last executing test programs: 5m20.777056124s ago: executing program 3 (id=4): syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 5m19.849703739s ago: executing program 3 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(0x0, 0x2) 5m19.039129869s ago: executing program 3 (id=22): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 5m17.461738648s ago: executing program 3 (id=33): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}, 0xfffff771}], 0x1, 0x40000121, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000002180)={&(0x7f0000000100)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000021c0)={0x0}, 0x7, 0x0, 0x0, 0x200040c6}, 0x0) 5m17.169985429s ago: executing program 32 (id=33): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}, 0xfffff771}], 0x1, 0x40000121, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000002180)={&(0x7f0000000100)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000021c0)={0x0}, 0x7, 0x0, 0x0, 0x200040c6}, 0x0) 5m3.36379243s ago: executing program 2 (id=147): socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x5, 0x0, 0xffffffc, 0x1, 0x0, 0xfffffffffffffffa}, &(0x7f0000000000)={0x18, 0x8, 0x1ff, 0x0, 0x7ff, 0x400000, 0x0, 0x92}, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r1, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 5m2.183118177s ago: executing program 2 (id=154): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 5m1.963627684s ago: executing program 2 (id=155): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracefs_dir/trace_marker\x00', 0x1, 0x0) write$UHID_INPUT(r0, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) 5m1.615670657s ago: executing program 2 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x2) 5m1.511569622s ago: executing program 0 (id=159): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='*:m', 0x3) 5m1.310887071s ago: executing program 0 (id=161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01032cbd7000ffdbdf2500000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x24008080) 5m1.267823072s ago: executing program 2 (id=162): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 5m1.116410824s ago: executing program 0 (id=164): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 5m0.30527837s ago: executing program 2 (id=167): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x80007, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", 'i}oz', "ffca69dbc7b44302"}, 0x28) recvmsg(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x20) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/157, 0x9d}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @private1, 0x7}, 0x1c) shutdown(r0, 0x0) 4m59.729030495s ago: executing program 33 (id=167): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x80007, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", 'i}oz', "ffca69dbc7b44302"}, 0x28) recvmsg(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x20) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/157, 0x9d}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @private1, 0x7}, 0x1c) shutdown(r0, 0x0) 4m59.708296759s ago: executing program 0 (id=169): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x2) 4m59.40354877s ago: executing program 0 (id=172): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0xff, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @loopback, @remote}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'sit0\x00', 0x0}) 4m58.279051568s ago: executing program 0 (id=175): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone3(&(0x7f0000000280)={0xe3482f32123871ed, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m57.954617639s ago: executing program 34 (id=175): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone3(&(0x7f0000000280)={0xe3482f32123871ed, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m44.783125029s ago: executing program 1 (id=222): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0xfffffffffffffffe) 4m44.571738956s ago: executing program 1 (id=225): r0 = timerfd_create(0x8, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) 4m44.497586887s ago: executing program 1 (id=227): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xc, 0x4) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x730) 4m43.483038149s ago: executing program 1 (id=236): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x2) 4m43.240627244s ago: executing program 1 (id=237): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) pread64(r0, &(0x7f0000000180)=""/79, 0xfffffe69, 0x1) 4m42.119357292s ago: executing program 1 (id=247): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) 4m41.863318558s ago: executing program 35 (id=247): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) 3m17.547692881s ago: executing program 4 (id=685): r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x100000000000000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x108b, 0x4, 0x4, 0x80, 'syz0\x00', 0x40000007}, 0x2, 0x0, 0x82, 0x0, 0x0, 0x8, 'syz0\x00', 0x0}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000540)=0x7b1) 3m17.35899007s ago: executing program 5 (id=687): r0 = syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) preadv(r0, &(0x7f0000000a40)=[{&(0x7f0000000780)=""/156, 0x9c}], 0x1, 0x8, 0xe4c) 3m17.313896823s ago: executing program 5 (id=688): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8970, &(0x7f0000000180)={'bridge0\x00', @ifru_hwaddr=@local}) clock_gettime(0x0, &(0x7f0000002100)) recvmmsg(r1, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1}, 0x9}, {{&(0x7f0000000780)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000ac0)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x8}], 0x3, 0x122, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000003c0)) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20014080}, 0x11) r3 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000140)={0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0xd7a10da4a7122766, 0x0) pwrite64(r5, 0x0, 0x0, 0x9000) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000980)=ANY=[@ANYBLOB="200c8000000074d1b7f6f1cb6c0e8012b64acc26562295b32098d3dafd578f5d7d5bf68916090000006bc51068d6a13b68bdfe34e2e4c664704751bc7ae21b0105ae65ab53dfbc32f88f31b3513ea20e45f4a27a343e4eab27dd2ddbd7dcefbc7499cbda9e0b831bbdb377e34e12072b23e137a186ea6f24f301254ec1c0b4a2c376060f4ef006509a4e397f62751835085683938dad48196f68db2325250eeed539dab43f725529af15f16fe096e3028d043fbf4f5e2c2a634763e983959312a91d7c9ee1a082728f384bf7b67dbbdfd809ac86ecbbcb72028bf613bdc811274707af167fc2"], &(0x7f0000000480)={0x0, 0xa, 0x1, 0xd0}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0x963, 0xb16, 0x54a, 0x9, 0x7, 0x1, 0x0, 0x10000, 0xe738, 0x2, 0x3}}, &(0x7f0000000540)={0x20, 0x85, 0x4, 0x9772}, &(0x7f0000000580)={0x20, 0x83, 0x2}, &(0x7f00000005c0)={0x20, 0x87, 0x2, 0x401}, &(0x7f0000000600)={0x20, 0x89, 0x2}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20004014) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) 3m16.892116462s ago: executing program 4 (id=691): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)={0x40, 0x17, 0x72, "30b4e2a49f16f591e8df5a5fab311c8eda67763595a2bc5d0f57493c2c08f88f540a97155d73faff1f26752394138f1beee8cd3cd7dbb3c9470d17e559eff6eb1a1bc7bccc21d6f3ab389d927aa1b6d3fd53d4229b5cf29c361ce1846f502a3633b343897b150815c78b119df7f14fc53106"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m14.100596631s ago: executing program 5 (id=700): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000010280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRESOCT, @ANYBLOB="a03a715ef8352316f95258622f77c7523a267d76a0a19dc99d45e9ac941f07141b9a3478056ad7be05"], 0x34}}, 0x8004) accept4(r5, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r5) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x0, 0x8}, &(0x7f0000000300)={0x0, 0x2710}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280), 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/netfilter\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(&(0x7f000000cffc)=0x100, 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002bbd706554b3552509000000080001007063690011000200303030303a30303a31302e300000000008000300020000000800090006000000"], 0x40}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000040) lseek(r6, 0x6, 0x3) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$NL80211_CMD_SET_STATION(r9, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, r10, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4048004) 3m13.827431276s ago: executing program 4 (id=702): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0xdddd0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x2000, 0x0, 0x1f) 3m12.656055228s ago: executing program 4 (id=707): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x2) 3m12.383981288s ago: executing program 4 (id=708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r1, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 3m9.064372656s ago: executing program 5 (id=711): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x2) (fail_nth: 1) 3m8.746279235s ago: executing program 5 (id=712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000000300000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8d4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 3m8.713008084s ago: executing program 4 (id=713): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x101, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f000001a400)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x8, 0x2, 0x1, {0x0, 0x0, 0xffffffffffffffff, 0xbb}}) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r4) fcntl$setstatus(r4, 0x4, 0x2c00) r5 = gettid() fcntl$setown(r4, 0x8, r5) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffff6d, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, r5, 0x0, 0xb8}}}, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x2) 3m8.458946s ago: executing program 36 (id=713): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x101, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f000001a400)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x8, 0x2, 0x1, {0x0, 0x0, 0xffffffffffffffff, 0xbb}}) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r4) fcntl$setstatus(r4, 0x4, 0x2c00) r5 = gettid() fcntl$setown(r4, 0x8, r5) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffff6d, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, r5, 0x0, 0xb8}}}, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x2) 3m7.487256795s ago: executing program 5 (id=716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110037f1ce808"], 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f000000a580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x24, 0xe, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}}, 0x24040840) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904"], 0x0) 3m7.081314391s ago: executing program 37 (id=716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110037f1ce808"], 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f000000a580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x24, 0xe, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}}, 0x24040840) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904"], 0x0) 1m53.433037553s ago: executing program 7 (id=974): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f0000000240)=0x0) syz_ublk_setup_io_uring(0x1e, &(0x7f0000002900)={0x0, 0xd58e, 0x10, 0x20002, 0x185}, &(0x7f0000000100)=0x0, &(0x7f0000000040), &(0x7f0000000180)) syz_io_uring_submit(r3, r1, r2, &(0x7f0000000440)=@IORING_OP_ACCEPT={0xd, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xffffffff}}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r4, 0x0) accept4$x25(r4, 0x0, 0x0, 0x80000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x6bd3}, 0x1c) syz_ublk_add_dev(r0, r3, r1, r2, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 1m52.585861078s ago: executing program 7 (id=976): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000240)={0x14, 0x0, 0x1, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80d0}, 0x20040000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0a0000f80180c2000002527bcee565f486dd6d000000000c11"], 0x46) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none, 0x7ff, 0x1}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={r4, r4, 0x108, 0x0, 0x0, 0x7, 0xeb, 0x7, 0x0, 0x3, 0x3, 0x133e, 'syz0\x00'}) 1m52.133710937s ago: executing program 7 (id=978): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x28) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="0b59e5115a45e8605d20607e07f1d53c", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="de953f350ed0c6b1686ee60c6639c824", 0x10) close_range(r1, r0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000100)=@riscv64_csr={0x8030000000300002, &(0x7f00000000c0)=0xe}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000280)={r2, &(0x7f0000000180)='}-@^{\x85\x00', 0x400, &(0x7f00000001c0)={@align=0x8, {0x1ff, 0x10, 0x3ff, 0xf}}, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0xc639}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f00000002c0)={0x2, {0xffff8000, 0x4, 0x8000, 0x3, 0x9, 0xf95}}) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x2) write$uinput_user_dev(r3, &(0x7f0000000300)={'syz1\x00', {0x4, 0x1, 0x6, 0x6}, 0xc, [0xa8, 0x578, 0x4, 0x4, 0x4, 0x4804000, 0x5, 0x80000000, 0x800, 0xa, 0x3, 0x6, 0x9, 0x0, 0x5, 0xb, 0x5, 0x0, 0x8, 0x9, 0xfffffff2, 0x8, 0x2, 0x10000, 0xfff, 0xf, 0xfff, 0x2, 0x3, 0x7fdac3c3, 0x2f07, 0x2, 0x0, 0x2e3, 0x8ef4, 0x4, 0x2, 0x10, 0x20, 0x80, 0xf98, 0x7, 0x6, 0x5, 0x156, 0xf47, 0xd, 0x80000000, 0xa7, 0x5, 0x101, 0x7f, 0x7f, 0x9, 0x40, 0x5, 0x8, 0x1, 0x0, 0x95, 0xd, 0x1, 0x4, 0x8], [0xf, 0x0, 0x10000, 0x2, 0x3ff, 0x6, 0xed, 0x8, 0x2be, 0xd8ef, 0x9, 0x6f39, 0x6, 0x9, 0x7, 0x7, 0x4, 0x5, 0x9, 0x0, 0x2, 0x6, 0x10001, 0x764c, 0x158, 0x57, 0x2, 0x200, 0x2, 0x1, 0x5, 0x5, 0x8c, 0x5, 0x8000, 0x3d58, 0x10000, 0x401, 0xffffffff, 0x8, 0x3, 0x8, 0x9, 0x8, 0xc0000000, 0x7fffffff, 0x9, 0xe00f, 0x7ff, 0x9, 0xd, 0xa4, 0xfffff000, 0x10, 0x4, 0xb8, 0x2, 0x2, 0x2, 0xfd57, 0x12fea5dc, 0x3, 0xb, 0x8], [0x4, 0x2b2, 0x7fffffff, 0x3, 0x3, 0xffffff7d, 0x5, 0x9, 0x4547, 0x40, 0x67, 0x8, 0x27, 0x3, 0xf, 0x2, 0x5, 0x1, 0x1, 0x8001, 0x1, 0x1, 0xc, 0x6, 0x3, 0x7, 0x2, 0x80, 0xfffffffe, 0x1, 0xdd5, 0x5, 0x101, 0x7ff, 0x3, 0xf8de, 0x1, 0x1, 0xb5, 0x3, 0x9, 0x4, 0x8, 0x6, 0x69a1, 0x32b, 0x7, 0x8000, 0x7, 0x7, 0xb, 0x6, 0x82, 0x1, 0xffff, 0x7fff, 0xfffffff9, 0x10, 0x8, 0x6, 0x3, 0x7, 0x1, 0xffffffff], [0x7, 0x3, 0x9, 0x4, 0x2, 0x400, 0xd6, 0xfffffffb, 0xd3f, 0x7fff, 0x5, 0x2d, 0x4, 0x1, 0x0, 0x1, 0x5, 0x5, 0x4, 0x7, 0x7, 0xb44, 0x16d8, 0x43, 0x80, 0x8, 0x9, 0xfffff800, 0x5, 0x8000, 0x6, 0xd, 0xffffffb9, 0x1, 0x1, 0x2, 0x4, 0x7ff, 0x9, 0x7, 0x3, 0x10001, 0xde, 0x4, 0x7, 0xb3, 0x7, 0x101, 0x3ff, 0x7, 0x0, 0x6, 0x8, 0x1, 0x1, 0xad80, 0x3, 0x9, 0x1, 0x3, 0x2, 0x0, 0xfffffffa, 0x80000000]}, 0x45c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x71180, 0x2) r5 = syz_socket_connect_nvme_tcp() ioctl$OCFS2_IOC_REFLINK(r5, 0x40186f04, &(0x7f0000000840)={&(0x7f00000007c0)='nl80211\x00', &(0x7f0000000800)='syz1\x00', 0x6}) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000880)={{0x100, 0x8001, 0xff, 0xffff}, 'syz1\x00', 0xd}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000900)={{0x7, 0x1, 0x2, 0xb01, 'syz1\x00', 0x9}, 0x0, [0x2, 0x0, 0x7, 0x7fff, 0xbcf, 0x80000000, 0xc6d9, 0x1ff, 0x8000000000000001, 0x7f, 0x6, 0x5, 0x10000, 0x8, 0x69, 0x9, 0x0, 0x7, 0x0, 0xe, 0x1, 0x6, 0x8, 0xb0, 0x40, 0x4, 0x2, 0xff7, 0xc2dc, 0x1, 0x8, 0x0, 0xffffffffffffffc0, 0x8, 0x8000000000000000, 0x8000000000000001, 0x6, 0x0, 0x1, 0x0, 0x80000000, 0x48, 0xff, 0x5, 0x1000, 0x9, 0x0, 0x4, 0x4, 0x0, 0x9, 0x80000000, 0x43b, 0x100000001, 0x46e, 0x0, 0x1000, 0x1, 0x1, 0x4, 0x5, 0xfffffffffffffffc, 0x9, 0x9, 0x2, 0xffffffffffffffff, 0x0, 0x7, 0x6, 0x1, 0x10000, 0x100, 0x8000000000000001, 0xf5, 0x6, 0x3038, 0xa881, 0x2393, 0x8, 0x6, 0x9d, 0x8, 0x7, 0x8, 0x9e25, 0xffffffff, 0x1c1, 0xe, 0x24a49511, 0x10, 0x10001, 0x5, 0x7, 0x6b4, 0xfffffffffffffff9, 0x4, 0x10, 0x0, 0x100, 0x9, 0x4, 0x17e, 0x72, 0x100000001, 0x0, 0x7, 0x7, 0x2, 0x4, 0x213, 0x6, 0x2, 0x8b, 0x100, 0x3, 0xb, 0x7fffffff, 0xb, 0x100, 0x9, 0x8, 0x800, 0x8, 0xcdd4, 0xb, 0x2, 0xace, 0xc]}) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000e00)={0x80000000, 0x5}) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000000e40)={0x3, 0x100, 0x42d, 0x8, 0x8, 0x1790}) preadv2(r4, &(0x7f0000001140)=[{&(0x7f0000000e80)=""/213, 0xd5}, {&(0x7f0000000f80)=""/229, 0xe5}, {&(0x7f0000001080)=""/153, 0x99}], 0x3, 0xe2, 0x7, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r4, 0x40809440, &(0x7f0000004500)={&(0x7f0000004480)=[{&(0x7f0000001180)="f279063a9146808c3a1b7dc074c8cbdd55618d69a57be1759bb21a296476b67cf8055ae8d7babc5ccd094c7117fd11219ac98197924c3f31e126331ec172996229385a68602036ad0b5e6bbbbea310fc03d3999fbd6c47a618e480a0a7114f8a5f8de1b62debb4d30ead0f43a4999e6ac19b31a8cf8dcc44a80b0ab63544ba2e666d8e3825f204535747c2cde1a1d164952748c68b07dc6f0b3456a4c857731031333c18d3", 0xa5}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000002240)="3856c5d4ff92c288615f28589571f3cfa765b740f0c5ca5c2177d8ed697a5d4fe7db11601685b1a20c43937d07ba87c88d091abf1266bb20d9e77ccfc6db729876bbf17e30e0342ef9f4e4cfe6c1c310dda28af0d103d378a06311b398827c1b4773ae003e4b8beba3048509e1f6e13624ebb11846378c9de8cc0bcd9422193d4cf0ef69d57d8263cfcef4ed4ec569fa3e0221920d2169f7528066e8eac6fe2788", 0xa1}, {&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000003300)="0971f59cbb9a18db16c3e5b6c0451eefe1d44bf7c002093c7aa626baf791b0bfd19d85a3b7b5b3321ec7b5b1a52e16b5a6ede548d71699654ead5a93e4d96acdad8e9cdd2c85bb6762bf551e61225ea6938ac9f1b6455c5462254607995f24cf41213bf13bd9651c791e5b82866b26fe6149d40b", 0x74}, {&(0x7f0000003380)="01c1eaf2ed3be88f2d7f8ae3ac64bd54a4e5ce1ffb0cc51db6fe4594a3460b7c395fd0f20b86a809fa732b273dd3079012d9417cc4c7e9fe08b5bf1b910ceca33356c8c7dd93e45a92b7ab4422691cb5", 0x50}, {&(0x7f0000003400)="b77de915378794b72a5f37a6ebe0d40e813c927c59fadec54d21a8c99cb6c2a272459a9fb891165a2f5900d78a15441af2c2e7674d3bb8e0be09f8a4f8b0decbd2daaacc62478f08e368d89fd4836b14468a2b1a58c007c06e", 0x59}, {&(0x7f0000003480)="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", 0x1000}], 0x8, 0x6, 0x0, 0x81, 0x1, 0x7fffffff, 0x1, 0x3}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000004580)="ee9665f263c0a1e41ed7d4d36f82a73d", 0x10) close_range(r0, r3, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000045c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$hwpt(r5, 0x3b80, &(0x7f0000004640)={0x8, r6}) close_range(r2, r1, 0x2) ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000004680)) r7 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000046c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xc, 0x4b3, 0x3100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x90, 0x80, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x3, 0x30, 0x1, {0x22, 0x2f6}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2c, 0x4, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x5, 0x3, 0x8}}]}}}]}}]}}, &(0x7f00000047c0)={0xa, &(0x7f0000004700)={0xa, 0x6, 0x300, 0xa, 0x7e, 0x92, 0x8, 0x3}, 0x26, &(0x7f0000004740)={0x5, 0xf, 0x26, 0x2, [@generic={0x17, 0x10, 0x1, "fb95fda8b0b0a981246f7731050015d39f40c94f"}, @ss_cap={0xa, 0x10, 0x3, 0xa58ef32e22f3238c, 0x2, 0x9f, 0x0, 0x4}]}, 0x1, [{0x2b, &(0x7f0000004780)=@string={0x2b, 0x3, "99ec5e8b11f3202b2d5faf5f91bd456c094173b010babdffbc6de2e27a6232445006cda24e7edc925d"}}]}) syz_usb_control_io$hid(r7, &(0x7f0000004900)={0x24, &(0x7f0000004800)={0x0, 0xb, 0x37, {0x37, 0x21, "851ac4ce063dadc6b7fdb548ea71dcd4718b50c8af9caa1485b92524b71d94c0878fa9f291f1b924f0d3a2c407f640cf34f57ce9e7"}}, &(0x7f0000004840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}, &(0x7f0000004880)={0x0, 0x22, 0x8, {[@local=@item_4={0x3, 0x2, 0xa, "98cb205a"}, @local=@item_012={0x2, 0x2, 0x0, 'pK'}]}}, &(0x7f00000048c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x10, 0x0, 0x1, {0x22, 0xdbc}}}}, &(0x7f0000004b00)={0x2c, &(0x7f0000004940)={0x0, 0xb, 0x9, "75e6292f4168de8b62"}, &(0x7f0000004980)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000049c0)={0x0, 0x8, 0x1, 