last executing test programs: 14.122509065s ago: executing program 2 (id=432): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r1, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x0, 0x45}, 0x90) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES64=r1], 0x0) syz_usb_ep_write(r2, 0x8d, 0x0, 0x0) 10.957261742s ago: executing program 2 (id=442): r0 = socket(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f08", 0x15) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) sendmsg$sock(r2, &(0x7f0000000540)={&(0x7f0000000040)=@generic={0x1, "af012cfec63a3bf6159c8bb89bfcf04303b4eaccb9944695283648a8e652572f8c3e3fd56f892a9de4e8149cc7272cffc651c34a7f603e8da6a229c5431f3a88669ac5f6a52974089a216e906d3f8d8f2ba80be209910055a0985141628f9bfffadbe2fdc1d3609d46dae4e3d98c5f4442101c110adbda314c91a5ccc9fc"}, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)="57e11003896dc9c6408c2c5159bc67906d41b6ea7c", 0x15}, {&(0x7f0000000100)="c6dbe19575a94a04e3c47625177ae5f559813dc3bb7a07d74d5fb6c5638e08f445402e089f18ac18eea4ea8349bcc3bb8286704a7f71fee4bd31c52072cca2f8e524f76961faa877f45d2ea469fc91cb73160f97a7c3c7af3b370f55222317b7df991d52b5355828c62c29d98da01e9341ce4a4536920bcdee5baaf6cff58ae232a4", 0x82}, {&(0x7f00000001c0)="5c1a93cc90e1a688bc247374ee670c9f09be3acd5ba8e7c3cc9fffc5567c7513fcd5c3ee22ca88e206ecb893dae02617e8c8ffc28f2e052c0176a9ad49c5592804191bc6618c0e50ddaa22a6ff0001cd20365d821ef0cc3a220bef6e76646b71385f0a1fb5652ad06a38ce3549a2107af5e92f4e5edfa5007092d4f8cc1b9d05eaa674a1e36953bdba46baa6873ce5aaefdef5bd7425cd78c376daf86a10422cb7629990b6c741fd7fe5f841459816cf30090a68874a6c02878a2daed4d67fa81d268f4a9341c4d945907d8f26b839", 0xcf}, {&(0x7f00000002c0)="ce3e4c65eea74311f3d2774b7721e790a9e4502c0ac35ea0d9ed50c7706a9ec2edd899eaf44293fab5644f9a86fb64049e5d13bb869ce971c8dc0a2b41f10098dc66f28efe8c45c639e1fda38b5553847ebc8c12e149e768b5d227b0cec4bbc95352fd8350498b4d551569e4e4d61914c6c5fccb241ac88c2f44aa3a095ddceee6d55aa7213786255209f857308d0b600ccc0b488db02336a7b7", 0x9a}, {&(0x7f0000000380)="31c3fbaa8980f3f2d17393fd1155842b7715bbdfd578d2e83f21df2341385aabc8adf5887e33e3bff3550b881d36223cdf86d1dcb691d4c31353a75ab485ca54843dd374a36c90f88d8e24b1c23e37f57a5e4561eb788ad4d9cb4dcbb9da26303b0fae", 0x63}], 0x5, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x2000000}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xffffff01}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x90}, 0x1080) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000400000/0xc00000)=nil) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000580)=0x3, 0x2) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000400007012bbd700000000000017c00000400c2801400018006000600843b000006001700843b0000040002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_usb_disconnect(r1) 8.172188037s ago: executing program 2 (id=458): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r1, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick=0xdd, {0x4, 0xfc}, {}, @connect={{0x0, 0x1}}}, {0x0, 0x0, 0x0, 0x0, @time={0x80f, 0x94}, {0x0, 0x4}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x80}, {}, {}, @connect={{0x80, 0x6}, {0x3, 0x72}}}], 0x70) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$video(&(0x7f0000000300), 0x75aeaeb7, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x80108907, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000200)={0xa, @win={{0x3, 0xff, 0x9, 0x6}, 0x8, 0x20000, 0x0, 0x80000002, 0x0, 0x9}}) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000000)={0x6, 0x6, 0x8, 0x7fffffffffffffff}) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f2, 0x1421, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0x2, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = syz_open_dev$video(&(0x7f00000000c0), 0x8, 0x8000) ioctl$VIDIOC_G_SELECTION(r7, 0xc040565e, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x12, 0x3, 0x7, 0x5}}) r8 = syz_usb_connect$cdc_ecm(0x6, 0xda, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x1, 0x1, 0x2, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0xe, {{0xa, 0x24, 0x6, 0x0, 0x0, "aec03a480e"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0xdad0, 0x800, 0xb1}, [@mdlm_detail={0x7f, 0x24, 0x13, 0x9, "8b425c0170df9aec88b94f869e192337e78700cd0dce0d78e89f18933482758880031a817ff7d4c5b87f143e40631fc2fa093b0cfc841c4de916b089b1b11dbf3d06a0711e77d36d64c48148156e98192ff884c7ef9d5ca9bddf0d6b6f7f6f6f42ac364e7a0134db02efa6775ad7dec28c48929ad3231db7649627"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x81}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x79, 0x1c, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x3, 0x96}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xd, 0x9, 0x6b, 0x40, 0x7}, 0x61, &(0x7f00000001c0)={0x5, 0xf, 0x61, 0x3, [@generic={0x52, 0x10, 0xb, "a4395f3a035de796b0462364f3ede0f6938db112e2dc5e7cf3db10b22679ea1d2ddade606b0aaae708d61de9574ea65b23ff3b4e5ab3bc0311788ac8db5eb344f35abf77498aa782adf8976129f25e"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x1, 0x7}]}, 0x5, [{0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="36037a05630404fa13bf0fc0e866f3484bf5ed974b58c75a2ebc01a32afad98b8ddaa5b11e7f9ec3bb9d7afeb2323a8d1a8a21e0bf0e"]}, {0xc5, &(0x7f0000000240)=@string={0xc5, 0x3, "cd12b1510d565514ce89ee582c62adf612c005eac635436c8eb538be88765ea75f73cac1cd46053342e3c17969044ef7b33cda97ad432343dd522855a144f43f87ab3d4f94fa6f13a26ad89230fae956afc4dd2a35f124cca74d8307a7a6f3160a0f7d02d67c74b78515215c323909692f333fb6f648ad7b422cc66dc4fc76c8c57ef7fbbad0cddf54f7b3291d4604c511af925c99911714d9048b75fd1bed041298f0875d2cba9fed0050d83648274626e9120fee915834657383f3c341fa46175788"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xf4f4}}, {0x9, &(0x7f0000000380)=@string={0x9, 0x3, "2774ea01b1edea"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3001}}]}) syz_usb_control_io$cdc_ecm(r8, &(0x7f00000005c0)={0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x1c, &(0x7f0000000600)={0x0, 0x9, 0x83, "df13b0a2e69daa261854e3af03e122e53382b9125d965628d591ea916156b45fd84c3b53351edfd78d4a4e05fccf87ebc1178665cf21beed212709ae87b9160189e66e22d5c67a9bfccc90afde758297ea3dff489ec0d5195b565083e631cb70282aee61d91acb871d2928859c6dc7f18e16826f806c43c9e830cdba586c8c900cf081"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x7e}}) unshare(0x2a020480) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@local=@item_012={0x1, 0x2, 0x0, "b9"}, @main=@item_012={0x2, 0x0, 0xa, "4df8"}, @main=@item_012={0x2, 0x0, 0xc, 'P*'}]}}, 0x0}, 0x0) 7.961450689s ago: executing program 3 (id=459): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000008000010d804dd000000000000010902"], 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40044103, &(0x7f0000000080)) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) socket(0xd, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r5 = socket$l2tp6(0xa, 0x2, 0x73) close(r5) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 5.997308303s ago: executing program 2 (id=470): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000400)={0x20, 0xe}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x9c}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x120, 0x4, [0xf00]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "f816"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x4a}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000740)={0x40, 0x19, 0x2, "b46a"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0xe0}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0xfc}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0xe}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000100)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.948688175s ago: executing program 3 (id=473): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa018101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000001180)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r3, 0x600000}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r3, 0xfb7, 0x6}, &(0x7f0000000040)=0x8) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$unix(r5, &(0x7f0000011800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f000000bd40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}], 0x20, 0x20040010}}], 0x1, 0x20004810) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000180)={'ipvlan0\x00', {0x2, 0x0, @multicast1}}) 5.07753096s ago: executing program 1 (id=479): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000100)=[@nested_amd_vmsave={0x183, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @wr_crn={0x67, 0x20, {0x3, 0x101}}, @wr_drn={0x68, 0x20, {0x1, 0x5}}, @nested_amd_stgi={0x17e, 0x10}, @wrmsr={0x65, 0x20, {0x8f1, 0x3}}, @out_dx={0x6a, 0x28, {0x43d4, 0x5, 0x7}}, @nested_amd_vmsave={0x183, 0x18, 0x3}], 0xe0}) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000080)=0x3) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) close(0x3) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000002e80)='enc=', 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') close(0x3) 4.931146763s ago: executing program 3 (id=480): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="4c0300002e000100000000000000000004001980380311803403cf802f034680f5ef56146c91147563276660e594de86923b901b9c31b512"], 0x34c}], 0x1, 0x0, 0x0, 0x84}, 0x40000) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000389000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mount$9p_fd(0x0, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8802, &(0x7f0000000600)=ANY=[@ANYBLOB="613b2592fd", @ANYBLOB=',wfdno', @ANYRESHEX]) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="f78d82a32232393fb500d058b4a5acb19e0ade8fff48f3be52163448412ba854da45c217cfdd780cffdfbd0f138ce87215b3d55d10b6df85fa6715379d3ea1e142e191cfeae0e6e4ba3a3993819d3077d33eb332656a45cfcbe7d1e2226efce25ea51502d7029b6d50846d997cb35c15a2e33e11a979ba8621d7fd3c2472d602cf102a6eba96e906d4bfd9d479e56b550b838d26fbded5235fb37ec0cbb418275e0c543322f4d06654199217045390fa3dd78b00824b5e2c4a80e273c5dc2eca877e022dcf869995a031f6e81aa136b8d4276854ae631b6b", 0xd8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000780), 0x0, 0x20008810}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 4.155535269s ago: executing program 1 (id=481): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x101, 0x2, 0x1, 0x4, 0x1001, 0x4, 0x4, 0xffff, 0x3, 0x104, 0xffffffff, 0x1001, 0x101, 0x800800, 0xa239, 0x7fffffff, 0xded9, 0xc7d5, 0x7, 0x40000003, 0x89, 0xcaa7, 0x0, 0x5ca3, 0xb, 0x3, 0x3c, 0xb, 0x6, 0xefcb, 0x8]}) (fail_nth: 16) 2.47755791s ago: executing program 1 (id=482): socket$kcm(0x29, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f00000000c0)="f76d3a4a71", 0x5, 0xfffffffffffffffc) syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a310000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xc0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000040)={@multicast2, @local, 0x0, "a27519555af54cb4bd9000cce6d443c1b794a95b76efccd50800", 0x7fff, 0xb8b, 0xfffffff4, 0x4}, 0x3c) 2.290179463s ago: executing program 2 (id=484): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @local, 0x6}, 0x32) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000140)=0x4, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peek(0x2, r1, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) 1.632681958s ago: executing program 3 (id=488): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="09000300010001", 0x7) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x40, 0xa000, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @broadcast}}}}) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0416"], 0x9) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="000202"], 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000002c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="3b000000010006", 0x7) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x400000000001, 0x1, 0x4c869, 0x1009, 0x2, 0x80000001, 0x48cb, 0xfffffffffffffff9, 0x820000df}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000600)={'syztnl1\x00', r1, 0x7, 0x7800, 0x0, 0x8, {{0x2d, 0x4, 0x3, 0x7, 0xb4, 0x65, 0x0, 0x7, 0x2f, 0x0, @loopback, @multicast2, {[@ssrr={0x89, 0x1f, 0xf5, [@multicast1, @dev={0xac, 0x14, 0x14, 0x23}, @empty, @multicast2, @multicast2, @local, @multicast2]}, @timestamp_addr={0x44, 0xc, 0x6a, 0x1, 0x2, [{@empty, 0x6}]}, @noop, @timestamp_prespec={0x44, 0x34, 0x4, 0x3, 0xd, [{@rand_addr=0x64010100, 0x4}, {@multicast2, 0x80000000}, {@local, 0x9}, {@multicast2, 0x74b}, {@remote, 0x7b}, {@multicast1, 0x2}]}, @rr={0x7, 0xb, 0xb0, [@remote, @multicast1]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x9, "78db5b663e2955"}, {0x2, 0x2}, {0x0, 0x8, "dcde647db9a2"}, {0x5, 0x2}]}, @ssrr={0x89, 0x17, 0xb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @multicast1, @local, @broadcast]}]}}}}}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000240)={0x1f, 0xffeb, 0x1}, 0x3) write(r5, &(0x7f0000000100)="23000000010078", 0x7) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) lseek(r7, 0x8, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 1.51524423s ago: executing program 3 (id=489): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000000000001410f0000000017"], 0x34}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="540100001400010100000000000000000a0000000d019d8083185fbf349c88a4462c90c6ddd24abde07dfd1d8bd6a51a798706083682ad90d1c5f272116b8df4c2219622539109d1c2c14af7350d7207d9b20305b246cf2610bc697d304a61622859770147f044b983cfd7042898bc25b5265c9e649ac7241c733a4c20306b2de22e738e87ef08009700040000000800b6009d78127c631c40138bf06cb302eaee50b5cb6297302ef28c4e27957c56748428e2bdcd6a3ab0f653c15cc72546804b31df68934dfe9592dd345ad101bace0561fb415248349f1b90e1c87aae4c84efe6a840735915eed1b5ac8c", @ANYRES32=0x0, @ANYBLOB="2a3c010e014f2108515c438564e6d8c09c394cf6eef5f8350686ada0bd51f7fc62c6ec670054004a4d44e7398ccff376939d6139a1270b4e498f654872293e32f1bd991c40d19a632875a478dfdf13c939b13cbde50ad7da18beb64a5f2a64a433080a37387ef952b10b9df2b519dd2382857ea479fb5ab904c76e7420752ed98fc621820c2fcba8dd5d00000000e76e72bd6728efed8a2d542584e1f99904c576b8c2e484baab7390fa091eaf53e392b4f44e34d8db5fcebc21879fa56b"], 0x154}}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2) r4 = memfd_create(&(0x7f00000006c0)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90\x90\x1b\xf1\xdc\x7f\b\x19\xb0\x00\xfe,i:\xc8\xf16\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xf4\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x18\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x4) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000003c0)={r4, 0x0, 0x1000, 0x8000}) r5 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000400007012bbd7000fedbdf25017c0000135cf9b3b705b10400c28004000800"], 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_pidfd_open(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffd, 0xdddd0000, 0x4, 0xffffffffffffffff, 0x15}) ioctl$FS_IOC_GETVERSION(r8, 0xc040ff0b, &(0x7f0000000180)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20090000000a03000000000000000000010008000900010073797a30000000006c000000090a010400000083bf4cb40001000000c3270a4000000000090002000045cebdb412087a320000000900010073797a3000000000080005400000003d30a436800b617267657400002000028005000300c400000008000240000000000a000100418cab92cc105d6fcb7999f58773fce9e1f3f83b9faf6d0000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x44890}, 0x0) ftruncate(r9, 0x8000000000000001) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x19c}, 0x1, 0x0, 0x0, 0x20000000}, 0xd800) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="07f026bd7000fedbdf252b0000000c000500000000000000000008000200", @ANYRES32=r12, @ANYBLOB="9f61b16505da0c1bb74ebbd866efbc193fe12f7af00d35a7eb78b680e1583901815b48d3e7c41f98a7e7d339705f7985f8349e4990bb349178da627eee0c9cdd95d7413f5361e2bf2e908ad6399a287a20e1d2cabda2b85aacfee93d28a839a8fd8c61700ef4ef94be13782c3a1ed812132b13be694dcbfd98a99ff91d2bc3a611f372"], 0x28}, 0x1, 0x0, 0x0, 0xc0000}, 0x8000) 1.442160533s ago: executing program 0 (id=490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000005980), 0x2, 0x0) pwritev(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="a1", 0x1}], 0x1, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r1, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) write$tun(r0, &(0x7f0000000300)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x14, 0xffff}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x26, 0x4, 0x2, 0x10, 0x2, 0x68, 0xff, 0x7, 0x2f, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0xd6, 0x3, 0xa, [{@rand_addr=0x64010100, 0x7}, {@empty, 0x1}]}, @generic={0x80, 0xf, "1025c07c16c61c92654dbef6c9"}, @rr={0x7, 0x13, 0xcd, [@broadcast, @loopback, @rand_addr=0x4, @broadcast]}, @end, @cipso={0x86, 0x47, 0xffffffffffffffff, [{0x7, 0xa, "4028b15bc512b56f"}, {0x5, 0x11, "efcacc941696c2dbf6141e9f4b8481"}, {0x7, 0x4, 'Y='}, {0x7, 0x5, "963c17"}, {0x7, 0xb, "1a44df30cca281c4b5"}, {0x2, 0x12, "fff0115684a3d3c94426a121367e83e8"}]}, @ssrr={0x89, 0x3, 0xdb}]}}}}}, 0xc2) 1.25276924s ago: executing program 0 (id=491): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x41) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000280)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f00000001c0)={&(0x7f0000000780)={{@local, 0x4}, {@my=0x1, 0x5}, 0x400, "982cbf5250a16070f462a33e81487dc2c89a71670d229a4958c91e934bf250b89ac9eb14f62abbceaa2758e59adbb3713426bfa62100d3cfb9fc3e2a1115a1c4c3e1fcb0811f30fe8a04c5a366bac1fe2ba60d3dc986fabef91bea03b79aa38665585ff12f61ddc9e602bb8e451e172e317ad7fa1308662d371cf74cd9d62fb3173f6ded9926ef88aa62e0af52fdc97cf474500c4364bd747d83e242c4de11c30f7f8507b60dac9ffa855914a4f010a793e5a463ca1431db2098d45f83805250f07edaca08852a27ab7df82a0c9165b5347c7f0d70473a6faa22a2c151583ed7d6b204c3a8fca9434b6c537f45511e1646cf34fc9af714f395b3ee99c950afd1f687d67a71a01a83a8e8d585b5a6b8f34ceb8a4253596f47ca4a4ecd8d194ef11d3592e389de788da42dde388f36c4e02e422851971f6d4c5673d986c04fab8e32b937594bc35b281cc0cdffd1876f5848a9a4a36335e584495e6a7be7c09fec288447e204c2e2e87717d2b425fc93d23459384ae3b1242050e044b1c2cd303dc6c59facc0ff3c66a44c0fbb95dbf237870ac88764be9d3491e5e46402f099b7cdcf9836670875ed0fdf96bbd3350e82da2e5ae5a1f8345e98bf3edafa8db44ee7aa0372eaebf9635a467c4570c2a779fcea3c543760329bb41a7c72f3dca444c2897bb7dda830b9fdd934483d90d7463f83185ee689f89b4960508f8130eb6cfa7e2ec8b7cc518312005d7825258801c46b5245ec6795248813b3bfac6e04039081da5a9c9a80637866f78039e7fde0b0362a09f827e98602028a0159a00f6a1e8c73c3ab00b73b3b0895a5bcb5aa5c4b6b0d9668ffdb9f3b11f2b213daf1088508fbf545c3a5d9e6ec9debc4648268879aec54059e0b3bb296ab1ea775b42d9b206e2f759e80ce47a9c5de8d753f6463856cc0ad94cff563e27621d137a0b61983bb49a795bc283956894b1ec4efc55dda0c62bc61c76f09fae24e5676bb73db392089477ec21b61534d84f912bbe5c8bea4167a5018317f5292561c9f76bfb969d7d67b26e9ddfe95cace6fbc5898b91396bf1c9a1cae3ce01cf8264f53e7c5c58bce6b9328f320a274f47f92d87f529ee2f9dce9a7711be65fe0f8787578809e365bca178f40a1813ebf5011233880108f4aa2d70a2a861a2849d878bed392b5fad306a26b35f25681cf5277b6573a53890dbabff34dee29a15ff56c86a0e422e67e36838384871197a759cccd3df30f4a4f4fb41a702334b92a0512569f9e197d75337e2baf6990ce3a556c56e26fc471054fe2ebd641212f86263804721e9bdeb88308bdecb531e247a8408fe85fbd261e7f8c190587a4d2710bbeb01749a5bd10249f4a3f87dcaf074ae948f0cd1483033b6b9f13fba50510522a4f81ab686b6515b7b7bd7d8f0e28320fd7fdc982f13c95195b7ac3e2f9ccbe097325"}, 