last executing test programs: 32.560282125s ago: executing program 4 (id=4616): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x4000) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000140)=0x8000000000000000) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f00000004c0)=[{0xffff, 0x11, 0x0, 0x0}, {0xfffa, 0x5000, 0x0, 0x0}], 0x2}) 32.375969799s ago: executing program 4 (id=4617): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x3f00, 0x2005, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r8, 0x0, &(0x7f0000000480)='LL', 0x2, 0x2}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r8, 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r4, 0x0}) fdatasync(0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) 31.348405626s ago: executing program 4 (id=4618): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000088f05109400000000000109022d00010000000009040000010300b4000921000065092205000905810300020000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0}, 0x0) 31.045483285s ago: executing program 4 (id=4620): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) 30.979461012s ago: executing program 4 (id=4621): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(r2, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x44, r7, 0x211, 0xfffffffe, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) 30.772608734s ago: executing program 4 (id=4623): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a180)=[{{0x0, 0x0, 0x0, 0x2e, &(0x7f0000000340)=[@cred={{0x1c}}], 0x20, 0x20004040}}], 0x1, 0x24004054) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000380)={0x37, 0x0, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xffffffff, 0xef7d}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001400)={0x7, 0x7f, {}, {0x0}, 0x4, 0x2000000000000000}) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r4, 0xee01) lstat(&(0x7f0000001440)='./file0\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000001500)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000003540)='./file1\x00', &(0x7f0000003580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000140)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @loopback}}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000240), 0x0) fchown(0xffffffffffffffff, r10, r11) r12 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x3, 0x0, r8, r9, r11, 0x42, 0xd}, 0x5, 0x0, 0x1, 0x200000000000000, 0x0, r12, 0x8}) newfstatat(0xffffffffffffff9c, &(0x7f0000003600)='./file0/file0\x00', &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) fstat(0xffffffffffffffff, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000003740)={{}, {0x1, 0x4}, [{0x2, 0x1, 0xee01}, {0x2, 0x7, 0xee01}, {0x2, 0x3}, {0x2, 0x2, r0}, {0x2, 0x0, r1}, {0x2, 0x4, r2}, {0x2, 0x1, r3}, {0x2, 0x2, r4}, {0x2, 0x2, r5}], {0x4, 0x3}, [{0x8, 0x1, r6}, {0x8, 0x0, 0xee01}, {0x8, 0x1, r7}, {0x8, 0x1}, {0x8, 0x6, 0xee00}, {0x8, 0x2, r11}, {0x8, 0x4, 0xee01}, {0x8, 0x4, r13}, {0x8, 0x1, r14}], {0x10, 0x1}, {0x20, 0x2}}, 0xb4, 0x2) r15 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) ioctl$SNDRV_TIMER_IOCTL_CREATE(r15, 0xc02054a5, &(0x7f00000000c0)={0x4, r15, 'id0\x00'}) getdents64(r15, &(0x7f0000000400)=""/4096, 0xc00) 11.289829871s ago: executing program 1 (id=4660): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a180)=[{{0x0, 0x0, 0x0, 0x2e, &(0x7f0000000340)=[@cred={{0x1c}}], 0x20, 0x20004040}}], 0x1, 0x24004054) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000380)={0x37, 0x0, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xffffffff, 0xef7d}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001400)={0x7, 0x7f, {}, {0x0}, 0x4, 0x2000000000000000}) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r4, 0xee01) read$FUSE(0xffffffffffffffff, &(0x7f0000001500)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000003540)='./file1\x00', &(0x7f0000003580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) getgroups(0x4, &(0x7f0000000140)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @loopback}}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000240), 0x0) fchown(0xffffffffffffffff, r10, r11) r12 = getpid() shmctl$IPC_SET(r7, 0x1, &(0x7f0000000200)={{0x3, 0x0, r8, r9, r11, 0x42, 0xd}, 0x5, 0x0, 0x1, 0x200000000000000, 0x0, r12, 0x8}) newfstatat(0xffffffffffffff9c, &(0x7f0000003600)='./file0/file0\x00', &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) fstat(0xffffffffffffffff, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000003740)={{}, {0x1, 0x4}, [{0x2, 0x1, 0xee01}, {0x2, 0x7, 0xee01}, {0x2, 0x3}, {0x2, 0x2, r0}, {0x2, 0x0, r1}, {0x2, 0x4, r2}, {0x2, 0x1, r3}, {0x2, 0x2, r4}, {0x2, 0x2}], {0x4, 0x3}, [{0x8, 0x1, r5}, {0x8, 0x0, 0xee01}, {0x8, 0x1, r6}, {0x8, 0x1}, {0x8, 0x6, 0xee00}, {0x8, 0x2, r11}, {0x8, 0x4, 0xee01}, {0x8, 0x4, r13}, {0x8, 0x1, r14}], {0x10, 0x1}, {0x20, 0x2}}, 0xb4, 0x2) r15 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) ioctl$SNDRV_TIMER_IOCTL_CREATE(r15, 0xc02054a5, &(0x7f00000000c0)={0x4, r15, 'id0\x00'}) getdents64(r15, &(0x7f0000000400)=""/4096, 0xc00) 8.907118442s ago: executing program 1 (id=4666): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x10, 0x0, 0x24e}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x7, 0x0, 0x1, 0x8, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 8.826691039s ago: executing program 3 (id=4667): r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0'}, 0xb) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) 8.72550992s ago: executing program 3 (id=4668): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) read$dsp(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (fail_nth: 1) 8.723861616s ago: executing program 1 (id=4669): r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="120100000200004025059d774000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a", @ANYRESOCT=0x0], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) pread64(r3, &(0x7f0000002200)=""/89, 0x59, 0x10000) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r5, 0x5016, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="15e400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000380)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r6, &(0x7f0000000080), 0x8) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x20, @rand_addr=0xa9fe0000}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0x0) 7.657172493s ago: executing program 3 (id=4671): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8a, 0x8, 0x1ff, 0x80040001}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x474) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf200000000000001600020038e873a23d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003150000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x0, 0x5}, &(0x7f0000000040)={0x1d, 0xfffffff7fffffffe, 0x40, 0x7, 0x0, 0xfffffffffffffffe, 0x71e7, 0x8}, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x64, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b020102082407010500070e11240606060509000600040007000300390c2402050302060254df000a092402050001031f04092403"], 0x0) 6.251341587s ago: executing program 0 (id=4675): socket$key(0xf, 0x3, 0x2) vmsplice(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000340)}, {&(0x7f0000000280)="ee9e90763cd9ba656721dafa1c3796f33997031891ffbfe74fda2a63fc0a74727a989c6351962f", 0x27}], 0x2, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'geneve1\x00'}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, &(0x7f00000006c0)="a654977455fc925217afcea29c4a31d4412689e17da77560f949fdb05fabd2a83c9e1294b8e390fbee7214fe59d1f3012a7badf2a22ec4acf0299648e4582af2bd714e0a71af1113cea9a3b27396ac8dfeee8ff49a1435d6ffbbb51b5a9ae3", 0x5f, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000740)={0x0, 0x0, r4}, &(0x7f0000000780)=""/230, 0xe6, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) bind$rds(r5, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@cswp={0x58, 0x114, 0x7, {{0x2000007, 0x400}, &(0x7f0000000140)=0xc, 0x0, 0x6, 0x5, 0xd, 0x8, 0x9, 0x4}}], 0x58}, 0x0) 4.606380077s ago: executing program 0 (id=4676): ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlockall(0x7) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x41}, @empty, 0x0, 0x8, [@dev={0xac, 0x14, 0x14, 0x36}, @private=0xa010101, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @broadcast, @private=0xa010102]}, 0x30) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3fd, 0xffffffffffffffff, 0x0, 0x0, 0x1c0000000080000}]) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 3.012350841s ago: executing program 3 (id=4677): ioctl$XFS_IOC_GETBMAPA(0xffffffffffffffff, 0xc020582c, &(0x7f0000000000)={0x7fffffff, 0x100000000, 0x3, 0x8, 0x4}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x46, 0x4) socket$pptp(0x18, 0x1, 0x2) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x40, @none, 0x0, 0x1}, 0xe) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x3, 0x10000) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x34}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000280)={@empty, @multicast2, 0x12, 0x16}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0xf6, 0x5, 0x6, 0x82, r1, 0x5, '\x00', r2, r1, 0x5, 0x5, 0x0, 0x9}, 0x50) socket$pptp(0x18, 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0xac007f80daf7f95c}, 0x4c001) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000600)={0x9, 0xffffffffffffffff, 0x1}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xd, 0x10, r6, 0x7449c000) r7 = socket(0x23, 0xa, 0x2) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) getsockopt$netrom_NETROM_T1(r7, 0x103, 0x1, &(0x7f0000000680), &(0x7f00000006c0)=0x4) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000700)='/dev/vcsa#\x00', 0x0, r6) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000740)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000780)={0x0}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x3, &(0x7f0000000800)=@raw=[@exit, @cb_func={0x18, 0x8, 0x4, 0x0, 0x4}], &(0x7f0000000840)='GPL\x00', 0xffffff81, 0x5d, &(0x7f0000000880)=""/93, 0x1f00, 0x20, '\x00', r2, 0x25, r1, 0x8, &(0x7f0000000900)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0x4, 0x54b, 0xf0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000a40)={r8, 0x0, r9, 0x8}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r3}, 0x4) 2.701503094s ago: executing program 0 (id=4678): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (fail_nth: 1) 2.472666899s ago: executing program 3 (id=4679): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xd1d, @any, 0xb, 0x2}, 0xe) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r0, 0x85290000) r1 = dup(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a97444800", "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"}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private2, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x84) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f00000011c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="100028bd7000fddbdf2536000000080003", @ANYRES32, @ANYBLOB="c60fc0721ffd06e6fe2ec98503705e53c2bba082afb420c4f79277570759225bbbe0835d067e18f0ffac8081caebfa9de07d0dad400dcdaac48c84f44cc1ed53e9448871c7948c3ab878beab65f3733ade5d47976d71829d3c97fcf058dbeb26a2bb2c8b0051a495b685ea835a12e51185a3de83cff111b5fda44dcf6e843d18198d447770a59b0cf86a391d9b0000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e24, 0x4, @empty}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071107a00000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) pread64(r6, &(0x7f0000000680)=""/230, 0xe6, 0x41) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendto$packet(r2, &(0x7f0000001380)="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", 0x141, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_open_dev$sg(&(0x7f0000000000), 0x5, 0xc500) r9 = syz_open_dev$video(&(0x7f0000019080), 0x80000000725, 0x8000) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000001280)={0x1, @pix={0xe, 0x3, 0x34324152, 0x7, 0x594, 0x9000, 0xa, 0x4, 0x0, 0x7, 0x1, 0x2}}) 2.341165665s ago: executing program 1 (id=4680): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000100)={0x0, 0x34524742, 0x640, 0x1dd, 0x3, @stepwise={{0x80000001, 0x9}, {0x97c1}, {0x4, 0x39}}}) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80, 0xa5}, 'port1\x00', 0xe3, 0x91c07, 0x2, 0x6ebe, 0x6, 0x3, 0xfff, 0x0, 0x7, 0xf7}) readv(r3, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) r4 = gettid() tkill(r4, 0x12) tkill(r4, 0x14) getpgrp(r4) close(r3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000440)={'wg2\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xf, 0x4, 0x7, 0x1, 0x2, 0x1, 0x7ff, '\x00', r6, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000014) 2.111966884s ago: executing program 3 (id=4682): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)={0x0, 0x15, 0x3, "c39242"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0xd, 0xc8, {0xc8, 0xc, "c978dc6cdc61f2f01a8e7c5f4e52532804b7cc18323ee04e436f7048454f60b5dc04bab360f1d39684216d8272a71f517c3d76da74ef5fbf1774977b4f44e4ec5c0aa8d653708de5496b90720dd26e7074af1b5068f2c35c35fce0145f86783c3d05a786938301d873167e55a924a48e649666edcfeaf85d880f5d6d6a4a4ff9e752fcf96f2b65cd8947049452deb8a23bc4b58003261fdea6679b4ad2f15b4e42a7602cd1386fae8251d7753d8420639d325ad5e4896a0e7d39cb8f49da64a4ae3e6c6c1be9"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c0a}}}, &(0x7f0000000440)={0x34, &(0x7f0000000240)={0xc87226f2f5d88d70, 0x31, 0xe9, "5a7b4cab4a84c7b769a68344307b1d46dd2515683ca4887332cc5f488909032c4537236fab07c3b90e0ac8161ddfa89d478a9f2f1f854e47315f7df31be5f0f8de294b0cc141ddee88013e775bb612d0bcaa1bee3d06afbbada4510998b0b130dfd2c0a8769659a2f82a18def47d57f2a156450628739c8c463290498ada7a5f7cae6b7aa92490b168c0e392cd9517afdf11786a16e30e960584fc3a1b2d61f02832771c4f09572b40418ddd251a7e1630e447bfc3834cc3cc3794a3d9fd0f105fedd1c3740ffbabde4aa0db11e088700282eaf406ba6fb1b71e76bb30b8e5cf425b6d3430cf5980b5"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0x7}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "2a2ad6b5f58d16169cf3d2418dfa68b00e6940fd16422cbb557d4f9b4d0287392da5459260c9c7aee85bf813bb79de"}}) 2.064396126s ago: executing program 1 (id=4683): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x4, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080), &(0x7f0000000180)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0xfff8}, 0x8) 1.852602425s ago: executing program 2 (id=4686): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x372, @time={0x7665642f, 0x6}, 0x0, {0x0, 0xfd}, 0x1, 0x2, 0x70}) (fail_nth: 1) 1.542522212s ago: executing program 0 (id=4687): socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000080)={{0x3, 0x1, 0x0, 0x0, 0x6}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b400000000000000de0a0000000000006201a4000000000095000000000000006681fabfa7afdea451352385fd277a26b1928972a90713774dee000000008abeded0f241d9e16380276de7f845fb77f3942b1b2f835d2704d284651cec42865a01e610e1d8ebed3bca771dd8dfc94bf8454e0ba5feb0a8fb9c709340a7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) (fail_nth: 1) 1.542076107s ago: executing program 2 (id=4688): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000940)={&(0x7f00000006c0)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000880), 0x0, &(0x7f00000008c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x30, 0x4}, 0x4008000) r2 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0xd4, 0x45, 0xc3, 0x10, 0x6cd, 0x108, 0xc1e2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x80, 0x8, [{{0x9, 0x4, 0x42, 0x6, 0x2, 0xe3, 0xa4, 0x9a, 0x4, [], [{{0x9, 0x5, 0x1, 0x3, 0x400, 0xf1, 0x3}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x1c, 0x3, 0x1}}]}}]}}]}}, &(0x7f0000000080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x251, 0x2, 0x5c, 0x4, 0x8, 0x4}, 0x0, 0x0}) ftruncate(r2, 0x1000006) prlimit64(0x0, 0xb, &(0x7f00000000c0)={0x8, 0x5}, &(0x7f0000000100)) userfaultfd(0x1) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000000}) 673.600419ms ago: executing program 2 (id=4689): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000e00)) unshare(0x6020400) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fchmod(r1, 0x1f) getpgid(0x0) r2 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 540.097417ms ago: executing program 0 (id=4690): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 425.041278ms ago: executing program 2 (id=4691): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xd1d, @any, 0xb, 0x2}, 0xe) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r0, 0x85290000) r1 = dup(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a97444800", "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"}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private2, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x84) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f00000011c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="100028bd7000fddbdf2536000000080003", @ANYRES32, @ANYBLOB="c60fc0721ffd06e6fe2ec98503705e53c2bba082afb420c4f79277570759225bbbe0835d067e18f0ffac8081caebfa9de07d0dad400dcdaac48c84f44cc1ed53e9448871c7948c3ab878beab65f3733ade5d47976d71829d3c97fcf058dbeb26a2bb2c8b0051a495b685ea835a12e51185a3de83cff111b5fda44dcf6e843d18198d447770a59b0cf86a391d9b0000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e24, 