last executing test programs: 6.414282527s ago: executing program 3 (id=2593): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f00000010c0)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc", 0xbd}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x105}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d3", 0x20}, {&(0x7f0000000d00)}, {&(0x7f0000000cc0)="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", 0xfc}, {&(0x7f00000010c0)}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde", 0x72}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702a9bd45a1d7bec2b2ccf08c24fec06bd18667119d193444ed6c60c641f54a3826524167885f", 0xbb}], 0x9, &(0x7f00000014c0)}}, {{&(0x7f0000000500)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x8000}, 0x80, &(0x7f0000000580)=[{&(0x7f0000003840)="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"/4093, 0xffd}, {&(0x7f0000000dc0)="b5572ece7e3373e08dcb75b0e517da8a7cab2d5f573077b61674b3d044fe9638b573caa80b4324a2a935b2aafb92b1d3e977d8a8ce2e97684645cb58a88f795d7dcdcb12a91849af01cabac8da9fdda23185e0f975c4f5db7f5f0350d328b4172f520bcdca68148bbd3980b92bda71074da79ae9ce2ebabe5aadf09911483866836cf1953789a89886dce5ab31b7b99a3ae57d1e2da2c82f0baf66bdc6f55fd17b739c97c129b18f12a267c1f612161932650570fede3164c10dbe247458b76a18aeb8727d407e1d", 0xc8}], 0x2, &(0x7f0000000bc0)=[@mark={{0x14, 0x1, 0x24, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0xe}}], 0x48}}], 0x4, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9", 0x23}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6.119163044s ago: executing program 3 (id=2615): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x9, 0x0, 0x3, 0x2, 0x0, 0x94d}, &(0x7f0000000080)=0x20) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 5.498053457s ago: executing program 1 (id=2617): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x40305828, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1b) io_setup(0x239f, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000900)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x0, 0x8, r2, 0x0, 0x0, 0x1}]) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESOCT, @ANYBLOB="2c84726f75000800003d", @ANYRES16=r3]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00') write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x28, 0xf9a6, 0x4069a064, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x7}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x20000004, 0xef0, 0x0, {0x5, 0x7, 0x1000b, 0x100000a, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0x8000, 0x2000002, r5, r6, 0x7, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.238663415s ago: executing program 1 (id=2618): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f09"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="001c4d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.103093883s ago: executing program 0 (id=2619): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) listen(0xffffffffffffffff, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c9"], 0x16) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 4.56199792s ago: executing program 2 (id=2621): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000700)={0x2ac, 0x37, 0x300, 0x70bd27, 0x25dfdbff, "", [@typed={0xd, 0x159, 0x0, 0x0, @binary="b18c6fa04a00468cd8"}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x5}, @nested={0x76, 0xe4, 0x0, 0x1, [@generic="cfc2ea7df99fc56cf40883dbc85cdb8ea1c2a9b2844974dcd5c724a276589ee455e1ef9ba9663bd9ec397995912f6aae6a94d95b9b3b894f0027bd660232230055fbacd3dd4b8cc8d3e2b3b03dac6dd10b2c61bedcdf3459fc32094d530ed1ca9d02a8ea99c6517b2edec6ee36f0", @nested={0x4, 0x8f}]}, @nested={0x145, 0x111, 0x0, 