last executing test programs: 11.510527713s ago: executing program 0 (id=1018): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000001140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001100)={&(0x7f0000000080)={0x1044, r2, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x7d}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}]}, 0x1044}, 0x1, 0x0, 0x0, 0x8840}, 0x18080) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000001180), 0x7, 0x10c01) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000011c0)=0x80000000) fstat(r1, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001280)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000001380)=0xe8) setreuid(r4, r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000013c0), r6) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000001400)=0x1) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001440)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) write$cgroup_int(r7, &(0x7f0000001480)=0xffffffffffffffff, 0x12) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000001540)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x58, r8, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x43f2765f3d557080) setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000001680)={{{@in6=@remote, @in=@multicast2, 0x4e21, 0x6, 0x4e22, 0xfe, 0xa, 0x20, 0x80, 0x87, 0x0, r4}, {0x9da3, 0xd, 0x10, 0x0, 0x0, 0x9, 0x10, 0x97}, {0x400, 0x8000000000000000, 0xd, 0x1}, 0x100, 0x6e6bbd, 0x1, 0x1, 0x1, 0x3}, {{@in6=@remote, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3506, 0x0, 0x2, 0x7, 0x10, 0x5, 0xd}}, 0xe8) syz_emit_ethernet(0x54, &(0x7f0000001780)={@random="63adc46fe228", @broadcast, @void, {@generic={0x200, "a0c034cc37db302e6d7399d19831725ee3ed5a591581d0f2abbf33e15f9838b10623c220bb45785a763f552195ac6e2afbd004be52930b0392974915b8db8a410ef569fd1fff"}}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001800), r10) syz_80211_inject_frame(&(0x7f0000001840), &(0x7f0000001880)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x5}, @broadcast, @device_b, @random="d5c9d8a11516", {0x1, 0x1}}, @a_msdu=[{@device_b, @device_b, 0x90, "6e13c0e6a2209ccc2b17ce020a2c464b8160ab0a1391e18698c4f7e570d6793cdce2eb71cced2e3dfb001cc5b97b488f8ae59a0c46d5fc9c27e2d51c254ac1cc25ebada6e748f625a75d7e95b0824c49cba4de75cd9134582b9dba8a78893150a9eb26d8cd79ad3139f559f3c53d1998462c94ebf38d198852674f341aadcaaf3991d6515bbc5c757598f3cdac24be04"}]}, 0xb8) openat$dir(0xffffffffffffff9c, &(0x7f0000001940)='./file0\x00', 0x26c82, 0x20) ioctl$SIOCX25SENDCALLACCPT(r7, 0x89e9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000001980)={{0x1, 0x1, 0x18, r7, {0x5}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r11, 0x84, 0x10, &(0x7f00000019c0)=@assoc_value={0x0, 0x8000}, &(0x7f0000001a00)=0x8) r12 = accept4$x25(0xffffffffffffffff, &(0x7f0000001a40), &(0x7f0000001a80)=0x12, 0x800) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000001bc0)={'veth1_macvtap\x00', &(0x7f0000001ac0)=@ethtool_drvinfo={0x3, "34aface15212391aba2774bf89c10ef9e4ac36d4e512620fd5afc09b374871f8", "ba344a84117117a34374da39b7543f9f19786a94948e31bd593bf1b3e947812b", "d408add3b85311c481f53b0973c9552240586fb9ca4c0656180c5c43945729b8", "143d2d46bc5fdaae3c3fb8f95c25849691a3eeeeaabcc81998b5d63c7fcb2483", "080665ef32b794ae900fc84c5ec5cbcf5f7ede0b740880603b3adfea490e12f4", "3fe20707be224d60bb4ccc2e", 0x3, 0x3e, 0x0, 0xa7a2, 0xffffffff}}) 10.514334274s ago: executing program 1 (id=1024): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) prlimit64(r1, 0xd, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000080)) 9.780354958s ago: executing program 0 (id=1026): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000440)) socket$inet6(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x7, 0x80000000}, {0x6, 0x0, 0x4}]}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0xe04, 0x2) 8.905750844s ago: executing program 2 (id=1027): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x86) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040)=0x2, 0x4) fchdir(r2) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x54dc, 0x1, 0x3}, 0x17, 0x0) landlock_restrict_self(r3, 0x6) landlock_restrict_self(r3, 0x2) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') 8.610557984s ago: executing program 3 (id=1028): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f016, 0x4}) 8.562524673s ago: executing program 1 (id=1029): r0 = socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x80002, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xe00, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 7.652807056s ago: executing program 3 (id=1030): unshare(0x2c020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x1, 0x81, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xff}, {0x10000, 0x5000, 0x3, 0xfc, 0x8, 0x0, 0x0, 0x64, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x4, 0x2}, {0xffff1000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x3, 0x7}, {0x6000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x26, 0xfd}, {0x4000, 0x1000, 0x0, 0x3, 0x9b, 0xfd, 0xfc, 0x4, 0x0, 0x5, 0xc0, 0x10}, {0x3000, 0x100000, 0x10, 0x0, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x6f, 0x1, 0xfd, 0x0, 0x9, 0x3, 0x5}, {0x2000, 0xb}, {}, 0xbdf9ffcf, 0x0, 0x2, 0x20, 0xe, 0x8000, 0x2000, [0xdd41, 0x0, 0x2, 0x8]}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0xf) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="120000007d0000000800000002"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r4, &(0x7f0000000380), 0x0}, 0x20) (fail_nth: 3) syz_io_uring_setup(0xf04, &(0x7f0000000180)={0x0, 0xd96d, 0x3f, 0xfffffffe, 0x24000, 0x0, 0x0}, 0x0, 0x0, &(0x7f0000000000)) 7.605780454s ago: executing program 0 (id=1032): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f0000000080)=""/108, 0x86, 0x0, 0x2, 0x2}}, 0x12) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x401}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x5}, &(0x7f0000000140)=0x8) 7.550142376s ago: executing program 2 (id=1033): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100100000040d9044aa000000000000109022d0001000080010904010002030002000921fd7f000122eb0009058103"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xc9) r3 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffff8}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.308770664s ago: executing program 1 (id=1034): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2, {0x3, 0x20000000000003, 0x0, 0x400000000000000, 0xfffffffd, 0x0, {0x1, 0x8, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x1, 0x7, 0xc000, 0x0, 0x0, 0x0, 0xfffffffb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') socket$can_bcm(0x1d, 0x2, 0x2) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 7.21910633s ago: executing program 0 (id=1035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000100)=0xffff0001, 0x4) r2 = getpid() r3 = epoll_create(0x7) r4 = epoll_create1(0x0) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000080)={0x1008}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r2, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000000)='net/ip_mr_vif\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x589d01, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224000100000000090400000103000000092100000001220800090581"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80800) unshare(0x2c020400) r9 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x2000, 0x0) msgrcv(r9, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) fsetxattr$security_capability(r7, &(0x7f0000000000), &(0x7f0000000080)=@v1={0x1000000, [{0x4}]}, 0xc, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000008400004803c0001800a0001006d617463680000002c0002800d000100636f6e6e6d61726b0000000010000300a62a1a4094b2c56d78942e9708000240000000010900020073797a32000000000900010073797a3000"], 0x94}}, 0x0) 7.033900689s ago: executing program 3 (id=1036): socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000"}) r4 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000dc0)=@newtaction={0x274, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfd, {}, [{0x260, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x204, 0x7, 0x10000000, 0x200000, 0x6}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x8c, 0xc, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0xe4e, 0x3, 0x4, 0x3}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0xc}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x100}]}, {0xf, 0x6, "1abf842170b99b2d385cd0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x164, 0x2, 0x0, 0x0, {{0x8}, {0xac, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x7b84, 0xffffffffffffffff, 0x0, 0x4000}, 0x1}}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x696}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xa}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0xc9}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xe, 0x100000, 0x4, 0x6, 0x3}}}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xd, 0x2, 0x1, 0x4}, 0x1}}]}, {0x92, 0x6, "0745eda98a44af97ae46a19127d038c5123f3cb17331ff9148552ed3e66c1ec3da02b7f8bf5c416577450e40e13f05636db4c6ad1b3b41745844ead184f6931b6094c2079d7cfc0e3261b4596fbfbc0d19da37719c7dae4fc8e453fa633c7fd941086e3a72eaace8b91ccace63675f74944e81a9c807e2e4fbfbfd06a5fa8083ba3da79908908e58145dc1ca9b47"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x7}}}}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x20048840}, 0x1004) 7.002285455s ago: executing program 1 (id=1037): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000440)={&(0x7f0000000180)={0xa, 0x4e1f, 0x80000, @dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@pktinfo={{0x20, 0x29, 0x32, {@empty}}}], 0x20}, 0x440e0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087900060000000000000109022400010000200209040000090300030009210b0010012229000905810303"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x22, 0x29, {[@main=@item_4={0x3, 0x0, 0x8, "5d2e6def"}, @local=@item_4={0x3, 0x2, 0x0, "f7455068"}, @main=@item_4={0x3, 0x0, 0x8, "672f3d98"}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_4={0x3, 0x0, 0xa, "675ca978"}, @local=@item_012={0x1, 0x2, 0x9, 'f'}, @local=@item_4={0x3, 0x2, 0x0, "4dfccb90"}, @main=@item_4={0x3, 0x0, 0x9, "d0f4391c"}, @local=@item_012={0x2, 0x2, 0x4, "441b"}, @main=@item_4={0x3, 0x0, 0x9, "38adf9e1"}]}}, 0x0}, 0x0) 5.787036056s ago: executing program 3 (id=1039): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000020000000000d5551474f5a800731e115d71daad4348eec5b86cb84e3921ee1882e51a0115f42f653b680f9dda296c4eb0682f5e7af9038c92a0c9ba61c25e6a5d12ee029d28cc1763657fb6b8439e5d6b48c1cb45290b00d510ca9939937f4edf319f79a62257f889eeefd4b3", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 5.609540502s ago: executing program 3 (id=1041): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "72ab"}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x50000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x9) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={@mcast1, @private2, @empty, 0x7, 0x4, 0x7, 0x400, 0xcaa3, 0x1040200}) ioprio_set$uid(0x3, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x38091}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x19}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64=r7], 0x18}}, 0x2080) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}}], 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000005c0)={[0x5, 0x7, 0x9, 0x4000000000000e52, 0x800000000001, 0x5459, 0x1041, 0x200200000006, 0x0, 0x400000001, 0x4, 0x100000000, 0x4, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000}) 4.645640545s ago: executing program 2 (id=1044): r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xe00, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 4.624960096s ago: executing program 4 (id=1045): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESOCT, @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) read$smackfs_access(r0, &(0x7f00000000c0), 0x14) 4.524602446s ago: executing program 4 (id=1046): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0xc, 0x7, 0x17, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x8, 0x4, 0x7}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r2 = syz_open_dev$usbfs(0x0, 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e001e007f000000980a00000800000045080000", @ANYRES32=r0, @ANYBLOB='\a\x00'/20, @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="0000000000000000040000000900"/28], 0x50) syz_open_dev$swradio(&(0x7f0000000540), 0x0, 0x2) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000001680)) eventfd2(0x1, 0x1) 4.411944705s ago: executing program 2 (id=1047): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2, {0x3, 0x20000000000003, 0x0, 0x400000000000000, 0xfffffffd, 0x0, {0x1, 0x8, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x1, 0x7, 0xc000, 0x0, 0x0, 0x0, 0xfffffffb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') socket$can_bcm(0x1d, 0x2, 0x2) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.321396859s ago: executing program 4 (id=1048): r0 = getpgrp(0xffffffffffffffff) ptrace$peekuser(0x3, r0, 0x1) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xf) r3 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000080), &(0x7f0000000100)=ANY=[@ANYBLOB="03024c"], 0xa, 0x1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x10010, r1, 0xc8cd000) r5 = gettid() r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fsca']) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) prlimit64(r5, 0xd, &(0x7f0000000000)={0x7e, 0x8b}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = open(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400103842, 0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800006, 0x12, r8, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x300, 0x0) rename(0x0, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r10, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x24}, 0x1, 0x620b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x2}}, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r11}, 0xc) 4.181382759s ago: executing program 4 (id=1049): socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000"}) r4 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000dc0)=@newtaction={0x274, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfd, {}, [{0x260, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x204, 0x7, 0x10000000, 0x200000, 0x6}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x8c, 0xc, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0xe4e, 0x3, 0x4, 0x3}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0xc}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x100}]}, {0xf, 0x6, "1abf842170b99b2d385cd0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x164, 0x2, 0x0, 0x0, {{0x8}, {0xac, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x7b84, 0xffffffffffffffff, 0x0, 0x4000}, 0x1}}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x696}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xa}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0xc9}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xe, 0x100000, 0x4, 0x6, 0x3}}}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xd, 0x2, 0x1, 0x4}, 0x1}}]}, {0x92, 0x6, "0745eda98a44af97ae46a19127d038c5123f3cb17331ff9148552ed3e66c1ec3da02b7f8bf5c416577450e40e13f05636db4c6ad1b3b41745844ead184f6931b6094c2079d7cfc0e3261b4596fbfbc0d19da37719c7dae4fc8e453fa633c7fd941086e3a72eaace8b91ccace63675f74944e81a9c807e2e4fbfbfd06a5fa8083ba3da79908908e58145dc1ca9b47"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x7}}}}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x20048840}, 0x1004) 3.851692182s ago: executing program 1 (id=1050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0xa00, {0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) 3.021219318s ago: executing program 4 (id=1051): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x98, 0xd, 0x4, 0x1}]}) capset(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000040)={0x2, 0x1, 0x8000, 0x8, 0x401, 0x86ac}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0xffeb3000, 0x7, 0x0, 0x7, 0x0, [{0x7, 0x1, 0x7, '\x00', 0xe}, {0x9, 0x2, 0xa, '\x00', 0xff}, {0x6, 0x52, 0x3, '\x00', 0x2}, {0x70, 0x9, 0xb7, '\x00', 0x98}, {0x0, 0x3, 0x2, '\x00', 0x7}, {0x8, 0x5, 0x7, '\x00', 0x5}, {0x3, 0x6, 0x1, '\x00', 0xa}, {0xf0, 0x3c, 0x2, '\x00', 0xd}, {0x7, 0x2, 0x4, '\x00', 0x60}, {0x6, 0xbb, 0xd1, '\x00', 0x5}, {0x2, 0xd, 0xf8, '\x00', 0x40}, {0x5, 0xf, 0x9}, {0x78, 0x9, 0x2, '\x00', 0xb}, {0x9, 0xc3, 0x2, '\x00', 0x5}, {0xb, 0x2, 0x2, '\x00', 0xf7}, {0x7, 0x2, 0x2, '\x00', 0x1}, {0x7f, 0x0, 0x5, '\x00', 0x1e}, {0x2, 0xff, 0x1, '\x00', 0xb}, {0x8, 0x10, 0x5, '\x00', 0x66}, {0x9, 0x0, 0x2, '\x00', 0x9}, {0x2, 0x9, 0x4, '\x00', 0x8}, {0x4, 0x1, 0xc6, '\x00', 0x6}, {0x5, 0x6, 0x2, '\x00', 0xae}, {0xa, 0x9, 0x1, '\x00', 0x7}]}}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfc, 0xe1, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x0, 0xc, 0x0, 0x0, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x100000021, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8004], 0x1, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 2.925585655s ago: executing program 0 (id=1052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x58}, 0x1, 0x0, 0x0, 0x40890}, 0x4080) 2.89860777s ago: executing program 2 (id=1053): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001a400)=""/102384, 0x18ff0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r7, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x9, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x7, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={r2, 0x8}, &(0x7f0000000140)=0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)='>', 