last executing test programs: 20.618418517s ago: executing program 0 (id=5143): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x128, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x114, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 20.273230721s ago: executing program 0 (id=5146): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6062, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xfc, 0xe1}}}}}]}}]}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000280)={@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x2, @empty, 0x3}}, {0x0}, 0x0, 0x1}, 0xa0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001100)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003}, 0x18) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = syz_io_uring_complete(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r4, 0x3b83, &(0x7f00000000c0)={0x28, 0x4, 0x0, r5, 0x312444, 0x0, 0x2, 0x1075b9}) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="40309f"], 0x0, 0x0, 0x0}, 0x0) 18.514828589s ago: executing program 0 (id=5168): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x19c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x114, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x74, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x17}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 17.968108876s ago: executing program 0 (id=5171): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000c8bd0b20f8061b3039bb0102030109021b0001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x65}, 0x0, &(0x7f0000000400)={0x20, 0x82, 0x1, "e3"}, &(0x7f0000000440)={0x20, 0x83, 0x3, "d0a2b7"}, &(0x7f0000000480)={0x20, 0x84, 0x2, "ee07"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, 'A*m'}}) 15.874930342s ago: executing program 0 (id=5192): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x7fffffff, 0x20}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000002c0)={r6, @in={{0x2, 0x4e23, @empty}}, 0x7, 0x7}, &(0x7f00000003c0)=0x90) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000380)={&(0x7f0000001880)=[{0x7, 0x8000, 0x0, 0x0}, {0x1, 0x1, 0x0, 0x0}], 0x2}) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300000d, 0x30, r2, 0xdf557000) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000180)={0x3, @pix_mp={0xa, 0x2, 0x50424752, 0x0, 0xa, [{0x2}, {0x16}, {0x969, 0x2}, {0x8, 0x80}, {0x8, 0x40069f1}, {0x80000001, 0x8fea}, {0x8001}, {0xe4f0, 0x7}], 0x40, 0x6, 0x4, 0x0, 0x6}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x20) 13.547736015s ago: executing program 0 (id=5208): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x18, 0x4}, 0xc) 6.704524661s ago: executing program 2 (id=5256): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32=r1, @ANYBLOB="0a00060008021100000100000c0043"], 0x34}}, 0x20048054) (fail_nth: 4) 6.274930628s ago: executing program 2 (id=5259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000001a80)) get_mempolicy(0x0, 0x0, 0x181, &(0x7f00001cd000/0x1000)=nil, 0x6) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000240)={0xc, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000480)={0x20, r5, 0x7, 0x0, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}]}) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x4734}}, 0x10) close_range(r3, r3, 0x0) unshare(0x22020600) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x400017e) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getresuid(&(0x7f00000000c0), &(0x7f0000000140)=0x0, &(0x7f00000001c0)) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {r7, r8}}, './file0\x00'}) r9 = eventfd(0x8000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'ip6gretap0\x00', 0x4000}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r9, 0x9, 0x2, r9}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r9, 0x7}) 6.000556758s ago: executing program 3 (id=5260): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') (fail_nth: 4) 5.290902795s ago: executing program 2 (id=5269): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0xffffffffffffb2cf, 0x200000) close_range(r2, r3, 0x2) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x5, 0x6, 0x401, 0x0, 0x0, {0x6a0286804a18f103, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x200000c5}, 0x20000400) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x7e}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x7}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x805}, 0xc000) 4.896542153s ago: executing program 3 (id=5274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}, 0x1, 0x1000000}, 0x48000) 4.242635611s ago: executing program 3 (id=5277): openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "9a5d38a17f00c500000000feff00", "a1c4776d", "3c84a3a3be2adbff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000000440)=""/4070, 0x20, 0x117, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 3.764392413s ago: executing program 3 (id=5278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x18, 0x0, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="6400000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e65740000000014000780080006400000020008000840"], 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000600)=0x180004) write$dsp(r2, &(0x7f0000000180)="755a5398d5df86c252d39077459a67ee110daaf0413bc745ef85b8ff1690215fe82677a667ad76000fcde989538a00"/57, 0x39) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$VT_ACTIVATE(r4, 0x5606, 0x2) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000040)) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x41) ioctl$HIDIOCGCOLLECTIONINFO(r4, 0xc0104811, &(0x7f00000000c0)={0x7, 0xe3f, 0xb297, 0x80000000}) landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x18, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x485, 0x0, 0x100000000}]}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 3.292214279s ago: executing program 2 (id=5280): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000c8bd0b20f8061b3039bb0102030109021b0001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x65}, 0x0, &(0x7f0000000400)={0x20, 0x82, 0x1, "e3"}, 0x0, &(0x7f0000000480)={0x20, 0x84, 0x2, "ee07"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, 'A*m'}}) 2.963005212s ago: executing program 3 (id=5286): add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="1f0c060863ff0760e15ce7cc0c86", 0xe, 0xfffffffffffffffd) 2.913387475s ago: executing program 3 (id=5287): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB='!\x00\x00\a'], 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0xc, 0xce, {0xce, 0x21, "05e7095631e1d75c2d096fe4726519d117cd54206423c9d7e761b073e6dffb68c4d2fb4e40b2bc1c8fe1523d100ca6d61ba18de362cbf065a58a3835fa6e107841551ea9a78feb122efa710d4b636b9ed496ec864af2a7fceea61be93d7cd154004e18f3eaf9c0bc3466db71245eae7632b718cb92a214689a21ce756c2a8b0db671b7d54c107440595c2515a4edbe9846382e76c28de6504851942f2ac9b22afba706931631d7ecb6cf90a2fa0da1b78130a2aba839513ef62464ea268f2b380e36357d80fd69b0ddd40df7"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}}, &(0x7f00000005c0)={0x34, &(0x7f0000000280)={0x0, 0xf, 0xa4, "69c1c705481e84a63ccade76336835e723e3378af46bd4fda2331ded5d0a280cfac9c6daa5f282003a588864c9b924189a0dbf00f4b6442d29454f1a4becf4ad0eb1c87b4494df512031edf15af0938fb65e4f650c581de076999d843b55a6135138ceca4930abcf67c5c8e2cc037efc7fad1e18cfdf7bcf63b99cf93f91bae3368a0982b0332f86ee4a53a4c7dd93d78a6a7368e6d1e79d419c322bfe8246f36e1d2161"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000440)={0x20, 0x0, 0xba, {0xb8, "f473fcd17b9d91878b3ec217665e41682a9d6ff8fa8aa08fdbf1980c103aa07598a14985e1f4ec1c291ea7a688fe4d51a6e89534811a8df465541f4f48fbf1cfe2a9722ee92a59fd26c81bcff9a09910364e8c75666693d9ef91e27f368d101468b1929c4d9677fcb19beba96d548b076ec618a81e07fafc9488875f93cfe2c53b2aadca382d65317ac5e1985fb1364d0784ed0b3fae4bdf47bf1e9ad5f8a5e7a8d4540c36caca9474cf5e54932213fe10dc4d2a7d052981"}}, &(0x7f0000000540)={0x20, 0x1, 0x1}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0xd}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000840)=ANY=[@ANYBLOB="001506"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.166378465s ago: executing program 2 (id=5288): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010101}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffff0001}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x44000) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000004ac0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004a80)={&(0x7f0000001240)={0x3808, 0xd, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x37dc, 0x3, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x84, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6f, 0x1, "7d7becab0cb8a605153650dbf562fed7f6546490e06b58121b58248f73263ce9476eaa238c2b61bd9c44ef33d1166bcc8c27fc9a7ff25c7a09a4aba57c48f38ac9c30d0642235920827257f27f4fa90a5c84a216db84ffe5003660449e3be50fa2ca1afe2d654d5cbc663f"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x434, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x148, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xfd, 0x1, "4dd0e8864e8fd14e81a3d9e0cb2f0e27e399f975b3f8654adcde99bf941337448745aea8ecd086b6313da6f9899bdf987c858638e7f4ea97d7b073ec2164c0c414a920d4b061f25372967d251ad4015e9298b8ca4e6bb1102cfc38cb05990067bbacab74fee39f4fab83307566f8fbe498bd41bea798820f0e3c76f892d36d7da6a42dc0446499785f2f5dd5cbab0b778ab3543c29d427271f0c2076df88e26308bf5b53b1da044064cd051477bc9f0fb0bea6e7302d53cd59571cda66b141ab09489e43013f7d2d0fd9081f03519086996b92b01dded376af0df9d3ea2ea36e7e2baed41e518469a937a55233c3dbbb87109716f6b2c480e7"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_KEY={0x3c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x36, 0x1, "86cf5b120a7c73e0bc54208033650efaad5120b547b314f77e560c2c8f157ec5ce70c20fe0f9aca429534e2cb3c2ac70294a"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @masq={{0x9}, @void}}, @NFTA_SET_ELEM_KEY_END={0x184, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xc3, 0x1, "9b70bb617685f6a03b34b59570cadf5872103c92f562530a5522ceddc4d5b8f3eba97b12600dcba8447b2f53442a5fdfc3daf99964c481288817b4ed02b4b24d3fed3b4faafeb03dec6ba6f1f1aeab5bcc36112428498b43a49692d9ed97226c126c67ec97d0566404ddf2adab9cfc2ac5d4b0d1c68b662d221de2d8a0a0483dae0e9c3bbc6f236bc8cac6b3f7cc678da62253fc351493f48fcef7e88648d18762a03cc0b5638abe63f9b262cd2d99599a6b7083479566d2f2104bb4185871"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xd0, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", "", "", ""]}}}, {0x3c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}]}}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x1ff}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x1b}]}}}]}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x13}]}}}]}, {0x32d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x2100, 0x7, 0x0, 0x1, @immediate={{0xe}, @val={0x20ec, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x98, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x3f, 0x1, "6d3b2a2a20b194ee1365895d852264276c4bea84d4deabc4314043b190f5a1c5ee3ef50a303b9285ecc9d1d5143b146703223ea7912a448e0f75af"}]}, @NFTA_IMMEDIATE_DATA={0x2050, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}}}, @NFTA_SET_ELEM_KEY_END={0x10a4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY={0x12c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc7, 0x1, "3a2f1c13af179ff6f631aaac8bbfdee11306c2af8b6aecc0dcd6d062858ad0c7c72aff1e79d5e137d9f60c4f26b5d4ab8314fa4594ac0d6cb3e5febaaace5644f67d44a491d2993505e425f5a5fc15b5ac12f4be36bcf0923ce9fd733d62e8d6164f7d2c6300eebf09a5dce94236225b327c3c59de4b8d35f64051138dbf5c4087807301ebd7590c2882df628ec8f4fce8e0c31c479bc91b05429abe8bcd505ea130949dfce2129b66bab8f8ea0146e7c2702150f5cadd645d0f3b3f2d93167dcc3053"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}, {0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}]}}}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x3808}, 0x1, 0x0, 0x0, 0x8084}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}}, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x3a, @broadcast, 0x4e23, 0x0, 'lc\x00', 0x2e, 0xfc, 0x5a}, 0x2c) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah', 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000019c0)={&(0x7f00000015c0)={0x1e, 0x4e21, @broadcast}, 0x10, 0x0}, 0x4000014) socket$netlink(0x10, 0x3, 0x4) 813.827208ms ago: executing program 2 (id=5292): syz_open_dev$loop(&(0x7f0000000040), 0xd3c9, 0x49a2c4) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x7ffffffe, 0x1}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, &(0x7f0000000100)=0x21) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x6}}, 0x200, 0xce39}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ef915f210070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c2402080001030000eefe000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYBLOB="07cfc2e1c60d"], 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0x2, 0x3, 0xbd62, 0x0, 0xfffffff8}) 489.258581ms ago: executing program 1 (id=5295): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000100)) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e", 0x11}], 0x1}, 0x0) setgroups(0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0xff) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}, {0x0}, {0x0, 0x50}], 0x4, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}, 0x24008004) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 402.994628ms ago: executing program 1 (id=5296): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x43, 0x0, &(0x7f0000000140)) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="100c060863ff0760e15ce7cc0c86", 0xe, 0xfffffffffffffffd) 358.468652ms ago: executing program 1 (id=5297): write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200"], 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x40, 0x22, 0x66, {0x66, 0x0, "eb54acd7a1540b00abb2e796b6de9ee7605042956772002773b443e8ce5e7f39b3353208bd87d25ed797c2506d2c3413f00631bac0adced8e8b4850ad02a5daff88e7357c33112ee702c44afbf6198b4fd02633a83566ea28b1e18ff1ddb0fc44990fe66"}}, &(0x7f0000000140)={0x0, 0x3, 0x47, @string={0x47, 0x3, "7ee3db945920583d2ac2b388def4c0145dfdbfc6fbe199df28ae7791b07d3418ef395a233406751b774473fec46cebca8324409773380d7c92797e22d27a418482fbb455d5"}}}, &(0x7f00000008c0)={0x1c, &(0x7f0000000200)={0x40, 0x7, 0xbd, "17dabc2ab27665fe39f04936c3b0e4d7fc83d4102510703d516beca0e406a735cbe6ca0e476460a358acebd0d01f2e3e76b75336922fccbe1b373851e4a23a06d2427b9bee81c3ffbfe67aca086084b4efdaf406d257dd97bafa110fc2bebfb7375df4795325593216db36644025f31065ba599b67fbcdade9696b70b1a965046f8983b88ea3acf1345320c7fd22cb258122b3016e4810fdb5943ac330b9b0cad3c736ebbea3a81e9886987430eb9feb3f65ec16fb0e20af499467ea27"}, &(0x7f0000000440)={0xa1, 0x1, 0x400, "bee26b29870f7105b2f613f3dc61e3a634ac8d967760fe9605fc6e6508a97a3431f78a078e1cfada8f72fb176c51eb6f0ff4caa3f0cb4f2270373ab4f3e030e7ee7abdb15c1392246f5c8cc53350570175ba0bf56927bc3f60479889851d60b1b00dd587bcb898fa23b3b0f32bd7e2b4f7de823ebd7ea20377123ab3a5bc9aa28f039a45c564acd3f13f18eafc0f59940929fdac5293ce2bfb3214a4b343cda3e7071b56a1361a1a48744c65141b36d03ab54a9c9f67c2055d4f2de583431289b970879b1090ebaba03a82fa4ded4d3f1f7d2dc55bb74bf5d1767caa19da8fe6a47131ecc3f4e89f099f3b6ee2a04680b2661d4c0fe63e850b86c0e7e52f87ba9de526ca3040286dd066c6c2bfe9b13d1cf3f65b2fb8c931b280cefba8616bb4d0925b8524eab7c1c717eadf914d593a95caab8709f2567d31fe1586368450094a1eb91334ee321c8530895c33d6bcc4400ed3fadb1fc71a02631ca12331101efc5754eb1d189f4df0dd7cb179be7883e6b782f0ff002b96bf8f9e7a7650177a2730ebfed037fcc5d6f253be35a071ef7842a07850ed3090b669651caf6226345133db731251cdbf7432f6c5888a405178f82c2bc6de888507e858530d4ae71d9a48fcaffd42c06ff12e204d14c1bac9dcf002b667cfab23e3f11f253553c08fbbbb6caf895b76316f9c7fdc2ecdc96adaab4488ca5aafe2b11962f92e9ad7a4752cb943a641fc19bc70c6e5dbf5954113394c2197de2a91d840176f27c3583ac1d481990720ed1c52797ef0c7cde28d67d100a395229f4cfc8a48a4905c21207181884f30288bdc16a52f012621c3b5f5611ac734e437c6847057b0bd03c67ba7ac385a094c2479111657f80206d844ca8aedcb4b1caea44a5f43855af3f2a97b70be110cf9dabb08baa70bcc62bf276ff1d4dcca20596cfc10a6479f66875f6a35f4fd8ce3119fed432e996c06649cee5d29459bcf912d060dbb7be2e83cf05e4d80e8e45fd9ab39b7dc842aeffedffb1d87ba2da04537812ce1c50aae6449cd7635c71a13a29c62fcdc1b348ee8c9b8b867be435786726484403220fc70b171f601e5bfe575f756fe7e7615646a1259c0c959ab68475a69ea554a29ed7f4eb29ad45cb28389cacc5a3b645d740278b8ef9add505215be92ce2497cb56b487ff98bec3987dc2a9eb37f92b44d7ddd3878fcd97356ead9663d78d1430aedc619b1b2b4b085c51082c4a3216996f40e26f9d076712d37ed7fadf11ff5a6ebaa8d6260f11b603dd76bc343fd5d2b32e887327f8c80363770bba1e41de8f1c6b0a46280509cbfc3cdf9c866cd91d5c2bc86e3d30cf1c53fe140309e452cb7c2561f34348465d3a1d820b83bf343a5a6c23a8e13d7fe80ff5983bd83253d4426a260fe71b58f129651c29d5eb17667b9edc8c6eee86b44ba45905c8188b7e5bc239"}, &(0x7f0000000880)={0x21, 0x0, 0x1, "10"}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRES32]) 235.657582ms ago: executing program 1 (id=5298): socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x80080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 50.843184ms ago: executing program 1 (id=5299): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="000f06"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0xc, 0xce, {0xce, 0x21, "05e7095631e1d75c2d096fe4726519d117cd54206423c9d7e761b073e6dffb68c4d2fb4e40b2bc1c8fe1523d100ca6d61ba18de362cbf065a58a3835fa6e107841551ea9a78feb122efa710d4b636b9ed496ec864af2a7fceea61be93d7cd154004e18f3eaf9c0bc3466db71245eae7632b718cb92a214689a21ce756c2a8b0db671b7d54c107440595c2515a4edbe9846382e76c28de6504851942f2ac9b22afba706931631d7ecb6cf90a2fa0da1b78130a2aba839513ef62464ea268f2b380e36357d80fd69b0ddd40df7"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}}, &(0x7f00000005c0)={0x34, &(0x7f0000000280)={0x0, 