last executing test programs: 9.333516757s ago: executing program 2 (id=1456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x2, 0x9, 0x10, @empty, @mcast2, 0x700, 0x8000, 0x4, 0x3}}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x88}, 0x8040) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xd4}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 8.208736438s ago: executing program 2 (id=1468): bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x84}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0xb}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x8000001) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000080)=0x3ff) 6.897712384s ago: executing program 2 (id=1482): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x0, 0x2, 0xfffffffe}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x4}}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80800}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000009c0)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @mcast2}, {0xa, 0x4e23, 0x1000009, @mcast1, 0x9}, r5, 0x8001}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @in={0x2, 0x4e24, @rand_addr=0x640100fe}}}, 0x90) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000000)={0x2, 0x19, &(0x7f0000000440)="723c68a1660a264fef8e0dda6daea3edd44e12f6521e0b287e"}) r6 = socket$inet6(0xa, 0x800, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r7, &(0x7f0000000380)="1c", 0x1, 0x48015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r7, &(0x7f00000004c0)='<', 0x1, 0x55, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) fcntl$setpipe(r3, 0x407, 0x3) 6.709204355s ago: executing program 0 (id=1484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 6.189425881s ago: executing program 1 (id=1486): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x864a0c}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x14, r0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000040) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRES8=r2], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)="3b7bc73fed94379fc041082d1ced03aa84dba16c006020f20e1c88488df1c13eca4a3ee9c813b693c6dcb461acfe5e7df708af37c74547627e261cafeea6278fcb77c1e7cdf389d9b722ac", &(0x7f0000001a40), 0x1003, r3}, 0x38) 6.066847061s ago: executing program 0 (id=1488): creat(&(0x7f0000000000)='./file1\x00', 0x100) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r0, r0, 0x0, 0xf2) mount$cgroup(0x0, &(0x7f0000007ec0)='./file0\x00', &(0x7f0000007f00), 0x800000, &(0x7f0000007f40)={[{@subsystem='pids'}, {@none}]}) 5.730266521s ago: executing program 1 (id=1490): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x200013, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd25, 0x25dfdbff, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1000}, [@RTA_IIF={0x8, 0x3, r5}, @RTA_UID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60d0}, 0xea5bc50b6199d77e) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r6, 0x1, 0x0, 0x0, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.543581946s ago: executing program 2 (id=1492): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$dri(0x0, 0x1ff, 0x181100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010700000018000000006700000008003e"], 0x1c}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, 0x89, 0x0, @dev, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_emit_ethernet(0x26, &(0x7f00000007c0)={@link_local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x32, 0x18, 0x406a, 0x0, 0xd2, 0x89, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @broadcast}, "8f84e8eb"}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) io_uring_setup(0x1a8, &(0x7f0000000000)={0x0, 0xb9a0, 0x2, 0x2, 0x372}) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x2) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) 5.348602738s ago: executing program 0 (id=1493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.845397239s ago: executing program 2 (id=1497): syz_usb_connect$uac1(0x2, 0xbc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902aa00030156c0000904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f24060205040200020001000100040c2402020302f6ff8000090111240605020507002e130a004ef10200000924030102020505f50904010000010200000904010101010200000905010920009301050725010003480f0904020000010200000904020101010220000905820920000d02040725012608030058f3bc63"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="380000000d060500000000000000000007000003050001"], 0x38}, 0x1, 0x0, 0x0, 0x7}, 0x10040000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8080, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) 3.289503238s ago: executing program 1 (id=1500): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x864a0c}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x14, r0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000040) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRES8=r2], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)="3b7bc73fed94379fc041082d1ced03aa84dba16c006020f20e1c88488df1c13eca4a3ee9c813b693c6dcb461acfe5e7df708af37c74547627e261cafeea6278fcb77c1e7cdf389d9b722ac", &(0x7f0000001a40), 0x1003, r3}, 0x38) 3.069674357s ago: executing program 3 (id=1501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 2.989674301s ago: executing program 0 (id=1502): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2fff) fcntl$addseals(r0, 0x409, 0x0) 2.767649982s ago: executing program 3 (id=1504): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x3, 0x10004, 0x5}, 0x50) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2700, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x80, 0x1, 0x3, 0x61, {{0xa, 0x4, 0x2, 0x3b, 0x28, 0x64, 0x0, 0x5, 0x29, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0xa8, 0x3, 0x2, [{@remote, 0x10000}, {@multicast2, 0x1000}]}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@float={0x9, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x61, 0x2e]}}, &(0x7f00000006c0)=""/243, 0x28, 0xf3, 0x1, 0xfffffc01, 0x10000}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0x28, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9a3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}, @cb_func={0x18, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @generic={0x5, 0x3, 0x3, 0x5, 0xe37}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x9, 0xf2, &(0x7f0000000240)=""/242, 0x41100, 0x44, '\x00', r2, @fallback=0x6, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0x0, 0x5c718c54, 0x10000}, 0x10, 0x0, r4, 0x1, 0x0, &(0x7f0000000500)=[{0x3, 0x3, 0x1, 0x8}], 0x10, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r5}, 0x10) 2.748227501s ago: executing program 1 (id=1506): prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x6, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000180)="88", 0x1}], 0x1}, 0x4048043) r5 = dup(r4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x42, 0x120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 2.606956931s ago: executing program 3 (id=1507): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000440), 0x6, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x0, 0x801) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r7, 0x24, &(0x7f00000002c0)={0x3, 0x2, 0x4, 0x7ff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a030400000000000000000200000038000480340001800c0001007061796c6f616400240002800800034000ff07f50800024000000000080001400000001508000440000000020900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) bind$unix(r6, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r6, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001400030628bd7000fddbdf25011f08104e264e22030000001a00"], 0x4c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="0500000200000000000001238000734b84d52f4ccc00000004000480080002000100000008000100000000000400088018000c8014000b8008000a6d6c366b0973faac82a50941aada49fbca1d4e178000a7e18cd4417320ac9e56bed80e3e23ff908f43e9b381d22710cc0ad4b29280c3032959d1c49c6d31e001135a8414cf5c2f7c6f"], 0x44}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c00)=@nat={'nat\x00', 0x1b, 0x5, 0x420, 0x0, 0x0, 0xffffffff, 0x240, 0x240, 0x388, 0x388, 0xffffffff, 0x388, 0x388, 0x5, &(0x7f00000004c0), {[{{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@socket0={{0x20}}, @common=@set={{0x40}, {{0x4, [0x2, 0x2, 0x2, 0x2, 0x4, 0x6], 0x0, 0x6}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @broadcast, @loopback, @gre_key=0x1, @gre_key=0x992c}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @broadcast, 0xff000000, 0xff, 'nr0\x00', 'netdevsim0\x00', {}, {0xff}, 0xac6cdeba291bb701, 0x1, 0x8e}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "fe80", 0x1}}, @common=@set={{0x40}, {{0x4, [0x1, 0x9, 0x4, 0x2, 0x7, 0x4], 0x5, 0x6}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x4, 0x4, 0x4, 0x5, 0x2], 0x3, 0x7}, {0x2, [0x1, 0x0, 0x2, 0x4, 0x4, 0x5], 0x1, 0x3}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x1000, 0x7}}}, {{@ip={@multicast2, @broadcast, 0xff000000, 0xff, 'team_slave_0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x29, 0x1, 0x1}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1a, @multicast1, @private=0xa010102, @port=0x4e23, @gre_key=0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 2.424868226s ago: executing program 1 (id=1509): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$kcm(0x10, 0x2, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000b00)={&(0x7f0000000640)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000700)="ab", 0x101d0}], 0x2}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x6, {0x6, 0xc, "f5f32f97"}}, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) syz_io_uring_setup(0x61e4, &(0x7f0000000140)={0x0, 0xa4f7, 0x80, 0x1, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000080)={0x40, 0xa, 0x2e, "4e030f333ba893c3127e26585e809c0977d2ce968ad216a50c672f834ed00b60c29e78e824abb7af023de522dc97"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, &(0x7f00000001c0)={0x14, &(0x7f0000000340)={0x20, 0x7, 0xf6, {0xf6, 0x22, "ef5afbae2b0fe0d28d871cd6a99179cf7eac7467bd1623f4f1ffeeb5c38ee483a8287580164c7a3913385fdf93ac52b36e2a04f2cf2515550f44c0cba174688743f0c6b63515714cb2079ad97781dab412ac44cfd86d4792a20c95fb78488d74622e0e0cd32660ca4c7e8bae02cf486d9f0fd00f2cf6f7e2d60010c5160997d19a40854de14b3167677b779197bcd8387badb924ca1a50eeca036531831f6b7a2ade8e234709449e617ef19a7c71cc4a93f0d02ed0a660fc52ae4dad9cd3a4db43a2b67b9ee7d1f7ee279ff96d3247a1174f7465db7df40aea8c9781e0b485ae23260d1ba58f4f4499e5ae0f63adfae26fe83115"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}}, &(0x7f0000000600)={0x34, &(0x7f0000000240)={0x40, 0x30, 0x1e, "d10b1d01412039d9efbf19e6d7c4fae243af9c2af868264310d33be15273"}, &(0x7f0000000480)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000500)={0xc0, 0xa1, 0x4, 0x5}, &(0x7f0000000540)={0x40, 0xa0, 0x4, 0x2}, &(0x7f00000005c0)={0xc0, 0xa2, 0x2f, "68b80c7da8f9901564541267ad42ca7ca27c98a5be8ad7871fb69dd0a72ed7e0603cc3142ac1829af933e4e05726f1"}}) 2.322793219s ago: executing program 3 (id=1510): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x200013, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd25, 0x25dfdbff, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1000}, [@RTA_IIF={0x8, 0x3, r5}, @RTA_UID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60d0}, 0xea5bc50b6199d77e) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r6, 0x1, 0x0, 0x0, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.237575489s ago: executing program 4 (id=1511): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/config\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xee}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x18, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, '\x00y'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x802, &(0x7f0000000200)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xc000}}) read$FUSE(r4, &(0x7f0000001280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0xb, {0x0, 0x7, 0x0, '\x00', {0x7ff, 0x801, 0x2d, 0xc0000000, r6, 0x0, 0xc000, '\x00', 0x5, 0x7, 0xffffffff, 0x4000000000000001, {0x8, 0x8}, {0x1, 0xa}, {0x34, 0x8}, {0x6, 0xa00}, 0xfffc0000, 0x8, 0x2b, 0x2}}}}) write$FUSE_INIT(r4, &(0x7f0000001200)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x22000100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) write$FUSE_INTERRUPT(r1, &(0x7f0000000080)={0x10, 0xfffffffffffffff5, r5}, 0x10) vmsplice(r1, &(0x7f0000000700)=[{&(0x7f0000000500)='k', 0x1}], 0x1, 0x1) r7 = syz_io_uring_setup(0x58, &(0x7f00000015c0)={0x0, 0x79b3, 0x400, 0x2, 0x3b0}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0xceaf, 0x44008002, 0x109, 0x4, 0x0, 0x6, 0x0, 0x0, 0x100, 0x800}}, 0x50) 2.133035097s ago: executing program 0 (id=1512): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x260e, 0x10100, 0x0, 0x170}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) readv(r6, &(0x7f0000002d80)=[{&(0x7f0000000900)=""/237, 0xed}], 0x1) 1.993826703s ago: executing program 3 (id=1513): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000b00)={&(0x7f0000000640)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000700)="ab", 0x101d0}], 0x2}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x6, {0x6, 0xc, "f5f32f97"}}, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) r3 = syz_io_uring_setup(0x61e4, &(0x7f0000000140)={0x0, 0xa4f7, 0x80, 0x1, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8925, &(0x7f0000000200)={'virt_wifi0\x00', @ifru_addrs=@xdp={0x2c, 0x9, 0x0, 0x4}}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f0000000440)={0x28, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x2, 0x1, 0x6, 0x0, 0x1, 0x0, 0x2, 0x2}) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000080)={0x40, 0xa, 0x2e, "4e030f333ba893c3127e26585e809c0977d2ce968ad216a50c672f834ed00b60c29e78e824abb7af023de522dc97"}, 0x0, 0x0, 0x0, 0x0}) lseek(r1, 0xda, 0x2) syz_usb_control_io$lan78xx(r8, &(0x7f00000001c0)={0x14, &(0x7f0000000340)={0x20, 0x7, 0xf6, {0xf6, 0x22, "ef5afbae2b0fe0d28d871cd6a99179cf7eac7467bd1623f4f1ffeeb5c38ee483a8287580164c7a3913385fdf93ac52b36e2a04f2cf2515550f44c0cba174688743f0c6b63515714cb2079ad97781dab412ac44cfd86d4792a20c95fb78488d74622e0e0cd32660ca4c7e8bae02cf486d9f0fd00f2cf6f7e2d60010c5160997d19a40854de14b3167677b779197bcd8387badb924ca1a50eeca036531831f6b7a2ade8e234709449e617ef19a7c71cc4a93f0d02ed0a660fc52ae4dad9cd3a4db43a2b67b9ee7d1f7ee279ff96d3247a1174f7465db7df40aea8c9781e0b485ae23260d1ba58f4f4499e5ae0f63adfae26fe83115"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}}, &(0x7f0000000600)={0x34, &(0x7f0000000240)={0x40, 0x30, 0x1e, "d10b1d01412039d9efbf19e6d7c4fae243af9c2af868264310d33be15273"}, &(0x7f0000000480)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000500)={0xc0, 0xa1, 0x4, 0x5}, &(0x7f0000000540)={0x40, 0xa0, 0x4, 0x2}, &(0x7f00000005c0)={0xc0, 0xa2, 0x2f, "68b80c7da8f9901564541267ad42ca7ca27c98a5be8ad7871fb69dd0a72ed7e0603cc3142ac1829af933e4e05726f1"}}) readv(r7, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close(r7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005380)={&(0x7f0000004340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x1}]}, {0x0, [0x2e, 0x1]}}, 0x0, 0x28, 0x0, 0x1}, 0x28) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x38, r9, 0x100, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x38}, 0x1, 0x0, 0x0, 0x24004010}, 0x4800) 1.92631518s ago: executing program 4 (id=1514): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) socket$kcm(0x10, 0x2, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000b00)={&(0x7f0000000640)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000000980)=[{0x0}], 0x1}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x6, {0x6, 0xc, "f5f32f97"}}, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) r4 = syz_io_uring_setup(0x61e4, &(0x7f0000000140)={0x0, 0xa4f7, 0x80, 0x1, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8925, &(0x7f0000000200)={'virt_wifi0\x00', @ifru_addrs=@xdp={0x2c, 0x9, 0x0, 0x4}}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000440)={0x28, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x2, 0x1, 0x6, 0x0, 0x1, 0x0, 0x2, 0x2}) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000080)={0x40, 0xa, 0x2e, "4e030f333ba893c3127e26585e809c0977d2ce968ad216a50c672f834ed00b60c29e78e824abb7af023de522dc97"}, 0x0, 0x0, 0x0, 0x0}) lseek(r2, 0xda, 0x2) syz_usb_control_io$lan78xx(r9, &(0x7f00000001c0)={0x14, &(0x7f0000000340)={0x20, 0x7, 0xf6, {0xf6, 0x22, "ef5afbae2b0fe0d28d871cd6a99179cf7eac7467bd1623f4f1ffeeb5c38ee483a8287580164c7a3913385fdf93ac52b36e2a04f2cf2515550f44c0cba174688743f0c6b63515714cb2079ad97781dab412ac44cfd86d4792a20c95fb78488d74622e0e0cd32660ca4c7e8bae02cf486d9f0fd00f2cf6f7e2d60010c5160997d19a40854de14b3167677b779197bcd8387badb924ca1a50eeca036531831f6b7a2ade8e234709449e617ef19a7c71cc4a93f0d02ed0a660fc52ae4dad9cd3a4db43a2b67b9ee7d1f7ee279ff96d3247a1174f7465db7df40aea8c9781e0b485ae23260d1ba58f4f4499e5ae0f63adfae26fe83115"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}}, &(0x7f0000000600)={0x34, &(0x7f0000000240)={0x40, 0x30, 0x1e, "d10b1d01412039d9efbf19e6d7c4fae243af9c2af868264310d33be15273"}, &(0x7f0000000480)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000500)={0xc0, 0xa1, 0x4, 0x5}, &(0x7f0000000540)={0x40, 0xa0, 0x4, 0x2}, &(0x7f00000005c0)={0xc0, 0xa2, 0x2f, "68b80c7da8f9901564541267ad42ca7ca27c98a5be8ad7871fb69dd0a72ed7e0603cc3142ac1829af933e4e05726f1"}}) readv(r8, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close(r8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005380)={&(0x7f0000004340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x1}]}, {0x0, [0x2e, 0x1]}}, 0x0, 0x28, 0x0, 0x1}, 0x28) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x38, 0x0, 0x100, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x38}, 0x1, 0x0, 0x0, 0x24004010}, 0x4800) 1.761663243s ago: executing program 2 (id=1515): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) socket$kcm(0x10, 0x2, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000b00)={&(0x7f0000000640)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000000980)=[{0x0}], 0x1}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x6, {0x6, 0xc, "f5f32f97"}}, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) r4 = syz_io_uring_setup(0x61e4, &(0x7f0000000140)={0x0, 0xa4f7, 0x80, 0x1, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8925, &(0x7f0000000200)={'virt_wifi0\x00', @ifru_addrs=@xdp={0x2c, 0x9, 0x0, 0x4}}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000440)={0x28, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x2, 0x1, 0x6, 0x0, 0x1, 0x0, 0x2, 0x2}) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000080)={0x40, 0xa, 0x2e, "4e030f333ba893c3127e26585e809c0977d2ce968ad216a50c672f834ed00b60c29e78e824abb7af023de522dc97"}, 0x0, 0x0, 0x0, 0x0}) lseek(r2, 0xda, 0x2) syz_usb_control_io$lan78xx(r9, &(0x7f00000001c0)={0x14, &(0x7f0000000340)={0x20, 0x7, 0xf6, {0xf6, 0x22, "ef5afbae2b0fe0d28d871cd6a99179cf7eac7467bd1623f4f1ffeeb5c38ee483a8287580164c7a3913385fdf93ac52b36e2a04f2cf2515550f44c0cba174688743f0c6b63515714cb2079ad97781dab412ac44cfd86d4792a20c95fb78488d74622e0e0cd32660ca4c7e8bae02cf486d9f0fd00f2cf6f7e2d60010c5160997d19a40854de14b3167677b779197bcd8387badb924ca1a50eeca036531831f6b7a2ade8e234709449e617ef19a7c71cc4a93f0d02ed0a660fc52ae4dad9cd3a4db43a2b67b9ee7d1f7ee279ff96d3247a1174f7465db7df40aea8c9781e0b485ae23260d1ba58f4f4499e5ae0f63adfae26fe83115"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}}, &(0x7f0000000600)={0x34, &(0x7f0000000240)={0x40, 0x30, 0x1e, "d10b1d01412039d9efbf19e6d7c4fae243af9c2af868264310d33be15273"}, &(0x7f0000000480)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000500)={0xc0, 