last executing test programs: 11m38.821487224s ago: executing program 3 (id=141): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e22, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000380), 0xd1d, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0xfffffffe, 0x32525942, 0x0, 0x9, [{0x0, 0x5}, {0x400000}, {}, {0x3, 0x3}, {}, {0x2000}], 0x0, 0x0, 0x0, 0x0, 0x5}}) 11m38.76648274s ago: executing program 3 (id=142): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="bafb2003c9001a"], 0x7) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x200, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001880)="5c00000016006bab9a3fe3d46e17aa0a046b876c050048007ea60864160af36504bb4a43eee80fd1716dbbbc001a0038001d001931a0e69ce517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bba1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) (async) pipe2$watch_queue(&(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000010c0)=0x7) (async, rerun: 32) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) (rerun: 32) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000001600)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000140)="d4ad69c575dc9862", 0x8}], 0x1}}], 0x2, 0x0) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) 11m36.911250505s ago: executing program 3 (id=148): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 11m33.638947605s ago: executing program 3 (id=157): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r1, &(0x7f0000007e80)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="712219b20abd00a0cb177344f9777ce1", 0x10}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}}, {{0x0, 0x0, &(0x7f0000004300)}}, {{&(0x7f0000004540)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x2}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0xf5) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0) 11m33.209459574s ago: executing program 3 (id=159): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c800, 0x0) preadv2(r0, &(0x7f0000000e80)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xd) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r2, 0x84, 0x24, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x1}}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e20, 0x1800, @private1, 0x6}}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2d, 0x3703}]}, 0x70}}, 0x4004040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r6 = syz_open_dev$loop(&(0x7f0000000180), 0x400, 0x1c4000) ioctl$LOOP_GET_STATUS(r6, 0x4c03, &(0x7f0000000340)) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0xa8, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x706}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x48000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fddbdf25080000001800048013000100"], 0x2c}, 0x1, 0x0, 0x0, 0x84c6e04e08e5a921}, 0x20000014) 11m32.287109218s ago: executing program 3 (id=162): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x10002, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x210440, &(0x7f0000000140)=ANY=[@ANYBLOB="6d6f64653d190b0f7aed7e9ce51d236e97c9813031283737373737373796610ed706000000"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xb00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x7c0}) r3 = syz_socket_connect_nvme_tcp() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="fd008800"}) sendto$inet_nvme_pdu(r3, &(0x7f0000000180)=@icresp={{0x1, 0x8, 0x80, 0xff, 0x2}, 0x0, 0x0, 0x1, 0x1}, 0x80, 0x0, 0x0, 0x0) 11m31.483395522s ago: executing program 32 (id=162): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x10002, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x210440, &(0x7f0000000140)=ANY=[@ANYBLOB="6d6f64653d190b0f7aed7e9ce51d236e97c9813031283737373737373796610ed706000000"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xb00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x7c0}) r3 = syz_socket_connect_nvme_tcp() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="fd008800"}) sendto$inet_nvme_pdu(r3, &(0x7f0000000180)=@icresp={{0x1, 0x8, 0x80, 0xff, 0x2}, 0x0, 0x0, 0x1, 0x1}, 0x80, 0x0, 0x0, 0x0) 7m36.064889826s ago: executing program 2 (id=1354): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x90000009}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x8ca400, 0x0) mkdirat(r3, &(0x7f00000001c0)='./file0\x00', 0x25) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa4000, 0x0) fanotify_mark(r1, 0x20, 0x1028, r5, &(0x7f0000000080)='./file0\x00') sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@getsa={0x28, 0x12, 0x1, 0x70bd29, 0x25dfdbfd, {@in=@rand_addr=0x64010101, 0x4d3, 0xa, 0x33}}, 0x28}}, 0x2c000010) 7m35.821546657s ago: executing program 2 (id=1360): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000440)=ANY=[], 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e24, 0x40, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x9972}}, 0x1d, 0x9, 0x81, 0xe3, 0x69, 0x5, 0x4}, &(0x7f00000002c0)=0x9c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x1) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0xb96321777e3ee507}, 0xd1) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000003c0)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window={0x3, 0x100, 0x7ff}, @sack_perm], 0x7) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='dctcp', 0x5) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r5, 0x5601, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000100)="189b5f221d19c8779d125c788ad6b0335e6a64480879e4a99bf8f789059be12c0c4a99e2ca3dd425254230d4e8f900"/60, 0x3c, 0x8a, 0x0, 0x2d) 7m34.912724764s ago: executing program 2 (id=1365): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="121ef62c88487008bc240001000000000904000001030000012207c8fd000905810300"/49], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200182"], 0x0}) r1 = syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x1c, 0x0}) syz_usb_disconnect(r1) syz_usb_control_io$uac2(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x0, 0x3, 0x1d, {0x1d, 0xb, "3097aa829d72aef03e352c907043687789d52957b9316ddab36c1e"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}}, &(0x7f0000000440)={0x44, &(0x7f0000000100)={0x20, 0x17, 0x15, "da75ede9907cad8c29ee310e59e6e34e13a577f595"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0xbd}, &(0x7f00000001c0)={0x20, 0x81, 0x3, '9vV'}, &(0x7f0000000240)={0x20, 0x82, 0x3, "8f0aa5"}, &(0x7f0000000280)={0x20, 0x83, 0x2, "81c2"}, &(0x7f00000002c0)={0x20, 0x84, 0x1, 'q'}, &(0x7f0000000340)={0x20, 0x85, 0x3, "5150f5"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="20120d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m31.688099109s ago: executing program 2 (id=1373): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000000)={0x4, 0x1, 0x40, "ff0000f9a27440000300402cf9ff000740ff00002005422a1e4e3c68000400", 0x34325241}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000000)={0x4, 0x1, 0x40, "ff0000f9a27440000300402cf9ff000740ff00002005422a1e4e3c68000400", 0x34325241}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/201, 0xc9}], 0x1, 0x33, 0x2000051b) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'ni_labpc\x00', [0x3cf0, 0x7fffffff, 0x4, 0x5, 0x1, 0x10, 0x2, 0x6, 0x7, 0x0, 0x200, 0xe5, 0x176, 0x100, 0x5, 0x5bc, 0x26b, 0x200, 0x1c0, 0x57a6, 0x8, 0x5b6, 0x9, 0xfffffffd, 0x4, 0x4, 0x2, 0x6, 0x8, 0x3, 0x8, 0x5]}) 7m31.527668747s ago: executing program 2 (id=1374): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x23) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x18, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) 7m30.470203657s ago: executing program 2 (id=1380): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af25, &(0x7f0000000000)=0x4000000) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000080)={0x20004, r1, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r5, 0xff, 0x100007, 0xa, 0x1ff, 0x1}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000002540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x80000, 0x0, 0x0, 0x1, 0x11}, @ptr={0x66646185, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r9, 0xc01c64a3, &(0x7f0000000200)={0x1, r5, 0x401, 0x3, 0x401, 0x3, 0x7}) syz_usb_control_io(r6, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000500)={0x20, 0x7, 0x3, "0e4c8d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, &(0x7f0000000500)={0x2c, &(0x7f0000000100)={0x40, 0x8, 0xeb, {0xeb, 0xc, "559e9340aa3d4f084018dc81a44cfe1bc8d32fc73d9f7ef0b79c74385a1b15cf9178bf4bf608ad6989bd52b3bcf76f8df1024fe9277bd7d004aa94d8a1da7be695da57cc780120fff460947685d219b43cd6c772cfb721797777780d93794711f872aacfbf8a8e9891ec319507b20e99d9c6ee5afc7b13a18af33524b8d65bda2a55ff59ad34de66240cc31296ae9a3a2380427beaeb5429c5c63d1564bc4e7cc76c6be7f8b0e49408c129d2c1b3de93f8f535a6095c82e51afaf901c20158ce73a958c49f8f084555e73347cfc6039935e3a7de6a955432c00334c5290f6237f10ca2a006463fad3e"}}, &(0x7f0000000300)={0x0, 0x3, 0xaa, @string={0xaa, 0x3, "0e459bcc00757d73599bc138dc3d242fc60e49103dc5a3251deb6965237855e55ab0e5da5c7d178f5f393734ada46f1cf90185471a4ef78c03ae607a905054c035f196996629047a28aa96bfaf606471521ba6d662e5472258a6a13fa7ee3c4ed79cc50bf30d12dbade2f136a2d5696e0fa9b08ed1e11867d11dac04a6ae6f39d35929e03c826f725d821afa51c0a0db1e1f5c8ea03f77a21c87f663fd2ccc354a74dabdb487474b"}}, &(0x7f00000003c0)={0x0, 0xf, 0x3f, {0x5, 0xf, 0x3f, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x7ffff0a, 0xf00, 0x9, [0x0, 0x1f80, 0x3f00, 0xc0c0]}, @ss_container_id={0x14, 0x10, 0x4, 0x46, "1d955318f5bfa27f540f30bfc78dde9f"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7, 0x80, 0x2}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0x2, 0x0, "16ea48f8", "c86a5048"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x3, 0x6, 0x5, 0x5, 0x2}}}, &(0x7f0000000940)={0x84, &(0x7f0000000540)={0x40, 0x16, 0x24, "4b9d4b61e3edfaceb74621688ad87cdf560f80965789b9213c00ca850865d2e92c328a1d"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xa}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x20, 0x1}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "1267"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000780)={0x40, 0x13, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x19, 0x2, "ed17"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x68}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x1e}}) 7m30.021533057s ago: executing program 33 (id=1380): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af25, &(0x7f0000000000)=0x4000000) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000080)={0x20004, r1, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r5, 0xff, 0x100007, 0xa, 0x1ff, 0x1}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000002540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x80000, 0x0, 0x0, 0x1, 0x11}, @ptr={0x66646185, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r9, 0xc01c64a3, &(0x7f0000000200)={0x1, r5, 0x401, 0x3, 0x401, 0x3, 0x7}) syz_usb_control_io(r6, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000500)={0x20, 0x7, 0x3, "0e4c8d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, &(0x7f0000000500)={0x2c, &(0x7f0000000100)={0x40, 0x8, 0xeb, {0xeb, 0xc, "559e9340aa3d4f084018dc81a44cfe1bc8d32fc73d9f7ef0b79c74385a1b15cf9178bf4bf608ad6989bd52b3bcf76f8df1024fe9277bd7d004aa94d8a1da7be695da57cc780120fff460947685d219b43cd6c772cfb721797777780d93794711f872aacfbf8a8e9891ec319507b20e99d9c6ee5afc7b13a18af33524b8d65bda2a55ff59ad34de66240cc31296ae9a3a2380427beaeb5429c5c63d1564bc4e7cc76c6be7f8b0e49408c129d2c1b3de93f8f535a6095c82e51afaf901c20158ce73a958c49f8f084555e73347cfc6039935e3a7de6a955432c00334c5290f6237f10ca2a006463fad3e"}}, &(0x7f0000000300)={0x0, 0x3, 0xaa, @string={0xaa, 0x3, "0e459bcc00757d73599bc138dc3d242fc60e49103dc5a3251deb6965237855e55ab0e5da5c7d178f5f393734ada46f1cf90185471a4ef78c03ae607a905054c035f196996629047a28aa96bfaf606471521ba6d662e5472258a6a13fa7ee3c4ed79cc50bf30d12dbade2f136a2d5696e0fa9b08ed1e11867d11dac04a6ae6f39d35929e03c826f725d821afa51c0a0db1e1f5c8ea03f77a21c87f663fd2ccc354a74dabdb487474b"}}, &(0x7f00000003c0)={0x0, 0xf, 0x3f, {0x5, 0xf, 0x3f, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x7ffff0a, 0xf00, 0x9, [0x0, 0x1f80, 0x3f00, 0xc0c0]}, @ss_container_id={0x14, 0x10, 0x4, 0x46, "1d955318f5bfa27f540f30bfc78dde9f"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7, 0x80, 0x2}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0x2, 0x0, "16ea48f8", "c86a5048"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x3, 0x6, 0x5, 0x5, 0x2}}}, &(0x7f0000000940)={0x84, &(0x7f0000000540)={0x40, 0x16, 0x24, "4b9d4b61e3edfaceb74621688ad87cdf560f80965789b9213c00ca850865d2e92c328a1d"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xa}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x20, 0x1}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "1267"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000780)={0x40, 0x13, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x19, 0x2, "ed17"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x68}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x1e}}) 17.705043425s ago: executing program 5 (id=4921): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000400)={0x54, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @broadcast, @device_a, @initial, {0x3, 0x9}}, 0x43b, @val={0x8c, 0x18, {0x871, "bc30ae5b416d", @long="2280f01846cd709a3a695d11437e11d4"}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040085}, 0x28004800) 17.555285077s ago: executing program 5 (id=4922): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffff9, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000006c0)=0x3, 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000)=0x37, 0x4) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x80) syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe", @ANYRESOCT], 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffff9, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000006c0)=0x3, 0x2) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000)=0x37, 0x4) (async) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x80) (async) syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe", @ANYRESOCT], 0x0) (async) 15.837396646s ago: executing program 5 (id=4935): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000140)=0x4c1, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000045c0)=ANY=[@ANYBLOB="140000002f0008002f0500"/20], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) socket$nl_generic(0x10, 0x3, 0x10) (async) accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000140)=0x4c1, 0x4) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000045c0)=ANY=[@ANYBLOB="140000002f0008002f0500"/20], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) (async) 15.738452013s ago: executing program 5 (id=4938): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x89f3, &(0x7f0000000000)) bind$rds(r0, &(0x7f0000000740)={0x2, 0x4e20, @multicast2}, 0x10) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x27, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) r3 = getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x0, 0x4, 0x10101, 0x2, r3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x8001, 0xfffffff9, 0x6, 0x98f2, 0x47}, &(0x7f0000000480)=0x98) setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)="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", 0x23a}], 0x1}}], 0x1, 0x4000801) recvmmsg(r4, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/108, 0x6c}, {&(0x7f00000004c0)=""/217, 0xd9}, {&(0x7f00000005c0)=""/45, 0x2d}], 0x4, 0xfffffffffffffffe}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x10100, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hfs\x00', 0x221c088, 0x0) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x0, 0xfffffffd}, 0x20) connect$l2tp6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x6, 0x2}, 0x20) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) connect$inet(r7, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) 15.345652433s ago: executing program 5 (id=4940): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000000c0)="46aa5825ffb9289036602fb9d769b947f9a711bc456a06202dc9f7bad7091c15a6bdec71230b6f993d7307a01840d0914e42d96ab69330081f11c7e383021bc7e546e456a53a498d24c9ed585f40c2", 0x4f}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000002b40)="444c5211b06b7a1a671f08ec6ee543792c85b1b297770f22e906d9065f8da55f7ea5d384e2b79ecc30df57ec43e3ede82e53df34dccce3a32ea8dcc4f37b5535089cd403df203849fe604786ba57b52d3bb92f20ebc8", 0x56}, {&(0x7f0000002bc0)="f64a2c40aeb431eaf772758c20cc25e0d63ca6703fd4b1a6d04d3bfac63e3c495ad1a5cf66e3510db97cb68ba67f1f4376ef07e1889c0247d594577a0845eeee047ea645a47c130a9d0085d274eb31af724236cbe28114426d79c94d86665ec69764032593f1109f68cf2532d8b7f6346d9a6c48d543ebccd95cadf0b70e6b2d8d863fcd3ae968fef99b916ef87f8f5320cb3f6f344c452c632b2cda33a55b40026ac672bf735643a9132342d2d6a9b8173020ea6e8905b1b2e1a54b6cce82", 0xbf}, {&(0x7f0000002c80)="64a1328aee140cec9b9ac3313ca0b26172690ae51a32e7282bd81877b3a1976527b6893bdf449860809cc0dbfd10f6957b1b91d45170cc9454686ee65a5a6ce242510fa8badb45757c04a0d9844fdfce483e853d0cb8bf2f5b82d663947d8fb6b9d54a8fc41a5f6ee924fd421da0a206f86d0f9080d478b3d6f8c8f2ea610385b3d799cc62b0bf63fec424dd191b2fe568fd354c0540fc22b3cdd979db10162aa94f13ace0368acab8f6a325a5e0babf57128c", 0xb3}, {&(0x7f0000002d40)="2263b126b67e1f0000000000000bc3476500"/33, 0x21}, {&(0x7f0000002d80)="366d96af7c97", 0x6}, {&(0x7f0000002dc0)="1d902f3171964c84ccf080b4f245bc9a6b8753e2c721e48b79e5da3a620678f2ea28fd4f037aa49f5327a28a70f7f8f6143760e3603e81275da3d5", 0x3b}], 0x8, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/169, 0xa9}, {&(0x7f0000001b40)=""/4065, 0xfe1}, {&(0x7f0000004bc0)=""/4124, 0x101c}, {&(0x7f0000000a40)=""/219, 0xdb}, {&(0x7f0000000000)=""/35, 0x23}, {&(0x7f0000000880)=""/159, 0x9f}], 0x6}, 0x0) 15.288542874s ago: executing program 5 (id=4941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 6.130625279s ago: executing program 1 (id=4966): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt(r0, 0x6b, 0x7f, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000040)={0x18, 0x1, 0xcadd5e7291038198, 0x0, r2, 0x9}) 6.001180285s ago: executing program 1 (id=4967): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000280)={0x40, 0xe, 