last executing test programs: 5.439533057s ago: executing program 2 (id=2049): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x40000) 5.347853772s ago: executing program 2 (id=2050): r0 = syz_open_dev$video4linux(&(0x7f0000000440), 0x2, 0x82440) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) syz_usbip_server_init(0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) read$FUSE(r1, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000480)={0x0, {0x7fff, 0x4}}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES16=r2], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000005c0)={0x4, 0x0, [{0x60000, 0x45, &(0x7f0000000180)=""/69}, {0x8000000, 0xd5, &(0x7f0000000200)=""/213}, {0xddce4000, 0x4c, &(0x7f0000000300)=""/76}, {0x8000000, 0x0, 0x0}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregset(0x4205, r7, 0x1, &(0x7f0000000100)={0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008238d01800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x800) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) openat(r6, &(0x7f00000003c0)='./file0/file0/file0\x00', 0x0, 0xa) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r5, 0xc004ae0a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000025000/0x1000)=nil, 0x1000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r10, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}, 0x40002040) 5.218961466s ago: executing program 2 (id=2052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x54, 0x0, 0x1, 0x401, 0x0, 0x1a14, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x2, 0x1, 0x11}}]}, @CTA_LABELS_MASK={0x14, 0x17, [0x80000000, 0x9, 0xc, 0x9]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0xe503, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004100)="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", 0x2000, &(0x7f0000006d80)={&(0x7f0000006100)={0x50, 0x0, 0x4, {0x7, 0x2d, 0xa75, 0x5d010640, 0xe0b, 0x7ff, 0x3, 0x7, 0x0, 0x0, 0x741d859d8bbba6ec, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) 4.821114001s ago: executing program 2 (id=2056): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000001c80)=ANY=[@ANYBLOB="12010000941b6508c410c1ea2f700102030109021200010000000009040102"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x3, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0xfffffffe, 0x2, {}, 0x20802}) 4.525178528s ago: executing program 3 (id=2059): syz_usb_connect(0x2, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100366003308801b02e32b8c010203010902340003fa01106609043bff03fd494a0509050f000002090e7f0705c25a"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xa, [{0x33, &(0x7f00000000c0)=ANY=[@ANYBLOB="3303e636b02c0d9a3c528e7a9ac1607485a147d6aea23abf5acf0cfd9d622ccd75285b789433233d6f94d71a37f2a861b4e649"]}, {0x2a, &(0x7f0000000100)=@string={0x2a, 0x3, "836bd0b4a72b9c8a435d4ec9314635fd7987c6d47765b7d9b94381c29b31b6759a09f3a425ef4680"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x429}}, {0xa8, &(0x7f0000000180)=@string={0xa8, 0x3, "ad58fee063dd01516807e78380202922b92009da7607587adc3d478f550b586d6fd8c9dcd051c029d7f4a74a5243f023fde8f444eaccdd0c0d1af3404e95b78fc16dafa5db60560d577107530a3e8553cba4aae778d4b33a0560e161c921620e0e36f57d5c0218ce357a9fe5f9cb4958d6881656e139c58c122a6c49f45b51af853e3831e527ec18b6edb5e4d258f5a64f754a758463706477d5fc9cf30d532fc5c457ce8b2f"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x480a}}, {0x91, &(0x7f0000000280)=@string={0x91, 0x3, "ca0abc01a5fe689be6a92dfeb3728a21defe7b530ce88d78becc203f870eab7ea7dce70bc73e5f9c44808afd909506bced04b69b4f931ea1e9c7d9d14475438dc1aa4967232391e940d41c4c5ccfd71e0dbe17cd7d79def21df6afc3ee93f35e4a3ac61bb9070e88ffeb9ef6ba5b5e4db83ba115ccdbfd88cf8aada352a636b0b80b456a92bba4f200455901e122aa"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x100a}}]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x5052}}, './file0\x00'}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x46a, 0xffdfffff, 0x5}) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80101) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0x6, 0x80, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="aad7102eef00", 0x0, 0x5, 0x10002, 0xffffffffffffffff, 0x0}) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x17, 0xa, 0x0, 0x7, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_address={0x5, 0x17, 0x33, 0xa0, 0x0, @in6={0xa, 0x4e20, 0x5a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}]}, 0x38}}, 0x40) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'bridge_slave_1\x00', @random="0200c100d8f1"}) bind$can_raw(r0, &(0x7f0000000080), 0x10) 4.388770872s ago: executing program 1 (id=2060): r0 = syz_open_dev$video4linux(&(0x7f0000000440), 0x2, 0x82440) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) syz_usbip_server_init(0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) read$FUSE(r1, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000480)={0x0, {0x7fff, 0x4}}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES16=r2], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000005c0)={0x4, 0x0, [{0x60000, 0x45, &(0x7f0000000180)=""/69}, {0x8000000, 0xd5, &(0x7f0000000200)=""/213}, {0xddce4000, 0x4c, &(0x7f0000000300)=""/76}, {0x8000000, 0x0, 0x0}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregset(0x4205, r7, 0x1, &(0x7f0000000100)={0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008238d01800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x800) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) openat(r6, &(0x7f00000003c0)='./file0/file0/file0\x00', 0x0, 0xa) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r5, 0xc004ae0a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000025000/0x1000)=nil, 0x1000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r10, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}, 0x40002040) 3.503728643s ago: executing program 0 (id=2063): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0xfffffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x20, 0x0, 0x346, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x2, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000300)={0x80980914, 0x8, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x2000000000000, 0x100000000, 0x4, 0x0, 0x200009, 0x5, 0x2, 0xffffffff, [0x9, 0x2, 0x0, 0xfffffffd]}) 3.405313317s ago: executing program 0 (id=2064): setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x0, 0x4], 0xeeee8000, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x8, 0x31, 0xffffffffffffffff, 0x2000000) 3.281034869s ago: executing program 2 (id=2065): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0xa0881) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x20, 0x1, 0x0, 0x8, 0x0, 0xfffffff7, 0x0}) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) recvmmsg(r2, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x18, 0x1, 0x8, 0x6, @vifc_lcl_ifindex=r1, @remote}, 0x10) 3.248081196s ago: executing program 2 (id=2066): sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="ec000000", @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf2509000000080005000080000008000600ebc8000008000600ffff000008000400a03fe0724c000180060004004e230000060004004e230000090006006e6f6e65000000000800050003000000080009006700000014000300ac1414bb00000000000000000000000008000b007369700008000600020000003800028006000f00050000000800050003000000080007000900000014090100fe880000000000000000000000000001060002004e2200002c00038006000400090000000600040001800000080005000000000005000800e7000000060007004e230000"], 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x20040811) r0 = socket$inet6(0xa, 0x1, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x402c885) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x1, 0x1}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2d}, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xfffe}, &(0x7f0000000040)=0x20) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r3 = dup(0xffffffffffffffff) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000580)) openat2(r3, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x1b0, &(0x7f0000000680)=ANY=[@ANYBLOB="5400004e239616a1bedac06155afbe27c2cc6c3e2418d31d3b628bd56bf23c23219f7ff95dd4a5c9caf818e378aa091f1ed9cd83bba161d1f39a33a7b83e2e3bf6b7ac3c92f1b75f1188121d8c2d3710fc1a11c07e61f2556000004e7b6293184a8260dade35cf9507096795f6922f93f5f470db40971bf0ca3a0f00e3bbaeed213c216eb6dad1f8d7989a8c9f36ebe785ae3fcfea11df36fc44256de12935c751026e8ad9b71a1efb751f23d04f81d2fe8ef091e8b8d4311d8f67cfee00004e28d691d871cb836f050d3c000d9fba7318547a21d14c2dd3faebeaa26b35f7c789d55e91f7b53bb02f6bc011b88bca460462cb3cf894a3c0bae700332e1d94abb814f5f607371fb4819d69aebfc0b08b5e1695a7471862286e619ed5005375e6f29f762f7914ddad00d8e5015ed8d533d6864da8b1ab3b17c63e3c7c3db1af0bc0283e832eb3cb97228ba0efd7e4a3c1da6bb9c2a0ef2d4a5a87b899b651fa48863b01607efe6b3c64e71d4f35eaf6f5cb09655227506d53be0244d731235bfb000e140a1d6f3a502ad7b1120ceba1128d29ff4395b8adfe4eab60cdeedd79f4de02749f82eefeaa55cd578f62cb00004c9f8ef9557c4bb42273effdb6b79481d0c5efd72c984533101e58e2802fd1b533a2510b9f775f5cd1d6a1332104e6e2dde84c4931806a2502e544d4487d48b5b357dac3bc270a7f24d65d6d32f4d7ee2b7ed765b41a70f0b3e9e255dd878c89b79d5ebff42cf9773cf9e93667e93118e685dda6c565c55f584068139c8c624450e07128767477b24ff84563c32cea3c8f553805bf61e7072d86f1a749cb2863cb0fcf4a07d3a5092d32e3eaf2f5f28ca8a5ac3f935a50bb64f5fa41f53ff0050a725501fa0521161371b994af7d0b4822fbefde2dcc8d6900c146cfffd430258a798e144c46d2a5f65c2fc039b141802d5bc145e04618b7b87870ad4c57177553"]) 3.205278453s ago: executing program 3 (id=2067): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2fbafffff}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x2}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r2, 0x0, 0x30, 0xffffffffffffffff, &(0x7f0000000040)=0xa3) r3 = socket(0xa, 0x3, 0x87) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x8936, &(0x7f0000000000)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @broadcast, 0x4701, 0x2, 'rr\x00', 0x0, 0x10000002, 0x34}, 0x2c) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x3, 'veth1_vlan\x00', {0x9}, 0x1}) 3.101501874s ago: executing program 3 (id=2068): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x246000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5202) 3.0991529s ago: executing program 3 (id=2069): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56", @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',group_']) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r1 = fanotify_init(0x81, 0x40000) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f90753"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d4", 0x7a}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b", 0x27}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ff", 0x93}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) execve(&(0x7f0000000980)='./file0/../file0\x00', &(0x7f0000000580)={[&(0x7f0000000640)=']\x00', &(0x7f0000000680)=']H\\\x00', &(0x7f00000006c0)='}}\x00', &(0x7f0000000700)='skcipher\x00']}, &(0x7f0000000940)={[&(0x7f0000000780)='cbc-cast5-avx\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='\x01']}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r5) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r7, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x260000d0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.051966788s ago: executing program 0 (id=2070): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000480)=""/238, 0xee, 0x10120, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x41, 0x800, 0x7fffc, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) listen(r0, 0xfffffffe) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) (async) accept4$unix(r0, 0x0, 0x0, 0x0) (async) recvfrom$unix(r2, &(0x7f0000000480)=""/238, 0xee, 0x10120, 0x0, 0x0) (async) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) (async) landlock_restrict_self(r3, 0x9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x41, 0x800, 0x7fffc, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) (async) 2.914379465s ago: executing program 1 (id=2071): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="00286ada1000000000000000c2890000"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) close(r7) connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @private=0xa010101}, 0x10) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r8, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) getsockopt$MRT(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) setsockopt$inet6_int(r8, 0x29, 0x33, &(0x7f0000000040)=0x6, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) recvmmsg(r8, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10162, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000026000000143a000000080003003c001941152dd4d2cda65c45451d58460caf25e1fe3fb9b33e122b6b4c963ec5512c6a7706604602", @ANYRES32=r10, @ANYBLOB="0c0099000000ffff2a00000004005b00"], 0x2c}}, 0x0) 2.393091205s ago: executing program 1 (id=2072): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0xfffffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x20, 0x0, 0x346, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x2, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000300)={0x80980914, 0x8, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x2000000000000, 0x100000000, 0x4, 0x0, 0x200009, 0x5, 0x2, 0xffffffff, [0x9, 0x2, 0x0, 0xfffffffd]}) 2.367760556s ago: executing program 0 (id=2073): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x4c102) (fail_nth: 8) 2.235054129s ago: executing program 1 (id=2074): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2005c080) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18011}], 0x8}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000280)='id:\x00\x00\x00\x00') r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x0, 0x4], 0xeeee8000, 0x400}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x4, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) setreuid(0xffffffffffffffff, 0xee01) fspick(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x8, 0x31, 0xffffffffffffffff, 0x0) 1.957181046s ago: executing program 0 (id=2075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x13) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0xd1, 0x0, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f0000000300)="bf", 0x1}], 0x12e5) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000001d40), &(0x7f0000001d80)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.689679612s ago: executing program 3 (id=2077): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2", @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',group_i']) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c5393120", 0xab}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f90753"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd09118", 0x77}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea", 0x26}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7", 0xcb}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) fsopen(0x0, 0xcce192ff6ee38041) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000000)={0x2, 0x100, 0x0, {0x8000, 0x3, 0x5, 0x92}}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r2, 0x0, 0x0, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000340)={0x10000, 0x2, 0x8000000, 0x2000, &(0x7f0000001000/0x2000)=nil}) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r5, 0x4068aea3, &(0x7f0000000280)) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x1, &(0x7f0000000140)=0xffff, 0x4) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.585808272s ago: executing program 1 (id=2078): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2c, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48d0}, 0x810) (fail_nth: 7) 1.352826239s ago: executing program 1 (id=2079): r0 = syz_open_dev$video4linux(&(0x7f0000000440), 0x2, 0x82440) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) syz_usbip_server_init(0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) read$FUSE(r1, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000480)={0x0, {0x7fff, 0x4}}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES16=r2], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000005c0)={0x4, 0x0, [{0x60000, 0x45, &(0x7f0000000180)=""/69}, {0x8000000, 0xd5, &(0x7f0000000200)=""/213}, {0xddce4000, 0x4c, &(0x7f0000000300)=""/76}, {0x8000000, 0x0, 0x0}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregset(0x4205, r7, 0x1, &(0x7f0000000100)={0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008238d01800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x800) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) openat(r6, &(0x7f00000003c0)='./file0/file0/file0\x00', 0x0, 0xa) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r5, 0xc004ae0a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000025000/0x1000)=nil, 0x1000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r10, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}, 0x40002040) 1.035131693s ago: executing program 0 (id=2080): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502"], 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000540)=0x3) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x20, 0x1, 0x18, {0x18, 0x0, "62bbb1071a11921b209788d0574ef66259d342afdb6d"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}, &(0x7f0000000180)={0x0, 0xf, 0x45, {0x5, 0xf, 0x45, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0xf, 0x7fff}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "4e45434cdaa61b6baad4d3dc40e15e2f"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x0, 0x3, 0x400}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0xd, 0xf00f, 0x9, [0xc0f0, 0xffc000, 0x18000]}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x51, 0x80, 0x0, 0xf0, "9b8d8c6d", "3df139e0"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x18, 0x7, 0x1, 0x4, 0xa43, 0x6}}}, &(0x7f0000000980)={0x84, &(0x7f0000000380)={0x20, 0xc, 0x49, "8dee051154d2e4d4daa5ac2afefb084cabef2175eecd7e16d748d19cc115f42eeb3b5734872116768591059befd2afcab5e7209d6f91f0c127486488bde3bdaced4f2735b20a238d86"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xa}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x8, 0x42, [0x11000]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x81}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000740)={0x40, 0xb, 0x2, "8897"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x9}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000800)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000840)={0x40, 0x19, 0x2, "49d1"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x64f5}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000940)={0x40, 0x21, 0x1}}) 0s ago: executing program 3 (id=2081): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000280)=0x7fb, 0xff11) listen(r0, 0x3) listen(r0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd600000001090224"], 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000040)) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[], 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = dup(0xffffffffffffffff) socketpair(0x1f, 0x2, 0x7, &(0x7f0000000000)) unshare(0x2040400) r4 = semget$private(0x0, 0x7, 0x191) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f0000000200)={r6}) semtimedop(r4, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) semop(r4, &(0x7f0000000040)=[{0x1, 0xe8c7, 0x1000}, {0x2, 0x3ff, 0x800}], 0x2) semctl$SETVAL(r4, 0x0, 0x10, &(0x7f0000000080)=0x4) unshare(0x20040400) semctl$IPC_RMID(r4, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESOCT], 0x20}, 0x1, 0x0, 0x0, 0x40c4801}, 0x0) syz_ublk_setup_queues(r3, r2, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xfffffffe, 0x257, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x4000, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x80000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): max is 0 [ 404.694080][ T822] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 404.694158][ T822] usb 4-1: config 63 has no interface number 0 [ 404.694191][ T822] usb 4-1: config 63 interface 66 has no altsetting 0 [ 404.762991][ T822] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 404.763323][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.763561][ T822] usb 4-1: Product: syz [ 404.763576][ T822] usb 4-1: Manufacturer: syz [ 404.763590][ T822] usb 4-1: SerialNumber: syz [ 404.775366][ T5767] usb 1-1: USB disconnect, device number 4 [ 405.169551][ T822] uvcvideo 4-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 405.170107][ T822] uvcvideo 4-1:63.66: No valid video chain found. [ 405.196892][ T822] usb 4-1: USB disconnect, device number 122 [ 405.408675][ T5694] usb 2-1: unit 6 not found! [ 405.694567][ T5703] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 405.797045][T10760] FAULT_INJECTION: forcing a failure. [ 405.797045][T10760] name failslab, interval 1, probability 0, space 0, times 0 [ 405.797082][T10760] CPU: 0 UID: 0 PID: 10760 Comm: syz.1.1699 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 405.797108][T10760] Tainted: [L]=SOFTLOCKUP [ 405.797115][T10760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 405.797126][T10760] Call Trace: [ 405.797134][T10760] [ 405.797143][T10760] dump_stack_lvl+0xe8/0x150 [ 405.797174][T10760] should_fail_ex+0x467/0x600 [ 405.797205][T10760] should_failslab+0xa8/0x100 [ 405.797235][T10760] __kmalloc_cache_noprof+0xa1/0x670 [ 405.797260][T10760] ? netlbl_cipsov4_add+0x576/0x2580 [ 405.797281][T10760] ? netlbl_cipsov4_add+0x576/0x2580 [ 405.797307][T10760] netlbl_cipsov4_add+0x576/0x2580 [ 405.797336][T10760] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 405.797356][T10760] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 405.797384][T10760] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 405.797413][T10760] genl_family_rcv_msg_doit+0x233/0x340 [ 405.797442][T10760] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 405.797476][T10760] ? bpf_lsm_capable+0x9/0x20 [ 405.797494][T10760] ? security_capable+0x74/0x280 [ 405.797528][T10760] genl_rcv_msg+0x614/0x7a0 [ 405.797556][T10760] ? __pfx_genl_rcv_msg+0x10/0x10 [ 405.797576][T10760] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 405.797600][T10760] ? __pfx___schedule+0x10/0x10 [ 405.797631][T10760] netlink_rcv_skb+0x226/0x4a0 [ 405.797666][T10760] ? __pfx_genl_rcv_msg+0x10/0x10 [ 405.797688][T10760] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 405.797727][T10760] ? netlink_deliver_tap+0x2e/0x1b0 [ 405.797751][T10760] ? netlink_deliver_tap+0x2e/0x1b0 [ 405.797780][T10760] genl_rcv+0x28/0x40 [ 405.797799][T10760] netlink_unicast+0x7f5/0x990 [ 405.797834][T10760] netlink_sendmsg+0x813/0xb40 [ 405.797869][T10760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.797897][T10760] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 405.797920][T10760] ? __kernel_text_address+0xd/0x30 [ 405.797946][T10760] ? unwind_get_return_address+0x4d/0x90 [ 405.797968][T10760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.797993][T10760] sock_sendmsg_nosec+0x13a/0x180 [ 405.798018][T10760] ____sys_sendmsg+0x565/0x870 [ 405.798053][T10760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 405.798087][T10760] ? import_iovec+0x73/0xa0 [ 405.798112][T10760] ___sys_sendmsg+0x2a5/0x360 [ 405.798136][T10760] ? __lock_acquire+0x6df/0x2e40 [ 405.798158][T10760] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.798218][T10760] ? __fget_files+0x2a/0x420 [ 405.798242][T10760] ? __fget_files+0x3a8/0x420 [ 405.798276][T10760] __x64_sys_sendmsg+0x1b7/0x290 [ 405.798304][T10760] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 405.798348][T10760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.798368][T10760] do_syscall_64+0x174/0x580 [ 405.798392][T10760] ? trace_irq_disable+0x3b/0x140 [ 405.798410][T10760] ? clear_bhb_loop+0x40/0x90 [ 405.798430][T10760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.798447][T10760] RIP: 0033:0x7fa6b268de59 [ 405.798464][T10760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.798479][T10760] RSP: 002b:00007fa6b08e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.798498][T10760] RAX: ffffffffffffffda RBX: 00007fa6b2915fa0 RCX: 00007fa6b268de59 [ 405.798512][T10760] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 405.798523][T10760] RBP: 00007fa6b08e6090 R08: 0000000000000000 R09: 0000000000000000 [ 405.798535][T10760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.798546][T10760] R13: 00007fa6b2916038 R14: 00007fa6b2915fa0 R15: 00007ffc75079a28 [ 405.798576][T10760] [ 405.956857][ T5703] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 405.956913][ T5703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.960698][ T5703] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 405.960726][ T5703] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 405.960745][ T5703] usb 1-1: Manufacturer: syz [ 405.972930][ T5703] usb 1-1: config 0 descriptor?? [ 406.284654][ T5703] rc_core: IR keymap rc-hauppauge not found [ 406.284675][ T5703] Registered IR keymap rc-empty [ 406.459183][ T5703] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 406.470687][ T5703] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input26 [ 406.529988][ T5694] usb 2-1: USB disconnect, device number 4 [ 406.538108][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 406.735045][ T5703] usb 1-1: USB disconnect, device number 5 [ 406.770574][T10780] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1704'. [ 406.770654][T10780] FAULT_INJECTION: forcing a failure. [ 406.770654][T10780] name failslab, interval 1, probability 0, space 0, times 0 [ 406.770677][T10780] CPU: 1 UID: 0 PID: 10780 Comm: syz.1.1704 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 406.770696][T10780] Tainted: [L]=SOFTLOCKUP [ 406.770701][T10780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 406.770710][T10780] Call Trace: [ 406.770715][T10780] [ 406.770722][T10780] dump_stack_lvl+0xe8/0x150 [ 406.770745][T10780] should_fail_ex+0x467/0x600 [ 406.770771][T10780] should_failslab+0xa8/0x100 [ 406.770795][T10780] kmem_cache_alloc_node_noprof+0xac/0x660 [ 406.770816][T10780] ? __alloc_skb+0x1d7/0x7a0 [ 406.770835][T10780] ? __alloc_skb+0x1d7/0x7a0 [ 406.770857][T10780] __alloc_skb+0x1d7/0x7a0 [ 406.770879][T10780] netlink_ack+0x136/0xb30 [ 406.770904][T10780] ? __pfx_genl_rcv_msg+0x10/0x10 [ 406.770919][T10780] ? ref_tracker_free+0x668/0x820 [ 406.770943][T10780] ? __pfx_nl80211_post_doit+0x10/0x10 [ 406.770958][T10780] ? ____sys_sendmsg+0x565/0x870 [ 406.770979][T10780] ? ___sys_sendmsg+0x2a5/0x360 [ 406.770999][T10780] ? __x64_sys_sendmsg+0x1b7/0x290 [ 406.771031][T10780] ? do_syscall_64+0x174/0x580 [ 406.771054][T10780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.771077][T10780] netlink_rcv_skb+0x2a4/0x4a0 [ 406.771101][T10780] ? __pfx_genl_rcv_msg+0x10/0x10 [ 406.771121][T10780] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 406.771156][T10780] ? netlink_deliver_tap+0x2e/0x1b0 [ 406.771181][T10780] ? netlink_deliver_tap+0x2e/0x1b0 [ 406.771207][T10780] genl_rcv+0x28/0x40 [ 406.771224][T10780] netlink_unicast+0x7f5/0x990 [ 406.771255][T10780] netlink_sendmsg+0x813/0xb40 [ 406.771295][T10780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.771322][T10780] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 406.771346][T10780] ? __kernel_text_address+0xd/0x30 [ 406.771374][T10780] ? unwind_get_return_address+0x4d/0x90 [ 406.771395][T10780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.771421][T10780] sock_sendmsg_nosec+0x13a/0x180 [ 406.771445][T10780] ____sys_sendmsg+0x565/0x870 [ 406.771480][T10780] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.771513][T10780] ? import_iovec+0x73/0xa0 [ 406.771537][T10780] ___sys_sendmsg+0x2a5/0x360 [ 406.771562][T10780] ? __lock_acquire+0x6df/0x2e40 [ 406.771584][T10780] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.771642][T10780] ? __fget_files+0x2a/0x420 [ 406.771669][T10780] ? __fget_files+0x3a8/0x420 [ 406.771704][T10780] __x64_sys_sendmsg+0x1b7/0x290 [ 406.771733][T10780] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 406.771777][T10780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.771796][T10780] do_syscall_64+0x174/0x580 [ 406.771821][T10780] ? trace_irq_disable+0x3b/0x140 [ 406.771839][T10780] ? clear_bhb_loop+0x40/0x90 [ 406.771862][T10780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.771879][T10780] RIP: 0033:0x7fa6b268de59 [ 406.771902][T10780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.771917][T10780] RSP: 002b:00007fa6b08e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.771937][T10780] RAX: ffffffffffffffda RBX: 00007fa6b2915fa0 RCX: 00007fa6b268de59 [ 406.771950][T10780] RDX: 00000000000008d0 RSI: 0000200000000200 RDI: 0000000000000003 [ 406.771962][T10780] RBP: 00007fa6b08e6090 R08: 0000000000000000 R09: 0000000000000000 [ 406.771973][T10780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.771983][T10780] R13: 00007fa6b2916038 R14: 00007fa6b2915fa0 R15: 00007ffc75079a28 [ 406.772019][T10780] [ 407.421070][ T7112] udevd[7112]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.614536][ T5767] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 407.778414][ T5767] usb 3-1: Using ep0 maxpacket: 16 [ 407.780659][ T5767] usb 3-1: config 0 has no interfaces? [ 407.780694][ T5767] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 407.780716][ T5767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.801396][ T5767] usb 3-1: config 0 descriptor?? [ 408.064213][T10813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.067945][T10813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.212577][ T5703] usb 3-1: USB disconnect, device number 5 [ 409.102985][T10834] input: syz1 as /devices/virtual/input/input27 [ 409.296998][T10838] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 409.297025][T10838] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 409.336700][T10838] vhci_hcd vhci_hcd.0: Device attached [ 409.440739][T10845] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 409.440766][T10845] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 409.447694][T10845] vhci_hcd vhci_hcd.0: Device attached [ 409.484707][ T822] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 409.554547][ T822] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 409.634576][ T5703] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 409.704493][ T5703] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 410.123071][T10839] vhci_hcd: connection reset by peer [ 410.123479][ T6201] vhci_hcd vhci_hcd.3: stop threads [ 410.123502][ T6201] vhci_hcd vhci_hcd.3: release socket [ 410.141319][ T6201] vhci_hcd vhci_hcd.3: disconnect device [ 410.703462][T10797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 410.913336][T10859] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 3 out of range (1000000..45000000) [ 411.084870][ T5767] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 411.246137][ T5767] usb 4-1: Using ep0 maxpacket: 16 [ 411.249938][ T5767] usb 4-1: config 0 has no interfaces? [ 411.249975][ T5767] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 411.249998][ T5767] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.306066][ T5767] usb 4-1: config 0 descriptor?? [ 411.431936][T10892] FAULT_INJECTION: forcing a failure. [ 411.431936][T10892] name failslab, interval 1, probability 0, space 0, times 0 [ 411.431971][T10892] CPU: 1 UID: 0 PID: 10892 Comm: syz.0.1732 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 411.431994][T10892] Tainted: [L]=SOFTLOCKUP [ 411.432001][T10892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 411.432011][T10892] Call Trace: [ 411.432018][T10892] [ 411.432026][T10892] dump_stack_lvl+0xe8/0x150 [ 411.432049][T10892] should_fail_ex+0x467/0x600 [ 411.432079][T10892] should_failslab+0xa8/0x100 [ 411.432104][T10892] ? skb_clone+0x212/0x3a0 [ 411.432127][T10892] kmem_cache_alloc_noprof+0x9e/0x680 [ 411.432147][T10892] ? do_syscall_64+0x174/0x580 [ 411.432170][T10892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.432189][T10892] ? skb_clone+0x212/0x3a0 [ 411.432217][T10892] skb_clone+0x212/0x3a0 [ 411.432245][T10892] __netlink_deliver_tap+0x410/0x880 [ 411.432276][T10892] ? netlink_deliver_tap+0x2e/0x1b0 [ 411.432299][T10892] netlink_deliver_tap+0x19c/0x1b0 [ 411.432323][T10892] __netlink_sendskb+0x47/0x90 [ 411.432348][T10892] netlink_dump+0xa8c/0xee0 [ 411.432379][T10892] ? __pfx_netlink_dump+0x10/0x10 [ 411.432411][T10892] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 411.432440][T10892] __netlink_dump_start+0x589/0x7b0 [ 411.432467][T10892] ip_set_dump+0x15b/0x1f0 [ 411.432487][T10892] ? __pfx_ip_set_dump+0x10/0x10 [ 411.432506][T10892] ? __pfx_ip_set_dump_start+0x10/0x10 [ 411.432523][T10892] ? __pfx_ip_set_dump_do+0x10/0x10 [ 411.432545][T10892] ? __pfx_ip_set_dump_done+0x10/0x10 [ 411.432560][T10892] ? lockdep_hardirqs_on+0x7a/0x110 [ 411.432574][T10892] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 411.432592][T10892] nfnetlink_rcv_msg+0xcd6/0x12c0 [ 411.432606][T10892] ? nfnetlink_rcv_msg+0x22e/0x12c0 [ 411.432629][T10892] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 411.432655][T10892] ? __lock_acquire+0x6df/0x2e40 [ 411.432670][T10892] ? __lock_acquire+0x6df/0x2e40 [ 411.432679][T10892] ? sock_sendmsg_nosec+0x13a/0x180 [ 411.432693][T10892] netlink_rcv_skb+0x226/0x4a0 [ 411.432708][T10892] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 411.432722][T10892] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.432742][T10892] ? bpf_lsm_capable+0x9/0x20 [ 411.432752][T10892] ? security_capable+0x74/0x280 [ 411.432771][T10892] nfnetlink_rcv+0x2b9/0x28d0 [ 411.432789][T10892] ? sock_sendmsg_nosec+0x13a/0x180 [ 411.432801][T10892] ? __pfx_snprintf+0x10/0x10 [ 411.432814][T10892] ? unwind_get_return_address+0x4d/0x90 [ 411.432824][T10892] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 411.432844][T10892] ? trim_netdev_trace+0x791/0x820 [ 411.432857][T10892] ? __pfx_trim_netdev_trace+0x10/0x10 [ 411.432866][T10892] ? stack_trace_save+0xa9/0x100 [ 411.432881][T10892] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 411.432895][T10892] ? save_netdev_trace_buffer+0x18f/0x5e0 [ 411.432907][T10892] ? save_netdev_trace_buffer+0x4c3/0x5e0 [ 411.432921][T10892] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 411.432931][T10892] ? ref_tracker_free+0x668/0x820 [ 411.432945][T10892] ? __netlink_deliver_tap+0x600/0x880 [ 411.432959][T10892] ? netlink_deliver_tap+0x19c/0x1b0 [ 411.432972][T10892] ? netlink_unicast+0x7b8/0x990 [ 411.432983][T10892] ? netlink_sendmsg+0x813/0xb40 [ 411.432997][T10892] ? sock_sendmsg_nosec+0x13a/0x180 [ 411.433006][T10892] ? ____sys_sendmsg+0x565/0x870 [ 411.433021][T10892] ? ___sys_sendmsg+0x2a5/0x360 [ 411.433034][T10892] ? __x64_sys_sendmsg+0x1b7/0x290 [ 411.433049][T10892] ? do_syscall_64+0x174/0x580 [ 411.433061][T10892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.433075][T10892] ? __skb_clone+0x449/0x6c0 [ 411.433092][T10892] ? skb_clone+0x246/0x3a0 [ 411.433107][T10892] ? __netlink_deliver_tap+0x838/0x880 [ 411.433121][T10892] ? netlink_deliver_tap+0x2e/0x1b0 [ 411.433138][T10892] ? netlink_deliver_tap+0x2e/0x1b0 [ 411.433152][T10892] ? netlink_deliver_tap+0x2e/0x1b0 [ 411.433169][T10892] netlink_unicast+0x7f5/0x990 [ 411.433188][T10892] netlink_sendmsg+0x813/0xb40 [ 411.433207][T10892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.433223][T10892] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 411.433236][T10892] ? __kernel_text_address+0xd/0x30 [ 411.433251][T10892] ? unwind_get_return_address+0x4d/0x90 [ 411.433262][T10892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.433275][T10892] sock_sendmsg_nosec+0x13a/0x180 [ 411.433288][T10892] ____sys_sendmsg+0x565/0x870 [ 411.433307][T10892] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.433325][T10892] ? import_iovec+0x73/0xa0 [ 411.433339][T10892] ___sys_sendmsg+0x2a5/0x360 [ 411.433352][T10892] ? __lock_acquire+0x6df/0x2e40 [ 411.433364][T10892] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.433395][T10892] ? __fget_files+0x2a/0x420 [ 411.433410][T10892] ? __fget_files+0x3a8/0x420 [ 411.433428][T10892] __x64_sys_sendmsg+0x1b7/0x290 [ 411.433444][T10892] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.433467][T10892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.433478][T10892] do_syscall_64+0x174/0x580 [ 411.433492][T10892] ? clear_bhb_loop+0x40/0x90 [ 411.433526][T10892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.433543][T10892] RIP: 0033:0x7f576f5fde59 [ 411.433555][T10892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.433564][T10892] RSP: 002b:00007f576d856028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.433576][T10892] RAX: ffffffffffffffda RBX: 00007f576f885fa0 RCX: 00007f576f5fde59 [ 411.433584][T10892] RDX: 0000000020040844 RSI: 0000200000000280 RDI: 0000000000000003 [ 411.433590][T10892] RBP: 00007f576d856090 R08: 0000000000000000 R09: 0000000000000000 [ 411.433597][T10892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.433603][T10892] R13: 00007f576f886038 R14: 00007f576f885fa0 R15: 00007ffff78a5d38 [ 411.433618][T10892] [ 411.808055][ T5710] usb 4-1: USB disconnect, device number 123 [ 411.894933][T10901] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1734'. [ 412.284593][ T5694] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 412.438442][ T5694] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 412.438484][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.438495][ T5694] usb 2-1: Product: syz [ 412.438502][ T5694] usb 2-1: Manufacturer: syz [ 412.438509][ T5694] usb 2-1: SerialNumber: syz [ 412.698658][T10913] dvmrp0: entered allmulticast mode [ 412.743917][T10914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.744776][T10914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.899387][T10920] FAULT_INJECTION: forcing a failure. [ 412.899387][T10920] name failslab, interval 1, probability 0, space 0, times 0 [ 412.899649][T10920] CPU: 1 UID: 0 PID: 10920 Comm: syz.3.1740 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 412.899676][T10920] Tainted: [L]=SOFTLOCKUP [ 412.899683][T10920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 412.899695][T10920] Call Trace: [ 412.899703][T10920] [ 412.899711][T10920] dump_stack_lvl+0xe8/0x150 [ 412.899743][T10920] should_fail_ex+0x467/0x600 [ 412.899776][T10920] should_failslab+0xa8/0x100 [ 412.899804][T10920] __kmalloc_noprof+0xfb/0x790 [ 412.899827][T10920] ? tomoyo_realpath_from_path+0xef/0x640 [ 412.899848][T10920] ? tomoyo_realpath_from_path+0xef/0x640 [ 412.899873][T10920] tomoyo_realpath_from_path+0xef/0x640 [ 412.899901][T10920] ? tomoyo_path_number_perm+0x219/0x5f0 [ 412.899928][T10920] tomoyo_path_number_perm+0x246/0x5f0 [ 412.899955][T10920] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 412.899978][T10920] ? __lock_acquire+0x6df/0x2e40 [ 412.900009][T10920] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 412.900035][T10920] ? lockdep_hardirqs_on+0x7a/0x110 [ 412.900074][T10920] ? __fget_files+0x2a/0x420 [ 412.900101][T10920] ? __fget_files+0x2a/0x420 [ 412.900121][T10920] ? __fget_files+0x3a8/0x420 [ 412.900141][T10920] ? __fget_files+0x2a/0x420 [ 412.900167][T10920] security_file_ioctl+0xb9/0x260 [ 412.900193][T10920] __se_sys_ioctl+0x47/0x170 [ 412.900211][T10920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.900232][T10920] do_syscall_64+0x174/0x580 [ 412.900255][T10920] ? trace_irq_disable+0x3b/0x140 [ 412.900271][T10920] ? clear_bhb_loop+0x40/0x90 [ 412.900295][T10920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.900314][T10920] RIP: 0033:0x7fe01b69de59 [ 412.900333][T10920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.900348][T10920] RSP: 002b:00007fe0198d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.900369][T10920] RAX: ffffffffffffffda RBX: 00007fe01b926090 RCX: 00007fe01b69de59 [ 412.900382][T10920] RDX: 0000000000000000 RSI: 00000000000054a2 RDI: 0000000000000003 [ 412.900394][T10920] RBP: 00007fe0198d5090 R08: 0000000000000000 R09: 0000000000000000 [ 412.900406][T10920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.900417][T10920] R13: 00007fe01b926128 R14: 00007fe01b926090 R15: 00007ffec3217908 [ 412.900448][T10920] [ 412.901994][T10920] ERROR: Out of memory at tomoyo_realpath_from_path. [ 413.346112][T10927] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 413.604435][ T1250] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 413.756353][ T1250] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.756394][ T1250] usb 4-1: config 0 interface 0 has no altsetting 0 [ 413.758868][ T1250] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 413.758897][ T1250] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.758915][ T1250] usb 4-1: Product: syz [ 413.758928][ T1250] usb 4-1: Manufacturer: syz [ 413.758941][ T1250] usb 4-1: SerialNumber: syz [ 413.811263][ T1250] usb 4-1: config 0 descriptor?? [ 414.021651][ T1250] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 414.068792][ T1250] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 414.070006][ T1250] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 414.070063][ T1250] usb 4-1: media controller created [ 414.108771][ T1250] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 414.204038][ T1250] DVB: Unable to find symbol tda10046_attach() [ 414.204147][ T1250] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 414.204218][ T1250] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 414.244095][ T1250] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 414.261648][ T1250] usb 4-1: USB disconnect, device number 124 [ 414.547682][T10895] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 414.615352][ T5694] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 414.615884][ T5694] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 414.629254][ T37] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 414.640615][ T5694] usb 2-1: USB disconnect, device number 5 [ 414.754594][ T822] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 414.844466][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 414.846573][ T37] usb 3-1: config 0 has no interfaces? [ 414.846608][ T37] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 414.846629][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.851412][ T37] usb 3-1: config 0 descriptor?? [ 414.939803][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1750'. [ 415.177279][ T5694] usb 3-1: USB disconnect, device number 6 [ 415.887169][T10948] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 415.919770][T10973] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1759'. [ 416.156248][T10981] FAULT_INJECTION: forcing a failure. [ 416.156248][T10981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.156270][T10981] CPU: 1 UID: 0 PID: 10981 Comm: syz.3.1762 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 416.156284][T10981] Tainted: [L]=SOFTLOCKUP [ 416.156288][T10981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 416.156294][T10981] Call Trace: [ 416.156299][T10981] [ 416.156304][T10981] dump_stack_lvl+0xe8/0x150 [ 416.156322][T10981] should_fail_ex+0x467/0x600 [ 416.156339][T10981] strncpy_from_user+0x36/0x2c0 [ 416.156355][T10981] do_getname+0x77/0x250 [ 416.156369][T10981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.156381][T10981] __se_sys_rename+0x2b/0x2c0 [ 416.156394][T10981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.156404][T10981] do_syscall_64+0x174/0x580 [ 416.156419][T10981] ? trace_irq_disable+0x3b/0x140 [ 416.156428][T10981] ? clear_bhb_loop+0x40/0x90 [ 416.156441][T10981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.156451][T10981] RIP: 0033:0x7fe01b69de59 [ 416.156461][T10981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.156470][T10981] RSP: 002b:00007fe0198f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 416.156481][T10981] RAX: ffffffffffffffda RBX: 00007fe01b925fa0 RCX: 00007fe01b69de59 [ 416.156489][T10981] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000180 [ 416.156495][T10981] RBP: 00007fe0198f6090 R08: 0000000000000000 R09: 0000000000000000 [ 416.156502][T10981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.156508][T10981] R13: 00007fe01b926038 R14: 00007fe01b925fa0 R15: 00007ffec3217908 [ 416.156522][T10981] [ 416.694768][ T5767] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 416.846007][ T5767] usb 4-1: Using ep0 maxpacket: 16 [ 416.848019][ T5767] usb 4-1: config 0 has no interfaces? [ 416.848053][ T5767] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 416.848075][ T5767] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.850919][ T5767] usb 4-1: config 0 descriptor?? [ 417.064615][ T5606] Bluetooth: hci0: command 0x0406 tx timeout [ 417.136371][ T5767] usb 4-1: USB disconnect, device number 125 [ 418.411462][T10961] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 418.544876][ T822] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 418.740054][ T822] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 418.740081][ T822] usb 4-1: config 1 has no interface number 0 [ 418.740125][ T822] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 32 [ 418.740146][ T822] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 16 [ 418.770491][ T822] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 418.770518][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.770535][ T822] usb 4-1: Product: syz [ 418.770548][ T822] usb 4-1: Manufacturer: syz [ 418.770561][ T822] usb 4-1: SerialNumber: syz [ 418.828786][T11015] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 418.828898][T11015] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 419.048877][T11015] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 419.048993][T11015] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 419.084512][ T822] usb 4-1: No status endpoint found [ 419.262452][ T1250] usb 4-1: USB disconnect, device number 126 [ 419.415669][T11048] FAULT_INJECTION: forcing a failure. [ 419.415669][T11048] name failslab, interval 1, probability 0, space 0, times 0 [ 419.415692][T11048] CPU: 1 UID: 0 PID: 11048 Comm: syz.2.1774 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 419.415707][T11048] Tainted: [L]=SOFTLOCKUP [ 419.415711][T11048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 419.415718][T11048] Call Trace: [ 419.415722][T11048] [ 419.415727][T11048] dump_stack_lvl+0xe8/0x150 [ 419.415744][T11048] should_fail_ex+0x467/0x600 [ 419.415761][T11048] should_failslab+0xa8/0x100 [ 419.415777][T11048] ? skb_clone+0x212/0x3a0 [ 419.415792][T11048] kmem_cache_alloc_noprof+0x9e/0x680 [ 419.415806][T11048] ? skb_clone+0x212/0x3a0 [ 419.415823][T11048] skb_clone+0x212/0x3a0 [ 419.415845][T11048] __netlink_deliver_tap+0x410/0x880 [ 419.415875][T11048] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.415899][T11048] netlink_deliver_tap+0x19c/0x1b0 [ 419.415920][T11048] netlink_unicast+0x7b8/0x990 [ 419.415947][T11048] netlink_sendmsg+0x813/0xb40 [ 419.415967][T11048] ? kernel_text_address+0xa5/0xe0 [ 419.415994][T11048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.416018][T11048] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 419.416045][T11048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.416067][T11048] sock_sendmsg_nosec+0x13a/0x180 [ 419.416086][T11048] sock_sendmsg+0x1ca/0x2d0 [ 419.416096][T11048] ? __lock_acquire+0x6df/0x2e40 [ 419.416109][T11048] ? __pfx_sock_sendmsg+0x10/0x10 [ 419.416118][T11048] ? kasan_save_free_info+0x40/0x50 [ 419.416136][T11048] ? __asan_memset+0x22/0x50 [ 419.416147][T11048] ? iov_iter_bvec+0xb8/0x180 [ 419.416159][T11048] splice_to_socket+0xb61/0x12a0 [ 419.416186][T11048] ? __pfx_splice_to_socket+0x10/0x10 [ 419.416199][T11048] ? kasan_quarantine_put+0xbb/0x1f0 [ 419.416230][T11048] ? register_lock_class+0x31/0x2e0 [ 419.416241][T11048] ? __pfx_splice_to_socket+0x10/0x10 [ 419.416256][T11048] direct_splice_actor+0x104/0x160 [ 419.416273][T11048] splice_direct_to_actor+0x586/0xcc0 [ 419.416297][T11048] ? __pfx_direct_splice_actor+0x10/0x10 [ 419.416311][T11048] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 419.416331][T11048] do_splice_direct+0x19b/0x2a0 [ 419.416347][T11048] ? __pfx_do_splice_direct+0x10/0x10 [ 419.416362][T11048] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 419.416373][T11048] ? bpf_lsm_file_permission+0x9/0x20 [ 419.416388][T11048] ? security_file_permission+0x68/0x220 [ 419.416411][T11048] ? rw_verify_area+0x209/0x4d0 [ 419.416429][T11048] do_sendfile+0x540/0x7e0 [ 419.416441][T11048] ? lockdep_hardirqs_on+0x7a/0x110 [ 419.416459][T11048] ? __pfx_do_sendfile+0x10/0x10 [ 419.416477][T11048] __se_sys_sendfile64+0x144/0x1a0 [ 419.416491][T11048] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 419.416511][T11048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.416523][T11048] do_syscall_64+0x174/0x580 [ 419.416537][T11048] ? trace_irq_disable+0x3b/0x140 [ 419.416547][T11048] ? clear_bhb_loop+0x40/0x90 [ 419.416560][T11048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.416570][T11048] RIP: 0033:0x7f470f15de59 [ 419.416580][T11048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.416589][T11048] RSP: 002b:00007f470d3b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 419.416601][T11048] RAX: ffffffffffffffda RBX: 00007f470f3e5fa0 RCX: 00007f470f15de59 [ 419.416608][T11048] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 419.416614][T11048] RBP: 00007f470d3b6090 R08: 0000000000000000 R09: 0000000000000000 [ 419.416620][T11048] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 419.416626][T11048] R13: 00007f470f3e6038 R14: 00007f470f3e5fa0 R15: 00007ffec797e198 [ 419.416646][T11048] [ 419.574467][ T5767] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 419.745684][ T5767] usb 1-1: Using ep0 maxpacket: 16 [ 419.749133][ T5767] usb 1-1: config 0 has no interfaces? [ 419.749168][ T5767] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 419.749189][ T5767] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.763341][ T5767] usb 1-1: config 0 descriptor?? [ 419.899199][T11053] FAULT_INJECTION: forcing a failure. [ 419.899199][T11053] name failslab, interval 1, probability 0, space 0, times 0 [ 419.899222][T11053] CPU: 1 UID: 0 PID: 11053 Comm: syz.3.1776 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 419.899242][T11053] Tainted: [L]=SOFTLOCKUP [ 419.899246][T11053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 419.899253][T11053] Call Trace: [ 419.899257][T11053] [ 419.899262][T11053] dump_stack_lvl+0xe8/0x150 [ 419.899281][T11053] should_fail_ex+0x467/0x600 [ 419.899300][T11053] should_failslab+0xa8/0x100 [ 419.899317][T11053] __kmalloc_noprof+0xfb/0x790 [ 419.899330][T11053] ? tomoyo_encode+0x2ad/0x570 [ 419.899341][T11053] ? tomoyo_encode+0x2ad/0x570 [ 419.899353][T11053] tomoyo_encode+0x2ad/0x570 [ 419.899366][T11053] tomoyo_realpath_from_path+0x5fa/0x640 [ 419.899382][T11053] ? tomoyo_path_number_perm+0x219/0x5f0 [ 419.899396][T11053] tomoyo_path_number_perm+0x246/0x5f0 [ 419.899410][T11053] ? __lock_acquire+0x6df/0x2e40 [ 419.899420][T11053] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 419.899436][T11053] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 419.899451][T11053] ? lockdep_hardirqs_on+0x7a/0x110 [ 419.899483][T11053] ? __pfx_current_check_access_path+0x10/0x10 [ 419.899500][T11053] tomoyo_path_mknod+0x14a/0x1a0 [ 419.899511][T11053] ? d_alloc_parallel+0x3cf/0x16c0 [ 419.899523][T11053] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 419.899534][T11053] ? __d_lookup+0x66/0x790 [ 419.899548][T11053] security_path_mknod+0x16c/0x330 [ 419.899563][T11053] may_o_create+0x2d/0x370 [ 419.899575][T11053] ? mode_strip_sgid+0xa1/0x1b0 [ 419.899587][T11053] path_openat+0xfb5/0x3850 [ 419.899602][T11053] ? __kasan_slab_alloc+0x6c/0x80 [ 419.899628][T11053] do_file_open+0x23e/0x4a0 [ 419.899638][T11053] ? lockdep_hardirqs_on+0x7a/0x110 [ 419.899653][T11053] ? __pfx_do_file_open+0x10/0x10 [ 419.899676][T11053] ? alloc_fd+0x654/0x6d0 [ 419.899694][T11053] do_sys_openat2+0x115/0x200 [ 419.899709][T11053] ? __pfx_do_sys_openat2+0x10/0x10 [ 419.899723][T11053] ? ksys_write+0x248/0x270 [ 419.899734][T11053] ? __pfx_ksys_write+0x10/0x10 [ 419.899745][T11053] __x64_sys_openat+0x138/0x170 [ 419.899760][T11053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.899770][T11053] do_syscall_64+0x174/0x580 [ 419.899784][T11053] ? trace_irq_disable+0x3b/0x140 [ 419.899794][T11053] ? clear_bhb_loop+0x40/0x90 [ 419.899806][T11053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.899816][T11053] RIP: 0033:0x7fe01b69de59 [ 419.899826][T11053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.899835][T11053] RSP: 002b:00007fe0198f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 419.899846][T11053] RAX: ffffffffffffffda RBX: 00007fe01b925fa0 RCX: 00007fe01b69de59 [ 419.899853][T11053] RDX: 000000000000275a RSI: 0000200000000200 RDI: ffffffffffffff9c [ 419.899860][T11053] RBP: 00007fe0198f6090 R08: 0000000000000000 R09: 0000000000000000 [ 419.899866][T11053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.899872][T11053] R13: 00007fe01b926038 R14: 00007fe01b925fa0 R15: 00007ffec3217908 [ 419.899888][T11053] [ 419.899901][T11053] ERROR: Out of memory at tomoyo_realpath_from_path. [ 420.289435][ T5767] usb 1-1: USB disconnect, device number 6 [ 420.305548][T11058] binder: 11055:11058 ioctl f507 0 returned -22 [ 420.371717][T11057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1777'. [ 420.644606][ T1250] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 420.806553][ T1250] usb 2-1: Using ep0 maxpacket: 8 [ 420.809669][ T1250] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 420.809722][ T1250] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 420.811859][ T1250] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 420.811884][ T1250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.811902][ T1250] usb 2-1: Product: syz [ 420.811914][ T1250] usb 2-1: Manufacturer: syz [ 420.811921][ T1250] usb 2-1: SerialNumber: syz [ 420.824166][ T1250] usb 2-1: config 0 descriptor?? [ 420.883738][ T1250] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 420.956559][ T5767] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 421.127932][ T5767] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 421.127959][ T5767] usb 3-1: config 0 has no interface number 0 [ 421.128019][ T5767] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 421.128039][ T5767] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 421.128060][ T5767] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 421.128081][ T5767] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 421.128100][ T5767] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 421.128120][ T5767] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 421.128154][ T5767] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 421.128172][ T5767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.140345][ T5767] usb 3-1: config 0 descriptor?? [ 421.156551][T11070] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 421.157719][T11070] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 421.225277][ T5767] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 421.400630][ T5767] usb 3-1: USB disconnect, device number 7 [ 421.421369][ T5767] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 423.228926][ T5767] usb 2-1: USB disconnect, device number 6 [ 423.287798][T11087] netlink: 'syz.1.1786': attribute type 4 has an invalid length. [ 423.404302][T11062] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 423.984747][ T5694] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 424.164476][ T5694] usb 4-1: Using ep0 maxpacket: 16 [ 424.167014][ T5694] usb 4-1: config 0 has no interfaces? [ 424.167052][ T5694] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 424.167075][ T5694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.173833][ T5694] usb 4-1: config 0 descriptor?? [ 424.502310][ T5767] usb 4-1: USB disconnect, device number 127 [ 424.554538][ T822] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 424.714503][ T822] usb 1-1: Using ep0 maxpacket: 32 [ 424.716483][ T822] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 424.716603][ T822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.716621][ T822] usb 1-1: config 0 has no interface number 0 [ 424.716664][ T822] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 424.716682][ T822] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 424.716707][ T822] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 424.716732][ T822] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 424.716752][ T822] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 424.716772][ T822] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 424.716792][ T822] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 424.847093][ T822] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 424.847120][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.847137][ T822] usb 1-1: Product: syz [ 424.847150][ T822] usb 1-1: Manufacturer: syz [ 424.847163][ T822] usb 1-1: SerialNumber: syz [ 424.874590][ T822] usb 1-1: config 0 descriptor?? [ 424.875824][T11113] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 424.906163][ T822] usb 1-1: expecting 3 got 2 endpoints! Bailing out. [ 425.116450][T11113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.120506][T11113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.166110][ T822] usb 1-1: USB disconnect, device number 7 [ 425.403410][T11138] overlayfs: missing 'lowerdir' [ 425.425190][T11138] kAFS: unable to lookup cell '/yz1' [ 425.426465][T11138] kAFS: unable to lookup cell '/yz1' [ 425.954558][ T5767] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 426.107905][ T5767] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.107961][ T5767] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 426.107981][ T5767] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.113343][ T5767] usb 1-1: config 0 descriptor?? [ 426.126687][ T5767] pwc: Askey VC010 type 2 USB webcam detected. [ 426.520054][ T5767] pwc: recv_control_msg error -32 req 02 val 2b00 [ 426.521325][ T5767] pwc: recv_control_msg error -32 req 02 val 2700 [ 426.522568][ T5767] pwc: recv_control_msg error -32 req 02 val 2c00 [ 426.523117][ T5767] pwc: recv_control_msg error -32 req 04 val 1000 [ 426.523684][ T5767] pwc: recv_control_msg error -32 req 04 val 1300 [ 426.524244][ T5767] pwc: recv_control_msg error -32 req 04 val 1400 [ 426.547909][ T5767] pwc: recv_control_msg error -32 req 02 val 2000 [ 426.565100][ T5767] pwc: recv_control_msg error -32 req 02 val 2100 [ 426.565932][ T5767] pwc: recv_control_msg error -32 req 04 val 1500 [ 426.875780][T11146] : renamed from bond0 (while UP) [ 427.542130][T11119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 427.758666][ T5767] pwc: recv_control_msg error -71 req 02 val 2400 [ 427.759158][ T5767] pwc: recv_control_msg error -71 req 02 val 2600 [ 427.759605][ T5767] pwc: recv_control_msg error -71 req 02 val 2900 [ 427.760054][ T5767] pwc: recv_control_msg error -71 req 02 val 2800 [ 427.760673][ T5767] pwc: recv_control_msg error -71 req 04 val 1100 [ 427.761489][ T5767] pwc: recv_control_msg error -71 req 04 val 1200 [ 427.928324][ T5767] pwc: Registered as video103. [ 427.935282][ T5767] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input28 [ 428.043536][ T5767] usb 1-1: USB disconnect, device number 8 [ 428.205610][ T822] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 428.313350][T11159] FAULT_INJECTION: forcing a failure. [ 428.313350][T11159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.313375][T11159] CPU: 0 UID: 0 PID: 11159 Comm: syz.1.1809 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 428.313390][T11159] Tainted: [L]=SOFTLOCKUP [ 428.313394][T11159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 428.313401][T11159] Call Trace: [ 428.313406][T11159] [ 428.313411][T11159] dump_stack_lvl+0xe8/0x150 [ 428.313429][T11159] should_fail_ex+0x467/0x600 [ 428.313455][T11159] _copy_from_user+0x2d/0xb0 [ 428.313468][T11159] memdup_user+0x5e/0xd0 [ 428.313480][T11159] strndup_user+0x68/0xd0 [ 428.313490][T11159] __se_sys_mount+0x9d/0x420 [ 428.313506][T11159] ? ksys_write+0x248/0x270 [ 428.313518][T11159] ? __pfx___se_sys_mount+0x10/0x10 [ 428.313535][T11159] ? __x64_sys_mount+0x20/0xc0 [ 428.313548][T11159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.313560][T11159] do_syscall_64+0x174/0x580 [ 428.313575][T11159] ? clear_bhb_loop+0x40/0x90 [ 428.313588][T11159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.313598][T11159] RIP: 0033:0x7fa6b268de59 [ 428.313613][T11159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.313627][T11159] RSP: 002b:00007fa6b08e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 428.313644][T11159] RAX: ffffffffffffffda RBX: 00007fa6b2915fa0 RCX: 00007fa6b268de59 [ 428.313657][T11159] RDX: 0000200000000380 RSI: 0000200000000680 RDI: 0000000000000000 [ 428.313668][T11159] RBP: 00007fa6b08e6090 R08: 0000200000002780 R09: 0000000000000000 [ 428.313679][T11159] R10: 0000000000014c98 R11: 0000000000000246 R12: 0000000000000001 [ 428.313689][T11159] R13: 00007fa6b2916038 R14: 00007fa6b2915fa0 R15: 00007ffc75079a28 [ 428.313714][T11159] [ 428.364399][ T822] usb 3-1: Using ep0 maxpacket: 16 [ 428.536222][ T822] usb 3-1: config 0 has no interfaces? [ 428.536261][ T822] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 428.536282][ T822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.575966][ T822] usb 3-1: config 0 descriptor?? [ 428.939771][ T5767] usb 3-1: USB disconnect, device number 8 [ 429.107016][T11181] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 429.734531][ T5767] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 429.888024][ T5767] usb 3-1: not running at top speed; connect to a high speed hub [ 429.890028][ T5767] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 252, changing to 4 [ 429.919948][ T5767] usb 3-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 429.919980][ T5767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.919999][ T5767] usb 3-1: Product: syz [ 429.920012][ T5767] usb 3-1: Manufacturer: syz [ 429.920025][ T5767] usb 3-1: SerialNumber: syz [ 430.213240][ T5767] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 430.215564][ T5767] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 430.408304][T11210] netlink: 'syz.0.1828': attribute type 10 has an invalid length. [ 430.427828][ T5767] usb 3-1: USB disconnect, device number 9 [ 430.462717][T11211] netlink: 'syz.0.1828': attribute type 10 has an invalid length. [ 430.506492][ T5800] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 430.508887][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.654586][ T5800] usb 4-1: Using ep0 maxpacket: 32 [ 430.661992][ T5800] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 430.662017][ T5800] usb 4-1: config 0 has no interface number 0 [ 430.686553][T11210] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 430.688196][ T5800] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 430.688223][ T5800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.688240][ T5800] usb 4-1: Product: syz [ 430.688251][ T5800] usb 4-1: Manufacturer: syz [ 430.688262][ T5800] usb 4-1: SerialNumber: syz [ 430.689941][T11210] team0: Port device netdevsim1 added [ 430.705048][ T5800] usb 4-1: config 0 descriptor?? [ 430.862923][T11215] FAULT_INJECTION: forcing a failure. [ 430.862923][T11215] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 430.862960][T11215] CPU: 1 UID: 0 PID: 11215 Comm: syz.2.1830 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 430.862984][T11215] Tainted: [L]=SOFTLOCKUP [ 430.862990][T11215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 430.863001][T11215] Call Trace: [ 430.863009][T11215] [ 430.863017][T11215] dump_stack_lvl+0xe8/0x150 [ 430.863047][T11215] should_fail_ex+0x467/0x600 [ 430.863078][T11215] prepare_alloc_pages+0x223/0x690 [ 430.863108][T11215] __alloc_frozen_pages_noprof+0x12f/0x390 [ 430.863134][T11215] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 430.863185][T11215] ? __pfx_policy_nodemask+0x10/0x10 [ 430.863242][T11215] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 430.863267][T11215] ? rt_mutex_slowunlock+0x219/0x460 [ 430.863293][T11215] alloc_pages_mpol+0xce/0x280 [ 430.863322][T11215] alloc_pages_noprof+0xd2/0x2f0 [ 430.863350][T11215] binder_alloc_new_buf+0x1fb8/0x31f0 [ 430.863381][T11215] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 430.863392][T11215] ? __kmalloc_cache_noprof+0x3cd/0x670 [ 430.863406][T11215] ? binder_transaction+0x20b0/0x6fc0 [ 430.863423][T11215] ? binder_transaction+0x20b0/0x6fc0 [ 430.863449][T11215] binder_transaction+0x288c/0x6fc0 [ 430.863494][T11215] ? arch_stack_walk+0xfb/0x150 [ 430.863523][T11215] ? __pfx_binder_transaction+0x10/0x10 [ 430.863545][T11215] ? __lock_acquire+0x6df/0x2e40 [ 430.863560][T11215] ? __lock_acquire+0x6df/0x2e40 [ 430.863572][T11215] ? __lock_acquire+0x6df/0x2e40 [ 430.863586][T11215] ? __lock_acquire+0x6df/0x2e40 [ 430.863606][T11215] ? lock_acquire+0x115/0x350 [ 430.863643][T11215] binder_ioctl_write_read+0xe2c/0xa5d0 [ 430.863701][T11215] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 430.863719][T11215] ? stack_depot_save_flags+0x33/0x800 [ 430.863733][T11215] ? __lock_acquire+0x6df/0x2e40 [ 430.863745][T11215] ? do_raw_spin_lock+0x12b/0x2f0 [ 430.863788][T11215] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 430.863812][T11215] ? lockdep_hardirqs_on+0x7a/0x110 [ 430.863837][T11215] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 430.863860][T11215] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 430.863881][T11215] ? reacquire_held_locks+0x117/0x1a0 [ 430.863899][T11215] ? rt_spin_unlock+0x157/0x200 [ 430.863915][T11215] ? binder_get_thread+0x176/0x6d0 [ 430.863926][T11215] ? binder_ioctl+0x189/0x1b10 [ 430.863943][T11215] binder_ioctl+0x420/0x1b10 [ 430.863964][T11215] ? tomoyo_path_number_perm+0x219/0x5f0 [ 430.863989][T11215] ? tomoyo_path_number_perm+0x219/0x5f0 [ 430.864015][T11215] ? do_vfs_ioctl+0x1184/0x1550 [ 430.864035][T11215] ? __pfx_binder_ioctl+0x10/0x10 [ 430.864055][T11215] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 430.864073][T11215] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 430.864087][T11215] ? lockdep_hardirqs_on+0x7a/0x110 [ 430.864113][T11215] ? __fget_files+0x2a/0x420 [ 430.864140][T11215] ? __fget_files+0x2a/0x420 [ 430.864161][T11215] ? __fget_files+0x3a8/0x420 [ 430.864182][T11215] ? __fget_files+0x2a/0x420 [ 430.864214][T11215] ? bpf_lsm_file_ioctl+0x9/0x20 [ 430.864239][T11215] ? __pfx_binder_ioctl+0x10/0x10 [ 430.864259][T11215] __se_sys_ioctl+0xff/0x170 [ 430.864273][T11215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.864291][T11215] do_syscall_64+0x174/0x580 [ 430.864313][T11215] ? trace_irq_disable+0x3b/0x140 [ 430.864327][T11215] ? clear_bhb_loop+0x40/0x90 [ 430.864348][T11215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.864365][T11215] RIP: 0033:0x7f470f15de59 [ 430.864382][T11215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.864396][T11215] RSP: 002b:00007f470d3b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.864414][T11215] RAX: ffffffffffffffda RBX: 00007f470f3e5fa0 RCX: 00007f470f15de59 [ 430.864427][T11215] RDX: 00002000000017c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 430.864438][T11215] RBP: 00007f470d3b6090 R08: 0000000000000000 R09: 0000000000000000 [ 430.864447][T11215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.864456][T11215] R13: 00007f470f3e6038 R14: 00007f470f3e5fa0 R15: 00007ffec797e198 [ 430.864482][T11215] [ 430.977668][T11211] team0: Port device netdevsim1 removed [ 431.007392][ T5800] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 431.007434][ T5800] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 431.093134][ T5800] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 431.093447][ T5800] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 431.144567][ T5800] usb 4-1: USB disconnect, device number 2 [ 431.154397][ T5694] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 431.282745][T11211] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.365878][ T5694] usb 2-1: Using ep0 maxpacket: 16 [ 431.374138][ T5694] usb 2-1: config 0 has no interfaces? [ 431.374194][ T5694] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 431.374216][ T5694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.433021][ T5694] usb 2-1: config 0 descriptor?? [ 431.495320][T11211] : (slave netdevsim1): Enslaving as an active interface with an up link [ 431.764742][ T5694] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 431.807941][ T5800] usb 2-1: USB disconnect, device number 8 [ 431.892920][T11241] openvswitch: netlink: Actions may not be safe on all matching packets [ 431.924634][ T5694] usb 4-1: Using ep0 maxpacket: 16 [ 431.926864][ T5694] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 431.926889][ T5694] usb 4-1: config 251 has no interface number 0 [ 431.926929][ T5694] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 431.926951][ T5694] usb 4-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 431.926970][ T5694] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 431.926993][ T5694] usb 4-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 431.927014][ T5694] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.927036][ T5694] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 431.927057][ T5694] usb 4-1: config 251 interface 202 has no altsetting 0 [ 432.039645][ T5694] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 432.039676][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.039695][ T5694] usb 4-1: Product: syz [ 432.039708][ T5694] usb 4-1: Manufacturer: syz [ 432.039721][ T5694] usb 4-1: SerialNumber: syz [ 432.092368][T11222] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 432.336355][T11222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.337284][T11222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.479277][T11222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.488506][T11222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.878326][ T5800] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 432.911579][ T5694] cxacru 4-1:251.202: cxacru_bind: interface has incorrect endpoints [ 432.911739][ T5694] cxacru 4-1:251.202: usbatm_usb_probe: bind failed: -19! [ 432.944707][ T5694] usb 4-1: USB disconnect, device number 3 [ 433.024577][ T5800] usb 2-1: Using ep0 maxpacket: 16 [ 433.026493][ T5800] usb 2-1: config 0 has an invalid descriptor of length 231, skipping remainder of the config [ 433.026553][ T5800] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 433.028851][ T5800] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 433.028867][ T5800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.028877][ T5800] usb 2-1: Product: syz [ 433.028885][ T5800] usb 2-1: Manufacturer: syz [ 433.028893][ T5800] usb 2-1: SerialNumber: syz [ 433.051569][ T5800] usb 2-1: config 0 descriptor?? [ 433.429170][T11302] FAULT_INJECTION: forcing a failure. [ 433.429170][T11302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.429206][T11302] CPU: 0 UID: 0 PID: 11302 Comm: syz.2.1850 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 433.429233][T11302] Tainted: [L]=SOFTLOCKUP [ 433.429240][T11302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 433.429250][T11302] Call Trace: [ 433.429258][T11302] [ 433.429266][T11302] dump_stack_lvl+0xe8/0x150 [ 433.429291][T11302] should_fail_ex+0x467/0x600 [ 433.429318][T11302] _copy_from_iter+0x1d3/0x1660 [ 433.429354][T11302] ? __pfx__copy_from_iter+0x10/0x10 [ 433.429377][T11302] ? rcu_preempt_deferred_qs_irqrestore+0x98f/0xc10 [ 433.429411][T11302] ? skb_put+0x112/0x210 [ 433.429434][T11302] raw_send_hdrinc+0x8cc/0x1420 [ 433.429467][T11302] ? __pfx_raw_send_hdrinc+0x10/0x10 [ 433.429494][T11302] raw_sendmsg+0x136c/0x1a20 [ 433.429527][T11302] ? __pfx_raw_sendmsg+0x10/0x10 [ 433.429545][T11302] ? __lock_acquire+0x6df/0x2e40 [ 433.429591][T11302] ? sock_rps_record_flow+0x19/0x350 [ 433.429615][T11302] ? inet_sendmsg+0x298/0x320 [ 433.429637][T11302] ? __pfx_inet_sendmsg+0x10/0x10 [ 433.429656][T11302] sock_sendmsg_nosec+0x10e/0x180 [ 433.429679][T11302] ____sys_sendmsg+0x565/0x870 [ 433.429711][T11302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.429742][T11302] ? import_iovec+0x73/0xa0 [ 433.429764][T11302] ___sys_sendmsg+0x2a5/0x360 [ 433.429787][T11302] ? __lock_acquire+0x6df/0x2e40 [ 433.429808][T11302] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.429836][T11302] ? kstrtouint+0x6e/0xe0 [ 433.429877][T11302] ? __fget_files+0x2a/0x420 [ 433.429901][T11302] ? __fget_files+0x3a8/0x420 [ 433.429932][T11302] __sys_sendmmsg+0x279/0x4d0 [ 433.429961][T11302] ? __pfx___sys_sendmmsg+0x10/0x10 [ 433.429994][T11302] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 433.430036][T11302] ? ksys_write+0x248/0x270 [ 433.430056][T11302] ? __pfx_ksys_write+0x10/0x10 [ 433.430078][T11302] __x64_sys_sendmmsg+0xa0/0xc0 [ 433.430102][T11302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.430120][T11302] do_syscall_64+0x174/0x580 [ 433.430142][T11302] ? trace_irq_disable+0x3b/0x140 [ 433.430160][T11302] ? clear_bhb_loop+0x40/0x90 [ 433.430181][T11302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.430199][T11302] RIP: 0033:0x7f470f15de59 [ 433.430217][T11302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.430231][T11302] RSP: 002b:00007f470d3b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 433.430251][T11302] RAX: ffffffffffffffda RBX: 00007f470f3e5fa0 RCX: 00007f470f15de59 [ 433.430264][T11302] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000003 [ 433.430275][T11302] RBP: 00007f470d3b6090 R08: 0000000000000000 R09: 0000000000000000 [ 433.430286][T11302] R10: 0000000020044000 R11: 0000000000000246 R12: 0000000000000001 [ 433.430296][T11302] R13: 00007f470f3e6038 R14: 00007f470f3e5fa0 R15: 00007ffec797e198 [ 433.430322][T11302] [ 434.012080][ T5800] appledisplay 2-1:0.0: Could not find int-in endpoint [ 434.017525][ T5800] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 434.037500][ T5800] usb 2-1: USB disconnect, device number 9 [ 434.184593][ T5329] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 434.202670][T11322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1856'. [ 434.202729][T11322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1856'. [ 434.334517][ T5329] usb 3-1: Using ep0 maxpacket: 16 [ 434.342675][ T5329] usb 3-1: config 0 has no interfaces? [ 434.342714][ T5329] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 434.342736][ T5329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.357686][ T5329] usb 3-1: config 0 descriptor?? [ 434.509181][T11324] overlay: ./file0 is not a directory [ 434.546034][T11324] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1857'. [ 