0x418, 0x2}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000040)={r0, 0x51, {0x0, 0x0, 0x0, 0x5, 0xfc6, 0x0, 0x3, 0xc, 0x1, "b70e357c72c1bfa23f93157ebaae83b245fcb6418c959c6c41ef7cca8e337e1905a5734641e5a521a213e9964004fb8d2c0ee98d6d2a2ed76ea33546c4250b46", "8d47f0a8d17527ac891fae027a2ac0eb46b45d6d70ffcf5fd65a015033d0f95daefd2964b37386b847361b9e40c2dc758ad34dce2d3767d236bf20b4636a855f", "86335b20d98f426b4f38dc642fd921ff1f41ce8eb9c631a669de55c9dcf069b5", [0x8cb1, 0x6]}}) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1.140778158s ago: executing program 1 (id=492): setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0x1}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x6, @remote, 0xe9a}}, 0xb03c, 0x7}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.041576421s ago: executing program 0 (id=493): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4c, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x40, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x6, 0x6, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe794, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x77359400}, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012"], 0x26}}, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="28a0b100", @ANYRES16=r4, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 925.158241ms ago: executing program 1 (id=494): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000019c0)={&(0x7f00000015c0)={0x1e, 0x4e21, @broadcast}, 0x10, 0x0}, 0x4000014) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000002540)={0x73622a85, 0x1114, 0x2}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) 869.978767ms ago: executing program 0 (id=495): r0 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x1a1880) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r0, &(0x7f0000002080)={0x18, 0x0, r1, {0x7}}, 0x18) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) fsetxattr$security_capability(r0, &(0x7f00000020c0), &(0x7f0000002100)=@v1={0x1000000, [{0x5, 0x10}]}, 0xc, 0x2) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r1, {0x4, 0x4, 0x32c, 0x269223fd}}, 0x20) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000002180)=0x4) fgetxattr(r0, &(0x7f00000021c0)=@random={'osx.', 'security.capability\x00'}, &(0x7f0000002200)=""/26, 0x1a) write$FUSE_IOCTL(r0, &(0x7f0000002240)={0x20, 0xfffffffffffffff5, r1, {0x9, 0x4, 0x4, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000022c0)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000002340)={0x1, 0x10, 0xfa00, {&(0x7f0000002280), r2}}, 0x18) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000002380)={0x2, [0x100000000, 0x10001]}) close(r3) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000023c0)=0xb, 0x8) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000002400)) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000002800)={0x0, {0x8000, 0x101000}}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$inet(r4, &(0x7f0000002980)={&(0x7f0000002840)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000002940)=[{&(0x7f0000002880)="5ce5f6cb65fd6d7ec32095140ec87fe8d2213b59714961e34fa16bd1c8126fdee9e78bd5575430471309b7b715d82e5d6d8a5449b6e44a513795b45e93c903f0d326cf2d3c254299908955fbce1602b8c9fc5e82e89bee4f116fe536256340cfd03729dd6c3b4e88a0bd7601ea85456b98901463938c31ae818b0c640952a11aa4fafd7080d65dcfe177074485fe9d15ccdf23813ba304c6a3ad0208b92c0469faa7b089549b5c5d9e0ebb0ae9692d588ab56e", 0xb3}], 0x1}, 0x4000) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f00000029c0)={{0x3, @name="0760b1aabcc517db8fb22a582234d1d609d06b705c1aa1c094bed4fe6c4e7b19"}, 0x8, 0x8, 0x4bda}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002a00), 0x2, 0x0) write$FUSE_WRITE(r5, &(0x7f0000002a40)={0x18, 0x0, r1, {0x6}}, 0x18) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000002a80)={'gre0\x00', {0x2, 0x4e24, @private=0xa010101}}) syz_genetlink_get_family_id$nl802154(&(0x7f0000002ac0), 0xffffffffffffffff) r6 = dup(r5) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000002b00)=0x3, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000002b40), &(0x7f0000002b80)=0x14) r7 = syz_open_dev$mouse(&(0x7f0000002bc0), 0x4, 0x8800) ioctl$BTRFS_IOC_BALANCE(r7, 0x5000940c, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) 729.64331ms ago: executing program 1 (id=496): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r2, 0x60}], 0x1, 0x0, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r1, 0xffffffffffffffff, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 596.906225ms ago: executing program 0 (id=497): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="09000300010001", 0x7) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x40, 0xa000, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @broadcast}}}}) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0416"], 0x9) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="000202"], 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000002c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="3b000000010006", 0x7) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x400000000001, 0x1, 0x4c869, 0x1009, 0x2, 0x80000001, 0x48cb, 0xfffffffffffffff9, 0x820000df}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000600)={'syztnl1\x00', r1, 0x7, 0x7800, 0x0, 0x8, {{0x2d, 0x4, 0x3, 0x7, 0xb4, 0x65, 0x0, 0x7, 0x2f, 0x0, @loopback, @multicast2, {[@ssrr={0x89, 0x1f, 0xf5, [@multicast1, @dev={0xac, 0x14, 0x14, 0x23}, @empty, @multicast2, @multicast2, @local, @multicast2]}, @timestamp_addr={0x44, 0xc, 0x6a, 0x1, 0x2, [{@empty, 0x6}]}, @noop, @timestamp_prespec={0x44, 0x34, 0x4, 0x3, 0xd, [{@rand_addr=0x64010100, 0x4}, {@multicast2, 0x80000000}, {@local, 0x9}, {@multicast2, 0x74b}, {@remote, 0x7b}, {@multicast1, 0x2}]}, @rr={0x7, 0xb, 0xb0, [@remote, @multicast1]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0x9, "78db5b663e2955"}, {0x2, 0x2}, {0x0, 0x8, "dcde647db9a2"}, {0x5, 0x2}]}, @ssrr={0x89, 0x17, 0xb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @multicast1, @local, @broadcast]}]}}}}}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000240)={0x1f, 0xffeb, 0x1}, 0x3) write(r5, &(0x7f0000000100)="23000000010078", 0x7) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) lseek(r7, 0x8, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 401.74625ms ago: executing program 0 (id=498): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x100bffa, 0x6}) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 360.263833ms ago: executing program 2 (id=499): setresgid(0xee00, 0xee01, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="3ef9601b9f665d2b03420c29c97f510ceab1a1fb4588d76fd5f03ccb9a6b847c3d36faf3d96f7ccf5ef3fe82d4c8b11c5280bfbd72034cbb255bd505c567137fdce815848943cfaabfd0b308ffa1c32826345b28669fe43d6659921256a48bd7bd7e20c678fb596d8801ee252f0518f4b9b36051cb3c70f57c474faed76e9cbd482ab20a57be5adcc559d28d7993b74d", @ANYBLOB="050500000000fddbdf25010000001400070000000000000000000000ffffe0000001050002000a"], 0x30}}, 0x10) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0xe95b787bbbb12e9) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @broadcast}, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x13, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000) mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='exofs\x00', 0x4000, &(0x7f0000000140)='grpquota') syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) 0s ago: executing program 3 (id=500): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/37, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x40, 0x0, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) kernel console output (not intermixed with test programs): 732531][ T5860] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 138.745954][ T5860] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 138.759593][ T5860] usb 4-1: config 0 has no interface number 0 [ 138.777798][ T5860] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 138.789964][ T5860] usb 4-1: config 0 has no interface number 0 [ 138.799901][ T5860] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 138.808738][ T5860] usb 4-1: config 0 has no interface number 0 [ 138.817382][ T5860] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 138.831153][ T5860] usb 4-1: config 0 has no interface number 0 [ 138.842224][ T5860] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 138.851513][ T5860] usb 4-1: config 0 has no interface number 0 [ 138.860364][ T5860] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 138.869445][ T5860] usb 4-1: config 0 has no interface number 0 [ 138.879882][ T5860] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 138.888755][ T5860] usb 4-1: config 0 has no interface number 0 [ 138.899147][ T5860] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 138.907606][ T5860] usb 4-1: config 0 has no interface number 0 [ 138.917248][ T5860] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 138.927702][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.937665][ T5860] usb 4-1: Product: syz [ 138.941884][ T5860] usb 4-1: Manufacturer: syz [ 138.946985][ T5860] usb 4-1: SerialNumber: syz [ 138.955299][ T5860] usb 4-1: config 0 descriptor?? [ 138.963163][ T5860] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 139.026272][ T5872] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 139.033983][ T5880] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 139.166671][ T5860] etas_es58x 4-1:0.2: could not parse product info: '424242424242' [ 139.196914][ T5872] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 139.210777][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.230872][ T5872] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 139.239123][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.252911][ T5872] usb 2-1: can't read configurations, error -61 [ 139.263014][ T5880] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 139.272416][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 139.280857][ T5880] usb 3-1: Product: syz [ 139.285330][ T5880] usb 3-1: Manufacturer: syz [ 139.290026][ T5880] usb 3-1: SerialNumber: syz [ 139.298490][ T5880] usb 3-1: config 0 descriptor?? [ 139.317095][ T5880] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 139.336658][ T5880] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 139.348804][ T5880] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 139.385100][ T5872] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 139.520375][ T10] usb 3-1: USB disconnect, device number 29 [ 139.555673][ T5872] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 139.569447][ T5872] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 139.582914][ T5872] usb 2-1: can't read configurations, error -61 [ 139.601149][ T5872] usb usb2-port1: attempt power cycle [ 139.945024][ T5872] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 139.955790][ T5489] etas_es58x 4-1:0.2 can1: bit-timing not yet defined [ 139.978049][ T5872] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 139.989944][ T5872] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 139.998060][ T5872] usb 2-1: can't read configurations, error -61 [ 140.102223][ C0] etas_es58x 4-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0001. [ 140.113414][ C0] etas_es58x 4-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 140.121401][ C0] etas_es58x 4-1:0.2: es58x_split_urb() returned error -EBADMSG [ 140.129155][ C0] etas_es58x 4-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0A00. [ 140.140095][ C0] etas_es58x 4-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 140.148061][ C0] etas_es58x 4-1:0.2: es58x_split_urb() returned error -EBADMSG [ 140.155780][ C0] etas_es58x 4-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0xBA00. [ 140.166718][ C0] etas_es58x 4-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 140.174682][ C0] etas_es58x 4-1:0.2: es58x_split_urb() returned error -EBADMSG [ 140.182407][ C0] etas_es58x 4-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x002C. [ 140.193351][ C0] etas_es58x 4-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 140.201317][ C0] etas_es58x 4-1:0.2: es58x_split_urb() returned error -EBADMSG [ 140.209041][ C0] etas_es58x 4-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0020. [ 140.219978][ C0] etas_es58x 4-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 140.227942][ C0] etas_es58x 4-1:0.2: es58x_split_urb() returned error -EBADMSG [ 140.237049][ C0] etas_es58x 4-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x1A40. [ 140.248020][ C0] etas_es58x 4-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 140.256014][ C0] etas_es58x 4-1:0.2: es58x_split_urb() returned error -EBADMSG [ 140.263802][ C0] etas_es58x 4-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x7352. [ 140.274762][ C0] etas_es58x 4-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 140.282825][ C0] etas_es58x 4-1:0.2: es58x_split_urb() returned error -EBADMSG [ 140.291612][ C0] etas_es58x 4-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x2020. [ 140.302571][ C0] etas_es58x 4-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 140.310540][ C0] etas_es58x 4-1:0.2: es58x_split_urb() returned error -EBADMSG [ 140.321309][ T5872] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 140.349195][ T5872] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 140.359300][ T5872] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 140.373667][ T5872] usb 2-1: can't read configurations, error -61 [ 140.402274][ T5872] usb usb2-port1: unable to enumerate USB device [ 140.481650][ T6830] IPVS: nq: FWM 3 0x00000003 - no destination available [ 140.489774][ T91] IPVS: starting estimator thread 0... [ 140.495537][ C0] IPVS: nq: FWM 3 0x00000003 - no destination available [ 140.585302][ T6831] IPVS: using max 30 ests per chain, 72000 per kthread [ 140.797386][ T5880] usb 1-1: USB disconnect, device number 19 [ 140.826219][ T5872] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 140.984999][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 140.994617][ T5872] usb 3-1: config 6 has an invalid interface descriptor of length 2, skipping [ 141.004035][ T5489] etas_es58x 4-1:0.2: es58x_free_urbs: Timeout, some TX urbs still remain [ 141.015625][ T5872] usb 3-1: config 6 interface 0 altsetting 6 endpoint 0x5 has an invalid bInterval 179, changing to 11 [ 141.027189][ T5872] usb 3-1: config 6 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 141.040321][ T5872] usb 3-1: config 6 interface 0 has no altsetting 0 [ 141.040995][ T5489] etas_es58x 4-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL [ 141.049840][ T5872] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=20.3d [ 141.322262][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.335865][ T5872] usb 3-1: Product: syz [ 141.340062][ T5872] usb 3-1: Manufacturer: syz [ 141.344663][ T5872] usb 3-1: SerialNumber: syz [ 141.669014][ C0] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 141.669247][ T5880] usb 4-1: USB disconnect, device number 29 [ 141.678261][ C0] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 141.693716][ C0] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 141.702944][ C0] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 141.712151][ C0] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 141.724130][ T5880] etas_es58x 4-1:0.2: Disconnecting syz syz [ 142.002449][ T5872] snd-usb-audio 3-1:6.0: probe with driver snd-usb-audio failed with error -22 [ 142.064406][ T5872] usb 3-1: USB disconnect, device number 30 [ 142.092881][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:6.