last executing test programs: 1m27.073472193s ago: executing program 3 (id=1277): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000500)={0x40, 0x1, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000980)={0x34, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000e40)={0x1c, &(0x7f0000000540)={0x20, 0x1}, &(0x7f00000009c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000e00)={0x21, 0x0, 0x1, "88"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000340)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m24.557727933s ago: executing program 3 (id=1284): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'batadv_slave_0\x00', @random="010000201000"}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) (fail_nth: 7) 1m24.321681913s ago: executing program 3 (id=1285): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/57, 0x39}], 0x1, 0x34, 0x2000051b) recvmsg$kcm(r1, &(0x7f0000001e40)={&(0x7f0000000380)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f00000005c0)=""/93, 0x5d}, {&(0x7f0000000640)=""/112, 0x70}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/230, 0xe6}, {&(0x7f0000001a80)=""/129, 0x81}, {&(0x7f0000001b40)=""/230, 0xe6}, {&(0x7f0000001c40)=""/14, 0xe}], 0xa, &(0x7f0000001d40)=""/232, 0xe8}, 0x100) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040042000000a8001600a400014020000500feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e425e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db7010000827ffad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r2, 0x7) ioctl$SNDCTL_DSP_GETIPTR(r2, 0x800c5011, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000240)={r3, 0x85, "dd0149192c58ab1f795d482c6d6e67023cfaac1a057f9e3f10b357dcec2a71061194d823f220ab395ec5a3a2349663d576274137d9a953ce8ef48b2526646bce6adeff79cd40247013cb251cee2bfd8025d4beb392bedcfc58ef40cabdfb41a43dc7a99fc1f811935e8046812bb828ab33d88e0cfc92c9634e470c42d44879b98ebd894084"}, &(0x7f0000000300)=0x8d) 1m24.104607118s ago: executing program 3 (id=1286): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000040)=0x5, 0x4) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x2903006, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$cont(0x18, r1, 0x4, 0x1) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 1m23.897286812s ago: executing program 3 (id=1288): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000036d640, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWCHAIN={0xa4, 0x3, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7f}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x86c7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x401}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe1b9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8c000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xb}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd25, 0x25dfdbfb, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000840}, 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 1m23.054237433s ago: executing program 3 (id=1291): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000500)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000040)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000740)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000400)={0x60, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000280)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x20, 0xd, 0xba, {0xba, 0xb, "ae109eff6a16061eeba61ed700c07dfd86a35ed3247053b2f2e028a9a7538d0a8c2d98ed92d842421831fbc210d4aa20f3058048a9db2ec6cfb3fb87d04ff3b4245926dce11c76a1e4b4efa782d8040aa31b04ed229f8436e77ba81e58e778574abe9de4e3ee3894e5eb892fc21540653bd1b45e6b1d376122a92ef8748d74ba4da2d7ac06c66a1539186c20fb7688a2c8f2b8c53c4696f0a027473b7d8ebde856bbb66d558a631729f66fac061099d1f3a92cffbbc4bcde"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000200)={0x0, 0x16, 0x23, "7356907ed8392ae6ce42f68109be7a6d4b8e73bfb809b04958f5bc1399d6c9483d6e48"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000002c0)={0x0, 0x8, 0x1}}) 1m22.459246331s ago: executing program 32 (id=1291): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000500)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000040)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000740)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000400)={0x60, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000280)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x20, 0xd, 0xba, {0xba, 0xb, "ae109eff6a16061eeba61ed700c07dfd86a35ed3247053b2f2e028a9a7538d0a8c2d98ed92d842421831fbc210d4aa20f3058048a9db2ec6cfb3fb87d04ff3b4245926dce11c76a1e4b4efa782d8040aa31b04ed229f8436e77ba81e58e778574abe9de4e3ee3894e5eb892fc21540653bd1b45e6b1d376122a92ef8748d74ba4da2d7ac06c66a1539186c20fb7688a2c8f2b8c53c4696f0a027473b7d8ebde856bbb66d558a631729f66fac061099d1f3a92cffbbc4bcde"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000200)={0x0, 0x16, 0x23, "7356907ed8392ae6ce42f68109be7a6d4b8e73bfb809b04958f5bc1399d6c9483d6e48"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000002c0)={0x0, 0x8, 0x1}}) 4.772566157s ago: executing program 2 (id=1701): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1b2a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x9, "", [{{0x9, 0x4, 0x0, 0x4, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000640), 0xa, 0x40) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000680)={0xfffffffffffffffc, 0x0, 0x0, 0xcccccccc}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000680)={0xfffffffffffffffc, 0x0, 0x0, 0xcccccccc}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f0000000180)={0x0, 0x30, 0xe8, {0xe8, 0x23, "6fa9b00740daaad9b9ca001a70d77d82fb067747478a9619d47390056c1ece5f2baee893f7203e93c4e14ce84da63ec625fe46c165efd16844ee65de0d5c2f923d31f444d4b688980a10e0b8dccda625a8964f6bb0c78cba6d7a704a14a07e8e2ac90442c2c0796c569ef23a12f01bf688bfa2df8b4a6d5f4f6f523e14dee93bb3cc6a6d93ddbb211cd0eb6c01dc2e05ec515e665bea5e674eabb9058f1c4d4b6209421d22d929d42b9b68bd2c50b894ca0ffb41ae34c17857dbe03953d3b2bc31e462fbad88c8e8a5f8e52f5af4eaf47637221d741ff6156fe5d807a6f9070d808b86e4641d"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}, &(0x7f00000002c0)={0x0, 0x22, 0x10, {[@global=@item_4={0x3, 0x1, 0x8, "b28810e8"}, @main=@item_4={0x3, 0x0, 0xa, "eeef6eed"}, @global=@item_012={0x0, 0x1, 0x6}, @main=@item_4={0x3, 0x0, 0x9, "b6d388ba"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1000, 0x4, 0x1, {0x22, 0xc29}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000380)={0xa61720434612e59, 0x13, 0xac, "9deb02b7561a5f692a0988240d941332bbde34873b5fb2e7078635a42d99d1f0eca16803e77cb13370e91daa9212227165fa52a5b676f710c5c0f590d678b9d8e3be4bff2ada2e16be7385db457a250dba9fcfbede11ded475190c5e1ebd81fc2ec353e8232db19340bef8f202ac68778fe17dec7382013fc497ddf18c6c24458ee6dc26546112da626dc734c73e832285ed7e251fc668018e274cf6b37f4ce0dcecdd007064f7b14bd77a5a"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000004c0)={0x20, 0x1, 0x2f, "5e80249d536caff95916351b72340271f086f0a1afca8e8c11183787bc38ca3eb2d71db9f13f407e75aeb45577214c"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x2}}) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200928000000280883efb930f018a14c0c20b20300c00df7"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200928000000280883efb930f018a14c0c20b20300c00df7"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x121500, 0x0) read$hiddev(r2, &(0x7f0000000100)=""/89, 0x59) 4.726028477s ago: executing program 1 (id=1702): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xfffffee2) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.446119895s ago: executing program 4 (id=1705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xffff, @local, 0xa}], 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 4.106633376s ago: executing program 4 (id=1707): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000380), 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/69, 0x45}, {&(0x7f0000000200)=""/61, 0x3d}], 0x2}, 0x0) 3.709535389s ago: executing program 4 (id=1708): r0 = socket$inet(0xa, 0x801, 0x6) listen(r0, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x0, 0x4000}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x1000) r3 = accept4(r0, 0x0, 0x0, 0x800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="e0020000", @ANYRES16=r4, @ANYBLOB="000327bd7000fedbdf252b00000008000300", @ANYRES32=0x0, @ANYBLOB="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"/707], 0x2e0}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c804) 3.64255205s ago: executing program 1 (id=1709): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000f00)={0x24, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c004}, 0x0) (fail_nth: 3) 3.418865418s ago: executing program 1 (id=1710): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xfffffee2) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) (fail_nth: 3) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.369560072s ago: executing program 4 (id=1711): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmstat\x00', 0x0, 0x0) pread64(r1, &(0x7f00000002c0)=""/126, 0x7e, 0x2000000000007fff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x900, 0x0, 0x30314142, 0x0, 0x0, [{}, {0xfffffffc}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}], 0x0, 0x0, 0x0, 0x0, 0x5}}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x94, r4, 0x633d41a77d0888ff, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x3e, 0xa8, @random="0dd77d2a890eecf289260edac327aee4e05611aa6e689b1264292f6658230d196ef55beb96c57391fac795802583e457207847ada4f9ecea95ba"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20040880}, 0x24048845) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x80, 0xf880, 0x6, 0x4, {{0xa, 0x4, 0x2, 0x27, 0x28, 0x66, 0x0, 0x6, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @ssrr={0x89, 0x13, 0x1f, [@dev={0xac, 0x14, 0x14, 0x32}, @broadcast, @dev={0xac, 0x14, 0x14, 0x22}, @local]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', r5, 0x0, 0x4f, 0x7, 0x1, 0x1, @loopback, @empty, 0x20, 0x40, 0xffff, 0x8b51}}) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.433966094s ago: executing program 1 (id=1713): r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x2) 2.177515781s ago: executing program 1 (id=1714): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f00000018c0)=ANY=[@ANYBLOB="030107"], 0x4) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f00000001c0)=0x4, 0x4) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="13e47904c35ea70b44845ab8d2aa9d8076523dad1cc5d5f496297aead2842f23a8d4a8a0b7c83ad5e006cf11f9f16d747d7ba55b43e1832444fd947073910db40ea175da9af8cb7109ceb2fd4848d41c6062cf297db944d81f2b2132ed85f71e99a4fe16d22bea7c30c6"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x40, 0x10, 0x6, "b4654a8d9d13"}, 0x0, 0x0, 0x0, 0x0}) 2.177328451s ago: executing program 0 (id=1715): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="0c005e0101"], 0x38}}, 0x0) 2.128072955s ago: executing program 0 (id=1716): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@assoc={0x18, 0x117, 0x4, 0xd}], 0x18, 0x28044854}], 0x1, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/69, 0x45}, {&(0x7f0000000200)=""/61, 0x3d}], 0x2}, 0x0) 2.071025859s ago: executing program 0 (id=1717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x5, 0xe4340000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x80}]}]}, 0x58}}, 0x2) 2.013400201s ago: executing program 0 (id=1718): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRESDEC=0x0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002060300000034e400000000010000000c000300686173683a69700005000400000000000900020073797a3100000000050005000a000000113f0300686173683a69702c706f7274000000000000040003000000741c0dae6c819344acbdc437e2ce0aa4a4001f8020d0c70b2138896a6e79e6b5f02c4c793abffb25815390e67b7ebeefca1e718c2058b4067f919560c73587c39833538800"/168], 0x5c}}, 0x2) 1.837571858s ago: executing program 2 (id=1719): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000100)={0xe4, 0x2, 0x1, "4a5ae5f662f97d000008000000000900000000001800", 0x38303553}) pselect6(0x40, &(0x7f0000000000)={0x2, 0xd, 0x4, 0x77, 0x8, 0xfffffffffffffffc, 0x7, 0x8000000000000001}, 0x0, &(0x7f00000000c0)={0x9, 0xa81e, 0x8, 0x800, 0x9, 0x4, 0x100000c, 0x7}, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d61436", 0x79, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r4}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) renameat2(r1, 0x0, r1, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a00000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000007400038070000080080003400000000264000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001020"], 0x124}}, 0x0) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x811030, 0x0) 1.812365195s ago: executing program 0 (id=1720): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000d80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @local, 0x137c1a3c}, 0x1c, 0x0}}], 0x1, 0x20e8086) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000000080)={0x27, r2, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) r6 = open(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5011c0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r7, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8059}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000340)="5fdbd61342", 0x5}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_256={{0x303}, "5abad2ad5629d784", "aa7956b96c7638a7de82e60782ac6ed9533573d2386a3300b37d2b293bd02e15", "8f3d1f7b", "88ce65ed3e50252c"}, 0x38) close(r0) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'mcryptd(streebog512-generic)\x00'}, 0x58) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r9, 0x89f5, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@local, 0x1, 0x0, 0x20, 0x0, [{@private}, {@dev}]}}) 1.612791516s ago: executing program 2 (id=1721): r0 = socket$inet(0x2, 0xa, 0x7) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1) (async) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0xd, 0x4) r1 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, 0xc4b3, 0x10, 0x3, 0x7, 0xfffffffd}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r2, 0x3}, &(0x7f0000000200)=0x8) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x1d9]}, &(0x7f0000000280)=0x6) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f00000002c0)={0x8, 'pimreg0\x00', {'pim6reg0\x00'}, 0x2}) (async) bind$inet(r0, &(0x7f0000000300)={0x2, 0xfff9, @remote}, 0x10) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async, rerun: 32) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3}) (rerun: 32) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x140d, 0x1, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040140}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f00000007c0)={{r3, &(0x7f00000005c0)='\xff#^', 0x0, &(0x7f0000000600)={@_ha_fsid={[0xff, 0xea1]}, {0x7, 0x9c, 0x5, 0x3}}, 0x8000, &(0x7f0000000640)={@_ha_fsid}, &(0x7f0000000680)=0x7}, {[0x3718, 0x56f9, 0x7, 0x4fb2d9dc]}, 0x8, 0xc5, &(0x7f00000006c0)=""/197}) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r9, 0x42c, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40054) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000009c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x2000, 0x3}) (async) pipe2$watch_queue(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) getpeername$unix(r7, &(0x7f0000000a40)=@abs, 0xfffffffffffffffd) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r7, 0x4004af77, &(0x7f0000000ac0)=0x6) write$P9_RXATTRWALK(r10, &(0x7f0000000b00)={0xf, 0x1f, 0x2, 0x7}, 0xf) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r8) sendmsg$IEEE802154_START_REQ(r8, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, r11, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x10}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xf}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x44) (async) r12 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000cc0), 0x80002, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r12, 0xc0186445, &(0x7f0000000d40)={0x4, 0x1}) 1.20559427s ago: executing program 2 (id=1722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) 968.379334ms ago: executing program 2 (id=1723): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000303000/0x3000)=nil, 0x3000, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) (async) accept(r2, 0x0, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (rerun: 64) 459.948199ms ago: executing program 0 (id=1724): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffb, @empty, 0x3}, 0x1c) writev(r0, &(0x7f0000003800)=[{&(0x7f0000000400)=',', 0x1}], 0x1) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 249.87817ms ago: executing program 4 (id=1725): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@assoc={0x18, 