0xa1, 0x4, 0x5}, &(0x7f0000000540)={0x40, 0xa0, 0x4, 0x2}, &(0x7f00000005c0)={0xc0, 0xa2, 0x2f, "68b80c7da8f9901564541267ad42ca7ca27c98a5be8ad7871fb69dd0a72ed7e0603cc3142ac1829af933e4e05726f1"}}) readv(r8, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close(r8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005380)={&(0x7f0000004340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x1}]}, {0x0, [0x2e, 0x1]}}, 0x0, 0x28, 0x0, 0x1}, 0x28) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x38, 0x0, 0x100, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x38}, 0x1, 0x0, 0x0, 0x24004010}, 0x4800) 1.631841376s ago: executing program 4 (id=1516): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x864a0c}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x14, r0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000040) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRES8=r2], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)="3b7bc73fed94379fc041082d1ced03aa84dba16c006020f20e1c88488df1c13eca4a3ee9c813b693c6dcb461acfe5e7df708af37c74547627e261cafeea6278fcb77c1e7cdf389d9b722ac", &(0x7f0000001a40), 0x1003, r3}, 0x38) 1.569852937s ago: executing program 3 (id=1517): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000400)={0x40, 0xb, 0x9d, "af319d26518ae263d247b0b93da334adddd01a8a4532253586bb269b2f323ad53418cae4b00998b8d0a0bc5754b8e198a3f3215adee0e4da1a4d4139a5b4d7e57a41bb688f32a9bc5ce461862e9c5993575082315a597ca0b8d98bb683c639bd64e0d303ac864201df1ef65d12457aec6788ad7febf6bc5ca082f18dbfff9b9a5766172aa81a192a1f37c5ef19ae729b91721043d68f16907397e40d32"}, &(0x7f0000000b80)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000004c0)={0x21, 0x0, 0x3, "39d45a"}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r3) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x14, r4, 0x1, 0x70bd2c, 0x44, {0x5}}, 0x14}}, 0x4) (async, rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) close(r6) 939.041818ms ago: executing program 4 (id=1518): r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x100, 0x4) sched_setscheduler(r0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x40000) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r8 = dup(r4) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) fanotify_init(0x1d, 0x800) syz_io_uring_setup(0x39, &(0x7f0000000380)={0x0, 0x420e, 0x0, 0x1, 0x170, 0x0, r8}, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYRESDEC=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r11) r13 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r14 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r14, 0x0, 0x0) syz_usb_disconnect(r13) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000200)={0x0, 0xfffffffffffffdb4, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000040af00000000000000261bd017a22fab7d6e92a7723e9b0a257d63e5a39d3ba7b3e69f3e0cf41d5a8299", @ANYRES16=r12, @ANYRES8=r1], 0x44}}, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r8, 0x761f, 0xa4db, 0x40, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) 615.75967ms ago: executing program 4 (id=1519): r0 = open(&(0x7f0000000280)='./bus\x00', 0x20243, 0x126) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4008550d, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000210000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x4044880}, 0x40040) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000180)) 378.295412ms ago: executing program 0 (id=1520): syz_usb_connect(0x3, 0xd7c, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x86, 0xbc, 0x6a, 0x20, 0x5ac, 0x224, 0xab1c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd6a, 0x4, 0xd, 0x81, 0x28, 0xf5, [{{0x9, 0x4, 0xff, 0x7f, 0x3, 0x3, 0x1c, 0x2, 0x2, [], [{{0x9, 0x5, 0xc, 0x1, 0x0, 0x2, 0x4, 0x63}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x1, 0x2, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x95, 0xc}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x4, 0xd, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x8}]}}]}}, {{0x9, 0x4, 0xe, 0xbf, 0xb, 0x2b, 0xf, 0x58, 0x8, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "ba93321f6a97"}, {0x5, 0x24, 0x0, 0xfff3}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x7, 0x3, 0xd}, {0x6, 0x24, 0x1a, 0x6e6, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x7, 0x4}, @mdlm_detail={0xb0, 0x24, 0x13, 0x4, "5729b5196f19d234d250059fd8978c1d254169de19076bb4c70561debdcfe3609116a40de3d35d588d80adec089245b1017495f25a0c0fabc2843b12517bb7e8bf8eebc550b3f1619e1a55d00da054486bd8aa4b633c56273f6f6d953875ae4c8aecb351e8692f3a9b833738c5a69d3518c5cef469fed86fbbaee508e307ac8b3ae9a9f33ad991964e4a123f73765337dc041e38a23305c160066e59b7f202aa8fd29ee3b9560791e9fe0c7a"}, @country_functional={0xa, 0x24, 0x7, 0x81, 0x101, [0x8000, 0x4]}, @mdlm={0x15, 0x24, 0x12, 0x8}]}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "219d20"}, {0x5, 0x24, 0x0, 0xfffd}, {0xd, 0x24, 0xf, 0x1, 0xf, 0x5, 0x1ff, 0x9}, {0x6, 0x24, 0x1a, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x8, 0xb, 0x81, 0x6, 0x9}, @country_functional={0x8, 0x24, 0x7, 0x2, 0x8, [0x7ff]}, @call_mgmt={0x5, 0x24, 0x1, 0x5, 0x7}, @country_functional={0x8, 0x24, 0x7, 0xc0, 0xfff, [0x6]}, @country_functional={0xc, 0x24, 0x7, 0x5, 0x5, [0x4, 0x5, 0x4]}]}], [{{0x9, 0x5, 0x8, 0x0, 0x8, 0xde, 0x9, 0x27, [@generic={0x102, 0x22, "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"}, @generic={0xbe, 0xb, "d247881df2be97c798cac68397caec0d96e00470e5b411d7111ea15fcfc4c8d20b8c643d1d679efa71732bce86b8b5b30ace276b9e6076fd66b269764517470d829e28fd5947f60d8339e05986da5f5d5c4d18489122335322fe745c82ae23675a06c8ebb228c9451386f055a5d50cb83091c08b9aeb6cd4835f646df0e1d78a95b27fb66d53d4db72c2989b301e0a2732301fc4b01030065bccd04622a668ebbf5d84748dd44fd703ea06e001aa2709a5acb754f9010d7e91ee26c6"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x400, 0x0, 0x0, 0x3}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x5, 0xbe, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x6}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x1, 0x4, 0x8, [@generic={0xf9, 0xe, "9afd8f81e149542ef2c4130e40bee26c4bb9fe96433b2c725d2cf807fc7d4497a419779dbce75ba3d04fddf53383c56b02f83056fc2897941669f6763329c4e45e4a578ad7cacdfb79afba014f121505371d670bd5401a0ceb32304891dba33a35159dcf2ac479ccbf583336162c8cfa7c58d21fc3b1753906d88e3c36a22dbf20005c7cbffa2ed0d0f1baa4ace9e9ca4e163563a454798986b542731c5c0200606fb4af306adf4b499aa7ed21b59aa6efbd6a82f874e6fff257dd58524a650d3d6cc7b843da8be58bb67c8538744cc445e774a6225d1a7e1862cc9da67563843dc4b0b87f425d5094ea536d611dee1369af51348dfa3b"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x5}]}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0xda, 0x0, 0x2, [@generic={0x35, 0x23, "acf45e1eb88aeb4a2deb596ccfb3ca4b5e36c87bc820e8362e751bd9dc2a4400d50300a9264ea09dd987ddedd869ee0d867862"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0xe9, 0x13, 0x1}}, {{0x9, 0x5, 0xb, 0x1, 0x468, 0x7f, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x8}]}}, {{0x9, 0x5, 0x8, 0x2, 0x10, 0x8, 0x1, 0xf1, [@generic={0x9b, 0xd, "72638aa46f7ae9f0f62195419c15f31a6e6bbe4287fd752f2d3b05f549b1a24e723d88968be5ab5901c4cc3f4e74f14f8bbd4554c27e42c80163d4224d73543ec39b32015ac4a5ffa3e49785d92653effd36eaabca68f0910eb714a8010e8df62a29de6ffd891a421f5710ce8e5eb49bd293818b70a3ce8f9d9bec2d964b5a584076f9302af0fd5251d3199b4dec9e7c23653c48ca4215a34b"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0xe1, 0xfd, 0xc6, [@generic={0x38, 0x23, "53bdf8dd4b8fd1b801c3669bfd94066a0bd5b3cd31ff6741cdf00e663ca71c4b163ca2f0be4d5230964171c1368973e38d7c963dfcb4"}, @generic={0x55, 0x7, "6ccbcad2ec756d43d222a1b454642713bb0e4ec6328b9e0fb6f737bce2d8d8eeb6b76dfd67870b93573fafbfdfbb39f5cc7017cb360f7e4a04b39a383736ff6367b1ddfc5a2acd007a97b0f791027453b243b8"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x7, 0xeb, 0x2}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x1, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0xfff7}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x5}]}}]}}, {{0x9, 0x4, 0x89, 0xb, 0x3, 0x89, 0xf7, 0x99, 0x1, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0x8, 0x1003}, @as_header={0x7, 0x24, 0x1, 0x63, 0x4, 0x1002}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x1, 0xb, 0x33, "271418", "c4"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x3, 0x2, 0x1, 0x6, "fcda907099"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xf4, 0x2, 0x9, 0x78, "a66af5", "2d2da9"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7f, 0x3, 0x3, 0x0, "b69b4ed3be"}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xf77c}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7, 0x7}, {0x6, 0x24, 0x1a, 0x6, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8f3, 0x73, 0x1}]}], [{{0x9, 0x5, 0xc, 0x2, 0x8, 0x5, 0x6, 0x5}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x9, 0x4, 0x8, [@generic={0x85, 0x11, "31f57e2442566526cf0a7b81152752beab341f4de5ca48e964c8875d5b2215db3cdad05138c28702a41fb9c211ad4837b099b690f5fb43f41e9c97ab62114dbea6f5f577ebc7f6ca921c0132d076e305e2f5cda00afb117be8de9a50c9336a427e840312946eb3b540e3e00b9209482711f36034a96a353026ca79ba80171448607282"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x42, 0x3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x10, 0x7, 0x3, [@generic={0x9e, 0x4, "343c92ed90a87be9dae6985ef76275d1b4b4e3202fab2663c7b3e0be3630bb45489c1e71b2ab846d0ca71c8378b8c5f5fd03d2ee038db0c46f33ebd4bd0be9713308a3bf2d8fdc0a9f0a0429649ebc68b7f25fcff121be389d15fe70c85bd0c5519627047c9ad87250ce6475cebc50640330e2ecb472dacc53fa6193afd0beeaf129c174b8d851b4b479b96ffbc002c4f8b28b188fb9b688c973b2f0"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0xff}]}}]}}, {{0x9, 0x4, 0xab, 0x3, 0xc, 0x76, 0x6d, 0x6a, 0x9, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "ae0c29"}, {0x5, 0x24, 0x0, 0x670}, {0xd, 0x24, 0xf, 0x1, 0x36e9df78, 0x5, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x100, 0x2, 0xfc, 0xa, 0x0, 0x5}, @dmm={0x7, 0x24, 0x14, 0x7, 0xfffe}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfffa}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xf2, 0x401, 0x2}, [@mdlm_detail={0x9a, 0x24, 0x13, 0x10, "ae5f1b37c865aa48ec6ab8aae67b3176a05be35011cacfa5101c86344b549340a794fda8cadaeb9b7ec5511edc5a7827119dd52dac507ddefee3bb1ed9a1dfe7ff5a9ce64f540a60ca63823ba727df4a218b10e38196b3fc0ceef043bc6cfb312fa3a4d66e6a452fc8035de2272587dd9639645862ea44aaf950e1b52fc22a0aa695985fa6e065ad575451d97d511753f539b14dc391"}]}], [{{0x9, 0x5, 0x3, 0x3, 0x10, 0xe9, 0xa6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1}, @generic={0x70, 0xd, "43c2d29b779aeb51cd537219a08598f53e7bd55d9271239bb8c18206476c8be808c6c69dd191238c104e2f6f6af0dbfa2c3a09ebf208c771e19422d20317a148f0032a543f037fbcf0336dc3fd446a7c10d88843b36f5b765f58a825e1d496951f6e25156fc3313a00424d32ce8f"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x7af, 0x5, 0x5, 0x0, [@generic={0x57, 0xc, "11fdf3b17465ff8015fccf560c177f321a62d00dc1d43e54db4ba8c5c9dc7d47e655350aee5a443b0c9648dc75e2300d3e0f9209f3bfe9868b47f84c752a2cd17bdc965dc0b3091e07cb5ca6cbda9d7a942afa9cc4"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x200, 0xce, 0x3, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x2}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x7, 0x1, 0xeb, [@generic={0x2a, 0x8, "67126f46bfbe7282260e5bc64dcd27434de8ebf725626fae8d67e60c431b18fb2bf7af101e81cddf"}, @generic={0x39, 0x3, "ba39b0363fc7c2be271d7fb87f4e28d2bc85a3e564fcaaa44865081f5738b49e58e4567f6e94843da4c17dd0b5442d290b8789b5f4c8a2"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x8, 0xf6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xf}]}}, {{0x9, 0x5, 0xb, 0x10, 0x18, 0x40, 0x3, 0x3, [@generic={0x48, 0x21, "3e1b00edcb50ed9ae8e9be50a542f1a612c473ca00157f1183b4092a034c7b5df0c64dc3c589389f7bd944b1d6cf3bf3e3bf74ad6416a0503326105cb98d32f672b6c2cf0d9e"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0x7b, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xce08}]}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0x8, 0x40, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x1000}]}}, {{0x9, 0x5, 0xa, 0x0, 0x0, 0x9, 0x7f, 0x4d, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf4, 0x4}, @generic={0x9c, 0x23, "79e5715323e0de6daa4025148f32a7e4e0fd5e822581d3be7c32b18b04f31094f370d3cbde5aada2f63ea9596b6e45b72c07f87d35b2a623a5d644028cb1d9398288a6a3d73e24111a7773f3b18e9474a965f17a954166cffc3c8c4dd0dd9b989aaf9a1228f9419bedf8a1b675e71a0033ce2387fa4f8a9b54e9af8476510d143ba05e257aa704b7ca13e87462fe53b2d9a67bd4b179349da1b9"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x3, 0x9, 0x0, [@generic={0xa5, 0x2, "84fe2b442d98a15b67e0a9337d76d38b0502ad62d84d6c5e78984c7c582a79bd4804444741bc7a47057237569a92a708202ad94637c735b789acb0b5975133b97eb752a072ef50e604311a8432cefa5b22387c6d789f0e69aef8e45daf23ef6d4f1f17bb5dd8a9a0ea36e9768cd10748f6728562a94b99d2f5abdbd792adac275de3e1d5a143736788f78987ed9c6c319a78f7611557cc68ce02ae8091864b90b9b9cf"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x8, 0x3, 0x8, 0x0, [@generic={0xe5, 0xf, "84133a54c768f720d8ae6a5e3bfab8876bd43eebc0de5b44792769415ee919af76e56b6a02cd6de76b98bee8a110c48ade6e75bbfa1a6b91aa8412788ba49afe77229c28a938da2b0e43b19b3d78d12fc95d96f1c525f3e041956a85e8a7b9a9d1f87dde0af6d8c8e3fe882533123b49240a85f68cedfee977cd6d5bdcf6a0386773c9d2539e2c835bd30981dde7438a9790af209a19a4776769194e4444cbbc546fc8bae74fb4b3d6feab43b736df3ad4c077e98c740dd09e151e642c8aadbc235aa7f45a6f6c28dda35c1d040a014994204cc9b27028dafac8208baee11c2ad1ab5f"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x20, 0x9, 0xd, 0x4, [@generic={0x2, 0x3}, @generic={0x56, 0xa, "c605a1a17aa87f52429c5f0bd3ffdec7f07a545304a96ba1fe83c4b916eb03333b489d66089605aae6e1e3abb1827f24eba3141a9e5fcd0c0cc8153fefe727a61379b64c15cc6d692c4241309c43b2d1f9f019d8"}]}}]}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x89, 0x1, 0x9, 0x4, 0x10, 0x4}, 0x127, &(0x7f0000000fc0)={0x5, 0xf, 0x127, 0x5, [@generic={0x29, 0x10, 0x2, "90702d1d031e7a0ed171e1dce0a1c3d3acd406569ecb14e222feefdcd85f47fbe25b79c3a88e"}, @generic={0x81, 0x10, 0x1, "451fe8c8e96477186f0c903f193efb7e37a6be8cdede0f10d659b0f0929fc38849c11a7407411e5e150b9c49842377445c779880efc89ca97a296ca6fb7a638ebd66b6f947104d55f01cf0921e909881bfcf95195c70ccf15f90e8d49fab6e94d0c29bbaeff1df07e0c3a11cb990b3d571f26d37d21bbde4f3b287c40221"}, @generic={0x59, 0x10, 0x1, "cba426fbc99c70819e91d74b5d51f4f0fec80519ccbb40ced12ddcc6f50d94984e2b075d13a708d9e27187d63c8b463e5a4523d00d1ff2ce6ba000d8c3da09d6527862fd402e18f5145bd6c2dc33874e4bcb59546a6f"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "433730b658f67c66d36d8fc1bc23a273"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x0, 0x4, 0x9, 0x6}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f0000001100)=""/184, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x10000000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc}, 0xb}, 0x94) 6.94765ms ago: executing program 4 (id=1521): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x200013, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd25, 0x25dfdbff, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1000}, [@RTA_IIF={0x8, 0x3, r5}, @RTA_UID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60d0}, 0xea5bc50b6199d77e) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r6, 0x1, 0x0, 0x0, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 0s ago: executing program 1 (id=1522): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x905, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x815, 0xfe, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xa, "186b"}, @global=@item_4={0x3, 0x1, 0x5}]}}, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x100}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r3, 0x4b4b, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x180, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x6}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x98, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_POLICE={0x48, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffe}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0xfd12, 0x7f, 0xe, 0x6}, {0x800, 0xc0, 0x7, 0x6}, {0xf, 0x9, 0x2, 0x10000}, {0x5, 0x3, 0x5, 0x3}, {0x2, 0x4, 0x2, 0x8}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x80000000}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x88, 0x1, [@m_simple={0x50, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '%!\x00'}]}, {0x19, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x34, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): T9084] ? __lock_acquire+0x6b6/0x2cf0 [ 502.507620][ T9084] ? __lock_acquire+0x6b6/0x2cf0 [ 502.507662][ T9084] ? do_raw_spin_lock+0x121/0x290 [ 502.507690][ T9084] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 502.507718][ T9084] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 502.507740][ T9084] ? lockdep_hardirqs_on+0x98/0x140 [ 502.507766][ T9084] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 502.507801][ T9084] snd_pcm_oss_make_ready_locked+0x7d/0x300 [ 502.507827][ T9084] snd_pcm_oss_write+0x287/0xf20 [ 502.507877][ T9084] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 502.507907][ T9084] ? do_raw_spin_lock+0x121/0x290 [ 502.507937][ T9084] ? rw_verify_area+0x25b/0x4e0 [ 502.507967][ T9084] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 502.508002][ T9084] vfs_write+0x287/0xb40 [ 502.508041][ T9084] ? __pfx_vfs_write+0x10/0x10 [ 502.508074][ T9084] ? __fget_files+0x2a/0x420 [ 502.508100][ T9084] ? __fget_files+0x2a/0x420 [ 502.508121][ T9084] ? __fget_files+0x3a6/0x420 [ 502.508142][ T9084] ? __fget_files+0x2a/0x420 [ 502.508181][ T9084] ksys_write+0x14b/0x260 [ 502.508214][ T9084] ? __pfx_ksys_write+0x10/0x10 [ 502.508248][ T9084] ? do_syscall_64+0xbe/0xf80 [ 502.508274][ T9084] do_syscall_64+0xfa/0xf80 [ 502.508295][ T9084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.508317][ T9084] ? clear_bhb_loop+0x60/0xb0 [ 502.508344][ T9084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.508365][ T9084] RIP: 0033:0x7f67bf47f749 [ 502.508384][ T9084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.508403][ T9084] RSP: 002b:00007f67bd6e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 502.508427][ T9084] RAX: ffffffffffffffda RBX: 00007f67bf6d5fa0 RCX: 00007f67bf47f749 [ 502.508444][ T9084] RDX: 00000000ffffffd9 RSI: 00002000000001c0 RDI: 0000000000000003 [ 502.508459][ T9084] RBP: 00007f67bd6e6090 R08: 0000000000000000 R09: 0000000000000000 [ 502.508473][ T9084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.508486][ T9084] R13: 00007f67bf6d6038 R14: 00007f67bf6d5fa0 R15: 00007ffdacc1c828 [ 502.508522][ T9084] [ 503.288181][ T5882] usb 3-1: USB disconnect, device number 19 [ 503.521024][ T5889] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 503.783980][ T5889] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.784010][ T5889] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 503.787552][ T5889] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 503.787584][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 503.787606][ T5889] usb 2-1: SerialNumber: syz [ 504.061284][ T9082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.061933][ T9082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.121260][ T5889] usb 2-1: 0:2 : does not exist [ 504.126205][ T5889] usb 2-1: 0:0: failed to get current value for ch 0 (-22) [ 504.180673][ T5889] usb 2-1: USB disconnect, device number 20 [ 504.296316][ T9109] FAULT_INJECTION: forcing a failure. [ 504.296316][ T9109] name failslab, interval 1, probability 0, space 0, times 0 [ 504.296357][ T9109] CPU: 0 UID: 0 PID: 9109 Comm: syz.3.927 