last executing test programs: 10.684749979s ago: executing program 0 (id=1651): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b23, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {}, [{0x2, 0x3}], {}, [], {0x10, 0x3}, {0x20, 0x1}}, 0x2c, 0x0) 7.567409816s ago: executing program 0 (id=1669): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_usb_connect(0x0, 0x59, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109024700010000080009046900000e010000082402010202"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket(0x28, 0x801, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, &(0x7f00000000c0)) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000140)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0xf, 0x8, 0x7, {0x4e24, 0x4e22, [0x3, 0x31, 0xffffff01, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0xde, 0x80000001]}, 0x2, 0x3}}, 0x4c}, 0x1, 0x0, 0x0, 0x24048084}, 0x40000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r5 = fcntl$dupfd(r0, 0x0, r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000cc0)={0x38, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x8, {0x7, 0x2, 0xc84, 0x5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) read$midi(r5, 0x0, 0x0) 6.563097979s ago: executing program 3 (id=1672): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f00000001c0)={0x18, r1, 0x3, 0x0, &(0x7f0000000140)=[{0x3, 0x4}, {0x8, 0x7fffffffffffffff}, {0x7, 0x2}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000180)={0xc}) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000002c0)=0x940, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf25150000002c002b8020000380080002000300000006000100000000000c0004000203aaaaaaaaaaaa08000100000000000c00060001"], 0x54}, 0x1, 0x0, 0x0, 0x4045}, 0x8004) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x513000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc, 0xffffffff, 0x10006}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2600000012000000000000000000009300000000"], 0x26}}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x1, r8, 0x1, r5}, 0x10) 5.753534874s ago: executing program 3 (id=1676): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101242, 0x183, 0x8}, 0x18) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000080)={{r1}, "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"}) syz_emit_vhci(&(0x7f0000001080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000010c0)={r1, 0x5, 0x4, 0x9}) ioctl$DVB_DEMUX_DMX_QBUF(r2, 0xc0186f3f, &(0x7f0000001100)={0x4, 0x9, 0x1, 0x0, 0x2, 0x66}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000011c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001580)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001540)={&(0x7f0000001200)={0x338, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7a68, 0x9, 0x4, 0x5, 0x8000, 0x38, 0x9ab2]}}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x5, 0x36, 0x18, 0x2, 0x6c, 0x2, 0x18, 0xb, 0x36, 0x24, 0x24, 0x3, 0x1, 0x48, 0x12, 0x9, 0x9, 0x24, 0x6c, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x29, 0x5, 0x1b, 0x18, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0xdbd, 0x9, 0x7, 0x8, 0xff7f, 0x3, 0x4f]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x9, 0x60, 0x6c, 0x9, 0x3, 0x30, 0x3, 0x12, 0x18, 0xb, 0xc, 0x48, 0x60, 0x5, 0x24, 0x5, 0x48, 0x2e, 0x1, 0x2, 0x1, 0x0, 0x24, 0x1b, 0x2]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0x5}, {0x0, 0x1}, {0x1, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x6}, {0x2, 0x9}, {0x1, 0x3}, {0x0, 0xa}, {0x6, 0xa}, {0x5, 0x7}, {0x4, 0x2}, {0x0, 0x7}, {0x2, 0x8}, {0x5, 0x7}, {0x4, 0x3}, {0x1, 0x3}, {0x1, 0x6}, {0x1, 0x5}, {}, {0x2}, {0x2, 0x7}]}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x8, 0x0, 0xfff, 0x7, 0x6, 0x402d]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x4}, {0x4, 0x1}, {0x2, 0x4}, {0x4, 0x2}, {0x4, 0x1}, {0x1, 0x3}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x1}, {0x1, 0xa}, {0x5, 0x4}, {0x4}, {0x0, 0x4}, {0x7}, {0x1, 0x2}, {0x0, 0x6}, {0x6, 0x5}, {0x0, 0xa}, {0x0, 0x8}, {0x4, 0x3}, {0x0, 0x5}, {0x2, 0x2}, {0x5, 0x9}, {0x2, 0x3}, {0x3, 0x5}, {0x0, 0x6}, {0x7, 0x7}, {0x5, 0x1}, {0x2, 0x5}, {0x1, 0x3}, {0x0, 0x6}, {0x4, 0x7}, {0x1, 0x8}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0xa}, {0x5, 0x1}, {0x4, 0xa}, {0x5, 0x2}, {0x2, 0x2}, {0x6, 0x1}, {0x2, 0x6}, {0x3, 0xa}, {0x2, 0x4}, {0x3, 0x6}, {0x1, 0xa}, {0x0, 0x1}, {0x4, 0x5}, {0x7, 0x5}, {0x1, 0x1}, {0x2, 0x5}, {0x5, 0x4}, {0x0, 0x4}, {0x6, 0x7}, {0x3, 0x3}, {0x2, 0x5}, {0x1, 0x5}, {0x1, 0x9}, {0x4, 0xa}, {0x6, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x1, 0xa}, {0x4, 0x3}, {0x5}, {0x0, 0xa}, {0x5, 0x1}, {0x4}, {0x5, 0xa}, {0x7, 0x1}, {0x2, 0xa}, {0x1}, {0x6, 0xa}, {0x1, 0x5}, {0x4, 0x1}, {0x5, 0x3}, {0x5, 0x8}, {0x5, 0x7}, {0x6}, {0x7, 0x7}, {0x5, 0x1}, {0x1, 0x3}, {0x5, 0x6}, {0x5, 0xa}, {0x0, 0x9}, {0x2, 0x3}, {0x1, 0x2}, {0x5, 0x7}, {0x6, 0x2}, {0x7, 0x6}, {0x2, 0x6}, {0x3, 0x7}, {0x0, 0x7}, {0x7, 0x6}, {0x6, 0x9}, {0x3, 0x9}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x9, 0x6, 0x48, 0x0, 0x4, 0x1, 0x6c, 0x48, 0xb, 0x1b, 0xb, 0x24, 0x3, 0x4, 0x30, 0x5, 0x48, 0xf9bfa7c218b702a, 0x12, 0x60, 0x16, 0xb, 0xc, 0x5, 0x9, 0x2, 0x60, 0x2, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6543, 0x878d, 0x8, 0x988a, 0x8000, 0x5, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xcd, 0x9, 0x7ff, 0xffff, 0x8000, 0x0, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xa, 0x7ff, 0x7ff, 0x0, 0xabad, 0x4, 0x40]}}]}]}, @NL80211_ATTR_TX_RATES={0xf4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x2, 0x400, 0x3, 0x5, 0x7, 0x53]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa2, 0x4, 0xe313, 0x5, 0x0, 0x6, 0x958]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb0, 0x7, 0x10, 0x9, 0x800, 0x4, 0x3, 0x7]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0xff7f, 0x4, 0x8, 0x5, 0xf84, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4d8, 0x2, 0x0, 0x9, 0x2, 0x1e86, 0x1, 0x739a]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0xbc1c, 0x6, 0x80, 0x6, 0x0, 0x5, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x401, 0xc1, 0x6, 0x6, 0x8, 0x1, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1b, 0x1b, 0x9, 0x6c, 0x24, 0x36, 0xb, 0xc, 0x5, 0x6, 0xc, 0x24, 0x2, 0x48, 0xc, 0x19, 0x3, 0x24, 0x18, 0x36, 0x6, 0x60, 0x6c, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7d03, 0x4, 0x7fff, 0x8, 0x8, 0x80, 0x0, 0xde]}}]}]}, @NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0x6}, {0x4, 0x1}, {0x7, 0x2}, {0x3, 0x4}]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x8}, {0x3, 0xa}, {0x1, 0x1}, {0x7, 0x8}, {0x6, 0xa}, {0x4, 0x5}, {0x3, 0x7}, {0x6, 0xa}, {0x7}, {0x4, 0x8}, {0x0, 0x1}, {0x5, 0x6}, {0x7}, {0x6, 0x7}, {0x2, 0x3}, {0x1, 0x5}, {0x2, 0x5}, {0x2, 0x2}, {0x2, 0x5}, {0x2, 0x1}, {0x2, 0x8}, {0x6, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x7, 0x6}, {0x2, 0xa}, {0x3, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x7, 0xa}, {0x5, 0x2}, {0x2, 0x3}, {0x4, 0x7}, {0x1, 0x1}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x1}, {0x6, 0x4}, {0x5, 0x3}, {0x3, 0x6}, {0x7, 0x8}, {0x2, 0x2}, {0x2, 0x9}, {0x6, 0x2}, {0x7, 0x5}, {0x4, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x338}, 0x1, 0x0, 0x0, 0xa1}, 0x20004001) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000015c0)=0x4) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r2) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x40, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x10014000) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001740), 0x20a00, 0x0) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000001900)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000018c0)={&(0x7f00000017c0)={0xcc, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x2b}}}}, [@NL80211_ATTR_KEY_SEQ={0x14, 0xa, "4d564004fa3cbdb07ce3dbcbc1c9cb79"}, @NL80211_ATTR_KEY={0x70, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f34286fa14"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "0af4716892"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f68e1f1944"}]}, 0xcc}, 0x1, 0x0, 0x0, 0x404c0e1}, 0x20044840) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000001940)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f00000019c0)={&(0x7f0000ffe000/0x1000)=nil}) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000001a00)) syz_emit_vhci(&(0x7f0000001a40)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x9, 0x5}, {0x2, 0x2, 0xc}}]}}, 0x12) r7 = socket$kcm(0x29, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000001a80)={r8}) socket$kcm(0x29, 0x7, 0x0) syz_emit_vhci(&(0x7f0000001c40)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x8, 0x0, 0x406}}}, 0x7) 5.369781037s ago: executing program 3 (id=1677): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b23, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {}, [{0x2, 0x3}], {}, [], {0x10, 0x3}, {0x20, 0x1}}, 0x2c, 0x0) 4.448631885s ago: executing program 0 (id=1678): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x31424752, 0x4, 0x425, 0x10001, 0x6, 0x2, 0xfeedcafe, 0x7, 0x0, 0x6}}) (fail_nth: 7) 4.219404059s ago: executing program 0 (id=1680): mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, &(0x7f0000000000)={0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r0, 0xc0186445, &(0x7f0000000040)={0x0, 0x2, r1}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x5, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000000c0)={0x3ff, r2}) openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) mlockall(0x4) mlockall(0x3) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) splice(0xffffffffffffffff, &(0x7f0000000540)=0x2, 0xffffffffffffffff, &(0x7f0000000580)=0xe4c4, 0x8, 0x5) 3.514060493s ago: executing program 2 (id=1685): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r2, 0x3) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, @none}, 0x8) listen(r3, 0x8) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a", @ANYRES64=r0], 0x6c}, 0x1, 0x0, 0x0, 0x20}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x42000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000140)={{0x1, 0x0, 0x1000b, 0x0, 0x44f}, 0xfffffffffffffaef, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14, r7, 0x325, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x2004c080) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000056000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) 3.219914137s ago: executing program 2 (id=1688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) getdents(r1, &(0x7f0000000440)=""/4090, 0xffa) getdents(r1, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000003c0)=""/136) r2 = fsopen(&(0x7f0000000380)='binfmt_misc\x00', 0x0) close(r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_open_dev$vim2m(0x0, 0x57, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r3, 0xa23, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8001, 0x55}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0xa}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008880}, 0x20008080) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x4, 0xfc, 0x38}}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000001580)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2.393128483s ago: executing program 0 (id=1689): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x1a0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x178, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8e}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4000}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}]}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2.246327991s ago: executing program 3 (id=1690): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xa, 0x10}, 0xc) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r0, 0x0, 0xfdff, 0x2) 2.155609138s ago: executing program 0 (id=1691): socket(0x2, 0x80805, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000029000000040000002b01", @ANYRES32=r0], 0x28}, 0x4044804) (async) r1 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)='\\\x00', 0x2}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x0, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xffffff7ffffffffd, 0x0, 0x6, 0x5, 0x5, 0x2, 0x5}, {0x4, 0x0, 0x0, 0x20000000000000}, 0x0, 0xfffffffe, 0x1}, {{@in6=@empty, 0x4d4, 0x33}, 0x2, @in=@private=0xa010100, 0x3502, 0x4, 0x1, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, &(0x7f0000000000)=0x6, 0x4) (async) r6 = syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x8f6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0xc0, 0x8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x2, {0xa, 0x25, 0x25, 0x405, 0x5, 0xfffd}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x74, 0x6, 0xc0, {0xa, 0x25, 0x25, 0x7ffffffc, 0x2, 0xbe1}}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r6, 0x0, 0x0) (async) readv(r2, &(0x7f0000000b40)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {0x0}], 0x2) (async) r7 = syz_open_dev$hiddev(&(0x7f0000000000), 0x7, 0x24081) ioctl$HIDIOCGUSAGES(r7, 0xd01c4813, &(0x7f00000023c0)={{0x2, 0x0, 0x2, 0x80, 0x2632, 0x400}, 0x144, [0x40, 0xffffffff, 0x8, 0x0, 0x1ff, 0x5, 0x2, 0x4, 0x8001, 0x80000000, 0xfffffff0, 0x6, 0xdce, 0x5, 0x40, 0x6, 0x101, 0x9, 0x24, 0x2, 0x9, 0x2, 0x1, 0xfd, 0x6, 0x5, 0x0, 0x37, 0x7, 0xe, 0x1ff, 0x0, 0x53, 0x9, 0x2, 0x9, 0x5, 0x40, 0x9, 0x7, 0x0, 0x7, 0x80000000, 0xf, 0x3, 0x3, 0x13, 0x5, 0x2, 0x2, 0x980, 0x6, 0x36, 0x9, 0x2, 0x6, 0x5, 0x10000, 0x6, 0x80, 0x7fffffff, 0xa86, 0x4, 0x0, 0x8001, 0x3f142be6, 0x1, 0x4, 0x0, 0x6, 0x3, 0x3674, 0x3, 0xc3, 0xff, 0x8, 0x4, 0x1, 0x1ff, 0x6c, 0x0, 0x80000001, 0x3, 0x1, 0x4, 0x8, 0x72f19ef, 0xa2, 0x0, 0xe, 0x81, 0x9, 0x400, 0x1ff, 0xfffffff8, 0x2, 0x59, 0x4, 0x3, 0x200, 0x8, 0x0, 0x9, 0x3ff, 0x1, 0x7fff, 0xfffff000, 0xad5e, 0x4, 0x2, 0x1cb, 0x4, 0xf, 0x1000, 0x3ff, 0x8, 0x81, 0x1, 0x26, 0x5, 0x7b2da06, 0xa71, 0xc13, 0x1, 0x81, 0x3, 0x800, 0x8, 0x7, 0x2, 0xc8, 0xfffffffc, 0x6, 0xffffe610, 0x4, 0x7f, 0x5b8, 0x2, 0x9, 0x47, 0x10000, 0x4, 0x3, 0x2, 0x6, 0x48ed, 0x6, 0x8d2c, 0xf0d, 0x9, 0xf, 0x4, 0x2, 0xc4, 0x8, 0x4b, 0x7, 0x7, 0x6, 0x2, 0x2, 0xfffffbff, 0x39d, 0x0, 0x2, 0x0, 0x5, 0x8, 0x9, 0x2020, 0x46, 0xd, 0x0, 0x2b1b, 0x8001, 0x8, 0x3, 0x9c, 0x3ff, 0x4, 0x5, 0xffff, 0x5, 0x0, 0x2, 0x6, 0x1, 0x3, 0x2, 0x3, 0xca3, 0xfc, 0x0, 0x81, 0x1, 0x1, 0x4a, 0x4, 0x46d, 0x5, 0x4, 0x80000000, 0xfc, 0x4, 0x8001, 0xffffffff, 0x0, 0xfffffffa, 0x10001, 0xd8, 0xfffffffd, 0x6, 0x8, 0x8, 0x6, 0x2, 0x76f, 0xbd17, 0x401, 0x401, 0xffffff00, 0x3, 0x0, 0x8000, 0x116, 0xb038, 0xffffffff, 0xf1, 0xfffffffb, 0x81, 0x0, 0x9, 0x4, 0xe4, 0x9, 0x2, 0x9, 0xfffffff7, 0x40, 0x1, 0xc06, 0x0, 0x6, 0x3, 0xa, 0x8000, 0x1, 0x1, 0xafd4, 0x9, 0x4, 0xfffffffa, 0x0, 0x42f, 0x6, 0xfff, 0xffffff80, 0xc, 0x5, 0x0, 0xeab8, 0x9, 0x6b5, 0x5, 0x99, 0x7, 0xa, 0x0, 0x0, 0x1, 0x2, 0x7ff, 0xf398, 0x3, 0xffffffff, 0x3, 0x4, 0x400, 0x9, 0x6, 0x2, 0x5, 0x2, 0xb86e0, 0x7f, 0x1, 0xb0e50f4, 0x9, 0x7f, 0x7, 0x60d, 0x10000, 0x81, 0x0, 0x3, 0xc, 0xd3, 0x1, 0x7ff, 0x1, 0x70, 0x9, 0xa, 0x5, 0x9, 0x4, 0xddd, 0x81, 0x1, 0x6, 0xb9, 0x4, 0xc6e7, 0xfffffff8, 0x3, 0x5, 0x9, 0xe0, 0x4, 0x6, 0x9, 0x3, 0xadd4, 0x2, 0x70, 0x0, 0x7, 0xffffffff, 0x2, 0x9, 0xb896, 0xa43b, 0xfffffff9, 0x1, 0xc, 0x1, 0x2, 0xc3d3, 0x2, 0x2, 0x6, 0x7ff, 0xfffffffc, 0x7, 0x8, 0x4, 0x7ff, 0x7fffffff, 0x2, 0x7, 0xad3f, 0x9, 0x3, 0x5, 0xf72, 0x1, 0xc, 0x4, 0x2, 0x1ff, 0x0, 0xfff, 0x8, 0x4, 0x4, 0x40, 0x5, 0xfffffff7, 0x60bf33a1, 0x4, 0x80000000, 0x4, 0x7, 0x2, 0x4, 0x0, 0x6, 0x9, 0x206, 0x800, 0x9, 0x7fffffff, 0x4, 0x0, 0x7fff, 0x1f1147d7, 0xc924, 0x4, 0x7ff, 0x1f, 0x6, 0x0, 0x3, 0x1, 0x7fff, 0x7, 0x2, 0x1, 0x0, 0x9, 0x1, 0x4, 0xbe, 0x6, 0x8, 0x81, 0x3, 0x9, 0x7, 0x7, 0x7, 0x1, 0x5, 0xb425661, 0xffffffff, 0x3, 0x100, 0x8001, 0x1, 0x8, 0xe0f0, 0xa, 0x8, 0x8, 0x80000000, 0x227, 0x3944, 0x6f06, 0x2, 0x3ff, 0x2, 0x8000000, 0x1a7e, 0x2, 0xce, 0xfffffffa, 0x5, 0xfffff793, 0x100, 0x3, 0x8bd8, 0x40, 0x2, 0x7f, 0xffffffff, 0x9, 0xd, 0xffff8001, 0x0, 0x9bf, 0x3, 0x81, 0x4, 0x7, 0x7fff, 0x10001, 0x4, 0x0, 0xd, 0x0, 0x17, 0x7, 0x1, 0x2757, 0xffff0001, 0xfffffff7, 0x1, 0xb0, 0x0, 0x4, 0x8, 0xff, 0xfffeffff, 0x1, 0xb, 0x5, 0x9, 0x1, 0x200, 0x0, 0x0, 0x4, 0x4, 0xa5f, 0x4, 0x400, 0xd, 0x8, 0x5, 0x862, 0x3, 0x4, 0x7, 0x4, 0x44, 0x200, 0xfffffff8, 0x1, 0xfffffff8, 0x7, 0xc4e8, 0x9951, 0x6, 0x40, 0x2, 0x1, 0x3, 0x5, 0x5, 0x6, 0x845, 0x10000, 0x4, 0xffff, 0x7, 0x9, 0x6, 0x89, 0x7fffffff, 0x9, 0x4, 0x4ad1, 0x5, 0xb, 0x7ff, 0x9f4f, 0x3ff, 0x7f, 0x7, 0x7f, 0x4, 0xffffff00, 0x0, 0x85, 0x2, 0x7, 0x4, 0x1, 0x71, 0x40, 0x6, 0x3, 0x17d, 0x99f, 0x6, 0x1, 0x80000000, 0x5, 0x7ff, 0xe, 0x6, 0x7, 0x5, 0x8, 0x5, 0xffffffff, 0x0, 0x2000, 0x1, 0xffffff7e, 0x2, 0x6, 0x4, 0x0, 0x6, 0x9, 0xffffffff, 0x1, 0x2, 0x4, 0x200, 0x5, 0x1, 0x3, 0x1, 0x2417, 0x84, 0x8, 0x5, 0xff, 0x10000, 0xb, 0x7, 0x10, 0x84, 0x8, 0x4, 0x3, 0x8, 0x0, 0x6, 0x1, 0xc, 0x3, 0xdb, 0x3, 0x6, 0x8, 0x9, 0x7, 0x5, 0xb, 0x4, 0x1, 0x4, 0x29, 0xc, 0x400, 0x4, 0x5, 0x8, 0x10000, 0x1df6, 0x200, 0xa6, 0x0, 0x4, 0x5, 0xe71, 0x3, 0xffffffff, 0x8, 0x1, 0x1, 0x7, 0xff, 0x3ff, 0x5, 0x6, 0x4, 0xc, 0x2, 0x58, 0xd, 0x7, 0x400d, 0x3, 0xffff, 0xff, 0x401, 0xa32, 0x6, 0x1, 0x3, 0x3, 0x0, 0x5, 0x3, 0x7, 0xf66, 0x5, 0xfffffbff, 0x8, 0xfffffffc, 0x6, 0x2, 0x0, 0x6, 0x1, 0x1000, 0x107b, 0xfffffe00, 0x0, 0x9, 0x0, 0x9e, 0x0, 0x1, 0x28000000, 0x0, 0x10001, 0xffffff6f, 0xff5b, 0x6, 0x9, 0x1, 0x0, 0x4, 0x26, 0x6, 0xa17, 0x9, 0x5f18, 0x8, 0x4e40, 0x7, 0x7, 0x101, 0x8, 0x8000, 0x80, 0x8, 0x6, 0xc, 0x101, 0x2, 0x2, 0x0, 0x800, 0x3, 0x401, 0x4, 0x0, 0xb, 0x6a5, 0x3ce4, 0xd, 0x9, 0x9, 0xc7c, 0x7, 0xfffffff0, 0x3, 0x5, 0x5, 0x1, 0x477e, 0xc, 0x2, 0x0, 0x81, 0x5, 0x6, 0xe9, 0x8, 0x209a, 0x5, 0x401, 0x0, 0x3, 0x1000, 0x376, 0x7, 0x9cdd, 0xe, 0x7, 0x6, 0x7, 0x93, 0x3ff, 0x107fff, 0xd, 0x229, 0x5, 0xffff, 0xfffffff3, 0x9ea, 0x3, 0x4, 0x7633, 0x6e5b000, 0x88a6, 0x4, 0x9, 0x4, 0x80000000, 0x0, 0x747, 0x401, 0x0, 0x7, 0xfffffff8, 0x0, 0x6eb7, 0x8, 0x7, 0x5, 0x2, 0x8, 0x0, 0x5, 0x80000001, 0x9, 0x6, 0x6, 0x8, 0xb35, 0x200000, 0x0, 0x200, 0x9, 0x5, 0x6, 0x6, 0x4, 0xe4, 0x4, 0x8, 0x152, 0x2, 0x1000000, 0x4, 