0x117, 0x4, 0xd}], 0x18, 0x28044854}], 0x1, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/69, 0x45}, {&(0x7f0000000200)=""/61, 0x3d}], 0x2}, 0x0) 165.449487ms ago: executing program 4 (id=1726): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) r1 = socket(0x1, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c0002800500010000000000080007400000000008000840000000013c000e"], 0xd8}}, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) syz_usb_connect$uac1(0x5, 0x8b, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x7e, 0x40, 0xd, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x23}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x100, 0x5, 0x5, 0x3}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x5, 0x1, [0x5], 0x4}, @extension_unit={0x7, 0x24, 0x8, 0x1, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x81, 0xd, 0x8, {0x7, 0x25, 0x1, 0x4, 0xf, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x9, 0x2, {0x7, 0x25, 0x1, 0x4, 0x7, 0xf25b}}}}}}}}]}}, 0x0) 101.941029ms ago: executing program 1 (id=1727): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r0, 0x4, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf251b0000000600210045c3"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000001000)={0x2, 0x4e20, @private=0xa018103}, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="54d1775206642de2b5115ab6f48ab9a83367e882b7aa235fcc4611f86fe85c134d3145573cb44505c1f851650c3795ad986159bd2b71fa5bfa666967f5a6c845b6f189c9ece2abcf71f8b72de02202c1386622c94cde64d7e0181b315eab8f90ca4e274f87c7945ab4cb905a4f39f1ea53fdad1c50b26b694962b4ff025080900fc8cc1b8a93043062d15137c06f6b84605c5e6c767e1d7b8a0ff50e42a580a66fe2f0fd70f02b1d803125634665df4fff614e6e3c96d5c425bda0dc75c6e244c462d004fa7179a58b4312a23844adb379dc2361b5d7c8c012a7f2f81df3a049afd206faba05a57f0897ce522858db9b6f0e"}, {&(0x7f0000000180)="04c9de839e16ff2d69043d785aea187b61cdc82ea4b2e120729642de7a962efa206f709efd78a28e260db6720468afdc3eee3650d662cbe0f73c5892957bce94c134783ace9a66884c5c0bcb9605e2e91306cb5baa11b40e76f5e207d97503201c552a2013a17fbee803d95fe33f319785c5a9c9f62b02c8"}], 0x2) r6 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r6, 0x9) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000200)={0xfffffffffffffcfd, 0xffffffffffffffff}) 0s ago: executing program 2 (id=1728): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0x0) kernel console output (not intermixed with test programs): -speed USB device number 46 using dummy_hcd [ 308.783328][ T9392] team0: Port device team_slave_1 added [ 308.855952][ T10] usb 2-1: USB disconnect, device number 60 [ 308.894675][ T5812] usb 3-1: device descriptor read/64, error -71 [ 309.006035][ T5812] usb usb3-port1: attempt power cycle [ 309.031367][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 309.046926][ T9500] netlink: 'syz.0.1319': attribute type 10 has an invalid length. [ 309.046950][ T9500] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1319'. [ 309.164461][ T9392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.164475][ T9392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.164493][ T9392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.167894][ T9392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.167909][ T9392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.167935][ T9392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.354967][ T5812] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 309.389120][ T5812] usb 3-1: device descriptor read/8, error -71 [ 309.632657][ T5812] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 309.656362][ T5812] usb 3-1: device descriptor read/8, error -71 [ 309.763481][ T5812] usb usb3-port1: unable to enumerate USB device [ 309.873704][ T9392] hsr_slave_0: entered promiscuous mode [ 309.876062][ T9392] hsr_slave_1: entered promiscuous mode [ 309.877818][ T9392] debugfs: 'hsr0' already exists in 'hsr' [ 309.877844][ T9392] Cannot create hsr debugfs directory [ 309.972616][ T5612] Bluetooth: hci1: command tx timeout [ 310.214003][ T5812] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 310.362696][ T5812] usb 1-1: Using ep0 maxpacket: 16 [ 310.366134][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.366189][ T5812] usb 1-1: New USB device found, idVendor=0456, idProduct=0284, bcdDevice= 1.00 [ 310.366216][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.375121][ T5812] usb 1-1: config 0 descriptor?? [ 310.651777][ T9515] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 310.682827][ T6216] hsr_slave_0: left promiscuous mode [ 310.722724][ T6216] hsr_slave_1: left promiscuous mode [ 310.723845][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.723863][ T6216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.805675][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.805708][ T6216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.311648][ T6216] veth1_macvtap: left promiscuous mode [ 311.342909][ T6216] veth0_macvtap: left promiscuous mode [ 311.395867][ T6216] veth1_vlan: left promiscuous mode [ 311.485191][ T6216] veth0_vlan: left promiscuous mode [ 311.896172][ T5617] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 312.067278][ T5617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.067402][ T5617] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 312.067429][ T5617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.131757][ T5617] usb 3-1: config 0 descriptor?? [ 312.608297][ T5617] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 312.743962][ T5617] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0007/input/input14 [ 313.417181][ T6216] team0 (unregistering): Port device team_slave_1 removed [ 313.663414][ T6216] team0 (unregistering): Port device team_slave_0 removed [ 314.155384][ T5617] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 314.579996][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 314.587342][ T9558] netlink: 'syz.1.1336': attribute type 2 has an invalid length. [ 314.688067][ T5812] usbhid 1-1:0.0: can't add hid device: -71 [ 314.688199][ T5812] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 314.787364][ T5812] usb 1-1: USB disconnect, device number 69 [ 315.370188][ T821] usb 3-1: reset high-speed USB device number 49 using dummy_hcd [ 315.479659][ T821] usb 3-1: device reset changed ep0 maxpacket size! [ 315.768860][ T5617] usb 3-1: USB disconnect, device number 49 [ 315.840710][ T9578] netlink: 'syz.1.1341': attribute type 4 has an invalid length. [ 316.012714][ T37] audit: type=1326 audit(1781386287.170:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9579 comm="syz.0.1342" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77bc68ce59 code=0x0 [ 317.449565][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.449683][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.638561][ T6216] IPVS: stop unused estimator thread 0... [ 317.721805][ T9619] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1351'. [ 317.827465][ T5269] 8021q: adding VLAN 0 to HW filter on device eth3 [ 318.039362][ T9628] netlink: 'syz.1.1352': attribute type 10 has an invalid length. [ 318.039388][ T9628] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1352'. [ 318.157197][ T9392] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 318.249122][ T9392] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 318.374435][ T9392] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 318.463454][ T9392] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 318.783193][ T9392] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 318.844140][ T9392] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 318.853913][ T5269] 8021q: adding VLAN 0 to HW filter on device eth4 [ 318.871025][ T9392] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 318.898746][ T9392] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 319.252594][ T32] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 319.423305][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 319.425828][ T32] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 319.425859][ T32] usb 1-1: config 0 has no interface number 0 [ 319.425908][ T32] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 319.425938][ T32] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 319.431898][ T32] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 319.431928][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.431948][ T32] usb 1-1: Product: syz [ 319.431963][ T32] usb 1-1: Manufacturer: syz [ 319.431977][ T32] usb 1-1: SerialNumber: syz [ 319.444272][ T32] usb 1-1: config 0 descriptor?? [ 319.558557][ T9392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.796788][ T32] radio-si470x 1-1:0.35: this is not a si470x device. [ 319.929917][ T9392] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.082079][ T1546] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.092025][ T1546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.130788][ T1546] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.131095][ T1546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.371576][ T32] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 320.603043][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1360'. [ 320.603111][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1360'. [ 320.791613][ T9677] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1362'. [ 320.872604][ T9679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.886232][ T9679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.900896][ T9679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.901487][ T9679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.253588][ T5778] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 321.408677][ T5778] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 321.408719][ T5778] usb 3-1: config 0 interface 0 has no altsetting 0 [ 321.408758][ T5778] usb 3-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 321.408786][ T5778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.430081][ T9691] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 321.463646][ T5778] usb 3-1: config 0 descriptor?? [ 321.701672][ T5778] usbhid 3-1:0.0: can't add hid device: -71 [ 321.701812][ T5778] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 321.723853][ T5778] usb 3-1: USB disconnect, device number 51 [ 322.094724][ T9392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.923788][ T32] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 323.070367][ T9392] veth0_vlan: entered promiscuous mode [ 323.082970][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 323.087508][ T5612] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 323.090142][ T9721] netlink: 'syz.1.1373': attribute type 7 has an invalid length. [ 323.114329][ T32] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.114369][ T32] usb 3-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.114396][ T32] usb 3-1: config 1 interface 0 has no altsetting 0 [ 323.129492][ T32] usb 3-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 323.129524][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.129545][ T32] usb 3-1: Product: syz [ 323.129560][ T32] usb 3-1: Manufacturer: syz [ 323.129575][ T32] usb 3-1: SerialNumber: syz [ 323.278921][ T9392] veth1_vlan: entered promiscuous mode [ 323.390268][ T32] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input15 [ 323.456817][ T4958] bcm5974 3-1:1.0: could not read from device [ 323.480873][ T9392] veth0_macvtap: entered promiscuous mode [ 323.536366][ T9392] veth1_macvtap: entered promiscuous mode [ 323.599443][ T9392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.646626][ T9392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.663306][ T4958] bcm5974 3-1:1.0: could not read from device [ 323.720426][ T32] usb 3-1: USB disconnect, device number 52 [ 323.735656][ T1000] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.738708][ T1000] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.861884][ T1000] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.875305][ T1000] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.215044][ T9734] sg_write: data in/out 467008/136 bytes for SCSI command 0x0-- guessing data in; [ 324.215044][ T9734] program syz.2.1377 not setting count and/or reply_len properly [ 325.680979][ T6475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.681001][ T6475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.095156][ T4989] usb 1-1: USB disconnect, device number 70 [ 326.118497][ T6211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.118522][ T6211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.930333][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1390'. [ 326.942643][ T5617] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 327.117517][ T5617] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 327.117550][ T5617] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 327.140222][ T5617] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 327.140257][ T5617] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.140290][ T5617] usb 5-1: Product: syz [ 327.140307][ T5617] usb 5-1: Manufacturer: syz [ 327.140324][ T5617] usb 5-1: SerialNumber: syz [ 327.186496][ T5617] usb 5-1: config 0 descriptor?? [ 327.199790][ T5617] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 327.302579][ T821] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 327.476511][ T821] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 327.476543][ T821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.476644][ T821] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 327.476668][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.546389][ T821] usb 2-1: config 0 descriptor?? [ 327.766102][ T821] usb 2-1: USB disconnect, device number 61 [ 328.202650][ T32] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 328.343406][ T32] usb 3-1: device descriptor read/64, error -71 [ 328.415537][ T5617] gspca_sunplus: reg_r err -71 [ 328.415645][ T5617] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 328.441614][ T5617] usb 5-1: USB disconnect, device number 2 [ 328.517833][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1398'. [ 328.592646][ T32] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 328.743292][ T32] usb 3-1: device descriptor read/64, error -71 [ 328.866531][ T32] usb usb3-port1: attempt power cycle [ 328.892653][ T821] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 329.075273][ T821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.075344][ T821] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 329.075371][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.080743][ T821] usb 2-1: config 0 descriptor?? [ 329.093919][ T821] pwc: Askey VC010 type 2 USB webcam detected. [ 329.234211][ T32] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 329.267843][ T32] usb 3-1: device descriptor read/8, error -71 [ 329.492908][ T821] pwc: recv_control_msg error -32 req 02 val 2b00 [ 329.496728][ T821] pwc: recv_control_msg error -32 req 02 val 2700 [ 329.499503][ T821] pwc: recv_control_msg error -32 req 02 val 2c00 [ 329.501727][ T821] pwc: recv_control_msg error -32 req 04 val 1000 [ 329.526508][ T32] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 329.555517][ T32] usb 3-1: device descriptor read/8, error -71 [ 329.672008][ T32] usb usb3-port1: unable to enumerate USB device [ 329.735145][ T821] pwc: recv_control_msg error -71 req 04 val 1400 [ 329.737634][ T821] pwc: recv_control_msg error -71 req 02 val 2000 [ 329.739001][ T821] pwc: recv_control_msg error -71 req 02 val 2100 [ 329.740846][ T821] pwc: recv_control_msg error -71 req 04 val 1500 [ 329.741213][ T821] pwc: recv_control_msg error -71 req 02 val 2500 [ 329.741683][ T821] pwc: recv_control_msg error -71 req 02 val 2400 [ 329.747184][ T821] pwc: recv_control_msg error -71 req 02 val 2600 [ 329.749552][ T821] pwc: recv_control_msg error -71 req 02 val 2900 [ 329.750768][ T821] pwc: recv_control_msg error -71 req 02 val 2800 [ 329.752039][ T821] pwc: recv_control_msg error -71 req 04 val 1100 [ 329.753363][ T821] pwc: recv_control_msg error -71 req 04 val 1200 [ 329.786017][ T821] pwc: Registered as video103. [ 329.796623][ T821] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17 [ 329.820349][ T821] usb 2-1: USB disconnect, device number 62 [ 330.022609][ T32] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 330.179012][ T32] usb 5-1: config index 0 descriptor too short (expected 1051, got 27) [ 330.179049][ T32] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 330.179071][ T32] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 330.179127][ T32] usb 5-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 330.179168][ T32] usb 5-1: config 0 interface 0 has no altsetting 0 [ 330.225414][ T32] usb 