434.546069][T11324] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1857'. [ 434.546082][T11324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1857'. [ 434.677096][ T5329] usb 3-1: USB disconnect, device number 10 [ 434.734489][ T5694] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 434.885052][ T5694] usb 4-1: Using ep0 maxpacket: 32 [ 434.886961][ T5694] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 434.886987][ T5694] usb 4-1: config 0 has no interface number 0 [ 434.889186][ T5694] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 434.889213][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.889232][ T5694] usb 4-1: Product: syz [ 434.889245][ T5694] usb 4-1: Manufacturer: syz [ 434.889257][ T5694] usb 4-1: SerialNumber: syz [ 434.894882][ T5694] usb 4-1: config 0 descriptor?? [ 434.911142][ T5694] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 434.911228][ T5694] usb 4-1: selecting invalid altsetting 1 [ 434.911244][ T5694] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 434.927010][ T5694] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 434.927648][ T5694] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 434.927703][ T5694] usb 4-1: media controller created [ 434.960861][ T5694] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 435.343185][ T5694] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 435.455319][ T5694] usb 4-1: USB disconnect, device number 4 [ 435.656608][T11356] Attempt to restore checkpoint with obsolete wellknown handles [ 435.656643][T11356] FAULT_INJECTION: forcing a failure. [ 435.656643][T11356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.656671][T11356] CPU: 1 UID: 0 PID: 11356 Comm: syz.0.1866 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 435.656695][T11356] Tainted: [L]=SOFTLOCKUP [ 435.656701][T11356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 435.656711][T11356] Call Trace: [ 435.656719][T11356] [ 435.656727][T11356] dump_stack_lvl+0xe8/0x150 [ 435.656754][T11356] should_fail_ex+0x467/0x600 [ 435.656784][T11356] _copy_to_user+0x31/0xb0 [ 435.656805][T11356] simple_read_from_buffer+0xe1/0x170 [ 435.656834][T11356] proc_fail_nth_read+0x1be/0x230 [ 435.656871][T11356] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 435.656899][T11356] ? rw_verify_area+0x250/0x4d0 [ 435.656926][T11356] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 435.656949][T11356] vfs_read+0x219/0xa90 [ 435.656991][T11356] ? __pfx_vfs_read+0x10/0x10 [ 435.657010][T11356] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 435.657033][T11356] ? lockdep_hardirqs_on+0x7a/0x110 [ 435.657059][T11356] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 435.657081][T11356] ? mutex_lock_nested+0x152/0x1d0 [ 435.657099][T11356] ? fdget_pos+0x252/0x320 [ 435.657131][T11356] ksys_read+0x156/0x270 [ 435.657150][T11356] ? __pfx_ksys_read+0x10/0x10 [ 435.657166][T11356] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 435.657197][T11356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.657216][T11356] do_syscall_64+0x174/0x580 [ 435.657239][T11356] ? trace_irq_disable+0x3b/0x140 [ 435.657256][T11356] ? clear_bhb_loop+0x40/0x90 [ 435.657276][T11356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.657293][T11356] RIP: 0033:0x7f576f5be68e [ 435.657309][T11356] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 435.657324][T11356] RSP: 002b:00007f576d855fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 435.657343][T11356] RAX: ffffffffffffffda RBX: 00007f576d8566c0 RCX: 00007f576f5be68e [ 435.657356][T11356] RDX: 000000000000000f RSI: 00007f576d8560a0 RDI: 0000000000000004 [ 435.657367][T11356] RBP: 00007f576d856090 R08: 0000000000000000 R09: 0000000000000000 [ 435.657378][T11356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.657389][T11356] R13: 00007f576f886038 R14: 00007f576f885fa0 R15: 00007ffff78a5d38 [ 435.657418][T11356] [ 436.097767][ T5694] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 436.236048][ T5329] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 436.258603][ T5694] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 436.258620][ T5694] usb 2-1: config 1 has no interface number 0 [ 436.258670][ T5694] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 32 [ 436.258691][ T5694] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 16 [ 436.297455][ T5694] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 436.297473][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.297483][ T5694] usb 2-1: Product: syz [ 436.297490][ T5694] usb 2-1: Manufacturer: syz [ 436.297497][ T5694] usb 2-1: SerialNumber: syz [ 436.302355][T11360] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 436.302527][T11360] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 436.384650][ T5329] usb 1-1: Using ep0 maxpacket: 16 [ 436.391992][ T5329] usb 1-1: config 0 has no interfaces? [ 436.392030][ T5329] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 436.392050][ T5329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.397804][ T5329] usb 1-1: config 0 descriptor?? [ 436.424464][ T7130] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 436.507826][T11360] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 436.508084][T11360] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 436.512276][ T5694] usb 2-1: No status endpoint found [ 436.646087][ T7130] usb 3-1: Using ep0 maxpacket: 8 [ 436.668490][ T7130] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 436.668520][ T7130] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 436.668538][ T7130] usb 3-1: Product: syz [ 436.668551][ T7130] usb 3-1: Manufacturer: syz [ 436.668564][ T7130] usb 3-1: SerialNumber: syz [ 436.712964][ T7130] usb 3-1: config 0 descriptor?? [ 436.721373][ T5694] usb 2-1: USB disconnect, device number 10 [ 436.735702][ T7130] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 436.787022][ T822] usb 1-1: USB disconnect, device number 9 [ 436.960787][ T7130] gspca_sn9c2028: read1 error -71 [ 436.962749][ T7130] gspca_sn9c2028: read1 error -71 [ 436.963095][ T7130] gspca_sn9c2028: read1 error -71 [ 436.963163][ T7130] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -71 [ 436.972425][ T7130] usb 3-1: USB disconnect, device number 11 [ 437.570165][T11409] sctp: [Deprecated]: syz.2.1885 (pid 11409) Use of int in maxseg socket option. [ 437.570165][T11409] Use struct sctp_assoc_value instead [ 437.704598][ T5694] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 437.739582][T11424] FAULT_INJECTION: forcing a failure. [ 437.739582][T11424] name failslab, interval 1, probability 0, space 0, times 0 [ 437.739616][T11424] CPU: 0 UID: 0 PID: 11424 Comm: syz.2.1888 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 437.739641][T11424] Tainted: [L]=SOFTLOCKUP [ 437.739648][T11424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 437.739658][T11424] Call Trace: [ 437.739666][T11424] [ 437.739674][T11424] dump_stack_lvl+0xe8/0x150 [ 437.739703][T11424] should_fail_ex+0x467/0x600 [ 437.739733][T11424] should_failslab+0xa8/0x100 [ 437.739760][T11424] __kmalloc_noprof+0xfb/0x790 [ 437.739784][T11424] ? tomoyo_encode+0x2ad/0x570 [ 437.739801][T11424] ? tomoyo_encode+0x2ad/0x570 [ 437.739825][T11424] tomoyo_encode+0x2ad/0x570 [ 437.739847][T11424] tomoyo_realpath_from_path+0x5fa/0x640 [ 437.739875][T11424] ? tomoyo_path_number_perm+0x219/0x5f0 [ 437.739900][T11424] tomoyo_path_number_perm+0x246/0x5f0 [ 437.739927][T11424] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 437.739954][T11424] ? __lock_acquire+0x6df/0x2e40 [ 437.739986][T11424] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 437.740011][T11424] ? lockdep_hardirqs_on+0x7a/0x110 [ 437.740050][T11424] ? __fget_files+0x2a/0x420 [ 437.740077][T11424] ? __fget_files+0x2a/0x420 [ 437.740099][T11424] ? __fget_files+0x3a8/0x420 [ 437.740121][T11424] ? __fget_files+0x2a/0x420 [ 437.740148][T11424] security_file_ioctl+0xb9/0x260 [ 437.740174][T11424] __se_sys_ioctl+0x47/0x170 [ 437.740194][T11424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.740214][T11424] do_syscall_64+0x174/0x580 [ 437.740236][T11424] ? trace_irq_disable+0x3b/0x140 [ 437.740253][T11424] ? clear_bhb_loop+0x40/0x90 [ 437.740275][T11424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.740293][T11424] RIP: 0033:0x7f470f15de59 [ 437.740310][T11424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.740325][T11424] RSP: 002b:00007f470d3b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 437.740344][T11424] RAX: ffffffffffffffda RBX: 00007f470f3e5fa0 RCX: 00007f470f15de59 [ 437.740357][T11424] RDX: 0000000000000000 RSI: 00000000c0089364 RDI: 0000000000000003 [ 437.740370][T11424] RBP: 00007f470d3b6090 R08: 0000000000000000 R09: 0000000000000000 [ 437.740382][T11424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.740393][T11424] R13: 00007f470f3e6038 R14: 00007f470f3e5fa0 R15: 00007ffec797e198 [ 437.740422][T11424] [ 437.740440][T11424] ERROR: Out of memory at tomoyo_realpath_from_path. [ 437.834509][ T5694] usb 2-1: device descriptor read/64, error -71 [ 438.076399][ T5694] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 438.216325][ T5694] usb 2-1: device descriptor read/64, error -71 [ 438.290632][T11442] hpfs: Bad magic ... probably not HPFS [ 438.326139][ T5694] usb usb2-port1: attempt power cycle [ 438.678968][ T5694] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 438.697630][ T5694] usb 2-1: device descriptor read/8, error -71 [ 438.713567][T11463] autofs: Bad value for 'fd' [ 438.954516][ T5694] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 438.975015][ T5694] usb 2-1: device descriptor read/8, error -71 [ 439.024631][ T5767] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 439.044506][ T5329] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 439.085080][ T5694] usb usb2-port1: unable to enumerate USB device [ 439.174791][ T5329] usb 3-1: device descriptor read/64, error -71 [ 439.179542][ T5767] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 439.179573][ T5767] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 439.179597][ T5767] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 439.184115][ T5767] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 439.184143][ T5767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.184160][ T5767] usb 4-1: Product: syz [ 439.184173][ T5767] usb 4-1: Manufacturer: syz [ 439.184186][ T5767] usb 4-1: SerialNumber: syz [ 439.272094][ T5767] usb 4-1: config 0 descriptor?? [ 439.273230][T11471] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 439.365333][ T5767] rc_core: IR keymap rc-streamzap not found [ 439.365354][ T5767] Registered IR keymap rc-empty [ 439.368123][ T5767] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 439.371777][ T5767] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input29 [ 439.414583][ T5329] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 439.521706][T11471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.522261][T11471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.544906][ T5329] usb 3-1: device descriptor read/64, error -71 [ 439.625307][ T5694] usb 4-1: USB disconnect, device number 5 [ 439.654993][ T5329] usb usb3-port1: attempt power cycle [ 439.994576][ T5329] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 440.016680][ T5329] usb 3-1: device descriptor read/8, error -71 [ 440.193275][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.193380][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.230223][ T1342] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 440.294743][ T5329] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 440.315405][ T5329] usb 3-1: device descriptor read/8, error -71 [ 440.424949][ T5329] usb usb3-port1: unable to enumerate USB device [ 440.594776][ T5694] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 440.764489][ T5694] usb 1-1: Using ep0 maxpacket: 32 [ 440.768037][ T5694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.768059][ T5694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.768081][ T5694] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 440.768093][ T5694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.773374][ T5694] usb 1-1: config 0 descriptor?? [ 440.789825][ T5694] hub 1-1:0.0: USB hub found [ 440.974508][ T5767] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 441.094898][ T5694] hub 1-1:0.0: 1 port detected [ 441.228888][ T5767] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 441.228918][ T5767] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.266570][ T5694] usb 1-1: USB disconnect, device number 10 [ 441.280776][ T5767] usb 2-1: config 0 descriptor?? [ 441.349450][ T5767] cp210x 2-1:0.0: cp210x converter detected [ 441.519402][T11499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.556276][T11499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.612928][ T5767] usb 2-1: cp210x converter now attached to ttyUSB0 [ 441.803974][T11499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.813876][T11499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.825158][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1910'. [ 441.844628][ T5329] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 441.939688][ T7130] usb 2-1: USB disconnect, device number 15 [ 441.947979][ T7130] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 441.948873][ T7130] cp210x 2-1:0.0: device disconnected [ 441.994443][ T5329] usb 4-1: Using ep0 maxpacket: 32 [ 442.001330][ T5329] usb 4-1: unable to get BOS descriptor or descriptor too short [ 442.001417][ T5329] usb 4-1: too many configurations: 32, using maximum allowed: 8 [ 442.010035][ T5329] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 442.010070][ T5329] usb 4-1: can't read configurations, error -61 [ 442.034690][ T5694] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 442.184764][ T5694] usb 1-1: Using ep0 maxpacket: 32 [ 442.192020][ T5694] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.192050][ T5694] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 442.197585][ T5329] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 442.223000][ T5694] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 442.223024][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.223034][ T5694] usb 1-1: Product: syz [ 442.223041][ T5694] usb 1-1: Manufacturer: syz [ 442.223048][ T5694] usb 1-1: SerialNumber: syz [ 442.236154][ T5694] usb 1-1: config 0 descriptor?? [ 442.364563][ T5329] usb 4-1: Using ep0 maxpacket: 32 [ 442.366868][ T5329] usb 4-1: unable to get BOS descriptor or descriptor too short [ 442.366950][ T5329] usb 4-1: too many configurations: 32, using maximum allowed: 8 [ 442.368547][ T5329] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 442.368578][ T5329] usb 4-1: can't read configurations, error -61 [ 442.368982][ T5329] usb usb4-port1: attempt power cycle [ 442.593309][ T38] audit: type=1326 audit(1783158903.614:8): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11528 comm="syz.2.1921" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f470f15de59 code=0x0 [ 442.619025][T11531] FAULT_INJECTION: forcing a failure. [ 442.619025][T11531] name failslab, interval 1, probability 0, space 0, times 0 [ 442.619048][T11531] CPU: 0 UID: 0 PID: 11531 Comm: syz.1.1922 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 442.619062][T11531] Tainted: [L]=SOFTLOCKUP [ 442.619066][T11531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 442.619072][T11531] Call Trace: [ 442.619076][T11531] [ 442.619081][T11531] dump_stack_lvl+0xe8/0x150 [ 442.619097][T11531] should_fail_ex+0x467/0x600 [ 442.619115][T11531] should_failslab+0xa8/0x100 [ 442.619131][T11531] ? skb_clone+0x212/0x3a0 [ 442.619145][T11531] kmem_cache_alloc_noprof+0x9e/0x680 [ 442.619173][T11531] ? skb_clone+0x212/0x3a0 [ 442.619190][T11531] skb_clone+0x212/0x3a0 [ 442.619206][T11531] __netlink_deliver_tap+0x410/0x880 [ 442.619225][T11531] ? netlink_deliver_tap+0x2e/0x1b0 [ 442.619240][T11531] netlink_deliver_tap+0x19c/0x1b0 [ 442.619255][T11531] netlink_unicast+0x7b8/0x990 [ 442.619273][T11531] netlink_sendmsg+0x813/0xb40 [ 442.619291][T11531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.619306][T11531] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 442.619319][T11531] ? __kernel_text_address+0xd/0x30 [ 442.619334][T11531] ? unwind_get_return_address+0x4d/0x90 [ 442.619346][T11531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.619359][T11531] sock_sendmsg_nosec+0x13a/0x180 [ 442.619372][T11531] ____sys_sendmsg+0x565/0x870 [ 442.619390][T11531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 442.619409][T11531] ? import_iovec+0x73/0xa0 [ 442.619422][T11531] ___sys_sendmsg+0x2a5/0x360 [ 442.619435][T11531] ? __lock_acquire+0x6df/0x2e40 [ 442.619447][T11531] ? __pfx____sys_sendmsg+0x10/0x10 [ 442.619477][T11531] ? __fget_files+0x2a/0x420 [ 442.619491][T11531] ? __fget_files+0x3a8/0x420 [ 442.619509][T11531] __x64_sys_sendmsg+0x1b7/0x290 [ 442.619525][T11531] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 442.619547][T11531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.619558][T11531] do_syscall_64+0x174/0x580 [ 442.619572][T11531] ? trace_irq_disable+0x3b/0x140 [ 442.619582][T11531] ? clear_bhb_loop+0x40/0x90 [ 442.619599][T11531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.619609][T11531] RIP: 0033:0x7fa6b268de59 [ 442.619619][T11531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.619632][T11531] RSP: 002b:00007fa6b08e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.619643][T11531] RAX: ffffffffffffffda RBX: 00007fa6b2915fa0 RCX: 00007fa6b268de59 [ 442.619651][T11531] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 442.619657][T11531] RBP: 00007fa6b08e6090 R08: 0000000000000000 R09: 0000000000000000 [ 442.619663][T11531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.619669][T11531] R13: 00007fa6b2916038 R14: 00007fa6b2915fa0 R15: 00007ffc75079a28 [ 442.619684][T11531] [ 442.779669][ T5329] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 442.929813][ T5329] usb 4-1: Using ep0 maxpacket: 32 [ 442.933837][ T5329] usb 4-1: unable to get BOS descriptor or descriptor too short [ 442.933961][ T5329] usb 4-1: too many configurations: 32, using maximum allowed: 8 [ 442.956630][ T5329] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 442.956651][ T5329] usb 4-1: can't read configurations, error -61 [ 443.094513][ T5329] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 443.116695][ T5329] usb 4-1: Using ep0 maxpacket: 32 [ 443.118744][ T5329] usb 4-1: unable to get BOS descriptor or descriptor too short [ 443.118826][ T5329] usb 4-1: too many configurations: 32, using maximum allowed: 8 [ 443.121286][ T5329] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 443.121319][ T5329] usb 4-1: can't read