last executing test programs: 4.610716959s ago: executing program 3 (id=354): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44040}, 0x8004) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @void}}}]}) r0 = socket(0x21, 0x3, 0x10006) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000040)="671723d7c6012c", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000340)="01800010002cda", 0x7}], 0x3}, 0x0) 4.584389044s ago: executing program 3 (id=355): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x4e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00'/10, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000001dc0)={0x50, 0x0, r7, {0x7, 0x2b, 0x0, 0x2b418842, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xffffeffeffffffff, {0x5, 0x3, 0x0, 0x4000000000004, 0xfffffffd, 0x6, {0x2, 0xfffffffffffffff7, 0x1008, 0x100000000000, 0xdb4, 0x81, 0x8, 0x6, 0x200c, 0x4000, 0xe44, r8, r9, 0x5, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r12, &(0x7f0000001840)=[{&(0x7f00000001c0)=""/255, 0xff}], 0x1) fcntl$setsig(r11, 0xa, 0x12) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000200)={{0x1, 0xffffffffffffffff, r4, r5, r9, 0x0, 0x1}, 0x1, 0x1ff, 0xf8, 0x1, r2, r10, 0x6}) 4.010169926s ago: executing program 0 (id=363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x40000000}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="671723d7c6012b", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f0000000180)="2bc4", 0x2}], 0x4}, 0x4040) 3.893825557s ago: executing program 0 (id=364): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc018aec0, &(0x7f00000000c0)={0x1}) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000140)=ANY=[@ANYBLOB="80000000080211000001080211000000080211000000000000000000000000006400010000060202cdca5b7e45c16b840a4087e24f498b960c121824"], 0x36) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000047c0)) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) 2.873900792s ago: executing program 0 (id=370): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmmsg$inet6(r0, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @local, 0x7}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5dc) 2.808619349s ago: executing program 2 (id=371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="671723d7c6012c", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f0000000180)="2bc4", 0x2}], 0x4}, 0x4040) 2.630173362s ago: executing program 2 (id=372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x3000000}, 0x0) 2.62984174s ago: executing program 0 (id=373): socket(0x10, 0x803, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0xcb5}}}, 0xd) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000f7ffffffffffff0180c200000e88a8000081000002080045000024000040000000000000010101e0000001000017c1001090782204000180000000"], 0x3e) 2.588669614s ago: executing program 2 (id=374): syz_usb_connect$cdc_ncm(0x6, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a860000102030109025d00020105e00409f7052400d4137bf1aae76c4e53897209c4fffff523"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f406", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.309604204s ago: executing program 0 (id=376): r0 = syz_usb_connect$hid(0x0, 0x87, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc081, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0xf0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8009, 0xa, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x13, 0x7}}}}}]}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000840)={0x6, 0x0, @ioapic={0xe000, 0xcb, 0x401, 0x400, 0x0, [{0xfc, 0xad, 0x7, '\x00', 0x3}, {0x2, 0xd7, 0x80, '\x00', 0xde}, {0xfe, 0x1, 0x3}, {0x8, 0x7, 0x3, '\x00', 0x2}, {0xfd, 0xa, 0x8, '\x00', 0x1}, {0x59, 0x7, 0xf, '\x00', 0x6}, {0xc, 0x8, 0x0, '\x00', 0x1}, {0x3, 0xb, 0x8, '\x00', 0x9}, {0x4, 0xf, 0x5, '\x00', 0x3}, {0x3, 0x1, 0x3, '\x00', 0x86}, {0x7, 0x71, 0x8, '\x00', 0x8}, {0x9, 0x3, 0x3, '\x00', 0x16}, {0x4, 0x9, 0x7f}, {0x8, 0xa, 0xa, '\x00', 0x8}, {0x4b, 0x8, 0x1, '\x00', 0x7f}, {0x0, 0x13, 0x0, '\x00', 0x1}, {0x8c, 0xf8, 0xe, '\x00', 0x7e}, {0x3, 0x8, 0x73, '\x00', 0xff}, {0x4, 0xe8, 0x1, '\x00', 0x81}, {0x3, 0x8b, 0xd3, '\x00', 0x4}, {0xfc, 0x6d, 0xf9, '\x00', 0x8}, {0xff, 0x2, 0x1, '\x00', 0x26}, {0xe, 0xce, 0x0, '\x00', 0x1c}, {0x5, 0x8, 0x8, '\x00', 0xd}]}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='@!,\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x759, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0xffffffff}}, './file0\x00'}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, &(0x7f0000000080)={0xc, 0x8, [0x31, 0xfff]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r5, 0x8994, &(0x7f0000000280)={'bond0\x00', @ifru_settings={0x5, 0x207, @fr_pvc_info=0x0}}) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$uinput_user_dev(r6, &(0x7f0000000240)={'syz1\x00', {0x7f, 0x387d, 0x95d, 0x5}, 0x55, [0xa83, 0x4, 0x6, 0xb66165d5, 0x6, 0xa5, 0x7, 0xe5cb, 0x81, 0x80000001, 0xfff, 0x2, 0x6, 0x3, 0x8, 0x9b75, 0x9, 0x5, 0x7, 0x46d0, 0x4, 0x7f, 0x82, 0x0, 0x1, 0x5, 0x0, 0x4986, 0x1, 0x800, 0x8, 0x5, 0x8000, 0xf, 0x6cbf, 0x5, 0xc4b, 0x5, 0x7, 0xd, 0x4, 0x1, 0x6, 0x7, 0x3, 0x1b, 0x8, 0xfffffff8, 0xfee, 0xe, 0x8, 0x2, 0x101, 0x7, 0x1ea6e4d, 0x3062, 0x40, 0xffffff7f, 0x7, 0x824, 0x4, 0x70cc, 0xa8, 0x2], [0x10000, 0x5, 0x5, 0x10001, 0xc580, 0x200, 0x40, 0x10, 0x735, 0x80000000, 0x5, 0xfffffffd, 0x9, 0xffff, 0x7, 0x6, 0x5, 0x1ff, 0x7e, 0x4, 0x6, 0x9, 0x48000000, 0xfffffff9, 0xffff62fb, 0x80, 0x2548acc6, 0x400, 0x8, 0x8, 0x30, 0x51cf, 0x2, 0x8, 0x8, 0xf, 0x9, 0x3, 0x40, 0x0, 0x1b3, 0x5d622418, 0x1, 0x36, 0x200, 0xfffffffe, 0x4, 0x8, 0x40008, 0x76dfd8cf, 0xd0c, 0x2a87, 0x2, 0x8000, 0x80000001, 0x0, 0x1, 0x9, 0x1, 0x5, 0x3, 0x6, 0x80000000, 0x8], [0x4, 0x6, 0x8001, 0x0, 0xb2f6, 0x1, 0x2, 0x6, 0x89be, 0x7fff, 0xa0000, 0x9, 0x4, 0x0, 0xfffffffc, 0xce9, 0x1, 0x6, 0x400, 0xff, 0x0, 0x4, 0x0, 0x5000000, 0x1000, 0x1, 0x1, 0xc, 0x2, 0xff, 0x0, 0x1, 0x9, 0x9, 0x0, 0xdce7, 0x401, 0x0, 0x2, 0x5, 0x8, 0x10000, 0x40, 0x0, 0xffff, 0xd, 0x7, 0xcf, 0xfffffff9, 0x80000000, 0xfffffffc, 0xcec, 0x4, 0x4, 0xffff6455, 0xfffffffb, 0xd6471202, 0x0, 0xfffffffe, 0xd5, 0x9, 0xc9, 0x2121, 0x5], [0x200, 0x0, 0x7933, 0x8, 0x8, 0x8, 0x9, 0x42aa3068, 0x8, 0xffff3300, 0x9, 0x1, 0xa8, 0x8, 0x3, 0xce, 0x8, 0xfffffff9, 0x4, 0x10000, 0x587806ba, 0x73, 0x3ff, 0xad64, 0x81, 0xffffffff, 0x9, 0x7, 0x9, 0x9, 0x0, 0x6, 0x9, 0xffffffff, 0xa, 0x3, 0xeccd, 0xe, 0x4, 0x1ff, 0x4, 0xfffffffa, 0x1ff, 0x41f4, 0x46, 0x800, 0x4ab4, 0x3, 0x9, 0x7e55, 0x8, 0x0, 0x7, 0x9, 0xc2, 0xf, 0x8, 0x6, 0x1, 0x7, 0x4, 0x6, 0x4, 0x2]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @remote, 0x4}, 0x1c) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000a40)={{0x9, 0x1, 0x10000, 0x5, '\x00', 0x1}, 0x0, [0x604, 0x15, 0x7fff, 0x8, 0x200, 0x6, 0x1, 0x1, 0xfffffffffffffffc, 0xd46, 0x200, 0x40000, 0x3, 0x6, 0x4, 0x63, 0x40, 0x6, 0x10000, 0x6000000, 0x8, 0x8, 0x400, 0xcd, 0x8000000000000001, 0x3ff, 0x8, 0x3, 0x1, 0x100000000, 0x8, 0x8, 0x0, 0x7fff, 0xc41, 0xfb2, 0x2, 0x1, 0x78, 0x9, 0x5b, 0x6783a332, 0x3, 0x7, 0xffffffffffffff7f, 0x8, 0x85, 0x3, 0x2, 0x1, 0x800, 0x3, 0x7, 0x3, 0x3, 0x3, 0x7, 0x4, 0xc, 0x0, 0x8, 0x6, 0x4, 0x6, 0x0, 0x7, 0x4a, 0x1, 0x29, 0x0, 0x2, 0x4, 0x10c26293, 0x3, 0x1, 0xcf3, 0x9, 0x80000000007ff, 0x1, 0x4, 0x1, 0x2, 0x4, 0x6, 0x10000, 0x6, 0x6, 0x9, 0x338, 0xffffffffffffffff, 0xffffffffffffffb6, 0x1, 0x8, 0xa, 0x2, 0x0, 0x1, 0x1, 0xd, 0x7, 0x10, 0x6, 0xffffffff, 0x5, 0x5, 0x1000, 0x800, 0x6, 0x2, 0xfffffffffffffff8, 0x200, 0x400, 0xb0, 0xfffffffffffffffe, 0x1, 0x2, 0x100000001, 0x0, 0x8001, 0x7f, 0x9, 0x0, 0x5, 0x7c, 0x8, 0x7, 0xc, 0x2ebac3a7]}) 2.192178254s ago: executing program 1 (id=377): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000002c0)={'pcl818\x00', [0x100, 0x3, 0xd0, 0x2, 0x3, 0x8, 0x3, 0x7f, 0x4, 0x8, 0x700, 0x2, 0xff7fffff, 0x2, 0x1, 0x1, 0x9, 0x4, 0x482, 0x403, 0x0, 0x2, 0x7, 0x6, 0x48, 0x400, 0x10000009, 0x6a77, 0x9, 0x20003, 0x7]}) 2.109867929s ago: executing program 1 (id=378): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0xf0, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xb9, 0x6, "4b889efcb74da27b533dfbd0ea1efd45f628135156a5960afafc3c7e73a01cf5a4b64ebfcaff9ba10db0b8625e2d04e928d0d43a070206f1b93876d97c83f7c806dfe63f13edd28b4002a1d67483e7231bf28a1990e7fe1d3258a363255060368ec5a32aef678716d0726d1bf1afc281ded28772b6451a524de9d4492a581988c3ceebeb38b1e3461a7b0bc19bfe568814131d256a4f317cc6079c0914224ce5cc48e232441425860c42e37109cbb87bc0338c10e8"}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x168}}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000200)={0x11, 0x1c, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYBLOB="1a6117947000fb9b0300df"], 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x8000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x45) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.986434543s ago: executing program 2 (id=379): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x3, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0xfff, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0xe, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0xa, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x200, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x84b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x7fffffff, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x10, 0x7, 0x3, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x668, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x7, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x5, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x10, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x942, 0x1, 0x2, 0xfdffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9, 0x10000009, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80001ffe, 0x8, 0x8000, 0x10004, 0x10, 0x1a, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x0, 0x19, 0x4, 0x1, 0xb, 0x1, 0x8, 0x403, 0x81, 0x80000004, 0x9, 0x9, 0x3, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x6, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x5, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x0, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0x200, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x0, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x8, 0x8000005, 0x4, 0x101, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x1, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x2000011, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x3, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x200000, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x1ff, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x0, 0x9, 0xffffc487, 0x204, 0x10002, 0x81, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x8, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0xb5, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0xb, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x3a, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x7, 0x3, 0x35, 0x8, 0x1, 0x2, 0x34, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x6, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x9, 0x9, 0x1, 0x9, 0x7, 0x9, 0x9e95, 0x9, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0xb, 0x4, 0x6, 0x9, 0x0, 0x8, 0x8, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0x4bfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe01, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0x103, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x4, 0x20, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffefffe, 0x924, 0x499, 0x8, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xce, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x3, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0xa4, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x7, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x1, 0x3, 0x20000000, 0x0, 0xe, 0x5, 0x9, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x1, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x20000) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000000)={0x2, {0x2d0, 0x3, 0x1, 0x1000}}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000001280)=""/194) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="2006000000005beb0174e907096b9df1d3a92e516f58ff7f6f2c42fdcb6765c9ded248ac41f8fc12529723c234087a0c566bdcbd641ee8181e3249462d241603371b3cc1d3d539fb0c9602b8d2935d81e63c9e089747def652a12a3607bb85538fd567e4e0efa6df13502b408041"], 0x0, 0x0, 0x0, 0x0}) 1.805815152s ago: executing program 1 (id=380): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a80)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004401c}, 0x20000000) 1.735139538s ago: executing program 1 (id=381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) recvmsg(r1, &(0x7f0000000600)={0x0, 0x8, 0x0}, 0x0) (fail_nth: 4) 1.306495936s ago: executing program 2 (id=382): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000000d8bc648309332ca46040a0103000000000000000005000000fc3211"], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="14010000200001000000"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.230124809s ago: executing program 1 (id=383): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$USERFAULTFD_IOC_NEW(r2, 0xaa00) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905", @ANYRES32], 0x0) 1.188112503s ago: executing program 3 (id=384): socket(0x10, 0x803, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0xcb5}}}, 0xd) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000f7ffffffffffff0180c200000e88a8000081000002080045000024000040000000000000010101e0000001000017c1001090782204000180000000"], 0x3e) 1.044300777s ago: executing program 2 (id=385): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0xf0, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xb9, 0x6, "4b889efcb74da27b533dfbd0ea1efd45f628135156a5960afafc3c7e73a01cf5a4b64ebfcaff9ba10db0b8625e2d04e928d0d43a070206f1b93876d97c83f7c806dfe63f13edd28b4002a1d67483e7231bf28a1990e7fe1d3258a363255060368ec5a32aef678716d0726d1bf1afc281ded28772b6451a524de9d4492a581988c3ceebeb38b1e3461a7b0bc19bfe568814131d256a4f317cc6079c0914224ce5cc48e232441425860c42e37109cbb87bc0338c10e8"}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x168}}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000200)={0x11, 0x1c, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="1a6117947000fb9b0300df"], 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x8000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x45) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 808.72451ms ago: executing program 1 (id=386): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000000080)) (async) getsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000280)=0x4) (async) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0], 0x0) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f00000000c0)={0xb2600000, 0x7}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) (async) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000400), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2e, r6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[r3, r4, r3, r4, r3, r6, r3, r3], 0x8, 0x80000}) 676.682317ms ago: executing program 3 (id=387): syz_usb_connect$cdc_ncm(0x6, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a860000102030109025d00020105e00409f7052400d4137bf1aae76c4e53897209c4fffff523"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f406", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 367.313358ms ago: executing program 0 (id=388): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0xf0, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xb9, 0x6, "4b889efcb74da27b533dfbd0ea1efd45f628135156a5960afafc3c7e73a01cf5a4b64ebfcaff9ba10db0b8625e2d04e928d0d43a070206f1b93876d97c83f7c806dfe63f13edd28b4002a1d67483e7231bf28a1990e7fe1d3258a363255060368ec5a32aef678716d0726d1bf1afc281ded28772b6451a524de9d4492a581988c3ceebeb38b1e3461a7b0bc19bfe568814131d256a4f317cc6079c0914224ce5cc48e232441425860c42e37109cbb87bc0338c10e8"}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x168}}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000200)={0x11, 0x1c, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYBLOB="1a6117947000fb9b0300df"], 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x8000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x45) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 26.709363ms ago: executing program 3 (id=389): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a80)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004401c}, 0x20000000) 0s ago: executing program 3 (id=390): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0xf0, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xb9, 0x6, "4b889efcb74da27b533dfbd0ea1efd45f628135156a5960afafc3c7e73a01cf5a4b64ebfcaff9ba10db0b8625e2d04e928d0d43a070206f1b93876d97c83f7c806dfe63f13edd28b4002a1d67483e7231bf28a1990e7fe1d3258a363255060368ec5a32aef678716d0726d1bf1afc281ded28772b6451a524de9d4492a581988c3ceebeb38b1e3461a7b0bc19bfe568814131d256a4f317cc6079c0914224ce5cc48e232441425860c42e37109cbb87bc0338c10e8"}]}, @NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x15c}}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000200)={0x11, 0x1c, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="1a6117947000fb9b0300df"], 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x8000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): 99.813198][ T5594] veth0_vlan: entered promiscuous mode [ 99.902236][ T5594] veth1_vlan: entered promiscuous mode [ 100.027028][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.124940][ T5601] veth0_vlan: entered