5-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 330.225448][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.225469][ T32] usb 5-1: Product: syz [ 330.225485][ T32] usb 5-1: Manufacturer: syz [ 330.225501][ T32] usb 5-1: SerialNumber: syz [ 330.266106][ T32] usb 5-1: config 0 descriptor?? [ 330.273730][ T9809] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 330.524804][ T32] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 330.525364][ T32] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 330.528950][ T32] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 330.529058][ T32] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 330.537324][ T32] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 330.540994][ T32] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 82 [ 330.541086][ T32] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 330.547081][ T32] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 330.553048][ T32] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 330.553151][ T32] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 330.559324][ T32] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 330.569612][ T32] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 84 [ 330.569741][ T32] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 330.573242][ T32] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 330.582412][ T32] usb 5-1: USB disconnect, device number 3 [ 330.635800][ T32] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 330.667740][ T32] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 330.715216][ T32] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 330.780367][ T32] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 330.781581][ T32] keyspan 5-1:0.0: device disconnected [ 330.852885][ T5612] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 330.866982][ T5619] Bluetooth: hci3: command 0x1003 tx timeout [ 331.084851][ T5612] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 331.633805][ T4989] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 331.804650][ T4989] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 331.804686][ T4989] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 331.808501][ T4989] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 331.808535][ T4989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.808557][ T4989] usb 2-1: Product: syz [ 331.808574][ T4989] usb 2-1: Manufacturer: syz [ 331.808591][ T4989] usb 2-1: SerialNumber: syz [ 331.878591][ T4989] usb 2-1: config 0 descriptor?? [ 331.896246][ T4989] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 332.294745][ T5617] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 332.444450][ T5617] usb 5-1: Using ep0 maxpacket: 8 [ 332.446841][ T5617] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 332.446903][ T5617] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 332.446930][ T5617] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 332.446957][ T5617] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 332.446983][ T5617] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.447027][ T5617] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 332.447049][ T5617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.652795][ T10] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 332.724987][ T5617] usb 5-1: GET_CAPABILITIES returned 0 [ 332.725044][ T5617] usbtmc 5-1:16.0: can't read capabilities [ 332.829730][ T10] usb 1-1: config 0 has an invalid interface number: 227 but max is 3 [ 332.829764][ T10] usb 1-1: config 0 has an invalid interface number: 152 but max is 3 [ 332.829786][ T10] usb 1-1: config 0 has an invalid interface number: 196 but max is 3 [ 332.830045][ T10] usb 1-1: config 0 has an invalid interface number: 36 but max is 3 [ 332.830069][ T10] usb 1-1: config 0 has an invalid interface number: 48 but max is 3 [ 332.830091][ T10] usb 1-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 332.830115][ T10] usb 1-1: config 0 has no interface number 0 [ 332.830134][ T10] usb 1-1: config 0 has no interface number 1 [ 332.830267][ T10] usb 1-1: config 0 has no interface number 2 [ 332.830287][ T10] usb 1-1: config 0 has no interface number 3 [ 332.830305][ T10] usb 1-1: config 0 has no interface number 4 [ 332.830636][ T10] usb 1-1: config 0 interface 36 altsetting 12 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 332.830889][ T10] usb 1-1: config 0 interface 36 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 332.830916][ T10] usb 1-1: config 0 interface 36 altsetting 12 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 332.830946][ T10] usb 1-1: too many endpoints for config 0 interface 48 altsetting 90: 45, using maximum allowed: 30 [ 332.831221][ T10] usb 1-1: config 0 interface 48 altsetting 90 has 0 endpoint descriptors, different from the interface descriptor's value: 45 [ 332.831253][ T10] usb 1-1: config 0 interface 152 has no altsetting 0 [ 332.831274][ T10] usb 1-1: config 0 interface 196 has no altsetting 0 [ 332.831293][ T10] usb 1-1: config 0 interface 36 has no altsetting 0 [ 332.831540][ T10] usb 1-1: config 0 interface 48 has no altsetting 0 [ 332.925619][ T10] usb 1-1: New USB device found, idVendor=413c, idProduct=8193, bcdDevice=15.c2 [ 332.942566][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.942597][ T10] usb 1-1: Product: syz [ 332.942615][ T10] usb 1-1: Manufacturer: syz [ 332.942631][ T10] usb 1-1: SerialNumber: syz [ 332.990965][ T9862] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 333.075543][ T10] usb 1-1: config 0 descriptor?? [ 333.138108][ T4989] gspca_sunplus: reg_r err -71 [ 333.138274][ T4989] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 333.200432][ T4989] usb 2-1: USB disconnect, device number 63 [ 333.316747][ T10] usb 1-1: unknown number of interfaces: 5 [ 333.393896][ T10] usb 1-1: USB disconnect, device number 71 [ 333.934372][ T4989] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 334.074108][ T32] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 334.096327][ T4989] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 334.096359][ T4989] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.096382][ T4989] usb 3-1: config 0 has no interface number 0 [ 334.096433][ T4989] usb 3-1: config 0 interface 117 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.099947][ T4989] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 334.099981][ T4989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.100004][ T4989] usb 3-1: Product: syz [ 334.100084][ T4989] usb 3-1: Manufacturer: syz [ 334.100110][ T4989] usb 3-1: SerialNumber: syz [ 334.182895][ T4989] usb 3-1: config 0 descriptor?? [ 334.243809][ T32] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 334.243845][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.243868][ T32] usb 2-1: Product: syz [ 334.243885][ T32] usb 2-1: Manufacturer: syz [ 334.243902][ T32] usb 2-1: SerialNumber: syz [ 334.280645][ T32] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 334.696962][ T9] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 334.854363][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 334.888596][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 334.927773][ T9] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 334.927812][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.927836][ T9] usb 1-1: Product: syz [ 334.927853][ T9] usb 1-1: Manufacturer: syz [ 334.927870][ T9] usb 1-1: SerialNumber: syz [ 334.985551][ T9] usb 1-1: config 0 descriptor?? [ 334.990131][ T9911] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 335.014867][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 335.014908][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 335.048357][ T1009] usb 3-1: USB disconnect, device number 57 [ 335.121582][ T5617] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 335.155573][ T9] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input18 [ 335.280986][ T32] usb 5-1: USB disconnect, device number 4 [ 335.570673][ T10] usb 2-1: USB disconnect, device number 64 [ 335.577435][ T5617] usb 2-1: ath9k_htc: Unable to allocate URBs [ 335.746122][ T9] usb 1-1: USB disconnect, device number 72 [ 335.746215][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 335.765704][ T9924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1430'. [ 335.875041][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 336.352858][ T4989] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 336.369013][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1434'. [ 336.506570][ T4989] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 336.506605][ T4989] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 336.510085][ T4989] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 336.510118][ T4989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.510139][ T4989] usb 5-1: Product: syz [ 336.510154][ T4989] usb 5-1: Manufacturer: syz [ 336.510168][ T4989] usb 5-1: SerialNumber: syz [ 336.570379][ T4989] usb 5-1: config 0 descriptor?? [ 336.582764][ T4989] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 337.254928][ T32] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 337.326775][ T9955] Invalid logical block size (150994944) [ 337.413772][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 337.429170][ T9947] netlink: 'syz.0.1439': attribute type 1 has an invalid length. [ 337.429196][ T9947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1439'. [ 337.433173][ T9947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.435260][ T9947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.456525][ T32] usb 1-1: unable to get BOS descriptor or descriptor too short [ 337.459040][ T32] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 337.459090][ T32] usb 1-1: can't read configurations, error -71 [ 337.468108][ T5617] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 337.586072][ T4989] gspca_sunplus: reg_r err -32 [ 337.586179][ T4989] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 337.610052][ T4989] usb 5-1: USB disconnect, device number 5 [ 337.625804][ T5617] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 337.625840][ T5617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.640456][ T5617] usb 3-1: config 0 descriptor?? [ 337.644959][ T5617] cp210x 3-1:0.0: cp210x converter detected [ 337.671581][ T9961] comedi comedi3: comedi_config --init_data is deprecated [ 338.058024][ T5617] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 338.131802][ T5617] usb 3-1: cp210x converter now attached to ttyUSB0 [ 338.350584][ T5617] usb 3-1: USB disconnect, device number 58 [ 338.381137][ T5617] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 338.622944][ T5617] cp210x 3-1:0.0: device disconnected [ 338.672614][ T32] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 338.833049][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 338.837408][ T32] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 338.837429][ T32] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 338.837445][ T32] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 338.837460][ T32] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.837487][ T32] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 338.837501][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.050416][ T32] usb 1-1: GET_CAPABILITIES returned 0 [ 339.050474][ T32] usbtmc 1-1:16.0: can't read capabilities [ 339.452782][ T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 339.463312][ T32] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 339.471002][T10004] binder: 10002:10004 ioctl c0306201 200000000640 returned -22 [ 339.609900][ T9] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 339.610000][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 339.612539][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 339.635968][ T9] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 339.636123][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.636149][ T9] usb 2-1: Product: syz [ 339.636165][ T9] usb 2-1: Manufacturer: syz [ 339.636182][ T9] usb 2-1: SerialNumber: syz [ 339.637465][ T32] usb 3-1: unable to get BOS descriptor or descriptor too short [ 339.638824][ T32] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 1024 [ 339.638857][ T32] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid wMaxPacketSize 0 [ 339.638882][ T32] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 0 [ 339.638910][ T32] usb 3-1: config 1 interface 0 has no altsetting 0 [ 339.641676][ T32] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 339.641708][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.641729][ T32] usb 3-1: Product: syz [ 339.641746][ T32] usb 3-1: Manufacturer: syz [ 339.641763][ T32] usb 3-1: SerialNumber: syz [ 339.710609][ T9] usb 2-1: config 0 descriptor?? [ 339.759204][ T9994] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 339.778204][ T9] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 340.732382][ T9] gspca_sunplus: reg_r err -32 [ 340.738533][ T9] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 340.755803][ T9] usb 2-1: USB disconnect, device number 65 [ 341.084928][T10016] misc userio: Invalid payload size [ 341.242046][ T9] usb 1-1: USB disconnect, device number 75 [ 341.335305][ T5617] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 341.495827][ T32] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 59 if 0 alt 4 proto 2 vid 0x0525 pid 0xA4A8 [ 341.516007][ T32] usb 3-1: USB disconnect, device number 59 [ 341.572651][ T5617] usb 5-1: Using ep0 maxpacket: 32 [ 341.575261][ T5617] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 341.575289][ T5617] usb 5-1: config 0 has no interface number 0 [ 341.590681][ T5617] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 341.590712][ T5617] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.590732][ T5617] usb 5-1: Product: syz [ 341.590747][ T5617] usb 5-1: Manufacturer: syz [ 341.590761][ T5617] usb 5-1: SerialNumber: syz [ 341.598048][ T32] usblp0: removed [ 341.627079][ T5617] usb 5-1: config 0 descriptor?? [ 341.912306][T10022] gfs2: not a GFS2 filesystem [ 342.171923][T10035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1474'. [ 342.211962][T10035] ALSA: mixer_oss: invalid OSS volume 'syztnl1' [ 342.211987][T10035] ALSA: mixer_oss: invalid OSS volume '`' [ 342.223869][T10035] ALSA: mixer_oss: invalid OSS volume '' [ 342.284698][ T5617] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 342.284736][ T5617] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 342.285270][ T5617] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 342.285599][ T5617] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 342.362277][ T5617] usb 5-1: USB disconnect, device number 6 [ 342.745217][ T9] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 342.905909][ T9] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 342.905945][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 342.909569][ T9] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 342.909600][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.909622][ T9] usb 1-1: Product: syz [ 342.909637][ T9] usb 1-1: Manufacturer: syz [ 342.909653][ T9] usb 1-1: SerialNumber: syz [ 342.973485][ T9] usb 1-1: config 0 descriptor?? [ 342.997068][ T9] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 343.055880][T10048] openvswitch: netlink: Actions may not be safe on all matching packets [ 343.618927][T10055] fuse: Unknown parameter '' [ 343.624436][T10055] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1481'. [ 344.018441][ T9] gspca_sunplus: reg_r err -71 [ 344.018560][ T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 344.037710][ T9] usb 1-1: USB disconnect, device number 76 [ 344.274805][ T32] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 344.297590][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 344.425705][ T32] usb 2-1: unable to get BOS descriptor or descriptor too short [ 344.426328][ T32] usb 2-1: not running at top speed; connect to a high speed hub [ 344.427552][ T32] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 344.429851][ T32] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 344.429880][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.429901][ T32] usb 2-1: Product: syz [ 344.429917][ T32] usb 2-1: Manufacturer: syz [ 344.429932][ T32] usb 2-1: SerialNumber: syz [ 344.731197][ T32] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 344.973605][ T32] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 345.019956][ T32] usb 2-1: USB disconnect, device number 66 [ 345.146810][ T5602] udevd[5602]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.198045][ T5617] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 345.340199][ T5617] usb 3-1: device descriptor read/64, error -71 [ 