last executing test programs: 13m33.190183566s ago: executing program 2 (id=540): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000080)={r2}) (fail_nth: 2) 13m32.754513733s ago: executing program 2 (id=543): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x51, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x80, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) r2 = syz_socket_connect_nvme_tcp() setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000040)=0x2, 0x4) ioctl$CEC_RECEIVE(r1, 0xc0386106, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000001180)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="40062f0000002f0bf7bfc3eee56937e1dc17e067bc0ba32600"], 0x0, 0x0, 0x0, 0x0}, 0x0) 13m30.288806081s ago: executing program 2 (id=552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0x8, 0x8, {0x51, 0x48f, 0x6, {0xfff8, 0x9}, {0x0, 0xbf31}, @const={0x2, {0x6, 0x4, 0xba2, 0xfffe}}}, {0x54, 0x62b5, 0x7, {0x80, 0x7bea}, {0x0, 0x47}, @period={0x5b, 0x6, 0xff01, 0x8, 0x8, {0xa, 0x244, 0xd, 0x59bd}, 0x0, 0x0}}}) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0x8, 0x8, {0x51, 0x48f, 0x6, {0xfff8, 0x9}, {0x0, 0xbf31}, @const={0x2, {0x6, 0x4, 0xba2, 0xfffe}}}, {0x54, 0x62b5, 0x7, {0x80, 0x7bea}, {0x0, 0x47}, @period={0x5b, 0x6, 0xff01, 0x8, 0x8, {0xa, 0x244, 0xd, 0x59bd}, 0x0, 0x0}}}) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async) 13m30.122052836s ago: executing program 2 (id=553): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000700)='./file0/../file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) (fail_nth: 2) 13m29.752999915s ago: executing program 2 (id=554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x79}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 13m27.549816508s ago: executing program 2 (id=564): arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) wait4(0x0, 0x0, 0x40000000, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x7, 0x1, 0x2, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0xd0, 0x9, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x9, 0xa6, 0xfa}}}}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd700001dcdf252b0000000c00018008000100", @ANYRES32=r2, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201100153a42908f00a71729188110203010902240001060000000904020002ffffff0009050b0000000000000905", @ANYRES32], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$netlink(0x10, 0x3, 0x1) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000240)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open_by_handle_at(r8, &(0x7f0000000040)=ANY=[], 0x280) sendmsg$netlink(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="2400000064001f03000000000000000008000000ffffffff"], 0x24}], 0x1}, 0x0) 13m27.33806198s ago: executing program 32 (id=564): arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) wait4(0x0, 0x0, 0x40000000, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x7, 0x1, 0x2, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0xd0, 0x9, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x9, 0xa6, 0xfa}}}}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd700001dcdf252b0000000c00018008000100", @ANYRES32=r2, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201100153a42908f00a71729188110203010902240001060000000904020002ffffff0009050b0000000000000905", @ANYRES32], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$netlink(0x10, 0x3, 0x1) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000240)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open_by_handle_at(r8, &(0x7f0000000040)=ANY=[], 0x280) sendmsg$netlink(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="2400000064001f03000000000000000008000000ffffffff"], 0x24}], 0x1}, 0x0) 12m40.261329123s ago: executing program 0 (id=734): kexec_load(0x2, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a89ed0e619add", 0x7e, 0x5, 0x4}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb09", 0x40}], 0x1}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x4, 0x8, 0x7, 0x4000000000000e52, 0x1ff, 0x81, 0x1041, 0x200200000006, 0x2, 0x400000001, 0x0, 0xffffffffffffffff, 0x5, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000, 0x547d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m39.56253932s ago: executing program 0 (id=737): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x1d, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 12m39.423625322s ago: executing program 0 (id=738): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x1d, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (fail_nth: 2) 12m39.269960229s ago: executing program 0 (id=740): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) recvmmsg(r1, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}, 0x7c28}], 0x1, 0x40000001, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r2 = socket(0xa, 0x3, 0xff) connect$inet6(r2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8020) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) getpgid(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_SET_MPATH(r3, 0x0, 0x4080) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x40, 0x3, @thr={0x0, 0x0}}) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000001c0), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f000043d000/0x3000)=nil, 0x3000, 0x15) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000000c0)=0x3a7b, 0x4) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 12m38.769915082s ago: executing program 0 (id=742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(0x0, 0x1, 0xc0400) bind$alg(r2, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000040)=@ethtool_rxfh={0x46, 0xff, 0x4, 0x0, 0xcd, "a5834b", 0x3}}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYRESHEX=r3, @ANYRES32], 0x38}}, 0x0) 12m37.817693238s ago: executing program 0 (id=746): kexec_load(0x2, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a89ed0e619add", 0x7e, 0x5, 0x4}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb09", 0x40}], 0x1}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@iv={0xc0, 0x117, 0x2, 0xac, "7963588d812f80496df3e68bb5f473d502c27610f6872d78af89a1f7121b39ed6013e2d3aa808ab0a07fe57aa16daa6d1d367148308eabed4c5328b6fdd0d63b0c49f9f0e70e7c9ee2c5de75ba6d2a6e8fab7861a00e641c561206d3cff70025642172c825232b18e835e7616fadef316c78af5fe3a81ce59979c62b60842b39652c8a50962b650ab46779b28705df40c29e759e6a4cc766b0cc5545fc67c124087c6098d43e81b734a3f952"}], 0xc0}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x4, 0x8, 0x7, 0x4000000000000e52, 0x1ff, 0x81, 0x1041, 0x200200000006, 0x2, 0x400000001, 0x0, 0xffffffffffffffff, 0x5, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000, 0x547d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m37.350458125s ago: executing program 33 (id=746): kexec_load(0x2, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a89ed0e619add", 0x7e, 0x5, 0x4}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb09", 0x40}], 0x1}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@iv={0xc0, 0x117, 0x2, 0xac, "7963588d812f80496df3e68bb5f473d502c27610f6872d78af89a1f7121b39ed6013e2d3aa808ab0a07fe57aa16daa6d1d367148308eabed4c5328b6fdd0d63b0c49f9f0e70e7c9ee2c5de75ba6d2a6e8fab7861a00e641c561206d3cff70025642172c825232b18e835e7616fadef316c78af5fe3a81ce59979c62b60842b39652c8a50962b650ab46779b28705df40c29e759e6a4cc766b0cc5545fc67c124087c6098d43e81b734a3f952"}], 0xc0}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x4, 0x8, 0x7, 0x4000000000000e52, 0x1ff, 0x81, 0x1041, 0x200200000006, 0x2, 0x400000001, 0x0, 0xffffffffffffffff, 0x5, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000, 0x547d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.309722879s ago: executing program 5 (id=5023): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 6.156263568s ago: executing program 5 (id=5024): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000200)={'\x00', 0x1, 0x6, 0x2e, 0x0, 0x5, 0x200000, 0x8000000}) 5.729346888s ago: executing program 1 (id=5026): r0 = syz_clone3(0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0xff02) 5.186434536s ago: executing program 1 (id=5027): r0 = syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x40) r1 = inotify_init1(0x0) read(r1, &(0x7f0000000080)=""/121, 0x79) 5.183702678s ago: executing program 5 (id=5035): r0 = syz_clone3(0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0xff02) 4.979286006s ago: executing program 5 (id=5029): r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x2) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x2d) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$search(0xa, r0, 0x0, 0x0, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') execveat$binfmt(r2, r4, &(0x7f0000000340)={[&(0x7f0000000140)=':.-:\x00', &(0x7f0000000180)='\\\'%/\x00', &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)='\'\x00', &(0x7f0000000240)='syz', &(0x7f0000000280)='syz', &(0x7f00000002c0)=']!\x01.\\\x00', &(0x7f0000000300)='syz']}, &(0x7f0000000540)={[&(0x7f0000000440)='&\x00', &(0x7f0000000480)='syz', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='[\x00']}, 0x1000) 4.887574617s ago: executing program 5 (id=5030): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4077, 0xfed}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000001580)={0x2020}, 0x2020) write$evdev(r5, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf250a0000000800", @ANYRES32=r8, @ANYBLOB="06277ae16fb3719023c564bbeb68fcb835601c60fab0a46674eff2cf6d42b7215cd427c660f8fa56b162633aba02a399ad9740e69d2e2a49e84ca3324b3bc9abd5f13d4742081a7b00000000000047b559a9aa92e8f2dc032e41b602e20c8b443f12eb805360d252ee50df"], 0x20}, 0x1, 0x0, 0x0, 0x884}, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x10) recvmmsg(r9, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt(r9, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 4.759905885s ago: executing program 1 (id=5031): r0 = syz_open_dev$video(0x0, 0x8, 0xa0000) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2040) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) syz_open_dev$swradio(0x0, 0x0, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newsa={0xf0, 0x1a, 0x633, 0x0, 0x5dfdbfd, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, @in6=@mcast1, 0x0, 0x4000, 0x4e23, 0x8001, 0x0, 0x20}, {@in=@local, 0x200, 0x32}, @in=@empty, {0x323, 0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x92be}, {0x0, 0x40000, 0x0, 0x3}, {0xfffffffb, 0xfffffbff, 0xca09}, 0x70bd29, 0x3502, 0x2, 0x1, 0x0, 0x10}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="010000001e00210000000000000000000700000005000000000000000a00020077a9e2000000"], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) sendmsg$NFC_CMD_DEV_DOWN(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fcdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="08000104", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4004881}, 0x40804) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="6f733249b67b2d28292f2e7d2b00"]) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0x30000004}) epoll_pwait(r9, &(0x7f0000000240)=[{}], 0x1, 0xfffffffb, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 3.894092721s ago: executing program 1 (id=5032): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x1d}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x26}, @fda={0x66646185, 0x800008, 0x1, 0x2d}}, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 3.802149619s ago: executing program 1 (id=5033): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f250040290000000109021200"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000480)={0x14, &(0x7f0000000380)={0x20, 0x1, 0x1a, {0x1a, 0x22, "123a032ce6a7853ba81982c53898b80f6bf079eff2b0e015"}}, &(0x7f00000003c0)={0x0, 0x3, 0x66, @string={0x66, 0x3, "89d2e0f85c49a269e3bb38dfe31b9d5901732a6274ce90f167815345963d9c96950bef51716899ea8f151ab9527b5721ade3d4143e3a2db74c75a00ca5d695e0c23777352861dd857871e7348c1805ae036cbbf1eb2e05ebd3796ed0ead759e8603c808d"}}}, &(0x7f0000000800)={0x34, &(0x7f00000004c0)={0x0, 0x14, 0x66, "7d10fc12655d2451334d3a86a27f7e27e83c10595055ad1797e7e40fea6a9ef09e38461cbec357d12dcadb1e09e4648299653bc5ecf2e8561961ec1a2f378595897726f237849cae2494c673f3b3ca83feef6dd330f89f3707ba6984e5db6053870e169f045c"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000680)={0x20, 0x0, 0x2e, {0x2c, "d7354aa2525388d276d17cf535875f03b3fa884d01148f8607ff67eb0fb4f1358f8f82422d2a7bbafa8aa8b3"}}, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0xff}, &(0x7f00000007c0)={0x20, 0x0, 0x1, 0xa}}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) eventfd(0x8000) 2.191194361s ago: executing program 4 (id=5040): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0xc080) (fail_nth: 4) 1.907371598s ago: executing program 4 (id=5041): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000004, 0x50, 0xffffffffffffffff, 0x0) futex(&(0x7f00000000c0), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @local}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @remote, @empty}, 0xc) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000)=0x1, 0x0) gettimeofday(&(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) semget(0x2, 0x2, 0x441) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={r1, r2/1000+60000}, 0x10) 1.649881908s ago: executing program 3 (id=5042): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x1d}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x26}, @fda={0x66646185, 0x800008, 0x1, 0x2d}}, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 1.588046061s ago: executing program 5 (id=5043): socket$nl_rdma(0x10, 0x3, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000d40)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f00f3ff0000090505020000fcffff0905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30", @ANYRES16=r1], 0xc4}}, 0x0) 1.494393602s ago: executing program 3 (id=5044): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, 0x0) (fail_nth: 4) 1.025757463s ago: executing program 3 (id=5045): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0xb, r2, 0x0, r1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, 0x0) 1.019951342s ago: executing program 3 (id=5046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000004c0)) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000180)={0x29}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000001580)={0x2020}, 0x2020) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r1, 0x1, 0xfffffffd, 0x4, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4044890) 874.68596ms ago: executing program 4 (id=5047): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0xb, r2, 0x0, r1}) (fail_nth: 2) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, 0x0) 533.654981ms ago: executing program 3 (id=5048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x13, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20044000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x16) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000100)) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa003, 0x0, 0x802, 0x0) ioctl$TCSETS(r1, 0x8924, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYBLOB="8f84b4af56a26f80b5ac4426684e4fb823c3458de696bbeedb573bec4430039c059fdcb427177e4b036e", @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a90000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c2008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 443.052722ms ago: executing program 1 (id=5049): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000000)=[@nested_amd_invlpga={0x17d, 0x20, {0x200000, 0x2c60}}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x1, 0x101}}, @wr_drn={0x68, 0x20, {0x0, 0x1}}, @wr_drn={0x68, 0x20, {0x0, 0x3}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x5ef3d051, 0x51a, 0x1}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x564, 0x2}}, @wrmsr={0x65, 0x20, {0x207, 0x7}}, @nested_amd_stgi={0x17e, 0x10}, @cpuid={0x64, 0x18, {0x1, 0xa1}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x392, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0x843}}, @nested_vmresume={0x130, 0x18, 0x2}, @wr_drn={0x68, 0x20, {0x2, 0xc0e}}], 0x1d8}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0xe) (async) ioctl$KDSKBLED(r1, 0x4b65, 0x82f7) (async) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000300)=@arm64_ccsidr={0x6020000000110000, &(0x7f00000002c0)=0x480000000}) (async) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000400)={0x0, &(0x7f0000000340)=[@nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @wr_drn={0x68, 0x20, {0x5, 0xae}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @cpuid={0x64, 0x18, {0x80000000, 0x8}}], 0x88}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {0x101}}, './file0\x00'}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000540)) (async) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000580)={0x3, 0x8, 0xee2, 0x5, 0xae, "de8333c79cba607b0999c825fba535a0a8b0f5", 0xea, 0x6}) (async) ioctl$FIBMAP(r2, 0x1, &(0x7f00000005c0)=0x7342) (async) r4 = open_tree(r3, &(0x7f0000000600)='./file0\x00', 0x100) r5 = getpid() fcntl$setown(r4, 0x8, r5) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x0) read$ptp(r7, &(0x7f00000006c0)=""/118, 0x76) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000740)="c3e1d3aa72ab35f15473216924c0b8bce0914f61f7b87b3a32d26b5a037a11f8990e87747ff46c36e9dd4eeeaaaa5ed3b072e914995dc2e25565224a941de26d114970c1b8ac99ff4646eef60dbc64730a51ffc513cc9e4e68") (async) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000007c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x1d) (async) ioctl$LOOP_CLR_FD(r1, 0x4c01) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r3) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40004}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xac, r9, 0x80, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x66}}}}, [@NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e29bfe54213f555daaec05504326428f26b64447f77a16e4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a7d13e78e3018b660528ec676bf01a3e"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ad3391e365571f535de6446407063ebc68824c3e55eacf82"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x81}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f050c26019476d18"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="bd32208b5b95b48fbda64d7925254db413c561c29e0c63a9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5044c42519a6c3d2"}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4001}, 0x1) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xc) ioctl$TUNSETGROUP(r3, 0x400454ce, r10) (async) r11 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f0000000a40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x6, 0x2, 0x20, 0x6, 0x9, 0x1}, {0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x7, 0x80}, {0x9, 0x5, 0x1, 0x3, 0x20, 0x6, 0x1}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r11, &(0x7f0000000b80)={0x14, &(0x7f0000000a80)={0x20, 0x2, 0x31, {0x31, 