0x13}, &(0x7f0000004a00)={0x20, 0x1, 0x85, "49d5bd7ef324bed3cbb4babeaec16ef4fe8990f3c6dcf4967bc603016b33efa00287cfebb3ab72213b6cd7ec04cc2fd84a411ec1c17709b2f2dfe86da7b7628092a953e814618e40e3e31a1521b1500b52470699ad77d1876c738be94ab7fa2dd9f4057fde796106e90360e26d366adebb6dce6512be1980aaf117ad1bc09d3d4e38be640c"}, &(0x7f0000004ac0)={0x20, 0x3, 0x1, 0x3}}) 1m51.851298049s ago: executing program 6 (id=981): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)={0x40, 0x17, 0x8, "30b4e2a49f16f591"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m48.983278758s ago: executing program 7 (id=984): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x2) 1m48.830035892s ago: executing program 7 (id=986): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c80012000e0001000204"], 0x17) r0 = socket$kcm(0x29, 0x4, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x9, 0x4) 1m48.759195028s ago: executing program 6 (id=987): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000800206010800000000000000000000fffd14000780080012400000000605001500480000000500010006000000050005000a0002000500040000000000db355f8573697a3000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4054}, 0x20000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d080)={0x2c, 0x41, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1m48.580165614s ago: executing program 6 (id=988): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000191d", @ANYRESHEX=r2, @ANYBLOB="010027bd7000fcdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff00000800118004000300"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4048004) 1m48.532047442s ago: executing program 6 (id=989): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x2) (fail_nth: 2) 1m48.435307936s ago: executing program 6 (id=990): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f00000001c0)=0x1e) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) ioctl$KVM_SET_SREGS2(r1, 0x4140aecd, &(0x7f0000000080)={{0xb000, 0xfec00000, 0xb, 0x80, 0x7, 0x6, 0x7, 0x5a, 0x8, 0xf, 0x1}, {0x26000, 0x8026000, 0x9, 0x1, 0xed, 0xf, 0x4, 0x80, 0x80, 0x0, 0x9, 0xf7}, {0x4, 0xdddd1000, 0xc, 0x7, 0x44, 0xf8, 0x8, 0x98, 0x6, 0x9, 0x2, 0x3}, {0x80a0000, 0x8000000, 0x0, 0x10, 0x0, 0x5, 0xd, 0xa8, 0xd2, 0x8, 0x0, 0x6}, {0x3000, 0x30000, 0xd, 0x9, 0x2, 0x4, 0x5, 0x2, 0x6, 0x9, 0x80, 0x5}, {0x7000, 0xe000, 0x0, 0x40, 0x4, 0x0, 0x0, 0x24, 0x0, 0xff, 0x7, 0x6}, {0x8080000, 0x4000, 0x9, 0x6, 0x9, 0x0, 0x7f, 0x0, 0x5, 0x0, 0xb, 0x1}, {0xeeef0000, 0x50000, 0xb, 0xc, 0x0, 0x6, 0x7, 0x94, 0x0, 0xc5, 0x4, 0x4}, {0x58000, 0xfc}, {0x40000}, 0x70000, 0x0, 0x6000, 0x200000, 0x3, 0x2000, 0xdddd1000, 0x1, [0x8000000000000001, 0x8]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a700000000000905", @ANYRES32], 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a700000000000905", @ANYRES32], 0x0) 1m47.843295533s ago: executing program 7 (id=993): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi0\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'s526\x00', [0x140, 0x8, 0xffffffd3, 0x2, 0x10010007, 0x7, 0x8002, 0x8000, 0xac, 0xc72d, 0x0, 0x6, 0x3, 0xa, 0x29, 0x72ef, 0x101, 0x6, 0x6, 0x9, 0x24, 0x6, 0xa2d8, 0x9, 0x1000, 0x8, 0x2, 0xffffff7f, 0x383, 0x8001, 0x4]}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) writev(r3, &(0x7f0000000400)=[{&(0x7f00000001c0)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}], 0x1) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8001}]}, 0x1c}}, 0x4040041) 1m47.535323266s ago: executing program 38 (id=993): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi0\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'s526\x00', [0x140, 0x8, 0xffffffd3, 0x2, 0x10010007, 0x7, 0x8002, 0x8000, 0xac, 0xc72d, 0x0, 0x6, 0x3, 0xa, 0x29, 0x72ef, 0x101, 0x6, 0x6, 0x9, 0x24, 0x6, 0xa2d8, 0x9, 0x1000, 0x8, 0x2, 0xffffff7f, 0x383, 0x8001, 0x4]}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) writev(r3, &(0x7f0000000400)=[{&(0x7f00000001c0)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}], 0x1) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8001}]}, 0x1c}}, 0x4040041) 1m46.877485828s ago: executing program 6 (id=998): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b2388", @ANYRES16=0x0, @ANYRES32=r2], 0xffdd) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = syz_open_dev$sndpcmc(0x0, 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1abe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000080)=0x2, 0x2) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m46.595169947s ago: executing program 39 (id=998): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b2388", @ANYRES16=0x0, @ANYRES32=r2], 0xffdd) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = syz_open_dev$sndpcmc(0x0, 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1abe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000080)=0x2, 0x2) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m45.572845506s ago: executing program 8 (id=1003): setns(0xc9, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000140)=0x800) 1m45.339631694s ago: executing program 8 (id=1004): setns(0xc9, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000140)=0x800) (fail_nth: 2) 1m45.107246439s ago: executing program 8 (id=1005): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_dev$loop(&(0x7f0000000100), 0x10, 0x1ac902) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x7d, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x1aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) (async) recvmsg(r1, &(0x7f0000001bc0)={0x0, 0x0, 0x0}, 0x40) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000040)=@ethtool_sset_info={0x51}}) (async) r8 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1m44.807035914s ago: executing program 8 (id=1007): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracefs_dir/trace_marker\x00', 0x1, 0x0) write$UHID_INPUT(r0, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) 1m44.805515095s ago: executing program 8 (id=1008): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)={0x40, 0x17, 0x8, "30b4e2a49f16f591"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m43.294779359s ago: executing program 8 (id=1012): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x9) openat(r1, &(0x7f0000000200)='.\x00', 0x26d00, 0x11) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000500000008000200", @ANYRESDEC=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x200040c4) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r8 = mmap$IORING_OFF_PBUF_RING(0x0, 0x1, 0x0, 0x10, 0xffffffffffffffff, 0x87ed0873) r9 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xda39, 0x10, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000080)=@IORING_OP_SOCKET={0x2d, 0x5, 0x0, 0x6, 0x8, 0x0, 0x3, 0x0, 0x1, {0x0, 0x0, 0x1}}) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da"], 0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f00000003c0)={0x2e, 0x69, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x3, 0xb15, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) syz_io_uring_submit(r4, r8, r12, &(0x7f0000000400)=@IORING_OP_MADVISE={0x19, 0xc, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x1}) r13 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$sock(r13, &(0x7f0000000500)=[{{&(0x7f0000000240)=@hci={0x1f, 0x4, 0x2}, 0x80, 0x0}}], 0x1, 0x0) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r15 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) ioctl$DRM_IOCTL_WAIT_VBLANK(r15, 0xc018643a, &(0x7f00000000c0)={0x0, 0x400, 0x6}) bind$bt_hci(r14, &(0x7f0000000040), 0x6) r16 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r17 = socket(0x1d, 0x2, 0x6) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x94) bind$can_j1939(r17, &(0x7f0000000100)={0x1d, 0x0, 0x8002, {0x2, 0x0, 0x3}, 0x1}, 0x18) r18 = fcntl$dupfd(r16, 0x0, r16) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000000700)={0x0, 0x4c, 0x5, 0x7, 0xfba00000}) ioctl$USBDEVFS_SUBMITURB(r18, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$KVM_SET_SREGS2(r18, 0x4140aecd, &(0x7f00000002c0)={{0x70000, 0xa000, 0x10, 0x5, 0x80, 0x9, 0x7, 0xfe, 0x71, 0xf0, 0x7, 0x1}, {0x70000, 0xd000, 0x9, 0xe3, 0x7, 0x6, 0x6, 0x3, 0x3, 0x2, 0xa7, 0x84}, {0x80a0000, 0x10000, 0xc, 0x5, 0x1, 0x1, 0x9, 0x0, 0xff, 0x69, 0x0, 0x3}, {0x6000, 0xeeee8000, 0xe, 0x2, 0x7, 0x8, 0x3, 0x4, 0xc, 0x4, 0x47, 0x13}, {0xd000, 0x26000, 0xd, 0x15, 0x9a, 0xa6, 0xf1, 0xd, 0x7, 0x1, 0x4, 0x9}, {0x5000, 0x80a0000, 0xf, 0x7, 0x8, 0xc, 0x4, 0x0, 0x8, 0xf, 0x6, 0x4}, {0xf000, 0x60000, 0x3, 0x0, 0x9, 0xfb, 0x4, 0x4, 0x6, 0x4, 0x1, 0x1}, {0x0, 0xeeef0000, 0x8, 0xd, 0x8, 0x40, 0x8, 0x5, 0x8, 0x8e, 0x3, 0xfb}, {0x9000, 0x7ff}, {0xdddd1000, 0xfffe}, 0x10, 0x0, 0xf000, 0x60, 0x7, 0x0, 0x40000, 0x1, [0x100000001, 0x3000, 0x0, 0x1ff]}) ioctl$sock_bt_hci(r14, 0x400448e6, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r2) 1m37.203710925s ago: executing program 9 (id=1023): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xc, 0x4) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x730) 1m36.139253808s ago: executing program 9 (id=1024): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) (fail_nth: 2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xc, 0x4) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x730) 1m35.186295031s ago: executing program 9 (id=1025): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b0e080300000025bd7000fedbdf2504386a8553c62e9ccc35f71669d5db000000000000000f0000000000000001"], 0x30}}, 0x4004081) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/comedi4\x00', 0x2, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000980)={0x20, 0x15, 0x4, "091643b9"}, 0x0, 0x0, 0x0, 0x0}) ioctl$COMEDI_BUFINFO(r3, 0xc02c640e, &(0x7f0000002700)={0x2, 0x3, 0x6, 0x1, 0x10001, 0x7a4dc3bd, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x23d1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r2, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c444}, 0x44) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000400)=0x8) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r7, &(0x7f00000002c0)="b0677b1ae7790ccc168ee502a2a92b3b66eba79b54d361b38169", 0x1a) r8 = socket$kcm(0x10, 0x2, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x1402, 0x8, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40001}, 0x8080) 1m33.093990104s ago: executing program 9 (id=1026): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81}}, './file0\x00'}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100"/79, 0x4f) 1m32.985359963s ago: executing program 9 (id=1027): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, 0x0, 0x0) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 1m32.565793326s ago: executing program 9 (id=1028): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='*:', 0x2) 0s ago: executing program 40 (id=1012): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x9) openat(r1, &(0x7f0000000200)='.\x00', 0x26d00, 0x11) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000500000008000200", @ANYRESDEC=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x200040c4) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r8 = mmap$IORING_OFF_PBUF_RING(0x0, 0x1, 0x0, 0x10, 0xffffffffffffffff, 0x87ed0873) r9 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xda39, 0x10, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000080)=@IORING_OP_SOCKET={0x2d, 0x5, 0x0, 0x6, 0x8, 0x0, 0x3, 0x0, 0x1, {0x0, 0x0, 0x1}}) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da"], 0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f00000003c0)={0x2e, 0x69, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x3, 0xb15, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) syz_io_uring_submit(r4, r8, r12, &(0x7f0000000400)=@IORING_OP_MADVISE={0x19, 0xc, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x1}) r13 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$sock(r13, &(0x7f0000000500)=[{{&(0x7f0000000240)=@hci={0x1f, 0x4, 0x2}, 0x80, 0x0}}], 0x1, 0x0) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r15 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) ioctl$DRM_IOCTL_WAIT_VBLANK(r15, 0xc018643a, &(0x7f00000000c0)={0x0, 0x400, 0x6}) bind$bt_hci(r14, &(0x7f0000000040), 0x6) r16 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r17 = socket(0x1d, 0x2, 0x6) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x94) bind$can_j1939(r17, &(0x7f0000000100)={0x1d, 0x0, 0x8002, {0x2, 0x0, 0x3}, 0x1}, 0x18) r18 = fcntl$dupfd(r16, 0x0, r16) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000000700)={0x0, 0x4c, 0x5, 0x7, 0xfba00000}) ioctl$USBDEVFS_SUBMITURB(r18, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$KVM_SET_SREGS2(r18, 0x4140aecd, &(0x7f00000002c0)={{0x70000, 0xa000, 0x10, 0x5, 0x80, 0x9, 0x7, 0xfe, 0x71, 0xf0, 0x7, 0x1}, {0x70000, 0xd000, 0x9, 0xe3, 0x7, 0x6, 0x6, 0x3, 0x3, 0x2, 0xa7, 0x84}, {0x80a0000, 0x10000, 0xc, 0x5, 0x1, 0x1, 0x9, 0x0, 0xff, 0x69, 0x0, 0x3}, {0x6000, 0xeeee8000, 0xe, 0x2, 0x7, 0x8, 0x3, 0x4, 0xc, 0x4, 0x47, 0x13}, {0xd000, 0x26000, 0xd, 0x15, 0x9a, 0xa6, 0xf1, 0xd, 0x7, 0x1, 0x4, 0x9}, {0x5000, 0x80a0000, 0xf, 0x7, 0x8, 0xc, 0x4, 0x0, 0x8, 0xf, 0x6, 0x4}, {0xf000, 0x60000, 0x3, 0x0, 0x9, 0xfb, 0x4, 0x4, 0x6, 0x4, 0x1, 0x1}, {0x0, 0xeeef0000, 0x8, 0xd, 0x8, 0x40, 0x8, 0x5, 0x8, 0x8e, 0x3, 0xfb}, {0x9000, 0x7ff}, {0xdddd1000, 0xfffe}, 0x10, 0x0, 0xf000, 0x60, 0x7, 0x0, 0x40000, 0x1, [0x100000001, 0x3000, 0x0, 0x1ff]}) ioctl$sock_bt_hci(r14, 0x400448e6, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r2) kernel console output (not intermixed with test programs): idProduct=0013, bcdDevice=ba.be [ 263.251301][ T820] usb 10-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 263.251321][ T820] usb 10-1: Product: syz [ 263.251335][ T820] usb 10-1: Manufacturer: syz [ 263.251348][ T820] usb 10-1: SerialNumber: syz [ 263.291241][ T59] hsr_slave_0: left promiscuous mode [ 263.303949][ T820] usb 10-1: config 0 descriptor?? [ 263.369427][ T59] hsr_slave_1: left promiscuous mode [ 263.381949][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.381976][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.406262][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.406280][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.613517][ T5609] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 263.695646][ T59] veth1_macvtap: left promiscuous mode [ 263.695722][ T59] veth0_macvtap: left promiscuous mode [ 263.695938][ T59] veth1_vlan: left promiscuous mode [ 263.696090][ T59] veth0_vlan: left promiscuous mode [ 263.767185][ T5609] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 263.767214][ T5609] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.772993][ T5609] usb 7-1: config 0 descriptor?? [ 263.815832][ T59] veth1_macvtap: left promiscuous mode [ 263.815923][ T59] veth0_macvtap: left promiscuous mode [ 263.816204][ T59] veth1_vlan: left promiscuous mode [ 263.825114][ T59] veth0_vlan: left promiscuous mode [ 264.013090][ T8559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.015433][ T8559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.019842][ T8559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.022154][ T8559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.308162][ T8559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.309964][ T8559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.344398][ T5609] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 264.346817][ T5609] [drm:udl_init] *ERROR* Selecting channel failed [ 264.457925][ T5609] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 264.457950][ T5609] [drm] Initialized udl on minor 2 [ 264.537497][ T5609] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 264.625185][ T5609] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 264.660982][ T5609] usb 7-1: USB disconnect, device number 27 [ 264.671953][ T5749] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 265.124294][ T59] team0 (unregistering): Port device team_slave_1 removed [ 265.174229][ T59] team0 (unregistering): Port device team_slave_0 removed [ 265.253495][ T5609] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 265.403443][ T5609] usb 7-1: Using ep0 maxpacket: 16 [ 265.409247][ T5609] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 265.409274][ T5609] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.409292][ T5609] usb 7-1: Product: syz [ 265.409305][ T5609] usb 7-1: Manufacturer: syz [ 265.409313][ T5609] usb 7-1: SerialNumber: syz [ 265.412138][ T5609] usb 7-1: config 0 descriptor?? [ 265.459103][ T5609] visor 7-1:0.0: Sony Clie 3.5 converter detected [ 265.666356][ T5609] usb 7-1: clie_3_5_startup: get config number bad return length: 0 [ 265.666494][ T5609] visor 7-1:0.0: probe with driver visor failed with error -5 [ 265.889981][ T8565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.890648][ T8565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.246948][ T59] team0 (unregistering): Port device team_slave_1 removed [ 266.294209][ T59] team0 (unregistering): Port device team_slave_0 removed [ 266.509053][ T820] peak_usb 10-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 266.509083][ T820] peak_usb 10-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 266.512182][ T5257] 8021q: adding VLAN 0 to HW filter on device eth16 [ 266.790886][ T8577] sg_write: data in/out 294976/136 bytes for SCSI command 0x0-- guessing data in; [ 266.790886][ T8577] program syz.7.823 not setting count and/or reply_len properly [ 266.796040][ T8577] FAULT_INJECTION: forcing a failure. [ 266.796040][ T8577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.796074][ T8577] CPU: 1 UID: 0 PID: 8577 Comm: syz.7.823 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 266.796100][ T8577] Tainted: [L]=SOFTLOCKUP [ 266.796107][ T8577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.796118][ T8577] Call Trace: [ 266.796126][ T8577] [ 266.796133][ T8577] dump_stack_lvl+0xe8/0x150 [ 266.796161][ T8577] should_fail_ex+0x467/0x600 [ 266.796189][ T8577] _copy_from_iter+0x1d3/0x1660 [ 266.796219][ T8577] ? pfn_valid+0x125/0x4c0 [ 266.796243][ T8577] ? pfn_valid+0x125/0x4c0 [ 266.796263][ T8577] ? pfn_valid+0x440/0x4c0 [ 266.796284][ T8577] ? __pfx__copy_from_iter+0x10/0x10 [ 266.796310][ T8577] ? bvec_try_merge_page+0x186/0x280 [ 266.796338][ T8577] ? bio_add_page+0x42c/0x700 [ 266.796363][ T8577] copy_page_from_iter+0x219/0x2d0 [ 266.796394][ T8577] blk_rq_map_user_iov+0xcb5/0x1840 [ 266.796411][ T8577] ? get_page_from_freelist+0x2666/0x26c0 [ 266.796457][ T8577] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 266.796501][ T8577] ? import_ubuf+0xfb/0x1d0 [ 266.796535][ T8577] blk_rq_map_user_io+0x2ae/0x440 [ 266.796559][ T8577] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 266.796590][ T8577] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 266.796609][ T8577] ? lockdep_hardirqs_on+0x7a/0x110 [ 266.796627][ T8577] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 266.796645][ T8577] ? rt_mutex_slowunlock+0x219/0x460 [ 266.796672][ T8577] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 266.796707][ T8577] sg_common_write+0xc73/0x1310 [ 266.796750][ T8577] ? __pfx_sg_common_write+0x10/0x10 [ 266.796779][ T8577] ? lockdep_hardirqs_on+0x7a/0x110 [ 266.796797][ T8577] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 266.796816][ T8577] ? ___ratelimit+0x584/0x8e0 [ 266.796849][ T8577] sg_write+0xafc/0xf10 [ 266.796889][ T8577] ? __pfx_sg_write+0x10/0x10 [ 266.796918][ T8577] ? kstrtouint+0x6e/0xe0 [ 266.796966][ T8577] ? bpf_lsm_file_permission+0x9/0x20 [ 266.796993][ T8577] ? security_file_permission+0x68/0x220 [ 266.797017][ T8577] ? rw_verify_area+0x209/0x4d0 [ 266.797039][ T8577] ? __pfx_sg_write+0x10/0x10 [ 266.797065][ T8577] vfs_write+0x29f/0xbb0 [ 266.797094][ T8577] ? __pfx_vfs_write+0x10/0x10 [ 266.797118][ T8577] ? __fget_files+0x2a/0x420 [ 266.797138][ T8577] ? __fget_files+0x2a/0x420 [ 266.797156][ T8577] ? __fget_files+0x3a8/0x420 [ 266.797174][ T8577] ? __fget_files+0x2a/0x420 [ 266.797200][ T8577] ksys_write+0x156/0x270 [ 266.797224][ T8577] ? __pfx_ksys_write+0x10/0x10 [ 266.797254][ T8577] do_syscall_64+0x17b/0x530 [ 266.797273][ T8577] ? irqentry_exit+0x10f/0x8f0 [ 266.797290][ T8577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.797309][ T8577] ? clear_bhb_loop+0x40/0x90 [ 266.797332][ T8577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.797350][ T8577] RIP: 0033:0x7f957752e0d9 [ 266.797368][ T8577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.797384][ T8577] RSP: 002b:00007f9575786028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 266.797404][ T8577] RAX: ffffffffffffffda RBX: 00007f95777b5fa0 RCX: 00007f957752e0d9 [ 266.797418][ T8577] RDX: 00000000000000b2 RSI: 0000200000000040 RDI: 0000000000000005 [ 266.797431][ T8577] RBP: 00007f9575786090 R08: 0000000000000000 R09: 0000000000000000 [ 266.797442][ T8577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 266.797453][ T8577] R13: 00007f95777b6038 R14: 00007f95777b5fa0 R15: 00007fffe5813d58 [ 266.797483][ T8577] [ 267.393989][ T820] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -71 [ 267.441462][ T820] usb 10-1: USB disconnect, device number 5 [ 267.788471][ T820] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 267.986280][ T820] usb 10-1: config index 0 descriptor too short (expected 69, got 51) [ 267.986360][ T820] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 30309, setting to 64 [ 267.990882][ T820] usb 10-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 267.990911][ T820] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.990928][ T820] usb 10-1: Product: syz [ 267.990940][ T820] usb 10-1: Manufacturer: syz [ 267.990954][ T820] usb 10-1: SerialNumber: syz [ 268.068521][ T820] usb 10-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 268.292381][ T820] usb 10-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 268.692508][ T821] usb 7-1: USB disconnect, device number 28 [ 269.092169][ T820] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 269.104100][ T5609] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 269.104287][ T32] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 269.160487][ T820] usb 10-1: USB disconnect, device number 6 [ 269.176279][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.254331][ T32] usb 8-1: device descriptor read/64, error -71 [ 269.290703][ T5609] usb 9-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 269.290732][ T5609] usb 9-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 269.290751][ T5609] usb 9-1: Product: syz [ 269.290765][ T5609] usb 9-1: Manufacturer: syz [ 269.290779][ T5609] usb 9-1: SerialNumber: syz [ 269.320617][ T5609] usb 9-1: config 0 descriptor?? [ 269.528590][ T5609] peak_usb 9-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 269.528618][ T5609] peak_usb 9-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 269.536461][ T32] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 269.616566][ T821] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 269.693501][ T32] usb 8-1: device descriptor read/64, error -71 [ 269.758166][ T5609] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -71 [ 269.766532][ T5609] usb 9-1: USB disconnect, device number 8 [ 269.773416][ T821] usb 7-1: Using ep0 maxpacket: 8 [ 269.775439][ T821] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 269.775464][ T821] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 269.775483][ T821] usb 7-1: config 179 has no interface number 0 [ 269.776030][ T821] usb 7-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 269.776070][ T821] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 269.776093][ T821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.803792][ T32] usb usb8-port1: attempt power cycle [ 270.151827][ T5744] usb 7-1: USB disconnect, device number 29 [ 270.196960][ T32] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 270.218364][ T32] usb 8-1: device descriptor read/8, error -71 [ 270.474330][ T32] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 270.494245][ T32] usb 8-1: device descriptor read/8, error -71 [ 270.618888][ T32] usb usb8-port1: unable to enumerate USB device [ 271.423548][ T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 271.594211][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 271.607807][ T10] usb 10-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 271.607836][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.607855][ T10] usb 10-1: Product: syz [ 271.607868][ T10] usb 10-1: Manufacturer: syz [ 271.607881][ T10] usb 10-1: SerialNumber: syz [ 271.611540][ T10] usb 10-1: config 0 descriptor?? [ 271.653614][ T10] visor 10-1:0.0: Sony Clie 3.5 converter detected [ 271.793405][ T32] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 271.820813][ T10] usb 10-1: clie_3_5_startup: get config number bad return length: 0 [ 271.820907][ T10] visor 10-1:0.0: probe with driver visor failed with error -5 [ 271.873631][ T8610] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 271.944823][ T32] usb 7-1: Using ep0 maxpacket: 16 [ 271.951082][ T32] usb 7-1: config 251 has an invalid interface number: 202 but max is 0 [ 271.951109][ T32] usb 7-1: config 251 has no interface number 0 [ 271.951139][ T32] usb 7-1: too many endpoints for config 251 interface 202 altsetting 1: 165, using maximum allowed: 30 [ 271.951170][ T32] usb 7-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid maxpacket 2048, setting to 1024 [ 271.951184][ T32] usb 7-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1024 [ 271.951196][ T32] usb 7-1: config 251 interface 202 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 271.951209][ T32] usb 7-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 271.951222][ T32] usb 7-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 271.951235][ T32] usb 7-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.951246][ T32] usb 7-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0 [ 271.951257][ T32] usb 7-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 165 [ 271.951271][ T32] usb 7-1: config 251 interface 202 has no altsetting 0 [ 271.953114][ T32] usb 7-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 271.953131][ T32] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 271.953141][ T32] usb 7-1: Product: syz [ 271.953148][ T32] usb 7-1: SerialNumber: syz [ 272.119580][ T8610] usb 8-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 272.119608][ T8610] usb 8-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 272.120001][ T8610] usb 8-1: Product: syz [ 272.120016][ T8610] usb 8-1: Manufacturer: syz [ 272.120030][ T8610] usb 8-1: SerialNumber: syz [ 272.126687][ T8642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.169805][ T8642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.215640][ T8610] usb 8-1: config 0 descriptor?? [ 272.421338][ T8610] peak_usb 8-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 272.421740][ T8610] peak_usb 8-1:0.0: unable to read PCAN-Chip USB firmware info (err -32) [ 272.481549][ T32] cxacru 7-1:251.202: submit of read urb for cm 0x90 failed (-90) [ 272.535196][ T8660] cxacru 7-1:251.202: Direct firmware load for cxacru-fw.bin failed with error -2 [ 272.535223][ T8660] cxacru 7-1:251.202: Falling back to sysfs fallback for: cxacru-fw.bin [ 272.568871][ T32] usb 7-1: USB disconnect, device number 30 [ 272.604494][ T8610] peak_usb 8-1:0.0: probe with driver peak_usb failed with error -32 [ 272.654998][ T8610] usb 8-1: USB disconnect, device number 30 [ 273.388974][ T8685] cgroup: fork rejected by pids controller in /syz7 [ 273.744544][ T5696] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 273.943413][ T5696] usb 8-1: Using ep0 maxpacket: 8 [ 273.947490][ T5696] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 273.947524][ T5696] usb 8-1: can't read configurations, error -61 [ 274.123557][ T5696] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 274.188002][ T8610] usb 10-1: USB disconnect, device number 7 [ 274.294035][ T5696] usb 8-1: Using ep0 maxpacket: 8 [ 274.296937][ T5696] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 274.296971][ T5696] usb 8-1: can't read configurations, error -61 [ 274.360280][ T5696] usb usb8-port1: attempt power cycle [ 274.365393][ T5609] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 274.447414][ T8610] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 274.514413][ T5609] usb 9-1: Using ep0 maxpacket: 16 [ 274.527848][ T8610] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 274.530271][ T5609] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 274.530297][ T5609] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.564893][ T5609] usb 9-1: config 0 descriptor?? [ 274.642964][ T5609] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 274.736039][ T5696] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 274.758318][ T5696] usb 8-1: Using ep0 maxpacket: 8 [ 274.762006][ T5696] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 274.762039][ T5696] usb 8-1: can't read configurations, error -61 [ 274.778005][ T5609] usb 9-1: Detected FT232B [ 274.893895][ T5696] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 274.915217][ T5696] usb 8-1: Using ep0 maxpacket: 8 [ 274.918174][ T5696] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 274.918206][ T5696] usb 8-1: can't read configurations, error -61 [ 274.918692][ T5696] usb usb8-port1: unable to enumerate USB device [ 275.041822][ T8733] sg_write: data in/out 569733/136 bytes for SCSI command 0x0-- guessing data in; [ 275.041822][ T8733] program syz.8.849 not setting count and/or reply_len properly [ 275.056850][ T8731] syz.9.853 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 275.062618][ T8731] CPU: 1 UID: 0 PID: 8731 Comm: syz.9.853 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 275.062656][ T8731] Tainted: [L]=SOFTLOCKUP [ 275.062663][ T8731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.062676][ T8731] Call Trace: [ 275.062683][ T8731] [ 275.062691][ T8731] dump_stack_lvl+0xe8/0x150 [ 275.062723][ T8731] dump_header+0xd3/0x4b0 [ 275.062753][ T8731] oom_kill_process+0x3ab/0x970 [ 275.062784][ T8731] out_of_memory+0x1064/0x1480 [ 275.062823][ T8731] ? __pfx_out_of_memory+0x10/0x10 [ 275.062845][ T8731] ? lockdep_hardirqs_on+0x7a/0x110 [ 275.062865][ T8731] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 275.062883][ T8731] ? _mutex_lock_killable+0x152/0x1d0 [ 275.062907][ T8731] ? try_charge_memcg+0xbb6/0x15b0 [ 275.062928][ T8731] try_charge_memcg+0xc75/0x15b0 [ 275.062944][ T8731] ? __lock_acquire+0x6df/0x2e40 [ 275.062977][ T8731] ? __pfx_try_charge_memcg+0x10/0x10 [ 275.063002][ T8731] ? percpu_ref_tryget+0x15/0x180 [ 275.063032][ T8731] ? __memcg_kmem_charge_page+0x17e/0x550 [ 275.063062][ T8731] __memcg_kmem_charge_page+0x33e/0x550 [ 275.063086][ T8731] ? __memcg_kmem_charge_page+0x17e/0x550 [ 275.063115][ T8731] __alloc_frozen_pages_noprof+0x255/0x5b0 [ 275.063148][ T8731] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 275.063182][ T8731] ? __pfx_policy_nodemask+0x10/0x10 [ 275.063204][ T8731] ? __lock_acquire+0x6df/0x2e40 [ 275.063228][ T8731] alloc_pages_mpol+0xd4/0x280 [ 275.063250][ T8731] alloc_pages_noprof+0xd2/0x2f0 [ 275.063271][ T8731] pte_alloc_one+0x22/0x380 [ 275.063291][ T8731] do_pte_missing+0x128d/0x28f0 [ 275.063335][ T8731] handle_mm_fault+0xf95/0x28d0 [ 275.063363][ T8731] ? reacquire_held_locks+0x117/0x1a0 [ 275.063384][ T8731] ? lock_vma_under_rcu+0x1d1/0x500 [ 275.063413][ T8731] ? handle_mm_fault+0xeb/0x28d0 [ 275.063441][ T8731] ? lock_vma_under_rcu+0x116/0x500 [ 275.063471][ T8731] ? __pfx_handle_mm_fault+0x10/0x10 [ 275.063494][ T8731] ? lock_vma_under_rcu+0x45a/0x500 [ 275.063520][ T8731] ? __pfx_do_futex+0x10/0x10 [ 275.063566][ T8731] do_user_addr_fault+0xa4d/0x1340 [ 275.063602][ T8731] ? trace_page_fault_user+0x84/0x1e0 [ 275.063635][ T8731] exc_page_fault+0x6a/0xc0 [ 275.063654][ T8731] asm_exc_page_fault+0x26/0x30 [ 275.063673][ T8731] RIP: 0033:0x7fbd8f7a2900 [ 275.063690][ T8731] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 40 40 00 00 0f 85 1f fe ff ff e9 d3 fd ff ff 0f 1f 44 [ 275.063707][ T8731] RSP: 002b:00007fff9cbdc540 EFLAGS: 00010202 [ 275.063723][ T8731] RAX: 000000110c480000 RBX: ffffffff8b5399ef RCX: 0000000000000005 [ 275.063738][ T8731] RDX: 00000000000019ef RSI: 0000000000000e67 RDI: 0000000000000020 [ 275.063750][ T8731] RBP: 0000000000000000 R08: 00007fbd8fb40000 R09: 00007fbd8fb42000 [ 275.063762][ T8731] R10: 000000008b5399f3 R11: 0000000000000009 R12: 00007fbd8fb56038 [ 275.063775][ T8731] R13: 000000000000006c R14: ffffffff8b5399ef R15: 00007fbd90685720 [ 275.063789][ T8731] ? schedule_timeout+0x8f/0x2c0 [ 275.063816][ T8731] ? schedule_timeout+0x8f/0x2c0 [ 275.063854][ T8731] [ 275.087610][ T8731] memory: usage 0kB, limit 0kB, failcnt 19 [ 275.087635][ T8731] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 275.087647][ T8731] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 275.087659][ T8731] Memory cgroup stats for /syz9/test: [ 275.148087][ T8731] cache 0 [ 275.148098][ T8731] rss 0 [ 275.148103][ T8731] shmem 0 [ 275.148109][ T8731] mapped_file 0 [ 275.148115][ T8731] dirty 0 [ 275.148121][ T8731] writeback 0 [ 275.148127][ T8731] workingset_refault_anon 0 [ 275.149345][ T8731] workingset_refault_file 0 [ 275.149355][ T8731] swap 0 [ 275.149361][ T8731] swapcached 0 [ 275.149367][ T8731] pgpgin 0 [ 275.149373][ T8731] pgpgout 0 [ 275.149379][ T8731] pgfault 0 [ 275.149385][ T8731] pgmajfault 0 [ 275.150293][ T8731] inactive_anon 0 [ 275.150302][ T8731] active_anon 0 [ 275.150308][ T8731] inactive_file 0 [ 275.150315][ T8731] active_file 0 [ 275.150321][ T8731] unevictable 0 [ 275.150327][ T8731] hierarchical_memory_limit 0 [ 275.150334][ T8731] hierarchical_memsw_limit 9223372036854771712 [ 275.150484][ T8731] total_cache 0 [ 275.150491][ T8731] total_rss 0 [ 275.150956][ T8731] total_shmem 0 [ 275.151018][ T8731] total_mapped_file 0 [ 275.151026][ T8731] total_dirty 0 [ 275.151033][ T8731] total_writeback 0 [ 275.151039][ T8731] total_workingset_refault_anon 0 [ 275.151047][ T8731] total_workingset_refault_file 0 [ 275.151054][ T8731] total_swap 0 [ 275.151060][ T8731] total_swapcached 0 [ 275.151067][ T8731] total_pgpgin 0 [ 275.151073][ T8731] total_pgpgout 0 [ 275.151079][ T8731] total_pgfault 0 [ 275.151085][ T8731] total_pgmajfault 0 [ 275.151091][ T8731] total_inactive_anon 0 [ 275.151098][ T8731] total_active_anon 0 [ 275.151103][ T8731] total_inactive_file 0 [ 275.151109][ T8731] total_active_file 0 [ 275.151116][ T8731] total_unevictable 0 [ 275.151124][ T8731] anon_cost 0 [ 275.151908][ T8731] file_cost 0 [ 275.151917][ T8731] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9/test,task_memcg=/syz9/test,task=syz.9.853,pid=8731,uid=0 [ 275.379262][ T8731] Memory cgroup out of memory: Killed process 8731 (syz.9.853) total-vm:102252kB, anon-rss:1420kB, file-rss:22740kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 275.658326][ T8733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.660269][ T8733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.043398][ T10] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 276.203540][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 276.215633][ T10] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 276.215660][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.215679][ T10] usb 10-1: Product: syz [ 276.215693][ T10] usb 10-1: Manufacturer: syz [ 276.215706][ T10] usb 10-1: SerialNumber: syz [ 276.248204][ T10] usb 10-1: config 0 descriptor?? [ 276.474812][ T10] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 276.683399][ T5696] usb 8-1: new full-speed USB device number 35 using dummy_hcd [ 276.847056][ T5696] usb 8-1: not running at top speed; connect to a high speed hub [ 276.866307][ T5696] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 276.866335][ T5696] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.866405][ T5696] usb 8-1: Product: syz [ 276.866420][ T5696] usb 8-1: Manufacturer: syz [ 276.866433][ T5696] usb 8-1: SerialNumber: syz [ 276.930667][ T5696] keyspan 8-1:1.0: Keyspan 4 port adapter converter detected [ 276.982205][ T5696] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 276.999869][ T5696] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 277.027976][ T5696] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 277.053126][ T5696] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 277.466698][ T5609] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 277.467756][ T5609] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 277.598356][ T5609] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 277.634472][ T5609] usb 9-1: USB disconnect, device number 9 [ 277.680344][ T5609] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 277.681050][ T5609] ftdi_sio 9-1:0.0: device disconnected [ 278.196028][ T8740] netlink: 168 bytes leftover after parsing attributes in process `syz.9.855'. [ 278.196066][ T8740] C: renamed from veth1_to_team (while UP) [ 278.807203][ T5609] usb 8-1: USB disconnect, device number 35 [ 278.855479][ T10] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 278.962985][ T5609] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 278.969096][ T5609] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 278.976447][ T5609] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 279.025549][ T5609] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 279.045640][ T5609] keyspan 8-1:1.0: device disconnected [ 279.096427][ T5696] usb 10-1: USB disconnect, device number 8 [ 279.333390][ T821] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 279.483373][ T821] usb 9-1: Using ep0 maxpacket: 16 [ 279.492857][ T821] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 279.492885][ T821] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.492902][ T821] usb 9-1: Product: syz [ 279.492915][ T821] usb 9-1: Manufacturer: syz [ 279.492926][ T821] usb 9-1: SerialNumber: syz [ 279.507697][ T821] usb 9-1: config 0 descriptor?? [ 279.523132][ T821] visor 9-1:0.0: Sony Clie 3.5 converter detected [ 279.773936][ T821] usb 9-1: clie_3_5_startup: get config number bad return length: 0 [ 279.774099][ T821] visor 9-1:0.0: probe with driver visor failed with error -5 [ 280.000488][ T8775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.012277][ T8775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.413421][ T5609] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 280.505607][ T8775] dvmrp0: entered allmulticast mode [ 280.564691][ T5609] usb 10-1: not running at top speed; connect to a high speed hub [ 280.567823][ T5609] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.567877][ T5609] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 280.567899][ T5609] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.623702][ T5609] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 280.624860][ T5609] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 280.624931][ T5609] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 280.629491][ T5609] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 280.629576][ T5609] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 280.674424][ T5609] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 280.679423][ T5609] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 280.679505][ T5609] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 280.707921][ T5609] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 280.716649][ T821] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 280.907717][ T821] usb 8-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 280.907747][ T821] usb 8-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 280.907767][ T821] usb 8-1: Product: syz [ 280.907779][ T821] usb 8-1: Manufacturer: syz [ 280.907793][ T821] usb 8-1: SerialNumber: syz [ 280.932211][ T821] usb 8-1: config 0 descriptor?? [ 281.186581][ T821] peak_usb 8-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 281.388425][ T821] peak_usb 8-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 281.388455][ T821] peak_usb 8-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 281.580679][ T821] peak_usb 8-1:0.0: probe with driver peak_usb failed with error -71 [ 281.641131][ T821] usb 8-1: USB disconnect, device number 36 [ 282.048725][ T5696] usb 9-1: USB disconnect, device