configurations, error -61 [ 443.121674][ T5329] usb usb4-port1: unable to enumerate USB device [ 443.740070][T11546] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 443.799151][T11546] kvm: emulating exchange as write [ 444.775599][T11575] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 444.792647][ T7130] usb 1-1: USB disconnect, device number 11 [ 444.903915][T11573] could not allocate digest TFM handle hmac(sha1-neon) [ 445.101732][T11587] tmpfs: Unknown parameter 'mpol$prefer' [ 445.289002][ T5606] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 445.289039][ T5606] Bluetooth: hci3: Dropping invalid advertising data [ 445.289057][ T5606] Bluetooth: hci3: Malformed LE Event: 0x02 [ 445.345122][T11595] input input30: cannot allocate more than FF_MAX_EFFECTS effects [ 445.973341][T11611] netlink: 'syz.1.1947': attribute type 10 has an invalid length. [ 446.007691][T11611] veth1_macvtap: left promiscuous mode [ 446.144473][ T7130] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 446.374419][ T7130] usb 1-1: Using ep0 maxpacket: 32 [ 446.409325][ T7130] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.409353][ T7130] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 446.450410][ T7130] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 446.450598][ T7130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.450618][ T7130] usb 1-1: Product: syz [ 446.450629][ T7130] usb 1-1: Manufacturer: syz [ 446.450642][ T7130] usb 1-1: SerialNumber: syz [ 446.501612][ T7130] usb 1-1: config 0 descriptor?? [ 446.810621][T11629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1952'. [ 446.829629][T11629] random: crng reseeded on system resumption [ 447.063291][ T5606] Bluetooth: hci2: unknown advertising packet type: 0x65 [ 447.063309][ T5606] Bluetooth: hci2: Dropping invalid advertising data [ 447.063319][ T5606] Bluetooth: hci2: Malformed LE Event: 0x02 [ 447.090685][T11632] input input31: cannot allocate more than FF_MAX_EFFECTS effects [ 447.308893][ T7130] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 447.524494][ T7130] usb 3-1: Using ep0 maxpacket: 8 [ 447.526583][ T7130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 447.526626][ T7130] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 447.526647][ T7130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.531707][ T7130] usb 3-1: config 0 descriptor?? [ 447.766485][ T7130] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 448.072423][T11655] kvm: pic: single mode not supported [ 448.081304][ T5329] usb 3-1: USB disconnect, device number 16 [ 448.375996][ T5606] Bluetooth: hci2: unknown advertising packet type: 0x65 [ 448.376023][ T5606] Bluetooth: hci2: Dropping invalid advertising data [ 448.376040][ T5606] Bluetooth: hci2: Malformed LE Event: 0x02 [ 448.504490][ T5329] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 448.593575][T11673] befs: (nbd1): No write support. Marking filesystem read-only [ 448.608977][T11673] befs: (nbd1): unable to read superblock [ 448.610266][T11674] fuse: Bad value for 'fd' [ 448.670119][ T5329] usb 3-1: Using ep0 maxpacket: 16 [ 448.682522][ T5329] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 448.682551][ T5329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.682569][ T5329] usb 3-1: Product: syz [ 448.682582][ T5329] usb 3-1: Manufacturer: syz [ 448.682595][ T5329] usb 3-1: SerialNumber: syz [ 448.691309][ T5329] usb 3-1: config 0 descriptor?? [ 448.701640][ T5329] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 448.897014][ T5329] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 448.926229][ T5329] usb 3-1: USB disconnect, device number 17 [ 448.988718][ T5800] usb 1-1: USB disconnect, device number 12 [ 449.644594][ T5800] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 449.776564][ T822] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 449.796272][ T5800] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 449.796300][ T5800] usb 1-1: config 0 has no interface number 0 [ 449.796342][ T5800] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 449.798495][ T5800] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 449.798523][ T5800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.798541][ T5800] usb 1-1: Product: syz [ 449.798553][ T5800] usb 1-1: Manufacturer: syz [ 449.798566][ T5800] usb 1-1: SerialNumber: syz [ 449.801426][ T5800] usb 1-1: config 0 descriptor?? [ 449.803018][T11682] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 449.914550][ T822] usb 2-1: device descriptor read/64, error -71 [ 449.953682][ T5800] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 6a:52:31:00:09:b1 [ 450.058776][ T7130] usb 1-1: USB disconnect, device number 13 [ 450.062946][ T7130] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 450.154461][ T822] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 450.310543][ T822] usb 2-1: device descriptor read/64, error -71 [ 450.415935][ T822] usb usb2-port1: attempt power cycle [ 450.778875][ T822] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 450.799914][ T822] usb 2-1: device descriptor read/8, error -71 [ 451.044945][ T822] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 451.069982][ T822] usb 2-1: device descriptor read/8, error -71 [ 451.226034][ T7130] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 451.226958][ T822] usb usb2-port1: unable to enumerate USB device [ 451.445136][ T7130] usb 1-1: Using ep0 maxpacket: 32 [ 451.454656][ T7130] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.454680][ T7130] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 451.467021][ T7130] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 451.467050][ T7130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.467068][ T7130] usb 1-1: Product: syz [ 451.467081][ T7130] usb 1-1: Manufacturer: syz [ 451.467093][ T7130] usb 1-1: SerialNumber: syz [ 451.478659][ T7130] usb 1-1: config 0 descriptor?? [ 452.370249][T11765] befs: (nbd2): No write support. Marking filesystem read-only [ 452.370475][T11765] befs: (nbd2): unable to read superblock [ 453.336310][T11801] netlink: 42496 bytes leftover after parsing attributes in process `syz.2.2000'. [ 453.414695][ T5329] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 453.567073][ T5329] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 453.567104][ T5329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.571132][ T5329] usb 2-1: config 0 descriptor?? [ 453.607242][ T5329] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 453.841266][ T822] usb 1-1: USB disconnect, device number 14 [ 454.238029][ T822] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 454.358757][T11824] tmpfs: Unsupported parameter 'huge' [ 454.399234][ T822] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 454.399260][ T822] usb 1-1: config 1 has no interface number 0 [ 454.399311][ T822] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 32 [ 454.399334][ T822] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 16 [ 454.441628][ T822] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 454.441656][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.441674][ T822] usb 1-1: Product: syz [ 454.441687][ T822] usb 1-1: Manufacturer: syz [ 454.441699][ T822] usb 1-1: SerialNumber: syz [ 454.477983][T11812] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 454.478095][T11812] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 454.501074][ T5329] usb 2-1: USB disconnect, device number 20 [ 454.657263][T11827] FAULT_INJECTION: forcing a failure. [ 454.657263][T11827] name failslab, interval 1, probability 0, space 0, times 0 [ 454.657299][T11827] CPU: 1 UID: 0 PID: 11827 Comm: syz.3.2006 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 454.657314][T11827] Tainted: [L]=SOFTLOCKUP [ 454.657318][T11827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 454.657324][T11827] Call Trace: [ 454.657329][T11827] [ 454.657334][T11827] dump_stack_lvl+0xe8/0x150 [ 454.657353][T11827] should_fail_ex+0x467/0x600 [ 454.657371][T11827] should_failslab+0xa8/0x100 [ 454.657387][T11827] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 454.657402][T11827] kmem_cache_alloc_noprof+0x9e/0x680 [ 454.657415][T11827] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 454.657428][T11827] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 454.657444][T11827] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 454.657463][T11827] mmu_topup_memory_caches+0x21/0x170 [ 454.657480][T11827] kvm_mmu_load+0x9d/0x22b0 [ 454.657488][T11827] ? kvm_msr_allowed+0x9a/0x490 [ 454.657503][T11827] ? kvm_msr_allowed+0x9a/0x490 [ 454.657517][T11827] ? kvm_msr_allowed+0x9a/0x490 [ 454.657530][T11827] ? kvm_msr_allowed+0x3f4/0x490 [ 454.657544][T11827] ? kvm_msr_allowed+0x9a/0x490 [ 454.657557][T11827] ? kvm_apic_has_interrupt+0x740/0x770 [ 454.657574][T11827] vcpu_run+0x4c13/0x73e0 [ 454.657588][T11827] ? __pfx_kvm_arch_vcpu_load+0x10/0x10 [ 454.657617][T11827] ? __lock_acquire+0x6df/0x2e40 [ 454.657638][T11827] ? __pfx_vcpu_run+0x10/0x10 [ 454.657651][T11827] ? lock_acquire+0x115/0x350 [ 454.657668][T11827] kvm_arch_vcpu_ioctl_run+0xe51/0x1960 [ 454.657684][T11827] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1960 [ 454.657702][T11827] kvm_vcpu_ioctl+0xa64/0xfe0 [ 454.657720][T11827] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 454.657734][T11827] ? lockdep_hardirqs_on+0x7a/0x110 [ 454.657758][T11827] ? __fget_files+0x2a/0x420 [ 454.657773][T11827] ? __fget_files+0x2a/0x420 [ 454.657788][T11827] ? __fget_files+0x3a8/0x420 [ 454.657802][T11827] ? __fget_files+0x2a/0x420 [ 454.657817][T11827] ? bpf_lsm_file_ioctl+0x9/0x20 [ 454.657833][T11827] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 454.657848][T11827] __se_sys_ioctl+0xff/0x170 [ 454.657859][T11827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.657870][T11827] do_syscall_64+0x174/0x580 [ 454.657885][T11827] ? clear_bhb_loop+0x40/0x90 [ 454.657898][T11827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.657908][T11827] RIP: 0033:0x7fe01b69de59 [ 454.657919][T11827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.657928][T11827] RSP: 002b:00007fe0198d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 454.657939][T11827] RAX: ffffffffffffffda RBX: 00007fe01b926090 RCX: 00007fe01b69de59 [ 454.657947][T11827] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 454.657953][T11827] RBP: 00007fe0198d5090 R08: 0000000000000000 R09: 0000000000000000 [ 454.657959][T11827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.657965][T11827] R13: 00007fe01b926128 R14: 00007fe01b926090 R15: 00007ffec3217908 [ 454.657989][T11827] [ 454.716097][T11812] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 454.716267][T11812] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 454.725276][ T822] usb 1-1: No status endpoint found [ 454.963245][ T7130] usb 1-1: USB disconnect, device number 15 [ 455.135973][ T822] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 455.146549][ T5329] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 455.307440][ T5329] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 455.307470][ T5329] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.307497][ T5329] usb 2-1: config 0 has no interface number 0 [ 455.308246][ T822] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.308269][ T822] usb 3-1: config 0 has no interfaces? [ 455.310719][ T5329] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 455.310748][ T5329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.310767][ T5329] usb 2-1: Product: syz [ 455.310781][ T5329] usb 2-1: Manufacturer: syz [ 455.310795][ T5329] usb 2-1: SerialNumber: syz [ 455.312633][ T822] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 455.312660][ T822] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 455.312678][ T822] usb 3-1: Product: syz [ 455.312692][ T822] usb 3-1: SerialNumber: syz [ 455.321334][ T822] usb 3-1: config 0 descriptor?? [ 455.431045][ T5329] usb 2-1: config 0 descriptor?? [ 455.434058][ T5329] hub 2-1:0.31: bad descriptor, ignoring hub [ 455.434094][ T5329] hub 2-1:0.31: probe with driver hub failed with error -5 [ 455.454945][ T5329] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 455.455078][ T5329] uvcvideo 2-1:0.31: Entity type for entity Output 32774 was not initialized! [ 455.455723][ T5329] uvcvideo 2-1:0.31: Failed to create links for entity 32774 [ 455.455735][ T5329] uvcvideo 2-1:0.31: Failed to register entities (-22). [ 455.625952][ T7130] usb 3-1: USB disconnect, device number 18 [ 455.750269][ T5800] IPVS: starting estimator thread 0... [ 455.785810][ T822] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 455.855328][T11841] IPVS: using max 15 ests per chain, 36000 per kthread [ 455.946819][ T822] usb 4-1: Using ep0 maxpacket: 8 [ 455.946962][ T5800] usb 2-1: USB disconnect, device number 21 [ 455.949159][ T822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.949210][ T822] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 455.949230][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.959191][ T822] usb 4-1: config 0 descriptor?? [ 455.973122][ T822] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 456.169024][ T822] gspca_vc032x: reg_r err -71 [ 456.169113][ T822] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 456.181794][ T822] usb 4-1: USB disconnect, device number 10 [ 456.373747][T11851] FAULT_INJECTION: forcing a failure. [ 456.373747][T11851] name failslab, interval 1, probability 0, space 0, times 0 [ 456.373770][T11851] CPU: 1 UID: 0 PID: 11851 Comm: syz.1.2017 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 456.373785][T11851] Tainted: [L]=SOFTLOCKUP [ 456.373789][T11851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 456.373795][T11851] Call Trace: [ 456.373800][T11851] [ 456.373805][T11851] dump_stack_lvl+0xe8/0x150 [ 456.373821][T11851] should_fail_ex+0x467/0x600 [ 456.373839][T11851] should_failslab+0xa8/0x100 [ 456.373854][T11851] ? skb_clone+0x212/0x3a0 [ 456.373870][T11851] kmem_cache_alloc_noprof+0x9e/0x680 [ 456.373884][T11851] ? skb_clone+0x212/0x3a0 [ 456.373901][T11851] skb_clone+0x212/0x3a0 [ 456.373916][T11851] __netlink_deliver_tap+0x410/0x880 [ 456.373936][T11851] ? netlink_deliver_tap+0x2e/0x1b0 [ 456.373951][T11851] netlink_deliver_tap+0x19c/0x1b0 [ 456.373966][T11851] netlink_sendskb+0x68/0x140 [ 456.373980][T11851] netlink_rcv_skb+0x2a4/0x4a0 [ 456.373994][T11851] ? __pfx_genl_rcv_msg+0x10/0x10 [ 456.374007][T11851] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 456.374032][T11851] genl_rcv+0x28/0x40 [ 456.374042][T11851] netlink_unicast+0x7f5/0x990 [ 456.374060][T11851] netlink_sendmsg+0x813/0xb40 [ 456.374086][T11851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.374102][T11851] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 456.374115][T11851] ? __kernel_text_address+0xd/0x30 [ 456.374130][T11851] ? unwind_get_return_address+0x4d/0x90 [ 456.374142][T11851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.374156][T11851] sock_sendmsg_nosec+0x13a/0x180 [ 456.374168][T11851] ____sys_sendmsg+0x565/0x870 [ 456.374187][T11851] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.374206][T11851] ? import_iovec+0x73/0xa0 [ 456.374219][T11851] ___sys_sendmsg+0x2a5/0x360 [ 456.374233][T11851] ? __lock_acquire+0x6df/0x2e40 [ 456.374244][T11851] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.374276][T11851] ? __fget_files+0x2a/0x420 [ 456.374297][T11851] ? __fget_files+0x3a8/0x420 [ 456.374326][T11851] __x64_sys_sendmsg+0x1b7/0x290 [ 456.374350][T11851] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.374386][T11851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.374405][T11851] do_syscall_64+0x174/0x580 [ 456.374426][T11851] ? trace_irq_disable+0x3b/0x140 [ 456.374443][T11851] ? clear_bhb_loop+0x40/0x90 [ 456.374464][T11851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.374476][T11851] RIP: 0033:0x7fa6b268de59 [ 456.374487][T11851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.374495][T11851] RSP: 002b:00007fa6b08e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.374507][T11851] RAX: ffffffffffffffda RBX: 00007fa6b2915fa0 RCX: 00007fa6b268de59 [ 456.374515][T11851] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 456.374522][T11851] RBP: 00007fa6b08e6090 R08: 0000000000000000 R09: 0000000000000000 [ 456.374528][T11851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.374534][T11851] R13: 00007fa6b2916038 R14: 00007fa6b2915fa0 R15: 00007ffc75079a28 [ 456.374550][T11851] [ 456.374828][ T7130] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 456.504825][ T5800] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 456.510075][T11855] openvswitch: netlink: VXLAN extension 54 out of range max 1 [ 456.519399][T11855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 456.535001][ T7130] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.535064][ T7130] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 456.535086][ T7130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.543847][ T7130] usb 1-1: config 0 descriptor?? [ 456.569094][ T7130] pwc: Askey VC010 type 2 USB webcam detected. [ 456.813430][ T5800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.813460][ T5800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.813495][ T5800] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 456.813517][ T5800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.820186][T11857] binder: 11856:11857 ioctl c018620b 0 returned -14 [ 456.873130][ T5800] usb 3-1: config 0 descriptor?? [ 456.996254][ T7130] pwc: recv_control_msg error -32 req 02 val 2b00 [ 456.997478][ T7130] pwc: recv_control_msg error -32 req 02 val 2700 [ 456.998781][ T7130] pwc: recv_control_msg error -32 req 02 val 2c00 [ 457.026765][ T7130] pwc: recv_control_msg error -32 req 04 val 1000 [ 457.027432][ T7130] pwc: recv_control_msg error -32 req 04 val 1300 [ 457.028266][ T7130] pwc: recv_control_msg error -32 req 04 val 1400 [ 457.029119][ T7130] pwc: recv_control_msg error -32 req 02 val 2000 [ 457.029770][ T7130] pwc: recv_control_msg error -32 req 02 val 2100 [ 457.030829][ T7130] pwc: recv_control_msg error -32 req 04 val 1500 [ 457.031611][ T7130] pwc: recv_control_msg error -32 req 02 val 2500 [ 457.032234][ T7130] pwc: recv_control_msg error -32 req 02 val 2400 [ 457.091392][ T5800] hid_parser_main: 428 callbacks suppressed [ 457.091497][ T5800] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 457.091524][ T5800] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 457.091547][ T5800] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 457.091569][ T5800] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 457.091592][ T5800] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 457.091614][ T5800] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 457.091655][ T5800] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 457.151894][ T5800] pyra 0003:1E7D:2CF6.