0x21, "24f10055437cf9f6740857864124cc39187d2a56cbca53020755d208b63c01b8b0f15eb2a28e9f381acdc6d7873212"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x8f, @string={0x8f, 0x3, "088114f435ce41ea80121a6fe24ae50671f457b02395c4dee487880528da527448ddd3ac8e26b73e728b5187b376a9ec4081916b6053e5d9f43692ae898467b1ca0fd5ec051343ac00346d2d813d0af733acf7bea7fea60ffb666363bab6468c5627e2834223a2afc942cbc89ad25b3739ee506084faa1a5b6dbb119d549970a49e7e06eb8b62aa45e624e77ad"}}}, &(0x7f00000010c0)={0x1c, &(0x7f0000000bc0)={0x0, 0x18, 0x6b, "f3d08d0c655d6b3750a9a4ac9b91ddc46445e82c0605d166101ae80b6f22795521ad2958b83b107e20f2f0db70dc6824ef546c1ec881d9c6ecb7cdcf0bbe625d03d67de2d49b54979e394bd1b3448b9268f37ba8a4e09b12c2ce18ece676f7ceeb00ac889930f01b72a0c4"}, &(0x7f0000000c40)={0xa1, 0x1, 0x400, "ef9d03c23b2915c45ad7e160857b757b6478728e36a7cc4ad5fc5eeee0fe462b22dd72d4ab2116fd7ce90bbd7991c3a496b7b3d9906c9a3c03e1aab3cd6ba36617cbdca8283324e4ea9a3082b9a200534eae9352cff11ebd946f96ca0ba7fbc595343a3b1d068a517c408847155f4423020898c728402b56bb3a0ae89b0d82d1431aa163a4a69696c52b3b05cbb718cb9ded7ec540a4f2a8f8d832d877e10db3e75fee0e71a5285595354f5096910c3be17dfec93d58fcdff1a668ff5dd51531f9265aa0c560cb74e38eb569840a576dad17712945bac6801a4f2861e13faa9c1b7462b08850ac2ab069b3ffba5fdcad4c5316810f5861c79f1e59252d3e2759c0d677fe28ea2eda3984e1ae2f08d2a17762a3020c7020274e1cd0156629674f187f9c648f8cea4944cc70674566406af75bf6f0ff02ece1507ff0608f8248ffa64f68a537420f29db3bfc7779a5f3d579c0c88776a53ba5f8ded0ffc3a423136ebe91dd38d562131544922c8ee98c824d9b5d148d924f682428ceafff54d2cf758abb0e701581ade7269a5dcd7401b863f1a326ca5670a66cb2314f4878b74d39ca6fbbd037d89fa0b680307e86dd73174a19a454fdfc4f37197873f3465b4f06aa17d1247591ea30512b63a1028cf1e313fba338cfa9b25452476b942869b9bb24c5567a47f3bdc819545c717360a68feb026f16e5bce47a590d5f9a4b3ca011913b43881529c7d8b90665954fb77c7b6dffcfb664fbadfb2b75bc1e0b71f790cccec1cb8d49e61406e99f20248bc553effd7f382ae081e77d17421b89f2d2d3ebd69e94df9effa31e98dd47057a17eba7fbf03e67332a9b7cff7d4b686ae3737c8303b08b6a957dda3f557a381f878be04dc884041f380f7333732bd515ae60c06f0936a38fcc512fe54840c3f8698729634b7a0b51848e91d967c970db1983409acb59ef3a5b409d34ebf249cc06fccd1d3eadeff56d0e36808cd8794c73a8518537abdf4f7890c0618dd3376a5e579f713f1250cb4c243b39c67023d4cf0b8577a049cf666fde90571322adf406a739ea05fb6defeb96faf1cb3e7e2647067ef973143f3b521acaaaa4f1a7861e1e105a799b84f51b6d41b9643aab81b1a3d50ec43081d8de3cb095f9c775781f0e02f6147b920e64353c68cadecbc1a739b6a085d0e55590eb9b7dd1a1f7373e25e96de6f6f6a73d1efd44c51b6f5e3aed62a524db6d416caf7c2a2f851d09e146177f8f73d0b3b9b14df0a57fe18838062745dc546f4d640480db78d96b400c0a56b16e0b2385e04c429075ca89c39fb9efce9a8e8a342dc08a09530dbd4655da4bc710719495333a119cf88f155c3ac48eab55130f020ab1a1630f7664fc9a0e066612cafa4773a05e6f61e1a607dfe813ade25593fdb273be98073b72db38c1aeac42f7ba75d2220fdfa08cdafa2e"}, &(0x7f0000001080)={0x21, 0x0, 0x2, "3dd3"}}) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000001100)) (async) bind$bt_hci(r3, &(0x7f0000001140)={0x1f, 0x3, 0x3}, 0x6) 437.913057ms ago: executing program 4 (id=5050): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000040)) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) fcntl$setown(r2, 0x8, 0xffffffffffffffff) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x1) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x4e, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40, 0xff}}) r4 = socket(0x15, 0x5, 0x0) connect$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x20) getsockname$l2tp6(r4, 0x0, &(0x7f0000000140)) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000180)=0xad) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x8) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0xffffffffffffffff) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') unshare(0x20020000) preadv(r8, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x4000800) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r9, &(0x7f0000000200)=[{&(0x7f0000000b40)=""/106, 0x6a}], 0x1, 0x4000ffe, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000300)={"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"}) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, 0x0) 177.936329ms ago: executing program 3 (id=5051): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x61, &(0x7f0000000a40)={{0x12, 0x1, 0x300, 0xd3, 0xdd, 0x71, 0x10, 0x46d, 0xa0e, 0x61f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x2, 0x0, 0xdc, "", [{{0x9, 0x4, 0x39, 0xd3, 0x0, 0x3, 0x0, 0x0, 0x9}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1555555555555801}) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x20, 0x3a, 0xcf, {0xcf, 0xb, "67743b672bfaa20c4eb1b5eebe5c5e18b78b54b4a0821f83cbd7cca1251ca908418baedc9c18656634e86fad20c8a390a8443e3bdb2f529aaa6beaacfaf655b6c4d55228a43976244f75c67270a0fb9ff6d02bee96274c5b4ec6559852e434ec47eb483f0ad721b3e8df615add7f2654bf317a530f03f2414024ff61b85389e308384a635cefc131b813c639c10f9b9ebfa157c51e96536f6c68d0f47764cd568291af70371e97332dce3d7bed9ffa562e2bfcad26a5cbd0c38840179ae8e3a7678f81434e67b43a84cf0b5ce5"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f0000000240)={0x40, 0x9, 0xd0, "5f49bad49f46782177e99adf099a46277483b0beb2040f1741c018a5acd6e00b4331f6ba6fa91f5e4c99c82f9b898aaeec8328e3f617c72ee1d1879e840c4d99070f65ab1093be0a9445d3da2790d34ae78cfc8fa5297c04d85af9e5bb04ec44e206d34c8549b015118562dcdd658bf0b5cbbc44a1639840bc88a483f8c635d829efcbe7ce2a5f03266c42e51fdff89c9468b890c58efd9aae07c8110203bd3a443664d71a471ba6e91cc5e2be134f5e8ec7e21614194f3a8de6e1570a9dcc36ba96d12a1f329ac62cb0b049f799ada0"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}}) accept(r1, 0x0, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r3, &(0x7f0000000080)="b4cd664261bd8a7a966cae4603a60d055ee962f02d563a0f16090a7407489183f7d546b22ec30f7c85fec658d45fbd62be", 0x31) 89.500992ms ago: executing program 4 (id=5052): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x1d}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x26}, @fda={0x66646185, 0x800008, 0x1, 0x2d}}, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=5053): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000006, 0x50, r0, 0x91215000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="dc579330", @ANYRES16=r2, @ANYBLOB="010027bd7000fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) r3 = socket$packet(0x11, 0xa, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0xfffffffffffffffe, {0x80000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa57, 0x80000001, 0x0, 0x0, {0x40000006, 0x0, 0x0, 0x0, 0x1000001, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, r6, 0x10b, 0xb333}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r8, 0x2, &(0x7f0000000bc0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r7, 0x0}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0xe, r3, 0x0, 0x0, 0x9, 0x0, 0x1}]) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) kernel console output (not intermixed with test programs): [ T5719] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.773473][ T5720] usb 4-1: USB disconnect, device number 124 [ 950.831696][ T32] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 950.857386][ T32] usb 5-1: device descriptor read/8, error -71 [ 950.939650][ T5719] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 950.962650][ T32] usb usb5-port1: unable to enumerate USB device [ 951.009186][ T5719] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 951.010208][ T5719] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 951.010273][ T5719] usb 6-1: media controller created [ 951.050344][ T5719] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 951.217007][ T5763] usbhid 2-1:0.0: can't add hid device: -71 [ 951.217144][ T5763] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 951.272723][ T5763] usb 2-1: USB disconnect, device number 19 [ 951.355739][ T5719] az6027: usb out operation failed. (-71) [ 951.355760][ T5719] stb0899_attach: Driver disabled by Kconfig [ 951.355772][ T5719] az6027: no front-end attached [ 951.355772][ T5719] [ 951.356170][ T5719] az6027: usb out operation failed. (-71) [ 951.356186][ T5719] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 951.359775][ T5719] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input70 [ 951.392105][ T5719] dvb-usb: schedule remote query interval to 400 msecs. [ 951.392130][ T5719] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 951.395390][ T5600] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 951.440324][ T5719] usb 6-1: USB disconnect, device number 63 [ 951.544729][ T5600] usb 4-1: config index 0 descriptor too short (expected 59944, got 40) [ 951.544761][ T5600] usb 4-1: config 255 has an invalid interface number: 97 but max is 0 [ 951.544785][ T5600] usb 4-1: config 255 has no interface number 0 [ 951.544818][ T5600] usb 4-1: config 255 interface 97 has no altsetting 0 [ 951.549034][ T5600] usb 4-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 951.549067][ T5600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.549090][ T5600] usb 4-1: Product: syz [ 951.549107][ T5600] usb 4-1: Manufacturer: syz [ 951.549122][ T5600] usb 4-1: SerialNumber: syz [ 951.739879][ T5719] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 951.822216][T20031] FAULT_INJECTION: forcing a failure. [ 951.822216][T20031] name failslab, interval 1, probability 0, space 0, times 0 [ 951.822256][T20031] CPU: 1 UID: 0 PID: 20031 Comm: syz.1.4781 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 951.822288][T20031] Tainted: [L]=SOFTLOCKUP [ 951.822297][T20031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 951.822311][T20031] Call Trace: [ 951.822320][T20031] [ 951.822330][T20031] dump_stack_lvl+0xe8/0x150 [ 951.822479][T20031] should_fail_ex+0x46b/0x600 [ 951.822520][T20031] should_failslab+0xa8/0x100 [ 951.822568][T20031] kmem_cache_alloc_noprof+0x87/0x680 [ 951.822592][T20031] ? skb_clone+0x212/0x3a0 [ 951.822623][T20031] skb_clone+0x212/0x3a0 [ 951.822653][T20031] __netlink_deliver_tap+0x424/0x8b0 [ 951.822692][T20031] ? netlink_deliver_tap+0x2e/0x1b0 [ 951.822718][T20031] netlink_deliver_tap+0x19c/0x1b0 [ 951.822745][T20031] netlink_unicast+0x754/0x920 [ 951.822777][T20031] netlink_sendmsg+0x813/0xb40 [ 951.822812][T20031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.822839][T20031] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 951.822879][T20031] ? aa_sock_msg_perm+0x122/0x200 [ 951.822909][T20031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.822934][T20031] sock_sendmsg_nosec+0x112/0x150 [ 951.822969][T20031] ____sys_sendmsg+0x55c/0x870 [ 951.823002][T20031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 951.823039][T20031] ? import_iovec+0x73/0xa0 [ 951.823077][T20031] ___sys_sendmsg+0x2a5/0x360 [ 951.823101][T20031] ? __lock_acquire+0x6b5/0x2d10 [ 951.823132][T20031] ? __pfx____sys_sendmsg+0x10/0x10 [ 951.823201][T20031] ? __fget_files+0x2a/0x420 [ 951.823236][T20031] ? __fget_files+0x3a6/0x420 [ 951.823283][T20031] __x64_sys_sendmsg+0x1c3/0x2a0 [ 951.823312][T20031] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 951.823351][T20031] ? __pfx_ksys_write+0x10/0x10 [ 951.823386][T20031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.823413][T20031] do_syscall_64+0x15f/0x560 [ 951.823437][T20031] ? trace_irq_disable+0x3b/0x140 [ 951.823461][T20031] ? clear_bhb_loop+0x40/0x90 [ 951.823491][T20031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.823516][T20031] RIP: 0033:0x7f96d906ce59 [ 951.823549][T20031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.823570][T20031] RSP: 002b:00007f96d72c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 951.823595][T20031] RAX: ffffffffffffffda RBX: 00007f96d92e5fa0 RCX: 00007f96d906ce59 [ 951.823612][T20031] RDX: 000000002c000010 RSI: 0000200000000180 RDI: 0000000000000004 [ 951.823626][T20031] RBP: 00007f96d72c6090 R08: 0000000000000000 R09: 0000000000000000 [ 951.823641][T20031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.823654][T20031] R13: 00007f96d92e6038 R14: 00007f96d92e5fa0 R15: 00007ffcd3643ff8 [ 951.823691][T20031] [ 951.823792][T20031] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4781'. [ 952.258711][T20032] ALSA: seq fatal error: cannot create timer (-22) [ 952.406778][T20037] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4782'. [ 952.821228][ T32] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 952.862739][ T5600] rndis_host 4-1:255.97: ACM capabilities 01, not really RNDIS? [ 952.992369][ T32] usb 5-1: Using ep0 maxpacket: 8 [ 952.999208][ T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 952.999265][ T32] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 952.999290][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.062657][ T32] usb 5-1: config 0 descriptor?? [ 953.069541][ T5600] usb 4-1: USB disconnect, device number 125 [ 953.191804][ T5720] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 953.227141][ T5706] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 953.279749][ T32] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 953.344905][ T5720] usb 2-1: Using ep0 maxpacket: 8 [ 953.347176][ T5720] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 953.347229][ T5720] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 953.347254][ T5720] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 953.347279][ T5720] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 953.347301][ T5720] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 953.347343][ T5720] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 953.347367][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.390944][ T5720] usbtmc 2-1:16.0: bulk endpoints not found [ 953.541761][ T5706] usb 6-1: Using ep0 maxpacket: 32 [ 953.544414][ T5706] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.544452][ T5706] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.544494][ T5706] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 953.544522][ T5706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.597003][ T5706] usb 6-1: config 0 descriptor?? [ 953.621957][ T5706] hub 6-1:0.0: USB hub found [ 953.833038][ T5706] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 953.834131][T20052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.835139][T20052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.340281][ T5600] usb 5-1: USB disconnect, device number 86 [ 954.375721][T20065] FAULT_INJECTION: forcing a failure. [ 954.375721][T20065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 954.375762][T20065] CPU: 0 UID: 0 PID: 20065 Comm: syz.3.4791 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 954.375796][T20065] Tainted: [L]=SOFTLOCKUP [ 954.375803][T20065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 954.375813][T20065] Call Trace: [ 954.375820][T20065] [ 954.375849][T20065] dump_stack_lvl+0xe8/0x150 [ 954.375884][T20065] should_fail_ex+0x46b/0x600 [ 954.375916][T20065] _copy_from_iter+0x1d3/0x1670 [ 954.375952][T20065] ? trace_kmem_cache_alloc+0x29/0xe0 [ 954.375979][T20065] ? __alloc_skb+0x27d/0x7d0 [ 954.375994][T20065] ? __pfx__copy_from_iter+0x10/0x10 [ 954.376014][T20065] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 954.376051][T20065] ? __alloc_skb+0x27d/0x7d0 [ 954.376078][T20065] ? netlink_sendmsg+0x650/0xb40 [ 954.376102][T20065] ? skb_put+0x11b/0x210 [ 954.376126][T20065] netlink_sendmsg+0x6c0/0xb40 [ 954.376163][T20065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 954.376183][T20065] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 954.376234][T20065] ? aa_sock_msg_perm+0x122/0x200 [ 954.376266][T20065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 954.376290][T20065] sock_sendmsg_nosec+0x112/0x150 [ 954.376332][T20065] ____sys_sendmsg+0x55c/0x870 [ 954.376354][T20065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 954.376402][T20065] ? import_iovec+0x73/0xa0 [ 954.376439][T20065] ___sys_sendmsg+0x2a5/0x360 [ 954.376464][T20065] ? __lock_acquire+0x6b5/0x2d10 [ 954.376495][T20065] ? __pfx____sys_sendmsg+0x10/0x10 [ 954.376574][T20065] ? __fget_files+0x2a/0x420 [ 954.376608][T20065] ? __fget_files+0x3a6/0x420 [ 954.376651][T20065] __x64_sys_sendmsg+0x1c3/0x2a0 [ 954.376678][T20065] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 954.376712][T20065] ? __pfx_ksys_write+0x10/0x10 [ 954.376751][T20065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.376777][T20065] do_syscall_64+0x15f/0x560 [ 954.376801][T20065] ? trace_irq_disable+0x3b/0x140 [ 954.376825][T20065] ? clear_bhb_loop+0x40/0x90 [ 954.376851][T20065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.376877][T20065] RIP: 0033:0x7f107583ce59 [ 954.376892][T20065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.376907][T20065] RSP: 002b:00007f1073a96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 954.376945][T20065] RAX: ffffffffffffffda RBX: 00007f1075ab5fa0 RCX: 00007f107583ce59 [ 954.376962][T20065] RDX: 0000000022000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 954.376977][T20065] RBP: 00007f1073a96090 R08: 0000000000000000 R09: 0000000000000000 [ 954.376992][T20065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.377005][T20065] R13: 00007f1075ab6038 R14: 00007f1075ab5fa0 R15: 00007ffd2f7f2448 [ 954.377037][T20065] [ 954.964217][T20071] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4794'. [ 955.336071][T20079] cgroup: subsys name conflicts with all [ 955.378119][T20079] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 955.410198][T20077] FAULT_INJECTION: forcing a failure. [ 955.410198][T20077] name failslab, interval 1, probability 0, space 0, times 0 [ 955.410237][T20077] CPU: 1 UID: 0 PID: 20077 Comm: syz.3.4795 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 955.410263][T20077] Tainted: [L]=SOFTLOCKUP [ 955.410282][T20077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 955.410296][T20077] Call Trace: [ 955.410305][T20077] [ 955.410313][T20077] dump_stack_lvl+0xe8/0x150 [ 955.410344][T20077] should_fail_ex+0x46b/0x600 [ 955.410373][T20077] should_failslab+0xa8/0x100 [ 955.410399][T20077] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 955.410421][T20077] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 955.410454][T20077] ? dup_task_struct+0x52/0x840 [ 955.410493][T20077] dup_task_struct+0x52/0x840 [ 955.410525][T20077] ? rt_spin_unlock+0x160/0x200 [ 955.410559][T20077] copy_process+0x89b/0x4450 [ 955.410627][T20077] ? __pfx_copy_process+0x10/0x10 [ 955.410673][T20077] vhost_task_create+0x1f9/0x380 [ 955.410698][T20077] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 955.410731][T20077] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 955.410767][T20077] ? __pfx_vhost_task_create+0x10/0x10 [ 955.410799][T20077] ? __pfx_vhost_task_fn+0x10/0x10 [ 955.410841][T20077] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 955.410865][T20077] ? lockdep_hardirqs_on+0x7a/0x110 [ 955.410890][T20077] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 955.410913][T20077] ? mutex_lock_nested+0x152/0x1d0 [ 955.410940][T20077] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 955.410979][T20077] kvm_mmu_post_init_vm+0x147/0x2d0 [ 