0xf, 0xa4, "69c1c705481e84a63ccade76336835e723e3378af46bd4fda2331ded5d0a280cfac9c6daa5f282003a588864c9b924189a0dbf00f4b6442d29454f1a4becf4ad0eb1c87b4494df512031edf15af0938fb65e4f650c581de076999d843b55a6135138ceca4930abcf67c5c8e2cc037efc7fad1e18cfdf7bcf63b99cf93f91bae3368a0982b0332f86ee4a53a4c7dd93d78a6a7368e6d1e79d419c322bfe8246f36e1d2161"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000440)={0x20, 0x0, 0xba, {0xb8, "f473fcd17b9d91878b3ec217665e41682a9d6ff8fa8aa08fdbf1980c103aa07598a14985e1f4ec1c291ea7a688fe4d51a6e89534811a8df465541f4f48fbf1cfe2a9722ee92a59fd26c81bcff9a09910364e8c75666693d9ef91e27f368d101468b1929c4d9677fcb19beba96d548b076ec618a81e07fafc9488875f93cfe2c53b2aadca382d65317ac5e1985fb1364d0784ed0b3fae4bdf47bf1e9ad5f8a5e7a8d4540c36caca9474cf5e54932213fe10dc4d2a7d052981"}}, &(0x7f0000000540)={0x20, 0x1, 0x1}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0xd}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000840)=ANY=[@ANYBLOB="001506"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 1 (id=5300): syz_usbip_server_init(0x1) (async) syz_usbip_server_init(0x2) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x200100c4}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x40000) (async) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000800)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="f3f428bd7000fedbdf251a00000007002100616100000c0022"], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x20000090) (async) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r3, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x26}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "4a124f204c101cf15b0266c58bb9a890"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b1f0a10c93989ab6021b280693348f4b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "8d5635081077c33bd97670f59b1e5f9c"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "6d143f6725b20c08e5354f2c84118a96"}]}, 0x70}, 0x1, 0x0, 0x0, 0x2004c885}, 0x20008080) socket$netlink(0x10, 0x3, 0x1) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)={0x2, 'ip6tnl0\x00', {}, 0x9}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRES64=r2], 0x18}}, 0x0) kernel console output (not intermixed with test programs): et on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 983.739286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 983.739682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:f5:a1:b1:1f:52, vlan:0) [ 983.739967][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 983.740371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 983.740702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 983.741169][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:f5:a1:b1:1f:52, vlan:0) [ 983.741449][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 983.742013][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 983.742313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 983.982570][ T37] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 984.149039][ T37] usb 2-1: device descriptor read/64, error -71 [ 984.399971][ T37] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 984.529006][ T37] usb 2-1: device descriptor read/64, error -71 [ 984.559511][ T9] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 984.640528][ T37] usb usb2-port1: attempt power cycle [ 984.729121][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 984.731715][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.734010][ T9] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 984.734037][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.734057][ T9] usb 4-1: Product: syz [ 984.734073][ T9] usb 4-1: Manufacturer: syz [ 984.734089][ T9] usb 4-1: SerialNumber: syz [ 984.773653][ T9] usb 4-1: config 0 descriptor?? [ 984.999048][ T37] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 985.070902][ T37] usb 2-1: device descriptor read/8, error -71 [ 985.318998][ T37] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 985.341457][ T37] usb 2-1: device descriptor read/8, error -71 [ 985.449377][ T37] usb usb2-port1: unable to enumerate USB device [ 985.680101][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 986.004087][ T9] input: gspca_pac7302 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input44 [ 986.187789][T11726] usb 4-1: USB disconnect, device number 121 [ 986.841197][T18512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5035'. [ 986.929262][ T5750] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 987.016758][ T5764] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 987.110989][ T5750] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 987.111016][ T5750] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 987.111036][ T5750] usb 1-1: Product: syz [ 987.111051][ T5750] usb 1-1: Manufacturer: syz [ 987.111066][ T5750] usb 1-1: SerialNumber: syz [ 987.168758][ T5750] usb 1-1: config 0 descriptor?? [ 987.195718][ T5764] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 987.195744][ T5764] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 987.195764][ T5764] usb 3-1: Product: syz [ 987.195778][ T5764] usb 3-1: Manufacturer: syz [ 987.195792][ T5764] usb 3-1: SerialNumber: syz [ 987.281324][ T5764] usb 3-1: config 0 descriptor?? [ 987.369174][T11726] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 987.378580][T18507] FAULT_INJECTION: forcing a failure. [ 987.378580][T18507] name failslab, interval 1, probability 0, space 0, times 0 [ 987.378618][T18507] CPU: 1 UID: 0 PID: 18507 Comm: syz.0.5036 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 987.378645][T18507] Tainted: [L]=SOFTLOCKUP [ 987.378653][T18507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 987.378666][T18507] Call Trace: [ 987.378675][T18507] [ 987.378683][T18507] dump_stack_lvl+0xe8/0x150 [ 987.378714][T18507] should_fail_ex+0x46b/0x600 [ 987.378749][T18507] should_failslab+0xa8/0x100 [ 987.378778][T18507] __kmalloc_noprof+0xdf/0x7b0 [ 987.378801][T18507] ? kfree+0x4d/0x6c0 [ 987.378821][T18507] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 987.378852][T18507] tomoyo_realpath_from_path+0xe3/0x5d0 [ 987.378882][T18507] ? tomoyo_domain+0xd7/0x130 [ 987.378912][T18507] ? tomoyo_path_number_perm+0x219/0x630 [ 987.378944][T18507] tomoyo_path_number_perm+0x246/0x630 [ 987.378978][T18507] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 987.379010][T18507] ? __lock_acquire+0x6b5/0x2d10 [ 987.379036][T18507] ? do_raw_spin_lock+0x12b/0x2f0 [ 987.379084][T18507] ? __fget_files+0x2a/0x420 [ 987.379110][T18507] ? __fget_files+0x2a/0x420 [ 987.379133][T18507] ? __fget_files+0x3a6/0x420 [ 987.379156][T18507] ? __fget_files+0x2a/0x420 [ 987.379183][T18507] security_file_ioctl+0xc3/0x2a0 [ 987.379215][T18507] __se_sys_ioctl+0x47/0x170 [ 987.379244][T18507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.379266][T18507] do_syscall_64+0x174/0x580 [ 987.379295][T18507] ? trace_irq_disable+0x3b/0x140 [ 987.379320][T18507] ? clear_bhb_loop+0x40/0x90 [ 987.379346][T18507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.379366][T18507] RIP: 0033:0x7fa04f9dce59 [ 987.379385][T18507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.379402][T18507] RSP: 002b:00007fa04dc36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 987.379424][T18507] RAX: ffffffffffffffda RBX: 00007fa04fc55fa0 RCX: 00007fa04f9dce59 [ 987.379440][T18507] RDX: 0000200000000000 RSI: 0000000080dc5521 RDI: 0000000000000004 [ 987.379454][T18507] RBP: 00007fa04dc36090 R08: 0000000000000000 R09: 0000000000000000 [ 987.379467][T18507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.379479][T18507] R13: 00007fa04fc56038 R14: 00007fa04fc55fa0 R15: 00007fffc034cf28 [ 987.379510][T18507] [ 987.668992][T18507] ERROR: Out of memory at tomoyo_realpath_from_path. [ 987.677567][ T5764] peak_usb 3-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 987.689892][ T5750] usb 1-1: USB disconnect, device number 25 [ 987.729846][T11726] usb 4-1: Using ep0 maxpacket: 16 [ 987.730754][T11726] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 987.745009][T11726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.747002][T11726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.771085][T11726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.795951][T11726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.811514][T11726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.829251][T11726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.865439][T11726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.867206][T11726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.902458][T11726] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 0.40 [ 987.902486][T11726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.902507][T11726] usb 4-1: Product: syz [ 987.902521][T11726] usb 4-1: Manufacturer: syz [ 987.902537][T11726] usb 4-1: SerialNumber: syz [ 988.177604][ T5764] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 988.177629][ T5764] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 988.177648][ T5764] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 988.255743][T18511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.275233][T18511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.749241][ C0] net_ratelimit: 11066 callbacks suppressed [ 988.749262][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 988.749577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 988.750068][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:f5:a1:b1:1f:52, vlan:0) [ 988.750375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 988.750797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 988.751189][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 988.751665][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:f5:a1:b1:1f:52, vlan:0) [ 988.751965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 988.752460][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 988.752783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.732548][ T5764] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 989.749196][T11726] snd-usb-6fire 4-1:1.0: unable to receive device firmware state. [ 989.749276][T11726] snd-usb-6fire 4-1:1.0: probe with driver snd-usb-6fire failed with error -71 [ 989.788033][T18527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.788449][T18527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.806645][ T5764] usb 3-1: USB disconnect, device number 17 [ 989.808619][T11726] usb 4-1: USB disconnect, device number 122 [ 990.329029][T11726] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 990.460404][T11726] usb 2-1: device descriptor read/64, error -71 [ 990.709380][T11726] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 990.879106][T11726] usb 2-1: device descriptor read/64, error -71 [ 990.989454][T11726] usb usb2-port1: attempt power cycle [ 991.168999][ T5764] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 991.211321][ T5653] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 991.281482][ T5653] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 991.287887][ T5653] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 991.329729][ T5764] usb 3-1: Using ep0 maxpacket: 32 [ 991.331960][ T5764] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 991.331986][ T5764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.333994][ T5653] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 991.338686][ T5653] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 991.359037][T11726] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 991.379838][T11726] usb 2-1: device descriptor read/8, error -71 [ 991.494610][ T5764] usb 3-1: config 0 descriptor?? [ 991.538715][ T5764] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 991.753677][T11726] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 991.969432][ T5764] gspca_vc032x: reg_r err -71 [ 991.969523][ T5764] gspca_vc032x: I2c Bus Busy Wait 00 [ 991.969532][ T5764] gspca_vc032x: I2c Bus Busy Wait 00 [ 991.969538][ T5764] gspca_vc032x: I2c Bus Busy Wait 00 [ 991.969545][ T5764] gspca_vc032x: I2c Bus Busy Wait 00 [ 991.969550][ T5764] gspca_vc032x: I2c Bus Busy Wait 00 [ 991.969557][ T5764] gspca_vc032x: I2c Bus Busy Wait 00 [ 991.969563][ T5764] gspca_vc032x: I2c Bus Busy Wait 00 [ 991.969569][ T5764] gspca_vc032x: I2c Bus Busy Wait 00 [ 991.969575][ T5764] gspca_vc032x: I2c Bus Busy Wait 00 [ 991.969581][ T5764] gspca_vc032x: I2c Bus Busy Wait 00 [ 991.969587][ T5764] gspca_vc032x: I2c Bus Busy Wait 00 [ 991.969593][ T5764] gspca_vc032x: I2c Bus Busy Wait 00 [ 991.969599][ T5764] gspca_vc032x: I2c Bus Busy Wait 00 [ 991.969605][ T5764] gspca_vc032x: I2c Bus Busy Wait 00 [ 991.969610][ T5764] gspca_vc032x: I2c Bus Busy Wait 00 [ 991.969617][ T5764] gspca_vc032x: I2c Bus Busy Wait 00 [ 991.969623][ T5764] gspca_vc032x: I2c Bus Busy Wait 00 [ 991.969629][ T5764] gspca_vc032x: I2c Bus Busy Wait 00 [ 991.969649][ T5764] gspca_vc032x: Unknown sensor... [ 991.969706][ T5764] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 992.102295][T11726] usb 2-1: device descriptor read/8, error -71 [ 992.130207][ T5764] usb 3-1: USB disconnect, device number 18 [ 992.211977][T11726] usb usb2-port1: unable to enumerate USB device [ 992.244314][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.244409][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.111062][ T822] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 993.273730][ T822] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 993.273759][ T822] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 993.273780][ T822] usb 3-1: Product: syz [ 993.273794][ T822] usb 3-1: Manufacturer: syz [ 993.273809][ T822] usb 3-1: SerialNumber: syz [ 993.314291][ T822] usb 3-1: config 0 descriptor?? [ 993.538993][ T5750] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 993.679772][ T5660] Bluetooth: hci0: command tx timeout [ 993.695906][ T5750] usb 2-1: Using ep0 maxpacket: 16 [ 993.708258][ T5750] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 993.708280][ T5750] usb 2-1: config 0 has no interface number 0 [ 993.708315][ T5750] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 993.708340][ T5750] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 993.759155][ C0] net_ratelimit: 11212 callbacks suppressed [ 993.759170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:f5:a1:b1:1f:52, vlan:0) [ 993.759457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 993.759880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 993.760173][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 993.760279][ T5750] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 993.760306][ T5750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.760326][ T5750] usb 2-1: Product: syz [ 993.760340][ T5750] usb 2-1: Manufacturer: syz [ 993.760355][ T5750] usb 2-1: SerialNumber: syz [ 993.760572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:f5:a1:b1:1f:52, vlan:0) [ 993.760864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 993.761256][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 993.761745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 993.762620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:f5:a1:b1:1f:52, vlan:0) [ 993.763323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 993.956337][ T5750] usb 2-1: config 0 descriptor?? [ 993.957639][T18579] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 993.958071][T18579] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 994.006757][T17805] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.202648][T18579] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 994.202942][T18579] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 994.407910][ T5750] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 994.408163][ T5750] asix 2-1:0.34: probe with driver asix failed with error -32 [ 994.457125][ T822] peak_usb 3-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 994.457888][ T822] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 994.457911][ T822] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 994.457929][ T822] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 995.190834][ T822] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 995.221298][ T822] usb 3-1: USB disconnect, device number 19 [ 995.583098][T17805] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.770649][ T5660] Bluetooth: hci0: command tx timeout [ 996.033425][T17805] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.263386][T11726] usb 2-1: USB disconnect, device number 24 [ 997.067564][T18602] netlink: 'syz.1.5066': attribute type 12 has an invalid length. [ 997.327025][T18609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5069'. [ 997.399050][T11726] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 997.414770][T17805] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.529016][T11726] usb 4-1: device descriptor read/64, error -71 [ 997.739006][ T822] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 997.769031][T11726] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 997.849846][ T5660] Bluetooth: hci0: command tx timeout [ 997.898240][ T822] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 997.898271][ T822] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 