345.592876][ T5617] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 345.793132][ T5617] usb 3-1: device descriptor read/64, error -71 [ 345.793277][ T32] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 345.794214][ T9] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 345.903741][ T5617] usb usb3-port1: attempt power cycle [ 345.955287][ T32] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 345.955300][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.955358][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 345.955385][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.955559][ T32] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 345.959129][ T32] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 345.959158][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.959180][ T32] usb 5-1: Product: syz [ 345.959196][ T32] usb 5-1: Manufacturer: syz [ 345.959212][ T32] usb 5-1: SerialNumber: syz [ 346.042925][ T9] usb 1-1: config 0 descriptor?? [ 346.059348][ T32] usb 5-1: config 0 descriptor?? [ 346.083354][ T32] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 346.092065][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 346.103455][ T5812] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 346.262734][ T5812] usb 2-1: Using ep0 maxpacket: 8 [ 346.286232][ T5812] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 346.286269][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.286292][ T5812] usb 2-1: Product: syz [ 346.286309][ T5812] usb 2-1: Manufacturer: syz [ 346.286327][ T5812] usb 2-1: SerialNumber: syz [ 346.291625][ T5812] usb 2-1: config 0 descriptor?? [ 346.322727][ T5617] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 346.364469][ T5617] usb 3-1: device descriptor read/8, error -71 [ 346.472071][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 346.518579][ T5812] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 346.602678][ T5617] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 346.623664][ T5617] usb 3-1: device descriptor read/8, error -71 [ 346.733335][ T5617] usb usb3-port1: unable to enumerate USB device [ 346.878356][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 346.880404][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 346.882208][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 346.885673][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 346.886209][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 346.887264][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 346.889153][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 346.889641][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 346.890779][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 346.891269][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 346.891742][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 346.893247][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 346.894061][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 346.897590][ T9] pwc: Registered as video103. [ 346.908368][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 346.962194][ T9] usb 1-1: USB disconnect, device number 77 [ 347.088380][ T32] gspca_sunplus: reg_r err -32 [ 347.088711][ T32] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 347.120389][ T32] usb 5-1: USB disconnect, device number 7 [ 347.472297][T10121] FAULT_INJECTION: forcing a failure. [ 347.472297][T10121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.472325][T10121] CPU: 1 UID: 0 PID: 10121 Comm: syz.0.1502 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 347.472344][T10121] Tainted: [L]=SOFTLOCKUP [ 347.472349][T10121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 347.472357][T10121] Call Trace: [ 347.472363][T10121] [ 347.472368][T10121] dump_stack_lvl+0xe8/0x150 [ 347.472392][T10121] should_fail_ex+0x46b/0x600 [ 347.472413][T10121] _copy_from_iter+0x1d3/0x1670 [ 347.472446][T10121] ? rcu_is_watching+0x15/0xb0 [ 347.472483][T10121] ? __pfx__copy_from_iter+0x10/0x10 [ 347.472515][T10121] ? __alloc_skb+0x27d/0x7d0 [ 347.472537][T10121] ? __alloc_skb+0x27d/0x7d0 [ 347.472567][T10121] ? netlink_sendmsg+0x650/0xb40 [ 347.472592][T10121] ? skb_put+0x11b/0x210 [ 347.472619][T10121] netlink_sendmsg+0x6c0/0xb40 [ 347.472657][T10121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.472686][T10121] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 347.472713][T10121] ? aa_sock_msg_perm+0x122/0x200 [ 347.472728][T10121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.472744][T10121] sock_sendmsg_nosec+0x13a/0x180 [ 347.472765][T10121] ____sys_sendmsg+0x55c/0x870 [ 347.472784][T10121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.472805][T10121] ? import_iovec+0x73/0xa0 [ 347.472821][T10121] ___sys_sendmsg+0x2a5/0x360 [ 347.472836][T10121] ? __lock_acquire+0x6b5/0x2d10 [ 347.472855][T10121] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.472890][T10121] ? __fget_files+0x2a/0x420 [ 347.472903][T10121] ? __fget_files+0x3a6/0x420 [ 347.472921][T10121] __x64_sys_sendmsg+0x1b7/0x290 [ 347.472939][T10121] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.472964][T10121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.472986][T10121] do_syscall_64+0x174/0x580 [ 347.473003][T10121] ? trace_irq_disable+0x3b/0x140 [ 347.473019][T10121] ? clear_bhb_loop+0x40/0x90 [ 347.473034][T10121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.473047][T10121] RIP: 0033:0x7f77bc68ce59 [ 347.473060][T10121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.473072][T10121] RSP: 002b:00007f77ba8e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.473087][T10121] RAX: ffffffffffffffda RBX: 00007f77bc905fa0 RCX: 00007f77bc68ce59 [ 347.473097][T10121] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 347.473105][T10121] RBP: 00007f77ba8e6090 R08: 0000000000000000 R09: 0000000000000000 [ 347.473113][T10121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.473121][T10121] R13: 00007f77bc906038 R14: 00007f77bc905fa0 R15: 00007fff69757348 [ 347.473140][T10121] [ 347.879483][T10127] netlink: 57 bytes leftover after parsing attributes in process `syz.0.1505'. [ 347.957947][T10129] bond0: (slave gre0): refused to change device type [ 348.464378][ T5812] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 348.483077][T10143] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1511'. [ 348.484716][ T5812] usb 2-1: USB disconnect, device number 67 [ 348.603486][T10143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.616535][ T10] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 348.683966][T10143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.734882][T10143] bond0 (unregistering): Released all slaves [ 348.764793][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 348.765934][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.765960][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 348.766028][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 348.768286][ T10] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 348.768378][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.768401][ T10] usb 1-1: Product: syz [ 348.768417][ T10] usb 1-1: Manufacturer: syz [ 348.768434][ T10] usb 1-1: SerialNumber: syz [ 348.849711][ T32] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 349.039019][ T32] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 349.039054][ T32] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 349.055408][ T32] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 349.055449][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.055469][ T32] usb 3-1: Product: syz [ 349.055484][ T32] usb 3-1: Manufacturer: syz [ 349.055501][ T32] usb 3-1: SerialNumber: syz [ 349.105385][ T32] usb 3-1: config 0 descriptor?? [ 349.120290][ T32] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 349.511970][ T10] usb 1-1: USB disconnect, device number 78 [ 349.548570][T10155] kAFS: unable to lookup cell '(' [ 349.775821][ T5598] udevd[5598]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.836537][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 349.984259][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 349.986798][ T9] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 349.986825][ T9] usb 5-1: config 0 has no interface number 0 [ 350.014394][ T9] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 350.014438][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.014461][ T9] usb 5-1: Product: syz [ 350.014478][ T9] usb 5-1: Manufacturer: syz [ 350.014495][ T9] usb 5-1: SerialNumber: syz [ 350.061810][ T9] usb 5-1: config 0 descriptor?? [ 350.076551][ T9] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 350.150767][ T32] gspca_sunplus: reg_r err -32 [ 350.150981][ T32] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 350.162279][ T32] usb 3-1: USB disconnect, device number 64 [ 350.438966][T10167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.441318][T10167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.574180][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 350.769871][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 351.132036][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1526'. [ 351.442628][ T5812] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 351.595475][ T5812] usb 2-1: unable to get BOS descriptor or descriptor too short [ 351.597051][ T5812] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.597079][ T5812] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 351.600563][ T5812] usb 2-1: string descriptor 0 read error: -22 [ 351.600714][ T5812] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 351.600731][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.677609][ T5812] usb 2-1: selecting invalid altsetting 1 [ 351.678528][ T5812] usb 2-1: unit 6 not found! [ 352.300424][T10190] input: syz0 as /devices/virtual/input/input20 [ 352.657203][T10192] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 352.659505][T10192] syzkaller1: linktype set to 0 [ 352.676215][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 352.684681][ T4989] usb 5-1: USB disconnect, device number 8 [ 352.792120][ T4989] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 352.830500][ T4989] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 352.843863][ T4989] quatech2 5-1:0.51: device disconnected [ 352.942133][T10186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.953752][T10186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.228066][T10203] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1533'. [ 353.299871][ T5812] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 353.442695][ T4989] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 353.518653][ T5812] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 353.522222][ T5812] usb 2-1: USB disconnect, device number 68 [ 353.594300][ T4989] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 353.594335][ T4989] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 353.598044][ T4989] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 353.598070][ T4989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.598083][ T4989] usb 3-1: Product: syz [ 353.598092][ T4989] usb 3-1: Manufacturer: syz [ 353.598102][ T4989] usb 3-1: SerialNumber: syz [ 353.607962][ T4989] usb 3-1: config 0 descriptor?? [ 353.642582][ T1009] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 353.674837][ T4989] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 353.822562][ T1009] usb 1-1: Using ep0 maxpacket: 8 [ 353.824994][ T1009] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 353.825057][ T1009] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 353.825082][ T1009] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 353.825110][ T1009] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 353.825137][ T1009] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.825182][ T1009] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 353.825208][ T1009] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.159255][ T1009] usb 1-1: usb_control_msg returned -32 [ 354.159311][ T1009] usbtmc 1-1:16.0: can't read capabilities [ 354.382708][ T5812] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 354.462586][ T5617] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 354.509711][T10205] usbtmc 1-1:16.0: stb usb_control_msg returned -32 [ 354.535349][ T5812] usb 5-1: Using ep0 maxpacket: 32 [ 354.547881][ T5812] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 354.547915][ T5812] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 354.547939][ T5812] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.547963][ T5812] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 354.547986][ T5812] usb 5-1: config 1 has no interface number 0 [ 354.548039][ T5812] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 354.548076][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.634916][ T5617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.634973][ T5617] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 354.635117][ T5617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.675291][ T5812] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 354.683608][ T4989] gspca_sunplus: reg_r err -32 [ 354.683706][ T4989] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 354.710390][ T5617] usb 2-1: config 0 descriptor?? [ 354.722158][ T4989] usb 3-1: USB disconnect, device number 65 [ 354.759272][ T5706] usb 1-1: USB disconnect, device number 79 [ 354.834012][ T5812] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 354.835757][ T5812] snd_usb_pod 5-1:1.1: invalid control EP [ 354.836332][ T5812] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 354.876006][ T5812] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 354.897260][ T5812] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 355.038522][ T5812] usb 5-1: USB disconnect, device number 9 [ 355.491805][ T5617] usbhid 2-1:0.0: can't add hid device: -71 [ 355.492016][ T5617] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 355.521088][ T5617] usb 2-1: USB disconnect, device number 69 [ 355.653962][T10220] FAULT_INJECTION: forcing a failure. [ 355.653962][T10220] name failslab, interval 1, probability 0, space 0, times 0 [ 355.654005][T10220] CPU: 1 UID: 0 PID: 10220 Comm: syz.0.1540 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 355.654038][T10220] Tainted: [L]=SOFTLOCKUP [ 355.654046][T10220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 355.654060][T10220] Call Trace: [ 355.654069][T10220] [ 355.654079][T10220] dump_stack_lvl+0xe8/0x150 [ 355.654115][T10220] should_fail_ex+0x46b/0x600 [ 355.654152][T10220] should_failslab+0xa8/0x100 [ 355.654180][T10220] __kmalloc_cache_noprof+0xa0/0x6d0 [ 355.654206][T10220] ? __se_sys_mount+0x166/0x420 [ 355.654228][T10220] ? __se_sys_mount+0x166/0x420 [ 355.654250][T10220] ? memdup_user+0x99/0xd0 [ 355.654284][T10220] __se_sys_mount+0x166/0x420 [ 355.654314][T10220] ? __pfx___se_sys_mount+0x10/0x10 [ 355.654344][T10220] ? __x64_sys_mount+0x20/0xc0 [ 355.654366][T10220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.654391][T10220] do_syscall_64+0x174/0x580 [ 355.654419][T10220] ? trace_irq_disable+0x3b/0x140 [ 355.654447][T10220] ? clear_bhb_loop+0x40/0x90 [ 355.654476][T10220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.654499][T10220] RIP: 0033:0x7f77bc68ce59 [ 355.654521][T10220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.654541][T10220] RSP: 002b:00007f77ba8e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 355.654566][T10220] RAX: ffffffffffffffda RBX: 00007f77bc905fa0 RCX: 00007f77bc68ce59 [ 355.654583][T10220] RDX: 0000200000000040 RSI: 0000200000000580 RDI: 0000000000000000 [ 355.654598][T10220] RBP: 00007f77ba8e6090 R08: 00002000000000c0 R09: 0000000000000000 [ 355.654612][T10220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.654625][T10220] R13: 00007f77bc906038 R14: 00007f77bc905fa0 R15: 00007fff69757348 [ 355.654658][T10220] [ 355.959949][T10227] FAULT_INJECTION: forcing a failure. [ 355.959949][T10227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.959991][T10227] CPU: 1 UID: 0 PID: 10227 Comm: syz.4.1543 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 355.960024][T10227] Tainted: [L]=SOFTLOCKUP [ 355.960034][T10227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 355.960047][T10227] Call Trace: [ 355.960056][T10227] [ 355.960065][T10227] dump_stack_lvl+0xe8/0x150 [ 355.960099][T10227] should_fail_ex+0x46b/0x600 [ 355.960142][T10227] _copy_from_user+0x2d/0xb0 [ 355.960169][T10227] video_usercopy+0x36f/0x1450 [ 355.960211][T10227] ? __pfx___video_do_ioctl+0x10/0x10 [ 355.960246][T10227] ? __pfx_video_usercopy+0x10/0x10 [ 355.960289][T10227] ? __fget_files+0x2a/0x420 [ 355.960316][T10227] ? __fget_files+0x2a/0x420 [ 