last executing test programs: 6.820716958s ago: executing program 2 (id=93): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0xf, 0x4) socket$inet6(0xa, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32], 0x2b) sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000000053d2) 6.503038517s ago: executing program 2 (id=95): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) dup(r0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00', 0x28}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x7e) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000001100)={0xa, 0x4e20, 0x4, @remote, 0x8}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000380)={0x9, 0x3}, 0x8) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x40, 0x7, 0x1, "d4"}, 0x0, 0x0, 0x0, 0x0}) 4.510514537s ago: executing program 3 (id=6): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r4 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r4, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000005, 0x13, r4, 0x0) r5 = dup3(r3, r2, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) r7 = openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r7, 0x89) r8 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000c40)={0x84, &(0x7f00000007c0)={0x40, 0xe, 0x5, "453e0bd2ad"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000003c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000180)={0x8, 0x20, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r9, 0x5, 0x0, &(0x7f0000000080)=0x272) fcntl$setown(r6, 0x8, r9) 4.200791852s ago: executing program 2 (id=101): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r0, 0xffffffffffffffff, 0xff, 0x8) 4.139533504s ago: executing program 2 (id=102): r0 = syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x94, @string={0x94, 0x3, "6e3f348c855ff5c624ad31d85d8f85db1734b7feefb4908c5ee324acb3ff2c53f8f28071077c92eb275ef663dc6ac4ac58ccdfa2c6de3652674e86289ea0378cc64a06844b902aedf1f67cd99e2af88daeced1b868d341b4e2b0323d79a273798a1aec5bd86c6e9b9931db600258f08cbe6ad54ea100a9c6cfec301b122608e4506a0c3ce4b53742ab07d4194f5974a9c2af"}}, 0x0, 0x0, 0x0}, 0x0) 4.015213822s ago: executing program 0 (id=103): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0xf, 0x4) socket$inet6(0xa, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32], 0x2b) sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000000053d2) 3.920651702s ago: executing program 0 (id=104): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c000880"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$netlink(r0, 0x0, 0x0) 3.776778256s ago: executing program 1 (id=106): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000080)) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x20, 0x0, {0x0, 0x0, 0x800}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0xed, 0x0, 0x4, 0x0, 0x1, 0x6}) 3.776455287s ago: executing program 0 (id=107): r0 = syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast1, @in=@local, 0x0, 0x7, 0x4e23, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x81, 0x2, 0xfffffffffffffff9, 0x7fffffffffffffff, 0x1, 0xfffffffffffffffd}, {0x4000000001fd, 0x7ffffffffffc, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x1, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x3}, 0x0, 0x2b}, 0xa, @in6=@private2, 0x203504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0x10, 0x1c, {0x1c, 0x22, "746c2bd60a39132e6d80d6f05808a4ee1205c97c99c407f02437"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}}, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x0, 0x16, 0x97, "5236e79524c37aa7a9d13e092f98ce497489fb7e60b8d5cdacb76fc4459aeb08b169077d66ee37436dc97124c8770600bd6136f718f34ed1bb830ea97594c6474bc0e88ac5b7b1fefa224ff0229086e1084f345115a47349ec3cea3651b112331674a67cd2a6714c7418c4a17fbdaae83dd296ab863f5801f43313bb15e33e85a7ac45c6b6accfb71c619825f6e5ab085ce24ea7fea257"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000240)={0xc0, 0xa1, 0x4, 0x8000}, &(0x7f0000000280)={0x40, 0xa0, 0x4, 0x7}, &(0x7f00000002c0)={0xc0, 0xa2, 0x2f, "bbf4f41967805883b49879764074823dd8d3c979dac068b11cabb6a6a5fab513d032dbd407b9022035d40a7b9afaa0"}}) 3.681234707s ago: executing program 1 (id=108): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000040)=[{0x200, 0x40}]}, 0x10) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001d80)=[{{&(0x7f0000000100)=@nl, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/152, 0x98}, {&(0x7f0000000380)=""/192, 0xc0}], 0x2, &(0x7f0000000480)=""/67, 0x43}, 0x2}, {{&(0x7f0000000500)=@ax25={{0x3, @rose}, [@null, @rose, @netrom, @remote, @bcast, @default, @rose, @null]}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000580)=""/181, 0xb5}, {&(0x7f0000000640)=""/151, 0x97}, {&(0x7f0000000700)=""/198, 0xc6}, {&(0x7f0000000800)=""/176, 0xb0}, {&(0x7f0000000200)=""/116, 0x74}], 0x5}, 0x1}, {{&(0x7f00000009c0)=@ax25={{0x3, @default}, [@null, @default, @null, @null, @bcast, @default, @null, @rose]}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000a40)=""/151, 0x97}, {&(0x7f0000000b00)=""/94, 0x5e}, {&(0x7f0000000b80)=""/57, 0x39}, {&(0x7f0000000000)=""/19, 0x13}, {&(0x7f0000000c00)=""/46, 0x2e}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/21, 0x15}, {&(0x7f0000001c80)=""/123, 0x7b}], 0x8}, 0x400}], 0x3, 0x20010000, &(0x7f0000001e40)={0x0, 0x3938700}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0x3260a) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x110, 0xffffffffffffffff, 0x3) sendmmsg$unix(r1, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8050}}], 0x1, 0x4000000) syz_usb_connect$uac3(0x1, 0x80, &(0x7f0000001280)=ANY=[@ANYBLOB="1201010200000008410e20304000010203010902"], &(0x7f0000001900)={0x0, 0x0, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="050f0f00010a1003"], 0x1, [{0x0, 0x0}]}) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)) 1.688159547s ago: executing program 0 (id=109): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.577376749s ago: executing program 0 (id=110): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000840), 0x88082) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) (fail_nth: 3) 1.411524733s ago: executing program 3 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, 0x0, &(0x7f00000000c0), 0x10018, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}]}) lstat(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)) 1.355671227s ago: executing program 3 (id=112): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0xf, 0x4) socket$inet6(0xa, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32], 0x2b) sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000000053d2) 1.213171043s ago: executing program 3 (id=113): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)) (fail_nth: 3) 931.25341ms ago: executing program 2 (id=114): socket$packet(0x11, 0x2, 0x300) syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x8be, 0x400, 0x1024002, 0x8004d}, &(0x7f0000000380), &(0x7f0000000040), &(0x7f0000000180)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x5a9a41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[], 0xfdef) 831.600646ms ago: executing program 3 (id=115): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c000880"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$netlink(r0, 0x0, 0x0) 713.263996ms ago: executing program 3 (id=116): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000080)=@ethtool_sset_info={0x1e, 0x9, 0x8}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0xffffffffffffff23, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000180)=ANY=[@ANYBLOB="ddf963efbeb08a", @ANYBLOB="9ebe7c71a123a6fb03cec931f700677e0b126f1f5986ccafe71c1b550f2ad260ec946ea93eebe89a41706be3379af67835b11def814f7ac51b52408b99ce20f30f9aee23926ed84e39a3ff1bf195c5226d69b99d06e54087339373adf824b4fb718af0fe0471186a576891d89c7643972071b738f0161048d2a011c751ca01a8c09e4efa145d0b130efac60ffba07796e33bc7a6027e8dc733e90027a769f2f0ec0093560ff3169887ed13d836582bfcb68c03cd1a47c4dfdcbe830da0e8e1948e245970d95a7154134106b80957e0d03cb91080f1e90b3b91c644fe5564e6946d9645864388374fc644c20c7749064cd80a86b1dc32821c6d4ac4c408993ebe2c3668871ff0fae09077346d84ea4497e56251c233e5ac203b558ca87f0064a2e647b4e5c71402763ba81b7c82eb00b9b36d9a65a9ef09ebe37d453fa989d5fb29eaf4686e5ad112762b03e5ab42dbbd03d376860e2d2925576eab67eaa5b5fa3ee2c431430480e24ca63a8964e1f91d9ab6da5128b8432f4eff3e0f8ec95fc2d04a48f6f10759c61c5566e6d613f685529eb5a2b87e4da439b59800612f38119253c3863222e0c9dcbaf12376745c877471d7a2bc243f516138433793c0094093e13ca3b834137b00b4fb8561474c35bd63c92c50bffa8ebf164c41fd5718b70c7da8dd79a830736434faa517607e97a3812956c3766e46d309a24912822cd77059f900159f7e58c0a72ec60932c84e1ad75e2dadbd217dd60d2937a561e4a887a312dc77a65fd7962484ae6aefaed551b85ce65770fc0b0a5a4f89941cbb8484c38af83c2fea123cd48af455b99fc0c14b186b16e61c73bbacf294e53ffd7a7b804417aab4282cf420a0a3685224c00dae021eb810b467ff68fb49b43742e5b1095f183c1053849fbae276a984419474ed39ca456ccd74185de100b4f607051f40c1471090cd864738d08a952752a67b4bf0ca6c73a9135c5068ea472b70ce126470db14d48f96b9f211dfaed75829b14a1a2cbac87de61c127b4c5063ef0dd40c5ede8a5bd20988862648e274edfcf3d424aa5c0770635d655ca10f09506a9837d73849d90ef533e6e2d9a13d7ee26474261448da7e5a1743b5ceaeebc65672734738881e1134bfddc6328f86312061972404c682e1f09edb22d91351831b6b963fa06e8fbfc250cc66c7d29b69938f0a75662abf4b585d0199928d9377ccf629d3385b10c6adebef1a767f2ad7e2ddcd4278fd56d5638180c920a3ccf50b08c193c932bb86f0101be47e35b5f1f5534b6f080845fc3602e5fa8bff7f806a7e6855a724167e43a01c428d428fb40bd996c6cf743ab524f5f3a0bb2f4b219188407d34ceec56f6ba97dacdcc41480b85edb698945704de95f8019fa80e992974fa400c34138e993c83f8516046e942ab89ae165dd7000cbe218688781a867f4fb75a57cd3dd04d1e4e88d3166c91c5db6fd9935d882a6f2d771e7699aa7e12c4a018df495b567e0f12c91615fb2184ba3ca098f783acd14b0c1ec489a73e3e9e0a759eadf7f646259981393a91e8279d95ed0216ddd593ccf215794aff73d9ed880b8a05a8170bff8bc7a2c556e192a3555780f57d8e9dbb1427c0d763d25e86f0a9ba1f5c2e6c87052f330f52a146c365a8eb3a2ec6914a60a5799af13975b9de44ab37f358390b8dda4f459f3f42b697d36b8e418a39f092b127cc400a2f8b1eae70849c66a9459596080e540b2f3f8a5e36448254555eb6e08e040e27fa14e506f3a9e7dca498786eab24eaa20d16adc485780288a7f71d84ac48674c08826dd1bfa72a5e48448fab1cafcac101cb4081c6ca76502d9d8639d0fe863aa3294c4bee68ed1fe4623e56cc4df2d42f5cdecdd2a7c64272908b5f197a0408f590191b2af3ca8c34577254003977a33112c3b4d1a51d5b53ab823b90438afc815e75ce36dc25d20979afcbb7b7c9e1d74e149c536584032f4fb459758e8cad5406eb8ddf9e07b24d7a8247b646098434f5abf5703c004dcd47aade4385936d0ddc0305177afaf1165db02778140385c8802e456e6a834bb53aa42067e3bc6c366b89cf2f7c55ee75290b093052a323e8fcce96acc75a00e72a0eb53ad5035f14f1d35491f1cb72647142341644f5047b4584ee0e39a51dde8992046e2ba55521766c55e99bf64628c339aac63cfc72269e493d46f95d4f533be54adb67d05b4941497450b3206d0bc4785305124792c091dfe4df456ccbb5dc64deffdae71b482a9deb02e536607ef689dcbf606346b47f3f2f7801f4d64b55defacc1bc0f7f3e86d1a810e766a79a2345551fcd450d8f038092bbf079400809725656235dba67766f3e5afbb03134119cb6e70af106791a68385634ad9fd599947d15d8448223e6b49a26733477366c8e318d46eba0aa2c9061cf44f8dbe08732a727788dd72518bb84b17828f4a400246e5bdc44f108bc309c5ac0af2aa8950cbe1942401aad8a688b508f6c688ec5a42c58c7749227a99be8ec0b85cbdc416bbcf077e6bbd59892f260291df286c64e2490e6be70bb849d8e42a253036bb74617607462bfd444dbac2e25f0794e9d2ee592f73009bd4a07fb9d20776cbc1a50758143941a6a597d28dc62110632d4b0f02ea7df532f6ee2263046ddd579c7a352527ad6cc92150ffd7a2603c1bdb01fba997ddc2c2346934e5f85fa30800db0454d837787a243c267118dfebf63fd76473573764388545389bacf12e949ea132467379a5a180acd17750ef7f306fad9a804801b55be6f33defc0c286f2f5a15926a3d1ef187f7000e241c759066dd42ae13b595f2b87edde1dcf1bb2deff9978d5716a1955fb19a3a8cc5e576c2cd10611eb1859f755cd16c5b656c30e32cb9ec858f98426267fb13988b2ceba6dec8ed0d38c46ebeb9ef89aa94d4619cc8ccbc5067aa1539588785439199b5942c4a5b41a2a2e28ccdaf9821ce34732a39f0cc35c8e88f16e28327184456be80ef6bb4b4e18b4872a93a50b33e4009af632b93ba73f9e6b9e4cd7be5a4a96a191464171219ad30b135e96f934f1b4780125dc637af326040ca8b9e706656b688054e1169b6af70959081b6cdee494c85a1dd73f5b737f8ed570471dd10c70241d7b6193a9ba2d24e0b025d36b273bd40f697ab6413ff59dc800754c652a3c29264af355fbf3a9df51889cc0ead6c8d99e93398d1616ffd7927ad38ed9d32ef4f7ca08e98482d2abfc7f9f", @ANYRES32=r0]) 519.19041ms ago: executing program 0 (id=117): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x1) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x10c00) syz_usb_connect(0x2, 0x3ec, &(0x7f0000003900)={{0x12, 0x1, 0x200, 0x5a, 0x64, 0x9c, 0x20, 0x67b, 0xaaa2, 0x7105, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3da, 0x1, 0x7, 0x3, 0x70, 0x49, "", [{{0x9, 0x4, 0xa0, 0x4, 0xb, 0x72, 0x44, 0x12, 0x2, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "d38ebf25"}, {0x5, 0x24, 0x0, 0x9f}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x6, 0x3, 0x41}, {0x6, 0x24, 0x1a, 0x2, 0x10}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0xff}]}, @uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x5, 0x1e92, 0x1, "862647"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x10, 0xf7, "15d1", "c0cc"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x4, 0x4, 0x3, 0x9, "7d63ff", "cc61"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x0, 0x4, 0x9}]}], [{{0x9, 0x5, 0x6, 0x0, 0x20, 0x9, 0xbf, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xf, 0xb}]}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0x80, 0x11, 0x5, [@generic={0x21, 0x4, "f853bb2c437433f962a04389a57314274da5a3b76a33fadad0ed3d2984fa2e"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x70, 0xa, 0x7, [@generic={0xc0, 0x3, "12001f0dc5d423be2948b045f9667215a02ecdb442130cf198b61d158d985a333d18458858b259ef3c14f47f42e0980432358d8a3a468be6e09e61dddc8f4a74c169b9536bd052f2d576706222ce15907e50631aa46a8c6c514fae01f46f5953342c63fcfd428cc5c52efff8b197e25f1a524620c3b2d264f026eff94148a4a8fa3aa9ffff4332424171ed213e492352145da81595e231bf75967549c2598d5ed30d34c3ceab8c1bc18ca689cfaca8071343bdeb9dda3f48ce7a151c857c"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x7, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x13c}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x1, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfe, 