955.411019][T20077] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 955.411061][T20077] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 955.411090][T20077] ? do_raw_spin_lock+0x12b/0x2f0 [ 955.411123][T20077] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 955.411147][T20077] ? lockdep_hardirqs_on+0x7a/0x110 [ 955.411170][T20077] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 955.411194][T20077] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 955.411232][T20077] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 955.411265][T20077] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 955.411303][T20077] ? lockdep_hardirqs_on+0x7a/0x110 [ 955.411326][T20077] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 955.411350][T20077] ? rt_write_unlock+0x190/0x230 [ 955.411385][T20077] kvm_vcpu_ioctl+0xa65/0xfe0 [ 955.411426][T20077] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 955.411485][T20077] ? __fget_files+0x2a/0x420 [ 955.411521][T20077] ? __fget_files+0x2a/0x420 [ 955.411552][T20077] ? __fget_files+0x3a6/0x420 [ 955.411582][T20077] ? __fget_files+0x2a/0x420 [ 955.411615][T20077] ? bpf_lsm_file_ioctl+0x9/0x20 [ 955.411642][T20077] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 955.411669][T20077] __se_sys_ioctl+0xff/0x170 [ 955.411690][T20077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.411710][T20077] do_syscall_64+0x15f/0x560 [ 955.411729][T20077] ? trace_irq_disable+0x3b/0x140 [ 955.411748][T20077] ? clear_bhb_loop+0x40/0x90 [ 955.411771][T20077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.411789][T20077] RIP: 0033:0x7f107583ce59 [ 955.411807][T20077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.411824][T20077] RSP: 002b:00007f1073a75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 955.411845][T20077] RAX: ffffffffffffffda RBX: 00007f1075ab6090 RCX: 00007f107583ce59 [ 955.411859][T20077] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 955.411871][T20077] RBP: 00007f1073a75090 R08: 0000000000000000 R09: 0000000000000000 [ 955.411882][T20077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.411893][T20077] R13: 00007f1075ab6128 R14: 00007f1075ab6090 R15: 00007ffd2f7f2448 [ 955.411921][T20077] [ 955.983399][ T5744] usb 2-1: USB disconnect, device number 20 [ 956.099414][ T5706] usbhid 6-1:0.0: can't add hid device: -71 [ 956.099558][ T5706] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 956.204167][ T5706] usb 6-1: USB disconnect, device number 64 [ 956.601821][ T5744] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 956.639738][T20092] FAULT_INJECTION: forcing a failure. [ 956.639738][T20092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 956.639769][T20092] CPU: 1 UID: 0 PID: 20092 Comm: syz.4.4801 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 956.639791][T20092] Tainted: [L]=SOFTLOCKUP [ 956.639798][T20092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 956.639808][T20092] Call Trace: [ 956.639814][T20092] [ 956.639822][T20092] dump_stack_lvl+0xe8/0x150 [ 956.639846][T20092] should_fail_ex+0x46b/0x600 [ 956.639868][T20092] _copy_from_user+0x2d/0xb0 [ 956.639892][T20092] ___sys_sendmsg+0x1c6/0x360 [ 956.639910][T20092] ? __lock_acquire+0x6b5/0x2d10 [ 956.639932][T20092] ? __pfx____sys_sendmsg+0x10/0x10 [ 956.639977][T20092] ? __fget_files+0x2a/0x420 [ 956.640001][T20092] ? __fget_files+0x3a6/0x420 [ 956.640031][T20092] __x64_sys_sendmsg+0x1c3/0x2a0 [ 956.640052][T20092] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 956.640077][T20092] ? __pfx_ksys_write+0x10/0x10 [ 956.640120][T20092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.640146][T20092] do_syscall_64+0x15f/0x560 [ 956.640170][T20092] ? trace_irq_disable+0x3b/0x140 [ 956.640198][T20092] ? clear_bhb_loop+0x40/0x90 [ 956.640237][T20092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.640254][T20092] RIP: 0033:0x7f4a942ece59 [ 956.640269][T20092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.640284][T20092] RSP: 002b:00007f4a9253e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 956.640300][T20092] RAX: ffffffffffffffda RBX: 00007f4a94565fa0 RCX: 00007f4a942ece59 [ 956.640313][T20092] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 956.640323][T20092] RBP: 00007f4a9253e090 R08: 0000000000000000 R09: 0000000000000000 [ 956.640333][T20092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 956.640343][T20092] R13: 00007f4a94566038 R14: 00007f4a94565fa0 R15: 00007ffd0b93fb88 [ 956.640367][T20092] [ 956.642458][ T5706] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 956.812218][ T5744] usb 2-1: Using ep0 maxpacket: 32 [ 956.829940][ T5744] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 956.830061][ T5744] usb 2-1: config 0 has no interface number 0 [ 956.830250][ T5744] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 956.830327][ T5744] usb 2-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 956.830392][ T5744] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 956.841964][ T5706] usb 6-1: Using ep0 maxpacket: 32 [ 956.930526][ T5744] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 956.930551][ T5744] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.930566][ T5744] usb 2-1: Product: syz [ 956.930621][ T5744] usb 2-1: Manufacturer: syz [ 956.930633][ T5744] usb 2-1: SerialNumber: syz [ 956.970266][ T5706] usb 6-1: unable to get BOS descriptor or descriptor too short [ 957.002262][ T5706] usb 6-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 957.002301][ T5706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.002317][ T5706] usb 6-1: Product: syz [ 957.002329][ T5706] usb 6-1: Manufacturer: syz [ 957.002341][ T5706] usb 6-1: SerialNumber: syz [ 957.057737][ T5744] usb 2-1: config 0 descriptor?? [ 957.058657][T20084] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 957.142057][ T5744] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 957.355516][ T8261] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 957.391708][ T5744] snd-usb-audio 2-1:0.16: probe with driver snd-usb-audio failed with error -12 [ 957.392635][ T5706] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 957.393167][ T5706] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 957.437509][ T5744] usb 2-1: USB disconnect, device number 21 [ 957.465848][ T5706] usb 6-1: USB disconnect, device number 65 [ 957.499611][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 957.535813][ T8261] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 957.535848][ T8261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.535871][ T8261] usb 5-1: Product: syz [ 957.535887][ T8261] usb 5-1: Manufacturer: syz [ 957.535902][ T8261] usb 5-1: SerialNumber: syz [ 957.831740][ T5600] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 957.984585][ T5600] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 957.984619][ T5600] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 957.984640][ T5600] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 957.984928][ T5600] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 957.984959][ T5600] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 957.988836][ T5600] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 957.989094][ T5600] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 957.989120][ T5600] usb 4-1: Product: syz [ 957.989136][ T5600] usb 4-1: Manufacturer: syz [ 958.077160][ T8261] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 958.077218][ T8261] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 958.165831][ T5600] cdc_wdm 4-1:1.0: skipping garbage [ 958.165853][ T5600] cdc_wdm 4-1:1.0: skipping garbage [ 958.204318][ T5600] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 958.204564][ T5600] cdc_wdm 4-1:1.0: Unknown control protocol [ 958.320260][ T8261] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 958.320322][ T8261] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 958.321251][ T8261] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 958.427784][ T8261] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 958.440835][T20104] IPVS: sync thread started: state = BACKUP, mcast_ifn = pimreg0, syncid = 0, id = 0 [ 958.461766][ T8261] usb 5-1: USB disconnect, device number 87 [ 958.551655][ T5706] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 958.711851][ T5706] usb 2-1: Using ep0 maxpacket: 8 [ 958.714085][ T5706] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 958.714155][ T5706] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 958.714173][ T5706] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 958.714190][ T5706] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 958.714206][ T5706] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 958.714237][ T5706] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 958.714255][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.771949][ T5744] usb 4-1: USB disconnect, device number 126 [ 958.828022][ T5706] usbtmc 2-1:16.0: bulk endpoints not found [ 959.121559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 959.141572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 959.151562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 959.161543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 959.171539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 959.181550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 959.191553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 959.201563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 959.211553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 959.221550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 961.334482][ T5744] usb 2-1: USB disconnect, device number 22 [ 961.418956][T20121] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4812'. [ 961.851750][ T5719] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 961.944517][T20137] FAULT_INJECTION: forcing a failure. [ 961.944517][T20137] name failslab, interval 1, probability 0, space 0, times 0 [ 961.944562][T20137] CPU: 0 UID: 0 PID: 20137 Comm: syz.5.4818 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 961.944595][T20137] Tainted: [L]=SOFTLOCKUP [ 961.944605][T20137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 961.944621][T20137] Call Trace: [ 961.944637][T20137] [ 961.944648][T20137] dump_stack_lvl+0xe8/0x150 [ 961.944685][T20137] should_fail_ex+0x46b/0x600 [ 961.944719][T20137] should_failslab+0xa8/0x100 [ 961.944749][T20137] kmem_cache_alloc_noprof+0x87/0x680 [ 961.944783][T20137] ? __pmd_alloc+0xa4/0x5e0 [ 961.944810][T20137] __pmd_alloc+0xa4/0x5e0 [ 961.944840][T20137] handle_mm_fault+0xf4f/0x14d0 [ 961.944870][T20137] ? handle_mm_fault+0xed/0x14d0 [ 961.944897][T20137] ? aa_file_perm+0x192/0x15f0 [ 961.944933][T20137] ? __pfx_handle_mm_fault+0x10/0x10 [ 961.944972][T20137] ? __lock_acquire+0x6b5/0x2d10 [ 961.945007][T20137] ? lock_mm_and_find_vma+0xa7/0x340 [ 961.945039][T20137] do_user_addr_fault+0x75b/0x1340 [ 961.945089][T20137] exc_page_fault+0x6a/0xc0 [ 961.945117][T20137] asm_exc_page_fault+0x26/0x30 [ 961.945140][T20137] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 961.945175][T20137] Code: c4 10 e9 14 2a 05 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 961.945196][T20137] RSP: 0018:ffffc9000459fc10 EFLAGS: 00050202 [ 961.945218][T20137] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 961.945235][T20137] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc9000459fdd0 [ 961.945252][T20137] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 961.945267][T20137] R10: dffffc0000000000 R11: fffff520008b3fba R12: fffff520008b3f90 [ 961.945286][T20137] R13: 0000000000000017 R14: ffffc9000459fdd0 R15: 0000200000000000 [ 961.945323][T20137] _copy_from_user+0x7a/0xb0 [ 961.945359][T20137] copy_from_sockptr+0x5e/0x90 [ 961.945395][T20137] packet_setsockopt+0x7c9/0x1510 [ 961.945428][T20137] ? __pfx_packet_setsockopt+0x10/0x10 [ 961.945507][T20137] ? aa_sk_perm+0x703/0x950 [ 961.945540][T20137] ? __fget_files+0x2a/0x420 [ 961.945580][T20137] ? __pfx_aa_sk_perm+0x10/0x10 [ 961.945621][T20137] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 961.945650][T20137] ? __pfx_packet_setsockopt+0x10/0x10 [ 961.945684][T20137] do_sock_setsockopt+0x17c/0x1b0 [ 961.945716][T20137] __x64_sys_setsockopt+0x143/0x1b0 [ 961.945746][T20137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.945780][T20137] do_syscall_64+0x15f/0x560 [ 961.945805][T20137] ? trace_irq_disable+0x3b/0x140 [ 961.945830][T20137] ? clear_bhb_loop+0x40/0x90 [ 961.945861][T20137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.945886][T20137] RIP: 0033:0x7f7489c3ce59 [ 961.945907][T20137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 961.945929][T20137] RSP: 002b:00007f7487e96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 961.945954][T20137] RAX: ffffffffffffffda RBX: 00007f7489eb5fa0 RCX: 00007f7489c3ce59 [ 961.945972][T20137] RDX: 0000000000000017 RSI: 0000000000000107 RDI: 0000000000000003 [ 961.945987][T20137] RBP: 00007f7487e96090 R08: 0000000000000004 R09: 0000000000000000 [ 961.946003][T20137] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 961.946019][T20137] R13: 00007f7489eb6038 R14: 00007f7489eb5fa0 R15: 00007fffcc9074b8 [ 961.946057][T20137] [ 962.068208][ T5719] usb 2-1: device descriptor read/64, error -71 [ 962.391827][ T5719] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 962.418012][T20139] FAULT_INJECTION: forcing a failure. [ 962.418012][T20139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.418054][T20139] CPU: 1 UID: 0 PID: 20139 Comm: syz.3.4819 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 962.418084][T20139] Tainted: [L]=SOFTLOCKUP [ 962.418093][T20139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 962.418106][T20139] Call Trace: [ 962.418116][T20139] [ 962.418126][T20139] dump_stack_lvl+0xe8/0x150 [ 962.418160][T20139] should_fail_ex+0x46b/0x600 [ 962.418196][T20139] _copy_from_user+0x2d/0xb0 [ 962.418235][T20139] snd_seq_write+0x314/0x830 [ 962.418282][T20139] ? __pfx_snd_seq_write+0x10/0x10 [ 962.418326][T20139] ? rw_verify_area+0x25b/0x4e0 [ 962.418350][T20139] ? __pfx_snd_seq_write+0x10/0x10 [ 962.418384][T20139] vfs_write+0x2a3/0xba0 [ 962.418416][T20139] ? __pfx_vfs_write+0x10/0x10 [ 962.418443][T20139] ? __fget_files+0x2a/0x420 [ 962.418479][T20139] ? __fget_files+0x2a/0x420 [ 962.418510][T20139] ? __fget_files+0x3a6/0x420 [ 962.418550][T20139] ? __fget_files+0x2a/0x420 [ 962.418592][T20139] ksys_write+0x156/0x270 [ 962.418618][T20139] ? __pfx_ksys_write+0x10/0x10 [ 962.418652][T20139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.418677][T20139] do_syscall_64+0x15f/0x560 [ 962.418700][T20139] ? trace_irq_disable+0x3b/0x140 [ 962.418723][T20139] ? clear_bhb_loop+0x40/0x90 [ 962.418750][T20139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.418772][T20139] RIP: 0033:0x7f107583ce59 [ 962.418794][T20139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.418814][T20139] RSP: 002b:00007f1073a96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 962.418838][T20139] RAX: ffffffffffffffda RBX: 00007f1075ab5fa0 RCX: 00007f107583ce59 [ 962.418853][T20139] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000003 [ 962.418868][T20139] RBP: 00007f1073a96090 R08: 0000000000000000 R09: 0000000000000000 [ 962.418883][T20139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.418897][T20139] R13: 00007f1075ab6038 R14: 00007f1075ab5fa0 R15: 00007ffd2f7f2448 [ 962.418932][T20139] [ 962.551694][ T5719] usb 2-1: device descriptor read/64, error -71 [ 962.661973][ T5719] usb usb2-port1: attempt power cycle [ 962.952069][ T5706] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 963.001764][ T5719] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 963.022559][ T5719] usb 2-1: device descriptor read/8, error -71 [ 963.126003][ T5706] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 963.126036][ T5706] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 963.126058][ T5706] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 963.126110][ T5706] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 963.126138][ T5706] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 963.179924][ T5706] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 963.180014][ T5706] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 963.180080][ T5706] usb 6-1: Product: syz [ 963.180139][ T5706] usb 6-1: Manufacturer: syz [ 963.235254][ T5706] cdc_wdm 6-1:1.0: skipping garbage [ 963.235274][ T5706] cdc_wdm 6-1:1.0: skipping garbage [ 963.241418][ T5706] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 963.241441][ T5706] cdc_wdm 6-1:1.0: Unknown control protocol [ 963.285986][T20153] FAULT_INJECTION: forcing a failure. [ 963.285986][T20153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 963.286026][T20153] CPU: 0 UID: 0 PID: 20153 Comm: syz.4.4823 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 963.286056][T20153] Tainted: [L]=SOFTLOCKUP [ 963.286065][T20153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 963.286079][T20153] Call Trace: [ 963.286088][T20153] [ 963.286099][T20153] dump_stack_lvl+0xe8/0x150 [ 963.286132][T20153] should_fail_ex+0x46b/0x600 [ 963.286163][T20153] _copy_from_iter+0x1d3/0x1670 [ 963.286199][T20153] ? trace_kmem_cache_alloc+0x29/0xe0 [ 963.286221][T20153] ? __alloc_skb+0x27d/0x7d0 [ 963.286241][T20153] ? __pfx__copy_from_iter+0x10/0x10 [ 963.286267][T20153] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 963.286289][T20153] ? __alloc_skb+0x27d/0x7d0 [ 963.286316][T20153] ? netlink_sendmsg+0x650/0xb40 [ 963.286340][T20153] ? skb_put+0x11b/0x210 [ 963.286365][T20153] netlink_sendmsg+0x6c0/0xb40 [ 963.286402][T20153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 963.286429][T20153] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 963.286469][T20153] ? aa_sock_msg_perm+0x122/0x200 [ 963.286499][T20153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 963.286525][T20153] sock_sendmsg_nosec+0x112/0x150 [ 963.286561][T20153] ____sys_sendmsg+0x55c/0x870 [ 963.286592][T20153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 963.286626][T20153] ? import_iovec+0x73/0xa0 [ 963.286666][T20153] ___sys_sendmsg+0x2a5/0x360 [ 963.286698][T20153] ? __lock_acquire+0x6b5/0x2d10 [ 963.286731][T20153] ? __pfx____sys_sendmsg+0x10/0x10 [ 963.286789][T20153] ? __fget_files+0x2a/0x420 [ 963.286821][T20153] ? __fget_files+0x3a6/0x420 [ 963.286860][T20153] __x64_sys_sendmsg+0x1c3/0x2a0 [ 963.286880][T20153] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 963.286905][T20153] ? __pfx_ksys_write+0x10/0x10 [ 963.286929][T20153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.286946][T20153] do_syscall_64+0x15f/0x560 [ 963.286964][T20153] ? trace_irq_disable+0x3b/0x140 [ 963.286981][T20153] ? clear_bhb_loop+0x40/0x90 [ 963.287001][T20153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.287018][T20153] RIP: 0033:0x7f4a942ece59 [ 963.287034][T20153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.287048][T20153] RSP: 002b:00007f4a9253e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 963.287066][T20153] RAX: ffffffffffffffda RBX: 00007f4a94565fa0 RCX: 00007f4a942ece59 [ 963.287079][T20153] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 963.287089][T20153] RBP: 00007f4a9253e090 R08: 0000000000000000 R09: 0000000000000000 [ 963.287099][T20153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 963.287109][T20153] R13: 00007f4a94566038 R14: 00007f4a94565fa0 R15: 00007ffd0b93fb88 [ 963.287133][T20153] [ 963.341647][ T5719] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 963.363223][ T5719] usb 2-1: device descriptor read/8, error -71 [ 963.422242][ T5763] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 963.473585][ T5719] usb usb2-port1: unable to enumerate USB device [ 963.623097][ T5763] usb 4-1: Using ep0 maxpacket: 8 [ 963.629067][ T5763] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 963.629108][ T5763] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 963.629126][ T5763] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 963.629144][ T5763] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 963.629160][ T5763] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 963.629191][ T5763] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 963.629209][ T5763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.704158][ T5763] usbtmc 4-1:16.0: bulk endpoints not found [ 963.935664][ T5706] usb 6-1: USB disconnect, device number 66 [ 964.546304][T20162] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 964.822059][ T5763] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 964.826724][T20169] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4828'. [ 964.827494][T20169] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4828'. [ 964.984533][ T5763] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 964.984583][ T5763] usb 6-1: config 0 has no interface number 0 [ 964.986985][ T5763] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 964.987017][ T5763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.987040][ T5763] usb 6-1: Product: syz [ 964.987057][ T5763] usb 6-1: Manufacturer: syz [ 964.987074][ T5763] usb 6-1: SerialNumber: syz [ 964.997203][ T5763] usb 6-1: config 0 descriptor?? [ 965.249330][ T5763] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 965.261245][ T5763] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 965.261311][ T5763] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 965.262183][ T5763] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 965.296681][ T5763] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 965.659756][ T5763] usb 6-1: USB disconnect, device number 67 [ 965.696258][ T5763] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 965.704430][ T5763] keyspan 6-1:0.133: device disconnected [ 966.118944][ T5763] usb 4-1: USB disconnect, device number 127 [ 966.618083][ T5763] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 966.905744][ T5763] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 966.905777][ T5763] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 966.905798][ T5763] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 966.905850][ T5763] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 966.905878][ T5763] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 966.975619][ T5763] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 966.975643][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 966.975658][ T5763] usb 4-1: Product: syz [ 966.975669][ T5763] usb 4-1: Manufacturer: syz [ 967.025475][ T5763] cdc_wdm 4-1:1.0: skipping garbage [ 967.025491][ T5763] cdc_wdm 4-1:1.0: skipping garbage [ 967.035484][ T5763] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 967.035550][ T5763] cdc_wdm 4-1:1.0: Unknown control protocol [ 967.091644][ T5719] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 967.232336][ T5719] usb 5-1: device descriptor read/64, error -71 [ 967.284338][T20199] FAULT_INJECTION: forcing a failure. [ 967.284338][T20199] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 967.284380][T20199] CPU: 1 UID: 0 PID: 20199 Comm: syz.1.4840 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 967.284424][T20199] Tainted: [L]=SOFTLOCKUP [ 967.284433][T20199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 967.284448][T20199] Call Trace: [ 967.284458][T20199] [ 967.284468][T20199] dump_stack_lvl+0xe8/0x150 [ 967.284501][T20199] should_fail_ex+0x46b/0x600 [ 967.284532][T20199] prepare_alloc_pages+0x22a/0x6b0 [ 967.284568][T20199] __alloc_frozen_pages_noprof+0x12f/0x380 [ 967.284600][T20199] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 967.284632][T20199] ? __pfx_policy_nodemask+0x10/0x10 [ 967.284660][T20199] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 967.284697][T20199] alloc_pages_mpol+0xd1/0x380 [ 967.284728][T20199] ___kmalloc_large_node+0x4e/0x120 [ 967.284755][T20199] __kmalloc_large_node_noprof+0x18/0x90 [ 967.284782][T20199] __kmalloc_noprof+0x4a3/0x7b0 [ 967.284806][T20199] ? vhost_dev_set_owner+0x232/0xaf0 [ 967.284841][T20199] vhost_dev_set_owner+0x232/0xaf0 [ 967.284873][T20199] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 967.284906][T20199] vhost_net_ioctl+0x8f9/0x17d0 [ 967.284945][T20199] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 967.284979][T20199] ? __fget_files+0x2a/0x420 [ 967.285015][T20199] ? __fget_files+0x2a/0x420 [ 967.285047][T20199] ? __fget_files+0x3a6/0x420 [ 967.285077][T20199] ? __fget_files+0x2a/0x420 [ 967.285113][T20199] ? bpf_lsm_file_ioctl+0x9/0x20 [ 967.285143][T20199] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 967.285175][T20199] __se_sys_ioctl+0xff/0x170 [ 967.285200][T20199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.285226][T20199] do_syscall_64+0x15f/0x560 [ 967.285250][T20199] ? trace_irq_disable+0x3b/0x140 [ 967.285273][T20199] ? clear_bhb_loop+0x40/0x90 [ 967.285300][T20199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.285324][T20199] RIP: 0033:0x7f96d906ce59 [ 967.285345][T20199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.285395][T20199] RSP: 002b:00007f96d72c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 967.285420][T20199] RAX: ffffffffffffffda RBX: 00007f96d92e5fa0 RCX: 00007f96d906ce59 [ 967.285437][T20199] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 967.285452][T20199] RBP: 00007f96d72c6090 R08: 0000000000000000 R09: 0000000000000000 [ 967.285467][T20199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.285481][T20199] R13: 00007f96d92e6038 R14: 00007f96d92e5fa0 R15: 00007ffcd3643ff8 [ 967.285517][T20199] [ 967.622259][ T5719] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 967.761712][ T5719] usb 5-1: device descriptor read/64, error -71 [ 967.813957][ T5720] usb 4-1: USB disconnect, device number 2 [ 967.872848][ T5719] usb usb5-port1: attempt power cycle [ 967.951751][ T5763] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 968.137407][ T5763] usb 2-1: Using ep0 maxpacket: 8 [ 968.139842][ T5763] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 968.139904][ T5763] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 968.139922][ T5763] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 968.139940][ T5763] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 968.139956][ T5763] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 968.139986][ T5763] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 968.140004][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.234098][ T5763] usbtmc 2-1:16.0: bulk endpoints not found [ 968.271761][ T5719] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 968.292714][ T5719] usb 5-1: device descriptor read/8, error -71 [ 968.561675][ T5719] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 968.582299][ T5719] usb 5-1: device descriptor read/8, error -71 [ 968.618902][T20210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4844'. [ 968.692098][ T5719] usb usb5-port1: unable to enumerate USB device [ 969.864957][T20233] sctp: [Deprecated]: syz.3.4850 (pid 20233) Use of int in maxseg socket option. [ 969.864957][T20233] Use struct sctp_assoc_value instead [ 970.708241][ T5706] usb 2-1: USB disconnect, device number 27 [ 971.069330][T20256] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4859'. [ 971.069649][T20256] xt_socket: unknown flags 0xd0 [ 971.412162][T20258] FAULT_INJECTION: forcing a failure. [ 971.412162][T20258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 971.412203][T20258] CPU: 0 UID: 0 PID: 20258 Comm: syz.5.4860 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 971.412234][T20258] Tainted: [L]=SOFTLOCKUP [ 971.412243][T20258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 971.412259][T20258] Call Trace: [ 971.412268][T20258] [ 971.412278][T20258] dump_stack_lvl+0xe8/0x150 [ 971.412309][T20258] should_fail_ex+0x46b/0x600 [ 971.412340][T20258] _copy_to_user+0x31/0xb0 [ 971.412375][T20258] simple_read_from_buffer+0xe1/0x170 [ 971.412414][T20258] proc_fail_nth_read+0x1be/0x230 [ 971.412453][T20258] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 971.412493][T20258] ? rw_verify_area+0x2ac/0x4e0 [ 971.412516][T20258] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 971.412553][T20258] vfs_read+0x212/0xa80 [ 971.412584][T20258] ? __pfx_vfs_read+0x10/0x10 [ 971.412611][T20258] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 971.412635][T20258] ? lockdep_hardirqs_on+0x7a/0x110 [ 971.412659][T20258] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 971.412682][T20258] ? mutex_lock_nested+0x152/0x1d0 [ 971.412711][T20258] ? fdget_pos+0x252/0x320 [ 971.412752][T20258] ksys_read+0x156/0x270 [ 971.412780][T20258] ? __pfx_ksys_read+0x10/0x10 [ 971.412812][T20258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.412836][T20258] do_syscall_64+0x15f/0x560 [ 971.412859][T20258] ? trace_irq_disable+0x3b/0x140 [ 971.412883][T20258] ? clear_bhb_loop+0x40/0x90 [ 971.412910][T20258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.412933][T20258] RIP: 0033:0x7f7489bfd68e [ 971.412953][T20258] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 971.412972][T20258] RSP: 002b:00007f7487e95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 971.412996][T20258] RAX: ffffffffffffffda RBX: 00007f7487e966c0 RCX: 00007f7489bfd68e [ 971.413022][T20258] RDX: 000000000000000f RSI: 00007f7487e960a0 RDI: 0000000000000006 [ 971.413038][T20258] RBP: 00007f7487e96090 R08: 0000000000000000 R09: 0000000000000000 [ 971.413052][T20258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.413066][T20258] R13: 00007f7489eb6038 R14: 00007f7489eb5fa0 R15: 00007fffcc9074b8 [ 971.413101][T20258] [ 971.481600][ T5719] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 971.675205][ T5719] usb 2-1: device descriptor read/64, error -71 [ 971.801348][T20267] FAULT_INJECTION: forcing a failure. [ 971.801348][T20267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 971.801389][T20267] CPU: 1 UID: 0 PID: 20267 Comm: syz.5.4864 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 971.801421][T20267] Tainted: [L]=SOFTLOCKUP [ 971.801430][T20267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 971.801446][T20267] Call Trace: [ 971.801460][T20267] [ 971.801469][T20267] dump_stack_lvl+0xe8/0x150 [ 971.801502][T20267] should_fail_ex+0x46b/0x600 [ 971.801532][T20267] _copy_from_user+0x2d/0xb0 [ 971.801564][T20267] __se_sys_mount+0x18b/0x420 [ 971.801603][T20267] ? __pfx___se_sys_mount+0x10/0x10 [ 971.801642][T20267] ? __x64_sys_mount+0x20/0xc0 [ 971.801675][T20267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.801700][T20267] do_syscall_64+0x15f/0x560 [ 971.801723][T20267] ? trace_irq_disable+0x3b/0x140 [ 971.801747][T20267] ? clear_bhb_loop+0x40/0x90 [ 971.801774][T20267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.801802][T20267] RIP: 0033:0x7f7489c3ce59 [ 971.801824][T20267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.801843][T20267] RSP: 002b:00007f7487e96028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 971.801867][T20267] RAX: ffffffffffffffda RBX: 00007f7489eb5fa0 RCX: 00007f7489c3ce59 [ 971.801884][T20267] RDX: 0000200000000440 RSI: 0000200000000040 RDI: 0000000000000000 [ 971.801899][T20267] RBP: 00007f7487e96090 R08: 0000200000000080 R09: 0000000000000000 [ 971.801915][T20267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.801929][T20267] R13: 00007f7489eb6038 R14: 00007f7489eb5fa0 R15: 00007fffcc9074b8 [ 971.801963][T20267] [ 971.850377][T20267] overlayfs: option "workdir=./cgroup" is useless in a non-upper mount, ignore [ 971.850467][T20267] overlayfs: missing 'lowerdir' [ 972.055152][ T5719] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 972.181709][ T5719] usb 2-1: device descriptor read/64, error -71 [ 972.216513][T20271] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4865'. [ 972.245435][T20270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4866'. [ 972.304172][ T5719] usb usb2-port1: attempt power cycle [ 972.512147][ T5706] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 972.661724][ T5719] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 972.673320][ T5706] usb 6-1: Using ep0 maxpacket: 16 [ 972.682336][ T5719] usb 2-1: device descriptor read/8, error -71 [ 972.708390][ T5706] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 972.708419][ T5706] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 972.708440][ T5706] usb 6-1: config 0 has no interface number 0 [ 972.738388][ T5706] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 972.738413][ T5706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.738428][ T5706] usb 6-1: Product: syz [ 972.738439][ T5706] usb 6-1: Manufacturer: syz [ 972.738450][ T5706] usb 6-1: SerialNumber: syz [ 972.775215][ T5706] usb 6-1: config 0 descriptor?? [ 972.804703][ T5706] uvcvideo 6-1:0.105: probe with driver uvcvideo failed with error -22 [ 972.921917][ T5719] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 972.942721][ T5719] usb 2-1: device descriptor read/8, error -71 [ 973.053248][ T5719] usb usb2-port1: unable to enumerate USB device [ 973.935726][T20319] overlayfs: option "workdir=./cgroup" is useless in a non-upper mount, ignore [ 973.935750][T20319] overlayfs: missing 'lowerdir' [ 974.071665][ T5720] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 974.104788][T20323] FAULT_INJECTION: forcing a failure. [ 974.104788][T20323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 974.104818][T20323] CPU: 0 UID: 0 PID: 20323 Comm: syz.3.4884 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 974.104840][T20323] Tainted: [L]=SOFTLOCKUP [ 974.104847][T20323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 974.104857][T20323] Call Trace: [ 974.104864][T20323] [ 974.104871][T20323] dump_stack_lvl+0xe8/0x150 [ 974.104901][T20323] should_fail_ex+0x46b/0x600 [ 974.104923][T20323] _copy_from_iter+0x1d3/0x1670 [ 974.104949][T20323] ? trace_kmem_cache_alloc+0x29/0xe0 [ 974.104965][T20323] ? __alloc_skb+0x27d/0x7d0 [ 974.104981][T20323] ? __pfx__copy_from_iter+0x10/0x10 [ 974.105000][T20323] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 974.105017][T20323] ? __alloc_skb+0x27d/0x7d0 [ 974.105035][T20323] ? netlink_sendmsg+0x650/0xb40 [ 974.105053][T20323] ? skb_put+0x11b/0x210 [ 974.105071][T20323] netlink_sendmsg+0x6c0/0xb40 [ 974.105096][T20323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 974.105117][T20323] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 974.105146][T20323] ? aa_sock_msg_perm+0x122/0x200 [ 974.105168][T20323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 974.105187][T20323] sock_sendmsg_nosec+0x112/0x150 [ 974.105212][T20323] ____sys_sendmsg+0x55c/0x870 [ 974.105234][T20323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 974.105281][T20323] ? import_iovec+0x73/0xa0 [ 974.105316][T20323] ___sys_sendmsg+0x2a5/0x360 [ 974.105342][T20323] ? __lock_acquire+0x6b5/0x2d10 [ 974.105372][T20323] ? __pfx____sys_sendmsg+0x10/0x10 [ 974.105428][T20323] ? __fget_files+0x2a/0x420 [ 974.105452][T20323] ? __fget_files+0x3a6/0x420 [ 974.105483][T20323] __x64_sys_sendmsg+0x1c3/0x2a0 [ 974.105504][T20323] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 974.105529][T20323] ? __pfx_ksys_write+0x10/0x10 [ 974.105552][T20323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.105570][T20323] do_syscall_64+0x15f/0x560 [ 974.105588][T20323] ? clear_bhb_loop+0x40/0x90 [ 974.105608][T20323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.105625][T20323] RIP: 0033:0x7f107583ce59 [ 974.105646][T20323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.105660][T20323] RSP: 002b:00007f1073a96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.105677][T20323] RAX: ffffffffffffffda RBX: 00007f1075ab5fa0 RCX: 00007f107583ce59 [ 974.105690][T20323] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 974.105700][T20323] RBP: 00007f1073a96090 R08: 0000000000000000 R09: 0000000000000000 [ 974.105710][T20323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.105720][T20323] R13: 00007f1075ab6038 R14: 00007f1075ab5fa0 R15: 00007ffd2f7f2448 [ 974.105750][T20323] [ 974.324375][ T5720] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 974.324472][ T5720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.412125][ T5720] usb 5-1: config 0 descriptor?? [ 974.500575][ T5720] cp210x 5-1:0.0: cp210x converter detected [ 974.794801][ T5763] usb 6-1: USB disconnect, device number 68 [ 974.888411][ T5720] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 974.889360][ T5720] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 974.889414][ T5720] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 974.933012][ T5720] usb 5-1: cp210x converter now attached to ttyUSB0 [ 975.084808][T20338] sg_write: data in/out 32768/136 bytes for SCSI command 0x0-- guessing data in; [ 975.084808][T20338] program syz.3.4889 not setting count and/or reply_len properly [ 975.117883][T20317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.118304][T20317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.350238][ T5744] usb 5-1: USB disconnect, device number 92 [ 975.377603][ T5744] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 975.397730][ T5744] cp210x 5-1:0.0: device disconnected [ 976.300130][T20351] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 976.300372][T20351] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 976.314391][T20351] netlink: 312 bytes leftover after parsing attributes in process `syz.5.4891'. [ 976.314418][T20351] netlink: 'syz.5.4891': attribute type 1 has an invalid length. [ 976.581674][ T5719] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 976.711830][ T5719] usb 5-1: device descriptor read/64, error -71 [ 976.951634][ T5719] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 977.073837][T20378] Invalid ELF header magic: != ELF [ 977.092699][ T5719] usb 5-1: device descriptor read/64, error -71 [ 977.202126][ T5719] usb usb5-port1: attempt power cycle [ 977.391667][ T8261] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 977.541792][ T5719] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 977.543183][ T8261] usb 4-1: Using ep0 maxpacket: 16 [ 977.546631][ T8261] usb 4-1: unable to get BOS descriptor or descriptor too short [ 977.564927][ T5719] usb 5-1: device descriptor read/8, error -71 [ 977.567843][ T8261] usb 4-1: config 9 has an invalid interface number: 57 but max is 0 [ 977.567920][ T8261] usb 4-1: config 9 has no interface number 0 [ 977.568020][ T8261] usb 4-1: config 9 interface 57 has no altsetting 0 [ 977.612607][ T8261] usb 4-1: string descriptor 0 read error: -22 [ 977.612760][ T8261] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 977.612780][ T8261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.801685][ T5719] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 977.828640][ T5719] usb 5-1: device descriptor read/8, error -71 [ 977.838917][ T8261] (null): keene_cmd_main failed (-71) [ 977.899591][ T8261] video4linux radio48: keene_cmd_main failed (-71) [ 977.899624][ T8261] radio-keene 4-1:9.57: V4L2 device registered as radio48 [ 977.922719][ T8261] usb 4-1: USB disconnect, device number 3 [ 977.937230][ T5719] usb usb5-port1: unable to enumerate USB device [ 978.381707][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout [ 978.381719][ T5619] Bluetooth: hci3: command 0x0406 tx timeout [ 978.467490][T20397] fuse: Bad value for 'fd' [ 978.598350][T20400] FAULT_INJECTION: forcing a failure. [ 978.598350][T20400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 978.598380][T20400] CPU: 0 UID: 0 PID: 20400 Comm: syz.5.4910 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 978.598403][T20400] Tainted: [L]=SOFTLOCKUP [ 978.598410][T20400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 978.598420][T20400] Call Trace: [ 978.598427][T20400] [ 978.598434][T20400] dump_stack_lvl+0xe8/0x150 [ 978.598460][T20400] should_fail_ex+0x46b/0x600 [ 978.598481][T20400] _copy_to_user+0x31/0xb0 [ 978.598512][T20400] simple_read_from_buffer+0xe1/0x170 [ 978.598541][T20400] proc_fail_nth_read+0x1be/0x230 [ 978.598569][T20400] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 978.598597][T20400] ? rw_verify_area+0x2ac/0x4e0 [ 978.598613][T20400] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 978.598639][T20400] vfs_read+0x212/0xa80 [ 978.598661][T20400] ? __pfx_vfs_read+0x10/0x10 [ 978.598679][T20400] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 978.598698][T20400] ? lockdep_hardirqs_on+0x7a/0x110 [ 978.598715][T20400] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 978.598732][T20400] ? mutex_lock_nested+0x152/0x1d0 [ 978.598753][T20400] ? fdget_pos+0x252/0x320 [ 978.598782][T20400] ksys_read+0x156/0x270 [ 978.598801][T20400] ? __pfx_ksys_read+0x10/0x10 [ 978.598817][T20400] ? __pfx_blkdev_ioctl+0x10/0x10 [ 978.598841][T20400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.598859][T20400] do_syscall_64+0x15f/0x560 [ 978.598876][T20400] ? trace_irq_disable+0x3b/0x140 [ 978.598893][T20400] ? clear_bhb_loop+0x40/0x90 [ 978.598913][T20400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.598929][T20400] RIP: 0033:0x7f7489bfd68e [ 978.598944][T20400] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 978.598958][T20400] RSP: 002b:00007f7487e95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 978.598974][T20400] RAX: ffffffffffffffda RBX: 00007f7487e966c0 RCX: 00007f7489bfd68e [ 978.598987][T20400] RDX: 000000000000000f RSI: 00007f7487e960a0 RDI: 0000000000000005 [ 978.598998][T20400] RBP: 00007f7487e96090 R08: 0000000000000000 R09: 0000000000000000 [ 978.599008][T20400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.599019][T20400] R13: 00007f7489eb6038 R14: 00007f7489eb5fa0 R15: 00007fffcc9074b8 [ 978.599074][T20400] [ 978.733601][T20401] syz.3.4909 (20401) used obsolete PPPIOCDETACH ioctl [ 978.936491][T20403] FAULT_INJECTION: forcing a failure. [ 978.936491][T20403] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 978.936529][T20403] CPU: 0 UID: 0 PID: 20403 Comm: syz.5.4911 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 978.936554][T20403] Tainted: [L]=SOFTLOCKUP [ 978.936561][T20403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 978.936572][T20403] Call Trace: [ 978.936579][T20403] [ 978.936587][T20403] dump_stack_lvl+0xe8/0x150 [ 978.936617][T20403] should_fail_ex+0x46b/0x600 [ 978.936643][T20403] prepare_alloc_pages+0x22a/0x6b0 [ 978.936670][T20403] __alloc_frozen_pages_noprof+0x12f/0x380 [ 978.936697][T20403] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 978.936729][T20403] ? __pfx_policy_nodemask+0x10/0x10 [ 978.936751][T20403] ? __lock_acquire+0x6b5/0x2d10 [ 978.936778][T20403] alloc_pages_mpol+0xd1/0x380 [ 978.936802][T20403] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 978.936831][T20403] vma_alloc_folio_noprof+0xe1/0x1e0 [ 978.936855][T20403] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 978.936877][T20403] ? __pte_offset_map+0x29/0x200 [ 978.936911][T20403] do_pte_missing+0x822/0x2940 [ 978.936940][T20403] ? handle_mm_fault+0xed/0x14d0 [ 978.936961][T20403] handle_mm_fault+0xdc4/0x14d0 [ 978.936982][T20403] ? handle_mm_fault+0xed/0x14d0 [ 978.937004][T20403] ? __pfx_handle_mm_fault+0x10/0x10 [ 978.937023][T20403] ? follow_page_pte+0xbe2/0xe60 [ 978.937049][T20403] ? __pfx_follow_page_pte+0x10/0x10 [ 978.937077][T20403] __get_user_pages+0x16d4/0x2620 [ 978.937115][T20403] ? __gup_longterm_locked+0xc4e/0x1630 [ 978.937162][T20403] __gup_longterm_locked+0xdcf/0x1630 [ 978.937203][T20403] ? sanity_check_pinned_pages+0x7af/0x870 [ 978.937241][T20403] gup_fast_fallback+0x1cfd/0x2040 [ 978.937287][T20403] ? is_bpf_text_address+0x292/0x2b0 [ 978.937339][T20403] ? __pfx_gup_fast_fallback+0x10/0x10 [ 978.937370][T20403] ? is_valid_gup_args+0x11f/0x200 [ 978.937400][T20403] ? pin_user_pages_fast+0x4d/0xb0 [ 978.937431][T20403] iov_iter_extract_pages+0x3fd/0x6b0 [ 978.937466][T20403] extract_iter_to_sg+0xefb/0x25d0 [ 978.937501][T20403] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 978.937539][T20403] ? __asan_memset+0x22/0x50 [ 978.937566][T20403] af_alg_get_rsgl+0x4b6/0x8e0 [ 978.937609][T20403] skcipher_recvmsg+0x392/0x1140 [ 978.937642][T20403] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 978.937659][T20403] ? __lock_acquire+0x6b5/0x2d10 [ 978.937683][T20403] ? aa_sock_msg_perm+0x122/0x200 [ 978.937707][T20403] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 978.937726][T20403] sock_recvmsg_nosec+0x10c/0x140 [ 978.937755][T20403] ____sys_recvmsg+0x23d/0x4f0 [ 978.937784][T20403] ? __pfx_____sys_recvmsg+0x10/0x10 [ 978.937818][T20403] ? import_iovec+0x73/0xa0 [ 978.937846][T20403] ___sys_recvmsg+0x215/0x590 [ 978.937872][T20403] ? __pfx____sys_recvmsg+0x10/0x10 [ 978.937898][T20403] ? __fget_files+0x2a/0x420 [ 978.937939][T20403] ? __fget_files+0x3a6/0x420 [ 978.937973][T20403] do_recvmmsg+0x33a/0x800 [ 978.938002][T20403] ? __pfx_do_recvmmsg+0x10/0x10 [ 978.938033][T20403] ? rt_mutex_slowunlock+0x1cb/0x300 [ 978.938071][T20403] __x64_sys_recvmmsg+0x198/0x250 [ 978.938101][T20403] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 978.938137][T20403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.938159][T20403] do_syscall_64+0x15f/0x560 [ 978.938179][T20403] ? trace_irq_disable+0x3b/0x140 [ 978.938200][T20403] ? clear_bhb_loop+0x40/0x90 [ 978.938224][T20403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.938255][T20403] RIP: 0033:0x7f7489c3ce59 [ 978.938275][T20403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.938293][T20403] RSP: 002b:00007f7487e96028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 978.938315][T20403] RAX: ffffffffffffffda RBX: 00007f7489eb5fa0 RCX: 00007f7489c3ce59 [ 978.938330][T20403] RDX: 0000000000000001 RSI: 000020000000b9c0 RDI: 0000000000000004 [ 978.938344][T20403] RBP: 00007f7487e96090 R08: 0000000000000000 R09: 0000000000000000 [ 978.938358][T20403] R10: 0000000000010020 R11: 0000000000000246 R12: 0000000000000001 [ 978.938370][T20403] R13: 00007f7489eb6038 R14: 00007f7489eb5fa0 R15: 00007fffcc9074b8 [ 978.938401][T20403] [ 979.878979][ T5619] Bluetooth: hci3: unexpected event for opcode 0x007f [ 980.411690][ T5706] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 980.551732][ T8261] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 980.551855][ T5706] usb 6-1: device descriptor read/64, error -71 [ 980.705222][ T8261] usb 4-1: unable to get BOS descriptor or descriptor too short [ 980.707346][ T8261] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 980.709709][ T8261] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 980.709744][ T8261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.709761][ T8261] usb 4-1: Product: syz [ 980.709772][ T8261] usb 4-1: Manufacturer: syz [ 980.709783][ T8261] usb 4-1: SerialNumber: syz [ 980.831735][ T5706] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 980.961674][ T5706] usb 6-1: device descriptor read/64, error -71 [ 980.980160][ T8261] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 981.071997][ T5706] usb usb6-port1: attempt power cycle [ 981.150670][T20442] ./bus: Can't lookup blockdev [ 981.169733][ T8261] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 981.169754][ T8261] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 981.169771][ T8261] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 981.169866][ T8261] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 981.169880][ T8261] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 981.169896][ T8261] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 981.412704][ T5706] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 981.432544][ T5706] usb 6-1: device descriptor read/8, error -71 [ 981.691657][ T5706] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 981.712349][ T5706] usb 6-1: device descriptor read/8, error -71 [ 981.833857][ T5706] usb usb6-port1: unable to enumerate USB device [ 982.201804][ T8261] usb 4-1: USB disconnect, device number 4 [ 982.507736][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 982.669000][ T5619] Bluetooth: hci3: unexpected event for opcode 0x007f [ 982.855038][T20463] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4935'. [ 982.922636][ T8261] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 983.071673][ T8261] usb 4-1: Using ep0 maxpacket: 16 [ 983.074835][ T8261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.074868][ T8261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.074907][ T8261] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 983.074939][ T8261] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 983.074957][ T8261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.079415][ T8261] usb 4-1: config 0 descriptor?? [ 983.091645][ T5719] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 983.250825][T20465] FAULT_INJECTION: forcing a failure. [ 983.250825][T20465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 983.250875][T20465] CPU: 1 UID: 0 PID: 20465 Comm: syz.5.4936 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 983.250905][T20465] Tainted: [L]=SOFTLOCKUP [ 983.250915][T20465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 983.250928][T20465] Call Trace: [ 983.250938][T20465] [ 983.250949][T20465] dump_stack_lvl+0xe8/0x150 [ 983.250983][T20465] should_fail_ex+0x46b/0x600 [ 983.251015][T20465] _copy_to_user+0x31/0xb0 [ 983.251049][T20465] simple_read_from_buffer+0xe1/0x170 [ 983.251090][T20465] proc_fail_nth_read+0x1be/0x230 [ 983.251132][T20465] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 983.251170][T20465] ? rw_verify_area+0x2ac/0x4e0 [ 983.251194][T20465] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 983.251236][T20465] vfs_read+0x212/0xa80 [ 983.251267][T20465] ? __pfx_vfs_read+0x10/0x10 [ 983.251295][T20465] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 983.251321][T20465] ? lockdep_hardirqs_on+0x7a/0x110 [ 983.251345][T20465] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 983.251370][T20465] ? mutex_lock_nested+0x152/0x1d0 [ 983.251399][T20465] ? fdget_pos+0x252/0x320 [ 983.251441][T20465] ksys_read+0x156/0x270 [ 983.251466][T20465] ? __pfx_ksys_read+0x10/0x10 [ 983.251495][T20465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.251521][T20465] do_syscall_64+0x15f/0x560 [ 983.251542][T20465] ? trace_irq_disable+0x3b/0x140 [ 983.251566][T20465] ? clear_bhb_loop+0x40/0x90 [ 983.251592][T20465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.251614][T20465] RIP: 0033:0x7f7489bfd68e [ 983.251635][T20465] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 983.251656][T20465] RSP: 002b:00007f7487e95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 983.251681][T20465] RAX: ffffffffffffffda RBX: 00007f7487e966c0 RCX: 00007f7489bfd68e [ 983.251699][T20465] RDX: 000000000000000f RSI: 00007f7487e960a0 RDI: 0000000000000003 [ 983.251712][T20465] RBP: 00007f7487e96090 R08: 0000000000000000 R09: 0000000000000000 [ 983.251727][T20465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 983.251741][T20465] R13: 00007f7489eb6038 R14: 00007f7489eb5fa0 R15: 00007fffcc9074b8 [ 983.251777][T20465] [ 983.281621][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 983.413820][ T5719] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 983.414268][ T5719] usb 2-1: config 0 has no interface number 0 [ 983.415204][ T5719] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 983.415432][ T5719] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.568051][ T8261] hid (null): unknown global tag 0xe [ 983.598141][ T5719] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 983.598164][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.598180][ T5719] usb 2-1: Product: syz [ 983.598191][ T5719] usb 2-1: Manufacturer: syz [ 983.598203][ T5719] usb 2-1: SerialNumber: syz [ 983.649095][ T5719] usb 2-1: config 0 descriptor?? [ 983.666420][T20463] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 983.726644][ T8261] shield 0003:0955:7214.001D: unknown global tag 0xe [ 983.726665][ T8261] shield 0003:0955:7214.001D: item 0 1 1 14 parsing failed [ 983.729000][ T8261] shield 0003:0955:7214.001D: Parse failed [ 983.729061][ T8261] shield 0003:0955:7214.001D: probe with driver shield failed with error -22 [ 983.880159][ T5619] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 983.910384][ T5719] usb 2-1: USB disconnect, device number 32 [ 983.978332][ T8261] usb 4-1: USB disconnect, device number 5 [ 984.086864][T20473] binder: 20471:20473 unknown command 0 [ 984.086889][T20473] binder: 20471:20473 ioctl c0306201 200000000080 returned -22 [ 984.090278][T20473] binder: 20471:20473 ioctl c0306201 0 returned -14 [ 984.791733][ T5744] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 984.951902][ T5744] usb 4-1: Using ep0 maxpacket: 8 [ 984.954103][ T5744] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 984.954157][ T5744] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 984.954174][ T5744] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 984.954192][ T5744] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 984.954208][ T5744] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 984.954240][ T5744] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 984.954257][ T5744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.040214][ T5744] usbtmc 4-1:16.0: bulk endpoints not found [ 985.104056][ T5763] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 985.226428][T20501] binder: 20500:20501 unknown command 0 [ 985.226445][T20501] binder: 20500:20501 ioctl c0306201 200000000080 returned -22 [ 985.231843][ T5763] usb 2-1: device descriptor read/64, error -71 [ 985.508133][ T5763] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 985.566777][T20513] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4954'. [ 985.661899][ T5763] usb 2-1: device descriptor read/64, error -71 [ 985.772008][ T5763] usb usb2-port1: attempt power cycle [ 986.007187][T20525] binder: 20524:20525 unknown command 0 [ 986.007210][T20525] binder: 20524:20525 ioctl c0306201 200000000080 returned -22 [ 986.202502][ T5763] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 986.222253][ T5763] usb 2-1: device descriptor read/8, error -71 [ 986.311717][ T5719] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 986.441636][ T5719] usb 5-1: device descriptor read/64, error -71 [ 986.471774][ T5763] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 986.493724][ T5763] usb 2-1: device descriptor read/8, error -71 [ 986.604994][ T5763] usb usb2-port1: unable to enumerate USB device [ 986.682054][ T5719] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 986.737263][T20531] FAULT_INJECTION: forcing a failure. [ 986.737263][T20531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 986.737293][T20531] CPU: 0 UID: 0 PID: 20531 Comm: syz.5.4961 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 986.737316][T20531] Tainted: [L]=SOFTLOCKUP [ 986.737322][T20531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 986.737334][T20531] Call Trace: [ 986.737363][T20531] [ 986.737374][T20531] dump_stack_lvl+0xe8/0x150 [ 986.737409][T20531] should_fail_ex+0x46b/0x600 [ 986.737439][T20531] _copy_from_iter+0x3b0/0x1670 [ 986.737484][T20531] ? __alloc_skb+0x27d/0x7d0 [ 986.737502][T20531] ? __pfx__copy_from_iter+0x10/0x10 [ 986.737520][T20531] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 986.737537][T20531] ? __alloc_skb+0x27d/0x7d0 [ 986.737558][T20531] ? netlink_sendmsg+0x650/0xb40 [ 986.737576][T20531] ? skb_put+0x11b/0x210 [ 986.737595][T20531] netlink_sendmsg+0x6c0/0xb40 [ 986.737620][T20531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 986.737640][T20531] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 986.737668][T20531] ? aa_sock_msg_perm+0x122/0x200 [ 986.737691][T20531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 986.737709][T20531] sock_sendmsg_nosec+0x112/0x150 [ 986.737734][T20531] ____sys_sendmsg+0x55c/0x870 [ 986.737756][T20531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 986.737781][T20531] ? import_iovec+0x73/0xa0 [ 986.737812][T20531] ___sys_sendmsg+0x2a5/0x360 [ 986.737829][T20531] ? __lock_acquire+0x6b5/0x2d10 [ 986.737852][T20531] ? __pfx____sys_sendmsg+0x10/0x10 [ 986.737895][T20531] ? __fget_files+0x2a/0x420 [ 986.737919][T20531] ? __fget_files+0x3a6/0x420 [ 986.737949][T20531] __x64_sys_sendmsg+0x1c3/0x2a0 [ 986.737970][T20531] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 986.737995][T20531] ? __pfx_ksys_write+0x10/0x10 [ 986.738019][T20531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.738037][T20531] do_syscall_64+0x15f/0x560 [ 986.738054][T20531] ? trace_irq_disable+0x3b/0x140 [ 986.738072][T20531] ? clear_bhb_loop+0x40/0x90 [ 986.738091][T20531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.738108][T20531] RIP: 0033:0x7f7489c3ce59 [ 986.738123][T20531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 986.738137][T20531] RSP: 002b:00007f7487e96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 986.738154][T20531] RAX: ffffffffffffffda RBX: 00007f7489eb5fa0 RCX: 00007f7489c3ce59 [ 986.738166][T20531] RDX: 0000000000004044 RSI: 00002000000000c0 RDI: 0000000000000004 [ 986.738177][T20531] RBP: 00007f7487e96090 R08: 0000000000000000 R09: 0000000000000000 [ 