last executing test programs: 6.43393828s ago: executing program 0 (id=139): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='mtd0\x00', 0x49) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) 6.289177786s ago: executing program 0 (id=143): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='secret\x00\xa0\x95=K4\xe8\xad`W\xd1+\x18\x9a\x99\v\xfa,9\x15M\xee\xe7\xb7d\x9f\x1f\xd8\xa2\x89Y\xf0\xa2;b\x96TkG\x7fh\xd3p}\x19_Z\xe7\xeb\x06\xcf\xf3>I\xd4/\xd4\x84\xca\xf7Y\xa1y\'Ujl$J\x1b9\xcf\xben\x93\xa1\xe7c\xed\xfd\xd8p\xea\xbc\x8d\"\xe3\xbaS\xba\xb7Jv\xbas\xd0\xb1\xdf\x17\xc5\x7f|\xc65\v>\xa8n\v\xbe\r\x13\x845\x18\x87\x87q\xe1\x9e{~\x9f\xf7\x1a\xe2L\x1a\xec\xd7\xe2\xd8\x85\x96\x1a\b7\xb7\x99\x1e`\xbaS\xae\xe16\xe6\x1f\xc7\xae\x11H;JK\xb4\xdex\xee\x9e2Z\xe7\x85YQ\\ }\xb3\xae7T\xb9\x83\x11\x06\xff\xac]\x023\xe8.tG\x10\xe5%\x1f\f\xdaD\x94\xe0\x9d\xda\xaf\xe1w\xc8R\x83\x84\xb1\xcc\xedu\f1c\xd4u\x8eH\xbd\x85\xf7\xb8\xcd<`z\xa0P\xeer\xec\xac\xb3\xf08\xe9>\x983d\x88\x19\x1a\x85\xbb\x88\xca0\xdf?k\xb9\xf3k\xb9m\xaf4\x9f\x14H}\x0e\xf3`X\xbf\x99\x98\xfa~g}y\xb1U\xa6\xaf\xf6C\a\xb7\x85):\xf4\xc7P\x81\xae2\xf7d\xfa\xd2}\x92\x83\x9c\xa2c\x1b\x91 +?+\xb7\xae^*b\xb1\x18\x86\x8a\x11\x06B\xa8\xfcmrhzA\xadS\xda\xd5a%Y\xe9\xfb\f\x9f!\xf5\v$\xd8,`At1\xc4\a\x13}\x0e\x88c\xb0\xfc,\xc3\x8a\x171\x13\x1eP84\xd8\x9a\x17\x18\x16\xf7\xe4\x9e\xf0\xf3\x9f2\xc2Q\x89\xd7\xcc\xe8\xac5\x12\xaa\f\x18}#\xb9\xd1/\xed\xdb\xc2R()\x87\x8a6\x05U\xaaS\xd11\x83k\xa6\xb8g\x01Ur{\xa0\x13\xc9O\xbc\xe5:!bv](\xa1\x1b\xe0\xda\xc712h\a\xd3\x85g\x17\v\x87\x8d\x0e\xf7\xf69h\xd1w3\x14Z\xa7\xa1\xf3[\xa5c\x80\xf7\xdc{\xf6\x9f=\x98\\\x88o\x7f\xaf=^\xb9\x9c\xf1\xea\x18\x9d\x1d6*\xe5\x96\x05\xeb>}8\x82\xa8<\xc0\x9b\xe3\xf5\x8fi\xc2\xbat\xf2pK4\xf0q\x11\xb18\x18M\b0\xa4q\xc5Soma:@S\xde\xe0Hu\v\xac\xd9\x9d\x7f\x91\x0eN\r\x80\xd5\xa2\x11\xc8,\x98t\xb7\x01F. \xd52\xdb\xce>\xb6[\xd1#A\x0f\x88\xc2Bn4\x83\xd9\xc8H\a\xc3\xb5\xb1\x7fjQ\xc8\xb6\x91\x1dC\x1b\x85K2H\xa9eh\xc6m', &(0x7f00000005c0)='AQBv=K9e\xc7;M\x13\x9a-\r\xffS)@\xd1\xde[8?\xc7\xc8\x12\xd0;\xeaA\xee0l\xf9`c\xb9E\xcfv\x9a\x9e\x88\xa9F\xaf\xab\x98\xdcK\x1e\xb1\xdb\xd0\xf2):\xf1\xbdW\xad<\x17\xb7\xf1f]\xd4l?\x0e\x00\x86 \x83\xe2\xd0,]G\xdaQI\xc0\xe1x\xd6\xf6\xb9%t\x19\xda\x982\x17I\x04*n\xe6xM\xe36\xc4\b\x97\xb2\x04\xa9\x9a\x19\x05\xf6\x84Mz\xa6\x12n\xb3\xd1%\xa1%D\r^tT\x93\x8b\xc7*\xbe\x1b\x1b\x11\x82\x00\x00\x00\x00\x00\x00\xebo\xf5h\xef\xa1\xdd\xf3\x995\xa2JlL\xb8\xa3Vq\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcdY\x96\xae\xc3Y\xea2\x92s\xe3Bb\x94\x15V\xb8F\x19=\xaf+\xa9<\xfeA\x91t\xd8\xa2\x8f4\xc7\xb9\x9d\xd6\xc6\x0e`\x99\xb2\x8e;\x02\xed\xfcuW\xe1\x06\xf3 \x8d\xecy\t\x7f@\x1c!\xb1\xcd\n@Q:G<\xd3\xd7\xa8\xf4\x03m\xb6\xac\xe2\xa6b\x05\xfa\xdb`\x91L$\x8b2\x16\xf0\x8a=\x83\x85\xa0\xed\xcaX\xb4\xb0\xe8\xbf\x95n\xf8\xed>\x82Y\xab\x9b-|\xc7', 0x0) (async) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x9, {0x9}}}, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="20018d59"], 0x0}) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000540)={0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="40030c0000000c05c7"], 0x0, 0x0, 0x0}, 0x0) 5.82052486s ago: executing program 1 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff0000000904010102ff0000000705870240"], 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x84, &(0x7f0000000500)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/atm/speedtch0/link_rate\x00', 0x0, 0x0) read(r1, &(0x7f0000000800)=""/64, 0x40) 3.929657204s ago: executing program 1 (id=158): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x6, @mcast1, 0x18000}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000000000000290000000b000000000000610000000014"], 0x30}}, {{&(0x7f0000000180)={0xa, 0x4e23, 0x36000, @empty, 0xfffffff9}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x1158}}], 0x2, 0x20040010) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xfa}, &(0x7f0000000040)=0x8) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000001300)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@fragment={0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], @dest_unreach={0x1, 0x0, 0x0, 0x9, '\x00', {0x9, 0x6, "9951a5", 0x3ff, 0x33, 0x0, @local, @loopback}}}}}}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='afs\x00', 0x1008001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/cluster/mycluster/node/node0/local\x00', 0x1, 0x1) write(r4, &(0x7f0000000d00)='1\n', 0x2) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) r5 = epoll_create1(0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x0, 0x26, 0xffffffb9, 0x1a}, 0x9c) epoll_wait(r5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x3) 3.814624202s ago: executing program 2 (id=159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 3.748707473s ago: executing program 1 (id=160): syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x100) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000240), 0xcd5, 0x20840) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000280)=0x3a00) socket$netlink(0x10, 0x3, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000', @ANYRESDEC=0x0]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189882, 0x61) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ffbe"], 0x0) r4 = syz_open_dev$evdev(&(0x7f00000002c0), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000000)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) r5 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000000)={0x0, 0x1, 0xb, 0x8, "2af15ef6983d2e9e4cea7f3567bf701fa00d6a39ad4b3eb72544d4c1ba33b030"}) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='c '], 0x11) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r6, 0x4008af23, &(0x7f0000000180)={0x0, 0xfff}) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.747559351s ago: executing program 2 (id=161): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) read(0xffffffffffffffff, &(0x7f00000001c0)=""/54, 0x36) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r3, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000009db29fe0a9fb24771fd87c28949ca22cd4fb00", @ANYRES16=r8, @ANYBLOB="000428bd7000ffdbdf25030000000a000900bbbbbbbbbbbb000005002a000100000005002e0000000000080034000000000005002d0001000000"], 0x40}, 0x1, 0x0, 0x0, 0x900}, 0x80) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2715, 0x0, &(0x7f0000000040)) 3.669585793s ago: executing program 2 (id=162): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="2ac1f049c5c7f4814f689c701a27b51b8b097a9d5b4267a33ea2a28b0b006ab46c4db7761d840484367cdc41591e856880d22dfd4a075de0ad7c401ad01f423fd9cb02531f35d998910d761a3d261989fb03edbaec417e2627a00a6a560ac01679f7a05b4a13bd884a30761a6d24e4b6af1b561eaed6045fa22533460ef29dcf33aed453bc928662eb23de80010dd05e661880c1d66fc60e469920650a3c"], 0x68) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2={0xfc, 0x2, '\x00', 0x20}, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}]}, 0xa0}}, 0x44) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0) 3.557291794s ago: executing program 3 (id=163): sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001214010025bd7000fddbdf2508004f000200000008004b001300000008001500027a00000800030000000001080001"], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x20040800) 3.548885624s ago: executing program 3 (id=164): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setns(0xc9, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030006ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, 0x0) 3.356423174s ago: executing program 3 (id=165): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r6 = syz_usb_connect$uac3(0x5, 0xc4, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb2, 0x3, 0x1, 0x2, 0x80, 0xd, {0x8, 0xb, 0x0, 0x0, 0x1, 0x20}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x3a, 0x7}, [@selector_unit={0xc, 0x24, 0xc, 0x81, 0x7, "2d53c5596360b0"}, @selector_unit={0xd, 0x24, 0xc, 0xa, 0x8, "bb4eb6012558e405"}, @cluster_info_segment={0x6, 0x20, 0x6, 0x85, 0xff}, @mixer_unit={0x8, 0x24, 0x5, 0x2, 0x8, "ccfb72"}, @processing_unit={0x9, 0x24, 0x9, 0x3, 0x5, [0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xcc82, 0x7, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xde, 0x0, 0xb, {0xa, 0x25, 0x25, 0x0, 0x9, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x10, 0x4, 0x9, 0x1d, '\'', "165e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xf8, 0x4, 0x7, {0xa, 0x25, 0x25, 0x7, 0x4, 0x1}}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x110, 0x2, 0x49, 0x2, 0x8, 0x3}, 0x109, &(0x7f0000000940)={0x5, 0xf, 0x109, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x2, 0xf000, 0x5, [0x3ff0, 0x0, 0xff3f00, 0x10100f0, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "4e085bfa444c664c4b77d172b0fa80a0"}, @generic={0xb2, 0x10, 0x3, "8f23f5b1c995216ec60d12cc56ee4be7870b61dd2d82a8917ac9bb97a776df47970d35bc975c1861c03d4640726e1a4eac74a4ad2cd5826f9f52afcec9cbe0780b710a184a602b53fef26fb0beb8092ecb5f45178d22b5170144ea4bcdffcf8269336073b130d50219e2bbb4684e740ced6b8f11202d5d631eaa4629802155f0769a6d7299b2edd23ef717fe0858663a1e4cc76a334d34d4b54ab7dac7cbc7ac1e493196fb7a3581ed5cc78cffe0df"}, @ss_container_id={0x14, 0x10, 0x4, 0xd8, "7063e0ce2f48895983c130bdab0bd82d"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xe, 0x9, 0x3}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x418}}, {0xd5, &(0x7f0000000b40)=@string={0xd5, 0x3, "fd02c6772fedd74f157562d3389138d1157428825fae46a18db9a1a351fb316640c5ef6be7bd4977ef40c715aaf47c06938f82198992ceb03875d6e57ee9234480f9b5d845671274cabdc485f02f5fb644378eabb8b67d7acc94dd64b6fc38ae4e79df5b10e56a4acb946501c768a575a586bd198d7a99b7c3ed75137c6663522a0ac4343da45a1c6fbfe0aff882bf28b56b0825b850e5b31a5039afa77bd77555178dc1cf74c6f63a8afe80a1665037e545a4157c12d8bc35fe09227ea615583a16098f2bad5f0e4100641d964e4bb275feeb"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x807}}, {0xd, &(0x7f0000000c80)=@string={0xd, 0x3, "77cda139e605fcdebae9a7"}}]}) syz_usb_control_io$uac3(r6, &(0x7f0000000e80)={0x14, &(0x7f0000000d40)={0x20, 0x4, 0x6a, {0x6a, 0xd, "2683c5b488b8e217c97c75d2a6cb79136ccf34a2d4d01c04f73d4aff93b2cbfd782a1d459b28638513145aab71558dcf83d0d82f46cf8312d456897a4a5f2ec475ec21ab4d893aa07fbf18eb7a141cb9946f1b31e4366fbb526b66d3c508c095e2a79fbc9dedefd9"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x84, @string={0x84, 0x3, "254487df61345301e3c0b9af570dddb977e514872b0c77a6af3c82db425575a5dc5af5092ee88196b410c6cfb8f10abf14f96e1e8daa7ad8fbcb99bf835286e4a3e3a68901f768b1a9a2d49a2f1be4858bc73a24d5cc8070e9b96b45b955455215f29ef1b37271f2b203c3c9282abc89107eb98829e43eec3ec24ce27084469bcebf"}}}, &(0x7f0000001100)={0x44, &(0x7f0000000ec0)={0x40, 0x5, 0x70, "eebe5d9125a525dbb81c8635c5291f14c6a0e769fab282a693e392b148ea2f141c961801c7dd3315710419a55d7aff7abd3fbda42bcd0e572b65ba31052313fd96f6d7e2e8c65b74e4818b87db7871c53928c8bfbd10cc1df743883ec100567db36c23c8ef422fb9e0aa337282c99a53"}, &(0x7f0000000f40)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000f80)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000fc0)={0x20, 0x81, 0x2, "877a"}, &(0x7f0000001000)={0x20, 0x82, 0x3, "b22f84"}, &(0x7f0000001040)={0x20, 0x83, 0x1, "1b"}, &(0x7f0000001080)={0x20, 0x84, 0x2, 'f%'}, &(0x7f00000010c0)={0x20, 0x85, 0x3, "f3ad43"}}) io_setup(0x4, &(0x7f0000000080)=0x0) io_pgetevents(r7, 0x7, 0x0, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r8, r4, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x105, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_disconnect(0xffffffffffffffff) syz_clone(0x9000, 0x0, 0x43, 0x0, 0x0, 0x0) 3.097530518s ago: executing program 0 (id=166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) 3.08023635s ago: executing program 2 (id=167): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x4}, [], {0x4, 0x7}, [], {0x10, 0x4}, {0x20, 0x7}}, 0x24, 0x2) 2.759154504s ago: executing program 2 (id=168): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff0000000904010102ff0000000705870240"], 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x84, &(0x7f0000000500)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/atm/speedtch0/link_rate\x00', 0x0, 0x0) read(r1, &(0x7f0000000800)=""/64, 0x40) (fail_nth: 2) 2.38489894s ago: executing program 0 (id=169): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) read$nci(0xffffffffffffffff, &(0x7f0000000600)=""/159, 0x9f) write(r1, &(0x7f0000000000)='3', 0x4e) socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x140, 0xab94, 0xd, 0x2, 0x10000007, 0x7fffffff, 0x7fff, 0x6, 0x3, 0xc72d, 0x0, 0x7, 0x40, 0xc, 0x29, 0x72f0, 0x9, 0x7c, 0x4, 0x3fe, 0x4, 0x484, 0xc, 0x9, 0xffe, 0x80000001, 0xa, 0x0, 0x1, 0x8001, 0x1]}) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB="ec5d67a3eb4e87295c3ce53a8f119b33ce83497adc48aafb9db127f0f51dcf6223932b2df8e070c7eb2142d686f54033c33f8909497ea3a09eb5a6b6b88272681a91c5df", @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req={0x2, 0x2, 0xe, 0x9}, 0x10) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x40080000, 0xff, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x10}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket(0x11, 0xa, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x854) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) sendmsg$can_bcm(r5, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x8880) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) 2.383776919s ago: executing program 1 (id=170): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) read(0xffffffffffffffff, &(0x7f00000001c0)=""/54, 0x36) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r3, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000009db29fe0a9fb24771fd87c28949ca22cd4fb00", @ANYRES16=r8, @ANYBLOB="000428bd7000ffdbdf25030000000a000900bbbbbbbbbbbb000005002a000100000005002e0000000000080034000000000005002d0001000000"], 0x40}, 0x1, 0x0, 0x0, 0x900}, 0x80) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2715, 0x0, &(0x7f0000000040)) 2.168866493s ago: executing program 1 (id=171): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff00000007058102"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) 1.329391661s ago: executing program 0 (id=172): sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001214010025bd7000fddbdf2508004f000200000008004b001300000008001500027a00000800030000000001080001"], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x20040800) 1.236477181s ago: executing program 0 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff00000007058102"], 