0x3}, @generic={0x73, 0xa, "9703bcdd1fb0d7e12bc1ed94e89471ce963ca0185ed111fd20519e176bb170bb0a9e369130c7e801b6b69de99881ff9a9e19fe8e35ad0e40ffe19b0dfdc6a0a05ecfbd7b6dbd499b037b81535d3dcd7ee67d4535273b5eebaebe7d009be78c2f6dc5e3309d2ae3f98d239664ce94302aa7"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0xbe, 0xcf, 0xbb, [@generic={0x90, 0x30, "773fce85ee7a3559d8025855661791f8568be9a3544039ea4bb8653a702a5622deb265af26faaeb239d9f5d8d124128a2c1383e86a514cddbf05e5ba1d2a07ba1917041f1ce3d3c46443e92354e6db7b05c57cd86a91402d36de8f4c29e34d769fcd42682eb94c0b779b091acc87ba0d30d4feab2b0982c3684215269cbe8225bdf6c8c49932e3b67d3c67eeadd4"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0xd0, 0x7, 0x3, [@generic={0x4f, 0xc, "0f14b7e2e0d3eacad12fc3676a2e66350492d2cd826e9c04f447d6b3f4d7c84461452511362f162f1aaed1ab597b10c808a308d95a876d71d00e72e5d9c925f248ef1bbb197c88fb8056d062ee"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x22, 0xfdae}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x6, 0x1c, 0x4, [@generic={0x17, 0x3a, "4449a1a9f8312cabd93c92121a7decd593d5daa3ab"}]}}, {{0x9, 0x5, 0x80, 0x12, 0x10, 0x28, 0x7, 0x9, [@generic={0x95, 0x1, "bd0a9078a0db3b52a6d22326cde0d61242607c55613edba01dba25a20d81c081394b0cc7685524abfc1cee4e991f15df823b7f510bc77f51b68cecf36638b80611ac1ccda4ec3467b9c1feacb8661758d938c5a3d51cf0a3df7f8feda20bb38823afe1677bf375edf938e6cccc044653aaf41a29c796d9b5e89a864e0cdd0c39867927f5afc35dd905b57f047dd3b30d306df2"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xd5, 0x58}]}}, {{0x9, 0x5, 0x80, 0x13, 0x289c82ac9a97e70d, 0x4e, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x7ff}]}}, {{0x9, 0x5, 0xf, 0x2, 0x240, 0x6, 0x18, 0xd8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7e, 0xc}]}}]}}]}}]}}, &(0x7f0000003f80)={0xa, &(0x7f0000003d00)={0xa, 0x6, 0x310, 0xfe, 0xd0, 0x3d, 0x8, 0x8}, 0x82, &(0x7f0000003d40)={0x5, 0xf, 0x82, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x5, 0x4, 0xfffd}, @generic={0x57, 0x10, 0xb, "9b762607b93b49a4c6447645d9928eb8ad3fad0d1e323ee859cef5d0bb08dca53d6cbf2dbd5062370966a53dacf07f5033413b1d3c96a2f64f8119e7f45df6b9627acf2c2ab882e648771052fa0b4060c4bdae9d"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3, 0x0, 0x42, 0x6, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "4172dd3137f6ff5cd3c443168803485e"}]}, 0x4, [{0x86, &(0x7f0000003e00)=@string={0x86, 0x3, "0c6d9f2bb1fd36d92774abd6fdb3d9cf92c8e5ed73fa84ccbcb2e27a86aa0e9c0056a5bfd35b30cd7b6606fd0f455ed58e6b7de74a58eab477005b3e5ad92108178e6c30ec83642a6cd1b29d0ef88f23f06afd9e386b9d03b1cfc75d4ba3340116caf322a4051f892b9d922562c819a81d6047bef5fe5bf86052c503b1faeaf07362c7e1"}}, {0x4, &(0x7f0000003ec0)=@lang_id={0x4, 0x3, 0x459}}, {0x3b, &(0x7f0000003f00)=@string={0x3b, 0x3, "afd820ab5ca7fb42def573d1dada1e07233ece5fffab9c38b64b991455023a78133f25f867844a99c51502f3dc0c1ffdd9bd64098ae0d70c65"}}, {0x4, &(0x7f0000003f40)=@lang_id={0x4, 0x3, 0x843}}]}) 432.663219ms ago: executing program 1 (id=118): ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x5a9a41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[], 0xfdef) 431.64006ms ago: executing program 2 (id=119): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x8082) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x782) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04170600"], 0x9) 261.778184ms ago: executing program 1 (id=120): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, 0x0, &(0x7f00000000c0), 0x10018, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}]}) lstat(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)) 158.498351ms ago: executing program 1 (id=121): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0xf, 0x4) socket$inet6(0xa, 0x5, 0x0) r1 = open(&(0x7f0000000380)='./bus\x00', 0x105040, 0x145) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r1], 0x2b) sendfile(r3, r1, 0x0, 0x4000000053d2) 0s ago: executing program 1 (id=122): r0 = syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d240600000308"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x94, @string={0x94, 0x3, "6e3f348c855ff5c624ad31d85d8f85db1734b7feefb4908c5ee324acb3ff2c53f8f28071077c92eb275ef663dc6ac4ac58ccdfa2c6de3652674e86289ea0378cc64a06844b902aedf1f67cd99e2af88daeced1b868d341b4e2b0323d79a273798a1aec5bd86c6e9b9931db600258f08cbe6ad54ea100a9c6cfec301b122608e4506a0c3ce4b53742ab07d4194f5974a9c2af"}}, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.116' (ED25519) to the list of known hosts. [ 91.625866][ T5594] cgroup: Unknown subsys name 'net' [ 91.866609][ T5594] cgroup: Unknown subsys name 'cpuset' [ 91.890156][ T37] cfg80211: failed to load regulatory.db [ 91.941680][ T5594] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.920561][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.649910][ T4922] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.704839][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.708520][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.740107][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.751922][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.753263][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.754155][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.754510][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.755729][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.757718][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.758632][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.779984][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.780635][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.803005][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.807824][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.816960][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.819556][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.821744][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.870925][ T4922] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.905335][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.912411][ T60] Bluetooth: hci3: command tx timeout [ 98.926908][ T60] Bluetooth: hci1: command tx timeout [ 99.073507][ T60] Bluetooth: hci0: command tx timeout [ 99.074227][ T60] Bluetooth: hci2: command tx timeout [ 99.158861][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.159829][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.160049][ T5613] bridge_slave_0: entered allmulticast mode [ 99.168667][ T5613] bridge_slave_0: entered promiscuous mode [ 99.238571][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.238872][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.239499][ T5613] bridge_slave_1: entered allmulticast mode [ 99.263328][ T5613] bridge_slave_1: entered promiscuous mode [ 99.353441][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.353698][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.353943][ T5616] bridge_slave_0: entered allmulticast mode [ 99.356376][ T5616] bridge_slave_0: entered promiscuous mode [ 99.362130][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.363087][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.363849][ T5611] bridge_slave_0: entered allmulticast mode [ 99.373577][ T5611] bridge_slave_0: entered promiscuous mode [ 99.448950][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.449279][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.449897][ T5616] bridge_slave_1: entered allmulticast mode [ 99.459581][ T5616] bridge_slave_1: entered promiscuous mode [ 99.478292][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.478566][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.478764][ T5611] bridge_slave_1: entered allmulticast mode [ 99.498028][ T5611] bridge_slave_1: entered promiscuous mode [ 99.512594][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.513023][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.513385][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.513660][ T5612] bridge_slave_0: entered allmulticast mode [ 99.516617][ T5612] bridge_slave_0: entered promiscuous mode [ 99.598405][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.598857][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.599147][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.599348][ T5612] bridge_slave_1: entered allmulticast mode [ 99.607065][ T5612] bridge_slave_1: entered promiscuous mode [ 99.713280][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.718632][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.774378][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.778787][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.795636][ T5613] team0: Port device team_slave_0 added [ 99.808958][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.858318][ T5613] team0: Port device team_slave_1 added [ 99.868718][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.956576][ T5616] team0: Port device team_slave_0 added [ 99.970000][ T5611] team0: Port device team_slave_0 added [ 100.019187][ T5616] team0: Port device team_slave_1 added [ 100.027079][ T5611] team0: Port device team_slave_1 added [ 100.028994][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.029005][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.029025][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.046785][ T5612] team0: Port device team_slave_0 added [ 100.117861][ T5612] team0: Port device team_slave_1 added [ 100.119469][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.119481][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.119502][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.229788][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.229802][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.229822][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.236111][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.236170][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.236245][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.336312][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.336326][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.336347][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.338336][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.338348][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.338368][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.340320][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.340330][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.340350][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.492114][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.492128][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.492148][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.570549][ T5613] hsr_slave_0: entered promiscuous mode [ 100.579475][ T5613] hsr_slave_1: entered promiscuous mode [ 100.989360][ T5616] hsr_slave_0: entered promiscuous mode [ 100.992337][ T5614] Bluetooth: hci1: command tx timeout [ 100.992365][ T60] Bluetooth: hci3: command tx timeout [ 100.995073][ T5616] hsr_slave_1: entered promiscuous mode [ 101.000252][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 101.000556][ T5616] Cannot create hsr debugfs directory [ 101.036133][ T5611] hsr_slave_0: entered promiscuous mode [ 101.037709][ T5611] hsr_slave_1: entered promiscuous mode [ 101.038977][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 101.039007][ T5611] Cannot create hsr debugfs directory [ 101.147484][ T5612] hsr_slave_0: entered promiscuous mode [ 101.149029][ T5612] hsr_slave_1: entered promiscuous mode [ 101.150277][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 101.150302][ T5612] Cannot create hsr debugfs directory [ 101.153539][ T60] Bluetooth: hci2: command tx timeout [ 101.155156][ T60] Bluetooth: hci0: command tx timeout [ 102.089150][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.155244][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.160820][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.189958][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.208289][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.245323][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.275667][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.306688][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.448926][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.487480][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.503656][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.539437][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.552130][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.597846][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.630929][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.657153][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.825492][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.865771][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.874734][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.924570][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.930820][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.977995][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.010678][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.053359][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.071217][ T60] Bluetooth: hci3: command tx timeout [ 103.071250][ T60] Bluetooth: hci1: command tx timeout [ 103.233886][ T5614] Bluetooth: hci0: command tx timeout [ 103.233896][ T60] Bluetooth: hci2: command tx timeout [ 103.258314][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.287940][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.303059][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.337101][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.357403][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.402829][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.418877][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.458759][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.540783][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.659497][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.710539][ T3384] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.710727][ T3384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.753870][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.785172][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.785304][ T1034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.953052][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.005816][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.019617][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.020587][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.078047][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.078163][ T1034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.171710][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.270344][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.270549][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.316897][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.377174][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.377299][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.486221][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.538108][ T3384] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.538284][ T3384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.615045][ T3384] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.615222][ T3384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.157502][ T5614] Bluetooth: hci3: command tx timeout [ 105.157525][ T60] Bluetooth: hci1: command tx timeout [ 105.311220][ T60] Bluetooth: hci2: command tx timeout [ 105.312186][ T60] Bluetooth: hci0: command tx timeout [ 105.367916][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.859200][ T5613] veth0_vlan: entered promiscuous mode [ 105.938939][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.985784][ T5613] veth1_vlan: entered promiscuous mode [ 106.164331][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.269130][ T5613] veth0_macvtap: entered promiscuous mode [ 106.313325][ T5613] veth1_macvtap: entered promiscuous mode [ 106.338577][ T5616] veth0_vlan: entered promiscuous mode [ 106.372820][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.418620][ T5616] veth1_vlan: entered promiscuous mode [ 106.469293][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.509673][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.547204][ T5611] veth0_vlan: entered promiscuous mode [ 106.578383][ T214] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.607658][ T214] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.624939][ T214] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.646718][ T214] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.672118][ T5611] veth1_vlan: entered promiscuous mode [ 106.870198][ T5616] veth0_macvtap: entered promiscuous mode [ 106.929111][ T5612] veth0_vlan: entered promiscuous mode [ 106.967024][ T5616] veth1_macvtap: entered promiscuous mode [ 107.049836][ T5612] veth1_vlan: entered promiscuous mode [ 107.147128][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.148311][ T214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.148330][ T214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.218412][ T5611] veth0_macvtap: entered promiscuous mode [ 107.262850][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.264133][ T5611] veth1_macvtap: entered promiscuous mode [ 107.346237][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.361945][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.361965][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.363949][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.388590][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.417717][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.537200][ T5612] veth0_macvtap: entered promiscuous mode [ 107.558062][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.647554][ T5612] veth1_macvtap: entered promiscuous mode [ 107.675351][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.830875][ T163] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.864054][ T163] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.906713][ T163] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.933459][ T163] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.214688][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.348107][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.348127][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.379814][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.538832][ T163] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.553506][ T163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.564132][ T1034] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.569351][ T1034] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.660130][ T1439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.660151][ T1439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.138201][ T3384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.138221][ T3384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.622557][ T1439] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.759545][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.784603][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.785540][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.789212][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.790519][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.064608][ T5763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 110.255638][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.255662][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.304985][ T5763] syz.2.3 (5763) used greatest stack depth: 19232 bytes left [ 110.468216][ T1439] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.563126][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.563148][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.853635][ T1439] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.916783][ T214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.916814][ T214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.326228][ T1439] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.952002][ T5614] Bluetooth: hci2: command tx timeout [ 112.299611][ T5782] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 113.560700][ T38] audit: type=1400 audit(1782232305.363:2): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="%#{//(@\)//&@}" pid=5805 comm="syz.2.12" [ 114.032707][ T5614] Bluetooth: hci2: command tx timeout [ 114.377793][ T5818] netlink: 'syz.0.15': attribute type 10 has an invalid length. [ 114.613793][ T37] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 114.655213][ T1439] bridge_slave_1: left allmulticast mode [ 114.655297][ T1439] bridge_slave_1: left promiscuous mode [ 114.688872][ T1439] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.963182][ T37] usb 3-1: not running at top speed; connect to a high speed hub [ 114.968634][ T1439] bridge_slave_0: left allmulticast mode [ 114.968669][ T1439] bridge_slave_0: left promiscuous mode [ 114.968999][ T1439] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.014843][ T37] usb 3-1: config 7 has an invalid interface number: 160 but max is 0 [ 115.014874][ T37] usb 3-1: config 7 has an invalid interface number: 248 but max is 0 [ 115.014896][ T37] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 115.014916][ T37] usb 3-1: config 7 has 2 interfaces, different from the descriptor's value: 1 [ 115.014948][ T37] usb 3-1: config 7 has no interface number 0 [ 115.014966][ T37] usb 3-1: config 7 has no interface number 1 [ 115.015032][ T37] usb 3-1: config 7 interface 160 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 115.015077][ T37] usb 3-1: too many endpoints for config 7 interface 248 altsetting 83: 187, using maximum allowed: 30 [ 115.015121][ T37] usb 3-1: config 7 interface 248 altsetting 83 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 115.015150][ T37] usb 3-1: config 7 interface 248 altsetting 83 has an invalid descriptor for endpoint zero, skipping [ 115.015174][ T37] usb 3-1: config 7 interface 248 altsetting 83 has an invalid descriptor for endpoint zero, skipping [ 115.015197][ T37] usb 3-1: config 7 interface 248 altsetting 83 endpoint 0x2 has an invalid bInterval 208, changing to 4 [ 115.015226][ T37] usb 3-1: config 7 interface 248 altsetting 83 has an invalid descriptor for endpoint zero, skipping [ 115.015248][ T37] usb 3-1: config 7 interface 248 altsetting 83 has an invalid descriptor for endpoint zero, skipping [ 115.015271][ T37] usb 3-1: config 7 interface 248 altsetting 83 endpoint 0xF has invalid maxpacket 576, setting to 64 [ 115.015299][ T37] usb 3-1: config 7 interface 248 altsetting 83 has 9 endpoint descriptors, different from the interface descriptor's value: 187 [ 115.015328][ T37] usb 3-1: config 7 interface 160 has no altsetting 0 [ 115.015347][ T37] usb 3-1: config 7 interface 248 has no altsetting 0 [ 115.218569][ T37] usb 3-1: New USB device found, idVendor=067b, idProduct=aaa2, bcdDevice=71.05 [ 115.218602][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.218625][ T37] usb 3-1: Product: ꬠꝜ䋻텳ܞ㸣忎꯿㢜䮶ᒙɕ砺㼓葧饊ᗅ೜ﴟ뷙।೗ [ 115.218645][ T37] usb 3-1: Manufacturer: љ [ 115.218661][ T37] usb 3-1: SerialNumber: ࡃ [ 115.709776][ T37] pl2303 3-1:7.160: required endpoints missing [ 115.764325][ T37] pl2303 3-1:7.248: required endpoints missing [ 115.870976][ T37] usb 3-1: USB disconnect, device number 2 [ 116.111319][ T5614] Bluetooth: hci2: command tx timeout [ 116.462195][ T1439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.521979][ T1439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.526925][ T5698] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.563596][ T1439] bond0 (unregistering): Released all slaves [ 116.617504][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.644484][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.672673][ T5698] usb 3-1: Using ep0 maxpacket: 32 [ 116.706847][ T5698] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 116.739028][ T5698] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 116.739060][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 116.739083][ T5698] usb 3-1: Product: syz [ 116.739098][ T5698] usb 3-1: Manufacturer: syz [ 116.739114][ T5698] usb 3-1: SerialNumber: syz [ 116.775766][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.776772][ T5818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.802594][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.803625][ T5818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.828391][ T5698] usb 3-1: config 0 descriptor?? [ 116.849286][ T5842] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.875364][ T5818] team0: Port device bridge0 added [ 116.897013][ T5698] hub 3-1:0.0: bad descriptor, ignoring hub [ 116.897057][ T5698] hub 3-1:0.0: probe with driver hub failed with error -5 [ 117.007546][ T5829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 117.119485][ T5844] FAULT_INJECTION: forcing a failure. [ 117.119485][ T5844] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 117.119533][ T5844] CPU: 0 UID: 0 PID: 5844 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.119558][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 117.119579][ T5844] Call Trace: [ 117.119589][ T5844] [ 117.119598][ T5844] dump_stack_lvl+0xe8/0x150 [ 117.119628][ T5844] should_fail_ex+0x46b/0x600 [ 117.119658][ T5844] _copy_from_user+0x2d/0xb0 [ 117.119678][ T5844] ___sys_sendmsg+0x1c6/0x360 [ 117.119701][ T5844] ? __lock_acquire+0x6b5/0x2d10 [ 117.119726][ T5844] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.119777][ T5844] ? __fget_files+0x2a/0x420 [ 117.119795][ T5844] ? __fget_files+0x3a6/0x420 [ 117.119830][ T5844] __x64_sys_sendmsg+0x1b7/0x290 [ 117.119855][ T5844] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.119892][ T5844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.119913][ T5844] do_syscall_64+0x174/0x580 [ 117.119938][ T5844] ? trace_irq_disable+0x3b/0x140 [ 117.119961][ T5844] ? clear_bhb_loop+0x40/0x90 [ 117.119985][ T5844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.120004][ T5844] RIP: 0033:0x7f4c5b85ce59 [ 117.120030][ T5844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.120046][ T5844] RSP: 002b:00007f4c59aae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.120075][ T5844] RAX: ffffffffffffffda RBX: 00007f4c5bad5fa0 RCX: 00007f4c5b85ce59 [ 117.120090][ T5844] RDX: 00000000040400c0 RSI: 0000200000000140 RDI: 0000000000000003 [ 117.120102][ T5844] RBP: 00007f4c59aae090 R08: 0000000000000000 R09: 0000000000000000 [ 117.120115][ T5844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.120125][ T5844] R13: 00007f4c5bad6038 R14: 00007f4c5bad5fa0 R15: 00007ffcf672e818 [ 117.120154][ T5844] [ 117.609597][ T5845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.685176][ T5845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.842220][ T4989] usb 3-1: USB disconnect, device number 3 [ 117.861121][ T198] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.027555][ T198] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 118.027590][ T198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.027613][ T198] usb 1-1: Product: syz [ 118.027628][ T198] usb 1-1: Manufacturer: syz [ 118.027645][ T198] usb 1-1: SerialNumber: syz [ 118.194923][ T5614] Bluetooth: hci2: command tx timeout [ 118.215740][ T5857] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.491240][ T4989] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 118.686493][ T4989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 118.690324][ T4989] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 118.690357][ T4989] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 118.690380][ T4989] usb 3-1: Product: syz [ 118.690396][ T4989] usb 3-1: Manufacturer: syz [ 118.690412][ T4989] usb 3-1: SerialNumber: syz [ 118.794027][ T4989] usb 3-1: config 0 descriptor?? [ 118.795177][ T5842] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 118.834172][ T4989] hub 3-1:0.0: bad descriptor, ignoring hub [ 118.834208][ T4989] hub 3-1:0.0: probe with driver hub failed with error -5 [ 119.001390][ T198] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 119.001460][ T198] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 119.080477][ T198] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 119.093061][ T5842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.093664][ T5842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.180146][ T5845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.199090][ T198] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 119.210883][ T5845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.332339][ T198] usb 1-1: USB disconnect, device number 2 [ 119.422944][ T5842] lo speed is unknown, defaulting to 1000 [ 119.428683][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 119.474841][ T5842] lo speed is unknown, defaulting to 1000 [ 119.515535][ T5861] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 119.674782][ T5842] lo speed is unknown, defaulting to 1000 [ 119.691227][ T5861] usb 2-1: Using ep0 maxpacket: 32 [ 119.693530][ T5861] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 119.693558][ T5861] usb 2-1: config 0 has no interface number 0 [ 119.693608][ T5861] usb 2-1: config 0 interface 184 has no altsetting 0 [ 119.727821][ T5861] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 119.727913][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.727974][ T5861] usb 2-1: Product: syz [ 119.728016][ T5861] usb 2-1: Manufacturer: syz [ 119.728059][ T5861] usb 2-1: SerialNumber: syz [ 119.801861][ T5878] FAULT_INJECTION: forcing a failure. [ 119.801861][ T5878] name failslab, interval 1, probability 0, space 0, times 1 [ 119.801897][ T5878] CPU: 1 UID: 0 PID: 5878 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 119.801921][ T5878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 119.801936][ T5878] Call Trace: [ 119.801945][ T5878] [ 119.801954][ T5878] dump_stack_lvl+0xe8/0x150 [ 119.801987][ T5878] should_fail_ex+0x46b/0x600 [ 119.802025][ T5878] should_failslab+0xa8/0x100 [ 119.802053][ T5878] __kmalloc_noprof+0xfe/0x7e0 [ 119.802077][ T5878] ? tomoyo_encode+0x28b/0x550 [ 119.802106][ T5878] ? tomoyo_encode+0x28b/0x550 [ 119.802137][ T5878] tomoyo_encode+0x28b/0x550 [ 119.802175][ T5878] tomoyo_realpath_from_path+0x58d/0x5d0 [ 119.802210][ T5878] ? tomoyo_path_number_perm+0x219/0x630 [ 119.802244][ T5878] tomoyo_path_number_perm+0x246/0x630 [ 119.802281][ T5878] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 119.802314][ T5878] ? __lock_acquire+0x6b5/0x2d10 [ 119.802346][ T5878] ? do_raw_spin_lock+0x12b/0x2f0 [ 119.802403][ T5878] ? __fget_files+0x2a/0x420 [ 119.802429][ T5878] ? __fget_files+0x2a/0x420 [ 119.802451][ T5878] ? __fget_files+0x3a6/0x420 [ 119.802472][ T5878] ? __fget_files+0x2a/0x420 [ 119.802498][ T5878] security_file_ioctl+0xc3/0x2a0 [ 119.802532][ T5878] __se_sys_ioctl+0x47/0x170 [ 119.802562][ T5878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.802587][ T5878] do_syscall_64+0x174/0x580 [ 119.802616][ T5878] ? trace_irq_disable+0x3b/0x140 [ 119.802644][ T5878] ? clear_bhb_loop+0x40/0x90 [ 119.802672][ T5878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.802694][ T5878] RIP: 0033:0x7f4c5b85ce59 [ 119.802715][ T5878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.802734][ T5878] RSP: 002b:00007f4c59aae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.802758][ T5878] RAX: ffffffffffffffda RBX: 00007f4c5bad5fa0 RCX: 00007f4c5b85ce59 [ 119.802774][ T5878] RDX: 0000200000000400 RSI: 0000000000003b85 RDI: 0000000000000003 [ 119.802789][ T5878] RBP: 00007f4c59aae090 R08: 0000000000000000 R09: 0000000000000000 [ 119.802803][ T5878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.802816][ T5878] R13: 00007f4c5bad6038 R14: 00007f4c5bad5fa0 R15: 00007ffcf672e818 [ 119.802849][ T5878] [ 119.803152][ T5878] ERROR: Out of memory at tomoyo_realpath_from_path. [ 119.806012][ T5842] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 119.806048][ T5842] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 119.806090][ T5842] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 120.131447][ T5842] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 120.167630][ T5861] usb 2-1: config 0 descriptor?? [ 120.183697][ T5842] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 120.697195][ T5861] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 120.697227][ T5861] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 120.697248][ T5861] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 120.697768][ T5861] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 120.788727][ T5861] usb 2-1: USB disconnect, device number 2 [ 121.087617][ T5842] lo speed is unknown, defaulting to 1000 [ 121.171183][ T11] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 121.326432][ T11] usb 1-1: not running at top speed; connect to a high speed hub [ 121.340536][ T11] usb 1-1: config 7 has an invalid interface number: 160 but max is 0 [ 121.340566][ T11] usb 1-1: config 7 has an invalid interface number: 248 but max is 0 [ 121.340590][ T11] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 121.340610][ T11] usb 1-1: config 7 has 2 interfaces, different from the descriptor's value: 1 [ 121.340632][ T11] usb 1-1: config 7 has no interface number 0 [ 121.340661][ T11] usb 1-1: config 7 has no interface number 1 [ 121.340723][ T11] usb 1-1: config 7 interface 160 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 121.340755][ T11] usb 1-1: too many endpoints for config 7 interface 248 altsetting 83: 187, using maximum allowed: 30 [ 121.340796][ T11] usb 1-1: config 7 interface 248 altsetting 83 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 121.340825][ T11] usb 1-1: config 7 interface 248 altsetting 83 has an invalid descriptor for endpoint zero, skipping [ 121.340848][ T11] usb 1-1: config 7 interface 248 altsetting 83 has an invalid descriptor for endpoint zero, skipping [ 121.340872][ T11] usb 1-1: config 7 interface 248 altsetting 83 endpoint 0x2 has an invalid bInterval 208, changing to 4 [ 121.340902][ T11] usb 1-1: config 7 interface 248 altsetting 83 has an invalid descriptor for endpoint zero, skipping [ 121.340952][ T11] usb 1-1: config 7 interface 248 altsetting 83 has an invalid descriptor for endpoint zero, skipping [ 121.340977][ T11] usb 1-1: config 7 interface 248 altsetting 83 endpoint 0xF has invalid maxpacket 576, setting to 64 [ 121.341480][ T11] usb 1-1: config 7 interface 248 altsetting 83 has 9 endpoint descriptors, different from the interface descriptor's value: 187 [ 121.341566][ T11] usb 1-1: config 7 interface 160 has no altsetting 0 [ 121.341646][ T11] usb 1-1: config 7 interface 248 has no altsetting 0 [ 121.466511][ T11] usb 1-1: New USB device found, idVendor=067b, idProduct=aaa2, bcdDevice=71.05 [ 121.466604][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.466659][ T11] usb 1-1: Product: ꬠꝜ䋻텳ܞ㸣忎꯿㢜䮶ᒙɕ砺㼓葧饊ᗅ೜ﴟ뷙।೗ [ 121.466713][ T11] usb 1-1: Manufacturer: љ [ 121.466756][ T11] usb 1-1: SerialNumber: ࡃ [ 121.596023][ T5842] lo speed is unknown, defaulting to 1000 [ 121.756225][ T5842] lo speed is unknown, defaulting to 1000 [ 121.822565][ T4989] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 121.858100][ T5842] lo speed is unknown, defaulting to 1000 [ 121.962575][ T4989] usb 2-1: device descriptor read/64, error -71 [ 121.978924][ T5842] lo speed is unknown, defaulting to 1000 [ 121.996370][ T11] pl2303 1-1:7.160: required endpoints missing [ 122.182409][ T11] pl2303 1-1:7.248: required endpoints missing [ 122.261393][ T4989] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 122.326371][ T11] usb 1-1: USB disconnect, device number 3 [ 122.414650][ T4989] usb 2-1: device descriptor read/64, error -71 [ 122.471625][ T32] usb 3-1: USB disconnect, device number 4 [ 122.532838][ T4989] usb usb2-port1: attempt power cycle [ 122.836113][ T1439] hsr_slave_0: left promiscuous mode [ 122.871264][ T1439] hsr_slave_1: left promiscuous mode [ 122.872609][ T1439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.878546][ T1439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.905340][ T1439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.905371][ T1439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.981119][ T4989] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 123.015056][ T4989] usb 2-1: device descriptor read/8, error -71 [ 123.040120][ T5916] 9p: Bad value for 'wfdno' [ 123.197314][ T5698] IPVS: starting estimator thread 0... [ 123.198318][ T1439] veth1_macvtap: left promiscuous mode [ 123.198558][ T1439] veth0_macvtap: left promiscuous mode [ 123.236838][ T1439] veth1_vlan: left promiscuous mode [ 123.237239][ T1439] veth0_vlan: left promiscuous mode [ 123.302606][ T4989] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 123.331939][ T5919] IPVS: using max 7 ests per chain, 16800 per kthread [ 123.352573][ T4989] usb 2-1: device descriptor read/8, error -71 [ 123.468912][ T4989] usb usb2-port1: unable to enumerate USB device [ 123.563338][ T5715] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 123.664306][ T11] IPVS: starting estimator thread 0... [ 123.715898][ T5715] usb 3-1: device descriptor read/64, error -71 [ 123.765208][ T5926] IPVS: using max 7 ests per chain, 16800 per kthread [ 123.933079][ T5931] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 123.984144][ T5715] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 124.017196][ T5933] FAULT_INJECTION: forcing a failure. [ 124.017196][ T5933] name failslab, interval 1, probability 0, space 0, times 0 [ 124.017228][ T5933] CPU: 1 UID: 0 PID: 5933 Comm: syz.0.37 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 124.017251][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 124.017263][ T5933] Call Trace: [ 124.017274][ T5933] [ 124.017282][ T5933] dump_stack_lvl+0xe8/0x150 [ 124.017310][ T5933] should_fail_ex+0x46b/0x600 [ 124.017341][ T5933] should_failslab+0xa8/0x100 [ 124.017364][ T5933] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 124.017394][ T5933] ? do_getname+0x2e/0x250 [ 124.017421][ T5933] ? do_getname+0x2e/0x250 [ 124.017453][ T5933] do_getname+0x2e/0x250 [ 124.017478][ T5933] ? getname_flags+0x11/0x20 [ 124.017507][ T5933] do_sys_openat2+0xcc/0x200 [ 124.017528][ T5933] ? __pfx_do_sys_openat2+0x10/0x10 [ 124.017546][ T5933] ? ksys_write+0x248/0x270 [ 124.017571][ T5933] ? __pfx_ksys_write+0x10/0x10 [ 124.017596][ T5933] __x64_sys_openat+0x138/0x170 [ 124.017616][ T5933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.017636][ T5933] do_syscall_64+0x174/0x580 [ 124.017659][ T5933] ? trace_irq_disable+0x3b/0x140 [ 124.017683][ T5933] ? clear_bhb_loop+0x40/0x90 [ 124.017713][ T5933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.017739][ T5933] RIP: 0033:0x7f4c5b81d68e [ 124.017756][ T5933] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 124.017772][ T5933] RSP: 002b:00007f4c59aadf18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 124.017792][ T5933] RAX: ffffffffffffffda RBX: 00007f4c59aae6c0 RCX: 00007f4c5b81d68e [ 124.017805][ T5933] RDX: 0000000000000000 RSI: 00007f4c5b8f25aa RDI: ffffffffffffff9c [ 124.017818][ T5933] RBP: 00007f4c59aae090 R08: 0000000000000000 R09: 0000000000000000 [ 124.017829][ T5933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.017839][ T5933] R13: 00007f4c5bad6038 R14: 00007f4c5bad5fa0 R15: 00007ffcf672e818 [ 124.017867][ T5933] [ 124.291240][ T5715] usb 3-1: device descriptor read/64, error -71 [ 124.401671][ T5715] usb usb3-port1: attempt power cycle [ 124.457857][ T5938] FAULT_INJECTION: forcing a failure. [ 124.457857][ T5938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.457893][ T5938] CPU: 1 UID: 0 PID: 5938 Comm: syz.1.39 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 124.457918][ T5938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 124.457933][ T5938] Call Trace: [ 124.457941][ T5938] [ 124.457951][ T5938] dump_stack_lvl+0xe8/0x150 [ 124.457983][ T5938] should_fail_ex+0x46b/0x600 [ 124.458021][ T5938] _copy_from_user+0x2d/0xb0 [ 124.458047][ T5938] iommufd_fops_ioctl+0x461/0x5d0 [ 124.458078][ T5938] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 124.458109][ T5938] ? __fget_files+0x2a/0x420 [ 124.458138][ T5938] ? __fget_files+0x2a/0x420 [ 124.458173][ T5938] ? bpf_lsm_file_ioctl+0x9/0x20 [ 124.458199][ T5938] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 124.458226][ T5938] __se_sys_ioctl+0xff/0x170 [ 124.458255][ T5938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.458284][ T5938] do_syscall_64+0x174/0x580 [ 124.458312][ T5938] ? trace_irq_disable+0x3b/0x140 [ 124.458339][ T5938] ? clear_bhb_loop+0x40/0x90 [ 124.458365][ T5938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.458386][ T5938] RIP: 0033:0x7f15e698ce59 [ 124.458406][ T5938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.458424][ T5938] RSP: 002b:00007f15e4be6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.458447][ T5938] RAX: ffffffffffffffda RBX: 00007f15e6c05fa0 RCX: 00007f15e698ce59 [ 124.458463][ T5938] RDX: 00002000000004c0 RSI: 0000000000003b85 RDI: 0000000000000003 [ 124.458478][ T5938] RBP: 00007f15e4be6090 R08: 0000000000000000 R09: 0000000000000000 [ 124.458492][ T5938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.458504][ T5938] R13: 00007f15e6c06038 R14: 00007f15e6c05fa0 R15: 00007ffc76bf3b38 [ 124.458539][ T5938] [ 124.971200][ T5715] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 124.992207][ T5715] usb 3-1: device descriptor read/8, error -71 [ 125.225428][ T1439] team0 (unregistering): Port device team_slave_1 removed [ 125.237344][ T5715] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 125.252313][ T5715] usb 3-1: device descriptor read/8, error -71 [ 125.361991][ T5715] usb