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.219276][ T6853] fuse: root generation should be zero [ 142.364872][ T5880] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 142.524906][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 142.547960][ T5880] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 142.577765][ T5880] usb 4-1: config 0 has no interface number 0 [ 142.583919][ T5880] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 142.624863][ T5880] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 142.633958][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.654532][ T5880] usb 4-1: Product: syz [ 142.658809][ T5880] usb 4-1: Manufacturer: syz [ 142.663489][ T5880] usb 4-1: SerialNumber: syz [ 142.678443][ T5880] usb 4-1: config 0 descriptor?? [ 142.684256][ T6847] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 142.774906][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 142.907985][ T6847] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 142.960248][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 142.975384][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.002490][ T9] usb 3-1: Product: syz [ 143.013081][ T9] usb 3-1: Manufacturer: syz [ 143.017980][ T9] usb 3-1: SerialNumber: syz [ 143.122174][ T5880] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 143.155274][ T5880] asix 4-1:0.188: probe with driver asix failed with error -61 [ 143.462006][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 143.486105][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 143.919615][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 143.939889][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 143.967423][ T29] audit: type=1326 audit(2000000060.343:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6903 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac239aeb9 code=0x7ffc0000 [ 143.992845][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 144.003161][ T29] audit: type=1326 audit(2000000060.353:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6903 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7ac239aeb9 code=0x7ffc0000 [ 144.029642][ T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 144.049203][ T29] audit: type=1326 audit(2000000060.353:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6903 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac239aeb9 code=0x7ffc0000 [ 144.072950][ T29] audit: type=1326 audit(2000000060.373:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6903 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f7ac239aeb9 code=0x7ffc0000 [ 144.863744][ T10] usb 4-1: USB disconnect, device number 30 [ 145.096200][ T6936] FAULT_INJECTION: forcing a failure. [ 145.096200][ T6936] name failslab, interval 1, probability 0, space 0, times 0 [ 145.111353][ T6936] CPU: 1 UID: 0 PID: 6936 Comm: syz.0.297 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.111381][ T6936] Tainted: [L]=SOFTLOCKUP [ 145.111388][ T6936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 145.111398][ T6936] Call Trace: [ 145.111407][ T6936] [ 145.111414][ T6936] dump_stack_lvl+0xe8/0x150 [ 145.111441][ T6936] should_fail_ex+0x412/0x560 [ 145.111468][ T6936] should_failslab+0xa8/0x100 [ 145.111488][ T6936] __kmalloc_noprof+0xe8/0x760 [ 145.111515][ T6936] ? nl80211_trigger_scan+0x52f/0x1f50 [ 145.111540][ T6936] nl80211_trigger_scan+0x52f/0x1f50 [ 145.111571][ T6936] genl_family_rcv_msg_doit+0x22a/0x330 [ 145.111616][ T6936] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 145.111652][ T6936] ? bpf_lsm_capable+0x9/0x20 [ 145.111673][ T6936] ? security_capable+0x7e/0x2c0 [ 145.111700][ T6936] genl_rcv_msg+0x61c/0x7a0 [ 145.111727][ T6936] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.111747][ T6936] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 145.111768][ T6936] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 145.111786][ T6936] ? __pfx_nl80211_post_doit+0x10/0x10 [ 145.111808][ T6936] ? __lock_acquire+0x6b5/0x2cf0 [ 145.111845][ T6936] netlink_rcv_skb+0x232/0x4b0 [ 145.111865][ T6936] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.111887][ T6936] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 145.111920][ T6936] ? down_read+0x272/0x2e0 [ 145.111941][ T6936] ? genl_rcv+0xd/0x40 [ 145.111963][ T6936] genl_rcv+0x28/0x40 [ 145.111982][ T6936] netlink_unicast+0x80f/0x9b0 [ 145.112014][ T6936] ? __pfx_netlink_unicast+0x10/0x10 [ 145.112039][ T6936] ? netlink_sendmsg+0x650/0xb40 [ 145.112054][ T6936] ? skb_put+0x11b/0x210 [ 145.112076][ T6936] netlink_sendmsg+0x813/0xb40 [ 145.112103][ T6936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.112123][ T6936] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 145.112155][ T6936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.112172][ T6936] sock_sendmsg_nosec+0x18f/0x1d0 [ 145.112197][ T6936] ____sys_sendmsg+0x589/0x8c0 [ 145.112225][ T6936] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.112255][ T6936] ? import_iovec+0x73/0xa0 [ 145.112283][ T6936] ___sys_sendmsg+0x2a5/0x360 [ 145.112309][ T6936] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.112362][ T6936] ? __fget_files+0x2a/0x420 [ 145.112383][ T6936] ? __fget_files+0x3a0/0x420 [ 145.112415][ T6936] __x64_sys_sendmsg+0x1bd/0x2a0 [ 145.112438][ T6936] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 145.112468][ T6936] ? __pfx_ksys_write+0x10/0x10 [ 145.112495][ T6936] do_syscall_64+0x14d/0xf80 [ 145.112514][ T6936] ? trace_irq_disable+0x3b/0x150 [ 145.112536][ T6936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.112554][ T6936] ? clear_bhb_loop+0x40/0x90 [ 145.112575][ T6936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.112591][ T6936] RIP: 0033:0x7f7ac239aeb9 [ 145.112609][ T6936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.112624][ T6936] RSP: 002b:00007f7ac31d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.112643][ T6936] RAX: ffffffffffffffda RBX: 00007f7ac2615fa0 RCX: 00007f7ac239aeb9 [ 145.112656][ T6936] RDX: 0000000022000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 145.112667][ T6936] RBP: 00007f7ac31d6090 R08: 0000000000000000 R09: 0000000000000000 [ 145.112678][ T6936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.112688][ T6936] R13: 00007f7ac2616038 R14: 00007f7ac2615fa0 R15: 00007ffe7a1b75a8 [ 145.112717][ T6936] [ 145.496970][ T6938] syz.0.298 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 145.512895][ T2224] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 145.538108][ T91] usb 3-1: USB disconnect, device number 31 [ 145.595025][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 145.620739][ T6941] netlink: 'syz.2.299': attribute type 21 has an invalid length. [ 145.630684][ T6941] netlink: 132 bytes leftover after parsing attributes in process `syz.2.299'. [ 145.677268][ T2224] usb 2-1: Using ep0 maxpacket: 32 [ 145.684217][ T2224] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 145.692475][ T2224] usb 2-1: config 0 has no interface number 0 [ 145.699291][ T2224] usb 2-1: config 0 interface 184 has no altsetting 0 [ 145.717485][ T2224] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 145.726825][ T2224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.734894][ T2224] usb 2-1: Product: syz [ 145.739330][ T2224] usb 2-1: Manufacturer: syz [ 145.743942][ T2224] usb 2-1: SerialNumber: syz [ 145.752436][ T2224] usb 2-1: config 0 descriptor?? [ 145.764710][ T5909] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 145.782788][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 145.794462][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.824764][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 145.843176][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 145.861444][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 145.887402][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.910719][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 145.929607][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 145.938256][ T10] usb 4-1: Manufacturer: syz [ 145.947692][ T5909] usb 1-1: config 0 has an invalid interface number: 63 but max is 0 [ 145.955996][ T5909] usb 1-1: config 0 has no interface number 0 [ 145.966607][ T10] usb 4-1: config 0 descriptor?? [ 145.974807][ T5909] usb 1-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=b2.a1 [ 145.983871][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.015436][ T5909] usb 1-1: config 0 descriptor?? [ 146.154699][ T5910] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 146.274603][ T10] rc_core: IR keymap rc-hauppauge not found [ 146.280638][ T10] Registered IR keymap rc-empty [ 146.286148][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 146.305522][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 146.324431][ T5909] usb 1-1: USB disconnect, device number 20 [ 146.341128][ T5910] usb 3-1: config 0 has an invalid interface number: 199 but max is 16 [ 146.366208][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 146.378906][ T5910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.391628][ T5910] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 146.406300][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 146.421132][ T5910] usb 3-1: config 0 has no interface number 0 [ 146.427637][ T5910] usb 3-1: config 0 interface 199 has no altsetting 0 [ 146.439799][ T5910] usb 3-1: New USB device found, idVendor=05a9, idProduct=2641, bcdDevice=1c.1b [ 146.449514][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.449657][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 146.467079][ T5910] usb 3-1: Product: syz [ 146.471344][ T5910] usb 3-1: Manufacturer: syz [ 146.477157][ T5910] usb 3-1: SerialNumber: syz [ 146.504067][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 146.513638][ T5910] usb 3-1: config 0 descriptor?? [ 146.535427][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 146.555444][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 146.578342][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 146.604972][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 146.625084][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 146.644950][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 146.667810][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 146.695803][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 146.722252][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 146.741347][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 146.771230][ T10] usb 4-1: USB disconnect, device number 31 [ 146.788228][ T2224] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 146.989123][ T2224] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 147.008293][ T2224] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 147.019461][ T2224] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 147.045532][ T2224] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 147.055738][ T2224] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 147.070371][ T2224] usb 2-1: USB disconnect, device number 26 [ 147.152853][ T6953] FAULT_INJECTION: forcing a failure. [ 147.152853][ T6953] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 147.166581][ T6953] CPU: 0 UID: 0 PID: 6953 Comm: syz.0.303 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.166610][ T6953] Tainted: [L]=SOFTLOCKUP [ 147.166616][ T6953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 147.166626][ T6953] Call Trace: [ 147.166634][ T6953] [ 147.166641][ T6953] dump_stack_lvl+0xe8/0x150 [ 147.166670][ T6953] should_fail_ex+0x412/0x560 [ 147.166706][ T6953] prepare_alloc_pages+0x22a/0x650 [ 147.166736][ T6953] __alloc_frozen_pages_noprof+0x12f/0x380 [ 147.166758][ T6953] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 147.166780][ T6953] ? __pfx_policy_nodemask+0x10/0x10 [ 147.166803][ T6953] ? do_raw_spin_lock+0x12b/0x2f0 [ 147.166824][ T6953] alloc_pages_mpol+0x232/0x4a0 [ 147.166848][ T6953] alloc_pages_noprof+0xa8/0x190 [ 147.166868][ T6953] get_free_pages_noprof+0xf/0x80 [ 147.166886][ T6953] __pollwait+0x263/0x430 [ 147.166906][ T6953] ? __pfx___pollwait+0x10/0x10 [ 147.166925][ T6953] pipe_poll+0x16f/0x470 [ 147.166943][ T6953] ? __pfx_pipe_poll+0x10/0x10 [ 147.166962][ T6953] do_sys_poll+0x969/0x1120 [ 147.166987][ T6953] ? do_sys_poll+0x451/0x1120 [ 147.167012][ T6953] ? __pfx_do_sys_poll+0x10/0x10 [ 147.167030][ T6953] ? __lock_acquire+0x6b5/0x2cf0 [ 147.167052][ T6953] ? is_bpf_text_address+0x26/0x2b0 [ 147.167070][ T6953] ? __pfx___pollwait+0x10/0x10 [ 147.167091][ T6953] ? __pfx_pollwake+0x10/0x10 [ 147.167113][ T6953] ? __pfx_pollwake+0x10/0x10 [ 147.167135][ T6953] ? __pfx_pollwake+0x10/0x10 [ 147.167157][ T6953] ? __pfx_pollwake+0x10/0x10 [ 147.167179][ T6953] ? __pfx_pollwake+0x10/0x10 [ 147.167200][ T6953] ? __pfx_pollwake+0x10/0x10 [ 147.167221][ T6953] ? __pfx_pollwake+0x10/0x10 [ 147.167243][ T6953] ? __pfx_pollwake+0x10/0x10 [ 147.167266][ T6953] ? __pfx_pollwake+0x10/0x10 [ 147.167315][ T6953] ? set_user_sigmask+0xcd/0x1c0 [ 147.167337][ T6953] ? __pfx_set_user_sigmask+0x10/0x10 [ 147.167366][ T6953] __se_sys_ppoll+0x209/0x2b0 [ 147.167386][ T6953] ? fput+0xa0/0xd0 [ 147.167409][ T6953] ? __pfx___se_sys_ppoll+0x10/0x10 [ 147.167428][ T6953] ? __pfx_ksys_write+0x10/0x10 [ 147.167449][ T6953] ? __x64_sys_ppoll+0x20/0xc0 [ 147.167470][ T6953] do_syscall_64+0x14d/0xf80 [ 147.167491][ T6953] ? trace_irq_disable+0x3b/0x150 [ 147.167513][ T6953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.167530][ T6953] ? clear_bhb_loop+0x40/0x90 [ 147.167551][ T6953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.167568][ T6953] RIP: 0033:0x7f7ac239aeb9 [ 147.167584][ T6953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.167598][ T6953] RSP: 002b:00007f7ac31d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 147.167617][ T6953] RAX: ffffffffffffffda RBX: 00007f7ac2615fa0 RCX: 00007f7ac239aeb9 [ 147.167630][ T6953] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 147.167641][ T6953] RBP: 00007f7ac31d6090 R08: 0000000000000000 R09: 0000000000000000 [ 147.167651][ T6953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.167661][ T6953] R13: 00007f7ac2616038 R14: 00007f7ac2615fa0 R15: 00007ffe7a1b75a8 [ 147.167699][ T6953] [ 147.884547][ T5909] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 148.034658][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 148.041549][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.055237][ T5909] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 148.064345][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.074606][ T5880] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 148.079956][ T5909] usb 4-1: config 0 descriptor?? [ 148.097192][ T5909] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 148.259390][ T5880] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 148.269341][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.279101][ T5880] usb 2-1: Product: syz [ 148.297104][ T5880] usb 2-1: Manufacturer: syz [ 148.305047][ T5880] usb 2-1: SerialNumber: syz [ 148.567498][ T2224] IPVS: starting estimator thread 0... [ 148.574941][ T6967] IPVS: nq: FWM 3 0x00000003 - no destination available [ 148.583416][ C1] IPVS: nq: FWM 3 0x00000003 - no destination available [ 148.664622][ T6968] IPVS: using max 32 ests per chain, 76800 per kthread [ 148.713743][ T6957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.732995][ T6957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.742789][ T5880] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 148.756286][ T5880] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 148.929672][ T5910] uvcvideo 3-1:0.199: Found Unit with invalid ID 0 [ 148.948017][ T6957] netlink: 20 bytes leftover after parsing attributes in process `syz.3.305'. [ 148.960153][ T5910] uvcvideo 3-1:0.199: Found UVC 0.00 device syz (05a9:2641) [ 148.979991][ T5909] gspca_vc032x: reg_w err -71 [ 148.994455][ T5910] uvcvideo 3-1:0.199: No valid video chain found. [ 149.002522][ T5909] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 149.024952][ T5910] usb 3-1: USB disconnect, device number 32 [ 149.067664][ T5909] usb 4-1: USB disconnect, device number 32 [ 149.313178][ T29] audit: type=1804 audit(2000000065.693:9): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.315" name="/newroot/71/file1" dev="fuse" ino=1 res=1 errno=0 [ 149.375806][ T5880] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 149.416963][ T5880] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 149.444990][ T5880] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 149.458591][ T5880] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 149.530005][ T6988] IPVS: nq: FWM 3 0x00000003 - no destination available [ 149.582730][ C0] IPVS: nq: FWM 3 0x00000003 - no destination available [ 149.648417][ T5144] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 149.791432][ T6995] netlink: 'syz.2.321': attribute type 1 has an invalid length. [ 149.801739][ T6995] netlink: 224 bytes leftover after parsing attributes in process `syz.2.321'. [ 150.154499][ T5872] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 150.325695][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 150.335942][ T5872] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 150.345908][ T5872] usb 1-1: config 0 has no interface number 0 [ 150.352129][ T5872] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 150.354783][ T5910] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 150.370715][ T5872] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 150.383360][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.392552][ T5872] usb 1-1: Product: syz [ 150.397247][ T5872] usb 1-1: Manufacturer: syz [ 150.401961][ T5872] usb 1-1: SerialNumber: syz [ 150.418890][ T5872] usb 1-1: config 0 descriptor?? [ 150.425307][ T7002] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 150.530242][ T5910] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 150.544195][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.566538][ T5910] usb 3-1: Product: syz [ 150.570754][ T5910] usb 3-1: Manufacturer: syz [ 150.594553][ T5910] usb 3-1: SerialNumber: syz [ 150.603060][ T5910] usb 3-1: config 0 descriptor?? [ 150.643202][ T7002] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 150.873637][ T5910] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 150.883922][ T5909] usb 2-1: USB disconnect, device number 27 [ 150.918361][ T2224] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 151.084352][ T2224] usb 4-1: Using ep0 maxpacket: 8 [ 151.092257][ T5872] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 151.102794][ T2224] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 151.111437][ T5872] asix 1-1:0.188: probe with driver asix failed with error -32 [ 151.119946][ T2224] usb 4-1: config 179 has no interface number 0 [ 151.132393][ T2224] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 151.143639][ T2224] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 151.155300][ T2224] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 151.166558][ T2224] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 151.178118][ T2224] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 151.191893][ T2224] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 151.201028][ T2224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.216736][ T7010] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 151.356601][ T5909] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 151.446823][ T7010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.461611][ T7010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.482967][ T2224] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input13 [ 151.495036][ T5909] usb 2-1: device descriptor read/64, error -71 [ 151.744679][ T5909] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 151.874911][ T5909] usb 2-1: device descriptor read/64, error -71 [ 151.886110][ T10] usb 4-1: USB disconnect, device number 33 [ 