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 504.296388][ T9109] Tainted: [L]=SOFTLOCKUP [ 504.296396][ T9109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 504.296408][ T9109] Call Trace: [ 504.296416][ T9109] [ 504.296425][ T9109] dump_stack_lvl+0x189/0x250 [ 504.296458][ T9109] ? __pfx____ratelimit+0x10/0x10 [ 504.296493][ T9109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.296521][ T9109] ? __pfx__printk+0x10/0x10 [ 504.296539][ T9109] ? __kasan_slab_alloc+0x6c/0x80 [ 504.296576][ T9109] ? __lock_acquire+0x6b6/0x2cf0 [ 504.296615][ T9109] should_fail_ex+0x46c/0x600 [ 504.296649][ T9109] ? skb_clone+0x212/0x3a0 [ 504.296677][ T9109] should_failslab+0xa8/0x100 [ 504.296699][ T9109] ? skb_clone+0x212/0x3a0 [ 504.296725][ T9109] kmem_cache_alloc_noprof+0x84/0x6c0 [ 504.296754][ T9109] ? __netlink_lookup+0xbd/0x8a0 [ 504.296793][ T9109] skb_clone+0x212/0x3a0 [ 504.296826][ T9109] __netlink_deliver_tap+0x404/0x850 [ 504.296869][ T9109] ? netlink_deliver_tap+0x2e/0x1b0 [ 504.296900][ T9109] netlink_deliver_tap+0x19c/0x1b0 [ 504.296931][ T9109] netlink_unicast+0x811/0xa10 [ 504.296966][ T9109] ? __pfx_netlink_unicast+0x10/0x10 [ 504.296994][ T9109] ? netlink_sendmsg+0x642/0xb30 [ 504.297031][ T9109] ? skb_put+0x11b/0x210 [ 504.297060][ T9109] netlink_sendmsg+0x805/0xb30 [ 504.297101][ T9109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.297141][ T9109] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 504.297170][ T9109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.297202][ T9109] __sock_sendmsg+0x21c/0x270 [ 504.297240][ T9109] __sys_sendto+0x3c7/0x520 [ 504.297267][ T9109] ? __pfx___sys_sendto+0x10/0x10 [ 504.297323][ T9109] ? ksys_write+0x230/0x260 [ 504.297357][ T9109] ? __pfx_ksys_write+0x10/0x10 [ 504.297392][ T9109] __x64_sys_sendto+0xde/0x100 [ 504.297422][ T9109] do_syscall_64+0xfa/0xf80 [ 504.297445][ T9109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.297468][ T9109] ? clear_bhb_loop+0x60/0xb0 [ 504.297495][ T9109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.297517][ T9109] RIP: 0033:0x7f67bf47f749 [ 504.297537][ T9109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.297557][ T9109] RSP: 002b:00007f67bd6e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 504.297581][ T9109] RAX: ffffffffffffffda RBX: 00007f67bf6d5fa0 RCX: 00007f67bf47f749 [ 504.297597][ T9109] RDX: 000000000000001c RSI: 0000200000000080 RDI: 0000000000000003 [ 504.297612][ T9109] RBP: 00007f67bd6e6090 R08: 0000000000000000 R09: 0000000000000000 [ 504.297626][ T9109] R10: 000000002000c8c0 R11: 0000000000000246 R12: 0000000000000001 [ 504.297640][ T9109] R13: 00007f67bf6d6038 R14: 00007f67bf6d5fa0 R15: 00007ffdacc1c828 [ 504.297678][ T9109] [ 504.578250][ T6397] udevd[6397]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.854851][ T31] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 505.023455][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 505.023490][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 505.023517][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 505.023541][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 505.023584][ T31] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 505.023609][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.033745][ T31] usb 5-1: config 0 descriptor?? [ 505.081022][ T6238] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 505.246482][ T31] hdpvr 5-1:0.0: firmware version 0x3 dated 3;¨“Ã~&X^€œ wÒΖŠÒ¥ g/ƒNÐ `žxè$«·¯=å"Ü— [ 505.246508][ T31] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 505.269834][ T6238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 505.269872][ T6238] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 505.269899][ T6238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 505.269923][ T6238] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 505.269973][ T6238] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 505.269998][ T6238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.298549][ T6238] usb 3-1: config 0 descriptor?? [ 505.543192][ T6238] hdpvr 3-1:0.0: firmware version 0x3 dated 3;¨“Ã~&X^€œ wÒΖŠÒ¥ g/ƒNÐ `žxè$«·¯=å"Ü— [ 505.543279][ T6238] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 505.822787][ T6238] hdpvr 3-1:0.0: device init failed [ 505.822882][ T6238] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 505.858237][ T31] hdpvr 5-1:0.0: Could not setup controls [ 505.858999][ T31] hdpvr 5-1:0.0: registering videodev failed [ 505.873662][ T6238] usb 3-1: USB disconnect, device number 20 [ 505.956285][ T31] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 506.011484][ T31] usb 5-1: USB disconnect, device number 25 [ 507.574906][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.574976][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.200992][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 508.202622][ T31] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 508.214657][ T9166] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 508.354017][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.354048][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 508.355582][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 508.355613][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 508.355636][ T9] usb 2-1: SerialNumber: syz [ 508.358690][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 508.371306][ T31] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 508.371341][ T31] usb 3-1: config 0 has no interface number 0 [ 508.371424][ T31] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 508.375716][ T31] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 508.375751][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.375776][ T31] usb 3-1: Product: syz [ 508.375793][ T31] usb 3-1: Manufacturer: syz [ 508.375810][ T31] usb 3-1: SerialNumber: syz [ 508.457442][ T31] usb 3-1: config 0 descriptor?? [ 508.662051][ T31] usbtouchscreen 3-1:0.214: Failed to read FW rev: 0 [ 508.662310][ T31] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 508.703453][ T9158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.704019][ T9158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.765434][ T9] usb 2-1: 0:2 : does not exist [ 508.776895][ T9] usb 2-1: 0:0: failed to get current value for ch 0 (-22) [ 508.857185][ T9] usb 2-1: USB disconnect, device number 21 [ 508.989145][ T6397] udevd[6397]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 509.464731][ T9183] overlay: ./file0 is not a directory [ 510.420982][ T6238] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 510.735771][ T6238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 510.735805][ T6238] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 510.735832][ T6238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 510.735857][ T6238] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 510.735898][ T6238] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 510.735923][ T6238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.962577][ T6238] usb 1-1: config 0 descriptor?? [ 511.072460][ T6050] usb 3-1: USB disconnect, device number 21 [ 511.281223][ T6238] hdpvr 1-1:0.0: firmware version 0x3 dated 3;¨“Ã~&X^€œ wÒΖŠÒ¥ g/ƒNÐ `žxè$«·¯=å"Ü— [ 511.281248][ T6238] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 511.671071][ T5889] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 511.820702][ T5889] usb 4-1: device descriptor read/64, error -71 [ 511.840173][ T6238] hdpvr 1-1:0.0: Could not setup controls [ 511.846715][ T6238] hdpvr 1-1:0.0: registering videodev failed [ 511.862200][ T6238] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 511.870381][ T6238] usb 1-1: USB disconnect, device number 27 [ 512.181669][ T5889] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 512.830613][ T5889] usb 4-1: device descriptor read/64, error -71 [ 512.931652][ T5889] usb usb4-port1: attempt power cycle [ 513.379061][ T9235] geneve2: entered promiscuous mode [ 513.501090][ T5889] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 513.523557][ T5889] usb 4-1: device descriptor read/8, error -71 [ 513.760978][ T5889] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 513.790428][ T5889] usb 4-1: device descriptor read/8, error -71 [ 513.829165][ T9235] syz.0.976 (9235) used greatest stack depth: 17496 bytes left [ 513.844638][ T9239] netlink: 44 bytes leftover after parsing attributes in process `syz.1.974'. [ 513.951126][ T5889] usb usb4-port1: unable to enumerate USB device [ 516.211120][ T9253] netlink: 112 bytes leftover after parsing attributes in process `syz.2.983'. [ 518.290838][ T9256] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.291695][ T9256] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.000481][ T9256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.032212][ T9256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.900322][ T9264] netlink: 830 bytes leftover after parsing attributes in process `syz.0.985'. [ 521.961031][ T9269] vlan2: entered allmulticast mode [ 521.961055][ T9269] hsr0: entered allmulticast mode [ 521.961069][ T9269] hsr_slave_0: entered allmulticast mode [ 521.961089][ T9269] hsr_slave_1: entered allmulticast mode [ 522.277173][ T70] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.296861][ T70] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.322170][ T70] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.322222][ T70] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.371557][ T31] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 523.526832][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.526871][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.526913][ T31] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 523.526938][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.625158][ T31] usb 2-1: config 0 descriptor?? [ 525.623165][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 525.623317][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 525.681150][ T31] usb 2-1: USB disconnect, device number 22 [ 525.787890][ T9321] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1007'. [ 526.543520][ T9339] netlink: 44 bytes leftover after parsing attributes in process `syz.0.998'. [ 529.291103][ T5923] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 529.453634][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.453674][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.453717][ T5923] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 529.453742][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.521398][ T5923] usb 2-1: config 0 descriptor?? [ 530.283441][ T9367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.284073][ T9367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.488581][ T5923] hid-led 0003:1D34:000A.0017: probe with driver hid-led failed with error -71 [ 530.540050][ T5923] usb 2-1: USB disconnect, device number 23 [ 530.931049][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 531.116494][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.116532][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.116573][ T9] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 531.116598][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.122381][ T9] usb 1-1: config 0 descriptor?? [ 531.531417][ T6411] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 532.861193][ T6411] usb 3-1: Using ep0 maxpacket: 16 [ 532.871765][ T6411] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 532.871799][ T6411] usb 3-1: config 0 has no interface number 0 [ 532.871858][ T6411] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 532.879968][ T6411] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 532.880007][ T6411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.880031][ T6411] usb 3-1: Product: syz [ 532.880049][ T6411] usb 3-1: Manufacturer: syz [ 532.880066][ T6411] usb 3-1: SerialNumber: syz [ 532.967054][ T6411] usb 3-1: config 0 descriptor?? [ 533.214055][ T9403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.214645][ T9403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.521876][ T6411] usbtouchscreen 3-1:0.214: Failed to read FW rev: 0 [ 533.522661][ T6411] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 533.615258][ T9412] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 534.521278][ T6452] usb 3-1: USB disconnect, device number 22 [ 537.471095][ T5923] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 537.481667][ T5882] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 537.592354][ T9] hid-led 0003:1D34:000A.0018: probe with driver hid-led failed with error -71 [ 537.630295][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.630333][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.630374][ T5923] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 537.630399][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.631665][ T9] usb 1-1: USB disconnect, device number 28 [ 537.662888][ T5882] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.662920][ T5882] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 537.685430][ T5882] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 537.685468][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 537.685492][ T5882] usb 3-1: SerialNumber: syz [ 537.741945][ T5923] usb 5-1: config 0 descriptor?? [ 537.966271][ T9424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.969233][ T9424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.077742][ T5882] usb 3-1: 0:2 : does not exist [ 538.108081][ T5882] usb 3-1: 0:0: failed to get current value for ch 0 (-22) [ 538.116899][ T9430] netlink: 'syz.0.1044': attribute type 62 has an invalid length. [ 538.457831][ T5882] usb 3-1: USB disconnect, device number 23 [ 539.141632][ T9441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.142877][ T9441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.480043][ T6397] udevd[6397]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 540.736304][ T5923] hid-led 0003:1D34:000A.0019: probe with driver hid-led failed with error -71 [ 540.771397][ T5923] usb 5-1: USB disconnect, device number 26 [ 542.496866][ T9489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.942490][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1069'. [ 543.781082][ T5923] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 543.946164][ T5923] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 543.946195][ T5923] usb 1-1: config 0 has no interface number 0 [ 543.946245][ T5923] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 543.946273][ T5923] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 543.958730][ T5923] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 543.958766][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.958792][ T5923] usb 1-1: Product: syz [ 543.958810][ T5923] usb 1-1: Manufacturer: syz [ 543.958827][ T5923] usb 1-1: SerialNumber: syz [ 544.013290][ T9520] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1078'. [ 544.042387][ T5923] usb 1-1: config 0 descriptor?? [ 544.043175][ T9510] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 544.047823][ T5923] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 544.216801][ T5923] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 544.251003][ T44] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 544.313052][ T9510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.326073][ T9510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.406506][ T44] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.406527][ T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 544.408526][ T44] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 544.408548][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 544.408562][ T44] usb 2-1: SerialNumber: syz [ 544.507274][ T6113] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 544.631461][ T6113] usb 3-1: device descriptor read/64, error -71 [ 544.733773][ T9517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.734342][ T9517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.882659][ T6113] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 544.928477][ T44] usb 2-1: 0:2 : does not exist [ 545.031163][ T6113] usb 3-1: device descriptor read/64, error -71 [ 545.145817][ T6113] usb usb3-port1: attempt power cycle [ 545.185516][ T44] usb 2-1: 0:0: failed to get current value for ch 0 (-22) [ 545.541760][ T6113] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 545.562224][ T44] usb 2-1: USB disconnect, device number 24 [ 545.572862][ T6113] usb 3-1: device descriptor read/8, error -71 [ 545.814987][ T6113] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 545.832269][ T6113] usb 3-1: device descriptor read/8, error -71 [ 545.941786][ T6113] usb usb3-port1: unable to enumerate USB device [ 546.996648][ T6411] usb 1-1: USB disconnect, device number 29 [ 547.073944][ T6411] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 547.075048][ T6411] cyberjack 1-1:0.69: device disconnected [ 547.362839][ T9553] netlink: 'syz.0.1095': attribute type 8 has an invalid length. [ 547.362861][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1095'. [ 547.373419][ T9553] bond0: entered promiscuous mode [ 547.373444][ T9553] bond_slave_0: entered promiscuous mode [ 547.373714][ T9553] bond_slave_1: entered promiscuous mode [ 547.425980][ T9553] gretap0: entered promiscuous mode [ 547.484132][ T9553] bond0: left promiscuous mode [ 547.484162][ T9553] bond_slave_0: left promiscuous mode [ 547.484391][ T9553] bond_slave_1: left promiscuous mode [ 547.546737][ T9553] gretap0: left promiscuous mode [ 548.661706][ T6113] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 548.820985][ T6113] usb 1-1: Using ep0 maxpacket: 16 [ 548.823531][ T6113] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 548.823560][ T6113] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 548.823582][ T6113] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 548.823603][ T6113] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 548.823624][ T6113] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 548.823646][ T6113] usb 1-1: config 0 has no interface number 0 [ 548.823696][ T6113] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 548.823726][ T6113] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 548.823750][ T6113] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 548.823845][ T6113] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 548.823876][ T6113] usb 1-1: config 0 interface 125 has no altsetting 0 [ 548.823895][ T6113] usb 1-1: config 0 interface 125 has no altsetting 2 [ 548.832535][ T6113] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 548.832571][ T6113] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.832595][ T6113] usb 1-1: Product: syz [ 548.832612][ T6113] usb 1-1: Manufacturer: syz [ 548.832628][ T6113] usb 1-1: SerialNumber: syz [ 548.849196][ T6113] usb 1-1: config 0 descriptor?? [ 548.859567][ T6113] usb 1-1: selecting invalid altsetting 2 [ 549.478238][ T9597] FAULT_INJECTION: forcing a failure. [ 549.478238][ T9597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.478280][ T9597] CPU: 0 UID: 0 PID: 9597 Comm: syz.2.1111 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 549.478310][ T9597] Tainted: [L]=SOFTLOCKUP [ 549.478318][ T9597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 549.478332][ T9597] Call Trace: [ 549.478340][ T9597] [ 549.478350][ T9597] dump_stack_lvl+0x189/0x250 [ 549.478384][ T9597] ? __pfx____ratelimit+0x10/0x10 [ 549.478429][ T9597] ? __pfx_dump_stack_lvl+0x10/0x10 [ 549.478457][ T9597] ? __pfx__printk+0x10/0x10 [ 549.478485][ T9597] ? __might_fault+0xb0/0x130 [ 549.478524][ T9597] should_fail_ex+0x46c/0x600 [ 549.478558][ T9597] _copy_to_user+0x31/0xb0 [ 549.478582][ T9597] copy_to_sockptr+0x5e/0xa0 [ 549.478610][ T9597] do_ip_getsockopt+0x1000/0x1b60 [ 549.478647][ T9597] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 549.478679][ T9597] ? kstrtoull+0x12f/0x1d0 [ 549.478708][ T9597] ? __lock_acquire+0x6b6/0x2cf0 [ 549.478745][ T9597] ? __lock_acquire+0x6b6/0x2cf0 [ 549.478790][ T9597] ? __lock_acquire+0x6b6/0x2cf0 [ 549.478829][ T9597] ip_getsockopt+0xbb/0x220 [ 549.478863][ T9597] ? __pfx_ip_getsockopt+0x10/0x10 [ 549.478894][ T9597] ? sock_common_getsockopt+0x2d/0xb0 [ 549.478914][ T9597] ? raw_getsockopt+0xce/0x200 [ 549.478933][ T9597] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 549.478956][ T9597] do_sock_getsockopt+0x2b4/0x3d0 [ 549.478995][ T9597] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 549.479020][ T9597] ? do_syscall_64+0x80/0xf80 [ 549.479041][ T9597] ? __fget_files+0x2a/0x420 [ 549.479063][ T9597] ? __fget_files+0x3a6/0x420 [ 549.479084][ T9597] ? __fget_files+0x2a/0x420 [ 549.479112][ T9597] __x64_sys_getsockopt+0x1ab/0x250 [ 549.479137][ T9597] ? do_syscall_64+0x80/0xf80 [ 549.479159][ T9597] ? do_syscall_64+0x80/0xf80 [ 549.479182][ T9597] do_syscall_64+0xfa/0xf80 [ 549.479204][ T9597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.479227][ T9597] ? clear_bhb_loop+0x60/0xb0 [ 549.479252][ T9597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.479272][ T9597] RIP: 0033:0x7f98659ef749 [ 549.479291][ T9597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.479310][ T9597] RSP: 002b:00007f9863c2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 549.479333][ T9597] RAX: ffffffffffffffda RBX: 00007f9865c46090 RCX: 00007f98659ef749 [ 549.479348][ T9597] RDX: 0000000000000034 RSI: 0000000000000000 RDI: 0000000000000005 [ 549.479361][ T9597] RBP: 00007f9863c2d090 R08: 0000200000000040 R09: 0000000000000000 [ 549.479376][ T9597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.479389][ T9597] R13: 00007f9865c46128 R14: 00007f9865c46090 R15: 00007ffebb797d48 [ 549.479424][ T9597] [ 549.971485][ T9583] input: syz1 as /devices/virtual/input/input15 [ 550.167073][ T9] usb 1-1: USB disconnect, device number 30 [ 550.834085][ T9617] FAULT_INJECTION: forcing a failure. [ 550.834085][ T9617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.834205][ T9617] CPU: 1 UID: 0 PID: 9617 Comm: syz.2.1120 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 550.834236][ T9617] Tainted: [L]=SOFTLOCKUP [ 550.834245][ T9617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 550.834257][ T9617] Call Trace: [ 550.834265][ T9617] [ 550.834274][ T9617] dump_stack_lvl+0x189/0x250 [ 550.834310][ T9617] ? __pfx____ratelimit+0x10/0x10 [ 550.834336][ T9617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 550.834358][ T9617] ? __pfx__printk+0x10/0x10 [ 550.834373][ T9617] ? __might_fault+0xb0/0x130 [ 550.834404][ T9617] should_fail_ex+0x46c/0x600 [ 550.834428][ T9617] _copy_from_iter+0x1cd/0x1630 [ 550.834467][ T9617] ? __build_skb_around+0x22d/0x3c0 [ 550.834487][ T9617] ? __pfx__copy_from_iter+0x10/0x10 [ 550.834526][ T9617] ? __alloc_skb+0x2f1/0x430 [ 550.834543][ T9617] ? __pfx___alloc_skb+0x10/0x10 [ 550.834562][ T9617] ? netlink_sendmsg+0x642/0xb30 [ 550.834589][ T9617] ? skb_put+0x11b/0x210 [ 550.834609][ T9617] netlink_sendmsg+0x6b2/0xb30 [ 550.834637][ T9617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.834663][ T9617] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 550.834685][ T9617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.834706][ T9617] __sock_sendmsg+0x21c/0x270 [ 550.834732][ T9617] ____sys_sendmsg+0x508/0x810 [ 550.834755][ T9617] ? __pfx_____sys_sendmsg+0x10/0x10 [ 550.834782][ T9617] ? import_iovec+0x74/0xa0 [ 550.834798][ T9617] ___sys_sendmsg+0x21f/0x2a0 [ 550.834819][ T9617] ? __pfx____sys_sendmsg+0x10/0x10 [ 550.834864][ T9617] ? __fget_files+0x2a/0x420 [ 550.834880][ T9617] ? __fget_files+0x3a6/0x420 [ 550.834904][ T9617] __x64_sys_sendmsg+0x1a1/0x260 [ 550.834925][ T9617] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 550.834952][ T9617] ? __pfx_ksys_write+0x10/0x10 [ 550.834977][ T9617] ? do_syscall_64+0xbe/0xf80 [ 550.834995][ T9617] do_syscall_64+0xfa/0xf80 [ 550.835010][ T9617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.835026][ T9617] ? clear_bhb_loop+0x60/0xb0 [ 550.835044][ T9617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.835059][ T9617] RIP: 0033:0x7f98659ef749 [ 550.835073][ T9617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.835087][ T9617] RSP: 002b:00007f9863c4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.835104][ T9617] RAX: ffffffffffffffda RBX: 00007f9865c45fa0 RCX: 00007f98659ef749 [ 550.835116][ T9617] RDX: 0000000004004850 RSI: 0000200000000140 RDI: 0000000000000003 [ 550.835126][ T9617] RBP: 00007f9863c4e090 R08: 0000000000000000 R09: 0000000000000000 [ 550.835136][ T9617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.835145][ T9617] R13: 00007f9865c46038 R14: 00007f9865c45fa0 R15: 00007ffebb797d48 [ 550.835170][ T9617] [ 551.805974][ T9635] FAULT_INJECTION: forcing a failure. [ 551.805974][ T9635] name failslab, interval 1, probability 0, space 0, times 0 [ 551.806004][ T9635] CPU: 1 UID: 0 PID: 9635 Comm: syz.3.1126 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 551.806025][ T9635] Tainted: [L]=SOFTLOCKUP [ 551.806031][ T9635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 551.806040][ T9635] Call Trace: [ 551.806046][ T9635] [ 551.806052][ T9635] dump_stack_lvl+0x189/0x250 [ 551.806077][ T9635] ? __pfx____ratelimit+0x10/0x10 [ 551.806102][ T9635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 551.806123][ T9635] ? __pfx__printk+0x10/0x10 [ 551.806143][ T9635] ? __pfx___might_resched+0x10/0x10 [ 551.806163][ T9635] should_fail_ex+0x46c/0x600 [ 551.806187][ T9635] should_failslab+0xa8/0x100 [ 551.806204][ T9635] __kmalloc_noprof+0xe0/0x7e0 [ 551.806226][ T9635] ? kfree+0x4d/0x900 [ 551.806244][ T9635] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 551.806264][ T9635] tomoyo_realpath_from_path+0xe3/0x5d0 [ 551.806281][ T9635] ? tomoyo_domain+0xd9/0x130 [ 551.806300][ T9635] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 551.806322][ T9635] tomoyo_path_number_perm+0x1e8/0x5a0 [ 551.806346][ T9635] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 551.806370][ T9635] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 551.806386][ T9635] ? lockdep_hardirqs_on+0x98/0x140 [ 551.806423][ T9635] ? __fget_files+0x2a/0x420 [ 551.806442][ T9635] ? __fget_files+0x3a6/0x420 [ 551.806458][ T9635] ? __fget_files+0x2a/0x420 [ 551.806485][ T9635] security_file_ioctl+0xcb/0x2d0 [ 551.806515][ T9635] __se_sys_ioctl+0x47/0x170 [ 551.806538][ T9635] do_syscall_64+0xfa/0xf80 [ 551.806553][ T9635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.806569][ T9635] ? clear_bhb_loop+0x60/0xb0 [ 551.806588][ T9635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.806603][ T9635] RIP: 0033:0x7f67bf47f749 [ 551.806617][ T9635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.806630][ T9635] RSP: 002b:00007f67bd6e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 551.806647][ T9635] RAX: ffffffffffffffda RBX: 00007f67bf6d5fa0 RCX: 00007f67bf47f749 [ 551.806659][ T9635] RDX: 0000200000000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 551.806669][ T9635] RBP: 00007f67bd6e6090 R08: 0000000000000000 R09: 0000000000000000 [ 551.806679][ T9635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.806688][ T9635] R13: 00007f67bf6d6038 R14: 00007f67bf6d5fa0 R15: 00007ffdacc1c828 [ 551.806713][ T9635] [ 551.818374][ T9635] ERROR: Out of memory at tomoyo_realpath_from_path. [ 553.668073][ T9659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1131'. [ 554.769101][ T9683] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1144'. [ 555.781041][ T5923] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 555.931190][ T5923] usb 1-1: Using ep0 maxpacket: 16 [ 555.933688][ T5923] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 555.933716][ T5923] usb 1-1: config 0 has no interface number 0 [ 555.933767][ T5923] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 556.002691][ T5923] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 556.002726][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.002748][ T5923] usb 1-1: Product: syz [ 556.002764][ T5923] usb 1-1: Manufacturer: syz [ 556.002780][ T5923] usb 1-1: SerialNumber: syz [ 556.068485][ T5923] usb 1-1: config 0 descriptor?? [ 556.322257][ T5923] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71 [ 556.326671][ T5923] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 556.371935][ T5923] usb 1-1: USB disconnect, device number 31 [ 556.451056][ T6452] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 556.634093][ T6452] usb 5-1: config 0 has an invalid interface number: 167 but max is 0 [ 556.634126][ T6452] usb 5-1: config 0 has no interface number 0 [ 556.634180][ T6452] usb 5-1: config 0 interface 167 altsetting 0 endpoint 0x8A has invalid maxpacket 512, setting to 64 [ 556.637329][ T6452] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0104, bcdDevice=f1.04 [ 556.637361][ T6452] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.637384][ T6452] usb 5-1: Product: syz [ 556.637400][ T6452] usb 5-1: Manufacturer: syz [ 556.637416][ T6452] usb 5-1: SerialNumber: syz [ 556.657202][ T6452] usb 5-1: config 0 descriptor?? [ 556.658406][ T9700] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 556.704674][ T6452] kvaser_usb 5-1:0.167: error -ENODEV: Cannot get usb endpoint(s) [ 556.883189][ T9700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.883737][ T9700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.916933][ T6452] usb 5-1: USB disconnect, device number 27 [ 557.641950][ T9735] 9p: Bad value for 'rfdno' [ 558.583539][ T9758] FAULT_INJECTION: forcing a failure. [ 558.583539][ T9758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.583608][ T9758] CPU: 1 UID: 0 PID: 9758 Comm: syz.3.1171 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 558.583640][ T9758] Tainted: [L]=SOFTLOCKUP [ 558.583648][ T9758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 558.583662][ T9758] Call Trace: [ 558.583673][ T9758] [ 558.583684][ T9758] dump_stack_lvl+0x189/0x250 [ 558.583719][ T9758] ? __pfx____ratelimit+0x10/0x10 [ 558.583754][ T9758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.583784][ T9758] ? __pfx__printk+0x10/0x10 [ 558.583823][ T9758] should_fail_ex+0x46c/0x600 [ 558.583859][ T9758] _copy_to_user+0x31/0xb0 [ 558.583882][ T9758] simple_read_from_buffer+0xe1/0x170 [ 558.583911][ T9758] proc_fail_nth_read+0x1b6/0x220 [ 558.583957][ T9758] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 558.583994][ T9758] ? rw_verify_area+0x2ac/0x4e0 [ 558.584023][ T9758] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 558.584058][ T9758] vfs_read+0x206/0xa30 [ 558.584085][ T9758] ? preempt_schedule_thunk+0x16/0x30 [ 558.584119][ T9758] ? __pfx_vfs_read+0x10/0x10 [ 558.584145][ T9758] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 558.584185][ T9758] ? mutex_lock_nested+0x154/0x1d0 [ 558.584212][ T9758] ? fdget_pos+0x253/0x320 [ 558.584247][ T9758] ksys_read+0x14b/0x260 [ 558.584280][ T9758] ? __pfx_ksys_read+0x10/0x10 [ 558.584322][ T9758] do_syscall_64+0xfa/0xf80 [ 558.584344][ T9758] ? rcu_is_watching+0x15/0xb0 [ 558.584365][ T9758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.584388][ T9758] ? clear_bhb_loop+0x60/0xb0 [ 558.584415][ T9758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.584437][ T9758] RIP: 0033:0x7f67bf47e15c [ 558.584457][ T9758] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 558.584476][ T9758] RSP: 002b:00007f67bd6a4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 558.584499][ T9758] RAX: ffffffffffffffda RBX: 00007f67bf6d6180 RCX: 00007f67bf47e15c [ 558.584516][ T9758] RDX: 000000000000000f RSI: 00007f67bd6a40a0 RDI: 0000000000000005 [ 558.584530][ T9758] RBP: 00007f67bd6a4090 R08: 0000000000000000 R09: 0000000000000000 [ 558.584544][ T9758] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 558.584558][ T9758] R13: 00007f67bf6d6218 R14: 00007f67bf6d6180 R15: 00007ffdacc1c828 [ 558.584594][ T9758] [ 559.149151][ T9763] FAULT_INJECTION: forcing a failure. [ 559.149151][ T9763] name failslab, interval 1, probability 0, space 0, times 0 [ 559.149196][ T9763] CPU: 1 UID: 0 PID: 9763 Comm: syz.0.1173 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 559.149228][ T9763] Tainted: [L]=SOFTLOCKUP [ 559.149235][ T9763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 559.149249][ T9763] Call Trace: [ 559.149258][ T9763] [ 559.149268][ T9763] dump_stack_lvl+0x189/0x250 [ 559.149303][ T9763] ? __pfx____ratelimit+0x10/0x10 [ 559.149338][ T9763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.149367][ T9763] ? __pfx__printk+0x10/0x10 [ 559.149397][ T9763] ? __pfx___might_resched+0x10/0x10 [ 559.149422][ T9763] ? fs_reclaim_acquire+0x7d/0x100 [ 559.149447][ T9763] should_fail_ex+0x46c/0x600 [ 559.149482][ T9763] should_failslab+0xa8/0x100 [ 559.149507][ T9763] __kmalloc_node_track_caller_noprof+0xe2/0x810 [ 559.149541][ T9763] ? smk_import_entry+0x178/0x1f0 [ 559.149572][ T9763] kstrndup+0x80/0x160 [ 559.149599][ T9763] smk_import_entry+0x178/0x1f0 [ 559.149628][ T9763] smack_inode_setxattr+0x2af/0x4f0 [ 559.149662][ T9763] ? __pfx_smack_inode_setxattr+0x10/0x10 [ 559.149696][ T9763] ? bpf_lsm_capable+0x9/0x20 [ 559.149718][ T9763] ? security_capable+0x7e/0x2e0 [ 559.149756][ T9763] ? ns_capable+0x8a/0xf0 [ 559.149790][ T9763] security_inode_setxattr+0x3a1/0x710 [ 559.149825][ T9763] __vfs_setxattr_locked+0xa4/0x250 [ 559.149857][ T9763] vfs_setxattr+0x16b/0x2f0 [ 559.149887][ T9763] ? __pfx_vfs_setxattr+0x10/0x10 [ 559.149916][ T9763] ? mnt_want_write_file+0x17e/0x210 [ 559.149949][ T9763] file_setxattr+0x1da/0x2b0 [ 559.149979][ T9763] path_setxattrat+0x327/0x3a0 [ 559.150019][ T9763] ? __pfx_path_setxattrat+0x10/0x10 [ 559.150078][ T9763] ? ksys_write+0x230/0x260 [ 559.150112][ T9763] ? __pfx_ksys_write+0x10/0x10 [ 559.150153][ T9763] __x64_sys_fsetxattr+0xbc/0xe0 [ 559.150183][ T9763] do_syscall_64+0xfa/0xf80 [ 559.150207][ T9763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.150229][ T9763] ? clear_bhb_loop+0x60/0xb0 [ 559.150256][ T9763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.150278][ T9763] RIP: 0033:0x7fcd9963f749 [ 559.150299][ T9763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.150318][ T9763] RSP: 002b:00007fcd9789e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 559.150341][ T9763] RAX: ffffffffffffffda RBX: 00007fcd99895fa0 RCX: 00007fcd9963f749 [ 559.150357][ T9763] RDX: 00002000000009c0 RSI: 0000200000000980 RDI: 0000000000000003 [ 559.150371][ T9763] RBP: 00007fcd9789e090 R08: 0000000000000002 R09: 0000000000000000 [ 559.150384][ T9763] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 559.150397][ T9763] R13: 00007fcd99896038 R14: 00007fcd99895fa0 R15: 00007fff690feb78 [ 559.150433][ T9763] [ 559.317723][ T9766] FAULT_INJECTION: forcing a failure. [ 559.317723][ T9766] name failslab, interval 1, probability 0, space 0, times 0 [ 559.317770][ T9766] CPU: 0 UID: 0 PID: 9766 Comm: syz.3.1174 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 559.317806][ T9766] Tainted: [L]=SOFTLOCKUP [ 559.317814][ T9766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 559.317828][ T9766] Call Trace: [ 559.317838][ T9766] [ 559.317850][ T9766] dump_stack_lvl+0x189/0x250 [ 559.317898][ T9766] ? __pfx____ratelimit+0x10/0x10 [ 559.317937][ T9766] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.317970][ T9766] ? __pfx__printk+0x10/0x10 [ 559.318001][ T9766] ? __pfx___might_resched+0x10/0x10 [ 559.318028][ T9766] ? fs_reclaim_acquire+0x7d/0x100 [ 559.318058][ T9766] should_fail_ex+0x46c/0x600 [ 559.318102][ T9766] should_failslab+0xa8/0x100 [ 559.318129][ T9766] __kmalloc_cache_noprof+0x84/0x6d0 [ 559.318164][ T9766] ? lockdep_hardirqs_on+0x98/0x140 [ 559.318188][ T9766] ? bcm_tx_setup+0x3ab/0x1bf0 [ 559.318229][ T9766] bcm_tx_setup+0x3ab/0x1bf0 [ 559.318273][ T9766] ? rt_spin_unlock+0x161/0x200 [ 559.318304][ T9766] ? lock_sock_nested+0x5f/0x130 [ 559.318349][ T9766] bcm_sendmsg+0x45c/0x6a0 [ 559.318391][ T9766] ? __pfx_bcm_sendmsg+0x10/0x10 [ 559.318439][ T9766] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 559.318472][ T9766] ? __pfx_bcm_sendmsg+0x10/0x10 [ 559.318507][ T9766] __sock_sendmsg+0x21c/0x270 [ 559.318547][ T9766] ____sys_sendmsg+0x508/0x810 [ 559.318585][ T9766] ? __pfx_____sys_sendmsg+0x10/0x10 [ 559.318627][ T9766] ? import_iovec+0x74/0xa0 [ 559.318655][ T9766] ___sys_sendmsg+0x21f/0x2a0 [ 559.318688][ T9766] ? __pfx____sys_sendmsg+0x10/0x10 [ 559.318763][ T9766] ? __fget_files+0x2a/0x420 [ 559.318787][ T9766] ? __fget_files+0x3a6/0x420 [ 559.318825][ T9766] __x64_sys_sendmsg+0x1a1/0x260 [ 559.318866][ T9766] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 559.318910][ T9766] ? __pfx_ksys_write+0x10/0x10 [ 559.318949][ T9766] ? do_syscall_64+0xbe/0xf80 [ 559.318979][ T9766] do_syscall_64+0xfa/0xf80 [ 559.319002][ T9766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.319027][ T9766] ? clear_bhb_loop+0x60/0xb0 [ 559.319057][ T9766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.319081][ T9766] RIP: 0033:0x7f67bf47f749 [ 559.319102][ T9766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.319122][ T9766] RSP: 002b:00007f67bd6e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.319149][ T9766] RAX: ffffffffffffffda RBX: 00007f67bf6d5fa0 RCX: 00007f67bf47f749 [ 559.319167][ T9766] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 559.319183][ T9766] RBP: 00007f67bd6e6090 R08: 0000000000000000 R09: 0000000000000000 [ 559.319199][ T9766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.319213][ T9766] R13: 00007f67bf6d6038 R14: 00007f67bf6d5fa0 R15: 00007ffdacc1c828 [ 559.319255][ T9766] [ 559.427797][ T9769] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 560.351169][ T6452] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 560.503375][ T6452] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.503415][ T6452] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.503457][ T6452] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 560.503483][ T6452] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.516595][ T6452] usb 1-1: config 0 descriptor?? [ 560.550994][ T31] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 560.703356][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 560.706986][ T31] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 560.707018][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.707041][ T31] usb 5-1: Product: syz [ 560.707057][ T31] usb 5-1: Manufacturer: syz [ 560.707073][ T31] usb 5-1: SerialNumber: syz [ 560.758147][ T31] usb 5-1: config 0 descriptor?? [ 561.251811][ T9797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.260259][ T9797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.368421][ T9802] FAULT_INJECTION: forcing a failure. [ 561.368421][ T9802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.368463][ T9802] CPU: 1 UID: 0 PID: 9802 Comm: syz.3.1186 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 561.368494][ T9802] Tainted: [L]=SOFTLOCKUP [ 561.368506][ T9802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 561.368521][ T9802] Call Trace: [ 561.368529][ T9802] [ 561.368539][ T9802] dump_stack_lvl+0x189/0x250 [ 561.368574][ T9802] ? __pfx____ratelimit+0x10/0x10 [ 561.368606][ T9802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.368636][ T9802] ? __pfx__printk+0x10/0x10 [ 561.368658][ T9802] ? __might_fault+0xb0/0x130 [ 561.368702][ T9802] should_fail_ex+0x46c/0x600 [ 561.368738][ T9802] _copy_from_iter+0x1cd/0x1630 [ 561.368774][ T9802] ? __build_skb_around+0x22d/0x3c0 [ 561.368805][ T9802] ? __pfx__copy_from_iter+0x10/0x10 [ 561.368833][ T9802] ? __alloc_skb+0x2f1/0x430 [ 561.368860][ T9802] ? __pfx___alloc_skb+0x10/0x10 [ 561.368886][ T9802] ? netlink_sendmsg+0x642/0xb30 [ 561.368915][ T9802] ? skb_put+0x11b/0x210 [ 561.368950][ T9802] netlink_sendmsg+0x6b2/0xb30 [ 561.368991][ T9802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.369030][ T9802] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 561.369060][ T9802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.369091][ T9802] __sock_sendmsg+0x21c/0x270 [ 561.369129][ T9802] ____sys_sendmsg+0x508/0x810 [ 561.369163][ T9802] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.369201][ T9802] ? import_iovec+0x74/0xa0 [ 561.369225][ T9802] ___sys_sendmsg+0x21f/0x2a0 [ 561.369256][ T9802] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.369323][ T9802] ? __fget_files+0x2a/0x420 [ 561.369346][ T9802] ? __fget_files+0x3a6/0x420 [ 561.369381][ T9802] __x64_sys_sendmsg+0x1a1/0x260 [ 561.369413][ T9802] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 561.369460][ T9802] ? do_syscall_64+0xbe/0xf80 [ 561.369487][ T9802] do_syscall_64+0xfa/0xf80 [ 561.369509][ T9802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.369533][ T9802] ? clear_bhb_loop+0x60/0xb0 [ 561.369560][ T9802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.369582][ T9802] RIP: 0033:0x7f67bf47f749 [ 561.369601][ T9802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.369620][ T9802] RSP: 002b:00007f67bd6e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.369643][ T9802] RAX: ffffffffffffffda RBX: 00007f67bf6d5fa0 RCX: 00007f67bf47f749 [ 561.369659][ T9802] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 561.369672][ T9802] RBP: 00007f67bd6e6090 R08: 0000000000000000 R09: 0000000000000000 [ 561.369685][ T9802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.369699][ T9802] R13: 00007f67bf6d6038 R14: 00007f67bf6d5fa0 R15: 00007ffdacc1c828 [ 561.369734][ T9802] [ 561.609600][ T9803] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1187'. [ 563.045799][ T6452] hid-led 0003:1D34:000A.001A: probe with driver hid-led failed with error -71 [ 563.068570][ T6452] usb 1-1: USB disconnect, device number 32 [ 563.411054][ T9833] FAULT_INJECTION: forcing a failure. [ 563.411054][ T9833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.411098][ T9833] CPU: 1 UID: 0 PID: 9833 Comm: syz.3.1197 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 563.411131][ T9833] Tainted: [L]=SOFTLOCKUP [ 563.411139][ T9833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 563.411153][ T9833] Call Trace: [ 563.411162][ T9833] [ 563.411172][ T9833] dump_stack_lvl+0x189/0x250 [ 563.411205][ T9833] ? __pfx____ratelimit+0x10/0x10 [ 563.411240][ T9833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 563.411270][ T9833] ? __pfx__printk+0x10/0x10 [ 563.411310][ T9833] should_fail_ex+0x46c/0x600 [ 563.411346][ T9833] _copy_to_user+0x31/0xb0 [ 563.411370][ T9833] simple_read_from_buffer+0xe1/0x170 [ 563.411400][ T9833] proc_fail_nth_read+0x1b6/0x220 [ 563.411437][ T9833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 563.411483][ T9833] ? rw_verify_area+0x2ac/0x4e0 [ 563.411513][ T9833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 563.411547][ T9833] vfs_read+0x206/0xa30 [ 563.411587][ T9833] ? __pfx_vfs_read+0x10/0x10 [ 563.411614][ T9833] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 563.411653][ T9833] ? mutex_lock_nested+0x154/0x1d0 [ 563.411678][ T9833] ? fdget_pos+0x253/0x320 [ 563.411703][ T9833] ksys_read+0x14b/0x260 [ 563.411730][ T9833] ? __pfx_ksys_read+0x10/0x10 [ 563.411757][ T9833] ? do_syscall_64+0xbe/0xf80 [ 563.411777][ T9833] do_syscall_64+0xfa/0xf80 [ 563.411793][ T9833] ? rcu_is_watching+0x15/0xb0 [ 563.411808][ T9833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.411824][ T9833] ? clear_bhb_loop+0x60/0xb0 [ 563.411844][ T9833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.411861][ T9833] RIP: 0033:0x7f67bf47e15c [ 563.411877][ T9833] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 563.411891][ T9833] RSP: 002b:00007f67bd6a4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 563.411910][ T9833] RAX: ffffffffffffffda RBX: 00007f67bf6d6180 RCX: 00007f67bf47e15c [ 563.411923][ T9833] RDX: 000000000000000f RSI: 00007f67bd6a40a0 RDI: 0000000000000006 [ 563.411934][ T9833] RBP: 00007f67bd6a4090 R08: 0000000000000000 R09: 0000000000000000 [ 563.411945][ T9833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.411955][ T9833] R13: 00007f67bf6d6218 R14: 00007f67bf6d6180 R15: 00007ffdacc1c828 [ 563.411982][ T9833] [ 564.076720][ T31] em28xx 5-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 564.076758][ T31] em28xx 5-1:0.0: Device initialization failed. [ 564.076773][ T31] em28xx 5-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 564.126854][ T31] usb 5-1: USB disconnect, device number 28 [ 564.526266][ T9843] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 565.365528][ T9850] FAULT_INJECTION: forcing a failure. [ 565.365528][ T9850] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 565.365568][ T9850] CPU: 1 UID: 0 PID: 9850 Comm: syz.2.1198 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 565.365598][ T9850] Tainted: [L]=SOFTLOCKUP [ 565.365606][ T9850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 565.365619][ T9850] Call Trace: [ 565.365627][ T9850] [ 565.365637][ T9850] dump_stack_lvl+0x189/0x250 [ 565.365669][ T9850] ? __pfx____ratelimit+0x10/0x10 [ 565.365702][ T9850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 565.365730][ T9850] ? __pfx__printk+0x10/0x10 [ 565.365753][ T9850] ? fs_reclaim_acquire+0x7d/0x100 [ 565.365782][ T9850] should_fail_ex+0x46c/0x600 [ 565.365815][ T9850] prepare_alloc_pages+0x22b/0x6c0 [ 565.365844][ T9850] __alloc_frozen_pages_noprof+0x123/0x370 [ 565.365869][ T9850] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 565.365896][ T9850] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 565.365921][ T9850] ? policy_nodemask+0x27c/0x720 [ 565.365947][ T9850] alloc_pages_mpol+0xd1/0x380 [ 565.365972][ T9850] alloc_pages_noprof+0xcf/0x1e0 [ 565.365996][ T9850] get_free_pages_noprof+0xf/0x80 [ 565.366019][ T9850] __kasan_populate_vmalloc+0x38/0x1d0 [ 565.366048][ T9850] ? rt_spin_unlock+0x161/0x200 [ 565.366080][ T9850] alloc_vmap_area+0xdc4/0x14e0 [ 565.366131][ T9850] ? __pfx_alloc_vmap_area+0x10/0x10 [ 565.366163][ T9850] ? __kmalloc_cache_node_noprof+0x2aa/0x700 [ 565.366197][ T9850] ? __get_vm_area_node+0x172/0x350 [ 565.366224][ T9850] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 565.366254][ T9850] __get_vm_area_node+0x227/0x350 [ 565.366309][ T9850] __vmalloc_node_range_noprof+0x371/0x16a0 [ 565.366342][ T9850] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 565.366397][ T9850] ? unwind_get_return_address+0x4d/0x90 [ 565.366431][ T9850] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 565.366467][ T9850] ? __lock_acquire+0x6b6/0x2cf0 [ 565.366507][ T9850] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 565.366538][ T9850] __vmalloc_noprof+0xd2/0x120 [ 565.366571][ T9850] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 565.366600][ T9850] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 565.366632][ T9850] bpf_prog_alloc+0x3c/0x1a0 [ 565.366662][ T9850] bpf_prog_load+0x735/0x1a10 [ 565.366702][ T9850] ? __pfx_bpf_prog_load+0x10/0x10 [ 565.366754][ T9850] ? bpf_lsm_bpf+0x9/0x20 [ 565.366773][ T9850] ? security_bpf+0x7e/0x300 [ 565.366807][ T9850] __sys_bpf+0x507/0x860 [ 565.366835][ T9850] ? __pfx___sys_bpf+0x10/0x10 [ 565.366857][ T9850] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 565.366904][ T9850] ? ksys_write+0x230/0x260 [ 565.366937][ T9850] ? __pfx_ksys_write+0x10/0x10 [ 565.366975][ T9850] __x64_sys_bpf+0x7c/0x90 [ 565.366999][ T9850] do_syscall_64+0xfa/0xf80 [ 565.367021][ T9850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.367042][ T9850] ? clear_bhb_loop+0x60/0xb0 [ 565.367066][ T9850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.367087][ T9850] RIP: 0033:0x7f98659ef749 [ 565.367107][ T9850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.367124][ T9850] RSP: 002b:00007f9863c4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 565.367147][ T9850] RAX: ffffffffffffffda RBX: 00007f9865c45fa0 RCX: 00007f98659ef749 [ 565.367162][ T9850] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 565.367175][ T9850] RBP: 00007f9863c4e090 R08: 0000000000000000 R09: 0000000000000000 [ 565.367189][ T9850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.367202][ T9850] R13: 00007f9865c46038 R14: 00007f9865c45fa0 R15: 00007ffebb797d48 [ 565.367236][ T9850] [ 565.367289][ T9850] syz.2.1198: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 565.367360][ T9850] CPU: 1 UID: 0 PID: 9850 Comm: syz.2.1198 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 565.367389][ T9850] Tainted: [L]=SOFTLOCKUP [ 565.367397][ T9850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 565.367409][ T9850] Call Trace: [ 565.367416][ T9850] [ 565.367424][ T9850] dump_stack_lvl+0x189/0x250 [ 565.367456][ T9850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 565.367485][ T9850] ? __pfx__printk+0x10/0x10 [ 565.367513][ T9850] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 565.367554][ T9850] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 565.367587][ T9850] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 565.367622][ T9850] warn_alloc+0x22e/0x3b0 [ 565.367656][ T9850] ? kasan_quarantine_put+0xdd/0x220 [ 565.367685][ T9850] ? lockdep_hardirqs_on+0x98/0x140 [ 565.367707][ T9850] ? __pfx_warn_alloc+0x10/0x10 [ 565.367740][ T9850] ? __get_vm_area_node+0x240/0x350 [ 565.367767][ T9850] ? __get_vm_area_node+0x172/0x350 [ 565.367796][ T9850] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 565.367824][ T9850] ? __get_vm_area_node+0x240/0x350 [ 565.367860][ T9850] __vmalloc_node_range_noprof+0x396/0x16a0 [ 565.367921][ T9850] ? unwind_get_return_address+0x4d/0x90 [ 565.367952][ T9850] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 565.367987][ T9850] ? __lock_acquire+0x6b6/0x2cf0 [ 565.368026][ T9850] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 565.368049][ T9850] __vmalloc_noprof+0xd2/0x120 [ 565.368079][ T9850] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 565.368109][ T9850] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 565.368140][ T9850] bpf_prog_alloc+0x3c/0x1a0 [ 565.368169][ T9850] bpf_prog_load+0x735/0x1a10 [ 565.368208][ T9850] ? __pfx_bpf_prog_load+0x10/0x10 [ 565.368258][ T9850] ? bpf_lsm_bpf+0x9/0x20 [ 565.368275][ T9850] ? security_bpf+0x7e/0x300 [ 565.368310][ T9850] __sys_bpf+0x507/0x860 [ 565.368337][ T9850] ? __pfx___sys_bpf+0x10/0x10 [ 565.368359][ T9850] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 565.368405][ T9850] ? ksys_write+0x230/0x260 [ 565.368439][ T9850] ? __pfx_ksys_write+0x10/0x10 [ 565.368477][ T9850] __x64_sys_bpf+0x7c/0x90 [ 565.368499][ T9850] do_syscall_64+0xfa/0xf80 [ 565.368530][ T9850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.368553][ T9850] ? clear_bhb_loop+0x60/0xb0 [ 565.368579][ T9850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.368600][ T9850] RIP: 0033:0x7f98659ef749 [ 565.368618][ T9850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.368637][ T9850] RSP: 002b:00007f9863c4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 565.368659][ T9850] RAX: ffffffffffffffda RBX: 00007f9865c45fa0 RCX: 00007f98659ef749 [ 565.368674][ T9850] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 565.368689][ T9850] RBP: 00007f9863c4e090 R08: 0000000000000000 R09: 0000000000000000 [ 565.368703][ T9850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.368716][ T9850] R13: 00007f9865c46038 R14: 00007f9865c45fa0 R15: 00007ffebb797d48 [ 565.368752][ T9850] [ 565.368760][ T9850] Mem-Info: [ 565.368770][ T9850] active_anon:257 inactive_anon:25579 isolated_anon:0 [ 565.368770][ T9850] active_file:25898 inactive_file:37813 isolated_file:0 [ 565.368770][ T9850] unevictable:768 dirty:66 writeback:0 [ 565.368770][ T9850] slab_reclaimable:12320 slab_unreclaimable:102622 [ 565.368770][ T9850] mapped:33569 shmem:20627 pagetables:1388 [ 565.368770][ T9850] sec_pagetables:0 bounce:0 [ 565.368770][ T9850] kernel_misc_reclaimable:0 [ 565.368770][ T9850] free:1291008 free_pcp:4320 free_cma:0 [ 565.368830][ T9850] Node 0 active_anon:1028kB inactive_anon:102316kB active_file:103396kB inactive_file:151252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134276kB dirty:260kB writeback:0kB shmem:80972kB kernel_stack:13632kB pagetables:5376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 565.368883][ T9850] Node 1 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 565.368931][ T9850] Node 0 DMA free:15344kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 565.368997][ T9850] lowmem_reserve[]: 0 2514 2515 2515 2515 [ 565.369036][ T9850] Node 0 DMA32 free:1250104kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1028kB inactive_anon:102316kB active_file:103396kB inactive_file:151252kB unevictable:1536kB writepending:260kB zspages:0kB present:3129332kB managed:2574552kB mlocked:0kB bounce:0kB free_pcp:17276kB local_pcp:2048kB free_cma:0kB [ 565.369106][ T9850] lowmem_reserve[]: 0 0 1 1 1 [ 565.369142][ T9850] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 565.369206][ T9850] lowmem_reserve[]: 0 0 0 0 0 [ 565.369242][ T9850] Node 1 Normal free:3898584kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 565.369310][ T9850] lowmem_reserve[]: 0 0 0 0 0 [ 565.369346][ T9850] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 565.369501][ T9850] Node 0 DMA32: 818*4kB (UME) 884*8kB (UME) 921*16kB (UME) 344*32kB (UME) 489*64kB (UME) 215*128kB (UM) 182*256kB (UM) 85*512kB (UME) 32*1024kB (UM) 14*2048kB (UME) 245*4096kB (UM) = 1249976kB [ 565.369685][ T9850] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 565.369794][ T9850] Node 1 Normal: 194*4kB (UE) 48*8kB (UME) 51*16kB (UME) 213*32kB (UME) 98*64kB (UME) 40*128kB (UME) 18*256kB (UME) 8*512kB (UME) 5*1024kB (UM) 3*2048kB (UME) 942*4096kB (M) = 3898584kB [ 565.369960][ T9850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 565.369979][ T9850] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 565.369997][ T9850] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 565.370015][ T9850] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 565.370033][ T9850] 84334 total pagecache pages [ 565.370041][ T9850] 0 pages in swap cache [ 565.370049][ T9850] Free swap = 124996kB [ 565.370057][ T9850] Total swap = 124996kB [ 565.370066][ T9850] 2097051 pages RAM [ 565.370074][ T9850] 0 pages HighMem/MovableOnly [ 565.370081][ T9850] 421387 pages reserved [ 565.370089][ T9850] 0 pages cma reserved [ 567.861925][ T44] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 568.020956][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 568.038636][ T44] usb 5-1: New USB device found, idVendor=0830, idProduct=0040, bcdDevice=9e.2b [ 568.038670][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.038693][ T44] usb 5-1: Product: syz [ 568.038709][ T44] usb 5-1: Manufacturer: syz [ 568.038725][ T44] usb 5-1: SerialNumber: syz [ 568.069849][ T9899] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 568.070565][ T9899] ip6gretap1: entered allmulticast mode [ 568.101690][ T44] usb 5-1: config 0 descriptor?? [ 568.596867][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.596941][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.046468][ T44] usb 5-1: active config #0 != 1 ?? [ 569.159952][ T9930] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 569.755237][ T44] usb 5-1: USB disconnect, device number 29 [ 570.071056][ T5923] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 570.304390][ T6237] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 571.131348][ T5923] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 571.131380][ T5923] usb 2-1: config 0 has no interface number 0 [ 571.131432][ T5923] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 571.131463][ T5923] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 571.131508][ T5923] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 571.131533][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.143226][ T5923] usb 2-1: config 0 descriptor?? [ 571.145901][ T9933] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 571.189825][ T5923] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 571.453728][ T6237] usb 3-1: Using ep0 maxpacket: 16 [ 571.456929][ T6237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.456964][ T6237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.457004][ T6237] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 571.457029][ T6237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.463286][ T6237] usb 3-1: config 0 descriptor?? [ 571.733251][ T9933] FAULT_INJECTION: forcing a failure. [ 571.733251][ T9933] name failslab, interval 1, probability 0, space 0, times 0 [ 571.733292][ T9933] CPU: 0 UID: 0 PID: 9933 Comm: syz.1.1231 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 571.733324][ T9933] Tainted: [L]=SOFTLOCKUP [ 571.733332][ T9933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 571.733349][ T9933] Call Trace: [ 571.733358][ T9933] [ 571.733368][ T9933] dump_stack_lvl+0x189/0x250 [ 571.733402][ T9933] ? __pfx____ratelimit+0x10/0x10 [ 571.733436][ T9933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 571.733464][ T9933] ? __pfx__printk+0x10/0x10 [ 571.733492][ T9933] ? __io_read+0x1512/0x1520 [ 571.733525][ T9933] should_fail_ex+0x46c/0x600 [ 571.733561][ T9933] should_failslab+0xa8/0x100 [ 571.733585][ T9933] __kmalloc_noprof+0xe0/0x7e0 [ 571.733617][ T9933] ? io_cache_alloc_new+0x40/0x100 [ 571.733637][ T9933] ? __pfx___io_read+0x10/0x10 [ 571.733667][ T9933] io_cache_alloc_new+0x40/0x100 [ 571.733690][ T9933] io_arm_apoll+0x477/0x8f0 [ 571.733725][ T9933] ? __pfx_io_arm_apoll+0x10/0x10 [ 571.733760][ T9933] ? io_file_get_normal+0xec/0x2d0 [ 571.733788][ T9933] ? io_arm_poll_handler+0x20a/0x2a0 [ 571.733824][ T9933] io_queue_async+0x175/0x240 [ 571.733859][ T9933] io_submit_sqes+0x10ba/0x2140 [ 571.733921][ T9933] __se_sys_io_uring_enter+0x2df/0x2b00 [ 571.733959][ T9933] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 571.733988][ T9933] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 571.734018][ T9933] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 571.734046][ T9933] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 571.734071][ T9933] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 571.734102][ T9933] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 571.734131][ T9933] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 571.734173][ T9933] ? fput+0xa0/0xd0 [ 571.734199][ T9933] ? ksys_write+0x230/0x260 [ 571.734233][ T9933] ? __pfx_ksys_write+0x10/0x10 [ 571.734268][ T9933] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 571.734300][ T9933] do_syscall_64+0xfa/0xf80 [ 571.734323][ T9933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.734345][ T9933] ? clear_bhb_loop+0x60/0xb0 [ 571.734372][ T9933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.734393][ T9933] RIP: 0033:0x7ff58e76f749 [ 571.734414][ T9933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.734433][ T9933] RSP: 002b:00007ff58c9d6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 571.734457][ T9933] RAX: ffffffffffffffda