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0xb, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 2.871331884s ago: executing program 1 (id=1054): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000940), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x2, @name="b9895d2411af8e24007f93a3972c19dab39ea781bc84b563f3aa8a4545fbfedc"}) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @empty, 'pim6reg\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) sendmsg$sock(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24004000) r3 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) 2.589550625s ago: executing program 0 (id=1055): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioprio_set$uid(0x3, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xff, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r2, 0x0, r1, 0x0, 0x7fffe000, 0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) unshare(0x20400) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x2, 0x0) read$msr(r5, &(0x7f0000000500)=""/185, 0xb9) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x18, 0x52, 0x1, 0x3, 0x0, {0x1c}, [@typed={0x4, 0x1}]}, 0x18}}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r3, r0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r9, 0xc08c5336, &(0x7f0000000400)={0x200, 0x7, 0x1, 'queue1\x00', 0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0xb, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x400c6314, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) signalfd4(r0, &(0x7f0000000180)={[0x8]}, 0x8, 0x80000) 253.418311ms ago: executing program 2 (id=1056): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000002a00)={@default, @null, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x48212b8952c3aff5, 0x70bd25, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="800000001000390400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0dfdffff03010200600012800b00010062726964676500005000028008001b00d7ab000008001b00080000000c002300010000000100000008001c00b00000000c002e000000000000000000060006"], 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) 200.13287ms ago: executing program 3 (id=1057): r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xe00, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 0s ago: executing program 4 (id=1058): unshare(0x2c020400) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x1, 0x19e000}) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r1, 0x0, 0x0, 0x5f8, 0x0) mq_timedsend(r1, 0x0, 0x0, 0xa, 0x0) kernel console output (not intermixed with test programs): ][ T5976] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 303.483630][ T5976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.483645][ T5976] usb 5-1: Product: syz [ 303.483655][ T5976] usb 5-1: Manufacturer: syz [ 303.483666][ T5976] usb 5-1: SerialNumber: syz [ 303.708058][ T7954] netlink: 'syz.3.611': attribute type 4 has an invalid length. [ 303.791025][ T5976] usb 5-1: 0:2 : does not exist [ 303.817253][ T5976] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 304.096800][ T5976] usb 5-1: USB disconnect, device number 17 [ 304.223877][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.553664][ T7972] ALSA: mixer_oss: invalid OSS volume '' [ 305.391586][ T7978] binder: 7977:7978 ioctl 9205 0 returned -22 [ 305.613660][ T7988] FAULT_INJECTION: forcing a failure. [ 305.613660][ T7988] name failslab, interval 1, probability 0, space 0, times 0 [ 305.613700][ T7988] CPU: 0 UID: 0 PID: 7988 Comm: syz.1.620 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 305.613731][ T7988] Tainted: [L]=SOFTLOCKUP [ 305.613738][ T7988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 305.613762][ T7988] Call Trace: [ 305.613771][ T7988] [ 305.613781][ T7988] dump_stack_lvl+0xe8/0x150 [ 305.613821][ T7988] should_fail_ex+0x46b/0x600 [ 305.613859][ T7988] should_failslab+0xa8/0x100 [ 305.613884][ T7988] __kvmalloc_node_noprof+0x170/0x8e0 [ 305.613911][ T7988] ? __kvm_mmu_topup_memory_cache+0x463/0x610 [ 305.613955][ T7988] __kvm_mmu_topup_memory_cache+0x463/0x610 [ 305.614004][ T7988] mmu_topup_memory_caches+0x21/0x170 [ 305.614030][ T7988] kvm_mmu_load+0x9d/0x2320 [ 305.614051][ T7988] ? kvm_msr_allowed+0x3f4/0x490 [ 305.614074][ T7988] ? kvm_msr_allowed+0x9a/0x490 [ 305.614104][ T7988] ? vmx_recalc_intercepts+0xed5/0x1b40 [ 305.614131][ T7988] ? kvm_apic_has_interrupt+0x73c/0x770 [ 305.614171][ T7988] vcpu_run+0x5faf/0x7b90 [ 305.614200][ T7988] ? trace_ipi_send_cpu+0x7e/0x220 [ 305.614321][ T7988] ? __pfx_vcpu_run+0x10/0x10 [ 305.614373][ T7988] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 305.614403][ T7988] ? __lock_acquire+0x6b5/0x2cf0 [ 305.614439][ T7988] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 305.614469][ T7988] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 305.614503][ T7988] ? do_raw_spin_lock+0x12b/0x2f0 [ 305.614548][ T7988] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 305.614574][ T7988] ? lockdep_hardirqs_on+0x7a/0x110 [ 305.614602][ T7988] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 305.614628][ T7988] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 305.614668][ T7988] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 305.614704][ T7988] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 305.614731][ T7988] ? lockdep_hardirqs_on+0x7a/0x110 [ 305.614756][ T7988] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 305.614783][ T7988] ? rt_write_unlock+0x190/0x230 [ 305.614807][ T7988] kvm_vcpu_ioctl+0xa65/0xfe0 [ 305.614839][ T7988] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 305.614867][ T7988] ? __asan_memset+0x22/0x50 [ 305.614898][ T7988] ? smack_file_ioctl+0x331/0x360 [ 305.614937][ T7988] ? __pfx_smack_file_ioctl+0x10/0x10 [ 305.614989][ T7988] ? __fget_files+0x2a/0x420 [ 305.615018][ T7988] ? __fget_files+0x3a6/0x420 [ 305.615046][ T7988] ? __fget_files+0x2a/0x420 [ 305.615079][ T7988] ? bpf_lsm_file_ioctl+0x9/0x20 [ 305.615103][ T7988] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 305.615128][ T7988] __se_sys_ioctl+0xff/0x170 [ 305.615154][ T7988] do_syscall_64+0x14d/0xf80 [ 305.615179][ T7988] ? trace_irq_disable+0x3b/0x150 [ 305.615206][ T7988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.615228][ T7988] ? clear_bhb_loop+0x40/0x90 [ 305.615263][ T7988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.615285][ T7988] RIP: 0033:0x7f86c065c819 [ 305.615306][ T7988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.615324][ T7988] RSP: 002b:00007f86be895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.615348][ T7988] RAX: ffffffffffffffda RBX: 00007f86c08d6090 RCX: 00007f86c065c819 [ 305.615364][ T7988] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 305.615377][ T7988] RBP: 00007f86be895090 R08: 0000000000000000 R09: 0000000000000000 [ 305.615390][ T7988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.615403][ T7988] R13: 00007f86c08d6128 R14: 00007f86c08d6090 R15: 00007fff04563978 [ 305.615438][ T7988] [ 305.738685][ T7008] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 305.908726][ T7008] usb 3-1: device descriptor read/64, error -71 [ 306.148802][ T7008] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 306.252412][ T7995] usb usb7: usbfs: process 7995 (syz.0.626) did not claim interface 0 before use [ 306.309715][ T7008] usb 3-1: device descriptor read/64, error -71 [ 306.419188][ T7008] usb usb3-port1: attempt power cycle [ 306.818826][ T7008] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 306.839512][ T7008] usb 3-1: device descriptor read/8, error -71 [ 306.869789][ T7998] netlink: 'syz.4.627': attribute type 4 has an invalid length. [ 306.983574][ T5976] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 307.088722][ T7008] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 307.109622][ T7008] usb 3-1: device descriptor read/8, error -71 [ 307.148761][ T5976] usb 2-1: Using ep0 maxpacket: 32 [ 307.150924][ T5976] usb 2-1: unable to get BOS descriptor or descriptor too short [ 307.152471][ T5976] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 307.152514][ T5976] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 17, changing to 8 [ 307.152533][ T5976] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 307.155668][ T5976] usb 2-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 307.155689][ T5976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.155704][ T5976] usb 2-1: Product: syz [ 307.155714][ T5976] usb 2-1: Manufacturer: syz [ 307.155724][ T5976] usb 2-1: SerialNumber: syz [ 307.247469][ T7008] usb usb3-port1: unable to enumerate USB device [ 307.500274][ T5976] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 307.500342][ T5976] usb 2-1: MIDIStreaming interface descriptor not found [ 307.730783][ T5976] usb 2-1: USB disconnect, device number 22 [ 307.830423][ T5799] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 307.962972][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.313096][ T8024] netlink: 36 bytes leftover after parsing attributes in process `syz.0.636'. [ 308.313142][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'. [ 308.358769][ T5976] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 308.401987][ T8026] FAULT_INJECTION: forcing a failure. [ 308.401987][ T8026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.402027][ T8026] CPU: 0 UID: 0 PID: 8026 Comm: syz.0.638 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 308.402060][ T8026] Tainted: [L]=SOFTLOCKUP [ 308.402069][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 308.402082][ T8026] Call Trace: [ 308.402091][ T8026] [ 308.402100][ T8026] dump_stack_lvl+0xe8/0x150 [ 308.402137][ T8026] should_fail_ex+0x46b/0x600 [ 308.402174][ T8026] _copy_from_user+0x2d/0xb0 [ 308.402197][ T8026] kstrtouint_from_user+0xd6/0x180 [ 308.402232][ T8026] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 308.402269][ T8026] ? __lock_acquire+0x6b5/0x2cf0 [ 308.402301][ T8026] proc_fail_nth_write+0x8e/0x210 [ 308.402337][ T8026] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 308.402372][ T8026] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 308.402403][ T8026] vfs_write+0x2a3/0xba0 [ 308.402448][ T8026] ? __pfx_vfs_write+0x10/0x10 [ 308.402484][ T8026] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 308.402511][ T8026] ? lockdep_hardirqs_on+0x7a/0x110 [ 308.402537][ T8026] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 308.402564][ T8026] ? mutex_lock_nested+0x152/0x1d0 [ 308.402595][ T8026] ? fdget_pos+0x252/0x320 [ 308.402635][ T8026] ksys_write+0x156/0x270 [ 308.402671][ T8026] ? __pfx_ksys_write+0x10/0x10 [ 308.402718][ T8026] do_syscall_64+0x14d/0xf80 [ 308.402742][ T8026] ? trace_irq_disable+0x3b/0x150 [ 308.402769][ T8026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.402797][ T8026] ? clear_bhb_loop+0x40/0x90 [ 308.402826][ T8026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.402849][ T8026] RIP: 0033:0x7fd4f4aed04e [ 308.402869][ T8026] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 308.402889][ T8026] RSP: 002b:00007fd4f2d7dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 308.402913][ T8026] RAX: ffffffffffffffda RBX: 00007fd4f2d7e6c0 RCX: 00007fd4f4aed04e [ 308.402929][ T8026] RDX: 0000000000000001 RSI: 00007fd4f2d7e0a0 RDI: 0000000000000003 [ 308.402943][ T8026] RBP: 00007fd4f2d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 308.402956][ T8026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.402968][ T8026] R13: 00007fd4f4da6038 R14: 00007fd4f4da5fa0 R15: 00007ffe8a7cb728 [ 308.403004][ T8026] [ 308.505141][ T5976] usb 2-1: device descriptor read/64, error -71 [ 308.769103][ T5976] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 308.847118][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'. [ 308.883846][ T8034] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 308.898695][ T5976] usb 2-1: device descriptor read/64, error -71 [ 308.923872][ T8032] netlink: 'syz.0.640': attribute type 10 has an invalid length. [ 308.938908][ T8032] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.942708][ T8032] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.948146][ T8032] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.948259][ T8032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.952595][ T8032] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.952714][ T8032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.956351][ T8032] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 309.013730][ T5976] usb usb2-port1: attempt power cycle [ 309.399400][ T5976] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 309.420298][ T5976] usb 2-1: device descriptor read/8, error -71 [ 312.878838][ T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 313.028939][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 313.038327][ T8035] netlink: 'syz.4.641': attribute type 4 has an invalid length. [ 313.120422][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.120459][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.120501][ T31] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 313.120525][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.182768][ T31] usb 1-1: config 0 descriptor?? [ 313.544413][ T8055] netlink: 372 bytes leftover after parsing attributes in process `syz.1.647'. [ 313.545444][ T8055] FAULT_INJECTION: forcing a failure. [ 313.545444][ T8055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.545479][ T8055] CPU: 0 UID: 0 PID: 8055 Comm: syz.1.647 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 313.545509][ T8055] Tainted: [L]=SOFTLOCKUP [ 313.545517][ T8055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 313.545540][ T8055] Call Trace: [ 313.545549][ T8055] [ 313.545558][ T8055] dump_stack_lvl+0xe8/0x150 [ 313.545595][ T8055] should_fail_ex+0x46b/0x600 [ 313.545631][ T8055] _copy_to_user+0x31/0xb0 [ 313.545655][ T8055] simple_read_from_buffer+0xe1/0x170 [ 313.545690][ T8055] proc_fail_nth_read+0x1be/0x230 [ 313.545724][ T8055] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 313.545756][ T8055] ? rw_verify_area+0x2ac/0x4e0 [ 313.545788][ T8055] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 313.545820][ T8055] vfs_read+0x212/0xa80 [ 313.545875][ T8055] ? __pfx_vfs_read+0x10/0x10 [ 313.545912][ T8055] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 313.545940][ T8055] ? lockdep_hardirqs_on+0x7a/0x110 [ 313.545964][ T8055] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 313.545994][ T8055] ? mutex_lock_nested+0x152/0x1d0 [ 313.546017][ T8055] ? fdget_pos+0x252/0x320 [ 313.546069][ T8055] ksys_read+0x156/0x270 [ 313.546107][ T8055] ? __pfx_ksys_read+0x10/0x10 [ 313.546150][ T8055] do_syscall_64+0x14d/0xf80 [ 313.546177][ T8055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.546194][ T8055] ? clear_bhb_loop+0x40/0x90 [ 313.546232][ T8055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.546255][ T8055] RIP: 0033:0x7f86c061d04e [ 313.546276][ T8055] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 313.546296][ T8055] RSP: 002b:00007f86be8b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 313.546317][ T8055] RAX: ffffffffffffffda RBX: 00007f86be8b66c0 RCX: 00007f86c061d04e [ 313.546338][ T8055] RDX: 000000000000000f RSI: 00007f86be8b60a0 RDI: 0000000000000005 [ 313.546348][ T8055] RBP: 00007f86be8b6090 R08: 0000000000000000 R09: 0000000000000000 [ 313.546358][ T8055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.546367][ T8055] R13: 00007f86c08d6038 R14: 00007f86c08d5fa0 R15: 00007fff04563978 [ 313.546411][ T8055] [ 313.896190][ T8060] 9pnet_fd: Insufficient options for proto=fd [ 313.953304][ T31] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 313.953344][ T31] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 313.953372][ T31] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 313.953400][ T31] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 313.953427][ T31] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 313.955033][ T31] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 314.068680][ T5976] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 314.196789][ T31] usb 1-1: USB disconnect, device number 15 [ 314.268758][ T5976] usb 3-1: Using ep0 maxpacket: 8 [ 314.273072][ T5976] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.273102][ T5976] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 314.276213][ T5976] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 314.276243][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.276265][ T5976] usb 3-1: Product: syz [ 314.276281][ T5976] usb 3-1: Manufacturer: syz [ 314.276296][ T5976] usb 3-1: SerialNumber: syz [ 314.630695][ T5976] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 314.834646][ T5976] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 314.874005][ T5976] usb 3-1: USB disconnect, device number 28 [ 314.969597][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.202485][ T8070] netlink: 60 bytes leftover after parsing attributes in process `syz.3.653'. [ 315.239313][ T5877] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 315.398705][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 315.401183][ T5877] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.401219][ T5877] usb 2-1: config 1 interface 0 has no altsetting 0 [ 315.404310][ T5877] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.40 [ 315.404340][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.404362][ T5877] usb 2-1: Product: syz [ 315.404377][ T5877] usb 2-1: Manufacturer: syz [ 315.404392][ T5877] usb 2-1: SerialNumber: syz [ 315.531436][ T8081] netlink: 'syz.0.656': attribute type 4 has an invalid length. [ 317.516505][ T5877] usbhid 2-1:1.0: can't add hid device: -71 [ 317.516639][ T5877] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 317.560215][ T5877] usb 2-1: USB disconnect, device number 27 [ 318.041121][ T8099] 9pnet_fd: Insufficient options for proto=fd [ 319.258729][ T5885] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 319.443680][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 319.443714][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.443742][ T5885] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 319.443759][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.496756][ T5885] usb 5-1: config 0 descriptor?? [ 319.860517][ T8122] netlink: 'syz.1.668': attribute type 4 has an invalid length. [ 319.931694][ T8109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.937281][ T8109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.964540][ T5885] usbhid 5-1:0.0: can't add hid device: -71 [ 319.964662][ T5885] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 319.982948][ T5885] usb 5-1: USB disconnect, device number 18 [ 320.118084][ T8126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.669'. [ 320.196992][ T8126] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 320.231068][ T8126] bond2 (unregistering): Released all slaves [ 320.401519][ T8132] FAULT_INJECTION: forcing a failure. [ 320.401519][ T8132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.401559][ T8132] CPU: 0 UID: 0 PID: 8132 Comm: syz.2.670 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 320.401589][ T8132] Tainted: [L]=SOFTLOCKUP [ 320.401596][ T8132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 320.401610][ T8132] Call Trace: [ 320.401618][ T8132] [ 320.401628][ T8132] dump_stack_lvl+0xe8/0x150 [ 320.401666][ T8132] should_fail_ex+0x46b/0x600 [ 320.401702][ T8132] _copy_to_user+0x31/0xb0 [ 320.401728][ T8132] io_query+0x2eb/0x680 [ 320.401756][ T8132] ? __pfx_io_query+0x10/0x10 [ 320.401790][ T8132] ? lockdep_hardirqs_on+0x7a/0x110 [ 320.401819][ T8132] ? rt_mutex_slowunlock+0x1cb/0x300 [ 320.401856][ T8132] __se_sys_io_uring_register+0x52e/0x1910 [ 320.401899][ T8132] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 320.401935][ T8132] ? ksys_write+0x248/0x270 [ 320.401970][ T8132] ? __pfx_ksys_write+0x10/0x10 [ 320.402018][ T8132] do_syscall_64+0x14d/0xf80 [ 320.402042][ T8132] ? trace_irq_disable+0x3b/0x150 [ 320.402069][ T8132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.402092][ T8132] ? clear_bhb_loop+0x40/0x90 [ 320.402119][ T8132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.402153][ T8132] RIP: 0033:0x7f43a7f4c819 [ 320.402172][ T8132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.402191][ T8132] RSP: 002b:00007f43a61a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 320.402215][ T8132] RAX: ffffffffffffffda RBX: 00007f43a81c5fa0 RCX: 00007f43a7f4c819 [ 320.402231][ T8132] RDX: 0000200000000000 RSI: 0000000000000023 RDI: ffffffffffffffff [ 320.402246][ T8132] RBP: 00007f43a61a6090 R08: 0000000000000000 R09: 0000000000000000 [ 320.402259][ T8132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.402272][ T8132] R13: 00007f43a81c6038 R14: 00007f43a81c5fa0 R15: 00007ffdeb6bf778 [ 320.402306][ T8132] [ 320.918634][ T7008] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 320.927348][ T8142] FAULT_INJECTION: forcing a failure. [ 320.927348][ T8142] name failslab, interval 1, probability 0, space 0, times 0 [ 320.927389][ T8142] CPU: 0 UID: 0 PID: 8142 Comm: syz.3.676 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 320.927420][ T8142] Tainted: [L]=SOFTLOCKUP [ 320.927428][ T8142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 320.927441][ T8142] Call Trace: [ 320.927449][ T8142] [ 320.927458][ T8142] dump_stack_lvl+0xe8/0x150 [ 320.927496][ T8142] should_fail_ex+0x46b/0x600 [ 320.927532][ T8142] should_failslab+0xa8/0x100 [ 320.927558][ T8142] __kvmalloc_node_noprof+0x170/0x8e0 [ 320.927585][ T8142] ? seq_read_iter+0x203/0xe20 [ 320.927608][ T8142] ? mutex_lock_nested+0x152/0x1d0 [ 320.927639][ T8142] ? seq_read_iter+0xb8/0xe20 [ 320.927666][ T8142] seq_read_iter+0x203/0xe20 [ 320.927689][ T8142] ? set_page_refcounted+0x76/0x160 [ 320.927722][ T8142] ? __asan_memset+0x22/0x50 [ 320.927759][ T8142] copy_splice_read+0x605/0xab0 [ 320.927802][ T8142] ? __pfx_copy_splice_read+0x10/0x10 [ 320.927839][ T8142] ? rcu_is_watching+0x15/0xb0 [ 320.927867][ T8142] ? look_up_lock_class+0x57/0x110 [ 320.927893][ T8142] ? register_lock_class+0x31/0x2e0 [ 320.927925][ T8142] ? alloc_pipe_info+0x373/0x4d0 [ 320.927949][ T8142] ? __pfx_copy_splice_read+0x10/0x10 [ 320.927977][ T8142] splice_direct_to_actor+0x483/0xc80 [ 320.928018][ T8142] ? __pfx_direct_splice_actor+0x10/0x10 [ 320.928058][ T8142] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 320.928101][ T8142] do_splice_direct+0x19b/0x2a0 [ 320.928133][ T8142] ? __pfx_do_splice_direct+0x10/0x10 [ 320.928164][ T8142] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 320.928202][ T8142] ? rw_verify_area+0x25b/0x4e0 [ 320.928241][ T8142] do_sendfile+0x547/0x7e0 [ 320.928268][ T8142] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 320.928302][ T8142] ? __pfx_do_sendfile+0x10/0x10 [ 320.928344][ T8142] __se_sys_sendfile64+0x144/0x1a0 [ 320.928373][ T8142] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 320.928412][ T8142] do_syscall_64+0x14d/0xf80 [ 320.928437][ T8142] ? trace_irq_disable+0x3b/0x150 [ 320.928464][ T8142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.928488][ T8142] ? clear_bhb_loop+0x40/0x90 [ 320.928518][ T8142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.928540][ T8142] RIP: 0033:0x7ff6df49c819 [ 320.928560][ T8142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.928578][ T8142] RSP: 002b:00007ff6dd6f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 320.928599][ T8142] RAX: ffffffffffffffda RBX: 00007ff6df715fa0 RCX: 00007ff6df49c819 [ 320.928615][ T8142] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 320.928628][ T8142] RBP: 00007ff6dd6f6090 R08: 0000000000000000 R09: 0000000000000000 [ 320.928641][ T8142] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 320.928653][ T8142] R13: 00007ff6df716038 R14: 00007ff6df715fa0 R15: 00007ffd0da68e18 [ 320.928687][ T8142] [ 320.938821][ T31] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 321.194656][ T31] usb 3-1: device descriptor read/64, error -71 [ 321.265501][ T7008] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.265538][ T7008] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.265562][ T7008] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 321.265608][ T7008] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 321.265632][ T7008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.330451][ T7008] usb 2-1: config 0 descriptor?? [ 321.400569][ T8144] 9pnet_fd: Insufficient options for proto=fd [ 321.448668][ T31] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 321.581750][ T31] usb 3-1: device descriptor read/64, error -71 [ 321.604901][ T8150] netlink: 72 bytes leftover after parsing attributes in process `syz.0.679'. [ 321.689507][ T31] usb usb3-port1: attempt power cycle [ 322.762752][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.762825][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.827329][ T7008] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 322.938105][ T31] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 323.044994][ T31] usb 3-1: device descriptor read/8, error -71 [ 323.275950][ T5976] usb 2-1: USB disconnect, device number 28 [ 323.279360][ T31] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 323.403420][ T31] usb 3-1: device descriptor read/8, error -71 [ 323.515118][ T31] usb usb3-port1: unable to enumerate USB device [ 323.749539][ T8164] netlink: 'syz.3.681': attribute type 4 has an invalid length. [ 324.355696][ T8186] netlink: 72 bytes leftover after parsing attributes in process `syz.1.690'. [ 324.432151][ T7008] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 324.432167][ T5877] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 324.500574][ T8188] 9pnet_fd: Insufficient options for proto=fd [ 324.579553][ T7008] usb 1-1: Using ep0 maxpacket: 16 [ 324.582632][ T7008] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 324.582664][ T7008] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.631101][ T5877] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.631159][ T5877] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 324.631183][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.637179][ T5877] usb 3-1: config 0 descriptor?? [ 324.675832][ T7008] usb 1-1: config 0 descriptor?? [ 324.691807][ T7008] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 324.730527][ T5877] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 324.849556][ T8179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.851542][ T8179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.968433][ T8210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.970574][ T8210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.163930][ T7008] gspca_sonixj: reg_w1 err -110 [ 327.186319][ T7008] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 327.275166][ T6072] usb 3-1: USB disconnect, device number 33 [ 328.555328][ T5877] usb 1-1: USB disconnect, device number 16 [ 328.777263][ T8225] Bluetooth: MGMT ver 1.23 [ 328.862866][ T8229] netlink: 72 bytes leftover after parsing attributes in process `syz.1.701'. [ 328.915778][ T5885] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 329.021488][ T8232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.058685][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 329.061077][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 329.061113][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 329.063884][ T5885] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 329.063914][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.063936][ T5885] usb 4-1: Product: syz [ 329.063947][ T5885] usb 4-1: Manufacturer: syz [ 329.063957][ T5885] usb 4-1: SerialNumber: syz [ 329.077440][ T5885] usb 4-1: config 0 descriptor?? [ 329.173016][ T5885] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 329.173056][ T5885] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 329.296074][ T8237] FAULT_INJECTION: forcing a failure. [ 329.296074][ T8237] name failslab, interval 1, probability 0, space 0, times 0 [ 329.296120][ T8237] CPU: 1 UID: 0 PID: 8237 Comm: syz.1.704 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 329.296149][ T8237] Tainted: [L]=SOFTLOCKUP [ 329.296157][ T8237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 329.296171][ T8237] Call Trace: [ 329.296180][ T8237] [ 329.296190][ T8237] dump_stack_lvl+0xe8/0x150 [ 329.296229][ T8237] should_fail_ex+0x46b/0x600 [ 329.296265][ T8237] should_failslab+0xa8/0x100 [ 329.296291][ T8237] __kmalloc_node_noprof+0xe7/0x7f0 [ 329.296314][ T8237] ? __vmalloc_node_range_noprof+0x5d5/0x1730 [ 329.296355][ T8237] __vmalloc_node_range_noprof+0x5d5/0x1730 [ 329.296406][ T8237] ? __lock_acquire+0x6b5/0x2cf0 [ 329.296444][ T8237] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 329.296478][ T8237] ? arch_stack_walk+0xfb/0x150 [ 329.296514][ T8237] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 329.296545][ T8237] __vmalloc_noprof+0xd2/0x120 [ 329.296576][ T8237] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 329.296608][ T8237] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 329.296644][ T8237] bpf_prog_alloc+0x3c/0x1a0 [ 329.296677][ T8237] bpf_prog_load+0x7ba/0x1ae0 [ 329.296724][ T8237] ? __pfx_bpf_prog_load+0x10/0x10 [ 329.296777][ T8237] ? bpf_lsm_bpf+0x9/0x20 [ 329.296799][ T8237] ? security_bpf+0x7e/0x2d0 [ 329.296830][ T8237] __sys_bpf+0x618/0x950 [ 329.296861][ T8237] ? __pfx___sys_bpf+0x10/0x10 [ 329.296885][ T8237] ? rt_mutex_slowunlock+0x1cb/0x300 [ 329.296936][ T8237] ? ksys_write+0x248/0x270 [ 329.296972][ T8237] ? __pfx_ksys_write+0x10/0x10 [ 329.297014][ T8237] __x64_sys_bpf+0x7c/0x90 [ 329.297041][ T8237] do_syscall_64+0x14d/0xf80 [ 329.297065][ T8237] ? trace_irq_disable+0x3b/0x150 [ 329.297103][ T8237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.297127][ T8237] ? clear_bhb_loop+0x40/0x90 [ 329.297155][ T8237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.297178][ T8237] RIP: 0033:0x7f86c065c819 [ 329.297199][ T8237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.297219][ T8237] RSP: 002b:00007f86be8b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 329.297242][ T8237] RAX: ffffffffffffffda RBX: 00007f86c08d5fa0 RCX: 00007f86c065c819 [ 329.297258][ T8237] RDX: 0000000000000071 RSI: 00002000000002c0 RDI: 0000000000000005 [ 329.297272][ T8237] RBP: 00007f86be8b6090 R08: 0000000000000000 R09: 0000000000000000 [ 329.297286][ T8237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.297300][ T8237] R13: 00007f86c08d6038 R14: 00007f86c08d5fa0 R15: 00007fff04563978 [ 329.297333][ T8237] [ 329.297481][ T8237] syz.1.704: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 329.297569][ T8237] CPU: 1 UID: 0 PID: 8237 Comm: syz.1.704 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 329.297599][ T8237] Tainted: [L]=SOFTLOCKUP [ 329.297607][ T8237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 329.297620][ T8237] Call Trace: [ 329.297629][ T8237] [ 329.297638][ T8237] dump_stack_lvl+0xe8/0x150 [ 329.297674][ T8237] warn_alloc+0x263/0x3e0 [ 329.297708][ T8237] ? __pfx_warn_alloc+0x10/0x10 [ 329.297740][ T8237] ? __kmalloc_node_noprof+0x395/0x7f0 [ 329.297763][ T8237] ? __vmalloc_node_range_noprof+0x5d5/0x1730 [ 329.297805][ T8237] __vmalloc_node_range_noprof+0x98f/0x1730 [ 329.297856][ T8237] ? __lock_acquire+0x6b5/0x2cf0 [ 329.297892][ T8237] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 329.297928][ T8237] ? arch_stack_walk+0xfb/0x150 [ 329.297963][ T8237] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 329.297992][ T8237] __vmalloc_noprof+0xd2/0x120 [ 329.298027][ T8237] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 329.298061][ T8237] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 329.298116][ T8237] bpf_prog_alloc+0x3c/0x1a0 [ 329.298150][ T8237] bpf_prog_load+0x7ba/0x1ae0 [ 329.298196][ T8237] ? __pfx_bpf_prog_load+0x10/0x10 [ 329.298251][ T8237] ? bpf_lsm_bpf+0x9/0x20 [ 329.298274][ T8237] ? security_bpf+0x7e/0x2d0 [ 329.298302][ T8237] __sys_bpf+0x618/0x950 [ 329.298332][ T8237] ? __pfx___sys_bpf+0x10/0x10 [ 329.298358][ T8237] ? rt_mutex_slowunlock+0x1cb/0x300 [ 329.298411][ T8237] ? ksys_write+0x248/0x270 [ 329.298449][ T8237] ? __pfx_ksys_write+0x10/0x10 [ 329.298495][ T8237] __x64_sys_bpf+0x7c/0x90 [ 329.298521][ T8237] do_syscall_64+0x14d/0xf80 [ 329.298545][ T8237] ? trace_irq_disable+0x3b/0x150 [ 329.298571][ T8237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.298594][ T8237] ? clear_bhb_loop+0x40/0x90 [ 329.298622][ T8237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.298645][ T8237] RIP: 0033:0x7f86c065c819 [ 329.298664][ T8237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.298683][ T8237] RSP: 002b:00007f86be8b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 329.298704][ T8237] RAX: ffffffffffffffda RBX: 00007f86c08d5fa0 RCX: 00007f86c065c819 [ 329.298721][ T8237] RDX: 0000000000000071 RSI: 00002000000002c0 RDI: 0000000000000005 [ 329.298734][ T8237] RBP: 00007f86be8b6090 R08: 0000000000000000 R09: 0000000000000000 [ 329.298749][ T8237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.298762][ T8237] R13: 00007f86c08d6038 R14: 00007f86c08d5fa0 R15: 00007fff04563978 [ 329.298796][ T8237] [ 329.319399][ T8237] Mem-Info: [ 329.319807][ T8237] active_anon:259 inactive_anon:9427 isolated_anon:0 [ 329.319807][ T8237] active_file:19695 inactive_file:39456 isolated_file:0 [ 329.319807][ T8237] unevictable:768 dirty:104 writeback:0 [ 329.319807][ T8237] slab_reclaimable:12108 slab_unreclaimable:103341 [ 329.319807][ T8237] mapped:33620 shmem:4215 pagetables:1374 [ 329.319807][ T8237] sec_pagetables:0 bounce:0 [ 329.319807][ T8237] kernel_misc_reclaimable:0 [ 329.319807][ T8237] free:1305406 free_pcp:6162 free_cma:0 [ 329.320170][ T8237] Node 0 active_anon:1036kB inactive_anon:37708kB active_file:78580kB inactive_file:157824kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134480kB dirty:412kB writeback:0kB shmem:15324kB kernel_stack:13652kB pagetables:5360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 329.320563][ T8237] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 329.321077][ T8237] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 329.321405][ T8237] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 329.322538][ T8237] Node 0 DMA32 free:1261548kB boost:0kB min:3932kB low:6468kB high:9004kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1036kB inactive_anon:37708kB active_file:78580kB inactive_file:157824kB unevictable:1536kB writepending:400kB zspages:0kB present:3129332kB managed:2566408kB mlocked:0kB bounce:0kB free_pcp:24648kB local_pcp:23020kB free_cma:0kB [ 329.323699][ T8237] lowmem_reserve[]: 0 0 0 0 0 [ 329.327755][ T8237] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:412kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 329.331685][ T8237] lowmem_reserve[]: 0 0 0 0 0 [ 329.336678][ T8237] Node 1 Normal free:3944716kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 329.342004][ T8237] lowmem_reserve[]: 0 0 0 0 0 [ 329.369142][ T8237] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 329.385208][ T8237] Node 0 DMA32: 2145*4kB (UME) 2069*8kB (UME) 1226*16kB (UME) 441*32kB (UME) 329*64kB (UME) 338*128kB (UME) 261*256kB (UM) 161*512kB (UME) 94*1024kB (UM) 22*2048kB (UME) 207*4096kB (UM) = 1261612kB [ 329.416534][ T8237] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 329.416707][ T8237] Node 1 Normal: 1*4kB (U) 1*8kB (M) 4*16kB (UM) 8*32kB (UM) 5*64kB (UM) 1*128kB (M) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 961*4096kB (M) = 3944716kB [ 329.416999][ T8237] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 329.417017][ T8237] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 329.417035][ T8237] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 329.417052][ T8237] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 329.417068][ T8237] 63376 total pagecache pages [ 329.417077][ T8237] 1 pages in swap cache [ 329.417084][ T8237] Free swap = 124992kB [ 329.417145][ T8237] Total swap = 124996kB [ 329.417155][ T8237] 2097051 pages RAM [ 329.417163][ T8237] 0 pages HighMem/MovableOnly [ 329.417171][ T8237] 423731 pages reserved [ 329.417178][ T8237] 0 pages cma reserved [ 330.594635][ T5885] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 330.631402][ T5885] em28xx 4-1:0.0: Config register raw data: 0x72 [ 330.631427][ T5885] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 330.631444][ T5885] em28xx 4-1:0.0: No AC97 audio processor [ 330.848856][ T5799] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 330.850640][ T5799] Bluetooth: hci2: command 0x0c1a tx timeout [ 331.825012][ T5885] usb 4-1: USB disconnect, device number 21 [ 332.049529][ T8261] netlink: 72 bytes leftover after parsing attributes in process `syz.1.713'. [ 332.242084][ T8265] FAULT_INJECTION: forcing a failure. [ 332.242084][ T8265] name failslab, interval 1, probability 0, space 0, times 0 [ 332.242133][ T8265] CPU: 0 UID: 0 PID: 8265 Comm: syz.1.715 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 332.242163][ T8265] Tainted: [L]=SOFTLOCKUP [ 332.242170][ T8265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 332.242185][ T8265] Call Trace: [ 332.242193][ T8265] [ 332.242202][ T8265] dump_stack_lvl+0xe8/0x150 [ 332.242242][ T8265] should_fail_ex+0x46b/0x600 [ 332.242279][ T8265] should_failslab+0xa8/0x100 [ 332.242305][ T8265] __kvmalloc_node_noprof+0x170/0x8e0 [ 332.242331][ T8265] ? seq_read_iter+0x203/0xe20 [ 332.242354][ T8265] ? mutex_lock_nested+0x152/0x1d0 [ 332.242392][ T8265] ? seq_read_iter+0xb8/0xe20 [ 332.242418][ T8265] seq_read_iter+0x203/0xe20 [ 332.242440][ T8265] ? set_page_refcounted+0x76/0x160 [ 332.242473][ T8265] ? __asan_memset+0x22/0x50 [ 332.242509][ T8265] copy_splice_read+0x605/0xab0 [ 332.242548][ T8265] ? __pfx_copy_splice_read+0x10/0x10 [ 332.242575][ T8265] ? rcu_is_watching+0x15/0xb0 [ 332.242603][ T8265] ? look_up_lock_class+0x57/0x110 [ 332.242630][ T8265] ? register_lock_class+0x31/0x2e0 [ 332.242663][ T8265] ? alloc_pipe_info+0x373/0x4d0 [ 332.242687][ T8265] ? __pfx_copy_splice_read+0x10/0x10 [ 332.242714][ T8265] splice_direct_to_actor+0x483/0xc80 [ 332.242754][ T8265] ? __pfx_direct_splice_actor+0x10/0x10 [ 332.242792][ T8265] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 332.242834][ T8265] do_splice_direct+0x19b/0x2a0 [ 332.242866][ T8265] ? __pfx_do_splice_direct+0x10/0x10 [ 332.242897][ T8265] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 332.242935][ T8265] ? rw_verify_area+0x25b/0x4e0 [ 332.242973][ T8265] do_sendfile+0x547/0x7e0 [ 332.243001][ T8265] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 332.243034][ T8265] ? __pfx_do_sendfile+0x10/0x10 [ 332.243078][ T8265] __se_sys_sendfile64+0x144/0x1a0 [ 332.243107][ T8265] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 332.243155][ T8265] do_syscall_64+0x14d/0xf80 [ 332.243179][ T8265] ? trace_irq_disable+0x3b/0x150 [ 332.243206][ T8265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.243228][ T8265] ? clear_bhb_loop+0x40/0x90 [ 332.243256][ T8265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.243278][ T8265] RIP: 0033:0x7f86c065c819 [ 332.243299][ T8265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.243319][ T8265] RSP: 002b:00007f86be8b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 332.243342][ T8265] RAX: ffffffffffffffda RBX: 00007f86c08d5fa0 RCX: 00007f86c065c819 [ 332.243358][ T8265] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 332.243371][ T8265] RBP: 00007f86be8b6090 R08: 0000000000000000 R09: 0000000000000000 [ 332.243384][ T8265] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 332.243397][ T8265] R13: 00007f86c08d6038 R14: 00007f86c08d5fa0 R15: 00007fff04563978 [ 332.243432][ T8265] [ 332.738322][ T8267] netlink: 'syz.3.717': attribute type 1 has an invalid length. [ 334.406000][ T8292] netlink: 72 bytes leftover after parsing attributes in process `syz.3.724'. [ 334.439615][ T8294] 9pnet_fd: Insufficient options for proto=fd [ 334.609663][ T8300] netlink: 'syz.3.728': attribute type 10 has an invalid length. [ 334.873402][ T8307] FAULT_INJECTION: forcing a failure. [ 334.873402][ T8307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.873466][ T8307] CPU: 1 UID: 0 PID: 8307 Comm: syz.0.726 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 334.873497][ T8307] Tainted: [L]=SOFTLOCKUP [ 334.873505][ T8307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 334.873519][ T8307] Call Trace: [ 334.873527][ T8307] [ 334.873537][ T8307] dump_stack_lvl+0xe8/0x150 [ 334.873576][ T8307] should_fail_ex+0x46b/0x600 [ 334.873614][ T8307] _copy_to_user+0x31/0xb0 [ 334.873639][ T8307] simple_read_from_buffer+0xe1/0x170 [ 334.873675][ T8307] proc_fail_nth_read+0x1be/0x230 [ 334.873707][ T8307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 334.873740][ T8307] ? rw_verify_area+0x2ac/0x4e0 [ 334.873773][ T8307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 334.873803][ T8307] vfs_read+0x212/0xa80 [ 334.873854][ T8307] ? __pfx_vfs_read+0x10/0x10 [ 334.873891][ T8307] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 334.873919][ T8307] ? lockdep_hardirqs_on+0x7a/0x110 [ 334.873946][ T8307] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 334.873972][ T8307] ? mutex_lock_nested+0x152/0x1d0 [ 334.874004][ T8307] ? fdget_pos+0x252/0x320 [ 334.874044][ T8307] ksys_read+0x156/0x270 [ 334.874081][ T8307] ? __pfx_ksys_read+0x10/0x10 [ 334.874129][ T8307] do_syscall_64+0x14d/0xf80 [ 334.874155][ T8307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.874178][ T8307] ? clear_bhb_loop+0x40/0x90 [ 334.874207][ T8307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.874229][ T8307] RIP: 0033:0x7fd4f4aed04e [ 334.874250][ T8307] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 334.874269][ T8307] RSP: 002b:00007fd4f2d3bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 334.874292][ T8307] RAX: ffffffffffffffda RBX: 00007fd4f2d3c6c0 RCX: 00007fd4f4aed04e [ 334.874309][ T8307] RDX: 000000000000000f RSI: 00007fd4f2d3c0a0 RDI: 0000000000000007 [ 334.874322][ T8307] RBP: 00007fd4f2d3c090 R08: 0000000000000000 R09: 0000000000000000 [ 334.874336][ T8307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.874348][ T8307] R13: 00007fd4f4da6218 R14: 00007fd4f4da6180 R15: 00007ffe8a7cb728 [ 334.874384][ T8307] [ 335.046921][ T8300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.053346][ T8300] team0: Port device bond0 added [ 335.073991][ T8304] FAULT_INJECTION: forcing a failure. [ 335.073991][ T8304] name failslab, interval 1, probability 0, space 0, times 0 [ 335.074030][ T8304] CPU: 0 UID: 0 PID: 8304 Comm: syz.2.727 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 335.074060][ T8304] Tainted: [L]=SOFTLOCKUP [ 335.074067][ T8304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 335.074081][ T8304] Call Trace: [ 335.074089][ T8304] [ 335.074098][ T8304] dump_stack_lvl+0xe8/0x150 [ 335.074136][ T8304] should_fail_ex+0x46b/0x600 [ 335.074173][ T8304] should_failslab+0xa8/0x100 [ 335.074199][ T8304] __kmalloc_noprof+0xdf/0x7b0 [ 335.074221][ T8304] ? tomoyo_encode+0x28b/0x550 [ 335.074256][ T8304] tomoyo_encode+0x28b/0x550 [ 335.074291][ T8304] tomoyo_realpath_from_path+0x58d/0x5d0 [ 335.074332][ T8304] ? tomoyo_path_number_perm+0x219/0x630 [ 335.074357][ T8304] tomoyo_path_number_perm+0x246/0x630 [ 335.074384][ T8304] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 335.074410][ T8304] ? __lock_acquire+0x6b5/0x2cf0 [ 335.074471][ T8304] ? __fget_files+0x2a/0x420 [ 335.074503][ T8304] ? __fget_files+0x2a/0x420 [ 335.074532][ T8304] ? __fget_files+0x3a6/0x420 [ 335.074559][ T8304] ? __fget_files+0x2a/0x420 [ 335.074602][ T8304] security_file_ioctl+0xc3/0x2a0 [ 335.074629][ T8304] __se_sys_ioctl+0x47/0x170 [ 335.074656][ T8304] do_syscall_64+0x14d/0xf80 [ 335.074681][ T8304] ? trace_irq_disable+0x3b/0x150 [ 335.074709][ T8304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.074733][ T8304] ? clear_bhb_loop+0x40/0x90 [ 335.074762][ T8304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.074784][ T8304] RIP: 0033:0x7f43a7f4c819 [ 335.074805][ T8304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.074825][ T8304] RSP: 002b:00007f43a61a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.074847][ T8304] RAX: ffffffffffffffda RBX: 00007f43a81c5fa0 RCX: 00007f43a7f4c819 [ 335.074864][ T8304] RDX: 00002000000001c0 RSI: 00000000c008aeb0 RDI: 0000000000000005 [ 335.074878][ T8304] RBP: 00007f43a61a6090 R08: 0000000000000000 R09: 0000000000000000 [ 335.074891][ T8304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.074904][ T8304] R13: 00007f43a81c6038 R14: 00007f43a81c5fa0 R15: 00007ffdeb6bf778 [ 335.074940][ T8304] [ 335.074960][ T8304] ERROR: Out of memory at tomoyo_realpath_from_path. [ 337.168118][ T8324] kvm: emulating exchange as write [ 337.220488][ T8324] loop6: detected capacity change from 0 to 7 [ 337.262003][ T8324] Buffer I/O error on dev loop6, logical block 0, async page read [ 337.262059][ T8324] Buffer I/O error on dev loop6, logical block 0, async page read [ 337.262100][ T8324] Buffer I/O error on dev loop6, logical block 0, async page read [ 337.262136][ T8324] Buffer I/O error on dev loop6, logical block 0, async page read [ 337.262192][ T8324] Buffer I/O error on dev loop6, logical block 0, async page read [ 337.262240][ T8324] Buffer I/O error on dev loop6, logical block 0, async page read [ 337.262275][ T8324] Buffer I/O error on dev loop6, logical block 0, async page read [ 337.262295][ T8324] ldm_validate_partition_table(): Disk read failed. [ 337.262322][ T8324] Buffer I/O error on dev loop6, logical block 0, async page read [ 337.262357][ T8324] Buffer I/O error on dev loop6, logical block 0, async page read [ 337.262390][ T8324] Buffer I/O error on dev loop6, logical block 0, async page read [ 337.262428][ T8324] Dev loop6: unable to read RDB block 0 [ 337.262505][ T8324] loop6: unable to read partition table [ 337.262737][ T8324] loop6: partition table beyond EOD, truncated [ 337.262756][ T8324] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 337.528897][ T8337] netlink: 72 bytes leftover after parsing attributes in process `syz.3.738'. [ 337.638562][ T8340] 9pnet_fd: Insufficient options for proto=fd [ 337.821439][ T5804] Bluetooth: hci2: command 0x0c1a tx timeout [ 337.821610][ T5799] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 339.160461][ T8364] FAULT_INJECTION: forcing a failure. [ 339.160461][ T8364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.160509][ T8364] CPU: 1 UID: 0 PID: 8364 Comm: syz.2.747 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 339.160538][ T8364] Tainted: [L]=SOFTLOCKUP [ 339.160545][ T8364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 339.160558][ T8364] Call Trace: [ 339.160567][ T8364] [ 339.160575][ T8364] dump_stack_lvl+0xe8/0x150 [ 339.160613][ T8364] should_fail_ex+0x46b/0x600 [ 339.160651][ T8364] _copy_from_user+0x2d/0xb0 [ 339.160674][ T8364] ipv6_flowlabel_opt+0x14c/0x2340 [ 339.160720][ T8364] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 339.160763][ T8364] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 339.160814][ T8364] ? lockdep_hardirqs_on+0x7a/0x110 [ 339.160845][ T8364] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 339.160887][ T8364] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 339.160959][ T8364] ? __local_bh_enable+0x1e1/0x2f0 [ 339.161010][ T8364] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 339.161043][ T8364] ? lockdep_hardirqs_on+0x7a/0x110 [ 339.161073][ T8364] do_ipv6_setsockopt+0xda7/0x31c0 [ 339.161119][ T8364] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 339.161169][ T8364] ? __lock_acquire+0x6b5/0x2cf0 [ 339.161207][ T8364] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 339.161232][ T8364] ? lockdep_hardirqs_on+0x7a/0x110 [ 339.161274][ T8364] ? __fget_files+0x2a/0x420 [ 339.161309][ T8364] ipv6_setsockopt+0x59/0x170 [ 339.161337][ T8364] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 339.161373][ T8364] do_sock_setsockopt+0x17c/0x1b0 [ 339.161405][ T8364] __x64_sys_setsockopt+0x143/0x1b0 [ 339.161437][ T8364] do_syscall_64+0x14d/0xf80 [ 339.161461][ T8364] ? trace_irq_disable+0x3b/0x150 [ 339.161494][ T8364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.161518][ T8364] ? clear_bhb_loop+0x40/0x90 [ 339.161546][ T8364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.161568][ T8364] RIP: 0033:0x7f43a7f4c819 [ 339.161589][ T8364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.161608][ T8364] RSP: 002b:00007f43a61a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 339.161632][ T8364] RAX: ffffffffffffffda RBX: 00007f43a81c5fa0 RCX: 00007f43a7f4c819 [ 339.161648][ T8364] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 339.161661][ T8364] RBP: 00007f43a61a6090 R08: 0000000000000020 R09: 0000000000000000 [ 339.161674][ T8364] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 339.161687][ T8364] R13: 00007f43a81c6038 R14: 00007f43a81c5fa0 R15: 00007ffdeb6bf778 [ 339.161731][ T8364] [ 339.249435][ T5857] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 339.448643][ T5857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.448764][ T5857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.448883][ T5857] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 339.448952][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.531552][ T5857] usb 4-1: config 0 descriptor?? [ 340.098718][ T5857] hid-led 0003:1D34:000A.0005: unknown main item tag 0x0 [ 340.394495][ T8375] FAULT_INJECTION: forcing a failure. [ 340.394495][ T8375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.394784][ T8375] CPU: 0 UID: 0 PID: 8375 Comm: syz.0.750 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 340.394816][ T8375] Tainted: [L]=SOFTLOCKUP [ 340.394823][ T8375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 340.394836][ T8375] Call Trace: [ 340.394845][ T8375] [ 340.394855][ T8375] dump_stack_lvl+0xe8/0x150 [ 340.394894][ T8375] should_fail_ex+0x46b/0x600 [ 340.394931][ T8375] _copy_from_user+0x2d/0xb0 [ 340.394955][ T8375] kstrtouint_from_user+0xd6/0x180 [ 340.394988][ T8375] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 340.395024][ T8375] ? __lock_acquire+0x6b5/0x2cf0 [ 340.395056][ T8375] proc_fail_nth_write+0x8e/0x210 [ 340.395087][ T8375] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 340.395122][ T8375] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 340.395153][ T8375] vfs_write+0x2a3/0xba0 [ 340.395195][ T8375] ? __pfx_vfs_write+0x10/0x10 [ 340.395234][ T8375] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 340.395258][ T8375] ? lockdep_hardirqs_on+0x7a/0x110 [ 340.395280][ T8375] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 340.395306][ T8375] ? mutex_lock_nested+0x152/0x1d0 [ 340.395338][ T8375] ? fdget_pos+0x252/0x320 [ 340.395383][ T8375] ksys_write+0x156/0x270 [ 340.395423][ T8375] ? __pfx_ksys_write+0x10/0x10 [ 340.395470][ T8375] do_syscall_64+0x14d/0xf80 [ 340.395496][ T8375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.395520][ T8375] ? clear_bhb_loop+0x40/0x90 [ 340.395548][ T8375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.395571][ T8375] RIP: 0033:0x7fd4f4aed04e [ 340.395593][ T8375] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 340.395611][ T8375] RSP: 002b:00007fd4f2d3bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 340.395634][ T8375] RAX: ffffffffffffffda RBX: 00007fd4f2d3c6c0 RCX: 00007fd4f4aed04e [ 340.395650][ T8375] RDX: 0000000000000001 RSI: 00007fd4f2d3c0a0 RDI: 0000000000000006 [ 340.395664][ T8375] RBP: 00007fd4f2d3c090 R08: 0000000000000000 R09: 0000000000000000 [ 340.395677][ T8375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.395690][ T8375] R13: 00007fd4f4da6218 R14: 00007fd4f4da6180 R15: 00007ffe8a7cb728 [ 340.395725][ T8375] [ 340.974006][ T8378] netlink: 72 bytes leftover after parsing attributes in process `syz.1.751'. [ 340.975084][ T8376] 9p: Bad value for 'wfdno' [ 340.978912][ T5885] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 341.153145][ T8380] 9pnet_fd: Insufficient options for proto=fd [ 341.173727][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 341.173765][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.173805][ T5885] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 341.173830][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.220198][ T5885] usb 3-1: config 0 descriptor?? [ 341.642572][ T8370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.643745][ T8370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.704237][ T5885] isku 0003:1E7D:319C.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 341.998812][ T6072] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 342.004484][ T37] kauditd_printk_skb: 427 callbacks suppressed [ 342.004505][ T37] audit: type=1326 audit(1775850006.358:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8350 comm="syz.3.