997.898294][ T822] usb 3-1: Product: syz [ 997.898311][ T822] usb 3-1: Manufacturer: syz [ 997.898336][ T822] usb 3-1: SerialNumber: syz [ 997.924733][T11726] usb 4-1: device descriptor read/64, error -71 [ 997.961954][ T822] usb 3-1: config 0 descriptor?? [ 998.031530][T11726] usb usb4-port1: attempt power cycle [ 998.093037][ T37] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 998.177857][ T822] peak_usb 3-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 998.269147][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 998.273026][ T37] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 998.273051][ T37] usb 2-1: config 0 has no interface number 0 [ 998.273085][ T37] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 998.273152][ T37] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 998.327716][ T37] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 998.327744][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.327765][ T37] usb 2-1: Product: syz [ 998.327780][ T37] usb 2-1: Manufacturer: syz [ 998.327794][ T37] usb 2-1: SerialNumber: syz [ 998.373674][ T37] usb 2-1: config 0 descriptor?? [ 998.378724][ T822] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 998.379055][T11726] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 998.388518][ T822] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 998.388541][ T822] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 998.399918][T11726] usb 4-1: device descriptor read/8, error -71 [ 998.424877][T18619] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 998.425004][T18619] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 998.540952][ T822] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 998.584193][ T822] usb 3-1: USB disconnect, device number 20 [ 998.634786][T18619] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 998.635042][T18619] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 998.659557][T11726] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 998.681547][T11726] usb 4-1: device descriptor read/8, error -71 [ 998.769279][ C0] net_ratelimit: 13046 callbacks suppressed [ 998.769298][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:f5:a1:b1:1f:52, vlan:0) [ 998.769571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 998.769924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 998.770216][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 998.770648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:f5:a1:b1:1f:52, vlan:0) [ 998.770928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 998.771358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 998.771640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 998.772016][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:f5:a1:b1:1f:52, vlan:0) [ 998.772299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 998.789449][T11726] usb usb4-port1: unable to enumerate USB device [ 998.971846][ T37] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 998.972127][ T37] asix 2-1:0.34: probe with driver asix failed with error -32 [ 999.526177][T18555] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.526649][T18555] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.526986][T18555] bridge_slave_0: entered allmulticast mode [ 999.553654][T18555] bridge_slave_0: entered promiscuous mode [ 999.573649][T18555] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.574163][T18555] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.574437][T18555] bridge_slave_1: entered allmulticast mode [ 999.585388][T18555] bridge_slave_1: entered promiscuous mode [ 999.734968][T18555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.753603][T18555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.883211][T17805] veth0_to_bridge: left allmulticast mode [ 999.883235][T17805] veth0_to_bridge: left promiscuous mode [ 999.883481][T17805] bridge0: port 3(veth0_to_bridge) entered disabled state [ 999.919762][ T5660] Bluetooth: hci0: command tx timeout [ 1000.000960][T17805] bridge_slave_1: left allmulticast mode [ 1000.000989][T17805] bridge_slave_1: left promiscuous mode [ 1000.001218][T17805] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.140648][T17805] bridge_slave_0: left allmulticast mode [ 1000.140683][T17805] bridge_slave_0: left promiscuous mode [ 1000.140908][T17805] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.837413][ T5728] usb 2-1: USB disconnect, device number 25 [ 1000.949449][ T5764] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1001.099262][ T5764] usb 4-1: Using ep0 maxpacket: 32 [ 1001.103230][ T5764] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1001.103255][ T5764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.103274][ T5764] usb 4-1: Product: syz [ 1001.103288][ T5764] usb 4-1: Manufacturer: syz [ 1001.103305][ T5764] usb 4-1: SerialNumber: syz [ 1001.107783][ T5764] usb 4-1: config 0 descriptor?? [ 1001.200229][T17805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.280003][T17805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1001.323980][T17805] bond0 (unregistering): Released all slaves [ 1001.450884][T18649] netlink: 372 bytes leftover after parsing attributes in process `syz.3.5079'. [ 1001.588716][T18555] team0: Port device team_slave_0 added [ 1001.602923][T18555] team0: Port device team_slave_1 added [ 1001.603033][ T5764] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: failure sending bit rate [ 1001.603069][ T5764] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 1001.635642][ T5764] usb 4-1: USB disconnect, device number 127 [ 1001.955624][T17805] tipc: Disabling bearer [ 1001.956260][T17805] tipc: Left network mode [ 1001.971252][ T8416] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1001.996307][T18555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.996321][T18555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.996349][T18555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1002.027081][T18555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.027118][T18555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.027191][T18555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.029161][ T1595] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1002.161822][ T8416] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1002.161851][ T8416] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1002.161872][ T8416] usb 2-1: Product: syz [ 1002.161886][ T8416] usb 2-1: Manufacturer: syz [ 1002.161900][ T8416] usb 2-1: SerialNumber: syz [ 1002.212396][ T1595] usb 3-1: device descriptor read/64, error -71 [ 1002.213044][ T8416] usb 2-1: config 0 descriptor?? [ 1002.262623][T18555] hsr_slave_0: entered promiscuous mode [ 1002.264800][T18555] hsr_slave_1: entered promiscuous mode [ 1002.451931][ T1595] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1002.459406][ T8416] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 1002.582503][ T1595] usb 3-1: device descriptor read/64, error -71 [ 1002.644048][T18668] FAULT_INJECTION: forcing a failure. [ 1002.644048][T18668] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.644081][T18668] CPU: 1 UID: 0 PID: 18668 Comm: syz.3.5084 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1002.644109][T18668] Tainted: [L]=SOFTLOCKUP [ 1002.644117][T18668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1002.644130][T18668] Call Trace: [ 1002.644138][T18668] [ 1002.644147][T18668] dump_stack_lvl+0xe8/0x150 [ 1002.644176][T18668] should_fail_ex+0x46b/0x600 [ 1002.644210][T18668] should_failslab+0xa8/0x100 [ 1002.644240][T18668] __kmalloc_noprof+0xdf/0x7b0 [ 1002.644264][T18668] ? __get_fs_type+0x21/0x280 [ 1002.644291][T18668] ? tomoyo_encode+0x28b/0x550 [ 1002.644314][T18668] ? __get_fs_type+0x21/0x280 [ 1002.644339][T18668] ? __get_fs_type+0x21/0x280 [ 1002.644371][T18668] tomoyo_encode+0x28b/0x550 [ 1002.644405][T18668] tomoyo_mount_permission+0x4c1/0x9d0 [ 1002.644432][T18668] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 1002.644454][T18668] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1002.644533][T18668] security_sb_mount+0xe4/0x320 [ 1002.644561][T18668] path_mount+0xbc/0x10e0 [ 1002.644584][T18668] ? user_path_at+0xd4/0x160 [ 1002.644614][T18668] ? user_path_at+0xd4/0x160 [ 1002.644642][T18668] __se_sys_mount+0x31d/0x420 [ 1002.644671][T18668] ? __pfx___se_sys_mount+0x10/0x10 [ 1002.644701][T18668] ? __x64_sys_mount+0x20/0xc0 [ 1002.644725][T18668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.644748][T18668] do_syscall_64+0x174/0x580 [ 1002.644777][T18668] ? trace_irq_disable+0x3b/0x140 [ 1002.644801][T18668] ? clear_bhb_loop+0x40/0x90 [ 1002.644827][T18668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.644847][T18668] RIP: 0033:0x7faef290ce59 [ 1002.644866][T18668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.644885][T18668] RSP: 002b:00007faef0b66028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1002.644907][T18668] RAX: ffffffffffffffda RBX: 00007faef2b85fa0 RCX: 00007faef290ce59 [ 1002.644922][T18668] RDX: 00002000000004c0 RSI: 0000200000000480 RDI: 0000000000000000 [ 1002.644937][T18668] RBP: 00007faef0b66090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.644950][T18668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.644962][T18668] R13: 00007faef2b86038 R14: 00007faef2b85fa0 R15: 00007ffd68a9d468 [ 1002.644993][T18668] [ 1002.660080][ T8416] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 1002.660103][ T8416] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 1002.660123][ T8416] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 1002.690036][ T1595] usb usb3-port1: attempt power cycle [ 1003.059083][ T1595] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1003.086269][ T1595] usb 3-1: device descriptor read/8, error -71 [ 1003.239055][ T822] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1003.269584][ T8416] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 1003.276564][ T8416] usb 2-1: USB disconnect, device number 26 [ 1003.292280][T11616] udevd[11616]: setting mode of /dev/bus/usb/002/026 to 020664 failed: No such file or directory [ 1003.292386][T11616] udevd[11616]: setting owner of /dev/bus/usb/002/026 to uid=0, gid=0 failed: No such file or directory [ 1003.320725][ T1595] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1003.340749][ T1595] usb 3-1: device descriptor read/8, error -71 [ 1003.394453][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1003.419057][ T822] usb 4-1: Using ep0 maxpacket: 32 [ 1003.421214][ T822] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1003.423737][ T822] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1003.423764][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.423784][ T822] usb 4-1: Product: syz [ 1003.423799][ T822] usb 4-1: Manufacturer: syz [ 1003.423813][ T822] usb 4-1: SerialNumber: syz [ 1003.449495][ T1595] usb usb3-port1: unable to enumerate USB device [ 1003.504892][ T822] snd-ua101 4-1:1.1: sample format descriptor not found [ 1003.504963][ T822] snd-ua101 4-1:1.0: invalid num_altsetting [ 1003.642081][T18678] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5087'. [ 1003.900044][ T1595] usb 4-1: USB disconnect, device number 2 [ 1004.289130][T17805] hsr_slave_0: left promiscuous mode [ 1004.309019][T17805] hsr_slave_1: left promiscuous mode [ 1004.309633][T17805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1004.309650][T17805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1004.350525][T17805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1004.350542][T17805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1004.446889][T17805] veth1_macvtap: left promiscuous mode [ 1004.446987][T17805] veth0_macvtap: left promiscuous mode [ 1004.447276][T17805] veth1_vlan: left promiscuous mode [ 1004.447462][T17805] veth0_vlan: left promiscuous mode [ 1005.279795][T17805] team0 (unregistering): Port device team_slave_1 removed [ 1005.329498][T17805] team0 (unregistering): Port device team_slave_0 removed [ 1005.553513][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1006.047469][ T37] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1006.219013][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 1006.221793][ T37] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1006.221817][ T37] usb 2-1: config 0 has no interface number 0 [ 1006.224320][ T37] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1006.224346][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.224370][ T37] usb 2-1: Product: syz [ 1006.224379][ T37] usb 2-1: Manufacturer: syz [ 1006.224389][ T37] usb 2-1: SerialNumber: syz [ 1006.229949][ T37] usb 2-1: config 0 descriptor?? [ 1006.463117][ T8416] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1006.499079][ T1595] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1006.622680][ T8416] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1006.622709][ T8416] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1006.622731][ T8416] usb 4-1: Product: syz [ 1006.622745][ T8416] usb 4-1: Manufacturer: syz [ 1006.622760][ T8416] usb 4-1: SerialNumber: syz [ 1006.664657][ T1595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.664687][ T1595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.686923][ T1595] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1006.686950][ T1595] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1006.686971][ T1595] usb 3-1: Manufacturer: syz [ 1006.721907][ T8416] usb 4-1: config 0 descriptor?? [ 1006.726351][ T1595] usb 3-1: config 0 descriptor?? [ 1007.402983][ T37] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 1007.403010][ T37] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1007.403481][ T37] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1007.403722][ T37] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1007.440407][ T37] usb 2-1: USB disconnect, device number 27 [ 1007.458271][ T8416] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 1007.460061][ T8416] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 1007.460083][ T8416] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 1007.460100][ T8416] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 1007.692088][ T8416] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 1007.725622][ T8416] usb 4-1: USB disconnect, device number 3 [ 1008.343560][ T1595] uclogic 0003:256C:006D.000B: failed retrieving Huion firmware version: -71 [ 1008.343628][ T1595] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 1008.343730][ T1595] uclogic 0003:256C:006D.000B: probe with driver uclogic failed with error -71 [ 1008.393750][ T1595] usb 3-1: USB disconnect, device number 25 [ 1008.683429][T11726] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1008.819157][T11726] usb 4-1: device descriptor read/64, error -71 [ 1009.060842][T11726] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1009.189110][T11726] usb 4-1: device descriptor read/64, error -71 [ 1009.250135][T18555] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1009.259379][ T1595] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1009.299856][T11726] usb usb4-port1: attempt power cycle [ 1009.304252][T18555] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1009.305174][T18555] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1009.345207][T18555] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1009.346469][T18555] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1009.374424][T18555] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1009.375403][T18555] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1009.416320][T18555] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1009.419027][ T1595] usb 3-1: Using ep0 maxpacket: 16 [ 1009.431440][ T1595] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 1009.431463][ T1595] usb 3-1: config 0 has no interface number 0 [ 1009.431492][ T1595] usb 3-1: config 0 interface 251 has no altsetting 0 [ 1009.457160][ T1595] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=43.2d [ 1009.457187][ T1595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.457208][ T1595] usb 3-1: Product: syz [ 1009.457222][ T1595] usb 3-1: Manufacturer: syz [ 1009.457237][ T1595] usb 3-1: SerialNumber: syz [ 1009.461815][ T37] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1009.513730][ T1595] usb 3-1: config 0 descriptor?? [ 1009.622803][ T37] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.622827][ T37] usb 2-1: config 0 has no interfaces? [ 1009.642360][ T37] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1009.642386][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.642405][ T37] usb 2-1: Product: syz [ 1009.642419][ T37] usb 2-1: Manufacturer: syz [ 1009.642434][ T37] usb 2-1: SerialNumber: syz [ 1009.672458][T11726] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1009.685535][ T37] usb 2-1: config 0 descriptor?? [ 1009.689675][T11726] usb 4-1: device descriptor read/8, error -71 [ 1009.716989][T18778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5102'. [ 1009.778325][ T1595] usb_ehset_test 3-1:0.251: probe with driver usb_ehset_test failed with error -32 [ 1009.795505][ T1595] usb 3-1: USB disconnect, device number 26 [ 1009.873691][T18555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.910918][T18771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.913740][T18771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.917841][ T5825] usb 2-1: USB disconnect, device number 28 [ 