151.886134][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 151.900900][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 151.986475][ T5909] usb usb2-port1: attempt power cycle [ 152.327145][ T5909] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 152.357680][ T5909] usb 2-1: device descriptor read/8, error -71 [ 152.594898][ T5909] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 152.616946][ T5909] usb 2-1: device descriptor read/8, error -71 [ 152.694341][ T91] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 152.725339][ T5909] usb usb2-port1: unable to enumerate USB device [ 152.859571][ T91] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 152.871105][ T91] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.879701][ T91] usb 4-1: Product: syz [ 152.887518][ T91] usb 4-1: Manufacturer: syz [ 152.893214][ T5910] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 152.908306][ T91] usb 4-1: SerialNumber: syz [ 152.923751][ T5910] usb 3-1: USB disconnect, device number 33 [ 152.973903][ T2224] usb 1-1: USB disconnect, device number 21 [ 153.361733][ T91] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 153.375376][ T91] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 153.524517][ T5910] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 153.686467][ T5910] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 153.698648][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.715523][ T5910] usb 1-1: config 0 descriptor?? [ 153.731372][ T5910] cp210x 1-1:0.0: cp210x converter detected [ 153.935689][ T5910] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 153.950065][ T5910] cp210x 1-1:0.0: querying part number failed [ 153.980928][ T5910] usb 1-1: cp210x converter now attached to ttyUSB0 [ 154.104253][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 154.275255][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 154.282364][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.297142][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.309826][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 154.322013][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 154.336976][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.354761][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 154.363939][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 154.372751][ T10] usb 3-1: Manufacturer: syz [ 154.381090][ T10] usb 3-1: config 0 descriptor?? [ 154.394555][ T2224] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 154.562719][ T2224] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 154.574399][ T2224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.582412][ T2224] usb 2-1: Product: syz [ 154.587836][ T2224] usb 2-1: Manufacturer: syz [ 154.592496][ T2224] usb 2-1: SerialNumber: syz [ 154.675632][ T10] rc_core: IR keymap rc-hauppauge not found [ 154.681727][ T10] Registered IR keymap rc-empty [ 154.687495][ T10] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 154.714528][ T10] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 154.736429][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 154.756511][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 154.776808][ T10] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 154.794576][ T10] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 154.819885][ T10] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 154.844702][ T10] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 154.865461][ T10] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 154.885164][ T10] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 154.906826][ T10] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 154.935078][ T10] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 154.956672][ T10] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 154.984804][ T10] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 155.009947][ T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 155.023278][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 155.025673][ T2224] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 155.044490][ T2224] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 155.061478][ T5880] usb 3-1: USB disconnect, device number 34 [ 155.207904][ T91] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO [ 155.232578][ T91] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 155.247217][ T91] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 155.260431][ T91] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 155.289704][ T91] usb 4-1: USB disconnect, device number 34 [ 155.679458][ T7042] sg_write: data in/out 49116/98 bytes for SCSI command 0x0-- guessing data in; [ 155.679458][ T7042] program syz.2.335 not setting count and/or reply_len properly [ 155.697856][ T2224] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 155.724240][ T2224] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 155.744649][ T2224] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 155.790907][ T2224] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 155.859483][ T7046] process 'syz.3.337' launched './file2' with NULL argv: empty string added [ 155.883581][ T7046] netlink: 68 bytes leftover after parsing attributes in process `syz.3.337'. [ 156.064168][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 156.225021][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 156.245991][ T10] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 156.255703][ T10] usb 3-1: config 0 has no interface number 0 [ 156.261913][ T10] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 156.276913][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 156.286484][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.294655][ T10] usb 3-1: Product: syz [ 156.299094][ T10] usb 3-1: Manufacturer: syz [ 156.303405][ T2224] usb 1-1: USB disconnect, device number 22 [ 156.303763][ T10] usb 3-1: SerialNumber: syz [ 156.329099][ T2224] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 156.398034][ T2224] cp210x 1-1:0.0: device disconnected [ 156.413935][ T10] usb 3-1: config 0 descriptor?? [ 156.421167][ T7044] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 156.646256][ T7044] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 157.069809][ T10] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 157.116267][ T10] asix 3-1:0.188: probe with driver asix failed with error -32 [ 157.182451][ T10] usb 2-1: USB disconnect, device number 32 [ 157.624209][ T2224] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 157.643996][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 157.793962][ T2224] usb 1-1: Using ep0 maxpacket: 16 [ 157.803542][ T2224] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.804685][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 157.816231][ T2224] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.826515][ T10] usb 2-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 157.833789][ T2224] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 157.850155][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.861407][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 157.873155][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 157.874476][ T2224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.892638][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.907993][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 157.917487][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 157.921064][ T2224] usb 1-1: config 0 descriptor?? [ 157.925549][ T10] usb 2-1: Manufacturer: syz [ 157.936699][ T10] usb 2-1: config 0 descriptor?? [ 157.994057][ T5880] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 158.167701][ T5880] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 158.195187][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.216183][ T5880] usb 4-1: config 0 descriptor?? [ 158.230975][ T5880] cp210x 4-1:0.0: cp210x converter detected [ 158.264309][ T10] rc_core: IR keymap rc-hauppauge not found [ 158.272449][ T10] Registered IR keymap rc-empty [ 158.280119][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 158.304695][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 158.326392][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 158.350329][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 158.369397][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 158.394391][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 158.414834][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 158.430977][ T5880] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 158.435046][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 158.442977][ T5880] cp210x 4-1:0.0: querying part number failed [ 158.473482][ T5880] usb 4-1: cp210x converter now attached to ttyUSB0 [ 158.484827][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 158.515734][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 158.535289][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 158.556859][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 158.568871][ T2224] usbhid 1-1:0.0: can't add hid device: -71 [ 158.574768][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 158.585135][ T2224] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 158.594290][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 158.599584][ T2224] usb 1-1: USB disconnect, device number 23 [ 158.635456][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 158.651461][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 158.671103][ T10] usb 2-1: USB disconnect, device number 33 [ 158.847935][ T2224] usb 3-1: USB disconnect, device number 35 [ 159.244835][ T2224] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 159.297895][ T7087] sp0: Synchronizing with TNC [ 159.419540][ T2224] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 159.455674][ T2224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.468008][ T2224] usb 3-1: Product: syz [ 159.472605][ T2224] usb 3-1: Manufacturer: syz [ 159.479508][ T2224] usb 3-1: SerialNumber: syz [ 159.647825][ T5144] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 159.735471][ T5910] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 159.900055][ T5910] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 159.910414][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.910429][ T2224] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 159.918965][ T5910] usb 1-1: Product: syz [ 159.936030][ T5910] usb 1-1: Manufacturer: syz [ 159.940739][ T5910] usb 1-1: SerialNumber: syz [ 159.960629][ T2224] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 160.360286][ T5910] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 160.373464][ T5910] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 160.567507][ T7101] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.355'. [ 160.585710][ T2224] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 160.601124][ T2224] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 160.615266][ T2224] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 160.630764][ T2224] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 160.764308][ T10] usb 4-1: USB disconnect, device number 35 [ 160.802250][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 160.836413][ T10] cp210x 4-1:0.0: device disconnected [ 160.995789][ T5910] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 161.012200][ T5910] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 161.174744][ T5910] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 161.190196][ T5910] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 161.293788][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 161.444730][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 161.451348][ T10] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 161.452331][ T7109] FAULT_INJECTION: forcing a failure. [ 161.452331][ T7109] name failslab, interval 1, probability 0, space 0, times 0 [ 161.473486][ T7109] CPU: 1 UID: 0 PID: 7109 Comm: syz.1.357 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.473516][ T7109] Tainted: [L]=SOFTLOCKUP [ 161.473522][ T7109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 161.473532][ T7109] Call Trace: [ 161.473540][ T7109] [ 161.473547][ T7109] dump_stack_lvl+0xe8/0x150 [ 161.473575][ T7109] should_fail_ex+0x412/0x560 [ 161.473601][ T7109] should_failslab+0xa8/0x100 [ 161.473618][ T7109] ? skb_clone+0x212/0x3a0 [ 161.473638][ T7109] kmem_cache_alloc_noprof+0x87/0x650 [ 161.473661][ T7109] ? apparmor_capable+0x137/0x1a0 [ 161.473693][ T7109] skb_clone+0x212/0x3a0 [ 161.473710][ T7109] ? nfnetlink_rcv+0x4b0/0x27b0 [ 161.473735][ T7109] nfnetlink_rcv+0x4e2/0x27b0 [ 161.473760][ T7109] ? unwind_get_return_address+0x4d/0x90 [ 161.473783][ T7109] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 161.473807][ T7109] ? trim_netdev_trace+0x7d7/0x830 [ 161.473834][ T7109] ? stack_trace_save+0xa9/0x100 [ 161.473859][ T7109] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 161.473891][ T7109] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 161.473913][ T7109] ? ref_tracker_free+0x693/0x840 [ 161.473935][ T7109] ? netlink_unicast+0x7e3/0x9b0 [ 161.473957][ T7109] ? netlink_sendmsg+0x813/0xb40 [ 161.473974][ T7109] ? sock_sendmsg_nosec+0x18f/0x1d0 [ 161.473994][ T7109] ? ____sys_sendmsg+0x589/0x8c0 [ 161.474012][ T7109] ? ___sys_sendmsg+0x2a5/0x360 [ 161.474029][ T7109] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 161.474046][ T7109] ? do_syscall_64+0x14d/0xf80 [ 161.474064][ T7109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.474084][ T7109] ? __skb_clone+0x483/0x7a0 [ 161.474119][ T7109] ? skb_clone+0x246/0x3a0 [ 161.474141][ T7109] ? __netlink_deliver_tap+0x866/0x8b0 [ 161.474159][ T7109] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.474190][ T7109] netlink_unicast+0x80f/0x9b0 [ 161.474221][ T7109] ? __pfx_netlink_unicast+0x10/0x10 [ 161.474246][ T7109] ? netlink_sendmsg+0x650/0xb40 [ 161.474262][ T7109] ? skb_put+0x11b/0x210 [ 161.474282][ T7109] netlink_sendmsg+0x813/0xb40 [ 161.474307][ T7109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.474324][ T7109] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 161.474351][ T7109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.474368][ T7109] sock_sendmsg_nosec+0x18f/0x1d0 [ 161.474394][ T7109] ____sys_sendmsg+0x589/0x8c0 [ 161.474421][ T7109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.474449][ T7109] ? import_iovec+0x73/0xa0 [ 161.474476][ T7109] ___sys_sendmsg+0x2a5/0x360 [ 161.474501][ T7109] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.474549][ T7109] ? __fget_files+0x2a/0x420 [ 161.474570][ T7109] ? __fget_files+0x3a0/0x420 [ 161.474598][ T7109] __x64_sys_sendmsg+0x1bd/0x2a0 [ 161.474621][ T7109] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 161.474649][ T7109] ? __pfx_ksys_write+0x10/0x10 [ 161.474676][ T7109] do_syscall_64+0x14d/0xf80 [ 161.474695][ T7109] ? trace_irq_disable+0x3b/0x150 [ 161.474717][ T7109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.474732][ T7109] ? clear_bhb_loop+0x40/0x90 [ 161.474752][ T7109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.474767][ T7109] RIP: 0033:0x7fd12639aeb9 [ 161.474785][ T7109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.474798][ T7109] RSP: 002b:00007fd12724c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.474816][ T7109] RAX: ffffffffffffffda RBX: 00007fd126615fa0 RCX: 00007fd12639aeb9 [ 161.474828][ T7109] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 161.474839][ T7109] RBP: 00007fd12724c090 R08: 0000000000000000 R09: 0000000000000000 [ 161.474850][ T7109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.474860][ T7109] R13: 00007fd126616038 R14: 00007fd126615fa0 R15: 00007ffe786ab188 [ 161.474885][ T7109] [ 161.489455][ T10] usb 4-1: config 0 has no interface number 0 [ 161.533156][ T7111] netlink: 'syz.1.358': attribute type 1 has an invalid length. [ 161.597942][ T10] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 161.853790][ T5880] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 161.897351][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 161.906757][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.914892][ T10] usb 4-1: Product: syz [ 161.919672][ T10] usb 4-1: Manufacturer: syz [ 161.926049][ T10] usb 4-1: SerialNumber: syz [ 161.935416][ T10] usb 4-1: config 0 descriptor?? [ 161.941811][ T7104] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 161.962047][ T2224] usb 3-1: USB disconnect, device number 36 [ 162.034101][ T5880] usb 2-1: Using ep0 maxpacket: 8 [ 162.044838][ T5880] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 162.059515][ T5880] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 162.077663][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.098531][ T5880] usb 2-1: Product: syz [ 162.102738][ T5880] usb 2-1: Manufacturer: syz [ 162.113966][ T5880] usb 2-1: SerialNumber: syz [ 162.122505][ T5880] usb 2-1: config 0 descriptor?? [ 162.141685][ T5880] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 162.149934][ T5880] usb 2-1: setting power ON [ 162.156429][ T5880] dvb-usb: bulk message failed: -22 (2/0) [ 162.160378][ T7104] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 162.176656][ T5880] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 162.189763][ T5880] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 162.200191][ T5880] usb 2-1: media controller created [ 162.237794][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.265040][ T5880] usb 2-1: selecting invalid altsetting 6 [ 162.272121][ T5880] usb 2-1: digital interface selection failed (-22) [ 162.279240][ T5880] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 162.290086][ T5880] usb 2-1: setting power OFF [ 162.296175][ T5880] dvb-usb: bulk message failed: -22 (2/0) [ 162.302881][ T5880] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 162.312984][ T5880] (NULL device *): no alternate interface [ 162.507393][ T5909] usb 1-1: USB disconnect, device number 24 [ 162.583862][ T10] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 162.625282][ T10] asix 4-1:0.188: probe with driver asix failed with error -32 [ 162.816877][ T7121] dvb-usb: bulk message failed: -22 (3/0) [ 162.826603][ T7121] dvb-usb: bulk message failed: -22 (4/0) [ 162.832356][ T7121] cxusb: i2c read failed [ 162.845643][ T5880] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 162.866974][ T5880] usb 2-1: USB disconnect, device number 34 [ 162.926474][ T7124] IPVS: nq: FWM 3 0x00000003 - no destination available [ 162.945620][ C0] IPVS: nq: FWM 3 0x00000003 - no destination available [ 162.994234][ T5909] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 163.051179][ T5144] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 163.168629][ T5909] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 163.179164][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.188188][ T5909] usb 3-1: Product: syz [ 163.192442][ T5909] usb 3-1: Manufacturer: syz [ 163.197138][ T5909] usb 3-1: SerialNumber: syz [ 163.214819][ T5909] usb 3-1: config 0 descriptor?? [ 163.226619][ T5909] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 163.426951][ T5909] gspca_stk1135: reg_w 0x2 err -71 [ 163.441687][ T5909] gspca_stk1135: serial bus timeout: status=0x00 [ 163.454174][ T5909] gspca_stk1135: Sensor write failed [ 163.459594][ T5909] gspca_stk1135: serial bus timeout: status=0x00 [ 163.479432][ T5909] gspca_stk1135: Sensor write failed [ 163.485062][ T5909] gspca_stk1135: serial bus timeout: status=0x00 [ 163.491642][ T5909] gspca_stk1135: Sensor read failed [ 163.497393][ T5909] gspca_stk1135: serial bus timeout: status=0x00 [ 163.504203][ T5909] gspca_stk1135: Sensor read failed [ 163.509506][ T5909] gspca_stk1135: Detected sensor type unknown (0x0) [ 163.532363][ T5909] gspca_stk1135: serial bus timeout: status=0x00 [ 163.549328][ T5909] gspca_stk1135: Sensor read failed [ 163.560302][ T5909] gspca_stk1135: serial bus timeout: status=0x00 [ 163.574778][ T5909] gspca_stk1135: Sensor read failed [ 163.585714][ T5909] gspca_stk1135: serial bus timeout: status=0x00 [ 163.600162][ T5909] gspca_stk1135: Sensor write failed [ 163.608065][ T5909] gspca_stk1135: serial bus timeout: status=0x00 [ 163.616190][ T5909] gspca_stk1135: Sensor write failed [ 163.621852][ T5909] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 163.640292][ T5909] usb 3-1: USB disconnect, device number 37 [ 163.652413][ T7133] ======================================================= [ 163.652413][ T7133] WARNING: The mand mount option has been deprecated and [ 163.652413][ T7133] and is ignored by this kernel. Remove the mand [ 163.652413][ T7133] option from the mount to silence this warning. [ 163.652413][ T7133] ======================================================= [ 163.700952][ T7133] JFS: discard option not supported on device [ 163.710472][ T7133] Mount JFS Failure: -22 [ 163.718212][ T7133] jfs_mount failed w/return code = -22 [ 163.887769][ T5909] usb 4-1: USB disconnect, device number 36 [ 164.213188][ T7153] IPVS: nq: FWM 3 0x00000003 - no destination available [ 164.221318][ C1] IPVS: nq: FWM 3 0x00000003 - no destination available [ 164.237496][ T5909] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 164.312000][ T7155] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 164.333192][ T7155] netlink: 'syz.2.372': attribute type 9 has an invalid length. [ 164.341696][ T7155] netlink: 44 bytes leftover after parsing attributes in process `syz.2.372'. [ 164.354097][ T5910] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 164.387142][ T5880] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 164.408098][ T5909] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 164.419958][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.446220][ T5909] usb 4-1: Product: syz [ 164.450921][ T5909] usb 4-1: Manufacturer: syz [ 164.456108][ T5909] usb 4-1: SerialNumber: syz [ 164.496165][ T5910] usb 2-1: device descriptor read/64, error -71 [ 164.546569][ T5880] usb 1-1: Using ep0 maxpacket: 16 [ 164.558586][ T5880] usb 1-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 164.585289][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 164.626728][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 164.650266][ T5880] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 164.662159][ T5880] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.694197][ T5880] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 164.704544][ T5880] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 164.712586][ T5880] usb 1-1: Manufacturer: syz [ 164.734975][ T5880] usb 1-1: config 0 descriptor?? [ 164.740009][ T7160] binder: 7159:7160 ioctl 40046205 0 returned -22 [ 164.754687][ T5910] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 164.796122][ T7162] infiniband: Added to hash: ib_dev=ffff88802bc48000 (0)() ndev=ffff8880342e4000 (30)(lo) [ 164.808864][ T7162] lo speed is unknown, defaulting to 1000 [ 164.816593][ T7162] lo speed is unknown, defaulting to 1000 [ 164.827984][ T7162] lo speed is unknown, defaulting to 1000 [ 164.854873][ T7162] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 164.877260][ T7162] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 164.893090][ T5909] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 164.913783][ T5910] usb 2-1: device descriptor read/64, error -71 [ 164.923661][ T5909] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 165.008721][ T7162] lo speed is unknown, defaulting to 1000 [ 165.032743][ T7162] lo speed is unknown, defaulting to 1000 [ 165.039685][ T5910] usb usb2-port1: attempt power cycle [ 165.052052][ T7162] lo speed is unknown, defaulting to 1000 [ 165.071462][ T7162] lo speed is unknown, defaulting to 1000 [ 165.079878][ T5880] rc_core: IR keymap rc-hauppauge not found [ 165.085933][ T5880] Registered IR keymap rc-empty [ 165.091300][ T5880] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 165.114535][ T5880] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 165.142142][ T5880] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 165.174705][ T5880] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16 [ 165.198337][ T5880] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 165.244943][ T5880] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 165.277702][ T5880] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 165.307955][ T5880] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 165.344209][ T5880] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 165.365533][ T5880] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 165.388172][ T5880] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 165.403609][ T5910] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 165.415999][ T5880] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 165.434469][ T5880] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 165.443192][ T5910] usb 2-1: device descriptor read/8, error -71 [ 165.454410][ T5880] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 165.476342][ T5880] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 165.486396][ T5880] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 165.513596][ T5880] usb 1-1: USB disconnect, device number 25 [ 165.563067][ T5909] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 165.589709][ T5909] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 165.599250][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 165.615105][ T5909] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 165.631512][ T5909] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 165.713820][ T5910] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 165.735968][ T5910] usb 2-1: device descriptor read/8, error -71 [ 165.773617][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 165.782318][ T10] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 165.791600][ T10] usb 3-1: config 0 has no interface number 0 [ 165.797894][ T10] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 165.818311][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 165.827666][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.835783][ T10] usb 3-1: Product: syz [ 165.840021][ T10] usb 3-1: Manufacturer: syz [ 165.845138][ T5910] usb usb2-port1: unable to enumerate USB device [ 165.851599][ T10] usb 3-1: SerialNumber: syz [ 165.869092][ T10] usb 3-1: config 0 descriptor?? [ 165.878649][ T7167] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 166.089865][ T7167] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 166.503334][ T10] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 166.517923][ T10] asix 3-1:0.188: probe with driver asix failed with error -32 [ 166.937935][ T5880] usb 4-1: USB disconnect, device number 37 [ 167.259331][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'. [ 167.624058][ T7197] netlink: 68 bytes leftover after parsing attributes in process `syz.0.383'. [ 167.643415][ T5872] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 167.652722][ T7197] netlink: 80 bytes leftover after parsing attributes in process `syz.0.383'. [ 167.686574][ T7199] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.727548][ T7199] netlink: 'syz.1.384': attribute type 9 has an invalid length. [ 167.763451][ T7199] netlink: 44 bytes leftover after parsing attributes in process `syz.1.384'. [ 167.821684][ T5872] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 167.844108][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.852141][ T5872] usb 4-1: Product: syz [ 167.880907][ T5872] usb 4-1: Manufacturer: syz [ 167.894877][ T5872] usb 4-1: SerialNumber: syz [ 167.902904][ T7204] netlink: 32 bytes leftover after parsing attributes in process `syz.1.386'. [ 168.083599][ T5909] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 168.247635][ T5909] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 168.256913][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.265274][ T5909] usb 1-1: Product: syz [ 168.269461][ T5909] usb 1-1: Manufacturer: syz [ 168.275431][ T5909] usb 1-1: SerialNumber: syz [ 168.283409][ T10] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 168.328000][ T5872] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 168.356137][ T5910] usb 3-1: USB disconnect, device number 38 [ 168.379119][ T5872] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 168.434168][ T10] usb 2-1: device descriptor read/64, error -71 [ 168.464312][ T7215] binder: 7214:7215 ioctl c0306201 0 returned -14 [ 168.694503][ T10] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 168.705789][ T5909] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 168.724680][ T5909] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 168.863631][ T10] usb 2-1: device descriptor read/64, error -71 [ 168.974053][ T10] usb usb2-port1: attempt power cycle [ 169.282491][ T7226] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 169.301085][ T7226] netlink: 'syz.2.393': attribute type 1 has an invalid length. [ 169.308990][ T7226] netlink: 'syz.2.393': attribute type 3 has an invalid length. [ 169.318648][ T7226] netlink: 'syz.2.393': attribute type 8 has an invalid length. [ 169.326423][ T7226] netlink: 172 bytes leftover after parsing attributes in process `syz.2.393'. [ 169.335558][ T7226] NCSI netlink: No device for ifindex 131092 [ 169.341066][ T5909] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 169.349980][ T7226] netlink: 36 bytes leftover after parsing attributes in process `syz.2.393'. [ 169.355436][ T10] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 169.372124][ T5909] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 169.383992][ T5909] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 169.405244][ T5909] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 169.419774][ T10] usb 2-1: device descriptor read/8, error -71 [ 169.683973][ T10] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 169.715315][ T10] usb 2-1: device descriptor read/8, error -71 [ 169.823605][ T10] usb usb2-port1: unable to enumerate USB device [ 169.844439][ T2224] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 170.005698][ T2224] usb 3-1: unable to get BOS descriptor or descriptor too short [ 170.015503][ T2224] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 170.025869][ T2224] usb 3-1: can't read configurations, error -71 [ 170.224407][ T5872] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 170.239327][ T5872] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 170.253685][ T5872] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 170.266066][ T5872] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 170.278087][ T5872] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 170.295210][ T5872] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 170.329769][ T5872] usb 4-1: USB disconnect, device number 38 [ 170.788034][ T7239] binder: 7238:7239 ioctl c0306201 0 returned -14 [ 170.853340][ T2224] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 170.889328][ T10] usb 1-1: USB disconnect, device number 26 [ 171.033314][ T2224] usb 3-1: Using ep0 maxpacket: 32 [ 171.048395][ T2224] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 171.061403][ T2224] usb 3-1: config 0 has no interface number 0 [ 171.068149][ T2224] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 171.092004][ T2224] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 171.101387][ T2224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.109736][ T2224] usb 3-1: Product: syz [ 171.114633][ T2224] usb 3-1: Manufacturer: syz [ 171.120462][ T2224] usb 3-1: SerialNumber: syz [ 171.143613][ T2224] usb 3-1: config 0 descriptor?? [ 171.164102][ T7237] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 171.168458][ T7248] FAULT_INJECTION: forcing a failure. [ 171.168458][ T7248] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 171.187086][ T7248] CPU: 0 UID: 0 PID: 7248 Comm: syz.1.401 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.187113][ T7248] Tainted: [L]=SOFTLOCKUP [ 171.187119][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 171.187130][ T7248] Call Trace: [ 171.187138][ T7248] [ 171.187144][ T7248] dump_stack_lvl+0xe8/0x150 [ 171.187174][ T7248] should_fail_ex+0x412/0x560 [ 171.187201][ T7248] _copy_from_user+0x2d/0xb0 [ 171.187219][ T7248] input_event_from_user+0xb1/0x290 [ 171.187239][ T7248] ? __pfx_input_event_from_user+0x10/0x10 [ 171.187268][ T7248] evdev_write+0x2c7/0x4c0 [ 171.187292][ T7248] ? __pfx_evdev_write+0x10/0x10 [ 171.187311][ T7248] ? bpf_lsm_file_permission+0x9/0x20 [ 171.187330][ T7248] ? security_file_permission+0x75/0x260 [ 171.187349][ T7248] ? rw_verify_area+0x255/0x4d0 [ 171.187374][ T7248] ? __pfx_evdev_write+0x10/0x10 [ 171.187393][ T7248] vfs_write+0x29a/0xb90 [ 171.187424][ T7248] ? __pfx_vfs_write+0x10/0x10 [ 171.187449][ T7248] ? __fget_files+0x2a/0x420 [ 171.187472][ T7248] ? __fget_files+0x2a/0x420 [ 171.187503][ T7248] ? __fget_files+0x3a0/0x420 [ 171.187522][ T7248] ? __fget_files+0x2a/0x420 [ 171.187551][ T7248] ksys_write+0x150/0x270 [ 171.187569][ T7248] ? __pfx_ksys_write+0x10/0x10 [ 171.187596][ T7248] do_syscall_64+0x14d/0xf80 [ 171.187615][ T7248] ? trace_irq_disable+0x3b/0x150 [ 171.187636][ T7248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.187652][ T7248] ? clear_bhb_loop+0x40/0x90 [ 171.187672][ T7248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.187689][ T7248] RIP: 0033:0x7fd12639aeb9 [ 171.187706][ T7248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.187720][ T7248] RSP: 002b:00007fd12724c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 171.187738][ T7248] RAX: ffffffffffffffda RBX: 00007fd126615fa0 RCX: 00007fd12639aeb9 [ 171.187751][ T7248] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 171.187762][ T7248] RBP: 00007fd12724c090 R08: 0000000000000000 R09: 0000000000000000 [ 171.187772][ T7248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.187782][ T7248] R13: 00007fd126616038 R14: 00007fd126615fa0 R15: 00007ffe786ab188 [ 171.187810][ T7248] [ 171.421720][ T5909] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 171.434526][ T7237] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 171.573508][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 171.580625][ T5909] usb 4-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 171.590952][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.603913][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 171.611583][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 171.622968][ T5909] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 171.633611][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.647934][ T5909] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 171.657068][ T5909] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 171.665146][ T5909] usb 4-1: Manufacturer: syz [ 171.672396][ T5909] usb 4-1: config 0 descriptor?? [ 171.783314][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 171.796720][ T10] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 171.816142][ T10] usb 1-1: config 0 has no interface number 0 [ 171.822322][ T10] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 171.843452][ T10] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 171.852397][ T2224] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 171.869927][ T10] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 171.879723][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.880556][ T2224] asix 3-1:0.188: probe with driver asix failed with error -32 [ 171.902012][ T10] usb 1-1: Product: syz [ 171.920692][ T10] usb 1-1: Manufacturer: syz [ 171.932431][ T10] usb 1-1: SerialNumber: syz [ 171.963581][ T10] usb 1-1: config 0 descriptor?? [ 172.002762][ T10] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 172.024823][ T10] em28xx 1-1:0.132: Video interface 132 found: isoc [ 172.053176][ T5909] rc_core: IR keymap rc-hauppauge not found [ 172.059205][ T5909] Registered IR keymap rc-empty [ 172.065411][ T5909] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 172.085939][ T5909] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 172.115116][ T5909] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 172.135058][ T5909] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17 [ 172.153951][ T5909] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 172.174758][ T5909] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 172.187936][ T7245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.199889][ T7245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.211397][ T5909] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 