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)=0x6) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) writev(r1, &(0x7f0000001a80)=[{&(0x7f0000000340)="f7aef2a2c921bd4af4c94005869008a585fbeececf0df28015f578afaddde491c71449510c5dcc09961679927606ea7e2bfd417a47d1eaa8753001e250426ecaa4457401561d0d92c3da53acafeda37986710341863df5fcfe7ded82ace5f6605ac73ad295d2df292e4ae3fda920dbc8d8", 0xffffffffffffffa6}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="ca544958117adc8df1faa99b83aae8cbf1e1ee8713b6f96af79a2b8ea29b4bfc902eeba1052558bb96b1272797efcdd6ffe85d38a2a899819867ef8fd665dee7f933e7804c32b3983efa80b239d7b1eace6b19969ba824cd037825f61f90fa6a56a6697b023d9ee45e808521b2f5b0cf3604ccdee34ed900"/133, 0x85}, {&(0x7f0000001a00)="1623c0c79f30e89fea8dfa5f4bd27abe92268f36d384985921f0b941a4a0c7e325f0cef07d5c061e6c9b909bcc19891ed7c78605ca9cd20c2a30bed21750048fe3c6b5b84c79629b331f4bfdb01b59d71764946120c05335096fa16d635ac30db45621eb", 0x64}], 0x4) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0x7) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6002, 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./gadget/dummy_udc\x00', &(0x7f0000000080)='devtmpfs\x00', 0x1000000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x84) write(r2, &(0x7f0000000280)="00000000090219b31eb19d7a453138af7debf747e3fd590001010080320904", 0x1f) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48001, 0x0) ioctl$TIOCMGET(r3, 0x5415, 0x0) 511.844656ms ago: executing program 1 (id=174): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) (async, rerun: 32) r2 = socket$inet(0x2, 0x2, 0x0) (rerun: 32) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async, rerun: 32) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x5c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3c, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c00002b0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e2b67"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x5c}}, 0x0) bind(r3, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r7, 0x301, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2040}, 0x4000100) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x6603b8b3c6d5e489}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x90fb, 0x32}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) listen(r3, 0x5) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580040007"], 0x4a) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000380)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000740)={0x0, 0xb, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) (async, rerun: 64) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000940)={0x40, 0x0, 0x5, "8211638383"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x0, 0x1a, 0x4, "d42fa927"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 470.058751ms ago: executing program 2 (id=175): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff00000007058102"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) (fail_nth: 2) 270.394246ms ago: executing program 3 (id=176): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x4}, [], {0x4, 0x7}, [], {0x10, 0x4}, {0x20, 0x7}}, 0x24, 0x2) 82.313574ms ago: executing program 3 (id=177): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x499, 0x103c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x8, 0x0, 0xfc, {0x8, 0xb, 0x0, 0x2, 0x1, 0x3, 0x20, 0xff}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x5, 0x9, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ef, 0x0, 0x7, 0xd2, {0x8, 0x25, 0x1, 0x80, 0x3f, 0x0, 0x7f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0xc, 0x1a, {0x8, 0x25, 0x1, 0x1, 0xf, 0x7, 0x3}}}}}}}}]}}, 0x0) 0s ago: executing program 3 (id=178): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYBLOB="05000000000000000000e72527369ef6f22c37b42b2d467fecfef02eb2a9020f00000008000300", @ANYRES32=r3, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c0900000a003400020202020202000008000d000200000008000c0064000000"], 0x68}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xa}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x149240, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc}) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000100)) recvmsg(r6, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000180)=""/248, 0xf8}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/79, 0x4f}, {&(0x7f0000002a00)=""/6, 0x6}, {&(0x7f0000002a40)=""/60, 0x3c}, {&(0x7f0000002a80)=""/170, 0xaa}], 0x6, &(0x7f0000002bc0)=""/167, 0xa7}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRESDEC=0x0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts. [ 78.349994][ T5602] cgroup: Unknown subsys name 'net' [ 78.440317][ T5602] cgroup: Unknown subsys name 'cpuset' [ 78.443778][ T5602] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.095821][ T5602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.534755][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.537137][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.545083][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.560137][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.560831][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.654629][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.656357][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.665503][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.673143][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.677253][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.743780][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.755573][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.756594][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.759580][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.763205][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.812478][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.815128][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.815667][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.821155][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.823409][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.325817][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.325967][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.326107][ T5611] bridge_slave_0: entered allmulticast mode [ 85.350388][ T5611] bridge_slave_0: entered promiscuous mode [ 85.360534][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.361612][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.361763][ T5616] bridge_slave_0: entered allmulticast mode [ 85.363774][ T5616] bridge_slave_0: entered promiscuous mode [ 85.413170][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.413339][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.413446][ T5611] bridge_slave_1: entered allmulticast mode [ 85.415310][ T5611] bridge_slave_1: entered promiscuous mode [ 85.419197][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.419469][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.419804][ T5616] bridge_slave_1: entered allmulticast mode [ 85.427831][ T5616] bridge_slave_1: entered promiscuous mode [ 85.506959][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.507100][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.507222][ T5620] bridge_slave_0: entered allmulticast mode [ 85.509047][ T5620] bridge_slave_0: entered promiscuous mode [ 85.563009][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.563183][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.563289][ T5620] bridge_slave_1: entered allmulticast mode [ 85.564684][ T5620] bridge_slave_1: entered promiscuous mode [ 85.600817][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.603634][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.637070][ T52] Bluetooth: hci0: command tx timeout [ 85.662468][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.665195][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.665509][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.665599][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.665717][ T5623] bridge_slave_0: entered allmulticast mode [ 85.672625][ T5623] bridge_slave_0: entered promiscuous mode [ 85.699984][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.720472][ T52] Bluetooth: hci1: command tx timeout [ 85.756443][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.756551][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.756963][ T5623] bridge_slave_1: entered allmulticast mode [ 85.758561][ T5623] bridge_slave_1: entered promiscuous mode [ 85.773282][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.786888][ T5611] team0: Port device team_slave_0 added [ 85.800149][ T52] Bluetooth: hci2: command tx timeout [ 85.838071][ T5611] team0: Port device team_slave_1 added [ 85.840043][ T5616] team0: Port device team_slave_0 added [ 85.876555][ T52] Bluetooth: hci3: command tx timeout [ 85.884711][ T5616] team0: Port device team_slave_1 added [ 85.893209][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.903415][ T5620] team0: Port device team_slave_0 added [ 85.929841][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.929860][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.929878][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.933194][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.001847][ T5620] team0: Port device team_slave_1 added [ 86.002609][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.002620][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.002640][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.037102][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.037154][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.037220][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.119361][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.119380][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.119404][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.121818][ T5623] team0: Port device team_slave_0 added [ 86.194842][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.194860][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.194883][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.233174][ T5623] team0: Port device team_slave_1 added [ 86.274955][ T5611] hsr_slave_0: entered promiscuous mode [ 86.276033][ T5611] hsr_slave_1: entered promiscuous mode [ 86.284588][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.284630][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.284702][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.338523][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.338542][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.338568][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.422474][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.422489][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.422508][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.482273][ T5616] hsr_slave_0: entered promiscuous mode [ 86.483036][ T5616] hsr_slave_1: entered promiscuous mode [ 86.483734][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 86.483815][ T5616] Cannot create hsr debugfs directory [ 86.585637][ T5620] hsr_slave_0: entered promiscuous mode [ 86.592135][ T5620] hsr_slave_1: entered promiscuous mode [ 86.592722][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 86.592742][ T5620] Cannot create hsr debugfs directory [ 86.656406][ T5623] hsr_slave_0: entered promiscuous mode [ 86.657250][ T5623] hsr_slave_1: entered promiscuous mode [ 86.657824][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 86.657850][ T5623] Cannot create hsr debugfs directory [ 87.200006][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.205816][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.221018][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.225480][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.249764][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.253128][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.277243][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.280934][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.338552][ T5620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.355679][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.364024][ T5620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.378238][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.395008][ T5620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.405318][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.407390][ T5620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.423299][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.523841][ T5616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.535144][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.547490][ T5616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.551960][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.552980][ T5616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.555750][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.590526][ T5616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.595196][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.702334][ T5623] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.705849][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.726497][ T52] Bluetooth: hci0: command tx timeout [ 87.728625][ T5623] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.732051][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.734009][ T5623] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.765132][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.775474][ T5623] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.784111][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.806464][ T52] Bluetooth: hci1: command tx timeout [ 87.825908][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.876323][ T52] Bluetooth: hci2: command tx timeout [ 87.895487][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.907514][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.946485][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.946791][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.949910][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.950016][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.964924][ T52] Bluetooth: hci3: command tx timeout [ 