1009.929070][T11726] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1009.977994][T11726] usb 4-1: device descriptor read/8, error -71 [ 1010.032039][T18555] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.057140][T15875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.057311][T15875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.080340][T11726] usb usb4-port1: unable to enumerate USB device [ 1010.086181][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.086324][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.477849][T18811] ubi0: attaching mtd0 [ 1010.543578][T18813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5103'. [ 1010.617411][T18813] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5103'. [ 1010.675777][T18811] ubi0: scanning is finished [ 1010.675795][T18811] ubi0: empty MTD device detected [ 1011.138511][T18555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1011.329600][ T5764] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1011.491527][ T5764] usb 2-1: Using ep0 maxpacket: 8 [ 1011.496543][ T5764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.496574][ T5764] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1011.496613][ T5764] usb 2-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 1011.496636][ T5764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.595232][ T5764] usb 2-1: config 0 descriptor?? [ 1011.643828][T18555] veth0_vlan: entered promiscuous mode [ 1011.684129][T18843] IPv6: Can't replace route, no match found [ 1011.721683][T18811] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1011.842363][T18555] veth1_vlan: entered promiscuous mode [ 1011.919381][T11726] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1012.022723][ T5764] usbhid 2-1:0.0: can't add hid device: -71 [ 1012.022846][ T5764] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1012.043709][ T5764] usb 2-1: USB disconnect, device number 29 [ 1012.099135][T11726] usb 4-1: Using ep0 maxpacket: 16 [ 1012.104111][T11726] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1012.104137][T11726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.104155][T11726] usb 4-1: Product: syz [ 1012.104169][T11726] usb 4-1: Manufacturer: syz [ 1012.104184][T11726] usb 4-1: SerialNumber: syz [ 1012.128241][T11726] usb 4-1: config 0 descriptor?? [ 1012.257658][T18555] veth0_macvtap: entered promiscuous mode [ 1012.338437][T18555] veth1_macvtap: entered promiscuous mode [ 1012.431866][T18555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1012.537538][T18555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1012.653800][T18843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.654730][T18843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.671571][T17805] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.683332][T17805] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.688320][T17805] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.693975][T17805] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.710485][T11726] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1012.834207][T11726] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1012.835021][T11726] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1012.835071][T11726] usb 4-1: media controller created [ 1012.878396][T11726] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1012.980112][T11726] zl10353_read_register: readreg error (reg=127, ret==0) [ 1012.980154][T11726] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1012.980167][T11726] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1013.016476][T11726] usb 4-1: USB disconnect, device number 8 [ 1013.121944][T11726] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1013.738813][T18878] FAULT_INJECTION: forcing a failure. [ 1013.738813][T18878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1013.738851][T18878] CPU: 1 UID: 0 PID: 18878 Comm: syz.1.5114 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1013.738880][T18878] Tainted: [L]=SOFTLOCKUP [ 1013.738891][T18878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1013.738904][T18878] Call Trace: [ 1013.738912][T18878] [ 1013.738922][T18878] dump_stack_lvl+0xe8/0x150 [ 1013.738952][T18878] should_fail_ex+0x46b/0x600 [ 1013.738988][T18878] _copy_to_user+0x31/0xb0 [ 1013.739016][T18878] do_bnep_sock_ioctl+0x4b5/0x650 [ 1013.739051][T18878] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 1013.739089][T18878] ? tomoyo_path_number_perm+0x219/0x630 [ 1013.739140][T18878] sock_do_ioctl+0x101/0x320 [ 1013.739175][T18878] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1013.739215][T18878] sock_ioctl+0x5c9/0x7f0 [ 1013.739241][T18878] ? __pfx_sock_ioctl+0x10/0x10 [ 1013.739265][T18878] ? __fget_files+0x2a/0x420 [ 1013.739289][T18878] ? __fget_files+0x3a6/0x420 [ 1013.739313][T18878] ? __fget_files+0x2a/0x420 [ 1013.739341][T18878] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1013.739373][T18878] ? __pfx_sock_ioctl+0x10/0x10 [ 1013.739395][T18878] __se_sys_ioctl+0xff/0x170 [ 1013.739426][T18878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.739450][T18878] do_syscall_64+0x174/0x580 [ 1013.739480][T18878] ? trace_irq_disable+0x3b/0x140 [ 1013.739504][T18878] ? clear_bhb_loop+0x40/0x90 [ 1013.739530][T18878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.739552][T18878] RIP: 0033:0x7fd390e9ce59 [ 1013.739571][T18878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1013.739590][T18878] RSP: 002b:00007fd38f0ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1013.739612][T18878] RAX: ffffffffffffffda RBX: 00007fd391115fa0 RCX: 00007fd390e9ce59 [ 1013.739629][T18878] RDX: 0000200000000100 RSI: 00000000800442d2 RDI: 0000000000000005 [ 1013.739654][T18878] RBP: 00007fd38f0ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1013.739667][T18878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1013.739680][T18878] R13: 00007fd391116038 R14: 00007fd391115fa0 R15: 00007ffd5562af38 [ 1013.739711][T18878] [ 1014.159446][T11725] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1014.351026][T11725] usb 3-1: Using ep0 maxpacket: 32 [ 1014.355340][T11725] usb 3-1: config index 0 descriptor too short (expected 249, got 27) [ 1014.355364][T11725] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.355385][T11725] usb 3-1: config 0 has no interfaces? [ 1014.355412][T11725] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1014.355436][T11725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.416390][T11725] usb 3-1: config 0 descriptor?? [ 1014.542570][T15881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.542589][T15881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.642389][T18894] FAULT_INJECTION: forcing a failure. [ 1014.642389][T18894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1014.642414][T18894] CPU: 0 UID: 0 PID: 18894 Comm: syz.3.5120 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1014.642435][T18894] Tainted: [L]=SOFTLOCKUP [ 1014.642441][T18894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1014.642450][T18894] Call Trace: [ 1014.642457][T18894] [ 1014.642463][T18894] dump_stack_lvl+0xe8/0x150 [ 1014.642484][T18894] should_fail_ex+0x46b/0x600 [ 1014.642510][T18894] _copy_from_iter+0x1d3/0x1670 [ 1014.642530][T18894] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1014.642548][T18894] ? __alloc_skb+0x27d/0x7d0 [ 1014.642569][T18894] ? __pfx__copy_from_iter+0x10/0x10 [ 1014.642582][T18894] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1014.642605][T18894] ? __alloc_skb+0x27d/0x7d0 [ 1014.642629][T18894] ? netlink_sendmsg+0x650/0xb40 [ 1014.642642][T18894] ? skb_put+0x11b/0x210 [ 1014.642665][T18894] netlink_sendmsg+0x6c0/0xb40 [ 1014.642685][T18894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1014.642701][T18894] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1014.642722][T18894] ? aa_sock_msg_perm+0x122/0x200 [ 1014.642739][T18894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1014.642752][T18894] sock_sendmsg_nosec+0x13a/0x180 [ 1014.642772][T18894] ____sys_sendmsg+0x55c/0x870 [ 1014.642799][T18894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1014.642828][T18894] ? import_iovec+0x73/0xa0 [ 1014.642847][T18894] ___sys_sendmsg+0x2a5/0x360 [ 1014.642869][T18894] ? __lock_acquire+0x6b5/0x2d10 [ 1014.642889][T18894] ? __pfx____sys_sendmsg+0x10/0x10 [ 1014.642934][T18894] ? __fget_files+0x2a/0x420 [ 1014.642952][T18894] ? __fget_files+0x3a6/0x420 [ 1014.642975][T18894] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1014.643000][T18894] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1014.643029][T18894] ? __pfx_ksys_write+0x10/0x10 [ 1014.643055][T18894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.643071][T18894] do_syscall_64+0x174/0x580 [ 1014.643093][T18894] ? trace_irq_disable+0x3b/0x140 [ 1014.643115][T18894] ? clear_bhb_loop+0x40/0x90 [ 1014.643133][T18894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.643148][T18894] RIP: 0033:0x7faef290ce59 [ 1014.643162][T18894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.643175][T18894] RSP: 002b:00007faef0b45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1014.643191][T18894] RAX: ffffffffffffffda RBX: 00007faef2b86090 RCX: 00007faef290ce59 [ 1014.643202][T18894] RDX: 0000000024000040 RSI: 0000200000000140 RDI: 0000000000000003 [ 1014.643212][T18894] RBP: 00007faef0b45090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.643222][T18894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.643231][T18894] R13: 00007faef2b86128 R14: 00007faef2b86090 R15: 00007ffd68a9d468 [ 1014.643266][T18894] [ 1014.987164][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.987183][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.190752][ T5728] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1015.289122][ T8416] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1015.341478][ T5728] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1015.341508][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.345266][ T5728] usb 2-1: config 0 descriptor?? [ 1015.440144][ T8416] usb 4-1: Using ep0 maxpacket: 16 [ 1015.442283][ T8416] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1015.442330][ T8416] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1015.442348][ T8416] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1015.442403][ T8416] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1015.444926][ T8416] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1015.444953][ T8416] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.444966][ T8416] usb 4-1: Product: syz [ 1015.444975][ T8416] usb 4-1: Manufacturer: syz [ 1015.444985][ T8416] usb 4-1: SerialNumber: syz [ 1015.470414][ T8416] usb 4-1: config 0 descriptor?? [ 1015.552893][ T5728] hackrf 2-1:0.0: Board ID: 00 [ 1015.552906][ T5728] hackrf 2-1:0.0: Firmware version: ûÿ [ 1015.577241][ T5728] hackrf 2-1:0.0: Registered as swradio24 [ 1015.582214][ T5728] videodev: could not get a free minor [ 1015.582249][ T5728] hackrf 2-1:0.0: Failed to register as video device (-23) [ 1015.705919][ T5728] hackrf 2-1:0.0: probe with driver hackrf failed with error -23 [ 1015.754976][T11725] usb 2-1: USB disconnect, device number 30 [ 1015.770872][T18910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5122'. [ 1015.977568][ T8416] appledisplay 4-1:0.0: Error while getting initial brightness: -110 [ 1015.988710][ T8416] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110 [ 1016.350488][T18930] FAULT_INJECTION: forcing a failure. [ 1016.350488][T18930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1016.350524][T18930] CPU: 0 UID: 0 PID: 18930 Comm: syz.0.5129 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1016.350551][T18930] Tainted: [L]=SOFTLOCKUP [ 1016.350558][T18930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1016.350570][T18930] Call Trace: [ 1016.350578][T18930] [ 1016.350587][T18930] dump_stack_lvl+0xe8/0x150 [ 1016.350614][T18930] should_fail_ex+0x46b/0x600 [ 1016.350648][T18930] _copy_from_user+0x2d/0xb0 [ 1016.350672][T18930] ? __pfx_drm_mode_getfb+0x10/0x10 [ 1016.350691][T18930] drm_ioctl+0x5d0/0xb80 [ 1016.350721][T18930] ? __pfx_drm_mode_getfb+0x10/0x10 [ 1016.350744][T18930] ? __pfx_drm_ioctl+0x10/0x10 [ 1016.350781][T18930] ? __fget_files+0x2a/0x420 [ 1016.350825][T18930] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1016.350855][T18930] ? __pfx_drm_ioctl+0x10/0x10 [ 1016.350881][T18930] __se_sys_ioctl+0xff/0x170 [ 1016.350910][T18930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.350932][T18930] do_syscall_64+0x174/0x580 [ 1016.350963][T18930] ? clear_bhb_loop+0x40/0x90 [ 1016.350997][T18930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.351017][T18930] RIP: 0033:0x7f62336dce59 [ 1016.351036][T18930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.351055][T18930] RSP: 002b:00007f6231936028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1016.351076][T18930] RAX: ffffffffffffffda RBX: 00007f6233955fa0 RCX: 00007f62336dce59 [ 1016.351092][T18930] RDX: 0000200000000240 RSI: 00000000c01c64ad RDI: 0000000000000003 [ 1016.351105][T18930] RBP: 00007f6231936090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.351119][T18930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1016.351132][T18930] R13: 00007f6233956038 R14: 00007f6233955fa0 R15: 00007ffff1819bb8 [ 1016.351163][T18930] [ 1016.633730][T11725] usb 3-1: USB disconnect, device number 27 [ 1016.760638][T18940] FAULT_INJECTION: forcing a failure. [ 1016.760638][T18940] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.760732][T18940] CPU: 1 UID: 0 PID: 18940 Comm: syz.0.5132 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1016.760758][T18940] Tainted: [L]=SOFTLOCKUP [ 1016.760764][T18940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1016.760774][T18940] Call Trace: [ 1016.760782][T18940] [ 1016.760789][T18940] dump_stack_lvl+0xe8/0x150 [ 1016.760812][T18940] should_fail_ex+0x46b/0x600 [ 1016.760845][T18940] should_failslab+0xa8/0x100 [ 1016.760868][T18940] __kmalloc_noprof+0xdf/0x7b0 [ 1016.760887][T18940] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1016.760911][T18940] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1016.760937][T18940] genl_family_rcv_msg_doit+0xd9/0x330 [ 1016.760967][T18940] ? __asan_memcpy+0x40/0x70 [ 1016.760984][T18940] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1016.761009][T18940] ? apparmor_capable+0x126/0x170 [ 1016.761031][T18940] ? bpf_lsm_capable+0x9/0x20 [ 1016.761046][T18940] ? security_capable+0x7e/0x2c0 [ 1016.761065][T18940] genl_rcv_msg+0x61c/0x7a0 [ 1016.761089][T18940] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1016.761108][T18940] ? __pfx_nfc_genl_vendor_cmd+0x10/0x10 [ 1016.761139][T18940] netlink_rcv_skb+0x232/0x4b0 [ 1016.761167][T18940] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1016.761187][T18940] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1016.761221][T18940] ? netlink_deliver_tap+0x2e/0x1b0 [ 1016.761246][T18940] ? netlink_deliver_tap+0x2e/0x1b0 [ 1016.761280][T18940] genl_rcv+0x28/0x40 [ 1016.761299][T18940] netlink_unicast+0x780/0x920 [ 1016.761330][T18940] netlink_sendmsg+0x813/0xb40 [ 1016.761353][T18940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1016.761371][T18940] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1016.761396][T18940] ? aa_sock_msg_perm+0x122/0x200 [ 1016.761416][T18940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1016.761431][T18940] sock_sendmsg_nosec+0x13a/0x180 [ 1016.761457][T18940] ____sys_sendmsg+0x55c/0x870 [ 1016.761490][T18940] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1016.761521][T18940] ? import_iovec+0x73/0xa0 [ 1016.761540][T18940] ___sys_sendmsg+0x2a5/0x360 [ 1016.761563][T18940] ? __lock_acquire+0x6b5/0x2d10 [ 1016.761585][T18940] ? __pfx____sys_sendmsg+0x10/0x10 [ 1016.761634][T18940] ? __fget_files+0x2a/0x420 [ 1016.761653][T18940] ? __fget_files+0x3a6/0x420 [ 1016.761681][T18940] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1016.761710][T18940] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1016.761744][T18940] ? __pfx_ksys_write+0x10/0x10 [ 1016.761773][T18940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.761792][T18940] do_syscall_64+0x174/0x580 [ 1016.761822][T18940] ? trace_irq_disable+0x3b/0x140 [ 1016.761844][T18940] ? clear_bhb_loop+0x40/0x90 [ 1016.761869][T18940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.761890][T18940] RIP: 0033:0x7f62336dce59 [ 1016.761909][T18940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.761927][T18940] RSP: 002b:00007f6231936028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1016.761955][T18940] RAX: ffffffffffffffda RBX: 00007f6233955fa0 RCX: 00007f62336dce59 [ 1016.761971][T18940] RDX: 0000000020008010 RSI: 0000200000000c80 RDI: 0000000000000004 [ 1016.761984][T18940] RBP: 00007f6231936090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.761997][T18940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1016.762010][T18940] R13: 00007f6233956038 R14: 00007f6233955fa0 R15: 00007ffff1819bb8 [ 1016.762040][T18940] [ 1017.251598][T18944] sctp: [Deprecated]: syz.2.5134 (pid 18944) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1017.251598][T18944] Use struct sctp_sack_info instead [ 1017.839744][T18910] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 1017.840190][ T5660] Bluetooth: hci0: command 0x0401 tx timeout [ 1017.879220][T11725] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1018.029069][T11725] usb 3-1: Using ep0 maxpacket: 16 [ 