0x80000000, 0x40cd230a, 0x5f35, 0x26bd, 0x8ea, 0x5, 0x2, 0x7, 0x3, 0x2, 0xff800000, 0x7fffffff, 0x6, 0x4, 0x2, 0x6, 0xba, 0x8, 0x9, 0x1, 0x40000, 0x81, 0x8, 0x10001, 0x3000000, 0xd, 0xfffffff0, 0x9, 0x3742, 0x2, 0x148d, 0x1, 0x1cb20000, 0xfff, 0x6, 0xfffffff8, 0x8, 0xd92, 0x800, 0xa, 0xc6b, 0x8, 0x2, 0x0, 0x10000, 0x81, 0xc, 0x4, 0x22, 0xa, 0x5, 0x9, 0x6, 0x26f6, 0x0, 0x6, 0x8, 0x0, 0x1, 0x7, 0x1, 0x6, 0x7, 0x100, 0x1, 0xffffff68, 0x7, 0x2, 0xd47, 0x8, 0x0, 0xfffffffc, 0x0, 0x6, 0x1, 0xfffffff8, 0x9, 0x3, 0x9, 0x7, 0x0, 0x8, 0x3ff, 0xb, 0x1, 0x3, 0x401, 0x9, 0xa, 0x2, 0xfffffbd3, 0x7fff, 0x7ff, 0xd, 0x7, 0x800, 0x9, 0x1, 0x0, 0x3, 0x6, 0x7e, 0x10, 0x8, 0x0, 0x2000, 0x2b, 0x6, 0x370, 0x8001, 0xa2a, 0x4, 0x8, 0x400000, 0x6, 0x9, 0x6, 0x0, 0x9, 0x80000001, 0x4, 0x5, 0x7fffffff, 0x3, 0x9, 0xf133, 0x0, 0x7, 0xc000, 0x5, 0x3ff, 0x57d, 0x80000001, 0x0, 0x7, 0x6, 0x100, 0xff, 0x80, 0x6, 0x1, 0x22e, 0x6, 0x6, 0x3, 0x8, 0x6d5, 0x6a018a78, 0x7, 0x3, 0x495f, 0x5, 0x7, 0x4, 0x1, 0x40, 0x5, 0x80, 0x12, 0x1, 0xfffffffc, 0x80000001, 0x8000, 0x1, 0x7f, 0x17, 0x1, 0x3, 0x7, 0x3, 0x80d, 0x9, 0xfffffff7, 0x3, 0x8, 0x9, 0x21c, 0x10000, 0x6, 0x1, 0x4, 0x1, 0x7ff, 0x3, 0x0, 0x8, 0x3f9, 0x45a, 0x10000000, 0x7, 0x0, 0x7fff, 0x2, 0x8000, 0x5, 0x1, 0x8, 0x200, 0x5, 0x1, 0x5947, 0x0, 0x7, 0x0, 0x9, 0x6, 0xd40, 0x7fff, 0x4, 0x10000, 0x6, 0x2, 0xe658, 0x1, 0x4, 0x8, 0x6, 0x9, 0x0, 0x0, 0x6, 0x10000, 0xffff, 0x4, 0xfffffffc, 0x6, 0x800, 0x100, 0x7, 0x3, 0xd27b, 0x8]}) (async) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf2502"], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) 1.310935192s ago: executing program 3 (id=1694): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x45) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000140)=[@increfs, @decrefs], 0x0, 0x0, 0x0}) 864.752546ms ago: executing program 2 (id=1695): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, r1, 0xe29, 0x70bd29, 0x5dfdbfb}, 0x14}}, 0x0) 863.701973ms ago: executing program 2 (id=1696): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460502028d04000000000000000300060004400000b8010000380000005e020000080400000400200003"], 0x98) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f00000000c0)=0xffff0883) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x78, 0xb, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x240480c0}, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x1000, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @private}, &(0x7f0000000140)=0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'caif0\x00', 0x3}, 0x18) r8 = epoll_create(0xfff) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000280)={0x40000004}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000b40)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r6, &(0x7f0000000000)={0x20000001}) epoll_pwait2(r8, &(0x7f00000004c0)=[{}], 0x1, 0x0, 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x7fa463b5219e1e6) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x40001, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES64=r1], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x28, 0x13, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004001}, 0x20004000) 612.845257ms ago: executing program 2 (id=1697): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x59) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1/../file0\x00', 0x1c0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x20004000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) file_getattr(0xffffffffffffff9c, &(0x7f0000000680)='./file0/file1\x00', &(0x7f0000000580), 0x18, 0x1000) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x31424752, 0x4, 0x425, 0x10001, 0x6, 0x2, 0xfeedcafe, 0x7, 0x0, 0x6}}) 612.58531ms ago: executing program 2 (id=1698): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b23, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {}, [{0x2, 0x3}], {}, [], {0x10, 0x3}, {0x20, 0x1}}, 0x2c, 0x0) 392.763444ms ago: executing program 1 (id=1701): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x218, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x180, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8e}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4000}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}]}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_NAT={0x84, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) 392.338517ms ago: executing program 3 (id=1702): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 372.589904ms ago: executing program 1 (id=1703): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x1bc, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x150, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8e}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4000}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}]}, @CTA_EXPECT_NAT_TUPLE={0x4}]}, @CTA_EXPECT_NAT={0x58, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private2}}}]}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 326.217516ms ago: executing program 1 (id=1704): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) (async) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0xb2408, 0x0) 269.723583ms ago: executing program 1 (id=1705): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x28, r1, 0xe29, 0x70bd29, 0x5dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x3}]}, 0x28}}, 0x0) 268.277917ms ago: executing program 1 (id=1706): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r2, 0xb}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 1 (id=1707): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000003c0)='.\x00', 0x5db) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f00000002c0)='./file1\x00', 0x60000526) inotify_add_watch(r1, &(0x7f0000000300)='./file1\x00', 0xa0000006) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) mknodat(r4, &(0x7f0000000040)='./file0\x00', 0x1, 0x5) r5 = openat$cgroup_pressure(r4, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0xa200, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x80044d06, 0x0) write$cgroup_pressure(r5, &(0x7f0000000240)={'full', 0x20, 0x17e, 0x20, 0x800000000104002}, 0x2f) ppoll(&(0x7f0000000000)=[{r5, 0x5cb}], 0x1, 0x0, 0x0, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r7, 0x40184810, &(0x7f0000000000)={0x1, 0x3, 0x800, 0x9, 0xfffff000, 0xffffffff}) ppoll(&(0x7f0000000080)=[{r7, 0xc}, {r7, 0x6009}, {r4, 0x105}], 0x3, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={[0x7]}, 0x8) kernel console output (not intermixed with test programs): 74][ T9408] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 302.310512][ T9408] ? trim_netdev_trace+0x791/0x820 [ 302.310537][ T9408] ? __pfx_trim_netdev_trace+0x10/0x10 [ 302.310555][ T9408] ? stack_trace_save+0xa9/0x100 [ 302.310585][ T9408] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 302.310613][ T9408] ? save_netdev_trace_buffer+0x18f/0x5e0 [ 302.310637][ T9408] ? save_netdev_trace_buffer+0x4c3/0x5e0 [ 302.310664][ T9408] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 302.310684][ T9408] ? ref_tracker_free+0x668/0x820 [ 302.310708][ T9408] ? __netlink_deliver_tap+0x600/0x880 [ 302.310736][ T9408] ? netlink_deliver_tap+0x19c/0x1b0 [ 302.310762][ T9408] ? netlink_unicast+0x7b8/0x990 [ 302.310786][ T9408] ? netlink_sendmsg+0x813/0xb40 [ 302.310813][ T9408] ? sock_sendmsg_nosec+0x13a/0x180 [ 302.310833][ T9408] ? ____sys_sendmsg+0x565/0x870 [ 302.310859][ T9408] ? ___sys_sendmsg+0x2a5/0x360 [ 302.310884][ T9408] ? __x64_sys_sendmsg+0x1b7/0x290 [ 302.310911][ T9408] ? do_syscall_64+0x17b/0x530 [ 302.310928][ T9408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.310956][ T9408] ? __skb_clone+0x449/0x6c0 [ 302.310990][ T9408] ? skb_clone+0x246/0x3a0 [ 302.311021][ T9408] ? __netlink_deliver_tap+0x838/0x880 [ 302.311049][ T9408] ? netlink_deliver_tap+0x2e/0x1b0 [ 302.311084][ T9408] ? netlink_deliver_tap+0x2e/0x1b0 [ 302.311112][ T9408] ? netlink_deliver_tap+0x2e/0x1b0 [ 302.311146][ T9408] netlink_unicast+0x7f5/0x990 [ 302.311183][ T9408] netlink_sendmsg+0x813/0xb40 [ 302.311221][ T9408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.311252][ T9408] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 302.311284][ T9408] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 302.311311][ T9408] ? arch_stack_walk+0xfb/0x150 [ 302.311348][ T9408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.311376][ T9408] sock_sendmsg_nosec+0x13a/0x180 [ 302.311400][ T9408] ____sys_sendmsg+0x565/0x870 [ 302.311436][ T9408] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.311473][ T9408] ? import_iovec+0x73/0xa0 [ 302.311507][ T9408] ___sys_sendmsg+0x2a5/0x360 [ 302.311534][ T9408] ? __lock_acquire+0x6df/0x2e40 [ 302.311556][ T9408] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.311619][ T9408] ? __fget_files+0x2a/0x420 [ 302.311639][ T9408] ? __fget_files+0x3a8/0x420 [ 302.311669][ T9408] __x64_sys_sendmsg+0x1b7/0x290 [ 302.311699][ T9408] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.311747][ T9408] do_syscall_64+0x17b/0x530 [ 302.311766][ T9408] ? irqentry_exit+0x10f/0x8f0 [ 302.311784][ T9408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.311805][ T9408] ? clear_bhb_loop+0x40/0x90 [ 302.311828][ T9408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.311847][ T9408] RIP: 0033:0x7f309382de59 [ 302.311865][ T9408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.311881][ T9408] RSP: 002b:00007f3091a86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.311902][ T9408] RAX: ffffffffffffffda RBX: 00007f3093ab5fa0 RCX: 00007f309382de59 [ 302.311916][ T9408] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 302.311929][ T9408] RBP: 00007f3091a86090 R08: 0000000000000000 R09: 0000000000000000 [ 302.311941][ T9408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.311953][ T9408] R13: 00007f3093ab6038 R14: 00007f3093ab5fa0 R15: 00007ffd4fc44018 [ 302.311985][ T9408] [ 302.360296][ T4918] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 302.360320][ T4918] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 302.524795][ T5579] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 302.585277][ T4918] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 302.585299][ T4918] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 302.585613][ T4918] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 302.601483][ T4918] usb 2-1: USB disconnect, device number 64 [ 302.850514][ T5579] usb 4-1: not running at top speed; connect to a high speed hub [ 302.851966][ T5579] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 302.855181][ T5579] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 302.855207][ T5579] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.855219][ T5579] usb 4-1: Product: syz [ 302.855226][ T5579] usb 4-1: Manufacturer: syz [ 302.855233][ T5579] usb 4-1: SerialNumber: syz [ 302.906268][ T5689] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 303.057441][ T5689] usb 1-1: Using ep0 maxpacket: 32 [ 303.059591][ T5689] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 303.059615][ T5689] usb 1-1: config 0 has no interface number 0 [ 303.062623][ T5689] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 303.062649][ T5689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.062667][ T5689] usb 1-1: Product: syz [ 303.062679][ T5689] usb 1-1: Manufacturer: syz [ 303.062692][ T5689] usb 1-1: SerialNumber: syz [ 303.068617][ T5689] usb 1-1: config 0 descriptor?? [ 303.111989][ T5689] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 303.112032][ T5689] usb 1-1: selecting invalid altsetting 1 [ 303.112049][ T5689] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 303.145978][ T5689] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 303.146504][ T5689] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 303.146552][ T5689] usb 1-1: media controller created [ 303.183739][ T4918] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 303.251020][ T4918] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 303.309582][ T9418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.523375][ T5689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 303.570375][ T9424] FAULT_INJECTION: forcing a failure. [ 303.570375][ T9424] name failslab, interval 1, probability 0, space 0, times 0 [ 303.570774][ T9424] CPU: 0 UID: 0 PID: 9424 Comm: syz.1.1239 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 303.570802][ T9424] Tainted: [L]=SOFTLOCKUP [ 303.570810][ T9424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 303.570821][ T9424] Call Trace: [ 303.570828][ T9424] [ 303.570836][ T9424] dump_stack_lvl+0xe8/0x150 [ 303.570868][ T9424] should_fail_ex+0x467/0x600 [ 303.570898][ T9424] should_failslab+0xa8/0x100 [ 303.570915][ T9424] ? __anon_vma_prepare+0x10e/0x4d0 [ 303.570941][ T9424] kmem_cache_alloc_noprof+0x9e/0x680 [ 303.570967][ T9424] ? __anon_vma_prepare+0xc3/0x4d0 [ 303.570991][ T9424] ? __anon_vma_prepare+0x10e/0x4d0 [ 303.571021][ T9424] __anon_vma_prepare+0x10e/0x4d0 [ 303.571052][ T9424] do_pte_missing+0x1d2a/0x28f0 [ 303.571084][ T9424] ? rt_spin_unlock+0x163/0x200 [ 303.571111][ T9424] ? __pmd_alloc+0x41b/0x5e0 [ 303.571141][ T9424] handle_mm_fault+0xf95/0x28d0 [ 303.571168][ T9424] ? mt_find+0x186/0x630 [ 303.571192][ T9424] ? handle_mm_fault+0xeb/0x28d0 [ 303.571226][ T9424] ? __pfx_handle_mm_fault+0x10/0x10 [ 303.571269][ T9424] ? lock_mm_and_find_vma+0xa7/0x340 [ 303.571300][ T9424] do_user_addr_fault+0x744/0x1340 [ 303.571343][ T9424] exc_page_fault+0x6a/0xc0 [ 303.571363][ T9424] asm_exc_page_fault+0x26/0x30 [ 303.571382][ T9424] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 303.571408][ T9424] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 303.571423][ T9424] RSP: 0018:ffffc9000fa7fca8 EFLAGS: 00050216 [ 303.571440][ T9424] RAX: 0000000000000001 RBX: 0000000000000030 RCX: 0000000000000030 [ 303.571453][ T9424] RDX: 0000000000000000 RSI: ffffc9000fa7fe20 RDI: 0000200000001100 [ 303.571466][ T9424] RBP: ffffc9000fa7fed0 R08: ffffc9000fa7fe4f R09: 1ffff92001f4ffc9 [ 303.571479][ T9424] R10: dffffc0000000000 R11: fffff52001f4ffca R12: 0000200000001130 [ 303.571493][ T9424] R13: 00007ffffffff000 R14: ffffc9000fa7fe20 R15: 0000200000001100 [ 303.571524][ T9424] _copy_to_user+0x8a/0xb0 [ 303.571545][ T9424] __se_sys_shmctl+0x3a2/0x4c0 [ 303.571572][ T9424] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 303.571593][ T9424] ? __pfx___se_sys_shmctl+0x10/0x10 [ 303.571638][ T9424] ? fput+0xa0/0xd0 [ 303.571666][ T9424] ? ksys_write+0x248/0x270 [ 303.571691][ T9424] ? __pfx_ksys_write+0x10/0x10 [ 303.571724][ T9424] do_syscall_64+0x17b/0x530 [ 303.571744][ T9424] ? irqentry_exit+0x10f/0x8f0 [ 303.571769][ T9424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.571789][ T9424] ? clear_bhb_loop+0x40/0x90 [ 303.571812][ T9424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.571831][ T9424] RIP: 0033:0x7f177970de59 [ 303.571849][ T9424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.571865][ T9424] RSP: 002b:00007f1777966028 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 303.571885][ T9424] RAX: ffffffffffffffda RBX: 00007f1779995fa0 RCX: 00007f177970de59 [ 303.571900][ T9424] RDX: 0000200000001100 RSI: 000000000000000e RDI: 0000000000000000 [ 303.571912][ T9424] RBP: 00007f1777966090 R08: 0000000000000000 R09: 0000000000000000 [ 303.571925][ T9424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.571936][ T9424] R13: 00007f1779996038 R14: 00007f1779995fa0 R15: 00007ffebf150988 [ 303.571967][ T9424] [ 304.053212][ T5689] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 304.053264][ T5689] zl10353_read_register: readreg error (reg=127, ret==-71) [ 304.055073][ T5689] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 304.253121][ T9429] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 304.253494][ T9429] qnx6: wrong signature (magic) in superblock #1. [ 304.253505][ T9429] qnx6: unable to read the first superblock [ 304.456814][ T5689] usb 1-1: USB disconnect, device number 43 [ 304.661847][ T5579] usb 4-1: selecting invalid altsetting 1 [ 304.662609][ T5579] usb 4-1: unit 8 not found! [ 304.782795][ T5579] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 304.795671][ T5579] usb 4-1: USB disconnect, device number 56 [ 304.836648][ T5606] udevd[5606]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.856264][ T4918] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 305.018038][ T4918] usb 2-1: config index 0 descriptor too short (expected 8192, got 59) [ 305.018064][ T4918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.018083][ T4918] usb 2-1: config 0 has no interfaces? [ 305.794373][ T9453] veth1_macvtap: left promiscuous mode [ 305.813169][ T9453] veth1_macvtap: entered promiscuous mode [ 306.670591][ T9462] pim6reg9: entered allmulticast mode [ 307.428070][ T5727] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 307.567550][ T4918] usb 2-1: string descriptor 0 read error: -71 [ 307.567694][ T4918] usb 2-1: New USB device found, idVendor=0525, idProduct=84a1, bcdDevice= 0.40 [ 307.567717][ T4918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 307.598573][ T5727] usb 3-1: not running at top speed; connect to a high speed hub [ 307.598798][ T4918] usb 2-1: config 0 descriptor?? [ 307.602679][ T4918] usb 2-1: can't set config #0, error -71 [ 307.611167][ T4918] usb 2-1: USB disconnect, device number 65 [ 307.638082][ T5727] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 307.640919][ T5727] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 307.640945][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.640965][ T5727] usb 3-1: Product: syz [ 307.640977][ T5727] usb 3-1: Manufacturer: syz [ 307.640991][ T5727] usb 3-1: SerialNumber: syz [ 307.981475][ T5579] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 308.012648][ T5579] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 308.683676][ T9491] veth1_macvtap: left promiscuous mode [ 308.695096][ T9491] veth1_macvtap: entered promiscuous mode [ 308.766238][ T5579] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 308.783999][ T5727] usb 3-1: selecting invalid altsetting 1 [ 308.800223][ T5727] usb 3-1: unit 8 not found! [ 308.868075][ T5727] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 308.883362][ T5727] usb 3-1: USB disconnect, device number 49 [ 308.923165][ T5579] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 308.923194][ T5579] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.923212][ T5579] usb 4-1: Product: syz [ 308.923226][ T5579] usb 4-1: Manufacturer: syz [ 308.923239][ T5579] usb 4-1: SerialNumber: syz [ 308.965607][ T5606] udevd[5606]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.997356][ T5696] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 309.176554][ T5579] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 309.326273][ T5579] usb 1-1: Using ep0 maxpacket: 16 [ 309.328400][ T5579] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.328430][ T5579] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 309.328444][ T5579] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 309.328456][ T5579] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.329761][ T5579] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 309.329776][ T5579] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 309.329786][ T5579] usb 1-1: Manufacturer: syz [ 309.362837][ T5579] usb 1-1: config 0 descriptor?? [ 309.542143][ T5689] usb 4-1: USB disconnect, device number 57 [ 309.597273][ T9495] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20000 [ 309.916296][ T5579] rc_core: IR keymap rc-hauppauge not found [ 309.916316][ T5579] Registered IR keymap rc-empty [ 309.917778][ T5579] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 309.938063][ T5579] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 309.960094][ T5579] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 309.968799][ T5579] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input49 [ 309.984460][ T9508] binder: 9505:9508 unknown command 4294966430 [ 309.984479][ T9508] binder: 9505:9508 ioctl c0306201 200000000180 returned -22 [ 309.989555][ T5579] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 310.009440][ T5579] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 310.032733][ T5579] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 310.047405][ T5579] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 310.056263][ T5696] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 310.068162][ T5579] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 310.088356][ T5579] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 310.107823][ T5579] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 310.126597][ T5579] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 310.139028][ T5696] ath9k_htc: Failed to initialize the device [ 310.140366][ T5689] usb 4-1: ath9k_htc: USB layer deinitialized [ 310.151429][ T5579] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 310.170405][ T5579] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 310.201874][ T5579] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 310.201897][ T5579] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 310.240500][ T5579] usb 1-1: USB disconnect, device number 44 [ 310.278698][ T5727] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 310.426220][ T5727] usb 3-1: Using ep0 maxpacket: 16 [ 310.433231][ T5727] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 310.433257][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.433275][ T5727] usb 3-1: Product: syz [ 310.433284][ T5727] usb 3-1: Manufacturer: syz [ 310.433291][ T5727] usb 3-1: SerialNumber: syz [ 310.471429][ T5727] usb 3-1: config 0 descriptor?? [ 310.710987][ T5727] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 310.711029][ T5727] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 310.891820][ T9523] futex_wake_op: syz.0.1269 tries to shift op by -1; fix this program [ 310.913042][ T9511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.913769][ T9511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.923190][ T5727] usb 3-1: USB disconnect, device number 50 [ 311.536620][ T9531] veth1_macvtap: left promiscuous mode [ 311.543654][ T9531] veth1_macvtap: entered promiscuous mode [ 311.566309][ T5727] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 311.718420][ T5727] usb 2-1: not running at top speed; connect to a high speed hub [ 311.719530][ T5727] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 311.721721][ T5727] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 311.721746][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.721765][ T5727] usb 2-1: Product: syz [ 311.721778][ T5727] usb 2-1: Manufacturer: syz [ 311.721785][ T5727] usb 2-1: SerialNumber: syz [ 312.073025][ T6769] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 312.130332][ T5579] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 312.130670][ T6769] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 312.278223][ T5579] usb 1-1: Using ep0 maxpacket: 32 [ 312.279961][ T5579] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.279989][ T5579] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.280054][ T5579] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 312.280066][ T5579] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.326248][ T5579] usb 1-1: config 0 descriptor?? [ 312.536292][ T6769] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 312.557083][ T9538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.557649][ T9538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.558419][ T9538] comedi comedi4: comedi_config --init_data is deprecated [ 312.690277][ T6769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.690318][ T6769] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 312.690339][ T6769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.732661][ T6769] usb 4-1: config 0 descriptor?? [ 312.751387][ T6769] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 312.903236][ T5579] ft260 0003:0403:6030.0019: unknown main item tag 0x0 [ 312.903270][ T5579] ft260 0003:0403:6030.0019: unknown main item tag 0x0 [ 312.943277][ T6769] usb 4-1: USB disconnect, device number 58 [ 312.967650][ T5579] ft260 0003:0403:6030.0019: failed to retrieve chip version [ 312.968830][ T5579] ft260 0003:0403:6030.0019: probe with driver ft260 failed with error -5 [ 313.076608][ T5727] usb 2-1: selecting invalid altsetting 1 [ 313.077421][ T5727] usb 2-1: unit 8 not found! [ 313.140186][ T5727] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 313.152821][ T5727] usb 2-1: USB disconnect, device number 66 [ 313.192214][ T5606] udevd[5606]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.506230][ T5579] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 313.637424][ T5579] usb 4-1: device descriptor read/64, error -71 [ 313.886331][ T5579] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 313.977625][ T4905] Bluetooth: hci3: command 0x0406 tx timeout [ 314.080088][ T5579] usb 4-1: device descriptor read/64, error -71 [ 314.186607][ T5579] usb usb4-port1: attempt power cycle [ 314.537555][ T5579] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 314.556787][ T5579] usb 4-1: device descriptor read/8, error -71 [ 314.796241][ T5579] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 314.816852][ T5579] usb 4-1: device descriptor read/8, error -71 [ 314.877418][ T9577] veth1_macvtap: left promiscuous mode [ 314.887540][ T9577] veth1_macvtap: entered promiscuous mode [ 314.926796][ T5579] usb usb4-port1: unable to enumerate USB device [ 315.436419][ T5579] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 315.588355][ T5579] usb 2-1: not running at top speed; connect to a high speed hub [ 315.589471][ T5579] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 315.591561][ T5579] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 315.591588][ T5579] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.591608][ T5579] usb 2-1: Product: syz [ 315.591621][ T5579] usb 2-1: Manufacturer: syz [ 315.591634][ T5579] usb 2-1: SerialNumber: syz [ 315.692924][ T5727] usb 1-1: USB disconnect, device number 45 [ 315.709205][ T5689] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 315.814801][ T7021] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 315.833051][ T7021] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 315.886667][ T5689] usb 4-1: Using ep0 maxpacket: 16 [ 315.891584][ T5689] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.891636][ T5689] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.891658][ T5689] usb 4-1: config 0 interface 0 has no altsetting 0 [ 315.891690][ T5689] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 315.891712][ T5689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.953980][ T5689] usb 4-1: config 0 descriptor?? [ 316.397018][ T9586] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.1288' resets device [ 316.424826][ T9586] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 316.424852][ T9586] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 316.454612][ T9586] vhci_hcd vhci_hcd.0: Device attached [ 316.472254][ T9586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.473460][ T9586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.485189][ T9592] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 316.500770][ T9286] vhci_hcd vhci_hcd.3: stop threads [ 316.500786][ T9286] vhci_hcd vhci_hcd.3: release socket [ 316.500820][ T9286] vhci_hcd vhci_hcd.3: disconnect device [ 316.671832][ T5689] usbhid 4-1:0.0: can't add hid device: -71 [ 316.671941][ T5689] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 316.691028][ T5689] usb 4-1: USB disconnect, device number 63 [ 317.022240][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.022349][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.085337][ T5579] usb 2-1: selecting invalid altsetting 1 [ 317.088205][ T5579] usb 2-1: unit 8 not found! [ 317.235566][ T5579] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 317.252660][ T5579] usb 2-1: USB disconnect, device number 67 [ 317.389296][ T5606] udevd[5606]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.552579][ T9603] FAULT_INJECTION: forcing a failure. [ 317.552579][ T9603] name failslab, interval 1, probability 0, space 0, times 0 [ 317.552614][ T9603] CPU: 0 UID: 0 PID: 9603 Comm: syz.0.1292 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 317.552640][ T9603] Tainted: [L]=SOFTLOCKUP [ 317.552647][ T9603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 317.552659][ T9603] Call Trace: [ 317.552667][ T9603] [ 317.552675][ T9603] dump_stack_lvl+0xe8/0x150 [ 317.552702][ T9603] should_fail_ex+0x467/0x600 [ 317.552732][ T9603] should_failslab+0xa8/0x100 [ 317.552751][ T9603] ? skb_clone+0x212/0x3a0 [ 317.552778][ T9603] kmem_cache_alloc_noprof+0x9e/0x680 [ 317.552808][ T9603] ? skb_clone+0x212/0x3a0 [ 317.552843][ T9603] skb_clone+0x212/0x3a0 [ 317.552875][ T9603] __netlink_deliver_tap+0x410/0x880 [ 317.552915][ T9603] ? netlink_deliver_tap+0x2e/0x1b0 [ 317.552945][ T9603] netlink_deliver_tap+0x19c/0x1b0 [ 317.552976][ T9603] netlink_sendskb+0x68/0x140 [ 317.553004][ T9603] netlink_rcv_skb+0x2a4/0x4a0 [ 317.553033][ T9603] ? __pfx_genl_rcv_msg+0x10/0x10 [ 317.553057][ T9603] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 317.553098][ T9603] ? netlink_deliver_tap+0x2e/0x1b0 [ 317.553126][ T9603] ? netlink_deliver_tap+0x2e/0x1b0 [ 317.553159][ T9603] genl_rcv+0x28/0x40 [ 317.553179][ T9603] netlink_unicast+0x7f5/0x990 [ 317.553217][ T9603] netlink_sendmsg+0x813/0xb40 [ 317.553255][ T9603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.553294][ T9603] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 317.553326][ T9603] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 317.553355][ T9603] ? arch_stack_walk+0xfb/0x150 [ 317.553386][ T9603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.553414][ T9603] sock_sendmsg_nosec+0x13a/0x180 [ 317.553438][ T9603] ____sys_sendmsg+0x565/0x870 [ 317.553476][ T9603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.553513][ T9603] ? import_iovec+0x73/0xa0 [ 317.553546][ T9603] ___sys_sendmsg+0x2a5/0x360 [ 317.553573][ T9603] ? __lock_acquire+0x6df/0x2e40 [ 317.553596][ T9603] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.553660][ T9603] ? __fget_files+0x2a/0x420 [ 317.553679][ T9603] ? __fget_files+0x3a8/0x420 [ 317.553708][ T9603] __x64_sys_sendmsg+0x1b7/0x290 [ 317.553739][ T9603] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 317.553788][ T9603] do_syscall_64+0x17b/0x530 [ 317.553808][ T9603] ? irqentry_exit+0x10f/0x8f0 [ 317.553826][ T9603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.553846][ T9603] ? clear_bhb_loop+0x40/0x90 [ 317.553870][ T9603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.553890][ T9603] RIP: 0033:0x7ff451cbde59 [ 317.553908][ T9603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.553924][ T9603] RSP: 002b:00007ff44ff16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.553945][ T9603] RAX: ffffffffffffffda RBX: 00007ff451f45fa0 RCX: 00007ff451cbde59 [ 317.553960][ T9603] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 317.553973][ T9603] RBP: 00007ff44ff16090 R08: 0000000000000000 R09: 0000000000000000 [ 317.553986][ T9603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.553998][ T9603] R13: 00007ff451f46038 R14: 00007ff451f45fa0 R15: 00007ffd1956df48 [ 317.554030][ T9603] [ 318.128266][ T9607] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 318.158672][ T9613] sg_write: data in/out 28096/136 bytes for SCSI command 0x0-- guessing data in; [ 318.158672][ T9613] program syz.3.1296 not setting count and/or reply_len properly [ 318.294908][ T5594] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 318.341518][ T9617] veth1_macvtap: left promiscuous mode [ 318.358199][ T9617] veth1_macvtap: entered promiscuous mode [ 318.513333][ T9619] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1299'. [ 318.620922][ T5579] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 319.462078][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1305'. [ 319.462104][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1305'. [ 319.506223][ T7021] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 319.649218][ T9641] sg_write: data in/out 28096/136 bytes for SCSI command 0x0-- guessing data in; [ 319.649218][ T9641] program syz.3.1307 not setting count and/or reply_len properly [ 319.678791][ T7021] usb 1-1: not running at top speed; connect to a high speed hub [ 319.681509][ T7021] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 319.703642][ T7021] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 319.703671][ T7021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.703691][ T7021] usb 1-1: Product: syz [ 319.703705][ T7021] usb 1-1: Manufacturer: syz [ 319.703719][ T7021] usb 1-1: SerialNumber: syz [ 319.766151][ T9619] syz.1.1299 (9619) used greatest stack depth: 16256 bytes left [ 320.029335][ T5689] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 320.047475][ T5689] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 320.912102][ T7021] usb 1-1: selecting invalid altsetting 1 [ 320.913060][ T7021] usb 1-1: unit 8 not found! [ 321.098338][ T7021] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 321.122973][ T7021] usb 1-1: USB disconnect, device number 46 [ 321.174232][ T5606] udevd[5606]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.086302][ T7021] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 322.381897][ T5594] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 322.409629][ T5594] Bluetooth: hci1: Injecting HCI hardware error event [ 322.410310][ T4905] Bluetooth: hci1: hardware error 0x00 [ 322.652366][ T5594] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 322.867677][ T6151] Bluetooth: hci4: Frame reassembly failed (-84) [ 324.620035][ T4905] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 324.778429][ T5594] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 324.910450][ T9710] FAULT_INJECTION: forcing a failure. [ 324.910450][ T9710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.910483][ T9710] CPU: 0 UID: 0 PID: 9710 Comm: syz.1.1329 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 324.910505][ T9710] Tainted: [L]=SOFTLOCKUP [ 324.910510][ T9710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 324.910520][ T9710] Call Trace: [ 324.910526][ T9710] [ 324.910533][ T9710] dump_stack_lvl+0xe8/0x150 [ 324.910558][ T9710] should_fail_ex+0x467/0x600 [ 324.910581][ T9710] _copy_from_user+0x2d/0xb0 [ 324.910597][ T9710] get_timespec64+0x96/0x1b0 [ 324.910613][ T9710] ? __pfx_get_timespec64+0x10/0x10 [ 324.910639][ T9710] __x64_sys_recvmmsg+0x14b/0x250 [ 324.910666][ T9710] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 324.910693][ T9710] do_syscall_64+0x17b/0x530 [ 324.910707][ T9710] ? irqentry_exit+0x10f/0x8f0 [ 324.910720][ T9710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.910739][ T9710] ? clear_bhb_loop+0x40/0x90 [ 324.910756][ T9710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.910770][ T9710] RIP: 0033:0x7f177970de59 [ 324.910784][ T9710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.910797][ T9710] RSP: 002b:00007f1777966028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 324.910813][ T9710] RAX: ffffffffffffffda RBX: 00007f1779995fa0 RCX: 00007f177970de59 [ 324.910824][ T9710] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 324.910835][ T9710] RBP: 00007f1777966090 R08: 0000200000003700 R09: 0000000000000000 [ 324.910854][ T9710] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 324.910864][ T9710] R13: 00007f1779996038 R14: 00007f1779995fa0 R15: 00007ffebf150988 [ 324.910888][ T9710] [ 325.208978][ T9709] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1330'. [ 325.316872][ T5748] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 325.446321][ T6769] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 325.597569][ T6769] usb 3-1: Using