RBX: 00007ff58e9c5fa0 RCX: 00007ff58e76f749 [ 571.734474][ T9933] RDX: 0000000000000000 RSI: 00000000000047ba RDI: 0000000000000005 [ 571.734487][ T9933] RBP: 00007ff58c9d6090 R08: 0000000000000000 R09: 0000000000000000 [ 571.734501][ T9933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.734515][ T9933] R13: 00007ff58e9c6038 R14: 00007ff58e9c5fa0 R15: 00007ffcf6a9ae78 [ 571.734548][ T9933] [ 571.761958][ T9946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.777154][ T9946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.861378][ T9952] FAULT_INJECTION: forcing a failure. [ 571.861378][ T9952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.861559][ T9952] CPU: 1 UID: 0 PID: 9952 Comm: syz.0.1238 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 571.861593][ T9952] Tainted: [L]=SOFTLOCKUP [ 571.861602][ T9952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 571.861616][ T9952] Call Trace: [ 571.861626][ T9952] [ 571.861639][ T9952] dump_stack_lvl+0x189/0x250 [ 571.861678][ T9952] ? __pfx____ratelimit+0x10/0x10 [ 571.861717][ T9952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 571.861762][ T9952] ? __pfx__printk+0x10/0x10 [ 571.861802][ T9952] should_fail_ex+0x46c/0x600 [ 571.861841][ T9952] _copy_to_user+0x31/0xb0 [ 571.861868][ T9952] simple_read_from_buffer+0xe1/0x170 [ 571.861901][ T9952] proc_fail_nth_read+0x1b6/0x220 [ 571.861940][ T9952] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 571.861977][ T9952] ? rw_verify_area+0x2ac/0x4e0 [ 571.862009][ T9952] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 571.862047][ T9952] vfs_read+0x206/0xa30 [ 571.862090][ T9952] ? __pfx_vfs_read+0x10/0x10 [ 571.862117][ T9952] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 571.862161][ T9952] ? mutex_lock_nested+0x154/0x1d0 [ 571.862190][ T9952] ? fdget_pos+0x253/0x320 [ 571.862224][ T9952] ksys_read+0x14b/0x260 [ 571.862258][ T9952] ? __pfx_ksys_read+0x10/0x10 [ 571.862291][ T9952] ? do_syscall_64+0xbe/0xf80 [ 571.862316][ T9952] do_syscall_64+0xfa/0xf80 [ 571.862337][ T9952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.862360][ T9952] ? clear_bhb_loop+0x60/0xb0 [ 571.862386][ T9952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.862409][ T9952] RIP: 0033:0x7fcd9963e15c [ 571.862429][ T9952] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 571.862448][ T9952] RSP: 002b:00007fcd9787d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 571.862471][ T9952] RAX: ffffffffffffffda RBX: 00007fcd99896090 RCX: 00007fcd9963e15c [ 571.862489][ T9952] RDX: 000000000000000f RSI: 00007fcd9787d0a0 RDI: 0000000000000004 [ 571.862505][ T9952] RBP: 00007fcd9787d090 R08: 0000000000000000 R09: 0000000000000000 [ 571.862522][ T9952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.862535][ T9952] R13: 00007fcd99896128 R14: 00007fcd99896090 R15: 00007fff690feb78 [ 571.862574][ T9952] [ 572.058355][ T7380] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 572.382628][ T6237] lenovo 0003:17EF:60A3.001B: hidraw0: USB HID v0.05 Device [HID 17ef:60a3] on usb-dummy_hcd.2-1/input0 [ 572.402147][ T6452] usb 2-1: USB disconnect, device number 25 [ 572.402257][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 573.129936][ T7380] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.129965][ T7380] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 573.157087][ T7380] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 573.157125][ T7380] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 573.157155][ T7380] usb 5-1: SerialNumber: syz [ 573.454567][ T9947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.458646][ T9947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.489929][ T7380] usb 5-1: 0:2 : does not exist [ 573.525665][ T7380] usb 5-1: 0:0: failed to get current value for ch 0 (-22) [ 573.651086][ T44] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 573.689160][ T7380] usb 5-1: USB disconnect, device number 30 [ 573.800966][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 573.803532][ T44] usb 1-1: config 13 has an invalid interface number: 255 but max is 3 [ 573.803571][ T44] usb 1-1: config 13 has an invalid interface number: 14 but max is 3 [ 573.803596][ T44] usb 1-1: config 13 has an invalid interface number: 137 but max is 3 [ 573.803619][ T44] usb 1-1: config 13 has an invalid interface number: 52 but max is 3 [ 573.803642][ T44] usb 1-1: config 13 has an invalid interface number: 171 but max is 3 [ 573.803879][ T44] usb 1-1: config 13 contains an unexpected descriptor of type 0x2, skipping [ 573.803903][ T44] usb 1-1: config 13 has 5 interfaces, different from the descriptor's value: 4 [ 573.803927][ T44] usb 1-1: config 13 has no interface number 0 [ 573.803945][ T44] usb 1-1: config 13 has no interface number 1 [ 573.804008][ T44] usb 1-1: config 13 has no interface number 2 [ 573.804026][ T44] usb 1-1: config 13 has no interface number 3 [ 573.804045][ T44] usb 1-1: config 13 has no interface number 4 [ 573.804148][ T44] usb 1-1: config 13 interface 255 altsetting 127 endpoint 0xC has invalid wMaxPacketSize 0 [ 573.804181][ T44] usb 1-1: config 13 interface 255 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 573.804206][ T44] usb 1-1: config 13 interface 255 altsetting 127 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 573.804270][ T44] usb 1-1: config 13 interface 14 altsetting 191 has a duplicate endpoint with address 0x8, skipping [ 573.804296][ T44] usb 1-1: config 13 interface 14 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 573.804321][ T44] usb 1-1: config 13 interface 14 altsetting 191 has 5 endpoint descriptors, different from the interface descriptor's value: 11 [ 573.804366][ T44] usb 1-1: config 13 interface 137 altsetting 11 has a duplicate endpoint with address 0xC, skipping [ 573.804392][ T44] usb 1-1: config 13 interface 137 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 573.804418][ T44] usb 1-1: config 13 interface 137 altsetting 11 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 573.804447][ T44] usb 1-1: too many endpoints for config 13 interface 52 altsetting 60: 146, using maximum allowed: 30 [ 573.804531][ T44] usb 1-1: config 13 interface 52 altsetting 60 has 0 endpoint descriptors, different from the interface descriptor's value: 146 [ 573.804586][ T44] usb 1-1: config 13 interface 171 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 573.804612][ T44] usb 1-1: config 13 interface 171 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 573.804638][ T44] usb 1-1: config 13 interface 171 altsetting 3 endpoint 0xA has an invalid bInterval 206, changing to 11 [ 573.804671][ T44] usb 1-1: config 13 interface 171 altsetting 3 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 573.804700][ T44] usb 1-1: config 13 interface 171 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 573.804795][ T44] usb 1-1: config 13 interface 171 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 573.804821][ T44] usb 1-1: config 13 interface 171 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 573.804847][ T44] usb 1-1: config 13 interface 171 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 573.804873][ T44] usb 1-1: config 13 interface 171 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 573.804897][ T44] usb 1-1: config 13 interface 171 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 573.804923][ T44] usb 1-1: config 13 interface 255 has no altsetting 0 [ 573.804943][ T44] usb 1-1: config 13 interface 14 has no altsetting 0 [ 573.804963][ T44] usb 1-1: config 13 interface 137 has no altsetting 0 [ 573.804983][ T44] usb 1-1: config 13 interface 52 has no altsetting 0 [ 573.805003][ T44] usb 1-1: config 13 interface 171 has no altsetting 0 [ 573.808716][ T44] usb 1-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice=ab.1c [ 573.808747][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.808770][ T44] usb 1-1: Product: syz [ 573.808786][ T44] usb 1-1: Manufacturer: syz [ 573.808801][ T44] usb 1-1: SerialNumber: syz [ 574.105744][ T9971] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 575.240971][ T6397] udevd[6397]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 575.346830][ T5923] usb 3-1: USB disconnect, device number 28 [ 575.743110][ T44] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.255/input/input17 [ 577.234009][ T9996] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 577.439817][ T5155] bcm5974 1-1:13.255: could not read from device [ 578.723433][ T5155] bcm5974 1-1:13.255: could not read from device [ 578.811671][ T5155] bcm5974 1-1:13.255: could not read from device [ 579.204052][ T44] usb 1-1: USB disconnect, device number 33 [ 579.204137][ T5155] bcm5974 1-1:13.255: could not read from device [ 579.288479][T10016] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1256'. [ 583.844870][ T6411] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 583.991020][ T6411] usb 5-1: Using ep0 maxpacket: 32 [ 583.993903][ T6411] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.993975][ T6411] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 583.994004][ T6411] usb 5-1: config 0 interface 0 has no altsetting 0 [ 583.998381][ T6411] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 583.998413][ T6411] usb 5-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 583.998436][ T6411] usb 5-1: Product: syz [ 583.998452][ T6411] usb 5-1: Manufacturer: syz [ 583.998467][ T6411] usb 5-1: SerialNumber: syz [ 584.051175][ T6113] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 584.085102][ T6411] usb 5-1: config 0 descriptor?? [ 584.102970][ T6411] gs_usb 5-1:0.0: Required endpoints not found [ 584.224986][ T6113] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.225015][ T6113] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 584.226239][ T6113] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 584.226268][ T6113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 584.226286][ T6113] usb 3-1: SerialNumber: syz [ 584.479777][T10041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.480382][T10041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.524597][ T6113] usb 3-1: 0:2 : does not exist [ 584.540385][ T6113] usb 3-1: 0:0: failed to get current value for ch 0 (-22) [ 584.671214][ T6113] usb 3-1: USB disconnect, device number 29 [ 584.797492][ T6397] udevd[6397]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 585.676215][T10070] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 587.337819][ T6411] usb 5-1: USB disconnect, device number 31 [ 587.448257][ T6113] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 587.795356][T10083] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1283'. [ 587.843804][ T6113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.843842][ T6113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.843883][ T6113] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 587.843909][ T6113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.939707][ T6113] usb 3-1: config 0 descriptor?? [ 588.052879][ T6411] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 588.170933][T10091] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 589.224291][ T6411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 589.224325][ T6411] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 589.224352][ T6411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 589.224377][ T6411] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 589.224419][ T6411] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 589.224445][ T6411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.047636][ T6411] usb 1-1: config 0 descriptor?? [ 591.286106][ T6411] usb 1-1: can't set config #0, error -71 [ 591.323565][ T6411] usb 1-1: USB disconnect, device number 34 [ 591.361106][ T6113] hid-led 0003:1D34:000A.001C: probe with driver hid-led failed with error -71 [ 591.430459][ T6113] usb 3-1: USB disconnect, device number 30 [ 591.534014][T10107] FAULT_INJECTION: forcing a failure. [ 591.534014][T10107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.534056][T10107] CPU: 0 UID: 0 PID: 10107 Comm: syz.3.1292 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 591.534087][T10107] Tainted: [L]=SOFTLOCKUP [ 591.534096][T10107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 591.534109][T10107] Call Trace: [ 591.534186][T10107] [ 591.534258][T10107] dump_stack_lvl+0x189/0x250 [ 591.534395][T10107] ? __pfx____ratelimit+0x10/0x10 [ 591.534545][T10107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 591.534575][T10107] ? __pfx__printk+0x10/0x10 [ 591.534621][T10107] should_fail_ex+0x46c/0x600 [ 591.534738][T10107] _copy_to_user+0x31/0xb0 [ 591.534839][T10107] simple_read_from_buffer+0xe1/0x170 [ 591.534891][T10107] proc_fail_nth_read+0x1b6/0x220 [ 591.534941][T10107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 591.534977][T10107] ? rw_verify_area+0x2ac/0x4e0 [ 591.535012][T10107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 591.535045][T10107] vfs_read+0x206/0xa30 [ 591.535089][T10107] ? __pfx_vfs_read+0x10/0x10 [ 591.535116][T10107] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 591.535193][T10107] ? mutex_lock_nested+0x154/0x1d0 [ 591.535241][T10107] ? fdget_pos+0x253/0x320 [ 591.535282][T10107] ksys_read+0x14b/0x260 [ 591.535315][T10107] ? __pfx_ksys_read+0x10/0x10 [ 591.535348][T10107] ? do_syscall_64+0xbe/0xf80 [ 591.535412][T10107] do_syscall_64+0xfa/0xf80 [ 591.535435][T10107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.535477][T10107] ? clear_bhb_loop+0x60/0xb0 [ 591.535503][T10107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.535524][T10107] RIP: 0033:0x7f67bf47e15c [ 591.535573][T10107] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 591.535599][T10107] RSP: 002b:00007f67bd6e6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 591.535647][T10107] RAX: ffffffffffffffda RBX: 00007f67bf6d5fa0 RCX: 00007f67bf47e15c [ 591.535663][T10107] RDX: 000000000000000f RSI: 00007f67bd6e60a0 RDI: 0000000000000004 [ 591.535677][T10107] RBP: 00007f67bd6e6090 R08: 0000000000000000 R09: 0000000000000000 [ 591.535690][T10107] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 591.535703][T10107] R13: 00007f67bf6d6038 R14: 00007f67bf6d5fa0 R15: 00007ffdacc1c828 [ 591.535741][T10107] [ 592.241298][T10116] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 594.451116][ T6452] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 594.615173][ T6452] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.615212][ T6452] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.615254][ T6452] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 594.615279][ T6452] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.671081][ T6452] usb 3-1: config 0 descriptor?? [ 595.135018][T10158] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1311'. [ 595.569942][T10138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.570575][T10138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.959137][ T6452] hid-led 0003:1D34:000A.001D: probe with driver hid-led failed with error -71 [ 595.977083][T10174] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1317'. [ 596.005674][ T6452] usb 3-1: USB disconnect, device number 31 [ 596.410894][T10176] FAULT_INJECTION: forcing a failure. [ 596.410894][T10176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.410937][T10176] CPU: 0 UID: 0 PID: 10176 Comm: syz.3.1319 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 596.410968][T10176] Tainted: [L]=SOFTLOCKUP [ 596.410976][T10176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 596.410990][T10176] Call Trace: [ 596.410999][T10176] [ 596.411009][T10176] dump_stack_lvl+0x189/0x250 [ 596.411045][T10176] ? __pfx____ratelimit+0x10/0x10 [ 596.411081][T10176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 596.411111][T10176] ? __pfx__printk+0x10/0x10 [ 596.411133][T10176] ? __might_fault+0xb0/0x130 [ 596.411223][T10176] should_fail_ex+0x46c/0x600 [ 596.411259][T10176] _copy_from_user+0x2d/0xb0 [ 596.411282][T10176] ___sys_sendmsg+0x158/0x2a0 [ 596.411410][T10176] ? __pfx____sys_sendmsg+0x10/0x10 [ 596.411475][T10176] ? __fget_files+0x2a/0x420 [ 596.411499][T10176] ? __fget_files+0x3a6/0x420 [ 596.411533][T10176] __x64_sys_sendmsg+0x1a1/0x260 [ 596.411565][T10176] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 596.411604][T10176] ? __pfx_ksys_write+0x10/0x10 [ 596.411640][T10176] ? do_syscall_64+0xbe/0xf80 [ 596.411667][T10176] do_syscall_64+0xfa/0xf80 [ 596.411690][T10176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.411713][T10176] ? clear_bhb_loop+0x60/0xb0 [ 596.411740][T10176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.411762][T10176] RIP: 0033:0x7f67bf47f749 [ 596.411783][T10176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.411809][T10176] RSP: 002b:00007f67bd6e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.411834][T10176] RAX: ffffffffffffffda RBX: 00007f67bf6d5fa0 RCX: 00007f67bf47f749 [ 596.411851][T10176] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 596.411865][T10176] RBP: 00007f67bd6e6090 R08: 0000000000000000 R09: 0000000000000000 [ 596.411879][T10176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.411892][T10176] R13: 00007f67bf6d6038 R14: 00007f67bf6d5fa0 R15: 00007ffdacc1c828 [ 596.411928][T10176] [ 598.843495][T10206] FAULT_INJECTION: forcing a failure. [ 598.843495][T10206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.843537][T10206] CPU: 1 UID: 0 PID: 10206 Comm: syz.4.1332 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 598.843576][T10206] Tainted: [L]=SOFTLOCKUP [ 598.843584][T10206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 598.843598][T10206] Call Trace: [ 598.843607][T10206] [ 598.843616][T10206] dump_stack_lvl+0x189/0x250 [ 598.843651][T10206] ? __pfx____ratelimit+0x10/0x10 [ 598.843686][T10206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.843713][T10206] ? __pfx__printk+0x10/0x10 [ 598.843736][T10206] ? __might_fault+0xb0/0x130 [ 598.843779][T10206] should_fail_ex+0x46c/0x600 [ 598.843812][T10206] _copy_from_iter+0x1cd/0x1630 [ 598.843949][T10206] ? __build_skb_around+0x22d/0x3c0 [ 598.844018][T10206] ? __pfx__copy_from_iter+0x10/0x10 [ 598.844047][T10206] ? __alloc_skb+0x2f1/0x430 [ 598.844111][T10206] ? __pfx___alloc_skb+0x10/0x10 [ 598.844138][T10206] ? netlink_sendmsg+0x642/0xb30 [ 598.844208][T10206] ? skb_put+0x11b/0x210 [ 598.844237][T10206] netlink_sendmsg+0x6b2/0xb30 [ 598.844277][T10206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.844316][T10206] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 598.844370][T10206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.844401][T10206] __sock_sendmsg+0x21c/0x270 [ 598.844459][T10206] ____sys_sendmsg+0x508/0x810 [ 598.844494][T10206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 598.844532][T10206] ? import_iovec+0x74/0xa0 [ 598.844564][T10206] ___sys_sendmsg+0x21f/0x2a0 [ 598.844595][T10206] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.844662][T10206] ? __fget_files+0x2a/0x420 [ 598.844685][T10206] ? __fget_files+0x3a6/0x420 [ 598.844720][T10206] __x64_sys_sendmsg+0x1a1/0x260 [ 598.844752][T10206] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 598.844791][T10206] ? __pfx_ksys_write+0x10/0x10 [ 598.844826][T10206] ? do_syscall_64+0xbe/0xf80 [ 598.844854][T10206] do_syscall_64+0xfa/0xf80 [ 598.844877][T10206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.844900][T10206] ? clear_bhb_loop+0x60/0xb0 [ 598.844927][T10206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.844950][T10206] RIP: 0033:0x7f869bf7f749 [ 598.844970][T10206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.844991][T10206] RSP: 