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 457.242098][ T7130] pwc: recv_control_msg error -71 req 02 val 2900 [ 457.242538][ T7130] pwc: recv_control_msg error -71 req 02 val 2800 [ 457.243085][ T7130] pwc: recv_control_msg error -71 req 04 val 1100 [ 457.243480][ T7130] pwc: recv_control_msg error -71 req 04 val 1200 [ 457.307235][ T5606] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 457.307264][ T5606] Bluetooth: hci3: Dropping invalid advertising data [ 457.307281][ T5606] Bluetooth: hci3: Malformed LE Event: 0x02 [ 457.493157][ T7130] pwc: Registered as video103. [ 457.502754][ T7130] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input34 [ 457.519433][ T7130] usb 1-1: USB disconnect, device number 16 [ 457.688206][ T822] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 457.839022][ T822] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 457.839053][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.839071][ T822] usb 2-1: Product: syz [ 457.839083][ T822] usb 2-1: Manufacturer: syz [ 457.839097][ T822] usb 2-1: SerialNumber: syz [ 457.845282][ T822] usb 2-1: config 0 descriptor?? [ 457.934489][ T5329] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 458.099202][ T822] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 458.099231][ T822] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 458.121822][ T5329] usb 4-1: Using ep0 maxpacket: 16 [ 458.132155][ T5329] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 458.132239][ T5329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.210163][ T5329] usb 4-1: config 0 descriptor?? [ 458.337968][ T5800] pyra 0003:1E7D:2CF6.0016: couldn't init struct pyra_device [ 458.338073][ T5800] pyra 0003:1E7D:2CF6.0016: couldn't install mouse [ 458.413249][ T822] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 458.429458][ T5800] pyra 0003:1E7D:2CF6.0016: probe with driver pyra failed with error -71 [ 458.435954][ T822] usb 2-1: USB disconnect, device number 22 [ 458.476087][ T5800] usb 3-1: USB disconnect, device number 19 [ 458.525977][T11883] FAULT_INJECTION: forcing a failure. [ 458.525977][T11883] name failslab, interval 1, probability 0, space 0, times 0 [ 458.526012][T11883] CPU: 1 UID: 0 PID: 11883 Comm: syz.0.2028 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 458.526046][T11883] Tainted: [L]=SOFTLOCKUP [ 458.526053][T11883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 458.526064][T11883] Call Trace: [ 458.526071][T11883] [ 458.526079][T11883] dump_stack_lvl+0xe8/0x150 [ 458.526108][T11883] should_fail_ex+0x467/0x600 [ 458.526137][T11883] should_failslab+0xa8/0x100 [ 458.526163][T11883] __kvmalloc_node_noprof+0x176/0x880 [ 458.526191][T11883] ? proc_sys_call_handler+0x3d1/0x830 [ 458.526209][T11883] ? proc_sys_call_handler+0x3d1/0x830 [ 458.526234][T11883] proc_sys_call_handler+0x3d1/0x830 [ 458.526258][T11883] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 458.526285][T11883] vfs_write+0x61e/0xbb0 [ 458.526312][T11883] ? __pfx_vfs_write+0x10/0x10 [ 458.526332][T11883] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 458.526358][T11883] ? lockdep_hardirqs_on+0x7a/0x110 [ 458.526384][T11883] ? mutex_lock_nested+0x152/0x1d0 [ 458.526402][T11883] ? fdget_pos+0x252/0x320 [ 458.526436][T11883] ksys_write+0x156/0x270 [ 458.526456][T11883] ? __pfx_ksys_write+0x10/0x10 [ 458.526482][T11883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.526501][T11883] do_syscall_64+0x174/0x580 [ 458.526526][T11883] ? trace_irq_disable+0x3b/0x140 [ 458.526542][T11883] ? clear_bhb_loop+0x40/0x90 [ 458.526564][T11883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.526581][T11883] RIP: 0033:0x7f576f5fde59 [ 458.526597][T11883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.526612][T11883] RSP: 002b:00007f576d856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 458.526631][T11883] RAX: ffffffffffffffda RBX: 00007f576f885fa0 RCX: 00007f576f5fde59 [ 458.526644][T11883] RDX: 0000000000000020 RSI: 0000200000000640 RDI: 0000000000000003 [ 458.526655][T11883] RBP: 00007f576d856090 R08: 0000000000000000 R09: 0000000000000000 [ 458.526667][T11883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.526678][T11883] R13: 00007f576f886038 R14: 00007f576f885fa0 R15: 00007ffff78a5d38 [ 458.526706][T11883] [ 459.142538][ T5606] Bluetooth: hci2: unknown advertising packet type: 0x65 [ 459.142558][ T5606] Bluetooth: hci2: Dropping invalid advertising data [ 459.142575][ T5606] Bluetooth: hci2: Malformed LE Event: 0x02 [ 459.304889][ T5800] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 459.472065][ T5800] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 459.472095][ T5800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.494989][ T5329] usbhid 4-1:0.0: can't add hid device: -71 [ 459.495109][ T5329] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 459.518754][ T5329] usb 4-1: USB disconnect, device number 11 [ 459.538519][ T5800] usb 3-1: config 0 descriptor?? [ 459.554098][ T5800] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 460.150983][ T5606] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 460.151012][ T5606] Bluetooth: hci3: Dropping invalid advertising data [ 460.151030][ T5606] Bluetooth: hci3: Malformed LE Event: 0x02 [ 460.393720][ T5800] usb 3-1: USB disconnect, device number 20 [ 460.658054][T11947] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 460.658073][T11947] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 460.675759][T11947] vhci_hcd vhci_hcd.0: Device attached [ 460.800435][T11948] vhci_hcd: connection closed [ 460.806429][ T993] vhci_hcd vhci_hcd.2: stop threads [ 460.806456][ T993] vhci_hcd vhci_hcd.2: release socket [ 460.806534][ T993] vhci_hcd vhci_hcd.2: disconnect device [ 460.914811][T11973] netlink: 'syz.0.2053': attribute type 16 has an invalid length. [ 460.914831][T11973] netlink: 'syz.0.2053': attribute type 7 has an invalid length. [ 460.914851][T11973] FAULT_INJECTION: forcing a failure. [ 460.914851][T11973] name failslab, interval 1, probability 0, space 0, times 0 [ 460.914876][T11973] CPU: 0 UID: 0 PID: 11973 Comm: syz.0.2053 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 460.914900][T11973] Tainted: [L]=SOFTLOCKUP [ 460.914907][T11973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 460.914917][T11973] Call Trace: [ 460.914924][T11973] [ 460.914933][T11973] dump_stack_lvl+0xe8/0x150 [ 460.914959][T11973] should_fail_ex+0x467/0x600 [ 460.914987][T11973] should_failslab+0xa8/0x100 [ 460.915014][T11973] kmem_cache_alloc_node_noprof+0xac/0x660 [ 460.915038][T11973] ? __alloc_skb+0x1d7/0x7a0 [ 460.915059][T11973] ? __alloc_skb+0x1d7/0x7a0 [ 460.915086][T11973] __alloc_skb+0x1d7/0x7a0 [ 460.915128][T11973] netlink_ack+0x136/0xb30 [ 460.915150][T11973] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 460.915171][T11973] ? ref_tracker_free+0x668/0x820 [ 460.915196][T11973] ? netlink_unicast+0x7b8/0x990 [ 460.915216][T11973] ? netlink_sendmsg+0x813/0xb40 [ 460.915238][T11973] ? sock_sendmsg_nosec+0x13a/0x180 [ 460.915256][T11973] ? sock_write_iter+0x2e4/0x3f0 [ 460.915283][T11973] ? vfs_write+0x61e/0xbb0 [ 460.915298][T11973] ? ksys_write+0x156/0x270 [ 460.915312][T11973] ? do_syscall_64+0x174/0x580 [ 460.915336][T11973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.915362][T11973] netlink_rcv_skb+0x2a4/0x4a0 [ 460.915388][T11973] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 460.915412][T11973] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 460.915448][T11973] ? netlink_deliver_tap+0x2e/0x1b0 [ 460.915472][T11973] ? netlink_deliver_tap+0x2e/0x1b0 [ 460.915500][T11973] netlink_unicast+0x7f5/0x990 [ 460.915531][T11973] netlink_sendmsg+0x813/0xb40 [ 460.915555][T11973] ? _parse_integer_limit+0x18f/0x1e0 [ 460.915585][T11973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.915612][T11973] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 460.915640][T11973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.915673][T11973] sock_sendmsg_nosec+0x13a/0x180 [ 460.915696][T11973] sock_write_iter+0x2e4/0x3f0 [ 460.915716][T11973] ? __pfx_sock_write_iter+0x10/0x10 [ 460.915738][T11973] ? bpf_lsm_file_permission+0x9/0x20 [ 460.915763][T11973] ? security_file_permission+0x68/0x220 [ 460.915792][T11973] vfs_write+0x61e/0xbb0 [ 460.915817][T11973] ? __pfx_vfs_write+0x10/0x10 [ 460.915844][T11973] ? __fget_files+0x2a/0x420 [ 460.915875][T11973] ksys_write+0x156/0x270 [ 460.915894][T11973] ? __pfx_ksys_write+0x10/0x10 [ 460.915917][T11973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.915936][T11973] do_syscall_64+0x174/0x580 [ 460.915962][T11973] ? trace_irq_disable+0x3b/0x140 [ 460.915980][T11973] ? clear_bhb_loop+0x40/0x90 [ 460.916002][T11973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.916017][T11973] RIP: 0033:0x7f576f5fde59 [ 460.916036][T11973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.916051][T11973] RSP: 002b:00007f576d856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 460.916070][T11973] RAX: ffffffffffffffda RBX: 00007f576f885fa0 RCX: 00007f576f5fde59 [ 460.916083][T11973] RDX: 000000000000fcae RSI: 0000200000000240 RDI: 0000000000000003 [ 460.916095][T11973] RBP: 00007f576d856090 R08: 0000000000000000 R09: 0000000000000000 [ 460.916106][T11973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.916117][T11973] R13: 00007f576f886038 R14: 00007f576f885fa0 R15: 00007ffff78a5d38 [ 460.916145][T11973] [ 461.243371][T11989] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2055'. [ 461.534868][ T822] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 461.677721][T12002] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 461.677737][T12002] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 461.679058][T12002] vhci_hcd vhci_hcd.0: Device attached [ 461.687547][ T822] usb 3-1: Using ep0 maxpacket: 8 [ 461.713391][ T822] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 461.713418][ T822] usb 3-1: config 0 has no interface number 0 [ 461.713447][ T822] usb 3-1: config 0 interface 1 has no altsetting 0 [ 461.717245][ T822] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 461.717273][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.717290][ T822] usb 3-1: Product: syz [ 461.717303][ T822] usb 3-1: Manufacturer: syz [ 461.717316][ T822] usb 3-1: SerialNumber: syz [ 461.725884][ T822] usb 3-1: config 0 descriptor?? [ 461.734947][ T1250] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 461.856205][ T5800] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 461.887043][ T1250] usb 4-1: unable to get BOS descriptor or descriptor too short [ 461.887613][ T1250] usb 4-1: not running at top speed; connect to a high speed hub [ 461.888896][ T1250] usb 4-1: config 250 has an invalid interface number: 59 but max is 2 [ 461.888920][ T1250] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 461.888937][ T1250] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 3 [ 461.888955][ T1250] usb 4-1: config 250 has no interface number 0 [ 461.888997][ T1250] usb 4-1: config 250 interface 59 altsetting 255 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 461.889022][ T1250] usb 4-1: config 250 interface 59 altsetting 255 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 461.889048][ T1250] usb 4-1: config 250 interface 59 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 461.890490][ T1250] usb 4-1: config 250 interface 59 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.890527][ T1250] usb 4-1: config 250 interface 59 has no altsetting 0 [ 461.893447][ T1250] usb 4-1: New USB device found, idVendor=1b80, idProduct=e302, bcdDevice=8c.2b [ 461.893474][ T1250] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.893492][ T1250] usb 4-1: Product: Щ [ 461.893504][ T1250] usb 4-1: Manufacturer: 殃듐⮧誜嵃쥎䘱ﴵ蝹퓆敷䎹슁㆛疶চꓳ聆 [ 461.893520][ T1250] usb 4-1: SerialNumber: 墭儁ݨ菧₀∩₹ݶ穘㷜轇୕浘𫳉凐⧀䪧䍒⏰䓴쳪ೝᨍ䃳镎辷淁ꖯ惛ൖ煗匇㸊厅꓋푸㪳怅懡⇉๢㘎緵ɜ츘稵쯹塉裖嘖㧡賅⨒䥬寴꽑㺅ㄸ⟥ᣬ壒꛵畏畊掄摰핷鳼ෳ⽓쓅칗⾋ [ 461.914411][ T5800] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 461.979124][ T822] i2c-cp2615 3-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 462.182337][ T822] usb 3-1: USB disconnect, device number 21 [ 462.322050][ T1250] em28xx 4-1:250.59: New device 殃듐⮧誜嵃쥎䘱ﴵ蝹퓆敷䎹슁㆛疶চꓳ聆 Щ @ 12 Mbps (1b80:e302, interface 59, class 59) [ 462.322087][ T1250] em28xx 4-1:250.59: Device initialization failed. [ 462.322100][ T1250] em28xx 4-1:250.59: Device must be connected to a high-speed USB 2.0 port. [ 462.363050][ T1250] usb 4-1: USB disconnect, device number 12 [ 462.456211][T12013] netlink: 'syz.0.2061': attribute type 27 has an invalid length. [ 462.746958][T12022] dvmrp24: entered allmulticast mode [ 462.850550][T12026] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 463.049064][ T1250] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 463.194122][ T1250] usb 3-1: Using ep0 maxpacket: 16 [ 463.197542][ T1250] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 463.197569][ T1250] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 463.197587][ T1250] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 463.197602][ T1250] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 463.197618][ T1250] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 463.197637][ T1250] usb 3-1: config 0 has no interface number 0 [ 463.197681][ T1250] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 463.197717][ T1250] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 463.197738][ T1250] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 463.197770][ T1250] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 463.197794][ T1250] usb 3-1: config 0 interface 125 has no altsetting 0 [ 463.197811][ T1250] usb 3-1: config 0 interface 125 has no altsetting 2 [ 463.201155][ T1250] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 463.201182][ T1250] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.201201][ T1250] usb 3-1: Product: syz [ 463.201214][ T1250] usb 3-1: Manufacturer: syz [ 463.201226][ T1250] usb 3-1: SerialNumber: syz [ 463.262709][ T1250] usb 3-1: config 0 descriptor?? [ 463.285008][ T1250] usb 3-1: selecting invalid altsetting 2 [ 463.508728][T12024] netlink: 'syz.2.2066': attribute type 16 has an invalid length. [ 463.508744][T12024] netlink: 'syz.2.2066': attribute type 7 has an invalid length. [ 463.512378][T12024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.550908][T12024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.564042][T12024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.577605][T12024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.597754][ C0] usb 3-1: async_complete: urb error -71 [ 463.598155][ C0] usb 3-1: async_complete: urb error -71 [ 463.598236][ C0] usb 3-1: async_complete: urb error -71 [ 463.598315][ C0] usb 3-1: async_complete: urb error -71 [ 463.606392][ T1250] get_1284_register: usb error -71 [ 463.652433][ T1250] usb 3-1: USB disconnect, device number 22 [ 463.708051][T12047] FAULT_INJECTION: forcing a failure. [ 463.708051][T12047] name failslab, interval 1, probability 0, space 0, times 0 [ 463.708087][T12047] CPU: 1 UID: 0 PID: 12047 Comm: syz.0.2073 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 463.708111][T12047] Tainted: [L]=SOFTLOCKUP [ 463.708117][T12047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 463.708127][T12047] Call Trace: [ 463.708135][T12047] [ 463.708143][T12047] dump_stack_lvl+0xe8/0x150 [ 463.708170][T12047] should_fail_ex+0x467/0x600 [ 463.708198][T12047] should_failslab+0xa8/0x100 [ 463.708224][T12047] __kmalloc_cache_noprof+0xa1/0x670 [ 463.708248][T12047] ? qrtr_endpoint_register+0x80/0x4f0 [ 463.708265][T12047] ? qrtr_endpoint_register+0x80/0x4f0 [ 463.708283][T12047] qrtr_endpoint_register+0x80/0x4f0 [ 463.708303][T12047] qrtr_tun_open+0x141/0x1c0 [ 463.708324][T12047] ? __pfx_qrtr_tun_open+0x10/0x10 [ 463.708343][T12047] misc_open+0x2de/0x350 [ 463.708364][T12047] chrdev_open+0x4dc/0x600 [ 463.708386][T12047] ? __pfx_chrdev_open+0x10/0x10 [ 463.708415][T12047] ? __pfx_chrdev_open+0x10/0x10 [ 463.708435][T12047] do_dentry_open+0x849/0x1420 [ 463.708466][T12047] vfs_open+0x3b/0x350 [ 463.708485][T12047] ? path_openat+0x2e4d/0x3850 [ 463.708507][T12047] path_openat+0x2e64/0x3850 [ 463.708532][T12047] ? __kasan_slab_alloc+0x6c/0x80 [ 463.708556][T12047] ? do_sys_openat2+0xcc/0x200 [ 463.708576][T12047] ? __x64_sys_openat+0x138/0x170 [ 463.708596][T12047] ? do_syscall_64+0x174/0x580 [ 463.708639][T12047] do_file_open+0x23e/0x4a0 [ 463.708652][T12047] ? lockdep_hardirqs_on+0x7a/0x110 [ 463.708677][T12047] ? __pfx_do_file_open+0x10/0x10 [ 463.708714][T12047] ? alloc_fd+0x654/0x6d0 [ 463.708748][T12047] do_sys_openat2+0x115/0x200 [ 463.708771][T12047] ? __pfx_do_sys_openat2+0x10/0x10 [ 463.708792][T12047] ? ksys_write+0x248/0x270 [ 463.708811][T12047] ? __pfx_ksys_write+0x10/0x10 [ 463.708829][T12047] __x64_sys_openat+0x138/0x170 [ 463.708851][T12047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.708869][T12047] do_syscall_64+0x174/0x580 [ 463.708889][T12047] ? trace_irq_disable+0x3b/0x140 [ 463.708904][T12047] ? clear_bhb_loop+0x40/0x90 [ 463.708924][T12047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.708939][T12047] RIP: 0033:0x7f576f5fde59 [ 463.708964][T12047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.708978][T12047] RSP: 002b:00007f576d856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 463.708996][T12047] RAX: ffffffffffffffda RBX: 00007f576f885fa0 RCX: 00007f576f5fde59 [ 463.709007][T12047] RDX: 000000000004c102 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 463.709018][T12047] RBP: 00007f576d856090 R08: 0000000000000000 R09: 0000000000000000 [ 463.709028][T12047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.709038][T12047] R13: 00007f576f886038 R14: 00007f576f885fa0 R15: 00007ffff78a5d38 [ 463.709060][T12047] [ 464.132450][T12053] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2075'. [ 464.537020][T12058] FAULT_INJECTION: forcing a failure. [ 464.537020][T12058] name failslab, interval 1, probability 0, space 0, times 0 [ 464.537051][T12058] CPU: 1 UID: 0 PID: 12058 Comm: syz.1.2078 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 464.537070][T12058] Tainted: [L]=SOFTLOCKUP [ 464.537076][T12058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 464.537085][T12058] Call Trace: [ 464.537091][T12058] [ 464.537098][T12058] dump_stack_lvl+0xe8/0x150 [ 464.537128][T12058] should_fail_ex+0x467/0x600 [ 464.537151][T12058] should_failslab+0xa8/0x100 [ 464.537173][T12058] kmem_cache_alloc_node_noprof+0xac/0x660 [ 464.537191][T12058] ? __alloc_skb+0x1d7/0x7a0 [ 464.537207][T12058] ? __alloc_skb+0x1d7/0x7a0 [ 