ep0 maxpacket: 32 [ 325.613863][ T6769] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 181, changing to 7 [ 325.618083][ T6769] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 325.618110][ T6769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.618129][ T6769] usb 3-1: Product: syz [ 325.618142][ T6769] usb 3-1: Manufacturer: syz [ 325.618155][ T6769] usb 3-1: SerialNumber: syz [ 325.870647][ T6769] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 325.871068][ T6769] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 325.986112][ T6769] usb 3-1: USB disconnect, device number 51 [ 326.140959][ T5606] udevd[5606]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.502800][ T9728] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1336'. [ 326.789429][ T9736] netlink: 'syz.0.1338': attribute type 10 has an invalid length. [ 326.789451][ T9736] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1338'. [ 326.902189][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1341'. [ 326.902214][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1341'. [ 327.438597][ T9749] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1343'. [ 327.519501][ T9752] FAULT_INJECTION: forcing a failure. [ 327.519501][ T9752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.519536][ T9752] CPU: 1 UID: 0 PID: 9752 Comm: syz.3.1344 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 327.519563][ T9752] Tainted: [L]=SOFTLOCKUP [ 327.519571][ T9752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 327.519582][ T9752] Call Trace: [ 327.519591][ T9752] [ 327.519599][ T9752] dump_stack_lvl+0xe8/0x150 [ 327.519626][ T9752] should_fail_ex+0x467/0x600 [ 327.519657][ T9752] _copy_from_user+0x2d/0xb0 [ 327.519676][ T9752] ___sys_sendmsg+0x1c6/0x360 [ 327.519704][ T9752] ? __lock_acquire+0x6df/0x2e40 [ 327.519727][ T9752] ? __pfx____sys_sendmsg+0x10/0x10 [ 327.519788][ T9752] ? __fget_files+0x2a/0x420 [ 327.519807][ T9752] ? __fget_files+0x3a8/0x420 [ 327.519836][ T9752] __x64_sys_sendmsg+0x1b7/0x290 [ 327.519867][ T9752] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 327.519914][ T9752] do_syscall_64+0x17b/0x530 [ 327.519934][ T9752] ? irqentry_exit+0x10f/0x8f0 [ 327.519952][ T9752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.519972][ T9752] ? clear_bhb_loop+0x40/0x90 [ 327.519996][ T9752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.520016][ T9752] RIP: 0033:0x7f12ec7fde59 [ 327.520034][ T9752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.520051][ T9752] RSP: 002b:00007f12eaa56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.520073][ T9752] RAX: ffffffffffffffda RBX: 00007f12eca85fa0 RCX: 00007f12ec7fde59 [ 327.520087][ T9752] RDX: 0000000020004800 RSI: 0000200000000080 RDI: 0000000000000003 [ 327.520100][ T9752] RBP: 00007f12eaa56090 R08: 0000000000000000 R09: 0000000000000000 [ 327.520113][ T9752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.520130][ T9752] R13: 00007f12eca86038 R14: 00007f12eca85fa0 R15: 00007ffde5e5b5c8 [ 327.520160][ T9752] [ 327.590852][ T9753] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1345'. [ 328.200643][ T5594] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 328.428276][ T9768] FAULT_INJECTION: forcing a failure. [ 328.428276][ T9768] name failslab, interval 1, probability 0, space 0, times 0 [ 328.428308][ T9768] CPU: 0 UID: 0 PID: 9768 Comm: syz.1.1351 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 328.428332][ T9768] Tainted: [L]=SOFTLOCKUP [ 328.428338][ T9768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 328.428347][ T9768] Call Trace: [ 328.428353][ T9768] [ 328.428360][ T9768] dump_stack_lvl+0xe8/0x150 [ 328.428385][ T9768] should_fail_ex+0x467/0x600 [ 328.428411][ T9768] should_failslab+0xa8/0x100 [ 328.428427][ T9768] __kmalloc_noprof+0xfb/0x790 [ 328.428452][ T9768] ? tomoyo_encode+0x2ad/0x570 [ 328.428473][ T9768] ? tomoyo_encode+0x2ad/0x570 [ 328.428503][ T9768] tomoyo_encode+0x2ad/0x570 [ 328.428531][ T9768] tomoyo_realpath_from_path+0x5fa/0x640 [ 328.428567][ T9768] ? tomoyo_path_number_perm+0x219/0x5f0 [ 328.428589][ T9768] tomoyo_path_number_perm+0x246/0x5f0 [ 328.428615][ T9768] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 328.428635][ T9768] ? do_raw_spin_lock+0x12b/0x2f0 [ 328.428668][ T9768] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 328.428687][ T9768] ? lockdep_hardirqs_on+0x7a/0x110 [ 328.428721][ T9768] ? __fget_files+0x2a/0x420 [ 328.428744][ T9768] ? __fget_files+0x3a8/0x420 [ 328.428760][ T9768] ? __fget_files+0x2a/0x420 [ 328.428783][ T9768] security_file_ioctl+0xb9/0x260 [ 328.428808][ T9768] __se_sys_ioctl+0x47/0x170 [ 328.428831][ T9768] do_syscall_64+0x17b/0x530 [ 328.428848][ T9768] ? irqentry_exit+0x10f/0x8f0 [ 328.428861][ T9768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.428876][ T9768] ? clear_bhb_loop+0x40/0x90 [ 328.428893][ T9768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.428907][ T9768] RIP: 0033:0x7f177970de59 [ 328.428921][ T9768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.428932][ T9768] RSP: 002b:00007f1777966028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 328.428948][ T9768] RAX: ffffffffffffffda RBX: 00007f1779995fa0 RCX: 00007f177970de59 [ 328.428958][ T9768] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 328.428967][ T9768] RBP: 00007f1777966090 R08: 0000000000000000 R09: 0000000000000000 [ 328.428976][ T9768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.428985][ T9768] R13: 00007f1779996038 R14: 00007f1779995fa0 R15: 00007ffebf150988 [ 328.429009][ T9768] [ 328.429210][ T9768] ERROR: Out of memory at tomoyo_realpath_from_path. [ 328.746948][ T9775] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1352'. [ 328.765357][ T9775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.071611][ T38] audit: type=1326 audit(328.906:20): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9779 comm="syz.2.1354" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f309382de59 code=0x0 [ 329.086180][ T5748] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 329.239528][ T5748] usb 1-1: unable to get BOS descriptor or descriptor too short [ 329.243821][ T5748] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 329.243847][ T5748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.243867][ T5748] usb 1-1: Product: syz [ 329.243880][ T5748] usb 1-1: Manufacturer: syz [ 329.243894][ T5748] usb 1-1: SerialNumber: syz [ 329.278944][ T9785] veth1_macvtap: left promiscuous mode [ 329.302872][ T9785] veth1_macvtap: entered promiscuous mode [ 330.308179][ T5748] usb 1-1: USB disconnect, device number 48 [ 330.482405][ T5594] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 330.832270][ T38] audit: type=1326 audit(330.666:21): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9814 comm="syz.3.1366" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12ec7fde59 code=0x0 [ 331.124135][ T7021] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 331.138542][ T9821] veth1_macvtap: left promiscuous mode [ 331.174907][ T9823] veth1_macvtap: entered promiscuous mode [ 331.287108][ T7021] usb 2-1: Using ep0 maxpacket: 32 [ 331.292637][ T7021] usb 2-1: config 1 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 139, changing to 11 [ 331.292669][ T7021] usb 2-1: config 1 interface 0 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 331.292695][ T7021] usb 2-1: config 1 interface 0 has no altsetting 0 [ 331.307634][ T7021] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 331.307661][ T7021] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.307680][ T7021] usb 2-1: Product: syz [ 331.307693][ T7021] usb 2-1: Manufacturer: syz [ 331.307707][ T7021] usb 2-1: SerialNumber: syz [ 331.795346][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1369'. [ 332.606287][ T6769] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 332.661015][ T9848] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 332.766590][ T5748] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 332.771012][ T6769] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 332.771095][ T6769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 332.771120][ T6769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 332.771140][ T6769] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 332.771179][ T6769] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 332.771406][ T6769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.783565][ T6769] usb 4-1: config 0 descriptor?? [ 332.896279][ T5696] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 332.928904][ T5748] usb 3-1: unable to get BOS descriptor or descriptor too short [ 332.929529][ T5748] usb 3-1: not running at top speed; connect to a high speed hub [ 332.930734][ T5748] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 332.931299][ T5748] usb 3-1: language id specifier not provided by device, defaulting to English [ 332.935616][ T5748] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 332.935642][ T5748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.935661][ T5748] usb 3-1: Product: 臼; [ 332.935675][ T5748] usb 3-1: SerialNumber: syz [ 333.076179][ T5696] usb 1-1: Using ep0 maxpacket: 16 [ 333.078353][ T5696] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.078376][ T5696] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 333.082671][ T5696] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 333.082698][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.082717][ T5696] usb 1-1: Product: syz [ 333.082783][ T5696] usb 1-1: Manufacturer: syz [ 333.082797][ T5696] usb 1-1: SerialNumber: syz [ 333.155170][ T5696] usb 1-1: 0:2 : does not exist [ 333.210849][ T9845] overlayfs: unescaped trailing colons in lowerdir mount option. [ 333.226959][ T6769] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 333.226994][ T6769] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 333.227020][ T6769] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 333.227045][ T6769] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 333.227121][ T6769] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 333.227147][ T6769] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 333.227173][ T6769] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 333.227198][ T6769] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 333.227271][ T6769] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 333.227297][ T6769] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 333.228781][ T9845] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1378'. [ 333.394594][ T6769] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 333.536309][ T6769] usb 4-1: USB disconnect, device number 65 [ 333.572639][ T5696] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 333.783839][ T7021] usbhid 2-1:1.0: can't add hid device: -71 [ 333.783944][ T7021] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 333.815426][ T7021] usb 2-1: USB disconnect, device number 69 [ 333.828812][ T5748] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 333.855443][ T5696] usb 1-1: USB disconnect, device number 49 [ 333.971717][ T9857] veth1_macvtap: left promiscuous mode [ 333.989802][ T9857] veth1_macvtap: entered promiscuous mode [ 334.126294][ T5748] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 334.185357][ T5748] usb 3-1: USB disconnect, device number 52 [ 334.250561][ T5606] udevd[5606]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.280806][ T5914] udevd[5914]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 335.014429][ T9895] FAULT_INJECTION: forcing a failure. [ 335.014429][ T9895] name failslab, interval 1, probability 0, space 0, times 0 [ 335.014463][ T9895] CPU: 1 UID: 0 PID: 9895 Comm: syz.1.1397 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 335.014489][ T9895] Tainted: [L]=SOFTLOCKUP [ 335.014496][ T9895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 335.014507][ T9895] Call Trace: [ 335.014513][ T9895] [ 335.014522][ T9895] dump_stack_lvl+0xe8/0x150 [ 335.014548][ T9895] should_fail_ex+0x467/0x600 [ 335.014585][ T9895] should_failslab+0xa8/0x100 [ 335.014605][ T9895] kmem_cache_alloc_node_noprof+0xac/0x660 [ 335.014632][ T9895] ? __alloc_skb+0x1d7/0x7a0 [ 335.014656][ T9895] ? __alloc_skb+0x1d7/0x7a0 [ 335.014687][ T9895] __alloc_skb+0x1d7/0x7a0 [ 335.014715][ T9895] create_monitor_ctrl_event+0x38/0x470 [ 335.014744][ T9895] mgmt_cmd_complete+0x20e/0x5e0 [ 335.014775][ T9895] set_connectable+0x3a7/0x800 [ 335.014810][ T9895] ? __pfx_set_connectable+0x10/0x10 [ 335.014840][ T9895] ? rt_read_unlock+0x17f/0x340 [ 335.014874][ T9895] hci_mgmt_cmd+0xa2c/0xfc0 [ 335.014904][ T9895] ? mutex_lock_nested+0x152/0x1d0 [ 335.014933][ T9895] hci_sock_sendmsg+0x6e1/0xf50 [ 335.014964][ T9895] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 335.014997][ T9895] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 335.015020][ T9895] sock_sendmsg_nosec+0x13a/0x180 [ 335.015042][ T9895] sock_write_iter+0x2e4/0x3f0 [ 335.015062][ T9895] ? __pfx_sock_write_iter+0x10/0x10 [ 335.015087][ T9895] ? bpf_lsm_file_permission+0x9/0x20 [ 335.015114][ T9895] ? security_file_permission+0x68/0x220 [ 335.015143][ T9895] vfs_write+0x61e/0xbb0 [ 335.015173][ T9895] ? __pfx_vfs_write+0x10/0x10 [ 335.015204][ T9895] ? __fget_files+0x2a/0x420 [ 335.015233][ T9895] ksys_write+0x156/0x270 [ 335.015258][ T9895] ? __pfx_ksys_write+0x10/0x10 [ 335.015294][ T9895] do_syscall_64+0x17b/0x530 [ 335.015312][ T9895] ? irqentry_exit+0x10f/0x8f0 [ 335.015330][ T9895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.015349][ T9895] ? clear_bhb_loop+0x40/0x90 [ 335.015376][ T9895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.015396][ T9895] RIP: 0033:0x7f177970de59 [ 335.015413][ T9895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.015429][ T9895] RSP: 002b:00007f1777966028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 335.015450][ T9895] RAX: ffffffffffffffda RBX: 00007f1779995fa0 RCX: 00007f177970de59 [ 335.015464][ T9895] RDX: 0000000000000007 RSI: 0000200000000340 RDI: 0000000000000004 [ 335.015477][ T9895] RBP: 00007f1777966090 R08: 0000000000000000 R09: 0000000000000000 [ 335.015490][ T9895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.015501][ T9895] R13: 00007f1779996038 R14: 00007f1779995fa0 R15: 00007ffebf150988 [ 335.015534][ T9895] [ 335.094116][ T9897] veth1_macvtap: left promiscuous mode [ 335.286236][ T6769] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 335.437869][ T6769] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 335.437895][ T6769] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 335.437907][ T6769] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 335.443848][ T6769] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 335.443876][ T6769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.443895][ T6769] usb 3-1: Product: syz [ 335.443906][ T6769] usb 3-1: Manufacturer: syz [ 335.443913][ T6769] usb 3-1: SerialNumber: syz [ 335.510520][ T6769] usb 3-1: config 0 descriptor?? [ 335.514795][ T9891] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 335.514940][ T9891] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 335.538461][ T6769] usb 3-1: ucan: probing device on interface #0 [ 335.556585][ T9907] sg_write: data in/out 1984/136 bytes for SCSI command 0x0-- guessing data in; [ 335.556585][ T9907] program syz.1.1400 not setting count and/or reply_len properly [ 335.723549][ T9891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.724468][ T9891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.753163][ T6769] usb 3-1: ucan: could not read protocol version, ret=0 [ 335.753187][ T6769] usb 3-1: ucan: probe failed; try to update the device firmware [ 335.759848][ T9914] FAULT_INJECTION: forcing a failure. [ 335.759848][ T9914] name failslab, interval 1, probability 0, space 0, times 0 [ 335.759880][ T9914] CPU: 0 UID: 0 PID: 9914 Comm: syz.1.1403 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 335.759906][ T9914] Tainted: [L]=SOFTLOCKUP [ 335.759913][ T9914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 335.759925][ T9914] Call Trace: [ 335.759933][ T9914] [ 335.759941][ T9914] dump_stack_lvl+0xe8/0x150 [ 335.759969][ T9914] should_fail_ex+0x467/0x600 [ 335.759998][ T9914] should_failslab+0xa8/0x100 [ 335.760016][ T9914] ? dst_alloc+0x105/0x170 [ 335.760034][ T9914] kmem_cache_alloc_noprof+0x9e/0x680 [ 335.760060][ T9914] ? dst_alloc+0x105/0x170 [ 335.760084][ T9914] dst_alloc+0x105/0x170 [ 335.760106][ T9914] rt_dst_clone+0x52/0x680 [ 335.760132][ T9914] ip_mc_finish_output+0xea/0x2e0 [ 335.760161][ T9914] ip_mc_output+0x254/0x580 [ 335.760188][ T9914] ip_send_skb+0x45/0xc0 [ 335.760213][ T9914] udp_send_skb+0x7f7/0xfb0 [ 335.760249][ T9914] udp_sendmsg+0x64a/0x2140 [ 335.760277][ T9914] ? __lock_acquire+0x6df/0x2e40 [ 335.760306][ T9914] ? __pfx_udp_sendmsg+0x10/0x10 [ 335.760341][ T9914] ? lock_acquire+0x115/0x350 [ 335.760386][ T9914] ? __asan_memset+0x22/0x50 [ 335.760410][ T9914] ? current_check_autobind_udp_socket+0x198/0x400 [ 335.760438][ T9914] ? sock_rps_record_flow+0x19/0x350 [ 335.760465][ T9914] ? inet_sendmsg+0x23e/0x320 [ 335.760488][ T9914] ? __pfx_inet_sendmsg+0x10/0x10 [ 335.760510][ T9914] sock_sendmsg_nosec+0x10e/0x180 [ 335.760539][ T9914] sock_write_iter+0x2e4/0x3f0 [ 335.760560][ T9914] ? __pfx_sock_write_iter+0x10/0x10 [ 335.760598][ T9914] do_iter_readv_writev+0x624/0x8d0 [ 335.760624][ T9914] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 335.760652][ T9914] ? bpf_lsm_file_permission+0x9/0x20 [ 335.760678][ T9914] ? security_file_permission+0x68/0x220 [ 335.760700][ T9914] ? rw_verify_area+0x209/0x4d0 [ 335.760725][ T9914] vfs_writev+0x34c/0x990 [ 335.760755][ T9914] ? do_raw_spin_lock+0x12b/0x2f0 [ 335.760782][ T9914] ? __pfx_vfs_writev+0x10/0x10 [ 335.760821][ T9914] ? __fget_files+0x2a/0x420 [ 335.760845][ T9914] ? __fget_files+0x3a8/0x420 [ 335.760863][ T9914] ? __fget_files+0x2a/0x420 [ 335.760889][ T9914] do_writev+0x15a/0x2e0 [ 335.760917][ T9914] ? __pfx_do_writev+0x10/0x10 [ 335.760953][ T9914] do_syscall_64+0x17b/0x530 [ 335.760972][ T9914] ? irqentry_exit+0x10f/0x8f0 [ 335.760990][ T9914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.761010][ T9914] ? clear_bhb_loop+0x40/0x90 [ 335.761032][ T9914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.761051][ T9914] RIP: 0033:0x7f177970de59 [ 335.761069][ T9914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.761085][ T9914] RSP: 002b:00007f1777966028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 335.761107][ T9914] RAX: ffffffffffffffda RBX: 00007f1779995fa0 RCX: 00007f177970de59 [ 335.761120][ T9914] RDX: 0000000000000001 RSI: 0000200000002640 RDI: 0000000000000004 [ 335.761133][ T9914] RBP: 00007f1777966090 R08: 0000000000000000 R09: 0000000000000000 [ 335.761145][ T9914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.761157][ T9914] R13: 00007f1779996038 R14: 00007f1779995fa0 R15: 00007ffebf150988 [ 335.761186][ T9914] [ 336.122317][ T6769] usb 3-1: USB disconnect, device number 53 [ 336.436221][ T5689] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 336.598644][ T5689] usb 2-1: config 1 interface 0 has no altsetting 0 [ 336.602574][ T5689] usb 2-1: string descriptor 0 read error: -22 [ 336.602762][ T5689] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.40 [ 336.602785][ T5689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.611483][ T9927] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1408'. [ 337.067332][ T9936] sg_write: data in/out 1984/136 bytes for SCSI command 0x0-- guessing data in; [ 337.067332][ T9936] program syz.3.1411 not setting count and/or reply_len properly [ 338.012450][ T5689] sunplus 0003:04FC:05D8.001D: hidraw0: USB HID vff.7f Device [HID 04fc:05d8] on usb-dummy_hcd.1-1/input0 [ 338.128555][ T5748] usb 2-1: USB disconnect, device number 70 [ 338.339064][ T38] audit: type=1326 audit(338.176:22): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9951 comm="syz.2.1417" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f309382de59 code=0x0 [ 338.346320][ T5689] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 338.526213][ T5689] usb 1-1: Using ep0 maxpacket: 32 [ 338.527881][ T5689] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 338.527896][ T5689] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 338.527906][ T5689] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 338.527933][ T5689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 338.527944][ T5689] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 338.527956][ T5689] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 338.527978][ T5689] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 338.527990][ T5689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.533981][ T5689] usb 1-1: config 0 descriptor?? [ 338.750272][ T5689] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 50 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 339.022524][ T5689] usb 1-1: USB disconnect, device number 50 [ 339.035067][ T5689] usblp0: removed [ 339.150995][ T9962] sg_write: data in/out 1984/136 bytes for SCSI command 0x0-- guessing data in; [ 339.150995][ T9962] program syz.1.1420 not setting count and/or reply_len properly [ 339.228111][ T9966] netlink: 'syz.2.1422': attribute type 27 has an invalid length. [ 340.476265][ T5689] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 340.639182][ T5689] usb 3-1: not running at top speed; connect to a high speed hub [ 340.640328][ T5689] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 340.642532][ T5689] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 340.642558][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.642578][ T5689] usb 3-1: Product: syz [ 340.642592][ T5689] usb 3-1: Manufacturer: syz [ 340.642606][ T5689] usb 3-1: SerialNumber: syz [ 340.799589][ T5594] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 341.024396][ T7021] hid_parser_main: 4022 callbacks suppressed [ 341.024641][ T7021] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 341.081177][ T7021] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 341.148650][T10017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.150587][T10017] batadv_slave_0: entered promiscuous mode [ 341.150612][T10017] batadv_slave_0: entered allmulticast mode [ 341.499987][ T5689] usb 3-1: selecting invalid altsetting 1 [ 341.500740][ T5689] usb 3-1: unit 8 not found! [ 341.631426][ T5689] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 341.651454][ T5689] usb 3-1: USB disconnect, device number 54 [ 341.727733][ T5606] udevd[5606]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.780482][T10024] random: crng reseeded on system resumption [ 341.976528][ T7021] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 342.146512][ T7021] usb 2-1: Using ep0 maxpacket: 16 [ 342.160750][ T7021] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 342.160771][ T7021] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.160781][ T7021] usb 2-1: Product: syz [ 342.160789][ T7021] usb 2-1: Manufacturer: syz [ 342.160796][ T7021] usb 2-1: SerialNumber: syz [ 342.404021][ T7021] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 342.453019][ T7021] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 342.454160][ T7021] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 342.454210][ T7021] usb 2-1: media controller created [ 342.529549][ T7021] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 342.563336][T10047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1453'. [ 342.693278][ T7021] usb 2-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 342.715388][ T7021] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 342.895115][T10029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.895663][T10029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.960635][ T7021] DVB: Unable to find symbol qt1010_attach() [ 343.244557][ T7021] usb 2-1: USB disconnect, device number 71 [ 343.544903][T10064] overlayfs: failed to resolve './file1/file0': -2 [ 343.769214][ T5696] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 343.844390][ T4905] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 343.845668][ T4905] Bluetooth: hci3: unexpected event for opcode 0x0406 [ 343.920739][ T5696] usb 3-1: not running at top speed; connect to a high speed hub [ 343.923271][ T5696] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 343.947031][ T5696] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 343.947059][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.947079][ T5696] usb 3-1: Product: syz [ 343.947093][ T5696] usb 3-1: Manufacturer: syz [ 343.947107][ T5696] usb 3-1: SerialNumber: syz [ 344.165570][ T4918] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 344.175006][ T4918] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 344.869612][ T4905] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 344.869825][ T4905] Bluetooth: hci2: Injecting HCI hardware error event [ 344.870517][ T4905] Bluetooth: hci2: hardware error 0x00 [ 345.020409][ T5696] usb 3-1: selecting invalid altsetting 1 [ 345.058120][ T5696] usb 3-1: unit 8 not found! [ 345.137519][ T5696] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 345.152131][ T5696] usb 3-1: USB disconnect, device number 55 [ 345.245426][ T5606] udevd[5606]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.323083][ T60] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 345.324405][ T60] Bluetooth: hci3: unexpected event for opcode 0x0406 [ 345.364500][T10098] FAULT_INJECTION: forcing a failure. [ 345.364500][T10098] name failslab, interval 1, probability 0, space 0, times 0 [ 345.364521][T10098] CPU: 1 UID: 0 PID: 10098 Comm: syz.0.1468 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 345.364535][T10098] Tainted: [L]=SOFTLOCKUP [ 345.364539][T10098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 345.364546][T10098] Call Trace: [ 345.364550][T10098] [ 345.364555][T10098] dump_stack_lvl+0xe8/0x150 [ 345.364572][T10098] should_fail_ex+0x467/0x600 [ 345.364588][T10098] should_failslab+0xa8/0x100 [ 345.364598][T10098] ? security_file_alloc+0x34/0x2d0 [ 345.364610][T10098] kmem_cache_alloc_noprof+0x9e/0x680 [ 345.364623][T10098] ? rcu_is_watching+0x15/0xb0 [ 345.364635][T10098] ? security_file_alloc+0x34/0x2d0 [ 345.364646][T10098] ? alloc_empty_file+0x5b/0x1d0 [ 345.364662][T10098] security_file_alloc+0x34/0x2d0 [ 345.364674][T10098] init_file+0x96/0x2d0 [ 345.364689][T10098] alloc_empty_file+0x74/0x1d0 [ 345.364704][T10098] path_openat+0x8f/0x3850 [ 345.364717][T10098] ? __lock_acquire+0x6df/0x2e40 [ 345.364728][T10098] ? kasan_save_track+0x4f/0x80 [ 345.364741][T10098] ? __kasan_slab_alloc+0x6c/0x80 [ 345.364754][T10098] ? kmem_cache_alloc_noprof+0x358/0x680 [ 345.364770][T10098] ? do_getname+0x2e/0x250 [ 345.364783][T10098] ? do_sys_openat2+0xcc/0x200 [ 345.364797][T10098] ? __x64_sys_openat+0x138/0x170 [ 345.364811][T10098] ? do_syscall_64+0x17b/0x530 [ 345.364824][T10098] ? do_raw_spin_lock+0x12b/0x2f0 [ 345.364843][T10098] do_file_open+0x23e/0x4a0 [ 345.364854][T10098] ? lockdep_hardirqs_on+0x7a/0x110 [ 345.364866][T10098] ? __pfx_do_file_open+0x10/0x10 [ 345.364888][T10098] ? alloc_fd+0x654/0x6d0 [ 345.364903][T10098] do_sys_openat2+0x115/0x200 [ 345.364919][T10098] ? __pfx_do_sys_openat2+0x10/0x10 [ 345.364935][T10098] ? ksys_write+0x248/0x270 [ 345.364951][T10098] ? __pfx_ksys_write+0x10/0x10 [ 345.364963][T10098] __x64_sys_openat+0x138/0x170 [ 345.364980][T10098] do_syscall_64+0x17b/0x530 [ 345.364990][T10098] ? irqentry_exit+0x10f/0x8f0 [ 345.365000][T10098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.365010][T10098] ? clear_bhb_loop+0x40/0x90 [ 345.365023][T10098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.365032][T10098] RIP: 0033:0x7ff451cbde59 [ 345.365043][T10098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.365052][T10098] RSP: 002b:00007ff44ff16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 345.365063][T10098] RAX: ffffffffffffffda RBX: 00007ff451f45fa0 RCX: 00007ff451cbde59 [ 345.365071][T10098] RDX: 0000000000000041 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 345.365078][T10098] RBP: 00007ff44ff16090 R08: 0000000000000000 R09: 0000000000000000 [ 345.365084][T10098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.365090][T10098] R13: 00007ff451f46038 R14: 00007ff451f45fa0 R15: 00007ffd1956df48 [ 345.365105][T10098] [ 346.033547][ T4918] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 346.166258][ T4918] usb 1-1: device descriptor read/64, error -71 [ 346.245189][T10126] fuse: Bad value for 'fd' [ 346.251334][T10127] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1478'. [ 346.264014][T10127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.416294][ T4918] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 346.449579][T10134] FAULT_INJECTION: forcing a failure. [ 346.449579][T10134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.449612][T10134] CPU: 0 UID: 0 PID: 10134 Comm: syz.1.1481 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 346.449639][T10134] Tainted: [L]=SOFTLOCKUP [ 346.449647][T10134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 346.449658][T10134] Call Trace: [ 346.449666][T10134] [ 346.449675][T10134] dump_stack_lvl+0xe8/0x150 [ 346.449704][T10134] should_fail_ex+0x467/0x600 [ 346.449733][T10134] _copy_from_user+0x2d/0xb0 [ 346.449750][T10134] kstrtouint_from_user+0xd6/0x180 [ 346.449777][T10134] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 346.449798][T10134] ? __lock_acquire+0x6df/0x2e40 [ 346.449823][T10134] ? trace_raw_output_btrfs_log_inode_enter+0x500/0x500 [ 346.449855][T10134] ? lock_acquire+0x115/0x350 [ 346.449885][T10134] proc_fail_nth_write+0x8e/0x210 [ 346.449905][T10134] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 346.449932][T10134] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 346.449951][T10134] vfs_write+0x29f/0xbb0 [ 346.449981][T10134] ? __pfx_vfs_write+0x10/0x10 [ 346.450008][T10134] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 346.450027][T10134] ? lockdep_hardirqs_on+0x7a/0x110 [ 346.450046][T10134] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 346.450065][T10134] ? mutex_lock_nested+0x152/0x1d0 [ 346.450089][T10134] ? fdget_pos+0x252/0x320 [ 346.450116][T10134] ksys_write+0x156/0x270 [ 346.450141][T10134] ? __pfx_ksys_write+0x10/0x10 [ 346.450173][T10134] do_syscall_64+0x17b/0x530 [ 346.450192][T10134] ? irqentry_exit+0x10f/0x8f0 [ 346.450211][T10134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.450231][T10134] ? clear_bhb_loop+0x40/0x90 [ 346.450253][T10134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.450272][T10134] RIP: 0033:0x7f17796ce68e [ 346.450290][T10134] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 346.450305][T10134] RSP: 002b:00007f1777965fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 346.450325][T10134] RAX: ffffffffffffffda RBX: 00007f17779666c0 RCX: 00007f17796ce68e [ 346.450340][T10134] RDX: 0000000000000001 RSI: 00007f17779660a0 RDI: 0000000000000003 [ 346.450353][T10134] RBP: 00007f1777966090 R08: 0000000000000000 R09: 0000000000000000 [ 346.450366][T10134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.450378][T10134] R13: 00007f1779996038 R14: 00007f1779995fa0 R15: 00007ffebf150988 [ 346.450410][T10134] [ 346.557294][ T4918] usb 1-1: device descriptor read/64, error -71 [ 346.557766][ T60] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 346.559073][ T60] Bluetooth: hci3: unexpected event for opcode 0x0406 [ 346.666729][ T4918] usb usb1-port1: attempt power cycle [ 347.006372][ T4918] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 347.026317][ T4905] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 347.027234][ T4918] usb 1-1: device descriptor read/8, error -71 [ 347.066645][ T7021] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 347.086361][ T5696] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 347.206451][ T7021] usb 2-1: device descriptor read/64, error -71 [ 347.240106][ T5696] usb 4-1: not running at top speed; connect to a high speed hub [ 347.241162][ T5696] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 347.243672][ T5696] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 347.243687][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.243697][ T5696] usb 4-1: Product: syz [ 347.243704][ T5696] usb 4-1: Manufacturer: syz [ 347.243711][ T5696] usb 4-1: SerialNumber: syz [ 347.266220][ T4918] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 347.304136][ T4918] usb 1-1: device descriptor read/8, error -71 [ 347.407199][ T4918] usb usb1-port1: unable to enumerate USB device [ 347.456990][ T7021] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 347.534247][ T6769] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 347.550216][ T6769] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 347.606495][ T7021] usb 2-1: device descriptor read/64, error -71 [ 347.696381][ T4918] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 347.716512][ T7021] usb usb2-port1: attempt power cycle [ 347.834841][ T5696] usb 4-1: selecting invalid altsetting 1 [ 347.842040][ T5696] usb 4-1: unit 8 not found! [ 347.862841][ T4918] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 347.862869][ T4918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.870500][ T4918] usb 3-1: config 0 descriptor?? [ 347.874040][ T4918] cp210x 3-1:0.0: cp210x converter detected [ 347.909603][ T4905] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 347.920796][ T4905] Bluetooth: hci3: Injecting HCI hardware error event [ 347.985384][ T5696] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 347.998310][ T5696] usb 4-1: USB disconnect, device number 66 [ 348.030419][ T5606] udevd[5606]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.056395][ T7021] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 348.078305][ T7021] usb 2-1: device descriptor read/8, error -71 [ 348.307980][ T4918] usb 3-1: cp210x converter now attached to ttyUSB0 [ 348.311649][ T4918] usb 3-1: USB disconnect, device number 56 [ 348.316210][ T7021] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 348.318720][ T4918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 348.319398][ T4918] cp210x 3-1:0.0: device disconnected [ 348.345042][ T7021] usb 2-1: device descriptor read/8, error -71 [ 348.446708][ T7021] usb usb2-port1: unable to enumerate USB device [ 349.002359][T10170] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1497'. [ 349.216242][ T4918] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 349.326203][ T5689] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 349.370687][ T4918] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 349.370716][ T4918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.370736][ T4918] usb 3-1: Product: syz [ 349.370750][ T4918] usb 3-1: Manufacturer: syz [ 349.370763][ T4918] usb 3-1: SerialNumber: syz [ 349.499967][ T5689] usb 1-1: not running at top speed; connect to a high speed hub [ 349.501938][ T5689] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 349.505696][ T5689] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 349.505722][ T5689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.505944][ T5689] usb 1-1: Product: syz [ 349.505960][ T5689] usb 1-1: Manufacturer: syz [ 349.505974][ T5689] usb 1-1: SerialNumber: syz [ 349.580978][ T4918] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 349.581483][ T4918] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 349.581504][ T4918] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 349.635142][ T4918] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 349.693641][ T4918] usb 3-1: USB disconnect, device number 57 [ 349.968868][ T6769] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 350.052629][ T6769] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 350.532516][ T5689] usb 1-1: selecting invalid altsetting 1 [ 350.533091][ T5689] usb 1-1: unit 8 not found! [ 350.652494][T10189] FAULT_INJECTION: forcing a failure. [ 