number 10 [ 282.203650][ T8855] : renamed from vlan0 (while UP) [ 282.493882][ T5696] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 282.544563][ T8865] netlink: 758 bytes leftover after parsing attributes in process `syz.7.875'. [ 282.657080][ T5696] usb 9-1: config index 0 descriptor too short (expected 69, got 51) [ 282.657148][ T5696] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.657174][ T5696] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.667462][ T5696] usb 9-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 282.667490][ T5696] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.667507][ T5696] usb 9-1: Product: syz [ 282.667521][ T5696] usb 9-1: Manufacturer: syz [ 282.667534][ T5696] usb 9-1: SerialNumber: syz [ 282.724965][ T5696] usb 9-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 282.915371][ T5696] usb 9-1: Error initialising Scarlett Gen 2 Mixer Driver: -90 [ 283.250543][ T5703] usb 10-1: USB disconnect, device number 9 [ 283.279854][ T5703] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 283.344142][ T5696] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -90 [ 283.378183][ T5703] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 283.379026][ T5703] keyspan 10-1:1.0: device disconnected [ 283.453778][ T5696] usb 9-1: USB disconnect, device number 11 [ 283.499972][ T5681] udevd[5681]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.773212][ T8880] FAULT_INJECTION: forcing a failure. [ 283.773212][ T8880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.773247][ T8880] CPU: 0 UID: 0 PID: 8880 Comm: syz.7.878 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 283.773275][ T8880] Tainted: [L]=SOFTLOCKUP [ 283.773281][ T8880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.773299][ T8880] Call Trace: [ 283.773307][ T8880] [ 283.773314][ T8880] dump_stack_lvl+0xe8/0x150 [ 283.773342][ T8880] should_fail_ex+0x467/0x600 [ 283.773370][ T8880] _copy_from_user+0x2d/0xb0 [ 283.773388][ T8880] kstrtouint_from_user+0xd6/0x180 [ 283.773415][ T8880] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 283.773437][ T8880] ? __lock_acquire+0x6df/0x2e40 [ 283.773455][ T8880] ? trace_raw_output_btrfs_log_inode_enter+0x500/0x500 [ 283.773490][ T8880] ? lock_acquire+0x115/0x350 [ 283.773522][ T8880] proc_fail_nth_write+0x8e/0x210 [ 283.773542][ T8880] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 283.773570][ T8880] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 283.773587][ T8880] vfs_write+0x29f/0xbb0 [ 283.773618][ T8880] ? __pfx_vfs_write+0x10/0x10 [ 283.773642][ T8880] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 283.773662][ T8880] ? lockdep_hardirqs_on+0x7a/0x110 [ 283.773680][ T8880] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 283.773700][ T8880] ? mutex_lock_nested+0x152/0x1d0 [ 283.773723][ T8880] ? fdget_pos+0x252/0x320 [ 283.773751][ T8880] ksys_write+0x156/0x270 [ 283.773775][ T8880] ? __pfx_ksys_write+0x10/0x10 [ 283.773806][ T8880] do_syscall_64+0x17b/0x530 [ 283.773825][ T8880] ? irqentry_exit+0x10f/0x8f0 [ 283.773843][ T8880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.773861][ T8880] ? clear_bhb_loop+0x40/0x90 [ 283.773883][ T8880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.773901][ T8880] RIP: 0033:0x7f95774ee90e [ 283.773919][ T8880] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 283.773933][ T8880] RSP: 002b:00007f9575785fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 283.773950][ T8880] RAX: ffffffffffffffda RBX: 00007f95757866c0 RCX: 00007f95774ee90e [ 283.773964][ T8880] RDX: 0000000000000001 RSI: 00007f95757860a0 RDI: 0000000000000004 [ 283.773975][ T8880] RBP: 00007f9575786090 R08: 0000000000000000 R09: 0000000000000000 [ 283.773985][ T8880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.773996][ T8880] R13: 00007f95777b6038 R14: 00007f95777b5fa0 R15: 00007fffe5813d58 [ 283.774027][ T8880] [ 284.183772][ T38] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 284.293468][ T5609] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 284.348228][ T38] usb 9-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 284.348258][ T38] usb 9-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 284.348277][ T38] usb 9-1: Product: syz [ 284.348291][ T38] usb 9-1: Manufacturer: syz [ 284.348304][ T38] usb 9-1: SerialNumber: syz [ 284.426155][ T38] usb 9-1: config 0 descriptor?? [ 284.467904][ T5609] usb 8-1: Using ep0 maxpacket: 16 [ 284.472650][ T5609] usb 8-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 284.472680][ T5609] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.472699][ T5609] usb 8-1: Product: syz [ 284.472725][ T5609] usb 8-1: Manufacturer: syz [ 284.472739][ T5609] usb 8-1: SerialNumber: syz [ 284.520833][ T5609] usb 8-1: config 0 descriptor?? [ 284.531338][ T5609] visor 8-1:0.0: Sony Clie 3.5 converter detected [ 284.640291][ T38] peak_usb 9-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 284.762759][ T5609] usb 8-1: clie_3_5_startup: get config number bad return length: 0 [ 284.763011][ T5609] visor 8-1:0.0: probe with driver visor failed with error -5 [ 284.843142][ T38] peak_usb 9-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 284.843174][ T38] peak_usb 9-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 284.976930][ T8892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.978006][ T8892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.015326][ T38] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -71 [ 285.030223][ T38] usb 9-1: USB disconnect, device number 12 [ 285.352328][ T8926] veth1_macvtap: left promiscuous mode [ 285.391539][ T8926] veth1_macvtap: entered promiscuous mode [ 286.039918][ T8948] FAULT_INJECTION: forcing a failure. [ 286.039918][ T8948] name failslab, interval 1, probability 0, space 0, times 0 [ 286.039953][ T8948] CPU: 1 UID: 0 PID: 8948 Comm: syz.9.892 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 286.039980][ T8948] Tainted: [L]=SOFTLOCKUP [ 286.039986][ T8948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.039998][ T8948] Call Trace: [ 286.040004][ T8948] [ 286.040011][ T8948] dump_stack_lvl+0xe8/0x150 [ 286.040041][ T8948] should_fail_ex+0x467/0x600 [ 286.040068][ T8948] should_failslab+0xa8/0x100 [ 286.040088][ T8948] __kmalloc_noprof+0xfb/0x790 [ 286.040114][ T8948] ? prepare_creds+0x30/0x820 [ 286.040139][ T8948] ? security_prepare_creds+0x52/0x320 [ 286.040161][ T8948] ? security_prepare_creds+0x52/0x320 [ 286.040190][ T8948] security_prepare_creds+0x52/0x320 [ 286.040216][ T8948] prepare_creds+0x57d/0x820 [ 286.040247][ T8948] do_faccessat+0x3aa/0xdc0 [ 286.040271][ T8948] ? __pfx_do_faccessat+0x10/0x10 [ 286.040288][ T8948] ? __pfx_ksys_write+0x10/0x10 [ 286.040315][ T8948] __x64_sys_faccessat+0x7c/0x90 [ 286.040340][ T8948] do_syscall_64+0x17b/0x530 [ 286.040360][ T8948] ? irqentry_exit+0x10f/0x8f0 [ 286.040377][ T8948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.040397][ T8948] ? clear_bhb_loop+0x40/0x90 [ 286.040421][ T8948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.040441][ T8948] RIP: 0033:0x7fbd8f8ce0d9 [ 286.040458][ T8948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.040474][ T8948] RSP: 002b:00007fbd8db26028 EFLAGS: 00000246 ORIG_RAX: 000000000000010d [ 286.040495][ T8948] RAX: ffffffffffffffda RBX: 00007fbd8fb55fa0 RCX: 00007fbd8f8ce0d9 [ 286.040510][ T8948] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 286.040522][ T8948] RBP: 00007fbd8db26090 R08: 0000000000000000 R09: 0000000000000000 [ 286.040534][ T8948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.040546][ T8948] R13: 00007fbd8fb56038 R14: 00007fbd8fb55fa0 R15: 00007fff9cbdc4f8 [ 286.040576][ T8948] [ 286.593509][ T5696] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 286.749377][ T5696] usb 10-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 286.749408][ T5696] usb 10-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 286.749427][ T5696] usb 10-1: Product: syz [ 286.749435][ T5696] usb 10-1: Manufacturer: syz [ 286.749442][ T5696] usb 10-1: SerialNumber: syz [ 286.753040][ T5696] usb 10-1: config 0 descriptor?? [ 287.002127][ T5696] peak_usb 10-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 287.072707][ T821] usb 8-1: USB disconnect, device number 37 [ 287.205161][ T5696] peak_usb 10-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 287.205178][ T5696] peak_usb 10-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 287.334744][ T5696] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -71 [ 287.340210][ T5696] usb 10-1: USB disconnect, device number 10 [ 287.528859][ T821] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 287.677174][ T821] usb 8-1: unable to get BOS descriptor or descriptor too short [ 287.678246][ T821] usb 8-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config [ 287.678340][ T821] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 176, changing to 7 [ 287.678354][ T821] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 41292, setting to 1024 [ 287.680673][ T821] usb 8-1: New USB device found, idVendor=0944, idProduct=0204, bcdDevice= 0.40 [ 287.680698][ T821] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.680717][ T821] usb 8-1: Product: syz [ 287.680730][ T821] usb 8-1: Manufacturer: syz [ 287.680743][ T821] usb 8-1: SerialNumber: syz [ 287.947671][ T8976] netlink: 'syz.9.903': attribute type 3 has an invalid length. [ 287.947692][ T8976] netlink: 'syz.9.903': attribute type 1 has an invalid length. [ 287.947704][ T8976] netlink: 610 bytes leftover after parsing attributes in process `syz.9.903'. [ 288.039801][ T821] usb 8-1: unit 4 not found! [ 288.297726][ T821] usb 8-1: USB disconnect, device number 38 [ 288.456202][ T5681] udevd[5681]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.599287][ T5744] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 288.744082][ T5744] usb 9-1: Using ep0 maxpacket: 16 [ 288.750155][ T5744] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 288.750184][ T5744] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.750202][ T5744] usb 9-1: Product: syz [ 288.750216][ T5744] usb 9-1: Manufacturer: syz [ 288.750229][ T5744] usb 9-1: SerialNumber: syz [ 288.793003][ T8998] FAULT_INJECTION: forcing a failure. [ 288.793003][ T8998] name failslab, interval 1, probability 0, space 0, times 0 [ 288.793032][ T8998] CPU: 0 UID: 0 PID: 8998 Comm: syz.7.908 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 288.793051][ T8998] Tainted: [L]=SOFTLOCKUP [ 288.793056][ T8998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 288.793064][ T8998] Call Trace: [ 288.793070][ T8998] [ 288.793076][ T8998] dump_stack_lvl+0xe8/0x150 [ 288.793099][ T8998] should_fail_ex+0x467/0x600 [ 288.793122][ T8998] should_failslab+0xa8/0x100 [ 288.793138][ T8998] __kmalloc_noprof+0xfb/0x790 [ 288.793159][ T8998] ? tomoyo_encode+0x2ad/0x570 [ 288.793179][ T8998] ? tomoyo_encode+0x2ad/0x570 [ 288.793204][ T8998] tomoyo_encode+0x2ad/0x570 [ 288.793229][ T8998] tomoyo_realpath_from_path+0x5fa/0x640 [ 288.793257][ T8998] ? tomoyo_path_number_perm+0x219/0x5f0 [ 288.793278][ T8998] tomoyo_path_number_perm+0x246/0x5f0 [ 288.793297][ T8998] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 288.793317][ T8998] ? do_raw_spin_lock+0x12b/0x2f0 [ 288.793345][ T8998] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 288.793359][ T8998] ? lockdep_hardirqs_on+0x7a/0x110 [ 288.793385][ T8998] ? __fget_files+0x2a/0x420 [ 288.793403][ T8998] ? __fget_files+0x3a8/0x420 [ 288.793416][ T8998] ? __fget_files+0x2a/0x420 [ 288.793432][ T8998] security_file_ioctl+0xb9/0x260 [ 288.793450][ T8998] __se_sys_ioctl+0x47/0x170 [ 288.793470][ T8998] do_syscall_64+0x17b/0x530 [ 288.793484][ T8998] ? irqentry_exit+0x10f/0x8f0 [ 288.793497][ T8998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.793511][ T8998] ? clear_bhb_loop+0x40/0x90 [ 288.793529][ T8998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.793543][ T8998] RIP: 0033:0x7f957752e0d9 [ 288.793557][ T8998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.793569][ T8998] RSP: 002b:00007f9575786028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.793585][ T8998] RAX: ffffffffffffffda RBX: 00007f95777b5fa0 RCX: 00007f957752e0d9 [ 288.793595][ T8998] RDX: 0000200000000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 288.793604][ T8998] RBP: 00007f9575786090 R08: 0000000000000000 R09: 0000000000000000 [ 288.793613][ T8998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.793621][ T8998] R13: 00007f95777b6038 R14: 00007f95777b5fa0 R15: 00007fffe5813d58 [ 288.793643][ T8998] [ 288.800377][ T8998] ERROR: Out of memory at tomoyo_realpath_from_path. [ 289.075997][ T5744] usb 9-1: config 0 descriptor?? [ 289.087689][ T5744] visor 9-1:0.0: Sony Clie 3.5 converter detected [ 289.298271][ T5744] usb 9-1: clie_3_5_startup: get config number bad return length: 0 [ 289.298422][ T5744] visor 9-1:0.0: probe with driver visor failed with error -5 [ 289.506989][ T8986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.508910][ T8986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.809175][ T9023] 9p: Bad value for 'rfdno' [ 289.983504][ T5744] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 290.103795][ T38] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 290.139788][ T5744] usb 8-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 290.139817][ T5744] usb 8-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 290.139836][ T5744] usb 8-1: Product: syz [ 290.139844][ T5744] usb 8-1: Manufacturer: syz [ 290.139852][ T5744] usb 8-1: SerialNumber: syz [ 290.180130][ T5744] usb 8-1: config 0 descriptor?? [ 290.253410][ T38] usb 10-1: Using ep0 maxpacket: 16 [ 290.261993][ T38] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 290.262015][ T38] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.262025][ T38] usb 10-1: Product: syz [ 290.262032][ T38] usb 10-1: Manufacturer: syz [ 290.262408][ T38] usb 10-1: SerialNumber: syz [ 290.311566][ T38] usb 10-1: config 0 descriptor?? [ 290.391212][ T5744] peak_usb 8-1:0.0: PEAK-System PCAN-Chip USB v232 fw v223.90.95 (1 channels) [ 290.515638][ T9035] FAULT_INJECTION: forcing a failure. [ 290.515638][ T9035] name failslab, interval 1, probability 0, space 0, times 0 [ 290.515674][ T9035] CPU: 0 UID: 0 PID: 9035 Comm: syz.6.917 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 290.515700][ T9035] Tainted: [L]=SOFTLOCKUP [ 290.515706][ T9035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 290.515717][ T9035] Call Trace: [ 290.515725][ T9035] [ 290.515733][ T9035] dump_stack_lvl+0xe8/0x150 [ 290.515760][ T9035] should_fail_ex+0x467/0x600 [ 290.515785][ T9035] should_failslab+0xa8/0x100 [ 290.515805][ T9035] __kmalloc_noprof+0xfb/0x790 [ 290.515832][ T9035] ? tomoyo_encode+0x2ad/0x570 [ 290.515857][ T9035] ? tomoyo_encode+0x2ad/0x570 [ 290.515887][ T9035] tomoyo_encode+0x2ad/0x570 [ 290.515918][ T9035] tomoyo_realpath_from_path+0x5fa/0x640 [ 290.515953][ T9035] ? tomoyo_path_number_perm+0x219/0x5f0 [ 290.515977][ T9035] tomoyo_path_number_perm+0x246/0x5f0 [ 290.516003][ T9035] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 290.516027][ T9035] ? do_raw_spin_lock+0x12b/0x2f0 [ 290.516065][ T9035] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 290.516084][ T9035] ? lockdep_hardirqs_on+0x7a/0x110 [ 290.516116][ T9035] ? __fget_files+0x2a/0x420 [ 290.516139][ T9035] ? __fget_files+0x3a8/0x420 [ 290.516157][ T9035] ? __fget_files+0x2a/0x420 [ 290.516180][ T9035] security_file_ioctl+0xb9/0x260 [ 290.516212][ T9035] __se_sys_ioctl+0x47/0x170 [ 290.516240][ T9035] do_syscall_64+0x17b/0x530 [ 290.516258][ T9035] ? irqentry_exit+0x10f/0x8f0 [ 290.516275][ T9035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.516295][ T9035] ? clear_bhb_loop+0x40/0x90 [ 290.516316][ T9035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.516331][ T9035] RIP: 0033:0x7fa5b80be0d9 [ 290.516347][ T9035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.516359][ T9035] RSP: 002b:00007fa5b6316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.516374][ T9035] RAX: ffffffffffffffda RBX: 00007fa5b8345fa0 RCX: 00007fa5b80be0d9 [ 290.516386][ T9035] RDX: 0000200000000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 290.516397][ T9035] RBP: 00007fa5b6316090 R08: 0000000000000000 R09: 0000000000000000 [ 290.516405][ T9035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.516413][ T9035] R13: 00007fa5b8346038 R14: 00007fa5b8345fa0 R15: 00007ffde6cef5d8 [ 290.516436][ T9035] [ 290.516506][ T9035] ERROR: Out of memory at tomoyo_realpath_from_path. [ 290.642727][ T5744] peak_usb 8-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 290.642981][ T5744] peak_usb 8-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 290.717676][ T38] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 290.849876][ T38] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 290.850837][ T38] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 290.850890][ T38] usb 10-1: media controller created [ 290.919084][ T9025] dtv5100: wlen = 0, aborting. [ 290.935448][ T38] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 290.980325][ T5744] peak_usb 8-1:0.0: probe with driver peak_usb failed with error -71 [ 291.008767][ T5744] usb 8-1: USB disconnect, device number 39 [ 291.054947][ T38] zl10353_read_register: readreg error (reg=127, ret==0) [ 291.055000][ T38] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 291.055012][ T38] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 291.064253][ T38] usb 10-1: USB disconnect, device number 11 [ 291.167746][ T38] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 291.340977][ T9] usb 9-1: USB disconnect, device number 13 [ 291.471338][ T9049] FAULT_INJECTION: forcing a failure. [ 291.471338][ T9049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.471374][ T9049] CPU: 0 UID: 0 PID: 9049 Comm: syz.7.924 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 291.471401][ T9049] Tainted: [L]=SOFTLOCKUP [ 291.471407][ T9049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 291.471419][ T9049] Call Trace: [ 291.471426][ T9049] [ 291.471434][ T9049] dump_stack_lvl+0xe8/0x150 [ 291.471465][ T9049] should_fail_ex+0x467/0x600 [ 291.471496][ T9049] _copy_to_user+0x31/0xb0 [ 291.471517][ T9049] simple_read_from_buffer+0xe1/0x170 [ 291.471544][ T9049] proc_fail_nth_read+0x1be/0x230 [ 291.471576][ T9049] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 291.471600][ T9049] ? rw_verify_area+0x250/0x4d0 [ 291.471624][ T9049] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 291.471645][ T9049] vfs_read+0x219/0xa90 [ 291.471675][ T9049] ? __pfx_vfs_read+0x10/0x10 [ 291.471700][ T9049] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 291.471721][ T9049] ? lockdep_hardirqs_on+0x7a/0x110 [ 291.471740][ T9049] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 291.471759][ T9049] ? mutex_lock_nested+0x152/0x1d0 [ 291.471783][ T9049] ? fdget_pos+0x252/0x320 [ 291.471812][ T9049] ksys_read+0x156/0x270 [ 291.471833][ T9049] ? lockdep_hardirqs_on+0x7a/0x110 [ 291.471852][ T9049] ? __pfx_ksys_read+0x10/0x10 [ 291.471885][ T9049] do_syscall_64+0x17b/0x530 [ 291.471905][ T9049] ? irqentry_exit+0x10f/0x8f0 [ 291.471923][ T9049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.471943][ T9049] ? clear_bhb_loop+0x40/0x90 [ 291.471968][ T9049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.471987][ T9049] RIP: 0033:0x7f95774ee90e [ 291.472005][ T9049] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 291.472021][ T9049] RSP: 002b:00007f9575785fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 291.472042][ T9049] RAX: ffffffffffffffda RBX: 00007f95757866c0 RCX: 00007f95774ee90e [ 291.472057][ T9049] RDX: 000000000000000f RSI: 00007f95757860a0 RDI: 0000000000000004 [ 291.472069][ T9049] RBP: 00007f9575786090 R08: 0000000000000000 R09: 0000000000000000 [ 291.472082][ T9049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.472094][ T9049] R13: 00007f95777b6038 R14: 00007f95777b5fa0 R15: 00007fffe5813d58 [ 291.472126][ T9049] [ 291.783445][ T9] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 291.854928][ T9057] FAULT_INJECTION: forcing a failure. [ 291.854928][ T9057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.854963][ T9057] CPU: 1 UID: 0 PID: 9057 Comm: syz.9.928 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 291.854988][ T9057] Tainted: [L]=SOFTLOCKUP [ 291.854994][ T9057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 291.855005][ T9057] Call Trace: [ 291.855012][ T9057] [ 291.855018][ T9057] dump_stack_lvl+0xe8/0x150 [ 291.855047][ T9057] should_fail_ex+0x467/0x600 [ 291.855085][ T9057] _copy_from_iter+0x1d3/0x1660 [ 291.855124][ T9057] ? __pfx__copy_from_iter+0x10/0x10 [ 291.855150][ T9057] ? trace_kmalloc+0x2a/0xf0 [ 291.855179][ T9057] ? __kmalloc_noprof+0x436/0x790 [ 291.855204][ T9057] ? kernfs_fop_write_iter+0x158/0x540 [ 291.855234][ T9057] kernfs_fop_write_iter+0x19b/0x540 [ 291.855264][ T9057] vfs_write+0x61e/0xbb0 [ 291.855293][ T9057] ? __pfx_vfs_write+0x10/0x10 [ 291.855316][ T9057] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 291.855336][ T9057] ? lockdep_hardirqs_on+0x7a/0x110 [ 291.855356][ T9057] ? mutex_lock_nested+0x152/0x1d0 [ 291.855379][ T9057] ? fdget_pos+0x252/0x320 [ 291.855407][ T9057] ksys_write+0x156/0x270 [ 291.855431][ T9057] ? __pfx_ksys_write+0x10/0x10 [ 291.855463][ T9057] do_syscall_64+0x17b/0x530 [ 291.855483][ T9057] ? irqentry_exit+0x10f/0x8f0 [ 291.855500][ T9057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.855521][ T9057] ? clear_bhb_loop+0x40/0x90 [ 291.855544][ T9057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.855561][ T9057] RIP: 0033:0x7fbd8f8ce0d9 [ 291.855578][ T9057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.855593][ T9057] RSP: 002b:00007fbd8db26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 291.855605][ T9057] RAX: ffffffffffffffda RBX: 00007fbd8fb55fa0 RCX: 00007fbd8f8ce0d9 [ 291.855613][ T9057] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 291.855619][ T9057] RBP: 00007fbd8db26090 R08: 0000000000000000 R09: 0000000000000000 [ 291.855625][ T9057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.855631][ T9057] R13: 00007fbd8fb56038 R14: 00007fbd8fb55fa0 R15: 00007fff9cbdc4f8 [ 291.855647][ T9057] [ 292.148950][ T9] usb 9-1: New USB device found, idVendor=07c4, idProduct=a000, bcdDevice= 0.01 [ 292.148981][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.149000][ T9] usb 9-1: Product: syz [ 292.149029][ T9] usb 9-1: Manufacturer: syz [ 292.149043][ T9] usb 9-1: SerialNumber: syz [ 292.190523][ T9] ums-datafab 9-1:1.0: USB Mass Storage device detected [ 292.209983][ T9] ums-datafab 9-1:1.0: This device (07c4,a000,0001 S 06 P f2) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 292.209983][ T9] Please send a copy of this message to and [ 292.210828][ T9] scsi host1: usb-storage 9-1:1.0 [ 292.303425][ T5609] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 292.359357][ T9075] FAULT_INJECTION: forcing a failure. [ 292.359357][ T9075] name failslab, interval 1, probability 0, space 0, times 0 [ 292.359379][ T9075] CPU: 0 UID: 0 PID: 9075 Comm: syz.9.933 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 292.359394][ T9075] Tainted: [L]=SOFTLOCKUP [ 292.359398][ T9075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 292.359405][ T9075] Call Trace: [ 292.359409][ T9075] [ 292.359413][ T9075] dump_stack_lvl+0xe8/0x150 [ 292.359431][ T9075] should_fail_ex+0x467/0x600 [ 292.359449][ T9075] should_failslab+0xa8/0x100 [ 292.359462][ T9075] ? __anon_vma_prepare+0x10e/0x4d0 [ 292.359476][ T9075] kmem_cache_alloc_noprof+0x9e/0x680 [ 292.359490][ T9075] ? __anon_vma_prepare+0xc3/0x4d0 [ 292.359502][ T9075] ? __anon_vma_prepare+0x10e/0x4d0 [ 292.359519][ T9075] __anon_vma_prepare+0x10e/0x4d0 [ 292.359538][ T9075] do_wp_page+0x2f16/0x3d20 [ 292.359559][ T9075] ? preempt_count_add+0x91/0x190 [ 292.359570][ T9075] ? __pfx_do_wp_page+0x10/0x10 [ 292.359581][ T9075] ? rt_spin_lock+0x2ce/0x400 [ 292.359596][ T9075] ? __pfx_rt_spin_lock+0x10/0x10 [ 292.359612][ T9075] ? pte_offset_map_rw_nolock+0xea/0x160 [ 292.359626][ T9075] handle_mm_fault+0xdc1/0x28d0 [ 292.359641][ T9075] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 292.359655][ T9075] ? handle_mm_fault+0xeb/0x28d0 [ 292.359673][ T9075] ? __pfx_handle_mm_fault+0x10/0x10 [ 292.359686][ T9075] ? follow_page_pte+0xc95/0xf20 [ 292.359704][ T9075] ? __pfx_follow_page_pte+0x10/0x10 [ 292.359722][ T9075] __get_user_pages+0x1676/0x2650 [ 292.359750][ T9075] get_user_pages_remote+0x307/0xb10 [ 292.359763][ T9075] ? __pfx_mtree_load+0x10/0x10 [ 292.359777][ T9075] ? __pfx_get_user_pages_remote+0x10/0x10 [ 292.359794][ T9075] __access_remote_vm+0x222/0x6f0 [ 292.359809][ T9075] ? ptracer_access_allowed+0x22/0x320 [ 292.359824][ T9075] ? __pfx___access_remote_vm+0x10/0x10 [ 292.359836][ T9075] ? ptracer_access_allowed+0x22/0x320 [ 292.359847][ T9075] ? ptracer_access_allowed+0x22/0x320 [ 292.359857][ T9075] ? ptracer_access_allowed+0x22/0x320 [ 292.359869][ T9075] ? ptracer_access_allowed+0x210/0x320 [ 292.359881][ T9075] ptrace_request+0xa5a/0x2450 [ 292.359897][ T9075] ? __pfx_ptrace_request+0x10/0x10 [ 292.359909][ T9075] ? do_raw_spin_lock+0x12b/0x2f0 [ 292.359925][ T9075] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 292.359939][ T9075] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 292.359960][ T9075] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 292.359970][ T9075] ? lockdep_hardirqs_on+0x7a/0x110 [ 292.359979][ T9075] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 292.359989][ T9075] ? wait_task_inactive+0x42f/0x800 [ 292.360000][ T9075] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 292.360018][ T9075] ? __pfx_wait_task_inactive+0x10/0x10 [ 292.360038][ T9075] ? rt_read_unlock+0x17f/0x340 [ 292.360054][ T9075] arch_ptrace+0x289/0x410 [ 292.360069][ T9075] __se_sys_ptrace+0x150/0x3a0 [ 292.360083][ T9075] ? __pfx___se_sys_ptrace+0x10/0x10 [ 292.360099][ T9075] do_syscall_64+0x17b/0x530 [ 292.360110][ T9075] ? irqentry_exit+0x10f/0x8f0 [ 292.360119][ T9075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.360129][ T9075] ? clear_bhb_loop+0x40/0x90 [ 292.360142][ T9075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.360152][ T9075] RIP: 0033:0x7fbd8f8ce0d9 [ 292.360162][ T9075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.360170][ T9075] RSP: 002b:00007fbd8db26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 292.360182][ T9075] RAX: ffffffffffffffda RBX: 00007fbd8fb55fa0 RCX: 00007fbd8f8ce0d9 [ 292.360189][ T9075] RDX: 0000200000000080 RSI: 000000000000009d RDI: 0000000000000005 [ 292.360195][ T9075] RBP: 00007fbd8db26090 R08: 0000000000000000 R09: 0000000000000000 [ 292.360201][ T9075] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000001 [ 292.360207][ T9075] R13: 00007fbd8fb56038 R14: 00007fbd8fb55fa0 R15: 00007fff9cbdc4f8 [ 292.360223][ T9075] [ 292.451493][ T9] usb 9-1: USB disconnect, device number 14 [ 292.453399][ T5609] usb 8-1: Using ep0 maxpacket: 16 [ 292.540246][ T5609] usb 8-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 292.540264][ T5609] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.540274][ T5609] usb 8-1: Product: syz [ 292.540282][ T5609] usb 8-1: Manufacturer: syz [ 292.540289][ T5609] usb 8-1: SerialNumber: syz [ 292.901715][ T5609] usb 8-1: config 0 descriptor?? [ 292.927432][ T5609] visor 8-1:0.0: Sony Clie 3.5 converter detected [ 293.122393][ T5609] usb 8-1: clie_3_5_startup: get config number bad return length: 0 [ 293.122529][ T5609] visor 8-1:0.0: probe with driver visor failed with error -5 [ 293.357723][ T9065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.358271][ T9065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.027761][ T9097] netlink: 16 bytes leftover after parsing attributes in process `syz.9.940'. [ 294.087146][ T9100] FAULT_FLAG_ALLOW_RETRY missing 801 [ 294.087174][ T9100] CPU: 0 UID: 0 PID: 9100 Comm: syz.9.940 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 294.087203][ T9100] Tainted: [L]=SOFTLOCKUP [ 294.087210][ T9100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 294.087222][ T9100] Call Trace: [ 294.087229][ T9100] [ 294.087238][ T9100] dump_stack_lvl+0xe8/0x150 [ 294.087269][ T9100] handle_userfault+0x123d/0x1990 [ 294.087291][ T9100] ? __pfx___free_frozen_pages+0x10/0x10 [ 294.087334][ T9100] ? __folio_put+0x30f/0x3c0 [ 294.087366][ T9100] ? __pfx___folio_put+0x10/0x10 [ 294.087397][ T9100] ? __pfx_handle_userfault+0x10/0x10 [ 294.087426][ T9100] ? do_pte_missing+0x26ce/0x28f0 [ 294.087473][ T9100] handle_mm_fault+0xf95/0x28d0 [ 294.087501][ T9100] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 294.087531][ T9100] ? handle_mm_fault+0xeb/0x28d0 [ 294.087565][ T9100] ? __pfx_handle_mm_fault+0x10/0x10 [ 294.087592][ T9100] ? follow_page_pte+0x74b/0xf20 [ 294.087627][ T9100] ? __pfx_follow_page_pte+0x10/0x10 [ 294.087663][ T9100] __get_user_pages+0x1676/0x2650 [ 294.087721][ T9100] populate_vma_page_range+0x2be/0x3c0 [ 294.087750][ T9100] ? __pfx_populate_vma_page_range+0x10/0x10 [ 294.087773][ T9100] ? vma_wants_writenotify+0xb2/0x340 [ 294.087799][ T9100] ? vma_set_page_prot+0xc3/0x100 [ 294.087825][ T9100] mprotect_fixup+0x937/0xad0 [ 294.087850][ T9100] ? __pfx_mprotect_fixup+0x10/0x10 [ 294.087879][ T9100] ? mas_next_slot+0xc94/0xd70 [ 294.087920][ T9100] do_mprotect_pkey+0x9d3/0xcd0 [ 294.087954][ T9100] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 294.087997][ T9100] ? __fget_files+0x3a8/0x420 [ 294.088018][ T9100] ? __pfx___se_sys_futex+0x10/0x10 [ 294.088053][ T9100] __x64_sys_mprotect+0x80/0x90 [ 294.088075][ T9100] do_syscall_64+0x17b/0x530 [ 294.088094][ T9100] ? irqentry_exit+0x10f/0x8f0 [ 294.088112][ T9100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.088133][ T9100] ? clear_bhb_loop+0x40/0x90 [ 294.088157][ T9100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.088177][ T9100] RIP: 0033:0x7fbd8f8ce0d9 [ 294.088196][ T9100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.088213][ T9100] RSP: 002b:00007fbd8db05028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 294.088235][ T9100] RAX: ffffffffffffffda RBX: 00007fbd8fb56090 RCX: 00007fbd8f8ce0d9 [ 294.088250][ T9100] RDX: 000000000000000f RSI: 0000000000004000 RDI: 0000200000ffc000 [ 294.088264][ T9100] RBP: 00007fbd8f965024 R08: 0000000000000000 R09: 0000000000000000 [ 294.088277][ T9100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.088288][ T9100] R13: 00007fbd8fb56128 R14: 00007fbd8fb56090 R15: 00007fff9cbdc4f8 [ 294.088320][ T9100] [ 294.684936][ T5609] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 294.856233][ T5609] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 294.856251][ T5609] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 294.858376][ T5609] usb 9-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 294.858403][ T5609] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.858421][ T5609] usb 9-1: Product: syz [ 294.858431][ T5609] usb 9-1: Manufacturer: syz [ 294.858439][ T5609] usb 9-1: SerialNumber: syz [ 294.936821][ T5609] kalmia 9-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -90 [ 294.936992][ T5609] kalmia 9-1:1.0: probe with driver kalmia failed with error -90 [ 295.149969][ T5609] usb 8-1: USB disconnect, device number 40 [ 295.150030][ T5696] usb 9-1: USB disconnect, device number 15 [ 295.211865][ T9116] FAULT_INJECTION: forcing a failure. [ 295.211865][ T9116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.211900][ T9116] CPU: 1 UID: 0 PID: 9116 Comm: syz.9.947 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 295.211926][ T9116] Tainted: [L]=SOFTLOCKUP [ 295.211933][ T9116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.211944][ T9116] Call Trace: [ 295.211951][ T9116] [ 295.211959][ T9116] dump_stack_lvl+0xe8/0x150 [ 295.211989][ T9116] should_fail_ex+0x467/0x600 [ 295.212018][ T9116] _copy_to_user+0x31/0xb0 [ 295.212038][ T9116] simple_read_from_buffer+0xe1/0x170 [ 295.212062][ T9116] proc_fail_nth_read+0x1be/0x230 [ 295.212084][ T9116] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 295.212107][ T9116] ? rw_verify_area+0x250/0x4d0 [ 295.212126][ T9116] ? get_signal+0x10f/0x12c0 [ 295.212144][ T9116] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 295.212162][ T9116] vfs_read+0x219/0xa90 [ 295.212190][ T9116] ? __pfx_vfs_read+0x10/0x10 [ 295.212212][ T9116] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 295.212232][ T9116] ? lockdep_hardirqs_on+0x7a/0x110 [ 295.212250][ T9116] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 295.212268][ T9116] ? mutex_lock_nested+0x152/0x1d0 [ 295.212290][ T9116] ? fdget_pos+0x252/0x320 [ 295.212316][ T9116] ksys_read+0x156/0x270 [ 295.212340][ T9116] ? __pfx_ksys_read+0x10/0x10 [ 295.212371][ T9116] do_syscall_64+0x17b/0x530 [ 295.212389][ T9116] ? irqentry_exit+0x10f/0x8f0 [ 295.212406][ T9116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.212425][ T9116] ? clear_bhb_loop+0x40/0x90 [ 295.212448][ T9116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.212466][ T9116] RIP: 0033:0x7fbd8f88e90e [ 295.212484][ T9116] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 295.212499][ T9116] RSP: 002b:00007fbd8db25fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 295.212519][ T9116] RAX: ffffffffffffffda RBX: 00007fbd8db266c0 RCX: 00007fbd8f88e90e [ 295.212534][ T9116] RDX: 000000000000000f RSI: 00007fbd8db260a0 RDI: 0000000000000005 [ 295.212546][ T9116] RBP: 00007fbd8db26090 R08: 0000000000000000 R09: 0000000000000000 [ 295.212558][ T9116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.212572][ T9116] R13: 00007fbd8fb56038 R14: 00007fbd8fb55fa0 R15: 00007fff9cbdc4f8 [ 295.212604][ T9116] [ 295.558299][ T9125] netlink: 'syz.7.950': attribute type 1 has an invalid length. [ 295.746609][ T9130] FAULT_INJECTION: forcing a failure. [ 295.746609][ T9130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.746644][ T9130] CPU: 1 UID: 0 PID: 9130 Comm: syz.8.953 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 295.746672][ T9130] Tainted: [L]=SOFTLOCKUP [ 295.746678][ T9130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.746690][ T9130] Call Trace: [ 295.746705][ T9130] [ 295.746713][ T9130] dump_stack_lvl+0xe8/0x150 [ 295.746742][ T9130] should_fail_ex+0x467/0x600 [ 295.746774][ T9130] _copy_from_iter+0x1d3/0x1660 [ 295.746814][ T9130] ? __pfx__copy_from_iter+0x10/0x10 [ 295.746841][ T9130] ? trace_kmalloc+0x2a/0xf0 [ 295.746872][ T9130] ? __kmalloc_noprof+0x436/0x790 [ 295.746900][ T9130] ? kernfs_fop_write_iter+0x158/0x540 [ 295.746933][ T9130] kernfs_fop_write_iter+0x19b/0x540 [ 295.746965][ T9130] vfs_write+0x61e/0xbb0 [ 295.746997][ T9130] ? __pfx_vfs_write+0x10/0x10 [ 295.747023][ T9130] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 295.747044][ T9130] ? lockdep_hardirqs_on+0x7a/0x110 [ 295.747064][ T9130] ? mutex_lock_nested+0x152/0x1d0 [ 295.747088][ T9130] ? fdget_pos+0x252/0x320 [ 295.747117][ T9130] ksys_write+0x156/0x270 [ 295.747143][ T9130] ? __pfx_ksys_write+0x10/0x10 [ 295.747178][ T9130] do_syscall_64+0x17b/0x530 [ 295.747197][ T9130] ? irqentry_exit+0x10f/0x8f0 [ 295.747216][ T9130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.747236][ T9130] ? clear_bhb_loop+0x40/0x90 [ 295.747260][ T9130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.747279][ T9130] RIP: 0033:0x7fb28d38e0d9 [ 295.747296][ T9130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.747313][ T9130] RSP: 002b:00007fb28b5e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 295.747333][ T9130] RAX: ffffffffffffffda RBX: 00007fb28d615fa0 RCX: 00007fb28d38e0d9 [ 295.747347][ T9130] RDX: 0000000000000007 RSI: 00002000000001c0 RDI: 0000000000000003 [ 295.747358][ T9130] RBP: 00007fb28b5e6090 R08: 0000000000000000 R09: 0000000000000000 [ 295.747369][ T9130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.747381][ T9130] R13: 00007fb28d616038 R14: 00007fb28d615fa0 R15: 00007ffcfa617bc8 [ 295.747414][ T9130] [ 296.213768][ T5696] usb 8-1: new full-speed USB device number 41 using dummy_hcd [ 296.346738][ T5703] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 296.389089][ T5696] usb 8-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 296.389121][ T5696] usb 8-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 296.389146][ T5696] usb 8-1: Product: syz [ 296.389156][ T5696] usb 8-1: Manufacturer: syz [ 296.389163][ T5696] usb 8-1: SerialNumber: syz [ 296.393479][ T5696] usb 8-1: config 0 descriptor?? [ 296.517214][ T5703] usb 9-1: config 0 has an invalid interface number: 117 but max is 0 [ 296.517241][ T5703] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.517252][ T5703] usb 9-1: config 0 has no interface number 0 [ 296.517278][ T5703] usb 9-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 296.517326][ T5703] usb 9-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 296.517339][ T5703] usb 9-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.525229][ T5703] usb 9-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 296.525462][ T5703] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.525482][ T5703] usb 9-1: Product: syz [ 296.525495][ T5703] usb 9-1: Manufacturer: syz [ 296.525507][ T5703] usb 9-1: SerialNumber: syz [ 296.589966][ T5703] usb 9-1: config 0 descriptor?? [ 296.690651][ T5696] peak_usb 8-1:0.0: PEAK-System PCAN-Chip USB v232 fw v223.90.95 (1 channels) [ 296.890097][ T5696] peak_usb 8-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 296.890126][ T5696] peak_usb 8-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 296.973477][ T38] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 296.976350][ T5696] peak_usb 8-1:0.0: probe with driver peak_usb failed with error -71 [ 296.981802][ T5696] usb 8-1: USB disconnect, device number 41 [ 297.123382][ T38] usb 10-1: Using ep0 maxpacket: 16 [ 297.127485][ T38] usb 10-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 297.127513][ T38] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.127532][ T38] usb 10-1: Product: syz [ 297.127543][ T38] usb 10-1: Manufacturer: syz [ 297.127550][ T38] usb 10-1: SerialNumber: syz [ 297.130610][ T38] usb 10-1: config 0 descriptor?? [ 297.185003][ T5696] usb 9-1: USB disconnect, device number 16 [ 297.196790][ T38] visor 10-1:0.0: Sony Clie 3.5 converter detected [ 297.337521][ T38] usb 10-1: clie_3_5_startup: get config number bad return length: 0 [ 297.337623][ T38] visor 10-1:0.0: probe with driver visor failed with error -5 [ 297.557953][ T9144] Bluetooth: MGMT ver 1.23 [ 297.558182][ T9138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.559174][ T9138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.559375][ T9144] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 297.670011][ T9147] FAULT_INJECTION: forcing a failure. [ 297.670011][ T9147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.670046][ T9147] CPU: 0 UID: 0 PID: 9147 Comm: syz.7.961 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 297.670073][ T9147] Tainted: [L]=SOFTLOCKUP [ 297.670080][ T9147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 297.670091][ T9147] Call Trace: [ 297.670098][ T9147] [ 297.670106][ T9147] dump_stack_lvl+0xe8/0x150 [ 297.670141][ T9147] should_fail_ex+0x467/0x600 [ 297.670170][ T9147] _copy_from_user+0x2d/0xb0 [ 297.670189][ T9147] do_sock_getsockopt+0x462/0x7e0 [ 297.670223][ T9147] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 297.670265][ T9147] ? __fget_files+0x2a/0x420 [ 297.670284][ T9147] ? __fget_files+0x3a8/0x420 [ 297.670303][ T9147] ? __fget_files+0x2a/0x420 [ 297.670326][ T9147] __x64_sys_getsockopt+0x1aa/0x250 [ 297.670362][ T9147] do_syscall_64+0x17b/0x530 [ 297.670382][ T9147] ? irqentry_exit+0x10f/0x8f0 [ 297.670400][ T9147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.670419][ T9147] ? clear_bhb_loop+0x40/0x90 [ 297.670442][ T9147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.670460][ T9147] RIP: 0033:0x7f957752e0d9 [ 297.670478][ T9147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.670494][ T9147] RSP: 002b:00007f9575786028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 297.670514][ T9147] RAX: ffffffffffffffda RBX: 00007f95777b5fa0 RCX: 00007f957752e0d9 [ 297.670541][ T9147] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 0000000000000003 [ 297.670554][ T9147] RBP: 00007f9575786090 R08: 