0x1, [@generic="113986b281190e4beae42a29f2f634ce728ede6899085db57becc0ea1d4af995bb5aeea1beebfba0c5cab0c2cbc50e8d37cec242383a96f5413d209c7ecc3d825c86a84a124a9878a1ad01ba464dd44f050c24416f27bb712bc836ffacb0360d738d1f02c64735a893832c192cb047d555e1d62d124ff90fb5e3a6eab30c623981eab77771e2afbd9ebb62a14952e350a55e05900bce2695a1a8015f65177b5a06133b1d7c6aecd15b7e78a0072ebeb3c47c0a86ca2fbc2dfc66aa09acd600d1d6369f13b3d16a8df2c55c00fb2377a212fc8f4662cdec4ef6cce5421fe74516", @generic="5aab7a64dea41f96a358dca4502a93d5412eca6a0a0d4c36c397b933b9441b26ac826e4b75", @typed={0x14, 0xcd, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0xc, 0xff, 0x0, 0x0, @u64=0xfff}, @typed={0x14, 0x4f, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x4, 0xf1}, @nested={0x4, 0x11d}]}, @typed={0x8, 0x66, 0x0, 0x0, @fd=r0}, @typed={0xc, 0xa9, 0x0, 0x0, @u64=0x4}, @generic="ba52a0d91bf06dce39cc215a522f9d22aa069ad5ec83699cad8dbff7041d5b570f0268d41edca29e806d0ceafae76230462d17a2aa665e0733a3ada2bbe7215e164dc0b4ff25599883a5c64104e0e8876ee8e218df58fc40af288f0de375bbe787918bc8f504a6526a6ed71de725779ed34041c117e70be78d35bf09b08d6aff880a5b708f925539e159fe84acc2a4c6a648d585c4be7799bb773e26017e1a1e531f03732aea955e1c05eefed7e5"]}, 0x2ac}, {&(0x7f0000000300)={0x24, 0x14, 0x800, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x14, 0xc1, 0x0, 0x0, @ipv6=@loopback}]}, 0x24}, {&(0x7f0000001300)={0x11e8, 0x3a, 0x8, 0x70bd25, 0x25dfdbfb, "", [@typed={0x14, 0xf1, 0x0, 0x0, @ipv6=@empty}, @typed={0x4, 0x13d}, @nested={0x1105, 0xe1, 0x0, 0x1, [@nested={0x4, 0xe6}, @nested={0x4, 0x6d}, @nested={0x4, 0xfb}, @generic="9552a673e9f190b5e24367ed6546faaf7959d2d991feef9d6a15d3962541927e2b679f00f0923359a3e933d41bd8544cb070fee3eb0eba1847d59fa6d9934211fac8523c749c5ec57e00ab629f4e461ab6ece0c8b368f0a02c5052825cc5904ed05b8bf2f76c0b0ce4b020ff96a18ca85bab4b50cbc333297e5778ea16beb4aacdb354f7af683fe38d5f5de180c41dae0aa1b1a8ee1ebe402b326be05775559f95830df9de09f8de8fc6199498e93f5eabfb9241fe64e2041c6fd298c94f60616ee69269e38600cd90011e31e103256c7b", @nested={0x4, 0xf8}, @nested={0x4, 0xd3}, @generic="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", @typed={0xc, 0xcd, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x4c, 0x0, 0x0, @u32=0x8001}, @typed={0x5, 0x146, 0x0, 0x0, @str='\x00'}]}, @generic="8555a8e41bcb46b6b653fb0fa118ad4729ecc9d0398c4a64a8b89d2e093f8a04370f", @typed={0x8, 0xb0, 0x0, 0x0, @ipv4=@loopback}, @generic="f253b715f90027f82c20d356e2e2bc35d070aaafb7ac867137e22855e85c867e09446a7af346b1176f", @typed={0x8, 0x82, 0x0, 0x0, @uid}, @typed={0x8, 0x42, 0x0, 0x0, @uid}, @generic="92e75bac2b31b9c5849e1eeafc5b8847982d6fc54d2b1a70b72c430dd3499271ac3c29c6da6ed2e60b473483f9b23b7296ae194710639f57e83b5950fc1774977e7102c573c4d6197490596205bb650b0375393437"]}, 0x11e8}, {&(0x7f00000004c0)={0x18, 0x26, 0x100, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x6, 0x9b, 0x0, 0x0, @str='[\x00'}]}, 0x18}, {&(0x7f00000009c0)={0x1e4, 0x39, 0x100, 0x70bd27, 0x25dfdbfc, "", [@generic="f40309b7625c630be13b74371fa043c6dec65dbfe3b32e1fc92c2c8c65cc781530a0faf8fe640efa8d28bb277d0d6c0b3e8a549777c25483b87c0fac6ebbe58e392542fdf9fa7f3b66de4d8390b3728828d8b383ea7663919fc445f8bdfc4b114669d6ca474be7038af4888e68d2df1873", @typed={0x8, 0x123, 0x0, 0x0, @pid}, @generic="f566c450cc194caae1b4a467176f362c6b69b2c04b40e7a7ad7a99091b48c5e57a985cb3278a53f9360a86ac82c61d804e09926a35675c951ffebcd2a71e9004010be214dc0216bd5477d05377ff4a1d24ab1b1b2d531e0d4e234be55d353de95ea1eaa81a743511afec281d4951b083de4ecf1df700d94d751f21cdc11a014179e3e6ad8be805e77bc85fa05082a590d99095fea136494d296f68f4bdac63b74d58558780c0162f91122e927b2f421c0d52e2304d6a8d83a20c949d65b9", @generic="8e8fbc4d7c9f4ebe2c85595162a2782fabaf99a2e6d9bfe58991d40b605d83762c19083320e4c1780bbe928beb817649f5307048b3b3a8dcd355bd2daefea6c9309be2d486ae727690af179c98c084aef075768d75b058c40e630adecee19f2e251993dc91eb1db2be4f7997320eea9b95e8afda1bf1a07cf71f3494a6a6006b2e4e1da8a6424b22b51d7d9ce127f5350a624a254a3399778ecbf38d"]}, 0x1e4}, {&(0x7f0000000580)={0x34, 0x3c, 0x200, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x24, 0x1a, 0x0, 0x1, [@typed={0x8, 0x4a, 0x0, 0x0, @pid}, @typed={0x14, 0xdd, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x9b}]}]}, 