355.960337][T10227] ? __fget_files+0x3a6/0x420 [ 355.960362][T10227] v4l2_ioctl+0x190/0x1e0 [ 355.960394][T10227] ? __pfx_v4l2_ioctl+0x10/0x10 [ 355.960424][T10227] __se_sys_ioctl+0xff/0x170 [ 355.960452][T10227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.960476][T10227] do_syscall_64+0x174/0x580 [ 355.960504][T10227] ? trace_irq_disable+0x3b/0x140 [ 355.960532][T10227] ? clear_bhb_loop+0x40/0x90 [ 355.960560][T10227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.960584][T10227] RIP: 0033:0x7f5da5dece59 [ 355.960606][T10227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.960628][T10227] RSP: 002b:00007f5da4046028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.960652][T10227] RAX: ffffffffffffffda RBX: 00007f5da6065fa0 RCX: 00007f5da5dece59 [ 355.960669][T10227] RDX: 0000200000000040 RSI: 00000000c0405602 RDI: 0000000000000003 [ 355.960685][T10227] RBP: 00007f5da4046090 R08: 0000000000000000 R09: 0000000000000000 [ 355.960700][T10227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.960714][T10227] R13: 00007f5da6066038 R14: 00007f5da6065fa0 R15: 00007ffdf343d9d8 [ 355.960749][T10227] [ 356.024827][T10229] FAULT_INJECTION: forcing a failure. [ 356.024827][T10229] name failslab, interval 1, probability 0, space 0, times 0 [ 356.024866][T10229] CPU: 0 UID: 0 PID: 10229 Comm: syz.0.1544 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 356.024895][T10229] Tainted: [L]=SOFTLOCKUP [ 356.024903][T10229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 356.024915][T10229] Call Trace: [ 356.024923][T10229] [ 356.024932][T10229] dump_stack_lvl+0xe8/0x150 [ 356.024963][T10229] should_fail_ex+0x46b/0x600 [ 356.024997][T10229] should_failslab+0xa8/0x100 [ 356.025022][T10229] __kmalloc_noprof+0xfe/0x7e0 [ 356.025041][T10229] ? percpu_ref_get_many+0x18c/0x1e0 [ 356.025066][T10229] ? io_cache_alloc_new+0x40/0x100 [ 356.025087][T10229] ? io_cache_alloc_new+0x40/0x100 [ 356.025117][T10229] io_cache_alloc_new+0x40/0x100 [ 356.025141][T10229] io_uring_alloc_async_data+0x1b6/0x2e0 [ 356.025166][T10229] io_sendmsg_prep+0x42f/0x780 [ 356.025202][T10229] io_submit_sqes+0xbd3/0x22e0 [ 356.025257][T10229] __se_sys_io_uring_enter+0x34a/0x1c40 [ 356.025289][T10229] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 356.025317][T10229] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 356.025344][T10229] ? fput+0xa0/0xd0 [ 356.025369][T10229] ? rcu_is_watching+0x15/0xb0 [ 356.025404][T10229] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 356.025434][T10229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.025456][T10229] do_syscall_64+0x174/0x580 [ 356.025491][T10229] ? clear_bhb_loop+0x40/0x90 [ 356.025515][T10229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.025535][T10229] RIP: 0033:0x7f77bc68ce59 [ 356.025554][T10229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.025572][T10229] RSP: 002b:00007f77ba8e5fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 356.025594][T10229] RAX: ffffffffffffffda RBX: 0000200000000200 RCX: 00007f77bc68ce59 [ 356.025609][T10229] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003 [ 356.025621][T10229] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000008 [ 356.025633][T10229] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 356.025646][T10229] R13: 00007f77bc906038 R14: 00007f77bc905fa0 R15: 00007fff69757348 [ 356.025677][T10229] [ 356.252583][ T5617] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 356.403704][ T5617] usb 3-1: Using ep0 maxpacket: 32 [ 356.430765][ T5617] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 356.430807][ T5617] usb 3-1: config 0 interface 0 has no altsetting 0 [ 356.430845][ T5617] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 356.430872][ T5617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.476266][ T5617] usb 3-1: config 0 descriptor?? [ 356.689761][T10225] ieee802154 phy0 wpan0: encryption failed: -22 [ 356.820580][T10241] FAULT_INJECTION: forcing a failure. [ 356.820580][T10241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.820618][T10241] CPU: 1 UID: 0 PID: 10241 Comm: syz.0.1549 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 356.820645][T10241] Tainted: [L]=SOFTLOCKUP [ 356.820652][T10241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 356.820665][T10241] Call Trace: [ 356.820673][T10241] [ 356.820685][T10241] dump_stack_lvl+0xe8/0x150 [ 356.820713][T10241] should_fail_ex+0x46b/0x600 [ 356.820745][T10241] _copy_from_user+0x2d/0xb0 [ 356.820768][T10241] video_usercopy+0x36f/0x1450 [ 356.820804][T10241] ? __pfx___video_do_ioctl+0x10/0x10 [ 356.820832][T10241] ? __pfx_video_usercopy+0x10/0x10 [ 356.820868][T10241] ? __fget_files+0x2a/0x420 [ 356.820889][T10241] ? __fget_files+0x2a/0x420 [ 356.820905][T10241] ? __fget_files+0x3a6/0x420 [ 356.820925][T10241] v4l2_ioctl+0x190/0x1e0 [ 356.820952][T10241] ? __pfx_v4l2_ioctl+0x10/0x10 [ 356.820976][T10241] __se_sys_ioctl+0xff/0x170 [ 356.821010][T10241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.821031][T10241] do_syscall_64+0x174/0x580 [ 356.821054][T10241] ? trace_irq_disable+0x3b/0x140 [ 356.821076][T10241] ? clear_bhb_loop+0x40/0x90 [ 356.821097][T10241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.821115][T10241] RIP: 0033:0x7f77bc68ce59 [ 356.821132][T10241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.821148][T10241] RSP: 002b:00007f77ba8e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.821169][T10241] RAX: ffffffffffffffda RBX: 00007f77bc905fa0 RCX: 00007f77bc68ce59 [ 356.821183][T10241] RDX: 0000200000000000 RSI: 00000000c0405602 RDI: 0000000000000003 [ 356.821195][T10241] RBP: 00007f77ba8e6090 R08: 0000000000000000 R09: 0000000000000000 [ 356.821206][T10241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.821217][T10241] R13: 00007f77bc906038 R14: 00007f77bc905fa0 R15: 00007fff69757348 [ 356.821247][T10241] [ 357.591288][T10252] 9p: Bad value for 'rfdno' [ 357.662815][T10254] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1553'. [ 357.706254][T10254] overlayfs: failed to resolve '&q>$j{': -2 [ 357.885811][T10258] input: syz0 as /devices/virtual/input/input22 [ 357.997847][ T5617] usbhid 3-1:0.0: can't add hid device: -71 [ 357.997982][ T5617] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 358.041374][ T5617] usb 3-1: USB disconnect, device number 66 [ 358.402203][T10271] FAULT_INJECTION: forcing a failure. [ 358.402203][T10271] name failslab, interval 1, probability 0, space 0, times 0 [ 358.402244][T10271] CPU: 0 UID: 0 PID: 10271 Comm: syz.4.1558 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 358.402276][T10271] Tainted: [L]=SOFTLOCKUP [ 358.402284][T10271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 358.402298][T10271] Call Trace: [ 358.402307][T10271] [ 358.402317][T10271] dump_stack_lvl+0xe8/0x150 [ 358.402349][T10271] should_fail_ex+0x46b/0x600 [ 358.402385][T10271] should_failslab+0xa8/0x100 [ 358.402414][T10271] __kmalloc_cache_noprof+0xa0/0x6d0 [ 358.402439][T10271] ? __se_sys_mount+0x166/0x420 [ 358.402460][T10271] ? __se_sys_mount+0x166/0x420 [ 358.402483][T10271] ? memdup_user+0x99/0xd0 [ 358.402514][T10271] __se_sys_mount+0x166/0x420 [ 358.402541][T10271] ? __pfx___se_sys_mount+0x10/0x10 [ 358.402569][T10271] ? __x64_sys_mount+0x20/0xc0 [ 358.402590][T10271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.402613][T10271] do_syscall_64+0x174/0x580 [ 358.402639][T10271] ? trace_irq_disable+0x3b/0x140 [ 358.402665][T10271] ? clear_bhb_loop+0x40/0x90 [ 358.402692][T10271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.402713][T10271] RIP: 0033:0x7f5da5dece59 [ 358.402734][T10271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.402753][T10271] RSP: 002b:00007f5da4046028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 358.402777][T10271] RAX: ffffffffffffffda RBX: 00007f5da6065fa0 RCX: 00007f5da5dece59 [ 358.402794][T10271] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 358.402808][T10271] RBP: 00007f5da4046090 R08: 00002000000002c0 R09: 0000000000000000 [ 358.402823][T10271] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 358.402836][T10271] R13: 00007f5da6066038 R14: 00007f5da6065fa0 R15: 00007ffdf343d9d8 [ 358.402869][T10271] [ 359.153461][ T4989] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 359.309020][ T4989] usb 3-1: No LPM exit latency info found, disabling LPM. [ 359.315788][ T4989] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 4 [ 359.315825][ T4989] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 359.315866][ T4989] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 0 [ 359.372698][ T5755] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 359.534095][ T5755] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 359.534198][ T5755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.611366][ T5755] usb 2-1: config 0 descriptor?? [ 359.634318][ T5755] cp210x 2-1:0.0: cp210x converter detected [ 360.146709][ T5617] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 360.149312][ T5755] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 360.149344][ T5755] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 360.260791][ T5755] usb 2-1: cp210x converter now attached to ttyUSB0 [ 360.321997][ T5755] usb 2-1: USB disconnect, device number 70 [ 360.352563][ T5617] usb 1-1: Using ep0 maxpacket: 32 [ 360.357149][ T5617] usb 1-1: unable to get BOS descriptor or descriptor too short [ 360.361455][ T5617] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 360.361496][ T5617] usb 1-1: can't read configurations, error -61 [ 360.438264][ T5755] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 360.513149][ T5755] cp210x 2-1:0.0: device disconnected [ 360.562547][ T5617] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 360.712788][ T5617] usb 1-1: Using ep0 maxpacket: 32 [ 360.716244][ T5617] usb 1-1: unable to get BOS descriptor or descriptor too short [ 360.718606][ T5617] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 360.718646][ T5617] usb 1-1: can't read configurations, error -61 [ 360.720759][ T5617] usb usb1-port1: attempt power cycle [ 361.070892][ T5612] Bluetooth: Wrong link type (-71) [ 361.082948][ T5617] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 361.117298][ T5617] usb 1-1: Using ep0 maxpacket: 32 [ 361.129551][ T5617] usb 1-1: unable to get BOS descriptor or descriptor too short [ 361.141097][ T5617] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 361.141142][ T5617] usb 1-1: can't read configurations, error -61 [ 361.282711][ T5617] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 361.303493][ T5617] usb 1-1: Using ep0 maxpacket: 32 [ 361.308817][ T5617] usb 1-1: unable to get BOS descriptor or descriptor too short [ 361.326474][ T5617] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 361.326518][ T5617] usb 1-1: can't read configurations, error -61 [ 361.328649][ T5617] usb usb1-port1: unable to enumerate USB device [ 361.699114][T10318] FAULT_INJECTION: forcing a failure. [ 361.699114][T10318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.699155][T10318] CPU: 1 UID: 0 PID: 10318 Comm: syz.4.1577 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 361.699187][T10318] Tainted: [L]=SOFTLOCKUP [ 361.699195][T10318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 361.699209][T10318] Call Trace: [ 361.699218][T10318] [ 361.699228][T10318] dump_stack_lvl+0xe8/0x150 [ 361.699262][T10318] should_fail_ex+0x46b/0x600 [ 361.699300][T10318] _copy_to_user+0x31/0xb0 [ 361.699329][T10318] simple_read_from_buffer+0xe1/0x170 [ 361.699359][T10318] proc_fail_nth_read+0x1be/0x230 [ 361.699386][T10318] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 361.699412][T10318] ? rw_verify_area+0x2ac/0x4e0 [ 361.699438][T10318] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 361.699464][T10318] vfs_read+0x212/0xa80 [ 361.699500][T10318] ? __pfx_vfs_read+0x10/0x10 [ 361.699531][T10318] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 361.699559][T10318] ? lockdep_hardirqs_on+0x7a/0x110 [ 361.699587][T10318] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 361.699615][T10318] ? mutex_lock_nested+0x152/0x1d0 [ 361.699647][T10318] ? fdget_pos+0x252/0x320 [ 361.699680][T10318] ksys_read+0x156/0x270 [ 361.699710][T10318] ? __pfx_ksys_read+0x10/0x10 [ 361.699735][T10318] ? __pfx_ppp_ioctl+0x10/0x10 [ 361.699772][T10318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.699803][T10318] do_syscall_64+0x174/0x580 [ 361.699829][T10318] ? trace_irq_disable+0x3b/0x140 [ 361.699858][T10318] ? clear_bhb_loop+0x40/0x90 [ 361.699884][T10318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.699907][T10318] RIP: 0033:0x7f5da5dad68e [ 361.699937][T10318] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 361.699957][T10318] RSP: 002b:00007f5da4045fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 361.699981][T10318] RAX: ffffffffffffffda RBX: 00007f5da40466c0 RCX: 00007f5da5dad68e [ 361.699997][T10318] RDX: 000000000000000f RSI: 00007f5da40460a0 RDI: 0000000000000005 [ 361.700013][T10318] RBP: 00007f5da4046090 R08: 0000000000000000 R09: 0000000000000000 [ 361.700028][T10318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.700041][T10318] R13: 00007f5da6066038 R14: 00007f5da6065fa0 R15: 00007ffdf343d9d8 [ 361.700074][T10318] [ 362.035492][ T4989] usb 3-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 362.035529][ T4989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.035553][ T4989] usb 3-1: Product: 䐢᧤툤䞗ᡁ攪鷇ᕪㄠ㴁갇⨑휞軦䐼ኸᱞ닺䑲㗥久褑⛗瓇捨觤䔞材﨏蕿閫迕䐟焘헵䄘ꢙ臱衜軨⬤깦钩闱뻠⿆ᖸ㤕尘贠垦ℴ힤盅놑僛䣸⛖땮ᰑ䶬㦢ꫥ鸄꩞ࠒ [ 362.035583][ T4989] usb 3-1: Manufacturer: 蠊쓣롑嫵䖈ꬓ셉憂힟댌劁썵埁塕꺶齲ከꀱ뺢⟐퐁㠎첃ꐠ旘먘Ḭ芡蜺੣ᶦ邷쒙䶞鰄ꬴ㋯㆑鱗㶷㘝ۓ↗異崫ᳺ낋勔桚骟矟ꓱ湦뛅⤧㗨↋þ뀠聫⸏ㅜﮏ⺾ౖ灲伐㲂漕掁篒㶹׭〶ᇗ㩙ꤨ᎗﹡촣䓜췈ṵ켖찓鎶頖뺪⻎葶镕 [ 362.073519][ T4989] usb 3-1: can't set config #1, error -71 [ 362.086720][ T4989] usb 3-1: USB disconnect, device number 67 [ 362.302112][T10326] batadv_slave_1: entered promiscuous mode [ 362.336787][T10325] batadv_slave_1: left promiscuous mode [ 362.773017][ T4989] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 362.925005][ T4989] usb 5-1: Using ep0 maxpacket: 16 [ 362.928869][ T4989] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 362.928900][ T4989] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.928922][ T4989] usb 5-1: config 0 has no interface number 0 [ 362.928973][ T4989] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 362.929002][ T4989] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 362.929028][ T4989] usb 5-1: config 0 interface 98 has no altsetting 0 [ 362.933499][ T4989] usb 5-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 362.933530][ T4989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.933552][ T4989] usb 5-1: Product: syz [ 362.933567][ T4989] usb 5-1: Manufacturer: syz [ 362.933582][ T4989] usb 5-1: SerialNumber: syz [ 362.943725][ T4989] usb 5-1: config 0 descriptor?? [ 362.945272][T10336] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 362.945769][T10336] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 363.155741][T10336] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 363.158888][T10336] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 363.265902][T10349] FAULT_INJECTION: forcing a failure. [ 363.265902][T10349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.265943][T10349] CPU: 1 UID: 0 PID: 10349 Comm: syz.0.1589 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 363.265976][T10349] Tainted: [L]=SOFTLOCKUP [ 363.265985][T10349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 363.266000][T10349] Call Trace: [ 363.266010][T10349] [ 363.266020][T10349] dump_stack_lvl+0xe8/0x150 [ 363.266054][T10349] should_fail_ex+0x46b/0x600 [ 363.266092][T10349] _copy_to_user+0x31/0xb0 [ 363.266120][T10349] simple_read_from_buffer+0xe1/0x170 [ 363.266151][T10349] proc_fail_nth_read+0x1be/0x230 [ 363.266178][T10349] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 363.266205][T10349] ? rw_verify_area+0x2ac/0x4e0 [ 363.266231][T10349] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 363.266256][T10349] vfs_read+0x212/0xa80 [ 363.266293][T10349] ? __pfx_vfs_read+0x10/0x10 [ 363.266323][T10349] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 363.266357][T10349] ? lockdep_hardirqs_on+0x7a/0x110 [ 363.266386][T10349] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 363.266413][T10349] ? mutex_lock_nested+0x152/0x1d0 [ 363.266456][T10349] ? fdget_pos+0x252/0x320 [ 363.266489][T10349] ksys_read+0x156/0x270 [ 363.266520][T10349] ? __pfx_ksys_read+0x10/0x10 [ 363.266556][T10349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.266582][T10349] do_syscall_64+0x174/0x580 [ 363.266610][T10349] ? trace_irq_disable+0x3b/0x140 [ 363.266638][T10349] ? clear_bhb_loop+0x40/0x90 [ 363.266665][T10349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.266687][T10349] RIP: 0033:0x7f77bc64d68e [ 363.266709][T10349] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 