002b:00007f869a1de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.845015][T10206] RAX: ffffffffffffffda RBX: 00007f869c1d5fa0 RCX: 00007f869bf7f749 [ 598.845033][T10206] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 598.845048][T10206] RBP: 00007f869a1de090 R08: 0000000000000000 R09: 0000000000000000 [ 598.845062][T10206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.845075][T10206] R13: 00007f869c1d6038 R14: 00007f869c1d5fa0 R15: 00007fffc03c5a38 [ 598.845111][T10206] [ 602.070612][ T6238] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 602.234488][ T6238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.234525][ T6238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.234567][ T6238] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 602.234592][ T6238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.285662][ T6238] usb 3-1: config 0 descriptor?? [ 602.573998][T10263] Bluetooth: MGMT ver 1.23 [ 603.129453][T10271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.130120][T10271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.736705][ T6238] hid-led 0003:1D34:000A.001E: probe with driver hid-led failed with error -71 [ 603.765697][ T6238] usb 3-1: USB disconnect, device number 32 [ 605.903859][T10315] FAULT_INJECTION: forcing a failure. [ 605.903859][T10315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.903899][T10315] CPU: 1 UID: 0 PID: 10315 Comm: syz.2.1377 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 605.903930][T10315] Tainted: [L]=SOFTLOCKUP [ 605.903938][T10315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 605.903952][T10315] Call Trace: [ 605.903961][T10315] [ 605.903971][T10315] dump_stack_lvl+0x189/0x250 [ 605.904008][T10315] ? __pfx____ratelimit+0x10/0x10 [ 605.904045][T10315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 605.904074][T10315] ? __pfx__printk+0x10/0x10 [ 605.904097][T10315] ? __might_fault+0xb0/0x130 [ 605.904144][T10315] should_fail_ex+0x46c/0x600 [ 605.904180][T10315] _copy_from_user+0x2d/0xb0 [ 605.904204][T10315] binder_ioctl_write_read+0xa63/0x9ef0 [ 605.904351][T10315] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 605.904381][T10315] ? do_raw_spin_lock+0x121/0x290 [ 605.904474][T10315] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 605.904498][T10315] ? lockdep_hardirqs_on+0x98/0x140 [ 605.904521][T10315] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 605.904543][T10315] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 605.904566][T10315] ? rt_spin_lock+0x1c1/0x3e0 [ 605.904602][T10315] ? rt_mutex_slowunlock+0x493/0x8a0 [ 605.904638][T10315] ? reacquire_held_locks+0x121/0x1c0 [ 605.904671][T10315] ? rt_spin_lock+0x1c1/0x3e0 [ 605.904704][T10315] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 605.904738][T10315] ? rt_spin_unlock+0x150/0x200 [ 605.904777][T10315] ? binder_get_thread+0x178/0x6d0 [ 605.904806][T10315] binder_ioctl+0x3c8/0x19d0 [ 605.904880][T10315] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 605.904957][T10315] ? do_vfs_ioctl+0xbeb/0x1440 [ 605.904988][T10315] ? __pfx_binder_ioctl+0x10/0x10 [ 605.905013][T10315] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 605.905039][T10315] ? smack_log+0xef/0x3f0 [ 605.905090][T10315] ? __pfx_smack_log+0x10/0x10 [ 605.905113][T10315] ? lockdep_hardirqs_on+0x98/0x140 [ 605.905132][T10315] ? smk_access+0x14c/0x4e0 [ 605.905162][T10315] ? smk_tskacc+0x2fc/0x370 [ 605.905190][T10315] ? smack_file_ioctl+0x2ac/0x340 [ 605.905253][T10315] ? __pfx_smack_file_ioctl+0x10/0x10 [ 605.905290][T10315] ? __fget_files+0x3a6/0x420 [ 605.905313][T10315] ? __fget_files+0x2a/0x420 [ 605.905340][T10315] ? bpf_lsm_file_ioctl+0x9/0x20 [ 605.905374][T10315] ? __pfx_binder_ioctl+0x10/0x10 [ 605.905398][T10315] __se_sys_ioctl+0xff/0x170 [ 605.905429][T10315] do_syscall_64+0xfa/0xf80 [ 605.905451][T10315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.905475][T10315] ? clear_bhb_loop+0x60/0xb0 [ 605.905501][T10315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.905523][T10315] RIP: 0033:0x7f98659ef749 [ 605.905543][T10315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.905562][T10315] RSP: 002b:00007f9863c4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 605.905584][T10315] RAX: ffffffffffffffda RBX: 00007f9865c45fa0 RCX: 00007f98659ef749 [ 605.905600][T10315] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 605.905614][T10315] RBP: 00007f9863c4e090 R08: 0000000000000000 R09: 0000000000000000 [ 605.905635][T10315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.905649][T10315] R13: 00007f9865c46038 R14: 00007f9865c45fa0 R15: 00007ffebb797d48 [ 605.905684][T10315] [ 605.905696][T10315] binder: 10314:10315 ioctl c0306201 2000000001c0 returned -14 [ 606.741033][ T6237] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 606.871055][ T6237] usb 4-1: device descriptor read/64, error -71 [ 607.267835][ T6237] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 607.408292][ T6237] usb 4-1: device descriptor read/64, error -71 [ 608.324792][ T6237] usb usb4-port1: attempt power cycle [ 608.725722][ T6237] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 608.741690][ T6237] usb 4-1: device descriptor read/8, error -71 [ 608.980982][ T6237] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 609.002040][ T6237] usb 4-1: device descriptor read/8, error -71 [ 609.119477][ T6237] usb usb4-port1: unable to enumerate USB device [ 610.536234][T10407] FAULT_INJECTION: forcing a failure. [ 610.536234][T10407] name failslab, interval 1, probability 0, space 0, times 0 [ 610.536281][T10407] CPU: 0 UID: 0 PID: 10407 Comm: syz.3.1414 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 610.536311][T10407] Tainted: [L]=SOFTLOCKUP [ 610.536318][T10407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 610.536332][T10407] Call Trace: [ 610.536340][T10407] [ 610.536350][T10407] dump_stack_lvl+0x189/0x250 [ 610.536384][T10407] ? __pfx____ratelimit+0x10/0x10 [ 610.536418][T10407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 610.536446][T10407] ? __pfx__printk+0x10/0x10 [ 610.536475][T10407] ? __pfx___might_resched+0x10/0x10 [ 610.536516][T10407] ? fs_reclaim_acquire+0x7d/0x100 [ 610.536541][T10407] should_fail_ex+0x46c/0x600 [ 610.536586][T10407] should_failslab+0xa8/0x100 [ 610.536617][T10407] __kmalloc_node_track_caller_noprof+0xe2/0x810 [ 610.536651][T10407] ? smk_import_entry+0x178/0x1f0 [ 610.536680][T10407] kstrndup+0x80/0x160 [ 610.536712][T10407] smk_import_entry+0x178/0x1f0 [ 610.536738][T10407] smk_fill_rule+0xb6/0x630 [ 610.536767][T10407] smk_parse_long_rule+0xbc3/0xee0 [ 610.536799][T10407] ? __pfx_smk_parse_long_rule+0x10/0x10 [ 610.536841][T10407] smk_write_rules_list+0x239/0x370 [ 610.536872][T10407] ? __pfx_smk_write_change_rule+0x10/0x10 [ 610.536906][T10407] vfs_write+0x287/0xb40 [ 610.536943][T10407] ? __pfx_vfs_write+0x10/0x10 [ 610.536969][T10407] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 610.537008][T10407] ? mutex_lock_nested+0x154/0x1d0 [ 610.537052][T10407] ? fdget_pos+0x253/0x320 [ 610.537085][T10407] ksys_write+0x14b/0x260 [ 610.537118][T10407] ? __pfx_ksys_write+0x10/0x10 [ 610.537154][T10407] ? do_syscall_64+0xbe/0xf80 [ 610.537181][T10407] do_syscall_64+0xfa/0xf80 [ 610.537203][T10407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.537225][T10407] ? clear_bhb_loop+0x60/0xb0 [ 610.537261][T10407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.537283][T10407] RIP: 0033:0x7f67bf47f749 [ 610.537304][T10407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.537324][T10407] RSP: 002b:00007f67bd6e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 610.537348][T10407] RAX: ffffffffffffffda RBX: 00007f67bf6d5fa0 RCX: 00007f67bf47f749 [ 610.537364][T10407] RDX: 0000000000000056 RSI: 0000200000000200 RDI: 0000000000000003 [ 610.537379][T10407] RBP: 00007f67bd6e6090 R08: 0000000000000000 R09: 0000000000000000 [ 610.537394][T10407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.537407][T10407] R13: 00007f67bf6d6038 R14: 00007f67bf6d5fa0 R15: 00007ffdacc1c828 [ 610.537445][T10407] [ 610.580949][ T6237] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 610.689015][T10410] capability: warning: `syz.4.1413' uses 32-bit capabilities (legacy support in use) [ 610.690101][T10410] program syz.4.1413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 610.748954][ T6237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 610.748987][ T6237] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 610.749014][ T6237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 610.749037][ T6237] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 610.749079][ T6237] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 610.749104][ T6237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.903189][ T6237] usb 3-1: config 0 descriptor?? [ 611.175011][ T6237] hdpvr 3-1:0.0: firmware version 0x3 dated 3;¨“Ã~&X^€œ wÒΖŠÒ¥ g/ƒNÐ `žxè$«·¯=å"Ü— [ 611.175035][ T6237] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 611.513480][T10431] FAULT_INJECTION: forcing a failure. [ 611.513480][T10431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.513524][T10431] CPU: 1 UID: 0 PID: 10431 Comm: syz.3.1422 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 611.513556][T10431] Tainted: [L]=SOFTLOCKUP [ 611.513564][T10431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 611.513577][T10431] Call Trace: [ 611.513586][T10431] [ 611.513596][T10431] dump_stack_lvl+0x189/0x250 [ 611.513631][T10431] ? __pfx____ratelimit+0x10/0x10 [ 611.513666][T10431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.513695][T10431] ? __pfx__printk+0x10/0x10 [ 611.513729][T10431] should_fail_ex+0x46c/0x600 [ 611.513764][T10431] _copy_to_user+0x31/0xb0 [ 611.513788][T10431] mptcp_getsockopt+0x1925/0x1c20 [ 611.513873][T10431] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 611.513908][T10431] ? __lock_acquire+0x6b6/0x2cf0 [ 611.513951][T10431] ? __lock_acquire+0x6b6/0x2cf0 [ 611.513983][T10431] ? __lock_acquire+0x6b6/0x2cf0 [ 611.514052][T10431] ? __lock_acquire+0x6b6/0x2cf0 [ 611.514112][T10431] ? __lock_acquire+0x6b6/0x2cf0 [ 611.514174][T10431] ? __lock_acquire+0x6b6/0x2cf0 [ 611.514235][T10431] ? __might_fault+0xb0/0x130 [ 611.514286][T10431] ? sock_common_getsockopt+0x2d/0xb0 [ 611.514308][T10431] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 611.514333][T10431] do_sock_getsockopt+0x2b4/0x3d0 [ 611.514363][T10431] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 611.514390][T10431] ? do_syscall_64+0x80/0xf80 [ 611.514410][T10431] ? __fget_files+0x2a/0x420 [ 611.514440][T10431] ? __fget_files+0x3a6/0x420 [ 611.514463][T10431] ? __fget_files+0x2a/0x420 [ 611.514494][T10431] __x64_sys_getsockopt+0x1ab/0x250 [ 611.514520][T10431] ? do_syscall_64+0x80/0xf80 [ 611.514543][T10431] ? do_syscall_64+0x80/0xf80 [ 611.514568][T10431] do_syscall_64+0xfa/0xf80 [ 611.514591][T10431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.514613][T10431] ? clear_bhb_loop+0x60/0xb0 [ 611.514640][T10431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.514662][T10431] RIP: 0033:0x7f67bf47f749 [ 611.514682][T10431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.514703][T10431] RSP: 002b:00007f67bd6e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 611.514727][T10431] RAX: ffffffffffffffda RBX: 00007f67bf6d5fa0 RCX: 00007f67bf47f749 [ 611.514743][T10431] RDX: 0000000000000004 RSI: 000000000000011c RDI: 0000000000000003 [ 611.514757][T10431] RBP: 00007f67bd6e6090 R08: 00002000000000c0 R09: 0000000000000000 [ 611.514772][T10431] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.514786][T10431] R13: 00007f67bf6d6038 R14: 00007f67bf6d5fa0 R15: 00007ffdacc1c828 [ 611.514822][T10431] [ 611.711008][ T6096] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 611.842957][ T6237] hdpvr 3-1:0.0: max device number reached, device register failed [ 611.872027][ T6237] usb 3-1: USB disconnect, device number 33 [ 611.954939][ T6096] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 611.954971][ T6096] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 611.954997][ T6096] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 611.955020][ T6096] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 611.955049][ T6096] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 611.955066][ T6096] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.970052][T10437] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 611.983620][ T6096] usb 1-1: config 0 descriptor?? [ 612.147023][T10439] FAULT_INJECTION: forcing a failure. [ 612.147023][T10439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.147062][T10439] CPU: 0 UID: 0 PID: 10439 Comm: syz.4.1425 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 612.147093][T10439] Tainted: [L]=SOFTLOCKUP [ 612.147101][T10439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 612.147115][T10439] Call Trace: [ 612.147123][T10439] [ 612.147133][T10439] dump_stack_lvl+0x189/0x250 [ 612.147168][T10439] ? __pfx____ratelimit+0x10/0x10 [ 612.147203][T10439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 612.147231][T10439] ? __pfx__printk+0x10/0x10 [ 612.147253][T10439] ? __might_fault+0xb0/0x130 [ 612.147297][T10439] should_fail_ex+0x46c/0x600 [ 612.147331][T10439] _copy_from_user+0x2d/0xb0 [ 612.147353][T10439] binder_ioctl_write_read+0xd22/0x9ef0 [ 612.147431][T10439] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 612.147461][T10439] ? do_raw_spin_lock+0x121/0x290 [ 612.147499][T10439] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 612.147522][T10439] ? lockdep_hardirqs_on+0x98/0x140 [ 612.147545][T10439] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 612.147567][T10439] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 612.147591][T10439] ? rt_spin_lock+0x1c1/0x3e0 [ 612.147627][T10439] ? rt_mutex_slowunlock+0x493/0x8a0 [ 612.147653][T10439] ? reacquire_held_locks+0x121/0x1c0 [ 612.147692][T10439] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 612.147724][T10439] ? rt_spin_unlock+0x150/0x200 [ 612.147763][T10439] ? binder_get_thread+0x178/0x6d0 [ 612.147793][T10439] binder_ioctl+0x3c8/0x19d0 [ 612.147821][T10439] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 612.147855][T10439] ? do_vfs_ioctl+0xbeb/0x1440 [ 612.147885][T10439] ? __pfx_binder_ioctl+0x10/0x10 [ 612.147910][T10439] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 612.147938][T10439] ? smack_log+0xef/0x3f0 [ 612.147962][T10439] ? __pfx_smack_log+0x10/0x10 [ 612.147985][T10439] ? lockdep_hardirqs_on+0x98/0x140 [ 612.148004][T10439] ? smk_access+0x14c/0x4e0 [ 612.148033][T10439] ? smk_tskacc+0x2fc/0x370 [ 612.148062][T10439] ? smack_file_ioctl+0x2ac/0x340 [ 612.148093][T10439] ? __pfx_smack_file_ioctl+0x10/0x10 [ 612.148132][T10439] ? __fget_files+0x3a6/0x420 [ 612.148154][T10439] ? __fget_files+0x2a/0x420 [ 612.148180][T10439] ? bpf_lsm_file_ioctl+0x9/0x20 [ 612.148213][T10439] ? __pfx_binder_ioctl+0x10/0x10 [ 612.148238][T10439] __se_sys_ioctl+0xff/0x170 [ 612.148272][T10439] do_syscall_64+0xfa/0xf80 [ 612.148295][T10439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.148317][T10439] ? clear_bhb_loop+0x60/0xb0 [ 612.148344][T10439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.148373][T10439] RIP: 0033:0x7f869bf7f749 [ 612.148394][T10439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.148413][T10439] RSP: 002b:00007f869a1de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.148437][T10439] RAX: ffffffffffffffda RBX: 00007f869c1d5fa0 RCX: 00007f869bf7f749 [ 612.148453][T10439] RDX: 0000200000000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 612.148468][T10439] RBP: 00007f869a1de090 R08: 0000000000000000 R09: 0000000000000000 [ 612.148482][T10439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.148495][T10439] R13: 00007f869c1d6038 R14: 00007f869c1d5fa0 R15: 00007fffc03c5a38 [ 612.148531][T10439] [ 612.148541][T10439] binder: 10438:10439 ioctl c0306201 200000000440 returned -14 [ 612.260261][ T6096] hdpvr 1-1:0.0: firmware version 0x3 dated 3;¨“Ã~&X^€œ wÒΖŠÒ¥ g/ƒNÐ `žxè$«·¯=å"Ü— [ 612.260289][ T6096] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 612.774200][ T6096] hdpvr 1-1:0.0: max device number reached, device register failed [ 612.806529][ T6096] usb 1-1: USB disconnect, device number 35 [ 612.902029][T10450] FAULT_INJECTION: forcing a failure. [ 612.902029][T10450] name failslab, interval 1, probability 0, space 0, times 0 [ 612.902067][T10450] CPU: 0 UID: 0 PID: 10450 Comm: syz.2.1429 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 612.902092][T10450] Tainted: [L]=SOFTLOCKUP [ 612.902099][T10450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 612.902113][T10450] Call Trace: [ 612.902122][T10450] [ 612.902132][T10450] dump_stack_lvl+0x189/0x250 [ 612.902167][T10450] ? __pfx____ratelimit+0x10/0x10 [ 612.902201][T10450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 612.902230][T10450] ? __pfx__printk+0x10/0x10 [ 612.902259][T10450] ? __pfx___might_resched+0x10/0x10 [ 612.902289][T10450] should_fail_ex+0x46c/0x600 [ 612.902330][T10450] ? skb_clone+0x212/0x3a0 [ 612.902359][T10450] should_failslab+0xa8/0x100 [ 612.902382][T10450] ? skb_clone+0x212/0x3a0 [ 612.902409][T10450] kmem_cache_alloc_noprof+0x84/0x6c0 [ 612.902439][T10450] ? safesetid_security_capable+0xa9/0x1a0 [ 612.902555][T10450] skb_clone+0x212/0x3a0 [ 612.902582][T10450] ? nfnetlink_rcv+0x4ba/0x2590 [ 612.902654][T10450] nfnetlink_rcv+0x4ec/0x2590 [ 612.902681][T10450] ? unwind_get_return_address+0x4d/0x90 [ 612.902721][T10450] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 612.902781][T10450] ? stack_trace_save+0x9c/0xe0 [ 612.902814][T10450] ? __lock_acquire+0x6b6/0x2cf0 [ 612.902848][T10450] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 612.902893][T10450] ? __lock_acquire+0x6b6/0x2cf0 [ 612.902933][T10450] ? __netlink_lookup+0xbd/0x8a0 [ 612.902980][T10450] ? netlink_deliver_tap+0x2e/0x1b0 [ 612.903027][T10450] netlink_unicast+0x846/0xa10 [ 612.903061][T10450] ? __pfx_netlink_unicast+0x10/0x10 [ 612.903087][T10450] ? smack_socket_getpeersec_dgram+0x266/0x430 [ 612.903121][T10450] ? netlink_sendmsg+0x642/0xb30 [ 612.903147][T10450] ? skb_put+0x11b/0x210 [ 612.903175][T10450] netlink_sendmsg+0x805/0xb30 [ 612.903214][T10450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 612.903253][T10450] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 612.903282][T10450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 612.903332][T10450] __sock_sendmsg+0x21c/0x270 [ 612.903370][T10450] ____sys_sendmsg+0x508/0x810 [ 612.903404][T10450] ? __pfx_____sys_sendmsg+0x10/0x10 [ 612.903442][T10450] ? import_iovec+0x74/0xa0 [ 612.903467][T10450] ___sys_sendmsg+0x21f/0x2a0 [ 612.903498][T10450] ? __pfx____sys_sendmsg+0x10/0x10 [ 612.903565][T10450] ? __fget_files+0x2a/0x420 [ 612.903589][T10450] ? __fget_files+0x3a6/0x420 [ 612.903624][T10450] __x64_sys_sendmsg+0x1a1/0x260 [ 612.903655][T10450] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 612.903694][T10450] ? __pfx_ksys_write+0x10/0x10 [ 612.903730][T10450] ? do_syscall_64+0xbe/0xf80 [ 612.903756][T10450] do_syscall_64+0xfa/0xf80 [ 612.903778][T10450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.903801][T10450] ? clear_bhb_loop+0x60/0xb0 [ 612.903827][T10450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.903849][T10450] RIP: 0033:0x7f98659ef749 [ 612.903868][T10450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.903888][T10450] RSP: 002b:00007f9863c4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 612.903912][T10450] RAX: ffffffffffffffda RBX: 00007f9865c45fa0 RCX: 00007f98659ef749 [ 