0x10 [ 1036.032756][T19484] reclaim_pages+0x452/0x530 [ 1036.032798][T19484] ? __pfx_reclaim_pages+0x10/0x10 [ 1036.032834][T19484] ? madvise_cold_or_pageout_pte_range+0x1b60/0x2390 [ 1036.032871][T19484] madvise_cold_or_pageout_pte_range+0x1b85/0x2390 [ 1036.032923][T19484] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 1036.032964][T19484] ? lock_acquire+0x115/0x350 [ 1036.032993][T19484] walk_pgd_range+0x102d/0x1dc0 [ 1036.033059][T19484] ? __pfx_walk_pgd_range+0x10/0x10 [ 1036.033087][T19484] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 1036.033156][T19484] __walk_page_range+0x16d/0x720 [ 1036.033208][T19484] walk_page_range_vma_unsafe+0x309/0x410 [ 1036.033246][T19484] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 1036.033282][T19484] ? mlock_drain_local+0x79/0x490 [ 1036.033312][T19484] ? walk_page_range_vma+0x6b/0x90 [ 1036.033344][T19484] madvise_vma_behavior+0x2ba2/0x4a00 [ 1036.033392][T19484] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1036.033421][T19484] ? lock_acquire+0x115/0x350 [ 1036.033464][T19484] ? process_measurement+0x7b2/0x1c10 [ 1036.033576][T19484] ? up_write+0x19d/0x4a0 [ 1036.033611][T19484] ? __lock_acquire+0x747/0x2de0 [ 1036.033644][T19484] ? __lock_acquire+0x747/0x2de0 [ 1036.033678][T19484] ? __pfx_process_measurement+0x10/0x10 [ 1036.033717][T19484] ? lock_acquire+0x115/0x350 [ 1036.033762][T19484] ? mas_prev_slot+0xb76/0xbf0 [ 1036.033845][T19484] ? find_vma_prev+0x123/0x1b0 [ 1036.033878][T19484] ? __pfx_find_vma_prev+0x10/0x10 [ 1036.033928][T19484] madvise_walk_vmas+0x57d/0xb70 [ 1036.033969][T19484] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1036.034000][T19484] ? blk_start_plug+0x6e/0x1b0 [ 1036.034083][T19484] madvise_do_behavior+0x385/0x540 [ 1036.034118][T19484] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1036.034155][T19484] ? down_read+0x2b9/0x320 [ 1036.034188][T19484] do_madvise+0x327/0x3a0 [ 1036.034217][T19484] ? __pfx_do_madvise+0x10/0x10 [ 1036.034270][T19484] ? __pfx_ksys_write+0x10/0x10 [ 1036.034307][T19484] __x64_sys_madvise+0xa6/0xc0 [ 1036.034336][T19484] do_syscall_64+0x166/0x520 [ 1036.034374][T19484] ? trace_irq_disable+0x3b/0x140 [ 1036.034400][T19484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.034423][T19484] ? clear_bhb_loop+0x70/0xc0 [ 1036.034450][T19484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.034473][T19484] RIP: 0033:0x7f36edb9f559 [ 1036.034493][T19484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.034511][T19484] RSP: 002b:00007f36ee9ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1036.034533][T19484] RAX: ffffffffffffffda RBX: 00007f36ede25fa0 RCX: 00007f36edb9f559 [ 1036.034549][T19484] RDX: 0000000000000015 RSI: 0000000000010000 RDI: 0000200000000000 [ 1036.034564][T19484] RBP: 00007f36ee9ac090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.034579][T19484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.034593][T19484] R13: 00007f36ede26038 R14: 00007f36ede25fa0 R15: 00007ffd77e6ed58 [ 1036.034630][T19484] [ 1036.048158][T16394] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1036.323637][T16394] usb 3-1: Using ep0 maxpacket: 16 [ 1036.338464][T16394] usb 3-1: New USB device found: idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1036.380290][T16394] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 1036.380323][T16394] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.380346][T16394] usb 3-1: config 1 has no interface number 0 [ 1036.380389][T16394] usb 3-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1036.380427][T16394] usb 3-1: config 1 interface 105 has no altsetting 0 [ 1036.490523][T16394] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1036.490554][T16394] usb 3-1: Product: syz [ 1036.490571][T16394] usb 3-1: Manufacturer: syz [ 1036.490588][T16394] usb 3-1: SerialNumber: syz [ 1036.676364][T19495] FAULT_INJECTION: forcing a failure. [ 1036.676364][T19495] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.676410][T19495] CPU: 1 UID: 0 PID: 19495 Comm: syz.4.4933 Tainted: G L syzkaller #0 PREEMPT(full) [ 1036.676446][T19495] Tainted: [L]=SOFTLOCKUP [ 1036.676453][T19495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1036.676463][T19495] Call Trace: [ 1036.676469][T19495] [ 1036.676476][T19495] dump_stack_lvl+0xe8/0x150 [ 1036.676528][T19495] should_fail_ex+0x3eb/0x540 [ 1036.676562][T19495] should_failslab+0xa8/0x100 [ 1036.676598][T19495] __kmalloc_cache_noprof+0x9e/0x600 [ 1036.676617][T19495] ? configfs_write_iter+0xef/0x430 [ 1036.676730][T19495] ? configfs_write_iter+0xef/0x430 [ 1036.676767][T19495] configfs_write_iter+0xef/0x430 [ 1036.676802][T19495] vfs_write+0x612/0xba0 [ 1036.676828][T19495] ? __pfx_vfs_write+0x10/0x10 [ 1036.676872][T19495] ? __fget_files+0x3a2/0x420 [ 1036.676895][T19495] ? __fget_files+0x2a/0x420 [ 1036.676922][T19495] ? fdget+0x1ac/0x250 [ 1036.676954][T19495] ksys_write+0x150/0x270 [ 1036.676974][T19495] ? __pfx_ksys_write+0x10/0x10 [ 1036.677020][T19495] do_syscall_64+0x166/0x520 [ 1036.677052][T19495] ? trace_irq_disable+0x3b/0x140 [ 1036.677078][T19495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.677105][T19495] ? clear_bhb_loop+0x70/0xc0 [ 1036.677125][T19495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.677141][T19495] RIP: 0033:0x7feb7ab9f559 [ 1036.677172][T19495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.677194][T19495] RSP: 002b:00007feb7bb32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1036.677217][T19495] RAX: ffffffffffffffda RBX: 00007feb7ae25fa0 RCX: 00007feb7ab9f559 [ 1036.677233][T19495] RDX: 0000000000000001 RSI: 0000200000000e40 RDI: 0000000000000003 [ 1036.677248][T19495] RBP: 00007feb7bb32090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.677266][T19495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.677275][T19495] R13: 00007feb7ae26038 R14: 00007feb7ae25fa0 R15: 00007ffeb3db3bf8 [ 1036.677301][T19495] [ 1036.693748][ T9] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1036.851052][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1036.856440][ T9] usb 4-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1036.901763][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1036.935229][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.935261][ T9] usb 4-1: Product: syz [ 1036.935304][ T9] usb 4-1: Manufacturer: syz [ 1036.935319][ T9] usb 4-1: SerialNumber: syz [ 1036.944907][ T9] usb 4-1: config 0 descriptor?? [ 1037.003389][T16394] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 1037.051315][T19498] affs: No valid root block on device nbd4 [ 1037.062805][T19498] ieee802154 phy0 wpan0: encryption failed: -90 [ 1037.104775][T19490] imon:send_packet: task interrupted [ 1037.104795][T19490] imon:send_packet: packet tx failed (-512) [ 1037.104834][T19490] imon:vfd_write: send packet #4 failed [ 1037.108469][T19490] imon:send_packet: packet tx failed (-32) [ 1037.127200][T19490] imon:vfd_write: send packet #0 failed [ 1037.154650][T19462] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1037.156712][ T9] usb 1-1: USB disconnect, device number 69 [ 1037.218990][T19472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.219457][T19472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.764859][T19513] mmap: syz.0.4939 (19513) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1037.841028][T19515] FAULT_INJECTION: forcing a failure. [ 1037.841028][T19515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1037.841055][T19515] CPU: 0 UID: 0 PID: 19515 Comm: syz.0.4940 Tainted: G L syzkaller #0 PREEMPT(full) [ 1037.841077][T19515] Tainted: [L]=SOFTLOCKUP [ 1037.841083][T19515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1037.841093][T19515] Call Trace: [ 1037.841099][T19515] [ 1037.841107][T19515] dump_stack_lvl+0xe8/0x150 [ 1037.841134][T19515] should_fail_ex+0x3eb/0x540 [ 1037.841157][T19515] _copy_from_user+0x2d/0xb0 [ 1037.841179][T19515] ___sys_sendmsg+0x1c6/0x360 [ 1037.841202][T19515] ? __lock_acquire+0x747/0x2de0 [ 1037.841223][T19515] ? __pfx____sys_sendmsg+0x10/0x10 [ 1037.841258][T19515] ? kstrtouint+0x6e/0xe0 [ 1037.841302][T19515] ? __fget_files+0x3a2/0x420 [ 1037.841319][T19515] ? __fget_files+0x2a/0x420 [ 1037.841342][T19515] __sys_sendmmsg+0x273/0x4e0 [ 1037.841368][T19515] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1037.841397][T19515] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1037.841431][T19515] ? ksys_write+0x242/0x270 [ 1037.841451][T19515] ? __pfx_ksys_write+0x10/0x10 [ 1037.841475][T19515] __x64_sys_sendmmsg+0xa0/0xc0 [ 1037.841498][T19515] do_syscall_64+0x166/0x520 [ 1037.841523][T19515] ? trace_irq_disable+0x3b/0x140 [ 1037.841542][T19515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.841559][T19515] ? clear_bhb_loop+0x70/0xc0 [ 1037.841579][T19515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.841626][T19515] RIP: 0033:0x7ff9de39f559 [ 1037.841647][T19515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.841667][T19515] RSP: 002b:00007ff9df1bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1037.841691][T19515] RAX: ffffffffffffffda RBX: 00007ff9de625fa0 RCX: 00007ff9de39f559 [ 1037.841709][T19515] RDX: 0000000000000001 RSI: 000020000000a5c0 RDI: 0000000000000003 [ 1037.841724][T19515] RBP: 00007ff9df1bc090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.841738][T19515] R10: 0000000004000801 R11: 0000000000000246 R12: 0000000000000001 [ 1037.841751][T19515] R13: 00007ff9de626038 R14: 00007ff9de625fa0 R15: 00007ffdc1863628 [ 1037.841789][T19515] [ 1038.175603][T19522] FAULT_INJECTION: forcing a failure. [ 1038.175603][T19522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1038.175630][T19522] CPU: 0 UID: 0 PID: 19522 Comm: syz.0.4943 Tainted: G L syzkaller #0 PREEMPT(full) [ 1038.175652][T19522] Tainted: [L]=SOFTLOCKUP [ 1038.175658][T19522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1038.175668][T19522] Call Trace: [ 1038.175675][T19522] [ 1038.175682][T19522] dump_stack_lvl+0xe8/0x150 [ 1038.175710][T19522] should_fail_ex+0x3eb/0x540 [ 1038.175734][T19522] _copy_from_user+0x2d/0xb0 [ 1038.175757][T19522] ___sys_sendmsg+0x1c6/0x360 [ 1038.175779][T19522] ? __lock_acquire+0x747/0x2de0 [ 1038.175801][T19522] ? __pfx____sys_sendmsg+0x10/0x10 [ 1038.175849][T19522] ? __fget_files+0x3a2/0x420 [ 1038.175865][T19522] ? __fget_files+0x2a/0x420 [ 1038.175892][T19522] __x64_sys_sendmsg+0x1b1/0x290 [ 1038.175916][T19522] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1038.175954][T19522] do_syscall_64+0x166/0x520 [ 1038.175977][T19522] ? trace_irq_disable+0x3b/0x140 [ 1038.175996][T19522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.176013][T19522] ? clear_bhb_loop+0x70/0xc0 [ 1038.176033][T19522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.176049][T19522] RIP: 0033:0x7ff9de39f559 [ 1038.176064][T19522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.176078][T19522] RSP: 002b:00007ff9df1bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1038.176094][T19522] RAX: ffffffffffffffda RBX: 00007ff9de625fa0 RCX: 00007ff9de39f559 [ 1038.176106][T19522] RDX: 0000000000000800 RSI: 0000200000000080 RDI: 0000000000000003 [ 1038.176116][T19522] RBP: 00007ff9df1bc090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.176127][T19522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.176136][T19522] R13: 00007ff9de626038 R14: 00007ff9de625fa0 R15: 00007ffdc1863628 [ 1038.176161][T19522] [ 1038.650186][T19529] FAULT_INJECTION: forcing a failure. [ 1038.650186][T19529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1038.650224][T19529] CPU: 1 UID: 0 PID: 19529 Comm: syz.4.4946 Tainted: G L syzkaller #0 PREEMPT(full) [ 1038.650255][T19529] Tainted: [L]=SOFTLOCKUP [ 1038.650263][T19529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1038.650276][T19529] Call Trace: [ 1038.650286][T19529] [ 1038.650296][T19529] dump_stack_lvl+0xe8/0x150 [ 1038.650347][T19529] should_fail_ex+0x3eb/0x540 [ 1038.650379][T19529] _copy_to_user+0x31/0xb0 [ 1038.650414][T19529] simple_read_from_buffer+0xe1/0x170 [ 1038.650446][T19529] proc_fail_nth_read+0x1bb/0x230 [ 1038.650481][T19529] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1038.650516][T19529] ? rw_verify_area+0x24a/0x4c0 [ 1038.650541][T19529] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1038.650565][T19529] vfs_read+0x213/0xa80 [ 1038.650590][T19529] ? __pfx___mutex_lock+0x10/0x10 [ 1038.650618][T19529] ? __pfx_vfs_read+0x10/0x10 [ 1038.650640][T19529] ? __fget_files+0x2a/0x420 [ 1038.650659][T19529] ? __fget_files+0x3a2/0x420 [ 1038.650677][T19529] ? __fget_files+0x2a/0x420 [ 1038.650704][T19529] ? fdget+0x1ac/0x250 [ 1038.650733][T19529] ksys_read+0x150/0x270 [ 1038.650760][T19529] ? __pfx_ksys_read+0x10/0x10 [ 1038.650798][T19529] do_syscall_64+0x166/0x520 [ 1038.650828][T19529] ? trace_irq_disable+0x3b/0x140 [ 1038.650855][T19529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.650884][T19529] ? clear_bhb_loop+0x70/0xc0 [ 1038.650905][T19529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.650921][T19529] RIP: 0033:0x7feb7ab5fd8e [ 1038.650936][T19529] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1038.650950][T19529] RSP: 002b:00007feb7bb31fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1038.650967][T19529] RAX: ffffffffffffffda RBX: 00007feb7bb326c0 RCX: 00007feb7ab5fd8e [ 1038.650979][T19529] RDX: 000000000000000f RSI: 00007feb7bb320a0 RDI: 0000000000000005 [ 1038.650989][T19529] RBP: 00007feb7bb32090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.650999][T19529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.651008][T19529] R13: 00007feb7ae26038 R14: 00007feb7ae25fa0 R15: 00007ffeb3db3bf8 [ 1038.651034][T19529] [ 1038.652736][ T32] audit: type=1800 audit(1792817010.290:87): pid=19532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4946" name="/" dev="fuse" ino=1 res=0 errno=-4 [ 1038.796053][ T9] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1038.935535][T16394] usb 3-1: USB disconnect, device number 104 [ 1038.956214][ T9] usb 1-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1038.968836][ T9] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1038.968921][ T9] usb 1-1: Product: syz [ 1038.968971][ T9] usb 1-1: SerialNumber: syz [ 1038.991359][ T9] usb 1-1: config 0 descriptor?? [ 1039.008154][ T9] hso 1-1:0.0: Not our interface [ 1039.047801][T19537] fuse: Unknown parameter 'func' [ 1039.091250][T19540] tc_dump_action: action bad kind [ 1039.203597][ T9] usb 1-1: USB disconnect, device number 70 [ 1039.441578][T16394] usb 4-1: USB disconnect, device number 75 [ 1039.779658][T19555] FAULT_INJECTION: forcing a failure. [ 1039.779658][T19555] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.779706][T19555] CPU: 0 UID: 0 PID: 19555 Comm: syz.2.4956 Tainted: G L syzkaller #0 PREEMPT(full) [ 1039.779741][T19555] Tainted: [L]=SOFTLOCKUP [ 1039.779750][T19555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1039.779765][T19555] Call Trace: [ 1039.779774][T19555] [ 1039.779784][T19555] dump_stack_lvl+0xe8/0x150 [ 