0x4, @empty}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071107a00000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) pread64(r6, &(0x7f0000000680)=""/230, 0xe6, 0x41) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendto$packet(r2, &(0x7f0000001380)="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", 0x142, 0x4, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x5, 0xc500) r8 = syz_open_dev$video(&(0x7f0000019080), 0x80000000725, 0x8000) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000001280)={0x1, @pix={0xe, 0x3, 0x34324152, 0x7, 0x594, 0x9000, 0xa, 0x4, 0x0, 0x7, 0x1, 0x2}}) 389.823424ms ago: executing program 1 (id=4692): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008ac75220cf106380d2d10102030109022400010000100009048800023e3f5c0009050a02200002000009058202"], 0x0) r2 = fsmount(r1, 0x0, 0x4) setpgid(0x0, 0x0) fchdir(r2) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0x101, 0x8000, 0x248, 0x9b99}, 0x2d, [0xfffffff6, 0x8, 0x6, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x8007, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x2, 0x1, 0x16, 0x2, 0x5, 0x3fe, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0x4f9a2, 0x80000001, 0xff, 0x0, 0x7f, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x6], [0x9, 0x8, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd4e, 0x7, 0x5, 0x2, 0x809, 0x4, 0x6, 0x1000, 0x100000, 0x200b398, 0x400000, 0x0, 0x204, 0x1c, 0x4, 0x1, 0x9, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x4000401, 0x46, 0xf1, 0x0, 0xab00060, 0x6, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x0, 0x1cb, 0x1, 0x80000004, 0x3, 0x438, 0xfffffffe, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x1, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x4, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x9000003, 0x5, 0x9, 0x3, 0x3, 0x8, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0x4000000d, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7b, 0x9d26, 0x10000, 0x1, 0x5, 0x2, 0x6, 0x408000, 0xf65, 0x3, 0x4, 0x8, 0xe7d2, 0xa28, 0x6, 0xfffc, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x0, 0x7, 0x1e, 0xc, 0x81, 0x3, 0x9d86, 0xd, 0xf7, 0x8, 0x140f2, 0x3, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x7, 0xfffffffa, 0x32d, 0x200003, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x3, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x8000, 0x4, 0xfffffffd, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x80000001, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff) signalfd(r6, &(0x7f0000000100)={[0xc96e]}, 0x8) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 340.536493ms ago: executing program 0 (id=4693): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) chroot(&(0x7f0000000300)='.\x00') r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000000)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r2) getcwd(&(0x7f0000000180)=""/164, 0xa4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe8}]}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000f00)=ANY=[@ANYBLOB="90040000", @ANYRESHEX=r1, @ANYBLOB="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"], 0x490}, 0x1, 0x0, 0x0, 0x10000}, 0x44014) r4 = syz_clone(0x20000000, &(0x7f0000000740)="0a71e14c770f667fa36286cc6af476cdfaab170d607884493b3b852bf69fe13f2c23af769add4e25dab7135306436dd2ab73311275306b0d0f6f9f6826060fbe58752984aff871e99a7e69e46ccebe17f469a0ece5634b911c8ac86c6f8a1131f22c446c80417e10ce4332452b8cb8b72fe238df4ac37db49185e5fe91ad40e63e06b4e8aa5e18502e091cea424765b470c0694a7232b69141578516aee792301e8008bd32380ce6f2ccaa832280139b1add8cef", 0xb4, &(0x7f0000000140), &(0x7f0000000440), &(0x7f00000013c0)="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") syz_open_procfs(r4, &(0x7f0000000540)='net/arp\x00') sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x3a}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) 110.65783ms ago: executing program 2 (id=4694): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0x0, 0x34524742, 0x640, 0x1dd, 0x3, @stepwise={{0x80000001, 0x9}, {0x97c1}, {0x4, 0x39}}}) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80, 0xa5}, 'port1\x00', 0xe3, 0x91c07, 0x2, 0x6ebe, 0x6, 0x3, 0xfff, 0x0, 0x7, 0xf7}) readv(r2, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) r3 = gettid() tkill(r3, 0x12) tkill(r3, 0x14) getpgrp(r3) close(r2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) 0s ago: executing program 2 (id=4695): r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$smackfs_load(r0, 0x0, 0xe) kernel console output (not intermixed with test programs): 3/0x2a0 [ 830.465117][T16986] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 830.465156][T16986] ? __pfx_ksys_write+0x10/0x10 [ 830.465199][T16986] do_syscall_64+0x14d/0xf80 [ 830.465226][T16986] ? trace_irq_disable+0x3b/0x150 [ 830.465251][T16986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.465274][T16986] ? clear_bhb_loop+0x40/0x90 [ 830.465299][T16986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.465321][T16986] RIP: 0033:0x7f11cae6c629 [ 830.465343][T16986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.465361][T16986] RSP: 002b:00007f11c90c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 830.465384][T16986] RAX: ffffffffffffffda RBX: 00007f11cb0e5fa0 RCX: 00007f11cae6c629 [ 830.465399][T16986] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000003 [ 830.465413][T16986] RBP: 00007f11c90c6090 R08: 0000000000000000 R09: 0000000000000000 [ 830.465427][T16986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.465441][T16986] R13: 00007f11cb0e6038 R14: 00007f11cb0e5fa0 R15: 00007ffc430f39a8 [ 830.465476][T16986] [ 830.540305][T16988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4138'. [ 831.125777][T14850] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 831.295708][T14850] usb 2-1: Using ep0 maxpacket: 8 [ 831.299896][T14850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.299931][T14850] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 831.299954][T14850] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 831.299998][T14850] usb 2-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 831.300024][T14850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.312017][T14850] usb 2-1: config 0 descriptor?? [ 831.350615][T14850] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count [ 831.752385][T14850] maltron 0003:058F:9410.0017: unknown main item tag 0x0 [ 831.752425][T14850] maltron 0003:058F:9410.0017: unknown main item tag 0x0 [ 831.752452][T14850] maltron 0003:058F:9410.0017: unknown main item tag 0x0 [ 831.752479][T14850] maltron 0003:058F:9410.0017: unknown main item tag 0x0 [ 831.752504][T14850] maltron 0003:058F:9410.0017: unknown main item tag 0x0 [ 831.806917][T14850] maltron 0003:058F:9410.0017: hidraw0: USB HID v0.00 Device [HID 058f:9410] on usb-dummy_hcd.1-1/input0 [ 831.943101][ T5876] usb 2-1: USB disconnect, device number 102 [ 831.992201][T17031] ieee802154 phy0 wpan0: encryption failed: -22 [ 832.385712][T17052] C: renamed from team_slave_0 (while UP) [ 832.409983][T17052] netlink: 'syz.3.4165': attribute type 1 has an invalid length. [ 832.410009][T17052] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 833.186097][T17079] FAULT_INJECTION: forcing a failure. [ 833.186097][T17079] name failslab, interval 1, probability 0, space 0, times 0 [ 833.186525][T17079] CPU: 1 UID: 0 PID: 17079 Comm: syz.1.4177 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 833.186557][T17079] Tainted: [L]=SOFTLOCKUP [ 833.186565][T17079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 833.186578][T17079] Call Trace: [ 833.186588][T17079] [ 833.186597][T17079] dump_stack_lvl+0xe8/0x150 [ 833.186657][T17079] should_fail_ex+0x46b/0x600 [ 833.186693][T17079] should_failslab+0xa8/0x100 [ 833.186727][T17079] __kmalloc_noprof+0xdf/0x7b0 [ 833.186755][T17079] ? kfree+0x4d/0x6c0 [ 833.186788][T17079] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 833.186823][T17079] tomoyo_realpath_from_path+0xe3/0x5d0 [ 833.186863][T17079] ? tomoyo_path_number_perm+0x219/0x630 [ 833.186888][T17079] tomoyo_path_number_perm+0x246/0x630 [ 833.186915][T17079] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 833.186945][T17079] ? __lock_acquire+0x6b5/0x2cf0 [ 833.187004][T17079] ? __fget_files+0x2a/0x420 [ 833.187032][T17079] ? __fget_files+0x2a/0x420 [ 833.187055][T17079] ? __fget_files+0x3a6/0x420 [ 833.187078][T17079] ? __fget_files+0x2a/0x420 [ 833.187106][T17079] security_file_ioctl+0xc3/0x2a0 [ 833.187137][T17079] __se_sys_ioctl+0x47/0x170 [ 833.187170][T17079] do_syscall_64+0x14d/0xf80 [ 833.187196][T17079] ? trace_irq_disable+0x3b/0x150 [ 833.187220][T17079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.187243][T17079] ? clear_bhb_loop+0x40/0x90 [ 833.187270][T17079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.187292][T17079] RIP: 0033:0x7fb93a2bc629 [ 833.187313][T17079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.187330][T17079] RSP: 002b:00007fb9384f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 833.187356][T17079] RAX: ffffffffffffffda RBX: 00007fb93a536090 RCX: 00007fb93a2bc629 [ 833.187371][T17079] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 833.187384][T17079] RBP: 00007fb9384f5090 R08: 0000000000000000 R09: 0000000000000000 [ 833.187397][T17079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.187409][T17079] R13: 00007fb93a536128 R14: 00007fb93a536090 R15: 00007ffca2627678 [ 833.187443][T17079] [ 833.190014][T17079] ERROR: Out of memory at tomoyo_realpath_from_path. [ 833.795770][ T996] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 834.200527][ T996] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 834.200559][ T996] usb 4-1: config 0 has no interface number 0 [ 834.200610][ T996] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 834.203319][ T996] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 834.203350][ T996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.203371][ T996] usb 4-1: Product: syz [ 834.203387][ T996] usb 4-1: Manufacturer: syz [ 834.203402][ T996] usb 4-1: SerialNumber: syz [ 834.395005][T17105] atomic_op ffff8880350cb218 conn xmit_atomic 0000000000000000 [ 834.594928][ T996] usb 4-1: config 0 descriptor?? [ 835.184210][T17088] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 835.412368][ T996] radio-si470x 4-1:0.35: this is not a si470x device. [ 835.604688][ T996] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 835.710645][T17120] FAULT_INJECTION: forcing a failure. [ 835.710645][T17120] name failslab, interval 1, probability 0, space 0, times 0 [ 835.710684][T17120] CPU: 0 UID: 0 PID: 17120 Comm: syz.1.4191 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 835.710713][T17120] Tainted: [L]=SOFTLOCKUP [ 835.710722][T17120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 835.710734][T17120] Call Trace: [ 835.710744][T17120] [ 835.710753][T17120] dump_stack_lvl+0xe8/0x150 [ 835.710792][T17120] should_fail_ex+0x46b/0x600 [ 835.710828][T17120] should_failslab+0xa8/0x100 [ 835.710862][T17120] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 835.710891][T17120] ? __alloc_skb+0x1d0/0x7d0 [ 835.710914][T17120] ? __pfx_tcp_current_mss+0x10/0x10 [ 835.710953][T17120] __alloc_skb+0x1d0/0x7d0 [ 835.710982][T17120] tcp_stream_alloc_skb+0x3f/0x5c0 [ 835.711012][T17120] tcp_sendmsg_locked+0x137b/0x5490 [ 835.711036][T17120] ? __lock_acquire+0x6b5/0x2cf0 [ 835.711093][T17120] ? __lock_acquire+0x6b5/0x2cf0 [ 835.711154][T17120] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 835.711191][T17120] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 835.711222][T17120] ? lockdep_hardirqs_on+0x7a/0x110 [ 835.711256][T17120] tcp_sendmsg+0x2f/0x50 [ 835.711282][T17120] __sys_sendto+0x643/0x7d0 [ 835.711314][T17120] ? __pfx___sys_sendto+0x10/0x10 [ 835.711368][T17120] ? ksys_write+0x248/0x270 [ 835.711400][T17120] ? __pfx_ksys_write+0x10/0x10 [ 835.711437][T17120] __x64_sys_sendto+0xde/0x100 [ 835.711466][T17120] do_syscall_64+0x14d/0xf80 [ 835.711492][T17120] ? trace_irq_disable+0x3b/0x150 [ 835.711516][T17120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.711538][T17120] ? clear_bhb_loop+0x40/0x90 [ 835.711566][T17120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.711589][T17120] RIP: 0033:0x7fb93a2bc629 [ 835.711611][T17120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.711630][T17120] RSP: 002b:00007fb938516028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 835.711654][T17120] RAX: ffffffffffffffda RBX: 00007fb93a535fa0 RCX: 00007fb93a2bc629 [ 835.711669][T17120] RDX: ffffffffffffff94 RSI: 0000200000000000 RDI: 0000000000000003 [ 835.711684][T17120] RBP: 00007fb938516090 R08: 0000000000000000 R09: 0000000000000011 [ 835.711697][T17120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.711711][T17120] R13: 00007fb93a536038 R14: 00007fb93a535fa0 R15: 00007ffca2627678 [ 835.711746][T17120] [ 835.806083][ T996] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 835.818633][ T996] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 835.846507][ T996] usb 4-1: USB disconnect, device number 69 [ 835.848780][ T996] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 837.005671][ T5934] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 837.085734][ T5876] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 837.197618][ T5934] usb 4-1: Using ep0 maxpacket: 32 [ 837.201367][ T5934] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 837.204596][ T5934] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 837.204626][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.204645][ T5934] usb 4-1: config 0 has no interface number 0 [ 837.204695][ T5934] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 837.212461][ T5934] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 837.212493][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.212513][ T5934] usb 4-1: config 0 has no interface number 0 [ 837.212564][ T5934] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 837.215279][ T5934] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 837.215305][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.215326][ T5934] usb 4-1: config 0 has no interface number 0 [ 837.215376][ T5934] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 837.218874][ T5934] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 837.218900][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.218923][ T5934] usb 4-1: config 0 has no interface number 0 [ 837.218972][ T5934] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 837.220416][ T5934] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 837.220438][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.220459][ T5934] usb 4-1: config 0 has no interface number 0 [ 837.220525][ T5934] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 837.224075][ T5934] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 837.224125][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.224152][ T5934] usb 4-1: config 0 has no interface number 0 [ 837.224201][ T5934] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 837.227927][ T5934] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 837.227954][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.227975][ T5934] usb 4-1: config 0 has no interface number 0 [ 837.228025][ T5934] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 837.230913][ T5934] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 837.230937][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.230958][ T5934] usb 4-1: config 0 has no interface number 0 [ 837.231007][ T5934] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 837.234025][ T5934] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 837.234054][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.234075][ T5934] usb 4-1: Product: syz [ 837.234090][ T5934] usb 4-1: Manufacturer: syz [ 837.234105][ T5934] usb 4-1: SerialNumber: syz [ 837.278082][ T5876] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 837.278115][ T5876] usb 2-1: config 0 has no interface number 0 [ 837.278175][ T5876] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 837.281214][ T5876] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 837.281243][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.281265][ T5876] usb 2-1: Product: syz [ 837.281280][ T5876] usb 2-1: Manufacturer: syz [ 837.281295][ T5876] usb 2-1: SerialNumber: syz [ 837.320864][ T5876] usb 2-1: config 0 descriptor?? [ 837.321933][T17157] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 837.324433][ T5934] usb 4-1: config 0 descriptor?? [ 837.342855][ T5934] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 837.571424][ T5876] radio-si470x 2-1:0.35: this is not a si470x device. [ 837.607596][ T5876] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 837.666198][ T5876] usb 2-1: USB disconnect, device number 103 [ 837.820105][T17186] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 837.822184][T17186] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 