350.652494][T10189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.652526][T10189] CPU: 0 UID: 0 PID: 10189 Comm: syz.1.1504 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 350.652549][T10189] Tainted: [L]=SOFTLOCKUP [ 350.652555][T10189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 350.652565][T10189] Call Trace: [ 350.652573][T10189] [ 350.652580][T10189] dump_stack_lvl+0xe8/0x150 [ 350.652603][T10189] should_fail_ex+0x467/0x600 [ 350.652627][T10189] _copy_from_user+0x2d/0xb0 [ 350.652642][T10189] ___sys_sendmsg+0x1c6/0x360 [ 350.652665][T10189] ? __lock_acquire+0x6df/0x2e40 [ 350.652685][T10189] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.652731][T10189] ? __fget_files+0x2a/0x420 [ 350.652746][T10189] ? __fget_files+0x3a8/0x420 [ 350.652772][T10189] __x64_sys_sendmsg+0x1b7/0x290 [ 350.652794][T10189] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 350.652826][T10189] do_syscall_64+0x17b/0x530 [ 350.652841][T10189] ? irqentry_exit+0x10f/0x8f0 [ 350.652854][T10189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.652868][T10189] ? clear_bhb_loop+0x40/0x90 [ 350.652885][T10189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.652898][T10189] RIP: 0033:0x7f177970de59 [ 350.652912][T10189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.652925][T10189] RSP: 002b:00007f1777966028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.652940][T10189] RAX: ffffffffffffffda RBX: 00007f1779995fa0 RCX: 00007f177970de59 [ 350.652951][T10189] RDX: 0000000004040004 RSI: 0000200000000380 RDI: 0000000000000003 [ 350.652962][T10189] RBP: 00007f1777966090 R08: 0000000000000000 R09: 0000000000000000 [ 350.652971][T10189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.652980][T10189] R13: 00007f1779996038 R14: 00007f1779995fa0 R15: 00007ffebf150988 [ 350.653004][T10189] [ 350.684651][ T5689] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 350.728910][ T5689] usb 1-1: USB disconnect, device number 55 [ 350.781905][ T5606] udevd[5606]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.395876][ T4905] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 351.600476][T10215] netlink: 'syz.3.1512': attribute type 29 has an invalid length. [ 351.603378][T10215] netlink: 'syz.3.1512': attribute type 29 has an invalid length. [ 351.931290][ T5748] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 352.098227][ T5748] usb 4-1: unable to get BOS descriptor or descriptor too short [ 352.104992][ T5748] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.105018][ T5748] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.140236][ T5748] usb 4-1: string descriptor 0 read error: -22 [ 352.140372][ T5748] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 352.140395][ T5748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.209500][ T5748] usb 4-1: selecting invalid altsetting 1 [ 352.210234][ T5748] usb 4-1: unit 3 not found! [ 352.400908][ T5748] usb 4-1: cannot request logical cluster ID: 0 (err: -5) [ 352.400945][ T5748] usb 4-1: invalid MIXER UNIT descriptor 6 [ 352.585953][ T5748] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 352.751535][T10215] syz.3.1512 (10215): drop_caches: 2 [ 352.754617][ T5748] usb 4-1: USB disconnect, device number 67 [ 353.508929][T10237] FAULT_INJECTION: forcing a failure. [ 353.508929][T10237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.508963][T10237] CPU: 0 UID: 0 PID: 10237 Comm: syz.3.1520 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 353.508989][T10237] Tainted: [L]=SOFTLOCKUP [ 353.508996][T10237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 353.509007][T10237] Call Trace: [ 353.509015][T10237] [ 353.509023][T10237] dump_stack_lvl+0xe8/0x150 [ 353.509049][T10237] should_fail_ex+0x467/0x600 [ 353.509078][T10237] _copy_from_user+0x2d/0xb0 [ 353.509097][T10237] kstrtouint_from_user+0xd6/0x180 [ 353.509125][T10237] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 353.509147][T10237] ? __lock_acquire+0x6df/0x2e40 [ 353.509167][T10237] ? trace_raw_output_btrfs_log_inode_enter+0x500/0x500 [ 353.509199][T10237] ? lock_acquire+0x115/0x350 [ 353.509232][T10237] proc_fail_nth_write+0x8e/0x210 [ 353.509253][T10237] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 353.509280][T10237] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 353.509298][T10237] vfs_write+0x29f/0xbb0 [ 353.509329][T10237] ? __pfx_vfs_write+0x10/0x10 [ 353.509354][T10237] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 353.509374][T10237] ? lockdep_hardirqs_on+0x7a/0x110 [ 353.509392][T10237] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 353.509412][T10237] ? mutex_lock_nested+0x152/0x1d0 [ 353.509435][T10237] ? fdget_pos+0x252/0x320 [ 353.509464][T10237] ksys_write+0x156/0x270 [ 353.509489][T10237] ? __pfx_ksys_write+0x10/0x10 [ 353.509521][T10237] do_syscall_64+0x17b/0x530 [ 353.509540][T10237] ? irqentry_exit+0x10f/0x8f0 [ 353.509558][T10237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.509578][T10237] ? clear_bhb_loop+0x40/0x90 [ 353.509602][T10237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.509621][T10237] RIP: 0033:0x7f12ec7be68e [ 353.509639][T10237] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 353.509655][T10237] RSP: 002b:00007f12eaa55fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 353.509677][T10237] RAX: ffffffffffffffda RBX: 00007f12eaa566c0 RCX: 00007f12ec7be68e [ 353.509690][T10237] RDX: 0000000000000001 RSI: 00007f12eaa560a0 RDI: 0000000000000004 [ 353.509701][T10237] RBP: 00007f12eaa56090 R08: 0000000000000000 R09: 0000000000000000 [ 353.509713][T10237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.509724][T10237] R13: 00007f12eca86038 R14: 00007f12eca85fa0 R15: 00007ffde5e5b5c8 [ 353.509753][T10237] [ 354.323117][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1525'. [ 355.611519][T10290] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 355.906235][ T5748] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 356.056240][ T5748] usb 3-1: device descriptor read/64, error -71 [ 356.086422][ T5579] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 356.162500][T10310] FAULT_INJECTION: forcing a failure. [ 356.162500][T10310] name failslab, interval 1, probability 0, space 0, times 0 [ 356.162521][T10310] CPU: 1 UID: 0 PID: 10310 Comm: syz.3.1547 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 356.162536][T10310] Tainted: [L]=SOFTLOCKUP [ 356.162540][T10310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 356.162546][T10310] Call Trace: [ 356.162550][T10310] [ 356.162555][T10310] dump_stack_lvl+0xe8/0x150 [ 356.162573][T10310] should_fail_ex+0x467/0x600 [ 356.162589][T10310] should_failslab+0xa8/0x100 [ 356.162601][T10310] __kvmalloc_node_noprof+0x176/0x880 [ 356.162616][T10310] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 356.162628][T10310] ? file_tty_write+0x2ac/0x980 [ 356.162643][T10310] ? file_tty_write+0x2ac/0x980 [ 356.162660][T10310] file_tty_write+0x2ac/0x980 [ 356.162674][T10310] ? security_file_permission+0x68/0x220 [ 356.162691][T10310] vfs_write+0x61e/0xbb0 [ 356.162707][T10310] ? __pfx_vfs_write+0x10/0x10 [ 356.162723][T10310] ? __fget_files+0x2a/0x420 [ 356.162738][T10310] ksys_write+0x156/0x270 [ 356.162751][T10310] ? __pfx_ksys_write+0x10/0x10 [ 356.162767][T10310] do_syscall_64+0x17b/0x530 [ 356.162777][T10310] ? irqentry_exit+0x10f/0x8f0 [ 356.162787][T10310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.162797][T10310] ? clear_bhb_loop+0x40/0x90 [ 356.162813][T10310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.162823][T10310] RIP: 0033:0x7f12ec7fde59 [ 356.162833][T10310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.162842][T10310] RSP: 002b:00007f12eaa56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 356.162853][T10310] RAX: ffffffffffffffda RBX: 00007f12eca85fa0 RCX: 00007f12ec7fde59 [ 356.162860][T10310] RDX: 0000000000001006 RSI: 0000200000000080 RDI: 0000000000000003 [ 356.162867][T10310] RBP: 00007f12eaa56090 R08: 0000000000000000 R09: 0000000000000000 [ 356.162874][T10310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.162879][T10310] R13: 00007f12eca86038 R14: 00007f12eca85fa0 R15: 00007ffde5e5b5c8 [ 356.162895][T10310] [ 356.326250][ T5748] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 356.356167][ T5579] usb 2-1: Using ep0 maxpacket: 8 [ 356.399459][ T5579] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 356.399485][ T5579] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 356.399530][ T5579] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 356.399552][ T5579] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.496237][ T5748] usb 3-1: device descriptor read/64, error -71 [ 356.606649][ T5748] usb usb3-port1: attempt power cycle [ 356.956227][ T5748] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 356.977209][ T5748] usb 3-1: device descriptor read/8, error -71 [ 357.216256][ T5748] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 357.237909][ T5748] usb 3-1: device descriptor read/8, error -71 [ 357.296184][ T5727] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 357.346719][ T5748] usb usb3-port1: unable to enumerate USB device [ 357.448702][ T5727] usb 1-1: unable to get BOS descriptor or descriptor too short [ 357.449203][ T5727] usb 1-1: not running at top speed; connect to a high speed hub [ 357.450209][ T5727] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.450230][ T5727] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 357.450271][ T5727] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 357.452329][ T5727] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 357.452353][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.452371][ T5727] usb 1-1: Product: syz [ 357.452384][ T5727] usb 1-1: Manufacturer: syz [ 357.452398][ T5727] usb 1-1: SerialNumber: syz [ 357.746655][ T4905] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 357.815567][ T4905] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 357.845307][T10341] hugetlbfs: Bad value 'g' for mount option 'size' [ 357.845307][T10341] [ 358.071384][ T5727] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 358.071427][ T5727] cdc_ncm 1-1:1.0: bind() failure [ 358.093076][ T5727] usb 1-1: USB disconnect, device number 56 [ 358.691997][T10351] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1562'. [ 358.911424][ T5689] usb 2-1: USB disconnect, device number 76 [ 359.042903][T10363] 9p: Bad value for 'rfdno' [ 359.346670][T10375] FAULT_INJECTION: forcing a failure. [ 359.346670][T10375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.346691][T10375] CPU: 0 UID: 0 PID: 10375 Comm: syz.1.1570 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 359.346707][T10375] Tainted: [L]=SOFTLOCKUP [ 359.346710][T10375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 359.346717][T10375] Call Trace: [ 359.346721][T10375] [ 359.346726][T10375] dump_stack_lvl+0xe8/0x150 [ 359.346743][T10375] should_fail_ex+0x467/0x600 [ 359.346759][T10375] _copy_to_user+0x31/0xb0 [ 359.346770][T10375] simple_read_from_buffer+0xe1/0x170 [ 359.346784][T10375] proc_fail_nth_read+0x1be/0x230 [ 359.346797][T10375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 359.346810][T10375] ? rw_verify_area+0x250/0x4d0 [ 359.346822][T10375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 359.346832][T10375] vfs_read+0x219/0xa90 [ 359.346848][T10375] ? __pfx_vfs_read+0x10/0x10 [ 359.346860][T10375] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 359.346871][T10375] ? lockdep_hardirqs_on+0x7a/0x110 [ 359.346881][T10375] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 359.346890][T10375] ? mutex_lock_nested+0x152/0x1d0 [ 359.346902][T10375] ? fdget_pos+0x252/0x320 [ 359.346917][T10375] ksys_read+0x156/0x270 [ 359.346929][T10375] ? __pfx_ksys_read+0x10/0x10 [ 359.346939][T10375] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 359.346959][T10375] do_syscall_64+0x17b/0x530 [ 359.346970][T10375] ? irqentry_exit+0x10f/0x8f0 [ 359.346979][T10375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.346989][T10375] ? clear_bhb_loop+0x40/0x90 [ 359.347002][T10375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.347011][T10375] RIP: 0033:0x7f17796ce68e [ 359.347021][T10375] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 359.347030][T10375] RSP: 002b:00007f1777965fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 359.347041][T10375] RAX: ffffffffffffffda RBX: 00007f17779666c0 RCX: 00007f17796ce68e [ 359.347049][T10375] RDX: 000000000000000f RSI: 00007f17779660a0 RDI: 0000000000000006 [ 359.347055][T10375] RBP: 00007f1777966090 R08: 0000000000000000 R09: 0000000000000000 [ 359.347061][T10375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.347067][T10375] R13: 00007f1779996038 R14: 00007f1779995fa0 R15: 00007ffebf150988 [ 359.347082][T10375] [ 359.735974][T10393] fuse: Bad value for 'user_id' [ 359.735992][T10393] fuse: Bad value for 'user_id' [ 359.738821][T10394] fuse: Bad value for 'user_id' [ 359.738837][T10394] fuse: Bad value for 'user_id' [ 359.802394][T10396] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1579'. [ 359.836237][ T5689] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 359.839740][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'. [ 359.966445][ T5727] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 359.986915][ T5689] usb 1-1: Using ep0 maxpacket: 8 [ 359.989193][ T5689] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 359.989218][ T5689] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 359.989264][ T5689] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 359.989285][ T5689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.190008][ T5579] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 360.336259][ T5579] usb 3-1: Using ep0 maxpacket: 8 [ 360.338897][ T5579] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.338927][ T5579] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.338967][ T5579] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 1.00 [ 360.338990][ T5579] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.346260][ T5579] usb 3-1: config 0 descriptor?? [ 360.909011][T10409] misc userio: Can't change port type on an already running userio instance [ 362.015481][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1589'. [ 362.492120][ T5689] usb 1-1: USB disconnect, device number 57 [ 362.943025][ T38] audit: type=1326 audit(362.776:23): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10401 comm="syz.2.1582" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309382de59 code=0x7fc00000 [ 363.369274][ T5579] usbhid 3-1:0.0: can't add hid device: -71 [ 363.369387][ T5579] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 363.395855][ T5579] usb 3-1: USB disconnect, device number 62 [ 363.561587][T10448] bridge0: port 3(syz_tun) entered blocking state [ 363.569546][T10448] bridge0: port 3(syz_tun) entered disabled state [ 363.573348][T10448] syz_tun: entered allmulticast mode [ 363.601024][T10448] syz_tun: entered promiscuous mode [ 363.690474][T10448] bridge0: port 3(syz_tun) entered blocking state [ 363.692408][T10448] bridge0: port 3(syz_tun) entered forwarding state [ 364.748585][ T5727] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 364.908247][ T5727] usb 4-1: config 252 has an invalid interface number: 233 but max is 0 [ 364.908274][ T5727] usb 4-1: config 252 has no interface number 0 [ 364.908304][ T5727] usb 4-1: too many endpoints for config 252 interface 233 altsetting 41: 139, using maximum allowed: 30 [ 364.908331][ T5727] usb 4-1: config 252 interface 233 altsetting 41 has 0 endpoint descriptors, different from the interface descriptor's value: 139 [ 364.908345][ T5727] usb 4-1: config 252 interface 233 has no altsetting 0 [ 364.910415][ T5727] usb 4-1: New USB device found, idVendor=13d3, idProduct=3202, bcdDevice=ec.02 [ 364.910441][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.910460][ T5727] usb 4-1: Product: syz [ 364.910471][ T5727] usb 4-1: Manufacturer: syz [ 364.910478][ T5727] usb 4-1: SerialNumber: syz [ 365.053058][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803d887000: rx timeout, send abort [ 365.145856][ T5727] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 365.145905][ T5727] dvb-usb: bulk message failed: -22 (3/0) [ 365.188419][T10478] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1607'. [ 365.188444][T10478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1607'. [ 365.188458][T10478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1607'. [ 365.231502][ T5727] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 365.233675][ T5727] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 365.233711][ T5727] usb 4-1: media controller created [ 365.273926][ T5727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 365.418474][ T5727] dvb-usb: bulk message failed: -22 (6/0) [ 365.418555][ T5727] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 365.424002][ T5727] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input51 [ 365.428404][ T5727] dvb-usb: schedule remote query interval to 150 msecs. [ 365.428453][ T5727] dvb-usb: bulk message failed: -22 (3/0) [ 365.446215][ T5727] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 365.456293][ T5727] usb 4-1: USB disconnect, device number 69 [ 365.554195][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803d887000: abort rx timeout. Force session deactivation [ 365.872152][ T5727] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 365.932861][T10486] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1611'. [ 366.831148][T10510] FAULT_INJECTION: forcing a failure. [ 366.831148][T10510] name failslab, interval 1, probability 0, space 0, times 0 [ 366.831182][T10510] CPU: 1 UID: 0 PID: 10510 Comm: syz.3.1620 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 366.831208][T10510] Tainted: [L]=SOFTLOCKUP [ 366.831215][T10510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 366.831227][T10510] Call Trace: [ 366.831235][T10510] [ 