88.015464][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.051649][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.051727][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.075703][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.090300][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.090415][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.159413][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.168017][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.195926][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.196034][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.224149][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.224224][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.295201][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.342069][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.342167][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.380936][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.381045][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.231547][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.373079][ T5611] veth0_vlan: entered promiscuous mode [ 89.391298][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.431505][ T5611] veth1_vlan: entered promiscuous mode [ 89.542906][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.544388][ T5611] veth0_macvtap: entered promiscuous mode [ 89.583918][ T5620] veth0_vlan: entered promiscuous mode [ 89.595808][ T5611] veth1_macvtap: entered promiscuous mode [ 89.617878][ T5620] veth1_vlan: entered promiscuous mode [ 89.625133][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.680034][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.705705][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.750369][ T5616] veth0_vlan: entered promiscuous mode [ 89.754918][ T5620] veth0_macvtap: entered promiscuous mode [ 89.770738][ T5620] veth1_macvtap: entered promiscuous mode [ 89.789574][ T5616] veth1_vlan: entered promiscuous mode [ 89.797278][ T52] Bluetooth: hci0: command tx timeout [ 89.861658][ T5623] veth0_vlan: entered promiscuous mode [ 89.863885][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.880874][ T52] Bluetooth: hci1: command tx timeout [ 89.902880][ T5623] veth1_vlan: entered promiscuous mode [ 89.906713][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.938017][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.956335][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.956383][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.956429][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.957479][ T52] Bluetooth: hci2: command tx timeout [ 90.036888][ T52] Bluetooth: hci3: command tx timeout [ 90.045159][ T5616] veth0_macvtap: entered promiscuous mode [ 90.059330][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.059381][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.059420][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.059457][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.094921][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.094947][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.133728][ T5616] veth1_macvtap: entered promiscuous mode [ 90.176017][ T5623] veth0_macvtap: entered promiscuous mode [ 90.213954][ T5623] veth1_macvtap: entered promiscuous mode [ 90.233488][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.233507][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.276098][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.315556][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.341681][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.360220][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.360411][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.360610][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.368185][ T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.381648][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.381696][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.403297][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.460588][ T5611] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.540467][ T1106] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.540515][ T1106] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.546396][ T1106] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.566949][ T1106] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.609290][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.609330][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.759745][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.759767][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.820393][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.820418][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.973953][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.973976][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.020618][ T5767] loop9: detected capacity change from 0 to 255852544 [ 91.127193][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.127216][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.177463][ T987] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.338489][ T987] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 91.344504][ T987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.344541][ T987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.379947][ T987] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 91.379985][ T987] usb 3-1: Manufacturer: syz [ 91.414220][ T987] usb 3-1: config 0 descriptor?? [ 91.495996][ T5775] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2'. [ 91.633132][ T5764] jffs2: notice: (5764) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.756425][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.886376][ T52] Bluetooth: hci0: command tx timeout [ 91.908243][ T25] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 91.909456][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.909489][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.913353][ T25] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 91.913381][ T25] usb 4-1: Manufacturer: syz [ 91.940330][ T25] usb 4-1: config 0 descriptor?? [ 91.958862][ T52] Bluetooth: hci1: command tx timeout [ 91.977398][ T1220] cfg80211: failed to load regulatory.db [ 92.038446][ T52] Bluetooth: hci2: command tx timeout [ 92.116379][ T52] Bluetooth: hci3: command tx timeout [ 92.213223][ T5792] Bluetooth: MGMT ver 1.23 [ 92.371667][ T5798] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.469202][ T5785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.490583][ T5785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.603543][ T987] uclogic 0003:256C:006D.0001: failed retrieving Huion firmware version: -71 [ 92.603611][ T987] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 92.603725][ T987] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 92.644470][ T987] usb 3-1: USB disconnect, device number 2 [ 92.689614][ T5798] ucma_write: process 8 (syz.1.12) changed security contexts after opening file descriptor, this is not allowed. [ 92.972812][ T5777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.985038][ T5777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.025206][ T25] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -71 [ 93.025272][ T25] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 93.027741][ T25] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 93.065765][ T25] usb 4-1: USB disconnect, device number 2 [ 93.160474][ T5814] FAULT_INJECTION: forcing a failure. [ 93.160474][ T5814] name failslab, interval 1, probability 0, space 0, times 1 [ 93.160529][ T5814] CPU: 0 UID: 0 PID: 5814 Comm: syz.1.16 Not tainted syzkaller #0 PREEMPT(full) [ 93.160560][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.160583][ T5814] Call Trace: [ 93.160597][ T5814] [ 93.160608][ T5814] dump_stack_lvl+0xe8/0x150 [ 93.160654][ T5814] should_fail_ex+0x3eb/0x540 [ 93.160688][ T5814] should_failslab+0xa8/0x100 [ 93.160717][ T5814] __kmalloc_noprof+0xf9/0x710 [ 93.160749][ T5814] ? rcu_is_watching+0x16/0xb0 [ 93.160774][ T5814] ? tomoyo_realpath_from_path+0xef/0x640 [ 93.160807][ T5814] ? tomoyo_realpath_from_path+0xef/0x640 [ 93.160844][ T5814] tomoyo_realpath_from_path+0xef/0x640 [ 93.160887][ T5814] tomoyo_check_open_permission+0x229/0x470 [ 93.160912][ T5814] ? tomoyo_check_open_permission+0x1d3/0x470 [ 93.160937][ T5814] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 93.160965][ T5814] ? __asan_memset+0x22/0x50 [ 93.161006][ T5814] ? lockdep_hardirqs_on+0x7b/0x110 [ 93.161073][ T5814] ? tomoyo_file_open+0x163/0x220 [ 93.161106][ T5814] ? devcgroup_check_permission+0x31/0x8f0 [ 93.161146][ T5814] security_file_open+0xa9/0x240 [ 93.161172][ T5814] do_dentry_open+0x495/0x1360 [ 93.161210][ T5814] vfs_open_consume+0x4a/0x350 [ 93.161236][ T5814] ? path_openat+0x14bb/0x1e40 [ 93.161276][ T5814] path_openat+0x14d7/0x1e40 [ 93.161345][ T5814] do_file_open+0x23e/0x4a0 [ 93.161389][ T5814] ? __pfx_do_file_open+0x10/0x10 [ 93.161451][ T5814] ? _raw_spin_unlock+0x28/0x50 [ 93.161484][ T5814] ? alloc_fd+0x651/0x6c0 [ 93.161524][ T5814] do_sys_openat2+0x115/0x200 [ 93.161559][ T5814] ? __pfx_do_sys_openat2+0x10/0x10 [ 93.161594][ T5814] ? do_user_addr_fault+0xd3f/0x1480 [ 93.161636][ T5814] __x64_sys_openat+0x138/0x170 [ 93.161671][ T5814] do_syscall_64+0x166/0x520 [ 93.161694][ T5814] ? trace_irq_disable+0x3b/0x140 [ 93.161730][ T5814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.161758][ T5814] ? clear_bhb_loop+0x70/0xc0 [ 93.161790][ T5814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.161816][ T5814] RIP: 0033:0x7ff5df75e98e [ 93.161849][ T5814] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 93.161870][ T5814] RSP: 002b:00007ff5dd9f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 93.161902][ T5814] RAX: ffffffffffffffda RBX: 00007ff5dd9f66c0 RCX: 00007ff5df75e98e [ 93.161920][ T5814] RDX: 0000000000000000 RSI: 00007ff5dd9f5c00 RDI: ffffffffffffff9c [ 93.161953][ T5814] RBP: 00007ff5dd9f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 93.161968][ T5814] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 93.161984][ T5814] R13: 00007ff5dfa26038 R14: 00007ff5dfa25fa0 R15: 00007fffa0fedf08 [ 93.162023][ T5814] [ 93.162076][ T5814] ERROR: Out of memory at tomoyo_realpath_from_path. [ 93.427864][ T5693] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.606606][ T5693] usb 1-1: Using ep0 maxpacket: 32 [ 93.607348][ T5693] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 93.608652][ T5693] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 93.608679][ T5693] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.608700][ T5693] usb 1-1: config 0 has no interface number 0 [ 93.608742][ T5693] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.611657][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.611683][ T5693] usb 1-1: Product: syz [ 93.611700][ T5693] usb 1-1: Manufacturer: syz [ 93.611716][ T5693] usb 1-1: SerialNumber: syz [ 93.648706][ T5693] usb 1-1: config 0 descriptor?? [ 93.711488][ T5693] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 93.711571][ T5693] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 93.854918][ T5820] syz.2.17 uses obsolete (PF_INET,SOCK_PACKET) [ 93.889366][ T5693] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 93.889703][ T5693] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 94.139061][ T5693] usb 1-1: USB disconnect, device number 2 [ 94.536300][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.687887][ T25] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 94.688963][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.688984][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.689011][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.692214][ T25] usb 3-1: config 0 descriptor?? [ 94.726804][ T1220] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.882636][ T1220] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 94.883969][ T1220] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.884002][ T1220] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.885345][ T1220] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 94.885371][ T1220] usb 2-1: Manufacturer: syz [ 94.887166][ T5693] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.915303][ T5844] FAULT_INJECTION: forcing a failure. [ 94.915303][ T5844] name failslab, interval 1, probability 0, space 0, times 0 [ 94.915443][ T5844] CPU: 1 UID: 0 PID: 5844 Comm: syz.0.28 Not tainted syzkaller #0 PREEMPT(full) [ 94.915513][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.915564][ T5844] Call Trace: [ 94.915593][ T5844] [ 94.915615][ T5844] dump_stack_lvl+0xe8/0x150 [ 94.915724][ T5844] should_fail_ex+0x3eb/0x540 [ 94.915807][ T5844] should_failslab+0xa8/0x100 [ 94.915881][ T5844] __kmalloc_noprof+0xf9/0x710 [ 94.915966][ T5844] ? tomoyo_encode+0x2ad/0x570 [ 94.916038][ T5844] ? tomoyo_encode+0x2ad/0x570 [ 94.916125][ T5844] tomoyo_encode+0x2ad/0x570 [ 94.916222][ T5844] tomoyo_realpath_from_path+0x5fa/0x640 [ 94.916328][ T5844] ? tomoyo_path_number_perm+0x219/0x5f0 [ 94.916392][ T5844] tomoyo_path_number_perm+0x246/0x5f0 [ 94.916471][ T5844] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 94.916526][ T5844] ? __lock_acquire+0x747/0x2de0 [ 94.916654][ T5844] ? hook_file_ioctl+0x1f2/0x600 [ 94.916786][ T5844] ? __fget_files+0x2a/0x420 [ 94.916861][ T5844] ? __fget_files+0x2a/0x420 [ 94.916887][ T5844] ? __fget_files+0x3a2/0x420 [ 94.916913][ T5844] ? __fget_files+0x2a/0x420 [ 94.916945][ T5844] security_file_ioctl+0xc3/0x2a0 [ 94.916981][ T5844] __se_sys_ioctl+0x47/0x170 [ 94.917036][ T5844] do_syscall_64+0x166/0x520 [ 94.917100][ T5844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.917174][ T5844] ? clear_bhb_loop+0x70/0xc0 [ 94.917248][ T5844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.917308][ T5844] RIP: 0033:0x7f1e3319e159 [ 94.917361][ T5844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.917413][ T5844] RSP: 002b:00007f1e34136028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.917478][ T5844] RAX: ffffffffffffffda RBX: 00007f1e33425fa0 RCX: 00007f1e3319e159 [ 94.917521][ T5844] RDX: 0000200000000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 94.917562][ T5844] RBP: 00007f1e34136090 R08: 0000000000000000 R09: 0000000000000000 [ 94.917596][ T5844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.917642][ T5844] R13: 00007f1e33426038 R14: 00007f1e33425fa0 R15: 00007ffed46138e8 [ 94.917743][ T5844] [ 94.949220][ T5844] ERROR: Out of memory at tomoyo_realpath_from_path. [ 95.094695][ T5693] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 95.112246][ T5693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.112402][ T5693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.122872][ T5693] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 95.122920][ T5693] usb 4-1: Manufacturer: syz [ 95.219371][ T5693] usb 4-1: config 0 descriptor?? [ 95.248551][ T1220] usb 2-1: config 0 descriptor?? [ 95.340513][ T5846] netlink: 'syz.0.29': attribute type 21 has an invalid length. [ 95.340587][ T5846] netlink: 'syz.0.29': attribute type 2 has an invalid length. [ 95.460536][ T5838] jffs2: notice: (5838) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 96.188267][ T5850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.192509][ T5850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.194372][ T5851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.195015][ T5851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.328591][ T5693] uclogic 0003:256C:006D.0004: failed retrieving Huion firmware version: -71 [ 96.328663][ T5693] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 96.328777][ T5693] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 96.371703][ T5693] usb 4-1: USB disconnect, device number 3 [ 96.526496][ T987] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.678401][ T987] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 96.681595][ T987] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 96.681621][ T987] usb 1-1: config 1 has no interface number 0 [ 96.685551][ T987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.685578][ T987] usb 1-1: Product: syz [ 96.685593][ T987] usb 1-1: Manufacturer: syz [ 96.685609][ T987] usb 1-1: SerialNumber: syz [ 96.753096][ T987] usb 1-1: 3:1 : does not exist [ 96.753151][ T987] usb 1-1: 3:2 : does not exist [ 97.023443][ T1220] uclogic 0003:256C:006D.0003: failed retrieving Huion firmware version: -71 [ 97.023510][ T1220] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 97.023620][ T1220] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 97.057372][ T1220] usb 2-1: USB disconnect, device number 2 [ 97.203072][ T5862] IPVS: Error connecting to the multicast addr [ 97.301424][ T5864] FAULT_INJECTION: forcing a failure. [ 97.301424][ T5864] name failslab, interval 1, probability 0, space 0, times 0 [ 97.301466][ T5864] CPU: 0 UID: 0 PID: 5864 Comm: syz.3.35 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.301501][ T5864] Tainted: [L]=SOFTLOCKUP [ 97.301510][ T5864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.301525][ T5864] Call Trace: [ 97.301535][ T5864] [ 97.301545][ T5864] dump_stack_lvl+0xe8/0x150 [ 97.301591][ T5864] should_fail_ex+0x3eb/0x540 [ 97.301648][ T5864] should_failslab+0xa8/0x100 [ 97.301679][ T5864] __kmalloc_noprof+0xf9/0x710 [ 97.301718][ T5864] ? blk_rq_map_user_iov+0x3d5/0x1840 [ 97.301745][ T5864] ? blk_rq_map_user_iov+0x3d5/0x1840 [ 97.301779][ T5864] blk_rq_map_user_iov+0x3d5/0x1840 [ 97.301826][ T5864] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 97.301852][ T5864] ? blk_mq_alloc_request+0x420/0x9a0 [ 97.301907][ T5864] ? mark_lock_irq+0x308/0x380 [ 97.301945][ T5864] ? import_ubuf+0xfb/0x1d0 [ 97.301979][ T5864] blk_rq_map_user_io+0x2ae/0x440 [ 97.302009][ T5864] ? __pfx___mutex_trylock_common+0x10/0x10 [ 97.302041][ T5864] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 97.302082][ T5864] ? sg_common_write+0xb2c/0x1310 [ 97.302118][ T5864] ? __mutex_unlock_slowpath+0x731/0x900 [ 97.302152][ T5864] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 97.302184][ T5864] ? sg_link_reserve+0x2a3/0x560 [ 97.302221][ T5864] sg_common_write+0xc73/0x1310 [ 97.302266][ T5864] ? __pfx_sg_common_write+0x10/0x10 [ 97.302318][ T5864] ? __might_fault+0xaf/0x130 [ 97.302361][ T5864] sg_write+0xaf3/0xf10 [ 97.302407][ T5864] ? __pfx_sg_write+0x10/0x10 [ 97.302441][ T5864] ? __pfx_aa_file_perm+0x10/0x10 [ 97.302474][ T5864] ? __pfx_futex_wake_mark+0x10/0x10 [ 97.302538][ T5864] ? bpf_lsm_file_permission+0x9/0x20 [ 97.302569][ T5864] ? security_file_permission+0x75/0x260 [ 97.302623][ T5864] ? rw_verify_area+0x203/0x4c0 [ 97.302660][ T5864] ? __pfx_sg_write+0x10/0x10 [ 97.302687][ T5864] vfs_write+0x296/0xba0 [ 97.302731][ T5864] ? __pfx_vfs_write+0x10/0x10 [ 97.302767][ T5864] ? __fget_files+0x2a/0x420 [ 97.302802][ T5864] ? __fget_files+0x2a/0x420 [ 97.302832][ T5864] ? __fget_files+0x3a2/0x420 [ 97.302864][ T5864] ? __fget_files+0x2a/0x420 [ 97.302905][ T5864] ksys_write+0x150/0x270 [ 97.302943][ T5864] ? __pfx_ksys_write+0x10/0x10 [ 97.302990][ T5864] do_syscall_64+0x166/0x520 [ 97.303015][ T5864] ? trace_irq_disable+0x3b/0x140 [ 97.303051][ T5864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.303079][ T5864] ? clear_bhb_loop+0x70/0xc0 [ 97.303110][ T5864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.303136][ T5864] RIP: 0033:0x7ffa5539e159 [ 97.303159][ T5864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.303180][ T5864] RSP: 002b:00007ffa561f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 97.303208][ T5864] RAX: ffffffffffffffda RBX: 00007ffa55625fa0 RCX: 00007ffa5539e159 [ 97.303228][ T5864] RDX: 0000000000000103 RSI: 0000200000000040 RDI: 0000000000000004 [ 97.303244][ T5864] RBP: 00007ffa5543506b R08: 0000000000000000 R09: 0000000000000000 [ 97.303259][ T5864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.303274][ T5864] R13: 00007ffa55626038 R14: 00007ffa55625fa0 R15: 00007ffef6144038 [ 97.303312][ T5864] [ 97.310868][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 97.311173][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 97.420702][ T25] usb 3-1: USB disconnect, device number 3 [ 97.871635][ T30] usb 1-1: USB disconnect, device number 3 [ 97.891730][ T5873] warning: `syz.1.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.117679][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 98.269066][ T25] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 98.283499][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.283536][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.283576][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.328254][ T25] usb 3-1: config 0 descriptor?? [ 98.343551][ T5891] jffs2: notice: (5891) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 98.687849][ T5898] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 98.698490][ T30] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 98.744204][ T25] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 98.744243][ T25] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 98.744270][ T25] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 98.744297][ T25] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 98.744324][ T25] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 98.744351][ T25] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 98.744378][ T25] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 98.805757][ T25] arvo 0003:1E7D:30D4.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 98.851375][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 98.852159][ T30] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 98.874693][ T30] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 98.885683][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.885736][ T30] usb 4-1: Product: syz [ 98.885753][ T30] usb 4-1: Manufacturer: syz [ 98.885769][ T30] usb 4-1: SerialNumber: syz [ 98.920733][ T30] usb 4-1: config 0 descriptor?? [ 98.934720][ T5869] capability: warning: `syz.2.39' uses deprecated v2 capabilities in a way that may be insecure [ 98.950585][ T30] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 98.950663][ T30] usb 4-1: setting power ON [ 98.976871][ T30] dvb-usb: bulk message failed: -22 (2/0) [ 99.011349][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 99.026467][ T30] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 99.026586][ T30] usb 4-1: media controller created [ 99.078012][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.102825][ T30] usb 4-1: selecting invalid altsetting 6 [ 99.102851][ T30] usb 4-1: digital interface selection failed (-22) [ 99.102867][ T30] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 99.103884][ T30] usb 4-1: setting power OFF [ 99.103923][ T30] dvb-usb: bulk message failed: -22 (2/0) [ 99.103934][ T30] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 99.103943][ T30] (NULL device *): no alternate interface [ 99.162661][ T25] usb 3-1: USB disconnect, device number 4 [ 99.240749][ T30] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 99.244896][ T30] usb 4-1: USB disconnect, device number 4 [ 99.945265][ T5910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.53'. [ 99.945699][ T5910] xt_LOG: prefix is not null-terminated [ 100.161970][ T5923] mmap: syz.3.56 (5923): VmData 37523456 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 100.165286][ T5921] netlink: 72 bytes leftover after parsing attributes in process `syz.2.55'. [ 100.536275][ T5694] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 100.689890][ T5694] usb 3-1: Using ep0 maxpacket: 16 [ 100.690025][ T5946] jffs2: notice: (5946) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 100.691421][ T5694] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 100.692457][ T5694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.692491][ T5694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 100.692518][ T5694] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 100.692561][ T5694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.788795][ T5694] usb 3-1: config 0 descriptor?? [ 101.056346][ T987] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 101.206351][ T987] usb 4-1: Using ep0 maxpacket: 8 [ 101.207081][ T987] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 101.209463][ T987] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 101.252784][ T987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.252814][ T987] usb 4-1: Product: syz [ 101.252830][ T987] usb 4-1: Manufacturer: syz [ 101.252846][ T987] usb 4-1: SerialNumber: syz [ 101.278416][ T987] usb 4-1: config 0 descriptor?? [ 101.298669][ T987] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 101.298722][ T987] usb 4-1: setting power ON [ 101.298741][ T987] dvb-usb: bulk message failed: -22 (2/0) [ 101.329340][ T987] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 101.330126][ T5694] nintendo 0003:057E:2019.0006: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 101.333956][ T987] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 101.334014][ T987] usb 4-1: media controller created [ 101.418120][ T987] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.503690][ T987] usb 4-1: selecting invalid altsetting 6 [ 101.503716][ T987] usb 4-1: digital interface selection failed (-22) [ 101.503731][ T987] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 101.509461][ T987] usb 4-1: setting power OFF [ 101.509523][ T987] dvb-usb: bulk message failed: -22 (2/0) [ 101.509565][ T987] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 101.509598][ T987] (NULL device *): no alternate interface [ 101.634916][ T987] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 101.655930][ T987] usb 4-1: USB disconnect, device number 5 [ 102.522956][ T5694] nintendo 0003:057E:2019.0006: Failed to get joycon info; ret=-71 [ 102.522984][ T5694] nintendo 0003:057E:2019.0006: Failed to retrieve controller info; ret=-71 [ 102.523010][ T5694] nintendo 0003:057E:2019.0006: Failed to initialize controller; ret=-71 [ 102.571135][ T5694] nintendo 0003:057E:2019.0006: probe - fail = -71 [ 102.571394][ T5694] nintendo 0003:057E:2019.0006: probe with driver nintendo failed with error -71 [ 102.627985][ T5694] usb 3-1: USB disconnect, device number 5 [ 102.979789][ T5694] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 103.036301][ T1236] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.149225][ T5694] usb 3-1: Using ep0 maxpacket: 8 [ 103.149967][ T5694] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 103.155768][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 103.155796][ T5694] usb 3-1: Product: syz [ 103.155813][ T5694] usb 3-1: Manufacturer: syz [ 103.155830][ T5694] usb 3-1: SerialNumber: syz [ 103.202549][ T5694] usb 3-1: config 0 descriptor?? [ 103.217155][ T1236] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 103.220150][ T1236] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 103.220179][ T1236] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 103.223575][ T1236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.223600][ T1236] usb 2-1: Product: syz [ 103.223615][ T1236] usb 2-1: Manufacturer: syz [ 103.223631][ T1236] usb 2-1: SerialNumber: syz [ 103.263655][ T5694] gspca_main: sq905-2.14.0 probing 2770:9120 [ 103.284539][ T1236] usb 2-1: config 0 descriptor?? [ 103.302248][ T1236] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 103.948386][ T5694] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110) [ 103.948480][ T5694] sq905 3-1:0.0: probe with driver sq905 failed with error -110 [ 104.094867][ T6048] jffs2: notice: (6048) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 104.179511][ T1236] usb 3-1: USB disconnect, device number 6 [ 104.406370][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.556281][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 104.557323][ T25] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 104.558432][ T25] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 104.560540][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.560557][ T25] usb 1-1: Product: syz [ 104.560568][ T25] usb 1-1: Manufacturer: syz [ 104.560579][ T25] usb 1-1: SerialNumber: syz [ 104.563270][ T25] usb 1-1: config 0 descriptor?? [ 104.598877][ T25] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 104.598931][ T25] usb 1-1: setting power ON [ 104.598949][ T25] dvb-usb: bulk message failed: -22 (2/0) [ 104.641301][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 104.641903][ T25] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 104.641970][ T25] usb 1-1: media controller created [ 104.674310][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.695134][ T25] usb 1-1: selecting invalid altsetting 6 [ 104.695157][ T25] usb 1-1: digital interface selection failed (-22) [ 104.695172][ T25] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 