612.903929][T10450] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000003 [ 612.903943][T10450] RBP: 00007f9863c4e090 R08: 0000000000000000 R09: 0000000000000000 [ 612.903957][T10450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.903970][T10450] R13: 00007f9865c46038 R14: 00007f9865c45fa0 R15: 00007ffebb797d48 [ 612.904005][T10450] [ 613.738983][T10468] binder: 10465:10468 ioctl 40086602 200000000180 returned -22 [ 613.821027][T10466] binder: 10465:10466 ioctl 5000940c 0 returned -22 [ 613.846953][T10466] binder: BINDER_SET_CONTEXT_MGR already set [ 613.846971][T10466] binder: 10465:10466 ioctl 4018620d 200000000200 returned -16 [ 615.161015][ T5923] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 615.363434][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 615.363467][ T5923] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 615.363494][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 615.363517][ T5923] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 615.363561][ T5923] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 615.363587][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.374894][ T5923] usb 1-1: config 0 descriptor?? [ 615.604482][ T5923] hdpvr 1-1:0.0: firmware version 0x3 dated 3;¨“Ã~&X^€œ wÒΖŠÒ¥ g/ƒNÐ `žxè$«·¯=å"Ü— [ 615.604507][ T5923] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 616.002847][ T6096] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 616.246476][ T6096] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 616.246512][ T6096] usb 2-1: config 0 interface 0 has no altsetting 0 [ 616.258789][ T6096] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 616.258827][ T6096] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 616.259903][ T6096] usb 2-1: Product: syz [ 616.259995][ T6096] usb 2-1: Manufacturer: syz [ 616.260066][ T6096] usb 2-1: SerialNumber: syz [ 616.343437][ T6096] usb 2-1: config 0 descriptor?? [ 616.458105][ T6096] usb 2-1: selecting invalid altsetting 0 [ 616.538541][ T5923] hdpvr 1-1:0.0: max device number reached, device register failed [ 616.931945][ T5923] usb 1-1: USB disconnect, device number 36 [ 616.999693][ T6096] usb 2-1: USB disconnect, device number 26 [ 617.097951][ T6911] udevd[6911]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 618.026216][ T38] audit: type=1400 audit(1765944612.744:18): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5804 comm="syz-executor" name="270" dev="tmpfs" ino=1401 [ 618.026274][ T38] audit: type=1400 audit(1765944612.744:19): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5804 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 618.026321][ T38] audit: type=1400 audit(1765944612.744:20): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5804 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 618.026367][ T38] audit: type=1400 audit(1765944612.744:21): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5804 comm="syz-executor" name="270" dev="tmpfs" ino=1401 [ 618.026412][ T38] audit: type=1400 audit(1765944612.744:22): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5804 comm="syz-executor" path="/270/cgroup" dev="tmpfs" ino=1402 [ 618.026458][ T38] audit: type=1400 audit(1765944612.744:23): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5804 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 618.026504][ T38] audit: type=1400 audit(1765944612.744:24): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5804 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 618.026550][ T38] audit: type=1400 audit(1765944612.744:25): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5804 comm="syz-executor" name="270" dev="tmpfs" ino=1401 [ 618.026598][ T38] audit: type=1400 audit(1765944612.744:26): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5804 comm="syz-executor" name="270" dev="tmpfs" ino=1401 [ 618.026645][ T38] audit: type=1400 audit(1765944612.744:27): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=5804 comm="syz-executor" name="cgroup" dev="tmpfs" ino=1402 [ 618.543520][T10563] FAULT_INJECTION: forcing a failure. [ 618.543520][T10563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.543562][T10563] CPU: 0 UID: 0 PID: 10563 Comm: syz.4.1481 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 618.543593][T10563] Tainted: [L]=SOFTLOCKUP [ 618.543601][T10563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 618.543614][T10563] Call Trace: [ 618.543622][T10563] [ 618.543632][T10563] dump_stack_lvl+0x189/0x250 [ 618.543667][T10563] ? __pfx____ratelimit+0x10/0x10 [ 618.543701][T10563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 618.543730][T10563] ? __pfx__printk+0x10/0x10 [ 618.543753][T10563] ? __might_fault+0xb0/0x130 [ 618.543797][T10563] should_fail_ex+0x46c/0x600 [ 618.543839][T10563] _copy_from_user+0x2d/0xb0 [ 618.543862][T10563] memdup_user+0x5e/0xd0 [ 618.543888][T10563] strndup_user+0x68/0xd0 [ 618.543913][T10563] __se_sys_mount+0x9d/0x410 [ 618.543937][T10563] ? ksys_write+0x230/0x260 [ 618.543971][T10563] ? __pfx___se_sys_mount+0x10/0x10 [ 618.543999][T10563] ? do_syscall_64+0xbe/0xf80 [ 618.544020][T10563] ? __x64_sys_mount+0x20/0xc0 [ 618.544046][T10563] do_syscall_64+0xfa/0xf80 [ 618.544069][T10563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.544091][T10563] ? clear_bhb_loop+0x60/0xb0 [ 618.544118][T10563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.544138][T10563] RIP: 0033:0x7f869bf7f749 [ 618.544157][T10563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.544176][T10563] RSP: 002b:00007f869a1de038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 618.544201][T10563] RAX: ffffffffffffffda RBX: 00007f869c1d5fa0 RCX: 00007f869bf7f749 [ 618.544217][T10563] RDX: 0000200000007f00 RSI: 0000200000007ec0 RDI: 0000000000000000 [ 618.544231][T10563] RBP: 00007f869a1de090 R08: 0000200000007f40 R09: 0000000000000000 [ 618.544246][T10563] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000001 [ 618.544258][T10563] R13: 00007f869c1d6038 R14: 00007f869c1d5fa0 R15: 00007fffc03c5a38 [ 618.544292][T10563] [ 619.275049][T10578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1486'. [ 619.411211][T10581] FAULT_INJECTION: forcing a failure. [ 619.411211][T10581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.411252][T10581] CPU: 0 UID: 0 PID: 10581 Comm: syz.4.1489 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 619.411284][T10581] Tainted: [L]=SOFTLOCKUP [ 619.411291][T10581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 619.411305][T10581] Call Trace: [ 619.411313][T10581] [ 619.411322][T10581] dump_stack_lvl+0x189/0x250 [ 619.411357][T10581] ? __pfx____ratelimit+0x10/0x10 [ 619.411392][T10581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 619.411422][T10581] ? __pfx__printk+0x10/0x10 [ 619.411445][T10581] ? __might_fault+0xb0/0x130 [ 619.411497][T10581] should_fail_ex+0x46c/0x600 [ 619.411532][T10581] _copy_from_iter+0x1cd/0x1630 [ 619.411568][T10581] ? __build_skb_around+0x22d/0x3c0 [ 619.411599][T10581] ? __pfx__copy_from_iter+0x10/0x10 [ 619.411626][T10581] ? __alloc_skb+0x2f1/0x430 [ 619.411652][T10581] ? __pfx___alloc_skb+0x10/0x10 [ 619.411680][T10581] ? netlink_sendmsg+0x642/0xb30 [ 619.411708][T10581] ? skb_put+0x11b/0x210 [ 619.411737][T10581] netlink_sendmsg+0x6b2/0xb30 [ 619.411777][T10581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.411816][T10581] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 619.411845][T10581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.411876][T10581] __sock_sendmsg+0x21c/0x270 [ 619.411913][T10581] ____sys_sendmsg+0x508/0x810 [ 619.411947][T10581] ? __pfx_____sys_sendmsg+0x10/0x10 [ 619.411986][T10581] ? import_iovec+0x74/0xa0 [ 619.412010][T10581] ___sys_sendmsg+0x21f/0x2a0 [ 619.412041][T10581] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.412108][T10581] ? __fget_files+0x2a/0x420 [ 619.412131][T10581] ? __fget_files+0x3a6/0x420 [ 619.412165][T10581] __x64_sys_sendmsg+0x1a1/0x260 [ 619.412197][T10581] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 619.412236][T10581] ? __pfx_ksys_write+0x10/0x10 [ 619.412271][T10581] ? do_syscall_64+0xbe/0xf80 [ 619.412297][T10581] do_syscall_64+0xfa/0xf80 [ 619.412319][T10581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.412342][T10581] ? clear_bhb_loop+0x60/0xb0 [ 619.412369][T10581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.412390][T10581] RIP: 0033:0x7f869bf7f749 [ 619.412410][T10581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.412429][T10581] RSP: 002b:00007f869a1de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.412453][T10581] RAX: ffffffffffffffda RBX: 00007f869c1d5fa0 RCX: 00007f869bf7f749 [ 619.412470][T10581] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 619.412491][T10581] RBP: 00007f869a1de090 R08: 0000000000000000 R09: 0000000000000000 [ 619.412506][T10581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.412519][T10581] R13: 00007f869c1d6038 R14: 00007f869c1d5fa0 R15: 00007fffc03c5a38 [ 619.412556][T10581] [ 619.938076][T10588] netlink: 'syz.2.1492': attribute type 62 has an invalid length. [ 620.844491][T10596] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 621.701637][ T805] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 621.895926][ T805] usb 3-1: unable to get BOS descriptor or descriptor too short [ 621.900140][ T805] usb 3-1: not running at top speed; connect to a high speed hub [ 621.906527][ T805] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 621.934800][ T805] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 621.934833][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.934855][ T805] usb 3-1: Product: syz [ 621.934871][ T805] usb 3-1: Manufacturer: syz [ 621.934886][ T805] usb 3-1: SerialNumber: syz [ 622.150090][T10613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1500'. [ 622.199835][T10602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1497'. [ 622.775768][ T805] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 622.940952][ T805] usb 3-1: USB disconnect, device number 34 [ 623.044580][ T6397] audit: audit_backlog=66 > audit_backlog_limit=64 [ 623.044519][ T6935] audit_log_start: 8826 callbacks suppressed [ 623.044600][ T6397] audit: audit_lost=1296 audit_rate_limit=0 audit_backlog_limit=64 [ 623.044601][ T6935] audit: audit_backlog=66 > audit_backlog_limit=64 [ 623.044617][ T6397] audit: backlog limit exceeded [ 623.044614][ T6935] audit: audit_lost=1297 audit_rate_limit=0 audit_backlog_limit=64 [ 623.044631][ T6935] audit: backlog limit exceeded [ 623.044642][ T6397] audit: audit_backlog=66 > audit_backlog_limit=64 [ 623.044655][ T6397] audit: audit_lost=1298 audit_rate_limit=0 audit_backlog_limit=64 [ 623.044663][ T6935] audit: audit_backlog=66 > audit_backlog_limit=64 [ 623.044671][ T6397] audit: backlog limit exceeded [ 623.178307][ T6397] udevd[6397]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 623.433006][ T805] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 623.593580][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 623.593614][ T805] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 623.593642][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 623.593667][ T805] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 623.593717][ T805] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 623.593743][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.648765][ T805] usb 2-1: config 0 descriptor?? [ 623.885566][ T805] hdpvr 2-1:0.0: firmware version 0x3 dated 3;¨“Ã~&X^€œ wÒΖŠÒ¥ g/ƒNÐ `žxè$«·¯=å"Ü— [ 623.885592][ T805] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 623.910149][ T6238] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 624.100980][ T9] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 624.104556][ T6238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.104590][ T6238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.104691][ T6238] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 624.104713][ T6238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.221451][ T6238] usb 3-1: config 0 descriptor?? [ 624.266351][ T9] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 624.266385][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.314023][ T9] usb 4-1: config 0 descriptor?? [ 624.362375][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 624.383634][ T805] hdpvr 2-1:0.0: max device number reached, device register failed [ 624.477653][ T805] usb 2-1: USB disconnect, device number 27 [ 625.223436][T10647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.226720][T10647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.281342][ T7380] ------------[ cut here ]------------ [ 625.281364][ T7380] WARNING: kernel/kcov.c:872 at kcov_remote_start+0x5d9/0x710, CPU#0: kworker/0:13/7380 [ 625.281429][ T7380] Modules linked in: [ 625.281453][ T7380] CPU: 0 UID: 0 PID: 7380 Comm: kworker/0:13 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 625.281486][ T7380] Tainted: [L]=SOFTLOCKUP [ 625.281496][ T7380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 625.281513][ T7380] Workqueue: usb_hub_wq hub_event [ 625.281634][ T7380] RIP: 0010:kcov_remote_start+0x5d9/0x710 [ 625.281661][ T7380] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 81 27 be 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 a9 2b 13 09 89 c0 48 c7 c7 a0 63 b2 [ 625.281682][ T7380] RSP: 0018:ffffc90007e7f728 EFLAGS: 00010202 [ 625.281702][ T7380] RAX: 0000000000000002 RBX: ffff888024e51e40 RCX: 0000000000000000 [ 625.281719][ T7380] RDX: 0000000000000000 RSI: ffffffff8b3f56c0 RDI: ffffffff8b3f5680 [ 625.281735][ T7380] RBP: ffffc90007e7fa30 R08: ffffffff8ad5d5d1 R09: ffffffff8d5ae880 [ 625.281753][ T7380] R10: dffffc0000000000 R11: fffffbfff1db664f R12: ffff888144f49000 [ 625.281771][ T7380] R13: dffffc0000000000 R14: 0100000000000001 R15: ffff888144b7e000 [ 625.281789][ T7380] FS: 0000000000000000(0000) GS:ffff888126d03000(0000) knlGS:0000000000000000 [ 625.281808][ T7380] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 625.281824][ T7380] CR2: 00007f323e66d512 CR3: 0000000049854000 CR4: 00000000003526f0 [ 625.281844][ T7380] Call Trace: [ 625.281854][ T7380] [ 625.281870][ T7380] hub_event+0x158/0x4f30 [ 625.281903][ T7380] ? __lock_acquire+0x6b6/0x2cf0 [ 625.281940][ T7380] ? look_up_lock_class+0x74/0x150 [ 625.281977][ T7380] ? __lock_acquire+0x6b6/0x2cf0 [ 625.282015][ T7380] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 625.282061][ T7380] ? __pfx_hub_event+0x10/0x10 [ 625.282089][ T7380] ? process_scheduled_works+0x9ef/0x1770 [ 625.282123][ T7380] ? _raw_spin_unlock_irq+0x23/0x50 [ 625.282158][ T7380] ? process_scheduled_works+0x9ef/0x1770 [ 625.282183][ T7380] ? process_scheduled_works+0x9ef/0x1770 [ 625.282210][ T7380] process_scheduled_works+0xad1/0x1770 [ 625.282273][ T7380] ? __pfx_process_scheduled_works+0x10/0x10 [ 625.282321][ T7380] worker_thread+0x8a0/0xda0 [ 625.282353][ T7380] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 625.282386][ T7380] ? __kthread_parkme+0x7b/0x200 [ 625.282427][ T7380] kthread+0x711/0x8a0 [ 625.282464][ T7380] ? __pfx_worker_thread+0x10/0x10 [ 625.282491][ T7380] ? __pfx_kthread+0x10/0x10 [ 625.282519][ T7380] ? rt_spin_unlock+0x150/0x200 [ 625.282555][ T7380] ? rt_spin_unlock+0x161/0x200 [ 625.282583][ T7380] ? __pfx_kthread+0x10/0x10 [ 625.282617][ T7380] ret_from_fork+0x599/0xb30 [ 625.282657][ T7380] ? __pfx_ret_from_fork+0x10/0x10 [ 625.282695][ T7380] ? __switch_to_asm+0x39/0x70 [ 625.282729][ T7380] ? __switch_to_asm+0x33/0x70 [ 625.282760][ T7380] ? __pfx_kthread+0x10/0x10 [ 625.282794][ T7380] ret_from_fork_asm+0x1a/0x30 [ 625.282845][ T7380] [ 625.282868][ T7380] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 625.282888][ T7380] CPU: 0 UID: 0 PID: 7380 Comm: kworker/0:13 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 625.282920][ T7380] Tainted: [L]=SOFTLOCKUP [ 625.282929][ T7380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 625.282943][ T7380] Workqueue: usb_hub_wq hub_event [ 625.282972][ T7380] Call Trace: [ 625.282981][ T7380] [ 625.282990][ T7380] dump_stack_lvl+0x99/0x250 [ 625.283020][ T7380] ? __asan_memcpy+0x40/0x70 [ 625.283052][ T7380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 625.283084][ T7380] ? __pfx__printk+0x10/0x10 [ 625.283122][ T7380] vpanic+0x237/0x6d0 [ 625.283161][ T7380] ? __pfx_vpanic+0x10/0x10 [ 625.283189][ T7380] ? is_bpf_text_address+0x292/0x2b0 [ 625.283236][ T7380] ? is_bpf_text_address+0x26/0x2b0 [ 625.283277][ T7380] panic+0xb9/0xc0 [ 625.283308][ T7380] ? __pfx_panic+0x10/0x10 [ 625.283350][ T7380] ? ret_from_fork_asm+0x1a/0x30 [ 625.283392][ T7380] __warn+0x317/0x4b0 [ 625.283421][ T7380] ? kcov_remote_start+0x5d9/0x710 [ 625.283451][ T7380] ? kcov_remote_start+0x5d9/0x710 [ 625.283475][ T7380] __report_bug+0x288/0x500 [ 625.283577][ T7380] ? kcov_remote_start+0x5d9/0x710 [ 625.283610][ T7380] ? __pfx___report_bug+0x10/0x10 [ 625.283659][ T7380] ? rt_spin_lock+0x1c1/0x3e0 [ 625.283691][ T7380] ? kcov_remote_start+0x5d9/0x710 [ 625.283716][ T7380] report_bug+0x16a/0x220 [ 625.283751][ T7380] ? kcov_remote_start+0x5d9/0x710 [ 625.283773][ T7380] ? kcov_remote_start+0x5db/0x710 [ 625.283798][ T7380] handle_bug+0x98/0x200 [ 625.283826][ T7380] exc_invalid_op+0x1a/0x50 [ 625.283852][ T7380] asm_exc_invalid_op+0x1a/0x20 [ 625.283874][ T7380] RIP: 0010:kcov_remote_start+0x5d9/0x710 [ 625.283899][ T7380] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 81 27 be 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 a9 2b 13 09 89 c0 48 c7 c7 a0 63 b2 [ 625.283920][ T7380] RSP: 0018:ffffc90007e7f728 EFLAGS: 00010202 [ 625.283939][ T7380] RAX: 0000000000000002 RBX: ffff888024e51e40 RCX: 0000000000000000 [ 625.283955][ T7380] RDX: 0000000000000000 RSI: ffffffff8b3f56c0 RDI: ffffffff8b3f5680 [ 625.283971][ T7380] RBP: ffffc90007e7fa30 R08: ffffffff8ad5d5d1 R09: ffffffff8d5ae880 [ 625.283988][ T7380] R10: dffffc0000000000 R11: fffffbfff1db664f R12: ffff888144f49000 [ 625.284005][ T7380] R13: dffffc0000000000 R14: 0100000000000001 R15: ffff888144b7e000 [ 625.284032][ T7380] ? rt_spin_lock+0x1c1/0x3e0 [ 625.284071][ T7380] ? kcov_remote_start+0xe1/0x710 [ 625.284099][ T7380] hub_event+0x158/0x4f30 [ 625.284131][ T7380] ? __lock_acquire+0x6b6/0x2cf0 [ 625.284173][ T7380] ? look_up_lock_class+0x74/0x150 [ 625.284210][ T7380] ? __lock_acquire+0x6b6/0x2cf0 [ 625.284251][ T7380] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 625.284297][ T7380] ? __pfx_hub_event+0x10/0x10 [ 625.284326][ T7380] ? process_scheduled_works+0x9ef/0x1770 [ 625.284362][ T7380] ? _raw_spin_unlock_irq+0x23/0x50 [ 625.284384][ T7380] ? process_scheduled_works+0x9ef/0x1770 [ 625.284409][ T7380] ? process_scheduled_works+0x9ef/0x1770 [ 625.284438][ T7380] process_scheduled_works+0xad1/0x1770 [ 625.284499][ T7380] ? __pfx_process_scheduled_works+0x10/0x10 [ 625.284547][ T7380] worker_thread+0x8a0/0xda0 [ 625.284579][ T7380] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 625.284612][ T7380] ? __kthread_parkme+0x7b/0x200 [ 625.284651][ T7380] kthread+0x711/0x8a0 [ 625.284688][ T7380] ? __pfx_worker_thread+0x10/0x10 [ 625.284714][ T7380] ? __pfx_kthread+0x10/0x10 [ 625.284744][ T7380] ? rt_spin_unlock+0x150/0x200 [ 625.284779][ T7380] ? rt_spin_unlock+0x161/0x200 [ 625.284806][ T7380] ? __pfx_kthread+0x10/0x10 [ 625.284841][ T7380] ret_from_fork+0x599/0xb30 [ 625.284869][ T7380] ? __pfx_ret_from_fork+0x10/0x10 [ 625.284906][ T7380] ? __switch_to_asm+0x39/0x70 [ 625.284937][ T7380] ? __switch_to_asm+0x33/0x70 [ 625.284967][ T7380] ? __pfx_kthread+0x10/0x10 [ 625.285002][ T7380] ret_from_fork_asm+0x1a/0x30 [ 625.285055][ T7380] [ 625.285375][ T7380] Kernel Offset: disabled