837.824840][T17186] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 837.825285][T17186] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 837.908873][T17186] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 837.909090][T17186] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 837.910491][T17186] overlayfs: d_ino too big (84, ino=9223372036854776254, xinobits=3) [ 837.911403][T17186] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 837.911992][T17186] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 837.912593][T17186] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 837.913186][T17186] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 837.913762][T17186] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 837.914497][T17186] overlayfs: d_ino too big (dev, ino=4611686018427387912, xinobits=3) [ 837.994382][T17186] overlayfs: d_ino too big (kernel, ino=4611686018427389298, xinobits=3) [ 838.595851][ T5934] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 838.747806][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 838.747844][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.747883][ T5934] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 838.747907][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.761284][ T5934] usb 3-1: config 0 descriptor?? [ 838.784441][ T5934] hub 3-1:0.0: USB hub found [ 840.133729][ T5934] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 840.141796][ T5834] usb 4-1: USB disconnect, device number 70 [ 840.885232][T17258] FAULT_INJECTION: forcing a failure. [ 840.885232][T17258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.885273][T17258] CPU: 1 UID: 0 PID: 17258 Comm: syz.0.4256 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 840.885304][T17258] Tainted: [L]=SOFTLOCKUP [ 840.885312][T17258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 840.885326][T17258] Call Trace: [ 840.885335][T17258] [ 840.885345][T17258] dump_stack_lvl+0xe8/0x150 [ 840.885383][T17258] should_fail_ex+0x46b/0x600 [ 840.885423][T17258] _copy_from_user+0x2d/0xb0 [ 840.885450][T17258] ___sys_sendmsg+0x1c6/0x360 [ 840.885491][T17258] ? __pfx____sys_sendmsg+0x10/0x10 [ 840.885523][T17258] ? kstrtouint+0x6e/0xe0 [ 840.885578][T17258] ? __fget_files+0x2a/0x420 [ 840.885603][T17258] ? __fget_files+0x3a6/0x420 [ 840.885640][T17258] __sys_sendmmsg+0x282/0x4e0 [ 840.885675][T17258] ? __pfx___sys_sendmmsg+0x10/0x10 [ 840.885712][T17258] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 840.885749][T17258] ? ksys_write+0x248/0x270 [ 840.885780][T17258] ? __pfx_ksys_write+0x10/0x10 [ 840.885815][T17258] __x64_sys_sendmmsg+0xa0/0xc0 [ 840.885846][T17258] do_syscall_64+0x14d/0xf80 [ 840.885873][T17258] ? trace_irq_disable+0x3b/0x150 [ 840.885895][T17258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.885917][T17258] ? clear_bhb_loop+0x40/0x90 [ 840.885944][T17258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.885965][T17258] RIP: 0033:0x7f11cae6c629 [ 840.885996][T17258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.886015][T17258] RSP: 002b:00007f11c90c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 840.886039][T17258] RAX: ffffffffffffffda RBX: 00007f11cb0e5fa0 RCX: 00007f11cae6c629 [ 840.886054][T17258] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000003 [ 840.886068][T17258] RBP: 00007f11c90c6090 R08: 0000000000000000 R09: 0000000000000000 [ 840.886081][T17258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.886095][T17258] R13: 00007f11cb0e6038 R14: 00007f11cb0e5fa0 R15: 00007ffc430f39a8 [ 840.886130][T17258] [ 841.397459][ T5934] usbhid 3-1:0.0: can't add hid device: -71 [ 841.397577][ T5934] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 841.452158][ T5934] usb 3-1: USB disconnect, device number 88 [ 841.605718][ T5876] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 841.747543][T17284] FAULT_INJECTION: forcing a failure. [ 841.747543][T17284] name failslab, interval 1, probability 0, space 0, times 0 [ 841.747585][T17284] CPU: 1 UID: 0 PID: 17284 Comm: syz.2.4266 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 841.747614][T17284] Tainted: [L]=SOFTLOCKUP [ 841.747622][T17284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 841.747635][T17284] Call Trace: [ 841.747643][T17284] [ 841.747653][T17284] dump_stack_lvl+0xe8/0x150 [ 841.747692][T17284] should_fail_ex+0x46b/0x600 [ 841.747730][T17284] should_failslab+0xa8/0x100 [ 841.747773][T17284] __kmalloc_noprof+0xdf/0x7b0 [ 841.747803][T17284] ? kfree+0x4d/0x6c0 [ 841.747828][T17284] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 841.747867][T17284] tomoyo_realpath_from_path+0xe3/0x5d0 [ 841.747911][T17284] ? tomoyo_path_number_perm+0x219/0x630 [ 841.747939][T17284] tomoyo_path_number_perm+0x246/0x630 [ 841.747970][T17284] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 841.747999][T17284] ? __lock_acquire+0x6b5/0x2cf0 [ 841.748060][T17284] ? __fget_files+0x2a/0x420 [ 841.748089][T17284] ? __fget_files+0x2a/0x420 [ 841.748112][T17284] ? __fget_files+0x3a6/0x420 [ 841.748136][T17284] ? __fget_files+0x2a/0x420 [ 841.748165][T17284] security_file_ioctl+0xc3/0x2a0 [ 841.748197][T17284] __se_sys_ioctl+0x47/0x170 [ 841.748232][T17284] do_syscall_64+0x14d/0xf80 [ 841.748259][T17284] ? trace_irq_disable+0x3b/0x150 [ 841.748283][T17284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.748306][T17284] ? clear_bhb_loop+0x40/0x90 [ 841.748333][T17284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.748355][T17284] RIP: 0033:0x7f9f9acdc629 [ 841.748377][T17284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.748396][T17284] RSP: 002b:00007f9f98f2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 841.748420][T17284] RAX: ffffffffffffffda RBX: 00007f9f9af55fa0 RCX: 00007f9f9acdc629 [ 841.748436][T17284] RDX: 0000200000001280 RSI: 0000000000004c0a RDI: 0000000000000003 [ 841.748450][T17284] RBP: 00007f9f98f2e090 R08: 0000000000000000 R09: 0000000000000000 [ 841.748464][T17284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 841.748477][T17284] R13: 00007f9f9af56038 R14: 00007f9f9af55fa0 R15: 00007ffccc8d4428 [ 841.748513][T17284] [ 841.748523][T17284] ERROR: Out of memory at tomoyo_realpath_from_path. [ 841.755730][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 841.759680][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.759711][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.759734][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 841.759772][ T5876] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 841.759793][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.778407][ T5876] usb 2-1: config 0 descriptor?? [ 842.061324][T17289] IPVS: set_ctl: invalid protocol: 36 0.0.0.0:0 [ 842.087340][ T5876] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 842.087379][ T5876] microsoft 0003:045E:07DA.0018: ignoring exceeding usage max [ 842.166570][ T5876] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 842.166608][ T5876] microsoft 0003:045E:07DA.0018: no inputs found [ 842.166623][ T5876] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway [ 842.288628][ T5876] usb 2-1: USB disconnect, device number 104 [ 842.347102][T17299] fido_id[17299]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 842.666377][T17317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4279'. [ 842.716612][T17319] FAULT_INJECTION: forcing a failure. [ 842.716612][T17319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 842.716653][T17319] CPU: 1 UID: 0 PID: 17319 Comm: syz.0.4281 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 842.716681][T17319] Tainted: [L]=SOFTLOCKUP [ 842.716689][T17319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 842.716701][T17319] Call Trace: [ 842.716710][T17319] [ 842.716719][T17319] dump_stack_lvl+0xe8/0x150 [ 842.716756][T17319] should_fail_ex+0x46b/0x600 [ 842.716793][T17319] _copy_from_user+0x2d/0xb0 [ 842.716820][T17319] ___sys_sendmsg+0x1c6/0x360 [ 842.716854][T17319] ? __pfx____sys_sendmsg+0x10/0x10 [ 842.716914][T17319] ? __fget_files+0x2a/0x420 [ 842.716938][T17319] ? __fget_files+0x3a6/0x420 [ 842.716970][T17319] __x64_sys_sendmsg+0x1c3/0x2a0 [ 842.717007][T17319] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 842.717045][T17319] ? __pfx_ksys_write+0x10/0x10 [ 842.717087][T17319] do_syscall_64+0x14d/0xf80 [ 842.717112][T17319] ? trace_irq_disable+0x3b/0x150 [ 842.717136][T17319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.717158][T17319] ? clear_bhb_loop+0x40/0x90 [ 842.717184][T17319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.717205][T17319] RIP: 0033:0x7f11cae6c629 [ 842.717227][T17319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.717245][T17319] RSP: 002b:00007f11c90c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 842.717269][T17319] RAX: ffffffffffffffda RBX: 00007f11cb0e5fa0 RCX: 00007f11cae6c629 [ 842.717284][T17319] RDX: 0000000004000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 842.717299][T17319] RBP: 00007f11c90c6090 R08: 0000000000000000 R09: 0000000000000000 [ 842.717311][T17319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.717324][T17319] R13: 00007f11cb0e6038 R14: 00007f11cb0e5fa0 R15: 00007ffc430f39a8 [ 842.717355][T17319] [ 843.230627][T17335] atomic_op ffff88803b6b6a18 conn xmit_atomic 0000000000000000 [ 844.454943][ T5804] IPVS: starting estimator thread 0... [ 844.455355][T17349] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 844.472816][T17349] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 844.474133][T17349] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 844.474542][T17349] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 844.523796][T17351] gtp0: entered promiscuous mode [ 844.523825][T17351] gtp0: entered allmulticast mode [ 844.535915][T17353] IPVS: using max 7 ests per chain, 16800 per kthread [ 844.555393][T17349] ovl_remap_lower_ino: 8 callbacks suppressed [ 844.555416][T17349] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 844.555445][T17349] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 844.582320][T17349] overlayfs: d_ino too big (91, ino=9223372036854776291, xinobits=3) [ 844.583157][T17349] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 844.583739][T17349] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 844.584567][T17349] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 844.585237][T17349] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 844.632948][T17349] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 844.633586][T17349] overlayfs: d_ino too big (dev, ino=4611686018427387912, xinobits=3) [ 844.634432][T17349] overlayfs: d_ino too big (kernel, ino=4611686018427389298, xinobits=3) [ 844.825183][T17367] FAULT_INJECTION: forcing a failure. [ 844.825183][T17367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 844.825224][T17367] CPU: 0 UID: 0 PID: 17367 Comm: syz.0.4302 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 844.825254][T17367] Tainted: [L]=SOFTLOCKUP [ 844.825262][T17367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 844.825276][T17367] Call Trace: [ 844.825284][T17367] [ 844.825294][T17367] dump_stack_lvl+0xe8/0x150 [ 844.825331][T17367] should_fail_ex+0x46b/0x600 [ 844.825370][T17367] _copy_from_user+0x2d/0xb0 [ 844.825397][T17367] ___sys_sendmsg+0x1c6/0x360 [ 844.825433][T17367] ? __pfx____sys_sendmsg+0x10/0x10 [ 844.825501][T17367] ? __fget_files+0x2a/0x420 [ 844.825529][T17367] ? __fget_files+0x3a6/0x420 [ 844.825564][T17367] __x64_sys_sendmsg+0x1c3/0x2a0 [ 844.825593][T17367] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 844.825632][T17367] ? __pfx_ksys_write+0x10/0x10 [ 844.825683][T17367] do_syscall_64+0x14d/0xf80 [ 844.825711][T17367] ? trace_irq_disable+0x3b/0x150 [ 844.825736][T17367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.825759][T17367] ? clear_bhb_loop+0x40/0x90 [ 844.825787][T17367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.825808][T17367] RIP: 0033:0x7f11cae6c629 [ 844.825830][T17367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.825848][T17367] RSP: 002b:00007f11c90c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 844.825872][T17367] RAX: ffffffffffffffda RBX: 00007f11cb0e5fa0 RCX: 00007f11cae6c629 [ 844.825889][T17367] RDX: 0000000024008004 RSI: 0000200000000180 RDI: 0000000000000003 [ 844.825903][T17367] RBP: 00007f11c90c6090 R08: 0000000000000000 R09: 0000000000000000 [ 844.825917][T17367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.825929][T17367] R13: 00007f11cb0e6038 R14: 00007f11cb0e5fa0 R15: 00007ffc430f39a8 [ 844.825962][T17367] [ 845.605683][ T5934] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 845.726229][ T5876] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 845.805678][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 845.808389][ T5934] usb 2-1: config 0 has an invalid interface number: 136 but max is 0 [ 845.808421][ T5934] usb 2-1: config 0 has no interface number 0 [ 845.808473][ T5934] usb 2-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 845.808500][ T5934] usb 2-1: config 0 interface 136 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 845.808524][ T5934] usb 2-1: config 0 interface 136 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 845.811593][ T5934] usb 2-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 845.811623][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.811653][ T5934] usb 2-1: Product: syz [ 845.811670][ T5934] usb 2-1: Manufacturer: syz [ 845.811686][ T5934] usb 2-1: SerialNumber: syz [ 845.896086][ T5876] usb 3-1: unable to get BOS descriptor or descriptor too short [ 845.896712][ T5876] usb 3-1: not running at top speed; connect to a high speed hub [ 845.900244][ T5876] usb 3-1: config 56 has an invalid interface number: 216 but max is 0 [ 845.900322][ T5876] usb 3-1: config 56 has no interface number 0 [ 845.900373][ T5876] usb 3-1: config 56 interface 216 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64 [ 845.900405][ T5876] usb 3-1: config 56 interface 216 has no altsetting 0 [ 846.227784][ T5934] usb 2-1: config 0 descriptor?? [ 846.230532][T17395] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 846.311832][ T5934] vmk80xx 2-1:0.136: driver 'vmk80xx' failed to auto-configure device. [ 846.335116][ T5934] vmk80xx 2-1:0.136: probe with driver vmk80xx failed with error -22 [ 846.579428][ T5876] usb 3-1: New USB device found, idVendor=12d1, idProduct=554b, bcdDevice=5a.0b [ 846.579464][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.579484][ T5876] usb 3-1: Product: syz [ 846.579499][ T5876] usb 3-1: Manufacturer: syz [ 846.579514][ T5876] usb 3-1: SerialNumber: syz [ 846.667884][T17399] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 846.897785][ T5876] hub 3-1:56.216: bad descriptor, ignoring hub [ 846.897831][ T5876] hub 3-1:56.216: probe with driver hub failed with error -5 [ 846.899551][ T5804] usb 2-1: USB disconnect, device number 105 [ 846.899566][ T5876] option 3-1:56.216: GSM modem (1-port) converter detected [ 846.966960][ T5876] usb 3-1: USB disconnect, device number 89 [ 846.983666][ T5876] option 3-1:56.216: device disconnected [ 848.198533][T17473] FAULT_INJECTION: forcing a failure. [ 848.198533][T17473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 848.198693][T17473] CPU: 0 UID: 0 PID: 17473 Comm: syz.1.4348 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 848.198726][T17473] Tainted: [L]=SOFTLOCKUP [ 848.198743][T17473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 848.198757][T17473] Call Trace: [ 848.198766][T17473] [ 848.198776][T17473] dump_stack_lvl+0xe8/0x150 [ 848.198813][T17473] should_fail_ex+0x46b/0x600 [ 848.198853][T17473] _copy_from_user+0x2d/0xb0 [ 848.198879][T17473] __sys_bpf+0x229/0x950 [ 848.198909][T17473] ? __pfx___sys_bpf+0x10/0x10 [ 848.198932][T17473] ? rt_mutex_slowunlock+0x1cb/0x300 [ 848.198973][T17473] ? ksys_write+0x248/0x270 [ 848.199005][T17473] ? __pfx_ksys_write+0x10/0x10 [ 848.199043][T17473] __x64_sys_bpf+0x7c/0x90 [ 848.199067][T17473] do_syscall_64+0x14d/0xf80 [ 848.199094][T17473] ? trace_irq_disable+0x3b/0x150 [ 848.199117][T17473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.199139][T17473] ? clear_bhb_loop+0x40/0x90 [ 848.199166][T17473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.199187][T17473] RIP: 0033:0x7fb93a2bc629 [ 848.199208][T17473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.199227][T17473] RSP: 002b:00007fb938516028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 848.199251][T17473] RAX: ffffffffffffffda RBX: 00007fb93a535fa0 RCX: 00007fb93a2bc629 [ 848.199267][T17473] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 848.199282][T17473] RBP: 00007fb938516090 R08: 0000000000000000 R09: 0000000000000000 [ 848.199296][T17473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.199309][T17473] R13: 00007fb93a536038 R14: 00007fb93a535fa0 R15: 00007ffca2627678 [ 848.199345][T17473] [ 848.796416][T11693] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 849.016301][T11693] usb 2-1: Using ep0 maxpacket: 32 [ 849.425662][T11693] usb 2-1: config 0 has an invalid interface number: 136 but max is 0 [ 849.425698][T11693] usb 2-1: config 0 has no interface number 0 [ 849.425767][T11693] usb 