0x2, "93df"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0x22, 0x4a, {0x4a, 0xa, "943dd083adbb4e9c4a036ad2ebc20800eb6c0cbdbd7a6943a143b51fff2f220818f5441e5fd99607e20aca09d66ddb9677196ef14477ae08d6e143b8f9fc3803854ab9666de1b089"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000200)={0x1c, &(0x7f0000000140)={0x20, 0x0, 0x34, "df44fbb33bd3cc09ce0f129426176e71c5d03c6b9c1aff3f45ef32d037cd650a8bc173e61447316d7bed06f184399010c6312cf1"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x97}}) syz_usb_control_io$sierra_net(r0, &(0x7f0000000240)={0x14, 0x0, 0x0}, 0x0) 4.94523137s ago: executing program 0 (id=4973): pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004200)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14"]) 4.81810172s ago: executing program 0 (id=4974): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf251100000008000400ff0300000800050006000093"], 0x24}, 0x1, 0x0, 0x0, 0x4040104}, 0x4) 4.620652912s ago: executing program 0 (id=4975): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000200)=ANY=[], 0x0, 0x600) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_buf(r3, 0x29, 0x32, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xb, 0xaa, 0xf, 0x19, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x5, 0x17, 0x6c, 0x80, 0x0, @in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x29}, 0x8}}, @sadb_sa={0x2, 0x1, 0x4d3, 0xbd, 0x1, 0xd2, 0x1, 0x70000001}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e23}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2a, 0x3502}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}, @sadb_ident={0x2, 0xa, 0x8, 0x0, 0x9}, @sadb_x_sa2={0x2, 0x13, 0x46, 0x0, 0x0, 0x70bd25, 0x3501}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x1, {0x6, 0xff, 0x0, 0x5, 0x0, 0x2, 0x0, @in=@private=0xa010100, @in=@broadcast}}]}, 0xc8}}, 0x40400c0) 4.385446085s ago: executing program 0 (id=4976): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, &(0x7f0000000000)={0x300, 0xc3f, "1500", 0x8a}) 4.276145572s ago: executing program 0 (id=4977): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r2, 0x303, 0x4000, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000140)={r7, 0x1, 0x4, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r8) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000700)={'gretap0\x00', &(0x7f0000000680)={'ip_vti0\x00', r7, 0x0, 0x8, 0x2a, 0x9, {{0x17, 0x4, 0x0, 0xe, 0x5c, 0x64, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}, {[@noop, @timestamp_addr={0x44, 0x44, 0xef, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x59}, {@remote, 0x9}, {@broadcast, 0x9}, {@empty, 0x3e}, {@private=0xa010100, 0x8}, {@private=0xa010102, 0x2}, {@private=0xa010100, 0x1}, {@loopback}]}]}}}}}) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000380)={0x1, 0x2, @start={0x5, 0x1}}) connect$inet(r0, 0x0, 0x0) r9 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920010000030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) r10 = dup(r4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r10, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x10b}}, './file0\x00'}) bind(r10, &(0x7f0000001040)=@rc={0x1f, @none, 0x5}, 0x80) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x80800) setsockopt$sock_int(r12, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/97, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0xfffffffffffffefd}, 0x0) r13 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r13, 0x89f0, &(0x7f0000000b40)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x0, 0x8a, 0xfffffffd, 0x0, 0x1fffffe}}) syz_usb_control_io$uac3(r9, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac3(r9, &(0x7f0000000100)={0x14, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0}, 0x0) 3.201032224s ago: executing program 4 (id=4978): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000140)=[{0x84, 0x74, 0x0, 0x0, @time={0xe, 0x9c}, {0xfd}, {0x7}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x2, 0x1, 0x9, 0x83, @tick=0x3, {0xfd, 0x7}, {0x3}, @connect={{0x3, 0x10}, {0x8, 0x9}}}, {0xf7, 0xf1, 0x0, 0x1, @tick, {0x70, 0x3c}, {0x7}, @quote={{0x0, 0xe}, 0x7}}], 0x54) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080), 0x0) 3.007677925s ago: executing program 4 (id=4979): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946420, &(0x7f0000000140)={'8255\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x0, 0x7, 0xf4, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x8, 0xa0000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) 2.962100153s ago: executing program 4 (id=4980): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) capset(&(0x7f0000000300)={0x20080522}, &(0x7f00000003c0)={0x6, 0xa2f, 0x9, 0x200, 0xe6c, 0x6}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x5008000) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) close_range(r3, 0xffffffffffffffff, 0x0) r4 = accept(r2, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000be000000000000000000", @ANYRES16=r0, @ANYBLOB="be41a4fce208ab9422864dabc2c24aeb6bc0a8830167a799ce598a579261a6e08b51ce0c75b7feb92079ba5fb65e5a1c740266ff3e60f8317386952f3f7e9aec4194eecc2358b2107fdbe055e0aadac0e6c6f4f19b4c918a4aea3af1c54f0af544e4d447"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$HCIINQUIRY(r5, 0x400448dd, &(0x7f00000000c0)={0x4000, 0xc3f, '\x00', 0x8a, 0x10}) 2.840014333s ago: executing program 1 (id=4981): pipe2(&(0x7f00000003c0), 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004200)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, 0x0) 2.736780161s ago: executing program 1 (id=4982): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x5c, r1, 0x1, 0x4, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x4}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x45bf3c16e68e268e}, 0x3000c000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000001800070125bd700000000000137c3f000c00b8000600000000000000004b59144ea3f769ef3ed6b29991a92af6b0a3bb0256d02a3a56599fc5975f49667ca3b24aa93516e705daa76c"], 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'8255\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x0, 0x7, 0xf4, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x8, 0xa0000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) 2.565434481s ago: executing program 1 (id=4983): fsopen(0x0, 0x1) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x84, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x78, 0x2, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x3, 0x4}}}}}]}}]}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r1, 0xda8d) shutdown(r1, 0x0) accept4(r1, 0x0, 0x0, 0x80800) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB=' $)\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0xa2) syz_usb_connect$cdc_ncm(0x4, 0x96, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x7, 0x4440) r2 = openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsetxattr$trusted_overlay_upper(r2, 0x0, 0x0, 0x0, 0x2) 1.544774943s ago: executing program 4 (id=4984): mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='qnx6\x00', 0x208000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new '], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x1, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x1, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000020601120000000000000000000000000500010007000000140007800800124000030000050015000c0000000900020073797a300000000011000300686173683a69702c6d61726b0000000005000400000000000500050002"], 0x60}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0xfffffffffffffffe, 0xffffffffffffffff}) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c) 983.83505ms ago: executing program 0 (id=4985): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca01"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x40, 0x11, 0x2, {0x2, 0x10}}, 0x0}, &(0x7f0000000300)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="403f2a00000000000011f6adb0510cd8060000"], &(0x7f00000018c0)={0x0, 0xa, 0x1, 0x10}, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x0, 0x7, 0x34, {0x34, 0xe, "1f654b03a5a713bf034b7b2e3d43dc5b2fb3a04bb657b53b88843ec8c2aba9937cf80a536dfd75e6242c706da749a4965547"}}, &(0x7f0000000200)={0x0, 0x3, 0x39, @string={0x39, 0x3, "6a056de0a8b37bb3cea6be58e8ef3d947f04ab8e84f0a15912391531ccd0e62020a1fc81d9a5815dd1c18e33146efa88dedd86132db618"}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000340)={0x40, 0x16, 0x8a, "f7feaa336419a13818dfd1f9627b81ec6243ddc32aab4ef5bc191e289484682b355eb2f23762b051f0d77c64855ac7383bc9efe30884347e128e44edf4086e5cdb816ec410373ef9b4a0b08cbbe7c9fcc79e75e11ab29d8c55489b233ce5bc6775828d071755a28263517af19b119d0df1038ae9ffe75ca7a20887efb3df9475004cba4bb6d446635c4d"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000480)={0x20, 0x81, 0x3, "ced44b"}, &(0x7f00000004c0)={0x20, 0x82, 0x2, "848c"}, &(0x7f0000000500)={0x20, 0x83, 0x1, "f3"}, &(0x7f0000000540)={0x20, 0x84, 0x2, "bb5a"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "30cd56"}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$uac1(r0, &(0x7f0000001a80)={0x14, &(0x7f0000001900)={0x20, 0xc, 0xfd, {0xfd, 0x23, "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"}}, &(0x7f0000001a40)=ANY=[@ANYBLOB="00033400000034030c3675175aed73395379464f777ee09abf44be72b31f5ceaafe7551e3e58643299917307000000c80800000000d3dabe0e95"]}, &(0x7f0000001d00)={0x44, &(0x7f0000001ac0)={0x40, 0xe, 0x71, "1b59dbbd69f15f5f2f90b8d2ab8de4f9910be9d7df653abad30928686faafb9a66987860799112c7bfe7e22892617005507dab4b69a367e5920c40415a37168ab07f12391cdc1b0d7524e3e28b20786b06bb37cf44802edbddc1b453d22afc33896460d7369b9195b754a5b789f6f691c3"}, &(0x7f0000001b40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001b80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001bc0)={0x20, 0x81, 0x3, 'hu_'}, &(0x7f0000001c00)={0x20, 0x82, 0x1, 'Q'}, &(0x7f0000001c40)={0x20, 0x83, 0x3, "74d0f1"}, &(0x7f0000001c80)={0x20, 0x84, 0x2, 'kF'}, &(0x7f0000001cc0)={0x20, 0x85, 0x3, "23ae5b"}}) 740.416789ms ago: executing program 1 (id=4986): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000540), 0xa2803, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0xffffffff, "ffbdbdc772022acd2c000000000800000000000000008000", 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f0e, {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000000)={"f2b10a14bbb6c305798a45c3e041ff9dc85213095d62710c8733a5605cf40ab6", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f0000000340)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}]}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904"], 0x0) syz_usb_disconnect(r4) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) 495.783675ms ago: executing program 4 (id=4987): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ffffffe}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 4) 0s ago: executing program 4 (id=4988): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000280)={0x40, 0xe, 0x2, "93df"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0x22, 0x4a, {0x4a, 0xa, "943dd083adbb4e9c4a036ad2ebc20800eb6c0cbdbd7a6943a143b51fff2f220818f5441e5fd99607e20aca09d66ddb9677196ef14477ae08d6e143b8f9fc3803854ab9666de1b089"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000200)={0x1c, &(0x7f0000000140)={0x20, 0x0, 0x34, "df44fbb33bd3cc09ce0f129426176e71c5d03c6b9c1aff3f45ef32d037cd650a8bc173e61447316d7bed06f184399010c6312cf1"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x97}}) syz_usb_control_io$sierra_net(r0, &(0x7f0000000240)={0x14, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): ributes in process `syz.5.3624'. [ 705.968967][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 705.968987][ T38] audit: type=1326 audit(1782711745.257:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17480 comm="syz.4.3629" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fad0ce59 code=0x7ffc0000 [ 705.970778][ T38] audit: type=1326 audit(1782711745.257:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17480 comm="syz.4.3629" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fad0ce59 code=0x7ffc0000 [ 705.972079][ T38] audit: type=1326 audit(1782711745.257:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17480 comm="syz.4.3629" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f82fad0ce59 code=0x7ffc0000 [ 705.972331][ T38] audit: type=1326 audit(1782711745.257:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17480 comm="syz.4.3629" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fad0ce59 code=0x7ffc0000 [ 705.972609][ T38] audit: type=1326 audit(1782711745.257:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17480 comm="syz.4.3629" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fad0ce59 code=0x7ffc0000 [ 706.342945][T17497] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3636'. [ 707.201775][T17532] fuse: Bad value for 'fd' [ 707.263651][ T823] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 707.413560][ T823] usb 6-1: Using ep0 maxpacket: 32 [ 707.418745][ T823] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 707.418782][ T823] usb 6-1: config 0 interface 0 has no altsetting 0 [ 707.418818][ T823] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 707.418843][ T823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.489679][ T823] usb 6-1: config 0 descriptor?? [ 707.937141][ T823] hid_parser_main: 31 callbacks suppressed [ 707.937167][ T823] corsair-cpro 0003:1B1C:0C10.002C: unknown main item tag 0x0 [ 707.937200][ T823] corsair-cpro 0003:1B1C:0C10.002C: unknown main item tag 0x0 [ 707.937228][ T823] corsair-cpro 0003:1B1C:0C10.002C: unknown main item tag 0x0 [ 707.987963][ T823] corsair-cpro 0003:1B1C:0C10.002C: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 708.133904][ T823] corsair-cpro 0003:1B1C:0C10.002C: probe with driver corsair-cpro failed with error -71 [ 708.152982][ T823] usb 6-1: USB disconnect, device number 87 [ 708.274328][T17555] fido_id[17555]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 708.515176][T17571] input: syz1 as /devices/virtual/input/input56 [ 709.403791][T17603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3684'. [ 709.956120][T13536] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 710.202201][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 710.285329][T13536] usb 6-1: config 0 has no interfaces? [ 710.321140][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 710.348864][T13536] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 710.348898][T13536] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 710.348920][T13536] usb 6-1: Product: syz [ 710.348936][T13536] usb 6-1: Manufacturer: syz [ 710.352644][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 710.397085][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 710.425789][T13536] usb 6-1: config 0 descriptor?? [ 710.460993][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 711.352258][T17630] wg2 speed is unknown, defaulting to 1000 [ 712.459700][ T6815] bridge0: port 3(syz_tun) entered disabled state [ 712.536406][ T5611] Bluetooth: hci1: command tx timeout [ 712.597146][ T6815] syz_tun (unregistering): left allmulticast mode [ 712.597171][ T6815] syz_tun (unregistering): left promiscuous mode [ 712.597660][ T6815] bridge0: port 3(syz_tun) entered disabled state [ 712.743774][ T824] usb 6-1: USB disconnect, device number 88 [ 712.935280][T17630] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.941367][T17630] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.942245][T17630] bridge_slave_0: entered allmulticast mode [ 712.971572][T17630] bridge_slave_0: entered promiscuous mode [ 712.985410][T17630] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.985755][T17630] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.986068][T17630] bridge_slave_1: entered allmulticast mode [ 713.017108][T17630] bridge_slave_1: entered promiscuous mode [ 713.181880][T17630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.198822][T17630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.761476][ T7145] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.950994][T17630] team0: Port device team_slave_0 added [ 714.093076][T17630] team0: Port device team_slave_1 added [ 714.431413][ T7145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.695370][ T5611] Bluetooth: hci1: command tx timeout [ 715.380938][T17630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.380957][T17630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.380994][T17630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.578123][T17630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.578143][T17630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.578173][T17630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.871518][ T5611] Bluetooth: hci1: command tx timeout [ 717.056132][ T7145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.262964][ T5710] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 717.423687][ T5710] usb 6-1: Using ep0 maxpacket: 32 [ 717.426149][ T5710] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 717.426174][ T5710] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 717.426225][ T5710] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 717.430534][ T5710] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 717.430563][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.430584][ T5710] usb 6-1: Product: syz [ 717.430599][ T5710] usb 6-1: Manufacturer: syz [ 717.430614][ T5710] usb 6-1: SerialNumber: syz [ 717.777292][ T5710] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 717.777342][ T5710] cdc_ncm 6-1:1.0: bind() failure [ 717.818989][ T5710] usb 6-1: USB disconnect, device number 89 [ 717.932514][ T7145] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.139848][T17630] hsr_slave_0: entered promiscuous mode [ 718.148600][T17630] hsr_slave_1: entered promiscuous mode [ 718.158954][T17630] debugfs: 'hsr0' already exists in 'hsr' [ 718.158984][T17630] Cannot create hsr debugfs directory [ 718.603580][ T10] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 718.767264][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 718.767301][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 718.767341][ T10] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 