464.537227][T12058] __alloc_skb+0x1d7/0x7a0 [ 464.537246][T12058] netlink_ack+0x136/0xb30 [ 464.537262][T12058] ? __pfx_genl_rcv_msg+0x10/0x10 [ 464.537275][T12058] ? ref_tracker_free+0x668/0x820 [ 464.537294][T12058] ? __pfx_nl80211_post_doit+0x10/0x10 [ 464.537307][T12058] ? ____sys_sendmsg+0x565/0x870 [ 464.537325][T12058] ? ___sys_sendmsg+0x2a5/0x360 [ 464.537340][T12058] ? __x64_sys_sendmsg+0x1b7/0x290 [ 464.537357][T12058] ? do_syscall_64+0x174/0x580 [ 464.537374][T12058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.537402][T12058] netlink_rcv_skb+0x2a4/0x4a0 [ 464.537425][T12058] ? __pfx_genl_rcv_msg+0x10/0x10 [ 464.537441][T12058] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 464.537468][T12058] ? netlink_deliver_tap+0x2e/0x1b0 [ 464.537486][T12058] ? netlink_deliver_tap+0x2e/0x1b0 [ 464.537506][T12058] genl_rcv+0x28/0x40 [ 464.537519][T12058] netlink_unicast+0x7f5/0x990 [ 464.537544][T12058] netlink_sendmsg+0x813/0xb40 [ 464.537569][T12058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.537590][T12058] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 464.537608][T12058] ? __kernel_text_address+0xd/0x30 [ 464.537629][T12058] ? unwind_get_return_address+0x4d/0x90 [ 464.537645][T12058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.537663][T12058] sock_sendmsg_nosec+0x13a/0x180 [ 464.537680][T12058] ____sys_sendmsg+0x565/0x870 [ 464.537704][T12058] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.537729][T12058] ? import_iovec+0x73/0xa0 [ 464.537747][T12058] ___sys_sendmsg+0x2a5/0x360 [ 464.537764][T12058] ? __lock_acquire+0x6df/0x2e40 [ 464.537781][T12058] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.537824][T12058] ? __fget_files+0x2a/0x420 [ 464.537843][T12058] ? __fget_files+0x3a8/0x420 [ 464.537869][T12058] __x64_sys_sendmsg+0x1b7/0x290 [ 464.537890][T12058] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 464.537926][T12058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.537942][T12058] do_syscall_64+0x174/0x580 [ 464.537962][T12058] ? trace_irq_disable+0x3b/0x140 [ 464.537977][T12058] ? clear_bhb_loop+0x40/0x90 [ 464.537997][T12058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.538013][T12058] RIP: 0033:0x7fa6b268de59 [ 464.538029][T12058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.538041][T12058] RSP: 002b:00007fa6b08e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.538059][T12058] RAX: ffffffffffffffda RBX: 00007fa6b2915fa0 RCX: 00007fa6b268de59 [ 464.538069][T12058] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000003 [ 464.538080][T12058] RBP: 00007fa6b08e6090 R08: 0000000000000000 R09: 0000000000000000 [ 464.538090][T12058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.538101][T12058] R13: 00007fa6b2916038 R14: 00007fa6b2915fa0 R15: 00007ffc75079a28 [ 464.538128][T12058] [ 464.784553][T12060] vhci_hcd vhci_hcd.0: port 0 already used [ 465.160508][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 465.214092][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 465.230277][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 465.312578][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 465.334894][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 465.365806][ T822] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 465.660911][ T822] usb 1-1: Using ep0 maxpacket: 32 [ 465.696217][ T822] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 465.696242][ T822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.696257][ T822] usb 1-1: config 0 has no interface number 0 [ 465.696298][ T822] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 465.696317][ T822] usb 1-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 465.701975][ T822] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 465.702003][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.702021][ T822] usb 1-1: Product: syz [ 465.702035][ T822] usb 1-1: Manufacturer: syz [ 465.702048][ T822] usb 1-1: SerialNumber: syz [ 465.710824][ T822] usb 1-1: config 0 descriptor?? [ 465.714516][ T822] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 465.714790][ T822] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 466.448734][ T5329] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 466.608123][ T5329] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.608149][ T5329] usb 4-1: config 0 has no interfaces? [ 466.608175][ T5329] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 466.608193][ T5329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.681674][ T5329] usb 4-1: config 0 descriptor?? [ 466.857897][T10532] ================================================================== [ 466.857993][T10532] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400 [ 466.858084][T10532] Read of size 1 at addr ffff88802c32e7e8 by task syz.2.1633/10532 [ 466.858097][T10532] [ 466.858145][T10532] CPU: 0 UID: 0 PID: 10532 Comm: syz.2.1633 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 466.858174][T10532] Tainted: [L]=SOFTLOCKUP [ 466.858181][T10532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 466.858190][T10532] Call Trace: [ 466.858197][T10532] [ 466.858204][T10532] dump_stack_lvl+0xe8/0x150 [ 466.858227][T10532] print_address_description+0x55/0x1e0 [ 466.858251][T10532] ? rt_spin_lock+0x83/0x400 [ 466.858268][T10532] print_report+0x58/0x70 [ 466.858290][T10532] kasan_report+0x117/0x150 [ 466.858315][T10532] ? rt_spin_lock+0x83/0x400 [ 466.858336][T10532] __kasan_check_byte+0x2a/0x40 [ 466.858359][T10532] lock_acquire+0x7d/0x350 [ 466.858378][T10532] ? lock_acquire+0x115/0x350 [ 466.858395][T10532] rt_spin_lock+0x83/0x400 [ 466.858413][T10532] ? bt_accept_unlink+0x7d/0x2f0 [ 466.858439][T10532] ? __pfx_rt_spin_lock+0x10/0x10 [ 466.858456][T10532] ? rcu_is_watching+0x15/0xb0 [ 466.858476][T10532] ? __local_bh_disable_ip+0x3c/0x420 [ 466.858496][T10532] ? bt_accept_unlink+0x61/0x2f0 [ 466.858521][T10532] bt_accept_unlink+0x7d/0x2f0 [ 466.858546][T10532] ? bt_accept_unlink+0x61/0x2f0 [ 466.858570][T10532] l2cap_sock_teardown_cb+0x17e/0x490 [ 466.858594][T10532] l2cap_chan_del+0x98/0x600 [ 466.858618][T10532] l2cap_conn_del+0x2f2/0x520 [ 466.858638][T10532] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 466.858658][T10532] hci_conn_hash_flush+0x105/0x260 [ 466.858679][T10532] hci_dev_close_sync+0x7fc/0x10a0 [ 466.858701][T10532] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 466.858719][T10532] ? lockdep_hardirqs_on+0x7a/0x110 [ 466.858749][T10532] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 466.858773][T10532] ? mutex_lock_nested+0x152/0x1d0 [ 466.858791][T10532] ? hci_unregister_dev+0x22a/0x5b0 [ 466.858815][T10532] hci_unregister_dev+0x232/0x5b0 [ 466.858839][T10532] vhci_release+0x170/0x1c0 [ 466.858859][T10532] ? __pfx_vhci_release+0x10/0x10 [ 466.858878][T10532] __fput+0x42a/0xa80 [ 466.858903][T10532] task_work_run+0x1d9/0x270 [ 466.858929][T10532] ? __pfx_task_work_run+0x10/0x10 [ 466.858952][T10532] ? do_exit+0x735/0x2360 [ 466.858972][T10532] ? kmem_cache_free+0x187/0x6c0 [ 466.858995][T10532] ? put_net+0x191/0x260 [ 466.859012][T10532] ? do_exit+0x735/0x2360 [ 466.859034][T10532] do_exit+0x73a/0x2360 [ 466.859055][T10532] ? lockdep_hardirqs_on+0x7a/0x110 [ 466.859083][T10532] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 466.859107][T10532] ? __pfx_do_exit+0x10/0x10 [ 466.859129][T10532] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 466.859149][T10532] ? rt_spin_unlock+0x157/0x200 [ 466.859169][T10532] do_group_exit+0x22d/0x2f0 [ 466.859191][T10532] ? rt_spin_unlock+0x163/0x200 [ 466.859210][T10532] get_signal+0x121b/0x12c0 [ 466.859236][T10532] arch_do_signal_or_restart+0xbb/0x860 [ 466.859257][T10532] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 466.859281][T10532] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 466.859304][T10532] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 466.859331][T10532] exit_to_user_mode_loop+0x104/0x730 [ 466.859347][T10532] ? rcu_is_watching+0x15/0xb0 [ 466.859367][T10532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.859384][T10532] do_syscall_64+0x353/0x580 [ 466.859408][T10532] ? trace_irq_disable+0x3b/0x140 [ 466.859424][T10532] ? clear_bhb_loop+0x40/0x90 [ 466.859443][T10532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.859469][T10532] RIP: eccb:0xe4a421182f13d611 [ 466.859485][T10532] Code: Unable to access opcode bytes at 0xe4a421182f13d5e7. [ 466.859543][T10532] RSP: 002b:00007f470d3b5f58 EFLAGS: 00000756 ORIG_RAX: d1d66dbfed01019b [ 466.859562][T10532] RAX: 2bf9e1987c4f44ee RBX: 6f67a894836fe1f3 RCX: ed0b474b2b46640f [ 466.859574][T10532] RDX: fb381f0b5e12d2ce RSI: 401aaa756d8c34aa RDI: 30b9ec15aecde911 [ 466.859586][T10532] RBP: 532828f82bbb556c R08: dbce39d105fdbf88 R09: ae9ea378b9c9fbc7 [ 466.859595][T10532] R10: 33740f3b8630618c R11: 2450ade207355af5 R12: 0a61688f027fb1a4 [ 466.859605][T10532] R13: 339c71c774e61334 R14: 28baed4a0483d193 R15: 7c1f9cf2b758efdc [ 466.859621][T10532] [ 466.859627][T10532] [ 466.859637][T10532] Allocated by task 11998: [ 466.859645][T10532] kasan_save_track+0x3e/0x80 [ 466.859662][T10532] __kasan_kmalloc+0x93/0xb0 [ 466.859677][T10532] __kmalloc_noprof+0x415/0x790 [ 466.859692][T10532] tomoyo_realpath_from_path+0xef/0x640 [ 466.859706][T10532] tomoyo_check_open_permission+0x229/0x470 [ 466.859723][T10532] security_file_open+0x9c/0x200 [ 466.859738][T10532] do_dentry_open+0x4be/0x1420 [ 466.859761][T10532] vfs_open+0x3b/0x350 [ 466.859774][T10532] path_openat+0x2e64/0x3850 [ 466.859786][T10532] do_file_open+0x23e/0x4a0 [ 466.859797][T10532] do_sys_openat2+0x115/0x200 [ 466.859811][T10532] __x64_sys_openat+0x138/0x170 [ 466.859825][T10532] do_syscall_64+0x174/0x580 [ 466.859841][T10532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.859853][T10532] [ 466.859856][T10532] Freed by task 11998: [ 466.859862][T10532] kasan_save_track+0x3e/0x80 [ 466.859877][T10532] kasan_save_free_info+0x40/0x50 [ 466.859889][T10532] __kasan_slab_free+0x5c/0x80 [ 466.859904][T10532] kfree+0x1c5/0x6c0 [ 466.859916][T10532] tomoyo_realpath_from_path+0x605/0x640 [ 466.859928][T10532] tomoyo_check_open_permission+0x229/0x470 [ 466.859944][T10532] security_file_open+0x9c/0x200 [ 466.859959][T10532] do_dentry_open+0x4be/0x1420 [ 466.859972][T10532] vfs_open+0x3b/0x350 [ 466.859986][T10532] path_openat+0x2e64/0x3850 [ 466.859997][T10532] do_file_open+0x23e/0x4a0 [ 466.860007][T10532] do_sys_openat2+0x115/0x200 [ 466.860022][T10532] __x64_sys_openat+0x138/0x170 [ 466.860036][T10532] do_syscall_64+0x174/0x580 [ 466.860051][T10532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.860064][T10532] [ 466.860067][T10532] The buggy address belongs to the object at ffff88802c32e000 [ 466.860067][T10532] which belongs to the cache kmalloc-4k of size 4096 [ 466.860121][T10532] The buggy address is located 2024 bytes inside of [ 466.860121][T10532] freed 4096-byte region [ffff88802c32e000, ffff88802c32f000) [ 466.860141][T10532] [ 466.860145][T10532] The buggy address belongs to the physical page: [ 466.860159][T10532] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c328 [ 466.860176][T10532] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 466.860188][T10532] flags: 0x80000000000040(head|node=0|zone=1) [ 466.860199][T10532] page_type: f5(slab) [ 466.860212][T10532] raw: 0080000000000040 ffff88813fe3a140 dead000000000100 dead000000000122 [ 466.860223][T10532] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 466.860235][T10532] head: 0080000000000040 ffff88813fe3a140 dead000000000100 dead000000000122 [ 466.860246][T10532] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 466.860258][T10532] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 466.860269][T10532] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 466.860276][T10532] page dumped because: kasan: bad access detected [ 466.860286][T10532] page_owner tracks the page as allocated [ 466.860291][T10532] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4963, tgid 4963 (udevd), ts 47458126937 [ 466.860313][T10532] post_alloc_hook+0x1f9/0x250 [ 466.860328][T10532] get_page_from_freelist+0x264c/0x26c0 [ 466.860346][T10532] __alloc_frozen_pages_noprof+0x1a6/0x390 [ 466.860362][T10532] allocate_slab+0x79/0x5e0 [ 466.860375][T10532] refill_objects+0x2d8/0x350 [ 466.860387][T10532] __pcs_replace_empty_main+0x330/0x690 [ 466.860401][T10532] __kmalloc_noprof+0x543/0x790 [ 466.860417][T10532] tomoyo_realpath_from_path+0xef/0x640 [ 466.860429][T10532] tomoyo_check_open_permission+0x229/0x470 [ 466.860445][T10532] security_file_open+0x9c/0x200 [ 466.860460][T10532] do_dentry_open+0x4be/0x1420 [ 466.860473][T10532] vfs_open+0x3b/0x350 [ 466.860486][T10532] path_openat+0x2e64/0x3850 [ 466.860497][T10532] do_file_open+0x23e/0x4a0 [ 466.860508][T10532] do_sys_openat2+0x115/0x200 [ 466.860522][T10532] __x64_sys_openat+0x138/0x170 [ 466.860537][T10532] page last free pid 4963 tgid 4963 ts 47412143657 stack trace: [ 466.860546][T10532] __free_frozen_pages+0x10de/0x11c0 [ 466.860561][T10532] __slab_free+0x252/0x2a0 [ 466.860576][T10532] qlist_free_all+0x99/0x100 [ 466.860591][T10532] kasan_quarantine_reduce+0x148/0x160 [ 466.860605][T10532] __kasan_slab_alloc+0x22/0x80 [ 466.860620][T10532] kmem_cache_alloc_noprof+0x358/0x680 [ 466.860634][T10532] alloc_empty_file+0x5b/0x1d0 [ 466.860649][T10532] path_openat+0x8f/0x3850 [ 466.860660][T10532] do_file_open+0x23e/0x4a0 [ 466.860671][T10532] do_sys_openat2+0x115/0x200 [ 466.860685][T10532] __x64_sys_openat+0x138/0x170 [ 466.860700][T10532] do_syscall_64+0x174/0x580 [ 466.860715][T10532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.860727][T10532] [ 466.860730][T10532] Memory state around the buggy address: [ 466.860807][T10532] ffff88802c32e680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 466.860817][T10532] ffff88802c32e700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 466.860825][T10532] >ffff88802c32e780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 466.860832][T10532] ^ [ 466.860840][T10532] ffff88802c32e800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 466.860848][T10532] ffff88802c32e880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 466.860855][T10532] ================================================================== [ 466.860939][T10532] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 466.860957][T10532] CPU: 0 UID: 0 PID: 10532 Comm: syz.2.1633 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 466.860980][T10532] Tainted: [L]=SOFTLOCKUP [ 466.860987][T10532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 466.860997][T10532] Call Trace: [ 466.861005][T10532] [ 466.861012][T10532] vpanic+0x56c/0xa60 [ 466.861031][T10532] ? __pfx_vpanic+0x10/0x10 [ 466.861048][T10532] ? __pfx___schedule+0x10/0x10 [ 466.861072][T10532] panic+0xc5/0xd0 [ 466.861088][T10532] ? __pfx_panic+0x10/0x10 [ 466.861104][T10532] ? preempt_schedule_thunk+0x16/0x40 [ 466.861126][T10532] ? rt_spin_lock+0x83/0x400 [ 466.861144][T10532] check_panic_on_warn+0x89/0xb0 [ 466.861166][T10532] ? rt_spin_lock+0x83/0x400 [ 466.861182][T10532] end_report+0x73/0x170 [ 466.861205][T10532] ? rt_spin_lock+0x83/0x400 [ 466.861222][T10532] kasan_report+0x128/0x150 [ 466.861245][T10532] ? rt_spin_lock+0x83/0x400 [ 466.861266][T10532] __kasan_check_byte+0x2a/0x40 [ 466.861288][T10532] lock_acquire+0x7d/0x350 [ 466.861306][T10532] ? lock_acquire+0x115/0x350 [ 466.861324][T10532] rt_spin_lock+0x83/0x400 [ 466.861341][T10532] ? bt_accept_unlink+0x7d/0x2f0 [ 466.861367][T10532] ? __pfx_rt_spin_lock+0x10/0x10 [ 466.861384][T10532] ? rcu_is_watching+0x15/0xb0 [ 466.861404][T10532] ? __local_bh_disable_ip+0x3c/0x420 [ 466.861423][T10532] ? bt_accept_unlink+0x61/0x2f0 [ 466.861448][T10532] bt_accept_unlink+0x7d/0x2f0 [ 466.861472][T10532] ? bt_accept_unlink+0x61/0x2f0 [ 466.861497][T10532] l2cap_sock_teardown_cb+0x17e/0x490 [ 466.861521][T10532] l2cap_chan_del+0x98/0x600 [ 466.861545][T10532] l2cap_conn_del+0x2f2/0x520 [ 466.861565][T10532] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 466.861586][T10532] hci_conn_hash_flush+0x105/0x260 [ 466.861609][T10532] hci_dev_close_sync+0x7fc/0x10a0 [ 466.861632][T10532] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 466.861648][T10532] ? lockdep_hardirqs_on+0x7a/0x110 [ 466.861671][T10532] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 466.861693][T10532] ? mutex_lock_nested+0x152/0x1d0 [ 466.861710][T10532] ? hci_unregister_dev+0x22a/0x5b0 [ 466.861735][T10532] hci_unregister_dev+0x232/0x5b0 [ 466.861766][T10532] vhci_release+0x170/0x1c0 [ 466.861787][T10532] ? __pfx_vhci_release+0x10/0x10 [ 466.861806][T10532] __fput+0x42a/0xa80 [ 466.861829][T10532] task_work_run+0x1d9/0x270 [ 466.861855][T10532] ? __pfx_task_work_run+0x10/0x10 [ 466.861875][T10532] ? do_exit+0x735/0x2360 [ 466.861894][T10532] ? kmem_cache_free+0x187/0x6c0 [ 466.861913][T10532] ? put_net+0x191/0x260 [ 466.861928][T10532] ? do_exit+0x735/0x2360 [ 466.861950][T10532] do_exit+0x73a/0x2360 [ 466.861970][T10532] ? lockdep_hardirqs_on+0x7a/0x110 [ 466.861991][T10532] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 466.862015][T10532] ? __pfx_do_exit+0x10/0x10 [ 466.862035][T10532] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 466.862056][T10532] ? rt_spin_unlock+0x157/0x200 [ 466.862073][T10532] do_group_exit+0x22d/0x2f0 [ 466.862094][T10532] ? rt_spin_unlock+0x163/0x200 [ 466.862110][T10532] get_signal+0x121b/0x12c0 [ 466.862134][T10532] arch_do_signal_or_restart+0xbb/0x860 [ 466.862155][T10532] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 466.862177][T10532] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 466.862201][T10532] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 466.862228][T10532] exit_to_user_mode_loop+0x104/0x730 [ 466.862243][T10532] ? rcu_is_watching+0x15/0xb0 [ 466.862263][T10532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.862281][T10532] do_syscall_64+0x353/0x580 [ 466.862303][T10532] ? trace_irq_disable+0x3b/0x140 [ 466.862320][T10532] ? clear_bhb_loop+0x40/0x90 [ 466.862340][T10532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.862355][T10532] RIP: eccb:0xe4a421182f13d611 [ 466.862371][T10532] Code: Unable to access opcode bytes at 0xe4a421182f13d5e7. [ 466.862380][T10532] RSP: 002b:00007f470d3b5f58 EFLAGS: 00000756 ORIG_RAX: d1d66dbfed01019b [ 466.862400][T10532] RAX: 2bf9e1987c4f44ee RBX: 6f67a894836fe1f3 RCX: ed0b474b2b46640f [ 466.862413][T10532] RDX: fb381f0b5e12d2ce RSI: 401aaa756d8c34aa RDI: 30b9ec15aecde911 [ 466.862426][T10532] RBP: 532828f82bbb556c R08: dbce39d105fdbf88 R09: ae9ea378b9c9fbc7 [ 466.862439][T10532] R10: 33740f3b8630618c R11: 2450ade207355af5 R12: 0a61688f027fb1a4 [ 466.862452][T10532] R13: 339c71c774e61334 R14: 28baed4a0483d193 R15: 7c1f9cf2b758efdc [ 466.862473][T10532] [ 466.862840][T10532] Kernel Offset: disabled