2-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 849.425795][T11693] usb 2-1: config 0 interface 136 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 849.425818][T11693] usb 2-1: config 0 interface 136 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 849.439006][T11693] usb 2-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 849.439041][T11693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.439063][T11693] usb 2-1: Product: syz [ 849.439078][T11693] usb 2-1: Manufacturer: syz [ 849.439094][T11693] usb 2-1: SerialNumber: syz [ 849.528767][T11693] usb 2-1: config 0 descriptor?? [ 849.529745][T17479] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 849.606347][T11693] vmk80xx 2-1:0.136: driver 'vmk80xx' failed to auto-configure device. [ 849.636117][T11693] vmk80xx 2-1:0.136: probe with driver vmk80xx failed with error -22 [ 850.204139][ T5876] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 850.241910][ T5834] usb 2-1: USB disconnect, device number 106 [ 850.443973][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 850.444960][ T5876] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 850.500840][T17521] !: renamed from dummy0 (while UP) [ 850.686653][ T5876] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 850.686683][ T5876] usb 3-1: config 0 has no interface number 0 [ 850.686756][ T5876] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 850.690993][ T5876] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 850.691022][ T5876] usb 3-1: config 0 has no interface number 0 [ 850.691071][ T5876] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 850.692514][ T5876] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 850.692536][ T5876] usb 3-1: config 0 has no interface number 0 [ 850.692584][ T5876] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 850.694016][ T5876] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 850.694041][ T5876] usb 3-1: config 0 has no interface number 0 [ 850.694090][ T5876] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 850.695610][ T5876] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 850.695635][ T5876] usb 3-1: config 0 has no interface number 0 [ 850.695683][ T5876] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 850.697433][ T5876] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 850.697457][ T5876] usb 3-1: config 0 has no interface number 0 [ 850.697506][ T5876] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 850.699554][ T5876] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 850.699579][ T5876] usb 3-1: config 0 has no interface number 0 [ 850.699628][ T5876] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 850.706783][ T5876] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 850.706813][ T5876] usb 3-1: config 0 has no interface number 0 [ 850.706863][ T5876] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 850.711158][ T5876] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 850.711190][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.711210][ T5876] usb 3-1: Product: syz [ 850.711225][ T5876] usb 3-1: Manufacturer: syz [ 850.711239][ T5876] usb 3-1: SerialNumber: syz [ 850.719002][ T5876] usb 3-1: config 0 descriptor?? [ 850.897916][ T5876] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 851.094135][T17525] FAULT_INJECTION: forcing a failure. [ 851.094135][T17525] name failslab, interval 1, probability 0, space 0, times 0 [ 851.094174][T17525] CPU: 1 UID: 0 PID: 17525 Comm: syz.3.4370 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 851.094202][T17525] Tainted: [L]=SOFTLOCKUP [ 851.094209][T17525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 851.094221][T17525] Call Trace: [ 851.094230][T17525] [ 851.094239][T17525] dump_stack_lvl+0xe8/0x150 [ 851.094274][T17525] should_fail_ex+0x46b/0x600 [ 851.094310][T17525] should_failslab+0xa8/0x100 [ 851.094340][T17525] __kmalloc_noprof+0xdf/0x7b0 [ 851.094370][T17525] ? kfree+0x4d/0x6c0 [ 851.094402][T17525] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 851.094438][T17525] tomoyo_realpath_from_path+0xe3/0x5d0 [ 851.094477][T17525] ? tomoyo_path_number_perm+0x219/0x630 [ 851.094503][T17525] tomoyo_path_number_perm+0x246/0x630 [ 851.094530][T17525] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 851.094558][T17525] ? __lock_acquire+0x6b5/0x2cf0 [ 851.094617][T17525] ? __fget_files+0x2a/0x420 [ 851.094644][T17525] ? __fget_files+0x2a/0x420 [ 851.094665][T17525] ? __fget_files+0x3a6/0x420 [ 851.094685][T17525] ? __fget_files+0x2a/0x420 [ 851.094713][T17525] security_file_ioctl+0xc3/0x2a0 [ 851.094739][T17525] __se_sys_ioctl+0x47/0x170 [ 851.094765][T17525] do_syscall_64+0x14d/0xf80 [ 851.094784][T17525] ? trace_irq_disable+0x3b/0x150 [ 851.094802][T17525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.094819][T17525] ? clear_bhb_loop+0x40/0x90 [ 851.094839][T17525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.094855][T17525] RIP: 0033:0x7f9a4ca7c629 [ 851.094879][T17525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.094893][T17525] RSP: 002b:00007f9a4acd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 851.094912][T17525] RAX: ffffffffffffffda RBX: 00007f9a4ccf5fa0 RCX: 00007f9a4ca7c629 [ 851.094924][T17525] RDX: 0000200000000080 RSI: 00000000c048aec8 RDI: 0000000000000005 [ 851.094935][T17525] RBP: 00007f9a4acd6090 R08: 0000000000000000 R09: 0000000000000000 [ 851.094945][T17525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.094955][T17525] R13: 00007f9a4ccf6038 R14: 00007f9a4ccf5fa0 R15: 00007ffe2fa7e848 [ 851.094981][T17525] [ 851.094994][T17525] ERROR: Out of memory at tomoyo_realpath_from_path. [ 851.556046][T17545] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4380'. [ 852.723370][T17560] FAULT_INJECTION: forcing a failure. [ 852.723370][T17560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 852.723409][T17560] CPU: 0 UID: 0 PID: 17560 Comm: syz.3.4385 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 852.723439][T17560] Tainted: [L]=SOFTLOCKUP [ 852.723447][T17560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 852.723459][T17560] Call Trace: [ 852.723467][T17560] [ 852.723476][T17560] dump_stack_lvl+0xe8/0x150 [ 852.723513][T17560] should_fail_ex+0x46b/0x600 [ 852.723564][T17560] _copy_from_user+0x2d/0xb0 [ 852.723591][T17560] ___sys_sendmsg+0x1c6/0x360 [ 852.723626][T17560] ? __pfx____sys_sendmsg+0x10/0x10 [ 852.723687][T17560] ? __fget_files+0x2a/0x420 [ 852.723713][T17560] ? __fget_files+0x3a6/0x420 [ 852.723748][T17560] __x64_sys_sendmsg+0x1c3/0x2a0 [ 852.723777][T17560] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 852.723812][T17560] ? __pfx_ksys_write+0x10/0x10 [ 852.723853][T17560] do_syscall_64+0x14d/0xf80 [ 852.723879][T17560] ? trace_irq_disable+0x3b/0x150 [ 852.723903][T17560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.723925][T17560] ? clear_bhb_loop+0x40/0x90 [ 852.723960][T17560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.723988][T17560] RIP: 0033:0x7f9a4ca7c629 [ 852.724009][T17560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.724028][T17560] RSP: 002b:00007f9a4acd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.724051][T17560] RAX: ffffffffffffffda RBX: 00007f9a4ccf5fa0 RCX: 00007f9a4ca7c629 [ 852.724066][T17560] RDX: 0000000024008004 RSI: 0000200000000180 RDI: 0000000000000003 [ 852.724080][T17560] RBP: 00007f9a4acd6090 R08: 0000000000000000 R09: 0000000000000000 [ 852.724092][T17560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.724104][T17560] R13: 00007f9a4ccf6038 R14: 00007f9a4ccf5fa0 R15: 00007ffe2fa7e848 [ 852.724136][T17560] [ 852.763264][ T5876] usb 3-1: USB disconnect, device number 90 [ 852.975734][T17572] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 852.977792][T17572] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 852.979134][T17572] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 852.979561][T17572] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 853.067686][T17572] ovl_remap_lower_ino: 8 callbacks suppressed [ 853.067710][T17572] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 853.067735][T17572] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 853.068530][T17572] overlayfs: d_ino too big (597, ino=9223372036854778963, xinobits=3) [ 853.069152][T17572] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 853.069810][T17572] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 853.070315][T17572] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 853.070938][T17572] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 853.071441][T17572] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 853.072209][T17572] overlayfs: d_ino too big (dev, ino=4611686018427387912, xinobits=3) [ 853.074505][T17572] overlayfs: d_ino too big (kernel, ino=4611686018427389298, xinobits=3) [ 853.161685][T17578] FAULT_INJECTION: forcing a failure. [ 853.161685][T17578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.161723][T17578] CPU: 0 UID: 0 PID: 17578 Comm: syz.0.4391 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 853.161749][T17578] Tainted: [L]=SOFTLOCKUP [ 853.161756][T17578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 853.161767][T17578] Call Trace: [ 853.161775][T17578] [ 853.161784][T17578] dump_stack_lvl+0xe8/0x150 [ 853.161816][T17578] should_fail_ex+0x46b/0x600 [ 853.161860][T17578] _copy_to_user+0x31/0xb0 [ 853.161885][T17578] simple_read_from_buffer+0xe1/0x170 [ 853.161912][T17578] proc_fail_nth_read+0x1be/0x230 [ 853.161936][T17578] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 853.161960][T17578] ? rw_verify_area+0x2ac/0x4e0 [ 853.161989][T17578] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 853.162011][T17578] vfs_read+0x212/0xa80 [ 853.162044][T17578] ? __pfx_vfs_read+0x10/0x10 [ 853.162070][T17578] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 853.162096][T17578] ? lockdep_hardirqs_on+0x7a/0x110 [ 853.162120][T17578] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 853.162143][T17578] ? mutex_lock_nested+0x152/0x1d0 [ 853.162161][T17578] ? fdget_pos+0x252/0x320 [ 853.162191][T17578] ksys_read+0x156/0x270 [ 853.162219][T17578] ? __pfx_ksys_read+0x10/0x10 [ 853.162255][T17578] do_syscall_64+0x14d/0xf80 [ 853.162277][T17578] ? trace_irq_disable+0x3b/0x150 [ 853.162314][T17578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.162334][T17578] ? clear_bhb_loop+0x40/0x90 [ 853.162358][T17578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.162376][T17578] RIP: 0033:0x7f11cae2cece [ 853.162395][T17578] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 853.162411][T17578] RSP: 002b:00007f11c90c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 853.162433][T17578] RAX: ffffffffffffffda RBX: 00007f11c90c66c0 RCX: 00007f11cae2cece [ 853.162447][T17578] RDX: 000000000000000f RSI: 00007f11c90c60a0 RDI: 0000000000000004 [ 853.162460][T17578] RBP: 00007f11c90c6090 R08: 0000000000000000 R09: 0000000000000000 [ 853.162471][T17578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.162483][T17578] R13: 00007f11cb0e6038 R14: 00007f11cb0e5fa0 R15: 00007ffc430f39a8 [ 853.162514][T17578] [ 853.275677][ T5876] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 853.440175][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 853.450966][ T5876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.451029][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.451076][ T5876] usb 3-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 853.451099][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.493385][ T5876] usb 3-1: config 0 descriptor?? [ 853.539740][ T5876] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count [ 853.825326][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 853.838264][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 853.841062][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 853.881682][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 853.882524][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 853.952608][T17584] lo speed is unknown, defaulting to 1000 [ 854.022623][ T5876] maltron 0003:058F:9410.0019: unknown main item tag 0x0 [ 854.022664][ T5876] maltron 0003:058F:9410.0019: unknown main item tag 0x0 [ 854.022692][ T5876] maltron 0003:058F:9410.0019: unknown main item tag 0x0 [ 854.022718][ T5876] maltron 0003:058F:9410.0019: unknown main item tag 0x0 [ 854.022745][ T5876] maltron 0003:058F:9410.0019: unknown main item tag 0x0 [ 854.077143][ T5876] maltron 0003:058F:9410.0019: hidraw0: USB HID v0.00 Device [HID 058f:9410] on usb-dummy_hcd.2-1/input0 [ 854.228990][ T5876] usb 3-1: USB disconnect, device number 91 [ 854.274291][T17590] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4395'. [ 854.777260][T17604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4401'. [ 855.022336][T17608] gtp0: entered promiscuous mode [ 855.022367][T17608] gtp0: entered allmulticast mode [ 855.096036][ T5804] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 855.178718][T17611] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 855.183521][T17611] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 855.191636][T17611] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 855.200754][T17611] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 855.309475][ T5804] usb 4-1: config 0 has an invalid interface number: 238 but max is 0 [ 855.309508][ T5804] usb 4-1: config 0 has no interface number 0 [ 855.309560][ T5804] usb 4-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 855.309584][ T5804] usb 4-1: config 0 interface 238 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 855.309611][ T5804] usb 4-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 855.309634][ T5804] usb 4-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 855.328077][ T5804] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 855.328106][ T5804] usb 4-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 855.328125][ T5804] usb 4-1: Product: syz [ 855.328138][ T5804] usb 4-1: Manufacturer: syz [ 855.328151][ T5804] usb 4-1: SerialNumber: syz [ 855.338334][ T5804] usb 4-1: config 0 descriptor?? [ 855.358044][ T5804] ni6501 4-1:0.238: driver 'ni6501' failed to auto-configure device. [ 855.484030][ T5946] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.633791][T17606] vlan2: entered promiscuous mode [ 855.633816][T17606] hsr0: entered promiscuous mode [ 855.662146][ T5804] usb 4-1: USB disconnect, device number 71 [ 855.792598][T17635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4414'. [ 856.989043][ T5801] Bluetooth: hci2: command tx timeout [ 857.139826][ T5946] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.396553][T17646] binder: 17645:17646 ioctl 4c00 ffffffffffffffff returned -22 [ 857.562310][ T5946] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.676794][T17584] chnl_net:caif_netlink_parms(): no params data found [ 859.066306][ T5801] Bluetooth: hci2: command tx timeout [ 859.373054][T17670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4417'. [ 859.491308][ T5946] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.670153][T17668] gtp1: entered promiscuous mode [ 859.670182][T17668] gtp1: entered allmulticast mode [ 860.981233][T17689] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.4431'. [ 861.075283][T17584] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.075481][T17584] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.091029][T17584] bridge_slave_0: entered allmulticast mode [ 861.093947][T17584] bridge_slave_0: entered promiscuous mode [ 861.119631][T17584] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.119858][T17584] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.120121][T17584] bridge_slave_1: entered allmulticast mode [ 861.145852][ T5801] Bluetooth: hci2: command tx timeout [ 861.158219][T17584] bridge_slave_1: entered promiscuous mode [ 861.389366][T17584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.445764][T11693] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 861.448776][T17584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 861.610450][T11693] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 861.610487][T11693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.610508][T11693] usb 4-1: Product: syz [ 861.610521][T11693] usb 4-1: Manufacturer: syz [ 861.610535][T11693] usb 4-1: SerialNumber: syz [ 861.645640][ T5876] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 861.692853][T17584] team0: Port device team_slave_0 added [ 861.693854][T11693] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 861.756388][T17584] team0: Port device team_slave_1 added [ 861.756672][ T5946] bridge_slave_1: left allmulticast mode [ 861.756697][ T5946] bridge_slave_1: left promiscuous mode [ 861.757060][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.775754][ T996] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 861.797839][ T5876] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 861.797871][ T5876] usb 2-1: config 0 has no interface number 0 [ 861.797920][ T5876] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 861.801570][ T5876] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 861.801598][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.801610][ T5876] usb 2-1: Product: syz [ 861.801619][ T5876] usb 2-1: Manufacturer: syz [ 861.801627][ T5876] usb 2-1: SerialNumber: syz [ 861.860135][ T5876] usb 2-1: config 0 descriptor?? [ 861.870057][T17705] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 861.892959][ T31] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 861.906427][ T996] usb 3-1: device descriptor read/64, error -71 [ 861.976334][ T5946] bridge_slave_0: left allmulticast mode [ 861.976367][ T5946] bridge_slave_0: left promiscuous mode [ 861.978412][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.083629][ T5876] radio-si470x 2-1:0.35: this is not a si470x device. [ 862.121904][ T5876] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 862.145783][ T996] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 862.293537][ T996] usb 3-1: device descriptor read/64, error -71 [ 862.396288][ T996] usb usb3-port1: attempt power cycle [ 862.863286][ T5876] usb 2-1: USB disconnect, device number 107 [ 863.335670][ T5801] Bluetooth: hci2: command tx timeout [ 863.506226][ T31] usb 4-1: Service connection timeout for: 256 [ 863.506256][ T31] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 863.528275][ T5804] usb 4-1: USB disconnect, device number 72 [ 863.554946][ T31] ath9k_htc: Failed to initialize the device [ 863.555835][ T5804] usb 4-1: ath9k_htc: USB layer deinitialized [ 863.565781][ T996] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 863.586709][ T996] usb 3-1: device descriptor read/8, error -71 [ 863.837182][ T996] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 863.881470][ T996] usb 3-1: device descriptor read/8, error -71 [ 863.996273][ T996] usb usb3-port1: unable to enumerate USB device [ 865.605683][ T5804] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 865.769764][ T5804] usb 3-1: unable to get BOS descriptor or descriptor too short [ 865.770382][ T5804] usb 3-1: not running at top speed; connect to a high speed hub [ 865.771598][ T5804] usb 3-1: config 56 has an invalid interface number: 216 but max is 0 [ 865.771642][ T5804] usb 3-1: config 56 has no interface number 0 [ 865.771692][ T5804] usb 3-1: config 56 interface 216 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64 [ 865.771723][ T5804] usb 3-1: config 56 interface 216 has no altsetting 0 [ 865.774278][ T5804] usb 3-1: New USB device found, idVendor=12d1, idProduct=554b, bcdDevice=5a.0b [ 865.774309][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.774329][ T5804] usb 3-1: Product: syz [ 865.774345][ T5804] usb 3-1: Manufacturer: syz [ 865.774361][ T5804] usb 3-1: SerialNumber: syz [ 865.856204][T17779] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 866.072369][ T5804] hub 3-1:56.216: bad descriptor, ignoring hub [ 866.072415][ T5804] hub 3-1:56.216: probe with driver hub failed with error -5 [ 866.074248][ T5804] option 3-1:56.216: GSM modem (1-port) converter detected [ 866.148660][ T5804] usb 3-1: USB disconnect, device number 96 [ 866.184617][ T5946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 866.192898][ T5804] option 3-1:56.216: device disconnected [ 866.276574][ T5946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 866.322970][ T5946] bond0 (unregistering): Released all slaves [ 866.340374][ T5946] bond1 (unregistering): Released all slaves [ 866.400647][ T5946] bond2 (unregistering): (slave lo): Releasing backup interface [ 866.436394][ T5946] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 866.486952][ T5946] bond2 (unregistering): Released all slaves [ 866.780181][T17768] gtp0: entered promiscuous mode [ 866.780210][T17768] gtp0: entered allmulticast mode [ 866.903164][ T5946] IPVS: stopping backup sync thread 11746 ... [ 866.977982][T17584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.978004][T17584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.978035][T17584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.231140][T17584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.231154][T17584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.231172][T17584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.456698][T11693] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 868.456856][ T996] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 868.605617][T11693] usb 3-1: Using ep0 maxpacket: 32 [ 868.611336][ T996] usb 4-1: unable to get BOS descriptor or descriptor too short [ 868.612487][ T996] usb 4-1: not running at top speed; connect to a high speed hub [ 868.614138][ T996] usb 4-1: config 56 has an invalid interface number: 216 but max is 0 [ 868.614161][ T996] usb 4-1: config 56 has no interface number 0 [ 868.614190][ T996] usb 4-1: config 56 interface 216 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64 [ 868.614247][ T996] usb 4-1: config 56 interface 216 has no altsetting 0 [ 868.615902][T11693] usb 3-1: config 0 has an invalid interface number: 136 but max is 0 [ 868.615926][T11693] usb 3-1: config 0 has no interface number 0 [ 868.615969][T11693] usb 3-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 868.616124][T11693] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 868.616146][T11693] usb 3-1: config 0 interface 136 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 868.619963][T11693] usb 3-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 868.619989][T11693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.620058][T11693] usb 3-1: Product: syz [ 868.620072][T11693] usb 3-1: Manufacturer: syz [ 868.620086][T11693] usb 3-1: SerialNumber: syz [ 868.633251][ T996] usb 4-1: New USB device found, idVendor=12d1, idProduct=554b, bcdDevice=5a.0b [ 868.633281][ T996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.633300][ T996] usb 4-1: Product: syz [ 868.633314][ T996] usb 4-1: Manufacturer: syz [ 868.633327][ T996] usb 4-1: SerialNumber: syz [ 868.654554][T11693] usb 3-1: config 0 descriptor?? [ 868.655434][T17828] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 868.663990][T17824] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 868.728287][T11693] vmk80xx 3-1:0.136: driver 'vmk80xx' failed to auto-configure device. [ 868.747440][T11693] vmk80xx 3-1:0.136: probe with driver vmk80xx failed with error -22 [ 868.888942][T17584] hsr_slave_0: entered promiscuous mode [ 868.909337][T17584] hsr_slave_1: entered promiscuous mode [ 868.914366][T17584] debugfs: 'hsr0' already exists in 'hsr' [ 868.914398][T17584] Cannot create hsr debugfs directory [ 868.956980][ T996] hub 4-1:56.216: bad descriptor, ignoring hub [ 868.957028][ T996] hub 4-1:56.216: probe with driver hub failed with error -5 [ 868.964867][ T996] option 4-1:56.216: GSM modem (1-port) converter detected [ 869.020329][ T996] usb 4-1: USB disconnect, device number 73 [ 869.023461][ T996] option 4-1:56.216: device disconnected [ 869.147534][ T5877] usb 3-1: USB disconnect, device number 97 [ 869.196841][T17854] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4498'. [ 869.585748][ T5946] hsr_slave_0: left promiscuous mode [ 869.646704][ T5946] hsr_slave_1: left promiscuous mode [ 869.647882][ T5946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.647911][ T5946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.726897][ T5946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.726929][ T5946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.750827][ T36] audit: type=1804 audit(1771676173.171:3068): pid=17872 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.4504" name="bus" dev="ramfs" ino=58500 res=1 errno=0 [ 869.757712][ T36] audit: type=1804 audit(1771676173.231:3069): pid=17875 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.4504" name="bus" dev="ramfs" ino=58500 res=1 errno=0 [ 869.927139][ T5946] veth1_macvtap: left promiscuous mode [ 869.930330][ T5946] veth0_macvtap: left promiscuous mode [ 869.930631][ T5946] veth1_vlan: left promiscuous mode [ 869.930843][ T5946] veth0_vlan: left promiscuous mode [ 870.429751][T17897] atomic_op ffff888031238218 conn xmit_atomic 0000000000000000 [ 871.256406][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.256499][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.825773][T17911] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4513'. [ 872.436591][ T5946] team0 (unregistering): Port device team_slave_1 removed [ 872.506464][ T5946] team0 (unregistering): Port device team_slave_0 removed [ 873.777059][ T5868] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 874.385768][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 874.386781][ T5868] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 874.388418][ T5868] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 874.388444][ T5868] usb 4-1: config 0 has no interface number 0 [ 874.388504][ T5868] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 874.390458][ T5868] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 874.390482][ T5868] usb 4-1: config 0 has no interface number 0 [ 874.390541][ T5868] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 874.391959][ T5868] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 874.391983][ T5868] usb 4-1: config 0 has no interface number 0 [ 874.392031][ T5868] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 874.394569][ T5868] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 874.394593][ T5868] usb 4-1: config 0 has no interface number 0 [ 874.394642][ T5868] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 874.396115][ T5868] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 874.396140][ T5868] usb 4-1: config 0 has no interface number 0 [ 874.396188][ T5868] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 874.397615][ T5868] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 874.397638][ T5868] usb 4-1: config 0 has no interface number 0 [ 874.397685][ T5868] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 874.399423][ T5868] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 874.399448][ T5868] usb 4-1: config 0 has no interface number 0 [ 874.399505][ T5868] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 874.400946][ T5868] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 874.400969][ T5868] usb 4-1: config 0 has no interface number 0 [ 874.401016][ T5868] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 874.433035][ T5868] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 874.433066][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.433085][ T5868] usb 4-1: Product: syz [ 874.433099][ T5868] usb 4-1: Manufacturer: syz [ 874.433112][ T5868] usb 4-1: SerialNumber: syz [ 874.448726][ T5868] usb 4-1: config 0 descriptor?? [ 874.458649][ T5868] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 874.595926][T11693] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 874.712955][T17976] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 874.713001][T17976] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 874.713022][T17976] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 874.815758][T11693] usb 3-1: Using ep0 maxpacket: 32 [ 874.816646][T11693] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 874.825074][T11693] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 874.825104][T11693] usb 3-1: config 0 has no interface number 0 [ 874.825158][T11693] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 874.825182][T11693] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 874.829307][T11693] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 874.829332][T11693] usb 3-1: config 0 has no interface number 0 [ 874.829377][T11693] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 874.829397][T11693] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 874.831227][T11693] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 874.831248][T11693] usb 3-1: config 0 has no interface number 0 [ 874.831290][T11693] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 874.831311][T11693] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 874.835171][T11693] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 874.835194][T11693] usb 3-1: config 0 has no interface number 0 [ 874.835237][T11693] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 874.835258][T11693] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 874.840186][T11693] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 874.840214][T11693] usb 3-1: config 0 has no interface number 0 [ 874.840264][T11693] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 874.840289][T11693] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 874.853087][T11693] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 874.853115][T11693] usb 3-1: config 0 has no interface number 0 [ 874.853162][T11693] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 874.853183][T11693] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 874.859660][T11693] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 874.859688][T11693] usb 3-1: config 0 has no interface number 0 [ 874.859733][T11693] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 874.859755][T11693] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 874.868017][T11693] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 874.868044][T11693] usb 3-1: config 0 has no interface number 0 [ 874.868091][T11693] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 874.868112][T11693] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 874.936444][T11693] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 874.936476][T11693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.936495][T11693] usb 3-1: Product: syz [ 874.936509][T11693] usb 3-1: Manufacturer: syz [ 874.936523][T11693] usb 3-1: SerialNumber: syz [ 874.953690][T11693] usb 3-1: config 0 descriptor?? [ 874.979465][T11693] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 875.070746][T17998] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 875.180147][T11693] etas_es58x 3-1:0.2: could not retrieve the product info string [ 875.510270][T11693] usb 3-1: USB disconnect, device number 98 [ 875.530527][T11693] etas_es58x 3-1:0.2: Disconnecting syz syz [ 876.180286][T18023] atomic_op ffff888030e85218 conn xmit_atomic 0000000000000000 [ 877.285790][ T5877] usb 4-1: USB disconnect, device number 74 [ 877.480846][T18038] nbd: couldn't find a device at index 0 [ 877.625787][ T5934] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 877.776067][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 877.778023][ T5934] usb 2-1: config 0 has an invalid interface number: 136 but max is 0 [ 877.778053][ T5934] usb 2-1: config 0 has no interface number 0 [ 877.778091][ T5934] usb 2-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 877.778106][ T5934] usb 2-1: config 0 interface 136 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 877.778119][ T5934] usb 2-1: config 0 interface 136 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 877.780485][ T5934] usb 2-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 877.780505][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.780517][ T5934] usb 2-1: Product: syz [ 877.780525][ T5934] usb 2-1: Manufacturer: syz [ 877.780534][ T5934] usb 2-1: SerialNumber: syz [ 877.789471][ T5934] usb 2-1: config 0 descriptor?? [ 877.818340][T18031] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 877.887762][ T5934] vmk80xx 2-1:0.136: driver 'vmk80xx' failed to auto-configure device. [ 877.929935][ T5934] vmk80xx 2-1:0.136: probe with driver vmk80xx failed with error -22 [ 878.067175][ T5868] usb 2-1: USB disconnect, device number 108 [ 879.615699][ T5876] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 879.770521][ T5876] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 879.770557][ T5876] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 879.770584][ T5876] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 879.770610][ T5876] usb 4-1: config 0 interface 0 has no altsetting 0 [ 879.770650][ T5876] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 879.770670][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.903538][ T5876] usb 4-1: config 0 descriptor?? [ 879.904745][T18076] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 880.118281][T18100] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 880.120371][T18100] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 880.132371][T18100] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 880.148976][T18100] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 880.208278][T18100] ovl_remap_lower_ino: 26 callbacks suppressed [ 880.208300][T18100] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 880.208326][T18100] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 880.208859][T18100] overlayfs: d_ino too big (118, ino=9223372036854776430, xinobits=3) [ 880.209383][T18100] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 880.209945][T18100] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 880.210550][T18100] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 880.211101][T18100] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 880.211675][T18100] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 880.212252][T18100] overlayfs: d_ino too big (dev, ino=4611686018427387912, xinobits=3) [ 880.212898][T18100] overlayfs: d_ino too big (kernel, ino=4611686018427389298, xinobits=3) [ 880.354704][T17584] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 880.410944][ T5876] hid-u2fzero 0003:10C4:8ACF.001A: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.3-1/input0 [ 880.413626][ T5876] hid-u2fzero 0003:10C4:8ACF.001A: U2F Zero LED initialised [ 880.430706][ T5876] hid-u2fzero 0003:10C4:8ACF.001A: U2F Zero RNG initialised [ 880.456007][T17584] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 880.495817][T17584] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 880.542114][T17584] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 880.559703][ T5876] usb 4-1: USB disconnect, device number 75 [ 880.711702][T18109] fido_id[18109]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 882.607206][T17584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 882.736091][ T10] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 882.775482][T17584] 8021q: adding VLAN 0 to HW filter on device team0 [ 882.854764][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.881125][ T1229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 882.931069][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.931319][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 882.965606][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 882.968124][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.968731][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.968760][ T10] usb 2-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 882.968773][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.014167][ T10] usb 2-1: config 0 descriptor?? [ 883.039769][ T10] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count [ 883.290907][T18144] FAULT_INJECTION: forcing a failure. [ 883.290907][T18144] name failslab, interval 1, probability 0, space 0, times 0 [ 883.290949][T18144] CPU: 1 UID: 0 PID: 18144 Comm: syz.3.4599 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 883.290977][T18144] Tainted: [L]=SOFTLOCKUP [ 883.290985][T18144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 883.290998][T18144] Call Trace: [ 883.291006][T18144] [ 883.291016][T18144] dump_stack_lvl+0xe8/0x150 [ 883.291053][T18144] should_fail_ex+0x46b/0x600 [ 883.291089][T18144] should_failslab+0xa8/0x100 [ 883.291122][T18144] kmem_cache_alloc_noprof+0x87/0x680 [ 883.291150][T18144] ? locks_get_lock_context+0x33f/0x5e0 [ 883.291178][T18144] ? flock_lock_inode+0x23a/0x1340 [ 883.291211][T18144] flock_lock_inode+0x23a/0x1340 [ 883.291238][T18144] ? __lock_acquire+0x6b5/0x2cf0 [ 883.291261][T18144] ? __pfx_smack_log+0x10/0x10 [ 883.291287][T18144] ? __pfx_flock_lock_inode+0x10/0x10 [ 883.291326][T18144] locks_lock_inode_wait+0x10d/0x460 [ 883.291356][T18144] ? __pfx_locks_lock_inode_wait+0x10/0x10 [ 883.291393][T18144] ? __rt_spin_lock_init+0x3e/0x50 [ 883.291430][T18144] __se_sys_flock+0x4ba/0x660 [ 883.291457][T18144] ? __pfx___se_sys_flock+0x10/0x10 [ 883.291514][T18144] ? __pfx_ksys_write+0x10/0x10 [ 883.291541][T18144] ? __task_pid_nr_ns+0x28/0x470 [ 883.291575][T18144] do_syscall_64+0x14d/0xf80 [ 883.291603][T18144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.291625][T18144] ? clear_bhb_loop+0x40/0x90 [ 883.291651][T18144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.291673][T18144] RIP: 0033:0x7f9a4ca7c629 [ 883.291695][T18144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.291723][T18144] RSP: 002b:00007f9a4acd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 883.291747][T18144] RAX: ffffffffffffffda RBX: 00007f9a4ccf5fa0 RCX: 00007f9a4ca7c629 [ 883.291762][T18144] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000005 [ 883.291775][T18144] RBP: 00007f9a4acd6090 R08: 0000000000000000 R09: 0000000000000000 [ 883.291788][T18144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 883.291801][T18144] R13: 00007f9a4ccf6038 R14: 00007f9a4ccf5fa0 R15: 00007ffe2fa7e848 [ 883.291835][T18144] [ 883.474893][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 883.475283][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 883.475868][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 883.476025][ T10] usbhid 2-1:0.0: can't add hid device: -32 [ 883.476132][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 883.506392][ T10] usb 2-1: USB disconnect, device number 109 [ 884.112633][T18168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4605'. [ 884.112677][T18168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4605'. [ 884.361548][T17584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.482847][T18181] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 884.502483][T18181] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 884.509280][T18181] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 884.509716][T18181] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 884.559076][ T10] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 884.563001][T17584] veth0_vlan: entered promiscuous mode [ 884.657839][T17584] veth1_vlan: entered promiscuous mode [ 884.725702][ T10] usb 2-1: device descriptor read/64, error -71 [ 884.756247][T17584] veth0_macvtap: entered promiscuous mode [ 884.789442][T17584] veth1_macvtap: entered promiscuous mode [ 884.833063][T17584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 884.850769][T17584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 884.880466][ T5944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.890237][ T5944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.890456][ T5944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.890491][ T5944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.975701][ T10] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 885.109011][ T10] usb 2-1: device descriptor read/64, error -71 [ 885.216319][ T10] usb usb2-port1: attempt power cycle [ 885.419873][ T1229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.419898][ T1229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.555707][ T10] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 885.576745][ T10] usb 2-1: device descriptor read/8, error -71 [ 885.748286][T18206] FAULT_INJECTION: forcing a failure. [ 885.748286][T18206] name failslab, interval 1, probability 0, space 0, times 0 [ 885.748328][T18206] CPU: 0 UID: 0 PID: 18206 Comm: syz.3.4614 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 885.748357][T18206] Tainted: [L]=SOFTLOCKUP [ 885.748365][T18206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 885.748389][T18206] Call Trace: [ 885.748399][T18206] [ 885.748409][T18206] dump_stack_lvl+0xe8/0x150 [ 885.748447][T18206] should_fail_ex+0x46b/0x600 [ 885.748487][T18206] should_failslab+0xa8/0x100 [ 885.748523][T18206] __kmalloc_noprof+0xdf/0x7b0 [ 885.748552][T18206] ? kfree+0x4d/0x6c0 [ 885.748578][T18206] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 885.748618][T18206] tomoyo_realpath_from_path+0xe3/0x5d0 [ 885.748660][T18206] ? tomoyo_path_number_perm+0x219/0x630 [ 885.748689][T18206] tomoyo_path_number_perm+0x246/0x630 [ 885.748720][T18206] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 885.748751][T18206] ? __lock_acquire+0x6b5/0x2cf0 [ 885.748819][T18206] ? __fget_files+0x2a/0x420 [ 885.748850][T18206] ? __fget_files+0x2a/0x420 [ 885.748873][T18206] ? __fget_files+0x3a6/0x420 [ 885.748897][T18206] ? __fget_files+0x2a/0x420 [ 885.748927][T18206] security_file_ioctl+0xc3/0x2a0 [ 885.748958][T18206] __se_sys_ioctl+0x47/0x170 [ 885.748992][T18206] do_syscall_64+0x14d/0xf80 [ 885.749020][T18206] ? trace_irq_disable+0x3b/0x150 [ 885.749045][T18206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.749068][T18206] ? clear_bhb_loop+0x40/0x90 [ 885.749095][T18206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.749118][T18206] RIP: 0033:0x7f9a4ca7c629 [ 885.749139][T18206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.749158][T18206] RSP: 002b:00007f9a4ac94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 885.749184][T18206] RAX: ffffffffffffffda RBX: 00007f9a4ccf6180 RCX: 00007f9a4ca7c629 [ 885.749200][T18206] RDX: 0000000000000000 RSI: 0000000000003b89 RDI: 0000000000000005 [ 885.749214][T18206] RBP: 00007f9a4ac94090 R08: 0000000000000000 R09: 0000000000000000 [ 885.749228][T18206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.749241][T18206] R13: 00007f9a4ccf6218 R14: 00007f9a4ccf6180 R15: 00007ffe2fa7e848 [ 885.749277][T18206] [ 885.749287][T18206] ERROR: Out of memory at tomoyo_realpath_from_path. [ 885.753089][T11693] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 886.628704][ T10] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 886.646472][ T10] usb 2-1: device descriptor read/8, error -71 [ 886.746505][ T6741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.746529][ T6741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.759665][ T10] usb usb2-port1: unable to enumerate USB device [ 886.855722][T11693] usb 3-1: Using ep0 maxpacket: 32 [ 886.873450][T11693] usb 3-1: config 0 has an invalid interface number: 136 but max is 0 [ 886.873480][T11693] usb 3-1: config 0 has no interface number 0 [ 886.873532][T11693] usb 3-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 886.873559][T11693] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 886.873581][T11693] usb 3-1: config 0 interface 136 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 886.935713][T11693] usb 3-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 886.935747][T11693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.935768][T11693] usb 3-1: Product: syz [ 886.935783][T11693] usb 3-1: Manufacturer: syz [ 886.935797][T11693] usb 3-1: SerialNumber: syz [ 886.976783][T11693] usb 3-1: config 0 descriptor?? [ 886.977623][T18200] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 887.015724][T11693] vmk80xx 3-1:0.136: driver 'vmk80xx' failed to auto-configure device. [ 887.020614][T11693] vmk80xx 3-1:0.136: probe with driver vmk80xx failed with error -22 [ 887.180606][T18226] FAULT_INJECTION: forcing a failure. [ 887.180606][T18226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 887.180646][T18226] CPU: 0 UID: 0 PID: 18226 Comm: syz.0.4393 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 887.180676][T18226] Tainted: [L]=SOFTLOCKUP [ 887.180683][T18226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 887.180694][T18226] Call Trace: [ 887.180702][T18226] [ 887.180711][T18226] dump_stack_lvl+0xe8/0x150 [ 887.180747][T18226] should_fail_ex+0x46b/0x600 [ 887.180784][T18226] _copy_from_user+0x2d/0xb0 [ 887.180810][T18226] ___sys_sendmsg+0x1c6/0x360 [ 887.180845][T18226] ? __pfx____sys_sendmsg+0x10/0x10 [ 887.180910][T18226] ? __fget_files+0x2a/0x420 [ 887.181030][T18226] ? __fget_files+0x3a6/0x420 [ 887.181067][T18226] __x64_sys_sendmsg+0x1c3/0x2a0 [ 887.181096][T18226] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 887.181131][T18226] ? __pfx_ksys_write+0x10/0x10 [ 887.181172][T18226] do_syscall_64+0x14d/0xf80 [ 887.181216][T18226] ? trace_irq_disable+0x3b/0x150 [ 887.181241][T18226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.181262][T18226] ? clear_bhb_loop+0x40/0x90 [ 887.181289][T18226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.181310][T18226] RIP: 0033:0x7f1781dbc629 [ 887.181330][T18226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.181348][T18226] RSP: 002b:00007f178000e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 887.181369][T18226] RAX: ffffffffffffffda RBX: 00007f1782035fa0 RCX: 00007f1781dbc629 [ 887.181385][T18226] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000003 [ 887.181399][T18226] RBP: 00007f178000e090 R08: 0000000000000000 R09: 0000000000000000 [ 887.181412][T18226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.181425][T18226] R13: 00007f1782036038 R14: 00007f1782035fa0 R15: 00007ffd2e476b98 [ 887.181460][T18226] [ 888.175533][T18237] atomic_op ffff88803b6b6a18 conn xmit_atomic 0000000000000000 [ 888.346497][ T5804] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 889.110916][T18240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 889.137882][T18240] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 889.138544][T18240] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 889.140059][T18240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 889.144309][T18240] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 889.185691][ T5804] usb 1-1: Using ep0 maxpacket: 32 [ 889.228917][ T5804] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 889.228948][ T5804] usb 1-1: config 0 has no interface number 0 [ 889.238948][ T5834] usb 3-1: USB disconnect, device number 99 [ 889.253618][ T5804] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 889.253654][ T5804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.253676][ T5804] usb 1-1: Product: syz [ 889.253692][ T5804] usb 1-1: Manufacturer: syz [ 889.253708][ T5804] usb 1-1: SerialNumber: syz [ 889.307297][ T5804] usb 1-1: config 0 descriptor?? [ 889.409557][ T5804] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 889.409587][ T5804] usb 1-1: selecting invalid altsetting 1 [ 889.409613][ T5804] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 889.451793][ T5804] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 889.452288][ T5804] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 889.452360][ T5804] usb 1-1: media controller created [ 889.462944][T18239] lo speed is unknown, defaulting to 1000 [ 889.539995][ T5804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 890.028842][T18247] atomic_op ffff888039d44a18 conn xmit_atomic 0000000000000000 [ 890.937311][T18236] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 891.028738][ T5804] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 891.028803][ T5804] zl10353_read_register: readreg error (reg=127, ret==-32) [ 891.226771][T18240] Bluetooth: hci5: command tx timeout [ 891.415714][ T5804] usb 1-1: USB disconnect, device number 55 [ 891.426501][T18256] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4630'. [ 891.765737][ T5804] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 893.327990][T18240] Bluetooth: hci5: command tx timeout [ 893.420905][ T5804] usb 1-1: Using ep0 maxpacket: 8 [ 893.430189][ T5804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.430241][ T5804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.430269][ T5804] usb 1-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 893.430291][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.450728][ T5804] usb 1-1: config 0 descriptor?? [ 893.501090][ T5804] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count [ 893.947528][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 893.948101][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 893.948497][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 893.948685][ T5804] usbhid 1-1:0.0: can't add hid device: -32 [ 893.948794][ T5804] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 894.002925][ T5804] usb 1-1: USB disconnect, device number 56 [ 894.570485][ T1229] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.855772][T11693] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 895.005832][T11693] usb 4-1: Using ep0 maxpacket: 32 [ 895.009494][T11693] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 895.009524][T11693] usb 4-1: config 0 has no interface number 0 [ 895.009574][T11693] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 895.009602][T11693] usb 4-1: config 0 interface 85 has no altsetting 0 [ 895.014946][T11693] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 895.014979][T11693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.015008][T11693] usb 4-1: Product: syz [ 895.015027][T11693] usb 4-1: Manufacturer: syz [ 895.015042][T11693] usb 4-1: SerialNumber: syz [ 895.029532][ T1229] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.048158][T11693] usb 4-1: config 0 descriptor?? [ 895.386698][ T5801] Bluetooth: hci5: command tx timeout [ 895.565808][T11693] appletouch 4-1:0.85: Failed to read mode from device. [ 895.566050][T11693] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 895.590384][ T1229] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.617317][T11693] usb 4-1: USB disconnect, device number 76 [ 895.807814][T18239] chnl_net:caif_netlink_parms(): no params data found [ 895.974509][T18291] atomic_op ffff88803d460218 conn xmit_atomic 0000000000000000 [ 897.189280][T18304] FAULT_INJECTION: forcing a failure. [ 897.189280][T18304] name failslab, interval 1, probability 0, space 0, times 0 [ 897.189356][T18304] CPU: 1 UID: 0 PID: 18304 Comm: syz.2.4639 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 897.189382][T18304] Tainted: [L]=SOFTLOCKUP [ 897.189388][T18304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 897.189399][T18304] Call Trace: [ 897.189407][T18304] [ 897.189417][T18304] dump_stack_lvl+0xe8/0x150 [ 897.189454][T18304] should_fail_ex+0x46b/0x600 [ 897.189493][T18304] should_failslab+0xa8/0x100 [ 897.189524][T18304] __kmalloc_noprof+0xdf/0x7b0 [ 897.189545][T18304] ? kfree+0x4d/0x6c0 [ 897.189563][T18304] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 897.189586][T18304] ? rcu_is_watching+0x15/0xb0 [ 897.189615][T18304] tomoyo_realpath_from_path+0xe3/0x5d0 [ 897.189647][T18304] ? tomoyo_path_number_perm+0x219/0x630 [ 897.189667][T18304] tomoyo_path_number_perm+0x246/0x630 [ 897.189689][T18304] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 897.189712][T18304] ? __lock_acquire+0x6b5/0x2cf0 [ 897.189729][T18304] ? __pfx___schedule+0x10/0x10 [ 897.189781][T18304] ? security_file_ioctl+0x19/0x2a0 [ 897.189807][T18304] security_file_ioctl+0xc3/0x2a0 [ 897.189829][T18304] __se_sys_ioctl+0x47/0x170 [ 897.189855][T18304] do_syscall_64+0x14d/0xf80 [ 897.189875][T18304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.189892][T18304] ? clear_bhb_loop+0x40/0x90 [ 897.189912][T18304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.189929][T18304] RIP: 0033:0x7f9f9acdc629 [ 897.189945][T18304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.189959][T18304] RSP: 002b:00007f9f98eec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 897.189978][T18304] RAX: ffffffffffffffda RBX: 00007f9f9af56180 RCX: 00007f9f9acdc629 [ 897.189990][T18304] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 897.190000][T18304] RBP: 00007f9f98eec090 R08: 0000000000000000 R09: 0000000000000000 [ 897.190011][T18304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.190021][T18304] R13: 00007f9f9af56218 R14: 00007f9f9af56180 R15: 00007ffccc8d4428 [ 897.190048][T18304] [ 897.190090][T18304] ERROR: Out of memory at tomoyo_realpath_from_path. [ 897.736274][ T5804] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 898.007265][ T5834] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 898.108560][ T5804] usb 4-1: Using ep0 maxpacket: 16 [ 898.115485][ T5801] Bluetooth: hci5: command tx timeout [ 898.118627][ T10] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 898.149081][ T5804] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 898.149116][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.149138][ T5804] usb 4-1: Product: syz [ 898.149154][ T5804] usb 4-1: Manufacturer: syz [ 898.149169][ T5804] usb 4-1: SerialNumber: syz [ 898.155043][ T5804] usb 4-1: config 0 descriptor?? [ 898.170851][ T1229] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.285837][ T10] usb 2-1: device descriptor read/64, error -71 [ 898.305664][ T5834] usb 1-1: Using ep0 maxpacket: 32 [ 898.307981][ T5834] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 898.308007][ T5834] usb 1-1: config 0 has no interface number 0 [ 898.311075][ T5834] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 898.311106][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.311127][ T5834] usb 1-1: Product: syz [ 898.311142][ T5834] usb 1-1: Manufacturer: syz [ 898.311157][ T5834] usb 1-1: SerialNumber: syz [ 898.394707][ T5834] usb 1-1: config 0 descriptor?? [ 898.446689][ T5834] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 898.446720][ T5834] usb 1-1: selecting invalid altsetting 1 [ 898.446736][ T5834] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 898.482806][ T5834] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 898.483306][ T5834] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 898.483364][ T5834] usb 1-1: media controller created [ 898.533065][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 898.573369][ T5804] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 898.586402][ T5804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 898.598306][ T10] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 898.631873][ T5804] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 898.631940][ T5804] usb 4-1: media controller created [ 898.648838][T18239] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.648968][T18239] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.649214][T18239] bridge_slave_0: entered allmulticast mode [ 898.652040][T18239] bridge_slave_0: entered promiscuous mode [ 898.655114][T18239] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.655244][T18239] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.655459][T18239] bridge_slave_1: entered allmulticast mode [ 898.671633][ T5804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 898.682638][T18239] bridge_slave_1: entered promiscuous mode [ 898.725731][ T5868] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 898.725902][ T10] usb 2-1: device descriptor read/64, error -71 [ 898.837020][ T10] usb usb2-port1: attempt power cycle [ 898.884258][ T5868] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 898.884293][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.884314][ T5868] usb 3-1: Product: syz [ 898.884328][ T5868] usb 3-1: Manufacturer: syz [ 898.884341][ T5868] usb 3-1: SerialNumber: syz [ 899.135121][T18239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 899.180726][T18239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 899.185779][ T10] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 899.207182][ T10] usb 2-1: device descriptor read/8, error -71 [ 899.281786][ T5804] zl10353_read_register: readreg error (reg=127, ret==0) [ 899.282099][ T5804] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 899.282116][ T5804] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 899.344231][ T5804] usb 4-1: USB disconnect, device number 77 [ 899.428965][T18310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.432120][T18310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.457416][ T10] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 899.477742][ T10] usb 2-1: device descriptor read/8, error -71 [ 899.481159][T18310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.482743][T18310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.544863][ T5804] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 899.590055][ T10] usb usb2-port1: unable to enumerate USB device [ 899.597511][T17038] udevd[17038]: setting owner of /dev/bus/usb/004/077 to uid=0, gid=0 failed: No such file or directory [ 899.707151][T18296] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 899.726166][ T5834] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 899.726229][ T5834] zl10353_read_register: readreg error (reg=127, ret==-71) [ 899.727896][ T5834] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 899.763066][ T5868] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 899.763129][ T5868] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 899.763577][ T5868] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 899.763627][ T5868] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 899.829697][T18239] team0: Port device team_slave_0 added [ 899.831740][ T5868] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 899.865101][T18239] team0: Port device team_slave_1 added [ 899.879603][ T5868] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 899.920145][ T5868] usb 3-1: USB disconnect, device number 100 [ 899.998235][ T5834] usb 1-1: USB disconnect, device number 57 [ 900.706938][ T5804] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 901.157811][T18331] netlink: 'syz.0.4646': attribute type 10 has an invalid length. [ 901.157838][T18331] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4646'. [ 901.188538][ T5804] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 901.188570][ T5804] usb 2-1: config 0 has no interface number 0 [ 901.188617][ T5804] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 901.194929][ T5804] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 901.194963][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.194985][ T5804] usb 2-1: Product: syz [ 901.195000][ T5804] usb 2-1: Manufacturer: syz [ 901.195016][ T5804] usb 2-1: SerialNumber: syz [ 901.382408][ T5804] usb 2-1: config 0 descriptor?? [ 901.384284][T18324] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 901.526536][ C1] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 901.620772][ T5804] radio-si470x 2-1:0.35: this is not a si470x device. [ 901.822596][ T5804] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 901.961914][T18345] atomic_op ffff888032071218 conn xmit_atomic 0000000000000000 [ 903.101492][ T5804] usb 2-1: USB disconnect, device number 118 [ 903.267779][T18239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.267799][T18239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.267828][T18239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.268719][ T1229] bridge_slave_1: left allmulticast mode [ 903.268747][ T1229] bridge_slave_1: left promiscuous mode [ 903.269000][ T1229] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.315719][ T5877] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 903.366702][ T1229] bridge_slave_0: left allmulticast mode [ 903.366725][ T1229] bridge_slave_0: left promiscuous mode [ 903.366911][ T1229] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.501428][ T5877] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 903.501461][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.501480][ T5877] usb 3-1: Product: syz [ 903.501489][ T5877] usb 3-1: Manufacturer: syz [ 903.501497][ T5877] usb 3-1: SerialNumber: syz [ 903.927861][T18350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.929001][T18350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.954521][T18350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.955126][T18350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.172731][ T5877] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 904.172801][ T5877] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 904.192685][ T5877] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 904.192726][ T5877] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 904.193255][ T5877] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 904.237737][ T5877] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 904.260179][ T5877] usb 3-1: USB disconnect, device number 101 [ 904.478530][ T1229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 904.536853][ T1229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 904.578435][ T1229] bond0 (unregistering): Released all slaves [ 905.108773][T18239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.108791][T18239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.108822][T18239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.199049][T18367] FAULT_INJECTION: forcing a failure. [ 905.199049][T18367] name failslab, interval 1, probability 0, space 0, times 0 [ 905.199089][T18367] CPU: 1 UID: 0 PID: 18367 Comm: syz.1.4656 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 905.199119][T18367] Tainted: [L]=SOFTLOCKUP [ 905.199127][T18367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 905.199139][T18367] Call Trace: [ 905.199148][T18367] [ 905.199158][T18367] dump_stack_lvl+0xe8/0x150 [ 905.199194][T18367] should_fail_ex+0x46b/0x600 [ 905.199234][T18367] should_failslab+0xa8/0x100 [ 905.199269][T18367] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 905.199299][T18367] ? __alloc_skb+0x1d0/0x7d0 [ 905.199322][T18367] ? __pfx_tcp_current_mss+0x10/0x10 [ 905.199360][T18367] __alloc_skb+0x1d0/0x7d0 [ 905.199391][T18367] tcp_stream_alloc_skb+0x3f/0x5c0 [ 905.199422][T18367] tcp_sendmsg_locked+0x137b/0x5490 [ 905.199458][T18367] ? __lock_acquire+0x6b5/0x2cf0 [ 905.199505][T18367] ? __lock_acquire+0x6b5/0x2cf0 [ 905.199556][T18367] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 905.199593][T18367] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 905.199623][T18367] ? lockdep_hardirqs_on+0x7a/0x110 [ 905.199658][T18367] tcp_sendmsg+0x2f/0x50 [ 905.199684][T18367] __sys_sendto+0x643/0x7d0 [ 905.199716][T18367] ? __pfx___sys_sendto+0x10/0x10 [ 905.199770][T18367] ? ksys_write+0x248/0x270 [ 905.199803][T18367] ? __pfx_ksys_write+0x10/0x10 [ 905.199838][T18367] __x64_sys_sendto+0xde/0x100 [ 905.199868][T18367] do_syscall_64+0x14d/0xf80 [ 905.199895][T18367] ? trace_irq_disable+0x3b/0x150 [ 905.199920][T18367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.199942][T18367] ? clear_bhb_loop+0x40/0x90 [ 905.199969][T18367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.199991][T18367] RIP: 0033:0x7fb93a2bc629 [ 905.200012][T18367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.200031][T18367] RSP: 002b:00007fb938516028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 905.200055][T18367] RAX: ffffffffffffffda RBX: 00007fb93a535fa0 RCX: 00007fb93a2bc629 [ 905.200069][T18367] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 905.200082][T18367] RBP: 00007fb938516090 R08: 0000000000000000 R09: 0000000000000000 [ 905.200095][T18367] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 905.200108][T18367] R13: 00007fb93a536038 R14: 00007fb93a535fa0 R15: 00007ffca2627678 [ 905.200142][T18367] [ 906.345297][T18239] hsr_slave_0: entered promiscuous mode [ 906.355931][T18239] hsr_slave_1: entered promiscuous mode [ 906.357034][T18239] debugfs: 'hsr0' already exists in 'hsr' [ 906.357060][T18239] Cannot create hsr debugfs directory [ 907.118218][T18386] atomic_op ffff888054c17218 conn xmit_atomic 0000000000000000 [ 907.335563][T18388] FAULT_INJECTION: forcing a failure. [ 907.335563][T18388] name failslab, interval 1, probability 0, space 0, times 0 [ 907.335793][T18388] CPU: 1 UID: 0 PID: 18388 Comm: syz.3.4662 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 907.335824][T18388] Tainted: [L]=SOFTLOCKUP [ 907.335832][T18388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 907.335845][T18388] Call Trace: [ 907.335854][T18388] [ 907.335864][T18388] dump_stack_lvl+0xe8/0x150 [ 907.335902][T18388] should_fail_ex+0x46b/0x600 [ 907.335941][T18388] should_failslab+0xa8/0x100 [ 907.335975][T18388] kmem_cache_alloc_noprof+0x87/0x680 [ 907.336005][T18388] ? safesetid_security_capable+0xa9/0x1a0 [ 907.336032][T18388] ? prepare_creds+0x30/0x820 [ 907.336063][T18388] prepare_creds+0x30/0x820 [ 907.336092][T18388] __sys_setresuid+0x628/0xc40 [ 907.336130][T18388] do_syscall_64+0x14d/0xf80 [ 907.336158][T18388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.336180][T18388] ? clear_bhb_loop+0x40/0x90 [ 907.336209][T18388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.336229][T18388] RIP: 0033:0x7f9a4ca7c629 [ 907.336251][T18388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.336271][T18388] RSP: 002b:00007f9a4ac94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 907.336296][T18388] RAX: ffffffffffffffda RBX: 00007f9a4ccf6180 RCX: 00007f9a4ca7c629 [ 907.336313][T18388] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000000 [ 907.336327][T18388] RBP: 00007f9a4ac94090 R08: 0000000000000000 R09: 0000000000000000 [ 907.336341][T18388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.336355][T18388] R13: 00007f9a4ccf6218 R14: 00007f9a4ccf6180 R15: 00007ffe2fa7e848 [ 907.336389][T18388] [ 909.126100][ T5877] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 909.303897][ T5877] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 909.303933][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.303954][ T5877] usb 3-1: Product: syz [ 909.303970][ T5877] usb 3-1: Manufacturer: syz [ 909.303985][ T5877] usb 3-1: SerialNumber: syz [ 909.322622][T18413] FAULT_INJECTION: forcing a failure. [ 909.322622][T18413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 909.322913][T18413] CPU: 1 UID: 0 PID: 18413 Comm: syz.3.4668 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 909.322944][T18413] Tainted: [L]=SOFTLOCKUP [ 909.322953][T18413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 909.322966][T18413] Call Trace: [ 909.322977][T18413] [ 909.322989][T18413] dump_stack_lvl+0xe8/0x150 [ 909.323027][T18413] should_fail_ex+0x46b/0x600 [ 909.323066][T18413] _copy_from_user+0x2d/0xb0 [ 909.323094][T18413] snd_pcm_oss_write2+0x227/0x440 [ 909.323124][T18413] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 909.323149][T18413] ? up_read+0x23/0x40 [ 909.323182][T18413] snd_pcm_oss_write+0x6d1/0xbe0 [ 909.323220][T18413] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 909.323245][T18413] vfs_write+0x2a3/0xba0 [ 909.323286][T18413] ? __pfx_vfs_write+0x10/0x10 [ 909.323318][T18413] ? __fget_files+0x2a/0x420 [ 909.323347][T18413] ? __fget_files+0x2a/0x420 [ 909.323369][T18413] ? __fget_files+0x3a6/0x420 [ 909.323393][T18413] ? __fget_files+0x2a/0x420 [ 909.323438][T18413] ksys_write+0x156/0x270 [ 909.323469][T18413] ? __pfx_ksys_write+0x10/0x10 [ 909.323513][T18413] do_syscall_64+0x14d/0xf80 [ 909.323543][T18413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.323566][T18413] ? clear_bhb_loop+0x40/0x90 [ 909.323594][T18413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.323617][T18413] RIP: 0033:0x7f9a4ca7c629 [ 909.323638][T18413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.323657][T18413] RSP: 002b:00007f9a4acb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 909.323680][T18413] RAX: ffffffffffffffda RBX: 00007f9a4ccf6090 RCX: 00007f9a4ca7c629 [ 909.323697][T18413] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000005 [ 909.323712][T18413] RBP: 00007f9a4acb5090 R08: 0000000000000000 R09: 0000000000000000 [ 909.323726][T18413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.323740][T18413] R13: 00007f9a4ccf6128 R14: 00007f9a4ccf6090 R15: 00007ffe2fa7e848 [ 