usb3-port1: unable to enumerate USB device [ 125.389366][ T1439] team0 (unregistering): Port device team_slave_0 removed [ 125.701951][ T5962] FAULT_INJECTION: forcing a failure. [ 125.701951][ T5962] name failslab, interval 1, probability 0, space 0, times 0 [ 125.701989][ T5962] CPU: 0 UID: 0 PID: 5962 Comm: syz.1.44 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 125.702014][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 125.702029][ T5962] Call Trace: [ 125.702037][ T5962] [ 125.702047][ T5962] dump_stack_lvl+0xe8/0x150 [ 125.702081][ T5962] should_fail_ex+0x46b/0x600 [ 125.702120][ T5962] should_failslab+0xa8/0x100 [ 125.702148][ T5962] __kmalloc_cache_noprof+0xa0/0x6d0 [ 125.702173][ T5962] ? sctp_add_bind_addr+0x8c/0x370 [ 125.702194][ T5962] ? sctp_add_bind_addr+0x8c/0x370 [ 125.702226][ T5962] sctp_add_bind_addr+0x8c/0x370 [ 125.702254][ T5962] sctp_do_bind+0x5b2/0x9d0 [ 125.702295][ T5962] sctp_connect_new_asoc+0x270/0x6b0 [ 125.702329][ T5962] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 125.702363][ T5962] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 125.702398][ T5962] ? lockdep_hardirqs_on+0x7a/0x110 [ 125.702427][ T5962] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 125.702454][ T5962] ? security_sctp_bind_connect+0x7e/0x2c0 [ 125.702499][ T5962] sctp_sendmsg+0x14f2/0x29b0 [ 125.702547][ T5962] ? __pfx_sctp_sendmsg+0x10/0x10 [ 125.702587][ T5962] ? aa_sk_perm+0x703/0x950 [ 125.702631][ T5962] ? __pfx_aa_sk_perm+0x10/0x10 [ 125.702664][ T5962] ? sock_rps_record_flow+0x19/0x350 [ 125.702690][ T5962] ? inet_sendmsg+0x2f4/0x370 [ 125.702715][ T5962] ? __pfx_inet_sendmsg+0x10/0x10 [ 125.702734][ T5962] sock_sendmsg_nosec+0x10e/0x180 [ 125.702772][ T5962] __sys_sendto+0x41a/0x5a0 [ 125.702800][ T5962] ? __pfx___sys_sendto+0x10/0x10 [ 125.702856][ T5962] ? __pfx_ksys_write+0x10/0x10 [ 125.702891][ T5962] __x64_sys_sendto+0xde/0x100 [ 125.702919][ T5962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.702944][ T5962] do_syscall_64+0x174/0x580 [ 125.702973][ T5962] ? trace_irq_disable+0x3b/0x140 [ 125.703001][ T5962] ? clear_bhb_loop+0x40/0x90 [ 125.703029][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.703053][ T5962] RIP: 0033:0x7f15e698ce59 [ 125.703073][ T5962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.703092][ T5962] RSP: 002b:00007f15e4be6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 125.703116][ T5962] RAX: ffffffffffffffda RBX: 00007f15e6c05fa0 RCX: 00007f15e698ce59 [ 125.703132][ T5962] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 125.703146][ T5962] RBP: 00007f15e4be6090 R08: 00002000000000c0 R09: 000000000000001c [ 125.703162][ T5962] R10: 0000000004000050 R11: 0000000000000246 R12: 0000000000000001 [ 125.703176][ T5962] R13: 00007f15e6c06038 R14: 00007f15e6c05fa0 R15: 00007ffc76bf3b38 [ 125.703211][ T5962] [ 126.151757][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 126.152557][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.152959][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.153343][ T5759] bridge_slave_0: entered allmulticast mode [ 126.157353][ T5759] bridge_slave_0: entered promiscuous mode [ 126.240749][ T5952] pim6reg: entered allmulticast mode [ 126.343847][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.344184][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.344515][ T5759] bridge_slave_1: entered allmulticast mode [ 126.373206][ T4989] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 126.393921][ T5759] bridge_slave_1: entered promiscuous mode [ 126.544784][ T4989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 126.544835][ T4989] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 126.544859][ T4989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.595527][ T4989] usb 2-1: config 0 descriptor?? [ 126.598686][ T5964] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 126.814880][ T11] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 126.883826][ T5759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.976082][ T5759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.061877][ T11] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 127.105667][ T11] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.105748][ T11] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.105777][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.187673][ T11] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.187755][ T11] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.187786][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.189175][ T11] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.189231][ T11] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.189261][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.207162][ T11] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.207254][ T11] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.207332][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.315555][ T11] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.315607][ T11] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.315634][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.362008][ T11] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.362067][ T11] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.362098][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.363614][ T11] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.363670][ T11] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.363700][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.365178][ T11] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.365232][ T11] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.365262][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.393005][ T11] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 127.393046][ T11] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 127.393078][ T11] usb 3-1: Product: syz [ 127.393122][ T11] usb 3-1: Manufacturer: syz [ 127.393165][ T11] usb 3-1: SerialNumber: syz [ 127.505911][ T11] usb 3-1: config 0 descriptor?? [ 127.899325][ T11] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 128.218256][ T11] usb 3-1: USB disconnect, device number 9 [ 128.288420][ T11] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 128.403784][ T5759] team0: Port device team_slave_0 added [ 128.469700][ T5759] team0: Port device team_slave_1 added [ 128.880685][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.880703][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.880727][ T5759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.070878][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.070894][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.070916][ T5759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.352005][ T4989] usbhid 2-1:0.0: can't add hid device: -71 [ 129.352135][ T4989] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 129.396787][ T4989] usb 2-1: USB disconnect, device number 7 [ 130.313569][ T5759] hsr_slave_0: entered promiscuous mode [ 130.330724][ T5759] hsr_slave_1: entered promiscuous mode [ 130.589251][ T6007] FAULT_INJECTION: forcing a failure. [ 130.589251][ T6007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.589291][ T6007] CPU: 1 UID: 0 PID: 6007 Comm: syz.1.51 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 130.589319][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 130.589334][ T6007] Call Trace: [ 130.589344][ T6007] [ 130.589354][ T6007] dump_stack_lvl+0xe8/0x150 [ 130.589389][ T6007] should_fail_ex+0x46b/0x600 [ 130.589431][ T6007] _copy_from_user+0x2d/0xb0 [ 130.589460][ T6007] copy_from_sockptr_offset+0x66/0xa0 [ 130.589504][ T6007] do_tcp_getsockopt+0xda4/0x2940 [ 130.589549][ T6007] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 130.589595][ T6007] ? sock_recv_errqueue+0x500/0x590 [ 130.589641][ T6007] ? aa_file_perm+0x192/0x15f0 [ 130.589677][ T6007] ? aa_label_sk_perm+0x532/0x6e0 [ 130.589727][ T6007] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 130.589770][ T6007] ? _parse_integer_limit+0x192/0x1e0 [ 130.589813][ T6007] ? __lock_acquire+0x6b5/0x2d10 [ 130.589863][ T6007] ? __lock_acquire+0x6b5/0x2d10 [ 130.589920][ T6007] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 130.589962][ T6007] tcp_getsockopt+0x83/0x130 [ 130.589997][ T6007] ? sock_recv_errqueue+0x500/0x590 [ 130.590037][ T6007] ? sock_recv_errqueue+0x500/0x590 [ 130.590079][ T6007] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 130.590121][ T6007] do_sock_getsockopt+0x51d/0x7e0 [ 130.590159][ T6007] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 130.590209][ T6007] ? __fget_files+0x3a6/0x420 [ 130.590234][ T6007] ? __fget_files+0x2a/0x420 [ 130.590268][ T6007] __x64_sys_getsockopt+0x1aa/0x250 [ 130.590307][ T6007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.590336][ T6007] do_syscall_64+0x174/0x580 [ 130.590367][ T6007] ? trace_irq_disable+0x3b/0x140 [ 130.590399][ T6007] ? clear_bhb_loop+0x40/0x90 [ 130.590430][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.590455][ T6007] RIP: 0033:0x7f15e698ce59 [ 130.590478][ T6007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.590499][ T6007] RSP: 002b:00007f15e4bc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 130.590526][ T6007] RAX: ffffffffffffffda RBX: 00007f15e6c06090 RCX: 00007f15e698ce59 [ 130.590544][ T6007] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 130.590559][ T6007] RBP: 00007f15e4bc5090 R08: 0000200000002100 R09: 0000000000000000 [ 130.590583][ T6007] R10: 00002000000020c0 R11: 0000000000000246 R12: 0000000000000001 [ 130.590600][ T6007] R13: 00007f15e6c06128 R14: 00007f15e6c06090 R15: 00007ffc76bf3b38 [ 130.590639][ T6007] [ 131.049351][ T5269] 8021q: adding VLAN 0 to HW filter on device eth3 [ 131.262761][ T4989] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 131.298181][ T6018] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 131.434619][ T4989] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 131.434653][ T4989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.434706][ T4989] usb 2-1: Product: syz [ 131.434722][ T4989] usb 2-1: Manufacturer: syz [ 131.434738][ T4989] usb 2-1: SerialNumber: syz [ 131.734678][ T37] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 131.899049][ T37] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 131.915438][ T37] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.915588][ T37] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.915623][ T37] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.943087][ T37] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.954091][ T37] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.954132][ T37] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.978450][ T37] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.978588][ T37] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.978624][ T37] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.980091][ T37] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.980154][ T37] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.980201][ T37] usb 3-1: config 0 interface 0 has no altsetting 0 [ 132.045004][ T37] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 132.045141][ T37] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 132.045177][ T37] usb 3-1: config 0 interface 0 has no altsetting 0 [ 132.054619][ T37] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 132.059397][ T37] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 132.059431][ T37] usb 3-1: config 0 interface 0 has no altsetting 0 [ 132.077503][ T37] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 132.083175][ T37] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 132.083213][ T37] usb 3-1: config 0 interface 0 has no altsetting 0 [ 132.150947][ T37] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 132.160466][ T37] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 132.160503][ T37] usb 3-1: config 0 interface 0 has no altsetting 0 [ 132.226417][ T37] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 132.226521][ T37] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 132.226548][ T37] usb 3-1: Product: syz [ 132.226565][ T37] usb 3-1: Manufacturer: syz [ 132.226581][ T37] usb 3-1: SerialNumber: syz [ 132.327016][ T37] usb 3-1: config 0 descriptor?? [ 132.367946][ T4989] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 132.368013][ T4989] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 132.394853][ T4989] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 132.418498][ T37] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 132.494801][ T4989] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 132.562301][ T4989] usb 2-1: USB disconnect, device number 8 [ 132.853399][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.858796][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.524368][ T11] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 133.682117][ T11] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 133.687672][ T11] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.687732][ T11] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.687763][ T11] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.689247][ T11] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.689299][ T11] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.689329][ T11] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.692931][ T11] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.693043][ T11] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.693084][ T11] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.703621][ T11] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.703739][ T11] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.703770][ T11] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.719780][ T11] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.719874][ T11] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.719952][ T11] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.722380][ T11] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.722428][ T11] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.722455][ T11] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.725104][ T11] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.725214][ T11] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.725244][ T11] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.749460][ T11] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.749548][ T11] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.749628][ T11] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.781675][ T11] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 133.781758][ T11] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 133.781782][ T11] usb 1-1: Product: syz [ 133.781798][ T11] usb 1-1: Manufacturer: syz [ 133.781848][ T11] usb 1-1: SerialNumber: syz [ 133.935183][ T11] usb 1-1: config 0 descriptor?? [ 134.131468][ T6054] capability: warning: `syz.1.58' uses 32-bit capabilities (legacy support in use) [ 134.256418][ T11] yurex 1-1:0.0: USB YUREX device now attached to Yurex #1 [ 134.434929][ C1] usb 3-1: yurex_control_callback - control failed: -2 [ 134.706703][ T9] usb 1-1: USB disconnect, device number 4 [ 134.786936][ T11] usb 3-1: USB disconnect, device number 10 [ 134.958572][ T9] yurex 1-1:0.0: USB YUREX #1 now disconnected [ 134.987215][ T11] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 135.426296][ T11] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 135.551684][ T5698] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 135.579743][ T11] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.579773][ T11] usb 3-1: config 0 has no interface number 0 [ 135.579837][ T11] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 12447, setting to 8 [ 135.579885][ T11] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.579912][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.643289][ T11] usb 3-1: config 0 descriptor?? [ 135.646638][ T6063] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 135.721703][ T11] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 135.736372][ T5698] usb 2-1: Using ep0 maxpacket: 16 [ 135.768280][ T5698] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 135.768311][ T5698] usb 2-1: config 1 has no interface number 0 [ 135.768360][ T5698] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 135.768389][ T5698] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 135.768416][ T5698] usb 2-1: config 1 interface 105 has no altsetting 0 [ 135.782307][ T5698] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 135.782391][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 135.782446][ T5698] usb 2-1: Product: syz [ 135.782487][ T5698] usb 2-1: Manufacturer: syz [ 135.782564][ T5698] usb 2-1: SerialNumber: syz [ 135.918228][ T6069] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 135.919695][ T6069] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 135.983599][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'. [ 136.100892][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 136.178313][ T5971] usb 3-1: USB disconnect, device number 11 [ 137.022311][ T37] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 137.270337][ T6088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.321932][ T6088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.411230][ T4989] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 137.629482][ T6092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.657662][ T6092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.703956][ T4989] usb 3-1: unable to get BOS descriptor or descriptor too short [ 137.734756][ T4989] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 137.734793][ T4989] usb 3-1: can't read configurations, error -71 [ 138.554218][ T5698] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 138.734740][ T5698] usb 2-1: USB disconnect, device number 9 [ 138.985052][ T6111] netlink: 'syz.1.65': attribute type 29 has an invalid length. [ 139.390826][ T6112] FAULT_INJECTION: forcing a failure. [ 139.390826][ T6112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.390863][ T6112] CPU: 0 UID: 0 PID: 6112 Comm: syz.1.65 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 139.390889][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 139.390902][ T6112] Call Trace: [ 139.390911][ T6112] [ 139.390931][ T6112] dump_stack_lvl+0xe8/0x150 [ 139.390964][ T6112] should_fail_ex+0x46b/0x600 [ 139.391005][ T6112] _copy_to_iter+0x589/0x17d0 [ 139.391054][ T6112] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 139.391078][ T6112] ? __pfx__copy_to_iter+0x10/0x10 [ 139.391111][ T6112] ? rt_spin_lock+0x1e0/0x400 [ 139.391136][ T6112] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 139.391168][ T6112] __skb_datagram_iter+0xf8/0x980 [ 139.391201][ T6112] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 139.391240][ T6112] skb_copy_datagram_iter+0xb5/0x240 [ 139.391278][ T6112] netlink_recvmsg+0x2c3/0xa50 [ 139.391318][ T6112] ? __pfx_netlink_recvmsg+0x10/0x10 [ 139.391350][ T6112] ? __pfx_aa_sk_perm+0x10/0x10 [ 139.391383][ T6112] ? __lock_acquire+0x6b5/0x2d10 [ 139.391417][ T6112] ? aa_sock_msg_perm+0x122/0x200 [ 139.391440][ T6112] ? __pfx_netlink_recvmsg+0x10/0x10 [ 139.391471][ T6112] sock_recvmsg_nosec+0x130/0x170 [ 139.391509][ T6112] ____sys_recvmsg+0x23d/0x4f0 [ 139.391548][ T6112] ? __pfx_____sys_recvmsg+0x10/0x10 [ 139.391594][ T6112] ? import_iovec+0x73/0xa0 [ 139.391623][ T6112] ___sys_recvmsg+0x215/0x5a0 [ 139.391660][ T6112] ? __pfx____sys_recvmsg+0x10/0x10 [ 139.391694][ T6112] ? __fget_files+0x2a/0x420 [ 139.391737][ T6112] ? __fget_files+0x3a6/0x420 [ 139.391772][ T6112] __x64_sys_recvmsg+0x1b4/0x290 [ 139.391806][ T6112] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 139.391855][ T6112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.391881][ T6112] do_syscall_64+0x174/0x580 [ 139.391911][ T6112] ? trace_irq_disable+0x3b/0x140 [ 139.391949][ T6112] ? clear_bhb_loop+0x40/0x90 [ 139.391977][ T6112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.392001][ T6112] RIP: 0033:0x7f15e698ce59 [ 139.392021][ T6112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.392040][ T6112] RSP: 002b:00007f15e4bc5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 139.392065][ T6112] RAX: ffffffffffffffda RBX: 00007f15e6c06090 RCX: 00007f15e698ce59 [ 139.392082][ T6112] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 139.392096][ T6112] RBP: 00007f15e4bc5090 R08: 0000000000000000 R09: 0000000000000000 [ 139.392111][ T6112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.392124][ T6112] R13: 00007f15e6c06128 R14: 00007f15e6c06090 R15: 00007ffc76bf3b38 [ 139.392159][ T6112] [ 139.413089][ T6112] netlink: 'syz.1.65': attribute type 29 has an invalid length. [ 140.008588][ T6126] netlink: 'syz.1.67': attribute type 29 has an invalid length. [ 140.045339][ T6126] netlink: 'syz.1.67': attribute type 29 has an invalid length. [ 140.283728][ T32] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 140.491398][ T32] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 140.491825][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.491848][ T32] usb 3-1: Product: syz [ 140.491862][ T32] usb 3-1: Manufacturer: syz [ 140.491876][ T32] usb 3-1: SerialNumber: syz [ 140.575367][ T5759] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 140.603136][ T32] usb 3-1: config 0 descriptor?? [ 140.644344][ T37] usb 1-1: unable to get BOS descriptor or descriptor too short [ 140.670367][ T37] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 140.670411][ T37] usb 1-1: can't read configurations, error -71 [ 140.742698][ T32] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 140.823808][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 140.877635][ T6125] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 140.880407][ T6125] dvb-usb: bulk message failed: -22 (7/0) [ 140.902782][ T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 140.903973][ T32] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 140.934176][ T6137] netlink: 65 bytes leftover after parsing attributes in process `syz.1.68'. [ 140.974325][ T5759] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 141.057294][ T32] usb 3-1: media controller created [ 141.098450][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.351390][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 141.351572][ T37] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 141.411552][ T5759] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 141.463035][ T32] DVB: Unable to find symbol mt352_attach() [ 141.499719][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 141.520850][ T37] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 141.532162][ T37] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.532220][ T37] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.532249][ T37] usb 1-1: config 0 interface 0 has no altsetting 0 [ 141.538834][ T37] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.538892][ T37] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.538922][ T37] usb 1-1: config 0 interface 0 has no altsetting 0 [ 141.540538][ T5759] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 141.546368][ T37] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.546426][ T37] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.546455][ T37] usb 1-1: config 0 interface 0 has no altsetting 0 [ 141.555322][ T37] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.555379][ T37] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.555407][ T37] usb 1-1: config 0 interface 0 has no altsetting 0 [ 141.562618][ T37] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.562678][ T37] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.562708][ T37] usb 1-1: config 0 interface 0 has no altsetting 0 [ 141.665286][ T37] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.665353][ T37] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.665383][ T37] usb 1-1: config 0 interface 0 has no altsetting 0 [ 141.668429][ T37] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.668474][ T37] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.668499][ T37] usb 1-1: config 0 interface 0 has no altsetting 0 [ 141.674959][ T37] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.675018][ T37] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.675047][ T37] usb 1-1: config 0 interface 0 has no altsetting 0 [ 141.775951][ T37] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 141.775983][ T37] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 141.776005][ T37] usb 1-1: Product: syz [ 141.776021][ T37] usb 1-1: Manufacturer: syz [ 141.776037][ T37] usb 1-1: SerialNumber: syz [ 141.825279][ T37] usb 1-1: config 0 descriptor?? [ 141.849848][ T37] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 141.909921][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 142.005793][ T32] DVB: Unable to find symbol nxt6000_attach() [ 142.005807][ T32] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 142.154094][ C1] usb 1-1: yurex_control_callback - control failed: -2 [ 142.208249][ T5715] usb 1-1: USB disconnect, device number 6 [ 142.223669][ T32] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 142.323766][ T5715] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 142.488692][ T32] dvb-usb: schedule remote query interval to 1000 msecs. [ 142.488717][ T32] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 142.488799][ T32] dvb-usb: bulk message failed: -22 (7/0) [ 142.488817][ T32] dvb-usb: bulk message failed: -22 (7/0) [ 142.525809][ T32] usb 3-1: USB disconnect, device number 14 [ 142.759834][ T32] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 143.013562][ T6175] FAULT_INJECTION: forcing a failure. [ 143.013562][ T6175] name failslab, interval 1, probability 0, space 0, times 0 [ 143.013599][ T6175] CPU: 1 UID: 0 PID: 6175 Comm: syz.0.72 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 143.013625][ T6175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 143.013639][ T6175] Call Trace: [ 143.013647][ T6175] [ 143.013656][ T6175] dump_stack_lvl+0xe8/0x150 [ 143.013686][ T6175] should_fail_ex+0x46b/0x600 [ 143.013725][ T6175] should_failslab+0xa8/0x100 [ 143.013753][ T6175] __kmalloc_noprof+0xfe/0x7e0 [ 143.013778][ T6175] ? tomoyo_encode+0x28b/0x550 [ 143.013801][ T6175] ? tomoyo_encode+0x28b/0x550 [ 143.013832][ T6175] tomoyo_encode+0x28b/0x550 [ 143.013861][ T6175] tomoyo_realpath_from_path+0x58d/0x5d0 [ 143.013889][ T6175] ? tomoyo_domain+0xd7/0x130 [ 143.013921][ T6175] ? tomoyo_path_number_perm+0x219/0x630 [ 143.013957][ T6175] tomoyo_path_number_perm+0x246/0x630 [ 143.013994][ T6175] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 143.014026][ T6175] ? __lock_acquire+0x6b5/0x2d10 [ 143.014058][ T6175] ? do_raw_spin_lock+0x12b/0x2f0 [ 143.014132][ T6175] ? __fget_files+0x2a/0x420 [ 143.014159][ T6175] ? __fget_files+0x2a/0x420 [ 143.014180][ T6175] ? __fget_files+0x3a6/0x420 [ 143.014211][ T6175] ? __fget_files+0x2a/0x420 [ 143.014237][ T6175] security_file_ioctl+0xc3/0x2a0 [ 143.014271][ T6175] __se_sys_ioctl+0x47/0x170 [ 143.014301][ T6175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.014325][ T6175] do_syscall_64+0x174/0x580 [ 143.014354][ T6175] ? trace_irq_disable+0x3b/0x140 [ 143.014387][ T6175] ? clear_bhb_loop+0x40/0x90 [ 143.014415][ T6175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.014438][ T6175] RIP: 0033:0x7f4c5b85ce59 [ 143.014459][ T6175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.014478][ T6175] RSP: 002b:00007f4c59aae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.014502][ T6175] RAX: ffffffffffffffda RBX: 00007f4c5bad5fa0 RCX: 00007f4c5b85ce59 [ 143.014519][ T6175] RDX: 0000200000000100 RSI: 00000000800452d2 RDI: 0000000000000004 [ 143.014534][ T6175] RBP: 00007f4c59aae090 R08: 0000000000000000 R09: 0000000000000000 [ 143.014547][ T6175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.014560][ T6175] R13: 