104.695961][ T25] usb 1-1: setting power OFF [ 104.695976][ T25] dvb-usb: bulk message failed: -22 (2/0) [ 104.695986][ T25] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 104.695995][ T25] (NULL device *): no alternate interface [ 104.797932][ T25] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 104.800965][ T25] usb 1-1: USB disconnect, device number 4 [ 105.381751][ T6054] FAULT_INJECTION: forcing a failure. [ 105.381751][ T6054] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.381787][ T6054] CPU: 0 UID: 0 PID: 6054 Comm: syz.0.77 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.381817][ T6054] Tainted: [L]=SOFTLOCKUP [ 105.381825][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.381838][ T6054] Call Trace: [ 105.381852][ T6054] [ 105.381859][ T6054] dump_stack_lvl+0xe8/0x150 [ 105.381884][ T6054] should_fail_ex+0x3eb/0x540 [ 105.381921][ T6054] _copy_to_user+0x31/0xb0 [ 105.381945][ T6054] simple_read_from_buffer+0xe1/0x170 [ 105.381970][ T6054] proc_fail_nth_read+0x1bb/0x230 [ 105.381996][ T6054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.382043][ T6054] ? rw_verify_area+0x24a/0x4c0 [ 105.382077][ T6054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.382116][ T6054] vfs_read+0x213/0xa80 [ 105.382142][ T6054] ? __pfx___mutex_lock+0x10/0x10 [ 105.382158][ T6054] ? __pfx_vfs_read+0x10/0x10 [ 105.382180][ T6054] ? __fget_files+0x2a/0x420 [ 105.382203][ T6054] ? __fget_files+0x3a2/0x420 [ 105.382222][ T6054] ? __fget_files+0x2a/0x420 [ 105.382248][ T6054] ksys_read+0x150/0x270 [ 105.382271][ T6054] ? __pfx_ksys_read+0x10/0x10 [ 105.382300][ T6054] do_syscall_64+0x166/0x520 [ 105.382321][ T6054] ? trace_irq_disable+0x3b/0x140 [ 105.382343][ T6054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.382360][ T6054] ? clear_bhb_loop+0x70/0xc0 [ 105.382379][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.382395][ T6054] RIP: 0033:0x7f1e3315e98e [ 105.382409][ T6054] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 105.382422][ T6054] RSP: 002b:00007f1e34135fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.382438][ T6054] RAX: ffffffffffffffda RBX: 00007f1e341366c0 RCX: 00007f1e3315e98e [ 105.382450][ T6054] RDX: 000000000000000f RSI: 00007f1e341360a0 RDI: 0000000000000005 [ 105.382459][ T6054] RBP: 00007f1e34136090 R08: 0000000000000000 R09: 0000000000000000 [ 105.382469][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.382478][ T6054] R13: 00007f1e33426038 R14: 00007f1e33425fa0 R15: 00007ffed46138e8 [ 105.382501][ T6054] [ 105.675414][ T6056] FAULT_INJECTION: forcing a failure. [ 105.675414][ T6056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.675451][ T6056] CPU: 0 UID: 0 PID: 6056 Comm: syz.2.78 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.675481][ T6056] Tainted: [L]=SOFTLOCKUP [ 105.675489][ T6056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.675501][ T6056] Call Trace: [ 105.675510][ T6056] [ 105.675519][ T6056] dump_stack_lvl+0xe8/0x150 [ 105.675553][ T6056] should_fail_ex+0x3eb/0x540 [ 105.675582][ T6056] strncpy_from_user+0x36/0x2c0 [ 105.675612][ T6056] do_getname+0x77/0x250 [ 105.675641][ T6056] do_sys_openat2+0xcc/0x200 [ 105.675670][ T6056] ? __pfx_do_sys_openat2+0x10/0x10 [ 105.675697][ T6056] ? ksys_write+0x242/0x270 [ 105.675730][ T6056] ? __pfx_ksys_write+0x10/0x10 [ 105.675765][ T6056] __x64_sys_openat+0x138/0x170 [ 105.675797][ T6056] do_syscall_64+0x166/0x520 [ 105.675818][ T6056] ? trace_irq_disable+0x3b/0x140 [ 105.675849][ T6056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.675873][ T6056] ? clear_bhb_loop+0x70/0xc0 [ 105.675898][ T6056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.675920][ T6056] RIP: 0033:0x7f5878d5e98e [ 105.675940][ T6056] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 105.675958][ T6056] RSP: 002b:00007f5876ff5f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 105.675981][ T6056] RAX: ffffffffffffffda RBX: 00007f5876ff66c0 RCX: 00007f5878d5e98e [ 105.675998][ T6056] RDX: 0000000000000000 RSI: 00007f5878e347a6 RDI: ffffffffffffff9c [ 105.676013][ T6056] RBP: 00007f5876ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 105.676027][ T6056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.676040][ T6056] R13: 00007f5879026038 R14: 00007f5879025fa0 R15: 00007fff4f667458 [ 105.676072][ T6056] [ 105.951711][ T987] usb 2-1: USB disconnect, device number 3 [ 106.225727][ T6060] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 106.225887][ T6060] block device autoloading is deprecated and will be removed. [ 106.395385][ T6077] Bluetooth: MGMT ver 1.23 [ 106.606415][ T987] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.757542][ T987] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 106.759234][ T987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.759266][ T987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.760329][ T987] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 106.760354][ T987] usb 2-1: Manufacturer: syz [ 106.764639][ T987] usb 2-1: config 0 descriptor?? [ 106.826301][ T1236] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.978130][ T1236] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 106.979445][ T1236] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.979469][ T1236] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.980978][ T1236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 106.981004][ T1236] usb 1-1: SerialNumber: syz [ 106.982032][ T6075] jffs2: notice: (6075) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 107.160877][ T25] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 107.241328][ T1236] usb 1-1: 0:2 : does not exist [ 107.245500][ T1236] usb 1-1: unit 5 not found! [ 107.307151][ T25] usb 3-1: Invalid ep0 maxpacket: 64 [ 107.413329][ T1236] usb 1-1: USB disconnect, device number 5 [ 107.439456][ T25] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 107.499298][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.585159][ T6094] FAULT_INJECTION: forcing a failure. [ 107.585159][ T6094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.585195][ T6094] CPU: 1 UID: 0 PID: 6094 Comm: syz.3.92 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.585229][ T6094] Tainted: [L]=SOFTLOCKUP [ 107.585236][ T6094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.585245][ T6094] Call Trace: [ 107.585252][ T6094] [ 107.585259][ T6094] dump_stack_lvl+0xe8/0x150 [ 107.585299][ T6094] should_fail_ex+0x3eb/0x540 [ 107.585331][ T6094] _copy_to_user+0x31/0xb0 [ 107.585365][ T6094] simple_read_from_buffer+0xe1/0x170 [ 107.585401][ T6094] proc_fail_nth_read+0x1bb/0x230 [ 107.585428][ T6094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.585474][ T6094] ? rw_verify_area+0x24a/0x4c0 [ 107.585507][ T6094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.585550][ T6094] vfs_read+0x213/0xa80 [ 107.585576][ T6094] ? __pfx___mutex_lock+0x10/0x10 [ 107.585593][ T6094] ? __pfx_vfs_read+0x10/0x10 [ 107.585637][ T6094] ? __fget_files+0x2a/0x420 [ 107.585670][ T6094] ? __fget_files+0x3a2/0x420 [ 107.585697][ T6094] ? __fget_files+0x2a/0x420 [ 107.585728][ T6094] ksys_read+0x150/0x270 [ 107.585752][ T6094] ? __pfx_ksys_read+0x10/0x10 [ 107.585806][ T6094] do_syscall_64+0x166/0x520 [ 107.585827][ T6094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.585850][ T6094] ? clear_bhb_loop+0x70/0xc0 [ 107.585878][ T6094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.585899][ T6094] RIP: 0033:0x7ffa5535e98e [ 107.585924][ T6094] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 107.585956][ T6094] RSP: 002b:00007ffa561f8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.585981][ T6094] RAX: ffffffffffffffda RBX: 00007ffa561f96c0 RCX: 00007ffa5535e98e [ 107.585997][ T6094] RDX: 000000000000000f RSI: 00007ffa561f90a0 RDI: 000000000000000f [ 107.586010][ T6094] RBP: 00007ffa561f9090 R08: 0000000000000000 R09: 0000000000000000 [ 107.586023][ T6094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.586040][ T6094] R13: 00007ffa55626038 R14: 00007ffa55625fa0 R15: 00007ffef6144038 [ 107.586065][ T6094] [ 107.586483][ T25] usb 3-1: Invalid ep0 maxpacket: 64 [ 107.587044][ T25] usb usb3-port1: attempt power cycle [ 107.701362][ T6075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.708023][ T6075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.787693][ T987] uclogic 0003:256C:006D.0007: failed retrieving Huion firmware version: -71 [ 107.787756][ T987] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 107.787865][ T987] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 107.871639][ T987] usb 2-1: USB disconnect, device number 4 [ 107.936256][ T25] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 107.959277][ T25] usb 3-1: Invalid ep0 maxpacket: 64 [ 108.079915][ T6100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.95'. [ 108.088071][ T25] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 108.109593][ T25] usb 3-1: Invalid ep0 maxpacket: 64 [ 108.109863][ T25] usb usb3-port1: unable to enumerate USB device [ 108.447153][ T6110] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 108.450634][ T6110] VFS: Can't find a romfs filesystem on dev nullb0. [ 108.450634][ T6110] [ 108.610769][ T6114] evm: overlay not supported [ 109.166474][ T987] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 109.206390][ T1220] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 109.319545][ T987] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 109.320777][ T987] usb 4-1: config 0 has an invalid interface descriptor of length 8, skipping [ 109.320794][ T987] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.320808][ T987] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 109.320834][ T987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.323231][ T987] usb 4-1: config 0 descriptor?? [ 109.363357][ T1220] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 109.366888][ T1220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.366969][ T1220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.375440][ T1220] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 109.375514][ T1220] usb 1-1: Manufacturer: syz [ 109.402148][ T1220] usb 1-1: config 0 descriptor?? [ 109.618566][ T6125] jffs2: notice: (6125) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 110.166275][ T5694] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.284972][ T6125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.287458][ T6125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.306046][ T1220] uclogic 0003:256C:006D.0008: failed retrieving Huion firmware version: -71 [ 110.306109][ T1220] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 110.306546][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 110.333004][ T1220] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 110.346254][ T5694] usb 2-1: Using ep0 maxpacket: 8 [ 110.347000][ T5694] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 110.347135][ T1220] usb 1-1: USB disconnect, device number 6 [ 110.350489][ T5694] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 110.350515][ T5694] usb 2-1: Product: syz [ 110.350530][ T5694] usb 2-1: Manufacturer: syz [ 110.350547][ T5694] usb 2-1: SerialNumber: syz [ 110.401925][ T5694] usb 2-1: config 0 descriptor?? [ 110.420358][ T5694] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 110.468359][ T25] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 110.469545][ T25] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 110.469571][ T25] usb 3-1: config 0 has no interface number 0 [ 110.469635][ T25] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.472226][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.472253][ T25] usb 3-1: Product: syz [ 110.472268][ T25] usb 3-1: Manufacturer: syz [ 110.472283][ T25] usb 3-1: SerialNumber: syz [ 110.475330][ T25] usb 3-1: config 0 descriptor?? [ 110.523671][ T25] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 110.887603][ C1] usb 3-1: yurex_control_callback - control failed: -2 [ 110.915732][ T1220] usb 3-1: USB disconnect, device number 11 [ 110.930421][ T1220] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 111.060770][ T6142] FAULT_INJECTION: forcing a failure. [ 111.060770][ T6142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.060809][ T6142] CPU: 1 UID: 0 PID: 6142 Comm: syz.0.110 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.060830][ T6142] Tainted: [L]=SOFTLOCKUP [ 111.060836][ T6142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.060845][ T6142] Call Trace: [ 111.060852][ T6142] [ 111.060876][ T6142] dump_stack_lvl+0xe8/0x150 [ 111.060912][ T6142] should_fail_ex+0x3eb/0x540 [ 111.060941][ T6142] _copy_from_user+0x2d/0xb0 [ 111.060973][ T6142] kstrtouint_from_user+0xd6/0x180 [ 111.060992][ T6142] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 111.061032][ T6142] ? lock_acquire+0x115/0x350 [ 111.061074][ T6142] proc_fail_nth_write+0x8e/0x210 [ 111.061110][ T6142] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 111.061150][ T6142] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 111.061184][ T6142] vfs_write+0x296/0xba0 [ 111.061241][ T6142] ? __pfx_vfs_write+0x10/0x10 [ 111.061273][ T6142] ? __fget_files+0x2a/0x420 [ 111.061313][ T6142] ? __fget_files+0x3a2/0x420 [ 111.061338][ T6142] ? __fget_files+0x2a/0x420 [ 111.061395][ T6142] ksys_write+0x150/0x270 [ 111.061449][ T6142] ? __pfx_ksys_write+0x10/0x10 [ 111.061508][ T6142] do_syscall_64+0x166/0x520 [ 111.061530][ T6142] ? trace_irq_disable+0x3b/0x140 [ 111.061562][ T6142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.061585][ T6142] ? clear_bhb_loop+0x70/0xc0 [ 111.061614][ T6142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.061636][ T6142] RIP: 0033:0x7f1e3315e98e [ 111.061656][ T6142] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 111.061675][ T6142] RSP: 002b:00007f1e34135fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.061699][ T6142] RAX: ffffffffffffffda RBX: 00007f1e341366c0 RCX: 00007f1e3315e98e [ 111.061715][ T6142] RDX: 0000000000000001 RSI: 00007f1e341360a0 RDI: 0000000000000003 [ 111.061728][ T6142] RBP: 00007f1e34136090 R08: 0000000000000000 R09: 0000000000000000 [ 111.061741][ T6142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.061760][ T6142] R13: 00007f1e33426038 R14: 00007f1e33425fa0 R15: 00007ffed46138e8 [ 111.061785][ T6142] [ 111.103289][ T6143] FAULT_INJECTION: forcing a failure. [ 111.103289][ T6143] name failslab, interval 