718.767383][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 718.767428][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 718.831205][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 718.831238][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.831258][ T10] usb 2-1: Product: syz [ 718.831274][ T10] usb 2-1: Manufacturer: syz [ 718.831289][ T10] usb 2-1: SerialNumber: syz [ 718.871018][T17820] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 718.904231][ T5611] Bluetooth: hci1: command tx timeout [ 719.091369][T17820] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 719.503672][ T7145] bridge_slave_1: left allmulticast mode [ 719.503709][ T7145] bridge_slave_1: left promiscuous mode [ 719.503997][ T7145] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.698744][T17820] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 719.717342][ T7145] bridge_slave_0: left allmulticast mode [ 719.717375][ T7145] bridge_slave_0: left promiscuous mode [ 719.771264][ T7145] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.901509][ T10] cdc_ncm 2-1:1.0: bind() failure [ 719.944975][ T10] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 719.948224][ T10] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 719.951666][ T10] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 719.994024][ T10] usb 2-1: USB disconnect, device number 27 [ 720.014585][ T7145] dvmrp8: left allmulticast mode [ 720.014742][ T7145] dvmrp12: left allmulticast mode [ 721.677167][ T7145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 721.754493][ T7145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.838243][ T7145] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 721.886115][ T7145] veth1_vlan: left allmulticast mode [ 721.926995][ T7145] bond0 (unregistering): Released all slaves [ 721.984437][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 721.984919][ T10] wg2 speed is unknown, defaulting to 1000 [ 721.984974][ T10] syz1: Port: 1 Link DOWN [ 722.729280][ T823] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 722.883633][ T823] usb 2-1: Using ep0 maxpacket: 8 [ 722.885965][ T823] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 722.886764][ T823] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 722.886796][ T823] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 722.886822][ T823] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 722.886850][ T823] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 722.886876][ T823] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 722.886919][ T823] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 722.886959][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.194621][ T823] usb 2-1: GET_CAPABILITIES returned 0 [ 723.194672][ T823] usbtmc 2-1:16.0: can't read capabilities [ 723.400052][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 723.433869][T17948] usbtmc 2-1:16.0: Unable to send data, error -71 [ 723.439296][ T824] usb 2-1: USB disconnect, device number 28 [ 724.590854][ T5267] 8021q: adding VLAN 0 to HW filter on device eth10 [ 728.813638][ T37] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 728.963532][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 729.008228][ T37] usb 2-1: unable to get BOS descriptor or descriptor too short [ 729.011045][ T37] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 729.011073][ T37] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 729.011094][ T37] usb 2-1: config 14 has no interface number 0 [ 729.011109][ T37] usb 2-1: config 14 has no interface number 1 [ 729.011180][ T37] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 729.011205][ T37] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 729.011231][ T37] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 729.011259][ T37] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 729.011286][ T37] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 729.011377][ T37] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 729.011406][ T37] usb 2-1: config 14 interface 57 has no altsetting 0 [ 729.011426][ T37] usb 2-1: config 14 interface 228 has no altsetting 0 [ 729.142359][ T37] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 729.142389][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.142418][ T37] usb 2-1: Product: syz [ 729.142433][ T37] usb 2-1: Manufacturer: syz [ 729.142448][ T37] usb 2-1: SerialNumber: syz [ 729.413350][ T37] legousbtower 2-1:14.57: interrupt endpoints not found [ 729.460895][ T37] legousbtower 2-1:14.228: get version request failed: -71 [ 729.461086][ T37] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 729.499397][ T37] usb 2-1: USB disconnect, device number 29 [ 729.623732][ T7145] hsr_slave_0: left promiscuous mode [ 729.663864][ T7145] hsr_slave_1: left promiscuous mode [ 729.665877][ T7145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.665905][ T7145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.716677][ T7145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.716707][ T7145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.881493][ T7145] veth1_macvtap: left promiscuous mode [ 729.881605][ T7145] veth0_macvtap: left promiscuous mode [ 729.883222][ T7145] veth1_vlan: left promiscuous mode [ 729.895328][ T7145] veth0_vlan: left promiscuous mode [ 731.686139][ T7145] team0 (unregistering): Port device team_slave_1 removed [ 731.765873][ T7145] team0 (unregistering): Port device team_slave_0 removed [ 732.065214][ T67] smbdirect: ib_dev[syz1] removed [ 732.470455][T18231] 9pnet: p9_errstr2errno: server reported unknown error 00000000000 [ 732.539535][T17630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 732.578148][T17630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 732.591177][T17630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 732.696641][T17630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 732.707041][T17630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 732.849779][T17630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 732.914787][T17630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 732.949503][T17630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 733.173593][ T37] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 733.348237][ T37] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 733.348277][ T37] usb 6-1: can't read configurations, error -61 [ 733.506803][ T37] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 733.582141][T17630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.657975][ T37] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 733.658014][ T37] usb 6-1: can't read configurations, error -61 [ 733.658410][ T37] usb usb6-port1: attempt power cycle [ 733.723163][T17630] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.806040][ T8817] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.806283][ T8817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.841027][ T8817] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.841304][ T8817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.043637][ T37] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 734.133907][ T37] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 734.134380][ T37] usb 6-1: can't read configurations, error -61 [ 734.311194][ T37] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 734.339038][ T37] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 734.339078][ T37] usb 6-1: can't read configurations, error -61 [ 734.339493][ T37] usb usb6-port1: unable to enumerate USB device [ 734.587783][ T7145] IPVS: stop unused estimator thread 0... [ 734.954978][ T5615] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 735.115940][ T5615] usb 2-1: Using ep0 maxpacket: 16 [ 735.118657][ T5615] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 735.118693][ T5615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 735.160229][ T5615] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 735.160261][ T5615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.160282][ T5615] usb 2-1: Product: syz [ 735.160298][ T5615] usb 2-1: Manufacturer: syz [ 735.160314][ T5615] usb 2-1: SerialNumber: syz [ 735.207503][ T5615] usb 2-1: config 0 descriptor?? [ 735.247643][ T5615] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 735.247679][ T5615] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 735.610941][T17630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.823485][ T5615] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 735.852816][ T5615] em28xx 2-1:0.0: Config register raw data: 0x41 [ 736.469317][T18343] loop5: detected capacity change from 0 to 7 [ 736.531849][T17630] veth0_vlan: entered promiscuous mode [ 736.594710][T17630] veth1_vlan: entered promiscuous mode [ 736.686404][T18343] Dev loop5: unable to read RDB block 7 [ 736.686452][T18343] loop5: unable to read partition table [ 736.686669][T18343] loop5: partition table beyond EOD, truncated [ 736.686692][T18343] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 736.708687][T17630] veth0_macvtap: entered promiscuous mode [ 736.819226][T17630] veth1_macvtap: entered promiscuous mode [ 736.984684][T17630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.138378][T17630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.178938][ T7145] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.179165][ T7145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.179203][ T7145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.179235][ T7145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.868878][ T37] usb 2-1: USB disconnect, device number 30 [ 737.871365][ T37] em28xx 2-1:0.0: Disconnecting em28xx [ 738.259615][ T37] em28xx 2-1:0.0: Freeing device [ 738.737900][ T7144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.737923][ T7144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.859592][ T788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.859614][ T788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.730994][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 739.821633][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 739.847933][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 739.866851][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 739.916978][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 740.493556][ T5615] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 740.745410][ T5615] usb 6-1: Using ep0 maxpacket: 32 [ 741.507751][ T5615] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.507779][ T5615] usb 6-1: config 0 has no interfaces? [ 741.524069][ T5615] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 741.524103][ T5615] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.524124][ T5615] usb 6-1: Product: syz [ 741.524140][ T5615] usb 6-1: Manufacturer: syz [ 741.524156][ T5615] usb 6-1: SerialNumber: syz [ 741.594731][ T5615] usb 6-1: config 0 descriptor?? [ 742.011934][T13536] usb 6-1: USB disconnect, device number 94 [ 742.024175][ T5611] Bluetooth: hci2: command tx timeout [ 742.522218][ T7148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.495927][ T7148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.103643][ T5611] Bluetooth: hci2: command tx timeout [ 744.467192][ T7148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.947583][T18413] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.947978][T18413] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.948238][T18413] bridge_slave_0: entered allmulticast mode [ 744.952878][T18413] bridge_slave_0: entered promiscuous mode [ 745.281573][ T7148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.341625][T18413] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.341969][T18413] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.342303][T18413] bridge_slave_1: entered allmulticast mode [ 745.371902][T18413] bridge_slave_1: entered promiscuous mode [ 745.453199][T18413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.473953][T18413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.533380][T18413] team0: Port device team_slave_0 added [ 745.549798][T18413] team0: Port device team_slave_1 added [ 745.645676][T18413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.645694][T18413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.645724][T18413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.649497][T18413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.649513][T18413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.649544][T18413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.824003][T18413] hsr_slave_0: entered promiscuous mode [ 745.826389][T18413] hsr_slave_1: entered promiscuous mode [ 745.828302][T18413] debugfs: 'hsr0' already exists in 'hsr' [ 745.828335][T18413] Cannot create hsr debugfs directory [ 746.304054][ T5611] Bluetooth: hci2: command tx timeout [ 747.117489][ T38] audit: type=1326 audit(1782711786.407:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18523 comm="syz.5.4055" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda114ce59 code=0x7ffc0000 [ 747.117548][ T38] audit: type=1326 audit(1782711786.407:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18523 comm="syz.5.4055" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda114ce59 code=0x7ffc0000 [ 747.117913][ T38] audit: type=1326 audit(1782711786.407:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18523 comm="syz.5.4055" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda114ce59 code=0x7ffc0000 [ 747.119153][ T38] audit: type=1326 audit(1782711786.407:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18523 comm="syz.5.4055" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda114ce59 code=0x7ffc0000 [ 747.119207][ T38] audit: type=1326 audit(1782711786.407:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18523 comm="syz.5.4055" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7feda114ce59 code=0x7ffc0000 [ 747.119609][ T38] audit: type=1326 audit(1782711786.407:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18523 comm="syz.5.4055" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda114ce59 code=0x7ffc0000 [ 747.120094][ T38] audit: type=1326 audit(1782711786.407:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18523 comm="syz.5.4055" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda114ce59 code=0x7ffc0000 [ 747.120144][ T38] audit: type=1326 audit(1782711786.407:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18523 comm="syz.5.4055" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda114ce59 code=0x7ffc0000 [ 747.120810][ T38] audit: type=1326 audit(1782711786.407:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18523 comm="syz.5.4055" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7feda114ce59 code=0x7ffc0000 [ 747.121354][ T38] audit: type=1326 audit(1782711786.407:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18523 comm="syz.5.4055" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7feda114ce59 code=0x7ffc0000 [ 747.334583][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.524657][ T2389] pvrusb2: request_firmware fatal error with code=-110 [ 747.524716][ T2389] pvrusb2: Failure uploading firmware1 [ 747.524726][ T2389] pvrusb2: Device initialization was not successful. [ 747.524737][ T2389] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 747.524750][ T2389] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 747.524817][ T2389] pvrusb2: Failed to submit write-control URB status=-19 [ 747.536337][ T9] pvrusb2: Device being rendered inoperable [ 747.558432][ T2389] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 747.558461][ T2389] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 748.304566][T18528] overlayfs: missing 'lowerdir' [ 748.384918][ T5611] Bluetooth: hci2: command tx timeout [ 750.114668][ T7148] bridge_slave_1: left allmulticast mode [ 750.114707][ T7148] bridge_slave_1: left promiscuous mode [ 750.114995][ T7148] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.292273][ T7148] bridge_slave_0: left allmulticast mode [ 750.292307][ T7148] bridge_slave_0: left promiscuous mode [ 750.292549][ T7148] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.346665][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888037241c00: rx timeout, send abort [ 750.847479][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888037241c00: abort rx timeout. Force session deactivation [ 750.851332][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888037240800: rx timeout, send abort [ 751.351441][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888037240800: abort rx timeout. Force session deactivation [ 751.794200][ T7148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.874566][ T7148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.897014][ T7148] bond0 (unregistering): Released all slaves [ 752.180830][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 753.790970][T18629] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4087'. [ 753.809857][T18617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4083'. [ 754.685052][T18633] netlink: 'syz.5.4088': attribute type 1 has an invalid length. [ 754.686727][T18633] program syz.5.4088 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 756.613893][T18679] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 756.783644][ T32] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 756.938316][ T32] usb 6-1: config 0 has too many interfaces: 90, using maximum allowed: 32 [ 756.938347][ T32] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 90 [ 756.938396][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.938423][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8365, setting to 1024 [ 756.938484][ T32] usb 6-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 756.938520][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.057588][ T32] usb 6-1: config 0 descriptor?? [ 757.343645][ T7148] hsr_slave_0: left promiscuous mode [ 757.385688][ T7148] hsr_slave_1: left promiscuous mode [ 757.386803][ T7148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.386841][ T7148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.426597][ T7148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.426627][ T7148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.592620][ T32] logitech-hidpp-device 0003:046D:C086.002D: unknown main item tag 0x0 [ 757.592658][ T32] logitech-hidpp-device 0003:046D:C086.002D: unknown main item tag 0x0 [ 757.592684][ T32] logitech-hidpp-device 0003:046D:C086.002D: unknown main item tag 0x0 [ 757.592709][ T32] logitech-hidpp-device 0003:046D:C086.002D: unknown main item tag 0x0 [ 757.592734][ T32] logitech-hidpp-device 0003:046D:C086.002D: unknown main item tag 0x0 [ 757.592759][ T32] logitech-hidpp-device 0003:046D:C086.002D: unknown main item tag 0x0 [ 757.592784][ T32] logitech-hidpp-device 0003:046D:C086.002D: unknown main item tag 0x0 [ 757.592810][ T32] logitech-hidpp-device 0003:046D:C086.002D: unknown main item tag 0x0 [ 757.592838][ T32] logitech-hidpp-device 0003:046D:C086.002D: unknown main item tag 0x0 [ 757.592864][ T32] logitech-hidpp-device 0003:046D:C086.002D: unknown main item tag 0x0 [ 757.684104][ T32] logitech-hidpp-device 0003:046D:C086.002D: collection stack underflow [ 757.684137][ T32] logitech-hidpp-device 0003:046D:C086.002D: item 0 2 0 12 parsing failed [ 757.684950][ T32] logitech-hidpp-device 0003:046D:C086.002D: hidpp_probe:parse failed [ 757.712392][ T32] logitech-hidpp-device 0003:046D:C086.002D: probe with driver logitech-hidpp-device failed with error -22 [ 757.773366][ T10] usb 6-1: USB disconnect, device number 95 [ 758.024370][ T7148] veth1_macvtap: left promiscuous mode [ 758.024448][ T7148] veth0_macvtap: left promiscuous mode [ 758.024656][ T7148] veth1_vlan: left promiscuous mode [ 758.024798][ T7148] veth0_vlan: left promiscuous mode [ 759.717382][T18735] input: syz1 as /devices/virtual/input/input57 [ 759.717474][T18735] input: failed to attach handler leds to device input57, error: -6 [ 761.076266][ T7148] team0 (unregistering): Port device team_slave_1 removed [ 761.189468][ T7148] team0 (unregistering): Port device team_slave_0 removed [ 763.749084][T18413] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 763.998254][T18413] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 764.002219][T18413] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 764.156469][T18413] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 764.160903][T18413] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 764.200404][T18413] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 764.205839][T18413] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 764.325374][T18413] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 764.733460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 764.994127][T18413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.024647][T18832] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4150'. [ 765.189382][T18413] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.256850][ T7145] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.257115][ T7145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.287644][ T7145] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.287810][ T7145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.873996][T16183] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 766.025117][T16183] usb 6-1: Using ep0 maxpacket: 32 [ 766.028829][T16183] usb 6-1: config 0 has no interfaces? [ 766.061298][T16183] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 766.061330][T16183] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.061351][T16183] usb 6-1: Product: syz [ 766.061366][T16183] usb 6-1: Manufacturer: syz [ 766.061381][T16183] usb 6-1: SerialNumber: syz [ 766.112853][T16183] usb 6-1: config 0 descriptor?? [ 766.486919][ T37] usb 6-1: USB disconnect, device number 96 [ 767.583449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 767.733444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 769.486337][T18413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.668690][T18413] veth0_vlan: entered promiscuous mode [ 770.715817][T18413] veth1_vlan: entered promiscuous mode [ 770.820075][T18413] veth0_macvtap: entered promiscuous mode [ 770.850034][T18413] veth1_macvtap: entered promiscuous mode [ 770.899063][T18413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 770.965971][T18413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 771.002755][ T788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.022228][ T788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.022275][ T788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.022314][ T788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.377986][ T788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.378008][ T788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.805482][ T7136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.805503][ T7136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.592982][T18945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 775.348106][ T5611] Bluetooth: hci2: Malformed LE Event: 0x0d [ 775.462647][T18991] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 777.032488][T16183] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 777.185132][T16183] usb 2-1: Using ep0 maxpacket: 16 [ 777.187596][T16183] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 777.187662][T16183] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 14609, setting to 1024 [ 777.187691][T16183] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 777.187716][T16183] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 777.264900][T16183] usb 2-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 777.264932][T16183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.264954][T16183] usb 2-1: Product: syz [ 777.264969][T16183] usb 2-1: Manufacturer: syz [ 777.265002][T16183] usb 2-1: SerialNumber: syz [ 777.273078][T19026] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 777.320087][ T38] audit: type=1326 audit(1782711816.607:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18931 comm="syz.4.4188" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1628a8ce59 code=0x0 [ 777.548360][T16183] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 777.548422][T16183] usb 2-1: MIDIStreaming interface descriptor not found [ 778.113708][T16183] usb 2-1: USB disconnect, device number 31 [ 778.368751][T19045] udevd[19045]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 780.399686][T19088] netlink: 264 bytes leftover after parsing attributes in process `syz.4.4256'. [ 780.873548][T16183] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 781.003993][T16183] usb 2-1: device descriptor read/64, error -71 [ 781.256819][T16183] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 781.386737][T16183] usb 2-1: device descriptor read/64, error -71 [ 781.495041][T16183] usb usb2-port1: attempt power cycle [ 781.834760][T16183] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 781.855180][T16183] usb 2-1: device descriptor read/8, error -71 [ 782.094211][T16183] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 782.117112][T16183] usb 2-1: device descriptor read/8, error -71 [ 782.223988][T16183] usb usb2-port1: unable to enumerate USB device [ 782.334408][ T5697] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 782.483718][ T5697] usb 1-1: Using ep0 maxpacket: 16 [ 782.486725][ T5697] usb 1-1: unable to get BOS descriptor or descriptor too short [ 782.488006][ T5697] usb 1-1: config 1 has an invalid interface number: 159 but max is 0 [ 782.488040][ T5697] usb 1-1: config 1 has no interface number 0 [ 782.488072][ T5697] usb 1-1: config 1 interface 159 has no altsetting 0 [ 782.491875][ T5697] usb 1-1: New USB device found, idVendor=2899, idProduct=012c, bcdDevice=dd.b7 [ 782.491902][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.491926][ T5697] usb 1-1: Product: syz [ 782.491937][ T5697] usb 1-1: Manufacturer: syz [ 782.491948][ T5697] usb 1-1: SerialNumber: syz [ 782.793605][ T5697] gspca_main: spca500-2.14.0 probing 2899:012c [ 782.812309][ T5697] usb 1-1: USB disconnect, device number 99 [ 783.743278][T19236] ALSA: mixer_oss: invalid OSS volume 'SPEA9Ksˠ+I2KER' [ 785.083592][ T5697] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 785.235827][ T5697] usb 2-1: Using ep0 maxpacket: 8 [ 785.238763][ T5697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 785.238802][ T5697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 785.238819][ T5697] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 785.238837][ T5697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 785.238857][ T5697] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 785.238885][ T5697] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 785.238903][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.328546][ T5697] usb 2-1: config 0 descriptor?? [ 785.329915][T19296] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 785.754876][ T10] usb 2-1: USB disconnect, device number 36 [ 785.783070][ T5611] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 786.610727][ T38] audit: type=1800 audit(1782711825.877:381): pid=19352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.4380" name="/" dev="sockfs" ino=72654 res=0 errno=0 [ 786.979242][T19378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4392'. [ 786.979278][T19378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4392'. [ 787.871311][T19423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4413'. [ 787.871344][T19423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4413'. [ 789.497729][T19452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4424'. [ 790.014689][T19474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4437'. [ 792.093609][ T5613] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 792.315479][ T5613] usb 1-1: Using ep0 maxpacket: 32 [ 792.321751][T19545] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4471'. [ 792.338199][ T5613] usb 1-1: config 0 has no interfaces? [ 792.346253][ T5613] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 792.346287][ T5613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.346309][ T5613] usb 1-1: Product: syz [ 792.346324][ T5613] usb 1-1: Manufacturer: syz [ 792.346339][ T5613] usb 1-1: SerialNumber: syz [ 792.401502][ T5613] usb 1-1: config 0 descriptor?? [ 792.667394][ T10] usb 1-1: USB disconnect, device number 100 [ 794.799684][T19658] binder: 19657:19658 ioctl c0306201 0 returned -14 [ 795.003616][ T5615] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 795.178378][ T5615] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 795.180038][ T5615] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 795.180069][ T5615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 795.180090][ T5615] usb 2-1: SerialNumber: syz [ 795.720502][ T5615] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 795.777988][ T5615] usb 2-1: USB disconnect, device number 37 [ 797.139076][T19751] loop5: detected capacity change from 0 to 7 [ 797.161791][T19751] Dev loop5: unable to read RDB block 7 [ 797.161840][T19751] loop5: AHDI p1 p2 p3 p4 [ 797.161861][T19751] loop5: partition table partially beyond EOD, truncated [ 797.162121][T19751] loop5: p1 start 1601398130 is beyond EOD, truncated [ 797.162142][T19751] loop5: p2 start 1702059890 is beyond EOD, truncated [ 797.162159][T19751] loop5: p3 start 65533 is beyond EOD, truncated [ 798.859278][T19791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4581'. [ 799.506930][T19795] syz_tun: entered allmulticast mode [ 799.508025][T19793] syz_tun: left allmulticast mode [ 799.804035][ T5709] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 799.955942][ T5709] usb 1-1: Using ep0 maxpacket: 8 [ 799.959985][ T5709] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 799.960042][ T5709] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 799.960071][ T5709] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 799.960096][ T5709] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 799.960123][ T5709] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 799.960147][ T5709] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 799.960190][ T5709] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 799.960214][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.270547][ T5709] usb 1-1: GET_CAPABILITIES returned 0 [ 800.270598][ T5709] usbtmc 1-1:16.0: can't read capabilities [ 800.478071][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 800.488653][T19797] usbtmc 1-1:16.0: Unable to send data, error -71 [ 800.549862][ T5709] usb 1-1: USB disconnect, device number 101 [ 803.798279][T19927] netlink: 'syz.4.4647': attribute type 2 has an invalid length. [ 804.239327][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805c217800: rx timeout, send abort [ 804.739404][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805c217800: abort rx timeout. Force session deactivation [ 804.739568][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805c215400: rx timeout, send abort [ 804.843977][ T5613] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 805.011740][ T5613] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 805.011772][ T5613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.011795][ T5613] usb 1-1: Product: syz [ 805.011812][ T5613] usb 1-1: Manufacturer: syz [ 805.011827][ T5613] usb 1-1: SerialNumber: syz [ 805.239653][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805c215400: abort rx timeout. Force session deactivation [ 805.501944][ T5613] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 805.502010][ T5613] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 805.745140][ T5613] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 805.745213][ T5613] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 805.897747][T19993] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 805.897776][T19993] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 805.947125][ T5613] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 805.994669][ T5613] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 806.174483][ T5613] usb 1-1: USB disconnect, device number 102 [ 806.524466][ T38] audit: type=1326 audit(1782711845.817:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.4.4685" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1628a8ce59 code=0x7ffc0000 [ 806.529420][ T38] audit: type=1326 audit(1782711845.817:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.4.4685" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1628a8ce59 code=0x7ffc0000 [ 806.531257][ T38] audit: type=1326 audit(1782711845.817:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.4.4685" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1628a8ce59 code=0x7ffc0000 [ 806.533142][ T38] audit: type=1326 audit(1782711845.817:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.4.4685" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f1628a8ce59 code=0x7ffc0000 [ 806.533682][ T38] audit: type=1326 audit(1782711845.817:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.4.4685" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1628a8ce59 code=0x7ffc0000 [ 806.534056][ T38] audit: type=1326 audit(1782711845.827:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.4.4685" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1628a8ce59 code=0x7ffc0000 [ 806.534434][ T38] audit: type=1326 audit(1782711845.827:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.4.4685" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1628a8ce59 code=0x7ffc0000 [ 806.539714][ T38] audit: type=1326 audit(1782711845.827:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.4.4685" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1628a8ce59 code=0x7ffc0000 [ 806.540431][ T38] audit: type=1326 audit(1782711845.827:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.4.4685" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1628a8ce59 code=0x7ffc0000 [ 806.543330][ T38] audit: type=1326 audit(1782711845.827:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.4.4685" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1628a8ce59 code=0x7ffc0000 [ 808.744864][ T2389] pvrusb2: request_firmware fatal error with code=-110 [ 808.744885][ T2389] pvrusb2: Failure uploading firmware1 [ 808.744894][ T2389] pvrusb2: Device initialization was not successful. [ 808.744903][ T2389] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 808.744922][ T2389] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 808.747501][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.802687][ T9] pvrusb2: Device being rendered inoperable [ 810.050268][T20096] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 810.050541][T20096] Error validating options; rc = [-22] [ 811.956492][T20167] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4762'. [ 812.363742][T20181] Invalid argument reading file caps for ./file0 [ 817.043274][T20269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.054474][T20269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.263553][ T9] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 817.322678][T20281] FAULT_INJECTION: forcing a failure. [ 817.322678][T20281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.322716][T20281] CPU: 0 UID: 0 PID: 20281 Comm: syz.0.4813 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 817.322747][T20281] Tainted: [L]=SOFTLOCKUP [ 817.322755][T20281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 817.322768][T20281] Call Trace: [ 817.322777][T20281] [ 817.322787][T20281] dump_stack_lvl+0xe8/0x150 [ 817.322817][T20281] should_fail_ex+0x467/0x600 [ 817.322858][T20281] _copy_to_user+0x31/0xb0 [ 817.322888][T20281] simple_read_from_buffer+0xe1/0x170 [ 817.322918][T20281] proc_fail_nth_read+0x1be/0x230 [ 817.322946][T20281] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 817.322973][T20281] ? rw_verify_area+0x250/0x4d0 [ 817.323001][T20281] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 817.323033][T20281] vfs_read+0x219/0xa90 [ 817.323068][T20281] ? __pfx_vfs_read+0x10/0x10 [ 817.323103][T20281] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 817.323151][T20281] ? lockdep_hardirqs_on+0x7a/0x110 [ 817.323179][T20281] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 817.323207][T20281] ? mutex_lock_nested+0x152/0x1d0 [ 817.323228][T20281] ? fdget_pos+0x252/0x320 [ 