986.738188][T20531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.738197][T20531] R13: 00007f7489eb6038 R14: 00007f7489eb5fa0 R15: 00007fffcc9074b8 [ 986.738221][T20531] [ 986.811888][ T5719] usb 5-1: device descriptor read/64, error -71 [ 986.935593][ T5719] usb usb5-port1: attempt power cycle [ 987.413033][ T5719] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 987.436516][ T5719] usb 5-1: device descriptor read/8, error -71 [ 987.554304][ T5763] usb 4-1: USB disconnect, device number 6 [ 987.671731][ T5719] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 987.693695][ T5719] usb 5-1: device descriptor read/8, error -71 [ 987.803042][ T5719] usb usb5-port1: unable to enumerate USB device [ 987.908950][T20549] binder: 20548:20549 unknown command 0 [ 987.908967][T20549] binder: 20548:20549 ioctl c0306201 200000000080 returned -22 [ 988.993108][T20570] binder: 20569:20570 unknown command 0 [ 988.993131][T20570] binder: 20569:20570 ioctl c0306201 200000000080 returned -22 [ 989.014018][ T5744] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 989.178888][ T5744] usb 6-1: Using ep0 maxpacket: 8 [ 989.189290][ T5744] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 989.189352][ T5744] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 989.189376][ T5744] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 989.189402][ T5744] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 989.189426][ T5744] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 989.189473][ T5744] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 989.189497][ T5744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.293307][ T5744] usbtmc 6-1:16.0: bulk endpoints not found [ 989.643891][T20576] FAULT_INJECTION: forcing a failure. [ 989.643891][T20576] name failslab, interval 1, probability 0, space 0, times 0 [ 989.643921][T20576] CPU: 0 UID: 0 PID: 20576 Comm: syz.1.4979 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 989.643945][T20576] Tainted: [L]=SOFTLOCKUP [ 989.643951][T20576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 989.643962][T20576] Call Trace: [ 989.643968][T20576] [ 989.643976][T20576] dump_stack_lvl+0xe8/0x150 [ 989.643999][T20576] should_fail_ex+0x46b/0x600 [ 989.644021][T20576] should_failslab+0xa8/0x100 [ 989.644041][T20576] kmem_cache_alloc_noprof+0x87/0x680 [ 989.644058][T20576] ? skb_clone+0x212/0x3a0 [ 989.644080][T20576] skb_clone+0x212/0x3a0 [ 989.644101][T20576] __netlink_deliver_tap+0x424/0x8b0 [ 989.644129][T20576] ? netlink_deliver_tap+0x2e/0x1b0 [ 989.644148][T20576] netlink_deliver_tap+0x19c/0x1b0 [ 989.644168][T20576] netlink_unicast+0x754/0x920 [ 989.644192][T20576] netlink_sendmsg+0x813/0xb40 [ 989.644217][T20576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 989.644238][T20576] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 989.644266][T20576] ? aa_sock_msg_perm+0x122/0x200 [ 989.644289][T20576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 989.644307][T20576] sock_sendmsg_nosec+0x112/0x150 [ 989.644332][T20576] sock_write_iter+0x308/0x410 [ 989.644354][T20576] ? __pfx_sock_write_iter+0x10/0x10 [ 989.644391][T20576] do_iter_readv_writev+0x62b/0x8d0 [ 989.644412][T20576] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 989.644437][T20576] ? rw_verify_area+0x25b/0x4e0 [ 989.644456][T20576] vfs_writev+0x345/0x9a0 [ 989.644485][T20576] ? __pfx_vfs_writev+0x10/0x10 [ 989.644517][T20576] ? __fget_files+0x2a/0x420 [ 989.644544][T20576] ? __fget_files+0x3a6/0x420 [ 989.644567][T20576] ? __fget_files+0x2a/0x420 [ 989.644596][T20576] do_writev+0x15a/0x2e0 [ 989.644619][T20576] ? __pfx_do_writev+0x10/0x10 [ 989.644654][T20576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.644672][T20576] do_syscall_64+0x15f/0x560 [ 989.644690][T20576] ? trace_irq_disable+0x3b/0x140 [ 989.644707][T20576] ? clear_bhb_loop+0x40/0x90 [ 989.644731][T20576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.644747][T20576] RIP: 0033:0x7f96d906ce59 [ 989.644763][T20576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.644777][T20576] RSP: 002b:00007f96d72c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 989.644793][T20576] RAX: ffffffffffffffda RBX: 00007f96d92e5fa0 RCX: 00007f96d906ce59 [ 989.644805][T20576] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 989.644816][T20576] RBP: 00007f96d72c6090 R08: 0000000000000000 R09: 0000000000000000 [ 989.644826][T20576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 989.644836][T20576] R13: 00007f96d92e6038 R14: 00007f96d92e5fa0 R15: 00007ffcd3643ff8 [ 989.644861][T20576] [ 989.651744][ T32] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 989.889592][ T32] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 989.964463][ T32] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 989.964497][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.964536][ T32] usb 5-1: Product: syz [ 989.964552][ T32] usb 5-1: Manufacturer: syz [ 989.964575][ T32] usb 5-1: SerialNumber: syz [ 990.019358][ T32] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 990.131279][ T5619] Bluetooth: hci2: unexpected event for opcode 0x007f [ 990.255462][T20582] FAULT_INJECTION: forcing a failure. [ 990.255462][T20582] name failslab, interval 1, probability 0, space 0, times 0 [ 990.255501][T20582] CPU: 0 UID: 0 PID: 20582 Comm: syz.1.4981 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 990.255532][T20582] Tainted: [L]=SOFTLOCKUP [ 990.255541][T20582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 990.255556][T20582] Call Trace: [ 990.255564][T20582] [ 990.255575][T20582] dump_stack_lvl+0xe8/0x150 [ 990.255606][T20582] should_fail_ex+0x46b/0x600 [ 990.255638][T20582] should_failslab+0xa8/0x100 [ 990.255667][T20582] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 990.255691][T20582] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 990.255721][T20582] ? dup_task_struct+0x52/0x840 [ 990.255758][T20582] dup_task_struct+0x52/0x840 [ 990.255795][T20582] ? rt_spin_unlock+0x160/0x200 [ 990.255830][T20582] copy_process+0x89b/0x4450 [ 990.255894][T20582] ? __pfx_copy_process+0x10/0x10 [ 990.255936][T20582] vhost_task_create+0x1f9/0x380 [ 990.255955][T20582] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 990.256002][T20582] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 990.256039][T20582] ? __pfx_vhost_task_create+0x10/0x10 [ 990.256072][T20582] ? __pfx_vhost_task_fn+0x10/0x10 [ 990.256101][T20582] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 990.256118][T20582] ? lockdep_hardirqs_on+0x7a/0x110 [ 990.256135][T20582] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 990.256171][T20582] ? mutex_lock_nested+0x152/0x1d0 [ 990.256202][T20582] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 990.256241][T20582] kvm_mmu_post_init_vm+0x147/0x2d0 [ 990.256285][T20582] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 990.256329][T20582] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 990.256360][T20582] ? do_raw_spin_lock+0x12b/0x2f0 [ 990.256395][T20582] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 990.256418][T20582] ? lockdep_hardirqs_on+0x7a/0x110 [ 990.256445][T20582] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 990.256462][T20582] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 990.256503][T20582] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 990.256539][T20582] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 990.256563][T20582] ? lockdep_hardirqs_on+0x7a/0x110 [ 990.256587][T20582] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 990.256611][T20582] ? rt_write_unlock+0x190/0x230 [ 990.256645][T20582] kvm_vcpu_ioctl+0xa65/0xfe0 [ 990.256702][T20582] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 990.256760][T20582] ? __fget_files+0x2a/0x420 [ 990.256794][T20582] ? __fget_files+0x2a/0x420 [ 990.256822][T20582] ? __fget_files+0x3a6/0x420 [ 990.256845][T20582] ? __fget_files+0x2a/0x420 [ 990.256896][T20582] ? bpf_lsm_file_ioctl+0x9/0x20 [ 990.256927][T20582] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 990.256958][T20582] __se_sys_ioctl+0xff/0x170 [ 990.256988][T20582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.257006][T20582] do_syscall_64+0x15f/0x560 [ 990.257037][T20582] ? trace_irq_disable+0x3b/0x140 [ 990.257062][T20582] ? clear_bhb_loop+0x40/0x90 [ 990.257092][T20582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.257113][T20582] RIP: 0033:0x7f96d906ce59 [ 990.257134][T20582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.257161][T20582] RSP: 002b:00007f96d72a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 990.257179][T20582] RAX: ffffffffffffffda RBX: 00007f96d92e6090 RCX: 00007f96d906ce59 [ 990.257191][T20582] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 990.257216][T20582] RBP: 00007f96d72a5090 R08: 0000000000000000 R09: 0000000000000000 [ 990.257231][T20582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.257245][T20582] R13: 00007f96d92e6128 R14: 00007f96d92e6090 R15: 00007ffcd3643ff8 [ 990.257291][T20582] [ 990.686370][ T32] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 990.711357][ T32] usb 5-1: USB disconnect, device number 101 [ 991.297913][T20593] binder: 20592:20593 unknown command 0 [ 991.297953][T20593] binder: 20592:20593 ioctl c0306201 200000000080 returned -22 [ 991.341672][ T5719] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 991.493300][ T5719] usb 4-1: Using ep0 maxpacket: 32 [ 991.496649][ T5719] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 991.496680][ T5719] usb 4-1: config 0 has no interface number 0 [ 991.499165][ T5719] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 991.499202][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.499218][ T5719] usb 4-1: Product: syz [ 991.499229][ T5719] usb 4-1: Manufacturer: syz [ 991.499246][ T5719] usb 4-1: SerialNumber: syz [ 991.528396][ T5719] usb 4-1: config 0 descriptor?? [ 991.611680][ T5345] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 991.761607][ T5345] usb 2-1: Using ep0 maxpacket: 32 [ 991.763803][ T5345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.763835][ T5345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.763877][ T5345] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 991.763903][ T5345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.801598][ T5345] usb 2-1: config 0 descriptor?? [ 991.916735][ T5345] hub 2-1:0.0: USB hub found [ 991.925475][T20599] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4988'. [ 991.931073][T20601] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4988'. [ 991.969933][ T5600] usb 6-1: USB disconnect, device number 73 [ 992.057833][ T5345] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 992.169376][T20604] FAULT_INJECTION: forcing a failure. [ 992.169376][T20604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 992.169417][T20604] CPU: 1 UID: 0 PID: 20604 Comm: syz.4.4989 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 992.169448][T20604] Tainted: [L]=SOFTLOCKUP [ 992.169456][T20604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 992.169470][T20604] Call Trace: [ 992.169468][ T5719] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 992.169480][T20604] [ 992.169490][T20604] dump_stack_lvl+0xe8/0x150 [ 992.169498][ T5719] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 992.169523][T20604] should_fail_ex+0x46b/0x600 [ 992.169554][T20604] _copy_to_user+0x31/0xb0 [ 992.169589][T20604] simple_read_from_buffer+0xe1/0x170 [ 992.169628][T20604] proc_fail_nth_read+0x1be/0x230 [ 992.169666][T20604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 992.169703][T20604] ? rw_verify_area+0x2ac/0x4e0 [ 992.169728][T20604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 992.169765][T20604] vfs_read+0x212/0xa80 [ 992.169798][T20604] ? __pfx_vfs_read+0x10/0x10 [ 992.169824][T20604] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 992.169847][T20604] ? lockdep_hardirqs_on+0x7a/0x110 [ 992.169872][T20604] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 992.169895][T20604] ? mutex_lock_nested+0x152/0x1d0 [ 992.169926][T20604] ? fdget_pos+0x252/0x320 [ 992.169967][T20604] ksys_read+0x156/0x270 [ 992.169994][T20604] ? __pfx_ksys_read+0x10/0x10 [ 992.170027][T20604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.170051][T20604] do_syscall_64+0x15f/0x560 [ 992.170076][T20604] ? trace_irq_disable+0x3b/0x140 [ 992.170100][T20604] ? clear_bhb_loop+0x40/0x90 [ 992.170139][T20604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.170162][T20604] RIP: 0033:0x7f4a942ad68e [ 992.170185][T20604] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 992.170206][T20604] RSP: 002b:00007f4a9253dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 992.170232][T20604] RAX: ffffffffffffffda RBX: 00007f4a9253e6c0 RCX: 00007f4a942ad68e [ 992.170249][T20604] RDX: 000000000000000f RSI: 00007f4a9253e0a0 RDI: 0000000000000004 [ 992.170262][T20604] RBP: 00007f4a9253e090 R08: 0000000000000000 R09: 0000000000000000 [ 992.170276][T20604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 992.170289][T20604] R13: 00007f4a94566038 R14: 00007f4a94565fa0 R15: 00007ffd0b93fb88 [ 992.170324][T20604] [ 992.514751][ T5719] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 992.515390][ T5719] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 992.615324][ T5719] usb 4-1: USB disconnect, device number 7 [ 992.640692][T20606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4986'. [ 992.748178][T20612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.751425][T20612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.775326][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.775435][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.101967][ T5600] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 993.186760][T20620] binder: 20619:20620 unknown command 0 [ 993.186784][T20620] binder: 20619:20620 ioctl c0306201 200000000080 returned -22 [ 993.282306][ T5600] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 993.283223][ T5600] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.283248][ T5600] usb 6-1: Product: syz [ 993.283265][ T5600] usb 6-1: Manufacturer: syz [ 993.283282][ T5600] usb 6-1: SerialNumber: syz [ 993.397601][ T5600] usb 6-1: config 0 descriptor?? [ 993.421433][ T5600] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 993.620648][ T5600] gspca_stk1135: reg_w 0x2 err -71 [ 993.623133][ T5600] gspca_stk1135: serial bus timeout: status=0x00 [ 993.623179][ T5600] gspca_stk1135: Sensor write failed [ 993.623651][ T5600] gspca_stk1135: serial bus timeout: status=0x00 [ 993.623665][ T5600] gspca_stk1135: Sensor write failed [ 993.624177][ T5600] gspca_stk1135: serial bus timeout: status=0x00 [ 993.624568][ T5600] gspca_stk1135: Sensor read failed [ 993.625002][ T5600] gspca_stk1135: serial bus timeout: status=0x00 [ 993.625430][ T5600] gspca_stk1135: Sensor read failed [ 993.625468][ T5600] gspca_stk1135: Detected sensor type unknown (0x0) [ 993.625829][ T5600] gspca_stk1135: serial bus timeout: status=0x00 [ 993.625857][ T5600] gspca_stk1135: Sensor read failed [ 993.626329][ T5600] gspca_stk1135: serial bus timeout: status=0x00 [ 993.626720][ T5600] gspca_stk1135: Sensor read failed [ 993.626759][ T5600] gspca_stk1135: serial bus timeout: status=0x00 [ 993.626771][ T5600] gspca_stk1135: Sensor write failed [ 993.627161][ T5600] gspca_stk1135: serial bus timeout: status=0x00 [ 993.627175][ T5600] gspca_stk1135: Sensor write failed [ 993.628021][ T5600] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 993.816903][ T5600] usb 6-1: USB disconnect, device number 74 [ 994.046386][T20630] FAULT_INJECTION: forcing a failure. [ 994.046386][T20630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 994.046425][T20630] CPU: 1 UID: 0 PID: 20630 Comm: syz.3.4997 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 994.046478][T20630] Tainted: [L]=SOFTLOCKUP [ 994.046487][T20630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 994.046501][T20630] Call Trace: [ 994.046511][T20630] [ 994.046521][T20630] dump_stack_lvl+0xe8/0x150 [ 994.046554][T20630] should_fail_ex+0x46b/0x600 [ 994.046584][T20630] _copy_from_user+0x2d/0xb0 [ 994.046615][T20630] sg_io+0x29f/0x890 [ 994.046659][T20630] scsi_ioctl+0x148b/0x2130 [ 994.046698][T20630] ? __pfx_scsi_ioctl+0x10/0x10 [ 994.046758][T20630] ? kasan_quarantine_put+0xbb/0x1f0 [ 994.046806][T20630] ? scsi_block_when_processing_errors+0x44f/0x540 [ 994.046855][T20630] ? __pfx_scsi_block_when_processing_errors+0x10/0x10 [ 994.046910][T20630] sg_ioctl+0x1125/0x21a0 [ 994.046950][T20630] ? __pfx_sg_ioctl+0x10/0x10 [ 994.046970][T20630] ? __fget_files+0x2a/0x420 [ 994.047013][T20630] ? __fget_files+0x2a/0x420 [ 994.047045][T20630] ? __fget_files+0x3a6/0x420 [ 994.047083][T20630] ? __fget_files+0x2a/0x420 [ 994.047119][T20630] ? bpf_lsm_file_ioctl+0x9/0x20 [ 994.047147][T20630] ? __pfx_sg_ioctl+0x10/0x10 [ 994.047166][T20630] __se_sys_ioctl+0xff/0x170 [ 994.047206][T20630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.047232][T20630] do_syscall_64+0x15f/0x560 [ 994.047255][T20630] ? trace_irq_disable+0x3b/0x140 [ 994.047277][T20630] ? clear_bhb_loop+0x40/0x90 [ 994.047312][T20630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.047329][T20630] RIP: 0033:0x7f107583ce59 [ 994.047359][T20630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 994.047380][T20630] RSP: 002b:00007f1073a96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 994.047405][T20630] RAX: ffffffffffffffda RBX: 00007f1075ab5fa0 RCX: 00007f107583ce59 [ 994.047423][T20630] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000003 [ 994.047437][T20630] RBP: 00007f1073a96090 R08: 0000000000000000 R09: 0000000000000000 [ 994.047452][T20630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 994.047466][T20630] R13: 00007f1075ab6038 R14: 00007f1075ab5fa0 R15: 00007ffd2f7f2448 [ 994.047500][T20630] [ 994.511375][ T5345] usbhid 2-1:0.0: can't add hid device: -71 [ 994.511826][ T5345] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 994.596331][ T5345] usb 2-1: USB disconnect, device number 37 [ 994.702031][T20640] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1508 [ 994.721673][ T5600] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 994.787494][T20644] binder: 20641:20644 unknown command 0 [ 994.787519][T20644] binder: 20641:20644 ioctl c0306201 200000000080 returned -22 [ 994.844427][T20643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5004'. [ 994.891652][ T5600] usb 4-1: Using ep0 maxpacket: 8 [ 994.894254][ T5600] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 994.894315][ T5600] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 994.894341][ T5600] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 994.894367][ T5600] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 994.894391][ T5600] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 994.894435][ T5600] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 994.894460][ T5600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.045821][ T5600] usbtmc 4-1:16.0: bulk endpoints not found [ 