00007f4c5bad6038 R14: 00007f4c5bad5fa0 R15: 00007ffcf672e818 [ 143.014594][ T6175] [ 143.021996][ T6175] ERROR: Out of memory at tomoyo_realpath_from_path. [ 143.101198][ T32] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 143.302713][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 143.306369][ T32] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 143.306401][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.342389][ T32] usb 3-1: config 0 descriptor?? [ 143.361883][ T32] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 143.366707][ T32] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 143.588662][ T5861] usb 3-1: USB disconnect, device number 15 [ 144.072196][ T5698] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 144.191715][ T32] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 144.230039][ T5698] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.230083][ T5698] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.257538][ T5698] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 144.257572][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.257595][ T5698] usb 2-1: Product: syz [ 144.257611][ T5698] usb 2-1: Manufacturer: syz [ 144.257626][ T5698] usb 2-1: SerialNumber: syz [ 144.378588][ T5698] usb 2-1: config 0 descriptor?? [ 144.401551][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.401581][ T32] usb 1-1: config 0 has no interfaces? [ 144.401610][ T32] usb 1-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 144.401632][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.422897][ T5698] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 144.459137][ T32] usb 1-1: config 0 descriptor?? [ 144.647909][ T5698] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 144.680325][ T5698] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 144.680437][ T5698] usb 2-1: media controller created [ 144.791861][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 144.896089][ T5698] DVB: Unable to find symbol tda10046_attach() [ 144.896111][ T5698] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 144.896122][ T5698] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 145.183273][ T5698] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 145.234597][ T5698] usb 2-1: USB disconnect, device number 10 [ 145.990633][ T32] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 146.016807][ T5759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.134012][ T5759] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.169421][ T6218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.195045][ T6218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.200752][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.200926][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.223853][ T6225] netlink: 20 bytes leftover after parsing attributes in process `syz.1.78'. [ 146.223895][ T6225] netlink: 20 bytes leftover after parsing attributes in process `syz.1.78'. [ 146.316819][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.316974][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.401245][ T32] usb 3-1: unable to get BOS descriptor or descriptor too short [ 147.432402][ T5715] usb 1-1: USB disconnect, device number 7 [ 147.443731][ T32] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 147.443770][ T32] usb 3-1: can't read configurations, error -71 [ 147.991159][ T5715] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 148.123795][ T5715] usb 1-1: device descriptor read/64, error -71 [ 148.371158][ T5715] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 148.482695][ T5698] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 148.512340][ T5715] usb 1-1: device descriptor read/64, error -71 [ 148.621691][ T5715] usb usb1-port1: attempt power cycle [ 148.672183][ T5698] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 148.672218][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.672241][ T5698] usb 2-1: Product: syz [ 148.672257][ T5698] usb 2-1: Manufacturer: syz [ 148.672273][ T5698] usb 2-1: SerialNumber: syz [ 148.780755][ T5698] usb 2-1: config 0 descriptor?? [ 148.819034][ T5698] ch341 2-1:0.0: ch341-uart converter detected [ 148.896749][ T5759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.001147][ T5715] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 149.020361][ T5715] usb 1-1: device descriptor read/8, error -71 [ 149.034102][ T6274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.034810][ T6274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.265927][ T5715] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 149.324085][ T5715] usb 1-1: device descriptor read/8, error -71 [ 149.431628][ T5715] usb usb1-port1: unable to enumerate USB device [ 149.458110][ T5698] usb 2-1: failed to send control message: -71 [ 149.458168][ T5698] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 149.569776][ T5698] usb 2-1: USB disconnect, device number 11 [ 149.623433][ T5698] ch341 2-1:0.0: device disconnected [ 149.654211][ T6304] mmap: syz.2.87 (6304) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 149.714629][ T5759] veth0_vlan: entered promiscuous mode [ 149.850785][ T5759] veth1_vlan: entered promiscuous mode [ 149.859800][ T6307] FAULT_INJECTION: forcing a failure. [ 149.859800][ T6307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.859837][ T6307] CPU: 1 UID: 0 PID: 6307 Comm: syz.2.88 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 149.859861][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 149.859874][ T6307] Call Trace: [ 149.859883][ T6307] [ 149.859892][ T6307] dump_stack_lvl+0xe8/0x150 [ 149.859923][ T6307] should_fail_ex+0x46b/0x600 [ 149.859959][ T6307] _copy_from_user+0x2d/0xb0 [ 149.859985][ T6307] comedi_unlocked_ioctl+0xb60/0x1b00 [ 149.860051][ T6307] ? kasan_quarantine_put+0xbb/0x1f0 [ 149.860089][ T6307] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 149.860121][ T6307] ? tomoyo_path_number_perm+0x219/0x630 [ 149.860159][ T6307] ? tomoyo_path_number_perm+0x219/0x630 [ 149.860197][ T6307] ? do_vfs_ioctl+0x117b/0x1540 [ 149.860230][ T6307] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 149.860301][ T6307] ? __fget_files+0x2a/0x420 [ 149.860324][ T6307] ? __fget_files+0x3a6/0x420 [ 149.860346][ T6307] ? __fget_files+0x2a/0x420 [ 149.860373][ T6307] ? bpf_lsm_file_ioctl+0x9/0x20 [ 149.860401][ T6307] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 149.860424][ T6307] __se_sys_ioctl+0xff/0x170 [ 149.860450][ T6307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.860475][ T6307] do_syscall_64+0x174/0x580 [ 149.860502][ T6307] ? trace_irq_disable+0x3b/0x140 [ 149.860530][ T6307] ? clear_bhb_loop+0x40/0x90 [ 149.860559][ T6307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.860582][ T6307] RIP: 0033:0x7f2e1375ce59 [ 149.860603][ T6307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.860622][ T6307] RSP: 002b:00007f2e119b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.860646][ T6307] RAX: ffffffffffffffda RBX: 00007f2e139d5fa0 RCX: 00007f2e1375ce59 [ 149.860663][ T6307] RDX: 00002000000000c0 RSI: 000000008010640b RDI: 0000000000000003 [ 149.860678][ T6307] RBP: 00007f2e119b6090 R08: 0000000000000000 R09: 0000000000000000 [ 149.860693][ T6307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.860709][ T6307] R13: 00007f2e139d6038 R14: 00007f2e139d5fa0 R15: 00007ffe2ae17cf8 [ 149.860745][ T6307] [ 150.437165][ T5759] veth0_macvtap: entered promiscuous mode [ 150.503621][ T5759] veth1_macvtap: entered promiscuous mode [ 150.624214][ T6317] FAULT_INJECTION: forcing a failure. [ 150.624214][ T6317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.624251][ T6317] CPU: 1 UID: 0 PID: 6317 Comm: syz.2.92 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 150.624277][ T6317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 150.624291][ T6317] Call Trace: [ 150.624300][ T6317] [ 150.624309][ T6317] dump_stack_lvl+0xe8/0x150 [ 150.624340][ T6317] should_fail_ex+0x46b/0x600 [ 150.624378][ T6317] _copy_from_user+0x2d/0xb0 [ 150.624403][ T6317] iommufd_fops_ioctl+0x461/0x5d0 [ 150.624434][ T6317] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 150.624467][ T6317] ? __fget_files+0x2a/0x420 [ 150.624496][ T6317] ? __fget_files+0x2a/0x420 [ 150.624521][ T6317] ? bpf_lsm_file_ioctl+0x9/0x20 [ 150.624547][ T6317] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 150.624575][ T6317] __se_sys_ioctl+0xff/0x170 [ 150.624615][ T6317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.624640][ T6317] do_syscall_64+0x174/0x580 [ 150.624671][ T6317] ? clear_bhb_loop+0x40/0x90 [ 150.624698][ T6317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.624721][ T6317] RIP: 0033:0x7f2e1375ce59 [ 150.624741][ T6317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.624760][ T6317] RSP: 002b:00007f2e119b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.624784][ T6317] RAX: ffffffffffffffda RBX: 00007f2e139d5fa0 RCX: 00007f2e1375ce59 [ 150.624800][ T6317] RDX: 0000200000000180 RSI: 0000000000003b83 RDI: 0000000000000003 [ 150.624814][ T6317] RBP: 00007f2e119b6090 R08: 0000000000000000 R09: 0000000000000000 [ 150.624828][ T6317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.624841][ T6317] R13: 00007f2e139d6038 R14: 00007f2e139d5fa0 R15: 00007ffe2ae17cf8 [ 150.624874][ T6317] [ 150.784994][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.972703][ T5861] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 151.044889][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.129433][ T5861] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.129478][ T5861] usb 2-1: config 0 interface 0 has no altsetting 0 [ 151.169502][ T5861] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 151.169536][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.169558][ T5861] usb 2-1: Product: syz [ 151.169574][ T5861] usb 2-1: Manufacturer: syz [ 151.169590][ T5861] usb 2-1: SerialNumber: syz [ 151.283209][ T3384] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.283940][ T3384] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.317423][ T5861] usb 2-1: config 0 descriptor?? [ 151.319942][ T3384] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.345326][ T3384] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.378237][ T5861] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 151.409110][ T5861] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 151.492511][ T5861] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 151.492575][ T5861] usb 2-1: media controller created [ 151.674150][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.733619][ T6339] input: syz1 as /devices/virtual/input/input7 [ 152.206426][ T5861] DVB: Unable to find symbol tda10046_attach() [ 152.206441][ T5861] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 152.206456][ T5861] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 152.801508][ T5861] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 152.823036][ T5861] usb 2-1: USB disconnect, device number 12 [ 152.905029][ T6231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.905051][ T6231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.067549][ T3384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.067571][ T3384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.521194][ T5698] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 153.701269][ T5698] usb 4-1: device descriptor read/64, error -71 [ 153.943841][ T5698] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 153.972276][ T5715] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 154.071225][ T5698] usb 4-1: device descriptor read/64, error -71 [ 154.112065][ T5715] usb 3-1: device descriptor read/64, error -71 [ 154.181551][ T5698] usb usb4-port1: attempt power cycle [ 154.231227][ T6346] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 154.341318][ T5861] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 154.363846][ T5715] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 154.383302][ T6346] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.383352][ T6346] usb 1-1: config 0 interface 0 has no altsetting 0 [ 154.385880][ T6346] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 154.385909][ T6346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.385931][ T6346] usb 1-1: Product: syz [ 154.385947][ T6346] usb 1-1: Manufacturer: syz [ 154.385968][ T6346] usb 1-1: SerialNumber: syz [ 154.404305][ T6346] usb 1-1: config 0 descriptor?? [ 154.468162][ T6346] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 154.497995][ T6346] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 154.498647][ T6346] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 154.498686][ T6346] usb 1-1: media controller created [ 154.521245][ T5715] usb 3-1: device descriptor read/64, error -71 [ 154.531760][ T5698] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 154.531937][ T5861] usb 2-1: device descriptor read/64, error -71 [ 154.538808][ T6346] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.552593][ T5698] usb 4-1: device descriptor read/8, error -71 [ 154.617772][ T6346] DVB: Unable to find symbol tda10046_attach() [ 154.617784][ T6346] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 154.617796][ T6346] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 154.633192][ T5715] usb usb3-port1: attempt power cycle [ 154.811221][ T5698] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 154.817145][ T5861] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 154.871996][ T5698] usb 4-1: device descriptor read/8, error -71 [ 154.951250][ T5861] usb 2-1: device descriptor read/64, error -71 [ 154.988375][ T5698] usb usb4-port1: unable to enumerate USB device [ 155.031174][ T5715] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 155.052187][ T5715] usb 3-1: device descriptor read/8, error -71 [ 155.077855][ T5861] usb usb2-port1: attempt power cycle [ 155.312128][ T5715] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 155.332133][ T5715] usb 3-1: device descriptor read/8, error -71 [ 155.431195][ T5861] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 155.451793][ T5715] usb usb3-port1: unable to enumerate USB device [ 155.474729][ T5861] usb 2-1: device descriptor read/8, error -71 [ 155.496887][ T6346] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 155.518649][ T6346] usb 1-1: USB disconnect, device number 12 [ 155.712047][ T5861] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 155.732631][ T5861] usb 2-1: device descriptor read/8, error -71 [ 155.842162][ T5861] usb usb2-port1: unable to enumerate USB device [ 156.057099][ T6375] process 'syz.0.109' launched '/dev/fd/3' with NULL argv: empty string added [ 156.487112][ T6383] FAULT_INJECTION: forcing a failure. [ 156.487112][ T6383] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 156.487150][ T6383] CPU: 1 UID: 0 PID: 6383 Comm: syz.3.113 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 156.487175][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.487188][ T6383] Call Trace: [ 156.487197][ T6383] [ 156.487205][ T6383] dump_stack_lvl+0xe8/0x150 [ 156.487238][ T6383] should_fail_ex+0x46b/0x600 [ 156.487275][ T6383] prepare_alloc_pages+0x22a/0x6b0 [ 156.487310][ T6383] __alloc_frozen_pages_noprof+0x12f/0x380 [ 156.487341][ T6383] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 156.487374][ T6383] ? __pfx_policy_nodemask+0x10/0x10 [ 156.487399][ T6383] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 156.487422][ T6383] ? reacquire_held_locks+0x104/0x190 [ 156.487461][ T6383] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 156.487487][ T6383] alloc_pages_mpol+0xd1/0x380 [ 156.487519][ T6383] alloc_pages_noprof+0xd2/0x2f0 [ 156.487551][ T6383] __pmd_alloc+0x3a/0x5e0 [ 156.487578][ T6383] handle_mm_fault+0xf4d/0x14d0 [ 156.487603][ T6383] ? handle_mm_fault+0xed/0x14d0 [ 156.487661][ T6383] ? __pfx_handle_mm_fault+0x10/0x10 [ 156.487697][ T6383] ? __lock_acquire+0x6b5/0x2d10 [ 156.487738][ T6383] ? lock_mm_and_find_vma+0xa7/0x340 [ 156.487768][ T6383] do_user_addr_fault+0x75b/0x1340 [ 156.487809][ T6383] exc_page_fault+0x6a/0xc0 [ 156.487830][ T6383] asm_exc_page_fault+0x26/0x30 [ 156.487846][ T6383] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 156.487862][ T6383] Code: c4 10 e9 54 2a 05 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 156.487881][ T6383] RSP: 0018:ffffc9000159fcb8 EFLAGS: 00050202 [ 156.487896][ T6383] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 156.487906][ T6383] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffc9000159fd70 [ 156.487917][ T6383] RBP: ffffc9000159fe68 R08: 0000000000000003 R09: 0000000000000004 [ 156.487927][ T6383] R10: dffffc0000000000 R11: fffff520002b3fae R12: 1ffff920002b3fa4 [ 156.487938][ T6383] R13: 0000200000000080 R14: ffffc9000159fd70 R15: 0000200000000080 [ 156.487981][ T6383] _copy_from_user+0x7a/0xb0 [ 156.488010][ T6383] do_sock_getsockopt+0x200/0x7e0 [ 156.488045][ T6383] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 156.488090][ T6383] ? __fget_files+0x3a6/0x420 [ 156.488116][ T6383] ? __fget_files+0x2a/0x420 [ 156.488137][ T6383] __x64_sys_getsockopt+0x1aa/0x250 [ 156.488161][ T6383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.488178][ T6383] do_syscall_64+0x174/0x580 [ 156.488198][ T6383] ? trace_irq_disable+0x3b/0x140 [ 156.488218][ T6383] ? clear_bhb_loop+0x40/0x90 [ 156.488237][ T6383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.488253][ T6383] RIP: 0033:0x7f86f3bece59 [ 156.488267][ T6383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.488279][ T6383] RSP: 002b:00007f86f1e46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 156.488295][ T6383] RAX: ffffffffffffffda RBX: 00007f86f3e65fa0 RCX: 00007f86f3bece59 [ 156.488306][ T6383] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 156.488315][ T6383] RBP: 00007f86f1e46090 R08: 0000200000000080 R09: 0000000000000000 [ 156.488329][ T6383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.488338][ T6383] R13: 00007f86f3e66038 R14: 00007f86f3e65fa0 R15: 00007ffe93b4a888 [ 156.488362][ T6383] [ 156.951738][ T6377] FAULT_INJECTION: forcing a failure. [ 156.951738][ T6377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.951775][ T6377] CPU: 1 UID: 0 PID: 6377 Comm: syz.0.110 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 156.951800][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.951814][ T6377] Call Trace: [ 156.951822][ T6377] [ 156.951832][ T6377] dump_stack_lvl+0xe8/0x150 [ 156.951875][ T6377] should_fail_ex+0x46b/0x600 [ 156.951912][ T6377] core_sys_select+0x8df/0xc30 [ 156.951965][ T6377] ? __pfx_core_sys_select+0x10/0x10 [ 156.952024][ T6377] ? __pfx_set_user_sigmask+0x10/0x10 [ 156.952058][ T6377] ? rt_mutex_slowunlock+0x1cb/0x300 [ 156.952080][ T6377] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 156.952109][ T6377] __se_sys_pselect6+0x267/0x320 [ 156.952150][ T6377] ? __pfx___se_sys_pselect6+0x10/0x10 [ 156.952184][ T6377] ? __pfx_ksys_write+0x10/0x10 [ 156.952217][ T6377] ? __x64_sys_pselect6+0x21/0xf0 [ 156.952252][ T6377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.952276][ T6377] do_syscall_64+0x174/0x580 [ 156.952304][ T6377] ? trace_irq_disable+0x3b/0x140 [ 156.952332][ T6377] ? clear_bhb_loop+0x40/0x90 [ 156.952359][ T6377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.952381][ T6377] RIP: 0033:0x7f4c5b85ce59 [ 156.952402][ T6377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.952421][ T6377] RSP: 002b:00007f4c59aae028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 156.952445][ T6377] RAX: ffffffffffffffda RBX: 00007f4c5bad5fa0 RCX: 00007f4c5b85ce59 [ 156.952462][ T6377] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 156.952476][ T6377] RBP: 00007f4c59aae090 R08: 0000000000000000 R09: 0000000000000000 [ 156.952491][ T6377] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 156.952505][ T6377] R13: 00007f4c5bad6038 R14: 00007f4c5bad5fa0 R15: 00007ffcf672e818 [ 156.952539][ T6377] [ 157.522580][ T5715] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 157.543986][ T32] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 157.671163][ T5715] usb 4-1: Using ep0 maxpacket: 16 [ 157.673119][ T5715] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.673176][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.673209][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 157.673232][ T5715] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 157.673257][ T5715] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.675947][ T5715] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 157.675968][ T5715] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 157.675983][ T5715] usb 4-1: Manufacturer: syz [ 157.766568][ T32] usb 1-1: not running at top speed; connect to a high speed hub [ 157.778525][ T32] usb 1-1: config 7 has an invalid interface number: 160 but max is 0 [ 157.778546][ T32] usb 1-1: config 7 has an invalid interface number: 248 but max is 0 [ 157.778561][ T32] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 157.778574][ T32] usb 1-1: config 7 has 2 interfaces, different from the descriptor's value: 1 [ 157.778590][ T32] usb 1-1: config 7 has no interface number 0 [ 157.778601][ T32] usb 1-1: config 7 has no interface number 1 [ 157.778642][ T32] usb 1-1: config 7 interface 160 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 157.778662][ T32] usb 1-1: too many endpoints for config 7 interface 248 altsetting 83: 187, using maximum allowed: 30 [ 157.778690][ T32] usb 1-1: config 7 interface 248 altsetting 83 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 157.778710][ T32] usb 1-1: config 7 interface 248 altsetting 83 has an invalid descriptor for endpoint zero, skipping [ 157.778725][ T32] usb 1-1: config 7 interface 248 altsetting 83 has an invalid descriptor for endpoint zero, skipping [ 157.778741][ T32] usb 1-1: config 7 interface 248 altsetting 83 endpoint 0x2 has an invalid bInterval 208, changing to 4 [ 157.778761][ T32] usb 1-1: config 7 interface 248 altsetting 83 has an invalid descriptor for endpoint zero, skipping [ 157.778776][ T32] usb 1-1: config 7 interface 248 altsetting 83 has an invalid descriptor for endpoint zero, skipping [ 157.778792][ T32] usb 1-1: config 7 interface 248 altsetting 83 endpoint 0xF has invalid maxpacket 576, setting to 64 [ 157.778811][ T32] usb 1-1: config 7 interface 248 altsetting 83 has 9 endpoint descriptors, different from the interface descriptor's value: 187 [ 157.778830][ T32] usb 1-1: config 7 interface 160 has no altsetting 0 [ 157.778843][ T32] usb 1-1: config 7 interface 248 has no altsetting 0 [ 157.919000][ T32] usb 1-1: New USB device found, idVendor=067b, idProduct=aaa2, bcdDevice=71.05 [ 157.919024][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.919038][ T32] usb 1-1: Product: ꬠꝜ䋻텳ܞ㸣忎꯿㢜䮶ᒙɕ砺㼓葧饊ᗅ೜ﴟ뷙।೗ [ 157.919052][ T32] usb 1-1: Manufacturer: љ [ 157.919062][ T32] usb 1-1: SerialNumber: ࡃ [ 158.024494][ T5715] usb 4-1: config 0 descriptor?? [ 158.169093][ T30] ------------[ cut here ]------------ [ 158.169106][ T30] task_rq(p) != rq [ 158.169116][ T30] WARNING: kernel/sched/fair.c:7656 at hrtick_start_fair+0x196/0x1f0, CPU#1: ktimers/1/30 [ 158.169156][ T30] Modules linked in: [ 158.169172][ T30] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 158.169191][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 158.169202][ T30] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 158.169226][ T30] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 158.169241][ T30] RSP: 0018:ffffc90000a4faa0 EFLAGS: 00010006 [ 158.169255][ T30] RAX: ffff8880b863ba40 RBX: ffff8880b873ba40 RCX: ffffffff8197d8ae [ 158.169269][ T30] RDX: 0000000000000000 RSI: ffff8880260e0000 RDI: ffff8880b873ba40 [ 158.169281][ T30] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 158.169294][ T30] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 158.169308][ T30] R13: 1ffff110170e78d6 R14: ffff8880260e0000 R15: ffffffff8dc257d0 [ 158.169321][ T30] FS: 0000000000000000(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 158.169335][ T30] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.169347][ T30] CR2: 00007f15e6975fc0 CR3: 00000000388c2000 CR4: 00000000003526f0 [ 158.169362][ T30] Call Trace: [ 158.169369][ T30] [ 158.169379][ T30] set_next_task_fair+0xa68/0xce0 [ 158.169406][ T30] __schedule+0x3e03/0x5550 [ 158.169448][ T30] ? __pfx___schedule+0x10/0x10 [ 158.169465][ T30] ? schedule+0x90/0x360 [ 158.169492][ T30] ? schedule+0x90/0x360 [ 158.169514][ T30] schedule+0x164/0x360 [ 158.169533][ T30] ? smpboot_thread_fn+0x4d/0xa50 [ 158.169551][ T30] smpboot_thread_fn+0x5bc/0xa50 [ 158.169569][ T30] ? smpboot_thread_fn+0x4d/0xa50 [ 158.169593][ T30] kthread+0x388/0x470 [ 158.169613][ T30] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 158.169629][ T30] ? __pfx_kthread+0x10/0x10 [ 158.169650][ T30] ret_from_fork+0x514/0xb70 [ 158.169674][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 158.169695][ T30] ? __switch_to+0xc79/0x1410 [ 158.169715][ T30] ? __pfx_kthread+0x10/0x10 [ 158.169736][ T30] ret_from_fork_asm+0x1a/0x30 [ 158.169773][ T30] [ 158.169782][ T30] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 158.169801][ T30] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 158.169820][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 158.169830][ T30] Call Trace: [ 158.169836][ T30] [ 158.169843][ T30] vpanic+0x56c/0xa60 [ 158.169870][ T30] ? __pfx__printk+0x10/0x10 [ 158.169889][ T30] ? __pfx_vpanic+0x10/0x10 [ 158.169913][ T30] ? is_bpf_text_address+0x292/0x2b0 [ 158.169938][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 158.169970][ T30] panic+0xc5/0xd0 [ 158.169995][ T30] ? __pfx_panic+0x10/0x10 [ 158.170027][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 158.170055][ T30] __warn+0x315/0x4c0 [ 158.170079][ T30] ? hrtick_start_fair+0x196/0x1f0 [ 158.170104][ T30] ? hrtick_start_fair+0x196/0x1f0 [ 158.170128][ T30] __report_bug+0x339/0x540 [ 158.170156][ T30] ? hrtick_start_fair+0x196/0x1f0 [ 158.170180][ T30] ? __pfx___report_bug+0x10/0x10 [ 158.170203][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 158.170234][ T30] ? hrtick_start_fair+0x196/0x1f0 [ 158.170258][ T30] report_bug+0x16a/0x220 [ 158.170281][ T30] ? hrtick_start_fair+0x196/0x1f0 [ 158.170305][ T30] ? hrtick_start_fair+0x198/0x1f0 [ 158.170327][ T30] handle_bug+0x9c/0x200 [ 158.170354][ T30] exc_invalid_op+0x1a/0x50 [ 158.170379][ T30] asm_exc_invalid_op+0x1a/0x20 [ 158.170396][ T30] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 158.170420][ T30] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 158.170434][ T30] RSP: 0018:ffffc90000a4faa0 EFLAGS: 00010006 [ 158.170448][ T30] RAX: ffff8880b863ba40 RBX: ffff8880b873ba40 RCX: ffffffff8197d8ae [ 158.170462][ T30] RDX: 0000000000000000 RSI: ffff8880260e0000 RDI: ffff8880b873ba40 [ 158.170474][ T30] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 158.170487][ T30] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 158.170500][ T30] R13: 1ffff110170e78d6 R14: ffff8880260e0000 R15: ffffffff8dc257d0 [ 158.170520][ T30] ? set_next_task_fair+0xa4e/0xce0 [ 158.170545][ T30] set_next_task_fair+0xa68/0xce0 [ 158.170570][ T30] __schedule+0x3e03/0x5550 [ 158.170610][ T30] ? __pfx___schedule+0x10/0x10 [ 158.170628][ T30] ? schedule+0x90/0x360 [ 158.170655][ T30] ? schedule+0x90/0x360 [ 158.170677][ T30] schedule+0x164/0x360 [ 158.170696][ T30] ? smpboot_thread_fn+0x4d/0xa50 [ 158.170713][ T30] smpboot_thread_fn+0x5bc/0xa50 [ 158.170731][ T30] ? smpboot_thread_fn+0x4d/0xa50 [ 158.170755][ T30] kthread+0x388/0x470 [ 158.170776][ T30] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 158.170792][ T30] ? __pfx_kthread+0x10/0x10 [ 158.170819][ T30] ret_from_fork+0x514/0xb70 [ 158.170843][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 158.170864][ T30] ? __switch_to+0xc79/0x1410 [ 158.170883][ T30] ? __pfx_kthread+0x10/0x10 [ 158.170904][ T30] ret_from_fork_asm+0x1a/0x30 [ 158.170940][ T30] [ 159.273852][ T30] Shutting down cpus with NMI [ 159.274501][ T30] Kernel Offset: disabled