1, probability 0, space 0, times 0 [ 111.103455][ T6143] CPU: 1 UID: 0 PID: 6143 Comm: syz.1.107 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.103535][ T6143] Tainted: [L]=SOFTLOCKUP [ 111.103558][ T6143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.103600][ T6143] Call Trace: [ 111.103628][ T6143] [ 111.103652][ T6143] dump_stack_lvl+0xe8/0x150 [ 111.103744][ T6143] should_fail_ex+0x3eb/0x540 [ 111.103825][ T6143] should_failslab+0xa8/0x100 [ 111.103909][ T6143] __kmalloc_noprof+0xf9/0x710 [ 111.103998][ T6143] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 111.104074][ T6143] ? hash_ipportnet4_add+0x148a/0x30d0 [ 111.104149][ T6143] ? hash_ipportnet4_add+0x148a/0x30d0 [ 111.104249][ T6143] hash_ipportnet4_add+0x148a/0x30d0 [ 111.104367][ T6143] ? ip_set_get_ipaddr4+0x107/0x2c0 [ 111.104440][ T6143] ? hash_ipportnet4_add+0x3e1/0x30d0 [ 111.104530][ T6143] ? ip_set_range_to_cidr+0x170/0x1e0 [ 111.104621][ T6143] hash_ipportnet4_uadt+0xfb4/0x13e0 [ 111.104735][ T6143] ? __pfx_hash_ipportnet4_add+0x10/0x10 [ 111.104834][ T6143] ? __pfx_hash_ipportnet4_uadt+0x10/0x10 [ 111.104913][ T6143] ? __nla_validate_parse+0x2429/0x2d50 [ 111.105056][ T6143] call_ad+0x18d/0xb50 [ 111.105124][ T6143] ? __lock_acquire+0x747/0x2de0 [ 111.105233][ T6143] ? __pfx_call_ad+0x10/0x10 [ 111.105353][ T6143] ? __nla_parse+0x40/0x60 [ 111.105448][ T6143] ip_set_ad+0x82a/0x9d0 [ 111.105549][ T6143] ? __pfx_ip_set_ad+0x10/0x10 [ 111.105623][ T6143] ? __mutex_lock+0x305/0x15a0 [ 111.105785][ T6143] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 111.105852][ T6143] ? unwind_get_return_address+0x4d/0x90 [ 111.105924][ T6143] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 111.106046][ T6143] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 111.106272][ T6143] netlink_rcv_skb+0x226/0x4a0 [ 111.106346][ T6143] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 111.106373][ T6143] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.106411][ T6143] ? bpf_lsm_capable+0x9/0x20 [ 111.106439][ T6143] ? security_capable+0x7e/0x2c0 [ 111.106470][ T6143] nfnetlink_rcv+0x2b9/0x28c0 [ 111.106499][ T6143] ? __dev_queue_xmit+0x29b/0x3820 [ 111.106530][ T6143] ? __local_bh_enable_ip+0xd6/0x140 [ 111.106555][ T6143] ? lockdep_hardirqs_on+0x7b/0x110 [ 111.106587][ T6143] ? __dev_queue_xmit+0x29b/0x3820 [ 111.106612][ T6143] ? __local_bh_enable_ip+0xd6/0x140 [ 111.106635][ T6143] ? __dev_queue_xmit+0x29b/0x3820 [ 111.106662][ T6143] ? __dev_queue_xmit+0x1edc/0x3820 [ 111.106688][ T6143] ? do_syscall_64+0x166/0x520 [ 111.106706][ T6143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.106741][ T6143] ? __dev_queue_xmit+0x29b/0x3820 [ 111.106768][ T6143] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 111.106801][ T6143] ? __pfx___dev_queue_xmit+0x10/0x10 [ 111.106836][ T6143] ? ref_tracker_free+0x689/0x830 [ 111.106866][ T6143] ? __pfx_ref_tracker_free+0x10/0x10 [ 111.106893][ T6143] ? __asan_memcpy+0x40/0x70 [ 111.106922][ T6143] ? __skb_clone+0x5c/0x6c0 [ 111.106951][ T6143] ? __skb_clone+0x449/0x6c0 [ 111.107026][ T6143] ? skb_clone+0x246/0x3a0 [ 111.107129][ T6143] ? __netlink_deliver_tap+0x811/0x860 [ 111.107222][ T6143] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.107325][ T6143] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.107402][ T6143] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.107484][ T6143] netlink_unicast+0x7bd/0x940 [ 111.107591][ T6143] netlink_sendmsg+0x7c3/0xae0 [ 111.107675][ T6143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.107782][ T6143] ? apparmor_socket_sendmsg+0x18b/0x360 [ 111.107850][ T6143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.107932][ T6143] sock_sendmsg_nosec+0x13a/0x180 [ 111.108029][ T6143] ____sys_sendmsg+0x54e/0x850 [ 111.108108][ T6143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.108215][ T6143] ? import_iovec+0x73/0xa0 [ 111.108303][ T6143] ___sys_sendmsg+0x2a5/0x360 [ 111.108370][ T6143] ? __lock_acquire+0x747/0x2de0 [ 111.108484][ T6143] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.108582][ T6143] ? futex_wait+0x2a2/0x390 [ 111.108737][ T6143] ? __fget_files+0x2a/0x420 [ 111.108815][ T6143] ? __fget_files+0x3a2/0x420 [ 111.108920][ T6143] __x64_sys_sendmsg+0x1b1/0x290 [ 111.109012][ T6143] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 111.109136][ T6143] do_syscall_64+0x166/0x520 [ 111.109200][ T6143] ? trace_irq_disable+0x3b/0x140 [ 111.109288][ T6143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.109352][ T6143] ? clear_bhb_loop+0x70/0xc0 [ 111.109427][ T6143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.109491][ T6143] RIP: 0033:0x7ff5df79e159 [ 111.109554][ T6143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.109599][ T6143] RSP: 002b:00007ff5dd9b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.109663][ T6143] RAX: ffffffffffffffda RBX: 00007ff5dfa26180 RCX: 00007ff5df79e159 [ 111.109693][ T6143] RDX: 0000000020004000 RSI: 0000200000000100 RDI: 0000000000000007 [ 111.109736][ T6143] RBP: 00007ff5df83506b R08: 0000000000000000 R09: 0000000000000000 [ 111.109770][ T6143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.109811][ T6143] R13: 00007ff5dfa26218 R14: 00007ff5dfa26180 R15: 00007fffa0fedf08 [ 111.109938][ T6143] [ 111.347314][ T5694] gspca_zc3xx: reg_w_i err -110 [ 111.347401][ T5694] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 111.927432][ T5694] usb 2-1: USB disconnect, device number 5 [ 111.955114][ T1220] usb 4-1: USB disconnect, device number 6 [ 112.141987][ T44] IPVS: starting estimator thread 0... [ 112.142640][ T6156] netlink: 64 bytes leftover after parsing attributes in process `syz.3.114'. [ 112.246362][ T6157] IPVS: using max 39 ests per chain, 93600 per kthread [ 112.454216][ T6167] FAULT_INJECTION: forcing a failure. [ 112.454216][ T6167] name failslab, interval 1, probability 0, space 0, times 0 [ 112.454241][ T6167] CPU: 1 UID: 0 PID: 6167 Comm: syz.3.116 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.454262][ T6167] Tainted: [L]=SOFTLOCKUP [ 112.454268][ T6167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.454277][ T6167] Call Trace: [ 112.454283][ T6167] [ 112.454290][ T6167] dump_stack_lvl+0xe8/0x150 [ 112.454316][ T6167] should_fail_ex+0x3eb/0x540 [ 112.454338][ T6167] should_failslab+0xa8/0x100 [ 112.454356][ T6167] __kmalloc_noprof+0xf9/0x710 [ 112.454378][ T6167] ? rcu_is_watching+0x16/0xb0 [ 112.454395][ T6167] ? tomoyo_realpath_from_path+0xef/0x640 [ 112.454415][ T6167] ? tomoyo_realpath_from_path+0xef/0x640 [ 112.454440][ T6167] tomoyo_realpath_from_path+0xef/0x640 [ 112.454467][ T6167] ? tomoyo_path_number_perm+0x219/0x5f0 [ 112.454484][ T6167] tomoyo_path_number_perm+0x246/0x5f0 [ 112.454502][ T6167] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 112.454518][ T6167] ? __lock_acquire+0x747/0x2de0 [ 112.454552][ T6167] ? hook_file_ioctl+0x1f2/0x600 [ 112.454583][ T6167] ? __fget_files+0x2a/0x420 [ 112.454609][ T6167] ? __fget_files+0x2a/0x420 [ 112.454628][ T6167] ? __fget_files+0x3a2/0x420 [ 112.454647][ T6167] ? __fget_files+0x2a/0x420 [ 112.454670][ T6167] security_file_ioctl+0xc3/0x2a0 [ 112.454696][ T6167] __se_sys_ioctl+0x47/0x170 [ 112.454724][ T6167] do_syscall_64+0x166/0x520 [ 112.454738][ T6167] ? trace_irq_disable+0x3b/0x140 [ 112.454761][ T6167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.454777][ T6167] ? clear_bhb_loop+0x70/0xc0 [ 112.454797][ T6167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.454812][ T6167] RIP: 0033:0x7ffa5539e159 [ 112.454826][ T6167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.454839][ T6167] RSP: 002b:00007ffa561f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.454856][ T6167] RAX: ffffffffffffffda RBX: 00007ffa55625fa0 RCX: 00007ffa5539e159 [ 112.454867][ T6167] RDX: 0000200000000100 RSI: 00000000400452c9 RDI: 0000000000000008 [ 112.454877][ T6167] RBP: 00007ffa561f9090 R08: 0000000000000000 R09: 0000000000000000 [ 112.454887][ T6167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.454896][ T6167] R13: 00007ffa55626038 R14: 00007ffa55625fa0 R15: 00007ffef6144038 [ 112.454950][ T6167] [ 112.454960][ T6167] ERROR: Out of memory at tomoyo_realpath_from_path. [ 112.922739][ T6173] jffs2: notice: (6173) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 113.406502][ T1220] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 113.455333][ T6187] netlink: 'syz.2.122': attribute type 4 has an invalid length. [ 113.455357][ T6187] netlink: 'syz.2.122': attribute type 5 has an invalid length. [ 113.455371][ T6187] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.122'. [ 113.456013][ T6187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.122'. [ 113.566298][ T1220] usb 2-1: Using ep0 maxpacket: 8 [ 113.568141][ T1220] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 113.571162][ T1220] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 113.571189][ T1220] usb 2-1: config 0 has no interface number 0 [ 113.571229][ T1220] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 113.571254][ T1220] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 113.571280][ T1220] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 113.571306][ T1220] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 113.571349][ T1220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.669844][ T1220] usb 2-1: config 0 descriptor?? [ 113.673313][ T6195] netlink: 28 bytes leftover after parsing attributes in process `syz.3.124'. [ 113.712116][ T1220] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 113.825249][ T6191] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 113.882278][ T6177] FAULT_INJECTION: forcing a failure. [ 113.882278][ T6177] name failslab, interval 1, probability 0, space 0, times 0 [ 113.882390][ T6177] CPU: 0 UID: 0 PID: 6177 Comm: syz.1.119 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.882421][ T6177] Tainted: [L]=SOFTLOCKUP [ 113.882430][ T6177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.882443][ T6177] Call Trace: [ 113.882452][ T6177] [ 113.882461][ T6177] dump_stack_lvl+0xe8/0x150 [ 113.882500][ T6177] should_fail_ex+0x3eb/0x540 [ 113.882531][ T6177] should_failslab+0xa8/0x100 [ 113.882558][ T6177] __kmalloc_cache_noprof+0x9e/0x600 [ 113.882593][ T6177] ? dummy_urb_enqueue+0x7c/0x780 [ 113.882618][ T6177] ? dummy_urb_enqueue+0x7c/0x780 [ 113.882653][ T6177] dummy_urb_enqueue+0x7c/0x780 [ 113.882679][ T6177] ? usb_hcd_map_urb_for_dma+0x435/0xc50 [ 113.882713][ T6177] usb_hcd_submit_urb+0x328/0x1b60 [ 113.882751][ T6177] ld_usb_write+0x920/0xd00 [ 113.882775][ T6177] ? kstrtouint+0x6e/0xe0 [ 113.882806][ T6177] ? __pfx_ld_usb_write+0x10/0x10 [ 113.882830][ T6177] ? apparmor_file_permission+0x1fb/0x2b0 [ 113.882868][ T6177] ? bpf_lsm_file_permission+0x9/0x20 [ 113.882895][ T6177] ? security_file_permission+0x75/0x260 [ 113.882930][ T6177] ? rw_verify_area+0x203/0x4c0 [ 113.882972][ T6177] vfs_writev+0x4bb/0x990 [ 113.882998][ T6177] ? __pfx_ld_usb_write+0x10/0x10 [ 113.883029][ T6177] ? __pfx_vfs_writev+0x10/0x10 [ 113.883068][ T6177] ? __fget_files+0x2a/0x420 [ 113.883102][ T6177] ? __fget_files+0x3a2/0x420 [ 113.883130][ T6177] ? __fget_files+0x2a/0x420 [ 113.883167][ T6177] do_writev+0x154/0x2e0 [ 113.883194][ T6177] ? __pfx_do_writev+0x10/0x10 [ 113.883230][ T6177] do_syscall_64+0x166/0x520 [ 113.883251][ T6177] ? trace_irq_disable+0x3b/0x140 [ 113.883283][ T6177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.883306][ T6177] ? clear_bhb_loop+0x70/0xc0 [ 113.883334][ T6177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.883357][ T6177] RIP: 0033:0x7ff5df79e159 [ 113.883378][ T6177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.883396][ T6177] RSP: 002b:00007ff5dd9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 113.883420][ T6177] RAX: ffffffffffffffda RBX: 00007ff5dfa25fa0 RCX: 00007ff5df79e159 [ 113.883436][ T6177] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000005 [ 113.883451][ T6177] RBP: 00007ff5dd9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 113.883465][ T6177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.883479][ T6177] R13: 00007ff5dfa26038 R14: 00007ff5dfa25fa0 R15: 00007fffa0fedf08 [ 113.883514][ T6177] [ 114.062696][ T6177] ldusb 2-1:0.55: Couldn't submit interrupt_out_urb -12 [ 114.073798][ T25] usb 2-1: USB disconnect, device number 6 [ 114.214667][ T25] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 114.291027][ T6204] FAULT_INJECTION: forcing a failure. [ 114.291027][ T6204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.291075][ T6204] CPU: 0 UID: 0 PID: 6204 Comm: syz.1.129 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.291106][ T6204] Tainted: [L]=SOFTLOCKUP [ 114.291114][ T6204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.291127][ T6204] Call Trace: [ 114.291135][ T6204] [ 114.291144][ T6204] dump_stack_lvl+0xe8/0x150 [ 114.291191][ T6204] should_fail_ex+0x3eb/0x540 [ 114.291222][ T6204] _copy_from_iter+0x1d3/0x1660 [ 114.291262][ T6204] ? __pfx__copy_from_iter+0x10/0x10 [ 114.291286][ T6204] ? trace_kmalloc+0x2a/0xf0 [ 114.291321][ T6204] ? __kmalloc_noprof+0x387/0x710 [ 114.291353][ T6204] ? __kmalloc_noprof+0x1a6/0x710 [ 114.291382][ T6204] ? kernfs_fop_write_iter+0x157/0x540 [ 114.291414][ T6204] kernfs_fop_write_iter+0x19a/0x540 [ 114.291445][ T6204] vfs_write+0x612/0xba0 [ 114.291484][ T6204] ? __pfx_vfs_write+0x10/0x10 [ 114.291535][ T6204] ? __fget_files+0x2a/0x420 [ 114.291575][ T6204] ksys_write+0x150/0x270 [ 114.291609][ T6204] ? __pfx_ksys_write+0x10/0x10 [ 114.291652][ T6204] do_syscall_64+0x166/0x520 [ 114.291672][ T6204] ? trace_irq_disable+0x3b/0x140 [ 114.291705][ T6204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.291728][ T6204] ? clear_bhb_loop+0x70/0xc0 [ 114.291757][ T6204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.291780][ T6204] RIP: 0033:0x7ff5df79e159 [ 114.291807][ T6204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.291825][ T6204] RSP: 002b:00007ff5dd9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 114.291854][ T6204] RAX: ffffffffffffffda RBX: 00007ff5dfa25fa0 RCX: 00007ff5df79e159 [ 114.291870][ T6204] RDX: 0000000000000005 RSI: 0000200000000680 RDI: 0000000000000003 [ 114.291884][ T6204] RBP: 00007ff5dd9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 114.291898][ T6204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.291911][ T6204] R13: 00007ff5dfa26038 R14: 00007ff5dfa25fa0 R15: 00007fffa0fedf08 [ 114.291947][ T6204] [ 