promiscuous mode [ 100.204598][ T5594] veth0_macvtap: entered promiscuous mode [ 100.214909][ T5601] veth1_vlan: entered promiscuous mode [ 100.249807][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.251798][ T5594] veth1_macvtap: entered promiscuous mode [ 100.372795][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.373102][ T5602] veth0_vlan: entered promiscuous mode [ 100.420155][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.469979][ T5601] veth0_macvtap: entered promiscuous mode [ 100.480333][ T5602] veth1_vlan: entered promiscuous mode [ 100.482585][ T92] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.511641][ T92] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.515804][ T92] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.552611][ T5601] veth1_macvtap: entered promiscuous mode [ 100.554733][ T92] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.732902][ T5604] veth0_vlan: entered promiscuous mode [ 100.855938][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.969962][ T5604] veth1_vlan: entered promiscuous mode [ 101.024582][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.103497][ T92] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.105499][ T5602] veth0_macvtap: entered promiscuous mode [ 101.141595][ T92] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.149742][ T92] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.188214][ T3359] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.203690][ T5602] veth1_macvtap: entered promiscuous mode [ 101.225076][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.225095][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.528817][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.531051][ T3370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.531070][ T3370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.659005][ T5604] veth0_macvtap: entered promiscuous mode [ 101.684613][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.751088][ T5604] veth1_macvtap: entered promiscuous mode [ 101.828311][ T3359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.828331][ T3359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.832259][ T3353] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.869881][ T3353] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.876474][ T3353] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.906892][ T3353] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.112794][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.134091][ T3359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.134112][ T3359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.181941][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.461541][ T3359] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.495859][ T3359] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.524227][ T3359] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.569677][ T3359] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.826887][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.826906][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.468982][ T5755] bond0: entered promiscuous mode [ 103.469007][ T5755] bond_slave_0: entered promiscuous mode [ 103.481362][ T5755] bond_slave_1: entered promiscuous mode [ 103.658699][ T3363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.658717][ T3363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.916265][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.916285][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.200196][ T5772] netlink: 'syz.0.10': attribute type 1 has an invalid length. [ 104.200217][ T5772] netlink: 'syz.0.10': attribute type 2 has an invalid length. [ 104.479346][ T3359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.479366][ T3359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.577810][ T32] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.768870][ T824] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.845996][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 104.846042][ T32] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 104.846065][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.942266][ T32] usb 4-1: config 0 descriptor?? [ 104.981921][ T5766] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 104.985299][ T824] usb 3-1: Using ep0 maxpacket: 32 [ 105.007181][ T824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.007215][ T824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.007255][ T824] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 105.007279][ T824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.127249][ T824] usb 3-1: config 0 descriptor?? [ 105.252797][ T824] hub 3-1:0.0: USB hub found [ 105.519417][ T824] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 105.694335][ T32] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 105.694372][ T32] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 105.694396][ T32] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 105.694421][ T32] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 105.694498][ T32] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 105.695441][ T32] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 105.695687][ T32] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 105.695767][ T32] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 105.695792][ T32] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 105.695818][ T32] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 105.974246][ T32] logitech-djreceiver 0003:046D:C71F.0001: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.3-1/input0 [ 106.911435][ T824] hid-generic 0003:046D:C31C.0002: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 107.143522][ T824] usb 3-1: USB disconnect, device number 2 [ 107.553968][ T5799] fido_id[5799]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 107.739701][ T5584] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 107.897300][ T5766] syz.3.9 (5766) used greatest stack depth: 19632 bytes left [ 108.285133][ T5813] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.399828][ T5814] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17'. [ 108.597442][ T5745] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.690557][ T5820] FAULT_INJECTION: forcing a failure. [ 108.690557][ T5820] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 108.690613][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 108.690634][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 108.690652][ T5820] Call Trace: [ 108.690659][ T5820] [ 108.690667][ T5820] dump_stack_lvl+0xe8/0x150 [ 108.690696][ T5820] should_fail_ex+0x467/0x600 [ 108.690721][ T5820] _copy_from_iter+0x1d3/0x1660 [ 108.690754][ T5820] ? trace_kmem_cache_alloc+0x29/0xe0 [ 108.690784][ T5820] ? __pfx__copy_from_iter+0x10/0x10 [ 108.690824][ T5820] ? __alloc_skb+0x276/0x7a0 [ 108.690849][ T5820] ? __alloc_skb+0x276/0x7a0 [ 108.690876][ T5820] ? netlink_sendmsg+0x650/0xb40 [ 108.690904][ T5820] ? skb_put+0x112/0x210 [ 108.690930][ T5820] netlink_sendmsg+0x6c0/0xb40 [ 108.690967][ T5820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.690995][ T5820] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 108.691028][ T5820] ? __kernel_text_address+0xd/0x30 [ 108.691061][ T5820] ? unwind_get_return_address+0x4d/0x90 [ 108.691084][ T5820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.691110][ T5820] sock_sendmsg_nosec+0x13a/0x180 [ 108.691146][ T5820] ____sys_sendmsg+0x565/0x870 [ 108.691180][ T5820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.691216][ T5820] ? import_iovec+0x73/0xa0 [ 108.691255][ T5820] ___sys_sendmsg+0x2a5/0x360 [ 108.691280][ T5820] ? __lock_acquire+0x6df/0x2e40 [ 108.691306][ T5820] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.691366][ T5820] ? __fget_files+0x2a/0x420 [ 108.691389][ T5820] ? __fget_files+0x3a8/0x420 [ 108.691425][ T5820] __x64_sys_sendmsg+0x1b7/0x290 [ 108.691447][ T5820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 108.691486][ T5820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.691504][ T5820] do_syscall_64+0x174/0x580 [ 108.691527][ T5820] ? trace_irq_disable+0x3b/0x140 [ 108.691544][ T5820] ? clear_bhb_loop+0x40/0x90 [ 108.691566][ T5820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.691583][ T5820] RIP: 0033:0x7fe16973de59 [ 108.691608][ T5820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.691622][ T5820] RSP: 002b:00007fe167996028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.691650][ T5820] RAX: ffffffffffffffda RBX: 00007fe1699c5fa0 RCX: 00007fe16973de59 [ 108.691665][ T5820] RDX: 0000000020000880 RSI: 0000200000000280 RDI: 0000000000000004 [ 108.691678][ T5820] RBP: 00007fe167996090 R08: 0000000000000000 R09: 0000000000000000 [ 108.691691][ T5820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.691703][ T5820] R13: 00007fe1699c6038 R14: 00007fe1699c5fa0 R15: 00007fff4c3f9218 [ 108.691733][ T5820] [ 109.009076][ T4923] usb 4-1: USB disconnect, device number 2 [ 109.219141][ T5745] usb 2-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config [ 109.220771][ T5825] FAULT_INJECTION: forcing a failure. [ 109.220771][ T5825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.220820][ T5825] CPU: 1 UID: 0 PID: 5825 Comm: syz.0.22 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 109.220841][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 109.220858][ T5825] Call Trace: [ 109.220865][ T5825] [ 109.220872][ T5825] dump_stack_lvl+0xe8/0x150 [ 109.220901][ T5825] should_fail_ex+0x467/0x600 [ 109.220926][ T5825] _copy_from_iter+0x1d3/0x1660 [ 109.220956][ T5825] ? trace_kmem_cache_alloc+0x29/0xe0 [ 109.220986][ T5825] ? __pfx__copy_from_iter+0x10/0x10 [ 109.221008][ T5825] ? __alloc_skb+0x276/0x7a0 [ 109.221026][ T5825] ? __alloc_skb+0x276/0x7a0 [ 109.221051][ T5825] ? netlink_sendmsg+0x650/0xb40 [ 109.221080][ T5825] ? skb_put+0x112/0x210 [ 109.221103][ T5825] netlink_sendmsg+0x6c0/0xb40 [ 109.221135][ T5825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.221161][ T5825] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 109.221190][ T5825] ? __kernel_text_address+0xd/0x30 [ 109.221217][ T5825] ? unwind_get_return_address+0x4d/0x90 [ 109.221235][ T5825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.221255][ T5825] sock_sendmsg_nosec+0x13a/0x180 [ 109.221284][ T5825] ____sys_sendmsg+0x565/0x870 [ 109.221313][ T5825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.221342][ T5825] ? import_iovec+0x73/0xa0 [ 109.221370][ T5825] ___sys_sendmsg+0x2a5/0x360 [ 109.221389][ T5825] ? __lock_acquire+0x6df/0x2e40 [ 109.221410][ T5825] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.221462][ T5825] ? __fget_files+0x2a/0x420 [ 109.221481][ T5825] ? __fget_files+0x3a8/0x420 [ 109.221510][ T5825] __x64_sys_sendmsg+0x1b7/0x290 [ 109.221536][ T5825] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 109.221576][ T5825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.221597][ T5825] do_syscall_64+0x174/0x580 [ 109.221625][ T5825] ? trace_irq_disable+0x3b/0x140 [ 109.221644][ T5825] ? clear_bhb_loop+0x40/0x90 [ 109.221667][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.221688][ T5825] RIP: 0033:0x7fcf95b3de59 [ 109.221704][ T5825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.221718][ T5825] RSP: 002b:00007fcf93d96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.221736][ T5825] RAX: ffffffffffffffda RBX: 00007fcf95dc5fa0 RCX: 00007fcf95b3de59 [ 109.221748][ T5825] RDX: 0000000000004000 RSI: 0000200000000340 RDI: 0000000000000004 [ 109.221759][ T5825] RBP: 00007fcf93d96090 R08: 0000000000000000 R09: 0000000000000000 [ 109.221769][ T5825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.221779][ T5825] R13: 00007fcf95dc6038 R14: 00007fcf95dc5fa0 R15: 00007ffda6bac508 [ 109.221816][ T5825] [ 109.287919][ T5745] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.459323][ T5745] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 109.459401][ T5745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.459449][ T5745] usb 2-1: Product: syz [ 109.459480][ T5745] usb 2-1: Manufacturer: syz [ 109.459518][ T5745] usb 2-1: SerialNumber: syz [ 109.635035][ T5745] usb 2-1: config 0 descriptor?? [ 109.658922][ T5829] sg_write: data in/out 426048/136 bytes for SCSI command 0x0-- guessing data in; [ 109.658922][ T5829] program syz.2.24 not setting count and/or reply_len properly [ 109.756340][ T5745] hub 2-1:0.0: bad descriptor, ignoring hub [ 109.756378][ T5745] hub 2-1:0.0: probe with driver hub failed with error -5 [ 109.926938][ T5745] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 110.352297][ T5823] syz.3.21 uses obsolete (PF_INET,SOCK_PACKET) [ 110.387279][ T5745] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.403662][ T5745] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 110.403788][ T5745] usb 2-1: media controller created [ 110.516322][ T5690] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.634847][ T5827] veth1_macvtap: left promiscuous mode [ 110.651937][ T5745] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.678394][ T5690] usb 1-1: Using ep0 maxpacket: 32 [ 110.691803][ T5690] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 110.691829][ T5690] usb 1-1: config 0 has no interface number 0 [ 110.691872][ T5690] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 576 [ 110.691899][ T5690] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 110.919451][ T5690] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 110.919482][ T5690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.919504][ T5690] usb 1-1: Product: syz [ 110.919518][ T5690] usb 1-1: Manufacturer: syz [ 110.919532][ T5690] usb 1-1: SerialNumber: syz [ 111.049675][ T5690] usb 1-1: config 0 descriptor?? [ 111.050674][ T5840] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 111.050902][ T5840] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 111.399846][ T5840] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 111.400022][ T5840] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 111.575771][ T5745] DVB: Unable to find symbol tda10046_attach() [ 111.575787][ T5745] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 111.575818][ T5745] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 112.034061][ T5690] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 112.061650][ T5690] asix 1-1:0.188: probe with driver asix failed with error -71 [ 112.699660][ T5859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.700657][ T5859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.832175][ T5690] usb 1-1: USB disconnect, device number 2 [ 113.688949][ T5865] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.34'. [ 113.702128][ T5867] sg_write: data in/out 528348/136 bytes for SCSI command 0x0-- guessing data in; [ 113.702128][ T5867] program syz.0.32 not setting count and/or reply_len properly [ 113.883712][ T4910] Bluetooth: hci0: Invalid handle: 0x20c9 > 0x0eff [ 114.361822][ T5871] tipc: Started in network mode [ 114.361850][ T5871] tipc: Node identity 2007ff, cluster identity 4711 [ 114.361863][ T5871] tipc: Node number set to 2099199 [ 114.457522][ T5690] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.671278][ T5690] usb 4-1: device descriptor read/64, error -71 [ 115.117582][ T5690] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.247477][ T5690] usb 4-1: device descriptor read/64, error -71 [ 115.282742][ T5890] FAULT_INJECTION: forcing a failure. [ 115.282742][ T5890] name failslab, interval 1, probability 0, space 0, times 0 [ 115.282780][ T5890] CPU: 1 UID: 0 PID: 5890 Comm: syz.0.41 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 115.282805][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 115.282818][ T5890] Call Trace: [ 115.282826][ T5890] [ 115.282835][ T5890] dump_stack_lvl+0xe8/0x150 [ 115.282871][ T5890] should_fail_ex+0x467/0x600 [ 115.282900][ T5890] should_failslab+0xa8/0x100 [ 115.282932][ T5890] ? alloc_empty_file+0x5b/0x1d0 [ 115.282966][ T5890] kmem_cache_alloc_noprof+0x9e/0x680 [ 115.282998][ T5890] ? alloc_empty_file+0x5b/0x1d0 [ 115.283043][ T5890] alloc_empty_file+0x5b/0x1d0 [ 115.283080][ T5890] alloc_file_pseudo+0x115/0x1e0 [ 115.283119][ T5890] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 115.283164][ T5890] do_accept+0x4a4/0x930 [ 115.283195][ T5890] ? __pfx_do_accept+0x10/0x10 [ 115.283240][ T5890] __sys_accept4+0x139/0x230 [ 115.283265][ T5890] ? __pfx___sys_accept4+0x10/0x10 [ 115.283287][ T5890] ? __pfx_ksys_write+0x10/0x10 [ 115.283320][ T5890] __x64_sys_accept4+0x9a/0xb0 [ 115.283342][ T5890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.283367][ T5890] do_syscall_64+0x174/0x580 [ 115.283395][ T5890] ? trace_irq_disable+0x3b/0x140 [ 115.283418][ T5890] ? clear_bhb_loop+0x40/0x90 [ 115.283445][ T5890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.283468][ T5890] RIP: 0033:0x7fcf95b3de59 [ 115.283489][ T5890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.283508][ T5890] RSP: 002b:00007fcf93d75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 115.283532][ T5890] RAX: ffffffffffffffda RBX: 00007fcf95dc6090 RCX: 00007fcf95b3de59 [ 115.283549][ T5890] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 115.283561][ T5890] RBP: 00007fcf93d75090 R08: 0000000000000000 R09: 0000000000000000 [ 115.283574][ T5890] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 115.283586][ T5890] R13: 00007fcf95dc6128 R14: 00007fcf95dc6090 R15: 00007ffda6bac508 [ 115.283620][ T5890] [ 115.515119][ T5690] usb usb4-port1: attempt power cycle [ 115.937500][ T5690] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.968738][ T5690] usb 4-1: device