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6df49c819 code=0x7fc00000 [ 342.083028][ T5885] usb 3-1: USB disconnect, device number 34 [ 342.160954][ T6072] usb 1-1: device descriptor read/64, error -71 [ 342.204546][ T8393] fido_id[8393]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 342.305335][ T5857] hid-led 0003:1D34:000A.0005: probe with driver hid-led failed with error -71 [ 342.365353][ T5857] usb 4-1: USB disconnect, device number 22 [ 342.413480][ T6072] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 342.548756][ T6072] usb 1-1: device descriptor read/64, error -71 [ 342.738647][ T5976] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 342.779109][ T6072] usb usb1-port1: attempt power cycle [ 342.797014][ T8403] binder: 8402:8403 ioctl 8903 200000000040 returned -22 [ 342.972102][ T8407] netlink: 28 bytes leftover after parsing attributes in process `syz.4.757'. [ 343.828729][ T5976] usb 2-1: device descriptor read/64, error -71 [ 344.048702][ T6072] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 344.069679][ T6072] usb 1-1: device descriptor read/8, error -71 [ 344.079456][ T5976] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 344.218871][ T5976] usb 2-1: device descriptor read/64, error -71 [ 344.307833][ T8415] netlink: 'syz.3.760': attribute type 3 has an invalid length. [ 344.308302][ T8415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.309473][ T6072] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 344.341010][ T5976] usb usb2-port1: attempt power cycle [ 344.344020][ T6072] usb 1-1: device descriptor read/8, error -71 [ 344.449092][ T6072] usb usb1-port1: unable to enumerate USB device [ 344.719571][ T5976] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 345.284633][ T5976] usb 2-1: device descriptor read/8, error -71 [ 348.161751][ T7008] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 348.259346][ T8411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.453956][ T7008] usb 1-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 348.454015][ T7008] usb 1-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 348.456300][ T7008] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 348.456331][ T7008] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 348.456353][ T7008] usb 1-1: Manufacturer: syz [ 348.456369][ T7008] usb 1-1: SerialNumber: syz [ 348.527526][ T8441] netlink: 80 bytes leftover after parsing attributes in process `syz.4.769'. [ 348.527688][ T8441] netlink: 80 bytes leftover after parsing attributes in process `syz.4.769'. [ 348.743028][ T7008] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 348.757565][ T7008] usb 1-1: USB disconnect, device number 21 [ 348.823359][ T5812] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 349.632649][ T5812] usb 3-1: device descriptor read/64, error -71 [ 350.291023][ T5812] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 350.893618][ T5812] usb 3-1: device descriptor read/64, error -71 [ 350.999174][ T5812] usb usb3-port1: attempt power cycle [ 351.490001][ T5812] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 351.508874][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.777'. [ 351.618739][ T8473] FAULT_INJECTION: forcing a failure. [ 351.618739][ T8473] name failslab, interval 1, probability 0, space 0, times 0 [ 351.618774][ T8473] CPU: 0 UID: 0 PID: 8473 Comm: syz.1.779 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 351.618799][ T8473] Tainted: [L]=SOFTLOCKUP [ 351.618806][ T8473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 351.618818][ T8473] Call Trace: [ 351.618825][ T8473] [ 351.618832][ T8473] dump_stack_lvl+0xe8/0x150 [ 351.618866][ T8473] should_fail_ex+0x46b/0x600 [ 351.618895][ T8473] should_failslab+0xa8/0x100 [ 351.618915][ T8473] __kmalloc_noprof+0xdf/0x7b0 [ 351.618931][ T8473] ? bpf_test_init+0x9f/0x150 [ 351.618961][ T8473] bpf_test_init+0x9f/0x150 [ 351.618990][ T8473] bpf_prog_test_run_nf+0x295/0x790 [ 351.619015][ T8473] ? __pfx_bpf_prog_test_run_nf+0x10/0x10 [ 351.619036][ T8473] ? __fget_files+0x2a/0x420 [ 351.619062][ T8473] ? __fget_files+0x2a/0x420 [ 351.619089][ T8473] ? __pfx_bpf_prog_test_run_nf+0x10/0x10 [ 351.619107][ T8473] bpf_prog_test_run+0x2cd/0x340 [ 351.619135][ T8473] __sys_bpf+0x643/0x950 [ 351.619160][ T8473] ? __pfx___sys_bpf+0x10/0x10 [ 351.619179][ T8473] ? rt_mutex_slowunlock+0x1cb/0x300 [ 351.619219][ T8473] ? ksys_write+0x248/0x270 [ 351.619248][ T8473] ? __pfx_ksys_write+0x10/0x10 [ 351.619281][ T8473] __x64_sys_bpf+0x7c/0x90 [ 351.619310][ T8473] do_syscall_64+0x14d/0xf80 [ 351.619329][ T8473] ? trace_irq_disable+0x3b/0x150 [ 351.619350][ T8473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.619368][ T8473] ? clear_bhb_loop+0x40/0x90 [ 351.619389][ T8473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.619406][ T8473] RIP: 0033:0x7f86c065c819 [ 351.619423][ T8473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.619439][ T8473] RSP: 002b:00007f86be8b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 351.619459][ T8473] RAX: ffffffffffffffda RBX: 00007f86c08d5fa0 RCX: 00007f86c065c819 [ 351.619471][ T8473] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 351.619483][ T8473] RBP: 00007f86be8b6090 R08: 0000000000000000 R09: 0000000000000000 [ 351.619493][ T8473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.619503][ T8473] R13: 00007f86c08d6038 R14: 00007f86c08d5fa0 R15: 00007fff04563978 [ 351.619529][ T8473] [ 351.715028][ T5812] usb 3-1: device not accepting address 37, error -71 [ 352.127673][ T8486] FAULT_INJECTION: forcing a failure. [ 352.127673][ T8486] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 352.127713][ T8486] CPU: 1 UID: 0 PID: 8486 Comm: syz.0.783 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 352.127743][ T8486] Tainted: [L]=SOFTLOCKUP [ 352.127751][ T8486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 352.127764][ T8486] Call Trace: [ 352.127773][ T8486] [ 352.127782][ T8486] dump_stack_lvl+0xe8/0x150 [ 352.127822][ T8486] should_fail_ex+0x46b/0x600 [ 352.127860][ T8486] prepare_alloc_pages+0x22a/0x6b0 [ 352.127895][ T8486] __alloc_frozen_pages_noprof+0x12f/0x380 [ 352.127926][ T8486] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 352.127957][ T8486] ? __pfx_policy_nodemask+0x10/0x10 [ 352.127980][ T8486] ? __lock_acquire+0x6b5/0x2cf0 [ 352.128022][ T8486] alloc_pages_mpol+0xd1/0x380 [ 352.128051][ T8486] vma_alloc_folio_noprof+0xea/0x290 [ 352.128080][ T8486] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 352.128119][ T8486] do_pte_missing+0x7f9/0x29e0 [ 352.128163][ T8486] handle_mm_fault+0xd0a/0x13c0 [ 352.128206][ T8486] ? handle_mm_fault+0xe7/0x13c0 [ 352.128245][ T8486] ? __pfx_handle_mm_fault+0x10/0x10 [ 352.128310][ T8486] ? lock_mm_and_find_vma+0xa7/0x340 [ 352.128341][ T8486] do_user_addr_fault+0x75b/0x1340 [ 352.128393][ T8486] exc_page_fault+0x6a/0xc0 [ 352.128420][ T8486] asm_exc_page_fault+0x26/0x30 [ 352.128443][ T8486] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 352.128476][ T8486] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 352.128500][ T8486] RSP: 0018:ffffc90003f2f898 EFLAGS: 00050202 [ 352.128519][ T8486] RAX: ffffffff849c2b01 RBX: ffff88803b444000 RCX: 0000000000000415 [ 352.128535][ T8486] RDX: 0000000000000000 RSI: ffff88803b444000 RDI: 0000200000002100 [ 352.128550][ T8486] RBP: ffffc90003f2fa10 R08: ffff88803b444414 R09: 1ffff11007688882 [ 352.128565][ T8486] R10: dffffc0000000000 R11: ffffed1007688883 R12: dffffc0000000000 [ 352.128580][ T8486] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000415 [ 352.128603][ T8486] ? _copy_to_iter+0x391/0x17d0 [ 352.128642][ T8486] _copy_to_iter+0x493/0x17d0 [ 352.128701][ T8486] ? __pfx__copy_to_iter+0x10/0x10 [ 352.128729][ T8486] ? rt_mutex_slowunlock+0x1cb/0x300 [ 352.128769][ T8486] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 352.128822][ T8486] seq_read_iter+0xbf6/0xe20 [ 352.128872][ T8486] seq_read+0x36a/0x490 [ 352.128913][ T8486] ? __pfx_seq_read+0x10/0x10 [ 352.128939][ T8486] ? register_lock_class+0x31/0x2e0 [ 352.128981][ T8486] ? __pfx_seq_read+0x10/0x10 [ 352.129008][ T8486] proc_reg_read+0x1f6/0x2f0 [ 352.129058][ T8486] ? __pfx_proc_reg_read+0x10/0x10 [ 352.129102][ T8486] vfs_read+0x212/0xa80 [ 352.129146][ T8486] ? __pfx_vfs_read+0x10/0x10 [ 352.129184][ T8486] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 352.129211][ T8486] ? lockdep_hardirqs_on+0x7a/0x110 [ 352.129243][ T8486] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 352.129268][ T8486] ? mutex_lock_nested+0x152/0x1d0 [ 352.129307][ T8486] ? fdget_pos+0x252/0x320 [ 352.129348][ T8486] ksys_read+0x156/0x270 [ 352.129383][ T8486] ? __pfx_ksys_read+0x10/0x10 [ 352.129433][ T8486] do_syscall_64+0x14d/0xf80 [ 352.129457][ T8486] ? trace_irq_disable+0x3b/0x150 [ 352.129484][ T8486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.129507][ T8486] ? clear_bhb_loop+0x40/0x90 [ 352.129535][ T8486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.129557][ T8486] RIP: 0033:0x7fd4f4b2c819 [ 352.129578][ T8486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.129596][ T8486] RSP: 002b:00007fd4f2d7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 352.129618][ T8486] RAX: ffffffffffffffda RBX: 00007fd4f4da5fa0 RCX: 00007fd4f4b2c819 [ 352.129633][ T8486] RDX: 0000000000002020 RSI: 0000200000002100 RDI: 0000000000000003 [ 352.129647][ T8486] RBP: 00007fd4f2d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 352.129661][ T8486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.129674][ T8486] R13: 00007fd4f4da6038 R14: 00007fd4f4da5fa0 R15: 00007ffe8a7cb728 [ 352.129710][ T8486] [ 352.198341][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'. [ 352.309990][ T8488] netlink: 36 bytes leftover after parsing attributes in process `syz.4.782'. [ 352.786797][ T8494] FAULT_INJECTION: forcing a failure. [ 352.786797][ T8494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.786837][ T8494] CPU: 1 UID: 0 PID: 8494 Comm: syz.2.786 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 352.786867][ T8494] Tainted: [L]=SOFTLOCKUP [ 352.786874][ T8494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 352.786887][ T8494] Call Trace: [ 352.786896][ T8494] [ 352.786905][ T8494] dump_stack_lvl+0xe8/0x150 [ 352.786943][ T8494] should_fail_ex+0x46b/0x600 [ 352.786981][ T8494] _copy_from_user+0x2d/0xb0 [ 352.787004][ T8494] __copy_msghdr+0x3c5/0x5b0 [ 352.787035][ T8494] ___sys_sendmsg+0x213/0x360 [ 352.787068][ T8494] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.787132][ T8494] ? __fget_files+0x2a/0x420 [ 352.787161][ T8494] ? __fget_files+0x3a6/0x420 [ 352.787210][ T8494] __x64_sys_sendmsg+0x1c3/0x2a0 [ 352.787239][ T8494] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 352.787277][ T8494] ? __pfx_ksys_write+0x10/0x10 [ 352.787322][ T8494] do_syscall_64+0x14d/0xf80 [ 352.787348][ T8494] ? trace_irq_disable+0x3b/0x150 [ 352.787375][ T8494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.787398][ T8494] ? clear_bhb_loop+0x40/0x90 [ 352.787426][ T8494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.787449][ T8494] RIP: 0033:0x7f43a7f4c819 [ 352.787469][ T8494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.787488][ T8494] RSP: 002b:00007f43a61a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.787512][ T8494] RAX: ffffffffffffffda RBX: 00007f43a81c5fa0 RCX: 00007f43a7f4c819 [ 352.787528][ T8494] RDX: 0000000000040880 RSI: 0000200000000140 RDI: 0000000000000004 [ 352.787543][ T8494] RBP: 00007f43a61a6090 R08: 0000000000000000 R09: 0000000000000000 [ 352.787557][ T8494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.787569][ T8494] R13: 00007f43a81c6038 R14: 00007f43a81c5fa0 R15: 00007ffdeb6bf778 [ 352.787604][ T8494] [ 352.928687][ T5804] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 353.008698][ T5804] Bluetooth: hci2: command 0x0c1a tx timeout [ 353.018687][ T5857] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 353.180274][ T5857] usb 1-1: Using ep0 maxpacket: 32 [ 353.183072][ T5857] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 353.183103][ T5857] usb 1-1: config 0 has no interface number 0 [ 353.183152][ T5857] usb 1-1: config 0 interface 12 has no altsetting 0 [ 353.186188][ T5857] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 353.186221][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.186243][ T5857] usb 1-1: Product: syz [ 353.186258][ T5857] usb 1-1: Manufacturer: syz [ 353.186274][ T5857] usb 1-1: SerialNumber: syz [ 353.269407][ T5857] usb 1-1: config 0 descriptor?? [ 353.829705][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.792'. [ 354.228682][ T5812] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 354.415963][ T5812] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.415992][ T5812] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 354.439670][ T5812] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 354.439701][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 354.439721][ T5812] usb 2-1: SerialNumber: syz [ 354.490693][ T5976] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 354.511693][ T8525] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 354.511795][ T8525] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 354.511818][ T8525] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 354.678737][ T5976] usb 4-1: device descriptor read/64, error -71 [ 354.736543][ T5857] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 354.736602][ T5857] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 354.736620][ T5857] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 354.736725][ T5857] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 354.758959][ T7008] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 354.812500][ T5857] usb 1-1: USB disconnect, device number 22 [ 354.833790][ T5812] usb 2-1: cannot find UAC_HEADER [ 354.928725][ T7008] usb 5-1: device descriptor read/64, error -71 [ 354.928803][ T6339] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 354.934905][ T5812] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 354.938142][ T5812] usb 2-1: USB disconnect, device number 33 [ 354.968131][ T5976] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 355.004140][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.058717][ T6339] usb 3-1: device descriptor read/64, error -71 [ 355.108926][ T5976] usb 4-1: device descriptor read/64, error -71 [ 355.168725][ T5799] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 355.170854][ T5804] Bluetooth: hci2: command 0x0c1a tx timeout [ 355.170949][ T7008] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 355.221575][ T5976] usb usb4-port1: attempt power cycle [ 355.298749][ T7008] usb 5-1: device descriptor read/64, error -71 [ 355.298870][ T6339] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 355.416802][ T7008] usb usb5-port1: attempt power cycle [ 355.438692][ T6339] usb 3-1: device descriptor read/64, error -71 [ 355.549042][ T6339] usb usb3-port1: attempt power cycle [ 355.564135][ T5976] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 355.579394][ T5976] usb 4-1: device descriptor read/8, error -71 [ 355.748662][ T7008] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 355.769369][ T7008] usb 5-1: device descriptor read/8, error -71 [ 355.818722][ T5976] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 355.841906][ T5976] usb 4-1: device descriptor read/8, error -71 [ 355.898713][ T6339] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 355.920205][ T6339] usb 3-1: device descriptor read/8, error -71 [ 355.949548][ T5976] usb usb4-port1: unable to enumerate USB device [ 356.008652][ T7008] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 356.028319][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'. [ 356.036216][ T7008] usb 5-1: device descriptor read/8, error -71 [ 356.139198][ T7008] usb usb5-port1: unable to enumerate USB device [ 356.158768][ T6339] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 356.179297][ T6339] usb 3-1: device descriptor read/8, error -71 [ 356.289422][ T6339] usb usb3-port1: unable to enumerate USB device [ 356.574964][ T8550] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=57 (114 ns) > initial count (64 ns). Using initial count to start timer. [ 357.572057][ T5799] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 357.577125][ T5804] Bluetooth: hci2: command 0x0c1a tx timeout [ 357.589182][ T6339] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 357.832031][ T6339] usb 2-1: device descriptor read/64, error -71 [ 358.093104][ T6339] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 358.440261][ T6339] usb 2-1: device descriptor read/64, error -71 [ 358.549131][ T6339] usb usb2-port1: attempt power cycle [ 358.910395][ T6339] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 359.716062][ T6339] usb 2-1: device descriptor read/8, error -71 [ 359.930524][ T8595] FAULT_INJECTION: forcing a failure. [ 359.930524][ T8595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.930564][ T8595] CPU: 1 UID: 0 PID: 8595 Comm: syz.0.822 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 359.930594][ T8595] Tainted: [L]=SOFTLOCKUP [ 359.930602][ T8595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 359.930616][ T8595] Call Trace: [ 359.930624][ T8595] [ 359.930633][ T8595] dump_stack_lvl+0xe8/0x150 [ 359.930671][ T8595] should_fail_ex+0x46b/0x600 [ 359.930708][ T8595] strncpy_from_user+0x36/0x2b0 [ 359.930740][ T8595] do_getname+0x77/0x250 [ 359.930768][ T8595] do_sys_openat2+0xca/0x200 [ 359.930798][ T8595] ? __pfx_do_sys_openat2+0x10/0x10 [ 359.930828][ T8595] ? ksys_write+0x248/0x270 [ 359.930865][ T8595] ? __pfx_ksys_write+0x10/0x10 [ 359.930903][ T8595] __x64_sys_openat+0x138/0x170 [ 359.930940][ T8595] do_syscall_64+0x14d/0xf80 [ 359.930964][ T8595] ? trace_irq_disable+0x3b/0x150 [ 359.930992][ T8595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.931014][ T8595] ? clear_bhb_loop+0x40/0x90 [ 359.931040][ T8595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.931062][ T8595] RIP: 0033:0x7fd4f4aed04e [ 359.931081][ T8595] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 359.931100][ T8595] RSP: 002b:00007fd4f2d7dec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 359.931123][ T8595] RAX: ffffffffffffffda RBX: 00007fd4f2d7e6c0 RCX: 00007fd4f4aed04e [ 359.931138][ T8595] RDX: 0000000000000002 RSI: 00007fd4f2d7df90 