1039.779823][T19555] should_fail_ex+0x3eb/0x540 [ 1039.779856][T19555] should_failslab+0xa8/0x100 [ 1039.779888][T19555] __kmalloc_cache_noprof+0x9e/0x600 [ 1039.779914][T19555] ? ext4_getfsmap_datadev+0x6c7/0x2470 [ 1039.780059][T19555] ? ext4_getfsmap_datadev+0x6c7/0x2470 [ 1039.780087][T19555] ? ext4_get_group_desc+0x10e/0x4e0 [ 1039.780141][T19555] ext4_getfsmap_datadev+0x6c7/0x2470 [ 1039.780199][T19555] ? __pfx_ext4_getfsmap_datadev+0x10/0x10 [ 1039.780242][T19555] ext4_getfsmap+0xb84/0xd90 [ 1039.780274][T19555] ? __pfx_ext4_getfsmap_format+0x10/0x10 [ 1039.780326][T19555] ? __pfx_ext4_getfsmap+0x10/0x10 [ 1039.780350][T19555] ? __lock_acquire+0x747/0x2de0 [ 1039.780389][T19555] ? __pfx_ext4_getfsmap_datadev+0x10/0x10 [ 1039.780419][T19555] ? __pfx_ext4_getfsmap_format+0x10/0x10 [ 1039.780499][T19555] ? trace_ext4_getfsmap_high_key+0x81/0x1f0 [ 1039.780527][T19555] ext4_ioctl+0x3b04/0x4b70 [ 1039.780556][T19555] ? __pfx_ext4_ioctl+0x10/0x10 [ 1039.780576][T19555] ? is_bpf_text_address+0x292/0x2b0 [ 1039.780617][T19555] ? is_bpf_text_address+0x26/0x2b0 [ 1039.780653][T19555] ? kernel_text_address+0xa5/0xe0 [ 1039.780679][T19555] ? __kernel_text_address+0xd/0x30 [ 1039.780702][T19555] ? unwind_get_return_address+0x4d/0x90 [ 1039.780729][T19555] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1039.780757][T19555] ? arch_stack_walk+0xfb/0x150 [ 1039.780797][T19555] ? stack_trace_save+0xa9/0x100 [ 1039.780820][T19555] ? __pfx_stack_trace_save+0x10/0x10 [ 1039.780842][T19555] ? kasan_save_track+0x4f/0x80 [ 1039.780879][T19555] ? stack_depot_save_flags+0x33/0x810 [ 1039.780907][T19555] ? __lock_acquire+0x747/0x2de0 [ 1039.780933][T19555] ? kasan_save_track+0x4f/0x80 [ 1039.780956][T19555] ? kasan_save_track+0x3e/0x80 [ 1039.780980][T19555] ? kasan_save_free_info+0x40/0x50 [ 1039.781012][T19555] ? __kasan_slab_free+0x5c/0x80 [ 1039.781036][T19555] ? kfree+0x1c5/0x650 [ 1039.781066][T19555] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 1039.781089][T19555] ? security_file_ioctl+0xc3/0x2a0 [ 1039.781121][T19555] ? __se_sys_ioctl+0x47/0x170 [ 1039.781148][T19555] ? do_syscall_64+0x166/0x520 [ 1039.781180][T19555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.781247][T19555] ? kasan_quarantine_put+0xbb/0x1f0 [ 1039.781292][T19555] ? do_vfs_ioctl+0x116f/0x1530 [ 1039.781414][T19555] ? __fget_files+0x2a/0x420 [ 1039.781443][T19555] ? __fget_files+0x2a/0x420 [ 1039.781467][T19555] ? __fget_files+0x2a/0x420 [ 1039.781496][T19555] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1039.781524][T19555] ? __pfx_ext4_ioctl+0x10/0x10 [ 1039.781549][T19555] __se_sys_ioctl+0xfc/0x170 [ 1039.781583][T19555] do_syscall_64+0x166/0x520 [ 1039.781622][T19555] ? trace_irq_disable+0x3b/0x140 [ 1039.781649][T19555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.781670][T19555] ? clear_bhb_loop+0x70/0xc0 [ 1039.781697][T19555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.781721][T19555] RIP: 0033:0x7fafe619f559 [ 1039.781743][T19555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.781761][T19555] RSP: 002b:00007fafe7101028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1039.781784][T19555] RAX: ffffffffffffffda RBX: 00007fafe6425fa0 RCX: 00007fafe619f559 [ 1039.781800][T19555] RDX: 0000200000000400 RSI: 00000000c0c0583b RDI: 0000000000000003 [ 1039.781815][T19555] RBP: 00007fafe7101090 R08: 0000000000000000 R09: 0000000000000000 [ 1039.781829][T19555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1039.781844][T19555] R13: 00007fafe6426038 R14: 00007fafe6425fa0 R15: 00007ffdaeb81a68 [ 1039.781879][T19555] [ 1039.851558][ T32] audit: type=1800 audit(1792817011.490:88): pid=19538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4948" name="/" dev="fuse" ino=1 res=0 errno=-107 [ 1040.254579][T19560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4957'. [ 1040.287373][T19562] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4958'. [ 1040.293760][ T32] audit: type=1400 audit(1792817011.930:89): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=19561 comm="syz.4.4958" [ 1040.530244][T19571] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1040.596870][T19574] netlink: 6060 bytes leftover after parsing attributes in process `syz.3.4964'. [ 1040.634922][T19576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4965'. [ 1040.686570][ T9] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1040.692804][T19578] PKCS7: Unknown OID: [158] 2.16.840.1.101.3.4.2.13 [ 1040.692820][T19578] Unsupported digest algo: 106 [ 1040.761869][T19580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4967'. [ 1040.766050][T19580] netlink: 'syz.4.4967': attribute type 7 has an invalid length. [ 1040.844409][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1040.848859][ T9] usb 1-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1040.849920][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1040.864319][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.864409][ T9] usb 1-1: Product: syz [ 