366.831243][T10510] dump_stack_lvl+0xe8/0x150 [ 366.831271][T10510] should_fail_ex+0x467/0x600 [ 366.831299][T10510] should_failslab+0xa8/0x100 [ 366.831318][T10510] __kmalloc_cache_noprof+0xa1/0x670 [ 366.831345][T10510] ? call_usermodehelper_setup+0x8e/0x270 [ 366.831361][T10510] ? call_usermodehelper_setup+0x8e/0x270 [ 366.831380][T10510] ? __request_module+0x2ec/0x630 [ 366.831405][T10510] call_usermodehelper_setup+0x8e/0x270 [ 366.831423][T10510] ? __pfx_free_modprobe_argv+0x10/0x10 [ 366.831448][T10510] __request_module+0x3ba/0x630 [ 366.831476][T10510] ? __pfx___request_module+0x10/0x10 [ 366.831506][T10510] ? safesetid_security_capable+0xa9/0x1a0 [ 366.831533][T10510] ? security_capable+0x74/0x280 [ 366.831562][T10510] ? dev_load+0x21/0x1f0 [ 366.831585][T10510] dev_load+0x190/0x1f0 [ 366.831610][T10510] dev_ioctl+0x837/0x1150 [ 366.831637][T10510] sock_ioctl+0x756/0x7f0 [ 366.831660][T10510] ? __pfx_sock_ioctl+0x10/0x10 [ 366.831684][T10510] ? __fget_files+0x3a8/0x420 [ 366.831702][T10510] ? __fget_files+0x2a/0x420 [ 366.831725][T10510] ? bpf_lsm_file_ioctl+0x9/0x20 [ 366.831753][T10510] ? __pfx_sock_ioctl+0x10/0x10 [ 366.831772][T10510] __se_sys_ioctl+0xff/0x170 [ 366.831798][T10510] do_syscall_64+0x17b/0x530 [ 366.831818][T10510] ? irqentry_exit+0x10f/0x8f0 [ 366.831836][T10510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.831855][T10510] ? clear_bhb_loop+0x40/0x90 [ 366.831878][T10510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.831898][T10510] RIP: 0033:0x7f12ec7fde59 [ 366.831915][T10510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.831931][T10510] RSP: 002b:00007f12eaa56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.831951][T10510] RAX: ffffffffffffffda RBX: 00007f12eca85fa0 RCX: 00007f12ec7fde59 [ 366.831966][T10510] RDX: 0000200000000940 RSI: 00000000000089f3 RDI: 0000000000000003 [ 366.831979][T10510] RBP: 00007f12eaa56090 R08: 0000000000000000 R09: 0000000000000000 [ 366.831998][T10510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.832011][T10510] R13: 00007f12eca86038 R14: 00007f12eca85fa0 R15: 00007ffde5e5b5c8 [ 366.832041][T10510] [ 367.346253][ T6769] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 367.509326][ T6769] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.509374][ T6769] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 367.509398][ T6769] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.551761][ T6769] usb 3-1: config 0 descriptor?? [ 367.776631][ T6769] usbhid 3-1:0.0: can't add hid device: -71 [ 367.776751][ T6769] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 367.812708][ T6769] usb 3-1: USB disconnect, device number 63 [ 368.196199][ T10] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 368.307033][ T5748] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 368.346217][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 368.347820][ T10] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 368.347844][ T10] usb 1-1: config 0 has no interface number 0 [ 368.347874][ T10] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 368.347886][ T10] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 368.347899][ T10] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 368.347926][ T10] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 368.347939][ T10] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 368.347951][ T10] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 368.347961][ T10] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 368.347973][ T10] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 368.347983][ T10] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.350030][ T10] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 368.350055][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.350074][ T10] usb 1-1: Product: syz [ 368.350087][ T10] usb 1-1: Manufacturer: syz [ 368.350098][ T10] usb 1-1: SerialNumber: syz [ 368.353584][ T10] usb 1-1: config 0 descriptor?? [ 368.354980][T10537] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 368.366209][ T5727] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 368.369556][ T10] usb 1-1: can only deal with bulk endpoints; endpoint 1 is not bulk. [ 368.369575][ T10] usb 1-1: couldn't find an output bulk endpoint. Bailing out. [ 368.457397][ T5748] usb 3-1: no configurations [ 368.457414][ T5748] usb 3-1: can't read configurations, error -22 [ 368.506238][ T5696] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 368.529054][ T5727] usb 4-1: config index 0 descriptor too short (expected 64884, got 36) [ 368.529108][ T5727] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.531513][ T5727] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 368.531538][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.531557][ T5727] usb 4-1: Product: syz [ 368.531571][ T5727] usb 4-1: Manufacturer: syz [ 368.531584][ T5727] usb 4-1: SerialNumber: syz [ 368.551861][ T5727] rtl8150 4-1:1.0: couldn't find required endpoints [ 368.552138][ T5727] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 368.586281][ T5748] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 368.630409][T10534] syzkaller1: entered promiscuous mode [ 368.630431][T10534] syzkaller1: entered allmulticast mode [ 368.667833][ T5696] usb 2-1: Using ep0 maxpacket: 8 [ 368.669251][ T5696] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 368.669266][ T5696] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 368.669297][ T5696] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.669319][ T5696] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 368.669337][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.678453][ T5696] usbtmc 2-1:16.0: bulk endpoints not found [ 368.737427][ T5748] usb 3-1: no configurations [ 368.737452][ T5748] usb 3-1: can't read configurations, error -22 [ 368.737933][ T5748] usb usb3-port1: attempt power cycle [ 369.036794][ T5727] usb 4-1: USB disconnect, device number 70 [ 369.076854][ T5748] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 369.098789][ T5748] usb 3-1: no configurations [ 369.098816][ T5748] usb 3-1: can't read configurations, error -22 [ 369.226180][ T5748] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 369.247432][ T5748] usb 3-1: no configurations [ 369.247444][ T5748] usb 3-1: can't read configurations, error -22 [ 369.247861][ T5748] usb usb3-port1: unable to enumerate USB device [ 369.556506][T10557] sg_write: data in/out 307589/136 bytes for SCSI command 0x0-- guessing data in; [ 369.556506][T10557] program syz.3.1632 not setting count and/or reply_len properly [ 369.556741][T10556] openvswitch: netlink: IPv4 tun info is not correct [ 370.546216][ T5727] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 370.696391][ T5727] usb 3-1: Using ep0 maxpacket: 16 [ 370.698245][ T5727] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.698269][ T5727] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 370.700870][ T5727] usb 3-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 0.40 [ 370.700897][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.700917][ T5727] usb 3-1: Product: syz [ 370.700930][ T5727] usb 3-1: Manufacturer: syz [ 370.700942][ T5727] usb 3-1: SerialNumber: syz [ 370.941058][ T5727] usb 3-1: unit 0 not found! [ 370.998782][ T5727] usb 3-1: USB disconnect, device number 68 [ 371.031552][ T5606] udevd[5606]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.181444][ T5696] usb 1-1: USB disconnect, device number 58 [ 371.290814][ T38] audit: type=1326 audit(371.126:24): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10584 comm="syz.3.1642" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12ec7fde59 code=0x0 [ 371.310301][ T5727] usb 2-1: USB disconnect, device number 77 [ 371.372329][T10590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1643'. [ 371.446976][T10591] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[10595] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[10591] [ 371.564634][T10601] fuse: Unknown parameter 'c—Ò [ 371.564634][T10601] Ê }}Ìñ Œ{›uï?»´ò³ XÖ' [ 371.691448][T10605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1648'. [ 371.691508][T10605] FAULT_INJECTION: forcing a failure. [ 371.691508][T10605] name failslab, interval 1, probability 0, space 0, times 0 [ 371.691525][T10605] CPU: 0 UID: 0 PID: 10605 Comm: syz.2.1648 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 371.691539][T10605] Tainted: [L]=SOFTLOCKUP [ 371.691543][T10605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 371.691549][T10605] Call Trace: [ 371.691553][T10605] [ 371.691558][T10605] dump_stack_lvl+0xe8/0x150 [ 371.691577][T10605] should_fail_ex+0x467/0x600 [ 371.691593][T10605] should_failslab+0xa8/0x100 [ 371.691604][T10605] __kmalloc_cache_noprof+0xa1/0x670 [ 371.691619][T10605] ? nft_match_select_ops+0x1ea/0x520 [ 371.691634][T10605] ? nft_match_select_ops+0x1ea/0x520 [ 371.691652][T10605] nft_match_select_ops+0x1ea/0x520 [ 371.691668][T10605] ? __nla_parse+0x40/0x60 [ 371.691684][T10605] nf_tables_expr_parse+0x70a/0xa60 [ 371.691699][T10605] ? nf_tables_expr_parse+0x169/0xa60 [ 371.691712][T10605] ? __pfx_nf_tables_expr_parse+0x10/0x10 [ 371.691725][T10605] ? nft_pernet+0x23/0x240 [ 371.691738][T10605] ? nf_tables_newrule+0x11c1/0x28a0 [ 371.691753][T10605] nf_tables_newrule+0x1312/0x28a0 [ 371.691773][T10605] ? __pfx_nf_tables_newrule+0x10/0x10 [ 371.691785][T10605] ? lock_acquire+0x115/0x350 [ 371.691800][T10605] ? nfnl_pernet+0x23/0x240 [ 371.691818][T10605] ? __nla_parse+0x40/0x60 [ 371.691834][T10605] nfnetlink_rcv+0x1291/0x28d0 [ 371.691863][T10605] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 371.691883][T10605] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 371.691894][T10605] ? ref_tracker_free+0x668/0x820 [ 371.691922][T10605] ? skb_clone+0x246/0x3a0 [ 371.691938][T10605] ? __netlink_deliver_tap+0x838/0x880 [ 371.691956][T10605] ? netlink_deliver_tap+0x2e/0x1b0 [ 371.691970][T10605] ? netlink_deliver_tap+0x2e/0x1b0 [ 371.691988][T10605] netlink_unicast+0x7f5/0x990 [ 371.692009][T10605] netlink_sendmsg+0x813/0xb40 [ 371.692042][T10605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.692079][T10605] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 371.692109][T10605] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 371.692138][T10605] ? arch_stack_walk+0xfb/0x150 [ 371.692169][T10605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.692187][T10605] sock_sendmsg_nosec+0x13a/0x180 [ 371.692200][T10605] ____sys_sendmsg+0x565/0x870 [ 371.692219][T10605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.692238][T10605] ? import_iovec+0x73/0xa0 [ 371.692255][T10605] ___sys_sendmsg+0x2a5/0x360 [ 371.692268][T10605] ? __lock_acquire+0x6df/0x2e40 [ 371.692279][T10605] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.692311][T10605] ? __fget_files+0x2a/0x420 [ 371.692321][T10605] ? __fget_files+0x3a8/0x420 [ 371.692339][T10605] __x64_sys_sendmsg+0x1b7/0x290 [ 371.692355][T10605] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 371.692379][T10605] do_syscall_64+0x17b/0x530 [ 371.692389][T10605] ? irqentry_exit+0x10f/0x8f0 [ 371.692398][T10605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.692409][T10605] ? clear_bhb_loop+0x40/0x90 [ 371.692421][T10605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.692431][T10605] RIP: 0033:0x7f309382de59 [ 371.692441][T10605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.692450][T10605] RSP: 002b:00007f3091a86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.692461][T10605] RAX: ffffffffffffffda RBX: 00007f3093ab5fa0 RCX: 00007f309382de59 [ 371.692469][T10605] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 371.692475][T10605] RBP: 00007f3091a86090 R08: 0000000000000000 R09: 0000000000000000 [ 371.692481][T10605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.692488][T10605] R13: 00007f3093ab6038 R14: 00007f3093ab5fa0 R15: 00007ffd4fc44018 [ 371.692503][T10605] [ 372.137571][ T5727] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 372.171904][T10609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1650'. [ 372.266544][ T5727] usb 3-1: device descriptor read/64, error -71 [ 372.477547][T10620] FAULT_INJECTION: forcing a failure. [ 372.477547][T10620] name failslab, interval 1, probability 0, space 0, times 0 [ 372.477569][T10620] CPU: 1 UID: 0 PID: 10620 Comm: syz.3.1655 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 372.477584][T10620] Tainted: [L]=SOFTLOCKUP [ 372.477588][T10620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 372.477595][T10620] Call Trace: [ 372.477600][T10620] [ 372.477604][T10620] dump_stack_lvl+0xe8/0x150 [ 372.477622][T10620] should_fail_ex+0x467/0x600 [ 372.477638][T10620] should_failslab+0xa8/0x100 [ 372.477652][T10620] __kmalloc_noprof+0xfb/0x790 [ 372.477682][T10620] ? tomoyo_realpath_from_path+0xef/0x640 [ 372.477704][T10620] ? tomoyo_realpath_from_path+0xef/0x640 [ 372.477722][T10620] tomoyo_realpath_from_path+0xef/0x640 [ 372.477741][T10620] ? tomoyo_path_number_perm+0x219/0x5f0 [ 372.477753][T10620] tomoyo_path_number_perm+0x246/0x5f0 [ 372.477767][T10620] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 372.477779][T10620] ? do_raw_spin_lock+0x12b/0x2f0 [ 372.477799][T10620] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 372.477810][T10620] ? lockdep_hardirqs_on+0x7a/0x110 [ 372.477827][T10620] ? __fget_files+0x2a/0x420 [ 372.477840][T10620] ? __fget_files+0x3a8/0x420 [ 372.477849][T10620] ? __fget_files+0x2a/0x420 [ 372.477861][T10620] security_file_ioctl+0xb9/0x260 [ 372.477874][T10620] __se_sys_ioctl+0x47/0x170 [ 372.477888][T10620] do_syscall_64+0x17b/0x530 [ 372.477898][T10620] ? irqentry_exit+0x10f/0x8f0 [ 372.477908][T10620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.477918][T10620] ? clear_bhb_loop+0x40/0x90 [ 372.477930][T10620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.477940][T10620] RIP: 0033:0x7f12ec7fde59 [ 372.477950][T10620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.477959][T10620] RSP: 002b:00007f12eaa56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 372.477970][T10620] RAX: ffffffffffffffda RBX: 00007f12eca85fa0 RCX: 00007f12ec7fde59 [ 372.477977][T10620] RDX: 0000200000000040 RSI: 000000004020ae76 RDI: 0000000000000004 [ 372.477984][T10620] RBP: 00007f12eaa56090 R08: 0000000000000000 R09: 0000000000000000 [ 372.477990][T10620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.478004][T10620] R13: 00007f12eca86038 R14: 00007f12eca85fa0 R15: 00007ffde5e5b5c8 [ 372.478019][T10620] [ 372.478031][T10620] ERROR: Out of memory at tomoyo_realpath_from_path. [ 372.506432][ T5727] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 372.616366][ T5748] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 372.638849][ T5727] usb 3-1: device descriptor read/64, error -71 [ 372.748204][ T5727] usb usb3-port1: attempt power cycle [ 372.766233][ T5748] usb 1-1: Using ep0 maxpacket: 8 [ 372.769431][ T5748] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 372.769454][ T5748] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 372.769495][ T5748] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.769524][ T5748] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 372.769536][ T5748] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.804249][ T5748] usbtmc 1-1:16.0: bulk endpoints not found [ 372.859927][T10624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.860457][T10624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.977987][T10624] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 373.086247][ T5727] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 373.096929][ T5748] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 373.107883][ T5727] usb 3-1: device descriptor read/8, error -71 [ 373.226243][ T5748] usb 2-1: device descriptor read/64, error -71 [ 373.346281][ T5727] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 373.366729][ T5727] usb 3-1: device descriptor read/8, error -71 [ 373.476191][ T5748] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 373.477425][ T5727] usb usb3-port1: unable to enumerate USB device [ 373.606252][ T5748] usb 2-1: device descriptor read/64, error -71 [ 373.716660][ T5748] usb usb2-port1: attempt power cycle [ 374.056424][ T5748] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 374.078375][ T5748] usb 2-1: device descriptor read/8, error -71 [ 374.316271][T10643] loop9: detected capacity change from 0 to 7 [ 374.324834][ T5748] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 374.349161][ T5748] usb 2-1: device descriptor read/8, error -71 [ 374.351335][ T5606] Buffer I/O error on dev loop9, logical block 0, async page read [ 374.352133][ T5606] Buffer I/O error on dev loop9, logical block 0, async page read [ 374.352674][ T5606] Buffer I/O error on dev loop9, logical block 0, async page read [ 374.353197][ T5606] Buffer I/O error on dev loop9, logical block 0, async page read [ 374.353787][ T5606] Buffer I/O error on dev loop9, logical block 0, async page read [ 374.407512][ T5606] Flush: task=udevd[5606] dev=loop9 state=2 [ 374.459463][ T5748] usb usb2-port1: unable to enumerate USB device [ 374.512382][ T5606] Teardown: task=udevd[5606] dev=loop9 state=2 [ 374.513656][T10645] FAULT_INJECTION: forcing a failure. [ 374.513656][T10645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.513687][T10645] CPU: 0 UID: 0 PID: 10645 Comm: syz.3.1663 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 374.513711][T10645] Tainted: [L]=SOFTLOCKUP [ 374.513718][T10645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 374.513727][T10645] Call Trace: [ 374.513734][T10645] [ 374.513742][T10645] dump_stack_lvl+0xe8/0x150 [ 374.513770][T10645] should_fail_ex+0x467/0x600 [ 374.513797][T10645] _copy_to_user+0x31/0xb0 [ 374.513817][T10645] binder_ioctl_write_read+0x8988/0xa5d0 [ 374.513847][T10645] ? is_bpf_text_address+0x26/0x2b0 [ 374.513898][T10645] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 374.513924][T10645] ? __pfx_autoremove_wake_function+0x10/0x10 [ 