descriptor read/8, error -71 [ 116.030313][ T5889] syz.0.41 (5889) used greatest stack depth: 18736 bytes left [ 116.218230][ T5690] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 116.238219][ T5690] usb 4-1: device descriptor read/8, error -71 [ 116.350079][ T5690] usb usb4-port1: unable to enumerate USB device [ 116.653047][ T4923] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.788445][ T5902] FAULT_INJECTION: forcing a failure. [ 116.788445][ T5902] name failslab, interval 1, probability 0, space 0, times 0 [ 116.788493][ T5902] CPU: 1 UID: 0 PID: 5902 Comm: syz.2.45 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 116.788527][ T5902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 116.788550][ T5902] Call Trace: [ 116.788559][ T5902] [ 116.788568][ T5902] dump_stack_lvl+0xe8/0x150 [ 116.788603][ T5902] should_fail_ex+0x467/0x600 [ 116.788630][ T5902] should_failslab+0xa8/0x100 [ 116.788656][ T5902] kmem_cache_alloc_node_noprof+0xac/0x660 [ 116.788680][ T5902] ? __alloc_skb+0x1d7/0x7a0 [ 116.788713][ T5902] ? __alloc_skb+0x1d7/0x7a0 [ 116.788743][ T5902] __alloc_skb+0x1d7/0x7a0 [ 116.788771][ T5902] tcp_stream_alloc_skb+0x3f/0x5c0 [ 116.788807][ T5902] tcp_sendmsg_locked+0x143d/0x55c0 [ 116.788923][ T5902] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 116.788961][ T5902] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 116.788985][ T5902] ? lockdep_hardirqs_on+0x7a/0x110 [ 116.789022][ T5902] tcp_sendmsg+0x2f/0x50 [ 116.789040][ T5902] ? __pfx_inet_sendmsg+0x10/0x10 [ 116.789054][ T5902] sock_sendmsg_nosec+0x10e/0x180 [ 116.789105][ T5902] __sys_sendto+0x41e/0x5d0 [ 116.789135][ T5902] ? __pfx___sys_sendto+0x10/0x10 [ 116.789192][ T5902] ? __pfx_ksys_write+0x10/0x10 [ 116.789215][ T5902] __x64_sys_sendto+0xde/0x100 [ 116.789233][ T5902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.789270][ T5902] do_syscall_64+0x174/0x580 [ 116.789298][ T5902] ? trace_irq_disable+0x3b/0x140 [ 116.789321][ T5902] ? clear_bhb_loop+0x40/0x90 [ 116.789347][ T5902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.789368][ T5902] RIP: 0033:0x7f35513ede59 [ 116.789390][ T5902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.789403][ T5902] RSP: 002b:00007f354f646028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 116.789436][ T5902] RAX: ffffffffffffffda RBX: 00007f3551675fa0 RCX: 00007f35513ede59 [ 116.789452][ T5902] RDX: 00000000000109e8 RSI: 00002000000004c0 RDI: 0000000000000003 [ 116.789466][ T5902] RBP: 00007f354f646090 R08: 0000000000000000 R09: 0000000000000006 [ 116.789480][ T5902] R10: 0000000000000805 R11: 0000000000000246 R12: 0000000000000001 [ 116.789492][ T5902] R13: 00007f3551676038 R14: 00007f3551675fa0 R15: 00007ffdcfd0d428 [ 116.789525][ T5902] [ 116.828427][ T4923] usb 1-1: Using ep0 maxpacket: 16 [ 116.843564][ T4923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.843600][ T4923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.843640][ T4923] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 116.843738][ T4923] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 116.843789][ T4923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.147564][ T5745] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -110 [ 117.257123][ T4923] usb 1-1: config 0 descriptor?? [ 117.682362][ T4923] usbhid 1-1:0.0: can't add hid device: -71 [ 117.682481][ T4923] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 117.753199][ T5907] openvswitch: netlink: IP tunnel dst address not specified [ 117.776819][ T4923] usb 1-1: USB disconnect, device number 3 [ 117.980501][ T5909] process 'syz.3.48' launched './file0' with NULL argv: empty string added [ 118.129918][ T32] usb 2-1: USB disconnect, device number 2 [ 118.135628][ T5909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.967553][ T5745] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.119535][ T5745] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 119.119581][ T5745] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 119.119602][ T5745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.163054][ T5745] usb 1-1: config 0 descriptor?? [ 119.165388][ T5925] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 119.611406][ T5745] hid_parser_main: 458 callbacks suppressed [ 119.611434][ T5745] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 119.611466][ T5745] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 119.611495][ T5745] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 119.611524][ T5745] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 119.611552][ T5745] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 119.611580][ T5745] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 119.611657][ T5745] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 119.611685][ T5745] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 119.611722][ T5745] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 119.611750][ T5745] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 119.753429][ T5745] logitech-djreceiver 0003:046D:C71F.0003: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.0-1/input0 [ 119.807515][ T32] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 119.980673][ T32] usb 3-1: unable to get BOS descriptor or descriptor too short [ 119.981380][ T32] usb 3-1: not running at top speed; connect to a high speed hub [ 119.983391][ T32] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 119.983416][ T32] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 119.983437][ T32] usb 3-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 119.983456][ T32] usb 3-1: config 14 has no interface number 0 [ 119.983473][ T32] usb 3-1: config 14 has no interface number 1 [ 119.983547][ T32] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 119.983565][ T32] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 119.983583][ T32] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.983620][ T32] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.983637][ T32] usb 3-1: config 14 interface 57 has no altsetting 0 [ 119.983650][ T32] usb 3-1: config 14 interface 228 has no altsetting 0 [ 119.987159][ T32] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 119.987182][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.987199][ T32] usb 3-1: Product: syz [ 119.987211][ T32] usb 3-1: Manufacturer: syz [ 119.987228][ T32] usb 3-1: SerialNumber: syz [ 120.197508][ T824] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.380904][ T824] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 120.380934][ T824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.381009][ T824] usb 2-1: Product: syz [ 120.381036][ T824] usb 2-1: Manufacturer: syz [ 120.381052][ T824] usb 2-1: SerialNumber: syz [ 120.424433][ T200] usb 1-1: USB disconnect, device number 4 [ 120.682976][ T5945] netlink: 'syz.3.61': attribute type 83 has an invalid length. [ 120.802234][ T5933] binder: 5932:5933 ioctl c0286405 200000000480 returned -22 [ 120.803358][ T5950] openvswitch: netlink: IP tunnel dst address not specified [ 120.951604][ T32] legousbtower 3-1:14.57: interrupt endpoints not found [ 121.064925][ T32] legousbtower 3-1:14.228: get version request failed: -71 [ 121.065079][ T32] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 121.066936][ T5956] Zero length message leads to an empty skb [ 121.233289][ T32] usb 3-1: USB disconnect, device number 3 [ 121.296105][ T5962] FAULT_INJECTION: forcing a failure. [ 121.296105][ T5962] name failslab, interval 1, probability 0, space 0, times 0 [ 121.296138][ T5962] CPU: 0 UID: 0 PID: 5962 Comm: syz.3.66 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 121.296159][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 121.296170][ T5962] Call Trace: [ 121.296177][ T5962] [ 121.296185][ T5962] dump_stack_lvl+0xe8/0x150 [ 121.296219][ T5962] should_fail_ex+0x467/0x600 [ 121.296247][ T5962] should_failslab+0xa8/0x100 [ 121.296267][ T5962] __kmalloc_noprof+0xfb/0x790 [ 121.296295][ T5962] ? sock_kmalloc+0xd6/0x160 [ 121.296318][ T5962] ? sock_kmalloc+0xd6/0x160 [ 121.296346][ T5962] sock_kmalloc+0xd6/0x160 [ 121.296373][ T5962] af_alg_alloc_areq+0x8c/0x200 [ 121.296398][ T5962] skcipher_recvmsg+0x31e/0xe10 [ 121.296466][ T5962] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 121.296488][ T5962] ? __lock_acquire+0x6df/0x2e40 [ 121.296510][ T5962] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 121.296532][ T5962] sock_recvmsg_nosec+0x130/0x170 [ 121.296563][ T5962] ____sys_recvmsg+0x242/0x4f0 [ 121.296593][ T5962] ? __pfx_____sys_recvmsg+0x10/0x10 [ 121.296630][ T5962] ? import_iovec+0x73/0xa0 [ 121.296656][ T5962] ___sys_recvmsg+0x213/0x5a0 [ 121.296680][ T5962] ? __pfx____sys_recvmsg+0x10/0x10 [ 121.296707][ T5962] ? lock_acquire+0x115/0x350 [ 121.296739][ T5962] ? __fget_files+0x3a8/0x420 [ 121.296769][ T5962] do_recvmmsg+0x320/0x7f0 [ 121.296801][ T5962] ? __pfx_do_recvmmsg+0x10/0x10 [ 121.296825][ T5962] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 121.296862][ T5962] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 121.296895][ T5962] __x64_sys_recvmmsg+0x198/0x250 [ 121.296922][ T5962] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 121.296958][ T5962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.296983][ T5962] do_syscall_64+0x174/0x580 [ 121.297008][ T5962] ? trace_irq_disable+0x3b/0x140 [ 121.297028][ T5962] ? clear_bhb_loop+0x40/0x90 [ 121.297049][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.297066][ T5962] RIP: 0033:0x7fe16973de59 [ 121.297083][ T5962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.297097][ T5962] RSP: 002b:00007fe167996028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 121.297115][ T5962] RAX: ffffffffffffffda RBX: 00007fe1699c5fa0 RCX: 00007fe16973de59 [ 121.297128][ T5962] RDX: 0000000000000001 RSI: 00002000000008c0 RDI: 0000000000000004 [ 121.297139][ T5962] RBP: 00007fe167996090 R08: 0000000000000000 R09: 0000000000000000 [ 121.297150][ T5962] R10: 00000000000000cb R11: 0000000000000246 R12: 0000000000000001 [ 121.297161][ T5962] R13: 00007fe1699c6038 R14: 00007fe1699c5fa0 R15: 00007fff4c3f9218 [ 121.297189][ T5962] [ 121.796934][ T4923] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 122.310919][ T5690] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 122.420386][ T5745] usb 2-1: USB disconnect, device number 3 [ 122.459365][ T5690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 122.459402][ T5690] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 122.459419][ T5690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.497633][ T5690] usb 4-1: config 0 descriptor?? [ 122.505599][ T5964] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 122.529864][ T200] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 122.677461][ T200] usb 3-1: Using ep0 maxpacket: 16 [ 122.682074][ T200] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 122.682104][ T200] usb 3-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.682189][ T200] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 122.682217][ T200] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 122.682246][ T200] usb 3-1: config 0 interface 0 has no altsetting 0 [ 122.789282][ T200] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 122.789405][ T200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.789428][ T200] usb 3-1: Product: syz [ 122.789443][ T200] usb 3-1: Manufacturer: syz [ 122.789459][ T200] usb 3-1: SerialNumber: syz [ 122.973644][ T200] usb 3-1: config 0 descriptor?? [ 122.986524][ T5970] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 123.089178][ T4923] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 123.199808][ T4923] ath9k_htc: Failed to initialize the device [ 123.264804][ T5690] logitech-djreceiver 0003:046D:C71F.0004: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.3-1/input0 [ 123.271413][ T5745] usb 2-1: ath9k_htc: USB layer deinitialized [ 123.618571][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.71'. [ 123.857642][ T200] usb 3-1: Can not set alternate setting to 1, error: -71 [ 123.857697][ T200] synaptics_usb 3-1:0.0: probe with driver synaptics_usb failed with error -71 [ 123.907299][ T200] usb 3-1: USB disconnect, device number 4 [ 124.046741][ T5745] usb 4-1: USB disconnect, device number 7 [ 124.680766][ T5997] fuse: Unknown parameter '0x0000000000000007' [ 125.217807][ T5690] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 125.367498][ T5690] usb 3-1: Using ep0 maxpacket: 8 [ 125.415065][ T5690] usb 3-1: config 0 interface 0 altsetting 240 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 125.415101][ T5690] usb 3-1: config 0 interface 0 altsetting 240 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.415128][ T5690] usb 3-1: config 0 interface 0 has no altsetting 0 [ 125.415163][ T5690] usb 3-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 125.415185][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.474358][ T5690] usb 3-1: config 0 descriptor?? [ 125.632107][ T6016] netlink: 'syz.3.81': attribute type 10 has an invalid length. [ 125.632131][ T6016] netlink: 2 bytes leftover after parsing attributes in process `syz.3.81'. [ 125.753318][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.980239][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.052762][ T6016] bond0: entered promiscuous mode [ 126.052785][ T6016] bond_slave_0: entered promiscuous mode [ 126.053024][ T6016] bond_slave_1: entered promiscuous mode [ 126.054013][ T6016] bridge0: port 3(bond0) entered blocking state [ 126.054370][ T6016] bridge0: port 3(bond0) entered disabled state [ 126.054807][ T6016] bond0: entered allmulticast mode [ 126.054821][ T6016] bond_slave_0: entered allmulticast mode [ 126.054863][ T6016] bond_slave_1: entered allmulticast mode [ 126.132467][ T5690] hid_parser_main: 924 callbacks suppressed [ 126.132491][ T5690] logitech-hidpp-device 0003:046D:C081.0005: unknown main item tag 0x0 [ 126.132522][ T5690] logitech-hidpp-device 0003:046D:C081.0005: unknown main item tag 0x0 [ 126.132549][ T5690] logitech-hidpp-device 0003:046D:C081.0005: unknown main item tag 0x0 [ 126.132576][ T5690] logitech-hidpp-device 0003:046D:C081.0005: unknown main item tag 0x0 [ 126.132628][ T5690] logitech-hidpp-device 0003:046D:C081.0005: unknown main item tag 0x0 [ 126.132657][ T5690] logitech-hidpp-device 0003:046D:C081.0005: unknown main item tag 0x0 [ 126.132686][ T5690] logitech-hidpp-device 0003:046D:C081.0005: unknown main item tag 0x0 [ 126.132715][ T5690] logitech-hidpp-device 0003:046D:C081.0005: unknown main item tag 0x0 [ 126.132742][ T5690] logitech-hidpp-device 0003:046D:C081.0005: unknown main item tag 0x0 [ 126.132769][ T5690] logitech-hidpp-device 0003:046D:C081.0005: unknown main item tag 0x0 [ 126.141508][ T5690] logitech-hidpp-device 0003:046D:C081.0005: hidraw0: USB HID v80.09 Device [HID 046d:c081] on usb-dummy_hcd.2-1/input0 [ 126.213820][ T5703] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 126.434849][ T5703] usb 1-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 126.434904][ T5703] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 126.434928][ T5703] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 126.434954][ T5703] usb 1-1: config 0 interface 0 has no altsetting 0 [ 126.434983][ T5703] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 126.435003][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.514853][ T5703] usb 1-1: config 0 descriptor?? [ 126.515912][ T6028] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 126.551974][ T6035] fuse: Unknown parameter '0x0000000000000007' [ 127.021897][ T5690] usb 3-1: USB disconnect, device number 5 [ 127.941513][ T6057] netlink: 'syz.2.95': attribute type 1 has an invalid length. [ 127.941535][ T6057] netlink: 224 bytes leftover after parsing attributes in process `syz.2.95'. [ 128.238802][ T6067] fuse: Unknown parameter '0x0000000000000007' [ 128.901623][ T6077] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.104'. [ 128.988433][ T5703] usbhid 1-1:0.0: can't add hid device: -71 [ 128.988561][ T5703] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 129.029148][ T5703] usb 1-1: USB disconnect, device number 5 [ 129.359131][ T6082] netlink: 44 bytes leftover after parsing attributes in process `syz.1.106'. [ 129.605254][ T6092] fuse: Unknown parameter '0x0000000000000007' [ 129.677615][ T5690] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 129.838216][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 129.870975][ T5690] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 129.871004][ T5690] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 129.873364][ T5690] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 129.873491][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.873513][ T5690] usb 2-1: Product: syz [ 129.873528][ T5690] usb 2-1: Manufacturer: syz [ 129.873543][ T5690] usb 2-1: SerialNumber: syz [ 129.941800][ T5690] usb 2-1: config 0 descriptor?? [ 130.047530][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 130.049573][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.049637][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.049667][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 130.049686][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.095256][ T10] usb 3-1: config 0 descriptor?? [ 130.146684][ T10] hub 3-1:0.0: USB hub found [ 130.185438][ T5745] usb 2-1: USB disconnect, device number 4 [ 130.324128][ T10] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 130.434413][ T6112] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.116'. [ 130.752661][ T10] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 130.800851][ T32] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.006349][ T32] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 131.006400][ T32] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 131.006444][ T32] usb 1-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 131.006468][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.048415][ T6120] fuse: Unknown parameter '0x0000000000000007' [ 131.064786][ T32] usb 1-1: config 0 descriptor?? [ 131.099381][ T6122] netlink: 'syz.3.120': attribute type 10 has an invalid length. [ 131.099404][ T6122] netlink: 2 bytes leftover after parsing attributes in process `syz.3.120'. [ 131.320048][ T6127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.340627][ T4910] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 131.365638][ T4910] Bluetooth: hci3: Injecting HCI hardware error event [ 131.381383][ T5595] Bluetooth: hci3: hardware error 0x00 [ 131.386582][ T6127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.486496][ T6131] capability: warning: `syz.3.121' uses 32-bit capabilities (legacy support in use) [ 131.565138][ T32] usbhid 1-1:0.0: can't add hid device: -71 [ 131.565309][ T32] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 131.601278][ T6133] netlink: 'syz.1.122': attribute type 10 has an invalid length. [ 131.654936][ T32] usb 1-1: USB disconnect, device number 6 [ 131.749969][ T824] usb 3-1: USB disconnect, device number 6 [ 131.775891][ T6135] netlink: 172 bytes leftover after parsing attributes in process `syz.1.122'. [ 132.061051][ T6140] netlink: 'syz.3.124': attribute type 61 has an invalid length. [ 132.155651][ T4910] Bluetooth: hci3: Unable to find connection with handle 0x00c8 [ 132.228895][ T6147] netlink: 80 bytes leftover after parsing attributes in process `syz.1.127'. [ 132.232337][ T4910] Bluetooth: hci3: Unable to find connection with handle 0x00c8 [ 132.430952][ T6151] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.128'. [ 132.519561][ T6153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.725076][ T6156] fuse: Unknown parameter 'fd0x0000000000000007' [ 132.948632][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.948781][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.487625][ T824] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 133.658905][ T824] usb 1-1: device descriptor read/64, error -71 [ 133.789120][ T6179] FAULT_INJECTION: forcing a failure. [ 133.789120][ T6179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.789161][ T6179] CPU: 0 UID: 0 PID: 6179 Comm: syz.2.138 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 133.789187][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 133.789208][ T6179] Call Trace: [ 133.789217][ T6179] [ 133.789226][ T6179] dump_stack_lvl+0xe8/0x150 [ 133.789258][ T6179] should_fail_ex+0x467/0x600 [ 133.789287][ T6179] _copy_from_iter+0x1d3/0x1660 [ 133.789321][ T6179] ? trace_kmem_cache_alloc+0x29/0xe0 [ 133.789355][ T6179] ? __pfx__copy_from_iter+0x10/0x10 [ 133.789381][ T6179] ? __alloc_skb+0x276/0x7a0 [ 133.789402][ T6179] ? __alloc_skb+0x276/0x7a0 [ 133.789430][ T6179] ? netlink_sendmsg+0x650/0xb40 [ 133.789458][ T6179] ? skb_put+0x112/0x210 [ 133.789484][ T6179] netlink_sendmsg+0x6c0/0xb40 [ 133.789521][ T6179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.789551][ T6179] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 133.789586][ T6179] ? __kernel_text_address+0xd/0x30 [ 133.789619][ T6179] ? unwind_get_return_address+0x4d/0x90 [ 133.789644][ T6179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.789671][ T6179] sock_sendmsg_nosec+0x13a/0x180 [ 133.789705][ T6179] ____sys_sendmsg+0x565/0x870 [ 133.789740][ T6179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.789777][ T6179] ? import_iovec+0x73/0xa0 [ 133.789809][ T6179] ___sys_sendmsg+0x2a5/0x360 [ 133.789839][ T6179] ? __lock_acquire+0x6df/0x2e40 [ 133.789866][ T6179] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.789930][ T6179] ? __fget_files+0x2a/0x420 [ 133.789953][ T6179] ? __fget_files+0x3a8/0x420 [ 133.789987][ T6179] __x64_sys_sendmsg+0x1b7/0x290 [ 133.790018][ T6179] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 133.790064][ T6179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.790089][ T6179] do_syscall_64+0x174/0x580 [ 133.790118][ T6179] ? trace_irq_disable+0x3b/0x140 [ 133.790141][ T6179] ? clear_bhb_loop+0x40/0x90 [ 133.790168][ T6179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.790191][ T6179] RIP: 0033:0x7f35513ede59 [ 133.790217][ T6179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.790236][ T6179] RSP: 002b:00007f354f646028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.790259][ T6179] RAX: ffffffffffffffda RBX: 00007f3551675fa0 RCX: 00007f35513ede59 [ 133.790275][ T6179] RDX: 0000000024000004 RSI: 0000200000000640 RDI: 0000000000000003 [ 133.790289][ T6179] RBP: 00007f354f646090 R08: 0000000000000000 R09: 0000000000000000 [ 133.790303][ T6179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.790316][ T6179] R13: 00007f3551676038 R14: 00007f3551675fa0 R15: 00007ffdcfd0d428 [ 133.790349][ T6179] [ 133.892746][ T5595] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 133.900954][ T824] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 134.092158][ T824] usb 1-1: device descriptor read/64, error -71 [ 134.203959][ T824] usb usb1-port1: attempt power cycle [ 134.567576][ T824] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 134.591824][ T824] usb 1-1: device descriptor read/8, error -71 [ 134.829720][ T824] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 134.853593][ T824] usb 1-1: device descriptor read/8, error -71 [ 134.958359][ T824] usb usb1-port1: unable to enumerate USB device [ 135.587509][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 135.687517][ T4923] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 135.740294][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 135.755666][ T10] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 135.755694][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.755713][ T10] usb 3-1: Product: syz [ 135.755732][ T10] usb 3-1: Manufacturer: syz [ 135.755742][ T10] usb 3-1: SerialNumber: syz [ 135.795199][ T10] usb 3-1: config 0 descriptor?? [ 135.810444][ T10] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 135.869723][ T4923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.869837][ T4923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 135.869866][ T4923] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.869906][ T4923] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 135.869927][ T4923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.942213][ T4923] usb 2-1: config 0 descriptor?? [ 135.944209][ T6205] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 137.590326][ T10] gspca_topro: reg_r err -110 [ 137.590360][ T10] gspca_topro: Sensor soi763a [ 137.846949][ T6243] fuse: Unknown parameter 'fd0x0000000000000007' [ 138.579469][ T4923] usbhid 2-1:0.0: can't add hid device: -71 [ 138.579595][ T4923] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 138.635687][ T4923] usb 2-1: USB disconnect, device number 5 [ 138.817176][ T6231] syz.2.143 (6231) used greatest stack depth: 15440 bytes left [ 138.884085][ T4923] usb 3-1: USB disconnect, device number 7 [ 139.471966][ T6279] FAULT_INJECTION: forcing a failure. [ 139.471966][ T6279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.472003][ T6279] CPU: 1 UID: 0 PID: 6279 Comm: syz.2.158 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 139.472028][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 139.472054][ T6279] Call Trace: [ 139.472063][ T6279] [ 139.472072][ T6279] dump_stack_lvl+0xe8/0x150 [ 139.472107][ T6279] should_fail_ex+0x467/0x600 [ 139.472136][ T6279] _copy_to_user+0x31/0xb0 [ 139.472167][ T6279] simple_read_from_buffer+0xe1/0x170 [ 139.472196][ T6279] proc_fail_nth_read+0x1be/0x230 [ 139.472223][ T6279] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.472250][ T6279] ? rw_verify_area+0x250/0x4d0 [ 139.472277][ T6279] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.472301][ T6279] vfs_read+0x219/0xa90 [ 139.472337][ T6279] ? __pfx_vfs_read+0x10/0x10 [ 139.472365][ T6279] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 139.472395][ T6279] ? lockdep_hardirqs_on+0x7a/0x110 [ 139.472422][ T6279] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 139.472449][ T6279] ? mutex_lock_nested+0x152/0x1d0 [ 139.472469][ T6279] ? fdget_pos+0x252/0x320 [ 139.472510][ T6279] ksys_read+0x156/0x270 [ 139.472536][ T6279] ? __pfx_ksys_read+0x10/0x10 [ 139.472577][ T6279] ? __pfx_v4l2_ioctl+0x10/0x10 [ 139.472610][ T6279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.472634][ T6279] do_syscall_64+0x174/0x580 [ 139.472661][ T6279] ? trace_irq_disable+0x3b/0x140 [ 139.472690][ T6279] ? clear_bhb_loop+0x40/0x90 [ 139.472716][ T6279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.472737][ T6279] RIP: 0033:0x7f35513ae68e [ 139.472756][ T6279] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 139.472774][ T6279] RSP: 002b:00007f354f645fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 139.472797][ T6279] RAX: ffffffffffffffda RBX: 00007f354f6466c0 RCX: 00007f35513ae68e [ 139.472812][ T6279] RDX: 000000000000000f RSI: 00007f354f6460a0 RDI: 0000000000000004 [ 139.472825][ T6279] RBP: 00007f354f646090 R08: 0000000000000000 R09: 0000000000000000 [ 139.472838][ T6279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.472850][ T6279] R13: 00007f3551676038 R14: 00007f3551675fa0 R15: 00007ffdcfd0d428 [ 139.472882][ T6279] [ 140.002243][ T6290] netlink: 16 bytes leftover after parsing attributes in process `syz.2.162'. [ 140.172181][ T6281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.617505][ T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 140.659443][ T4923] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 140.771049][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 127: 254, using maximum allowed: 30 [ 140.771101][ T10] usb 3-1: config 0 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 140.771123][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 140.771147][ T10] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 140.771164][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.783233][ T10] usb 3-1: config 0 descriptor?? [ 140.839160][ T4923] usb 1-1: Using ep0 maxpacket: 32 [ 140.849383][ T4923] usb 1-1: unable to get BOS descriptor or descriptor too short [ 140.850875][ T4923] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 140.901494][ T4923] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.901528][ T4923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.901549][ T4923] usb 1-1: Product: syz [ 140.901565][ T4923] usb 1-1: Manufacturer: syz [ 140.901581][ T4923] usb 1-1: SerialNumber: syz [ 141.065841][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 141.065961][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 141.163445][ T10] usb 3-1: USB disconnect, device number 8 [ 141.265353][ T6315] netlink: 48 bytes leftover after parsing attributes in process `syz.3.169'. [ 141.287249][ T4923] usb 1-1: selecting invalid altsetting 1 [ 141.300098][ T4923] cdc_ncm 1-1:1.0: bind() failure [ 141.349592][ T4923] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 141.349641][ T4923] cdc_ncm 1-1:1.1: bind() failure [ 141.373503][ T4923] usb 1-1: USB disconnect, device number 11 [ 141.437752][ T6319] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.171'. [ 142.143350][ T6333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.285025][ T6345] FAULT_INJECTION: forcing a failure. [ 142.285025][ T6345] name failslab, interval 1, probability 0, space 0, times 0 [ 142.285052][ T6345] CPU: 1 UID: 0 PID: 6345 Comm: syz.0.180 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 142.285070][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 142.285079][ T6345] Call Trace: [ 142.285084][ T6345] [ 142.285090][ T6345] dump_stack_lvl+0xe8/0x150 [ 142.285112][ T6345] should_fail_ex+0x467/0x600 [ 142.285132][ T6345] should_failslab+0xa8/0x100 [ 142.285147][ T6345] ? skb_clone+0x212/0x3a0 [ 142.285165][ T6345] kmem_cache_alloc_noprof+0x9e/0x680 [ 142.285188][ T6345] ? skb_clone+0x212/0x3a0 [ 142.285211][ T6345] skb_clone+0x212/0x3a0 [ 142.285232][ T6345] __netlink_deliver_tap+0x410/0x880 [ 142.285258][ T6345] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.285278][ T6345] netlink_deliver_tap+0x19c/0x1b0 [ 142.285297][ T6345] netlink_unicast+0x7b8/0x990 [ 142.285321][ T6345] netlink_sendmsg+0x813/0xb40 [ 142.285346][ T6345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.285369][ T6345] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 142.285392][ T6345] ? __kernel_text_address+0xd/0x30 [ 142.285416][ T6345] ? unwind_get_return_address+0x4d/0x90 [ 142.285432][ T6345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.285451][ T6345] sock_sendmsg_nosec+0x13a/0x180 [ 142.285475][ T6345] ____sys_sendmsg+0x565/0x870 [ 142.285499][ T6345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.285523][ T6345] ? import_iovec+0x73/0xa0 [ 142.285546][ T6345] ___sys_sendmsg+0x2a5/0x360 [ 142.285567][ T6345] ? __lock_acquire+0x6df/0x2e40 [ 142.285585][ T6345] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.285627][ T6345] ? __fget_files+0x2a/0x420 [ 142.285642][ T6345] ? __fget_files+0x3a8/0x420 [ 142.285665][ T6345] __x64_sys_sendmsg+0x1b7/0x290 [ 142.285685][ T6345] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.285716][ T6345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.285732][ T6345] do_syscall_64+0x174/0x580 [ 142.285752][ T6345] ? trace_irq_disable+0x3b/0x140 [ 142.285768][ T6345] ? clear_bhb_loop+0x40/0x90 [ 142.285786][ T6345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.285801][ T6345] RIP: 0033:0x7fcf95b3de59 [ 142.285815][ T6345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.285827][ T6345] RSP: 002b:00007fcf93d96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.285843][ T6345] RAX: ffffffffffffffda RBX: 00007fcf95dc5fa0 RCX: 00007fcf95b3de59 [ 142.285854][ T6345] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 142.285869][ T6345] RBP: 00007fcf93d96090 R08: 0000000000000000 R09: 0000000000000000 [ 142.285879][ T6345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.285887][ T6345] R13: 00007fcf95dc6038 R14: 00007fcf95dc5fa0 R15: 00007ffda6bac508 [ 142.285910][ T6345] [ 142.310811][ T200] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 142.627465][ T200] usb 3-1: Using ep0 maxpacket: 8 [ 142.630746][ T200] usb 3-1: config 0 interface 0 altsetting 240 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 142.630779][ T200] usb 3-1: config 0 interface 0 altsetting 240 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.630824][ T200] usb 3-1: config 0 interface 0 has no altsetting 0 [ 142.630859][ T200] usb 3-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 142.630885][ T200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.695834][ T200] usb 3-1: config 0 descriptor?? [ 143.147518][ T4923] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 143.193927][ T200] hid_parser_main: 35 callbacks suppressed [ 143.193951][ T200] logitech-hidpp-device 0003:046D:C081.0007: unknown main item tag 0x0 [ 143.193980][ T200] logitech-hidpp-device 0003:046D:C081.0007: unknown main item tag 0x0 [ 143.194005][ T200] logitech-hidpp-device 0003:046D:C081.0007: unknown main item tag 0x0 [ 143.194029][ T200] logitech-hidpp-device 0003:046D:C081.0007: unknown main item tag 0x0 [ 143.194053][ T200] logitech-hidpp-device 0003:046D:C081.0007: unknown main item tag 0x0 [ 143.194077][ T200] logitech-hidpp-device 0003:046D:C081.0007: unknown main item tag 0x0 [ 143.194102][ T200] logitech-hidpp-device 0003:046D:C081.0007: unknown main item tag 0x0 [ 143.194126][ T200] logitech-hidpp-device 0003:046D:C081.0007: unknown main item tag 0x0 [ 143.194150][ T200] logitech-hidpp-device 0003:046D:C081.0007: unknown main item tag 0x0 [ 143.194175][ T200] logitech-hidpp-device 0003:046D:C081.0007: unknown main item tag 0x0 [ 143.295494][ T200] logitech-hidpp-device 0003:046D:C081.0007: hidraw0: USB HID v80.09 Device [HID 046d:c081] on usb-dummy_hcd.2-1/input0 [ 143.321802][ T4923] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 143.321831][ T4923] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.321882][ T4923] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 8 [ 143.321912][ T4923] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 106, changing to 4 [ 143.321939][ T4923] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 0 [ 143.321967][ T4923] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 143.321991][ T4923] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 143.322017][ T4923] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 143.322045][ T4923] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 143.322068][ T4923] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 143.852140][ T32] usb 3-1: USB disconnect, device number 9 [ 143.935263][ T6362] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.185'. [ 144.644808][ T6371] warning: `syz.0.189' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 145.377646][ T5690] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 145.557402][ T5690] usb 1-1: Using ep0 maxpacket: 16 [ 145.559633][ T5690] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 145.559661][ T5690] usb 1-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.559686][ T5690] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 145.559713][ T5690] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 145.559741][ T5690] usb 1-1: config 0 interface 0 has no altsetting 0 [ 