1040.864454][ T9] usb 1-1: Manufacturer: syz [ 1040.864491][ T9] usb 1-1: SerialNumber: syz [ 1040.888403][ T9] usb 1-1: config 0 descriptor?? [ 1041.043404][T17823] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1041.195757][T17823] usb 5-1: Using ep0 maxpacket: 32 [ 1041.196555][T17823] usb 5-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1041.197935][T17823] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.200521][T17823] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1041.200552][T17823] usb 5-1: Product: syz [ 1041.200569][T17823] usb 5-1: Manufacturer: syz [ 1041.200584][T17823] usb 5-1: SerialNumber: syz [ 1041.208855][T17823] usb 5-1: config 0 descriptor?? [ 1041.218415][T17823] hub 5-1:0.0: bad descriptor, ignoring hub [ 1041.218446][T17823] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1041.255263][T19590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4970'. [ 1041.296711][T19590] FAULT_INJECTION: forcing a failure. [ 1041.296711][T19590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1041.296751][T19590] CPU: 0 UID: 0 PID: 19590 Comm: syz.3.4970 Tainted: G L syzkaller #0 PREEMPT(full) [ 1041.296783][T19590] Tainted: [L]=SOFTLOCKUP [ 1041.296792][T19590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1041.296807][T19590] Call Trace: [ 1041.296817][T19590] [ 1041.296836][T19590] dump_stack_lvl+0xe8/0x150 [ 1041.296877][T19590] should_fail_ex+0x3eb/0x540 [ 1041.296913][T19590] _copy_from_user+0x2d/0xb0 [ 1041.296945][T19590] __se_sys_add_key+0x2af/0x420 [ 1041.297073][T19590] ? __pfx___se_sys_add_key+0x10/0x10 [ 1041.297127][T19590] ? __x64_sys_add_key+0x20/0xc0 [ 1041.297163][T19590] do_syscall_64+0x166/0x520 [ 1041.297198][T19590] ? trace_irq_disable+0x3b/0x140 [ 1041.297226][T19590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.297251][T19590] ? clear_bhb_loop+0x70/0xc0 [ 1041.297280][T19590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.297305][T19590] RIP: 0033:0x7f36edb9f559 [ 1041.297328][T19590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1041.297349][T19590] RSP: 002b:00007f36ee9ac028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1041.297379][T19590] RAX: ffffffffffffffda RBX: 00007f36ede25fa0 RCX: 00007f36edb9f559 [ 1041.297397][T19590] RDX: 00002000000007c0 RSI: 0000200000000780 RDI: 0000200000000740 [ 1041.297416][T19590] RBP: 00007f36edc36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 1041.297432][T19590] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1041.297447][T19590] R13: 00007f36ede26038 R14: 00007f36ede25fa0 R15: 00007ffd77e6ed58 [ 1041.297484][T19590] [ 1041.449005][T19581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.456551][T19581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.481021][T19581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.511378][T19581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.512265][T19581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.512643][T19581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.543619][T19581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.545959][T19581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.567922][T19581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.568290][T19581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.743688][T16394] usb 5-1: USB disconnect, device number 118 [ 1041.788060][T19604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4974'. [ 1041.919893][T17823] hid_parser_main: 4 callbacks suppressed [ 1041.919920][T17823] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 1041.926561][T17823] hid-generic 0000:0000:0000.0059: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1042.276449][T19616] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4978'. [ 1042.281911][T19616] gretap0: entered promiscuous mode [ 1042.583237][ T5746] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1042.614730][T19627] random: crng reseeded on system resumption [ 1042.733258][ T5746] usb 5-1: Using ep0 maxpacket: 16 [ 1042.734414][ T5746] usb 5-1: New USB device found: idVendor=056a, idProduct=032c, bcdDevice=0.00 [ 1042.735505][ T5746] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.735533][ T5746] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1042.735563][ T5746] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1042.735599][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.737667][ T5746] usb 5-1: config 0 descriptor?? [ 1042.933231][ T5744] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1043.083140][ T5744] usb 3-1: Using ep0 maxpacket: 16 [ 1043.083975][ T5744] usb 3-1: New USB device found: idVendor=04f3, idProduct=074d, bcdDevice=0.00 [ 1043.086344][ T5744] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1043.086373][ T5744] usb 3-1: config 0 has no interface number 0 [ 1043.086416][ T5744] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.086444][ T5744] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.086468][ T5744] usb 