0x34}, {&(0x7f0000000d40)={0x1d8, 0x3f, 0x4, 0x70bd27, 0x25dfdbfc, "", [@generic="affa2e42fbe88ed83fcb1812c90dee4aa0573ac012c660593861027cd65f0d11121f79be5e4fe1bc6b93c3ac66d9f4e2012a9c58197a8079f5cebf3ad2f20d24e5675386233173e62822cb789318cf15aa6b40d43195bea9292b935621092847", @generic="42341deae6920f77b5fe432e73fc702f386fdc66a2a45487473f6768333989e8f950c02e4e9f1d5cf95b2f6472f4154e1cf6e262c4648e4b4243341e99aff733a1eefa78bd70cd5dfb7032cd35a950c39a070493026d1f8479eeea9397fe3f4d12fd6e5f5412f0ca70b5619dcb8d86a6eb7f30498afc3ab203c3a796b77287316ecb9c0d795336a63a962e58334380573d641c", @nested={0xd4, 0x51, 0x0, 0x1, [@generic="f75928cc73c64843e94bf012f7472ac38ee34c6a3468185cae106b443797cac7a3b5d072c41085ba5803571f2341a431a850da7e23d979e5a6dcb4438266a33731f57e33c083925d4ff6206fad72a394d9e07493155e58cd7a1235ffa9d590f4d1a93cf61b2d9f58ac5e55290c08e33651d4bf096b5ddb04a82547f7e21cd94384f69d8a65496d85222a13ee17a5b01a9711ec58eed34e0dd170e8a514cbb923b226d5b0446392b464d51fc609b661b5831a852c86a70b6245aa4a4ebfd52647", @typed={0x8, 0x128, 0x0, 0x0, @fd}, @typed={0x8, 0x144, 0x0, 0x0, @fd=r0}]}]}, 0x1d8}], 0x7, 0x0, 0x0, 0x4000011}, 0x8010) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000340)={0x1}, 0x8) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000003c0)=0x41bb, 0x4) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x8002, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000010900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073807a320000000060000000060a010400000000000000000100000808000b400000000038000480340001800b000100657874686472000024000280080001400000000c0800034000000001080006400000000005000200070000000900010073797a30"], 0xd4}}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000500)=[{&(0x7f0000000180)=@in6={0xa, 0x4e23, 0xf40e, @empty, 0x69415aca}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000001c0)="11fcdca15ceccb034da21e901e3dfd02e77bc924a9206109e65e9efb79e822129a83cc1a85cd5ad4408dc0ffd9477ce87a064a0b4bd739aa1c98da10592293b3fd6d6b1b2b9d60527bcdf2521929ce809330f826e3160ca83f65a019eb5961abad0e6905c7b5d1cdf2092faabc47409670bced5c3673d2d731c2b319600071151d0eea184ec21a381f17037cb2e2708c2bf191dbad38e1eb1344663138fd89928fbf4f7dd206b3e9", 0xa8}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="30000000000000008400000001000000f7ff020008020000060000000100f7ff08000000030000000800000065fa467fa9d56c1b4c5921fad6b84302d755e265c1c460769fc276f1e6f4db", @ANYRES32=r2, @ANYBLOB="180000000000000084000000050000003000000000000000180000000000000084000000050000003000000010000000"], 0x60, 0x8000000}, {&(0x7f0000000340)=@in={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="61961ac96d72503d80c0a55909c701168175b3e3f3ab8bf4a0d7cb26dd73d76849e9641d56ef8f20e50149b50649fec7ec10f6dcb250400d76c39faa279fba6cfcc9da62c5c14f112170ecbebcdcef3c9f663b03ad7e94a5d9a2739109d5dda7244ec9cbf4e80f5521c3c43349af20bd084c7378315860a439e6b52285e6ddab2d87795ac0d72a49cb6c3e7acf524fb1d907963da8daecfb6aa5b157395a8b54c367e8fd0adbcefc80c776ceaef512900d8fc68dc4a110d8549e986dd170f29b8a3047cad51ca8a9355bf05614a0c32329de775500f7dbef3b45117fd09f4e142e070105be34f9137c", 0xe9}], 0x1, &(0x7f00000004c0), 0x0, 0x8000}], 0x2, 0x20048880) setreuid(0x0, 0xee00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f00000012c0)={&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=[@fadd={0x58, 0x114, 0x6, {{0x2, 0x6}, &(0x7f0000000340), 0x0, 0x3, 0x8, 0x7, 0x10001, 0x65, 0x6}}], 0x58, 0x20004814}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000002e00090027bd70000000000004000000100016800a002a00f4f7599e9ddc000034b62570c356816b18127b5e2d975d452f0d513cb95cf578bb5f7b7930f8684491d4284ecf1d3cb39b91fea558bd42c7cd92b90dfbdc7c3c642f52cd9a163253a8"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0xa, &(0x7f0000000000)=[{0xf, 0x5, 0x9, 0x21}, {0x5, 0xc, 0x8, 0x400}, {0xb60c, 0x4, 0x1, 0x1}, {0xffff, 0x4, 0x9, 0x200009}, {0xe32, 0x8, 0x5, 0x800}, {0x5, 