1018.031519][T11725] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 1018.031543][T11725] usb 3-1: config 0 has no interface number 0 [ 1018.031585][T11725] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1018.031611][T11725] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1018.034118][T11725] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1018.034148][T11725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.034171][T11725] usb 3-1: Product: syz [ 1018.034187][T11725] usb 3-1: Manufacturer: syz [ 1018.034204][T11725] usb 3-1: SerialNumber: syz [ 1018.042812][T11725] usb 3-1: config 0 descriptor?? [ 1018.088410][T18948] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1018.088524][T18948] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1018.306877][T18948] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1018.307059][T18948] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1018.620334][T11725] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1018.832546][ T5742] usb 4-1: USB disconnect, device number 9 [ 1018.838369][T11725] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1018.838396][T11725] asix 3-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1018.838631][T11725] asix 3-1:0.34: probe with driver asix failed with error -71 [ 1018.891144][T18976] FAULT_INJECTION: forcing a failure. [ 1018.891144][T18976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1018.891177][T18976] CPU: 0 UID: 0 PID: 18976 Comm: syz.1.5144 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1018.891204][T18976] Tainted: [L]=SOFTLOCKUP [ 1018.891212][T18976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1018.891224][T18976] Call Trace: [ 1018.891232][T18976] [ 1018.891240][T18976] dump_stack_lvl+0xe8/0x150 [ 1018.891268][T18976] should_fail_ex+0x46b/0x600 [ 1018.891311][T18976] _copy_from_user+0x2d/0xb0 [ 1018.891336][T18976] ___sys_sendmsg+0x1c6/0x360 [ 1018.891366][T18976] ? __lock_acquire+0x6b5/0x2d10 [ 1018.891395][T18976] ? __pfx____sys_sendmsg+0x10/0x10 [ 1018.891456][T18976] ? __fget_files+0x2a/0x420 [ 1018.891480][T18976] ? __fget_files+0x3a6/0x420 [ 1018.891512][T18976] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1018.891545][T18976] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1018.891585][T18976] ? __pfx_ksys_write+0x10/0x10 [ 1018.891619][T18976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.891640][T18976] do_syscall_64+0x174/0x580 [ 1018.891669][T18976] ? trace_irq_disable+0x3b/0x140 [ 1018.891691][T18976] ? clear_bhb_loop+0x40/0x90 [ 1018.891716][T18976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.891737][T18976] RIP: 0033:0x7fd390e9ce59 [ 1018.891755][T18976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.891773][T18976] RSP: 002b:00007fd38f0ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1018.891793][T18976] RAX: ffffffffffffffda RBX: 00007fd391115fa0 RCX: 00007fd390e9ce59 [ 1018.891809][T18976] RDX: 0000000000040004 RSI: 00002000000011c0 RDI: 0000000000000003 [ 1018.891823][T18976] RBP: 00007fd38f0ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.891835][T18976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.891847][T18976] R13: 00007fd391116038 R14: 00007fd391115fa0 R15: 00007ffd5562af38 [ 1018.891876][T18976] [ 1018.979969][T11725] usb 3-1: USB disconnect, device number 28 [ 1019.262760][T18986] FAULT_INJECTION: forcing a failure. [ 1019.262760][T18986] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.262790][T18986] CPU: 0 UID: 0 PID: 18986 Comm: syz.1.5149 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1019.262809][T18986] Tainted: [L]=SOFTLOCKUP [ 1019.262814][T18986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1019.262823][T18986] Call Trace: [ 1019.262829][T18986] [ 1019.262835][T18986] dump_stack_lvl+0xe8/0x150 [ 1019.262856][T18986] should_fail_ex+0x46b/0x600 [ 1019.262881][T18986] should_failslab+0xa8/0x100 [ 1019.262901][T18986] __kmalloc_noprof+0xdf/0x7b0 [ 1019.262918][T18986] ? tomoyo_encode+0x28b/0x550 [ 1019.262962][T18986] tomoyo_encode+0x28b/0x550 [ 1019.262990][T18986] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1019.263016][T18986] ? tomoyo_domain+0xd7/0x130 [ 1019.263046][T18986] ? tomoyo_path_number_perm+0x219/0x630 [ 1019.263077][T18986] tomoyo_path_number_perm+0x246/0x630 [ 1019.263100][T18986] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1019.263121][T18986] ? __lock_acquire+0x6b5/0x2d10 [ 1019.263139][T18986] ? do_raw_spin_lock+0x12b/0x2f0 [ 1019.263172][T18986] ? __fget_files+0x2a/0x420 [ 1019.263191][T18986] ? __fget_files+0x2a/0x420 [ 1019.263206][T18986] ? __fget_files+0x3a6/0x420 [ 1019.263221][T18986] ? __fget_files+0x2a/0x420 [ 1019.263240][T18986] security_file_ioctl+0xc3/0x2a0 [ 1019.263261][T18986] __se_sys_ioctl+0x47/0x170 [ 1019.263283][T18986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.263298][T18986] do_syscall_64+0x174/0x580 [ 1019.263319][T18986] ? trace_irq_disable+0x3b/0x140 [ 1019.263334][T18986] ? clear_bhb_loop+0x40/0x90 [ 1019.263352][T18986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.263366][T18986] RIP: 0033:0x7fd390e9ce59 [ 1019.263378][T18986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.263390][T18986] RSP: 002b:00007fd38f0ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1019.263405][T18986] RAX: ffffffffffffffda RBX: 00007fd391115fa0 RCX: 00007fd390e9ce59 [ 1019.263416][T18986] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000003 [ 1019.263425][T18986] RBP: 00007fd38f0ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1019.263434][T18986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.263442][T18986] R13: 00007fd391116038 R14: 00007fd391115fa0 R15: 00007ffd5562af38 [ 1019.263463][T18986] [ 1019.263476][T18986] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1019.429018][ T5764] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 1019.591596][ T5764] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1019.591626][ T5764] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1019.591654][ T5764] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1019.591693][ T5764] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 1019.591716][ T5764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.596386][ T5764] usb 1-1: config 0 descriptor?? [ 1019.597092][T18980] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1019.809028][ T5728] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1019.961892][ T5728] usb 4-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 1019.961985][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.013894][ T5728] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 1020.063226][ T5764] hid_parser_main: 5 callbacks suppressed [ 1020.063296][ T5764] lenovo 0003:17EF:6062.000C: unknown main item tag 0x0 [ 1020.063325][ T5764] lenovo 0003:17EF:6062.000C: unknown main item tag 0x0 [ 1020.063348][ T5764] lenovo 0003:17EF:6062.000C: unknown main item tag 0x0 [ 1020.063373][ T5764] lenovo 0003:17EF:6062.000C: unknown main item tag 0x0 [ 1020.063397][ T5764] lenovo 0003:17EF:6062.000C: unknown main item tag 0x0 [ 1020.063473][ T5764] lenovo 0003:17EF:6062.000C: unknown main item tag 0x0 [ 1020.063498][ T5764] lenovo 0003:17EF:6062.000C: unknown main item tag 0x0 [ 1020.063523][ T5764] lenovo 0003:17EF:6062.000C: unknown main item tag 0x0 [ 1020.063547][ T5764] lenovo 0003:17EF:6062.000C: unknown main item tag 0x0 [ 1020.063657][ T5764] lenovo 0003:17EF:6062.000C: unknown main item tag 0x0 [ 1020.100584][T19007] overlayfs: failed to resolve 'smackfstransmute=lowerdir': -2 [ 1020.170273][ T5764] lenovo 0003:17EF:6062.000C: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.0-1/input0 [ 1020.202050][ T5728] gspca_sn9c20x: Write register 1000 failed -71 [ 1020.202118][ T5728] gspca_sn9c20x: Device initialization failed [ 1020.202196][ T5728] gspca_sn9c20x 4-1:252.0: probe with driver gspca_sn9c20x failed with error -71 [ 1020.232159][ T5728] usb 4-1: USB disconnect, device number 10 [ 1020.273550][T11725] usb 1-1: USB disconnect, device number 26 [ 1020.301631][ T5742] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1020.354034][T19011] fido_id[19011]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1020.461464][ T5742] usb 3-1: Using ep0 maxpacket: 32 [ 1020.464260][ T5742] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1020.464283][ T5742] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1020.464307][ T5742] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.464320][ T5742] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1020.464334][ T5742] usb 3-1: config 1 has no interface number 0 [ 1020.464363][ T5742] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1020.464378][ T5742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.497214][ T5742] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1020.713249][ T5742] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 1020.713495][ T5742] snd_usb_pod 3-1:1.1: invalid control EP [ 1020.713505][ T5742] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 1020.713694][ T5742] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1020.714030][ T5742] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1020.815939][T19027] FAULT_INJECTION: forcing a failure. [ 1020.815939][T19027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.815972][T19027] CPU: 0 UID: 0 PID: 19027 Comm: syz.1.5166 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1020.815998][T19027] Tainted: [L]=SOFTLOCKUP [ 1020.816006][T19027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1020.816019][T19027] Call Trace: [ 1020.816027][T19027] [ 1020.816035][T19027] dump_stack_lvl+0xe8/0x150 [ 1020.816062][T19027] should_fail_ex+0x46b/0x600 [ 1020.816096][T19027] _copy_from_user+0x2d/0xb0 [ 1020.816119][T19027] video_usercopy+0x36f/0x1450 [ 1020.816160][T19027] ? __pfx___video_do_ioctl+0x10/0x10 [ 1020.816189][T19027] ? __pfx_video_usercopy+0x10/0x10 [ 1020.816223][T19027] ? __fget_files+0x2a/0x420 [ 1020.816249][T19027] ? __fget_files+0x2a/0x420 [ 1020.816272][T19027] ? __fget_files+0x3a6/0x420 [ 1020.816298][T19027] v4l2_ioctl+0x190/0x1e0 [ 1020.816323][T19027] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1020.816347][T19027] __se_sys_ioctl+0xff/0x170 [ 1020.816375][T19027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.816397][T19027] do_syscall_64+0x174/0x580 [ 1020.816425][T19027] ? trace_irq_disable+0x3b/0x140 [ 1020.816446][T19027] ? clear_bhb_loop+0x40/0x90 [ 1020.816470][T19027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.816491][T19027] RIP: 0033:0x7fd390e9ce59 [ 1020.816509][T19027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1020.816526][T19027] RSP: 002b:00007fd38f0ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1020.816546][T19027] RAX: ffffffffffffffda RBX: 00007fd391115fa0 RCX: 00007fd390e9ce59 [ 1020.816562][T19027] RDX: 0000200000000500 RSI: 00000000c100565c RDI: 0000000000000003 [ 1020.816575][T19027] RBP: 00007fd38f0ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.816588][T19027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.816600][T19027] R13: 00007fd391116038 R14: 00007fd391115fa0 R15: 00007ffd5562af38 [ 1020.816631][T19027] [ 1020.967509][ T5742] usb 3-1: USB disconnect, device number 29 [ 1020.990208][T19030] FAULT_INJECTION: forcing a failure. [ 1020.990208][T19030] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.990287][T19030] CPU: 1 UID: 0 PID: 19030 Comm: syz.3.5167 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1020.990357][T19030] Tainted: [L]=SOFTLOCKUP [ 1020.990376][T19030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1020.990406][T19030] Call Trace: [ 1020.990430][T19030] [ 1020.990449][T19030] dump_stack_lvl+0xe8/0x150 [ 1020.990518][T19030] should_fail_ex+0x46b/0x600 [ 1020.990606][T19030] should_failslab+0xa8/0x100 [ 1020.990687][T19030] kmem_cache_alloc_noprof+0x87/0x680 [ 1020.990756][T19030] ? xfrm_state_alloc+0x24/0x2f0 [ 1020.990834][T19030] xfrm_state_alloc+0x24/0x2f0 [ 1020.990904][T19030] xfrm_state_find+0x3a78/0x5eb0 [ 1020.990981][T19030] ? __lock_acquire+0x6b5/0x2d10 [ 1020.991037][T19030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.991114][T19030] ? __pfx_pointer+0x10/0x10 [ 1020.991182][T19030] ? xfrm_state_find+0x2e3/0x5eb0 [ 1020.991293][T19030] ? __pfx_xfrm_state_find+0x10/0x10 [ 1020.991395][T19030] ? snprintf+0xe8/0x140 [ 1020.991466][T19030] xfrm_resolve_and_create_bundle+0x81c/0x30c0 [ 1020.991572][T19030] ? __lock_acquire+0x6b5/0x2d10 [ 1020.991651][T19030] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 1020.991720][T19030] ? __asan_memmove+0x40/0x70 [ 1020.991772][T19030] ? save_dst_trace_buffer+0x43d/0x5b0 [ 1020.991848][T19030] ? xfrm_sk_policy_lookup+0x90/0x730 [ 1020.991933][T19030] ? xfrm_sk_policy_lookup+0x6df/0x730 [ 1020.992013][T19030] ? xfrm_expand_policies+0x48f/0x740 [ 1020.992085][T19030] xfrm_lookup_with_ifid+0x28b/0x1bf0 [ 1020.992167][T19030] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 1020.992230][T19030] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1020.992319][T19030] xfrm_lookup_route+0x3c/0x1c0 [ 1020.992379][T19030] __ip4_datagram_connect+0x9a5/0x1270 [ 1020.992491][T19030] __ip6_datagram_connect+0x9f0/0x1150 [ 1020.992586][T19030] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 1020.992673][T19030] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1020.992761][T19030] ip6_datagram_connect_v6_only+0x63/0xa0 [ 1020.992840][T19030] __sys_connect+0x315/0x450 [ 1020.992912][T19030] ? __pfx___sys_connect+0x10/0x10 [ 1020.993004][T19030] ? __pfx_ksys_write+0x10/0x10 [ 1020.993082][T19030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.993134][T19030] __x64_sys_connect+0x7a/0x90 [ 1020.993201][T19030] do_syscall_64+0x174/0x580 [ 1020.993271][T19030] ? trace_irq_disable+0x3b/0x140 [ 1020.993329][T19030] ? clear_bhb_loop+0x40/0x90 [ 1020.993380][T19030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.993432][T19030] RIP: 0033:0x7faef290ce59 [ 1020.993483][T19030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1020.993521][T19030] RSP: 002b:00007faef0b66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1020.993556][T19030] RAX: ffffffffffffffda RBX: 00007faef2b85fa0 RCX: 00007faef290ce59 [ 1020.993572][T19030] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 1020.993585][T19030] RBP: 00007faef0b66090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.993598][T19030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.993611][T19030] R13: 00007faef2b86038 R14: 00007faef2b85fa0 R15: 00007ffd68a9d468 [ 1020.993716][T19030] [ 1021.459899][T19040] FAULT_INJECTION: forcing a failure. [ 1021.459899][T19040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1021.459933][T19040] CPU: 0 UID: 0 PID: 19040 Comm: syz.1.5172 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1021.459960][T19040] Tainted: [L]=SOFTLOCKUP [ 1021.459968][T19040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1021.459980][T19040] Call Trace: [ 1021.459988][T19040] [ 1021.459997][T19040] dump_stack_lvl+0xe8/0x150 [ 1021.460024][T19040] should_fail_ex+0x46b/0x600 [ 1021.460059][T19040] _copy_to_user+0x31/0xb0 [ 1021.460084][T19040] simple_read_from_buffer+0xe1/0x170 [ 1021.460114][T19040] proc_fail_nth_read+0x1be/0x230 [ 1021.460145][T19040] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1021.460171][T19040] ? rw_verify_area+0x2ac/0x4e0 [ 1021.460198][T19040] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1021.460223][T19040] vfs_read+0x212/0xa80 [ 1021.460258][T19040] ? __pfx_vfs_read+0x10/0x10 [ 1021.460288][T19040] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1021.460318][T19040] ? lockdep_hardirqs_on+0x7a/0x110 [ 1021.460347][T19040] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1021.460377][T19040] ? mutex_lock_nested+0x152/0x1d0 [ 1021.460400][T19040] ? fdget_pos+0x252/0x320 [ 1021.460431][T19040] ksys_read+0x156/0x270 [ 1021.460461][T19040] ? __pfx_ksys_read+0x10/0x10 [ 1021.460496][T19040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.460518][T19040] do_syscall_64+0x174/0x580 [ 1021.460546][T19040] ? trace_irq_disable+0x3b/0x140 [ 1021.460569][T19040] ? clear_bhb_loop+0x40/0x90 [ 1021.460601][T19040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.460622][T19040] RIP: 0033:0x7fd390e5d68e [ 1021.460641][T19040] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1021.460659][T19040] RSP: 002b:00007fd38f0edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1021.460679][T19040] RAX: ffffffffffffffda RBX: 00007fd38f0ee6c0 RCX: 00007fd390e5d68e [ 1021.460694][T19040] RDX: 000000000000000f RSI: 00007fd38f0ee0a0 RDI: 0000000000000005 [ 1021.460707][T19040] RBP: 00007fd38f0ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1021.460719][T19040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1021.460731][T19040] R13: 00007fd391116038 R14: 00007fd391115fa0 R15: 00007ffd5562af38 [ 1021.460763][T19040] [ 1021.679471][T11725] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1021.829043][T11725] usb 1-1: Using ep0 maxpacket: 32 [ 1021.833563][T11725] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.835819][T11725] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1021.835846][T11725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.835867][T11725] usb 1-1: Product: syz [ 1021.835881][T11725] usb 1-1: Manufacturer: syz [ 1021.835897][T11725] usb 1-1: SerialNumber: syz [ 1021.897349][T11725] usb 1-1: config 0 descriptor?? [ 1021.920513][T11725] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1022.259152][ T1595] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1022.282959][T19070] FAULT_INJECTION: forcing a failure. [ 1022.282959][T19070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1022.282993][T19070] CPU: 1 UID: 0 PID: 19070 Comm: syz.1.5185 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1022.283023][T19070] Tainted: [L]=SOFTLOCKUP [ 1022.283038][T19070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1022.283050][T19070] Call Trace: [ 1022.283058][T19070] [ 1022.283067][T19070] dump_stack_lvl+0xe8/0x150 [ 1022.283095][T19070] should_fail_ex+0x46b/0x600 [ 1022.283130][T19070] _copy_from_user+0x2d/0xb0 [ 1022.283155][T19070] __ia32_sys_rt_sigreturn+0x379/0x8e0 [ 1022.283179][T19070] ? __lock_acquire+0x6b5/0x2d10 [ 1022.283208][T19070] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 1022.283255][T19070] ? __task_pid_nr_ns+0x28/0x470 [ 1022.283286][T19070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.283307][T19070] do_syscall_64+0x174/0x580 [ 1022.283337][T19070] ? trace_irq_disable+0x3b/0x140 [ 1022.283360][T19070] ? clear_bhb_loop+0x40/0x90 [ 1022.283385][T19070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.283405][T19070] RIP: 0033:0x7fd390e3e1d9 [ 1022.283424][T19070] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 1022.283442][T19070] RSP: 002b:00007fd38f0eda80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 1022.283464][T19070] RAX: ffffffffffffffda RBX: 00007fd391115fa0 RCX: 00007fd390e3e1d9 [ 1022.283479][T19070] RDX: 00007fd38f0eda80 RSI: 00007fd38f0edbb0 RDI: 0000000000000021 [ 1022.283493][T19070] RBP: 00007fd38f0ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1022.283505][T19070] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 1022.283518][T19070] R13: 00007fd391116038 R14: 00007fd391115fa0 R15: 00007ffd5562af38 [ 1022.283548][T19070] [ 1022.529068][ T1595] usb 4-1: Using ep0 maxpacket: 16 [ 1022.530886][ T1595] usb 4-1: config index 0 descriptor too short (expected 37359, got 202) [ 1022.530911][ T1595] usb 4-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 1022.530932][ T1595] usb 4-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.530952][ T1595] usb 4-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 1022.533876][ T1595] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1022.533901][ T1595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.533921][ T1595] usb 4-1: Product: syz [ 1022.533935][ T1595] usb 4-1: Manufacturer: syz [ 1022.533950][ T1595] usb 4-1: SerialNumber: syz [ 1022.549014][ T5764] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1022.676125][ T1595] usb 4-1: 0:2 : does not exist [ 1022.708967][ T5764] usb 3-1: Using ep0 maxpacket: 32 [ 1022.711830][ T5764] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1022.711855][ T5764] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1022.711926][ T5764] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.711946][ T5764] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1022.711967][ T5764] usb 3-1: config 1 has no interface number 0 [ 1022.712017][ T5764] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1022.712092][ T5764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.796620][ T5764] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1022.853121][T11725] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input46 [ 1022.893544][ T1595] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1022.996496][T11725] usb 1-1: USB disconnect, device number 27 [ 1022.998288][ T5764] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 1022.998644][ T5764] snd_usb_pod 3-1:1.1: invalid control EP [ 1022.998658][ T5764] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 1023.042482][ T5764] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1023.044844][ T5764] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1023.155896][ T1595] usb 4-1: USB disconnect, device number 11 [ 1023.225312][T11726] usb 3-1: USB disconnect, device number 30 [ 1023.385656][T11621] udevd[11621]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1023.577606][T19087] FAULT_INJECTION: forcing a failure. [ 1023.577606][T19087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1023.577641][T19087] CPU: 1 UID: 0 PID: 19087 Comm: syz.1.5190 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1023.577669][T19087] Tainted: [L]=SOFTLOCKUP [ 1023.577677][T19087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1023.577690][T19087] Call Trace: [ 1023.577698][T19087] [ 1023.577707][T19087] dump_stack_lvl+0xe8/0x150 [ 1023.577734][T19087] should_fail_ex+0x46b/0x600 [ 1023.577768][T19087] _copy_from_iter+0x1d3/0x1670 [ 1023.577796][T19087] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1023.577820][T19087] ? __alloc_skb+0x27d/0x7d0 [ 1023.577846][T19087] ? __pfx__copy_from_iter+0x10/0x10 [ 1023.577865][T19087] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1023.577889][T19087] ? __alloc_skb+0x27d/0x7d0 [ 1023.577922][T19087] ? netlink_sendmsg+0x650/0xb40 [ 1023.577947][T19087] ? skb_put+0x11b/0x210 [ 1023.577979][T19087] netlink_sendmsg+0x6c0/0xb40 [ 1023.578008][T19087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1023.578030][T19087] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1023.578060][T19087] ? aa_sock_msg_perm+0x122/0x200 [ 1023.578083][T19087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1023.578102][T19087] sock_sendmsg_nosec+0x13a/0x180 [ 1023.578129][T19087] ____sys_sendmsg+0x55c/0x870 [ 1023.578165][T19087] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1023.578205][T19087] ? import_iovec+0x73/0xa0 [ 1023.578232][T19087] ___sys_sendmsg+0x2a5/0x360 [ 1023.578261][T19087] ? __lock_acquire+0x6b5/0x2d10 [ 1023.578290][T19087] ? __pfx____sys_sendmsg+0x10/0x10 [ 1023.578351][T19087] ? __fget_files+0x2a/0x420 [ 1023.578375][T19087] ? __fget_files+0x3a6/0x420 [ 1023.578407][T19087] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1023.578444][T19087] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1023.578481][T19087] ? __pfx_ksys_write+0x10/0x10 [ 1023.578515][T19087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.578536][T19087] do_syscall_64+0x174/0x580 [ 1023.578565][T19087] ? trace_irq_disable+0x3b/0x140 [ 1023.578588][T19087] ? clear_bhb_loop+0x40/0x90 [ 1023.578612][T19087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.578631][T19087] RIP: 0033:0x7fd390e9ce59 [ 1023.578649][T19087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.578668][T19087] RSP: 002b:00007fd38f0ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1023.578689][T19087] RAX: ffffffffffffffda RBX: 00007fd391115fa0 RCX: 00007fd390e9ce59 [ 1023.578705][T19087] RDX: 0000000000000014 RSI: 0000200000000800 RDI: 0000000000000003 [ 1023.578718][T19087] RBP: 00007fd38f0ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.578730][T19087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.578743][T19087] R13: 00007fd391116038 R14: 00007fd391115fa0 R15: 00007ffd5562af38 [ 1023.578772][T19087] [ 1023.939072][ T5742] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1024.099701][ T5742] usb 1-1: Using ep0 maxpacket: 32 [ 1024.101976][ T5742] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1024.102001][ T5742] usb 1-1: config 0 has no interface number 0 [ 1024.131090][ T5742] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1024.131117][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.131138][ T5742] usb 1-1: Product: syz [ 1024.131153][ T5742] usb 1-1: Manufacturer: syz [ 1024.131168][ T5742] usb 1-1: SerialNumber: syz [ 1024.150960][ T5742] usb 1-1: config 0 descriptor?? [ 1024.193658][ T5742] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1024.193684][ T5742] usb 1-1: selecting invalid altsetting 1 [ 1024.193701][ T5742] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1024.232489][ T5742] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1024.232818][ T5742] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1024.236458][ T5742] usb 1-1: media controller created [ 1024.334550][ T5742] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1024.380301][T11725] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1024.479589][ T5742] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1024.479639][ T5742] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1024.480918][ T5742] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1024.531191][T11725] usb 3-1: Using ep0 maxpacket: 16 [ 1024.537335][T11725] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 1024.537362][T11725] usb 3-1: config 0 has no interface number 0 [ 1024.537409][T11725] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1024.537438][T11725] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1024.567558][T11725] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1024.567622][T11725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.567668][T11725] usb 3-1: Product: syz [ 1024.567702][T11725] usb 3-1: Manufacturer: syz [ 1024.567731][T11725] usb 3-1: SerialNumber: syz [ 1024.607751][T11725] usb 3-1: config 0 descriptor?? [ 1024.608695][T19102] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1024.608861][T19102] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1024.716820][ T5742] usb 1-1: USB disconnect, device number 28 [ 1024.759004][ T1595] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1024.816844][T19102] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1024.817025][T19102] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1024.908958][ T1595] usb 4-1: Using ep0 maxpacket: 16 [ 1024.910932][ T1595] usb 4-1: config index 0 descriptor too short (expected 37359, got 202) [ 1024.910956][ T1595] usb 4-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 1024.910978][ T1595] usb 4-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.910997][ T1595] usb 4-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 1024.913952][ T1595] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1024.913979][ T1595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.914000][ T1595] usb 4-1: Product: syz [ 1024.914014][ T1595] usb 4-1: Manufacturer: syz [ 1024.914029][ T1595] usb 4-1: SerialNumber: syz [ 1025.018428][T11725] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1025.109385][ T1595] usb 4-1: 0:2 : does not exist [ 1025.222026][T11725] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1025.222055][T11725] asix 3-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 1025.222326][T11725] asix 3-1:0.34: probe with driver asix failed with error -32 [ 1025.261147][ T1595] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1025.377356][ T1595] usb 4-1: USB disconnect, device number 12 [ 1025.421603][T19116] FAULT_INJECTION: forcing a failure. [ 1025.421603][T19116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1025.421631][T19116] CPU: 1 UID: 0 PID: 19116 Comm: syz.1.5204 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1025.421653][T19116] Tainted: [L]=SOFTLOCKUP [ 1025.421659][T19116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1025.421670][T19116] Call Trace: [ 1025.421676][T19116] [ 1025.421683][T19116] dump_stack_lvl+0xe8/0x150 [ 1025.421706][T19116] should_fail_ex+0x46b/0x600 [ 1025.421735][T19116] _copy_from_user+0x2d/0xb0 [ 1025.421754][T19116] vmemdup_user+0x5e/0xd0 [ 1025.421771][T19116] path_setxattrat+0x2c3/0x440 [ 1025.421803][T19116] ? __pfx_path_setxattrat+0x10/0x10 [ 1025.421855][T19116] ? ksys_write+0x248/0x270 [ 1025.421882][T19116] ? __pfx_ksys_write+0x10/0x10 [ 1025.421910][T19116] __x64_sys_lsetxattr+0xbf/0xe0 [ 1025.421933][T19116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.421952][T19116] do_syscall_64+0x174/0x580 [ 1025.421977][T19116] ? trace_irq_disable+0x3b/0x140 [ 1025.421996][T19116] ? clear_bhb_loop+0x40/0x90 [ 1025.422016][T19116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.422032][T19116] RIP: 0033:0x7fd390e9ce59 [ 1025.422048][T19116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.422062][T19116] RSP: 002b:00007fd38f0ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1025.422081][T19116] RAX: ffffffffffffffda RBX: 00007fd391115fa0 RCX: 00007fd390e9ce59 [ 1025.422096][T19116] RDX: 0000200000001300 RSI: 0000200000001200 RDI: 0000200000000000 [ 1025.422108][T19116] RBP: 00007fd38f0ee090 R08: 0000000000000001 R09: 0000000000000000 [ 1025.422118][T19116] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 1025.422127][T19116] R13: 00007fd391116038 R14: 00007fd391115fa0 R15: 00007ffd5562af38 [ 1025.422150][T19116] [ 1025.716237][T11616] udevd[11616]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1026.143130][T19129] FAULT_INJECTION: forcing a failure. [ 1026.143130][T19129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1026.143166][T19129] CPU: 1 UID: 0 PID: 19129 Comm: syz.1.5209 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1026.143194][T19129] Tainted: [L]=SOFTLOCKUP [ 1026.143202][T19129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1026.143215][T19129] Call Trace: [ 1026.143223][T19129] [ 1026.143232][T19129] dump_stack_lvl+0xe8/0x150 [ 1026.143260][T19129] should_fail_ex+0x46b/0x600 [ 1026.143295][T19129] _copy_from_iter+0x1d3/0x1670 [ 1026.143322][T19129] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1026.143345][T19129] ? __alloc_skb+0x27d/0x7d0 [ 1026.143373][T19129] ? __pfx__copy_from_iter+0x10/0x10 [ 1026.143392][T19129] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1026.143416][T19129] ? __alloc_skb+0x27d/0x7d0 [ 1026.143448][T19129] ? netlink_sendmsg+0x650/0xb40 [ 1026.143467][T19129] ? skb_put+0x11b/0x210 [ 1026.143498][T19129] netlink_sendmsg+0x6c0/0xb40 [ 1026.143526][T19129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1026.143547][T19129] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1026.143578][T19129] ? aa_sock_msg_perm+0x122/0x200 [ 1026.143601][T19129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1026.143619][T19129] sock_sendmsg_nosec+0x13a/0x180 [ 1026.143647][T19129] ____sys_sendmsg+0x55c/0x870 [ 1026.143684][T19129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1026.143724][T19129] ? import_iovec+0x73/0xa0 [ 1026.143750][T19129] ___sys_sendmsg+0x2a5/0x360 [ 1026.143779][T19129] ? __lock_acquire+0x6b5/0x2d10 [ 1026.143808][T19129] ? __pfx____sys_sendmsg+0x10/0x10 [ 1026.143876][T19129] ? __fget_files+0x2a/0x420 [ 1026.143900][T19129] ? __fget_files+0x3a6/0x420 [ 1026.143933][T19129] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1026.143967][T19129] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1026.144010][T19129] ? __pfx_ksys_write+0x10/0x10 [ 1026.144045][T19129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.144066][T19129] do_syscall_64+0x174/0x580 [ 1026.144096][T19129] ? trace_irq_disable+0x3b/0x140 [ 1026.144118][T19129] ? clear_bhb_loop+0x40/0x90 [ 1026.144141][T19129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.144161][T19129] RIP: 0033:0x7fd390e9ce59 [ 1026.144179][T19129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1026.144197][T19129] RSP: 002b:00007fd38f0ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1026.144218][T19129] RAX: ffffffffffffffda RBX: 00007fd391115fa0 RCX: 00007fd390e9ce59 [ 1026.144233][T19129] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1026.144247][T19129] RBP: 00007fd38f0ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.144260][T19129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.144272][T19129] R13: 00007fd391116038 R14: 00007fd391115fa0 R15: 00007ffd5562af38 [ 1026.144302][T19129] [ 1026.405410][ T1595] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1026.558058][ T5653] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1026.604678][ T5653] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1026.606093][ T5653] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1026.608054][ T5653] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1026.610796][ T1595] usb 4-1: Using ep0 maxpacket: 8 [ 1026.616259][ T5653] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1026.645807][ T1595] usb 4-1: config index 0 descriptor too short (expected 26, got 18) [ 1026.645832][ T1595] usb 4-1: config 0 has an invalid interface number: 207 but max is 0 [ 1026.645851][ T1595] usb 4-1: config 0 has no interface number 0 [ 1026.645881][ T1595] usb 4-1: too many endpoints for config 0 interface 207 altsetting 82: 252, using maximum allowed: 30 [ 1026.645917][ T1595] usb 4-1: config 0 interface 207 altsetting 82 has 0 endpoint descriptors, different from the interface descriptor's value: 252 [ 1026.645944][ T1595] usb 4-1: config 0 interface 207 has no altsetting 0 [ 1026.653251][ T1595] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1026.653285][ T1595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.653306][ T1595] usb 4-1: Product: syz [ 1026.653320][ T1595] usb 4-1: Manufacturer: syz [ 1026.653335][ T1595] usb 4-1: SerialNumber: syz [ 1026.841448][ T1595] usb 4-1: config 0 descriptor?? [ 1027.070757][ T1595] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1027.071157][ T1595] gspca_sq930x: reg_r 001f failed -71 [ 1027.071229][ T1595] sq930x 4-1:0.207: probe with driver sq930x failed with error -71 [ 1027.077114][ T1595] usb 4-1: USB disconnect, device number 13 [ 1027.162068][T15875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.207618][ T5728] usb 3-1: USB disconnect, device number 31 [ 1027.768321][ T5728] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 1027.811643][T15875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.926459][ T5728] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1027.926487][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.926506][ T5728] usb 3-1: Product: syz [ 1027.926521][ T5728] usb 3-1: Manufacturer: syz [ 1027.926535][ T5728] usb 3-1: SerialNumber: syz [ 1027.956557][ T5728] usb 3-1: config 0 descriptor?? [ 1028.169166][ T5728] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1028.254218][ T5728] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1028.264975][ T5728] usb 3-1: USB disconnect, device number 32 [ 1028.309162][ T5742] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1028.433951][T15875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.476690][T19180] netlink: 'syz.2.5226': attribute type 10 has an invalid length. [ 1028.489037][ T5742] usb 4-1: Using ep0 maxpacket: 16 [ 1028.490939][ T5742] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 1028.490963][ T5742] usb 4-1: config 0 has no interface number 0 [ 1028.491016][ T5742] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1028.491042][ T5742] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1028.493169][ T5742] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1028.493192][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.493211][ T5742] usb 4-1: Product: syz [ 1028.493224][ T5742] usb 4-1: Manufacturer: syz [ 1028.493237][ T5742] usb 4-1: SerialNumber: syz [ 1028.574078][ T5742] usb 4-1: config 0 descriptor?? [ 1028.575081][T19166] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1028.575269][T19166] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1028.677877][T19180] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.698409][T19180] bond0: (slave team0): Enslaving as an active interface with an up link [ 1028.781686][T19166] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1028.781857][T19166] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1028.959102][ T5660] Bluetooth: hci0: command tx timeout [ 1028.986488][ T5742] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1029.114321][T15875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.187389][ T5742] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1029.187416][ T5742] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 1029.187665][ T5742] asix 4-1:0.34: probe with driver asix failed with error -32 [ 1029.472846][T19207] FAULT_INJECTION: forcing a failure. [ 1029.472846][T19207] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.472870][T19207] CPU: 1 UID: 0 PID: 19207 Comm: syz.2.5238 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1029.472889][T19207] Tainted: [L]=SOFTLOCKUP [ 1029.472894][T19207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1029.472904][T19207] Call Trace: [ 1029.472909][T19207] [ 1029.472916][T19207] dump_stack_lvl+0xe8/0x150 [ 1029.472935][T19207] should_fail_ex+0x46b/0x600 [ 1029.472960][T19207] should_failslab+0xa8/0x100 [ 1029.472980][T19207] __kmalloc_noprof+0xdf/0x7b0 [ 1029.472996][T19207] ? kfree+0x4d/0x6c0 [ 1029.473010][T19207] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1029.473031][T19207] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1029.473049][T19207] ? tomoyo_domain+0xd7/0x130 [ 1029.473069][T19207] ? tomoyo_path_number_perm+0x219/0x630 [ 1029.473091][T19207] tomoyo_path_number_perm+0x246/0x630 [ 1029.473115][T19207] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1029.473136][T19207] ? __lock_acquire+0x6b5/0x2d10 [ 1029.473155][T19207] ? do_raw_spin_lock+0x12b/0x2f0 [ 1029.473194][T19207] ? __fget_files+0x2a/0x420 [ 1029.473212][T19207] ? __fget_files+0x2a/0x420 [ 1029.473228][T19207] ? __fget_files+0x3a6/0x420 [ 1029.473243][T19207] ? __fget_files+0x2a/0x420 [ 1029.473262][T19207] security_file_ioctl+0xc3/0x2a0 [ 1029.473284][T19207] __se_sys_ioctl+0x47/0x170 [ 1029.473305][T19207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.473320][T19207] do_syscall_64+0x174/0x580 [ 1029.473341][T19207] ? trace_irq_disable+0x3b/0x140 [ 1029.473357][T19207] ? clear_bhb_loop+0x40/0x90 [ 1029.473374][T19207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.473389][T19207] RIP: 0033:0x7f252089ce59 [ 1029.473401][T19207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.473414][T19207] RSP: 002b:00007f251eaf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1029.473428][T19207] RAX: ffffffffffffffda RBX: 00007f2520b15fa0 RCX: 00007f252089ce59 [ 1029.473439][T19207] RDX: 00002000000001c0 RSI: 0000000000004c04 RDI: 0000000000000003 [ 1029.473448][T19207] RBP: 00007f251eaf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.473457][T19207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1029.473465][T19207] R13: 00007f2520b16038 R14: 00007f2520b15fa0 R15: 00007fff9eef8838 [ 1029.473486][T19207] [ 1029.473492][T19207] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1029.564348][ T5742] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 1029.752863][ T5742] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1029.753402][ T5742] usb 2-1: not running at top speed; connect to a high speed hub [ 1029.754732][ T5742] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 1029.754758][ T5742] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.754778][ T5742] usb 2-1: config 4 has no interface number 0 [ 1029.757125][ T5742] usb 2-1: Dual-Role OTG device on HNP port [ 1029.757375][ T5742] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1029.757392][ T5742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 1029.757406][ T5742] usb 2-1: Product: syz [ 1029.757415][ T5742] usb 2-1: Manufacturer: syz [ 1029.757424][ T5742] usb 2-1: SerialNumber: syz [ 1030.111992][ T5742] uvcvideo 2-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 1030.112201][ T5742] uvcvideo 2-1:4.147: No valid video chain found. [ 1030.136534][ T5742] usb 2-1: USB disconnect, device number 31 [ 1030.619702][T15875] bridge_slave_1: left allmulticast mode [ 1030.619735][T15875] bridge_slave_1: left promiscuous mode [ 1030.619987][T15875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.802446][T15875] bridge_slave_0: left allmulticast mode [ 1030.802477][T15875] bridge_slave_0: left promiscuous mode [ 1030.808368][T15875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.834202][T19239] FAULT_INJECTION: forcing a failure. [ 1030.834202][T19239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1030.834229][T19239] CPU: 1 UID: 0 PID: 19239 Comm: syz.2.5243 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1030.834251][T19239] Tainted: [L]=SOFTLOCKUP [ 1030.834258][T19239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1030.834268][T19239] Call Trace: [ 1030.834274][T19239] [ 1030.834285][T19239] dump_stack_lvl+0xe8/0x150 [ 1030.834308][T19239] should_fail_ex+0x46b/0x600 [ 1030.834337][T19239] _copy_to_user+0x31/0xb0 [ 1030.834359][T19239] simple_read_from_buffer+0xe1/0x170 [ 1030.834383][T19239] proc_fail_nth_read+0x1be/0x230 [ 1030.834406][T19239] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1030.834428][T19239] ? rw_verify_area+0x2ac/0x4e0 [ 1030.834454][T19239] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1030.834477][T19239] vfs_read+0x212/0xa80 [ 1030.834506][T19239] ? __pfx_vfs_read+0x10/0x10 [ 1030.834531][T19239] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1030.834559][T19239] ? lockdep_hardirqs_on+0x7a/0x110 [ 1030.834586][T19239] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1030.834612][T19239] ? mutex_lock_nested+0x152/0x1d0 [ 1030.834631][T19239] ? fdget_pos+0x252/0x320 [ 1030.834659][T19239] ksys_read+0x156/0x270 [ 1030.834685][T19239] ? __pfx_ksys_read+0x10/0x10 [ 1030.834709][T19239] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 1030.834737][T19239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.834757][T19239] do_syscall_64+0x174/0x580 [ 1030.834785][T19239] ? trace_irq_disable+0x3b/0x140 [ 1030.834805][T19239] ? clear_bhb_loop+0x40/0x90 [ 1030.834825][T19239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.834841][T19239] RIP: 0033:0x7f252085d68e [ 1030.834856][T19239] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1030.834870][T19239] RSP: 002b:00007f251eaf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1030.834888][T19239] RAX: ffffffffffffffda RBX: 00007f251eaf66c0 RCX: 00007f252085d68e [ 1030.834900][T19239] RDX: 000000000000000f RSI: 00007f251eaf60a0 RDI: 0000000000000004 [ 1030.834911][T19239] RBP: 00007f251eaf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.834922][T19239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.834931][T19239] R13: 00007f2520b16038 R14: 00007f2520b15fa0 R15: 00007fff9eef8838 [ 1030.834969][T19239] [ 1031.038969][ T5660] Bluetooth: hci0: command tx timeout [ 1031.162665][ T5742] usb 4-1: USB disconnect, device number 14 [ 1031.322599][T19250] netlink: 'syz.3.5246': attribute type 10 has an invalid length. [ 1031.649086][ T5742] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1031.809221][ T5742] usb 3-1: Using ep0 maxpacket: 8 [ 1031.815522][ T5742] usb 3-1: config index 0 descriptor too short (expected 26, got 18) [ 1031.815548][ T5742] usb 3-1: config 0 has an invalid interface number: 207 but max is 0 [ 1031.815567][ T5742] usb 3-1: config 0 has no interface number 0 [ 1031.815594][ T5742] usb 3-1: too many endpoints for config 0 interface 207 altsetting 82: 252, using maximum allowed: 30 [ 1031.815618][ T5742] usb 3-1: config 0 interface 207 altsetting 82 has 0 endpoint descriptors, different from the interface descriptor's value: 252 [ 1031.815636][ T5742] usb 3-1: config 0 interface 207 has no altsetting 0 [ 1031.817856][ T5742] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1031.817882][ T5742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.817901][ T5742] usb 3-1: Product: syz [ 1031.817916][ T5742] usb 3-1: Manufacturer: syz [ 1031.817930][ T5742] usb 3-1: SerialNumber: syz [ 1031.840069][ T5742] usb 3-1: config 0 descriptor?? [ 1031.875383][ T37] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1032.059004][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 1032.063703][ T37] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1032.063730][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.063750][ T37] usb 2-1: Product: syz [ 1032.063812][ T37] usb 2-1: Manufacturer: syz [ 1032.063831][ T37] usb 2-1: SerialNumber: syz [ 1032.076525][ T37] usb 2-1: config 0 descriptor?? [ 1032.126774][ T5742] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1032.129953][ T5742] gspca_sq930x: reg_r 001f failed -71 [ 1032.130145][ T5742] sq930x 3-1:0.207: probe with driver sq930x failed with error -71 [ 1032.150878][ T5742] usb 3-1: USB disconnect, device number 33 [ 1032.239700][T15875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.316638][ T37] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 1032.316681][ T37] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1032.345125][T15875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1032.346828][ T37] usb 2-1: USB disconnect, device number 32 [ 1032.377775][T15875] bond0 (unregistering): Released all slaves [ 1032.479923][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1032.492035][T19264] batadv_slave_0: entered promiscuous mode [ 1032.494242][T19131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.494559][T19131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.494763][T19131] bridge_slave_0: entered allmulticast mode [ 1032.533035][T19131] bridge_slave_0: entered promiscuous mode [ 1032.563900][T19270] batadv_slave_0: left promiscuous mode [ 1032.589220][T19131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.591046][T19131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.591303][T19131] bridge_slave_1: entered allmulticast mode [ 1032.594575][T19131] bridge_slave_1: entered promiscuous mode [ 1032.683637][T19131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.699543][T19131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1032.775627][T19273] FAULT_INJECTION: forcing a failure. [ 1032.775627][T19273] name failslab, interval 1, probability 0, space 0, times 0 [ 1032.775663][T19273] CPU: 1 UID: 0 PID: 19273 Comm: syz.2.5256 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1032.775692][T19273] Tainted: [L]=SOFTLOCKUP [ 1032.775701][T19273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1032.775715][T19273] Call Trace: [ 1032.775724][T19273] [ 1032.775734][T19273] dump_stack_lvl+0xe8/0x150 [ 1032.775763][T19273] should_fail_ex+0x46b/0x600 [ 1032.775800][T19273] should_failslab+0xa8/0x100 [ 1032.775831][T19273] kmem_cache_alloc_noprof+0x87/0x680 [ 1032.775857][T19273] ? skb_clone+0x212/0x3a0 [ 1032.775883][T19273] skb_clone+0x212/0x3a0 [ 1032.775907][T19273] __netlink_deliver_tap+0x424/0x8b0 [ 1032.775952][T19273] ? netlink_deliver_tap+0x2e/0x1b0 [ 1032.775997][T19273] netlink_deliver_tap+0x19c/0x1b0 [ 1032.776030][T19273] netlink_unicast+0x754/0x920 [ 1032.776072][T19273] netlink_sendmsg+0x813/0xb40 [ 1032.776100][T19273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1032.776122][T19273] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1032.776152][T19273] ? aa_sock_msg_perm+0x122/0x200 [ 1032.776174][T19273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1032.776193][T19273] sock_sendmsg_nosec+0x13a/0x180 [ 1032.776219][T19273] ____sys_sendmsg+0x55c/0x870 [ 1032.776253][T19273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1032.776293][T19273] ? import_iovec+0x73/0xa0 [ 1032.776326][T19273] ___sys_sendmsg+0x2a5/0x360 [ 1032.776356][T19273] ? __lock_acquire+0x6b5/0x2d10 [ 1032.776384][T19273] ? __pfx____sys_sendmsg+0x10/0x10 [ 1032.776446][T19273] ? __fget_files+0x2a/0x420 [ 1032.776469][T19273] ? __fget_files+0x3a6/0x420 [ 1032.776503][T19273] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1032.776536][T19273] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1032.776576][T19273] ? __pfx_ksys_write+0x10/0x10 [ 1032.776611][T19273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.776633][T19273] do_syscall_64+0x174/0x580 [ 1032.776661][T19273] ? trace_irq_disable+0x3b/0x140 [ 1032.776683][T19273] ? clear_bhb_loop+0x40/0x90 [ 1032.776708][T19273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.776728][T19273] RIP: 0033:0x7f252089ce59 [ 1032.776746][T19273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.776763][T19273] RSP: 002b:00007f251eaf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1032.776783][T19273] RAX: ffffffffffffffda RBX: 00007f2520b15fa0 RCX: 00007f252089ce59 [ 1032.776798][T19273] RDX: 0000000020048054 RSI: 0000200000000000 RDI: 0000000000000003 [ 1032.776812][T19273] RBP: 00007f251eaf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1032.776825][T19273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1032.776837][T19273] R13: 00007f2520b16038 R14: 00007f2520b15fa0 R15: 00007fff9eef8838 [ 1032.776868][T19273] [ 1033.120219][ T5660] Bluetooth: hci0: command tx timeout [ 1033.190139][T19278] FAULT_INJECTION: forcing a failure. [ 1033.190139][T19278] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.190174][T19278] CPU: 1 UID: 0 PID: 19278 Comm: syz.1.5258 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1033.190203][T19278] Tainted: [L]=SOFTLOCKUP [ 1033.190211][T19278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1033.190225][T19278] Call Trace: [ 1033.190243][T19278] [ 1033.190252][T19278] dump_stack_lvl+0xe8/0x150 [ 1033.190281][T19278] should_fail_ex+0x46b/0x600 [ 1033.190316][T19278] should_failslab+0xa8/0x100 [ 1033.190347][T19278] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1033.190372][T19278] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1033.190396][T19278] ? dup_task_struct+0x52/0x860 [ 1033.190433][T19278] dup_task_struct+0x52/0x860 [ 1033.190464][T19278] ? rt_spin_unlock+0x160/0x200 [ 1033.190492][T19278] copy_process+0x837/0x43d0 [ 1033.190572][T19278] ? __pfx_copy_process+0x10/0x10 [ 1033.190622][T19278] vhost_task_create+0x1f9/0x380 [ 1033.190649][T19278] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1033.190681][T19278] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1033.190715][T19278] ? __pfx_vhost_task_create+0x10/0x10 [ 1033.190751][T19278] ? __pfx_vhost_task_fn+0x10/0x10 [ 1033.190783][T19278] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1033.190817][T19278] ? lockdep_hardirqs_on+0x7a/0x110 [ 1033.190847][T19278] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1033.190874][T19278] ? mutex_lock_nested+0x152/0x1d0 [ 1033.190894][T19278] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 1033.190927][T19278] kvm_mmu_post_init_vm+0x147/0x2d0 [ 1033.190958][T19278] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 1033.190991][T19278] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1033.191018][T19278] ? do_raw_spin_lock+0x12b/0x2f0 [ 1033.191046][T19278] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1033.191073][T19278] ? lockdep_hardirqs_on+0x7a/0x110 [ 1033.191100][T19278] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1033.191126][T19278] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1033.191153][T19278] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1033.191176][T19278] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1033.191203][T19278] ? lockdep_hardirqs_on+0x7a/0x110 [ 1033.191229][T19278] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1033.191263][T19278] ? rt_write_unlock+0x190/0x230 [ 1033.191288][T19278] kvm_vcpu_ioctl+0xa65/0xfe0 [ 1033.191319][T19278] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1033.191361][T19278] ? __fget_files+0x2a/0x420 [ 1033.191386][T19278] ? __fget_files+0x2a/0x420 [ 1033.191406][T19278] ? __fget_files+0x3a6/0x420 [ 1033.191426][T19278] ? __fget_files+0x2a/0x420 [ 1033.191450][T19278] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1033.191477][T19278] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1033.191503][T19278] __se_sys_ioctl+0xff/0x170 [ 1033.191548][T19278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.191569][T19278] do_syscall_64+0x174/0x580 [ 1033.191610][T19278] ? trace_irq_disable+0x3b/0x140 [ 1033.191630][T19278] ? clear_bhb_loop+0x40/0x90 [ 1033.191652][T19278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.191670][T19278] RIP: 0033:0x7fd390e9ce59 [ 1033.191687][T19278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.191703][T19278] RSP: 002b:00007fd38f0ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1033.191722][T19278] RAX: ffffffffffffffda RBX: 00007fd391115fa0 RCX: 00007fd390e9ce59 [ 1033.191739][T19278] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1033.191750][T19278] RBP: 00007fd38f0ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.191761][T19278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.191772][T19278] R13: 00007fd391116038 R14: 00007fd391115fa0 R15: 00007ffd5562af38 [ 1033.191800][T19278] [ 1033.646128][T19131] team0: Port device team_slave_0 added [ 1033.777535][T19131] team0: Port device team_slave_1 added [ 1033.985446][T19131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1033.985463][T19131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.985490][T19131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.049705][T19131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.049720][T19131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.049747][T19131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.180414][T19307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5269'. [ 1034.500770][T19307] bridge_slave_1: left allmulticast mode [ 1034.500802][T19307] bridge_slave_1: left promiscuous mode [ 1034.501373][T19307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.645817][T19333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5276'. [ 1034.663110][T19307] bridge_slave_0: left allmulticast mode [ 1034.663141][T19307] bridge_slave_0: left promiscuous mode [ 1034.663404][T19307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.100124][T19333] bridge_slave_1: left allmulticast mode [ 1035.100154][T19333] bridge_slave_1: left promiscuous mode [ 1035.100177][T19333] FAULT_INJECTION: forcing a failure. [ 1035.100177][T19333] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.100205][T19333] CPU: 0 UID: 0 PID: 19333 Comm: syz.1.5276 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1035.100231][T19333] Tainted: [L]=SOFTLOCKUP [ 1035.100238][T19333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1035.100251][T19333] Call Trace: [ 1035.100259][T19333] [ 1035.100271][T19333] dump_stack_lvl+0xe8/0x150 [ 1035.100299][T19333] should_fail_ex+0x46b/0x600 [ 1035.100332][T19333] should_failslab+0xa8/0x100 [ 1035.100359][T19333] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1035.100383][T19333] ? __alloc_skb+0x1d0/0x7d0 [ 1035.100408][T19333] ? lockdep_hardirqs_on+0x7a/0x110 [ 1035.100441][T19333] __alloc_skb+0x1d0/0x7d0 [ 1035.100470][T19333] rtmsg_ifinfo_build_skb+0x84/0x260 [ 1035.100502][T19333] rtmsg_ifinfo+0x8c/0x1a0 [ 1035.100531][T19333] __dev_notify_flags+0xf2/0x310 [ 1035.100562][T19333] ? __pfx___dev_notify_flags+0x10/0x10 [ 1035.100590][T19333] ? __pfx_netdev_info+0x10/0x10 [ 1035.100634][T19333] ? __local_bh_enable+0x1e1/0x2f0 [ 1035.100669][T19333] __dev_set_promiscuity+0x260/0x6e0 [ 1035.100697][T19333] ? netif_rx_mode_clean+0x2b/0x1b0 [ 1035.100723][T19333] netif_set_promiscuity+0x50/0xe0 [ 1035.100753][T19333] dev_set_promiscuity+0x126/0x260 [ 1035.100785][T19333] del_nbp+0x12c/0xa80 [ 1035.100819][T19333] br_dev_delete+0x6e/0x110 [ 1035.100845][T19333] ? __pfx_br_dev_delete+0x10/0x10 [ 1035.100872][T19333] rtnl_dellink+0x5c3/0x820 [ 1035.100903][T19333] ? __pfx_rtnl_dellink+0x10/0x10 [ 1035.100930][T19333] ? __lock_acquire+0x6b5/0x2d10 [ 1035.100952][T19333] ? sock_sendmsg_nosec+0x13a/0x180 [ 1035.100977][T19333] ? pointer+0x6fa/0xe50 [ 1035.101002][T19333] ? __pfx_pointer+0x10/0x10 [ 1035.101060][T19333] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1035.101092][T19333] ? __pfx_rtnl_dellink+0x10/0x10 [ 1035.101117][T19333] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1035.101140][T19333] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1035.101161][T19333] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1035.101181][T19333] ? ref_tracker_free+0x673/0x820 [ 1035.101204][T19333] ? __netlink_deliver_tap+0x636/0x8b0 [ 1035.101227][T19333] ? netlink_deliver_tap+0x19c/0x1b0 [ 1035.101250][T19333] ? netlink_unicast+0x754/0x920 [ 1035.101269][T19333] ? netlink_sendmsg+0x813/0xb40 [ 1035.101283][T19333] ? sock_sendmsg_nosec+0x13a/0x180 [ 1035.101299][T19333] ? sock_write_iter+0x308/0x410 [ 1035.101314][T19333] ? vfs_write+0x629/0xba0 [ 1035.101334][T19333] ? ksys_write+0x156/0x270 [ 1035.101353][T19333] ? do_syscall_64+0x174/0x580 [ 1035.101375][T19333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.101398][T19333] netlink_rcv_skb+0x232/0x4b0 [ 1035.101422][T19333] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1035.101444][T19333] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1035.101478][T19333] ? netlink_deliver_tap+0x2e/0x1b0 [ 1035.101501][T19333] ? netlink_deliver_tap+0x2e/0x1b0 [ 1035.101529][T19333] netlink_unicast+0x780/0x920 [ 1035.101559][T19333] netlink_sendmsg+0x813/0xb40 [ 1035.101580][T19333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1035.101606][T19333] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1035.101628][T19333] ? __pfx_aa_file_perm+0x10/0x10 [ 1035.101647][T19333] ? aa_sock_msg_perm+0x122/0x200 [ 1035.101664][T19333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1035.101678][T19333] sock_sendmsg_nosec+0x13a/0x180 [ 1035.101699][T19333] sock_write_iter+0x308/0x410 [ 1035.101718][T19333] ? __pfx_sock_write_iter+0x10/0x10 [ 1035.101752][T19333] vfs_write+0x629/0xba0 [ 1035.101780][T19333] ? __pfx_vfs_write+0x10/0x10 [ 1035.101808][T19333] ? __fget_files+0x2a/0x420 [ 1035.101834][T19333] ksys_write+0x156/0x270 [ 1035.101857][T19333] ? __pfx_ksys_write+0x10/0x10 [ 1035.101885][T19333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.101902][T19333] do_syscall_64+0x174/0x580 [ 1035.101925][T19333] ? trace_irq_disable+0x3b/0x140 [ 1035.101942][T19333] ? clear_bhb_loop+0x40/0x90 [ 1035.101961][T19333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.101977][T19333] RIP: 0033:0x7fd390e9ce59 [ 1035.101992][T19333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.102007][T19333] RSP: 002b:00007fd38f0ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1035.102024][T19333] RAX: ffffffffffffffda RBX: 00007fd391115fa0 RCX: 00007fd390e9ce59 [ 1035.102035][T19333] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 1035.102045][T19333] RBP: 00007fd38f0ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1035.102055][T19333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1035.102064][T19333] R13: 00007fd391116038 R14: 00007fd391115fa0 R15: 00007ffd5562af38 [ 1035.102089][T19333] [ 1035.102315][T19333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.198987][ T5660] Bluetooth: hci0: command tx timeout [ 1035.397917][T19333] bridge_slave_0: left allmulticast mode [ 1035.398005][T19333] bridge_slave_0: left promiscuous mode [ 1035.401962][T19333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.980936][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1036.179122][T15875] hsr_slave_0: left promiscuous mode [ 1036.219392][T15875] hsr_slave_1: left promiscuous mode [ 1036.220156][T15875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1036.220175][T15875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1036.260061][T15875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1036.260084][T15875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1036.339043][T11726] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1036.379826][T15875] veth1_macvtap: left promiscuous mode [ 1036.379920][T15875] veth0_macvtap: left promiscuous mode [ 1036.380195][T15875] veth1_vlan: left promiscuous mode [ 1036.380376][T15875] veth0_vlan: left promiscuous mode [ 1036.510031][T11726] usb 3-1: Using ep0 maxpacket: 32 [ 1036.512363][T11726] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.514574][T11726] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1036.514601][T11726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.514620][T11726] usb 3-1: Product: syz [ 1036.514633][T11726] usb 3-1: Manufacturer: syz [ 1036.514647][T11726] usb 3-1: SerialNumber: syz [ 1036.571298][T11726] usb 3-1: config 0 descriptor?? [ 1036.591929][T11726] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1036.621849][T19353] syz.1.5285 (19353): drop_caches: 4 [ 1036.748990][ T5825] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1036.930140][ T5825] usb 4-1: Using ep0 maxpacket: 16 [ 1036.932853][ T5825] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 1036.932889][ T5825] usb 4-1: config 0 has no interface number 0 [ 1036.932931][ T5825] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1036.932956][ T5825] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1036.935206][ T5825] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1036.935233][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.935253][ T5825] usb 4-1: Product: syz [ 1036.935266][ T5825] usb 4-1: Manufacturer: syz [ 1036.935280][ T5825] usb 4-1: SerialNumber: syz [ 1036.945748][ T5825] usb 4-1: config 0 descriptor?? [ 1036.993193][T19357] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1037.004289][T19357] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1037.237505][T19357] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1037.237686][T19357] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1037.411093][T11726] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input51 [ 1037.442165][ T5825] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1037.442405][ T5825] asix 4-1:0.34: probe with driver asix failed with error -61 [ 1037.581155][T15875] team0 (unregistering): Port device team_slave_1 removed [ 1037.608817][ T5825] usb 3-1: USB disconnect, device number 34 [ 1037.620751][T15875] team0 (unregistering): Port device team_slave_0 removed [ 1037.896816][T19131] hsr_slave_0: entered promiscuous mode [ 1037.898220][T19131] hsr_slave_1: entered promiscuous mode [ 1038.445276][T19378] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 1038.767719][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1039.009119][ T5825] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1039.159495][ T5825] usb 3-1: Using ep0 maxpacket: 16 [ 1039.162153][ T5825] usb 3-1: config index 0 descriptor too short (expected 37359, got 202) [ 1039.162178][ T5825] usb 3-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 1039.162199][ T5825] usb 3-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.162219][ T5825] usb 3-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 1039.165919][ T5825] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1039.165946][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.165966][ T5825] usb 3-1: Product: syz [ 1039.165981][ T5825] usb 3-1: Manufacturer: syz [ 1039.165995][ T5825] usb 3-1: SerialNumber: syz [ 1039.272764][ T5825] usb 3-1: 0:2 : does not exist [ 1039.475500][ T5825] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1039.510946][T19415] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1039.510969][T19415] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1039.517765][T19415] vhci_hcd vhci_hcd.0: Device attached [ 1039.587179][T11726] ================================================================== [ 1039.587249][T11726] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 1039.587300][T11726] Read of size 8 at addr ffffc90017428008 by task kworker/1:8/11726 [ 1039.587314][T11726] [ 1039.587327][T11726] CPU: 1 UID: 0 PID: 11726 Comm: kworker/1:8 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1039.587353][T11726] Tainted: [L]=SOFTLOCKUP [ 1039.587359][T11726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1039.587371][T11726] Workqueue: usb_hub_wq hub_event [ 1039.587389][T11726] Call Trace: [ 1039.587396][T11726] [ 1039.587404][T11726] dump_stack_lvl+0xe8/0x150 [ 1039.587425][T11726] print_address_description+0x55/0x1e0 [ 1039.587449][T11726] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1039.587475][T11726] print_report+0x58/0x70 [ 1039.587494][T11726] kasan_report+0x117/0x150 [ 1039.587520][T11726] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1039.587555][T11726] __list_del_entry_valid_or_report+0xb5/0x190 [ 1039.587589][T11726] kcov_remote_start+0x2af/0x710 [ 1039.587612][T11726] hub_event+0x150/0x4f60 [ 1039.587631][T11726] ? do_raw_spin_lock+0x12b/0x2f0 [ 1039.587652][T11726] ? __lock_acquire+0x6b5/0x2d10 [ 1039.587675][T11726] ? look_up_lock_class+0x57/0x110 [ 1039.587704][T11726] ? trace_hrtimer_start+0x82/0x200 [ 1039.587725][T11726] ? __lock_acquire+0x6b5/0x2d10 [ 1039.587756][T11726] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1039.587776][T11726] ? __pfx_hub_event+0x10/0x10 [ 1039.587794][T11726] ? process_one_work+0x8be/0x1630 [ 1039.587827][T11726] ? process_one_work+0x8be/0x1630 [ 1039.587853][T11726] process_one_work+0x98b/0x1630 [ 1039.587893][T11726] ? __pfx_process_one_work+0x10/0x10 [ 1039.587919][T11726] ? do_raw_spin_lock+0x12b/0x2f0 [ 1039.587945][T11726] worker_thread+0xb49/0x1140 [ 1039.587977][T11726] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1039.588012][T11726] kthread+0x388/0x470 [ 1039.588033][T11726] ? __pfx_worker_thread+0x10/0x10 [ 1039.588059][T11726] ? __pfx_kthread+0x10/0x10 [ 1039.588080][T11726] ret_from_fork+0x514/0xb70 [ 1039.588104][T11726] ? __pfx_ret_from_fork+0x10/0x10 [ 1039.588125][T11726] ? __switch_to+0xc79/0x1410 [ 1039.588145][T11726] ? __pfx_kthread+0x10/0x10 [ 1039.588166][T11726] ret_from_fork_asm+0x1a/0x30 [ 1039.588198][T11726] [ 1039.588206][T11726] [ 1039.588211][T11726] The buggy address belongs to a vmalloc virtual mapping [ 1039.588227][T11726] Memory state around the buggy address: [ 1039.588239][T11726] ffffc90017427f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1039.588253][T11726] ffffc90017427f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1039.588274][T11726] >ffffc90017428000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1039.588285][T11726] ^ [ 1039.588296][T11726] ffffc90017428080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1039.588310][T11726] ffffc90017428100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1039.588320][T11726] ================================================================== [ 1039.588352][T11726] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1039.588369][T11726] CPU: 1 UID: 0 PID: 11726 Comm: kworker/1:8 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1039.588395][T11726] Tainted: [L]=SOFTLOCKUP [ 1039.588403][T11726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1039.588415][T11726] Workqueue: usb_hub_wq hub_event [ 1039.588434][T11726] Call Trace: [ 1039.588442][T11726] [ 1039.588450][T11726] vpanic+0x56c/0xa60 [ 1039.588477][T11726] ? rcu_is_watching+0x15/0xb0 [ 1039.588502][T11726] ? __pfx_vpanic+0x10/0x10 [ 1039.588533][T11726] panic+0xc5/0xd0 [ 1039.588559][T11726] ? __pfx_panic+0x10/0x10 [ 1039.588588][T11726] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1039.588626][T11726] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1039.588657][T11726] check_panic_on_warn+0x89/0xb0 [ 1039.588681][T11726] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1039.588713][T11726] end_report+0x73/0x170 [ 1039.588737][T11726] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1039.588769][T11726] kasan_report+0x128/0x150 [ 1039.588794][T11726] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1039.588830][T11726] __list_del_entry_valid_or_report+0xb5/0x190 [ 1039.588854][T11726] kcov_remote_start+0x2af/0x710 [ 1039.588892][T11726] hub_event+0x150/0x4f60 [ 1039.588911][T11726] ? do_raw_spin_lock+0x12b/0x2f0 [ 1039.588933][T11726] ? __lock_acquire+0x6b5/0x2d10 [ 1039.588955][T11726] ? look_up_lock_class+0x57/0x110 [ 1039.588985][T11726] ? trace_hrtimer_start+0x82/0x200 [ 1039.589006][T11726] ? __lock_acquire+0x6b5/0x2d10 [ 1039.589037][T11726] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1039.589057][T11726] ? __pfx_hub_event+0x10/0x10 [ 1039.589076][T11726] ? process_one_work+0x8be/0x1630 [ 1039.589108][T11726] ? process_one_work+0x8be/0x1630 [ 1039.589134][T11726] process_one_work+0x98b/0x1630 [ 1039.589169][T11726] ? __pfx_process_one_work+0x10/0x10 [ 1039.589195][T11726] ? do_raw_spin_lock+0x12b/0x2f0 [ 1039.589221][T11726] worker_thread+0xb49/0x1140 [ 1039.589253][T11726] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1039.589294][T11726] kthread+0x388/0x470 [ 1039.589314][T11726] ? __pfx_worker_thread+0x10/0x10 [ 1039.589340][T11726] ? __pfx_kthread+0x10/0x10 [ 1039.589361][T11726] ret_from_fork+0x514/0xb70 [ 1039.589385][T11726] ? __pfx_ret_from_fork+0x10/0x10 [ 1039.589407][T11726] ? __switch_to+0xc79/0x1410 [ 1039.589426][T11726] ? __pfx_kthread+0x10/0x10 [ 1039.589448][T11726] ret_from_fork_asm+0x1a/0x30 [ 1039.589481][T11726] [ 1039.590078][T11726] Kernel Offset: disabled