3-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1043.086499][ T5744] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1043.086535][ T5744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.089325][ T5744] usb 3-1: config 0 descriptor?? [ 1043.182699][ T5744] usbhid 3-1:0.1: fixing wrong optional hid class descriptors count [ 1043.209759][ T5746] wacom 0003:056A:032C.005A: hidraw0: USB HID v0.00 Joystick [HID 056a:032c] on usb-dummy_hcd.4-1/input0 [ 1043.401767][T19616] pim6reg: entered allmulticast mode [ 1043.411803][T19616] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4978'. [ 1043.455445][T19616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.459270][T19616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.502433][ T5744] usbhid 3-1:0.1: can't add hid device: -32 [ 1043.502552][ T5744] usbhid 3-1:0.1: probe with driver usbhid failed with error -32 [ 1043.539357][T16394] usb 1-1: USB disconnect, device number 71 [ 1043.805576][T19649] FAULT_INJECTION: forcing a failure. [ 1043.805576][T19649] name failslab, interval 1, probability 0, space 0, times 0 [ 1043.805605][T19649] CPU: 0 UID: 0 PID: 19649 Comm: syz.3.4985 Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.805635][T19649] Tainted: [L]=SOFTLOCKUP [ 1043.805641][T19649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1043.805651][T19649] Call Trace: [ 1043.805658][T19649] [ 1043.805666][T19649] dump_stack_lvl+0xe8/0x150 [ 1043.805695][T19649] should_fail_ex+0x3eb/0x540 [ 1043.805719][T19649] should_failslab+0xa8/0x100 [ 1043.805743][T19649] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 1043.805762][T19649] ? __lock_acquire+0x747/0x2de0 [ 1043.805779][T19649] ? __kernfs_new_node+0xa9/0x980 [ 1043.805800][T19649] ? __kernfs_new_node+0xa9/0x980 [ 1043.805827][T19649] kstrdup+0x42/0x100 [ 1043.805904][T19649] __kernfs_new_node+0xa9/0x980 [ 1043.805934][T19649] ? __pfx___kernfs_new_node+0x10/0x10 [ 1043.805956][T19649] ? lock_acquire+0x115/0x350 [ 1043.805973][T19649] ? kernfs_root+0x1c/0x230 [ 1043.805999][T19649] ? kernfs_root+0x1c/0x230 [ 1043.806018][T19649] ? kernfs_root+0x1c/0x230 [ 1043.806038][T19649] ? kernfs_root+0x1c/0x230 [ 1043.806090][T19649] kernfs_new_node+0xeb/0x140 [ 1043.806131][T19649] __kernfs_create_file+0x4b/0x2e0 [ 1043.806151][T19649] sysfs_add_file_mode_ns+0x237/0x300 [ 1043.806175][T19649] internal_create_group+0x679/0x1180 [ 1043.806205][T19649] ? kobject_add+0x163/0x240 [ 1043.806224][T19649] ? __pfx_internal_create_group+0x10/0x10 [ 1043.806255][T19649] sysfs_create_groups+0x59/0x120 [ 1043.806278][T19649] ib_setup_port_attrs+0xfe4/0x2460 [ 1043.806385][T19649] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 1043.806407][T19649] ? __mutex_unlock_slowpath+0x731/0x900 [ 1043.806436][T19649] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1043.806471][T19649] ? device_add+0x6f6/0xb80 [ 1043.806597][T19649] ib_register_device+0xda6/0x1080 [ 1043.806638][T19649] ? __pfx_ib_register_device+0x10/0x10 [ 1043.806656][T19649] ? ib_device_set_netdev+0x5c4/0x6c0 [ 1043.806680][T19649] rxe_register_device+0x1e3/0x350 [ 1043.806735][T19649] rxe_net_add+0x81/0x110 [ 1043.806755][T19649] rxe_newlink+0xf4/0x1c0 [ 1043.806804][T19649] nldev_newlink+0x5be/0x650 [ 1043.806852][T19649] ? __pfx_nldev_newlink+0x10/0x10 [ 1043.806949][T19649] ? __pfx_hook_capable+0x10/0x10 [ 1043.806992][T19649] ? __pfx_hook_capable+0x10/0x10 [ 1043.807023][T19649] ? apparmor_capable+0x126/0x170 [ 1043.807049][T19649] ? security_capable+0x7e/0x2c0 [ 1043.807071][T19649] ? __pfx_nldev_newlink+0x10/0x10 [ 1043.807094][T19649] rdma_nl_rcv+0x6ef/0xa40 [ 1043.807149][T19649] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1043.807191][T19649] ? netlink_deliver_tap+0x2e/0x1b0 [ 1043.807240][T19649] ? netlink_deliver_tap+0x2e/0x1b0 [ 1043.807262][T19649] netlink_unicast+0x8ef/0xa80 [ 1043.807292][T19649] netlink_sendmsg+0x7f0/0xb20 [ 1043.807316][T19649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1043.807338][T19649] ? aa_sock_msg_perm+0x144/0x210 [ 1043.807361][T19649] ? apparmor_socket_sendmsg+0x98/0x360 [ 1043.807380][T19649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1043.807397][T19649] sock_sendmsg_nosec+0x14e/0x190 [ 1043.807417][T19649] ____sys_sendmsg+0x54e/0x850 [ 1043.807443][T19649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1043.807473][T19649] ? import_iovec+0x73/0xa0 [ 1043.807517][T19649] ___sys_sendmsg+0x2a5/0x360 [ 1043.807538][T19649] ? __lock_acquire+0x747/0x2de0 [ 1043.807567][T19649] ? __pfx____sys_sendmsg+0x10/0x10 [ 1043.807592][T19649] ? futex_wait+0x2a2/0x390 [ 1043.807665][T19649] ? __fget_files+0x3a2/0x420 [ 1043.807691][T19649] ? __fget_files+0x2a/0x420 [ 1043.807732][T19649] __x64_sys_sendmsg+0x1b1/0x290 [ 1043.807758][T19649] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1043.807797][T19649] do_syscall_64+0x166/0x520 [ 1043.807820][T19649] ? trace_irq_disable+0x3b/0x140 [ 1043.807840][T19649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.807857][T19649] ? clear_bhb_loop+0x70/0xc0 [ 