172.253380][ T5909] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 172.284823][ T5909] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 172.315083][ T5909] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 172.335324][ T5909] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 172.353777][ T5909] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 172.373469][ T5909] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 172.403463][ T5909] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 172.455688][ T5909] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 172.466099][ T5909] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 172.493345][ T5909] usb 4-1: USB disconnect, device number 39 [ 172.499504][ T10] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 172.590609][ T10] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 172.600317][ T10] em28xx 1-1:0.132: board has no eeprom [ 172.663236][ T10] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 172.680698][ T10] em28xx 1-1:0.132: analog set to isoc mode. [ 172.688183][ T9] em28xx 1-1:0.132: Registering V4L2 extension [ 172.727512][ T10] usb 1-1: USB disconnect, device number 27 [ 172.739479][ T10] em28xx 1-1:0.132: Disconnecting em28xx [ 172.971405][ T9] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 172.992574][ T9] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 173.020537][ T9] em28xx 1-1:0.132: No AC97 audio processor [ 173.048225][ T9] usb 1-1: Decoder not found [ 173.052894][ T9] em28xx 1-1:0.132: failed to create media graph [ 173.059418][ T9] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 173.071109][ T9] em28xx 1-1:0.132: Remote control support is not available for this card. [ 173.080319][ T10] em28xx 1-1:0.132: Closing input extension [ 173.096048][ T10] em28xx 1-1:0.132: Freeing device [ 173.126232][ T7278] binder: 7277:7278 ioctl c0306201 0 returned -14 [ 173.328266][ T7284] af_packet: tpacket_rcv: packet too big, clamped from 65442 to 3956. macoff=92 [ 173.344776][ T7284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.410005][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 173.463521][ T5909] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 173.616223][ T9] usb 3-1: USB disconnect, device number 40 [ 173.623575][ T10] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 173.658193][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.673726][ T5909] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 173.682644][ T7292] IPVS: nq: FWM 3 0x00000003 - no destination available [ 173.696511][ C1] IPVS: nq: FWM 3 0x00000003 - no destination available [ 173.709628][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.724320][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.732446][ T5909] usb 2-1: Product: syz [ 173.739383][ T5909] usb 2-1: Manufacturer: syz [ 173.746589][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 173.754250][ T5909] usb 2-1: SerialNumber: syz [ 173.764185][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.783178][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.794295][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 173.802342][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.814834][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.828027][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 173.845432][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.863081][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.896854][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 173.915446][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.941904][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.983026][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 174.022388][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.046407][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.063400][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 174.072509][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.113387][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.144754][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 174.175151][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.184646][ T5909] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 174.199056][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.214633][ T5909] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 174.229381][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 174.241934][ T7303] netlink: 52 bytes leftover after parsing attributes in process `syz.2.415'. [ 174.242804][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 174.263993][ T10] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 174.272621][ T10] usb 1-1: Product: syz [ 174.277328][ T10] usb 1-1: Manufacturer: syz [ 174.282023][ T10] usb 1-1: SerialNumber: syz [ 174.293334][ T10] usb 1-1: config 0 descriptor?? [ 174.295275][ T5880] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 174.321985][ T10] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 174.486454][ T5880] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 174.495846][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.518630][ T5880] usb 4-1: config 0 descriptor?? [ 174.535015][ T5880] cp210x 4-1:0.0: cp210x converter detected [ 174.542333][ T5872] usb 1-1: USB disconnect, device number 28 [ 174.553992][ T5872] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 174.643127][ T2224] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 174.774082][ T2224] usb 3-1: device descriptor read/64, error -71 [ 174.845020][ T5909] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 174.858351][ T5909] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 174.870882][ T5909] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 174.887333][ T5909] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 174.932289][ T5880] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 175.024006][ T2224] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 175.145183][ T5880] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 175.154354][ T5880] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 175.165569][ T2224] usb 3-1: device descriptor read/64, error -71 [ 175.174751][ T5880] usb 4-1: cp210x converter now attached to ttyUSB0 [ 175.188760][ T5880] usb 4-1: USB disconnect, device number 40 [ 175.206348][ T5880] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 175.218109][ T5880] cp210x 4-1:0.0: device disconnected [ 175.275392][ T2224] usb usb3-port1: attempt power cycle [ 175.614058][ T2224] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 175.655690][ T2224] usb 3-1: device descriptor read/8, error -71 [ 175.733243][ T5909] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 175.893595][ T2224] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 175.903330][ T5909] usb 1-1: Using ep0 maxpacket: 8 [ 175.915485][ T5909] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.925451][ T2224] usb 3-1: device descriptor read/8, error -71 [ 175.926667][ T5909] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 175.941266][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.954569][ T5909] usb 1-1: config 0 descriptor?? [ 175.966219][ T5909] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 176.053281][ T2224] usb usb3-port1: unable to enumerate USB device [ 176.242660][ T9] usb 2-1: USB disconnect, device number 43 [ 176.572457][ T7309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.586235][ T7309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.615008][ T2224] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 176.645202][ T7321] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 176.656831][ T7321] block device autoloading is deprecated and will be removed. [ 176.785791][ T2224] usb 4-1: Using ep0 maxpacket: 32 [ 176.794711][ T2224] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 176.808390][ T7309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.417'. [ 176.820329][ T2224] usb 4-1: config 0 has no interface number 0 [ 176.835657][ T2224] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 176.856433][ T5909] gspca_vc032x: reg_w err -71 [ 176.862193][ T5909] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 176.875703][ T5909] usb 1-1: USB disconnect, device number 29 [ 176.884794][ T2224] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 176.894418][ T2224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.902472][ T2224] usb 4-1: Product: syz [ 176.907816][ T2224] usb 4-1: Manufacturer: syz [ 176.912466][ T2224] usb 4-1: SerialNumber: syz [ 176.927372][ T2224] usb 4-1: config 0 descriptor?? [ 176.933939][ T7318] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 177.052961][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 177.151838][ T7318] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 177.203650][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 177.214453][ T9] usb 2-1: config 0 has an invalid interface number: 145 but max is 0 [ 177.225761][ T9] usb 2-1: config 0 has no interface number 0 [ 177.242633][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 177.252414][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.262425][ T9] usb 2-1: Product: syz [ 177.267207][ T9] usb 2-1: Manufacturer: syz [ 177.274300][ T9] usb 2-1: SerialNumber: syz [ 177.282632][ T9] usb 2-1: config 0 descriptor?? [ 177.290904][ T9] hub 2-1:0.145: bad descriptor, ignoring hub [ 177.297789][ T9] hub 2-1:0.145: probe with driver hub failed with error -5 [ 177.315695][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.145/input/input18 [ 177.566355][ T2224] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 177.594724][ T2224] asix 4-1:0.188: probe with driver asix failed with error -32 [ 177.763178][ T5909] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 177.894574][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 177.923239][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 177.934453][ T5909] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.945633][ T5909] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.960142][ T5909] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 177.969678][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.978278][ T5909] usb 1-1: Product: syz [ 177.982657][ T5909] usb 1-1: Manufacturer: syz [ 177.987671][ T5909] usb 1-1: SerialNumber: syz [ 178.068570][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 178.079416][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.087976][ T9] usb 3-1: Product: syz [ 178.092392][ T9] usb 3-1: Manufacturer: syz [ 178.097182][ T9] usb 3-1: SerialNumber: syz [ 178.403680][ T5179] usb 2-1: reset high-speed USB device number 44 using dummy_hcd [ 178.416779][ T5909] usb 1-1: cannot find UAC_HEADER [ 178.419624][ T5179] usb 2-1: device reset changed ep0 maxpacket size! [ 178.445846][ T2224] usb 2-1: USB disconnect, device number 44 [ 178.501479][ T5909] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 178.515093][ T5909] usb 1-1: USB disconnect, device number 30 [ 178.525721][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 178.539854][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 178.552222][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.634459][ T2224] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 178.792812][ T2224] usb 2-1: Using ep0 maxpacket: 32 [ 178.805803][ T2224] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 178.814697][ T2224] usb 2-1: can't read configurations, error -22 [ 178.944608][ T2224] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 179.112925][ T2224] usb 2-1: Using ep0 maxpacket: 32 [ 179.124517][ T2224] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 179.134268][ T2224] usb 2-1: can't read configurations, error -22 [ 179.141002][ T2224] usb usb2-port1: attempt power cycle [ 179.274528][ T5880] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 179.410921][ T5879] usb 4-1: USB disconnect, device number 41 [ 179.456824][ T5880] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 179.479932][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.492929][ T2224] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 179.507873][ T5880] usb 1-1: Product: syz [ 179.520102][ T5880] usb 1-1: Manufacturer: syz [ 179.537036][ T2224] usb 2-1: Using ep0 maxpacket: 32 [ 179.546601][ T5880] usb 1-1: SerialNumber: syz [ 179.561188][ T2224] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 179.577030][ T2224] usb 2-1: can't read configurations, error -22 [ 179.584332][ T7340] syzkaller1: entered promiscuous mode [ 179.601373][ T7340] syzkaller1: entered allmulticast mode [ 179.722843][ T2224] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 179.768393][ T2224] usb 2-1: Using ep0 maxpacket: 32 [ 179.803244][ T2224] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 179.811228][ T2224] usb 2-1: can't read configurations, error -22 [ 179.836435][ T2224] usb usb2-port1: unable to enumerate USB device [ 180.021233][ T5880] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 180.066187][ T5880] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 180.361672][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO [ 180.378736][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 180.383261][ T2224] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 180.389571][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 180.414514][ T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 180.445135][ T9] usb 3-1: USB disconnect, device number 45 [ 180.553354][ T2224] usb 4-1: Using ep0 maxpacket: 32 [ 180.568685][ T2224] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.579367][ T2224] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.591930][ T2224] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.602445][ T2224] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.616819][ T2224] usb 4-1: config 0 interface 0 has no altsetting 0 [ 180.623640][ T2224] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 180.632891][ T2224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.644362][ T2224] usb 4-1: config 0 descriptor?? [ 180.686169][ T5880] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 180.698378][ T5880] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 180.710085][ T5880] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 180.725564][ T5880] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 181.064725][ T7349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.077883][ T7349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.094128][ T7349] block nbd3: NBD_DISCONNECT [ 181.130046][ T2224] corsair-psu 0003:1B1C:1C09.0007: item fetching failed at offset 4/5 [ 181.140506][ T2224] corsair-psu 0003:1B1C:1C09.0007: probe with driver corsair-psu failed with error -22 [ 181.262737][ T5879] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 181.323945][ T5910] usb 4-1: USB disconnect, device number 42 [ 181.402650][ T5879] usb 3-1: device descriptor read/64, error -71 [ 181.642674][ T5879] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 181.673629][ T2224] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 181.772702][ T5879] usb 3-1: device descriptor read/64, error -71 [ 181.834967][ T2224] usb 2-1: Using ep0 maxpacket: 8 [ 181.842952][ T2224] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.853608][ T2224] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 181.863168][ T2224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.874913][ T2224] usb 2-1: config 0 descriptor?? [ 181.883916][ T5879] usb usb3-port1: attempt power cycle [ 181.890711][ T2224] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 182.064015][ T5872] usb 1-1: USB disconnect, device number 31 [ 182.242631][ T5879] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 182.252629][ T5910] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 182.283839][ T5879] usb 3-1: device descriptor read/8, error -71 [ 182.425195][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 182.436616][ T5910] usb 4-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 182.448109][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.461919][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 182.473584][ T5910] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 182.484172][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.499862][ T5910] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 182.505666][ T7355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.510613][ T5910] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 182.526088][ T5910] usb 4-1: Manufacturer: syz [ 182.534135][ T7355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.536871][ T5879] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 182.564719][ T5910] usb 4-1: config 0 descriptor?? [ 182.583466][ T5879] usb 3-1: device descriptor read/8, error -71 [ 182.702885][ T5879] usb usb3-port1: unable to enumerate USB device [ 182.753457][ T7355] netlink: 20 bytes leftover after parsing attributes in process `syz.1.433'. [ 182.783751][ T2224] gspca_vc032x: reg_w err -71 [ 182.788545][ T2224] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 182.835336][ T2224] usb 2-1: USB disconnect, device number 49 [ 182.922897][ T5910] rc_core: IR keymap rc-hauppauge not found [ 182.931356][ T5910] Registered IR keymap rc-empty [ 182.936756][ T5910] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 182.963743][ T5910] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 182.996050][ T5910] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 183.012819][ T5910] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input19 [ 183.030440][ T5910] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 183.052925][ T5910] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 183.074553][ T5910] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 183.094437][ T5910] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 183.113083][ T5910] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 183.143430][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 183.151534][ T5910] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 183.183071][ T5910] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 183.214065][ T5910] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 183.235220][ T5910] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 183.253082][ T5910] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 183.275276][ T5910] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 183.284519][ T5910] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 183.312747][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 183.326308][ T9] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 183.345456][ T5910] usb 4-1: USB disconnect, device number 43 [ 183.351542][ T9] usb 1-1: config 0 has no interface number 0 [ 183.364202][ T9] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 183.379913][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 183.389362][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.432531][ T9] usb 1-1: Product: syz [ 183.446872][ T9] usb 1-1: Manufacturer: syz [ 183.451673][ T9] usb 1-1: SerialNumber: syz [ 183.465227][ T9] usb 1-1: config 0 descriptor?? [ 183.483284][ T7367] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 183.567645][ T7372] netlink: 20 bytes leftover after parsing attributes in process `syz.1.438'. [ 183.704464][ T7367] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 183.766908][ T7377] netlink: 'syz.1.440': attribute type 3 has an invalid length. [ 184.132189][ T9] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 184.151366][ T9] asix 1-1:0.188: probe with driver asix failed with error -61 [ 184.412786][ T5879] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 184.575638][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 184.593803][ T5879] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 184.619760][ T5879] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 184.629081][ T5872] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 184.653741][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.679840][ T5879] usb 3-1: Product: syz [ 184.684575][ T5879] usb 3-1: Manufacturer: syz [ 184.689186][ T5879] usb 3-1: SerialNumber: syz [ 184.697316][ T5879] usb 3-1: config 0 descriptor?? [ 184.718642][ T5879] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 184.798883][ T5872] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 184.833178][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.842072][ T5872] usb 2-1: Product: syz [ 184.853693][ T5872] usb 2-1: Manufacturer: syz [ 184.859561][ T5872] usb 2-1: SerialNumber: syz [ 184.868438][ T7403] FAULT_INJECTION: forcing a failure. [ 184.868438][ T7403] name failslab, interval 1, probability 0, space 0, times 0 [ 184.898250][ T7403] CPU: 1 UID: 0 PID: 7403 Comm: syz.3.444 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.898281][ T7403] Tainted: [L]=SOFTLOCKUP [ 184.898288][ T7403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 184.898298][ T7403] Call Trace: [ 184.898305][ T7403] [ 184.898313][ T7403] dump_stack_lvl+0xe8/0x150 [ 184.898339][ T7403] should_fail_ex+0x412/0x560 [ 184.898366][ T7403] should_failslab+0xa8/0x100 [ 184.898385][ T7403] ? skb_clone+0x212/0x3a0 [ 184.898405][ T7403] kmem_cache_alloc_noprof+0x87/0x650 [ 184.898436][ T7403] skb_clone+0x212/0x3a0 [ 184.898460][ T7403] __netlink_deliver_tap+0x424/0x8b0 [ 184.898489][ T7403] ? netlink_deliver_tap+0x2e/0x1b0 [ 184.898508][ T7403] netlink_deliver_tap+0x19c/0x1b0 [ 184.898527][ T7403] netlink_unicast+0x7e3/0x9b0 [ 184.898559][ T7403] ? __pfx_netlink_unicast+0x10/0x10 [ 184.898585][ T7403] ? netlink_sendmsg+0x650/0xb40 [ 184.898601][ T7403] ? skb_put+0x11b/0x210 [ 184.898623][ T7403] netlink_sendmsg+0x813/0xb40 [ 184.898649][ T7403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.898669][ T7403] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 184.898701][ T7403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.898718][ T7403] sock_sendmsg_nosec+0x18f/0x1d0 [ 184.898744][ T7403] ____sys_sendmsg+0x589/0x8c0 [ 184.898772][ T7403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.898801][ T7403] ? import_iovec+0x73/0xa0 [ 184.898827][ T7403] ___sys_sendmsg+0x2a5/0x360 [ 184.898854][ T7403] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.898906][ T7403] ? __fget_files+0x2a/0x420 [ 184.898927][ T7403] ? __fget_files+0x3a0/0x420 [ 184.898957][ T7403] __x64_sys_sendmsg+0x1bd/0x2a0 [ 184.898980][ T7403] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 184.899009][ T7403] ? __pfx_ksys_write+0x10/0x10 [ 184.899045][ T7403] do_syscall_64+0x14d/0xf80 [ 184.899065][ T7403] ? trace_irq_disable+0x3b/0x150 [ 184.899087][ T7403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.899105][ T7403] ? clear_bhb_loop+0x40/0x90 [ 184.899125][ T7403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.899142][ T7403] RIP: 0033:0x7f065979aeb9 [ 184.899158][ T7403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.899173][ T7403] RSP: 002b:00007f065a5ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.899191][ T7403] RAX: ffffffffffffffda RBX: 00007f0659a15fa0 RCX: 00007f065979aeb9 [ 184.899204][ T7403] RDX: 0000000004000010 RSI: 0000200000000480 RDI: 0000000000000003 [ 184.899215][ T7403] RBP: 00007f065a5ca090 R08: 0000000000000000 R09: 0000000000000000 [ 184.899225][ T7403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.899235][ T7403] R13: 00007f0659a16038 R14: 00007f0659a15fa0 R15: 00007ffc0730a8e8 [ 184.899261][ T7403] [ 185.396897][ T5872] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 185.409008][ T5872] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 185.831554][ T7422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.450'. [ 185.932556][ T2224] usb 1-1: USB disconnect, device number 32 [ 185.998294][ T7387] netlink: 48 bytes leftover after parsing attributes in process `syz.2.442'. [ 186.025683][ T5872] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 186.063459][ T7427] openvswitch: netlink: Flow actions attr not present in new flow. [ 186.073735][ T5872] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 186.103244][ T5872] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 186.124570][ T5879] gspca_zc3xx: reg_w_i err -71 [ 186.171226][ T5872] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 186.403988][ T7433] syzkaller1: entered promiscuous mode [ 186.416605][ T7433] syzkaller1: entered allmulticast mode [ 186.713365][ T5879] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 186.719909][ T5879] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 186.762594][ T5879] usb 3-1: USB disconnect, device number 50 [ 187.222981][ T5879] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 187.372620][ T5872] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 187.405988][ T5879] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 187.427837][ T5879] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.453616][ T2224] usb 2-1: USB disconnect, device number 50 [ 187.489853][ T5879] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 187.524785][ T5879] usb 3-1: config 0 interface 0 has no altsetting 0 [ 187.536859][ T5879] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 187.567783][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.592484][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 187.600313][ T5879] usb 3-1: config 0 descriptor?? [ 187.620220][ T5872] usb 4-1: config 0 has no interfaces? [ 187.642429][ T5872] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 187.662866][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.696571][ T7458] Bluetooth: MGMT ver 1.23 [ 187.705500][ T5872] usb 4-1: config 0 descriptor?? [ 187.812586][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 187.983039][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 187.995778][ T9] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 188.022578][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.080335][ T9] usb 1-1: config 0 descriptor?? [ 188.115666][ T9] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 188.169637][ T9] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input20 [ 188.270509][ T5879] chicony 0003:04F2:1421.0008: hidraw0: USB HID v0.04 Device [HID 04f2:1421] on usb-dummy_hcd.2-1/input0 [ 188.371185][ T7456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.380070][ T7456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.454442][ T5872] usb 4-1: USB disconnect, device number 44 [ 188.456807][ T5910] usb 1-1: USB disconnect, device number 33 [ 188.876375][ T5910] usb 3-1: USB disconnect, device number 51 [ 189.362481][ T5879] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 189.394082][ T5872] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 189.518729][ T5879] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 189.544403][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.553183][ T5879] usb 3-1: Product: syz [ 189.557614][ T5879] usb 3-1: Manufacturer: syz [ 189.564172][ T5879] usb 3-1: SerialNumber: syz [ 189.571266][ T5872] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 189.582284][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.590632][ T5872] usb 1-1: Product: syz [ 189.594863][ T5872] usb 1-1: Manufacturer: syz [ 189.599462][ T5872] usb 1-1: SerialNumber: syz [ 189.664255][ T7494] dlm: no locking on control device [ 189.671468][ T7494] netlink: 'syz.1.477': attribute type 1 has an invalid length. [ 189.686736][ T7494] netlink: 224 bytes leftover after parsing attributes in process `syz.1.477'. [ 189.717516][ T7495] netlink: 9 bytes leftover after parsing attributes in process `syz.1.477'. [ 189.732664][ T7495] gretap0: entered promiscuous mode [ 189.784472][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 189.788661][ T5834] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 190.025507][ T5879] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 190.042662][ T5879] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 190.073560][ T5872] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 190.085698][ T5872] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 190.219072][ T7503] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 4π!FVluc'f`ކ;1 [ 190.281793][ T7504] mmap: syz.3.480 (7504) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 190.649317][ T5860] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 190.831640][ T5860] usb 4-1: Using ep0 maxpacket: 16 [ 190.855849][ T5860] usb 4-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 190.886605][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 190.907874][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24864, setting to 1024 [ 190.938900][ T5860] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 190.962632][ T5860] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.979484][ T7517] FAULT_INJECTION: forcing a failure. [ 190.979484][ T7517] name failslab, interval 1, probability 0, space 0, times 0 [ 191.002606][ T7517] CPU: 1 UID: 0 PID: 7517 Comm: syz.1.481 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.002634][ T7517] Tainted: [L]=SOFTLOCKUP [ 191.002641][ T7517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 191.002651][ T7517] Call Trace: [ 191.002659][ T7517] [ 191.002666][ T7517] dump_stack_lvl+0xe8/0x150 [ 191.002701][ T7517] should_fail_ex+0x412/0x560 [ 191.002728][ T7517] should_failslab+0xa8/0x100 [ 191.002749][ T7517] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 191.002768][ T7517] ? __get_vm_area_node+0x13f/0x300 [ 191.002796][ T7517] __get_vm_area_node+0x13f/0x300 [ 191.002818][ T7517] ? comedi_device_attach+0x539/0x720 [ 191.002848][ T7517] __vmalloc_node_range_noprof+0x372/0x1730 [ 191.002873][ T7517] ? comedi_buf_alloc+0x311/0x8f0 [ 191.002917][ T7517] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 191.002942][ T7517] ? rcu_is_watching+0x15/0xb0 [ 191.002966][ T7517] ? __kasan_kmalloc+0x93/0xb0 [ 191.002985][ T7517] ? comedi_buf_alloc+0x311/0x8f0 [ 191.003003][ T7517] vzalloc_noprof+0xb2/0xe0 [ 191.003026][ T7517] ? comedi_buf_alloc+0x311/0x8f0 [ 191.003045][ T7517] comedi_buf_alloc+0x311/0x8f0 [ 191.003074][ T7517] comedi_device_postconfig+0x59b/0xcf0 [ 191.003111][ T7517] comedi_device_attach+0x539/0x720 [ 191.003143][ T7517] comedi_unlocked_ioctl+0x8ef/0x1af0 [ 191.003180][ T7517] ? kasan_quarantine_put+0xbb/0x1f0 [ 191.003204][ T7517] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 191.003242][ T7517] ? do_vfs_ioctl+0x1166/0x1530 [ 191.003263][ T7517] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 191.003294][ T7517] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 191.003336][ T7517] ? __fget_files+0x2a/0x420 [ 191.003359][ T7517] ? __fget_files+0x2a/0x420 [ 191.003379][ T7517] ? __fget_files+0x3a0/0x420 [ 191.003398][ T7517] ? __fget_files+0x2a/0x420 [ 191.003423][ T7517] ? bpf_lsm_file_ioctl+0x9/0x20 [ 191.003443][ T7517] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 191.003465][ T7517] __se_sys_ioctl+0xfc/0x170 [ 191.003485][ T7517] do_syscall_64+0x14d/0xf80 [ 191.003506][ T7517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.003523][ T7517] ? clear_bhb_loop+0x40/0x90 [ 191.003544][ T7517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.003561][ T7517] RIP: 0033:0x7fd12639aeb9 [ 191.003578][ T7517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.003592][ T7517] RSP: 002b:00007fd12724c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.003611][ T7517] RAX: ffffffffffffffda RBX: 00007fd126615fa0 RCX: 00007fd12639aeb9 [ 191.003623][ T7517] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 191.003634][ T7517] RBP: 00007fd12724c090 R08: 0000000000000000 R09: 0000000000000000 [ 191.003645][ T7517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.003656][ T7517] R13: 00007fd126616038 R14: 00007fd126615fa0 R15: 00007ffe786ab188 [ 191.003690][ T7517] [ 191.003919][ T5860] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 191.167323][ T7517] syz.1.481: vmalloc error: size 8192, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 191.172068][ T5860] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 191.207551][ T7517] ,cpuset=/,mems_allowed=0-1 [ 191.207655][ T7517] CPU: 0 UID: 0 PID: 7517 Comm: syz.1.481 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.207679][ T7517] Tainted: [L]=SOFTLOCKUP [ 191.207684][ T7517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 191.207695][ T7517] Call Trace: [ 191.207702][ T7517] [ 191.207709][ T7517] dump_stack_lvl+0xe8/0x150 [ 191.207737][ T7517] warn_alloc+0x249/0x340 [ 191.207760][ T7517] ? __pfx_warn_alloc+0x10/0x10 [ 191.207778][ T7517] ? __get_vm_area_node+0x13f/0x300 [ 191.207805][ T7517] ? __get_vm_area_node+0x2b5/0x300 [ 191.207825][ T7517] ? comedi_device_attach+0x539/0x720 [ 191.207856][ T7517] __vmalloc_node_range_noprof+0x397/0x1730 [ 191.207907][ T7517] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 191.207931][ T7517] ? rcu_is_watching+0x15/0xb0 [ 191.207956][ T7517] ? __kasan_kmalloc+0x93/0xb0 [ 191.207974][ T7517] ? comedi_buf_alloc+0x311/0x8f0 [ 191.207991][ T7517] vzalloc_noprof+0xb2/0xe0 [ 191.208013][ T7517] ? comedi_buf_alloc+0x311/0x8f0 [ 191.208031][ T7517] comedi_buf_alloc+0x311/0x8f0 [ 191.208059][ T7517] comedi_device_postconfig+0x59b/0xcf0 [ 191.208094][ T7517] comedi_device_attach+0x539/0x720 [ 191.208124][ T7517] comedi_unlocked_ioctl+0x8ef/0x1af0 [ 191.208160][ T7517] ? kasan_quarantine_put+0xbb/0x1f0 [ 191.208183][ T7517] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 191.208219][ T7517] ? do_vfs_ioctl+0x1166/0x1530 [ 191.208239][ T7517] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 191.208268][ T7517] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 191.208308][ T7517] ? __fget_files+0x2a/0x420 [ 191.208330][ T7517] ? __fget_files+0x2a/0x420 [ 191.208350][ T7517] ? __fget_files+0x3a0/0x420 [ 191.208368][ T7517] ? __fget_files+0x2a/0x420 [ 191.208392][ T7517] ? bpf_lsm_file_ioctl+0x9/0x20 [ 191.208410][ T7517] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 191.208437][ T7517] __se_sys_ioctl+0xfc/0x170 [ 191.208456][ T7517] do_syscall_64+0x14d/0xf80 [ 191.208476][ T7517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.208493][ T7517] ? clear_bhb_loop+0x40/0x90 [ 191.208513][ T7517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.208530][ T7517] RIP: 0033:0x7fd12639aeb9 [ 191.208549][ T7517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.208563][ T7517] RSP: 002b:00007fd12724c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.208580][ T7517] RAX: ffffffffffffffda RBX: 00007fd126615fa0 RCX: 00007fd12639aeb9 [ 191.208591][ T7517] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 191.208602][ T7517] RBP: 00007fd12724c090 R08: 0000000000000000 R09: 0000000000000000 [ 191.208612][ T7517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.208622][ T7517] R13: 00007fd126616038 R14: 00007fd126615fa0 R15: 00007ffe786ab188 [ 191.208650][ T7517] [ 191.208711][ T7517] Mem-Info: [ 191.214576][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 191.222298][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 191.272397][ T7517] active_anon:6036 inactive_anon:0 isolated_anon:0 [ 191.272397][ T7517] active_file:13320 inactive_file:40572 isolated_file:0 [ 191.272397][ T7517] unevictable:771 dirty:127 writeback:0 [ 191.272397][ T7517] slab_reclaimable:13736 slab_unreclaimable:90827 [ 191.272397][ T7517] mapped:25209 shmem:1398 pagetables:1386 [ 191.272397][ T7517] sec_pagetables:0 bounce:0 [ 191.272397][ T7517] kernel_misc_reclaimable:0 [ 191.272397][ T7517] free:1323877 free_pcp:15364 free_cma:0 [ 191.681726][ T7517] Node 0 active_anon:23944kB inactive_anon:0kB active_file:53280kB inactive_file:162088kB unevictable:1548kB isolated(anon):0kB isolated(file):0kB mapped:100736kB dirty:504kB writeback:0kB shmem:4056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11916kB pagetables:5600kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 191.730752][ T7517] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 191.746301][ T5860] usb 4-1: Manufacturer: syz [ 191.795228][ T7517] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 191.827020][ T7517] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 191.842043][ T7517] Node 0 DMA32 free:1351224kB boost:0kB min:34096kB low:42620kB high:51144kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23864kB inactive_anon:0kB active_file:53280kB inactive_file:162088kB unevictable:1548kB writepending:476kB zspages:0kB present:3129332kB managed:2540908kB mlocked:12kB bounce:0kB free_pcp:54856kB local_pcp:29732kB