0000200000000000 R09: 0000000000000000 [ 297.670566][ T9147] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001 [ 297.670579][ T9147] R13: 00007f95777b6038 R14: 00007f95777b5fa0 R15: 00007fffe5813d58 [ 297.670609][ T9147] [ 298.083935][ T9155] FAULT_INJECTION: forcing a failure. [ 298.083935][ T9155] name failslab, interval 1, probability 0, space 0, times 0 [ 298.083971][ T9155] CPU: 0 UID: 0 PID: 9155 Comm: syz.6.965 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 298.084006][ T9155] Tainted: [L]=SOFTLOCKUP [ 298.084012][ T9155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.084024][ T9155] Call Trace: [ 298.084032][ T9155] [ 298.084040][ T9155] dump_stack_lvl+0xe8/0x150 [ 298.084069][ T9155] should_fail_ex+0x467/0x600 [ 298.084099][ T9155] should_failslab+0xa8/0x100 [ 298.084120][ T9155] __kmalloc_noprof+0xfb/0x790 [ 298.084148][ T9155] ? tomoyo_encode+0x2ad/0x570 [ 298.084176][ T9155] ? tomoyo_encode+0x2ad/0x570 [ 298.084210][ T9155] tomoyo_encode+0x2ad/0x570 [ 298.084244][ T9155] tomoyo_realpath_from_path+0x5fa/0x640 [ 298.084283][ T9155] ? tomoyo_path_number_perm+0x219/0x5f0 [ 298.084308][ T9155] tomoyo_path_number_perm+0x246/0x5f0 [ 298.084335][ T9155] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 298.084360][ T9155] ? do_raw_spin_lock+0x12b/0x2f0 [ 298.084400][ T9155] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 298.084420][ T9155] ? lockdep_hardirqs_on+0x7a/0x110 [ 298.084455][ T9155] ? __fget_files+0x2a/0x420 [ 298.084478][ T9155] ? __fget_files+0x3a8/0x420 [ 298.084497][ T9155] ? __fget_files+0x2a/0x420 [ 298.084520][ T9155] security_file_ioctl+0xb9/0x260 [ 298.084545][ T9155] __se_sys_ioctl+0x47/0x170 [ 298.084574][ T9155] do_syscall_64+0x17b/0x530 [ 298.084593][ T9155] ? irqentry_exit+0x10f/0x8f0 [ 298.084611][ T9155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.084634][ T9155] ? clear_bhb_loop+0x40/0x90 [ 298.084659][ T9155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.084678][ T9155] RIP: 0033:0x7fa5b80be0d9 [ 298.084696][ T9155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.084713][ T9155] RSP: 002b:00007fa5b6316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.084733][ T9155] RAX: ffffffffffffffda RBX: 00007fa5b8345fa0 RCX: 00007fa5b80be0d9 [ 298.084748][ T9155] RDX: 0000200000000080 RSI: 00000000c0285629 RDI: 0000000000000003 [ 298.084761][ T9155] RBP: 00007fa5b6316090 R08: 0000000000000000 R09: 0000000000000000 [ 298.084773][ T9155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.084785][ T9155] R13: 00007fa5b8346038 R14: 00007fa5b8345fa0 R15: 00007ffde6cef5d8 [ 298.084816][ T9155] [ 298.084860][ T9155] ERROR: Out of memory at tomoyo_realpath_from_path. [ 298.113442][ T5744] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 298.266268][ T5744] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 298.266295][ T5744] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.266312][ T5744] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 298.266331][ T5744] usb 9-1: config 1 has no interface number 1 [ 298.266371][ T5744] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 298.266408][ T5744] usb 9-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x6F, changing to 0xF [ 298.266433][ T5744] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 298.266462][ T5744] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0xF has invalid maxpacket 1280, setting to 1024 [ 298.269923][ T5744] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 298.269950][ T5744] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.269968][ T5744] usb 9-1: Product: syz [ 298.269981][ T5744] usb 9-1: Manufacturer: syz [ 298.269995][ T5744] usb 9-1: SerialNumber: syz [ 298.687912][ T9151] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 298.691433][ T5744] usb 9-1: No MIDI endpoints found [ 298.691452][ T5744] usb 9-1: Failed to parse MIDI 2.0 interface [ 298.691494][ T5744] usb 9-1: 0:2: cannot create sequencer device [ 298.899163][ T5609] usb 9-1: USB disconnect, device number 17 [ 299.075320][ T5744] usb 8-1: new full-speed USB device number 42 using dummy_hcd [ 299.240355][ T5744] usb 8-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 299.240384][ T5744] usb 8-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 299.240403][ T5744] usb 8-1: Product: syz [ 299.240417][ T5744] usb 8-1: Manufacturer: syz [ 299.240427][ T5744] usb 8-1: SerialNumber: syz [ 299.245526][ T5744] usb 8-1: config 0 descriptor?? [ 299.485743][ T5744] peak_usb 8-1:0.0: PEAK-System PCAN-Chip USB v232 fw v223.90.95 (1 channels) [ 299.696522][ T5744] peak_usb 8-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 299.696553][ T5744] peak_usb 8-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 299.758718][ T5609] usb 10-1: USB disconnect, device number 12 [ 299.824728][ T5744] peak_usb 8-1:0.0: probe with driver peak_usb failed with error -71 [ 299.843928][ T5744] usb 8-1: USB disconnect, device number 42 [ 300.133509][ T5609] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 300.294252][ T9175] FAULT_INJECTION: forcing a failure. [ 300.294252][ T9175] name failslab, interval 1, probability 0, space 0, times 0 [ 300.294294][ T9175] CPU: 0 UID: 0 PID: 9175 Comm: syz.7.973 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 300.294320][ T9175] Tainted: [L]=SOFTLOCKUP [ 300.294327][ T9175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 300.294339][ T9175] Call Trace: [ 300.294346][ T9175] [ 300.294355][ T9175] dump_stack_lvl+0xe8/0x150 [ 300.294384][ T9175] should_fail_ex+0x467/0x600 [ 300.294414][ T9175] should_failslab+0xa8/0x100 [ 300.294435][ T9175] __kmalloc_noprof+0xfb/0x790 [ 300.294463][ T9175] ? tomoyo_encode+0x2ad/0x570 [ 300.294489][ T9175] ? tomoyo_encode+0x2ad/0x570 [ 300.294523][ T9175] tomoyo_encode+0x2ad/0x570 [ 300.294556][ T9175] tomoyo_realpath_from_path+0x5fa/0x640 [ 300.294597][ T9175] ? tomoyo_path_number_perm+0x219/0x5f0 [ 300.294622][ T9175] tomoyo_path_number_perm+0x246/0x5f0 [ 300.294649][ T9175] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 300.294675][ T9175] ? do_raw_spin_lock+0x12b/0x2f0 [ 300.294713][ T9175] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 300.294733][ T9175] ? lockdep_hardirqs_on+0x7a/0x110 [ 300.294768][ T9175] ? __fget_files+0x2a/0x420 [ 300.294793][ T9175] ? __fget_files+0x3a8/0x420 [ 300.294810][ T9175] ? __fget_files+0x2a/0x420 [ 300.294834][ T9175] security_file_ioctl+0xb9/0x260 [ 300.294858][ T9175] __se_sys_ioctl+0x47/0x170 [ 300.294887][ T9175] do_syscall_64+0x17b/0x530 [ 300.294904][ T9175] ? irqentry_exit+0x10f/0x8f0 [ 300.294921][ T9175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.294940][ T9175] ? clear_bhb_loop+0x40/0x90 [ 300.294963][ T9175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.294981][ T9175] RIP: 0033:0x7f957752e0d9 [ 300.294998][ T9175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.295014][ T9175] RSP: 002b:00007f9575786028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.295034][ T9175] RAX: ffffffffffffffda RBX: 00007f95777b5fa0 RCX: 00007f957752e0d9 [ 300.295047][ T9175] RDX: 0000200000000180 RSI: 00000000400448c8 RDI: 0000000000000004 [ 300.295059][ T9175] RBP: 00007f9575786090 R08: 0000000000000000 R09: 0000000000000000 [ 300.295070][ T9175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.295081][ T9175] R13: 00007f95777b6038 R14: 00007f95777b5fa0 R15: 00007fffe5813d58 [ 300.295111][ T9175] [ 300.295140][ T9175] ERROR: Out of memory at tomoyo_realpath_from_path. [ 300.298657][ T5609] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.302292][ T5609] usb 10-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 300.302320][ T5609] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.302337][ T5609] usb 10-1: Product: syz [ 300.302344][ T5609] usb 10-1: Manufacturer: syz [ 300.302351][ T5609] usb 10-1: SerialNumber: syz [ 300.596570][ T5609] ttusb_dec_init_stb: unknown model returned by firmware (00000000) - please report [ 300.596782][ T5609] ttusb-dec 10-1:1.0: probe with driver ttusb-dec failed with error -2 [ 301.721716][ T9187] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 301.721733][ T9187] CIFS mount error: No usable UNC path provided in device string! [ 301.721733][ T9187] [ 301.721947][ T9187] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 302.115186][ T5703] usb 8-1: new full-speed USB device number 43 using dummy_hcd [ 302.183434][ T5696] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 302.243408][ T5703] usb 8-1: device descriptor read/64, error -71 [ 302.333503][ T5696] usb 9-1: Using ep0 maxpacket: 16 [ 302.337575][ T5696] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 302.337603][ T5696] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.337621][ T5696] usb 9-1: Product: syz [ 302.337634][ T5696] usb 9-1: Manufacturer: syz [ 302.337642][ T5696] usb 9-1: SerialNumber: syz [ 302.341547][ T5696] usb 9-1: config 0 descriptor?? [ 302.352064][ T5696] visor 9-1:0.0: Sony Clie 3.5 converter detected [ 302.493477][ T5703] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 302.550044][ T5696] usb 9-1: clie_3_5_startup: get config number bad return length: 0 [ 302.550145][ T5696] visor 9-1:0.0: probe with driver visor failed with error -5 [ 302.623482][ T5703] usb 8-1: device descriptor read/64, error -71 [ 302.734676][ T5703] usb usb8-port1: attempt power cycle [ 302.754991][ T9193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.755580][ T9193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.874704][ T9] usb 10-1: USB disconnect, device number 13 [ 302.925013][ T9198] FAULT_INJECTION: forcing a failure. [ 302.925013][ T9198] name failslab, interval 1, probability 0, space 0, times 0 [ 302.925049][ T9198] CPU: 1 UID: 0 PID: 9198 Comm: syz.9.982 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 302.925075][ T9198] Tainted: [L]=SOFTLOCKUP [ 302.925082][ T9198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 302.925094][ T9198] Call Trace: [ 302.925101][ T9198] [ 302.925109][ T9198] dump_stack_lvl+0xe8/0x150 [ 302.925139][ T9198] should_fail_ex+0x467/0x600 [ 302.925169][ T9198] should_failslab+0xa8/0x100 [ 302.925190][ T9198] kmem_cache_alloc_node_noprof+0xac/0x660 [ 302.925218][ T9198] ? __alloc_skb+0x1d7/0x7a0 [ 302.925242][ T9198] ? __alloc_skb+0x1d7/0x7a0 [ 302.925271][ T9198] __alloc_skb+0x1d7/0x7a0 [ 302.925300][ T9198] netlink_sendmsg+0x5d4/0xb40 [ 302.925343][ T9198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.925374][ T9198] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 302.925407][ T9198] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 302.925436][ T9198] ? arch_stack_walk+0xfb/0x150 [ 302.925468][ T9198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.925497][ T9198] sock_sendmsg_nosec+0x13a/0x180 [ 302.925528][ T9198] ____sys_sendmsg+0x565/0x870 [ 302.925565][ T9198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.925603][ T9198] ? import_iovec+0x73/0xa0 [ 302.925636][ T9198] ___sys_sendmsg+0x2a5/0x360 [ 302.925663][ T9198] ? __lock_acquire+0x6df/0x2e40 [ 302.925685][ T9198] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.925746][ T9198] ? __fget_files+0x2a/0x420 [ 302.925765][ T9198] ? __fget_files+0x3a8/0x420 [ 302.925795][ T9198] __x64_sys_sendmsg+0x1b7/0x290 [ 302.925826][ T9198] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.925873][ T9198] do_syscall_64+0x17b/0x530 [ 302.925893][ T9198] ? irqentry_exit+0x10f/0x8f0 [ 302.925912][ T9198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.925932][ T9198] ? clear_bhb_loop+0x40/0x90 [ 302.925955][ T9198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.925974][ T9198] RIP: 0033:0x7fbd8f8ce0d9 [ 302.926017][ T9198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.926033][ T9198] RSP: 002b:00007fbd8db26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.926054][ T9198] RAX: ffffffffffffffda RBX: 00007fbd8fb55fa0 RCX: 00007fbd8f8ce0d9 [ 302.926068][ T9198] RDX: 0000000004048004 RSI: 0000200000000c40 RDI: 0000000000000004 [ 302.926081][ T9198] RBP: 00007fbd8db26090 R08: 0000000000000000 R09: 0000000000000000 [ 302.926094][ T9198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.926106][ T9198] R13: 00007fbd8fb56038 R14: 00007fbd8fb55fa0 R15: 00007fff9cbdc4f8 [ 302.926133][ T9198] [ 303.093744][ T5703] usb 8-1: new full-speed USB device number 45 using dummy_hcd [ 303.118544][ T5703] usb 8-1: device descriptor read/8, error -71 [ 303.353491][ T5703] usb 8-1: new full-speed USB device number 46 using dummy_hcd [ 303.375684][ T5703] usb 8-1: device descriptor read/8, error -71 [ 303.484121][ T5609] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 303.484451][ T5703] usb usb8-port1: unable to enumerate USB device [ 303.663592][ T5609] usb 10-1: Using ep0 maxpacket: 16 [ 303.666945][ T5609] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 303.666963][ T5609] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 303.669666][ T5609] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 303.669695][ T5609] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.669714][ T5609] usb 10-1: Product: 咨㡈㑿Ἰ⻤啛웼煽赣䀍㰁푄쬡鄊玎웛迬纎ﺻぜ쫟姑䉋鼾Ɱ蝠ᄟꊊ蚋྅妐숽㻄漇暰誱ꤘ呐䀦딝ⷶ튈뒭፫灮⓬쨀炯汜鯊㱼ᷱ섍쯄朹ଳ启ꜞ䌋鉁瓨ᎃ㰙暟ద硇ౙ싚嚓荔ﲙ଼큎뀳뼘쵋䢯悎듒拱䒫㿭簃㱸䐅䉨ͥ⏏ꛡ닁羖感衭 [ 303.669744][ T5609] usb 10-1: Manufacturer: П [ 303.669757][ T5609] usb 10-1: SerialNumber: 㑥 [ 303.756105][ T5609] usb 10-1: rejected 1 configuration due to insufficient available bus power [ 303.756122][ T5609] usb 10-1: no configuration chosen from 1 choice [ 305.002368][ T9] usb 9-1: USB disconnect, device number 18 [ 305.140773][ T6589] do_umount: task=syz-executor[6589] propagate_mount_busy()!=0 [ 305.141046][ T6589] do_umount: task=syz-executor[6589] propagate_mount_busy()!=0 [ 305.141492][ T6589] do_umount: task=syz-executor[6589] propagate_mount_busy()!=0 [ 305.141959][ T6589] do_umount: task=syz-executor[6589] propagate_mount_busy()!=0 [ 305.244827][ T9207] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 305.362750][ T9207] netlink: 164 bytes leftover after parsing attributes in process `syz.6.987'. [ 305.464458][ T9211] FAULT_INJECTION: forcing a failure. [ 305.464458][ T9211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.464480][ T9211] CPU: 0 UID: 0 PID: 9211 Comm: syz.6.989 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 305.464499][ T9211] Tainted: [L]=SOFTLOCKUP [ 305.464503][ T9211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.464509][ T9211] Call Trace: [ 305.464513][ T9211] [ 305.464518][ T9211] dump_stack_lvl+0xe8/0x150 [ 305.464536][ T9211] should_fail_ex+0x467/0x600 [ 305.464553][ T9211] strncpy_from_user+0x36/0x2c0 [ 305.464567][ T9211] do_getname+0x77/0x250 [ 305.464585][ T9211] user_path_at+0x2a/0x160 [ 305.464597][ T9211] __x64_sys_umount+0xf6/0x170 [ 305.464612][ T9211] ? __pfx___x64_sys_umount+0x10/0x10 [ 305.464632][ T9211] do_syscall_64+0x17b/0x530 [ 305.464643][ T9211] ? irqentry_exit+0x10f/0x8f0 [ 305.464652][ T9211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.464663][ T9211] ? clear_bhb_loop+0x40/0x90 [ 305.464675][ T9211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.464685][ T9211] RIP: 0033:0x7fa5b80be0d9 [ 305.464695][ T9211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.464704][ T9211] RSP: 002b:00007fa5b6316028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 305.464715][ T9211] RAX: ffffffffffffffda RBX: 00007fa5b8345fa0 RCX: 00007fa5b80be0d9 [ 305.464723][ T9211] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00002000000000c0 [ 305.464729][ T9211] RBP: 00007fa5b6316090 R08: 0000000000000000 R09: 0000000000000000 [ 305.464735][ T9211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.464741][ T9211] R13: 00007fa5b8346038 R14: 00007fa5b8345fa0 R15: 00007ffde6cef5d8 [ 305.464756][ T9211] [ 305.615078][ T6276] do_umount: task=syz-executor[6276] propagate_mount_busy()!=0 [ 305.615362][ T6276] do_umount: task=syz-executor[6276] propagate_mount_busy()!=0 [ 305.674981][ T6276] do_umount: task=syz-executor[6276] propagate_mount_busy()!=0 [ 305.675248][ T6276] do_umount: task=syz-executor[6276] propagate_mount_busy()!=0 [ 305.675748][ T6276] do_umount: task=syz-executor[6276] propagate_mount_busy()!=0 [ 305.675990][ T6276] do_umount: task=syz-executor[6276] propagate_mount_busy()!=0 [ 306.150742][ T5703] usb 10-1: USB disconnect, device number 14 [ 306.570790][ T9220] FAULT_INJECTION: forcing a failure. [ 306.570790][ T9220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.570826][ T9220] CPU: 1 UID: 0 PID: 9220 Comm: syz.8.996 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 306.570853][ T9220] Tainted: [L]=SOFTLOCKUP [ 306.570859][ T9220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.570870][ T9220] Call Trace: [ 306.570877][ T9220] [ 306.570885][ T9220] dump_stack_lvl+0xe8/0x150 [ 306.570915][ T9220] should_fail_ex+0x467/0x600 [ 306.570946][ T9220] _copy_from_iter+0x1d3/0x1660 [ 306.570980][ T9220] ? file_tty_write+0x2ac/0x980 [ 306.571011][ T9220] ? file_tty_write+0x2ac/0x980 [ 306.571040][ T9220] ? __pfx__copy_from_iter+0x10/0x10 [ 306.571067][ T9220] ? file_tty_write+0x2ac/0x980 [ 306.571097][ T9220] ? rcu_is_watching+0x15/0xb0 [ 306.571120][ T9220] ? kfree+0x4d/0x6c0 [ 306.571151][ T9220] file_tty_write+0x48a/0x980 [ 306.571197][ T9220] vfs_write+0x61e/0xbb0 [ 306.571229][ T9220] ? __pfx_vfs_write+0x10/0x10 [ 306.571261][ T9220] ? __fget_files+0x2a/0x420 [ 306.571290][ T9220] ksys_write+0x156/0x270 [ 306.571315][ T9220] ? __pfx_ksys_write+0x10/0x10 [ 306.571348][ T9220] do_syscall_64+0x17b/0x530 [ 306.571369][ T9220] ? irqentry_exit+0x10f/0x8f0 [ 306.571387][ T9220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.571407][ T9220] ? clear_bhb_loop+0x40/0x90 [ 306.571431][ T9220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.571450][ T9220] RIP: 0033:0x7fb28d38e0d9 [ 306.571468][ T9220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.571485][ T9220] RSP: 002b:00007fb28b5e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 306.571505][ T9220] RAX: ffffffffffffffda RBX: 00007fb28d615fa0 RCX: 00007fb28d38e0d9 [ 306.571519][ T9220] RDX: 0000000000001006 RSI: 0000200000001980 RDI: 0000000000000004 [ 306.571532][ T9220] RBP: 00007fb28b5e6090 R08: 0000000000000000 R09: 0000000000000000 [ 306.571544][ T9220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.571556][ T9220] R13: 00007fb28d616038 R14: 00007fb28d615fa0 R15: 00007ffcfa617bc8 [ 306.571587][ T9220] [ 306.724138][ T5596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 306.756886][ T5596] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 306.779369][ T5596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.793154][ T5596] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.818298][ T5744] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 306.839793][ T5596] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 307.118724][ T5744] usb 10-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 307.118751][ T5744] usb 10-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 307.118769][ T5744] usb 10-1: Product: syz [ 307.118780][ T5744] usb 10-1: Manufacturer: syz [ 307.118791][ T5744] usb 10-1: SerialNumber: syz [ 307.210010][ T5744] usb 10-1: config 0 descriptor?? [ 307.431428][ T5744] peak_usb 10-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 307.461585][ T9232] FAULT_INJECTION: forcing a failure. [ 307.461585][ T9232] name failslab, interval 1, probability 0, space 0, times 0 [ 307.461620][ T9232] CPU: 0 UID: 0 PID: 9232 Comm: syz.8.1000 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 307.461646][ T9232] Tainted: [L]=SOFTLOCKUP [ 307.461653][ T9232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 307.461664][ T9232] Call Trace: [ 307.461672][ T9232] [ 307.461679][ T9232] dump_stack_lvl+0xe8/0x150 [ 307.461707][ T9232] should_fail_ex+0x467/0x600 [ 307.461734][ T9232] should_failslab+0xa8/0x100 [ 307.461754][ T9232] __kmalloc_noprof+0xfb/0x790 [ 307.461782][ T9232] ? tomoyo_encode+0x2ad/0x570 [ 307.461809][ T9232] ? tomoyo_encode+0x2ad/0x570 [ 307.461844][ T9232] tomoyo_encode+0x2ad/0x570 [ 307.461876][ T9232] tomoyo_realpath_from_path+0x5fa/0x640 [ 307.461913][ T9232] ? tomoyo_path_number_perm+0x219/0x5f0 [ 307.461938][ T9232] tomoyo_path_number_perm+0x246/0x5f0 [ 307.461963][ T9232] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 307.461987][ T9232] ? do_raw_spin_lock+0x12b/0x2f0 [ 307.462024][ T9232] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 307.462042][ T9232] ? lockdep_hardirqs_on+0x7a/0x110 [ 307.462076][ T9232] ? __fget_files+0x2a/0x420 [ 307.462110][ T9232] ? __fget_files+0x3a8/0x420 [ 307.462128][ T9232] ? __fget_files+0x2a/0x420 [ 307.462151][ T9232] security_file_ioctl+0xb9/0x260 [ 307.462176][ T9232] __se_sys_ioctl+0x47/0x170 [ 307.462204][ T9232] do_syscall_64+0x17b/0x530 [ 307.462222][ T9232] ? irqentry_exit+0x10f/0x8f0 [ 307.462240][ T9232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.462260][ T9232] ? clear_bhb_loop+0x40/0x90 [ 307.462282][ T9232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.462301][ T9232] RIP: 0033:0x7fb28d38e0d9 [ 307.462319][ T9232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.462335][ T9232] RSP: 002b:00007fb28b5e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.462355][ T9232] RAX: ffffffffffffffda RBX: 00007fb28d615fa0 RCX: 00007fb28d38e0d9 [ 307.462370][ T9232] RDX: 0000200000000180 RSI: 00000000000089f2 RDI: 0000000000000003 [ 307.462382][ T9232] RBP: 00007fb28b5e6090 R08: 0000000000000000 R09: 0000000000000000 [ 307.462394][ T9232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.462406][ T9232] R13: 00007fb28d616038 R14: 00007fb28d615fa0 R15: 00007ffcfa617bc8 [ 307.462436][ T9232] [ 307.462455][ T9232] ERROR: Out of memory at tomoyo_realpath_from_path. [ 307.725449][ T5744] peak_usb 10-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 307.725478][ T5744] peak_usb 10-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 307.905522][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 307.948193][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 307.950000][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 307.960357][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 307.961321][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.099459][ T5744] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -71 [ 308.128304][ T5744] usb 10-1: USB disconnect, device number 15 [ 308.383460][ T9249] IPv6: Can't replace route, no match found [ 308.679225][ T9260] FAULT_INJECTION: forcing a failure. [ 308.679225][ T9260] name failslab, interval 1, probability 0, space 0, times 0 [ 308.679261][ T9260] CPU: 0 UID: 0 PID: 9260 Comm: syz.8.1004 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 308.679288][ T9260] Tainted: [L]=SOFTLOCKUP [ 308.679295][ T9260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 308.679306][ T9260] Call Trace: [ 308.679314][ T9260] [ 308.679322][ T9260] dump_stack_lvl+0xe8/0x150 [ 308.679350][ T9260] should_fail_ex+0x467/0x600 [ 308.679382][ T9260] should_failslab+0xa8/0x100 [ 308.679404][ T9260] __kmalloc_noprof+0xfb/0x790 [ 308.679432][ T9260] ? tomoyo_encode+0x2ad/0x570 [ 308.679459][ T9260] ? tomoyo_encode+0x2ad/0x570 [ 308.679496][ T9260] tomoyo_encode+0x2ad/0x570 [ 308.679530][ T9260] tomoyo_realpath_from_path+0x5fa/0x640 [ 308.679569][ T9260] ? tomoyo_path_number_perm+0x219/0x5f0 [ 308.679593][ T9260] tomoyo_path_number_perm+0x246/0x5f0 [ 308.679620][ T9260] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 308.679645][ T9260] ? do_raw_spin_lock+0x12b/0x2f0 [ 308.679683][ T9260] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 308.679703][ T9260] ? lockdep_hardirqs_on+0x7a/0x110 [ 308.679739][ T9260] ? __fget_files+0x2a/0x420 [ 308.679763][ T9260] ? __fget_files+0x3a8/0x420 [ 308.679782][ T9260] ? __fget_files+0x2a/0x420 [ 308.679805][ T9260] security_file_ioctl+0xb9/0x260 [ 308.679830][ T9260] __se_sys_ioctl+0x47/0x170 [ 308.679858][ T9260] do_syscall_64+0x17b/0x530 [ 308.679878][ T9260] ? irqentry_exit+0x10f/0x8f0 [ 308.679895][ T9260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.679915][ T9260] ? clear_bhb_loop+0x40/0x90 [ 308.679940][ T9260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.679959][ T9260] RIP: 0033:0x7fb28d38e0d9 [ 308.679983][ T9260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.680000][ T9260] RSP: 002b:00007fb28b5e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.680020][ T9260] RAX: ffffffffffffffda RBX: 00007fb28d615fa0 RCX: 00007fb28d38e0d9 [ 308.680034][ T9260] RDX: 0000200000000140 RSI: 00000000000089e0 RDI: 0000000000000003 [ 308.680046][ T9260] RBP: 00007fb28b5e6090 R08: 0000000000000000 R09: 0000000000000000 [ 308.680059][ T9260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.680071][ T9260] R13: 00007fb28d616038 R14: 00007fb28d615fa0 R15: 00007ffcfa617bc8 [ 308.680102][ T9260] [ 308.680131][ T9260] ERROR: Out of memory at tomoyo_realpath_from_path. [ 309.037549][ T9269] netlink: 'syz.9.1006': attribute type 58 has an invalid length. [ 309.130346][ T5596] Bluetooth: hci1: command tx timeout [ 309.508277][ T5696] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 309.511707][ T9284] FAULT_INJECTION: forcing a failure. [ 309.511707][ T9284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.511740][ T9284] CPU: 1 UID: 0 PID: 9284 Comm: syz.9.1010 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 309.511767][ T9284] Tainted: [L]=SOFTLOCKUP [ 309.511773][ T9284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 309.511785][ T9284] Call Trace: [ 309.511792][ T9284] [ 309.511800][ T9284] dump_stack_lvl+0xe8/0x150 [ 309.511830][ T9284] should_fail_ex+0x467/0x600 [ 309.511861][ T9284] _copy_to_user+0x31/0xb0 [ 309.511882][ T9284] simple_read_from_buffer+0xe1/0x170 [ 309.511911][ T9284] proc_fail_nth_read+0x1be/0x230 [ 309.511935][ T9284] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.511959][ T9284] ? rw_verify_area+0x250/0x4d0 [ 309.511983][ T9284] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.512003][ T9284] vfs_read+0x219/0xa90 [ 309.512033][ T9284] ? __pfx_vfs_read+0x10/0x10 [ 309.512058][ T9284] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 309.512078][ T9284] ? lockdep_hardirqs_on+0x7a/0x110 [ 309.512097][ T9284] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 309.512117][ T9284] ? mutex_lock_nested+0x152/0x1d0 [ 309.512140][ T9284] ? fdget_pos+0x252/0x320 [ 309.512169][ T9284] ksys_read+0x156/0x270 [ 309.512193][ T9284] ? __pfx_ksys_read+0x10/0x10 [ 309.512221][ T9284] do_syscall_64+0x17b/0x530 [ 309.512239][ T9284] ? irqentry_exit+0x10f/0x8f0 [ 309.512255][ T9284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.512273][ T9284] ? clear_bhb_loop+0x40/0x90 [ 309.512298][ T9284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.512317][ T9284] RIP: 0033:0x7fbd8f88e90e [ 309.512334][ T9284] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 309.512350][ T9284] RSP: 002b:00007fbd8db25fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 309.512369][ T9284] RAX: ffffffffffffffda RBX: 00007fbd8db266c0 RCX: 00007fbd8f88e90e [ 309.512383][ T9284] RDX: 000000000000000f RSI: 00007fbd8db260a0 RDI: 0000000000000004 [ 309.512394][ T9284] RBP: 00007fbd8db26090 R08: 0000000000000000 R09: 0000000000000000 [ 309.512406][ T9284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.512417][ T9284] R13: 00007fbd8fb56038 R14: 00007fbd8fb55fa0 R15: 00007fff9cbdc4f8 [ 309.512453][ T9284] [ 309.659639][ T5696] usb 9-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 309.659667][ T5696] usb 9-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 309.659687][ T5696] usb 9-1: Product: syz [ 309.659700][ T5696] usb 9-1: Manufacturer: syz [ 309.659713][ T5696] usb 9-1: SerialNumber: syz [ 309.701012][ T5696] usb 9-1: config 0 descriptor?? [ 309.911150][ T5696] peak_usb 9-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 310.132551][ T5696] peak_usb 9-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 310.132581][ T5696] peak_usb 9-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 310.154513][ T5596] Bluetooth: hci2: command tx timeout [ 310.254103][ T5696] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -71 [ 310.279497][ T5696] usb 9-1: USB disconnect, device number 19 [ 310.443692][ T9221] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.443942][ T9221] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.444103][ T9221] bridge_slave_0: entered allmulticast mode [ 310.453134][ T9221] bridge_slave_0: entered promiscuous mode [ 310.488107][ T9221] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.488330][ T9221] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.488512][ T9221] bridge_slave_1: entered allmulticast mode [ 310.490384][ T9221] bridge_slave_1: entered promiscuous mode [ 310.671925][ T9221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.759729][ T9221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.765021][ T9234] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.765333][ T9234] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.765638][ T9234] bridge_slave_0: entered allmulticast mode [ 310.772002][ T9234] bridge_slave_0: entered promiscuous mode [ 310.859963][ T9234] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.860168][ T9234] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.860375][ T9234] bridge_slave_1: entered allmulticast mode [ 310.862283][ T9234] bridge_slave_1: entered promiscuous mode [ 310.928433][ T9221] team0: Port device team_slave_0 added [ 310.954667][ T9221] team0: Port device team_slave_1 added [ 310.963869][ T9234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.017898][ T9234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.043577][ T5696] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 311.193546][ T5596] Bluetooth: hci1: command tx timeout [ 311.193950][ T5696] usb 9-1: Using ep0 maxpacket: 32 [ 311.195996][ T5696] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 311.196021][ T5696] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 311.199416][ T5696] usb 9-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 311.199443][ T5696] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.199462][ T5696] usb 9-1: Product: syz [ 311.199475][ T5696] usb 9-1: Manufacturer: syz [ 311.199489][ T5696] usb 9-1: SerialNumber: syz [ 311.209830][ T5696] usb 9-1: config 0 descriptor?? [ 311.278055][ T5696] hub 9-1:0.0: bad descriptor, ignoring hub [ 311.278086][ T5696] hub 9-1:0.0: probe with driver hub failed with error -5 [ 311.296920][ T5696] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input15 [ 311.339805][ T5696] usbtouchscreen 9-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 311.356384][ T9221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.356397][ T9221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.356418][ T9221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.533996][ T5696] usbtouchscreen 9-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 311.764637][ T9221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.764651][ T9221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.764667][ T9221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.769389][ T9234] team0: Port device team_slave_0 added [ 311.865241][ T9234] team0: Port device team_slave_1 added [ 311.964412][ T9234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.964423][ T9234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.964437][ T9234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.010324][ T9234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.010340][ T9234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.010365][ T9234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.066061][ T9221] hsr_slave_0: entered promiscuous mode [ 312.069530][ T9221] hsr_slave_1: entered promiscuous mode [ 312.176843][ T9234] hsr_slave_0: entered promiscuous mode [ 312.178215][ T9234] hsr_slave_1: entered promiscuous mode [ 312.179242][ T9234] debugfs: 'hsr0' already exists in 'hsr' [ 312.179265][ T9234] Cannot create hsr debugfs directory [ 312.245455][ T5596] Bluetooth: hci2: command tx timeout [ 312.693549][ T9] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 312.843411][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 312.849976][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 312.870255][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.870281][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.885034][ T9] usb 10-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 312.885062][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.885081][ T9] usb 10-1: Product: syz [ 312.885094][ T9] usb 10-1: Manufacturer: syz [ 312.885108][ T9] usb 10-1: SerialNumber: syz [ 313.287641][ T5596] Bluetooth: hci1: command tx timeout [ 313.310281][ T9] usb 10-1: unit 4 not found! [ 313.310302][ T9] usb 10-1: unit 255 not found! [ 313.544043][ T9] usb 10-1: USB disconnect, device number 16 [ 313.877295][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.982275][ T9329] block2mtd: too many arguments [ 314.126577][ T9331] FAULT_INJECTION: forcing a failure. [ 314.126577][ T9331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.126601][ T9331] CPU: 1 UID: 0 PID: 9331 Comm: syz.9.1017 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 314.126615][ T9331] Tainted: [L]=SOFTLOCKUP [ 314.126619][ T9331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 314.126625][ T9331] Call Trace: [ 314.126629][ T9331] [ 314.126634][ T9331] dump_stack_lvl+0xe8/0x150 [ 314.126652][ T9331] should_fail_ex+0x467/0x600 [ 314.126669][ T9331] _copy_from_iter+0x1d3/0x1660 [ 314.126689][ T9331] ? __pfx__copy_from_iter+0x10/0x10 [ 314.126703][ T9331] ? trace_kmalloc+0x2a/0xf0 [ 314.126719][ T9331] ? __kmalloc_noprof+0x436/0x790 [ 314.126733][ T9331] ? kernfs_fop_write_iter+0x158/0x540 [ 314.126750][ T9331] kernfs_fop_write_iter+0x19b/0x540 [ 314.126766][ T9331] vfs_write+0x61e/0xbb0 [ 314.126783][ T9331] ? __pfx_vfs_write+0x10/0x10 [ 314.126796][ T9331] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 314.126807][ T9331] ? lockdep_hardirqs_on+0x7a/0x110 [ 314.126818][ T9331] ? mutex_lock_nested+0x152/0x1d0 [ 314.126830][ T9331] ? fdget_pos+0x252/0x320 [ 314.126845][ T9331] ksys_write+0x156/0x270 [ 314.126858][ T9331] ? __pfx_ksys_write+0x10/0x10 [ 314.126878][ T9331] do_syscall_64+0x17b/0x530 [ 314.126888][ T9331] ? irqentry_exit+0x10f/0x8f0 [ 314.126897][ T9331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.126911][ T9331] ? clear_bhb_loop+0x40/0x90 [ 314.126924][ T9331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.126934][ T9331] RIP: 0033:0x7fbd8f8ce0d9 [ 314.126944][ T9331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.126952][ T9331] RSP: 002b:00007fbd8db26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 314.126964][ T9331] RAX: ffffffffffffffda RBX: 00007fbd8fb55fa0 RCX: 00007fbd8f8ce0d9 [ 314.126972][ T9331] RDX: 0000000000000044 RSI: 0000200000000140 RDI: 0000000000000003 [ 314.126978][ T9331] RBP: 00007fbd8db26090 R08: 0000000000000000 R09: 0000000000000000 [ 314.126984][ T9331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.126990][ T9331] R13: 00007fbd8fb56038 R14: 00007fbd8fb55fa0 R15: 00007fff9cbdc4f8 [ 314.127006][ T9331] [ 314.322441][ T5596] Bluetooth: hci2: command tx timeout [ 314.923477][ T5609] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 315.107627][ T5609] usb 10-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 315.107657][ T5609] usb 10-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 315.107676][ T5609] usb 10-1: Product: syz [ 315.107689][ T5609] usb 10-1: Manufacturer: syz [ 315.107703][ T5609] usb 10-1: SerialNumber: syz [ 315.151841][ T5609] usb 10-1: config 0 descriptor?? [ 315.354475][ T5596] Bluetooth: hci1: command tx timeout [ 315.382098][ T5609] peak_usb 10-1:0.0: PEAK-System PCAN-Chip USB v232 fw v223.90.95 (1 channels) [ 315.592070][ T5609] peak_usb 10-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 315.592100][ T5609] peak_usb 10-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 315.817252][ T5609] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -71 [ 315.841154][ T5609] usb 10-1: USB disconnect, device number 17 [ 316.396228][ T5596] Bluetooth: hci2: command tx timeout [ 316.666425][ T5596] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 316.666453][ T5596] CPU: 1 UID: 0 PID: 5596 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 316.666482][ T5596] Tainted: [L]=SOFTLOCKUP [ 316.666490][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 316.666502][ T5596] Workqueue: hci0 hci_rx_work [ 316.666536][ T5596] Call Trace: [ 316.666543][ T5596] [ 316.666551][ T5596] dump_stack_lvl+0xe8/0x150 [ 316.666581][ T5596] sysfs_create_dir_ns+0x271/0x2a0 [ 316.666610][ T5596] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 316.666637][ T5596] ? rt_spin_unlock+0x163/0x200 [ 316.666675][ T5596] kobject_add_internal+0x62c/0xce0 [ 316.666713][ T5596] kobject_add+0x163/0x240 [ 316.666734][ T5596] ? rt_spin_unlock+0x157/0x200 [ 316.666771][ T5596] ? __pfx_kobject_add+0x10/0x10 [ 316.666802][ T5596] ? get_device_parent+0x370/0x3a0 [ 316.666830][ T5596] device_add+0x3fa/0xb80 [ 316.666855][ T5596] hci_conn_add_sysfs+0xd5/0x210 [ 316.666884][ T5596] le_conn_complete_evt+0xfef/0x1580 [ 316.666917][ T5596] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 316.666940][ T5596] ? lockdep_hardirqs_on+0x7a/0x110 [ 316.666958][ T5596] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 316.666978][ T5596] ? rt_mutex_slowunlock+0x219/0x460 [ 316.667005][ T5596] ? skb_pull_data+0xf0/0x200 [ 316.667030][ T5596] hci_le_enh_conn_complete_evt+0x189/0x490 [ 316.667053][ T5596] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 316.667081][ T5596] hci_event_packet+0x67a/0xf10 [ 316.667117][ T5596] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 316.667137][ T5596] ? __pfx_hci_event_packet+0x10/0x10 [ 316.667168][ T5596] ? hci_send_to_sock+0x75a/0x800 [ 316.667204][ T5596] hci_rx_work+0x3ee/0x1020 [ 316.667237][ T5596] ? process_one_work+0x7fd/0x1480 [ 316.667258][ T5596] process_one_work+0xaaf/0x1480 [ 316.667295][ T5596] ? __pfx_process_one_work+0x10/0x10 [ 316.667312][ T5596] ? do_raw_spin_lock+0x12b/0x2f0 [ 316.667342][ T5596] ? assign_work+0x3cf/0x5d0 [ 316.667366][ T5596] worker_thread+0xb05/0x10d0 [ 316.667418][ T5596] kthread+0x388/0x470 [ 316.667443][ T5596] ? __pfx_worker_thread+0x10/0x10 [ 316.667461][ T5596] ? __pfx_kthread+0x10/0x10 [ 316.667489][ T5596] ret_from_fork+0x514/0xb70 [ 316.667519][ T5596] ? __pfx_ret_from_fork+0x10/0x10 [ 316.667545][ T5596] ? __switch_to+0xc89/0x1420 [ 316.667573][ T5596] ? __pfx_kthread+0x10/0x10 [ 316.667600][ T5596] ret_from_fork_asm+0x1a/0x30 [ 316.667641][ T5596] [ 316.667743][ T5596] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 316.667782][ T5596] Bluetooth: hci0: failed to register connection device [ 316.686470][ T5596] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 316.686497][ T5596] CPU: 1 UID: 0 PID: 5596 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 316.686525][ T5596] Tainted: [L]=SOFTLOCKUP [ 316.686532][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 316.686544][ T5596] Workqueue: hci0 hci_rx_work [ 316.686577][ T5596] Call Trace: [ 316.686585][ T5596] [ 316.686593][ T5596] dump_stack_lvl+0xe8/0x150 [ 316.686621][ T5596] sysfs_create_dir_ns+0x271/0x2a0 [ 316.686645][ T5596] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 316.686679][ T5596] ? rt_spin_unlock+0x163/0x200 [ 316.686709][ T5596] kobject_add_internal+0x62c/0xce0 [ 316.686739][ T5596] kobject_add+0x163/0x240 [ 316.686760][ T5596] ? rt_spin_unlock+0x157/0x200 [ 316.686789][ T5596] ? __pfx_kobject_add+0x10/0x10 [ 316.686819][ T5596] ? get_device_parent+0x370/0x3a0 [ 316.686846][ T5596] device_add+0x3fa/0xb80 [ 316.686870][ T5596] hci_conn_add_sysfs+0xd5/0x210 [ 316.686903][ T5596] le_conn_complete_evt+0xfef/0x1580 [ 316.686937][ T5596] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 316.686960][ T5596] ? lockdep_hardirqs_on+0x7a/0x110 [ 316.686979][ T5596] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 316.686999][ T5596] ? rt_mutex_slowunlock+0x219/0x460 [ 316.687026][ T5596] ? skb_pull_data+0xf0/0x200 [ 316.687050][ T5596] hci_le_enh_conn_complete_evt+0x189/0x490 [ 316.687075][ T5596] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 316.687103][ T5596] hci_event_packet+0x67a/0xf10 [ 316.687138][ T5596] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 