0x7f, 0xe8}, {0x3, 0xf, 0xff, 0xe}, {0x3, 0x3, 0xd, 0x80}, {0xf, 0x7, 0x2, 0x108}, {0x0, 0x7, 0x8, 0xa}]}) 4.520705163s ago: executing program 0 (id=2622): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_clone3(&(0x7f0000000680)={0x80000000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x0], 0x1}, 0x58) 4.164523216s ago: executing program 3 (id=2623): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000200)={0x60, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048090}, 0x90) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'bond0\x00', 0x300}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x3fd, 0x181000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x4, 0x3, 0x0, @mcast1, @private1, 0x1, 0x8000, 0x7, 0x4}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@rand_addr, @broadcast}, &(0x7f00000002c0)=0xc) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000240)="f2435f010008ba00000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r8, &(0x7f0000000080)="b3019c28", 0x4, 0x44, &(0x7f0000000200)={0xa, 0x0, 0xfffffffe, @mcast2}, 0x1c) r9 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) fchdir(r10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r11, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r12, 0x331, 0x2000, 0x40080000, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c01c}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r10, &(0x7f0000000940)={&(0x7f00000005c0), 0xc, &(0x7f0000000900)={&(0x7f0000000600)={0x44, r12, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04050400c900"], 0x7) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 3.567412562s ago: executing program 2 (id=2624): mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe95b1d"]) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f00000002c0)=0x7) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 3.54220019s ago: executing program 3 (id=2625): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) 3.225345955s ago: executing program 0 (id=2626): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a0000000000080009000000000008000a00000099"], 0x184}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_clone3(&(0x7f0000000680)={0x80000000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x0], 0x1}, 0x58) 2.545800087s ago: executing program 3 (id=2627): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x800, 0x0, {0x0, 0x2710}, {0x5, 0xc, 0xd2, 0x6, 0x77, 0x7, "0080ca6f"}, 0x9, 0x2, {&(0x7f0000000340)}, 0x6}) (fail_nth: 1) 2.12767581s ago: executing program 3 (id=2628): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000200)={0x40, 0x9, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 2.045824484s ago: executing program 1 (id=2629): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r0, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x3298, 0x0, 0x5, 0xfffffffffffffffc}, &(0x7f0000000240)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={r1, 0x4}, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x40, 0x20, 0x3, 0x3, {{0x21, 0x4, 0x2, 0x0, 0x84, 0x65, 0x0, 0x3, 0x29, 0x0, @loopback, @private=0xa010101, {[@timestamp_prespec={0x44, 0x1c, 0xe1, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x17}, 0x7}, {@local, 0x7f}, {@rand_addr=0x64010102, 0x51}]}, @rr={0x7, 0xb, 0x4c, [@loopback, @remote]}, @noop, @cipso={0x86, 0x29, 0x3, [{0x0, 0xc, "6b60618cc319cf08b240"}, {0x2, 0x6, "1a01eab7"}, {0x6, 0x6, "6e884fe6"}, {0x2, 0x3, "94"}, {0x6, 0x8, "ff8fbc6e6d0e"}]}, @lsrr={0x83, 0x7, 0x4c, [@empty]}, @timestamp={0x44, 0x18, 0xfa, 0x0, 0x1, [0x6, 0x10, 0x3000, 0x6, 0x200]}]}}}}}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x4, r2, 0x1, 0x4}, 0x14) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x3b, &(0x7f0000000000)=ANY=[]) 1.73616736s ago: executing program 2 (id=2630): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) listen(0xffffffffffffffff, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c900"], 