free_cma:0kB [ 191.843312][ T5860] usb 4-1: config 0 descriptor?? [ 191.893944][ T5144] Bluetooth: hci2: command 0x0406 tx timeout [ 191.901170][ T7517] lowmem_reserve[]: 0 0 1 1 1 [ 191.906159][ T7517] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1692kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 191.952555][ T7517] lowmem_reserve[]: 0 0 0 0 0 [ 191.963534][ T7517] Node 1 Normal free:3931536kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4096kB local_pcp:4096kB free_cma:0kB [ 191.998344][ T7517] lowmem_reserve[]: 0 0 0 0 0 [ 192.010765][ T7517] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 192.068687][ T7517] Node 0 DMA32: 2724*4kB (UME) 1041*8kB (UM) 174*16kB (UM) 229*32kB (UM) 155*64kB (UME) 103*128kB (UM) 56*256kB (UM) 22*512kB (UM) 13*1024kB (UM) 7*2048kB (UME) 304*4096kB (UM) = 1350872kB [ 192.094183][ T5872] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO [ 192.122216][ T7517] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 192.122713][ T5872] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 192.143347][ T5879] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 192.152223][ T7517] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 12*16kB (UME) 10*32kB (UME) 4*64kB (UME) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 958*4096kB (M) = 3931536kB [ 192.175043][ T5879] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 192.202094][ T7517] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 192.222299][ T7517] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 192.223946][ T5879] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 192.231745][ T7517] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 192.252830][ T5872] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 192.285653][ T7517] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 192.305301][ T5879] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 192.320133][ T7517] 55288 total pagecache pages [ 192.334095][ T5872] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 192.339479][ T7517] 0 pages in swap cache [ 192.354261][ T7517] Free swap = 124996kB [ 192.361038][ T5879] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 192.374663][ T5860] rc_core: IR keymap rc-hauppauge not found [ 192.380589][ T5860] Registered IR keymap rc-empty [ 192.386282][ T7517] Total swap = 124996kB [ 192.392093][ T5872] usb 1-1: USB disconnect, device number 34 [ 192.402613][ T7517] 2097051 pages RAM [ 192.406477][ T7517] 0 pages HighMem/MovableOnly [ 192.411155][ T7517] 429786 pages reserved [ 192.415717][ T5860] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 192.428064][ T7517] 0 pages cma reserved [ 192.446234][ T5879] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 192.452194][ T7517] comedi comedi3: Buffer allocation failed [ 192.467951][ T5860] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 192.507427][ T5879] usb 3-1: USB disconnect, device number 52 [ 192.527320][ T5860] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 192.565206][ T5860] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input21 [ 192.590358][ T5860] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 192.632895][ T5860] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 192.683228][ T5860] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 192.723567][ T5860] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 192.758987][ T5860] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 192.807472][ T5860] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 192.833090][ T5860] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 192.862348][ T5860] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 192.896669][ T5860] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 192.922037][ T5909] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 192.922437][ T5860] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 192.956140][ T5860] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 192.983231][ T5860] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 193.026812][ T5860] usb 4-1: USB disconnect, device number 45 [ 193.032975][ T5872] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 193.073930][ T5909] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 193.100181][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.128126][ T5909] usb 2-1: config 0 descriptor?? [ 193.168152][ T5909] asix 2-1:0.0: probe with driver asix failed with error -22 [ 193.192534][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 193.224658][ T5872] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 193.235015][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.245021][ T5872] usb 3-1: Product: syz [ 193.249227][ T5872] usb 3-1: Manufacturer: syz [ 193.254144][ T5872] usb 3-1: SerialNumber: syz [ 193.270292][ T5872] usb 3-1: config 0 descriptor?? [ 193.365912][ T5909] usb 2-1: USB disconnect, device number 51 [ 193.425187][ T5834] Bluetooth: hci2: unexpected event for opcode 0x2023 [ 193.605149][ T7556] netlink: 316 bytes leftover after parsing attributes in process `syz.3.489'. [ 193.636636][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.489'. [ 193.647430][ T7558] syzkaller1: entered promiscuous mode [ 193.653235][ T7558] syzkaller1: entered allmulticast mode [ 193.659271][ T7556] openvswitch: netlink: Flow key attr not present in new flow. [ 193.938028][ T5872] peak_usb 3-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.01AF0000 (2 channels) [ 193.959668][ T5872] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 193.967976][ T5872] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 194.103392][ T5872] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 194.205427][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.383831][ T5834] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 194.420831][ T7556] netlink: 40 bytes leftover after parsing attributes in process `syz.3.489'. [ 194.748579][ T7584] hugetlbfs: syz.2.499 (7584): Using mlock ulimits for SHM_HUGETLB is obsolete [ 194.815811][ T5834] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 194.827172][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.827205][ T5834] Tainted: [L]=SOFTLOCKUP [ 194.827212][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 194.827222][ T5834] Workqueue: hci0 hci_rx_work [ 194.827253][ T5834] Call Trace: [ 194.827261][ T5834] [ 194.827270][ T5834] dump_stack_lvl+0xe8/0x150 [ 194.827297][ T5834] sysfs_create_dir_ns+0x271/0x2a0 [ 194.827319][ T5834] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 194.827348][ T5834] ? do_raw_spin_unlock+0xf5/0x210 [ 194.827372][ T5834] kobject_add_internal+0x62b/0xd00 [ 194.827408][ T5834] kobject_add+0x163/0x240 [ 194.827438][ T5834] ? __pfx_kobject_add+0x10/0x10 [ 194.827465][ T5834] ? _raw_spin_unlock+0x28/0x50 [ 194.827487][ T5834] ? get_device_parent+0x366/0x3a0 [ 194.827511][ T5834] device_add+0x408/0xb70 [ 194.827534][ T5834] hci_conn_add_sysfs+0xd5/0x210 [ 194.827563][ T5834] le_conn_complete_evt+0xf1d/0x1430 [ 194.827593][ T5834] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 194.827612][ T5834] ? irqentry_exit+0x59e/0x620 [ 194.827634][ T5834] ? trace_irq_disable+0x3b/0x150 [ 194.827669][ T5834] hci_le_enh_conn_complete_evt+0x189/0x490 [ 194.827696][ T5834] hci_event_packet+0x7af/0x12c0 [ 194.827726][ T5834] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 194.827754][ T5834] ? __pfx_hci_event_packet+0x10/0x10 [ 194.827784][ T5834] ? kcov_remote_start+0x49a/0x7a0 [ 194.827812][ T5834] ? hci_send_to_monitor+0xe2/0x590 [ 194.827837][ T5834] hci_rx_work+0x3ee/0x1030 [ 194.827872][ T5834] ? process_one_work+0x87c/0x1650 [ 194.827895][ T5834] process_one_work+0x949/0x1650 [ 194.827938][ T5834] ? __pfx_process_one_work+0x10/0x10 [ 194.827960][ T5834] ? do_raw_spin_lock+0x12b/0x2f0 [ 194.827993][ T5834] worker_thread+0xb46/0x1140 [ 194.828041][ T5834] kthread+0x388/0x470 [ 194.828060][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 194.828081][ T5834] ? __pfx_kthread+0x10/0x10 [ 194.828099][ T5834] ret_from_fork+0x51e/0xb90 [ 194.828127][ T5834] ? __pfx_ret_from_fork+0x10/0x10 [ 194.828149][ T5834] ? __switch_to+0xc7d/0x1450 [ 194.828172][ T5834] ? __pfx_kthread+0x10/0x10 [ 194.828192][ T5834] ret_from_fork_asm+0x1a/0x30 [ 194.828233][ T5834] [ 194.828262][ T5834] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 195.063514][ T5834] Bluetooth: hci0: failed to register connection device [ 195.075245][ T5834] ================================================================== [ 195.083418][ T5834] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x86a/0x1390 [ 195.091399][ T5834] Read of size 8 at addr ffff888033da9480 by task kworker/u9:4/5834 [ 195.099369][ T5834] [ 195.101700][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.101722][ T5834] Tainted: [L]=SOFTLOCKUP [ 195.101728][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 195.101739][ T5834] Workqueue: hci0 hci_rx_work [ 195.101765][ T5834] Call Trace: [ 195.101772][ T5834] [ 195.101778][ T5834] dump_stack_lvl+0xe8/0x150 [ 195.101802][ T5834] print_report+0xba/0x230 [ 195.101823][ T5834] ? l2cap_connect_cfm+0x86a/0x1390 [ 195.101842][ T5834] kasan_report+0x117/0x150 [ 195.101863][ T5834] ? l2cap_connect_cfm+0x86a/0x1390 [ 195.101887][ T5834] l2cap_connect_cfm+0x86a/0x1390 [ 195.101911][ T5834] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 195.101931][ T5834] ? __pfx_bt_err+0x10/0x10 [ 195.101954][ T5834] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 195.101975][ T5834] hci_connect_cfm+0x95/0x140 [ 195.101994][ T5834] le_conn_complete_evt+0xf65/0x1430 [ 195.102035][ T5834] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 195.102061][ T5834] ? irqentry_exit+0x59e/0x620 [ 195.102084][ T5834] ? trace_irq_disable+0x3b/0x150 [ 195.102116][ T5834] hci_le_enh_conn_complete_evt+0x189/0x490 [ 195.102140][ T5834] hci_event_packet+0x7af/0x12c0 [ 195.102167][ T5834] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 195.102196][ T5834] ? __pfx_hci_event_packet+0x10/0x10 [ 195.102216][ T5834] ? kcov_remote_start+0x49a/0x7a0 [ 195.102237][ T5834] ? hci_send_to_monitor+0xe2/0x590 [ 195.102253][ T5834] hci_rx_work+0x3ee/0x1030 [ 195.102275][ T5834] ? process_one_work+0x87c/0x1650 [ 195.102293][ T5834] process_one_work+0x949/0x1650 [ 195.102316][ T5834] ? __pfx_process_one_work+0x10/0x10 [ 195.102332][ T5834] ? do_raw_spin_lock+0x12b/0x2f0 [ 195.102351][ T5834] worker_thread+0xb46/0x1140 [ 195.102378][ T5834] kthread+0x388/0x470 [ 195.102390][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 195.102407][ T5834] ? __pfx_kthread+0x10/0x10 [ 195.102419][ T5834] ret_from_fork+0x51e/0xb90 [ 195.102437][ T5834] ? __pfx_ret_from_fork+0x10/0x10 [ 195.102453][ T5834] ? __switch_to+0xc7d/0x1450 [ 195.102469][ T5834] ? __pfx_kthread+0x10/0x10 [ 195.102481][ T5834] ret_from_fork_asm+0x1a/0x30 [ 195.102506][ T5834] [ 195.102511][ T5834] [ 195.311957][ T5834] Allocated by task 5834: [ 195.316282][ T5834] kasan_save_track+0x3e/0x80 [ 195.320952][ T5834] __kasan_kmalloc+0x93/0xb0 [ 195.325570][ T5834] __kmalloc_cache_noprof+0x31c/0x660 [ 195.330951][ T5834] l2cap_chan_create+0x51/0x790 [ 195.335800][ T5834] l2cap_sock_new_connection_cb+0x182/0x2e0 [ 195.341686][ T5834] l2cap_connect_cfm+0x368/0x1390 [ 195.346698][ T5834] hci_connect_cfm+0x95/0x140 [ 195.351358][ T5834] le_conn_complete_evt+0xf65/0x1430 [ 195.356629][ T5834] hci_le_enh_conn_complete_evt+0x189/0x490 [ 195.362517][ T5834] hci_event_packet+0x7af/0x12c0 [ 195.367446][ T5834] hci_rx_work+0x3ee/0x1030 [ 195.371938][ T5834] process_one_work+0x949/0x1650 [ 195.376866][ T5834] worker_thread+0xb46/0x1140 [ 195.381528][ T5834] kthread+0x388/0x470 [ 195.385580][ T5834] ret_from_fork+0x51e/0xb90 [ 195.390156][ T5834] ret_from_fork_asm+0x1a/0x30 [ 195.394918][ T5834] [ 195.397237][ T5834] Freed by task 7572: [ 195.401203][ T5834] kasan_save_track+0x3e/0x80 [ 195.405879][ T5834] kasan_save_free_info+0x46/0x50 [ 195.410898][ T5834] __kasan_slab_free+0x5c/0x80 [ 195.415646][ T5834] kfree+0x1c1/0x630 [ 195.419531][ T5834] l2cap_sock_cleanup_listen+0xf0/0x440 [ 195.425065][ T5834] l2cap_sock_release+0x6a/0x230 [ 195.429992][ T5834] __sock_release+0xb9/0x250 [ 195.434569][ T5834] sock_close+0x1c/0x30 [ 195.438715][ T5834] __fput+0x44f/0xa70 [ 195.442683][ T5834] task_work_run+0x1d9/0x270 [ 195.447259][ T5834] exit_to_user_mode_loop+0xed/0x480 [ 195.452530][ T5834] do_syscall_64+0x32d/0xf80 [ 195.457110][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.462993][ T5834] [ 195.465302][ T5834] The buggy address belongs to the object at ffff888033da9000 [ 195.465302][ T5834] which belongs to the cache kmalloc-2k of size 2048 [ 195.479340][ T5834] The buggy address is located 1152 bytes inside of [ 195.479340][ T5834] freed 2048-byte region [ffff888033da9000, ffff888033da9800) [ 195.493304][ T5834] [ 195.495629][ T5834] The buggy address belongs to the physical page: [ 195.502041][ T5834] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888033da8000 pfn:0x33da8 [ 195.512113][ T5834] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 195.520599][ T5834] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 195.529085][ T5834] page_type: f5(slab) [ 195.533054][ T5834] raw: 00fff00000000240 ffff88813ff1b000 ffffea0000964010 ffff88813ff19948 [ 195.541621][ T5834] raw: ffff888033da8000 0000000000080006 00000000f5000000 0000000000000000 [ 195.550190][ T5834] head: 00fff00000000240 ffff88813ff1b000 ffffea0000964010 ffff88813ff19948 [ 195.558847][ T5834] head: ffff888033da8000 0000000000080006 00000000f5000000 0000000000000000 [ 195.567507][ T5834] head: 00fff00000000003 ffffea0000cf6a01 00000000ffffffff 00000000ffffffff [ 195.576168][ T5834] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 195.584820][ T5834] page dumped because: kasan: bad access detected [ 195.591227][ T5834] page_owner tracks the page as allocated [ 195.596930][ T5834] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19201365375, free_ts 0 [ 195.616633][ T5834] post_alloc_hook+0x231/0x280 [ 195.621403][ T5834] get_page_from_freelist+0x24dc/0x2580 [ 195.626936][ T5834] __alloc_frozen_pages_noprof+0x18d/0x380 [ 195.632732][ T5834] allocate_slab+0x7b/0x660 [ 195.637241][ T5834] refill_objects+0x331/0x3c0 [ 195.641908][ T5834] __pcs_replace_empty_main+0x2b9/0x620 [ 195.647454][ T5834] __kmalloc_node_track_caller_noprof+0x572/0x7b0 [ 195.653853][ T5834] krealloc_node_align_noprof+0x1ae/0x390 [ 195.659557][ T5834] add_sysfs_param+0xd4/0xb80 [ 195.664224][ T5834] kernel_add_sysfs_param+0x7f/0xe0 [ 195.669408][ T5834] param_sysfs_builtin+0x199/0x250 [ 195.674501][ T5834] param_sysfs_builtin_init+0x23/0x30 [ 195.679856][ T5834] do_one_initcall+0x250/0x8d0 [ 195.684609][ T5834] do_initcall_level+0x104/0x190 [ 195.689534][ T5834] do_initcalls+0x59/0xa0 [ 195.693849][ T5834] kernel_init_freeable+0x2a6/0x3e0 [ 195.699035][ T5834] page_owner free stack trace missing [ 195.704395][ T5834] [ 195.706712][ T5834] Memory state around the buggy address: [ 195.712327][ T5834] ffff888033da9380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 195.720380][ T5834] ffff888033da9400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 195.728431][ T5834] >ffff888033da9480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 195.736473][ T5834] ^ [ 195.740524][ T5834] ffff888033da9500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 195.748565][ T5834] ffff888033da9580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 195.756618][ T5834] ================================================================== [ 195.801810][ T5834] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 195.809035][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.820052][ T5834] Tainted: [L]=SOFTLOCKUP [ 195.824382][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 195.834447][ T5834] Workqueue: hci0 hci_rx_work [ 195.839142][ T5834] Call Trace: [ 195.842428][ T5834] [ 195.845364][ T5834] vpanic+0x56c/0xa60 [ 195.849361][ T5834] ? __pfx_vpanic+0x10/0x10 [ 195.853867][ T5834] panic+0xc5/0xd0 [ 195.857581][ T5834] ? __pfx_panic+0x10/0x10 [ 195.861998][ T5834] ? preempt_schedule_thunk+0x16/0x30 [ 195.867369][ T5834] ? l2cap_connect_cfm+0x86a/0x1390 [ 195.872564][ T5834] ? preempt_schedule_thunk+0x16/0x30 [ 195.877927][ T5834] ? l2cap_connect_cfm+0x86a/0x1390 [ 195.883118][ T5834] check_panic_on_warn+0x89/0xb0 [ 195.888044][ T5834] ? l2cap_connect_cfm+0x86a/0x1390 [ 195.893228][ T5834] end_report+0x73/0x180 [ 195.897459][ T5834] ? l2cap_connect_cfm+0x86a/0x1390 [ 195.902641][ T5834] kasan_report+0x128/0x150 [ 195.907131][ T5834] ? l2cap_connect_cfm+0x86a/0x1390 [ 195.912324][ T5834] l2cap_connect_cfm+0x86a/0x1390 [ 195.917354][ T5834] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 195.922809][ T5834] ? __pfx_bt_err+0x10/0x10 [ 195.927313][ T5834] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 195.932769][ T5834] hci_connect_cfm+0x95/0x140 [ 195.937446][ T5834] le_conn_complete_evt+0xf65/0x1430 [ 195.942742][ T5834] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 195.948473][ T5834] ? irqentry_exit+0x59e/0x620 [ 195.953244][ T5834] ? trace_irq_disable+0x3b/0x150 [ 195.958270][ T5834] hci_le_enh_conn_complete_evt+0x189/0x490 [ 195.964202][ T5834] hci_event_packet+0x7af/0x12c0 [ 195.969152][ T5834] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 195.974441][ T5834] ? __pfx_hci_event_packet+0x10/0x10 [ 195.979817][ T5834] ? kcov_remote_start+0x49a/0x7a0 [ 195.984924][ T5834] ? hci_send_to_monitor+0xe2/0x590 [ 195.990113][ T5834] hci_rx_work+0x3ee/0x1030 [ 195.994611][ T5834] ? process_one_work+0x87c/0x1650 [ 195.999711][ T5834] process_one_work+0x949/0x1650 [ 196.004642][ T5834] ? __pfx_process_one_work+0x10/0x10 [ 196.010002][ T5834] ? do_raw_spin_lock+0x12b/0x2f0 [ 196.015033][ T5834] worker_thread+0xb46/0x1140 [ 196.019729][ T5834] kthread+0x388/0x470 [ 196.023787][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 196.028893][ T5834] ? __pfx_kthread+0x10/0x10 [ 196.033474][ T5834] ret_from_fork+0x51e/0xb90 [ 196.038060][ T5834] ? __pfx_ret_from_fork+0x10/0x10 [ 196.043158][ T5834] ? __switch_to+0xc7d/0x1450 [ 196.047821][ T5834] ? __pfx_kthread+0x10/0x10 [ 196.052396][ T5834] ret_from_fork_asm+0x1a/0x30 [ 196.057159][ T5834] [ 196.060298][ T5834] Kernel Offset: disabled [ 196.064608][ T5834] Rebooting in 86400 seconds..