995.427677][T20655] FAULT_INJECTION: forcing a failure. [ 995.427677][T20655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 995.427718][T20655] CPU: 1 UID: 0 PID: 20655 Comm: syz.5.5007 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 995.427749][T20655] Tainted: [L]=SOFTLOCKUP [ 995.427757][T20655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 995.427772][T20655] Call Trace: [ 995.427781][T20655] [ 995.427791][T20655] dump_stack_lvl+0xe8/0x150 [ 995.427824][T20655] should_fail_ex+0x46b/0x600 [ 995.427855][T20655] _copy_to_user+0x31/0xb0 [ 995.427891][T20655] simple_read_from_buffer+0xe1/0x170 [ 995.427928][T20655] proc_fail_nth_read+0x1be/0x230 [ 995.427973][T20655] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 995.428012][T20655] ? rw_verify_area+0x2ac/0x4e0 [ 995.428034][T20655] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 995.428070][T20655] vfs_read+0x212/0xa80 [ 995.428101][T20655] ? __pfx_vfs_read+0x10/0x10 [ 995.428127][T20655] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 995.428151][T20655] ? lockdep_hardirqs_on+0x7a/0x110 [ 995.428183][T20655] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 995.428207][T20655] ? mutex_lock_nested+0x152/0x1d0 [ 995.428236][T20655] ? fdget_pos+0x252/0x320 [ 995.428278][T20655] ksys_read+0x156/0x270 [ 995.428305][T20655] ? __pfx_ksys_read+0x10/0x10 [ 995.428327][T20655] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 995.428363][T20655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.428386][T20655] do_syscall_64+0x15f/0x560 [ 995.428409][T20655] ? trace_irq_disable+0x3b/0x140 [ 995.428434][T20655] ? clear_bhb_loop+0x40/0x90 [ 995.428463][T20655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.428486][T20655] RIP: 0033:0x7f7489bfd68e [ 995.428507][T20655] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 995.428527][T20655] RSP: 002b:00007f7487e95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 995.428551][T20655] RAX: ffffffffffffffda RBX: 00007f7487e966c0 RCX: 00007f7489bfd68e [ 995.428568][T20655] RDX: 000000000000000f RSI: 00007f7487e960a0 RDI: 0000000000000005 [ 995.428582][T20655] RBP: 00007f7487e96090 R08: 0000000000000000 R09: 0000000000000000 [ 995.428598][T20655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 995.428612][T20655] R13: 00007f7489eb6038 R14: 00007f7489eb5fa0 R15: 00007fffcc9074b8 [ 995.428647][T20655] [ 996.042394][ T5600] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 996.191811][ T5600] usb 5-1: Using ep0 maxpacket: 32 [ 996.194799][ T5600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.194837][ T5600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.194880][ T5600] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 996.194906][ T5600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.251101][ T5600] usb 5-1: config 0 descriptor?? [ 996.264317][ T5600] hub 5-1:0.0: USB hub found [ 996.468651][ T5600] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 996.998473][T20670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5008'. [ 997.038321][T20672] binder: 20671:20672 unknown command 0 [ 997.038347][T20672] binder: 20671:20672 ioctl c0306201 200000000080 returned -22 [ 997.516129][ T5719] usb 4-1: USB disconnect, device number 8 [ 997.728283][T20681] FAULT_INJECTION: forcing a failure. [ 997.728283][T20681] name failslab, interval 1, probability 0, space 0, times 0 [ 997.728325][T20681] CPU: 0 UID: 0 PID: 20681 Comm: syz.3.5017 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 997.728355][T20681] Tainted: [L]=SOFTLOCKUP [ 997.728364][T20681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 997.728380][T20681] Call Trace: [ 997.728393][T20681] [ 997.728404][T20681] dump_stack_lvl+0xe8/0x150 [ 997.728437][T20681] should_fail_ex+0x46b/0x600 [ 997.728469][T20681] should_failslab+0xa8/0x100 [ 997.728496][T20681] __kmalloc_noprof+0xdf/0x7b0 [ 997.728519][T20681] ? kfree+0x4d/0x6c0 [ 997.728551][T20681] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 997.728590][T20681] tomoyo_realpath_from_path+0xe3/0x5d0 [ 997.728624][T20681] ? tomoyo_domain+0xd7/0x130 [ 997.728661][T20681] ? tomoyo_path_number_perm+0x219/0x630 [ 997.728687][T20681] tomoyo_path_number_perm+0x246/0x630 [ 997.728717][T20681] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 997.728755][T20681] ? __lock_acquire+0x6b5/0x2d10 [ 997.728785][T20681] ? do_raw_spin_lock+0x12b/0x2f0 [ 997.728840][T20681] ? __fget_files+0x2a/0x420 [ 997.728877][T20681] ? __fget_files+0x2a/0x420 [ 997.728909][T20681] ? __fget_files+0x3a6/0x420 [ 997.728940][T20681] ? __fget_files+0x2a/0x420 [ 997.728977][T20681] security_file_ioctl+0xc3/0x2a0 [ 997.729004][T20681] __se_sys_ioctl+0x47/0x170 [ 997.729030][T20681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.729055][T20681] do_syscall_64+0x15f/0x560 [ 997.729082][T20681] ? clear_bhb_loop+0x40/0x90 [ 997.729109][T20681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.729133][T20681] RIP: 0033:0x7f107583ce59 [ 997.729153][T20681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 997.729173][T20681] RSP: 002b:00007f1073a96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 997.729197][T20681] RAX: ffffffffffffffda RBX: 00007f1075ab5fa0 RCX: 00007f107583ce59 [ 997.729214][T20681] RDX: 0000000000000000 RSI: 000000000000aec7 RDI: 0000000000000004 [ 997.729227][T20681] RBP: 00007f1073a96090 R08: 0000000000000000 R09: 0000000000000000 [ 997.729241][T20681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 997.729254][T20681] R13: 00007f1075ab6038 R14: 00007f1075ab5fa0 R15: 00007ffd2f7f2448 [ 997.729289][T20681] [ 997.729716][T20681] ERROR: Out of memory at tomoyo_realpath_from_path. [ 998.455625][ T5345] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 998.500237][T20690] FAULT_INJECTION: forcing a failure. [ 998.500237][T20690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.500298][T20690] CPU: 1 UID: 0 PID: 20690 Comm: syz.3.5020 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 998.500330][T20690] Tainted: [L]=SOFTLOCKUP [ 998.500339][T20690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 998.500352][T20690] Call Trace: [ 998.500361][T20690] [ 998.500371][T20690] dump_stack_lvl+0xe8/0x150 [ 998.500407][T20690] should_fail_ex+0x46b/0x600 [ 998.500429][T20690] _copy_to_user+0x31/0xb0 [ 998.500481][T20690] simple_read_from_buffer+0xe1/0x170 [ 998.500520][T20690] proc_fail_nth_read+0x1be/0x230 [ 998.500558][T20690] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 998.500594][T20690] ? rw_verify_area+0x2ac/0x4e0 [ 998.500634][T20690] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 998.500673][T20690] vfs_read+0x212/0xa80 [ 998.500704][T20690] ? __pfx_vfs_read+0x10/0x10 [ 998.500728][T20690] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 998.500757][T20690] ? lockdep_hardirqs_on+0x7a/0x110 [ 998.500774][T20690] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 998.500806][T20690] ? mutex_lock_nested+0x152/0x1d0 [ 998.500838][T20690] ? fdget_pos+0x252/0x320 [ 998.500880][T20690] ksys_read+0x156/0x270 [ 998.500907][T20690] ? __pfx_ksys_read+0x10/0x10 [ 998.500939][T20690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.500967][T20690] do_syscall_64+0x15f/0x560 [ 998.500992][T20690] ? trace_irq_disable+0x3b/0x140 [ 998.501016][T20690] ? clear_bhb_loop+0x40/0x90 [ 998.501045][T20690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.501066][T20690] RIP: 0033:0x7f10757fd68e [ 998.501086][T20690] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 998.501110][T20690] RSP: 002b:00007f1073a95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 998.501127][T20690] RAX: ffffffffffffffda RBX: 00007f1073a966c0 RCX: 00007f10757fd68e [ 998.501139][T20690] RDX: 000000000000000f RSI: 00007f1073a960a0 RDI: 0000000000000004 [ 998.501166][T20690] RBP: 00007f1073a96090 R08: 0000000000000000 R09: 0000000000000000 [ 998.501180][T20690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.501194][T20690] R13: 00007f1075ab6038 R14: 00007f1075ab5fa0 R15: 00007ffd2f7f2448 [ 998.501229][T20690] [ 998.723276][ T5345] usb 2-1: Using ep0 maxpacket: 8 [ 998.751117][ T5345] usb 2-1: unable to get BOS descriptor or descriptor too short [ 998.760931][ T5345] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 998.760991][ T5345] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 998.761081][ T5345] usb 2-1: config 1 interface 0 has no altsetting 0 [ 998.794718][ T5345] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 998.794752][ T5345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.794838][ T5345] usb 2-1: Product: syz [ 998.794856][ T5345] usb 2-1: Manufacturer: syz [ 998.794871][ T5345] usb 2-1: SerialNumber: syz [ 999.016045][ T5600] usbhid 5-1:0.0: can't add hid device: -71 [ 999.016548][ T5600] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 999.063015][ T5600] usb 5-1: USB disconnect, device number 102 [ 999.190979][ T5345] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 999.215216][ T5345] usb 2-1: USB disconnect, device number 38 [ 999.271233][T20696] binder: 20695:20696 unknown command 0 [ 999.271256][T20696] binder: 20695:20696 ioctl c0306201 200000000080 returned -22 [ 999.363135][ T7671] udevd[7671]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 999.797342][T20703] FAULT_INJECTION: forcing a failure. [ 999.797342][T20703] name failslab, interval 1, probability 0, space 0, times 0 [ 999.797380][T20703] CPU: 1 UID: 0 PID: 20703 Comm: syz.3.5021 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 999.797411][T20703] Tainted: [L]=SOFTLOCKUP [ 999.797419][T20703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 999.797434][T20703] Call Trace: [ 999.797444][T20703] [ 999.797454][T20703] dump_stack_lvl+0xe8/0x150 [ 999.797486][T20703] should_fail_ex+0x46b/0x600 [ 999.797516][T20703] should_failslab+0xa8/0x100 [ 999.797544][T20703] kmem_cache_alloc_noprof+0x87/0x680 [ 999.797567][T20703] ? dst_alloc+0x105/0x170 [ 999.797600][T20703] dst_alloc+0x105/0x170 [ 999.797639][T20703] ip_route_output_key_hash_rcu+0x14d0/0x25e0 [ 999.797684][T20703] ? ip_route_output_key_hash+0xd8/0x2a0 [ 999.797719][T20703] ip_route_output_key_hash+0x18d/0x2a0 [ 999.797753][T20703] ? ns_capable+0x89/0xe0 [ 999.797788][T20703] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 999.797840][T20703] ip_route_output_flow+0x2a/0x150 [ 999.797876][T20703] ? security_sk_classify_flow+0x6d/0x150 [ 999.797915][T20703] udp_sendmsg+0x141a/0x21a0 [ 999.797969][T20703] ? __pfx_udp_sendmsg+0x10/0x10 [ 999.798043][T20703] ? __lock_acquire+0x6b5/0x2d10 [ 999.798076][T20703] ? __lock_acquire+0x6b5/0x2d10 [ 999.798109][T20703] udpv6_sendmsg+0x996/0x25c0 [ 999.798154][T20703] ? __lock_acquire+0x6b5/0x2d10 [ 999.798183][T20703] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 999.798226][T20703] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 999.798250][T20703] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 999.798303][T20703] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 999.798342][T20703] ? inet_send_prepare+0x1b9/0x270 [ 999.798381][T20703] ? inet6_sendmsg+0xe4/0x120 [ 999.798412][T20703] ? __pfx_inet6_sendmsg+0x10/0x10 [ 999.798440][T20703] sock_sendmsg_nosec+0x90/0x150 [ 999.798475][T20703] ____sys_sendmsg+0x55c/0x870 [ 999.798507][T20703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 999.798542][T20703] ? import_iovec+0x73/0xa0 [ 999.798576][T20703] ___sys_sendmsg+0x2a5/0x360 [ 999.798601][T20703] ? __lock_acquire+0x6b5/0x2d10 [ 999.798631][T20703] ? __pfx____sys_sendmsg+0x10/0x10 [ 999.798694][T20703] ? __fget_files+0x2a/0x420 [ 999.798726][T20703] ? __fget_files+0x3a6/0x420 [ 999.798769][T20703] __x64_sys_sendmsg+0x1c3/0x2a0 [ 999.798798][T20703] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 999.798834][T20703] ? __pfx_ksys_write+0x10/0x10 [ 999.798877][T20703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.798902][T20703] do_syscall_64+0x15f/0x560 [ 999.798926][T20703] ? trace_irq_disable+0x3b/0x140 [ 999.798949][T20703] ? clear_bhb_loop+0x40/0x90 [ 999.798976][T20703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.799000][T20703] RIP: 0033:0x7f107583ce59 [ 999.799021][T20703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 999.799041][T20703] RSP: 002b:00007f1073a75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 999.799066][T20703] RAX: ffffffffffffffda RBX: 00007f1075ab6090 RCX: 00007f107583ce59 [ 999.799083][T20703] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 999.799098][T20703] RBP: 00007f1073a75090 R08: 0000000000000000 R09: 0000000000000000 [ 999.799112][T20703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.799126][T20703] R13: 00007f1075ab6128 R14: 00007f1075ab6090 R15: 00007ffd2f7f2448 [ 999.799162][T20703] [ 999.802816][ T5719] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 999.961685][ T5719] usb 5-1: Using ep0 maxpacket: 8 [ 1000.057055][ T5719] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1000.057114][ T5719] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1000.057138][ T5719] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1000.057163][ T5719] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1000.057186][ T5719] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1000.057229][ T5719] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1000.057253][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.274643][ T5719] usbtmc 5-1:16.0: bulk endpoints not found [ 1000.782272][ T5719] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 1000.911735][ T5719] usb 4-1: device descriptor read/64, error -71 [ 1000.911791][ T32] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1001.071995][ T32] usb 6-1: Using ep0 maxpacket: 32 [ 1001.077025][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.077062][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1001.077104][ T32] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1001.077122][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.093272][ T32] usb 6-1: config 0 descriptor?? [ 1001.135502][ T32] hub 6-1:0.0: USB hub found [ 1001.181826][ T5719] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 1001.311683][ T5719] usb 4-1: device descriptor read/64, error -71 [ 1001.335749][ T32] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1001.421925][ T5719] usb usb4-port1: attempt power cycle [ 1001.606092][T20724] binder: 20723:20724 unknown command 0 [ 1001.606110][T20724] binder: 20723:20724 ioctl c0306201 200000000080 returned -22 [ 1001.762426][ T5719] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 1001.789338][ T5719] usb 4-1: device descriptor read/8, error -71 [ 1001.899072][T20727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5030'. [ 1001.981751][ T5600] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1002.021735][ T5719] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 1002.043838][ T5719] usb 4-1: device descriptor read/8, error -71 [ 1002.131607][ T5600] usb 2-1: Using ep0 maxpacket: 32 [ 1002.142382][ T5600] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.142411][ T5600] usb 2-1: config 0 has no interfaces? [ 1002.142444][ T5600] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1002.142470][ T5600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.152951][ T5719] usb usb4-port1: unable to enumerate USB device [ 1002.187879][ T5600] usb 2-1: config 0 descriptor?? [ 1002.515296][ T5600] usb 5-1: USB disconnect, device number 103 [ 1002.644677][T20731] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5034'. [ 1002.727684][T20733] FAULT_INJECTION: forcing a failure. [ 1002.727684][T20733] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.727719][T20733] CPU: 0 UID: 0 PID: 20733 Comm: syz.4.5036 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1002.727745][T20733] Tainted: [L]=SOFTLOCKUP [ 1002.727752][T20733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1002.727764][T20733] Call Trace: [ 1002.727772][T20733] [ 1002.727780][T20733] dump_stack_lvl+0xe8/0x150 [ 1002.727809][T20733] should_fail_ex+0x46b/0x600 [ 1002.727834][T20733] should_failslab+0xa8/0x100 [ 1002.727856][T20733] __kmalloc_noprof+0xdf/0x7b0 [ 1002.727874][T20733] ? kfree+0x4d/0x6c0 [ 1002.727901][T20733] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1002.727932][T20733] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1002.727960][T20733] ? tomoyo_domain+0xd7/0x130 [ 1002.727990][T20733] ? tomoyo_path_number_perm+0x219/0x630 [ 1002.728012][T20733] tomoyo_path_number_perm+0x246/0x630 [ 1002.728035][T20733] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1002.728056][T20733] ? __lock_acquire+0x6b5/0x2d10 [ 1002.728081][T20733] ? do_raw_spin_lock+0x12b/0x2f0 [ 1002.728123][T20733] ? __fget_files+0x2a/0x420 [ 1002.728152][T20733] ? __fget_files+0x2a/0x420 [ 1002.728177][T20733] ? __fget_files+0x3a6/0x420 [ 1002.728202][T20733] ? __fget_files+0x2a/0x420 [ 1002.728231][T20733] security_file_ioctl+0xc3/0x2a0 [ 1002.728253][T20733] __se_sys_ioctl+0x47/0x170 [ 1002.728279][T20733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.728300][T20733] do_syscall_64+0x15f/0x560 [ 1002.728319][T20733] ? trace_irq_disable+0x3b/0x140 [ 1002.728338][T20733] ? clear_bhb_loop+0x40/0x90 [ 1002.728360][T20733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.728378][T20733] RIP: 0033:0x7f4a942ece59 [ 1002.728395][T20733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.728411][T20733] RSP: 002b:00007f4a9253e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1002.728431][T20733] RAX: ffffffffffffffda RBX: 00007f4a94565fa0 RCX: 00007f4a942ece59 [ 1002.728444][T20733] RDX: 0000200000000040 RSI: 000000004008af04 RDI: 0000000000000003 [ 1002.728456][T20733] RBP: 00007f4a9253e090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.728467][T20733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.728478][T20733] R13: 00007f4a94566038 R14: 00007f4a94565fa0 R15: 00007ffd0b93fb88 [ 1002.728505][T20733] [ 1002.728619][T20733] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1003.361313][T20746] FAULT_INJECTION: forcing a failure. [ 1003.361313][T20746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1003.361353][T20746] CPU: 0 UID: 0 PID: 20746 Comm: syz.4.5040 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1003.361402][T20746] Tainted: [L]=SOFTLOCKUP [ 1003.361412][T20746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1003.361432][T20746] Call Trace: [ 1003.361446][T20746] [ 1003.361456][T20746] dump_stack_lvl+0xe8/0x150 [ 1003.361489][T20746] should_fail_ex+0x46b/0x600 [ 1003.361520][T20746] _copy_from_iter+0x1d3/0x1670 [ 1003.361556][T20746] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1003.361578][T20746] ? __alloc_skb+0x27d/0x7d0 [ 1003.361599][T20746] ? __pfx__copy_from_iter+0x10/0x10 [ 1003.361625][T20746] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1003.361648][T20746] ? __alloc_skb+0x27d/0x7d0 [ 1003.361674][T20746] ? netlink_sendmsg+0x650/0xb40 [ 1003.361699][T20746] ? skb_put+0x11b/0x210 [ 1003.361723][T20746] netlink_sendmsg+0x6c0/0xb40 [ 