1043.807876][T19649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.807893][T19649] RIP: 0033:0x7f36edb9f559 [ 1043.807909][T19649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1043.807924][T19649] RSP: 002b:00007f36ee9ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1043.807941][T19649] RAX: ffffffffffffffda RBX: 00007f36ede25fa0 RCX: 00007f36edb9f559 [ 1043.807953][T19649] RDX: 000000000000c000 RSI: 0000200000000140 RDI: 0000000000000006 [ 1043.807964][T19649] RBP: 00007f36edc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1043.807974][T19649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1043.807984][T19649] R13: 00007f36ede26038 R14: 00007f36ede25fa0 R15: 00007ffd77e6ed58 [ 1043.808010][T19649] [ 1043.811689][T19649] infiniband syz0: Couldn't register device with driver model [ 1043.932742][T19649] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1044.003507][T16394] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1044.154088][T16394] usb 1-1: Using ep0 maxpacket: 16 [ 1044.156080][T16394] usb 1-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=f.89 [ 1044.161379][T16394] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.161457][T16394] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1044.180523][T16394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1044.180606][T16394] usb 1-1: SerialNumber: syz [ 1044.613230][ T5744] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1044.774149][ T5744] usb 4-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 1044.778074][ T5744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.778106][ T5744] usb 4-1: Product: syz [ 1044.778122][ T5744] usb 4-1: Manufacturer: syz [ 1044.778144][ T5744] usb 4-1: SerialNumber: syz [ 1044.867460][T13825] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1045.375996][T16394] usb 5-1: USB disconnect, device number 119 [ 1045.824246][T16394] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1045.903305][T13825] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1045.903735][T13825] ath9k_htc: Failed to initialize the device [ 1045.945157][T13825] usb 4-1: ath9k_htc: USB layer deinitialized [ 1045.987595][T16394] usb 5-1: New USB device found: idVendor=27b8, idProduct=01ed, bcdDevice=0.00 [ 1045.989367][ T5746] usb 3-1: USB disconnect, device number 105 [ 1045.990655][T16394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.990681][T16394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.990737][T16394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.048835][T16394] usb 5-1: config 0 descriptor?? [ 1046.433343][ T5746] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1046.593234][ T5746] usb 3-1: Using ep0 maxpacket: 8 [ 1046.595181][ T5746] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1046.596387][ T5746] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 1046.596443][ T5746] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1046.596483][ T5746] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1046.596525][ T5746] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1046.596556][ T5746] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1046.596582][ T5746] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1046.596659][ T5746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.765602][ T1718] usb 1-1: USB disconnect, device number 72 [ 1046.825579][ T5746] usb 3-1: usb_control_msg returned -32 [ 1046.825634][ T5746] usbtmc 3-1:16.0: can't read capabilities [ 1046.998438][T16394] usbhid 5-1:0.0: can't add hid device: -71 [ 1046.998558][T16394] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1047.006928][T16394] usb 5-1: USB disconnect, device number 120 [ 1047.423768][ T5744] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1047.501581][T17823] usb 4-1: USB disconnect, device number 76 [ 1047.573236][ T5744] usb 1-1: Using ep0 maxpacket: 32 [ 1047.574142][ T5744] usb 1-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1047.576219][ T5744] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1047.578757][ T5744] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.578786][ T5744] usb 1-1: Product: syz [ 1047.578802][ T5744] usb 1-1: Manufacturer: syz [ 1047.578818][ T5744] usb 1-1: SerialNumber: syz [ 1047.618880][ T5744] usb 1-1: config 0 descriptor?? [ 1047.900596][T19679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4995'. [ 1048.721023][T17823] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 1051.573070][ C1] sched: DL replenish lagged too much [ 1054.913830][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.930241][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.480080][T17823] usb 5-1: device descriptor read/64, error -110 [ 1068.353946][T17823] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 1087.587220][T17823] usb 5-1: device descriptor read/64, error -32 [ 1092.843315][T17823] usb usb5-port1: attempt power cycle [ 1110.995471][T13904] Bluetooth: hci4: command 0x0406 tx timeout [ 