0x16) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1.54777078s ago: executing program 0 (id=2631): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @default]}, 0x48) r0 = socket(0x1, 0x803, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r0], 0x1c}}, 0x4000000) bind$netrom(r0, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @default]}, 0x48) (async) socket(0x1, 0x803, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r0], 0x1c}}, 0x4000000) (async) bind$netrom(r0, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) 1.501373016s ago: executing program 0 (id=2632): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}, 0xf29db7ae9ffd573e, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x2d, &(0x7f0000000080)={0x0, 0x10, 0x2}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000740)=""/377, 0x179) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 1.079183506s ago: executing program 2 (id=2633): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000200)={0x60, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048090}, 0x90) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'bond0\x00', 0x300}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x3fd, 0x181000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x4, 0x3, 0x0, @mcast1, @private1, 0x1, 0x8000, 0x7, 0x4}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@rand_addr, @broadcast}, &(0x7f00000002c0)=0xc) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000240)="f2435f010008ba00000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r8, &(0x7f0000000080)="b3019c28", 0x4, 0x44, &(0x7f0000000200)={0xa, 0x0, 0xfffffffe, @mcast2}, 0x1c) r9 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) fchdir(r10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r11, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r12, 0x331, 0x2000, 0x40080000, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c01c}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r10, &(0x7f0000000940)={&(0x7f00000005c0), 0xc, &(0x7f0000000900)={&(0x7f0000000600)={0x44, r12, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04050400c900"], 0x7) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 279.411006ms ago: executing program 1 (id=2634): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3e, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x2, 0x7, 0x200, 0x3e, 0x88, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x3, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x200006, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x7ff, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x4, 0x3, 0x4, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000140)=0x200) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 244.439321ms ago: executing program 2 (id=2635): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x8844}, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000500)}, {&(0x7f0000000600)="7164245da20fccdee39bb8f4f2055dfa97e2710832cd4a27793e79bc409cb5c38a8ad35c9ff44014744d4fab508d57d9fa7e1c831f7e576883c122358fec103da82522517d9243dfe9f77e8f69f4501e6070573756b0538bca622f5b51783625ac3ccea6782360267389f674cbf7e7c1d310bc9fb645bc7f20518e7ba5807ce4e54b1bd58f058215932892ed0a8a831b5441f58f6a2b63a2763923c51ae9b87c584171", 0xa3}, {&(0x7f00000002c0)="fb4a738b8fff03179d36d97a7e768c605c5a276efb8604f121d8c3432483ec477b13316313b6ebd165904c8e245bcd4fda069923032292004d8efce529dab99fa5d682b52473829f561f11ac11a428eab9985d916240ec7d21a11926bc5353ea29c9ebd9aed10aa3403a5e35a1116b", 0x6f}, {&(0x7f0000000880)="b8e4d28ec970bdf146d717bed673a03be982338e021e1058d00776227b342db7671f5a0a2d75e9e5a7fbd4ecc62684a793ab69989c8836473cf7744072ef0bd03758c8c6cb740f2c8abc1b69715c98796adbec917f572e32a4f6977abd032183f498075de23e212c05e37d608df3d5ca7f4b7e08f974d4f12d6c3b6c90c44b9355f52cf1e5a88049a7ab8952d5232e812f6cf20679d54d51950da095fbacb3365e30f62093a40e3c28728a31fb2de8702c", 