363.266728][T10349] RSP: 002b:00007f77ba8e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 363.266753][T10349] RAX: ffffffffffffffda RBX: 00007f77ba8e66c0 RCX: 00007f77bc64d68e [ 363.266770][T10349] RDX: 000000000000000f RSI: 00007f77ba8e60a0 RDI: 0000000000000005 [ 363.266785][T10349] RBP: 00007f77ba8e6090 R08: 0000000000000000 R09: 0000000000000000 [ 363.266801][T10349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.266814][T10349] R13: 00007f77bc906038 R14: 00007f77bc905fa0 R15: 00007fff69757348 [ 363.266851][T10349] [ 363.981802][T10364] 9pnet_fd: Insufficient options for proto=fd [ 363.982334][T10363] 9pnet_fd: Insufficient options for proto=fd [ 364.102601][ T5617] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 364.181630][ T4989] asix 5-1:0.98 (unnamed net_device) (uninitialized): invalid hw address, using random [ 364.255301][ T5617] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.255332][ T5617] usb 3-1: config 0 has no interfaces? [ 364.274171][ T5617] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 364.274207][ T5617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.274231][ T5617] usb 3-1: Product: syz [ 364.274249][ T5617] usb 3-1: Manufacturer: syz [ 364.274266][ T5617] usb 3-1: SerialNumber: syz [ 364.324385][ T5617] usb 3-1: config 0 descriptor?? [ 364.378111][ T4989] asix 5-1:0.98 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 364.378147][ T4989] asix 5-1:0.98 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 364.378451][ T4989] asix 5-1:0.98: probe with driver asix failed with error -71 [ 364.418482][ T4989] usb 5-1: USB disconnect, device number 10 [ 364.667823][ T9] usb 3-1: USB disconnect, device number 68 [ 364.700239][T10376] FAULT_INJECTION: forcing a failure. [ 364.700239][T10376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.700281][T10376] CPU: 1 UID: 0 PID: 10376 Comm: syz.1.1600 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 364.700312][T10376] Tainted: [L]=SOFTLOCKUP [ 364.700320][T10376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 364.700343][T10376] Call Trace: [ 364.700353][T10376] [ 364.700362][T10376] dump_stack_lvl+0xe8/0x150 [ 364.700395][T10376] should_fail_ex+0x46b/0x600 [ 364.700433][T10376] _copy_from_user+0x2d/0xb0 [ 364.700460][T10376] vhost_dev_ioctl+0x32e/0x1170 [ 364.700507][T10376] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 364.700538][T10376] ? lockdep_hardirqs_on+0x7a/0x110 [ 364.700566][T10376] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 364.700595][T10376] ? mutex_lock_nested+0x152/0x1d0 [ 364.700626][T10376] ? vhost_vsock_dev_ioctl+0x223/0xed0 [ 364.700661][T10376] vhost_vsock_dev_ioctl+0x231/0xed0 [ 364.700701][T10376] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 364.700734][T10376] ? __fget_files+0x2a/0x420 [ 364.700756][T10376] ? __fget_files+0x3a6/0x420 [ 364.700777][T10376] ? __fget_files+0x2a/0x420 [ 364.700801][T10376] ? bpf_lsm_file_ioctl+0x9/0x20 [ 364.700828][T10376] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 364.700860][T10376] __se_sys_ioctl+0xff/0x170 [ 364.700888][T10376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.700913][T10376] do_syscall_64+0x174/0x580 [ 364.700938][T10376] ? trace_irq_disable+0x3b/0x140 [ 364.700965][T10376] ? clear_bhb_loop+0x40/0x90 [ 364.700993][T10376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.701015][T10376] RIP: 0033:0x7f46b198ce59 [ 364.701036][T10376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.701055][T10376] RSP: 002b:00007f46afbde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.701078][T10376] RAX: ffffffffffffffda RBX: 00007f46b1c05fa0 RCX: 00007f46b198ce59 [ 364.701095][T10376] RDX: 0000200000000100 RSI: 000000004008af03 RDI: 0000000000000003 [ 364.701110][T10376] RBP: 00007f46afbde090 R08: 0000000000000000 R09: 0000000000000000 [ 364.701124][T10376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.701138][T10376] R13: 00007f46b1c06038 R14: 00007f46b1c05fa0 R15: 00007ffc7f178a58 [ 364.701173][T10376] [ 365.084945][T10383] FAULT_INJECTION: forcing a failure. [ 365.084945][T10383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.084972][T10383] CPU: 0 UID: 0 PID: 10383 Comm: syz.1.1603 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 365.084992][T10383] Tainted: [L]=SOFTLOCKUP [ 365.084996][T10383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 365.085005][T10383] Call Trace: [ 365.085010][T10383] [ 365.085016][T10383] dump_stack_lvl+0xe8/0x150 [ 365.085036][T10383] should_fail_ex+0x46b/0x600 [ 365.085058][T10383] _copy_from_user+0x2d/0xb0 [ 365.085073][T10383] do_fb_ioctl+0x2dd/0x750 [ 365.085088][T10383] ? __pfx_do_fb_ioctl+0x10/0x10 [ 365.085119][T10383] ? __fget_files+0x2a/0x420 [ 365.085135][T10383] ? __fget_files+0x3a6/0x420 [ 365.085147][T10383] ? __fget_files+0x2a/0x420 [ 365.085162][T10383] ? bpf_lsm_file_ioctl+0x9/0x20 [ 365.085177][T10383] ? __pfx_fb_ioctl+0x10/0x10 [ 365.085189][T10383] __se_sys_ioctl+0xff/0x170 [ 365.085206][T10383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.085220][T10383] do_syscall_64+0x174/0x580 [ 365.085236][T10383] ? trace_irq_disable+0x3b/0x140 [ 365.085252][T10383] ? clear_bhb_loop+0x40/0x90 [ 365.085268][T10383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.085280][T10383] RIP: 0033:0x7f46b198ce59 [ 365.085293][T10383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.085305][T10383] RSP: 002b:00007f46afbde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 365.085321][T10383] RAX: ffffffffffffffda RBX: 00007f46b1c05fa0 RCX: 00007f46b198ce59 [ 365.085331][T10383] RDX: 0000200000000040 RSI: 0000000000004606 RDI: 0000000000000003 [ 365.085339][T10383] RBP: 00007f46afbde090 R08: 0000000000000000 R09: 0000000000000000 [ 365.085347][T10383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.085355][T10383] R13: 00007f46b1c06038 R14: 00007f46b1c05fa0 R15: 00007ffc7f178a58 [ 365.085373][T10383] [ 365.244091][ T1009] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 365.413570][ T1009] usb 1-1: Using ep0 maxpacket: 8 [ 365.466210][ T1009] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 365.466246][ T1009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.466270][ T1009] usb 1-1: Product: syz [ 365.466286][ T1009] usb 1-1: Manufacturer: syz [ 365.466303][ T1009] usb 1-1: SerialNumber: syz [ 365.483053][T10393] netlink: 'syz.1.1608': attribute type 10 has an invalid length. [ 365.501623][T10393] team0: Device veth1_vlan failed to register rx_handler [ 365.502710][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 365.533292][ T1009] usb 1-1: config 0 descriptor?? [ 365.722572][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 365.729202][ T9] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 365.729237][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.729260][ T9] usb 5-1: Product: syz [ 365.729276][ T9] usb 5-1: Manufacturer: syz [ 365.729292][ T9] usb 5-1: SerialNumber: syz [ 365.758618][ T9] usb 5-1: config 0 descriptor?? [ 365.774341][ T1009] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 365.793351][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 365.850385][T10398] FAULT_INJECTION: forcing a failure. [ 365.850385][T10398] name failslab, interval 1, probability 0, space 0, times 0 [ 365.850421][T10398] CPU: 1 UID: 0 PID: 10398 Comm: syz.2.1610 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 365.850458][T10398] Tainted: [L]=SOFTLOCKUP [ 365.850466][T10398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 365.850477][T10398] Call Trace: [ 365.850484][T10398] [ 365.850493][T10398] dump_stack_lvl+0xe8/0x150 [ 365.850521][T10398] should_fail_ex+0x46b/0x600 [ 365.850551][T10398] should_failslab+0xa8/0x100 [ 365.850574][T10398] kmem_cache_alloc_node_noprof+0xae/0x710 [ 365.850605][T10398] ? __alloc_skb+0x1d0/0x7d0 [ 365.850624][T10398] ? __alloc_skb+0x1d0/0x7d0 [ 365.850648][T10398] __alloc_skb+0x1d0/0x7d0 [ 365.850672][T10398] alloc_skb_with_frags+0xc8/0x760 [ 365.850705][T10398] sock_alloc_send_pskb+0x884/0x9a0 [ 365.850747][T10398] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 365.850777][T10398] ? tomoyo_check_unix_address+0x167/0x7f0 [ 365.850799][T10398] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 365.850822][T10398] unix_dgram_sendmsg+0x460/0x18d0 [ 365.850845][T10398] ? tomoyo_check_unix_address+0x167/0x7f0 [ 365.850866][T10398] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 365.850897][T10398] ? __might_fault+0xaf/0x130 [ 365.850915][T10398] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 365.850943][T10398] ? aa_sock_msg_perm+0x107/0x200 [ 365.850962][T10398] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 365.850980][T10398] sock_sendmsg_nosec+0x13a/0x180 [ 365.851009][T10398] __sys_sendto+0x41a/0x5a0 [ 365.851031][T10398] ? __pfx___sys_sendto+0x10/0x10 [ 365.851075][T10398] ? __pfx_ksys_write+0x10/0x10 [ 365.851102][T10398] __x64_sys_sendto+0xde/0x100 [ 365.851123][T10398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.851143][T10398] do_syscall_64+0x174/0x580 [ 365.851169][T10398] ? clear_bhb_loop+0x40/0x90 [ 365.851193][T10398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.851213][T10398] RIP: 0033:0x7f410050ce59 [ 365.851232][T10398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.851248][T10398] RSP: 002b:00007f40fe75e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 365.851270][T10398] RAX: ffffffffffffffda RBX: 00007f4100785fa0 RCX: 00007f410050ce59 [ 365.851284][T10398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 365.851295][T10398] RBP: 00007f40fe75e090 R08: 0000200000000240 R09: 000000000000006e [ 365.851307][T10398] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.851319][T10398] R13: 00007f4100786038 R14: 00007f4100785fa0 R15: 00007ffc3dfdb898 [ 365.851348][T10398] [ 365.887395][ T4989] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 366.037371][ T4989] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 366.037401][ T4989] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.037421][ T4989] usb 2-1: config 0 has no interface number 0 [ 366.037524][ T4989] usb 2-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 366.044495][ T4989] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 366.044588][ T4989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.044611][ T4989] usb 2-1: Product: syz [ 366.044626][ T4989] usb 2-1: Manufacturer: syz [ 366.044642][ T4989] usb 2-1: SerialNumber: syz [ 366.096450][ T4989] usb 2-1: config 0 descriptor?? [ 366.137057][ T4989] cyberjack 2-1:0.69: required endpoints missing [ 366.262791][T10399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.263484][T10399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.802679][ T4989] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 366.872221][ T1009] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 366.975056][ T4989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 366.975181][ T4989] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 366.975209][ T4989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.002719][ T4989] usb 3-1: config 0 descriptor?? [ 367.028127][T10406] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 367.063811][ T9] gspca_ov534_9: reg_w failed -71 [ 367.353119][ T9] gspca_ov534_9: Unknown sensor 0000 [ 367.353279][ T9] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 367.369092][ T9] usb 5-1: USB disconnect, device number 11 [ 367.520071][T10406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.520736][T10406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.528708][ T4989] hid (null): unknown global tag 0xe [ 367.528759][ T4989] hid (null): unknown global tag 0xd [ 367.528784][ T4989] hid (null): invalid report_size -952483289 [ 367.528801][ T4989] hid (null): report_id 45328 is invalid [ 367.528832][ T4989] hid (null): invalid report_count 64539 [ 367.529022][ T4989] hid (null): unknown global tag 0xc [ 367.529046][ T4989] hid (null): global environment stack underflow [ 367.529060][ T4989] hid (null): unknown global tag 0xd [ 367.529091][ T4989] hid (null): unknown global tag 0xe [ 367.529116][ T4989] hid (null): invalid report_size 1956279169 [ 367.532155][ T4989] hid (null): invalid report_count -1285776331 [ 367.546011][ T4989] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0 [ 367.546045][ T4989] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0 [ 367.546071][ T4989] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0 [ 367.546095][ T4989] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0 [ 367.546255][ T4989] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0 [ 367.546283][ T4989] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0 [ 367.546308][ T4989] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0 [ 367.546333][ T4989] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0 [ 367.546357][ T4989] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0 [ 367.546383][ T4989] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0 [ 367.549647][ T4989] asus 0003:0B05:1ABE.0008: unknown global tag 0xe [ 367.549667][ T4989] asus 0003:0B05:1ABE.0008: item 0 4 1 14 parsing failed [ 367.550417][ T4989] asus 0003:0B05:1ABE.0008: Asus hid parse failed: -22 [ 367.551784][ T4989] asus 0003:0B05:1ABE.0008: probe with driver asus failed with error -22 [ 367.738724][ T4989] usb 3-1: USB disconnect, device number 69 [ 367.918867][ T1009] usb 1-1: USB disconnect, device number 84 [ 368.086817][ T4989] usb 2-1: USB disconnect, device number 71 [ 368.394398][T10425] FAULT_INJECTION: forcing a failure. [ 368.394398][T10425] name failslab, interval 1, probability 0, space 0, times 0 [ 368.394440][T10425] CPU: 0 UID: 0 PID: 10425 Comm: syz.4.1618 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 368.394472][T10425] Tainted: [L]=SOFTLOCKUP [ 368.394481][T10425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 368.394495][T10425] Call Trace: [ 368.394504][T10425] [ 368.394514][T10425] dump_stack_lvl+0xe8/0x150 [ 368.394548][T10425] should_fail_ex+0x46b/0x600 [ 368.394586][T10425] should_failslab+0xa8/0x100 [ 368.394615][T10425] __kmalloc_noprof+0xfe/0x7e0 [ 368.394641][T10425] ? rcu_is_watching+0x15/0xb0 [ 368.394672][T10425] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 368.394698][T10425] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 368.394732][T10425] tomoyo_realpath_from_path+0xe3/0x5d0 [ 368.394761][T10425] ? tomoyo_domain+0xd7/0x130 [ 368.394793][T10425] ? tomoyo_path_number_perm+0x219/0x630 [ 368.394838][T10425] tomoyo_path_number_perm+0x246/0x630 [ 368.394875][T10425] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 368.394909][T10425] ? __lock_acquire+0x6b5/0x2d10 [ 368.394939][T10425] ? do_raw_spin_lock+0x12b/0x2f0 [ 368.394999][T10425] ? __fget_files+0x2a/0x420 [ 368.395026][T10425] ? __fget_files+0x2a/0x420 [ 368.395048][T10425] ? __fget_files+0x3a6/0x420 [ 368.395070][T10425] ? __fget_files+0x2a/0x420 [ 368.395098][T10425] security_file_ioctl+0xc3/0x2a0 [ 368.395134][T10425] __se_sys_ioctl+0x47/0x170 [ 368.395165][T10425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.395191][T10425] do_syscall_64+0x174/0x580 [ 368.395220][T10425] ? trace_irq_disable+0x3b/0x140 [ 368.395249][T10425] ? clear_bhb_loop+0x40/0x90 [ 368.395277][T10425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.395301][T10425] RIP: 0033:0x7f5da5dece59 [ 368.395321][T10425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.395340][T10425] RSP: 002b:00007f5da4046028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.395365][T10425] RAX: ffffffffffffffda RBX: 00007f5da6065fa0 RCX: 00007f5da5dece59 [ 368.395383][T10425] RDX: 00002000000003c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 368.395399][T10425] RBP: 00007f5da4046090 R08: 0000000000000000 R09: 0000000000000000 [ 368.395414][T10425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.395429][T10425] R13: 00007f5da6066038 R14: 00007f5da6065fa0 R15: 00007ffdf343d9d8 [ 368.395465][T10425] [ 368.395501][T10425] ERROR: Out of memory at tomoyo_realpath_from_path. [ 368.641274][ T5612] Bluetooth: Wrong link type (-71) [ 368.862027][T10431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1619'. [ 369.384518][T10453] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1628'. [ 369.384547][T10453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1628'. [ 369.384572][T10453] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1628'. [ 369.384589][T10453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1628'. [ 369.384606][T10453] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1628'. [ 369.853898][T10466] FAULT_INJECTION: forcing a failure. [ 369.853898][T10466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.853943][T10466] CPU: 1 UID: 0 PID: 10466 Comm: syz.1.1633 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 369.853975][T10466] Tainted: [L]=SOFTLOCKUP [ 369.853984][T10466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 369.853998][T10466] Call Trace: [ 369.854006][T10466] [ 369.854018][T10466] dump_stack_lvl+0xe8/0x150 [ 369.854051][T10466] should_fail_ex+0x46b/0x600 [ 369.854088][T10466] _copy_from_user+0x2d/0xb0 [ 369.854114][T10466] video_usercopy+0x36f/0x1450 [ 369.854157][T10466] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 369.854186][T10466] ? __pfx_video_usercopy+0x10/0x10 [ 369.854229][T10466] ? __fget_files+0x2a/0x420 [ 369.854256][T10466] ? __fget_files+0x2a/0x420 [ 369.854277][T10466] ? __fget_files+0x3a6/0x420 [ 369.854304][T10466] v4l2_ioctl+0x190/0x1e0 [ 369.854336][T10466] ? __pfx_v4l2_ioctl+0x10/0x10 [ 369.854377][T10466] __se_sys_ioctl+0xff/0x170 [ 369.854407][T10466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.854433][T10466] do_syscall_64+0x174/0x580 [ 369.854462][T10466] ? trace_irq_disable+0x3b/0x140 [ 369.854490][T10466] ? clear_bhb_loop+0x40/0x90 [ 369.854518][T10466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.854541][T10466] RIP: 0033:0x7f46b198ce59 [ 369.854562][T10466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.854582][T10466] RSP: 002b:00007f46afbde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.854607][T10466] RAX: ffffffffffffffda RBX: 00007f46b1c05fa0 RCX: 00007f46b198ce59 [ 369.854622][T10466] RDX: 00002000000001c0 RSI: 00000000c0585605 RDI: 0000000000000003 [ 369.854638][T10466] RBP: 00007f46afbde090 R08: 0000000000000000 R09: 0000000000000000 [ 369.854652][T10466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.854665][T10466] R13: 00007f46b1c06038 R14: 00007f46b1c05fa0 R15: 00007ffc7f178a58 [ 369.854698][T10466] [ 370.133022][ T1009] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 370.240595][T10475] netlink: 'syz.4.1638': attribute type 10 has an invalid length. [ 370.248420][T10475] batman_adv: batadv0: Adding interface: dummy0 [ 370.248438][T10475] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.248469][T10475] batman_adv: batadv0: Interface activated: dummy0 [ 370.303465][ T1009] usb 3-1: Using ep0 maxpacket: 16 [ 370.306160][ T1009] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.306188][ T1009] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 370.307802][ T1009] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 370.307835][ T1009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 370.307858][ T1009] usb 3-1: SerialNumber: syz [ 370.369626][ T1009] usb 3-1: 0:2 : does not exist [ 370.390899][T10479] FAULT_INJECTION: forcing a failure. [ 370.390899][T10479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.391001][T10479] CPU: 1 UID: 0 PID: 10479 Comm: syz.1.1639 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 370.391034][T10479] Tainted: [L]=SOFTLOCKUP [ 370.391043][T10479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 370.391057][T10479] Call Trace: [ 370.391066][T10479] [ 370.391077][T10479] dump_stack_lvl+0xe8/0x150 [ 370.391115][T10479] should_fail_ex+0x46b/0x600 [ 370.391153][T10479] _copy_from_user+0x2d/0xb0 [ 370.391179][T10479] get_user_ifreq+0x6b/0x180 [ 370.391212][T10479] sock_ioctl+0x707/0x7f0 [ 370.391249][T10479] ? __pfx_sock_ioctl+0x10/0x10 [ 370.391284][T10479] ? __fget_files+0x3a6/0x420 [ 370.391308][T10479] ? __fget_files+0x2a/0x420 [ 370.391335][T10479] ? bpf_lsm_file_ioctl+0x9/0x20 [ 370.391363][T10479] ? __pfx_sock_ioctl+0x10/0x10 [ 370.391395][T10479] __se_sys_ioctl+0xff/0x170 [ 370.391433][T10479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.391458][T10479] do_syscall_64+0x174/0x580 [ 370.391485][T10479] ? trace_irq_disable+0x3b/0x140 [ 370.391510][T10479] ? clear_bhb_loop+0x40/0x90 [ 370.391537][T10479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.391558][T10479] RIP: 0033:0x7f46b198ce59 [ 370.391577][T10479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.391596][T10479] RSP: 002b:00007f46afbde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.391619][T10479] RAX: ffffffffffffffda RBX: 00007f46b1c05fa0 RCX: 00007f46b198ce59 [ 370.391635][T10479] RDX: 0000200000000040 RSI: 00000000000089f2 RDI: 0000000000000003 [ 370.391649][T10479] RBP: 00007f46afbde090 R08: 0000000000000000 R09: 0000000000000000 [ 370.391663][T10479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.391676][T10479] R13: 00007f46b1c06038 R14: 00007f46b1c05fa0 R15: 00007ffc7f178a58 [ 370.391709][T10479] [ 370.795059][ T1009] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 370.810716][ T1009] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 370.884419][ T1009] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 370.945413][ T1009] usb 3-1: USB disconnect, device number 70 [ 371.045933][ T5612] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 371.064475][ T5612] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 371.070955][ T5602] udevd[5602]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.322683][ T5706] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 371.443459][T10507] overlay: Bad value for 'upperdir' [ 371.455665][ T5706] usb 2-1: device descriptor read/64, error -71 [ 371.482620][ T1009] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 371.567734][T10513] FAULT_INJECTION: forcing a failure. [ 371.567734][T10513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.567767][T10513] CPU: 1 UID: 0 PID: 10513 Comm: syz.2.1652 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 371.567787][T10513] Tainted: [L]=SOFTLOCKUP [ 371.567793][T10513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 371.567801][T10513] Call Trace: [ 371.567806][T10513] [ 371.567812][T10513] dump_stack_lvl+0xe8/0x150 [ 371.567833][T10513] should_fail_ex+0x46b/0x600 [ 371.567855][T10513] _copy_from_user+0x2d/0xb0 [ 371.567870][T10513] do_pagemap_cmd+0x13d/0xc50 [ 371.567894][T10513] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 371.567921][T10513] ? __fget_files+0x2a/0x420 [ 371.567936][T10513] ? __fget_files+0x2a/0x420 [ 371.567948][T10513] ? __fget_files+0x3a6/0x420 [ 371.567962][T10513] ? __fget_files+0x2a/0x420 [ 371.567988][T10513] ? bpf_lsm_file_ioctl+0x9/0x20 [ 371.568013][T10513] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 371.568043][T10513] __se_sys_ioctl+0xff/0x170 [ 371.568072][T10513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.568098][T10513] do_syscall_64+0x174/0x580 [ 371.568126][T10513] ? trace_irq_disable+0x3b/0x140 [ 371.568155][T10513] ? clear_bhb_loop+0x40/0x90 [ 371.568184][T10513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.568207][T10513] RIP: 0033:0x7f410050ce59 [ 371.568229][T10513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.568248][T10513] RSP: 002b:00007f40fe75e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.568275][T10513] RAX: ffffffffffffffda RBX: 00007f4100785fa0 RCX: 00007f410050ce59 [ 371.568292][T10513] RDX: 0000200000000100 RSI: 00000000c0606610 RDI: 0000000000000003 [ 371.568307][T10513] RBP: 00007f40fe75e090 R08: 0000000000000000 R09: 0000000000000000 [ 371.568322][T10513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.568336][T10513] R13: 00007f4100786038 R14: 00007f4100785fa0 R15: 00007ffc3dfdb898 [ 371.568370][T10513] [ 371.617697][T10515] FAULT_INJECTION: forcing a failure. [ 371.617697][T10515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.617724][T10515] CPU: 1 UID: 0 PID: 10515 Comm: syz.2.1653 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 371.617751][T10515] Tainted: [L]=SOFTLOCKUP [ 371.617755][T10515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 371.617764][T10515] Call Trace: [ 371.617769][T10515] [ 371.617775][T10515] dump_stack_lvl+0xe8/0x150 [ 371.617796][T10515] should_fail_ex+0x46b/0x600 [ 371.617817][T10515] _copy_from_user+0x2d/0xb0 [ 371.617832][T10515] binder_ioctl_write_read+0x167/0xa470 [ 371.617848][T10515] ? is_bpf_text_address+0x26/0x2b0 [ 371.617873][T10515] ? try_to_take_rt_mutex+0x840/0xb00 [ 371.617888][T10515] ? __kernel_text_address+0xd/0x30 [ 371.617909][T10515] ? __lock_acquire+0x6b5/0x2d10 [ 371.617929][T10515] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 371.617944][T10515] ? stack_depot_save_flags+0x33/0x810 [ 371.617967][T10515] ? do_raw_spin_lock+0x12b/0x2f0 [ 371.617987][T10515] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 371.618003][T10515] ? lockdep_hardirqs_on+0x7a/0x110 [ 371.618019][T10515] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 371.618034][T10515] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 371.618047][T10515] ? reacquire_held_locks+0x104/0x190 [ 371.618065][T10515] ? rt_spin_lock+0x1e0/0x400 [ 371.618077][T10515] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 371.618092][T10515] ? rt_spin_unlock+0x14f/0x200 [ 371.618109][T10515] ? binder_get_thread+0x177/0x6d0 [ 371.618124][T10515] binder_ioctl+0x426/0x1b10 [ 371.618137][T10515] ? tomoyo_path_number_perm+0x219/0x630 [ 371.618157][T10515] ? tomoyo_path_number_perm+0x219/0x630 [ 371.618178][T10515] ? do_vfs_ioctl+0x117b/0x1540 [ 371.618198][T10515] ? __pfx_binder_ioctl+0x10/0x10 [ 371.618211][T10515] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 371.618251][T10515] ? __fget_files+0x2a/0x420 [ 371.618266][T10515] ? __fget_files+0x2a/0x420 [ 371.618277][T10515] ? __fget_files+0x3a6/0x420 [ 371.618290][T10515] ? __fget_files+0x2a/0x420 [ 371.618304][T10515] ? bpf_lsm_file_ioctl+0x9/0x20 [ 371.618319][T10515] ? __pfx_binder_ioctl+0x10/0x10 [ 371.618332][T10515] __se_sys_ioctl+0xff/0x170 [ 371.618348][T10515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.618362][T10515] do_syscall_64+0x174/0x580 [ 371.618378][T10515] ? trace_irq_disable+0x3b/0x140 [ 371.618393][T10515] ? clear_bhb_loop+0x40/0x90 [ 371.618409][T10515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.618421][T10515] RIP: 0033:0x7f410050ce59 [ 371.618434][T10515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.618446][T10515] RSP: 002b:00007f40fe75e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.618461][T10515] RAX: ffffffffffffffda RBX: 00007f4100785fa0 RCX: 00007f410050ce59 [ 371.618471][T10515] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 371.618480][T10515] RBP: 00007f40fe75e090 R08: 0000000000000000 R09: 0000000000000000 [ 371.618488][T10515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.618495][T10515] R13: 00007f4100786038 R14: 00007f4100785fa0 R15: 00007ffc3dfdb898 [ 371.618514][T10515] [ 371.618589][T10515] binder: 10514:10515 ioctl c0306201 2000000001c0 returned -14 [ 371.645112][ T1009] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 371.645144][ T1009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.651468][ T1009] usb 5-1: config 0 descriptor?? [ 371.657889][ T1009] cp210x 5-1:0.0: cp210x converter detected [ 371.722594][ T5706] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 371.853017][ T5706] usb 2-1: device descriptor read/64, error -71 [ 371.964561][ T5706] usb usb2-port1: attempt power cycle [ 372.175719][T10523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.178918][T10523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.211041][ T1009] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 372.211547][ T1009] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 372.211596][ T1009] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 372.286210][ T1009] usb 5-1: cp210x converter now attached to ttyUSB0 [ 372.307543][ T1009] usb 5-1: USB disconnect, device number 12 [ 372.389496][ T5706] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 372.415780][ T5706] usb 2-1: device descriptor read/8, error -71 [ 372.451185][ T1009] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 372.451935][ T1009] cp210x 5-1:0.0: device disconnected [ 372.610763][T10529] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1658'. [ 372.661382][ T5706] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 372.680774][ T5706] usb 2-1: device descriptor read/8, error -71 [ 372.716806][T10527] XFS (nbd0): SB validate failed with error -5. [ 372.794739][ T5706] usb usb2-port1: unable to enumerate USB device [ 373.510371][T10562] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1669'. [ 373.511522][T10562] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1669'. [ 373.624918][ T5706] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 373.782595][ T5706] usb 3-1: Using ep0 maxpacket: 16 [ 373.808738][ T5706] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 373.808804][ T5706] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 373.808837][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 373.808868][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 373.808911][ T5706] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.808958][ T5706] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 373.808984][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.814833][ T5706] usb 3-1: config 0 descriptor?? [ 373.875338][T10555] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 373.926514][ T5706] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23 [ 374.155596][T10552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1668'. [ 374.196430][ T1009] usb 3-1: USB disconnect, device number 71 [ 374.260384][ C0] pxrc 3-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 374.350744][T10572] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1670'. [ 374.612643][ T5755] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 374.768058][ T5755] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 374.768095][ T5755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.800977][ T5755] usb 2-1: config 0 descriptor?? [ 374.821579][ T5755] pwc: Samsung MPC-C10 USB webcam detected. [ 375.007049][ T5755] pwc: send_video_command error -71 [ 375.007070][ T5755] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 375.007207][ T5755] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 375.041719][ T5755] usb 2-1: USB disconnect, device number 76 [ 376.166120][ T9] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 376.314250][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 376.331794][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 376.331816][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.331829][ T9] usb 2-1: Product: syz [ 376.331838][ T9] usb 2-1: Manufacturer: syz [ 376.331847][ T9] usb 2-1: SerialNumber: syz [ 376.371976][ T9] usb 2-1: config 0 descriptor?? [ 376.489019][T10609] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.1684'. [ 376.606270][T10613] FAULT_INJECTION: forcing a failure. [ 376.606270][T10613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.606310][T10613] CPU: 1 UID: 0 PID: 10613 Comm: syz.2.1687 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 376.606340][T10613] Tainted: [L]=SOFTLOCKUP [ 376.606348][T10613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 376.606361][T10613] Call Trace: [ 376.606369][T10613] [ 376.606379][T10613] dump_stack_lvl+0xe8/0x150 [ 376.606412][T10613] should_fail_ex+0x46b/0x600 [ 376.606448][T10613] _copy_from_iter+0x1d3/0x1670 [ 376.606486][T10613] ? rcu_is_watching+0x15/0xb0 [ 376.606526][T10613] ? __pfx__copy_from_iter+0x10/0x10 [ 376.606558][T10613] ? __alloc_skb+0x27d/0x7d0 [ 376.606580][T10613] ? __alloc_skb+0x27d/0x7d0 [ 376.606610][T10613] ? netlink_sendmsg+0x650/0xb40 [ 376.606637][T10613] ? skb_put+0x11b/0x210 [ 376.606665][T10613] netlink_sendmsg+0x6c0/0xb40 [ 376.606701][T10613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.606731][T10613] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 376.606763][T10613] ? aa_file_perm+0x51a/0x15f0 [ 376.606787][T10613] ? aa_sock_msg_perm+0x122/0x200 [ 376.606811][T10613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.606839][T10613] sock_sendmsg_nosec+0x13a/0x180 [ 376.606874][T10613] sock_write_iter+0x2e4/0x3f0 [ 376.606908][T10613] ? __pfx_sock_write_iter+0x10/0x10 [ 376.606959][T10613] do_iter_readv_writev+0x62b/0x8d0 [ 376.606994][T10613] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 376.607030][T10613] ? rw_verify_area+0x25b/0x4e0 [ 376.607058][T10613] vfs_writev+0x345/0x9a0 [ 376.607100][T10613] ? __pfx_vfs_writev+0x10/0x10 [ 376.607148][T10613] ? __fget_files+0x2a/0x420 [ 376.607185][T10613] ? __fget_files+0x3a6/0x420 [ 376.607207][T10613] ? __fget_files+0x2a/0x420 [ 376.607241][T10613] do_writev+0x15a/0x2e0 [ 376.607278][T10613] ? __pfx_do_writev+0x10/0x10 [ 376.607320][T10613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.607347][T10613] do_syscall_64+0x174/0x580 [ 376.607374][T10613] ? trace_irq_disable+0x3b/0x140 [ 376.607403][T10613] ? clear_bhb_loop+0x40/0x90 [ 376.607431][T10613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.607451][T10613] RIP: 0033:0x7f410050ce59 [ 376.607473][T10613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.607492][T10613] RSP: 002b:00007f40fe75e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 376.607518][T10613] RAX: ffffffffffffffda RBX: 00007f4100785fa0 RCX: 00007f410050ce59 [ 376.607535][T10613] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 376.607550][T10613] RBP: 00007f40fe75e090 R08: 0000000000000000 R09: 0000000000000000 [ 376.607565][T10613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.607579][T10613] R13: 00007f4100786038 R14: 00007f4100785fa0 R15: 00007ffc3dfdb898 [ 376.607612][T10613] [ 376.619811][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 377.059079][T10622] FAULT_INJECTION: forcing a failure. [ 377.059079][T10622] name failslab, interval 1, probability 0, space 0, times 0 [ 377.059121][T10622] CPU: 1 UID: 0 PID: 10622 Comm: syz.4.1689 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 377.059156][T10622] Tainted: [L]=SOFTLOCKUP [ 377.059165][T10622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 377.059180][T10622] Call Trace: [ 377.059189][T10622] [ 377.059199][T10622] dump_stack_lvl+0xe8/0x150 [ 377.059232][T10622] should_fail_ex+0x46b/0x600 [ 377.059270][T10622] should_failslab+0xa8/0x100 [ 377.059300][T10622] __kmalloc_noprof+0xfe/0x7e0 [ 377.059325][T10622] ? tomoyo_encode+0x28b/0x550 [ 377.059349][T10622] ? tomoyo_encode+0x28b/0x550 [ 377.059381][T10622] tomoyo_encode+0x28b/0x550 [ 377.059412][T10622] tomoyo_realpath_from_path+0x58d/0x5d0 [ 377.059449][T10622] ? tomoyo_path_number_perm+0x219/0x630 [ 377.059488][T10622] tomoyo_path_number_perm+0x246/0x630 [ 377.059525][T10622] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 377.059558][T10622] ? __lock_acquire+0x6b5/0x2d10 [ 377.059590][T10622] ? do_raw_spin_lock+0x12b/0x2f0 [ 377.059647][T10622] ? __fget_files+0x2a/0x420 [ 377.059674][T10622] ? __fget_files+0x2a/0x420 [ 377.059705][T10622] ? __fget_files+0x3a6/0x420 [ 377.059728][T10622] ? __fget_files+0x2a/0x420 [ 377.059757][T10622] security_file_ioctl+0xc3/0x2a0 [ 377.059790][T10622] __se_sys_ioctl+0x47/0x170 [ 377.059820][T10622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.059846][T10622] do_syscall_64+0x174/0x580 [ 377.059876][T10622] ? trace_irq_disable+0x3b/0x140 [ 377.059904][T10622] ? clear_bhb_loop+0x40/0x90 [ 377.059931][T10622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.059955][T10622] RIP: 0033:0x7f5da5dece59 [ 377.059977][T10622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.059997][T10622] RSP: 002b:00007f5da4046028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.060024][T10622] RAX: ffffffffffffffda RBX: 00007f5da6065fa0 RCX: 00007f5da5dece59 [ 377.060042][T10622] RDX: 0000200000000040 RSI: 00000000c0405602 RDI: 0000000000000003 [ 377.060058][T10622] RBP: 00007f5da4046090 R08: 0000000000000000 R09: 0000000000000000 [ 377.060073][T10622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.060086][T10622] R13: 00007f5da6066038 R14: 00007f5da6065fa0 R15: 00007ffdf343d9d8 [ 377.060121][T10622] [ 377.060217][T10622] ERROR: Out of memory at tomoyo_realpath_from_path. [ 377.659196][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 377.700504][ T9] usb 2-1: USB disconnect, device number 77 [ 377.937476][T10641] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1696'. [ 378.179814][T10648] FAULT_INJECTION: forcing a failure. [ 378.179814][T10648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.179855][T10648] CPU: 1 UID: 0 PID: 10648 Comm: syz.4.1700 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 378.179888][T10648] Tainted: [L]=SOFTLOCKUP [ 378.179896][T10648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 378.179910][T10648] Call Trace: [ 378.179919][T10648] [ 378.179929][T10648] dump_stack_lvl+0xe8/0x150 [ 378.179962][T10648] should_fail_ex+0x46b/0x600 [ 378.179998][T10648] _copy_from_user+0x2d/0xb0 [ 378.180025][T10648] vt_ioctl+0x1249/0x20c0 [ 378.180067][T10648] ? __pfx_vt_ioctl+0x10/0x10 [ 378.180119][T10648] ? __fget_files+0x2a/0x420 [ 378.180147][T10648] ? __fget_files+0x3a6/0x420 [ 378.180167][T10648] ? __fget_files+0x2a/0x420 [ 378.180191][T10648] tty_ioctl+0x92e/0xde0 [ 378.180216][T10648] ? __pfx_tty_ioctl+0x10/0x10 [ 378.180249][T10648] __se_sys_ioctl+0xff/0x170 [ 378.180279][T10648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.180302][T10648] do_syscall_64+0x174/0x580 [ 378.180327][T10648] ? trace_irq_disable+0x3b/0x140 [ 378.180355][T10648] ? clear_bhb_loop+0x40/0x90 [ 378.180382][T10648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.180404][T10648] RIP: 0033:0x7f5da5dece59 [ 378.180425][T10648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.180446][T10648] RSP: 002b:00007f5da4046028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 378.180470][T10648] RAX: ffffffffffffffda RBX: 00007f5da6065fa0 RCX: 00007f5da5dece59 [ 378.180487][T10648] RDX: 0000200000000200 RSI: 0000000000004b66 RDI: 0000000000000003 [ 378.180501][T10648] RBP: 00007f5da4046090 R08: 0000000000000000 R09: 0000000000000000 [ 378.180514][T10648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.180526][T10648] R13: 00007f5da6066038 R14: 00007f5da6065fa0 R15: 00007ffdf343d9d8 [ 378.180561][T10648] [ 378.569594][T10658] Invalid source name [ 378.569615][T10658] UBIFS error (pid: 10658): cannot open "./file0", error -22 [ 378.607365][T10559] syz.0.1667 (10559) used greatest stack depth: 18968 bytes left [ 378.682604][ T1009] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 378.879743][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.879854][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.893239][T10665] FAULT_INJECTION: forcing a failure. [ 378.893239][T10665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.893282][T10665] CPU: 0 UID: 0 PID: 10665 Comm: syz.0.1704 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 378.893314][T10665] Tainted: [L]=SOFTLOCKUP [ 378.893323][T10665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 378.893336][T10665] Call Trace: [ 378.893350][T10665] [ 378.893360][T10665] dump_stack_lvl+0xe8/0x150 [ 378.893391][T10665] should_fail_ex+0x46b/0x600 [ 378.893429][T10665] _copy_to_user+0x31/0xb0 [ 378.893457][T10665] simple_read_from_buffer+0xe1/0x170 [ 378.893487][T10665] proc_fail_nth_read+0x1be/0x230 [ 378.893514][T10665] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 378.893538][T10665] ? rw_verify_area+0x2ac/0x4e0 [ 378.893569][T10665] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 378.893591][T10665] vfs_read+0x212/0xa80 [ 378.893622][T10665] ? __pfx_vfs_read+0x10/0x10 [ 378.893648][T10665] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 378.893675][T10665] ? lockdep_hardirqs_on+0x7a/0x110 [ 378.893706][T10665] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 378.893732][T10665] ? mutex_lock_nested+0x152/0x1d0 [ 378.893761][T10665] ? fdget_pos+0x252/0x320 [ 378.893791][T10665] ksys_read+0x156/0x270 [ 378.893817][T10665] ? __pfx_ksys_read+0x10/0x10 [ 378.893839][T10665] ? __pfx_tty_ioctl+0x10/0x10 [ 378.893870][T10665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.893892][T10665] do_syscall_64+0x174/0x580 [ 378.893919][T10665] ? clear_bhb_loop+0x40/0x90 [ 378.893944][T10665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.893964][T10665] RIP: 0033:0x7f77bc64d68e [ 378.893984][T10665] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 378.894001][T10665] RSP: 002b:00007f77ba8e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 378.894024][T10665] RAX: ffffffffffffffda RBX: 00007f77ba8e66c0 RCX: 00007f77bc64d68e [ 378.894040][T10665] RDX: 000000000000000f RSI: 00007f77ba8e60a0 RDI: 0000000000000004 [ 378.894053][T10665] RBP: 00007f77ba8e6090 R08: 0000000000000000 R09: 0000000000000000 [ 378.894065][T10665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.894078][T10665] R13: 00007f77bc906038 R14: 00007f77bc905fa0 R15: 00007fff69757348 [ 378.894110][T10665] [ 379.008826][ T1009] usb 3-1: too many endpoints for config 0 interface 0 altsetting 4: 254, using maximum allowed: 30 [ 379.008901][ T1009] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 379.008928][ T1009] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 379.008955][ T1009] usb 3-1: config 0 interface 0 has no altsetting 0 [ 379.008989][ T1009] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b2a, bcdDevice= 0.00 [ 379.009012][ T1009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.242245][ T1009] usb 3-1: config 0 descriptor?? [ 379.248183][T10653] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 379.871619][T10683] FAULT_INJECTION: forcing a failure. [ 379.871619][T10683] name failslab, interval 1, probability 0, space 0, times 0 [ 379.871661][T10683] CPU: 0 UID: 0 PID: 10683 Comm: syz.1.1710 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 379.871692][T10683] Tainted: [L]=SOFTLOCKUP [ 379.871701][T10683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 379.871714][T10683] Call Trace: [ 379.871724][T10683] [ 379.871734][T10683] dump_stack_lvl+0xe8/0x150 [ 379.871768][T10683] should_fail_ex+0x46b/0x600 [ 379.871807][T10683] should_failslab+0xa8/0x100 [ 379.871835][T10683] __kmalloc_node_track_caller_noprof+0xfe/0x820 [ 379.871864][T10683] ? landlock_restrict_sibling_threads+0x61e/0x1210 [ 379.871889][T10683] ? landlock_restrict_sibling_threads+0x61e/0x1210 [ 379.871918][T10683] ? landlock_restrict_sibling_threads+0x61e/0x1210 [ 379.871945][T10683] krealloc_node_align_noprof+0x19a/0x390 [ 379.871970][T10683] ? landlock_restrict_sibling_threads+0x295/0x1210 [ 379.872001][T10683] landlock_restrict_sibling_threads+0x61e/0x1210 [ 379.872034][T10683] ? landlock_restrict_sibling_threads+0x295/0x1210 [ 379.872063][T10683] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 379.872122][T10683] ? apparmor_cred_prepare+0x97/0x100 [ 379.872174][T10683] ? bpf_lsm_cred_prepare+0x9/0x20 [ 379.872201][T10683] ? security_prepare_creds+0x101/0x360 [ 379.872237][T10683] ? prepare_creds+0x591/0x820 [ 379.872267][T10683] __se_sys_landlock_restrict_self+0x545/0x810 [ 379.872304][T10683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.872330][T10683] do_syscall_64+0x174/0x580 [ 379.872362][T10683] ? trace_irq_disable+0x3b/0x140 [ 379.872391][T10683] ? clear_bhb_loop+0x40/0x90 [ 379.872418][T10683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.872441][T10683] RIP: 0033:0x7f46b198ce59 [ 379.872463][T10683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.872483][T10683] RSP: 002b:00007f46afbbd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 379.872508][T10683] RAX: ffffffffffffffda RBX: 00007f46b1c06090 RCX: 00007f46b198ce59 [ 379.872525][T10683] RDX: 0000000000000000 RSI: 000000000000000c RDI: ffffffffffffffff [ 379.872540][T10683] RBP: 00007f46afbbd090 R08: 0000000000000000 R09: 0000000000000000 [ 379.872555][T10683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.872568][T10683] R13: 00007f46b1c06128 R14: 00007f46b1c06090 R15: 00007ffc7f178a58 [ 379.872603][T10683] [ 380.042655][ T4989] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 380.135967][ T1009] hid_parser_main: 49 callbacks suppressed [ 380.135998][ T1009] hid-corsair-void 0003:1B1C:1B2A.0009: unknown main item tag 0x2 [ 380.136093][ T1009] hid-corsair-void 0003:1B1C:1B2A.0009: unknown main item tag 0x0 [ 380.136123][ T1009] hid-corsair-void 0003:1B1C:1B2A.0009: unknown main item tag 0x0 [ 380.136151][ T1009] hid-corsair-void 0003:1B1C:1B2A.0009: unknown main item tag 0x0 [ 380.136179][ T1009] hid-corsair-void 0003:1B1C:1B2A.0009: unknown main item tag 0x0 [ 380.136208][ T1009] hid-corsair-void 0003:1B1C:1B2A.0009: unknown main item tag 0x0 [ 380.136236][ T1009] hid-corsair-void 0003:1B1C:1B2A.0009: unknown main item tag 0x0 [ 380.136265][ T1009] hid-corsair-void 0003:1B1C:1B2A.0009: unknown main item tag 0x0 [ 380.136295][ T1009] hid-corsair-void 0003:1B1C:1B2A.0009: unknown main item tag 0x0 [ 380.136321][ T1009] hid-corsair-void 0003:1B1C:1B2A.0009: unknown main item tag 0x0 [ 380.181552][ T4989] usb 5-1: device descriptor read/64, error -71 [ 380.258013][ T1009] hid-corsair-void 0003:1B1C:1B2A.0009: hidraw0: USB HID v0.05 Device [HID 1b1c:1b2a] on usb-dummy_hcd.2-1/input0 [ 380.423240][ T4989] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 380.552636][ T4989] usb 5-1: device descriptor read/64, error -71 [ 380.651350][ T5617] usb 3-1: USB disconnect, device number 72 [ 380.662371][ T5706] hid-corsair-void 0003:1B1C:1B2A.0009: failed to request battery (reason: -71) [ 380.663301][ T4989] usb usb5-port1: attempt power cycle [ 381.003529][ T4989] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 381.025449][ T4989] usb 5-1: device descriptor read/8, error -71 [ 381.172963][ T9] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 381.274888][ T4989] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 381.294299][ T4989] usb 5-1: device descriptor read/8, error -71 [ 381.325119][T10705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1719'. [ 381.325152][T10705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1719'. [ 381.358353][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 381.361336][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 381.361367][ T9] usb 2-1: config 0 has no interface number 0 [ 381.376715][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 381.376745][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.376767][ T9] usb 2-1: Product: syz [ 381.376782][ T9] usb 2-1: Manufacturer: syz [ 381.376798][ T9] usb 2-1: SerialNumber: syz [ 381.403884][ T4989] usb usb5-port1: unable to enumerate USB device [ 381.411903][ T9] usb 2-1: config 0 descriptor?? [ 381.932796][T10728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1722'. [ 381.958797][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 381.958830][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 382.442696][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 382.443038][ T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 382.449470][ T9] usb 2-1: USB disconnect, device number 78 [ 383.046168][T10744] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1726'. [ 383.197942][ T0] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 383.197965][ T0] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 383.197985][ T0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 383.198009][ T0] Tainted: [L]=SOFTLOCKUP [ 383.198015][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 383.198025][ T0] RIP: 0010:__schedule+0x4030/0x5550 [ 383.198049][ T0] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 383.198065][ T0] RSP: 0018:ffffffff8e007be0 EFLAGS: 00010003 [ 383.198082][ T0] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 383.198094][ T0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff8880b8620c60 [ 383.198105][ T0] RBP: ffffffff8e007dd0 R08: ffffffff8fcf38f7 R09: 1ffffffff1f9e71e [ 383.198130][ T0] R10: dffffc0000000000 R11: fffffbfff1f9e71f R12: ffff8880b863c658 [ 383.198143][ T0] R13: ffff888125a6b000 R14: 1ffff110170c7922 R15: 0000000000000014 [ 383.198156][ T0] FS: 0000000000000000(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 383.198171][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 383.198183][ T0] CR2: 0000001b350232a0 CR3: 000000005d0b8000 CR4: 00000000003526f0 [ 383.198200][ T0] Call Trace: [ 383.198207][ T0] [ 383.198221][ T0] ? irqentry_exit+0x1c1/0x8c0 [ 383.198244][ T0] ? __pfx___schedule+0x10/0x10 [ 383.198260][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 383.198283][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 383.198307][ T0] schedule_idle+0x51/0x90 [ 383.198325][ T0] do_idle+0x4a6/0x540 [ 383.198348][ T0] ? __pfx_do_idle+0x10/0x10 [ 383.198371][ T0] cpu_startup_entry+0x43/0x60 [ 383.198393][ T0] rest_init+0x2de/0x300 [ 383.198416][ T0] start_kernel+0x392/0x3e0 [ 383.198532][ T0] x86_64_start_reservations+0x24/0x30 [ 383.198555][ T0] x86_64_start_kernel+0x143/0x1c0 [ 383.198572][ T0] common_startup_64+0x13e/0x157 [ 383.198601][ T0] [ 383.198607][ T0] Modules linked in: [ 383.198620][ T0] ---[ end trace 0000000000000000 ]--- [ 383.198630][ T0] RIP: 0010:__schedule+0x4030/0x5550 [ 383.198648][ T0] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 383.198662][ T0] RSP: 0018:ffffffff8e007be0 EFLAGS: 00010003 [ 383.198676][ T0] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 383.198687][ T0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff8880b8620c60 [ 383.198698][ T0] RBP: ffffffff8e007dd0 R08: ffffffff8fcf38f7 R09: 1ffffffff1f9e71e [ 383.198710][ T0] R10: dffffc0000000000 R11: fffffbfff1f9e71f R12: ffff8880b863c658 [ 383.198723][ T0] R13: ffff888125a6b000 R14: 1ffff110170c7922 R15: 0000000000000014 [ 383.198734][ T0] FS: 0000000000000000(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 383.198749][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 383.198761][ T0] CR2: 0000001b350232a0 CR3: 000000005d0b8000 CR4: 00000000003526f0 [ 383.198779][ T0] Kernel panic - not syncing: Fatal exception [ 384.315088][ T0] Shutting down cpus with NMI [ 384.315296][ T0] Kernel Offset: disabled