817.323261][T20281] ksys_read+0x156/0x270 [ 817.323291][T20281] ? __pfx_ksys_read+0x10/0x10 [ 817.323335][T20281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.323361][T20281] do_syscall_64+0x174/0x580 [ 817.323394][T20281] ? trace_irq_disable+0x3b/0x140 [ 817.323422][T20281] ? clear_bhb_loop+0x40/0x90 [ 817.323450][T20281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.323474][T20281] RIP: 0033:0x7fb0fb09d68e [ 817.323495][T20281] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 817.323514][T20281] RSP: 002b:00007fb0f932dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 817.323537][T20281] RAX: ffffffffffffffda RBX: 00007fb0f932e6c0 RCX: 00007fb0fb09d68e [ 817.323554][T20281] RDX: 000000000000000f RSI: 00007fb0f932e0a0 RDI: 0000000000000003 [ 817.323569][T20281] RBP: 00007fb0f932e090 R08: 0000000000000000 R09: 0000000000000000 [ 817.323583][T20281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.323596][T20281] R13: 00007fb0fb356038 R14: 00007fb0fb355fa0 R15: 00007ffd78ccfae8 [ 817.323631][T20281] [ 817.540147][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.540209][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 817.540239][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.540279][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 817.540304][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.625840][ T9] usb 2-1: config 0 descriptor?? [ 817.684828][T20287] netlink: 'syz.5.4814': attribute type 4 has an invalid length. [ 817.777391][T20289] FAULT_INJECTION: forcing a failure. [ 817.777391][T20289] name failslab, interval 1, probability 0, space 0, times 0 [ 817.777429][T20289] CPU: 1 UID: 0 PID: 20289 Comm: syz.0.4816 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 817.777478][T20289] Tainted: [L]=SOFTLOCKUP [ 817.777487][T20289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 817.777500][T20289] Call Trace: [ 817.777509][T20289] [ 817.777518][T20289] dump_stack_lvl+0xe8/0x150 [ 817.777548][T20289] should_fail_ex+0x467/0x600 [ 817.777587][T20289] should_failslab+0xa8/0x100 [ 817.777617][T20289] __kmalloc_noprof+0xfe/0x780 [ 817.777641][T20289] ? rcu_is_watching+0x15/0xb0 [ 817.777677][T20289] ? tomoyo_realpath_from_path+0xef/0x640 [ 817.777713][T20289] ? tomoyo_realpath_from_path+0xef/0x640 [ 817.777756][T20289] tomoyo_realpath_from_path+0xef/0x640 [ 817.777802][T20289] ? tomoyo_path_number_perm+0x219/0x5f0 [ 817.777834][T20289] tomoyo_path_number_perm+0x246/0x5f0 [ 817.777877][T20289] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 817.777906][T20289] ? __lock_acquire+0x683/0x2ce0 [ 817.777952][T20289] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 817.777981][T20289] ? hook_file_ioctl+0x1f3/0x600 [ 817.778012][T20289] ? lockdep_hardirqs_on+0x7a/0x110 [ 817.778061][T20289] ? __fget_files+0x2a/0x420 [ 817.778090][T20289] ? __fget_files+0x2a/0x420 [ 817.778113][T20289] ? __fget_files+0x3a8/0x420 [ 817.778136][T20289] ? __fget_files+0x2a/0x420 [ 817.778166][T20289] security_file_ioctl+0xc3/0x2a0 [ 817.778196][T20289] __se_sys_ioctl+0x47/0x170 [ 817.778228][T20289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.778253][T20289] do_syscall_64+0x174/0x580 [ 817.778293][T20289] ? trace_irq_disable+0x3b/0x140 [ 817.778323][T20289] ? clear_bhb_loop+0x40/0x90 [ 817.778351][T20289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.778374][T20289] RIP: 0033:0x7fb0fb0dce59 [ 817.778395][T20289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.778414][T20289] RSP: 002b:00007fb0f932e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 817.778437][T20289] RAX: ffffffffffffffda RBX: 00007fb0fb355fa0 RCX: 00007fb0fb0dce59 [ 817.778453][T20289] RDX: 0000200000000340 RSI: 00000000c0383e04 RDI: 0000000000000005 [ 817.778468][T20289] RBP: 00007fb0f932e090 R08: 0000000000000000 R09: 0000000000000000 [ 817.778482][T20289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.778495][T20289] R13: 00007fb0fb356038 R14: 00007fb0fb355fa0 R15: 00007ffd78ccfae8 [ 817.778528][T20289] [ 817.780091][T20289] ERROR: Out of memory at tomoyo_realpath_from_path. [ 817.919199][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 817.919329][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 818.119668][ T9] usb 2-1: USB disconnect, device number 38 [ 818.571807][T20314] FAULT_INJECTION: forcing a failure. [ 818.571807][T20314] name failslab, interval 1, probability 0, space 0, times 0 [ 818.571836][T20314] CPU: 0 UID: 0 PID: 20314 Comm: syz.5.4828 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 818.571859][T20314] Tainted: [L]=SOFTLOCKUP [ 818.571865][T20314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 818.571875][T20314] Call Trace: [ 818.571881][T20314] [ 818.571888][T20314] dump_stack_lvl+0xe8/0x150 [ 818.571910][T20314] should_fail_ex+0x467/0x600 [ 818.571940][T20314] should_failslab+0xa8/0x100 [ 818.571961][T20314] __kmalloc_noprof+0xfe/0x780 [ 818.571979][T20314] ? rcu_is_watching+0x15/0xb0 [ 818.572005][T20314] ? tomoyo_realpath_from_path+0xef/0x640 [ 818.572030][T20314] ? tomoyo_realpath_from_path+0xef/0x640 [ 818.572060][T20314] tomoyo_realpath_from_path+0xef/0x640 [ 818.572093][T20314] ? tomoyo_path_number_perm+0x219/0x5f0 [ 818.572114][T20314] tomoyo_path_number_perm+0x246/0x5f0 [ 818.572138][T20314] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 818.572158][T20314] ? __lock_acquire+0x683/0x2ce0 [ 818.572191][T20314] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 818.572212][T20314] ? hook_file_ioctl+0x1f3/0x600 [ 818.572233][T20314] ? lockdep_hardirqs_on+0x7a/0x110 [ 818.572267][T20314] ? __fget_files+0x2a/0x420 [ 818.572287][T20314] ? __fget_files+0x2a/0x420 [ 818.572302][T20314] ? __fget_files+0x3a8/0x420 [ 818.572319][T20314] ? __fget_files+0x2a/0x420 [ 818.572338][T20314] security_file_ioctl+0xc3/0x2a0 [ 818.572360][T20314] __se_sys_ioctl+0x47/0x170 [ 818.572382][T20314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.572420][T20314] do_syscall_64+0x174/0x580 [ 818.572448][T20314] ? trace_irq_disable+0x3b/0x140 [ 818.572485][T20314] ? clear_bhb_loop+0x40/0x90 [ 818.572518][T20314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.572535][T20314] RIP: 0033:0x7feda114ce59 [ 818.572550][T20314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.572564][T20314] RSP: 002b:00007fed9f3a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 818.572581][T20314] RAX: ffffffffffffffda RBX: 00007feda13c5fa0 RCX: 00007feda114ce59 [ 818.572593][T20314] RDX: 00002000000000c0 RSI: 00000000c0405668 RDI: 0000000000000003 [ 818.572604][T20314] RBP: 00007fed9f3a6090 R08: 0000000000000000 R09: 0000000000000000 [ 818.572614][T20314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.572624][T20314] R13: 00007feda13c6038 R14: 00007feda13c5fa0 R15: 00007ffe98b24888 [ 818.572649][T20314] [ 818.572655][T20314] ERROR: Out of memory at tomoyo_realpath_from_path. [ 818.947182][T20318] FAULT_INJECTION: forcing a failure. [ 818.947182][T20318] name failslab, interval 1, probability 0, space 0, times 0 [ 818.947221][T20318] CPU: 1 UID: 0 PID: 20318 Comm: syz.0.4830 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 818.947251][T20318] Tainted: [L]=SOFTLOCKUP [ 818.947259][T20318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 818.947272][T20318] Call Trace: [ 818.947281][T20318] [ 818.947292][T20318] dump_stack_lvl+0xe8/0x150 [ 818.947325][T20318] should_fail_ex+0x467/0x600 [ 818.947366][T20318] should_failslab+0xa8/0x100 [ 818.947396][T20318] __kmalloc_noprof+0xfe/0x780 [ 818.947419][T20318] ? rcu_is_watching+0x15/0xb0 [ 818.947464][T20318] ? tomoyo_realpath_from_path+0xef/0x640 [ 818.947501][T20318] ? tomoyo_realpath_from_path+0xef/0x640 [ 818.947542][T20318] tomoyo_realpath_from_path+0xef/0x640 [ 818.947590][T20318] ? tomoyo_path_number_perm+0x219/0x5f0 [ 818.947620][T20318] tomoyo_path_number_perm+0x246/0x5f0 [ 818.947654][T20318] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 818.947684][T20318] ? __lock_acquire+0x683/0x2ce0 [ 818.947730][T20318] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 818.947761][T20318] ? hook_file_ioctl+0x1f3/0x600 [ 818.947792][T20318] ? lockdep_hardirqs_on+0x7a/0x110 [ 818.947840][T20318] ? __fget_files+0x2a/0x420 [ 818.947867][T20318] ? __fget_files+0x2a/0x420 [ 818.947889][T20318] ? __fget_files+0x3a8/0x420 [ 818.947911][T20318] ? __fget_files+0x2a/0x420 [ 818.947939][T20318] security_file_ioctl+0xc3/0x2a0 [ 818.947969][T20318] __se_sys_ioctl+0x47/0x170 [ 818.947999][T20318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.948025][T20318] do_syscall_64+0x174/0x580 [ 818.948051][T20318] ? trace_irq_disable+0x3b/0x140 [ 818.948081][T20318] ? clear_bhb_loop+0x40/0x90 [ 818.948110][T20318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.948134][T20318] RIP: 0033:0x7fb0fb0dce59 [ 818.948154][T20318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.948174][T20318] RSP: 002b:00007fb0f932e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 818.948197][T20318] RAX: ffffffffffffffda RBX: 00007fb0fb355fa0 RCX: 00007fb0fb0dce59 [ 818.948213][T20318] RDX: 0000200000000040 RSI: 0000000000003b87 RDI: 0000000000000003 [ 818.948227][T20318] RBP: 00007fb0f932e090 R08: 0000000000000000 R09: 0000000000000000 [ 818.948240][T20318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.948253][T20318] R13: 00007fb0fb356038 R14: 00007fb0fb355fa0 R15: 00007ffd78ccfae8 [ 818.948288][T20318] [ 818.948364][T20318] ERROR: Out of memory at tomoyo_realpath_from_path. [ 819.176034][T20301] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 819.360322][T20326] FAULT_INJECTION: forcing a failure. [ 819.360322][T20326] name failslab, interval 1, probability 0, space 0, times 0 [ 819.360357][T20326] CPU: 0 UID: 0 PID: 20326 Comm: syz.4.4834 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 819.360383][T20326] Tainted: [L]=SOFTLOCKUP [ 819.360390][T20326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 819.360401][T20326] Call Trace: [ 819.360408][T20326] [ 819.360416][T20326] dump_stack_lvl+0xe8/0x150 [ 819.360441][T20326] should_fail_ex+0x467/0x600 [ 819.360471][T20326] should_failslab+0xa8/0x100 [ 819.360492][T20326] __kmalloc_noprof+0xfe/0x780 [ 819.360509][T20326] ? rcu_is_watching+0x15/0xb0 [ 819.360535][T20326] ? tomoyo_realpath_from_path+0xef/0x640 [ 819.360561][T20326] ? tomoyo_realpath_from_path+0xef/0x640 [ 819.360591][T20326] tomoyo_realpath_from_path+0xef/0x640 [ 819.360623][T20326] ? tomoyo_path_number_perm+0x219/0x5f0 [ 819.360645][T20326] tomoyo_path_number_perm+0x246/0x5f0 [ 819.360681][T20326] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 819.360708][T20326] ? __lock_acquire+0x683/0x2ce0 [ 819.360768][T20326] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 819.360797][T20326] ? hook_file_ioctl+0x1f3/0x600 [ 819.360819][T20326] ? lockdep_hardirqs_on+0x7a/0x110 [ 819.360856][T20326] ? __fget_files+0x2a/0x420 [ 819.360877][T20326] ? __fget_files+0x2a/0x420 [ 819.360894][T20326] ? __fget_files+0x3a8/0x420 [ 819.360912][T20326] ? __fget_files+0x2a/0x420 [ 819.360934][T20326] security_file_ioctl+0xc3/0x2a0 [ 819.360959][T20326] __se_sys_ioctl+0x47/0x170 [ 819.360985][T20326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.361010][T20326] do_syscall_64+0x174/0x580 [ 819.361033][T20326] ? trace_irq_disable+0x3b/0x140 [ 819.361056][T20326] ? clear_bhb_loop+0x40/0x90 [ 819.361078][T20326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.361096][T20326] RIP: 0033:0x7f1628a8ce59 [ 819.361114][T20326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.361129][T20326] RSP: 002b:00007f1626cde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 819.361148][T20326] RAX: ffffffffffffffda RBX: 00007f1628d05fa0 RCX: 00007f1628a8ce59 [ 819.361161][T20326] RDX: 0000200000000040 RSI: 000000004040ae79 RDI: 0000000000000004 [ 819.361172][T20326] RBP: 00007f1626cde090 R08: 0000000000000000 R09: 0000000000000000 [ 819.361183][T20326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.361193][T20326] R13: 00007f1628d06038 R14: 00007f1628d05fa0 R15: 00007ffc78171ef8 [ 819.361225][T20326] [ 819.361500][T20326] ERROR: Out of memory at tomoyo_realpath_from_path. [ 819.889376][T20340] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 820.272124][T20360] FAULT_INJECTION: forcing a failure. [ 820.272124][T20360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 820.272163][T20360] CPU: 1 UID: 0 PID: 20360 Comm: syz.1.4849 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 820.272193][T20360] Tainted: [L]=SOFTLOCKUP [ 820.272218][T20360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 820.272233][T20360] Call Trace: [ 820.272241][T20360] [ 820.272256][T20360] dump_stack_lvl+0xe8/0x150 [ 820.272286][T20360] should_fail_ex+0x467/0x600 [ 820.272337][T20360] _copy_from_user+0x2d/0xb0 [ 820.272364][T20360] ___sys_sendmsg+0x1c6/0x360 [ 820.272412][T20360] ? __lock_acquire+0x683/0x2ce0 [ 820.272448][T20360] ? __pfx____sys_sendmsg+0x10/0x10 [ 820.272512][T20360] ? __fget_files+0x2a/0x420 [ 820.272536][T20360] ? __fget_files+0x3a8/0x420 [ 820.272569][T20360] __x64_sys_sendmsg+0x1b7/0x290 [ 820.272611][T20360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 820.272661][T20360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.272687][T20360] do_syscall_64+0x174/0x580 [ 820.272717][T20360] ? trace_irq_disable+0x3b/0x140 [ 820.272745][T20360] ? clear_bhb_loop+0x40/0x90 [ 820.272773][T20360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.272797][T20360] RIP: 0033:0x7fabff7bce59 [ 820.272818][T20360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.272838][T20360] RSP: 002b:00007fabfda0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 820.272861][T20360] RAX: ffffffffffffffda RBX: 00007fabffa35fa0 RCX: 00007fabff7bce59 [ 820.272877][T20360] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000003 [ 820.272891][T20360] RBP: 00007fabfda0e090 R08: 0000000000000000 R09: 0000000000000000 [ 820.272905][T20360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.272919][T20360] R13: 00007fabffa36038 R14: 00007fabffa35fa0 R15: 00007ffc259476b8 [ 820.272953][T20360] [ 820.797637][T20376] FAULT_INJECTION: forcing a failure. [ 820.797637][T20376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 820.797673][T20376] CPU: 1 UID: 0 PID: 20376 Comm: syz.5.4857 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 820.797698][T20376] Tainted: [L]=SOFTLOCKUP [ 820.797705][T20376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 820.797718][T20376] Call Trace: [ 820.797727][T20376] [ 820.797736][T20376] dump_stack_lvl+0xe8/0x150 [ 820.797767][T20376] should_fail_ex+0x467/0x600 [ 820.797803][T20376] _copy_from_user+0x2d/0xb0 [ 820.797830][T20376] ___sys_sendmsg+0x1c6/0x360 [ 820.797861][T20376] ? __lock_acquire+0x683/0x2ce0 [ 820.797893][T20376] ? __pfx____sys_sendmsg+0x10/0x10 [ 820.797958][T20376] ? __fget_files+0x2a/0x420 [ 820.797979][T20376] ? __fget_files+0x3a8/0x420 [ 820.798009][T20376] __x64_sys_sendmsg+0x1b7/0x290 [ 820.798122][T20376] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 820.798169][T20376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.798195][T20376] do_syscall_64+0x174/0x580 [ 820.798223][T20376] ? trace_irq_disable+0x3b/0x140 [ 820.798252][T20376] ? clear_bhb_loop+0x40/0x90 [ 820.798277][T20376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.798300][T20376] RIP: 0033:0x7feda114ce59 [ 820.798323][T20376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.798341][T20376] RSP: 002b:00007fed9f3a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 820.798364][T20376] RAX: ffffffffffffffda RBX: 00007feda13c5fa0 RCX: 00007feda114ce59 [ 820.798380][T20376] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003 [ 820.798393][T20376] RBP: 00007fed9f3a6090 R08: 0000000000000000 R09: 0000000000000000 [ 820.798406][T20376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.798418][T20376] R13: 00007feda13c6038 R14: 00007feda13c5fa0 R15: 00007ffe98b24888 [ 820.798455][T20376] [ 820.874198][ T10] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 821.093829][ T5613] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 821.143591][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 821.146990][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 821.147048][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 821.147080][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 821.147107][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 821.147130][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 821.147175][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 821.147199][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.152590][ T10] usb 1-1: config 0 descriptor?? [ 821.256121][ T5613] usb 2-1: Using ep0 maxpacket: 32 [ 821.271701][ T5613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.271728][ T5613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.271758][ T5613] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 821.271775][ T5613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.321350][ T5613] usb 2-1: config 0 descriptor?? [ 821.345092][ T5613] hub 2-1:0.0: USB hub found [ 821.486844][T20393] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 821.503683][ T10] rc_core: IR keymap rc-hauppauge not found [ 821.503702][ T10] Registered IR keymap rc-empty [ 821.504243][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 821.535018][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 821.541616][ T5613] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 821.568150][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 821.587321][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input58 [ 821.606783][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 821.627454][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 821.643734][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 821.664506][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 821.683600][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 821.703654][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 821.736007][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 821.763724][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 821.793683][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 821.813639][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 