RDI: ffffffffffffff9c [ 359.931152][ T8595] RBP: 00007fd4f2d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 359.931165][ T8595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.931177][ T8595] R13: 00007fd4f4da6038 R14: 00007fd4f4da5fa0 R15: 00007ffe8a7cb728 [ 359.931211][ T8595] [ 359.949007][ T6339] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 359.969420][ T6339] usb 2-1: device descriptor read/8, error -71 [ 360.125728][ T6339] usb usb2-port1: unable to enumerate USB device [ 360.135195][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.820'. [ 360.250825][ T8599] erspan0: entered promiscuous mode [ 360.254149][ T8599] erspan0: left promiscuous mode [ 360.478790][ T6339] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 360.488627][ T5976] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 360.608714][ T5804] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 360.609089][ T5804] Bluetooth: hci2: command 0x0c1a tx timeout [ 360.641189][ T5976] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.641218][ T5976] usb 3-1: config 0 has no interfaces? [ 360.641251][ T5976] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 360.641276][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.643717][ T6339] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 360.643751][ T6339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.643773][ T6339] usb 1-1: Product: syz [ 360.643788][ T6339] usb 1-1: Manufacturer: syz [ 360.643804][ T6339] usb 1-1: SerialNumber: syz [ 360.762934][ T5976] usb 3-1: config 0 descriptor?? [ 361.191752][ T6339] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 361.191816][ T6339] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 361.199385][ T8602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.199943][ T8602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.207928][ T8616] nvme_fabrics: missing parameter 'transport=%s' [ 361.207948][ T8616] nvme_fabrics: missing parameter 'nqn=%s' [ 363.088992][ T6339] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO [ 363.089043][ T6339] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 363.093087][ T6339] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 363.154995][ T6339] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 363.179057][ T6339] usb 1-1: USB disconnect, device number 23 [ 363.274242][ T8635] binder: 8634:8635 ioctl c0306201 200000000080 returned -14 [ 363.277629][ T8635] binder: 8634:8635 ioctl c0306201 2000000003c0 returned -14 [ 365.682940][ T8644] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 365.733642][ T7008] usb 3-1: USB disconnect, device number 43 [ 365.752910][ T8644] netlink: 16 bytes leftover after parsing attributes in process `syz.3.836'. [ 366.038762][ T8658] usb usb8: usbfs: process 8658 (syz.3.841) did not claim interface 0 before use [ 366.838939][ T7008] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 367.375917][ T7008] usb 4-1: Using ep0 maxpacket: 32 [ 367.417809][ T7008] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 367.417844][ T7008] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.417865][ T7008] usb 4-1: Product: syz [ 367.417890][ T7008] usb 4-1: Manufacturer: syz [ 367.417905][ T7008] usb 4-1: SerialNumber: syz [ 367.489699][ T7008] usb 4-1: config 0 descriptor?? [ 367.526084][ T7008] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 367.543177][ T7008] dvb-usb: bulk message failed: -22 (4/0) [ 367.543205][ T7008] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 367.543359][ T7008] dvb-usb: bulk message failed: -22 (5/0) [ 367.543375][ T7008] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 367.591346][ T7008] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 367.593300][ T7008] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 367.593363][ T7008] usb 4-1: media controller created [ 367.688130][ T7008] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 367.717625][ T8670] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 367.718279][ T8670] dvb-usb: bulk message failed: -22 (7/0) [ 367.718300][ T8670] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 367.718364][ T8670] ttusb2: i2c transfer failed. [ 367.813008][ T7008] usb 4-1: selecting invalid altsetting 3 [ 367.813029][ T7008] ttusb2: set interface to alts=3 failed [ 367.917853][ T7008] DVB: Unable to find symbol tda10086_attach() [ 367.917869][ T7008] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 367.919193][ T7008] dvb-usb: bulk message failed: -22 (4/0) [ 367.919243][ T7008] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 367.919530][ T7008] dvb-usb: bulk message failed: -22 (5/0) [ 367.919574][ T7008] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 367.919759][ T7008] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 367.994217][ T7008] usb 4-1: USB disconnect, device number 27 [ 368.122550][ T7008] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 368.748841][ T5812] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 371.087298][ T5877] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 372.438571][ T5877] usb 5-1: device descriptor read/64, error -71 [ 372.478623][ T5812] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 372.478663][ T5812] usb 2-1: can't read configurations, error -71 [ 372.746668][ T8736] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 372.819602][ T8737] FAULT_INJECTION: forcing a failure. [ 372.819602][ T8737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.819642][ T8737] CPU: 1 UID: 0 PID: 8737 Comm: syz.4.866 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 372.819673][ T8737] Tainted: [L]=SOFTLOCKUP [ 372.819682][ T8737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 372.819695][ T8737] Call Trace: [ 372.819704][ T8737] [ 372.819715][ T8737] dump_stack_lvl+0xe8/0x150 [ 372.819752][ T8737] should_fail_ex+0x46b/0x600 [ 372.819788][ T8737] _copy_from_user+0x2d/0xb0 [ 372.819812][ T8737] ___sys_sendmsg+0x1c6/0x360 [ 372.819846][ T8737] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.819878][ T8737] ? kstrtouint+0x6e/0xe0 [ 372.819935][ T8737] ? __fget_files+0x2a/0x420 [ 372.819963][ T8737] ? __fget_files+0x3a6/0x420 [ 372.820128][ T8737] __sys_sendmmsg+0x282/0x4e0 [ 372.820176][ T8737] ? __pfx___sys_sendmmsg+0x10/0x10 [ 372.820215][ T8737] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 372.820274][ T8737] ? ksys_write+0x248/0x270 [ 372.820311][ T8737] ? __pfx_ksys_write+0x10/0x10 [ 372.820351][ T8737] __x64_sys_sendmmsg+0xa0/0xc0 [ 372.820445][ T8737] do_syscall_64+0x14d/0xf80 [ 372.820471][ T8737] ? trace_irq_disable+0x3b/0x150 [ 372.820497][ T8737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.820521][ T8737] ? clear_bhb_loop+0x40/0x90 [ 372.820548][ T8737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.820570][ T8737] RIP: 0033:0x7f00d70ec819 [ 372.820592][ T8737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.820611][ T8737] RSP: 002b:00007f00d531d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 372.820634][ T8737] RAX: ffffffffffffffda RBX: 00007f00d7366090 RCX: 00007f00d70ec819 [ 372.820651][ T8737] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000003 [ 372.820665][ T8737] RBP: 00007f00d531d090 R08: 0000000000000000 R09: 0000000000000000 [ 372.820679][ T8737] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.820693][ T8737] R13: 00007f00d7366128 R14: 00007f00d7366090 R15: 00007ffc60e73f38 [ 372.820729][ T8737] [ 373.695864][ T8752] vlan2: entered allmulticast mode [ 373.695886][ T8752] macvtap0: entered allmulticast mode [ 373.695900][ T8752] veth0_macvtap: entered allmulticast mode [ 373.753854][ T8754] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 374.508741][ T5877] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 374.659298][ T5877] usb 1-1: Using ep0 maxpacket: 8 [ 374.665885][ T5877] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 374.665908][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.665922][ T5877] usb 1-1: Product: syz [ 374.665933][ T5877] usb 1-1: Manufacturer: syz [ 374.665944][ T5877] usb 1-1: SerialNumber: syz [ 374.692728][ T5877] usb 1-1: config 0 descriptor?? [ 374.923362][ T5877] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 375.348671][ T7008] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 375.383511][ T8793] fuse: Bad value for 'rootmode' [ 375.397373][ T8793] loop8: detected capacity change from 0 to 8 [ 375.413015][ T8793] Dev loop8: unable to read RDB block 8 [ 375.413074][ T8793] loop8: unable to read partition table [ 375.413301][ T8793] loop8: partition table beyond EOD, truncated [ 375.413323][ T8793] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 375.519158][ T7008] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.519218][ T7008] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 375.519244][ T7008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.527577][ T7008] usb 3-1: config 0 descriptor?? [ 375.570322][ T5877] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 375.620136][ T5877] usb 1-1: USB disconnect, device number 24 [ 375.828384][ T8801] netlink: 'syz.1.888': attribute type 1 has an invalid length. [ 375.907759][ T8801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.032123][ T8803] bond1: (slave gretap1): making interface the new active one [ 376.065828][ T8803] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 376.465091][ T7008] ath6kl: Failed to read usb control message: -71 [ 376.465143][ T7008] ath6kl: Unable to read the bmi data from the device: -71 [ 376.465160][ T7008] ath6kl: unable to read target info byte count: -71 [ 376.479003][ T7008] ath6kl: Failed to init ath6kl core: -71 [ 376.479662][ T7008] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 376.539358][ T7008] usb 3-1: USB disconnect, device number 44 [ 378.576752][ T5810] Bluetooth: hci4: command 0x0c1a tx timeout [ 378.910622][ T5804] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 379.178741][ T5810] Bluetooth: hci2: command 0x0c1a tx timeout [ 379.311460][ T8820] netlink: 76 bytes leftover after parsing attributes in process `syz.0.894'. [ 379.376139][ T8822] fuse: Bad value for 'fd' [ 379.396097][ T8822] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 379.658918][ T7008] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 379.939502][ T7008] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.940007][ T7008] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 379.940085][ T7008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.708853][ T7008] usb 4-1: config 0 descriptor?? [ 380.719769][ T8838] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.734456][ T7008] pwc: Askey VC010 type 2 USB webcam detected. [ 380.887590][ T8844] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 380.907900][ T8844] VFS: Can't find a romfs filesystem on dev nullb0. [ 380.907900][ T8844] [ 380.981472][ T5976] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 381.288630][ T5976] usb 3-1: Using ep0 maxpacket: 16 [ 381.294744][ T5976] usb 3-1: config 4 has an invalid interface number: 209 but max is 0 [ 381.294772][ T5976] usb 3-1: config 4 has no interface number 0 [ 381.294809][ T5976] usb 3-1: config 4 interface 209 has no altsetting 0 [ 381.310635][ T5976] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=75.db [ 381.310726][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.310754][ T5976] usb 3-1: Product: syz [ 381.310770][ T5976] usb 3-1: Manufacturer: syz [ 381.310785][ T5976] usb 3-1: SerialNumber: syz [ 381.455137][ T8846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.457637][ T8846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.678868][ T5976] usb 3-1: USB disconnect, device number 45 [ 381.842009][ T7008] pwc: recv_control_msg error -71 req 02 val 2700 [ 381.842483][ T7008] pwc: recv_control_msg error -71 req 02 val 2c00 [ 381.842959][ T7008] pwc: recv_control_msg error -71 req 04 val 1000 [ 381.843423][ T7008] pwc: recv_control_msg error -71 req 04 val 1300 [ 381.843900][ T7008] pwc: recv_control_msg error -71 req 04 val 1400 [ 381.844370][ T7008] pwc: recv_control_msg error -71 req 02 val 2000 [ 381.844864][ T7008] pwc: recv_control_msg error -71 req 02 val 2100 [ 381.845383][ T7008] pwc: recv_control_msg error -71 req 04 val 1500 [ 381.845861][ T7008] pwc: recv_control_msg error -71 req 02 val 2500 [ 381.910031][ T7008] pwc: recv_control_msg error -71 req 02 val 2400 [ 381.913169][ T7008] pwc: recv_control_msg error -71 req 02 val 2600 [ 381.931786][ T7008] pwc: recv_control_msg error -71 req 02 val 2900 [ 381.932295][ T7008] pwc: recv_control_msg error -71 req 02 val 2800 [ 381.933050][ T7008] pwc: recv_control_msg error -71 req 04 val 1100 [ 381.933572][ T7008] pwc: recv_control_msg error -71 req 04 val 1200 [ 381.984551][ T7008] pwc: Registered as video103. [ 381.997723][ T7008] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 382.027471][ T8852] netlink: 'syz.1.905': attribute type 1 has an invalid length. [ 382.045649][ T7008] usb 4-1: USB disconnect, device number 28 [ 382.179075][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802ab57c00: rx timeout, send abort [ 382.183069][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802ab57c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 382.537817][ T8866] fuse: Bad value for 'fd' [ 382.547285][ T8866] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 383.002934][ T8891] FAULT_INJECTION: forcing a failure. [ 383.002934][ T8891] name failslab, interval 1, probability 0, space 0, times 0 [ 383.002979][ T8891] CPU: 1 UID: 0 PID: 8891 Comm: syz.3.920 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 383.003001][ T8891] Tainted: [L]=SOFTLOCKUP [ 383.003007][ T8891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 383.003016][ T8891] Call Trace: [ 383.003022][ T8891] [ 383.003029][ T8891] dump_stack_lvl+0xe8/0x150 [ 383.003058][ T8891] should_fail_ex+0x46b/0x600 [ 383.003085][ T8891] should_failslab+0xa8/0x100 [ 383.003105][ T8891] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 383.003131][ T8891] ? __alloc_skb+0x1d0/0x7d0 [ 383.003146][ T8891] ? lockdep_hardirqs_on+0x7a/0x110 [ 383.003168][ T8891] __alloc_skb+0x1d0/0x7d0 [ 383.003188][ T8891] pfkey_sendmsg+0xd42/0x1120 [ 383.003222][ T8891] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 383.003260][ T8891] ? __kernel_text_address+0xd/0x30 [ 383.003280][ T8891] ? unwind_get_return_address+0x4d/0x90 [ 383.003299][ T8891] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 383.003327][ T8891] ____sys_sendmsg+0x94c/0x9c0 [ 383.003355][ T8891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.003381][ T8891] ? import_iovec+0x73/0xa0 [ 383.003399][ T8891] ___sys_sendmsg+0x2a5/0x360 [ 383.003422][ T8891] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.003467][ T8891] ? __fget_files+0x2a/0x420 [ 383.003488][ T8891] ? __fget_files+0x3a6/0x420 [ 383.003516][ T8891] __x64_sys_sendmsg+0x1c3/0x2a0 [ 383.003537][ T8891] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.003563][ T8891] ? __pfx_ksys_write+0x10/0x10 [ 383.003601][ T8891] do_syscall_64+0x14d/0xf80 [ 383.003619][ T8891] ? trace_irq_disable+0x3b/0x150 [ 383.003639][ T8891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.003655][ T8891] ? clear_bhb_loop+0x40/0x90 [ 383.003674][ T8891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.003690][ T8891] RIP: 0033:0x7ff6df49c819 [ 383.003705][ T8891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.003719][ T8891] RSP: 002b:00007ff6dd6f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.003736][ T8891] RAX: ffffffffffffffda RBX: 00007ff6df715fa0 RCX: 00007ff6df49c819 [ 383.003749][ T8891] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 383.003762][ T8891] RBP: 00007ff6dd6f6090 R08: 0000000000000000 R09: 0000000000000000 [ 383.003772][ T8891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.003781][ T8891] R13: 00007ff6df716038 R14: 00007ff6df715fa0 R15: 00007ffd0da68e18 [ 383.003805][ T8891] [ 383.888629][ T5976] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 384.823749][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.823813][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.859669][ T5976] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 384.859700][ T5976] usb 5-1: config 0 has no interface number 0 [ 384.859749][ T5976] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 384.859773][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.912679][ T5976] usb 5-1: config 0 descriptor?? [ 384.931884][ T5976] usb 5-1: selecting invalid altsetting 1 [ 384.932878][ T5976] dvb_ttusb_budget: ttusb_init_controller: error [ 384.932891][ T5976] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 385.145672][ T8898] FAULT_INJECTION: forcing a failure. [ 385.145672][ T8898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.145711][ T8898] CPU: 0 UID: 0 PID: 8898 Comm: syz.4.922 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 385.145741][ T8898] Tainted: [L]=SOFTLOCKUP [ 385.145749][ T8898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 385.145762][ T8898] Call Trace: [ 385.145770][ T8898] [ 385.145779][ T8898] dump_stack_lvl+0xe8/0x150 [ 385.145817][ T8898] should_fail_ex+0x46b/0x600 [ 385.145853][ T8898] _copy_from_user+0x2d/0xb0 [ 385.145877][ T8898] memdup_user+0x5e/0xd0 [ 385.145907][ T8898] i2cdev_ioctl_rdwr+0x1c6/0x740 [ 385.145942][ T8898] i2cdev_ioctl+0x6a8/0x890 [ 385.145965][ T8898] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 385.145990][ T8898] ? __fget_files+0x3a6/0x420 [ 385.146028][ T8898] ? __fget_files+0x2a/0x420 [ 385.146059][ T8898] ? bpf_lsm_file_ioctl+0x9/0x20 [ 385.146083][ T8898] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 385.146104][ T8898] __se_sys_ioctl+0xff/0x170 [ 385.146128][ T8898] do_syscall_64+0x14d/0xf80 [ 385.146153][ T8898] ? trace_irq_disable+0x3b/0x150 [ 385.146179][ T8898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.146203][ T8898] ? clear_bhb_loop+0x40/0x90 [ 385.146229][ T8898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.146252][ T8898] RIP: 0033:0x7f00d70ec819 [ 385.146271][ T8898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.146290][ T8898] RSP: 002b:00007f00d533e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.146312][ T8898] RAX: ffffffffffffffda RBX: 00007f00d7365fa0 RCX: 00007f00d70ec819 [ 385.146329][ T8898] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 385.146342][ T8898] RBP: 00007f00d533e090 R08: 0000000000000000 R09: 0000000000000000 [ 385.146356][ T8898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.146368][ T8898] R13: 00007f00d7366038 R14: 00007f00d7365fa0 R15: 00007ffc60e73f38 [ 385.146403][ T8898] [ 385.692692][ T5976] DVB: Unable to find symbol cx22700_attach() [ 385.884476][ T5976] DVB: Unable to find symbol tda10046_attach() [ 385.884493][ T5976] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 385.932133][ T5976] usb 5-1: USB disconnect, device number 25 [ 386.255891][ T8926] ALSA: mixer_oss: invalid OSS volume '' [ 390.038043][ T8956] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 390.338746][ T8963] netlink: 20 bytes leftover after parsing attributes in process `syz.1.943'. [ 390.999074][ T8970] ALSA: mixer_oss: invalid OSS volume '' [ 391.492837][ T8979] sg_write: data in/out 262112/56 bytes for SCSI command 0x0-- guessing data in; [ 391.492837][ T8979] program syz.0.946 not setting count and/or reply_len properly [ 391.911111][ T8987] netlink: 44 bytes leftover after parsing attributes in process `syz.4.948'. [ 391.912050][ T8987] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.913571][ T8987] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.345069][ T8994] FAULT_INJECTION: forcing a failure. [ 392.345069][ T8994] name failslab, interval 1, probability 0, space 0, times 0 [ 392.345109][ T8994] CPU: 1 UID: 0 PID: 8994 Comm: syz.3.953 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 392.345139][ T8994] Tainted: [L]=SOFTLOCKUP [ 392.345146][ T8994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 392.345160][ T8994] Call Trace: [ 392.345169][ T8994] [ 392.345178][ T8994] dump_stack_lvl+0xe8/0x150 [ 392.345219][ T8994] should_fail_ex+0x46b/0x600 [ 392.345268][ T8994] should_failslab+0xa8/0x100 [ 392.345295][ T8994] __kmalloc_node_noprof+0xe7/0x7f0 [ 392.345320][ T8994] ? alloc_slab_obj_exts+0xbf/0x240 [ 392.345360][ T8994] alloc_slab_obj_exts+0xbf/0x240 [ 392.345399][ T8994] __memcg_slab_post_alloc_hook+0x525/0xa20 [ 392.345458][ T8994] kmem_cache_alloc_noprof+0x3f4/0x680 [ 392.345494][ T8994] ? dst_alloc+0x105/0x170 [ 392.345524][ T8994] ? __pfx_ip6_dst_gc+0x10/0x10 [ 392.345561][ T8994] dst_alloc+0x105/0x170 [ 392.345596][ T8994] ip6_pol_route+0xafb/0x13d0 [ 392.345618][ T8994] ? ip6_pol_route+0x160/0x13d0 [ 392.345648][ T8994] ? __pfx_ip6_pol_route+0x10/0x10 [ 392.345678][ T8994] ? __lock_acquire+0x6b5/0x2cf0 [ 392.345705][ T8994] ? __lock_acquire+0x6b5/0x2cf0 [ 392.345733][ T8994] fib6_rule_lookup+0x222/0x730 [ 392.345760][ T8994] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 392.345786][ T8994] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 392.345850][ T8994] ip6_route_output_flags+0x364/0x5d0 [ 392.345875][ T8994] ? ip6_route_output_flags+0x2e/0x5d0 [ 392.345904][ T8994] icmpv6_rt_has_prefsrc+0x4f/0x3e0 [ 392.345939][ T8994] ? icmp6_send+0x228/0x1b50 [ 392.345972][ T8994] icmp6_send+0xe6d/0x1b50 [ 392.346004][ T8994] ? icmp6_send+0x228/0x1b50 [ 392.346060][ T8994] ? __pfx_icmp6_send+0x10/0x10 [ 392.346126][ T8994] ? __ip6_local_out+0x8f8/0x940 [ 392.346166][ T8994] ? __pfx___ip6_local_out+0x10/0x10 [ 392.346208][ T8994] ip6_pkt_drop+0x53d/0x620 [ 392.346248][ T8994] ip6_pkt_discard_out+0xf2/0x120 [ 392.346286][ T8994] ? ip6_send_skb+0x10f/0x390 [ 392.346317][ T8994] ip6_send_skb+0x1d5/0x390 [ 392.346351][ T8994] udp_v6_send_skb+0xc17/0x1860 [ 392.346403][ T8994] udpv6_sendmsg+0x1d3d/0x2560 [ 392.346444][ T8994] ? __pfx_udplite_getfrag+0x10/0x10 [ 392.346479][ T8994] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 392.346513][ T8994] ? __lock_acquire+0x6b5/0x2cf0 [ 392.346537][ T8994] ? smack_socket_sendmsg+0x1a9/0x590 [ 392.346589][ T8994] ? __lock_acquire+0x6b5/0x2cf0 [ 392.346626][ T8994] ? inet_send_prepare+0x5c/0x270 [ 392.346656][ T8994] ? inet6_sendmsg+0xe4/0x120 [ 392.346695][ T8994] ____sys_sendmsg+0x5aa/0x9c0 [ 392.346731][ T8994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.346772][ T8994] ? import_iovec+0x73/0xa0 [ 392.346800][ T8994] ___sys_sendmsg+0x2a5/0x360 [ 392.346836][ T8994] ? __pfx____sys_sendmsg+0x10/0x10 [ 392.346871][ T8994] ? kstrtouint+0x6e/0xe0 [ 392.346939][ T8994] ? __fget_files+0x2a/0x420 [ 392.346967][ T8994] ? __fget_files+0x3a6/0x420 [ 392.347011][ T8994] __sys_sendmmsg+0x282/0x4e0 [ 392.347047][ T8994] ? __pfx___sys_sendmmsg+0x10/0x10 [ 392.347094][ T8994] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 392.347148][ T8994] ? ksys_write+0x248/0x270 [ 392.347185][ T8994] ? __pfx_ksys_write+0x10/0x10 [ 392.347231][ T8994] __x64_sys_sendmmsg+0xa0/0xc0 [ 392.347267][ T8994] do_syscall_64+0x14d/0xf80 [ 392.347292][ T8994] ? trace_irq_disable+0x3b/0x150 [ 392.347319][ T8994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.347343][ T8994] ? clear_bhb_loop+0x40/0x90 [ 392.347373][ T8994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.347396][ T8994] RIP: 0033:0x7ff6df49c819 [ 392.347418][ T8994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.347437][ T8994] RSP: 002b:00007ff6dd6f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 392.347459][ T8994] RAX: ffffffffffffffda RBX: 00007ff6df715fa0 RCX: 00007ff6df49c819 [ 392.347475][ T8994] RDX: 0000000000000002 RSI: 0000200000003a00 RDI: 0000000000000003 [ 392.347489][ T8994] RBP: 00007ff6dd6f6090 R08: 0000000000000000 R09: 0000000000000000 [ 392.347502][ T8994] R10: 0000000020004840 R11: 0000000000000246 R12: 0000000000000001 [ 392.347516][ T8994] R13: 00007ff6df716038 R14: 00007ff6df715fa0 R15: 00007ffd0da68e18 [ 392.347557][ T8994] [ 392.987256][ T9008] netlink: 252 bytes leftover after parsing attributes in process `syz.3.957'. [ 393.008946][ T9009] FAULT_INJECTION: forcing a failure. [ 393.008946][ T9009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.008975][ T9009] CPU: 0 UID: 0 PID: 9009 Comm: syz.2.954 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 393.008997][ T9009] Tainted: [L]=SOFTLOCKUP [ 393.009003][ T9009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 393.009013][ T9009] Call Trace: [ 393.009019][ T9009] [ 393.009025][ T9009] dump_stack_lvl+0xe8/0x150 [ 393.009053][ T9009] should_fail_ex+0x46b/0x600 [ 393.009080][ T9009] _copy_from_user+0x2d/0xb0 [ 393.009096][ T9009] dev_ethtool+0x249/0x1ae0 [ 393.009120][ T9009] ? kasan_quarantine_put+0xbb/0x1f0 [ 393.009146][ T9009] ? __pfx_dev_ethtool+0x10/0x10 [ 393.009175][ T9009] ? dev_load+0x21/0x1f0 [ 393.009200][ T9009] dev_ioctl+0x392/0x1150 [ 393.009227][ T9009] sock_do_ioctl+0x23e/0x320 [ 393.009252][ T9009] ? __pfx_sock_do_ioctl+0x10/0x10 [ 393.009284][ T9009] ? __asan_memset+0x22/0x50 [ 393.009305][ T9009] ? smack_file_ioctl+0x263/0x360 [ 393.009336][ T9009] sock_ioctl+0x5c9/0x7f0 [ 393.009359][ T9009] ? __pfx_sock_ioctl+0x10/0x10 [ 393.009381][ T9009] ? __fget_files+0x2a/0x420 [ 393.009401][ T9009] ? __fget_files+0x3a6/0x420 [ 393.009421][ T9009] ? __fget_files+0x2a/0x420 [ 393.009444][ T9009] ? bpf_lsm_file_ioctl+0x9/0x20 [ 393.009461][ T9009] ? __pfx_sock_ioctl+0x10/0x10 [ 393.009483][ T9009] __se_sys_ioctl+0xff/0x170 [ 393.009501][ T9009] do_syscall_64+0x14d/0xf80 [ 393.009518][ T9009] ? trace_irq_disable+0x3b/0x150 [ 393.009538][ T9009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.009554][ T9009] ? clear_bhb_loop+0x40/0x90 [ 393.009574][ T9009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.009590][ T9009] RIP: 0033:0x7f43a7f4c819 [ 393.009604][ T9009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.009617][ T9009] RSP: 002b:00007f43a61a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.009633][ T9009] RAX: ffffffffffffffda RBX: 00007f43a81c5fa0 RCX: 00007f43a7f4c819 [ 393.009645][ T9009] RDX: 0000200000000540 RSI: 0000000000008946 RDI: 0000000000000004 [ 393.009655][ T9009] RBP: 00007f43a61a6090 R08: 0000000000000000 R09: 0000000000000000 [ 393.009664][ T9009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.009673][ T9009] R13: 00007f43a81c6038 R14: 00007f43a81c5fa0 R15: 00007ffdeb6bf778 [ 393.009697][ T9009] [ 393.198839][ T808] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 393.322774][ T9005] loop5: detected capacity change from 0 to 7 [ 393.377100][ T5799] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 393.378694][ T808] usb 1-1: Using ep0 maxpacket: 8 [ 393.422700][ T808] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 393.422744][ T808] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 393.422760][ T808] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 393.422777][ T808] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 393.422794][ T808] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.422825][ T808] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 393.422841][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.552225][ T9011] netlink: 'syz.4.956': attribute type 1 has an invalid length. [ 393.675308][ T9016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.956'. [ 393.945356][ T808] usb 1-1: usb_control_msg returned -32 [ 393.945417][ T808] usbtmc 1-1:16.0: can't read capabilities [ 394.122672][ T9012] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 394.271108][ T808] usb 1-1: USB disconnect, device number 25 [ 394.295662][ T9016] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 394.415846][ T9023] faux_driver vgem: [drm] Unknown color mode 262325; guessing buffer size. [ 394.531638][ T31] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 394.591041][ T9016] bond1 (unregistering): Released all slaves [ 394.658440][ T9005] Dev loop5: unable to read RDB block 7 [ 394.658681][ T9005] loop5: unable to read partition table [ 394.659049][ T9005] loop5: partition table beyond EOD, truncated [ 394.659181][ T9005] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 394.774571][ T31] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 394.774677][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.774701][ T31] usb 3-1: Product: syz [ 394.774715][ T31] usb 3-1: Manufacturer: syz [ 394.774735][ T31] usb 3-1: SerialNumber: syz [ 394.814822][ T31] usb 3-1: config 0 descriptor?? [ 395.639658][ T31] usb 3-1: Firmware version (0.0) predates our first public release. [ 395.639686][ T31] usb 3-1: Please update to version 0.2 or newer [ 395.861298][ T9037] binder: BINDER_SET_CONTEXT_MGR already set [ 395.861311][ T9037] binder: 9036:9037 ioctl 4018620d 200000001000 returned -16 [ 395.863247][ T9037] binder: 9036:9037 ioctl c0306201 200000000380 returned -14 [ 395.864148][ T9037] trusted_key: encrypted_key: keylen parameter is missing [ 395.936085][ T9039] netlink: 16 bytes leftover after parsing attributes in process `syz.4.963'. [ 395.936200][ T9039] netlink: 16 bytes leftover after parsing attributes in process `syz.4.963'. [ 396.022801][ T31] usb 3-1: USB disconnect, device number 46 [ 400.648658][ T5812] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 400.831682][ T5812] usb 1-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 400.831706][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.953850][ T5812] usb-storage 1-1:32.0: USB Mass Storage device detected [ 400.980659][ T5812] usb-storage 1-1:32.0: Quirks match for vid 057b pid 0000: 1 [ 401.125067][ T5812] usb 1-1: USB disconnect, device number 26 [ 401.840812][ T37] audit: type=1326 audit(1775850322.201:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9089 comm="syz.4.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d70ec819 code=0x7ffc0000 [ 401.840872][ T37] audit: type=1326 audit(1775850322.201:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9089 comm="syz.4.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d70ec819 code=0x7ffc0000 [ 401.840919][ T37] audit: type=1326 audit(1775850322.201:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9089 comm="syz.4.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f00d70ec819 code=0x7ffc0000 [ 401.840963][ T37] audit: type=1326 audit(1775850322.201:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9089 comm="syz.4.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d70ec819 code=0x7ffc0000 [ 401.841020][ T37] audit: type=1326 audit(1775850322.201:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9089 comm="syz.4.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d70ec819 code=0x7ffc0000 [ 401.841065][ T37] audit: type=1326 audit(1775850322.201:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9089 comm="syz.4.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f00d70ec819 code=0x7ffc0000 [ 401.841108][ T37] audit: type=1326 audit(1775850322.201:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9089 comm="syz.4.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d70ec819 code=0x7ffc0000 [ 401.841152][ T37] audit: type=1326 audit(1775850322.201:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9089 comm="syz.4.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d70ec819 code=0x7ffc0000 [ 401.841195][ T37] audit: type=1326 audit(1775850322.201:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9089 comm="syz.4.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f00d70ec819 code=0x7ffc0000 [ 401.841238][ T37] audit: type=1326 audit(1775850322.201:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9089 comm="syz.4.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d70ec819 code=0x7ffc0000 [ 404.283109][ T9107] netlink: 'syz.2.982': attribute type 21 has an invalid length. [ 404.283139][ T9107] IPv6: NLM_F_CREATE should be specified when creating new route [ 404.307882][ T9107] netlink: 44 bytes leftover after parsing attributes in process `syz.2.982'. [ 404.594340][ T9116] XFS (nbd2): SB validate failed with error -5. [ 404.665788][ T5976] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 404.843722][ T5976] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 404.843755][ T5976] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 404.847053][ T5976] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 404.847086][ T5976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.847106][ T5976] usb 1-1: Product: syz [ 404.847121][ T5976] usb 1-1: Manufacturer: syz [ 404.847136][ T5976] usb 1-1: SerialNumber: syz [ 404.914722][ T5976] usb 1-1: config 0 descriptor?? [ 405.147053][ T9129] ptrace attach of "./syz-executor exec"[5798] was attempted by ""[9129] [ 405.457430][ T5976] mos7840 1-1:0.0: required endpoints missing [ 405.570710][ T9127] erspan1: entered allmulticast mode [ 407.001558][ T5976] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 407.208370][ T5976] usb 4-1: Using ep0 maxpacket: 8 [ 407.218145][ T5976] usb 4-1: unable to get BOS descriptor or descriptor too short [ 407.235193][ T5976] usb 4-1: config 8 has an invalid interface number: 122 but max is 3 [ 407.235232][ T5976] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 407.235251][ T5976] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 407.235272][ T5976] usb 4-1: config 8 has no interface number 0 [ 407.235316][ T5976] usb 4-1: config 8 interface 122 altsetting 241 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.235344][ T5976] usb 4-1: config 8 interface 122 has no altsetting 0 [ 407.278770][ T5976] usb 4-1: New USB device found, idVendor=0421, idProduct=0108, bcdDevice=b9.c0 [ 407.278802][ T5976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.278822][ T5976] usb 4-1: Product: syz [ 407.278837][ T5976] usb 4-1: Manufacturer: syz [ 407.278852][ T5976] usb 4-1: SerialNumber: syz [ 407.744020][ T9138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.745638][ T9138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.596273][ T5976] usb 4-1: bad CDC descriptors [ 408.603911][ T5976] usb 4-1: USB disconnect, device number 29 [ 408.896181][ T808] usb 1-1: USB disconnect, device number 27 [ 408.928047][ T9160] vivid-009: kernel_thread() failed [ 409.198633][ T31] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 409.284599][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 409.356338][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 409.356390][ T31] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.356415][ T31] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 409.356443][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 409.356476][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 409.356500][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.427040][ T31] usb 2-1: config 0 descriptor?? [ 409.444766][ T31] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 409.771419][ T5799] Bluetooth: hci3: unexpected event for opcode 0x0411 [ 410.018590][ T808] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 410.087354][ T31] usb 2-1: USB disconnect, device number 40 [ 410.181394][ T808] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 410.181430][ T808] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.181453][ T808] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 410.181480][ T808] usb 4-1: config 0 interface 0 has no altsetting 0 [ 410.181515][ T808] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 410.181538][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.270505][ T808] usb 4-1: config 0 descriptor?? [ 410.692892][ T808] holtek 0003:1241:5015.0007: unknown main item tag 0x0 [ 410.692934][ T808] holtek 0003:1241:5015.0007: unknown main item tag 0x0 [ 410.693021][ T808] holtek 0003:1241:5015.0007: item fetching failed at offset 3/5 [ 410.693807][ T808] holtek 0003:1241:5015.0007: parse failed [ 410.693912][ T808] holtek 0003:1241:5015.0007: probe with driver holtek failed with error -22 [ 410.919991][ T31] usb 4-1: USB disconnect, device number 30 [ 410.981379][ T9212] netlink: 'syz.2.1015': attribute type 55 has an invalid length. [ 411.050656][ T9215] Set syz0 is full, maxelem 0 reached [ 411.362850][ T9223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.278683][ T808] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 412.428652][ T808] usb 4-1: Using ep0 maxpacket: 32 [ 412.431795][ T808] usb 4-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.431834][ T808] usb 4-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 16 [ 412.431861][ T808] usb 4-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 64 [ 412.431886][ T808] usb 4-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 412.431915][ T808] usb 4-1: config 1 interface 0 has no altsetting 0 [ 412.433795][ T808] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 412.433825][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 412.433847][ T808] usb 4-1: SerialNumber: syz [ 412.541181][ T9233] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 412.541381][ T9233] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 412.543882][ T808] hub 4-1:1.0: bad descriptor, ignoring hub [ 412.543921][ T808] hub 4-1:1.0: probe with driver hub failed with error -5 [ 412.544890][ T808] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 412.758120][ T9233] overlayfs: unescaped trailing colons in lowerdir mount option. [ 412.894502][ T808] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 412.968728][ T808] usb 4-1: USB disconnect, device number 31 [ 415.254238][ T9261] FAULT_INJECTION: forcing a failure. [ 415.254238][ T9261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.254281][ T9261] CPU: 0 UID: 0 PID: 9261 Comm: syz.3.1030 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 415.254311][ T9261] Tainted: [L]=SOFTLOCKUP [ 415.254320][ T9261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 415.254334][ T9261] Call Trace: [ 415.254342][ T9261] [ 415.254352][ T9261] dump_stack_lvl+0xe8/0x150 [ 415.254403][ T9261] should_fail_ex+0x46b/0x600 [ 415.254446][ T9261] _copy_from_user+0x2d/0xb0 [ 415.254469][ T9261] vmemdup_user+0x5e/0xd0 [ 415.254500][ T9261] map_lookup_elem+0x3cc/0x9b0 [ 415.254536][ T9261] __sys_bpf+0x513/0x950 [ 415.254567][ T9261] ? __pfx___sys_bpf+0x10/0x10 [ 415.254592][ T9261] ? rt_mutex_slowunlock+0x1cb/0x300 [ 415.254641][ T9261] ? ksys_write+0x248/0x270 [ 415.254678][ T9261] ? __pfx_ksys_write+0x10/0x10 [ 415.254718][ T9261] __x64_sys_bpf+0x7c/0x90 [ 415.254744][ T9261] do_syscall_64+0x14d/0xf80 [ 415.254769][ T9261] ? trace_irq_disable+0x3b/0x150 [ 415.254794][ T9261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.254816][ T9261] ? clear_bhb_loop+0x40/0x90 [ 415.254843][ T9261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.254865][ T9261] RIP: 0033:0x7ff6df49c819 [ 415.254886][ T9261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.254904][ T9261] RSP: 002b:00007ff6dd6d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 415.254927][ T9261] RAX: ffffffffffffffda RBX: 00007ff6df716090 RCX: 00007ff6df49c819 [ 415.254943][ T9261] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000001 [ 415.254957][ T9261] RBP: 00007ff6dd6d5090 R08: 0000000000000000 R09: 0000000000000000 [ 415.254970][ T9261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.254982][ T9261] R13: 00007ff6df716128 R14: 00007ff6df716090 R15: 00007ffd0da68e18 [ 415.255015][ T9261] [ 415.668724][ T7008] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 415.860918][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1031'. [ 415.860941][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1031'. [ 415.898755][ T808] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 416.031888][ T7008] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 416.031916][ T7008] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.031936][ T7008] usb 3-1: config 0 has no interface number 0 [ 416.031975][ T7008] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.031994][ T7008] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.032010][ T7008] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 416.032056][ T7008] usb 3-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 416.032073][ T7008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.038314][ T7008] usb 3-1: config 0 descriptor?? [ 416.058599][ T808] usb 1-1: Using ep0 maxpacket: 32 [ 416.689086][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.689139][ T808] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 416.689164][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.750795][ T808] usb 1-1: config 0 descriptor?? [ 416.782585][ T808] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 417.108627][ T808] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 417.259989][ T808] usb 2-1: Using ep0 maxpacket: 8 [ 417.267419][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.267454][ T808] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 417.267500][ T808] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 417.267524][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.326180][ T808] usb 2-1: config 0 descriptor?? [ 417.379219][ T7008] usbhid 3-1:0.1: can't add hid device: -71 [ 417.379355][ T7008] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 417.397389][ T7008] usb 3-1: USB disconnect, device number 47 [ 417.419981][ T5783] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 417.500390][ T9294] FAULT_INJECTION: forcing a failure. [ 417.500390][ T9294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.500432][ T9294] CPU: 1 UID: 0 PID: 9294 Comm: syz.4.1042 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 417.500462][ T9294] Tainted: [L]=SOFTLOCKUP [ 417.500470][ T9294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 417.500483][ T9294] Call Trace: [ 417.500491][ T9294] [ 417.500501][ T9294] dump_stack_lvl+0xe8/0x150 [ 417.500540][ T9294] should_fail_ex+0x46b/0x600 [ 417.500578][ T9294] _copy_from_user+0x2d/0xb0 [ 417.500602][ T9294] kstrtouint_from_user+0xd6/0x180 [ 417.500636][ T9294] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 417.500675][ T9294] ? proc_loginuid_write+0xf7/0x510 [ 417.500703][ T9294] ? proc_loginuid_write+0xf7/0x510 [ 417.500730][ T9294] proc_loginuid_write+0x3ea/0x510 [ 417.500762][ T9294] ? __pfx_proc_loginuid_write+0x10/0x10 [ 417.500801][ T9294] vfs_writev+0x4c6/0x9a0 [ 417.500830][ T9294] ? __pfx_proc_loginuid_write+0x10/0x10 [ 417.500864][ T9294] ? __pfx_vfs_writev+0x10/0x10 [ 417.500908][ T9294] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 417.500947][ T9294] ? mutex_lock_nested+0x152/0x1d0 [ 417.500978][ T9294] ? fdget_pos+0x252/0x320 [ 417.501026][ T9294] do_writev+0x15a/0x2e0 [ 417.501053][ T9294] ? __pfx_do_writev+0x10/0x10 [ 417.501095][ T9294] do_syscall_64+0x14d/0xf80 [ 417.501121][ T9294] ? trace_irq_disable+0x3b/0x150 [ 417.501148][ T9294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.501171][ T9294] ? clear_bhb_loop+0x40/0x90 [ 417.501197][ T9294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.501219][ T9294] RIP: 0033:0x7f00d70ec819 [ 417.501245][ T9294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.501264][ T9294] RSP: 002b:00007f00d533e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 417.501288][ T9294] RAX: ffffffffffffffda RBX: 00007f00d7365fa0 RCX: 00007f00d70ec819 [ 417.501304][ T9294] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 417.501317][ T9294] RBP: 00007f00d533e090 R08: 0000000000000000 R09: 0000000000000000 [ 417.501330][ T9294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.501342][ T9294] R13: 00007f00d7366038 R14: 00007f00d7365fa0 R15: 00007ffc60e73f38 [ 417.501377][ T9294] [ 417.722267][ T5783] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 417.722448][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.722502][ T5783] usb 4-1: Product: syz [ 417.722547][ T5783] usb 4-1: Manufacturer: syz [ 417.722576][ T5783] usb 4-1: SerialNumber: syz [ 417.775649][ T5783] usb 4-1: config 0 descriptor?? [ 417.793983][ T808] dragonrise 0003:0079:0006.0008: unbalanced collection at end of report description [ 417.795013][ T808] dragonrise 0003:0079:0006.0008: parse failed [ 417.795098][ T808] dragonrise 0003:0079:0006.0008: probe with driver dragonrise failed with error -22 [ 417.980864][ T7008] usb 2-1: USB disconnect, device number 41 [ 418.084008][ T5783] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 418.814735][ T31] usb 1-1: USB disconnect, device number 28 [ 419.709050][ T9314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1041'. [ 420.211762][ T808] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 420.217515][ T5783] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 420.276012][ T5976] usb 4-1: USB disconnect, device number 32 [ 422.248584][ T808] usb 2-1: Using ep0 maxpacket: 32 [ 422.253126][ T808] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 422.253157][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.423864][ T808] usb 2-1: config 0 descriptor?? [ 422.457942][ T808] as10x_usb: device has been detected [ 422.469098][ T808] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 422.511807][ T9326] binder: BINDER_SET_CONTEXT_MGR already set [ 422.511824][ T9326] binder: 9325:9326 ioctl 4018620d 200000004a80 returned -16 [ 422.512800][ T9326] binder: 9325:9326 ioctl c0306201 200000004a40 returned -22 [ 422.745774][ T9323] INFO: trying to register non-static key. [ 422.745792][ T9323] The code is fine but needs lockdep annotation, or maybe [ 422.745802][ T9323] you didn't initialize this object before use? [ 422.745811][ T9323] turning off the locking correctness validator. [ 422.745839][ T9323] CPU: 0 UID: 0 PID: 9323 Comm: syz.1.1054 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 422.745874][ T9323] Tainted: [L]=SOFTLOCKUP [ 422.745882][ T9323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 422.745904][ T9323] Call Trace: [ 422.745912][ T9323] [ 422.745921][ T9323] dump_stack_lvl+0xe8/0x150 [ 422.745960][ T9323] assign_lock_key+0x133/0x150 [ 422.745987][ T9323] register_lock_class+0xcc/0x2e0 [ 422.746010][ T9323] __lock_acquire+0xad/0x2cf0 [ 422.746031][ T9323] ? __lock_acquire+0x6b5/0x2cf0 [ 422.746058][ T9323] ? do_raw_spin_lock+0x12b/0x2f0 [ 422.746093][ T9323] lock_acquire+0xf0/0x2e0 [ 422.746112][ T9323] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 422.746142][ T9323] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 422.746172][ T9323] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 422.746198][ T9323] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 422.746233][ T9323] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 422.746266][ T9323] ? lockdep_hardirqs_on+0x7a/0x110 [ 422.746293][ T9323] as102_dvb_dmx_start_feed+0x70/0x290 [ 422.746323][ T9323] dmx_section_feed_start_filtering+0x518/0x6c0 [ 422.746352][ T9323] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 422.746387][ T9323] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 422.746418][ T9323] dvb_demux_do_ioctl+0x473/0x540 [ 422.746451][ T9323] dvb_usercopy+0x199/0x2e0 [ 422.746480][ T9323] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 422.746511][ T9323] ? __pfx_dvb_usercopy+0x10/0x10 [ 422.746554][ T9323] ? __fget_files+0x3a6/0x420 [ 422.746583][ T9323] ? __fget_files+0x2a/0x420 [ 422.746611][ T9323] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 422.746642][ T9323] dvb_demux_ioctl+0x29/0x40 [ 422.746672][ T9323] __se_sys_ioctl+0xff/0x170 [ 422.746694][ T9323] do_syscall_64+0x14d/0xf80 [ 422.746718][ T9323] ? trace_irq_disable+0x3b/0x150 [ 422.746745][ T9323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.746767][ T9323] ? clear_bhb_loop+0x40/0x90 [ 422.746793][ T9323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.746815][ T9323] RIP: 0033:0x7f86c065c819 [ 422.746834][ T9323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.746854][ T9323] RSP: 002b:00007f86be8b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.746878][ T9323] RAX: ffffffffffffffda RBX: 00007f86c08d5fa0 RCX: 00007f86c065c819 [ 422.746895][ T9323] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 422.746910][ T9323] RBP: 00007f86c06f2c91 R08: 0000000000000000 R09: 0000000000000000 [ 422.746925][ T9323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.746938][ T9323] R13: 00007f86c08d6038 R14: 00007f86c08d5fa0 R15: 00007fff04563978 [ 422.746963][ T9323] [ 422.747114][ C0] BUG: workqueue leaked atomic, lock or RCU: kworker/0:2[808] [ 422.747114][ C0] preempt=0x00000000 lock=10->0 RCU=2->2 workfn=usb_giveback_urb_bh [ 422.747163][ C0] INFO: lockdep is turned off. [ 422.747180][ C0] CPU: 0 UID: 0 PID: 808 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 422.747214][ C0] Tainted: [L]=SOFTLOCKUP [ 422.747223][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 422.747239][ C0] Workqueue: usb_hub_wq hub_event [ 422.747268][ C0] Call Trace: [ 422.747276][ C0] [ 422.747285][ C0] dump_stack_lvl+0xe8/0x150 [ 422.747319][ C0] process_scheduled_works+0x1283/0x18c0 [ 422.747368][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 422.747403][ C0] ? assign_work+0x3d5/0x5e0 [ 422.747435][ C0] bh_worker+0x47e/0x880 [ 422.747476][ C0] tasklet_action+0xc/0x70 [ 422.747508][ C0] handle_softirqs+0x1de/0x6f0 [ 422.747553][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 422.747586][ C0] ? __alloc_skb+0x186/0x7d0 [ 422.747607][ C0] __alloc_skb+0x1aa/0x7d0 [ 422.747632][ C0] alloc_uevent_skb+0x7d/0x230 [ 422.747667][ C0] kobject_uevent_net_broadcast+0x2fd/0x560 [ 422.747705][ C0] kobject_uevent_env+0x55f/0x9e0 [ 422.747742][ C0] device_add+0x557/0xb80 [ 422.747771][ C0] device_create+0x269/0x300 [ 422.747801][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 422.747828][ C0] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 422.747858][ C0] ? __pfx_device_create+0x10/0x10 [ 422.747890][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 422.747917][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 422.747943][ C0] dvb_register_device+0x13df/0x21e0 [ 422.747980][ C0] ? rt_spin_unlock+0x160/0x200 [ 422.748015][ C0] dvb_dmxdev_init+0x2e2/0x440 [ 422.748050][ C0] as102_dvb_register+0x271/0x5b0 [ 422.748082][ C0] as102_usb_probe+0x54d/0x6d0 [ 422.748118][ C0] usb_probe_interface+0x668/0xc90 [ 422.748155][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 422.748186][ C0] really_probe+0x267/0xaf0 [ 422.748222][ C0] __driver_probe_device+0x18c/0x320 [ 422.748255][ C0] driver_probe_device+0x4f/0x240 [ 422.748289][ C0] __device_attach_driver+0x279/0x430 [ 422.748324][ C0] bus_for_each_drv+0x25b/0x2f0 [ 422.748348][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 422.748380][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 422.748403][ C0] ? rt_spin_unlock+0x160/0x200 [ 422.748441][ C0] __device_attach+0x2c8/0x450 [ 422.748475][ C0] ? __pfx___device_attach+0x10/0x10 [ 422.748502][ C0] ? rt_spin_unlock+0x160/0x200 [ 422.748544][ C0] device_initial_probe+0xa1/0xd0 [ 422.748573][ C0] bus_probe_device+0x12d/0x220 [ 422.748594][ C0] ? device_add+0x726/0xb80 [ 422.748618][ C0] device_add+0x7b6/0xb80 [ 422.748644][ C0] usb_set_configuration+0x1a87/0x2110 [ 422.748686][ C0] usb_generic_driver_probe+0x8d/0x150 [ 422.748715][ C0] usb_probe_device+0x1c4/0x3b0 [ 422.748747][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 422.748776][ C0] really_probe+0x267/0xaf0 [ 422.748807][ C0] __driver_probe_device+0x18c/0x320 [ 422.748838][ C0] driver_probe_device+0x4f/0x240 [ 422.748869][ C0] __device_attach_driver+0x279/0x430 [ 422.748900][ C0] bus_for_each_drv+0x25b/0x2f0 [ 422.748924][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 422.748957][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 422.748980][ C0] ? rt_spin_unlock+0x160/0x200 [ 422.749018][ C0] __device_attach+0x2c8/0x450 [ 422.749049][ C0] ? __pfx___device_attach+0x10/0x10 [ 422.749078][ C0] ? rt_spin_unlock+0x160/0x200 [ 422.749115][ C0] device_initial_probe+0xa1/0xd0 [ 422.749146][ C0] bus_probe_device+0x12d/0x220 [ 422.749168][ C0] ? device_add+0x726/0xb80 [ 422.749195][ C0] device_add+0x7b6/0xb80 [ 422.749224][ C0] usb_new_device+0x9f8/0x16e0 [ 422.749253][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 422.749282][ C0] hub_event+0x2a49/0x4f60 [ 422.749334][ C0] ? __pfx_hub_event+0x10/0x10 [ 422.749366][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 422.749398][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 422.749430][ C0] process_scheduled_works+0xb6e/0x18c0 [ 422.749478][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 422.749512][ C0] ? assign_work+0x3d5/0x5e0 [ 422.749554][ C0] worker_thread+0xa53/0xfc0 [ 422.749598][ C0] kthread+0x388/0x470 [ 422.749623][ C0] ? __pfx_worker_thread+0x10/0x10 [ 422.749654][ C0] ? __pfx_kthread+0x10/0x10 [ 422.749678][ C0] ret_from_fork+0x51e/0xb90 [ 422.749712][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 422.749743][ C0] ? __switch_to+0xc7d/0x1450 [ 422.749771][ C0] ? __pfx_kthread+0x10/0x10 [ 422.749795][ C0] ret_from_fork_asm+0x1a/0x30 [ 422.749824][ C0] [ 422.772733][ T808] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 422.900790][ T808] as10x_usb: error during firmware upload part1 [ 422.901869][ T808] Registered device nBox DVB-T Dongle [ 423.040705][ T808] usb 2-1: USB disconnect, device number 42 [ 423.216366][ T808] Unregistered device nBox DVB-T Dongle [ 423.267907][ T808] as10x_usb: device has been disconnected [ 423.797354][ T9341] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1056'. [ 423.810709][ T9341] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 423.811018][ T9341] bridge2: entered promiscuous mode