316.687158][ T5596] ? __pfx_hci_event_packet+0x10/0x10 [ 316.687191][ T5596] ? hci_send_to_sock+0x75a/0x800 [ 316.687227][ T5596] hci_rx_work+0x3ee/0x1020 [ 316.687264][ T5596] ? process_one_work+0x7fd/0x1480 [ 316.687286][ T5596] process_one_work+0xaaf/0x1480 [ 316.687329][ T5596] ? __pfx_process_one_work+0x10/0x10 [ 316.687348][ T5596] ? do_raw_spin_lock+0x12b/0x2f0 [ 316.687381][ T5596] ? assign_work+0x3cf/0x5d0 [ 316.687408][ T5596] worker_thread+0xb05/0x10d0 [ 316.687454][ T5596] kthread+0x388/0x470 [ 316.687483][ T5596] ? __pfx_worker_thread+0x10/0x10 [ 316.687502][ T5596] ? __pfx_kthread+0x10/0x10 [ 316.687526][ T5596] ret_from_fork+0x514/0xb70 [ 316.687554][ T5596] ? __pfx_ret_from_fork+0x10/0x10 [ 316.687579][ T5596] ? __switch_to+0xc89/0x1420 [ 316.687605][ T5596] ? __pfx_kthread+0x10/0x10 [ 316.687630][ T5596] ret_from_fork_asm+0x1a/0x30 [ 316.687694][ T5596] [ 316.695496][ T5596] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 316.695554][ T5596] Bluetooth: hci0: failed to register connection device [ 317.048086][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.048187][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.797649][ T3783] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.883750][ T9415] FAULT_INJECTION: forcing a failure. [ 317.883750][ T9415] name failslab, interval 1, probability 0, space 0, times 0 [ 317.883781][ T9415] CPU: 1 UID: 0 PID: 9415 Comm: syz.9.1024 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 317.883801][ T9415] Tainted: [L]=SOFTLOCKUP [ 317.883806][ T9415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 317.883815][ T9415] Call Trace: [ 317.883821][ T9415] [ 317.883827][ T9415] dump_stack_lvl+0xe8/0x150 [ 317.883852][ T9415] should_fail_ex+0x467/0x600 [ 317.883877][ T9415] should_failslab+0xa8/0x100 [ 317.883893][ T9415] kmem_cache_alloc_node_noprof+0xac/0x660 [ 317.883914][ T9415] ? __alloc_skb+0x1d7/0x7a0 [ 317.883932][ T9415] ? __alloc_skb+0x1d7/0x7a0 [ 317.883957][ T9415] __alloc_skb+0x1d7/0x7a0 [ 317.883980][ T9415] tcp_stream_alloc_skb+0x3f/0x5c0 [ 317.884005][ T9415] tcp_sendmsg_locked+0x143d/0x55c0 [ 317.884073][ T9415] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 317.884117][ T9415] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 317.884135][ T9415] ? lockdep_hardirqs_on+0x7a/0x110 [ 317.884155][ T9415] tcp_sendmsg+0x2f/0x50 [ 317.884177][ T9415] ? __pfx_inet_sendmsg+0x10/0x10 [ 317.884196][ T9415] sock_sendmsg_nosec+0x10e/0x180 [ 317.884216][ T9415] ____sys_sendmsg+0x565/0x870 [ 317.884245][ T9415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.884278][ T9415] ? import_iovec+0x73/0xa0 [ 317.884303][ T9415] ___sys_sendmsg+0x2a5/0x360 [ 317.884321][ T9415] ? __lock_acquire+0x6df/0x2e40 [ 317.884337][ T9415] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.884382][ T9415] ? __fget_files+0x2a/0x420 [ 317.884396][ T9415] ? __fget_files+0x3a8/0x420 [ 317.884423][ T9415] __x64_sys_sendmsg+0x1b7/0x290 [ 317.884446][ T9415] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 317.884483][ T9415] do_syscall_64+0x17b/0x530 [ 317.884497][ T9415] ? irqentry_exit+0x10f/0x8f0 [ 317.884511][ T9415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.884526][ T9415] ? clear_bhb_loop+0x40/0x90 [ 317.884546][ T9415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.884562][ T9415] RIP: 0033:0x7fbd8f8ce0d9 [ 317.884578][ T9415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.884593][ T9415] RSP: 002b:00007fbd8db26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.884611][ T9415] RAX: ffffffffffffffda RBX: 00007fbd8fb55fa0 RCX: 00007fbd8f8ce0d9 [ 317.884625][ T9415] RDX: 0000000000000000 RSI: 00002000000015c0 RDI: 0000000000000003 [ 317.884634][ T9415] RBP: 00007fbd8db26090 R08: 0000000000000000 R09: 0000000000000000 [ 317.884642][ T9415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.884651][ T9415] R13: 00007fbd8fb56038 R14: 00007fbd8fb55fa0 R15: 00007fff9cbdc4f8 [ 317.884673][ T9415] [ 318.670799][ T3783] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.713481][ T5596] Bluetooth: hci0: command 0x2016 tx timeout [ 318.819245][ T9434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.113603][ T8615] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 319.293793][ T8615] usb 10-1: Using ep0 maxpacket: 32 [ 319.302834][ T8615] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 319.302860][ T8615] usb 10-1: config 0 has no interface number 0 [ 319.302904][ T8615] usb 10-1: config 0 interface 184 has no altsetting 0 [ 319.349765][ T8615] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 319.349794][ T8615] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.349812][ T8615] usb 10-1: Product: syz [ 319.349826][ T8615] usb 10-1: Manufacturer: syz [ 319.349840][ T8615] usb 10-1: SerialNumber: syz [ 319.357184][ T8615] usb 10-1: config 0 descriptor?? [ 319.475100][ T3783] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.878730][ T3783] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.175293][ T8615] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 320.175324][ T8615] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 320.175343][ T8615] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 320.175637][ T8615] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 320.241192][ T8615] usb 10-1: USB disconnect, device number 18 [ 320.435388][ T9221] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 320.560108][ T9221] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 320.601488][ T9221] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 320.652088][ T9221] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 320.655581][ T9221] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 320.705858][ T9221] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 320.793697][ T5596] Bluetooth: hci0: command 0x2016 tx timeout [ 321.112817][ T9221] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 321.162917][ T9221] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 322.187527][ T1011] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 322.193361][ T9485] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 322.217609][ T9234] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 322.920605][ T5596] Bluetooth: hci0: command 0x2016 tx timeout [ 324.965956][ T5596] Bluetooth: hci0: command 0x2016 tx timeout [ 327.127397][ T5596] Bluetooth: hci0: command 0x2016 tx timeout [ 330.592183][ T5596] Bluetooth: hci0: command 0x2016 tx timeout [ 353.858097][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 381.396300][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.398449][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.231378][ T8660] cxacru 7-1:251.202: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 404.829992][ T9234] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.403134][ T4911] Bluetooth: hci0: command 0x2016 tx timeout [ 440.399173][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.400996][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.917966][ T4911] Bluetooth: hci1: command tx timeout [ 442.805871][ T4911] Bluetooth: hci2: command tx timeout [ 464.839354][ T39] INFO: task syz.8.1012:9306 blocked for more than 143 seconds. [ 464.839405][ T39] Tainted: G L syzkaller #0 [ 464.839437][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 464.839467][ T39] task:syz.8.1012 state:D stack:28040 pid:9306 tgid:9298 ppid:7962 task_flags:0x400140 flags:0x00080002 [ 464.839623][ T39] Call Trace: [ 464.839655][ T39] [ 464.839943][ T39] __schedule+0x1709/0x5530 [ 464.842174][ T39] ? __pfx___schedule+0x10/0x10 [ 466.798406][ T39] rt_mutex_schedule+0x76/0xf0 [ 466.798731][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 466.799596][ T39] ? rt_mutex_slowlock_block+0x33a/0x680 [ 466.800352][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 466.800904][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 466.801108][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 466.802606][ T39] ? usbdev_open+0x151/0x790 [ 466.804428][ T39] ? usbdev_open+0x151/0x790 [ 466.804554][ T39] mutex_lock_nested+0x168/0x1d0 [ 466.804554][ T39] mutex_lock_nested+0x168/0x1d0 [ 466.804847][ T39] usbdev_open+0x151/0x790 [ 466.805874][ T39] ? __pfx_usbdev_open+0x10/0x10 [ 466.805992][ T39] ? rt_spin_unlock+0x157/0x200 [ 466.806288][ T39] ? rt_spin_unlock+0x163/0x200 [ 466.806808][ T39] chrdev_open+0x4dc/0x600 [ 466.807288][ T39] ? __pfx_chrdev_open+0x10/0x10 [ 466.807963][ T39] ? __pfx_chrdev_open+0x10/0x10 [ 466.808201][ T39] do_dentry_open+0x849/0x1420 [ 466.808921][ T39] vfs_open+0x3b/0x350 [ 466.809060][ T39] ? path_openat+0x2e4d/0x3850 [ 466.809454][ T39] path_openat+0x2e64/0x3850 [ 467.418519][ T39] ? __kasan_slab_alloc+0x6c/0x80 [ 467.418863][ T39] ? do_sys_openat2+0xcc/0x200 [ 467.418906][ T39] ? __x64_sys_openat+0x138/0x170 [ 467.418957][ T39] ? do_syscall_64+0x17b/0x530 [ 467.420378][ T39] do_file_open+0x23e/0x4a0 [ 467.420532][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 467.421205][ T39] ? __pfx_do_file_open+0x10/0x10 [ 467.422925][ T39] ? alloc_fd+0x654/0x6d0 [ 467.424636][ T39] do_sys_openat2+0x115/0x200 [ 467.425054][ T39] ? __pfx_do_sys_openat2+0x10/0x10 [ 467.425864][ T39] ? rcu_is_watching+0x15/0xb0 [ 467.426531][ T39] __x64_sys_openat+0x138/0x170 [ 467.427016][ T39] do_syscall_64+0x17b/0x530 [ 467.427159][ T39] ? irqentry_exit+0x10f/0x8f0 [ 467.427295][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.427449][ T39] ? clear_bhb_loop+0x40/0x90 [ 467.428035][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.428156][ T39] RIP: 0033:0x7fb28d34e90e [ 467.428235][ T39] RSP: 002b:00007fb28b5c4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 467.428271][ T39] RAX: ffffffffffffffda RBX: 00007fb28b5c56c0 RCX: 00007fb28d34e90e [ 467.428293][ T39] RDX: 0000000000008401 RSI: 00007fb28b5c4c00 RDI: ffffffffffffff9c [ 467.428315][ T39] RBP: 00007fb28b5c4c00 R08: 0000000000000000 R09: 0000000000000000 [ 467.428335][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 467.428356][ T39] R13: 00007fb28d616128 R14: 00007fb28d616090 R15: 00007ffcfa617bc8 [ 467.429631][ T39] [ 468.127645][ T39] [ 468.127645][ T39] Showing all locks held in the system: [ 468.127709][ T39] locks held by kthreadd/2: 1, last CPU#1: [ 468.127749][ T39] #0: ffffffff8e50af90 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 468.128012][ T39] locks held by kworker/R-kvfre/6: 1, last CPU#1: [ 468.128030][ T39] #0: ffffffff8e261f38 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xd57/0x1220 [ 468.128123][ T39] locks held by kworker/0:0/9: 3, last CPU#0: [ 468.128142][ T39] #0: ffff88813fe62538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 468.128258][ T39] #1: ffffc900000e7c60 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 468.128406][ T39] #2: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 468.128601][ T39] locks held by kworker/0:1/10: 3, on CPU#0: [ 468.128638][ T39] #0: ffff88813fe63938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 468.128827][ T39] #1: ffffc900000f7c60 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 468.129038][ T39] #2: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 468.129278][ T39] locks held by kworker/u8:0/12: 3, last CPU#0: [ 468.129312][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 468.129582][ T39] #1: ffffc90000117c60 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 468.129870][ T39] #2: ffff8880580408d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 468.130140][ T39] locks held by kworker/u8:1/13: 6, last CPU#1: [ 468.130156][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 468.991714][ T39] #1: ffffc90000127c60 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 468.991918][ T39] #2: ffff8880614008d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 468.992526][ T39] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 468.992769][ T39] #4: ffff8880b873b8e0 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 468.993033][ T39] #5: ffffffff99d06748 (&____s->seqcount#2){--..}-{0:0}, at: ktime_get_real_ts64+0xa9/0x3d0 [ 469.103588][ T39] locks held by kworker/R-mm_pe/14: 1, on CPU#1: [ 469.103623][ T39] #0: ffffffff8e261f38 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 469.103801][ T39] locks held by ktimers/0/16: 8, last CPU#0: [ 469.103828][ T39] #0: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 469.104076][ T39] #1: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 469.104286][ T39] #2: ffff8880b86284f8 (&base->softirq_expiry_lock){+...}-{3:3}, at: hrtimer_run_softirq+0x7f/0x260 [ 469.104520][ T39] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 469.104780][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __run_timer_base+0x683/0x9b0 [ 469.569194][ T39] #5: ffff8880b86261d8 (&base->lock){-...}-{2:2}, at: __mod_timer+0x1a9/0xf10 [ 469.569406][ T39] #6: ffffffff99fac100 (&obj_hash[i].lock){-...}-{2:2}, at: debug_object_activate+0xa8/0x3b0 [ 469.569636][ T39] #7: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 469.569885][ T39] locks held by pr/legacy/17: 3, last CPU#0: [ 469.569920][ T39] #0: ffffffff8e3b5a40 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250 [ 469.570204][ T39] #1: ffffffff8e29d338 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90 [ 469.570511][ T39] #2: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 469.570732][ T39] locks held by rcub/0/19: 1, on CPU#0: [ 469.570749][ T39] #0: ffffffff8e3c9448 (rcu_state){+.+.}-{0:0}, at: rcu_boost_kthread+0x30d/0x4c0 [ 469.570847][ T39] locks held by kworker/1:0/32: 5, last CPU#1: [ 469.570866][ T39] #0: ffff88801aff5538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.570986][ T39] #1: ffffc90000a6fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.571128][ T39] #2: ffff88802a6b2210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 469.571299][ T39] #3: ffff88801aeaf348 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 469.571503][ T39] #4: ffff88801aeaf238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 469.571724][ T39] locks held by kworker/1:1/38: 4, last CPU#1: [ 469.571755][ T39] #0: ffff88805c136538 ((wq_completion)wg-kex-wg0#14){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.572026][ T39] #1: ffffc90000af7c60 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.572313][ T39] #2: ffff8880374e57b8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 469.572612][ T39] #3: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 469.572695][ T39] locks held by khungtaskd/39: 1, last CPU#1: [ 469.572714][ T39] #0: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 469.572827][ T39] locks held by kworker/u8:2/41: 6, last CPU#1: [ 469.572849][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.572985][ T39] #1: ffffc90000b27c60 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.573146][ T39] #2: ffff8880619d08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 469.574279][ T39] #3: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 469.574439][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 469.574537][ T39] #5: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 469.574662][ T39] locks held by kworker/R-write/42: 1, on CPU#1: [ 469.574686][ T39] #0: ffffffff8e261f38 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 469.574846][ T39] locks held by kworker/R-kbloc/46: 1, on CPU#0: [ 469.575076][ T39] #0: ffffffff8e261f38 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 469.575294][ T39] locks held by kworker/u8:3/56: 6, last CPU#1: [ 469.575326][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.575569][ T39] #1: ffffc9000122fc60 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.575828][ T39] #2: ffff888060de08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 469.576127][ T39] #3: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 469.576512][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 469.576605][ T39] #5: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 469.576779][ T39] locks held by kworker/u8:4/59: 5, last CPU#0: [ 469.576801][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.576935][ T39] #1: ffffc9000125fc60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.577099][ T39] #2: ffff888039e22310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 469.577321][ T39] #3: ffff88805be38520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 469.577540][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 469.577790][ T39] locks held by kworker/u8:5/192: 3, last CPU#0: [ 469.577822][ T39] #0: ffff88801aea2938 ((wq_completion)kvfree_rcu_reclaim){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.578080][ T39] #1: ffffc900043cfc60 ((work_completion)(&(&krcp->monitor_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.578367][ T39] #2: ffffffff8e3c39a0 (rcu_callback){....}-{0:0}, at: kvfree_rcu_bulk+0x6d/0x190 [ 469.578700][ T39] locks held by kworker/1:2/820: 2, last CPU#1: [ 469.578717][ T39] #0: ffff88803b5ec138 ((wq_completion)wg-kex-wg2#17){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.578817][ T39] #1: ffffc90005b1fc60 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.578939][ T39] locks held by kworker/0:2/821: 3, on CPU#0: [ 469.578960][ T39] #0: ffff88813fe63938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.579095][ T39] #1: ffffc900058cfc60 (netdev_work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.579258][ T39] #2: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x72/0x7f0 [ 469.579448][ T39] locks held by kworker/u8:6/984: 6, last CPU#0: [ 469.579477][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.579734][ T39] #1: ffffc900064f7c60 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.579975][ T39] #2: ffff888060e708d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 469.580464][ T39] #3: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 469.580751][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 469.580920][ T39] #5: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 469.581038][ T39] locks held by kworker/u8:7/994: 3, last CPU#0: [ 469.581060][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.581183][ T39] #1: ffffc900064e7c60 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.581462][ T39] #2: ffff8880614108d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 469.581657][ T39] locks held by kworker/u8:8/1006: 3, last CPU#1: [ 469.581687][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.581893][ T39] #1: ffffc900065afc60 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.582127][ T39] #2: ffff8880617708d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 469.582397][ T39] locks held by kworker/u8:9/1011: 3, on CPU#1: [ 469.582433][ T39] #0: ffff888032668938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.582716][ T39] #1: ffffc90006517c60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.583026][ T39] #2: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0 [ 469.583240][ T39] locks held by kworker/u8:10/1187: 3, last CPU#0: [ 469.583259][ T39] #0: ffff88801aea2938 ((wq_completion)kvfree_rcu_reclaim){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.583866][ T39] #1: ffffc90006b2fc60 ((work_completion)(&(&krcp->krw_arr[i].rcu_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.584095][ T39] #2: ffffffff8e3c39a0 (rcu_callback){....}-{0:0}, at: kvfree_rcu_bulk+0x6d/0x190 [ 469.584359][ T39] locks held by kworker/u8:11/1514: 3, last CPU#1: [ 469.584401][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.584676][ T39] #1: ffffc9000742fc60 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.584963][ T39] #2: ffff888044d408d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 469.585066][ T39] locks held by kworker/u8:12/2973: 6, last CPU#1: [ 469.585086][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.585196][ T39] #1: ffffc9000e61fc60 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 469.585330][ T39] #2: ffff88806f4108d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 469.585499][ T39] #3: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 469.585681][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 469.585885][ T39] #5: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400