1117.295592][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.303938][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1125.552548][ T196] usb 3-1: USB disconnect, device number 106 [ 1135.092335][ T5744] usb 1-1: USB disconnect, device number 73 [ 1146.503808][T17823] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 1155.503019][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1155.510055][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19681/1:b..l.. [ 1155.519574][ C1] rcu: (detected by 1, t=10503 jiffies, g=177437, q=2699 ncpus=2) [ 1155.527520][ C1] task:syz.4.4994 state:R running task stack:27032 pid:19681 tgid:19680 ppid:16267 task_flags:0x400040 flags:0x00080002 [ 1155.541064][ C1] Call Trace: [ 1155.544380][ C1] [ 1155.547350][ C1] __schedule+0x17dd/0x5830 [ 1155.551910][ C1] ? __lock_acquire+0x747/0x2de0 [ 1155.556908][ C1] ? __lock_acquire+0x747/0x2de0 [ 1155.561899][ C1] ? __lock_acquire+0x747/0x2de0 [ 1155.566890][ C1] ? __pfx___schedule+0x10/0x10 [ 1155.571788][ C1] ? __lock_acquire+0x747/0x2de0 [ 1155.576776][ C1] ? __lock_acquire+0x747/0x2de0 [ 1155.581771][ C1] preempt_schedule_irq+0x4b/0x90 [ 1155.586848][ C1] irqentry_exit+0x14f/0x9b0 [ 1155.591486][ C1] ? trace_irq_disable+0x3b/0x140 [ 1155.596596][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1155.602625][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 1155.607980][ C1] Code: ff ff ff e8 a0 73 72 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 a2 5d 45 13 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 bf 86 75 0a cc 48 8d 3d 07 50 1f [ 1155.627631][ C1] RSP: 0018:ffffc900061f7528 EFLAGS: 00000286 [ 1155.633751][ C1] RAX: 024016b4d9806e00 RBX: 0000000000000000 RCX: 0000000000000046 [ 1155.641779][ C1] RDX: 000000008c83b3b9 RSI: ffffffff8ea736e7 RDI: ffffffff8c8fe980 [ 1155.649821][ C1] RBP: ffff88801cbfddc0 R08: ffffffff8178a98f R09: 0000000000000000 [ 1155.657839][ C1] R10: ffffc900061f76b8 R11: fffff52000c3eed9 R12: ffffffff9015a4a0 [ 1155.665856][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 1155.673876][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1155.679051][ C1] ? arch_stack_walk+0xe3/0x150 [ 1155.683950][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1155.689115][ C1] unwind_next_frame+0xac/0x2550 [ 1155.694110][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1155.699278][ C1] ? __unwind_start+0xed/0x660 [ 1155.704084][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1155.709252][ C1] __unwind_start+0x514/0x660 [ 1155.713986][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1155.720185][ C1] arch_stack_walk+0xe3/0x150 [ 1155.724909][ C1] ? arch_stack_walk+0xe3/0x150 [ 1155.729810][ C1] stack_trace_save+0xa9/0x100 [ 1155.734624][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1155.740046][ C1] save_stack+0x122/0x230 [ 1155.744531][ C1] ? __lock_acquire+0x747/0x2de0 [ 1155.749547][ C1] ? __pfx_save_stack+0x10/0x10 [ 1155.754465][ C1] ? page_ext_put+0x97/0xc0 [ 1155.759096][ C1] __reset_page_owner+0x73/0x2a0 [ 1155.764085][ C1] __free_frozen_pages+0xc97/0xd90 [ 1155.769253][ C1] __slab_free+0x269/0x2c0 [ 1155.773764][ C1] ? qlist_free_all+0x8e/0x100 [ 1155.778574][ C1] qlist_free_all+0x99/0x100 [ 1155.783208][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1155.788716][ C1] __kasan_slab_alloc+0x22/0x80 [ 1155.793613][ C1] __kmalloc_noprof+0x302/0x710 [ 1155.798506][ C1] ? rcu_is_watching+0x16/0xb0 [ 1155.803314][ C1] ? __kmalloc_noprof+0x1a6/0x710 [ 1155.808376][ C1] ? tomoyo_realpath_from_path+0xef/0x640 [ 1155.814146][ C1] ? tomoyo_realpath_from_path+0xef/0x640 [ 1155.819924][ C1] tomoyo_realpath_from_path+0xef/0x640 [ 1155.825525][ C1] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1155.831199][ C1] tomoyo_path_number_perm+0x246/0x5f0 [ 1155.836708][ C1] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1155.842770][ C1] ? __lock_acquire+0x747/0x2de0 [ 1155.847765][ C1] ? handle_mm_fault+0xee/0x3540 [ 1155.852789][ C1] ? __fget_files+0x2a/0x420 [ 1155.857424][ C1] ? __fget_files+0x2a/0x420 [ 1155.862054][ C1] ? __fget_files+0x2a/0x420 [ 1155.866686][ C1] security_file_ioctl+0xc3/0x2a0 [ 1155.871770][ C1] __se_sys_ioctl+0x47/0x170 [ 1155.876412][ C1] do_syscall_64+0x166/0x520 [ 1155.881051][ C1] ? trace_irq_disable+0x3b/0x140 [ 1155.886118][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.892228][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1155.896958][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.902890][ C1] RIP: 0033:0x7feb7ab9f1eb [ 1155.907365][ C1] RSP: 002b:00007feb7bb2ff00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1155.915822][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007feb7ab9f1eb [ 1155.923833][ C1] RDX: 00007feb7bb2ffc0 RSI: 0000000040085503 RDI: 0000000000000003 [ 1155.931844][ C1] RBP: 00007feb7bb30fd0 R08: 0000000000000040 R09: 00007feb7bb2ffc8 [ 1155.939858][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 1155.947871][ C1] R13: 0000000800000000 R14: 0000000000000012 R15: 00007feb7ac55a91 [ 1155.955905][ C1]