374.513951][T10645] ? stack_depot_save_flags+0x33/0x800 [ 374.513979][T10645] ? do_raw_spin_lock+0x12b/0x2f0 [ 374.514019][T10645] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 374.514038][T10645] ? lockdep_hardirqs_on+0x7a/0x110 [ 374.514056][T10645] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 374.514073][T10645] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 374.514098][T10645] ? reacquire_held_locks+0x117/0x1a0 [ 374.514118][T10645] ? rt_spin_lock+0x1e0/0x400 [ 374.514139][T10645] ? rt_spin_unlock+0x157/0x200 [ 374.514156][T10645] ? binder_get_thread+0x176/0x6d0 [ 374.514168][T10645] ? binder_ioctl+0x189/0x1b10 [ 374.514181][T10645] binder_ioctl+0x420/0x1b10 [ 374.514197][T10645] ? do_vfs_ioctl+0x1184/0x1550 [ 374.514211][T10645] ? __pfx_binder_ioctl+0x10/0x10 [ 374.514223][T10645] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 374.514242][T10645] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 374.514252][T10645] ? lockdep_hardirqs_on+0x7a/0x110 [ 374.514269][T10645] ? __fget_files+0x2a/0x420 [ 374.514287][T10645] ? __fget_files+0x3a8/0x420 [ 374.514304][T10645] ? __fget_files+0x2a/0x420 [ 374.514325][T10645] ? bpf_lsm_file_ioctl+0x9/0x20 [ 374.514353][T10645] ? __pfx_binder_ioctl+0x10/0x10 [ 374.514375][T10645] __se_sys_ioctl+0xff/0x170 [ 374.514400][T10645] do_syscall_64+0x17b/0x530 [ 374.514420][T10645] ? irqentry_exit+0x10f/0x8f0 [ 374.514435][T10645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.514446][T10645] ? clear_bhb_loop+0x40/0x90 [ 374.514458][T10645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.514468][T10645] RIP: 0033:0x7f12ec7fde59 [ 374.514479][T10645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.514488][T10645] RSP: 002b:00007f12eaa56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.514500][T10645] RAX: ffffffffffffffda RBX: 00007f12eca85fa0 RCX: 00007f12ec7fde59 [ 374.514507][T10645] RDX: 0000200000000500 RSI: 00000000c0306201 RDI: 0000000000000005 [ 374.514514][T10645] RBP: 00007f12eaa56090 R08: 0000000000000000 R09: 0000000000000000 [ 374.514520][T10645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.514526][T10645] R13: 00007f12eca86038 R14: 00007f12eca85fa0 R15: 00007ffde5e5b5c8 [ 374.514541][T10645] [ 374.523752][T10645] binder: 10644:10645 ioctl c0306201 200000000500 returned -14 [ 375.331844][ T5689] usb 1-1: USB disconnect, device number 59 [ 375.706206][ T5689] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 375.856308][ T5689] usb 1-1: Using ep0 maxpacket: 16 [ 375.862284][ T5689] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 375.862300][ T5689] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.862310][ T5689] usb 1-1: config 0 has no interface number 0 [ 375.864462][ T5689] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 375.864489][ T5689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.864507][ T5689] usb 1-1: Product: syz [ 375.864521][ T5689] usb 1-1: Manufacturer: syz [ 375.864534][ T5689] usb 1-1: SerialNumber: syz [ 375.874258][ T5689] usb 1-1: config 0 descriptor?? [ 375.944053][ T5689] uvcvideo 1-1:0.105: probe with driver uvcvideo failed with error -22 [ 376.127244][T10668] binder: BINDER_SET_CONTEXT_MGR already set [ 376.127254][T10668] binder: 10667:10668 ioctl 4018620d 200000000040 returned -16 [ 376.367674][ T5689] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 376.447921][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1672'. [ 376.540931][ T5689] usb 3-1: unable to get BOS descriptor or descriptor too short [ 376.541486][ T5689] usb 3-1: not running at top speed; connect to a high speed hub [ 376.542848][ T5689] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.542926][ T5689] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 144, changing to 4 [ 376.542953][ T5689] usb 3-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 376.542997][ T5689] usb 3-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 376.543035][ T5689] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 376.619655][ T5689] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 376.619724][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.619742][ T5689] usb 3-1: Product: syz [ 376.619754][ T5689] usb 3-1: Manufacturer: syz [ 376.619766][ T5689] usb 3-1: SerialNumber: syz [ 377.456602][ T4905] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 377.473483][ T4905] Bluetooth: hci3: unexpected event for opcode 0x0406 [ 377.826192][ T5696] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 377.977617][ T5696] usb 4-1: Using ep0 maxpacket: 8 [ 377.980709][ T5696] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 377.980731][ T5696] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 377.980769][ T5696] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 377.980790][ T5696] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 377.980814][ T5696] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 377.980854][ T5696] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 377.980872][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.086637][ T5696] usbtmc 4-1:16.0: bulk endpoints not found [ 378.403395][ T5696] usb 1-1: USB disconnect, device number 60 [ 378.455209][T10689] FAULT_INJECTION: forcing a failure. [ 378.455209][T10689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.455244][T10689] CPU: 0 UID: 0 PID: 10689 Comm: syz.0.1678 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 378.455270][T10689] Tainted: [L]=SOFTLOCKUP [ 378.455277][T10689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 378.455287][T10689] Call Trace: [ 378.455295][T10689] [ 378.455303][T10689] dump_stack_lvl+0xe8/0x150 [ 378.455332][T10689] should_fail_ex+0x467/0x600 [ 378.455362][T10689] _copy_to_user+0x31/0xb0 [ 378.455382][T10689] simple_read_from_buffer+0xe1/0x170 [ 378.455409][T10689] proc_fail_nth_read+0x1be/0x230 [ 378.455432][T10689] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 378.455456][T10689] ? rw_verify_area+0x250/0x4d0 [ 378.455480][T10689] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 378.455500][T10689] vfs_read+0x219/0xa90 [ 378.455529][T10689] ? __pfx_vfs_read+0x10/0x10 [ 378.455552][T10689] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 378.455572][T10689] ? lockdep_hardirqs_on+0x7a/0x110 [ 378.455590][T10689] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 378.455609][T10689] ? mutex_lock_nested+0x152/0x1d0 [ 378.455630][T10689] ? fdget_pos+0x252/0x320 [ 378.455658][T10689] ksys_read+0x156/0x270 [ 378.455691][T10689] ? __pfx_ksys_read+0x10/0x10 [ 378.455710][T10689] ? __pfx_v4l2_ioctl+0x10/0x10 [ 378.455751][T10689] do_syscall_64+0x17b/0x530 [ 378.455771][T10689] ? irqentry_exit+0x10f/0x8f0 [ 378.455788][T10689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.455808][T10689] ? clear_bhb_loop+0x40/0x90 [ 378.455830][T10689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.455848][T10689] RIP: 0033:0x7ff451c7e68e [ 378.455865][T10689] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 378.455880][T10689] RSP: 002b:00007ff44ff15fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 378.455900][T10689] RAX: ffffffffffffffda RBX: 00007ff44ff166c0 RCX: 00007ff451c7e68e [ 378.455914][T10689] RDX: 000000000000000f RSI: 00007ff44ff160a0 RDI: 0000000000000004 [ 378.455927][T10689] RBP: 00007ff44ff16090 R08: 0000000000000000 R09: 0000000000000000 [ 378.455939][T10689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.455951][T10689] R13: 00007ff451f46038 R14: 00007ff451f45fa0 R15: 00007ffd1956df48 [ 378.455981][T10689] [ 378.503138][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.517987][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.025717][T10697] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1681'. [ 379.025825][T10697] x_tables: ip_tables: udp match: only valid for protocol 17 [ 379.193744][ T5689] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 379.292561][ T5689] usb 3-1: USB disconnect, device number 73 [ 379.477945][ T5606] udevd[5606]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 380.450064][T10714] kvm: pic: non byte write [ 380.450218][T10714] kvm: pic: non byte write [ 380.450340][T10714] kvm: pic: non byte write [ 380.450458][T10714] kvm: pic: non byte write [ 380.450576][T10714] kvm: pic: non byte write [ 380.450840][T10714] kvm: pic: non byte write [ 380.450970][T10714] kvm: pic: non byte write [ 380.451125][T10714] kvm: pic: non byte write [ 380.451244][T10714] kvm: pic: non byte write [ 380.451364][T10714] kvm: pic: non byte write [ 380.635069][ T5727] usb 4-1: USB disconnect, device number 71 [ 381.109859][ T7021] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 381.266167][ T7021] usb 1-1: device descriptor read/64, error -71 [ 381.387814][ T6769] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 381.496281][ T4905] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 381.496331][ T4905] Bluetooth: hci3: Injecting HCI hardware error event [ 381.541310][ T7021] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 381.569582][ T6769] usb 2-1: unable to get BOS descriptor or descriptor too short [ 381.573801][ T6769] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 381.573839][ T6769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.573858][ T6769] usb 2-1: Product: syz [ 381.573868][ T6769] usb 2-1: Manufacturer: syz [ 381.573876][ T6769] usb 2-1: SerialNumber: syz [ 381.676912][ T7021] usb 1-1: device descriptor read/64, error -71 [ 381.786862][ T7021] usb usb1-port1: attempt power cycle [ 381.824194][ T6769] usb 2-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 381.824548][ T6769] usb 2-1: incorrect wMaxPacketSize 0x400 for BADD profile [ 381.891218][ T6769] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 381.903584][ T6769] usb 2-1: USB disconnect, device number 82 [ 381.970890][ T5606] udevd[5606]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.068397][T10744] Invalid argument reading file caps for ./file0 [ 382.136338][ T7021] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 382.157002][ T7021] usb 1-1: device descriptor read/8, error -71 [ 382.397392][ T7021] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 382.419246][ T7021] usb 1-1: device descriptor read/8, error -71 [ 382.529504][ T7021] usb usb1-port1: unable to enumerate USB device [ 382.546332][ T6769] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 382.696782][ T6769] usb 3-1: Using ep0 maxpacket: 8 [ 382.708820][ T6769] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 382.708847][ T6769] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 382.708899][ T6769] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 382.708910][ T6769] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 382.708922][ T6769] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 382.708944][ T6769] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 382.708955][ T6769] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.724431][ T6769] usbtmc 3-1:16.0: bulk endpoints not found [ 382.757120][ T5689] usb 4-1: new low-speed USB device number 72 using dummy_hcd [ 382.926199][ T5689] usb 4-1: Invalid ep0 maxpacket: 64 [ 382.945270][ T5594] Bluetooth: hci3: hardware error 0x00 [ 382.990080][ T5696] ------------[ cut here ]------------ [ 382.990095][ T5696] workqueue: cannot queue hci_conn_timeout on wq hci3 [ 382.990133][ T5696] WARNING: kernel/workqueue.c:2341 at __queue_work+0xdc3/0x1120, CPU#0: kworker/0:4/5696 [ 382.990164][ T5696] Modules linked in: [ 382.990184][ T5696] CPU: 0 UID: 0 PID: 5696 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 382.990209][ T5696] Tainted: [L]=SOFTLOCKUP [ 382.990216][ T5696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 382.990228][ T5696] Workqueue: events l2cap_chan_timeout [ 382.990253][ T5696] RIP: 0010:__queue_work+0xde0/0x1120 [ 382.990268][ T5696] Code: 81 c3 68 01 00 00 4c 8d 35 dd f4 45 0e 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 7a 7a a4 00 49 8b 77 18 4c 89 f7 48 89 da <67> 48 0f b9 3a 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff [ 382.990292][ T5696] RSP: 0018:ffffc900058df910 EFLAGS: 00010046 [ 382.990307][ T5696] RAX: 1ffff110076d615b RBX: ffff888037a7d968 RCX: ffff888021788000 [ 382.990322][ T5696] RDX: ffff888037a7d968 RSI: ffffffff8a440090 RDI: ffffffff8fd374e0 [ 382.990337][ T5696] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 382.990346][ T5696] R10: dffffc0000000000 R11: ffffed10076d6159 R12: dffffc0000000000 [ 382.990355][ T5696] R13: ffff888037a7d800 R14: ffffffff8fd374e0 R15: ffff88803b6b0ac0 [ 382.990366][ T5696] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 382.990377][ T5696] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.990386][ T5696] CR2: 00007f1779997dac CR3: 0000000031638000 CR4: 00000000003526f0 [ 382.990398][ T5696] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000086 [ 382.990408][ T5696] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 382.990418][ T5696] Call Trace: [ 382.990423][ T5696] [ 382.990431][ T5696] ? work_grab_pending+0x3d1/0x930 [ 382.990455][ T5696] ? rcu_is_watching+0x15/0xb0 [ 382.990476][ T5696] queue_delayed_work_on+0x11a/0x1e0 [ 382.990502][ T5696] l2cap_chan_del+0x286/0x600 [ 382.990528][ T5696] l2cap_chan_close+0x4d7/0x770 [ 382.990551][ T5696] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 382.990570][ T5696] ? __pfx_l2cap_chan_close+0x10/0x10 [ 382.990596][ T5696] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 382.990614][ T5696] ? l2cap_chan_timeout+0xf8/0x470 [ 382.990636][ T5696] l2cap_chan_timeout+0x21e/0x470 [ 382.990658][ T5696] ? process_one_work+0x7fd/0x1480 [ 382.990674][ T5696] process_one_work+0xaaf/0x1480 [ 382.990705][ T5696] ? __pfx_process_one_work+0x10/0x10 [ 382.990720][ T5696] ? do_raw_spin_lock+0x12b/0x2f0 [ 382.990748][ T5696] ? assign_work+0x3cf/0x5d0 [ 382.990769][ T5696] worker_thread+0xb05/0x10d0 [ 382.990796][ T5696] ? __kthread_parkme+0x71/0x1f0 [ 382.990824][ T5696] kthread+0x388/0x470 [ 382.990848][ T5696] ? __pfx_worker_thread+0x10/0x10 [ 382.990864][ T5696] ? __pfx_kthread+0x10/0x10 [ 382.990888][ T5696] ret_from_fork+0x514/0xb70 [ 382.990909][ T5696] ? __pfx_ret_from_fork+0x10/0x10 [ 382.990927][ T5696] ? __switch_to+0xc89/0x1420 [ 382.990946][ T5696] ? __pfx_kthread+0x10/0x10 [ 382.990964][ T5696] ret_from_fork_asm+0x1a/0x30 [ 382.990996][ T5696] [ 382.991005][ T5696] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 382.991017][ T5696] CPU: 0 UID: 0 PID: 5696 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 382.991037][ T5696] Tainted: [L]=SOFTLOCKUP [ 382.991042][ T5696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 382.991051][ T5696] Workqueue: events l2cap_chan_timeout [ 382.991074][ T5696] Call Trace: [ 382.991080][ T5696] [ 382.991086][ T5696] vpanic+0x56c/0xa60 [ 382.991101][ T5696] ? __pfx__printk+0x10/0x10 [ 382.991119][ T5696] ? __pfx_vpanic+0x10/0x10 [ 382.991132][ T5696] ? is_bpf_text_address+0x292/0x2b0 [ 382.991148][ T5696] ? is_bpf_text_address+0x26/0x2b0 [ 382.991171][ T5696] panic+0xc5/0xd0 [ 382.991186][ T5696] ? __pfx_panic+0x10/0x10 [ 382.991208][ T5696] ? ret_from_fork_asm+0x1a/0x30 [ 382.991234][ T5696] __warn+0x315/0x4c0 [ 382.991248][ T5696] ? __queue_work+0xdc3/0x1120 [ 382.991269][ T5696] ? __queue_work+0xdc3/0x1120 [ 382.991299][ T5696] __report_bug+0x276/0x570 [ 382.991318][ T5696] ? __queue_work+0xdc3/0x1120 [ 382.991340][ T5696] ? __pfx___report_bug+0x10/0x10 [ 382.991356][ T5696] ? __pfx_hci_conn_timeout+0x10/0x10 [ 382.991386][ T5696] ? do_raw_spin_lock+0x12b/0x2f0 [ 382.991417][ T5696] report_bug_entry+0x19a/0x290 [ 382.991433][ T5696] ? __queue_work+0xde0/0x1120 [ 382.991448][ T5696] ? __queue_work+0xde5/0x1120 [ 382.991463][ T5696] handle_bug+0xce/0x200 [ 382.991481][ T5696] exc_invalid_op+0x1a/0x50 [ 382.991498][ T5696] asm_exc_invalid_op+0x1a/0x20 [ 382.991513][ T5696] RIP: 0010:__queue_work+0xde0/0x1120 [ 382.991530][ T5696] Code: 81 c3 68 01 00 00 4c 8d 35 dd f4 45 0e 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 7a 7a a4 00 49 8b 77 18 4c 89 f7 48 89 da <67> 48 0f b9 3a 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff [ 382.991542][ T5696] RSP: 0018:ffffc900058df910 EFLAGS: 00010046 [ 382.991555][ T5696] RAX: 1ffff110076d615b RBX: ffff888037a7d968 RCX: ffff888021788000 [ 382.991567][ T5696] RDX: ffff888037a7d968 RSI: ffffffff8a440090 RDI: ffffffff8fd374e0 [ 382.991579][ T5696] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 382.991588][ T5696] R10: dffffc0000000000 R11: ffffed10076d6159 R12: dffffc0000000000 [ 382.991600][ T5696] R13: ffff888037a7d800 R14: ffffffff8fd374e0 R15: ffff88803b6b0ac0 [ 382.991619][ T5696] ? __pfx_hci_conn_timeout+0x10/0x10 [ 382.991645][ T5696] ? work_grab_pending+0x3d1/0x930 [ 382.991670][ T5696] ? rcu_is_watching+0x15/0xb0 [ 382.991694][ T5696] queue_delayed_work_on+0x11a/0x1e0 [ 382.991718][ T5696] l2cap_chan_del+0x286/0x600 [ 382.991748][ T5696] l2cap_chan_close+0x4d7/0x770 [ 382.991775][ T5696] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 382.991794][ T5696] ? __pfx_l2cap_chan_close+0x10/0x10 [ 382.991817][ T5696] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 382.991835][ T5696] ? l2cap_chan_timeout+0xf8/0x470 [ 382.991857][ T5696] l2cap_chan_timeout+0x21e/0x470 [ 382.991876][ T5696] ? process_one_work+0x7fd/0x1480 [ 382.991891][ T5696] process_one_work+0xaaf/0x1480 [ 382.991920][ T5696] ? __pfx_process_one_work+0x10/0x10 [ 382.991933][ T5696] ? do_raw_spin_lock+0x12b/0x2f0 [ 382.991956][ T5696] ? assign_work+0x3cf/0x5d0 [ 382.991974][ T5696] worker_thread+0xb05/0x10d0 [ 382.991997][ T5696] ? __kthread_parkme+0x71/0x1f0 [ 382.992023][ T5696] kthread+0x388/0x470 [ 382.992042][ T5696] ? __pfx_worker_thread+0x10/0x10 [ 382.992057][ T5696] ? __pfx_kthread+0x10/0x10 [ 382.992077][ T5696] ret_from_fork+0x514/0xb70 [ 382.992101][ T5696] ? __pfx_ret_from_fork+0x10/0x10 [ 382.992122][ T5696] ? __switch_to+0xc89/0x1420 [ 382.992144][ T5696] ? __pfx_kthread+0x10/0x10 [ 382.992167][ T5696] ret_from_fork_asm+0x1a/0x30 [ 382.992201][ T5696] [ 382.993160][ T5696] Kernel Offset: disabled