821.818358][ T5613] hid-generic 0003:046D:C31C.002E: item fetching failed at offset 0/1 [ 821.819101][ T5613] hid-generic 0003:046D:C31C.002E: probe with driver hid-generic failed with error -22 [ 821.937717][ T10] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 821.937745][ T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 822.010840][ T10] usb 1-1: USB disconnect, device number 103 [ 822.125102][ T5613] usb 2-1: USB disconnect, device number 39 [ 822.303808][ T5886] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 822.453871][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 822.457446][ T5886] usb 5-1: config 1 interface 0 altsetting 196 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 822.457487][ T5886] usb 5-1: config 1 interface 0 has no altsetting 0 [ 822.462936][ T5886] usb 5-1: New USB device found, idVendor=1b96, idProduct=0007, bcdDevice= 0.40 [ 822.462967][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.462989][ T5886] usb 5-1: Product: 薍胘톺䁮⩖ᆝ借焼祥峢泫姣滥裓鳻冁钮嫡擡ࡨ將豒赧鸤逇Პꘂᴑ콲밍ϸ瑈ɐܴϺ׾汝琜樯鍿蝎坒䙆圀礱机་툙鬞놪㐺ᚘ嗨펡蝂ȉ渀ﵲᗼﶥ뮢냮꺧ⳛႴ饶颜筥㒉ඔ蹗橥簆㠱钊ણ [ 822.463019][ T5886] usb 5-1: Manufacturer: ᠌ [ 822.463035][ T5886] usb 5-1: SerialNumber: 㐉 [ 822.668148][T20421] loop9: detected capacity change from 0 to 524287998 [ 822.801382][ T5886] usbhid 5-1:1.0: can't add hid device: -71 [ 822.801506][ T5886] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 822.829664][T20427] FAULT_INJECTION: forcing a failure. [ 822.829664][T20427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 822.829703][T20427] CPU: 1 UID: 0 PID: 20427 Comm: syz.5.4877 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 822.829732][T20427] Tainted: [L]=SOFTLOCKUP [ 822.829741][T20427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 822.829754][T20427] Call Trace: [ 822.829762][T20427] [ 822.829772][T20427] dump_stack_lvl+0xe8/0x150 [ 822.829803][T20427] should_fail_ex+0x467/0x600 [ 822.829841][T20427] _copy_from_user+0x2d/0xb0 [ 822.829870][T20427] __copy_msghdr+0x390/0x590 [ 822.829907][T20427] ___sys_sendmsg+0x213/0x360 [ 822.829937][T20427] ? __lock_acquire+0x683/0x2ce0 [ 822.829976][T20427] ? __pfx____sys_sendmsg+0x10/0x10 [ 822.830044][T20427] ? __fget_files+0x2a/0x420 [ 822.830068][T20427] ? __fget_files+0x3a8/0x420 [ 822.830102][T20427] __x64_sys_sendmsg+0x1b7/0x290 [ 822.830136][T20427] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 822.830185][T20427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.830211][T20427] do_syscall_64+0x174/0x580 [ 822.830238][T20427] ? trace_irq_disable+0x3b/0x140 [ 822.830267][T20427] ? clear_bhb_loop+0x40/0x90 [ 822.830294][T20427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.830324][T20427] RIP: 0033:0x7feda114ce59 [ 822.830355][T20427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.830374][T20427] RSP: 002b:00007fed9f3a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.830397][T20427] RAX: ffffffffffffffda RBX: 00007feda13c5fa0 RCX: 00007feda114ce59 [ 822.830412][T20427] RDX: 00000000000000c0 RSI: 0000200000000480 RDI: 0000000000000004 [ 822.830425][T20427] RBP: 00007fed9f3a6090 R08: 0000000000000000 R09: 0000000000000000 [ 822.830437][T20427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.830448][T20427] R13: 00007feda13c6038 R14: 00007feda13c5fa0 R15: 00007ffe98b24888 [ 822.830478][T20427] [ 822.832790][ T5886] usb 5-1: USB disconnect, device number 65 [ 822.934261][ T5613] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 823.238218][ T5613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 823.238255][ T5613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.238280][ T5613] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 823.238334][ T5613] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 823.238359][ T5613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.250503][ T5613] usb 2-1: config 0 descriptor?? [ 823.433599][ T5709] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 823.589569][ T5709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 823.589608][ T5709] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 823.589653][ T5709] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 823.589677][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.640586][ T5709] usb 1-1: config 0 descriptor?? [ 823.717721][T20425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.720548][T20425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.738916][T20442] netlink: 'syz.4.4884': attribute type 2 has an invalid length. [ 823.804900][ T5613] hid_parser_main: 65 callbacks suppressed [ 823.804927][ T5613] hid-multitouch 0003:0457:07DA.002F: unknown main item tag 0x0 [ 823.804960][ T5613] hid-multitouch 0003:0457:07DA.002F: unknown main item tag 0x0 [ 823.804987][ T5613] hid-multitouch 0003:0457:07DA.002F: unknown main item tag 0x0 [ 823.805015][ T5613] hid-multitouch 0003:0457:07DA.002F: unknown main item tag 0x0 [ 823.805043][ T5613] hid-multitouch 0003:0457:07DA.002F: unknown main item tag 0x0 [ 823.805085][ T5613] hid-multitouch 0003:0457:07DA.002F: unknown main item tag 0x0 [ 823.805114][ T5613] hid-multitouch 0003:0457:07DA.002F: unknown main item tag 0x0 [ 823.805142][ T5613] hid-multitouch 0003:0457:07DA.002F: unknown main item tag 0x0 [ 823.805170][ T5613] hid-multitouch 0003:0457:07DA.002F: unknown main item tag 0x0 [ 823.805198][ T5613] hid-multitouch 0003:0457:07DA.002F: unknown main item tag 0x0 [ 823.820530][ T5613] hid-multitouch 0003:0457:07DA.002F: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 823.966046][ T5613] usb 2-1: USB disconnect, device number 40 [ 824.058921][T20429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.059529][T20429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.072337][T20445] fido_id[20445]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 824.113633][ T5709] kovaplus 0003:1E7D:2D50.0030: item fetching failed at offset 143/235 [ 824.114499][ T5709] kovaplus 0003:1E7D:2D50.0030: parse failed [ 824.114580][ T5709] kovaplus 0003:1E7D:2D50.0030: probe with driver kovaplus failed with error -22 [ 824.360601][T20460] FAULT_INJECTION: forcing a failure. [ 824.360601][T20460] name failslab, interval 1, probability 0, space 0, times 0 [ 824.360628][T20460] CPU: 1 UID: 0 PID: 20460 Comm: syz.5.4891 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 824.360649][T20460] Tainted: [L]=SOFTLOCKUP [ 824.360655][T20460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 824.360665][T20460] Call Trace: [ 824.360671][T20460] [ 824.360678][T20460] dump_stack_lvl+0xe8/0x150 [ 824.360702][T20460] should_fail_ex+0x467/0x600 [ 824.360730][T20460] should_failslab+0xa8/0x100 [ 824.360751][T20460] kmem_cache_alloc_noprof+0xa4/0x650 [ 824.360767][T20460] ? dst_alloc+0x105/0x170 [ 824.360790][T20460] ? dst_alloc+0x105/0x170 [ 824.360813][T20460] ? fib_lookup+0x76/0x440 [ 824.360831][T20460] dst_alloc+0x105/0x170 [ 824.360858][T20460] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 824.360877][T20460] ? ip_route_output_key_hash_rcu+0x1331/0x2720 [ 824.360900][T20460] ? ip_route_output_key_hash+0xd8/0x2a0 [ 824.360919][T20460] ip_route_output_key_hash+0x18d/0x2a0 [ 824.360939][T20460] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 824.360960][T20460] ? do_raw_spin_lock+0x12b/0x2f0 [ 824.360981][T20460] ? __lock_acquire+0x683/0x2ce0 [ 824.361002][T20460] ? dst_release+0x7f/0x1b0 [ 824.361027][T20460] __ip4_datagram_connect+0x89a/0x1220 [ 824.361054][T20460] __ip6_datagram_connect+0x1bf/0x10e0 [ 824.361082][T20460] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 824.361105][T20460] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 824.361135][T20460] ip6_datagram_connect_v6_only+0x63/0xa0 [ 824.361159][T20460] __sys_connect+0x336/0x470 [ 824.361180][T20460] ? __pfx___sys_connect+0x10/0x10 [ 824.361216][T20460] ? __pfx_ksys_write+0x10/0x10 [ 824.361239][T20460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.361256][T20460] __x64_sys_connect+0x7a/0x90 [ 824.361276][T20460] do_syscall_64+0x174/0x580 [ 824.361296][T20460] ? trace_irq_disable+0x3b/0x140 [ 824.361316][T20460] ? clear_bhb_loop+0x40/0x90 [ 824.361336][T20460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.361351][T20460] RIP: 0033:0x7feda114ce59 [ 824.361366][T20460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.361379][T20460] RSP: 002b:00007fed9f3a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 824.361396][T20460] RAX: ffffffffffffffda RBX: 00007feda13c5fa0 RCX: 00007feda114ce59 [ 824.361408][T20460] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000004 [ 824.361418][T20460] RBP: 00007fed9f3a6090 R08: 0000000000000000 R09: 0000000000000000 [ 824.361428][T20460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.361437][T20460] R13: 00007feda13c6038 R14: 00007feda13c5fa0 R15: 00007ffe98b24888 [ 824.361461][T20460] [ 824.407348][T20461] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 824.898862][T20470] FAULT_INJECTION: forcing a failure. [ 824.898862][T20470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 824.898901][T20470] CPU: 0 UID: 0 PID: 20470 Comm: syz.1.4893 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 824.898931][T20470] Tainted: [L]=SOFTLOCKUP [ 824.898940][T20470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 824.898952][T20470] Call Trace: [ 824.898961][T20470] [ 824.898971][T20470] dump_stack_lvl+0xe8/0x150 [ 824.899005][T20470] should_fail_ex+0x467/0x600 [ 824.899044][T20470] strncpy_from_user+0x36/0x2c0 [ 824.899081][T20470] do_getname+0x77/0x250 [ 824.899138][T20470] do_fchownat+0xe3/0x250 [ 824.899175][T20470] ? __pfx_do_fchownat+0x10/0x10 [ 824.899218][T20470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.899244][T20470] __x64_sys_lchown+0x85/0xa0 [ 824.899280][T20470] do_syscall_64+0x174/0x580 [ 824.899310][T20470] ? trace_irq_disable+0x3b/0x140 [ 824.899339][T20470] ? clear_bhb_loop+0x40/0x90 [ 824.899367][T20470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.899391][T20470] RIP: 0033:0x7fabff7bce59 [ 824.899412][T20470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.899433][T20470] RSP: 002b:00007fabfda0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 824.899456][T20470] RAX: ffffffffffffffda RBX: 00007fabffa35fa0 RCX: 00007fabff7bce59 [ 824.899472][T20470] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 824.899485][T20470] RBP: 00007fabfda0e090 R08: 0000000000000000 R09: 0000000000000000 [ 824.899499][T20470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.899511][T20470] R13: 00007fabffa36038 R14: 00007fabffa35fa0 R15: 00007ffc259476b8 [ 824.899545][T20470] [ 824.930261][T20472] FAULT_INJECTION: forcing a failure. [ 824.930261][T20472] name failslab, interval 1, probability 0, space 0, times 0 [ 824.930367][T20472] CPU: 1 UID: 0 PID: 20472 Comm: syz.5.4895 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 824.930404][T20472] Tainted: [L]=SOFTLOCKUP [ 824.930413][T20472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 824.930437][T20472] Call Trace: [ 824.930445][T20472] [ 824.930467][T20472] dump_stack_lvl+0xe8/0x150 [ 824.930552][T20472] should_fail_ex+0x467/0x600 [ 824.930619][T20472] should_failslab+0xa8/0x100 [ 824.930665][T20472] __kmalloc_noprof+0xfe/0x780 [ 824.930711][T20472] ? tomoyo_encode+0x2ad/0x570 [ 824.930788][T20472] ? tomoyo_encode+0x2ad/0x570 [ 824.930837][T20472] tomoyo_encode+0x2ad/0x570 [ 824.930939][T20472] tomoyo_realpath_from_path+0x5fa/0x640 [ 824.931001][T20472] ? tomoyo_path_number_perm+0x219/0x5f0 [ 824.931033][T20472] tomoyo_path_number_perm+0x246/0x5f0 [ 824.931117][T20472] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 824.931187][T20472] ? __lock_acquire+0x683/0x2ce0 [ 824.931242][T20472] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 824.931334][T20472] ? hook_file_ioctl+0x1f3/0x600 [ 824.931398][T20472] ? lockdep_hardirqs_on+0x7a/0x110 [ 824.931483][T20472] ? __fget_files+0x2a/0x420 [ 824.931559][T20472] ? __fget_files+0x2a/0x420 [ 824.931596][T20472] ? __fget_files+0x3a8/0x420 [ 824.931619][T20472] ? __fget_files+0x2a/0x420 [ 824.931656][T20472] security_file_ioctl+0xc3/0x2a0 [ 824.931733][T20472] __se_sys_ioctl+0x47/0x170 [ 824.931800][T20472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.931826][T20472] do_syscall_64+0x174/0x580 [ 824.931913][T20472] ? clear_bhb_loop+0x40/0x90 [ 824.931974][T20472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.932002][T20472] RIP: 0033:0x7feda114ce59 [ 824.932021][T20472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.932051][T20472] RSP: 002b:00007fed9f3a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 824.932077][T20472] RAX: ffffffffffffffda RBX: 00007feda13c5fa0 RCX: 00007feda114ce59 [ 824.932090][T20472] RDX: 00002000000000c0 RSI: 00000000c0405668 RDI: 0000000000000003 [ 824.932124][T20472] RBP: 00007fed9f3a6090 R08: 0000000000000000 R09: 0000000000000000 [ 824.932156][T20472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.932181][T20472] R13: 00007feda13c6038 R14: 00007feda13c5fa0 R15: 00007ffe98b24888 [ 824.932213][T20472] [ 824.932477][T20472] ERROR: Out of memory at tomoyo_realpath_from_path. [ 825.724534][ T32] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 825.855177][ T32] usb 2-1: device descriptor read/64, error -71 [ 826.093669][ T32] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 826.221890][ T5613] usb 1-1: USB disconnect, device number 104 [ 826.225483][ T32] usb 2-1: device descriptor read/64, error -71 [ 826.333911][ T32] usb usb2-port1: attempt power cycle [ 826.416436][T18805] udevd[18805]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 826.471241][T18805] udevd[18805]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 826.532621][T18805] udevd[18805]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 826.589801][T18805] udevd[18805]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 826.628399][T18805] udevd[18805]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 826.673585][ T32] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 826.673829][T18805] udevd[18805]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 826.699435][ T32] usb 2-1: device descriptor read/8, error -71 [ 826.741949][T18805] udevd[18805]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 826.816285][T18805] udevd[18805]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 826.879063][T18805] udevd[18805]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 826.929805][T18805] udevd[18805]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 826.933786][ T32] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 826.954388][ T32] usb 2-1: device descriptor read/8, error -71 [ 827.064867][ T32] usb usb2-port1: unable to enumerate USB device [ 827.113640][ T5613] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 827.249910][T20535] FAULT_INJECTION: forcing a failure. [ 827.249910][T20535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 827.249950][T20535] CPU: 0 UID: 0 PID: 20535 Comm: syz.4.4924 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 827.249980][T20535] Tainted: [L]=SOFTLOCKUP [ 827.249988][T20535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 827.250014][T20535] Call Trace: [ 827.250023][T20535] [ 827.250032][T20535] dump_stack_lvl+0xe8/0x150 [ 827.250061][T20535] should_fail_ex+0x467/0x600 [ 827.250099][T20535] strncpy_from_user+0x36/0x2c0 [ 827.250135][T20535] do_getname+0x77/0x250 [ 827.250171][T20535] __se_sys_fspick+0xf9/0x3c0 [ 827.250206][T20535] ? __pfx___se_sys_fspick+0x10/0x10 [ 827.250244][T20535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.250268][T20535] do_syscall_64+0x174/0x580 [ 827.250296][T20535] ? trace_irq_disable+0x3b/0x140 [ 827.250324][T20535] ? clear_bhb_loop+0x40/0x90 [ 827.250351][T20535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.250373][T20535] RIP: 0033:0x7f1628a8ce59 [ 827.250393][T20535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.250413][T20535] RSP: 002b:00007f1626cde028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 827.250436][T20535] RAX: ffffffffffffffda RBX: 00007f1628d05fa0 RCX: 00007f1628a8ce59 [ 827.250450][T20535] RDX: 0000000000000001 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 827.250464][T20535] RBP: 00007f1626cde090 R08: 0000000000000000 R09: 0000000000000000 [ 827.250477][T20535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 827.250489][T20535] R13: 00007f1628d06038 R14: 00007f1628d05fa0 R15: 00007ffc78171ef8 [ 827.250522][T20535] [ 827.283636][ T5613] usb 6-1: Using ep0 maxpacket: 16 [ 827.317923][ T5613] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 827.318013][ T5613] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 827.318067][ T5613] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 827.318087][ T5613] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 827.318114][ T5613] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 827.318188][ T5613] usb 6-1: config 0 has no interface number 0 [ 827.318332][ T5613] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 827.318408][ T5613] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 827.318470][ T5613] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 827.318555][ T5613] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 827.318627][ T5613] usb 6-1: too many endpoints for config 0 interface 125 altsetting 190: 48, using maximum allowed: 30 [ 827.318730][ T5613] usb 6-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 827.318800][ T5613] usb 6-1: config 0 interface 125 has no altsetting 0 [ 827.318851][ T5613] usb 6-1: config 0 interface 125 has no altsetting 2 [ 827.458684][ T5613] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 827.458769][ T5613] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.458805][ T5613] usb 6-1: Product: syz [ 827.458846][ T5613] usb 6-1: Manufacturer: syz [ 827.458881][ T5613] usb 6-1: SerialNumber: syz [ 827.558321][ T5613] usb 6-1: config 0 descriptor?? [ 827.647670][ T5613] usb 6-1: selecting invalid altsetting 2 [ 827.660302][T20537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4925'. [ 827.660365][T20537] netlink: 212 bytes leftover after parsing attributes in process `syz.0.4925'. [ 827.660489][T20537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4925'. [ 