909.323776][T18413] [ 909.406179][T14850] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 909.760071][T14850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 909.760113][T14850] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 909.760306][T14850] usb 2-1: config 1 has no interface number 0 [ 909.760462][T14850] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 909.913178][T14850] usb 2-1: New USB device found, idVendor=0525, idProduct=779d, bcdDevice= 0.40 [ 909.913212][T14850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.913234][T14850] usb 2-1: Product: syz [ 909.913249][T14850] usb 2-1: Manufacturer: syz [ 909.913265][T14850] usb 2-1: SerialNumber: syz [ 910.082834][T18415] FAULT_INJECTION: forcing a failure. [ 910.082834][T18415] name failslab, interval 1, probability 0, space 0, times 0 [ 910.082874][T18415] CPU: 1 UID: 0 PID: 18415 Comm: syz.0.4670 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 910.082903][T18415] Tainted: [L]=SOFTLOCKUP [ 910.082911][T18415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 910.082924][T18415] Call Trace: [ 910.082932][T18415] [ 910.082942][T18415] dump_stack_lvl+0xe8/0x150 [ 910.082980][T18415] should_fail_ex+0x46b/0x600 [ 910.083020][T18415] should_failslab+0xa8/0x100 [ 910.083054][T18415] __kmalloc_noprof+0xdf/0x7b0 [ 910.083082][T18415] ? kfree+0x4d/0x6c0 [ 910.083107][T18415] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 910.083144][T18415] tomoyo_realpath_from_path+0xe3/0x5d0 [ 910.083188][T18415] ? tomoyo_path_number_perm+0x219/0x630 [ 910.083214][T18415] tomoyo_path_number_perm+0x246/0x630 [ 910.083244][T18415] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 910.083275][T18415] ? __lock_acquire+0x6b5/0x2cf0 [ 910.083336][T18415] ? __fget_files+0x2a/0x420 [ 910.083364][T18415] ? __fget_files+0x2a/0x420 [ 910.083385][T18415] ? __fget_files+0x3a6/0x420 [ 910.083418][T18415] ? __fget_files+0x2a/0x420 [ 910.083448][T18415] security_file_ioctl+0xc3/0x2a0 [ 910.083480][T18415] __se_sys_ioctl+0x47/0x170 [ 910.083515][T18415] do_syscall_64+0x14d/0xf80 [ 910.083539][T18415] ? trace_irq_disable+0x3b/0x150 [ 910.083564][T18415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.083587][T18415] ? clear_bhb_loop+0x40/0x90 [ 910.083614][T18415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.083636][T18415] RIP: 0033:0x7f1781dbc629 [ 910.083657][T18415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.083677][T18415] RSP: 002b:00007f178000e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 910.083699][T18415] RAX: ffffffffffffffda RBX: 00007f1782035fa0 RCX: 00007f1781dbc629 [ 910.083715][T18415] RDX: 0000200000000080 RSI: 000000000000460f RDI: 0000000000000003 [ 910.083729][T18415] RBP: 00007f178000e090 R08: 0000000000000000 R09: 0000000000000000 [ 910.083743][T18415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.083756][T18415] R13: 00007f1782036038 R14: 00007f1782035fa0 R15: 00007ffd2e476b98 [ 910.083793][T18415] [ 910.083801][T18415] ERROR: Out of memory at tomoyo_realpath_from_path. [ 910.196012][ T1229] hsr_slave_0: left promiscuous mode [ 910.267405][T14850] cdc_ncm 2-1:1.1: skipping garbage [ 910.267434][T14850] usb 2-1: selecting invalid altsetting 1 [ 910.368876][ T1229] hsr_slave_1: left promiscuous mode [ 910.373931][ T1229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 910.373959][ T1229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.421658][ T1229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 910.421965][ T1229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.558055][T18395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.559690][T18395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.577275][T18395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.590419][T18395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.765661][ T10] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 910.787400][ T1229] veth1_macvtap: left promiscuous mode [ 910.800190][ T1229] veth0_macvtap: left promiscuous mode [ 910.801038][ T1229] veth1_vlan: left promiscuous mode [ 910.821776][ T1229] veth0_vlan: left promiscuous mode [ 910.837359][ T5877] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 910.837428][ T5877] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 910.842036][ T5877] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 910.842099][ T5877] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 910.843034][ T5877] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 910.927828][ T5877] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 910.939771][ T10] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 910.939800][ T10] usb 4-1: config 0 has no interface number 0 [ 910.951518][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 910.951549][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.951571][ T10] usb 4-1: Product: syz [ 910.951586][ T10] usb 4-1: Manufacturer: syz [ 910.951601][ T10] usb 4-1: SerialNumber: syz [ 910.982025][ T5877] usb 3-1: USB disconnect, device number 102 [ 910.983491][ T10] usb 4-1: config 0 descriptor?? [ 912.054931][T18444] atomic_op ffff88802c597a18 conn xmit_atomic 0000000000000000 [ 913.877775][ T1229] team0 (unregistering): Port device team_slave_1 removed [ 913.978633][ T1229] team0 (unregistering): Port device team_slave_0 removed [ 914.737146][ T10] uvcvideo 4-1:0.64: Found Unit with invalid ID 0 [ 914.737336][ T10] uvcvideo 4-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 914.737407][ T10] uvcvideo 4-1:0.64: Entity type for entity Output 65535 was not initialized! [ 914.738061][ T10] uvcvideo 4-1:0.64: Failed to create links for entity 65535 [ 914.738083][ T10] uvcvideo 4-1:0.64: Failed to register entities (-22). [ 914.808137][ T10] usb 4-1: USB disconnect, device number 78 [ 915.254221][T18460] FAULT_INJECTION: forcing a failure. [ 915.254221][T18460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 915.254320][T18460] CPU: 1 UID: 0 PID: 18460 Comm: syz.0.4678 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 915.254348][T18460] Tainted: [L]=SOFTLOCKUP [ 915.254356][T18460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 915.254369][T18460] Call Trace: [ 915.254378][T18460] [ 915.254397][T18460] dump_stack_lvl+0xe8/0x150 [ 915.254440][T18460] should_fail_ex+0x46b/0x600 [ 915.254478][T18460] _copy_from_user+0x2d/0xb0 [ 915.254505][T18460] ___sys_sendmsg+0x1c6/0x360 [ 915.254539][T18460] ? __pfx____sys_sendmsg+0x10/0x10 [ 915.254601][T18460] ? __fget_files+0x2a/0x420 [ 915.254625][T18460] ? __fget_files+0x3a6/0x420 [ 915.254657][T18460] __x64_sys_sendmsg+0x1c3/0x2a0 [ 915.254689][T18460] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 915.254725][T18460] ? __pfx_ksys_write+0x10/0x10 [ 915.254763][T18460] do_syscall_64+0x14d/0xf80 [ 915.254787][T18460] ? trace_irq_disable+0x3b/0x150 [ 915.254810][T18460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.254830][T18460] ? clear_bhb_loop+0x40/0x90 [ 915.254857][T18460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.254879][T18460] RIP: 0033:0x7f1781dbc629 [ 915.254899][T18460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.254918][T18460] RSP: 002b:00007f177ffcc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 915.254942][T18460] RAX: ffffffffffffffda RBX: 00007f1782036180 RCX: 00007f1781dbc629 [ 915.254958][T18460] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 915.254972][T18460] RBP: 00007f177ffcc090 R08: 0000000000000000 R09: 0000000000000000 [ 915.254986][T18460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.254999][T18460] R13: 00007f1782036218 R14: 00007f1782036180 R15: 00007ffd2e476b98 [ 915.255034][T18460] [ 915.340229][T14850] cdc_ncm 2-1:1.1: SET_CRC_MODE failed [ 915.360325][T14850] usb 2-1: selecting invalid altsetting 1 [ 915.360392][T14850] cdc_ncm 2-1:1.1: bind() failure [ 915.451532][T14850] usb 2-1: USB disconnect, device number 119 [ 915.997863][T15491] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 916.002932][T18480] FAULT_INJECTION: forcing a failure. [ 916.002932][T18480] name failslab, interval 1, probability 0, space 0, times 0 [ 916.002968][T18480] CPU: 1 UID: 0 PID: 18480 Comm: syz.2.4686 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 916.002992][T18480] Tainted: [L]=SOFTLOCKUP [ 916.002999][T18480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 916.003009][T18480] Call Trace: [ 916.003016][T18480] [ 916.003024][T18480] dump_stack_lvl+0xe8/0x150 [ 916.003055][T18480] should_fail_ex+0x46b/0x600 [ 916.003086][T18480] should_failslab+0xa8/0x100 [ 916.003113][T18480] __kmalloc_noprof+0xdf/0x7b0 [ 916.003143][T18480] ? kfree+0x4d/0x6c0 [ 916.003164][T18480] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 916.003193][T18480] tomoyo_realpath_from_path+0xe3/0x5d0 [ 916.003226][T18480] ? tomoyo_path_number_perm+0x219/0x630 [ 916.003247][T18480] tomoyo_path_number_perm+0x246/0x630 [ 916.003271][T18480] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 916.003294][T18480] ? __lock_acquire+0x6b5/0x2cf0 [ 916.003343][T18480] ? __fget_files+0x2a/0x420 [ 916.003376][T18480] ? __fget_files+0x2a/0x420 [ 916.003398][T18480] ? __fget_files+0x3a6/0x420 [ 916.003419][T18480] ? __fget_files+0x2a/0x420 [ 916.003443][T18480] security_file_ioctl+0xc3/0x2a0 [ 916.003470][T18480] __se_sys_ioctl+0x47/0x170 [ 916.003505][T18480] do_syscall_64+0x14d/0xf80 [ 916.003532][T18480] ? trace_irq_disable+0x3b/0x150 [ 916.003556][T18480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.003578][T18480] ? clear_bhb_loop+0x40/0x90 [ 916.003604][T18480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.003624][T18480] RIP: 0033:0x7f9f9acdc629 [ 916.003644][T18480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.003661][T18480] RSP: 002b:00007f9f98f2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 916.003684][T18480] RAX: ffffffffffffffda RBX: 00007f9f9af55fa0 RCX: 00007f9f9acdc629 [ 916.003699][T18480] RDX: 00002000000000c0 RSI: 000000004040534e RDI: 0000000000000003 [ 916.003712][T18480] RBP: 00007f9f98f2e090 R08: 0000000000000000 R09: 0000000000000000 [ 916.003725][T18480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 916.003737][T18480] R13: 00007f9f9af56038 R14: 00007f9f9af55fa0 R15: 00007ffccc8d4428 [ 916.003769][T18480] [ 916.003891][T18480] ERROR: Out of memory at tomoyo_realpath_from_path. [ 916.176565][T15491] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 916.176599][T15491] usb 4-1: config 0 has no interface number 0 [ 916.176652][T15491] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 916.300687][T15491] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 916.300722][T15491] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.300744][T15491] usb 4-1: Product: syz [ 916.300760][T15491] usb 4-1: Manufacturer: syz [ 916.300776][T15491] usb 4-1: SerialNumber: syz [ 916.471661][T18486] FAULT_INJECTION: forcing a failure. [ 916.471661][T18486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 916.471729][T18486] CPU: 0 UID: 0 PID: 18486 Comm: syz.0.4687 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 916.471760][T18486] Tainted: [L]=SOFTLOCKUP [ 916.471768][T18486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 916.471782][T18486] Call Trace: [ 916.471791][T18486] [ 916.471801][T18486] dump_stack_lvl+0xe8/0x150 [ 916.471838][T18486] should_fail_ex+0x46b/0x600 [ 916.471877][T18486] _copy_from_user+0x2d/0xb0 [ 916.471905][T18486] __sys_bpf+0x229/0x950 [ 916.471934][T18486] ? __pfx___sys_bpf+0x10/0x10 [ 916.471984][T18486] ? rcu_is_watching+0x15/0xb0 [ 916.472016][T18486] __x64_sys_bpf+0x7c/0x90 [ 916.472042][T18486] do_syscall_64+0x14d/0xf80 [ 916.472072][T18486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.472094][T18486] ? clear_bhb_loop+0x40/0x90 [ 916.472122][T18486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.472143][T18486] RIP: 0033:0x7f1781dbc629 [ 916.472164][T18486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.472182][T18486] RSP: 002b:00007f177ffcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 916.472207][T18486] RAX: ffffffffffffffda RBX: 00007f1782036180 RCX: 00007f1781dbc629 [ 916.472223][T18486] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 916.472237][T18486] RBP: 00007f177ffcc090 R08: 0000000000000000 R09: 0000000000000000 [ 916.472251][T18486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 916.472264][T18486] R13: 00007f1782036218 R14: 00007f1782036180 R15: 00007ffd2e476b98 [ 916.472299][T18486] [ 916.949862][T15491] usb 4-1: config 0 descriptor?? [ 916.950953][T18471] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 917.428557][T15491] radio-si470x 4-1:0.35: si470x_get_report: usb_control_msg returned -32 [ 917.428904][T15491] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 917.460241][T15491] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 917.678063][T15491] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 917.684492][T15491] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 917.706780][T15491] usb 4-1: USB disconnect, device number 79 [ 917.708955][T15491] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 917.805874][ T31] BUG: kernel NULL pointer dereference, address: 0000000000000010 [ 917.805898][ T31] #PF: supervisor read access in kernel mode [ 917.805912][ T31] #PF: error_code(0x0000) - not-present page [ 917.805925][ T31] PGD 800000004d856067 P4D 800000004d856067 PUD 0 [ 917.805977][ T31] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 917.806001][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 917.806031][ T31] Tainted: [L]=SOFTLOCKUP [ 917.806039][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 917.806053][ T31] Workqueue: usb_hub_wq hub_event [ 917.806084][ T31] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 917.806112][ T31] Code: 7f 8d 4c 8b b8 18 74 4e 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 9a e2 8d 4d 8b 3f 49 81 ff 00 9a e2 8d 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 f1 fd e2 02 84 c0 74 0e 49 8b 07 49 [ 917.806131][ T31] RSP: 0018:ffffc90000a5f7e8 EFLAGS: 00010207 [ 917.806149][ T31] RAX: 0000000000000000 RBX: ffff88801d2b8000 RCX: 0000000000000000 [ 917.806175][ T31] RDX: 0000000030d8a100 RSI: 0000000000000001 RDI: ffffffff8ba64320 [ 917.806190][ T31] RBP: 0000000000100000 R08: ffffffff8b244250 R09: ffffffff8ddcd780 [ 917.806206][ T31] R10: dffffc0000000000 R11: fffffbfff1ed4477 R12: 0000000000000002 [ 917.806221][ T31] R13: 0000000000000001 R14: ffff8880358a0000 R15: 0000000000000000 [ 917.806235][ T31] FS: 0000000000000000(0000) GS:ffff888126442000(0000) knlGS:0000000000000000 [ 917.806251][ T31] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 917.806265][ T31] CR2: 0000000000000010 CR3: 0000000011e72000 CR4: 00000000003526f0 [ 917.806284][ T31] Call Trace: [ 917.806291][ T31] [ 917.806301][ T31] hub_event+0x150/0x4f60 [ 917.806328][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 917.806349][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 917.806366][ T31] ? look_up_lock_class+0x57/0x110 [ 917.806392][ T31] ? register_lock_class+0x31/0x2e0 [ 917.806419][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 917.806445][ T31] ? __pfx_hub_event+0x10/0x10 [ 917.806472][ T31] ? process_scheduled_works+0xa25/0x1830 [ 917.806498][ T31] ? process_scheduled_works+0xa25/0x1830 [ 917.806523][ T31] process_scheduled_works+0xb02/0x1830 [ 917.806555][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 917.806584][ T31] ? assign_work+0x3d5/0x5e0 [ 917.806613][ T31] worker_thread+0xa50/0xfc0 [ 917.806650][ T31] kthread+0x388/0x470 [ 917.806672][ T31] ? __pfx_worker_thread+0x10/0x10 [ 917.806698][ T31] ? __pfx_kthread+0x10/0x10 [ 917.806719][ T31] ret_from_fork+0x51e/0xb90 [ 917.806748][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 917.806775][ T31] ? __switch_to+0xc7d/0x1450 [ 917.806801][ T31] ? __pfx_kthread+0x10/0x10 [ 917.806822][ T31] ret_from_fork_asm+0x1a/0x30 [ 917.806848][ T31] [ 917.806856][ T31] Modules linked in: [ 917.806869][ T31] CR2: 0000000000000010 [ 917.806879][ T31] ---[ end trace 0000000000000000 ]--- [ 917.806891][ T31] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 917.806914][ T31] Code: 7f 8d 4c 8b b8 18 74 4e 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 9a e2 8d 4d 8b 3f 49 81 ff 00 9a e2 8d 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 f1 fd e2 02 84 c0 74 0e 49 8b 07 49 [ 917.806931][ T31] RSP: 0018:ffffc90000a5f7e8 EFLAGS: 00010207 [ 917.806947][ T31] RAX: 0000000000000000 RBX: ffff88801d2b8000 RCX: 0000000000000000 [ 917.806960][ T31] RDX: 0000000030d8a100 RSI: 0000000000000001 RDI: ffffffff8ba64320 [ 917.806974][ T31] RBP: 0000000000100000 R08: ffffffff8b244250 R09: ffffffff8ddcd780 [ 917.806988][ T31] R10: dffffc0000000000 R11: fffffbfff1ed4477 R12: 0000000000000002 [ 917.807003][ T31] R13: 0000000000000001 R14: ffff8880358a0000 R15: 0000000000000000 [ 917.807018][ T31] FS: 0000000000000000(0000) GS:ffff888126442000(0000) knlGS:0000000000000000 [ 917.807036][ T31] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 917.807051][ T31] CR2: 0000000000000010 CR3: 0000000011e72000 CR4: 00000000003526f0 [ 917.807067][ T31] Kernel panic - not syncing: Fatal exception [ 917.807563][ T31] Kernel Offset: disabled