114.309643][ T5694] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 114.500694][ T5694] usb 3-1: Using ep0 maxpacket: 8 [ 114.511322][ T5765] udevd[5765]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 114.543310][ T5694] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 114.554514][ T5694] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 114.554544][ T5694] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.554564][ T5694] usb 3-1: config 0 has no interface number 0 [ 114.554603][ T5694] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 114.554625][ T5694] usb 3-1: config 0 interface 52 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 114.554650][ T5694] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.554676][ T5694] usb 3-1: config 0 interface 52 has no altsetting 0 [ 114.564626][ T5694] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 114.564655][ T5694] usb 3-1: Manufacturer: syz [ 114.645572][ T5694] usb 3-1: config 0 descriptor?? [ 114.653454][ T5694] hub 3-1:0.52: bad descriptor, ignoring hub [ 114.653494][ T5694] hub 3-1:0.52: probe with driver hub failed with error -5 [ 114.743704][ T6208] netlink: 40 bytes leftover after parsing attributes in process `syz.3.128'. [ 114.744009][ T6208] openvswitch: netlink: Flow key attr not present in new flow. [ 115.060488][ T6222] jffs2: notice: (6222) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 115.699034][ T6226] serial 00:02: in use; can't configure [ 116.028268][ T6245] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 116.061589][ T6248] ubi0: attaching mtd0 [ 116.064413][ T6245] Bluetooth: ISO socket layer initialized [ 116.122571][ T6248] ubi0: scanning is finished [ 116.122662][ T6248] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 116.362390][ T6248] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 116.416392][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 116.529331][ T6258] jffs2: notice: (6258) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 116.548072][ T25] usb 1-1: device descriptor read/64, error -71 [ 116.788036][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 116.807461][ T5694] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 116.899730][ T6266] netlink: 102 bytes leftover after parsing attributes in process `syz.2.149'. [ 116.922495][ T25] usb 1-1: device descriptor read/64, error -71 [ 116.967210][ T5694] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 116.968412][ T5694] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.968474][ T5694] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 116.968501][ T5694] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.971107][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.971135][ T5694] usb 2-1: Product: syz [ 116.971151][ T5694] usb 2-1: Manufacturer: syz [ 116.971168][ T5694] usb 2-1: SerialNumber: syz [ 117.027657][ T25] usb usb1-port1: attempt power cycle [ 117.110373][ T6269] netlink: 'syz.2.151': attribute type 21 has an invalid length. [ 117.136270][ T1236] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 117.287077][ T1236] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 117.288994][ T1236] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.289058][ T1236] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 117.289086][ T1236] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.295805][ T1236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.295833][ T1236] usb 4-1: Product: syz [ 117.295849][ T1236] usb 4-1: Manufacturer: syz [ 117.295864][ T1236] usb 4-1: SerialNumber: syz [ 117.401917][ T6261] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 117.416320][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 117.420845][ T31] audit: type=1800 audit(1790161410.936:2): pid=6275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.153" name="devlink" dev="sda1" ino=2043 res=0 errno=0 [ 117.423145][ T6275] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 117.468854][ T25] usb 1-1: device descriptor read/8, error -71 [ 117.706643][ T25] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 117.726936][ T25] usb 1-1: device descriptor read/8, error -71 [ 117.775758][ T6267] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 117.822940][ T5694] ATM dev 0: failed to start ADSL synchronisation: -71 [ 117.823443][ C0] ATM dev 0: usbatm_complete: urb 0xffff888033ad5a00 failed (-71)! [ 117.823515][ C0] ATM dev 0: usbatm_complete: urb 0xffff888033ad5100 failed (-71)! [ 117.823574][ C0] ATM dev 0: usbatm_complete: urb 0xffff888033ad5700 failed (-71)! [ 117.823629][ C0] ATM dev 0: usbatm_complete: urb 0xffff888033ad5f00 failed (-71)! [ 117.867605][ T25] usb usb1-port1: unable to enumerate USB device [ 117.873517][ T5694] usb 2-1: USB disconnect, device number 7 [ 118.207837][ T1236] ATM dev 0: failed to start ADSL synchronisation: -71 [ 118.208104][ C1] ATM dev 0: usbatm_complete: urb 0xffff88802a7bc500 failed (-71)! [ 118.208165][ C1] ATM dev 0: usbatm_complete: urb 0xffff88802a7f1200 failed (-71)! [ 118.208220][ C1] ATM dev 0: usbatm_complete: urb 0xffff888029664a00 failed (-71)! [ 118.208275][ C1] ATM dev 0: usbatm_complete: urb 0xffff8880298c6000 failed (-71)! [ 118.213259][ T1236] usb 4-1: USB disconnect, device number 7 [ 118.274070][ T25] usb 3-1: USB disconnect, device number 12 [ 118.354019][ T6289] jffs2: notice: (6289) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 118.463751][ T6292] kAFS: No cell specified [ 118.814527][ T6304] netlink: 56 bytes leftover after parsing attributes in process `syz.3.164'. [ 118.881464][ T6304] kvm [6303]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 118.881536][ T6304] kvm [6303]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 118.883796][ T6304] kvm [6303]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 118.886301][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 118.890656][ T6304] kvm [6303]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 118.890849][ T6304] kvm [6303]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 119.036517][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 119.037142][ T25] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 119.038367][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.038399][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 119.038417][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.040493][ T25] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 119.040511][ T25] usb 2-1: Product: syz [ 119.040521][ T25] usb 2-1: Manufacturer: syz [ 119.040532][ T25] usb 2-1: SerialNumber: syz [ 119.042929][ T25] usb 2-1: config 0 descriptor?? [ 119.171553][ T25] rc_core: IR keymap rc-imon-rsc not found [ 119.171568][ T25] Registered IR keymap rc-empty [ 119.189367][ T25] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 119.195903][ T25] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 119.258726][ T1236] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 119.352196][ T25] usb 2-1: USB disconnect, device number 8 [ 119.409387][ T1236] usb 4-1: Using ep0 maxpacket: 8 [ 119.412314][ T1236] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 119.414383][ T1236] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 222, changing to 7 [ 119.414427][ T1236] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 119.421664][ T1236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.421691][ T1236] usb 4-1: Product: И [ 119.421708][ T1236] usb 4-1: Manufacturer: 倊 [ 119.421723][ T1236] usb 4-1: SerialNumber: ˽矆俗甕퍢鄸털琕舨깟ꅆ릍ꎡﭑ昱앀毯뷧睉䃯ᗇټ输ᦂ銉냎甸䐣呂杅琒뷊藄⿰뙟㝄ꮎ뚸穽铌擝ﲶ길祎察䩪铋ť棇疥蚥ᦽ窍랙፵晼剣ਪ㓄ꐽᱚ뽯꿠苸⢿段┈傸돥倚꼹箧痗᝕속瓏診胾暡㝐䗥ᖤቼ볘︵∉꙾堕ᘺ載괫๟Aᵤ亖뉋﹵ [ 119.543975][ T6311] kvm [6310]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 119.544073][ T6311] kvm [6310]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 119.583248][ T6311] kvm [6310]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 119.616094][ T6311] kvm [6310]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 119.618008][ T6311] kvm [6310]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 119.729072][ T1236] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 119.787877][ T1236] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 119.823416][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.916547][ T5693] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 119.992473][ T6322] FAULT_INJECTION: forcing a failure. [ 119.992473][ T6322] name failslab, interval 1, probability 0, space 0, times 0 [ 119.992514][ T6322] CPU: 0 UID: 0 PID: 6322 Comm: syz.0.169 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.992548][ T6322] Tainted: [L]=SOFTLOCKUP [ 119.992557][ T6322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.992571][ T6322] Call Trace: [ 119.992580][ T6322] [ 119.992590][ T6322] dump_stack_lvl+0xe8/0x150 [ 119.992628][ T6322] should_fail_ex+0x3eb/0x540 [ 119.992660][ T6322] should_failslab+0xa8/0x100 [ 119.992688][ T6322] __kmalloc_noprof+0xf9/0x710 [ 119.992722][ T6322] ? comedi_alloc_spriv+0x2d/0xa0 [ 119.992749][ T6322] ? comedi_alloc_spriv+0x2d/0xa0 [ 119.992783][ T6322] comedi_alloc_spriv+0x2d/0xa0 [ 119.992812][ T6322] subdev_8255_io_init+0x2d/0x330 [ 119.992846][ T6322] das16m1_attach+0x7ee/0xb10 [ 119.992881][ T6322] comedi_device_attach+0x52d/0x720 [ 119.992926][ T6322] comedi_unlocked_ioctl+0x8ef/0x1af0 [ 119.992974][ T6322] ? kasan_quarantine_put+0xbb/0x1f0 [ 119.993009][ T6322] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 119.993057][ T6322] ? do_vfs_ioctl+0x116f/0x1530 [ 119.993083][ T6322] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 119.993127][ T6322] ? hook_file_ioctl+0x1f2/0x600 [ 119.993176][ T6322] ? __fget_files+0x2a/0x420 [ 119.993209][ T6322] ? __fget_files+0x2a/0x420 [ 119.993237][ T6322] ? __fget_files+0x3a2/0x420 [ 119.993265][ T6322] ? __fget_files+0x2a/0x420 [ 119.993298][ T6322] ? bpf_lsm_file_ioctl+0x9/0x20 [ 119.993327][ T6322] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 119.993358][ T6322] __se_sys_ioctl+0xfc/0x170 [ 119.993397][ T6322] do_syscall_64+0x166/0x520 [ 119.993418][ T6322] ? trace_irq_disable+0x3b/0x140 [ 119.993451][ T6322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.993475][ T6322] ? clear_bhb_loop+0x70/0xc0 [ 119.993504][ T6322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.993527][ T6322] RIP: 0033:0x7f1e3319e159 [ 119.993549][ T6322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.993568][ T6322] RSP: 002b:00007f1e34136028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.993593][ T6322] RAX: ffffffffffffffda RBX: 00007f1e33425fa0 RCX: 00007f1e3319e159 [ 119.993612][ T6322] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000006 [ 119.993628][ T6322] RBP: 00007f1e3323506b R08: 0000000000000000 R09: 0000000000000000 [ 119.993647][ T6322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.993661][ T6322] R13: 00007f1e33426038 R14: 00007f1e33425fa0 R15: 00007ffed46138e8 [ 119.993697][ T6322] [ 120.018886][ T6322] fuse: Bad value for 'user_id' [ 120.018940][ T6322] fuse: Bad value for 'user_id' [ 120.088421][ T5693] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 120.173399][ T5693] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.173472][ T5693] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 120.173501][ T5693] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.227880][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.227910][ T5693] usb 3-1: Product: syz [ 120.227927][ T5693] usb 3-1: Manufacturer: syz [ 120.227944][ T5693] usb 3-1: SerialNumber: syz [ 120.646378][ T1220] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 120.774557][ T6318] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 120.810212][ T1220] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 120.811558][ T1220] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.811608][ T1220] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.811631][ T1220] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 120.811656][ T1220] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.842290][ T1220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.842380][ T1220] usb 2-1: Product: syz [ 120.842426][ T1220] usb 2-1: Manufacturer: syz [ 120.842469][ T1220] usb 2-1: SerialNumber: syz [ 120.917137][ T1220] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 120.917163][ T1220] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 120.917216][ T1220] usbserial_generic 2-1:1.0: generic converter detected [ 120.968558][ T1220] usb 2-1: generic converter now attached to ttyUSB0 [ 121.183338][ T10] usb 2-1: USB disconnect, device number 9 [ 121.211618][ T5693] ATM dev 0: failed to start ADSL synchronisation: -71 [ 121.211892][ C1] ATM dev 0: usbatm_complete: urb 0xffff88802a590b00 failed (-71)! [ 121.243126][ T5693] usb 3-1: USB disconnect, device number 13 [ 121.243342][ T10] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 121.251801][ T10] usbserial_generic 2-1:1.0: device disconnected [ 121.269925][ T1220] usb 4-1: USB disconnect, device number 8 [ 121.506309][ T30] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 121.657011][ T30] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 121.658297][ T30] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.658347][ T30] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.658380][ T30] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 121.658409][ T30] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.660439][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.660465][ T30] usb 1-1: Product: syz [ 121.660480][ T30] usb 1-1: Manufacturer: syz [ 121.660495][ T30] usb 1-1: SerialNumber: syz [ 121.677518][ T30] usbserial_generic 1-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 121.677582][ T30] usbserial_generic 1-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 121.677691][ T30] usbserial_generic 1-1:1.0: generic converter detected [ 121.691463][ T30] usb 1-1: generic converter now attached to ttyUSB0 [ 121.996886][ T1236] usb 1-1: USB disconnect, device number 11 [ 122.117215][ T1236] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 122.117807][ T1236] usbserial_generic 1-1:1.0: device disconnected [ 122.177774][ T1220] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 122.196442][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 122.337456][ T1220] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 122.338824][ T1220] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.339062][ T1220] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.339089][ T1220] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 122.339114][ T1220] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.341504][ T1220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.341531][ T1220] usb 3-1: Product: syz [ 122.341548][ T1220] usb 3-1: Manufacturer: syz [ 122.341565][ T1220] usb 3-1: SerialNumber: syz [ 122.417590][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 122.429384][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 122.441035][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 122.441066][ T10] usb 2-1: config 0 has no interface number 0 [ 122.441247][ T1220] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 122.441266][ T1220] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 122.441383][ T1220] usbserial_generic 3-1:1.0: generic converter detected [ 122.496185][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.496212][ T10] usb 2-1: Product: syz [ 122.496228][ T10] usb 2-1: Manufacturer: syz [ 122.496244][ T10] usb 2-1: SerialNumber: syz [ 122.501323][ T10] usb 2-1: config 0 descriptor?? [ 122.503664][ T1220] usb 3-1: generic converter now attached to ttyUSB0 [ 122.570777][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.178'. [ 122.573391][ T6367] ------------[ cut here ]------------ [ 122.573406][ T6367] !chanctx_conf [ 122.573420][ T6367] WARNING: net/mac80211/rate.c:51 at rate_control_rate_init+0x5a6/0x630, CPU#1: syz.3.178/6367 [ 122.603326][ T6367] Modules linked in: [ 122.607356][ T6367] CPU: 1 UID: 0 PID: 6367 Comm: syz.3.178 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.618298][ T6367] Tainted: [L]=SOFTLOCKUP [ 122.623481][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.633994][ T6367] RIP: 0010:rate_control_rate_init+0x5a6/0x630 [ 122.640280][ T6367] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f6 7f 60 f6 90 0f 0b 90 eb e1 e8 eb 7f 60 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 122.660094][ T6367] RSP: 0018:ffffc9000e457008 EFLAGS: 00010287 [ 122.666258][ T6367] RAX: ffffffff8b678505 RBX: ffff888078c9c050 RCX: 0000000000080000 [ 122.674289][ T6367] RDX: ffffc9000605a000 RSI: 0000000000000527 RDI: 0000000000000528 [ 122.685267][ T6367] RBP: dffffc0000000000 R08: ffffffff8b678077 R09: 0000000000000000 [ 122.694349][ T6367] R10: dffffc0000000000 R11: ffffed100f193831 R12: ffffffff8b678077 [ 122.702441][ T6367] R13: ffff888059a40f40 R14: 0000000000000001 R15: 0000000000000000 [ 122.710551][ T6367] FS: 00007ffa561f96c0(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 122.719586][ T6367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.727011][ T6367] CR2: 000000110c420033 CR3: 000000007b662000 CR4: 00000000003526f0 [ 122.735491][ T6367] Call Trace: [ 122.738891][ T6367] [ 122.741870][ T6367] rate_control_rate_init_all_links+0xf4/0x190 [ 122.748156][ T6367] sta_apply_auth_flags+0x1bc/0x430 [ 122.753436][ T6367] sta_apply_parameters+0x1291/0x1b50 [ 122.759153][ T6367] ieee80211_add_station+0x3de/0x700 [ 122.764498][ T6367] rdev_add_station+0xfc/0x290 [ 122.769418][ T6367] nl80211_new_station+0x1b4e/0x1fd0 [ 122.774767][ T6367] ? trace_contention_end+0x3d/0x140 [ 122.780183][ T6367] ? __pfx_nl80211_new_station+0x10/0x10 [ 122.785875][ T6367] ? __rtnl_unlock+0xc3/0xe0 [ 122.790597][ T6367] ? nl80211_pre_doit+0x53d/0x890 [ 122.795678][ T6367] genl_family_rcv_msg_doit+0x233/0x340 [ 122.796633][ T6339] FAULT_INJECTION: forcing a failure. [ 122.796633][ T6339] name failslab, interval 1, probability 0, space 0, times 0 [ 122.796711][ T6339] CPU: 0 UID: 0 PID: 6339 Comm: syz.2.175 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.796806][ T6339] Tainted: [L]=SOFTLOCKUP [ 122.796827][ T6339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.796861][ T6339] Call Trace: [ 122.796883][ T6339] [ 122.796905][ T6339] dump_stack_lvl+0xe8/0x150 [ 122.796998][ T6339] should_fail_ex+0x3eb/0x540 [ 122.797074][ T6339] should_failslab+0xa8/0x100 [ 122.797145][ T6339] __kmalloc_noprof+0xf9/0x710 [ 122.797238][ T6339] ? tomoyo_encode+0x2ad/0x570 [ 122.797310][ T6339] ? tomoyo_encode+0x2ad/0x570 [ 122.797409][ T6339] tomoyo_encode+0x2ad/0x570 [ 122.797501][ T6339] tomoyo_realpath_from_path+0x5fa/0x640 [ 122.797596][ T6339] ? tomoyo_path_number_perm+0x219/0x5f0 [ 122.797665][ T6339] tomoyo_path_number_perm+0x246/0x5f0 [ 122.797730][ T6339] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 122.797837][ T6339] ? hook_file_ioctl+0x1f2/0x600 [ 122.797960][ T6339] ? __fget_files+0x2a/0x420 [ 122.798044][ T6339] ? __fget_files+0x2a/0x420 [ 122.798109][ T6339] ? __fget_files+0x3a2/0x420 [ 122.798179][ T6339] ? __fget_files+0x2a/0x420 [ 122.798263][ T6339] security_file_ioctl+0xc3/0x2a0 [ 122.798368][ T6339] __se_sys_ioctl+0x47/0x170 [ 122.798464][ T6339] do_syscall_64+0x166/0x520 [ 122.798522][ T6339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.798584][ T6339] ? clear_bhb_loop+0x70/0xc0 [ 122.798670][ T6339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.798745][ T6339] RIP: 0033:0x7f5878d9e159 [ 122.798809][ T6339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.798854][ T6339] RSP: 002b:00007f5876ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.798925][ T6339] RAX: ffffffffffffffda RBX: 00007f5879025fa0 RCX: 00007f5878d9e159 [ 122.798968][ T6339] RDX: 0000000000000000 RSI: 0000000000005415 RDI: 0000000000000005 [ 122.799001][ T6339] RBP: 00007f5876ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 122.799041][ T6339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.799074][ T6339] R13: 00007f5879026038 R14: 00007f5879025fa0 R15: 00007fff4f667458 [ 122.799168][ T6339] [ 122.804595][ T6339] ERROR: Out of memory at tomoyo_realpath_from_path. [ 122.815434][ T1220] usb 3-1: USB disconnect, device number 14 [ 123.049232][ T6367] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 123.055384][ T6367] ? bpf_lsm_capable+0x9/0x20 [ 123.060179][ T6367] ? security_capable+0x7e/0x2c0 [ 123.065174][ T6367] genl_rcv_msg+0x614/0x7a0 [ 123.069833][ T6367] ? __pfx_genl_rcv_msg+0x10/0x10 [ 123.074924][ T6367] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 123.080430][ T6367] ? __pfx_nl80211_new_station+0x10/0x10 [ 123.086118][ T6367] ? __pfx_nl80211_post_doit+0x10/0x10 [ 123.091691][ T6367] ? __asan_memcpy+0x40/0x70 [ 123.096438][ T6367] ? __skb_clone+0x5c/0x6c0 [ 123.100996][ T6367] netlink_rcv_skb+0x226/0x4a0 [ 123.105812][ T6367] ? __pfx_genl_rcv_msg+0x10/0x10 [ 123.110949][ T6367] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 123.116340][ T6367] ? down_read+0x2b9/0x320 [ 123.120832][ T6367] genl_rcv+0x28/0x40 [ 123.124893][ T6367] netlink_unicast+0x7bd/0x940 [ 123.129789][ T6367] netlink_sendmsg+0x7c3/0xae0 [ 123.135391][ T6367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.141185][ T6367] ? apparmor_socket_sendmsg+0x98/0x360 [ 123.146819][ T6367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.152154][ T6367] sock_sendmsg_nosec+0x13a/0x180 [ 123.157408][ T6367] ____sys_sendmsg+0x54e/0x850 [ 123.162227][ T6367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.167617][ T6367] ? import_iovec+0x73/0xa0 [ 123.172187][ T6367] ___sys_sendmsg+0x2a5/0x360 [ 123.176960][ T6367] ? __lock_acquire+0x747/0x2de0 [ 123.181945][ T6367] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.187320][ T6367] ? futex_wait+0x2a2/0x390 [ 123.191912][ T6367] ? __fget_files+0x2a/0x420 [ 123.196606][ T6367] ? __fget_files+0x3a2/0x420 [ 123.201363][ T6367] __x64_sys_sendmsg+0x1b1/0x290 [ 123.206418][ T6367] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 123.207123][ T1220] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 123.219979][ T6367] do_syscall_64+0x166/0x520 [ 123.220739][ T1220] usbserial_generic 3-1:1.0: device disconnected [ 123.231015][ T6367] ? trace_irq_disable+0x3b/0x140 [ 123.236923][ T6367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.243389][ T6367] ? clear_bhb_loop+0x70/0xc0 [ 123.248498][ T6367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.254444][ T6367] RIP: 0033:0x7ffa5539e159 [ 123.258950][ T6367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.278700][ T6367] RSP: 002b:00007ffa561f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.287232][ T6367] RAX: ffffffffffffffda RBX: 00007ffa55625fa0 RCX: 00007ffa5539e159 [ 123.295246][ T6367] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 123.303329][ T6367] RBP: 00007ffa5543506b R08: 0000000000000000 R09: 0000000000000000 [ 123.311385][ T6367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.321789][ T6367] R13: 00007ffa55626038 R14: 00007ffa55625fa0 R15: 00007ffef6144038 [ 123.330875][ T6367] [ 123.333946][ T6367] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 123.341264][ T6367] CPU: 1 UID: 0 PID: 6367 Comm: syz.3.178 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.352061][ T6367] Tainted: [L]=SOFTLOCKUP [ 123.356415][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.366507][ T6367] Call Trace: [ 123.369812][ T6367] [ 123.372771][ T6367] vpanic+0x56d/0xa70 [ 123.376810][ T6367] ? __pfx__printk+0x10/0x10 [ 123.381449][ T6367] ? __pfx_vpanic+0x10/0x10 [ 123.386039][ T6367] ? is_bpf_text_address+0x292/0x2b0 [ 123.391364][ T6367] ? is_bpf_text_address+0x26/0x2b0 [ 123.396628][ T6367] panic+0xc5/0xd0 [ 123.400432][ T6367] ? __pfx_panic+0x10/0x10 [ 123.404921][ T6367] __warn+0x315/0x4c0 [ 123.408960][ T6367] ? rate_control_rate_init+0x5a6/0x630 [ 123.414559][ T6367] ? rate_control_rate_init+0x5a6/0x630 [ 123.420141][ T6367] __report_bug+0x276/0x570 [ 123.424693][ T6367] ? rate_control_rate_init+0x5a6/0x630 [ 123.430272][ T6367] ? __pfx___report_bug+0x10/0x10 [ 123.435329][ T6367] ? __lock_acquire+0x747/0x2de0 [ 123.440315][ T6367] ? __lock_acquire+0x747/0x2de0 [ 123.445335][ T6367] ? rate_control_rate_init+0x5a6/0x630 [ 123.450921][ T6367] report_bug+0x16b/0x220 [ 123.455292][ T6367] ? rate_control_rate_init+0x5a6/0x630 [ 123.460867][ T6367] ? rate_control_rate_init+0x5a8/0x630 [ 123.466450][ T6367] handle_bug+0x9c/0x200 [ 123.470741][ T6367] exc_invalid_op+0x1a/0x50 [ 123.475276][ T6367] asm_exc_invalid_op+0x1a/0x20 [ 123.480147][ T6367] RIP: 0010:rate_control_rate_init+0x5a6/0x630 [ 123.486334][ T6367] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f6 7f 60 f6 90 0f 0b 90 eb e1 e8 eb 7f 60 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 123.505969][ T6367] RSP: 0018:ffffc9000e457008 EFLAGS: 00010287 [ 123.512070][ T6367] RAX: ffffffff8b678505 RBX: ffff888078c9c050 RCX: 0000000000080000 [ 123.520083][ T6367] RDX: ffffc9000605a000 RSI: 0000000000000527 RDI: 0000000000000528 [ 123.528081][ T6367] RBP: dffffc0000000000 R08: ffffffff8b678077 R09: 0000000000000000 [ 123.536076][ T6367] R10: dffffc0000000000 R11: ffffed100f193831 R12: ffffffff8b678077 [ 123.544069][ T6367] R13: ffff888059a40f40 R14: 0000000000000001 R15: 0000000000000000 [ 123.552069][ T6367] ? rate_control_rate_init+0x117/0x630 [ 123.557659][ T6367] ? rate_control_rate_init+0x117/0x630 [ 123.563235][ T6367] ? rate_control_rate_init+0x5a5/0x630 [ 123.568811][ T6367] ? rate_control_rate_init+0x5a5/0x630 [ 123.574395][ T6367] rate_control_rate_init_all_links+0xf4/0x190 [ 123.580603][ T6367] sta_apply_auth_flags+0x1bc/0x430 [ 123.585849][ T6367] sta_apply_parameters+0x1291/0x1b50 [ 123.591266][ T6367] ieee80211_add_station+0x3de/0x700 [ 123.596585][ T6367] rdev_add_station+0xfc/0x290 [ 123.601390][ T6367] nl80211_new_station+0x1b4e/0x1fd0 [ 123.606803][ T6367] ? trace_contention_end+0x3d/0x140 [ 123.612125][ T6367] ? __pfx_nl80211_new_station+0x10/0x10 [ 123.617787][ T6367] ? __rtnl_unlock+0xc3/0xe0 [ 123.622426][ T6367] ? nl80211_pre_doit+0x53d/0x890 [ 123.627490][ T6367] genl_family_rcv_msg_doit+0x233/0x340 [ 123.633076][ T6367] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 123.639199][ T6367] ? bpf_lsm_capable+0x9/0x20 [ 123.643928][ T6367] ? security_capable+0x7e/0x2c0 [ 123.648906][ T6367] genl_rcv_msg+0x614/0x7a0 [ 123.653453][ T6367] ? __pfx_genl_rcv_msg+0x10/0x10 [ 123.658516][ T6367] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 123.663910][ T6367] ? __pfx_nl80211_new_station+0x10/0x10 [ 123.669571][ T6367] ? __pfx_nl80211_post_doit+0x10/0x10 [ 123.675055][ T6367] ? __asan_memcpy+0x40/0x70 [ 123.679681][ T6367] ? __skb_clone+0x5c/0x6c0 [ 123.684227][ T6367] netlink_rcv_skb+0x226/0x4a0 [ 123.689023][ T6367] ? __pfx_genl_rcv_msg+0x10/0x10 [ 123.694090][ T6367] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 123.699422][ T6367] ? down_read+0x2b9/0x320 [ 123.703874][ T6367] genl_rcv+0x28/0x40 [ 123.707886][ T6367] netlink_unicast+0x7bd/0x940 [ 123.712694][ T6367] netlink_sendmsg+0x7c3/0xae0 [ 123.717488][ T6367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.722806][ T6367] ? apparmor_socket_sendmsg+0x98/0x360 [ 123.728374][ T6367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.733687][ T6367] sock_sendmsg_nosec+0x13a/0x180 [ 123.738745][ T6367] ____sys_sendmsg+0x54e/0x850 [ 123.743558][ T6367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.748875][ T6367] ? import_iovec+0x73/0xa0 [ 123.753414][ T6367] ___sys_sendmsg+0x2a5/0x360 [ 123.758114][ T6367] ? __lock_acquire+0x747/0x2de0 [ 123.763223][ T6367] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.768453][ T6367] ? futex_wait+0x2a2/0x390 [ 123.773007][ T6367] ? __fget_files+0x2a/0x420 [ 123.777620][ T6367] ? __fget_files+0x3a2/0x420 [ 123.782327][ T6367] __x64_sys_sendmsg+0x1b1/0x290 [ 123.787298][ T6367] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 123.792806][ T6367] do_syscall_64+0x166/0x520 [ 123.797418][ T6367] ? trace_irq_disable+0x3b/0x140 [ 123.802468][ T6367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.808557][ T6367] ? clear_bhb_loop+0x70/0xc0 [ 123.813261][ T6367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.819178][ T6367] RIP: 0033:0x7ffa5539e159 [ 123.823634][ T6367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.843276][ T6367] RSP: 002b:00007ffa561f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.851718][ T6367] RAX: ffffffffffffffda RBX: 00007ffa55625fa0 RCX: 00007ffa5539e159 [ 123.859709][ T6367] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 123.867700][ T6367] RBP: 00007ffa5543506b R08: 0000000000000000 R09: 0000000000000000 [ 123.875699][ T6367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.883691][ T6367] R13: 00007ffa55626038 R14: 00007ffa55625fa0 R15: 00007ffef6144038 [ 123.891726][ T6367] [ 123.895433][ T6367] Kernel Offset: disabled [ 123.899781][ T6367] Rebooting in 86400 seconds..