145.563354][ T5690] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 145.563381][ T5690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.563401][ T5690] usb 1-1: Product: syz [ 145.563415][ T5690] usb 1-1: Manufacturer: syz [ 145.563430][ T5690] usb 1-1: SerialNumber: syz [ 145.736794][ T5690] usb 1-1: config 0 descriptor?? [ 145.739473][ T6375] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 145.993065][ T5690] usb 1-1: Can not set alternate setting to 1, error: -71 [ 145.993124][ T5690] synaptics_usb 1-1:0.0: probe with driver synaptics_usb failed with error -71 [ 146.014751][ T4923] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 146.014781][ T4923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.106900][ T5690] usb 1-1: USB disconnect, device number 12 [ 146.133490][ T4923] usb 2-1: can't set config #1, error -71 [ 146.184038][ T4923] usb 2-1: USB disconnect, device number 6 [ 146.497505][ T824] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 146.664107][ T824] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 146.664140][ T824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.664162][ T824] usb 4-1: Product: syz [ 146.664177][ T824] usb 4-1: Manufacturer: syz [ 146.664192][ T824] usb 4-1: SerialNumber: syz [ 146.814373][ T32] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 147.047585][ T4923] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 147.199447][ T4923] usb 1-1: Using ep0 maxpacket: 8 [ 147.230739][ T4923] usb 1-1: config 0 interface 0 altsetting 240 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 147.230775][ T4923] usb 1-1: config 0 interface 0 altsetting 240 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.230903][ T4923] usb 1-1: config 0 interface 0 has no altsetting 0 [ 147.230941][ T4923] usb 1-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 147.230967][ T4923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.271877][ T32] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 148.306612][ T4923] usb 1-1: config 0 descriptor?? [ 148.321449][ T824] usb 4-1: USB disconnect, device number 8 [ 148.407643][ T32] ath9k_htc: Failed to initialize the device [ 148.471462][ T824] usb 4-1: ath9k_htc: USB layer deinitialized [ 148.829511][ T4923] hid_parser_main: 34 callbacks suppressed [ 148.829533][ T4923] logitech-hidpp-device 0003:046D:C081.0008: unknown main item tag 0x0 [ 148.829561][ T4923] logitech-hidpp-device 0003:046D:C081.0008: unknown main item tag 0x0 [ 148.829584][ T4923] logitech-hidpp-device 0003:046D:C081.0008: unknown main item tag 0x0 [ 148.829607][ T4923] logitech-hidpp-device 0003:046D:C081.0008: unknown main item tag 0x0 [ 148.829630][ T4923] logitech-hidpp-device 0003:046D:C081.0008: unknown main item tag 0x0 [ 148.829656][ T4923] logitech-hidpp-device 0003:046D:C081.0008: unknown main item tag 0x0 [ 148.829681][ T4923] logitech-hidpp-device 0003:046D:C081.0008: unknown main item tag 0x0 [ 148.829706][ T4923] logitech-hidpp-device 0003:046D:C081.0008: unknown main item tag 0x0 [ 148.829730][ T4923] logitech-hidpp-device 0003:046D:C081.0008: unknown main item tag 0x0 [ 148.829753][ T4923] logitech-hidpp-device 0003:046D:C081.0008: unknown main item tag 0x0 [ 148.906104][ T4923] logitech-hidpp-device 0003:046D:C081.0008: hidraw0: USB HID v80.09 Device [HID 046d:c081] on usb-dummy_hcd.0-1/input0 [ 149.222781][ T10] usb 1-1: USB disconnect, device number 13 [ 149.490105][ T6410] FAULT_INJECTION: forcing a failure. [ 149.490105][ T6410] name failslab, interval 1, probability 0, space 0, times 0 [ 149.490141][ T6410] CPU: 1 UID: 0 PID: 6410 Comm: syz.2.199 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 149.490162][ T6410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 149.490172][ T6410] Call Trace: [ 149.490178][ T6410] [ 149.490185][ T6410] dump_stack_lvl+0xe8/0x150 [ 149.490211][ T6410] should_fail_ex+0x467/0x600 [ 149.490232][ T6410] should_failslab+0xa8/0x100 [ 149.490251][ T6410] __kvmalloc_node_noprof+0x176/0x880 [ 149.490281][ T6410] ? pfifo_fast_init+0x112/0x6f0 [ 149.490300][ T6410] ? pfifo_fast_init+0x112/0x6f0 [ 149.490324][ T6410] pfifo_fast_init+0x112/0x6f0 [ 149.490346][ T6410] qdisc_create_dflt+0x13b/0x4e0 [ 149.490371][ T6410] dev_activate+0x37a/0x1150 [ 149.490404][ T6410] __dev_open+0x699/0x850 [ 149.490434][ T6410] ? __pfx___dev_open+0x10/0x10 [ 149.490459][ T6410] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 149.490480][ T6410] ? lockdep_hardirqs_on+0x7a/0x110 [ 149.490522][ T6410] __dev_change_flags+0x329/0x820 [ 149.490548][ T6410] ? __pfx___dev_change_flags+0x10/0x10 [ 149.490572][ T6410] ? full_name_hash+0xb0/0xe0 [ 149.490596][ T6410] netif_change_flags+0x7c/0x1b0 [ 149.490621][ T6410] dev_change_flags+0x128/0x260 [ 149.490644][ T6410] dev_ioctl+0x7b4/0x1150 [ 149.490667][ T6410] sock_do_ioctl+0x23e/0x320 [ 149.490699][ T6410] ? __pfx_sock_do_ioctl+0x10/0x10 [ 149.490741][ T6410] sock_ioctl+0x57d/0x7f0 [ 149.490770][ T6410] ? __pfx_sock_ioctl+0x10/0x10 [ 149.490798][ T6410] ? __fget_files+0x2a/0x420 [ 149.490816][ T6410] ? __fget_files+0x3a8/0x420 [ 149.490835][ T6410] ? __fget_files+0x2a/0x420 [ 149.490858][ T6410] ? bpf_lsm_file_ioctl+0x9/0x20 [ 149.490874][ T6410] ? __pfx_sock_ioctl+0x10/0x10 [ 149.490898][ T6410] __se_sys_ioctl+0xff/0x170 [ 149.490921][ T6410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.490939][ T6410] do_syscall_64+0x174/0x580 [ 149.490961][ T6410] ? trace_irq_disable+0x3b/0x140 [ 149.490978][ T6410] ? clear_bhb_loop+0x40/0x90 [ 149.491002][ T6410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.491020][ T6410] RIP: 0033:0x7f35513ede59 [ 149.491038][ T6410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.491053][ T6410] RSP: 002b:00007f354f604028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.491074][ T6410] RAX: ffffffffffffffda RBX: 00007f3551676180 RCX: 00007f35513ede59 [ 149.491089][ T6410] RDX: 0000200000000100 RSI: 0000000000008914 RDI: 0000000000000005 [ 149.491099][ T6410] RBP: 00007f354f604090 R08: 0000000000000000 R09: 0000000000000000 [ 149.491109][ T6410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.491118][ T6410] R13: 00007f3551676218 R14: 00007f3551676180 R15: 00007ffdcfd0d428 [ 149.491144][ T6410] [ 149.596674][ T6410] pim6reg1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 149.837056][ T6411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.991057][ T6416] FAULT_INJECTION: forcing a failure. [ 149.991057][ T6416] name failslab, interval 1, probability 0, space 0, times 0 [ 149.991094][ T6416] CPU: 0 UID: 0 PID: 6416 Comm: syz.0.202 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 149.991118][ T6416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 149.991130][ T6416] Call Trace: [ 149.991139][ T6416] [ 149.991148][ T6416] dump_stack_lvl+0xe8/0x150 [ 149.991181][ T6416] should_fail_ex+0x467/0x600 [ 149.991210][ T6416] should_failslab+0xa8/0x100 [ 149.991231][ T6416] ? security_file_alloc+0x34/0x2d0 [ 149.991253][ T6416] kmem_cache_alloc_noprof+0x9e/0x680 [ 149.991284][ T6416] ? rcu_is_watching+0x15/0xb0 [ 149.991310][ T6416] ? security_file_alloc+0x34/0x2d0 [ 149.991331][ T6416] ? alloc_empty_file+0x5b/0x1d0 [ 149.991369][ T6416] security_file_alloc+0x34/0x2d0 [ 149.991397][ T6416] init_file+0x96/0x2d0 [ 149.991431][ T6416] alloc_empty_file+0x74/0x1d0 [ 149.991466][ T6416] alloc_file_pseudo+0x115/0x1e0 [ 149.991503][ T6416] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 149.991548][ T6416] do_accept+0x4a4/0x930 [ 149.991578][ T6416] ? __pfx_do_accept+0x10/0x10 [ 149.991623][ T6416] __sys_accept4+0x139/0x230 [ 149.991648][ T6416] ? __pfx___sys_accept4+0x10/0x10 [ 149.991670][ T6416] ? __pfx_ksys_write+0x10/0x10 [ 149.991703][ T6416] __x64_sys_accept4+0x9a/0xb0 [ 149.991725][ T6416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.991748][ T6416] do_syscall_64+0x174/0x580 [ 149.991775][ T6416] ? trace_irq_disable+0x3b/0x140 [ 149.991804][ T6416] ? clear_bhb_loop+0x40/0x90 [ 149.991832][ T6416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.991855][ T6416] RIP: 0033:0x7fcf95b3de59 [ 149.991875][ T6416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.991893][ T6416] RSP: 002b:00007fcf93d96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 149.991916][ T6416] RAX: ffffffffffffffda RBX: 00007fcf95dc5fa0 RCX: 00007fcf95b3de59 [ 149.991932][ T6416] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 149.991946][ T6416] RBP: 00007fcf93d96090 R08: 0000000000000000 R09: 0000000000000000 [ 149.991959][ T6416] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 149.991984][ T6416] R13: 00007fcf95dc6038 R14: 00007fcf95dc5fa0 R15: 00007ffda6bac508 [ 149.992017][ T6416] [ 150.004023][ T5595] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 150.004046][ T5595] CPU: 1 UID: 0 PID: 5595 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 150.004069][ T5595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 150.004107][ T5595] Workqueue: hci0 hci_rx_work [ 150.004188][ T5595] Call Trace: [ 150.004207][ T5595] [ 150.004226][ T5595] dump_stack_lvl+0xe8/0x150 [ 150.004311][ T5595] sysfs_create_dir_ns+0x271/0x2a0 [ 150.004376][ T5595] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 150.004460][ T5595] ? rt_spin_unlock+0x163/0x200 [ 150.004535][ T5595] kobject_add_internal+0x62c/0xce0 [ 150.004596][ T5595] kobject_add+0x163/0x240 [ 150.004631][ T5595] ? rt_spin_unlock+0x157/0x200 [ 150.004657][ T5595] ? __pfx_kobject_add+0x10/0x10 [ 150.004751][ T5595] ? get_device_parent+0x370/0x3a0 [ 150.004839][ T5595] device_add+0x3fa/0xb80 [ 150.004943][ T5595] hci_conn_add_sysfs+0xd5/0x210 [ 150.005013][ T5595] le_conn_complete_evt+0xfef/0x1580 [ 150.005132][ T5595] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 150.005217][ T5595] ? lockdep_hardirqs_on+0x7a/0x110 [ 150.005300][ T5595] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 150.005330][ T5595] ? rt_mutex_slowunlock+0x219/0x460 [ 150.005374][ T5595] ? skb_pull_data+0xf0/0x200 [ 150.005440][ T5595] hci_le_conn_complete_evt+0x187/0x470 [ 150.005533][ T5595] hci_event_packet+0x67a/0xf10 [ 150.005577][ T5595] ? reacquire_held_locks+0x117/0x1a0 [ 150.005648][ T5595] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 150.005729][ T5595] ? __pfx_hci_event_packet+0x10/0x10 [ 150.005805][ T5595] ? rt_spin_unlock+0x157/0x200 [ 150.005892][ T5595] ? hci_send_to_monitor+0xe2/0x590 [ 150.005991][ T5595] hci_rx_work+0x3ee/0x1020 [ 150.006087][ T5595] ? process_one_work+0x7fd/0x1480 [ 150.006151][ T5595] process_one_work+0xaaf/0x1480 [ 150.006228][ T5595] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 150.006390][ T5595] ? __pfx_process_one_work+0x10/0x10 [ 150.006451][ T5595] ? do_raw_spin_lock+0x12b/0x2f0 [ 150.006551][ T5595] ? assign_work+0x3cf/0x5d0 [ 150.006619][ T5595] worker_thread+0xb05/0x10d0 [ 150.006754][ T5595] kthread+0x388/0x470 [ 150.006848][ T5595] ? __pfx_worker_thread+0x10/0x10 [ 150.006910][ T5595] ? __pfx_kthread+0x10/0x10 [ 150.007018][ T5595] ret_from_fork+0x514/0xb70 [ 150.007102][ T5595] ? __pfx_ret_from_fork+0x10/0x10 [ 150.007176][ T5595] ? __switch_to+0xc89/0x1420 [ 150.007257][ T5595] ? __pfx_kthread+0x10/0x10 [ 150.007324][ T5595] ret_from_fork_asm+0x1a/0x30 [ 150.007370][ T5595] [ 150.010294][ T5595] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 150.021695][ T5595] Bluetooth: hci0: failed to register connection device [ 151.207634][ T4923] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 151.359186][ T4923] usb 3-1: Using ep0 maxpacket: 16 [ 151.361301][ T4923] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 151.361335][ T4923] usb 3-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.361354][ T4923] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 151.361372][ T4923] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 151.361393][ T4923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 151.425847][ T4923] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 151.425868][ T4923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.425912][ T4923] usb 3-1: Product: syz [ 151.425929][ T4923] usb 3-1: Manufacturer: syz [ 151.425945][ T4923] usb 3-1: SerialNumber: syz [ 151.480394][ T4923] usb 3-1: config 0 descriptor?? [ 151.482676][ T6425] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 152.534664][ T6461] netlink: 176 bytes leftover after parsing attributes in process `syz.3.215'. [ 152.779019][ T824] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 152.956379][ T824] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 152.956408][ T824] usb 4-1: config 0 has no interface number 0 [ 152.956440][ T824] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.956502][ T824] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.956519][ T824] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.956550][ T824] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 152.956567][ T824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.045389][ T824] usb 4-1: config 0 descriptor?? [ 153.221724][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 153.520787][ T824] hid (null): global environment stack underflow [ 153.539519][ T6473] FAULT_INJECTION: forcing a failure. [ 153.539519][ T6473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.539542][ T6473] CPU: 1 UID: 0 PID: 6473 Comm: syz.0.219 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 153.539558][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.539567][ T6473] Call Trace: [ 153.539572][ T6473] [ 153.539578][ T6473] dump_stack_lvl+0xe8/0x150 [ 153.539613][ T6473] should_fail_ex+0x467/0x600 [ 153.539630][ T6473] _copy_from_iter+0x1d3/0x1660 [ 153.539650][ T6473] ? trace_kmem_cache_alloc+0x29/0xe0 [ 153.539671][ T6473] ? __pfx__copy_from_iter+0x10/0x10 [ 153.539685][ T6473] ? __alloc_skb+0x276/0x7a0 [ 153.539717][ T6473] ? __alloc_skb+0x276/0x7a0 [ 153.539740][ T6473] ? netlink_sendmsg+0x650/0xb40 [ 153.539763][ T6473] ? skb_put+0x112/0x210 [ 153.539785][ T6473] netlink_sendmsg+0x6c0/0xb40 [ 153.539811][ T6473] ? rcu_is_watching+0x15/0xb0 [ 153.539830][ T6473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.539848][ T6473] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 153.539869][ T6473] ? __kernel_text_address+0xd/0x30 [ 153.539893][ T6473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.539909][ T6473] sock_sendmsg_nosec+0x13a/0x180 [ 153.539931][ T6473] sock_write_iter+0x2e4/0x3f0 [ 153.539950][ T6473] ? __pfx_sock_write_iter+0x10/0x10 [ 153.539980][ T6473] do_iter_readv_writev+0x624/0x8d0 [ 153.539999][ T6473] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 153.540026][ T6473] ? vfs_writev+0x32d/0x990 [ 153.540050][ T6473] vfs_writev+0x34c/0x990 [ 153.540071][ T6473] ? do_raw_spin_lock+0x12b/0x2f0 [ 153.540092][ T6473] ? __pfx_vfs_writev+0x10/0x10 [ 153.540120][ T6473] ? __fget_files+0x2a/0x420 [ 153.540136][ T6473] ? __fget_files+0x3a8/0x420 [ 153.540149][ T6473] ? __fget_files+0x2a/0x420 [ 153.540167][ T6473] do_writev+0x15a/0x2e0 [ 153.540205][ T6473] ? __pfx_do_writev+0x10/0x10 [ 153.540241][ T6473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.540262][ T6473] do_syscall_64+0x174/0x580 [ 153.540293][ T6473] ? clear_bhb_loop+0x40/0x90 [ 153.540314][ T6473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.540327][ T6473] RIP: 0033:0x7fcf95b3de59 [ 153.540338][ T6473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.540349][ T6473] RSP: 002b:00007fcf93d96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 153.540363][ T6473] RAX: ffffffffffffffda RBX: 00007fcf95dc5fa0 RCX: 00007fcf95b3de59 [ 153.540373][ T6473] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000004 [ 153.540381][ T6473] RBP: 00007fcf93d96090 R08: 0000000000000000 R09: 0000000000000000 [ 153.540389][ T6473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.540397][ T6473] R13: 00007fcf95dc6038 R14: 00007fcf95dc5fa0 R15: 00007ffda6bac508 [ 153.540416][ T6473] [ 153.983880][ T4923] usb 3-1: Can not set alternate setting to 1, error: -71 [ 153.983925][ T4923] synaptics_usb 3-1:0.0: probe with driver synaptics_usb failed with error -71 [ 154.059411][ T4923] usb 3-1: USB disconnect, device number 10 [ 154.119435][ T824] input: HID 28bd:0042 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0042.0009/input/input5 [ 154.505458][ T824] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0042.0009/input/input6 [ 154.655096][ T824] uclogic 0003:28BD:0042.0009: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.3-1/input1 [ 154.714177][ T824] usb 4-1: USB disconnect, device number 9 [ 154.791548][ T6486] fido_id[6486]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 155.418009][ T5745] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 155.557484][ T5745] usb 2-1: device descriptor read/64, error -71 [ 155.575599][ T5595] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 155.575623][ T5595] CPU: 0 UID: 0 PID: 5595 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 155.575648][ T5595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 155.575660][ T5595] Workqueue: hci2 hci_rx_work [ 155.575687][ T5595] Call Trace: [ 155.575695][ T5595] [ 155.575708][ T5595] dump_stack_lvl+0xe8/0x150 [ 155.575731][ T5595] sysfs_create_dir_ns+0x271/0x2a0 [ 155.575748][ T5595] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 155.575766][ T5595] ? rt_spin_unlock+0x163/0x200 [ 155.575784][ T5595] kobject_add_internal+0x62c/0xce0 [ 155.575802][ T5595] kobject_add+0x163/0x240 [ 155.575823][ T5595] ? rt_spin_unlock+0x157/0x200 [ 155.575841][ T5595] ? __pfx_kobject_add+0x10/0x10 [ 155.575869][ T5595] ? get_device_parent+0x370/0x3a0 [ 155.575894][ T5595] device_add+0x3fa/0xb80 [ 155.575921][ T5595] hci_conn_add_sysfs+0xd5/0x210 [ 155.575940][ T5595] le_conn_complete_evt+0xfef/0x1580 [ 155.575969][ T5595] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 155.575991][ T5595] ? lockdep_hardirqs_on+0x7a/0x110 [ 155.576009][ T5595] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 155.576028][ T5595] ? rt_mutex_slowunlock+0x219/0x460 [ 155.576043][ T5595] ? skb_pull_data+0xf0/0x200 [ 155.576066][ T5595] hci_le_conn_complete_evt+0x187/0x470 [ 155.576092][ T5595] hci_event_packet+0x67a/0xf10 [ 155.576110][ T5595] ? reacquire_held_locks+0x117/0x1a0 [ 155.576131][ T5595] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 155.576150][ T5595] ? __pfx_hci_event_packet+0x10/0x10 [ 155.576167][ T5595] ? rt_spin_unlock+0x157/0x200 [ 155.576187][ T5595] ? hci_send_to_monitor+0xe2/0x590 [ 155.576214][ T5595] hci_rx_work+0x3ee/0x1020 [ 155.576261][ T5595] ? process_one_work+0x7fd/0x1480 [ 155.576286][ T5595] process_one_work+0xaaf/0x1480 [ 155.576307][ T5595] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 155.576353][ T5595] ? __pfx_process_one_work+0x10/0x10 [ 155.576380][ T5595] ? do_raw_spin_lock+0x12b/0x2f0 [ 155.576429][ T5595] ? assign_work+0x3cf/0x5d0 [ 155.576455][ T5595] worker_thread+0xb05/0x10d0 [ 155.576502][ T5595] kthread+0x388/0x470 [ 155.576528][ T5595] ? __pfx_worker_thread+0x10/0x10 [ 155.576551][ T5595] ? __pfx_kthread+0x10/0x10 [ 155.576572][ T5595] ret_from_fork+0x514/0xb70 [ 155.576594][ T5595] ? __pfx_ret_from_fork+0x10/0x10 [ 155.576615][ T5595] ? __switch_to+0xc89/0x1420 [ 155.576634][ T5595] ? __pfx_kthread+0x10/0x10 [ 155.576655][ T5595] ret_from_fork_asm+0x1a/0x30 [ 155.576686][ T5595] [ 155.576777][ T5595] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 155.576813][ T5595] Bluetooth: hci2: failed to register connection device [ 155.859155][ T5745] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 155.996096][ T6505] FAULT_INJECTION: forcing a failure. [ 155.996096][ T6505] name failslab, interval 1, probability 0, space 0, times 0 [ 155.996127][ T6505] CPU: 1 UID: 0 PID: 6505 Comm: syz.0.229 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 155.996147][ T6505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 155.996156][ T6505] Call Trace: [ 155.996161][ T6505] [ 155.996168][ T6505] dump_stack_lvl+0xe8/0x150 [ 155.996191][ T6505] should_fail_ex+0x467/0x600 [ 155.996211][ T6505] should_failslab+0xa8/0x100 [ 155.996228][ T6505] __kmalloc_noprof+0xfb/0x790 [ 155.996252][ T6505] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 155.996281][ T6505] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 155.996314][ T6505] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 155.996349][ T6505] genl_family_rcv_msg_doit+0xda/0x340 [ 155.996381][ T6505] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 155.996408][ T6505] ? rcu_is_watching+0x15/0xb0 [ 155.996429][ T6505] ? rcu_is_watching+0x15/0xb0 [ 155.996449][ T6505] ? cap_capable+0x123/0x460 [ 155.996476][ T6505] ? safesetid_security_capable+0xa9/0x1a0 [ 155.996498][ T6505] ? bpf_lsm_capable+0x9/0x20 [ 155.996516][ T6505] ? security_capable+0x74/0x280 [ 155.996554][ T6505] genl_rcv_msg+0x614/0x7a0 [ 155.996582][ T6505] ? __pfx_genl_rcv_msg+0x10/0x10 [ 155.996603][ T6505] ? ref_tracker_free+0x668/0x820 [ 155.996620][ T6505] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 155.996648][ T6505] ? ____sys_sendmsg+0x565/0x870 [ 155.996667][ T6505] ? ___sys_sendmsg+0x2a5/0x360 [ 155.996686][ T6505] ? __x64_sys_sendmsg+0x1b7/0x290 [ 155.996706][ T6505] ? do_syscall_64+0x174/0x580 [ 155.996728][ T6505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.996758][ T6505] netlink_rcv_skb+0x226/0x4a0 [ 155.996781][ T6505] ? __pfx_genl_rcv_msg+0x10/0x10 [ 155.996806][ T6505] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 155.996838][ T6505] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.996863][ T6505] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.996885][ T6505] genl_rcv+0x28/0x40 [ 155.996906][ T6505] netlink_unicast+0x7f5/0x990 [ 155.996931][ T6505] netlink_sendmsg+0x813/0xb40 [ 155.996958][ T6505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.996979][ T6505] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 155.997005][ T6505] ? __kernel_text_address+0xd/0x30 [ 155.997032][ T6505] ? unwind_get_return_address+0x4d/0x90 [ 155.997050][ T6505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.997067][ T6505] sock_sendmsg_nosec+0x13a/0x180 [ 155.997092][ T6505] ____sys_sendmsg+0x565/0x870 [ 155.997118][ T6505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.997145][ T6505] ? import_iovec+0x73/0xa0 [ 155.997171][ T6505] ___sys_sendmsg+0x2a5/0x360 [ 155.997191][ T6505] ? __lock_acquire+0x6df/0x2e40 [ 155.997211][ T6505] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.997261][ T6505] ? __fget_files+0x2a/0x420 [ 155.997279][ T6505] ? __fget_files+0x3a8/0x420 [ 155.997306][ T6505] __x64_sys_sendmsg+0x1b7/0x290 [ 155.997330][ T6505] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 155.997368][ T6505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.997387][ T6505] do_syscall_64+0x174/0x580 [ 155.997409][ T6505] ? trace_irq_disable+0x3b/0x140 [ 155.997428][ T6505] ? clear_bhb_loop+0x40/0x90 [ 155.997447][ T6505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.997461][ T6505] RIP: 0033:0x7fcf95b3de59 [ 155.997476][ T6505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.997488][ T6505] RSP: 002b:00007fcf93d96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.997504][ T6505] RAX: ffffffffffffffda RBX: 00007fcf95dc5fa0 RCX: 00007fcf95b3de59 [ 155.997515][ T6505] RDX: 0000000000000030 RSI: 0000200000000140 RDI: 0000000000000005 [ 155.997525][ T6505] RBP: 00007fcf93d96090 R08: 0000000000000000 R09: 0000000000000000 [ 155.997534][ T6505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.997544][ T6505] R13: 00007fcf95dc6038 R14: 00007fcf95dc5fa0 R15: 00007ffda6bac508 [ 155.997569][ T6505] [ 156.012372][ T5745] usb 2-1: device descriptor read/64, error -71 [ 156.118706][ T5745] usb usb2-port1: attempt power cycle [ 156.687888][ T5745] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 156.708244][ T5745] usb 2-1: device descriptor read/8, error -71 [ 156.949094][ T5745] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 156.968394][ T5745] usb 2-1: device descriptor read/8, error -71 [ 157.007569][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 157.077986][ T5745] usb usb2-port1: unable to enumerate USB device [ 157.187620][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 157.193988][ T10] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 157.194019][ T10] usb 3-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.194058][ T10] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 157.194093][ T10] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 157.194196][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 157.246484][ T10] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 157.246516][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.246540][ T10] usb 3-1: Product: syz [ 157.246555][ T10] usb 3-1: Manufacturer: syz [ 157.246570][ T10] usb 3-1: SerialNumber: syz [ 157.296961][ T10] usb 3-1: config 0 descriptor?? [ 157.303778][ T6510] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 157.694338][ T6531] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.706560][ T6531] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.009511][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.240'. [ 159.681684][ T10] usb 3-1: Can not set alternate setting to 1, error: -71 [ 159.681736][ T10] synaptics_usb 3-1:0.0: probe with driver synaptics_usb failed with error -71 [ 159.711622][ T10] usb 3-1: USB disconnect, device number 11 [ 160.137667][ T200] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 160.277584][ T200] usb 1-1: device descriptor read/64, error -71 [ 160.387479][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 160.477986][ T6583] openvswitch: netlink: IP tunnel dst address not specified [ 160.537801][ T200] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 160.567485][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 160.569368][ T10] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 160.569393][ T10] usb 3-1: config 0 has no interface number 0 [ 160.569436][ T10] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 576 [ 160.569455][ T10] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 160.571822][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 160.571854][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.571869][ T10] usb 3-1: Product: syz [ 160.571880][ T10] usb 3-1: Manufacturer: syz [ 160.571891][ T10] usb 3-1: SerialNumber: syz [ 160.598791][ T10] usb 3-1: config 0 descriptor?? [ 160.638916][ T6575] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 160.651076][ T6575] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 160.697503][ T200] usb 1-1: device descriptor read/64, error -71 [ 160.818620][ T200] usb usb1-port1: attempt power cycle [ 160.883827][ T6575] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 160.883964][ T6575] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 161.177837][ T200] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 161.214195][ T200] usb 1-1: device descriptor read/8, error -71 [ 161.289285][ T10] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 161.289562][ T10] asix 3-1:0.188: probe with driver asix failed with error -71 [ 161.334341][ T10] usb 3-1: USB disconnect, device number 12 [ 161.447596][ T200] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 161.468047][ T200] usb 1-1: device descriptor read/8, error -71 [ 161.588775][ T200] usb usb1-port1: unable to enumerate USB device [ 161.757509][ T5745] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 161.892281][ T5595] Bluetooth: hci2: command 0x0406 tx timeout [ 161.927630][ T5745] usb 2-1: Using ep0 maxpacket: 16 [ 161.935829][ T5745] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 161.935859][ T5745] usb 2-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.935887][ T5745] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 161.935915][ T5745] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 161.935943][ T5745] usb 2-1: config 0 interface 0 has no altsetting 0 [ 161.964455][ T5745] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 161.964531][ T5745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.964592][ T5745] usb 2-1: Product: syz [ 161.964632][ T5745] usb 2-1: Manufacturer: syz [ 161.964664][ T5745] usb 2-1: SerialNumber: syz [ 162.035803][ T5745] usb 2-1: config 0 descriptor?? [ 162.036704][ T6593] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 162.897531][ T824] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 163.048478][ T824] usb 3-1: Using ep0 maxpacket: 32 [ 163.054251][ T824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.054284][ T824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.054323][ T824] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 163.054347][ T824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.103236][ T824] usb 3-1: config 0 descriptor?? [ 163.115794][ T824] hub 3-1:0.0: USB hub found [ 163.315384][ T824] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 163.337687][ T4923] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 163.498425][ T4923] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 163.498453][ T4923] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.498489][ T4923] usb 1-1: config 0 has no interface number 0 [ 163.498774][ T4923] usb 1-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 163.498803][ T4923] usb 1-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 163.498842][ T4923] usb 1-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 163.499243][ T4923] usb 1-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 163.621227][ T4923] usb 1-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 163.621481][ T4923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.621505][ T4923] usb 1-1: Product: syz [ 163.621521][ T4923] usb 1-1: Manufacturer: syz [ 163.621536][ T4923] usb 1-1: SerialNumber: syz [ 163.679330][ T4923] usb 1-1: config 0 descriptor?? [ 163.731631][ T4923] symbolserial 1-1:0.175: symbol converter detected [ 163.750858][ T824] usbhid 3-1:0.0: can't add hid device: -71 [ 163.751105][ T824] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 163.758988][ T4923] usb 1-1: symbol converter now attached to ttyUSB0 [ 163.800613][ T824] usb 3-1: USB disconnect, device number 13 [ 163.966913][ T200] usb 1-1: USB disconnect, device number 18 [ 164.086633][ T200] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 164.101447][ T200] symbolserial 1-1:0.175: device disconnected [ 164.292039][ T5745] usb 2-1: Can not set alternate setting to 1, error: -71 [ 164.292076][ T5745] synaptics_usb 2-1:0.0: probe with driver synaptics_usb failed with error -71 [ 164.350013][ T5745] usb 2-1: USB disconnect, device number 11 [ 164.750743][ T6624] nbd: couldn't find device at index 16711680 [ 165.007509][ T32] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 165.027494][ T824] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 165.157463][ T824] usb 1-1: device descriptor read/64, error -71 [ 165.157568][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 165.160245][ T32] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 165.160328][ T32] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 165.160366][ T32] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 165.160407][ T32] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 165.164696][ T32] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 165.164727][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.164754][ T32] usb 2-1: Product: syz [ 165.164774][ T32] usb 2-1: Manufacturer: syz [ 165.164971][ T32] usb 2-1: SerialNumber: syz [ 165.301603][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 165.346023][ T32] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input7 [ 165.397499][ T824] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 165.508363][ T32] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 165.508381][ T32] (id 0x00) [ 165.537684][ T824] usb 1-1: device descriptor read/64, error -71 [ 165.617458][ T32] rc_core: IR keymap rc-imon-pad not found [ 165.617476][ T32] Registered IR keymap rc-empty [ 165.617566][ T32] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 165.617582][ T32] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 165.665562][ T824] usb usb1-port1: attempt power cycle [ 165.720741][ T32] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 165.725146][ T32] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input8 [ 165.747517][ T200] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 165.798820][ T32] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:12> initialized [ 165.917747][ T200] usb 4-1: Using ep0 maxpacket: 32 [ 165.921049][ T200] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.921089][ T200] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.921117][ T200] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 165.921134][ T200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.943294][ T200] usb 4-1: config 0 descriptor?? [ 165.984883][ T200] hub 4-1:0.0: USB hub found [ 166.027566][ T824] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 166.048542][ T824] usb 1-1: device descriptor read/8, error -71 [ 166.144812][ T6624] imon:vfd_write: invalid payload size [ 166.155257][ T4923] usb 2-1: USB disconnect, device number 12 [ 166.179254][ T200] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 166.297554][ T824] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 166.320590][ T824] usb 1-1: device descriptor read/8, error -71 [ 166.430158][ T824] usb usb1-port1: unable to enumerate USB device [ 166.607151][ T200] usbhid 4-1:0.0: can't add hid device: -71 [ 166.607269][ T200] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 166.639740][ T200] usb 4-1: USB disconnect, device number 10 [ 166.737144][ T6647] capability: warning: `syz.1.277' uses deprecated v2 capabilities in a way that may be insecure [ 167.288945][ T6659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.307507][ T5703] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 167.457570][ T5703] usb 2-1: Using ep0 maxpacket: 16 [ 167.459696][ T5703] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 167.459721][ T5703] usb 2-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 167.459746][ T5703] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 167.459769][ T5703] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 167.459794][ T5703] usb 2-1: config 0 interface 0 has no altsetting 0 [ 167.462247][ T5703] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 167.462275][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.462288][ T5703] usb 2-1: Product: syz [ 167.462296][ T5703] usb 2-1: Manufacturer: syz [ 167.462306][ T5703] usb 2-1: SerialNumber: syz [ 167.477550][ T200] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 167.530920][ T5703] usb 2-1: config 0 descriptor?? [ 167.532547][ T6650] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 167.662918][ T200] usb 3-1: Using ep0 maxpacket: 32 [ 167.684402][ T200] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.684437][ T200] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.684485][ T200] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 167.684509][ T200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.699455][ T200] usb 3-1: config 0 descriptor?? [ 167.746048][ T200] hub 3-1:0.0: USB hub found [ 167.781372][ T5703] usb 2-1: Can not set alternate setting to 1, error: -71 [ 167.781430][ T5703] synaptics_usb 2-1:0.0: probe with driver synaptics_usb failed with error -71 [ 167.813721][ T5703] usb 2-1: USB disconnect, device number 13 [ 167.925247][ T200] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 168.351305][ T200] hid_parser_main: 34 callbacks suppressed [ 168.351329][ T200] hid-generic 0003:046D:C31C.000A: unknown main item tag 0x0 [ 168.455127][ T200] hid-generic 0003:046D:C31C.000A: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 168.647435][ T824] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 168.777458][ T824] usb 2-1: device descriptor read/64, error -71 [ 169.017705][ T824] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 169.188036][ T824] usb 2-1: device descriptor read/64, error -71 [ 169.298845][ T824] usb usb2-port1: attempt power cycle [ 169.371026][ T6679] fuse: Bad value for 'fd' [ 169.386245][ T6679] Bluetooth: MGMT ver 1.23 [ 169.402531][ T6679] tipc: Can't bind to reserved service type 2 [ 169.648210][ T824] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 169.669420][ T824] usb 2-1: device descriptor read/8, error -71 [ 169.767522][ T4923] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 169.907521][ T824] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 169.921705][ T4923] usb 4-1: Using ep0 maxpacket: 32 [ 169.936850][ T4923] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 169.936883][ T4923] usb 4-1: config 0 has no interface number 0 [ 169.936916][ T4923] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 576 [ 169.936934][ T4923] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 169.943259][ T824] usb 2-1: device descriptor read/8, error -71 [ 169.957587][ T5745] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 170.003988][ T4923] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 170.004008][ T4923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.004021][ T4923] usb 4-1: Product: syz [ 170.004031][ T4923] usb 4-1: Manufacturer: syz [ 170.004040][ T4923] usb 4-1: SerialNumber: syz [ 170.015235][ T4923] usb 4-1: config 0 descriptor?? [ 170.042354][ T6686] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 170.049655][ T824] usb usb2-port1: unable to enumerate USB device [ 170.063197][ T6686] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 170.137463][ T5745] usb 1-1: device descriptor read/64, error -71 [ 170.269994][ T6686] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 170.270160][ T6686] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 170.387493][ T5745] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 170.517588][ T5745] usb 1-1: device descriptor read/64, error -71 [ 170.629467][ T5745] usb usb1-port1: attempt power cycle [ 170.672259][ T4923] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 170.672917][ T4923] asix 4-1:0.188: probe with driver asix failed with error -71 [ 170.734898][ T4923] usb 4-1: USB disconnect, device number 11 [ 170.997521][ T5745] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 171.029058][ T5745] usb 1-1: device descriptor read/8, error -71 [ 171.271830][ T6692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.287516][ T5745] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 171.307974][ T5745] usb 1-1: device descriptor read/8, error -71 [ 171.437670][ T5745] usb usb1-port1: unable to enumerate USB device [ 171.937487][ T32] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 171.966421][ T200] usb 3-1: USB disconnect, device number 14 [ 172.100975][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 172.103047][ T32] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 172.103074][ T32] usb 2-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 172.103098][ T32] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 172.103122][ T32] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 172.103150][ T32] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.106069][ T32] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 172.106095][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.106114][ T32] usb 2-1: Product: syz [ 172.106128][ T32] usb 2-1: Manufacturer: syz [ 172.106142][ T32] usb 2-1: SerialNumber: syz [ 172.204810][ T32] usb 2-1: config 0 descriptor?? [ 172.205890][ T6695] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 172.420452][ T32] usb 2-1: Can not set alternate setting to 1, error: -71 [ 172.420494][ T32] synaptics_usb 2-1:0.0: probe with driver synaptics_usb failed with error -71 [ 172.463354][ T32] usb 2-1: USB disconnect, device number 18 [ 173.207522][ T32] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 173.367576][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 173.370730][ T32] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 173.370764][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.411180][ T32] usb 1-1: config 0 descriptor?? [ 173.430620][ T32] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 173.609593][ T200] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 173.759829][ T200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 173.759881][ T200] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 173.759905][ T200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.779175][ T200] usb 2-1: config 0 descriptor?? [ 173.820020][ T6718] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 173.873880][ T6708] binder: 6707:6708 ioctl c0046209 0 returned -22 [ 173.925289][ T6724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.103860][ T32] gspca_nw80x: reg_w err -71 [ 174.103968][ T32] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 174.125794][ T32] usb 1-1: USB disconnect, device number 27 [ 174.248644][ T200] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0 [ 174.248675][ T200] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0 [ 174.248695][ T200] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0 [ 174.248714][ T200] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0 [ 174.248733][ T200] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0 [ 174.248773][ T200] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0 [ 174.248836][ T200] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0 [ 174.248855][ T200] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0 [ 174.248873][ T200] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0 [ 174.248892][ T200] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0 [ 174.385498][ T200] logitech-djreceiver 0003:046D:C71F.000B: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.1-1/input0 [ 175.262097][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 175.423588][ T200] usb 2-1: USB disconnect, device number 19 [ 175.462370][ T10] usb 1-1: device descriptor read/64, error -71 [ 175.717590][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 175.858955][ T10] usb 1-1: device descriptor read/64, error -71 [ 175.976055][ T10] usb usb1-port1: attempt power cycle [ 176.338300][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 176.375515][ T10] usb 1-1: device descriptor read/8, error -71 [ 176.563176][ T6765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.608046][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 176.631185][ T10] usb 1-1: device descriptor read/8, error -71 [ 176.739327][ T10] usb usb1-port1: unable to enumerate USB device [ 177.007529][ T9] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 177.137552][ T9] usb 2-1: device descriptor read/64, error -71 [ 177.275114][ T6772] binder: 6771:6772 ioctl c0306201 0 returned -14 [ 177.404303][ T9] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 177.406125][ T6775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.319'. [ 177.539092][ T9] usb 2-1: device descriptor read/64, error -71 [ 177.668632][ T9] usb usb2-port1: attempt power cycle [ 177.736745][ T6786] evm: overlay not supported [ 177.743749][ T6786] FAULT_INJECTION: forcing a failure. [ 177.743749][ T6786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.743780][ T6786] CPU: 0 UID: 0 PID: 6786 Comm: syz.3.322 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 177.743801][ T6786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 177.743809][ T6786] Call Trace: [ 177.743813][ T6786] [ 177.743819][ T6786] dump_stack_lvl+0xe8/0x150 [ 177.743841][ T6786] should_fail_ex+0x467/0x600 [ 177.743858][ T6786] strncpy_from_user+0x36/0x2c0 [ 177.743882][ T6786] do_getname+0x77/0x250 [ 177.743903][ T6786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.743918][ T6786] __se_sys_unlink+0x1e/0x140 [ 177.743937][ T6786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.743951][ T6786] do_syscall_64+0x174/0x580 [ 177.743969][ T6786] ? trace_irq_disable+0x3b/0x140 [ 177.743982][ T6786] ? clear_bhb_loop+0x40/0x90 [ 177.743998][ T6786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.744011][ T6786] RIP: 0033:0x7fe16973de59 [ 177.744023][ T6786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.744034][ T6786] RSP: 002b:00007fe167996028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 177.744048][ T6786] RAX: ffffffffffffffda RBX: 00007fe1699c5fa0 RCX: 00007fe16973de59 [ 177.744058][ T6786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 177.744066][ T6786] RBP: 00007fe167996090 R08: 0000000000000000 R09: 0000000000000000 [ 177.744074][ T6786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.744081][ T6786] R13: 00007fe1699c6038 R14: 00007fe1699c5fa0 R15: 00007fff4c3f9218 [ 177.744101][ T6786] [ 178.037469][ T9] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 178.059337][ T9] usb 2-1: device descriptor read/8, error -71 [ 178.222014][ T6797] FAULT_INJECTION: forcing a failure. [ 178.222014][ T6797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.222039][ T6797] CPU: 0 UID: 0 PID: 6797 Comm: syz.0.327 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 178.222068][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 178.222077][ T6797] Call Trace: [ 178.222082][ T6797] [ 178.222088][ T6797] dump_stack_lvl+0xe8/0x150 [ 178.222110][ T6797] should_fail_ex+0x467/0x600 [ 178.222129][ T6797] _copy_from_iter+0x1d3/0x1660 [ 178.222150][ T6797] ? trace_kmem_cache_alloc+0x29/0xe0 [ 178.222175][ T6797] ? __pfx__copy_from_iter+0x10/0x10 [ 178.222191][ T6797] ? __alloc_skb+0x276/0x7a0 [ 178.222204][ T6797] ? __alloc_skb+0x276/0x7a0 [ 178.222221][ T6797] ? netlink_sendmsg+0x650/0xb40 [ 178.222240][ T6797] ? skb_put+0x112/0x210 [ 178.222256][ T6797] netlink_sendmsg+0x6c0/0xb40 [ 178.222279][ T6797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.222298][ T6797] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 178.222320][ T6797] ? __kernel_text_address+0xd/0x30 [ 178.222341][ T6797] ? unwind_get_return_address+0x4d/0x90 [ 178.222357][ T6797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.222374][ T6797] sock_sendmsg_nosec+0x13a/0x180 [ 178.222397][ T6797] ____sys_sendmsg+0x565/0x870 [ 178.222419][ T6797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.222441][ T6797] ? import_iovec+0x73/0xa0 [ 178.222462][ T6797] ___sys_sendmsg+0x2a5/0x360 [ 178.222477][ T6797] ? __lock_acquire+0x6df/0x2e40 [ 178.222494][ T6797] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.222532][ T6797] ? __fget_files+0x2a/0x420 [ 178.222546][ T6797] ? __fget_files+0x3a8/0x420 [ 178.222567][ T6797] __x64_sys_sendmsg+0x1b7/0x290 [ 178.222585][ T6797] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 178.222613][ T6797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.222628][ T6797] do_syscall_64+0x174/0x580 [ 178.222647][ T6797] ? trace_irq_disable+0x3b/0x140 [ 178.222661][ T6797] ? clear_bhb_loop+0x40/0x90 [ 178.222684][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.222698][ T6797] RIP: 0033:0x7fcf95b3de59 [ 178.222711][ T6797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.222722][ T6797] RSP: 002b:00007fcf93d96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.222737][ T6797] RAX: ffffffffffffffda RBX: 00007fcf95dc5fa0 RCX: 00007fcf95b3de59 [ 178.222747][ T6797] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000003 [ 178.222756][ T6797] RBP: 00007fcf93d96090 R08: 0000000000000000 R09: 0000000000000000 [ 178.222765][ T6797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.222773][ T6797] R13: 00007fcf95dc6038 R14: 00007fcf95dc5fa0 R15: 00007ffda6bac508 [ 178.222794][ T6797] [ 178.332605][ T9] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 178.353538][ T9] usb 2-1: device descriptor read/8, error -71 [ 178.473878][ T9] usb usb2-port1: unable to enumerate USB device [ 178.617518][ T200] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 178.640221][ T6799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.731647][ T6801] binder: 6800:6801 ioctl c0306201 0 returned -14 [ 178.732381][ T6801] binder: 6800:6801 ioctl c0306201 0 returned -14 [ 178.787587][ T200] usb 3-1: Using ep0 maxpacket: 16 [ 178.789866][ T200] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 178.789896][ T200] usb 3-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 178.789932][ T200] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 178.789958][ T200] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 178.789985][ T200] usb 3-1: config 0 interface 0 has no altsetting 0 [ 178.793062][ T200] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 178.793089][ T200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.793109][ T200] usb 3-1: Product: syz [ 178.793127][ T200] usb 3-1: Manufacturer: syz [ 178.793149][ T200] usb 3-1: SerialNumber: syz [ 178.802884][ T200] usb 3-1: config 0 descriptor?? [ 178.837834][ T6795] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 179.058225][ T200] usb 3-1: Can not set alternate setting to 1, error: -71 [ 179.058261][ T200] synaptics_usb 3-1:0.0: probe with driver synaptics_usb failed with error -71 [ 179.135864][ T200] usb 3-1: USB disconnect, device number 15 [ 179.292775][ T6810] ======================================================= [ 179.292775][ T6810] WARNING: The mand mount option has been deprecated and [ 179.292775][ T6810] and is ignored by this kernel. Remove the mand [ 179.292775][ T6810] option from the mount to silence this warning. [ 179.292775][ T6810] ======================================================= [ 179.867801][ T200] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 179.997505][ T200] usb 3-1: device descriptor read/64, error -71 [ 180.247560][ T200] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 180.387568][ T200] usb 3-1: device descriptor read/64, error -71 [ 180.497728][ T200] usb usb3-port1: attempt power cycle [ 180.847963][ T200] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 180.868118][ T200] usb 3-1: device descriptor read/8, error -71 [ 181.038713][ T6832] binder: 6831:6832 ioctl c0306201 0 returned -14 [ 181.039726][ T6832] binder: 6831:6832 ioctl c0306201 0 returned -14 [ 181.117590][ T200] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 181.138793][ T200] usb 3-1: device descriptor read/8, error -71 [ 181.250392][ T200] usb usb3-port1: unable to enumerate USB device [ 182.157504][ T824] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 182.308615][ T824] usb 1-1: Using ep0 maxpacket: 16 [ 182.310413][ T824] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 182.310438][ T824] usb 1-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 182.310466][ T824] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 182.310484][ T824] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 182.310502][ T824] usb 1-1: config 0 interface 0 has no altsetting 0 [ 182.312865][ T824] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 182.312890][ T824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.312903][ T824] usb 1-1: Product: syz [ 182.312913][ T824] usb 1-1: Manufacturer: syz [ 182.312923][ T824] usb 1-1: SerialNumber: syz [ 182.337489][ T200] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 182.358180][ T824] usb 1-1: config 0 descriptor?? [ 182.365368][ T6845] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 182.524354][ T200] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 182.524387][ T200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.524407][ T200] usb 2-1: Product: syz [ 182.524421][ T200] usb 2-1: Manufacturer: syz [ 182.524435][ T200] usb 2-1: SerialNumber: syz [ 182.616492][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 182.635535][ T824] usb 1-1: Can not set alternate setting to 1, error: -71 [ 182.635581][ T824] synaptics_usb 1-1:0.0: probe with driver synaptics_usb failed with error -71 [ 182.666351][ T824] usb 1-1: USB disconnect, device number 32 [ 183.407095][ T6864] binder: 6863:6864 ioctl c0306201 0 returned -14 [ 183.410297][ T6864] binder: 6863:6864 ioctl c0306201 0 returned -14 [ 183.817686][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 183.979273][ T10] ath9k_htc: Failed to initialize the device [ 184.061676][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 184.500849][ T824] usb 2-1: USB disconnect, device number 24 [ 184.729417][ T6880] tmpfs: Bad value for 'mpol' [ 184.921495][ T6885] binder: 6884:6885 ioctl c0306201 0 returned -14 [ 185.037888][ T5703] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 185.118305][ T6891] netlink: 'syz.1.359': attribute type 3 has an invalid length. [ 185.118327][ T6891] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 185.118341][ T6891] netlink: 610 bytes leftover after parsing attributes in process `syz.1.359'. [ 185.171769][ T5703] usb 4-1: device descriptor read/64, error -71 [ 185.408035][ T5703] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 185.526890][ T6904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.537577][ T5703] usb 4-1: device descriptor read/64, error -71 [ 185.648069][ T5703] usb usb4-port1: attempt power cycle [ 185.799814][ T6909] binder: 6908:6909 ioctl c0306201 0 returned -14 [ 185.927694][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 185.988454][ T5703] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 186.008229][ T5703] usb 4-1: device descriptor read/8, error -71 [ 186.087448][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 186.090399][ T10] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 186.090430][ T10] usb 2-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.090458][ T10] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 186.090486][ T10] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 186.090516][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 186.096203][ T10] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 186.096234][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.096257][ T10] usb 2-1: Product: syz [ 186.096272][ T10] usb 2-1: Manufacturer: syz [ 186.096288][ T10] usb 2-1: SerialNumber: syz [ 186.192865][ T10] usb 2-1: config 0 descriptor?? [ 186.193809][ T6906] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 186.247660][ T5703] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 186.268251][ T5703] usb 4-1: device descriptor read/8, error -71 [ 186.379220][ T5703] usb usb4-port1: unable to enumerate USB device [ 186.398944][ T10] usb 2-1: Can not set alternate setting to 1, error: -71 [ 186.398994][ T10] synaptics_usb 2-1:0.0: probe with driver synaptics_usb failed with error -71 [ 186.428804][ T10] usb 2-1: USB disconnect, device number 25 [ 186.602738][ T6918] Dead loop on virtual device ip6_vti0 (net 31), fix it urgently! [ 187.277487][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 187.427459][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 187.429583][ T10] usb 1-1: config 0 interface 0 altsetting 240 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 187.429619][ T10] usb 1-1: config 0 interface 0 altsetting 240 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.429652][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 187.429679][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 187.429696][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.433914][ T10] usb 1-1: config 0 descriptor?? [ 187.664685][ T6944] FAULT_INJECTION: forcing a failure. [ 187.664685][ T6944] name failslab, interval 1, probability 0, space 0, times 0 [ 187.664783][ T6944] CPU: 0 UID: 0 PID: 6944 Comm: syz.1.381 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 187.664807][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 187.664819][ T6944] Call Trace: [ 187.664827][ T6944] [ 187.664836][ T6944] dump_stack_lvl+0xe8/0x150 [ 187.664883][ T6944] should_fail_ex+0x467/0x600 [ 187.664917][ T6944] should_failslab+0xa8/0x100 [ 187.664938][ T6944] ? skb_clone+0x212/0x3a0 [ 187.664974][ T6944] kmem_cache_alloc_noprof+0x9e/0x680 [ 187.665006][ T6944] ? skb_clone+0x212/0x3a0 [ 187.665039][ T6944] skb_clone+0x212/0x3a0 [ 187.665068][ T6944] __netlink_deliver_tap+0x410/0x880 [ 187.665108][ T6944] ? netlink_deliver_tap+0x2e/0x1b0 [ 187.665146][ T6944] netlink_deliver_tap+0x19c/0x1b0 [ 187.665172][ T6944] __netlink_sendskb+0x47/0x90 [ 187.665194][ T6944] netlink_dump+0xa8c/0xee0 [ 187.665228][ T6944] ? __pfx_netlink_dump+0x10/0x10 [ 187.665265][ T6944] ? netlink_recvmsg+0x5bf/0xa50 [ 187.665289][ T6944] ? kmem_cache_free+0x187/0x6c0 [ 187.665319][ T6944] ? netlink_recvmsg+0x5bf/0xa50 [ 187.665349][ T6944] netlink_recvmsg+0x683/0xa50 [ 187.665379][ T6944] ? is_bpf_text_address+0x292/0x2b0 [ 187.665405][ T6944] ? __pfx_netlink_recvmsg+0x10/0x10 [ 187.665434][ T6944] ? __lock_acquire+0x6df/0x2e40 [ 187.665461][ T6944] ? __pfx_netlink_recvmsg+0x10/0x10 [ 187.665488][ T6944] sock_recvmsg_nosec+0x130/0x170 [ 187.665522][ T6944] ____sys_recvmsg+0x242/0x4f0 [ 187.665556][ T6944] ? __pfx_____sys_recvmsg+0x10/0x10 [ 187.665595][ T6944] ? import_iovec+0x73/0xa0 [ 187.665625][ T6944] ___sys_recvmsg+0x213/0x5a0 [ 187.665655][ T6944] ? __pfx____sys_recvmsg+0x10/0x10 [ 187.665684][ T6944] ? lock_acquire+0x115/0x350 [ 187.665719][ T6944] ? __fget_files+0x3a8/0x420 [ 187.665751][ T6944] __x64_sys_recvmsg+0x1b4/0x290 [ 187.665779][ T6944] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 187.665822][ T6944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.665844][ T6944] do_syscall_64+0x174/0x580 [ 187.665870][ T6944] ? trace_irq_disable+0x3b/0x140 [ 187.665907][ T6944] ? clear_bhb_loop+0x40/0x90 [ 187.665934][ T6944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.665963][ T6944] RIP: 0033:0x7f14d02fde59 [ 187.665984][ T6944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.666001][ T6944] RSP: 002b:00007f14ce556028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 187.666023][ T6944] RAX: ffffffffffffffda RBX: 00007f14d0585fa0 RCX: 00007f14d02fde59 [ 187.666039][ T6944] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 187.666053][ T6944] RBP: 00007f14ce556090 R08: 0000000000000000 R09: 0000000000000000 [ 187.666066][ T6944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.666079][ T6944] R13: 00007f14d0586038 R14: 00007f14d0585fa0 R15: 00007fff743b1c48 [ 187.666112][ T6944] [ 188.002539][ T10] hid_parser_main: 457 callbacks suppressed [ 188.002558][ T10] logitech-hidpp-device 0003:046D:C081.000C: unknown main item tag 0x0 [ 188.002579][ T10] logitech-hidpp-device 0003:046D:C081.000C: unknown main item tag 0x0 [ 188.002597][ T10] logitech-hidpp-device 0003:046D:C081.000C: unknown main item tag 0x0 [ 188.002615][ T10] logitech-hidpp-device 0003:046D:C081.000C: unknown main item tag 0x0 [ 188.002638][ T10] logitech-hidpp-device 0003:046D:C081.000C: unknown main item tag 0x0 [ 188.002656][ T10] logitech-hidpp-device 0003:046D:C081.000C: unknown main item tag 0x0 [ 188.002673][ T10] logitech-hidpp-device 0003:046D:C081.000C: unknown main item tag 0x0 [ 188.002691][ T10] logitech-hidpp-device 0003:046D:C081.000C: unknown main item tag 0x0 [ 188.002708][ T10] logitech-hidpp-device 0003:046D:C081.000C: unknown main item tag 0x0 [ 188.002725][ T10] logitech-hidpp-device 0003:046D:C081.000C: unknown main item tag 0x0 [ 188.126316][ T10] logitech-hidpp-device 0003:046D:C081.000C: hidraw0: USB HID v80.09 Device [HID 046d:c081] on usb-dummy_hcd.0-1/input0 [ 188.204484][ T6946] netlink: 256 bytes leftover after parsing attributes in process `syz.2.382'. [ 188.412181][ T200] usb 1-1: USB disconnect, device number 33 [ 188.787471][ T5703] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 188.917495][ T5703] usb 2-1: device descriptor read/64, error -71 [ 189.094252][ T4910] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 189.094428][ T4910] Bluetooth: hci0: Injecting HCI hardware error event [ 189.094946][ T4910] Bluetooth: hci0: hardware error 0x00 [ 189.182665][ T5703] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 189.328060][ T5703] usb 2-1: device descriptor read/64, error -71 [ 189.365504][ T4910] =========================================[ 189.365504][ T4910] ================================================================== [ 189.365521][ T4910] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400 [ 189.365548][ T4910] Read of size 1 at addr ffff8880617d67e8 by task kworker/u9:1/4910 [ 189.365566][ T4910] [ 189.365577][ T4910] CPU: 0 UID: 0 PID: 4910 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 189.365600][ T4910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 189.365614][ T4910] Workqueue: hci0 hci_error_reset [ 189.365658][ T4910] Call Trace: [ 189.365666][ T4910] [ 189.365676][ T4910] dump_stack_lvl+0xe8/0x150 [ 189.365706][ T4910] print_address_description+0x55/0x1e0 [ 189.365738][ T4910] ? rt_spin_lock+0x83/0x400 [ 189.365758][ T4910] print_report+0x58/0x70 [ 189.365787][ T4910] kasan_report+0x117/0x150 [ 189.365808][ T4910] ? rt_spin_lock+0x83/0x400 [ 189.365832][ T4910] __kasan_check_byte+0x2a/0x40 [ 189.365860][ T4910] lock_acquire+0x7d/0x350 [ 189.365882][ T4910] ? lock_acquire+0x115/0x350 [ 189.365904][ T4910] rt_spin_lock+0x83/0x400 [ 189.365923][ T4910] ? bt_accept_unlink+0x7d/0x2f0 [ 189.365952][ T4910] ? __pfx_rt_spin_lock+0x10/0x10 [ 189.365972][ T4910] ? rcu_is_watching+0x15/0xb0 [ 189.365994][ T4910] ? __local_bh_disable_ip+0x3c/0x420 [ 189.366017][ T4910] ? bt_accept_unlink+0x61/0x2f0 [ 189.366047][ T4910] bt_accept_unlink+0x7d/0x2f0 [ 189.366075][ T4910] ? bt_accept_unlink+0x61/0x2f0 [ 189.366103][ T4910] l2cap_sock_teardown_cb+0x17e/0x490 [ 189.366130][ T4910] l2cap_chan_del+0x98/0x600 [ 189.366155][ T4910] l2cap_conn_del+0x2f2/0x520 [ 189.366179][ T4910] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 189.366204][ T4910] hci_conn_hash_flush+0x105/0x260 [ 189.366229][ T4910] hci_dev_close_sync+0x7fc/0x10a0 [ 189.366264][ T4910] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 189.366296][ T4910] ? lockdep_hardirqs_on+0x7a/0x110 [ 189.366322][ T4910] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 189.366350][ T4910] ? mutex_lock_nested+0x152/0x1d0 [ 189.366369][ T4910] ? hci_error_reset+0x11f/0x4c0 [ 189.366395][ T4910] hci_error_reset+0x127/0x4c0 [ 189.366419][ T4910] ? process_one_work+0x7fd/0x1480 [ 189.366441][ T4910] process_one_work+0xaaf/0x1480 [ 189.366473][ T4910] ? __pfx_process_one_work+0x10/0x10 [ 189.366492][ T4910] ? do_raw_spin_lock+0x12b/0x2f0 [ 189.366525][ T4910] ? assign_work+0x3cf/0x5d0 [ 189.366548][ T4910] worker_thread+0xb05/0x10d0 [ 189.366576][ T4910] ? __kthread_parkme+0x71/0x1f0 [ 189.366607][ T4910] kthread+0x388/0x470 [ 189.366635][ T4910] ? __pfx_worker_thread+0x10/0x10 [ 189.366656][ T4910] ? __pfx_kthread+0x10/0x10 [ 189.366682][ T4910] ret_from_fork+0x514/0xb70 [ 189.366713][ T4910] ? __pfx_ret_from_fork+0x10/0x10 [ 189.366742][ T4910] ? __switch_to+0xc89/0x1420 [ 189.366768][ T4910] ? __pfx_kthread+0x10/0x10 [ 189.366797][ T4910] ret_from_fork_asm+0x1a/0x30 [ 189.366835][ T4910] [ 189.366843][ T4910] [ 189.366848][ T4910] Allocated by task 48: [ 189.366866][ T4910] kasan_save_track+0x3e/0x80 [ 189.366893][ T4910] __kasan_kmalloc+0x93/0xb0 [ 189.366922][ T4910] __kmalloc_node_track_caller_noprof+0x566/0x7b0 [ 189.366965][ T4910] __alloc_skb+0x2bd/0x7a0 [ 189.366983][ T4910] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 189.367005][ T4910] process_one_work+0xaaf/0x1480 [ 189.367023][ T4910] worker_thread+0xb05/0x10d0 [ 189.367043][ T4910] kthread+0x388/0x470 [ 189.367066][ T4910] ret_from_fork+0x514/0xb70 [ 189.367090][ T4910] ret_from_fork_asm+0x1a/0x30 [ 189.367115][ T4910] [ 189.367120][ T4910] Freed by task 48: [ 189.367128][ T4910] kasan_save_track+0x3e/0x80 [ 189.367153][ T4910] kasan_save_free_info+0x40/0x50 [ 189.367174][ T4910] __kasan_slab_free+0x5c/0x80 [ 189.367200][ T4910] kfree+0x1c5/0x6c0 [ 189.367222][ T4910] skb_release_data+0x85e/0xab0 [ 189.367242][ T4910] __kfree_skb+0x5d/0x210 [ 189.367260][ T4910] nsim_dev_trap_report_work+0x879/0xcb0 [ 189.367281][ T4910] process_one_work+0xaaf/0x1480 [ 189.367300][ T4910] worker_thread+0xb05/0x10d0 [ 189.367318][ T4910] kthread+0x388/0x470 [ 189.367341][ T4910] ret_from_fork+0x514/0xb70 [ 189.367364][ T4910] ret_from_fork_asm+0x1a/0x30 [ 189.367387][ T4910] [ 189.367391][ T4910] The buggy address belongs to the object at ffff8880617d6000 [ 189.367391][ T4910] which belongs to the cache kmalloc-4k of size 4096 [ 189.367408][ T4910] The buggy address is located 2024 bytes inside of [ 189.367408][ T4910] freed 4096-byte region [ffff8880617d6000, ffff8880617d7000) [ 189.367430][ T4910] [ 189.367435][ T4910] The buggy address belongs to the physical page: [ 189.367453][ T4910] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x617d0 [ 189.367472][ T4910] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 189.367489][ T4910] flags: 0x80000000000040(head|node=0|zone=1) [ 189.367513][ T4910] page_type: f5(slab) [ 189.367531][ T4910] raw: 0080000000000040 ffff88813fe3b140 dead000000000100 dead000000000122 [ 189.367548][ T4910] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 189.367567][ T4910] head: 0080000000000040 ffff88813fe3b140 dead000000000100 dead000000000122 [ 189.367584][ T4910] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 189.367602][ T4910] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 189.367618][ T4910] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 189.367629][ T4910] page dumped because: kasan: bad access detected [ 189.367643][ T4910] page_owner tracks the page as allocated [ 189.367650][ T4910] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5780, tgid 5780 (udevd), ts 149974703979 [ 189.367681][ T4910] post_alloc_hook+0x1f9/0x250 [ 189.367706][ T4910] get_page_from_freelist+0x264c/0x26c0 [ 189.367723][ T4910] __alloc_frozen_pages_noprof+0x222/0x5b0 [ 189.367741][ T4910] allocate_slab+0x7c/0x5e0 [ 189.367761][ T4910] refill_objects+0x2d8/0x350 [ 189.367781][ T4910] __pcs_replace_empty_main+0x330/0x690 [ 189.367801][ T4910] __kmalloc_noprof+0x543/0x790 [ 189.367825][ T4910] tomoyo_realpath_from_path+0xef/0x640 [ 189.367858][ T4910] tomoyo_path_perm+0x283/0x560 [ 189.367876][ T4910] security_inode_getattr+0x121/0x2d0 [ 189.367903][ T4910] vfs_getattr+0x23/0x70 [ 189.367929][ T4910] vfs_statx_path+0x2b/0x230 [ 189.367947][ T4910] vfs_statx+0x12e/0x200 [ 189.367972][ T4910] vfs_fstatat+0x11b/0x170 [ 189.367999][ T4910] __x64_sys_newfstatat+0x151/0x200 [ 189.368016][ T4910] do_syscall_64+0x174/0x580 [ 189.368041][ T4910] page last free pid 4962 tgid 4962 ts 148779245840 stack trace: [ 189.368055][ T4910] __free_frozen_pages+0x1185/0x1270 [ 189.368081][ T4910] __slab_free+0x252/0x2a0 [ 189.368108][ T4910] qlist_free_all+0x99/0x100 [ 189.368132][ T4910] kasan_quarantine_reduce+0x148/0x160 [ 189.368157][ T4910] __kasan_slab_alloc+0x22/0x80 [ 189.368184][ T4910] kmem_cache_alloc_noprof+0x358/0x680 [ 189.368210][ T4910] do_getname+0x2e/0x250 [ 189.368237][ T4910] do_sys_openat2+0xcc/0x200 [ 189.368252][ T4910] __x64_sys_openat+0x138/0x170 [ 189.368268][ T4910] do_syscall_64+0x174/0x580 [ 189.368291][ T4910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.368310][ T4910] [ 189.368314][ T4910] Memory state around the buggy address: [ 189.368325][ T4910] ffff8880617d6680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.368339][ T4910] ffff8880617d6700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.368352][ T4910] >ffff8880617d6780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.368367][ T4910] ^ [ 189.368378][ T4910] ffff8880617d6800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.368391][ T4910] ffff8880617d6880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.368401][ T4910] ================================================================== [ 189.370275][ T4910] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 189.370308][ T4910] CPU: 0 UID: 0 PID: 4910 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 189.370350][ T4910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 189.370387][ T4910] Workqueue: hci0 hci_error_reset [ 189.370492][ T4910] Call Trace: [ 189.370515][ T4910] [ 189.370538][ T4910] vpanic+0x5d9/0xad0 [ 189.370610][ T4910] ? __pfx_vpanic+0x10/0x10 [ 189.370666][ T4910] ? __pfx___schedule+0x10/0x10 [ 189.370741][ T4910] panic+0xc5/0xd0 [ 189.370797][ T4910] ? __pfx_panic+0x10/0x10 [ 189.370863][ T4910] ? preempt_schedule_thunk+0x16/0x40 [ 189.370937][ T4910] ? rt_spin_lock+0x83/0x400 [ 189.370990][ T4910] check_panic_on_warn+0x89/0xb0 [ 189.371068][ T4910] ? rt_spin_lock+0x83/0x400 [ 189.371122][ T4910] end_report+0x73/0x170 [ 189.371181][ T4910] ? rt_spin_lock+0x83/0x400 [ 189.371226][ T4910] kasan_report+0x128/0x150 [ 189.371274][ T4910] ? rt_spin_lock+0x83/0x400 [ 189.371300][ T4910] __kasan_check_byte+0x2a/0x40 [ 189.371321][ T4910] lock_acquire+0x7d/0x350 [ 189.371345][ T4910] ? lock_acquire+0x115/0x350 [ 189.371368][ T4910] rt_spin_lock+0x83/0x400 [ 189.371423][ T4910] ? bt_accept_unlink+0x7d/0x2f0 [ 189.371501][ T4910] ? __pfx_rt_spin_lock+0x10/0x10 [ 189.371555][ T4910] ? rcu_is_watching+0x15/0xb0 [ 189.371616][ T4910] ? __local_bh_disable_ip+0x3c/0x420 [ 189.371704][ T4910] ? bt_accept_unlink+0x61/0x2f0 [ 189.371809][ T4910] bt_accept_unlink+0x7d/0x2f0 [ 189.371881][ T4910] ? bt_accept_unlink+0x61/0x2f0 [ 189.371939][ T4910] l2cap_sock_teardown_cb+0x17e/0x490 [ 189.372028][ T4910] l2cap_chan_del+0x98/0x600 [ 189.372098][ T4910] l2cap_conn_del+0x2f2/0x520 [ 189.372160][ T4910] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 189.372214][ T4910] hci_conn_hash_flush+0x105/0x260 [ 189.372279][ T4910] hci_dev_close_sync+0x7fc/0x10a0 [ 189.372355][ T4910] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 189.372388][ T4910] ? lockdep_hardirqs_on+0x7a/0x110 [ 189.372420][ T4910] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 189.372459][ T4910] ? mutex_lock_nested+0x152/0x1d0 [ 189.372541][ T4910] ? hci_error_reset+0x11f/0x4c0 [ 189.372600][ T4910] hci_error_reset+0x127/0x4c0 [ 189.372672][ T4910] ? process_one_work+0x7fd/0x1480 [ 189.372736][ T4910] process_one_work+0xaaf/0x1480 [ 189.372818][ T4910] ? __pfx_process_one_work+0x10/0x10 [ 189.372883][ T4910] ? do_raw_spin_lock+0x12b/0x2f0 [ 189.372969][ T4910] ? assign_work+0x3cf/0x5d0 [ 189.373047][ T4910] worker_thread+0xb05/0x10d0 [ 189.373152][ T4910] ? __kthread_parkme+0x71/0x1f0 [ 189.373243][ T4910] kthread+0x388/0x470 [ 189.373318][ T4910] ? __pfx_worker_thread+0x10/0x10 [ 189.373369][ T4910] ? __pfx_kthread+0x10/0x10 [ 189.373444][ T4910] ret_from_fork+0x514/0xb70 [ 189.373476][ T4910] ? __pfx_ret_from_fork+0x10/0x10 [ 189.373506][ T4910] ? __switch_to+0xc89/0x1420 [ 189.373534][ T4910] ? __pfx_kthread+0x10/0x10 [ 189.373612][ T4910] ret_from_fork_asm+0x1a/0x30 [ 189.373720][ T4910] [ 189.374340][ T4910] Kernel Offset: disabled