827.841886][T20541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.842891][T20541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.866264][ C1] usb 6-1: async_complete: urb error -71 [ 827.866571][ C1] usb 6-1: async_complete: urb error -71 [ 827.866661][ C1] usb 6-1: async_complete: urb error -71 [ 827.866751][ C1] usb 6-1: async_complete: urb error -71 [ 827.872762][ T5613] get_1284_register: usb error -71 [ 827.918458][ T5613] usb 6-1: USB disconnect, device number 97 [ 828.017801][ T9] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 828.115277][T20551] sg_write: data in/out 216540/136 bytes for SCSI command 0x0-- guessing data in; [ 828.115277][T20551] program syz.4.4929 not setting count and/or reply_len properly [ 828.184087][ T9] usb 1-1: device descriptor read/64, error -71 [ 828.434384][ T9] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 828.452685][T20562] loop9: detected capacity change from 0 to 524287998 [ 828.573517][ T9] usb 1-1: device descriptor read/64, error -71 [ 828.684560][ T9] usb usb1-port1: attempt power cycle [ 828.698811][T20570] FAULT_INJECTION: forcing a failure. [ 828.698811][T20570] name failslab, interval 1, probability 0, space 0, times 0 [ 828.698850][T20570] CPU: 1 UID: 0 PID: 20570 Comm: syz.4.4937 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 828.698879][T20570] Tainted: [L]=SOFTLOCKUP [ 828.698887][T20570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 828.698899][T20570] Call Trace: [ 828.698908][T20570] [ 828.698918][T20570] dump_stack_lvl+0xe8/0x150 [ 828.698948][T20570] should_fail_ex+0x467/0x600 [ 828.698988][T20570] should_failslab+0xa8/0x100 [ 828.699015][T20570] kmem_cache_alloc_noprof+0xa4/0x650 [ 828.699039][T20570] ? security_inode_alloc+0x39/0x310 [ 828.699068][T20570] ? security_inode_alloc+0x39/0x310 [ 828.699108][T20570] security_inode_alloc+0x39/0x310 [ 828.699143][T20570] inode_init_always_gfp+0x983/0xd40 [ 828.699171][T20570] ? __pfx_sock_alloc_inode+0x10/0x10 [ 828.699194][T20570] alloc_inode+0x82/0x1b0 [ 828.699216][T20570] __sock_create+0x11e/0x960 [ 828.699246][T20570] rfcomm_dlc_open+0x355/0x11e0 [ 828.699289][T20570] ? __pfx_rfcomm_dlc_open+0x10/0x10 [ 828.699320][T20570] ? __local_bh_enable+0x1e1/0x2f0 [ 828.699371][T20570] ? lockdep_hardirqs_on+0x7a/0x110 [ 828.699403][T20570] rfcomm_sock_connect+0x2ed/0x650 [ 828.699434][T20570] __sys_connect+0x336/0x470 [ 828.699462][T20570] ? __pfx___sys_connect+0x10/0x10 [ 828.699502][T20570] ? __pfx_ksys_write+0x10/0x10 [ 828.699534][T20570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.699558][T20570] __x64_sys_connect+0x7a/0x90 [ 828.699589][T20570] do_syscall_64+0x174/0x580 [ 828.699616][T20570] ? trace_irq_disable+0x3b/0x140 [ 828.699643][T20570] ? clear_bhb_loop+0x40/0x90 [ 828.699670][T20570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.699693][T20570] RIP: 0033:0x7f1628a8ce59 [ 828.699714][T20570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.699734][T20570] RSP: 002b:00007f1626cde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 828.699756][T20570] RAX: ffffffffffffffda RBX: 00007f1628d05fa0 RCX: 00007f1628a8ce59 [ 828.699790][T20570] RDX: 000000000000000a RSI: 00002000000001c0 RDI: 0000000000000004 [ 828.699817][T20570] RBP: 00007f1626cde090 R08: 0000000000000000 R09: 0000000000000000 [ 828.699832][T20570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.699844][T20570] R13: 00007f1628d06038 R14: 00007f1628d05fa0 R15: 00007ffc78171ef8 [ 828.699898][T20570] [ 828.700875][T20570] socket: no more sockets [ 829.154617][T20580] FAULT_INJECTION: forcing a failure. [ 829.154617][T20580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.154657][T20580] CPU: 1 UID: 0 PID: 20580 Comm: syz.4.4942 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 829.154697][T20580] Tainted: [L]=SOFTLOCKUP [ 829.154706][T20580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 829.154720][T20580] Call Trace: [ 829.154728][T20580] [ 829.154738][T20580] dump_stack_lvl+0xe8/0x150 [ 829.154769][T20580] should_fail_ex+0x467/0x600 [ 829.154811][T20580] _copy_to_iter+0x1e4/0x1810 [ 829.154850][T20580] ? __pfx__copy_to_iter+0x10/0x10 [ 829.154872][T20580] ? __local_bh_enable+0x1e1/0x2f0 [ 829.154914][T20580] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 829.154949][T20580] ? lockdep_hardirqs_on+0x7a/0x110 [ 829.154984][T20580] rfcomm_sock_getsockopt+0x4a6/0xa90 [ 829.155017][T20580] ? __pfx_rfcomm_sock_getsockopt+0x10/0x10 [ 829.155062][T20580] do_sock_getsockopt+0x6ae/0x7e0 [ 829.155100][T20580] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 829.155147][T20580] ? __fget_files+0x3a8/0x420 [ 829.155170][T20580] ? __fget_files+0x2a/0x420 [ 829.155200][T20580] __x64_sys_getsockopt+0x1aa/0x250 [ 829.155219][ T9] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 829.155236][T20580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.155262][T20580] do_syscall_64+0x174/0x580 [ 829.155301][T20580] ? trace_irq_disable+0x3b/0x140 [ 829.155329][T20580] ? clear_bhb_loop+0x40/0x90 [ 829.155355][T20580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.155377][T20580] RIP: 0033:0x7f1628a8ce59 [ 829.155397][T20580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.155417][T20580] RSP: 002b:00007f1626cde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 829.155439][T20580] RAX: ffffffffffffffda RBX: 00007f1628d05fa0 RCX: 00007f1628a8ce59 [ 829.155458][T20580] RDX: 0000000000000007 RSI: 0000000000000112 RDI: 0000000000000004 [ 829.155471][T20580] RBP: 00007f1626cde090 R08: 0000200000001980 R09: 0000000000000000 [ 829.155485][T20580] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 829.155497][T20580] R13: 00007f1628d06038 R14: 00007f1628d05fa0 R15: 00007ffc78171ef8 [ 829.155528][T20580] [ 829.198339][ T9] usb 1-1: device descriptor read/8, error -71 [ 829.453586][ T9] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 829.474272][ T9] usb 1-1: device descriptor read/8, error -71 [ 829.583874][ T9] usb usb1-port1: unable to enumerate USB device [ 829.753611][ T5709] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 829.869894][ T5614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 829.901246][ T5709] usb 5-1: device descriptor read/64, error -71 [ 829.910587][ T5614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 829.952585][ T5614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 829.979648][ T5614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 829.980412][ T5614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 830.153536][ T5709] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 830.285625][ T5709] usb 5-1: device descriptor read/64, error -71 [ 830.459625][ T5709] usb usb5-port1: attempt power cycle [ 830.657871][T20593] FAULT_INJECTION: forcing a failure. [ 830.657871][T20593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.657898][T20593] CPU: 0 UID: 0 PID: 20593 Comm: syz.0.4945 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 830.657920][T20593] Tainted: [L]=SOFTLOCKUP [ 830.657926][T20593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 830.657954][T20593] Call Trace: [ 830.657960][T20593] [ 830.657967][T20593] dump_stack_lvl+0xe8/0x150 [ 830.657988][T20593] should_fail_ex+0x467/0x600 [ 830.658016][T20593] _copy_to_user+0x31/0xb0 [ 830.658037][T20593] simple_read_from_buffer+0xe1/0x170 [ 830.658061][T20593] proc_fail_nth_read+0x1be/0x230 [ 830.658081][T20593] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 830.658101][T20593] ? rw_verify_area+0x250/0x4d0 [ 830.658123][T20593] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 830.658140][T20593] vfs_read+0x219/0xa90 [ 830.658166][T20593] ? __pfx_vfs_read+0x10/0x10 [ 830.658188][T20593] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 830.658210][T20593] ? lockdep_hardirqs_on+0x7a/0x110 [ 830.658231][T20593] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 830.658252][T20593] ? mutex_lock_nested+0x152/0x1d0 [ 830.658267][T20593] ? fdget_pos+0x252/0x320 [ 830.658290][T20593] ksys_read+0x156/0x270 [ 830.658312][T20593] ? __pfx_ksys_read+0x10/0x10 [ 830.658331][T20593] ? fput+0xa0/0xd0 [ 830.658352][T20593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.658369][T20593] do_syscall_64+0x174/0x580 [ 830.658390][T20593] ? trace_irq_disable+0x3b/0x140 [ 830.658411][T20593] ? clear_bhb_loop+0x40/0x90 [ 830.658432][T20593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.658447][T20593] RIP: 0033:0x7fb0fb09d68e [ 830.658462][T20593] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 830.658476][T20593] RSP: 002b:00007fb0f932dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 830.658493][T20593] RAX: ffffffffffffffda RBX: 00007fb0f932e6c0 RCX: 00007fb0fb09d68e [ 830.658505][T20593] RDX: 000000000000000f RSI: 00007fb0f932e0a0 RDI: 0000000000000004 [ 830.658516][T20593] RBP: 00007fb0f932e090 R08: 0000000000000000 R09: 0000000000000000 [ 830.658526][T20593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.658536][T20593] R13: 00007fb0fb356038 R14: 00007fb0fb355fa0 R15: 00007ffd78ccfae8 [ 830.658567][T20593] [ 830.903532][ T5709] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 830.934270][ T5709] usb 5-1: device descriptor read/8, error -71 [ 831.183533][ T5709] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 831.208567][ T32] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 831.225093][ T5709] usb 5-1: device descriptor read/8, error -71 [ 831.334109][ T5709] usb usb5-port1: unable to enumerate USB device [ 831.374426][ T32] usb 1-1: device descriptor read/64, error -71 [ 831.425958][ T7148] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.613528][ T32] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 831.744947][ T32] usb 1-1: device descriptor read/64, error -71 [ 831.853972][ T32] usb usb1-port1: attempt power cycle [ 831.895102][ T7148] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.914760][ T5709] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 832.083534][ T5709] usb 2-1: Using ep0 maxpacket: 16 [ 832.092611][ T5709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.092641][ T5709] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 832.092684][ T5709] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 832.092708][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.149696][ T5709] usb 2-1: config 0 descriptor?? [ 832.187181][ T5614] Bluetooth: hci4: command tx timeout [ 832.313649][ T32] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 832.336773][ T32] usb 1-1: device descriptor read/8, error -71 [ 832.593705][ T5709] hid_parser_main: 100 callbacks suppressed [ 832.593731][ T5709] uclogic 0003:5543:0064.0031: unknown main item tag 0x0 [ 832.593764][ T5709] uclogic 0003:5543:0064.0031: unknown main item tag 0x0 [ 832.593791][ T5709] uclogic 0003:5543:0064.0031: unknown main item tag 0x0 [ 832.593819][ T5709] uclogic 0003:5543:0064.0031: unknown main item tag 0x0 [ 832.593846][ T5709] uclogic 0003:5543:0064.0031: unknown main item tag 0x0 [ 832.593873][ T5709] uclogic 0003:5543:0064.0031: unknown main item tag 0x0 [ 832.593900][ T5709] uclogic 0003:5543:0064.0031: unknown main item tag 0x0 [ 832.593928][ T5709] uclogic 0003:5543:0064.0031: unknown main item tag 0x0 [ 832.593955][ T5709] uclogic 0003:5543:0064.0031: unknown main item tag 0x0 [ 832.593981][ T5709] uclogic 0003:5543:0064.0031: unknown main item tag 0x0 [ 832.609499][ T5709] uclogic 0003:5543:0064.0031: hidraw0: USB HID v0.78 Device [HID 5543:0064] on usb-dummy_hcd.1-1/input0 [ 832.613659][ T32] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 832.657131][ T32] usb 1-1: device descriptor read/8, error -71 [ 832.734841][ T7148] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.764084][ T32] usb usb1-port1: unable to enumerate USB device [ 832.790620][T20602] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 832.814388][ T32] usb 2-1: USB disconnect, device number 45 [ 832.882962][T20609] fido_id[20609]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 833.214471][ T7148] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.325983][T20584] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.326524][T20584] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.326884][T20584] bridge_slave_0: entered allmulticast mode [ 833.331035][T20584] bridge_slave_0: entered promiscuous mode [ 833.364972][T20584] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.365353][T20584] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.365761][T20584] bridge_slave_1: entered allmulticast mode [ 833.368969][T20584] bridge_slave_1: entered promiscuous mode [ 833.508604][T20584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.557652][T20584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.701359][T20584] team0: Port device team_slave_0 added [ 833.728169][T20584] team0: Port device team_slave_1 added [ 833.889426][T20584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.889440][T20584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.889460][T20584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.892213][T20584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.892231][T20584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.892259][T20584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.101027][ T5615] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 834.114740][ T32] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 834.124165][T20584] hsr_slave_0: entered promiscuous mode [ 834.138824][T20584] hsr_slave_1: entered promiscuous mode [ 834.155585][T20584] debugfs: 'hsr0' already exists in 'hsr' [ 834.155612][T20584] Cannot create hsr debugfs directory [ 834.245548][ T32] usb 2-1: device descriptor read/64, error -71 [ 834.264138][ T5614] Bluetooth: hci4: command tx timeout [ 834.281396][ T5615] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 768, setting to 64 [ 834.281432][ T5615] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 834.281456][ T5615] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 834.281477][ T5615] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 834.375021][ T5615] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 834.375071][ T5615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.375092][ T5615] usb 5-1: Product: syz [ 834.375106][ T5615] usb 5-1: Manufacturer: syz [ 834.375120][ T5615] usb 5-1: SerialNumber: syz [ 834.484174][ T32] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 834.508078][ T5615] usb 5-1: config 0 descriptor?? [ 834.522201][ T5615] usb 5-1: ucan: probing device on interface #0 [ 834.522224][ T5615] usb 5-1: ucan: invalid endpoint configuration [ 834.522236][ T5615] usb 5-1: ucan: probe failed; try to update the device firmware [ 834.543475][ T5709] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 834.614250][ T32] usb 2-1: device descriptor read/64, error -71 [ 834.673706][ T5709] usb 1-1: device descriptor read/64, error -71 [ 834.715658][ T5615] usb 5-1: USB disconnect, device number 70 [ 834.725143][ T32] usb usb2-port1: attempt power cycle [ 834.925194][ T5709] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 835.063593][ T32] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 835.084131][ T5709] usb 1-1: device descriptor read/64, error -71 [ 835.084421][ T32] usb 2-1: device descriptor read/8, error -71 [ 835.193927][ T5709] usb usb1-port1: attempt power cycle [ 835.284724][ T7148] bridge_slave_1: left allmulticast mode [ 835.284752][ T7148] bridge_slave_1: left promiscuous mode [ 835.284975][ T7148] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.323604][ T32] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 835.345636][ T32] usb 2-1: device descriptor read/8, error -71 [ 835.459908][ T32] usb usb2-port1: unable to enumerate USB device [ 835.489702][ T7148] bridge_slave_0: left allmulticast mode [ 835.489739][ T7148] bridge_slave_0: left promiscuous mode [ 835.490012][ T7148] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.543574][ T5709] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 835.564240][ T5709] usb 1-1: device descriptor read/8, error -71 [ 835.815015][ T5709] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 835.835565][ T5709] usb 1-1: device descriptor read/8, error -71 [ 835.996598][ T5709] usb usb1-port1: unable to enumerate USB device [ 836.345827][ T5614] Bluetooth: hci4: command tx timeout [ 836.495180][ T7148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 836.505001][ T5614] Bluetooth: hci1: command 0x0406 tx timeout [ 836.574415][ T7148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 836.654660][ T7148] bond0 (unregistering): Released all slaves [ 836.712146][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 837.112043][T20651] FAULT_INJECTION: forcing a failure. [ 837.112043][T20651] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 837.112081][T20651] CPU: 0 UID: 0 PID: 20651 Comm: syz.1.4958 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 837.112111][T20651] Tainted: [L]=SOFTLOCKUP [ 837.112118][T20651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 837.112131][T20651] Call Trace: [ 837.112139][T20651] [ 837.112148][T20651] dump_stack_lvl+0xe8/0x150 [ 837.112179][T20651] should_fail_ex+0x467/0x600 [ 837.112215][T20651] prepare_alloc_pages+0x223/0x690 [ 837.112247][T20651] __alloc_frozen_pages_noprof+0x12f/0x380 [ 837.112275][T20651] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 837.112306][T20651] ? __pfx_policy_nodemask+0x10/0x10 [ 837.112336][T20651] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 837.112368][T20651] alloc_pages_mpol+0xce/0x280 [ 837.112407][T20651] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 837.112437][T20651] vma_alloc_folio_noprof+0xe1/0x1e0 [ 837.112466][T20651] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 837.112503][T20651] do_wp_page+0x115e/0x3d90 [ 837.112522][T20651] ? rt_spin_lock+0x1e0/0x400 [ 837.112544][T20651] ? rt_spin_lock+0x1e0/0x400 [ 837.112572][T20651] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 837.112604][T20651] ? preempt_count_add+0x91/0x190 [ 837.112638][T20651] ? __pfx_do_wp_page+0x10/0x10 [ 837.112655][T20651] ? rt_spin_lock+0x2ce/0x400 [ 837.112679][T20651] ? __pfx_rt_spin_lock+0x10/0x10 [ 837.112704][T20651] ? pte_offset_map_rw_nolock+0xea/0x160 [ 837.112741][T20651] handle_mm_fault+0xae2/0x1520 [ 837.112769][T20651] ? handle_mm_fault+0xe9/0x1520 [ 837.112793][T20651] ? __pfx_handle_mm_fault+0x10/0x10 [ 837.112815][T20651] ? follow_page_pte+0x9cf/0xe80 [ 837.112846][T20651] ? __pfx_follow_page_pte+0x10/0x10 [ 837.112878][T20651] __get_user_pages+0x166b/0x2590 [ 837.112949][T20651] __gup_longterm_locked+0xd52/0x15c0 [ 837.112974][T20651] ? lock_acquire+0x106/0x350 [ 837.113009][T20651] ? sanity_check_pinned_pages+0x810/0x8d0 [ 837.113047][T20651] gup_fast_fallback+0x1cf7/0x2040 [ 837.113128][T20651] ? __pfx_gup_fast_fallback+0x10/0x10 [ 837.113165][T20651] ? kasan_save_track+0x4f/0x80 [ 837.113191][T20651] ? pin_user_pages_fast+0x4d/0xb0 [ 837.113215][T20651] iov_iter_extract_pages+0x369/0x5f0 [ 837.113250][T20651] extract_iter_to_sg+0xee0/0x25f0 [ 837.113302][T20651] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 837.113353][T20651] ? __asan_memset+0x22/0x50 [ 837.113389][T20651] af_alg_get_rsgl+0x493/0x8d0 [ 837.113430][T20651] ? af_alg_alloc_areq+0xac/0x200 [ 837.113453][T20651] skcipher_recvmsg+0x39d/0xe10 [ 837.113484][T20651] ? aa_sk_perm+0x703/0x950 [ 837.113522][T20651] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 837.113546][T20651] ? __lock_acquire+0x683/0x2ce0 [ 837.113579][T20651] ? aa_sock_msg_perm+0x122/0x200 [ 837.113611][T20651] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 837.113637][T20651] sock_recvmsg_nosec+0x130/0x170 [ 837.113663][T20651] ____sys_recvmsg+0x242/0x4f0 [ 837.113701][T20651] ? __pfx_____sys_recvmsg+0x10/0x10 [ 837.113747][T20651] ? import_iovec+0x73/0xa0 [ 837.113776][T20651] ___sys_recvmsg+0x213/0x5a0 [ 837.113813][T20651] ? __pfx____sys_recvmsg+0x10/0x10 [ 837.113847][T20651] ? __fget_files+0x2a/0x420 [ 837.113889][T20651] ? __fget_files+0x3a8/0x420 [ 837.113924][T20651] __x64_sys_recvmsg+0x1b4/0x290 [ 837.113958][T20651] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 837.114008][T20651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.114033][T20651] do_syscall_64+0x174/0x580 [ 837.114061][T20651] ? trace_irq_disable+0x3b/0x140 [ 837.114110][T20651] ? clear_bhb_loop+0x40/0x90 [ 837.114136][T20651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.114160][T20651] RIP: 0033:0x7fabff7bce59 [ 837.114180][T20651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.114199][T20651] RSP: 002b:00007fabfda0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 837.114222][T20651] RAX: ffffffffffffffda RBX: 00007fabffa35fa0 RCX: 00007fabff7bce59 [ 837.114238][T20651] RDX: 0000000000010150 RSI: 00002000000000c0 RDI: 0000000000000004 [ 837.114252][T20651] RBP: 00007fabfda0e090 R08: 0000000000000000 R09: 0000000000000000 [ 837.114266][T20651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 837.114278][T20651] R13: 00007fabffa36038 R14: 00007fabffa35fa0 R15: 00007ffc259476b8 [ 837.114312][T20651] [ 837.968379][T20668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4963'. [ 838.387081][ T5709] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 838.431618][ T5611] Bluetooth: hci4: command tx timeout [ 838.515037][ T5709] usb 5-1: device descriptor read/64, error -71 [ 838.698141][ T5615] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 838.752310][ T5267] 8021q: adding VLAN 0 to HW filter on device eth10 [ 838.763860][ T5709] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 838.827921][ T5615] usb 2-1: device descriptor read/64, error -71 [ 838.965914][ T5709] usb 5-1: device descriptor read/64, error -71 [ 839.065378][ T5615] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 839.076463][ T5709] usb usb5-port1: attempt power cycle [ 839.195413][ T5615] usb 2-1: device descriptor read/64, error -71 [ 839.307347][T20700] loop9: detected capacity change from 0 to 524287998 [ 839.309209][ T5615] usb usb2-port1: attempt power cycle [ 839.493324][ T5709] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 839.526628][ T5709] usb 5-1: device descriptor read/8, error -71 [ 839.773552][ T5615] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 839.784120][ T5709] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 839.795145][ T5615] usb 2-1: device descriptor read/8, error -71 [ 839.806751][ T5709] usb 5-1: device descriptor read/8, error -71 [ 839.964005][ T5709] usb usb5-port1: unable to enumerate USB device [ 840.103956][ T5615] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 840.128922][ T5615] usb 2-1: device descriptor read/8, error -71 [ 840.256322][ T5615] usb usb2-port1: unable to enumerate USB device [ 840.544099][T20717] batadv_slave_0: entered promiscuous mode [ 840.674198][ T5697] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 840.703619][ T7148] hsr_slave_0: left promiscuous mode [ 840.723658][ T7148] hsr_slave_1: left promiscuous mode [ 840.724560][ T7148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 840.724580][ T7148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.765923][ T7148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 840.765954][ T7148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.823675][ T5697] usb 1-1: Using ep0 maxpacket: 16 [ 840.842420][ T5697] usb 1-1: unable to get BOS descriptor or descriptor too short [ 840.842801][ T7148] veth1_macvtap: left promiscuous mode [ 840.843348][ T7148] veth0_macvtap: left promiscuous mode [ 840.847726][ T7148] veth1_vlan: left promiscuous mode [ 840.848333][ T7148] veth0_vlan: left promiscuous mode [ 840.874650][ T5697] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 840.875825][ T5697] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 840.875858][ T5697] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 840.883173][ T5697] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 840.883205][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.883220][ T5697] usb 1-1: Product: syz [ 840.883238][ T5697] usb 1-1: Manufacturer: syz [ 840.883250][ T5697] usb 1-1: SerialNumber: syz [ 841.221017][ T5697] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 841.221529][ T5697] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 841.413009][ T5697] usb 1-1: 2:1 : can't get High Capability descriptor [ 841.692856][T20740] netlink: 'syz.1.4982': attribute type 3 has an invalid length. [ 841.703216][T20740] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 842.025949][ T5615] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 842.036241][ T7148] team0 (unregistering): Port device team_slave_1 removed [ 842.095377][ T7148] team0 (unregistering): Port device team_slave_0 removed [ 842.205183][ T5615] usb 2-1: Using ep0 maxpacket: 16 [ 842.207205][ T5615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.207235][ T5615] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 842.207278][ T5615] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 842.207302][ T5615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.270579][ T5615] usb 2-1: config 0 descriptor?? [ 842.500255][T16183] usb 1-1: USB disconnect, device number 117 [ 842.520172][T20716] batadv_slave_0: left promiscuous mode [ 842.766297][ T5615] hid_parser_main: 31 callbacks suppressed [ 842.766322][ T5615] uclogic 0003:5543:0064.0032: unknown main item tag 0x0 [ 842.766345][ T5615] uclogic 0003:5543:0064.0032: unknown main item tag 0x0 [ 842.766364][ T5615] uclogic 0003:5543:0064.0032: unknown main item tag 0x0 [ 842.766384][ T5615] uclogic 0003:5543:0064.0032: unknown main item tag 0x0 [ 842.766403][ T5615] uclogic 0003:5543:0064.0032: unknown main item tag 0x0 [ 842.766421][ T5615] uclogic 0003:5543:0064.0032: unknown main item tag 0x0 [ 842.766440][ T5615] uclogic 0003:5543:0064.0032: unknown main item tag 0x0 [ 842.766459][ T5615] uclogic 0003:5543:0064.0032: unknown main item tag 0x0 [ 842.766478][ T5615] uclogic 0003:5543:0064.0032: unknown main item tag 0x0 [ 842.766496][ T5615] uclogic 0003:5543:0064.0032: unknown main item tag 0x0 [ 842.807005][ T5615] uclogic 0003:5543:0064.0032: hidraw0: USB HID v0.78 Device [HID 5543:0064] on usb-dummy_hcd.1-1/input0 [ 843.035013][ T5615] usb 2-1: USB disconnect, device number 54 [ 843.037180][T20750] trusted_key: encrypted_key: master key parameter '' is invalid [ 843.195393][T20747] fido_id[20747]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 843.236698][T20748] qnx6: unable to read the first superblock [ 843.880468][ T5697] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 843.985834][T20766] FAULT_INJECTION: forcing a failure. [ 843.985834][T20766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 843.985867][T20766] CPU: 1 UID: 0 PID: 20766 Comm: syz.4.4987 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 843.985894][T20766] Tainted: [L]=SOFTLOCKUP [ 843.985900][T20766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 843.985911][T20766] Call Trace: [ 843.985917][T20766] [ 843.985925][T20766] dump_stack_lvl+0xe8/0x150 [ 843.985949][T20766] should_fail_ex+0x467/0x600 [ 843.985978][T20766] _copy_from_iter+0x4ff/0x1660 [ 843.985999][T20766] ? rcu_is_watching+0x15/0xb0 [ 843.986030][T20766] ? __pfx__copy_from_iter+0x10/0x10 [ 843.986047][T20766] ? __alloc_skb+0x276/0x7a0 [ 843.986066][T20766] ? __alloc_skb+0x276/0x7a0 [ 843.986090][T20766] ? netlink_sendmsg+0x650/0xb40 [ 843.986114][T20766] ? skb_put+0x112/0x210 [ 843.986137][T20766] netlink_sendmsg+0x6c0/0xb40 [ 843.986169][T20766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 843.986198][T20766] ? aa_sock_msg_perm+0x122/0x200 [ 843.986230][T20766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 843.986253][T20766] sock_sendmsg_nosec+0x13a/0x180 [ 843.986272][T20766] ____sys_sendmsg+0x565/0x870 [ 843.986294][T20766] ? __might_fault+0xaf/0x130 [ 843.986317][T20766] ? __pfx_____sys_sendmsg+0x10/0x10 [ 843.986346][T20766] ? import_iovec+0x73/0xa0 [ 843.986368][T20766] ___sys_sendmsg+0x2a5/0x360 [ 843.986390][T20766] ? __lock_acquire+0x683/0x2ce0 [ 843.986415][T20766] ? __pfx____sys_sendmsg+0x10/0x10 [ 843.986464][T20766] ? __fget_files+0x2a/0x420 [ 843.986480][T20766] ? __fget_files+0x3a8/0x420 [ 843.986505][T20766] __x64_sys_sendmsg+0x1b7/0x290 [ 843.986530][T20766] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 843.986565][T20766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.986584][T20766] do_syscall_64+0x174/0x580 [ 843.986605][T20766] ? trace_irq_disable+0x3b/0x140 [ 843.986626][T20766] ? clear_bhb_loop+0x40/0x90 [ 843.986647][T20766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.986673][T20766] RIP: 0033:0x7f1628a8ce59 [ 843.986690][T20766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.986705][T20766] RSP: 002b:00007f1626cde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 843.986723][T20766] RAX: ffffffffffffffda RBX: 00007f1628d05fa0 RCX: 00007f1628a8ce59 [ 843.986735][T20766] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003 [ 843.986746][T20766] RBP: 00007f1626cde090 R08: 0000000000000000 R09: 0000000000000000 [ 843.986756][T20766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.986767][T20766] R13: 00007f1628d06038 R14: 00007f1628d05fa0 R15: 00007ffc78171ef8 [ 843.986793][T20766] [ 844.110914][ T5697] usb 1-1: no configurations [ 844.110973][ T5697] usb 1-1: can't read configurations, error -22 [ 844.133568][ T5615] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 844.279892][ T5697] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 844.320348][ T5615] usb 2-1: config 0 has an invalid interface number: 244 but max is 0 [ 844.320378][ T5615] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.320398][ T5615] usb 2-1: config 0 has no interface number 0 [ 844.320431][ T5615] usb 2-1: config 0 interface 244 has no altsetting 0 [ 844.320466][ T5615] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 844.320490][ T5615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.394832][ T5615] usb 2-1: config 0 descriptor?? [ 844.444495][ T5697] usb 1-1: no configurations [ 844.444516][ T5697] usb 1-1: can't read configurations, error -22 [ 844.445017][ T5697] usb usb1-port1: attempt power cycle [ 844.688880][T16183] usb 2-1: USB disconnect, device number 55 [ 844.840267][T20584] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 844.910555][T20584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 844.911721][T20584] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 844.952959][T20584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 844.963790][T20584] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 844.963810][ T32] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 845.092021][T20584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 845.109311][T20584] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 845.124731][ T5697] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 845.133651][ T32] usb 5-1: device descriptor read/64, error -71 [ 845.171654][ T5697] usb 1-1: no configurations [ 845.171674][ T5697] usb 1-1: can't read configurations, error -22 [ 845.196459][T20584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 845.294415][ T5697] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 845.316102][ T5697] usb 1-1: no configurations [ 845.316116][ T5697] usb 1-1: can't read configurations, error -22 [ 845.316458][ T5697] usb usb1-port1: unable to enumerate USB device [ 845.316687][ T5697] ================================================================== [ 845.316697][ T5697] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 845.316717][ T5697] Read of size 8 at addr ffffc90007f21008 by task kworker/1:4/5697 [ 845.316731][ T5697] [ 845.316742][ T5697] CPU: 1 UID: 0 PID: 5697 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 845.316764][ T5697] Tainted: [L]=SOFTLOCKUP [ 845.316770][ T5697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 845.316781][ T5697] Workqueue: usb_hub_wq hub_event [ 845.316801][ T5697] Call Trace: [ 845.316808][ T5697] [ 845.316815][ T5697] dump_stack_lvl+0xe8/0x150 [ 845.316833][ T5697] print_address_description+0x55/0x1e0 [ 845.316855][ T5697] ? __list_add_valid_or_report+0x4e/0x130 [ 845.316870][ T5697] print_report+0x58/0x70 [ 845.316890][ T5697] kasan_report+0x117/0x150 [ 845.316910][ T5697] ? __list_add_valid_or_report+0x4e/0x130 [ 845.316929][ T5697] __list_add_valid_or_report+0x4e/0x130 [ 845.316946][ T5697] kcov_remote_stop+0x457/0x680 [ 845.316968][ T5697] hub_event+0x4789/0x4cf0 [ 845.317005][ T5697] ? __pfx_hub_event+0x10/0x10 [ 845.317025][ T5697] ? process_one_work+0x8cd/0x12b0 [ 845.317052][ T5697] ? process_one_work+0x8cd/0x12b0 [ 845.317074][ T5697] ? rcu_is_watching+0x15/0xb0 [ 845.317099][ T5697] ? process_one_work+0x8cd/0x12b0 [ 845.317122][ T5697] ? process_one_work+0x8cd/0x12b0 [ 845.317183][ T5697] process_one_work+0x93a/0x12b0 [ 845.317226][ T5697] ? __pfx_process_one_work+0x10/0x10 [ 845.317248][ T5697] ? do_raw_spin_lock+0x12b/0x2f0 [ 845.317268][ T5697] ? assign_work+0x3cf/0x5d0 [ 845.317292][ T5697] worker_thread+0xb05/0x10d0 [ 845.317327][ T5697] kthread+0x388/0x470 [ 845.317344][ T5697] ? __pfx_worker_thread+0x10/0x10 [ 845.317367][ T5697] ? __pfx_kthread+0x10/0x10 [ 845.317385][ T5697] ret_from_fork+0x514/0xb70 [ 845.317405][ T5697] ? __pfx_ret_from_fork+0x10/0x10 [ 845.317423][ T5697] ? __switch_to+0xc89/0x1420 [ 845.317438][ T5697] ? __pfx_kthread+0x10/0x10 [ 845.317456][ T5697] ret_from_fork_asm+0x1a/0x30 [ 845.317480][ T5697] [ 845.317486][ T5697] [ 845.317490][ T5697] The buggy address belongs to a vmalloc virtual mapping [ 845.317503][ T5697] Memory state around the buggy address: [ 845.317512][ T5697] ffffc90007f20f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 845.317523][ T5697] ffffc90007f20f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 845.317539][ T5697] >ffffc90007f21000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 845.317547][ T5697] ^ [ 845.317554][ T5697] ffffc90007f21080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 845.317565][ T5697] ffffc90007f21100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 845.317573][ T5697] ================================================================== [ 845.317600][ T5697] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 845.317613][ T5697] CPU: 1 UID: 0 PID: 5697 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 845.317634][ T5697] Tainted: [L]=SOFTLOCKUP [ 845.317640][ T5697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 845.317649][ T5697] Workqueue: usb_hub_wq hub_event [ 845.317667][ T5697] Call Trace: [ 845.317673][ T5697] [ 845.317679][ T5697] vpanic+0x56c/0xa60 [ 845.317701][ T5697] ? rcu_is_watching+0x15/0xb0 [ 845.317725][ T5697] ? __pfx_vpanic+0x10/0x10 [ 845.317750][ T5697] panic+0xc5/0xd0 [ 845.317772][ T5697] ? __pfx_panic+0x10/0x10 [ 845.317794][ T5697] ? __list_add_valid_or_report+0x4e/0x130 [ 845.317813][ T5697] ? __list_add_valid_or_report+0x4e/0x130 [ 845.317827][ T5697] check_panic_on_warn+0x89/0xb0 [ 845.317847][ T5697] ? __list_add_valid_or_report+0x4e/0x130 [ 845.317861][ T5697] end_report+0x73/0x170 [ 845.317878][ T5697] ? __list_add_valid_or_report+0x4e/0x130 [ 845.317893][ T5697] kasan_report+0x128/0x150 [ 845.317911][ T5697] ? __list_add_valid_or_report+0x4e/0x130 [ 845.317929][ T5697] __list_add_valid_or_report+0x4e/0x130 [ 845.317945][ T5697] kcov_remote_stop+0x457/0x680 [ 845.317965][ T5697] hub_event+0x4789/0x4cf0 [ 845.318002][ T5697] ? __pfx_hub_event+0x10/0x10 [ 845.318020][ T5697] ? process_one_work+0x8cd/0x12b0 [ 845.318046][ T5697] ? process_one_work+0x8cd/0x12b0 [ 845.318068][ T5697] ? rcu_is_watching+0x15/0xb0 [ 845.318091][ T5697] ? process_one_work+0x8cd/0x12b0 [ 845.318118][ T5697] ? process_one_work+0x8cd/0x12b0 [ 845.318139][ T5697] process_one_work+0x93a/0x12b0 [ 845.318168][ T5697] ? __pfx_process_one_work+0x10/0x10 [ 845.318190][ T5697] ? do_raw_spin_lock+0x12b/0x2f0 [ 845.318209][ T5697] ? assign_work+0x3cf/0x5d0 [ 845.318233][ T5697] worker_thread+0xb05/0x10d0 [ 845.318265][ T5697] kthread+0x388/0x470 [ 845.318282][ T5697] ? __pfx_worker_thread+0x10/0x10 [ 845.318305][ T5697] ? __pfx_kthread+0x10/0x10 [ 845.318323][ T5697] ret_from_fork+0x514/0xb70 [ 845.318342][ T5697] ? __pfx_ret_from_fork+0x10/0x10 [ 845.318360][ T5697] ? __switch_to+0xc89/0x1420 [ 845.318375][ T5697] ? __pfx_kthread+0x10/0x10 [ 845.318392][ T5697] ret_from_fork_asm+0x1a/0x30 [ 845.318417][ T5697] [ 845.319039][ T5697] Kernel Offset: disabled