1003.361762][T20746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1003.361805][T20746] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1003.361845][T20746] ? aa_sock_msg_perm+0x122/0x200 [ 1003.361874][T20746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1003.361899][T20746] sock_sendmsg_nosec+0x112/0x150 [ 1003.361932][T20746] ____sys_sendmsg+0x55c/0x870 [ 1003.361969][T20746] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1003.362005][T20746] ? import_iovec+0x73/0xa0 [ 1003.362040][T20746] ___sys_sendmsg+0x2a5/0x360 [ 1003.362065][T20746] ? __lock_acquire+0x6b5/0x2d10 [ 1003.362097][T20746] ? __pfx____sys_sendmsg+0x10/0x10 [ 1003.362158][T20746] ? __fget_files+0x2a/0x420 [ 1003.362191][T20746] ? __fget_files+0x3a6/0x420 [ 1003.362242][T20746] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1003.362270][T20746] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1003.362321][T20746] ? __pfx_ksys_write+0x10/0x10 [ 1003.362356][T20746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.362381][T20746] do_syscall_64+0x15f/0x560 [ 1003.362405][T20746] ? trace_irq_disable+0x3b/0x140 [ 1003.362427][T20746] ? clear_bhb_loop+0x40/0x90 [ 1003.362455][T20746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.362472][T20746] RIP: 0033:0x7f4a942ece59 [ 1003.362505][T20746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1003.362526][T20746] RSP: 002b:00007f4a9253e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1003.362552][T20746] RAX: ffffffffffffffda RBX: 00007f4a94565fa0 RCX: 00007f4a942ece59 [ 1003.362569][T20746] RDX: 000000000000c080 RSI: 0000200000000100 RDI: 0000000000000003 [ 1003.362584][T20746] RBP: 00007f4a9253e090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.362598][T20746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1003.362613][T20746] R13: 00007f4a94566038 R14: 00007f4a94565fa0 R15: 00007ffd0b93fb88 [ 1003.362642][T20746] [ 1003.841297][T20751] binder: 20750:20751 unknown command 0 [ 1003.841315][T20751] binder: 20750:20751 ioctl c0306201 200000000080 returned -22 [ 1003.866121][ T32] usbhid 6-1:0.0: can't add hid device: -71 [ 1003.866282][ T32] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1003.902679][ T32] usb 6-1: USB disconnect, device number 75 [ 1004.060274][T20756] FAULT_INJECTION: forcing a failure. [ 1004.060274][T20756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1004.060304][T20756] CPU: 0 UID: 0 PID: 20756 Comm: syz.3.5044 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1004.060327][T20756] Tainted: [L]=SOFTLOCKUP [ 1004.060334][T20756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1004.060345][T20756] Call Trace: [ 1004.060351][T20756] [ 1004.060359][T20756] dump_stack_lvl+0xe8/0x150 [ 1004.060384][T20756] should_fail_ex+0x46b/0x600 [ 1004.060407][T20756] _copy_to_user+0x31/0xb0 [ 1004.060433][T20756] simple_read_from_buffer+0xe1/0x170 [ 1004.060469][T20756] proc_fail_nth_read+0x1be/0x230 [ 1004.060497][T20756] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1004.060524][T20756] ? rw_verify_area+0x2ac/0x4e0 [ 1004.060541][T20756] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1004.060568][T20756] vfs_read+0x212/0xa80 [ 1004.060590][T20756] ? __pfx_vfs_read+0x10/0x10 [ 1004.060608][T20756] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1004.060627][T20756] ? lockdep_hardirqs_on+0x7a/0x110 [ 1004.060644][T20756] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1004.060661][T20756] ? mutex_lock_nested+0x152/0x1d0 [ 1004.060681][T20756] ? fdget_pos+0x252/0x320 [ 1004.060711][T20756] ksys_read+0x156/0x270 [ 1004.060729][T20756] ? __pfx_ksys_read+0x10/0x10 [ 1004.060752][T20756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.060770][T20756] do_syscall_64+0x15f/0x560 [ 1004.060787][T20756] ? trace_irq_disable+0x3b/0x140 [ 1004.060828][T20756] ? clear_bhb_loop+0x40/0x90 [ 1004.060857][T20756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.060881][T20756] RIP: 0033:0x7f10757fd68e [ 1004.060902][T20756] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1004.060927][T20756] RSP: 002b:00007f1073a95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1004.060944][T20756] RAX: ffffffffffffffda RBX: 00007f1073a966c0 RCX: 00007f10757fd68e [ 1004.060956][T20756] RDX: 000000000000000f RSI: 00007f1073a960a0 RDI: 0000000000000006 [ 1004.060966][T20756] RBP: 00007f1073a96090 R08: 0000000000000000 R09: 0000000000000000 [ 1004.060975][T20756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1004.060985][T20756] R13: 00007f1075ab6038 R14: 00007f1075ab5fa0 R15: 00007ffd2f7f2448 [ 1004.061009][T20756] [ 1004.441665][ T32] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1004.601612][ T32] usb 6-1: Using ep0 maxpacket: 8 [ 1004.603965][ T32] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1004.604033][ T32] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1004.604058][ T32] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1004.604084][ T32] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1004.604107][ T32] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1004.604152][ T32] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1004.604176][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.711065][ T32] usbtmc 6-1:16.0: bulk endpoints not found [ 1004.767689][T20762] FAULT_INJECTION: forcing a failure. [ 1004.767689][T20762] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.767729][T20762] CPU: 1 UID: 0 PID: 20762 Comm: syz.4.5047 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1004.767761][T20762] Tainted: [L]=SOFTLOCKUP [ 1004.767769][T20762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1004.767784][T20762] Call Trace: [ 1004.767793][T20762] [ 1004.767803][T20762] dump_stack_lvl+0xe8/0x150 [ 1004.767837][T20762] should_fail_ex+0x46b/0x600 [ 1004.767867][T20762] should_failslab+0xa8/0x100 [ 1004.767894][T20762] __kmalloc_noprof+0xdf/0x7b0 [ 1004.767920][T20762] ? tomoyo_encode+0x28b/0x550 [ 1004.767957][T20762] tomoyo_encode+0x28b/0x550 [ 1004.767994][T20762] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1004.768038][T20762] ? tomoyo_path_number_perm+0x219/0x630 [ 1004.768065][T20762] tomoyo_path_number_perm+0x246/0x630 [ 1004.768095][T20762] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1004.768120][T20762] ? __lock_acquire+0x6b5/0x2d10 [ 1004.768154][T20762] ? do_raw_spin_lock+0x12b/0x2f0 [ 1004.768209][T20762] ? __fget_files+0x2a/0x420 [ 1004.768246][T20762] ? __fget_files+0x2a/0x420 [ 1004.768278][T20762] ? __fget_files+0x3a6/0x420 [ 1004.768310][T20762] ? __fget_files+0x2a/0x420 [ 1004.768348][T20762] security_file_ioctl+0xc3/0x2a0 [ 1004.768375][T20762] __se_sys_ioctl+0x47/0x170 [ 1004.768399][T20762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.768424][T20762] do_syscall_64+0x15f/0x560 [ 1004.768456][T20762] ? trace_irq_disable+0x3b/0x140 [ 1004.768479][T20762] ? clear_bhb_loop+0x40/0x90 [ 1004.768507][T20762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.768530][T20762] RIP: 0033:0x7f4a942ece59 [ 1004.768551][T20762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1004.768571][T20762] RSP: 002b:00007f4a9253e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1004.768596][T20762] RAX: ffffffffffffffda RBX: 00007f4a94565fa0 RCX: 00007f4a942ece59 [ 1004.768614][T20762] RDX: 0000200000000100 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1004.768629][T20762] RBP: 00007f4a9253e090 R08: 0000000000000000 R09: 0000000000000000 [ 1004.768643][T20762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1004.768657][T20762] R13: 00007f4a94566038 R14: 00007f4a94565fa0 R15: 00007ffd0b93fb88 [ 1004.768692][T20762] [ 1004.768794][T20762] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1005.023230][ T5600] usb 2-1: USB disconnect, device number 39 [ 1005.212125][T20772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5048'. [ 1005.325980][T20775] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5043'. [ 1005.450504][T20777] binder: 20776:20777 unknown command 0 [ 1005.450522][T20777] binder: 20776:20777 ioctl c0306201 200000000080 returned -22 [ 1005.531668][ T5744] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1005.669643][T20779] [ 1005.669654][T20779] ====================================================== [ 1005.669661][T20779] WARNING: possible circular locking dependency detected [ 1005.669675][T20779] syzkaller #0 Tainted: G L [ 1005.669686][T20779] ------------------------------------------------------ [ 1005.669692][T20779] syz.4.5053/20779 is trying to acquire lock: [ 1005.669702][T20779] ffffffff8e94ac18 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0 [ 1005.669750][T20779] [ 1005.669750][T20779] but task is already holding lock: [ 1005.669756][T20779] ffffffff8e075458 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x47/0x4c0 [ 1005.669799][T20779] [ 1005.669799][T20779] which lock already depends on the new lock. [ 1005.669799][T20779] [ 1005.669805][T20779] [ 1005.669805][T20779] the existing dependency chain (in reverse order) is: [ 1005.669811][T20779] [ 1005.669811][T20779] -> #7 (system_transition_mutex){+.+.}-{4:4}: [ 1005.669856][T20779] mutex_lock_nested+0x5a/0x1d0 [ 1005.669886][T20779] pm_test_store+0x95/0x480 [ 1005.669911][T20779] kernfs_fop_write_iter+0x3b0/0x540 [ 1005.669946][T20779] aio_write+0x5df/0x880 [ 1005.669965][T20779] io_submit_one+0x7bb/0x14c0 [ 1005.669982][T20779] __se_sys_io_submit+0x195/0x340 [ 1005.669998][T20779] do_syscall_64+0x15f/0x560 [ 1005.670014][T20779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.670031][T20779] [ 1005.670031][T20779] -> #6 (&of->mutex){+.+.}-{4:4}: [ 1005.670052][T20779] mutex_lock_nested+0x5a/0x1d0 [ 1005.670073][T20779] kernfs_seq_start+0x5c/0x420 [ 1005.670091][T20779] traverse+0x164/0x580 [ 1005.670109][T20779] seq_read_iter+0xd09/0xe20 [ 1005.670127][T20779] lo_rw_aio+0xc80/0xf00 [ 1005.670140][T20779] loop_process_work+0x92a/0x11b0 [ 1005.670154][T20779] process_one_work+0x98b/0x1630 [ 1005.670175][T20779] worker_thread+0xb49/0x1140 [ 1005.670196][T20779] kthread+0x389/0x470 [ 1005.670211][T20779] ret_from_fork+0x514/0xb70 [ 1005.670235][T20779] ret_from_fork_asm+0x1a/0x30 [ 1005.670257][T20779] [ 1005.670257][T20779] -> #5 (&p->lock){+.+.}-{4:4}: [ 1005.670277][T20779] mutex_lock_nested+0x5a/0x1d0 [ 1005.670298][T20779] seq_read_iter+0xb8/0xe20 [ 1005.670323][T20779] lo_rw_aio+0xc80/0xf00 [ 1005.670336][T20779] loop_process_work+0x92a/0x11b0 [ 1005.670350][T20779] process_one_work+0x98b/0x1630 [ 1005.670371][T20779] worker_thread+0xb49/0x1140 [ 1005.670393][T20779] kthread+0x389/0x470 [ 1005.670408][T20779] ret_from_fork+0x514/0xb70 [ 1005.670426][T20779] ret_from_fork_asm+0x1a/0x30 [ 1005.670446][T20779] [ 1005.670446][T20779] -> #4 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}: [ 1005.670468][T20779] process_one_work+0x8d7/0x1630 [ 1005.670494][T20779] worker_thread+0xb49/0x1140 [ 1005.670516][T20779] kthread+0x389/0x470 [ 1005.670531][T20779] ret_from_fork+0x514/0xb70 [ 1005.670548][T20779] ret_from_fork_asm+0x1a/0x30 [ 1005.670569][T20779] [ 1005.670569][T20779] -> #3 ((wq_completion)loop4){+.+.}-{0:0}: [ 1005.670595][T20779] touch_wq_lockdep_map+0xcb/0x180 [ 1005.670620][T20779] __flush_workqueue+0x14b/0x14f0 [ 1005.670645][T20779] drain_workqueue+0xd3/0x390 [ 1005.670658][T20779] lo_release+0x287/0x8f0 [ 1005.670672][T20779] bdev_release+0x541/0x660 [ 1005.670689][T20779] blkdev_release+0x15/0x20 [ 1005.670706][T20779] __fput+0x461/0xa70 [ 1005.670728][T20779] task_work_run+0x1d9/0x270 [ 1005.670744][T20779] exit_to_user_mode_loop+0xf3/0x4d0 [ 1005.670761][T20779] do_syscall_64+0x33e/0x560 [ 1005.670777][T20779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.670792][T20779] [ 1005.670792][T20779] -> #2 (&disk->open_mutex){+.+.}-{4:4}: [ 1005.670813][T20779] mutex_lock_nested+0x5a/0x1d0 [ 1005.670833][T20779] __del_gendisk+0x127/0x980 [ 1005.670853][T20779] del_gendisk+0xe7/0x160 [ 1005.670873][T20779] loop_remove+0x42/0xc0 [ 1005.670896][T20779] loop_control_ioctl+0x4ba/0x5b0 [ 1005.670921][T20779] __se_sys_ioctl+0xff/0x170 [ 1005.670936][T20779] do_syscall_64+0x15f/0x560 [ 1005.670952][T20779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.670989][T20779] [ 1005.670989][T20779] -> #1 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 1005.671019][T20779] down_read+0x97/0x200 [ 1005.671062][T20779] add_disk_fwnode+0xe7/0x480 [ 1005.671095][T20779] loop_add+0x86e/0xb50 [ 1005.671119][T20779] blk_request_module+0x27d/0x2a0 [ 1005.671140][T20779] blkdev_get_no_open+0x3f/0xe0 [ 1005.671155][T20779] blkdev_open+0x1f5/0x620 [ 1005.671173][T20779] do_dentry_open+0x83d/0x13e0 [ 1005.671195][T20779] vfs_open+0x3b/0x350 [ 1005.671214][T20779] path_openat+0x2eea/0x3960 [ 1005.671229][T20779] do_file_open+0x23e/0x4a0 [ 1005.671243][T20779] do_sys_openat2+0x115/0x200 [ 1005.671264][T20779] __x64_sys_creat+0x8f/0xc0 [ 1005.671286][T20779] do_syscall_64+0x15f/0x560 [ 1005.671306][T20779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.671322][T20779] [ 1005.671322][T20779] -> #0 (major_names_lock){+.+.}-{4:4}: [ 1005.671343][T20779] __lock_acquire+0x15a5/0x2d10 [ 1005.671360][T20779] lock_acquire+0x106/0x350 [ 1005.671376][T20779] mutex_lock_nested+0x5a/0x1d0 [ 1005.671396][T20779] blk_request_module+0x35/0x2a0 [ 1005.671417][T20779] blkdev_get_no_open+0x3f/0xe0 [ 1005.671433][T20779] bdev_file_open_by_dev+0xa0/0x240 [ 1005.671470][T20779] swsusp_check+0x56/0x490 [ 1005.671491][T20779] software_resume+0x51/0x4c0 [ 1005.671524][T20779] resume_store+0x333/0x4f0 [ 1005.671555][T20779] kernfs_fop_write_iter+0x3b0/0x540 [ 1005.671580][T20779] vfs_write+0x629/0xba0 [ 1005.671607][T20779] ksys_write+0x156/0x270 [ 1005.671622][T20779] do_syscall_64+0x15f/0x560 [ 1005.671638][T20779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.671653][T20779] [ 1005.671653][T20779] other info that might help us debug this: [ 1005.671653][T20779] [ 1005.671659][T20779] Chain exists of: [ 1005.671659][T20779] major_names_lock --> &of->mutex --> system_transition_mutex [ 1005.671659][T20779] [ 1005.671685][T20779] Possible unsafe locking scenario: [ 1005.671685][T20779] [ 1005.671690][T20779] CPU0 CPU1 [ 1005.671696][T20779] ---- ---- [ 1005.671701][T20779] lock(system_transition_mutex); [ 1005.671713][T20779] lock(&of->mutex); [ 1005.671724][T20779] lock(system_transition_mutex); [ 1005.671736][T20779] lock(major_names_lock); [ 1005.671747][T20779] [ 1005.671747][T20779] *** DEADLOCK *** [ 1005.671747][T20779] [ 1005.671751][T20779] 5 locks held by syz.4.5053/20779: [ 1005.671761][T20779] #0: ffff88803e7e5b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1005.671807][T20779] #1: ffff8880353f0480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1005.671846][T20779] #2: ffff88805601ac78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1005.671885][T20779] #3: ffff88801e296698 (kn->active#79){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1005.671927][T20779] #4: ffffffff8e075458 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x47/0x4c0 [ 1005.671972][T20779] [ 1005.671972][T20779] stack backtrace: [ 1005.671984][T20779] CPU: 0 UID: 0 PID: 20779 Comm: syz.4.5053 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1005.672007][T20779] Tainted: [L]=SOFTLOCKUP [ 1005.672013][T20779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1005.672023][T20779] Call Trace: [ 1005.672030][T20779] [ 1005.672038][T20779] dump_stack_lvl+0xe8/0x150 [ 1005.672060][T20779] print_circular_bug+0x2e1/0x300 [ 1005.672112][T20779] check_noncircular+0x12e/0x150 [ 1005.672148][T20779] __lock_acquire+0x15a5/0x2d10 [ 1005.672181][T20779] ? __lock_acquire+0x6b5/0x2d10 [ 1005.672206][T20779] ? blk_request_module+0x35/0x2a0 [ 1005.672228][T20779] lock_acquire+0x106/0x350 [ 1005.672244][T20779] ? blk_request_module+0x35/0x2a0 [ 1005.672268][T20779] ? blk_request_module+0x35/0x2a0 [ 1005.672292][T20779] ? blk_request_module+0x35/0x2a0 [ 1005.672318][T20779] mutex_lock_nested+0x5a/0x1d0 [ 1005.672339][T20779] ? blk_request_module+0x35/0x2a0 [ 1005.672363][T20779] blk_request_module+0x35/0x2a0 [ 1005.672386][T20779] blkdev_get_no_open+0x3f/0xe0 [ 1005.672404][T20779] bdev_file_open_by_dev+0xa0/0x240 [ 1005.672423][T20779] swsusp_check+0x56/0x490 [ 1005.672442][T20779] software_resume+0x51/0x4c0 [ 1005.672468][T20779] resume_store+0x333/0x4f0 [ 1005.672493][T20779] ? sysfs_file_kobj+0x1a/0x230 [ 1005.672515][T20779] ? __pfx_resume_store+0x10/0x10 [ 1005.672542][T20779] ? sysfs_file_kobj+0x1a/0x230 [ 1005.672563][T20779] ? sysfs_file_kobj+0x1e4/0x230 [ 1005.672584][T20779] ? sysfs_kf_write+0x166/0x260 [ 1005.672608][T20779] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1005.672630][T20779] kernfs_fop_write_iter+0x3b0/0x540 [ 1005.672651][T20779] vfs_write+0x629/0xba0 [ 1005.672670][T20779] ? __pfx_vfs_write+0x10/0x10 [ 1005.672686][T20779] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1005.672703][T20779] ? lockdep_hardirqs_on+0x7a/0x110 [ 1005.672720][T20779] ? mutex_lock_nested+0x152/0x1d0 [ 1005.672741][T20779] ? fdget_pos+0x252/0x320 [ 1005.672768][T20779] ksys_write+0x156/0x270 [ 1005.672785][T20779] ? __pfx_ksys_write+0x10/0x10 [ 1005.672804][T20779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.672821][T20779] do_syscall_64+0x15f/0x560 [ 1005.672837][T20779] ? trace_irq_disable+0x3b/0x140 [ 1005.672853][T20779] ? clear_bhb_loop+0x40/0x90 [ 1005.672871][T20779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.672888][T20779] RIP: 0033:0x7f4a942ece59 [ 1005.672902][T20779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1005.672917][T20779] RSP: 002b:00007f4a9253e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1005.672934][T20779] RAX: ffffffffffffffda RBX: 00007f4a94565fa0 RCX: 00007f4a942ece59 [ 1005.672946][T20779] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 1005.672957][T20779] RBP: 00007f4a94382d6f R08: 0000000000000000 R09: 0000000000000000 [ 1005.672968][T20779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1005.672979][T20779] R13: 00007f4a94566038 R14: 00007f4a94565fa0 R15: 00007ffd0b93fb88 [ 1005.672998][T20779] [ 1005.684593][ T5744] usb 4-1: Using ep0 maxpacket: 16 [ 1005.758020][ T5744] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1005.779436][T20779] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1005.779504][T20779] block device autoloading is deprecated and will be removed. [ 1005.783562][T20779] PM: Image not found (code -5) [ 1005.839276][ T5744] usb 4-1: config 9 has an invalid interface number: 57 but max is 0 [ 1005.839299][ T5744] usb 4-1: config 9 has no interface number 0 [ 1005.839320][ T5744] usb 4-1: config 9 interface 57 has no altsetting 0 [ 1005.867984][ T5744] usb 4-1: string descriptor 0 read error: -22 [ 1005.868084][ T5744] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 1005.868110][ T5744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.008674][ T5719] usb 6-1: USB disconnect, device number 76 [ 1007.010596][ T5744] video4linux radio48: keene_cmd_main failed (-71) [ 1007.010637][ T5744] radio-keene 4-1:9.57: V4L2 device registered as radio48 [ 1007.038754][ T5744] usb 4-1: USB disconnect, device number 13