0xb1}, {&(0x7f0000000780)="5c06f00294cc721081e366131c0fcd179066c58c4951ef284a51dfc59d67e247edf1b4fc93718f3d1d6f3bd71ab442cb6b6ebc9f4bb562848ec35bfd1a443267ca11db", 0x43}, {&(0x7f0000000980)}, {&(0x7f0000000ec0)="6598c590eb73ec1ac1cce9664c5dbc3b6d9685d587ebdf52f29b7cad419f7bb403de35224456e9f506a3ba418e022d95925faf708865169a6ba6250d6275cd6a87f81062b11c2cf0440cf3fb94fa8244fb33299dea4c69eda426e3f7475b57155062b609f56046302a44bfc56e32841c66b772326d2394596778149d4b1c9c788b1d70d0485447b3b2c683f8cdf37f5d5fcf837d48d671dbad0b918fcbc5633f56e4329d259d716c5f1fc663bbd106e9e3962ab76b0619d5329b39605552c5ed6e56d92fa515eb4bbb20defc655176a41edc1a4dc32b950579b8832ad92cc97914467ed3c7b24cf13032503e7d4a", 0xee}, {&(0x7f0000000e00)="bf83903af3912b25320771861a97d9099887b5133b772fd4b99cb75c05cc6056c51d5bb95835f9b0158c4cfee49435eee968d62cc9e3f2170f885492ef045fe78a057d2f5d22250b0d1832e4e7d9caf59cb596b09bdb792e92381b57fa01c34b662c00464d755260824c4afcf590616c92c6de993cbafa", 0x77}, {&(0x7f0000000c40)="8c87ae7dc3a1e41d808b729a7f992fcd10bf446bba2823fa0867f4ebbc9858852027a4c0a9681773961d1e44be4f2b9181e639856ced68ac4a29c8dd327abb9200876aae3fc55bcc6ff8f9a32a00b60448f8b57890578daddcddcad87ee7da5dd0df0f7fe978b92dfd2d2dbea58a81a037131eb4e1d00f7f29636d7dac7bc12420fb69d5e42df30502a17b31", 0x8c}], 0x9, 0xfffffffd, 0x2000008) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 239.535553ms ago: executing program 1 (id=2636): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x30, r1, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c001}, 0x4800) 111.110841ms ago: executing program 1 (id=2637): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 55.604895ms ago: executing program 2 (id=2638): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000200)={0x60, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048090}, 0x90) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'bond0\x00', 0x300}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x3fd, 0x181000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000680)={0x0, [[0x5, 0x0, 0xd, 0x2000001, 0xfffffff5, 0x0, 0x0, 0x9], [0x4, 0x1, 0x0, 0x2], [0x100094, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0xff, 0xb]], '\x00', [{0x0, 0x6}, {0x0, 0xfffffffd}, {0x4}, {}, {}, {0x8, 0x40000000}, {}, {0x1}, {0x0, 0xfffffffc}, {0x8}, {0x2, 0x9}, {0x0, 0x3}], '\x00', 0x5}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x4, 0x3, 0x0, @mcast1, @private1, 0x1, 0x8000, 0x7, 0x4}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@rand_addr, @broadcast, 0x0}, &(0x7f00000002c0)=0xc) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000240)="f2435f010008ba00000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r8, &(0x7f0000000080)="b3019c28", 0x4, 0x44, &(0x7f0000000200)={0xa, 0x0, 0xfffffffe, @mcast2}, 0x1c) r9 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) fchdir(r10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r11, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r12, 0x331, 0x2000, 0x40080000, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c01c}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r10, &(0x7f0000000940)={&(0x7f00000005c0), 0xc, &(0x7f0000000900)={&(0x7f0000000600)={0x44, r12, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04050400c900"], 0x7) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa4, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40841}, 0x0) 0s ago: executing program 0 (id=2639): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f00000010c0)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc", 0xbd}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x105}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d3", 0x20}, {&(0x7f0000000d00)}, {&(0x7f0000000cc0)="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", 0xfc}, {&(0x7f00000010c0)}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde", 0x72}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702a9bd45a1d7bec2b2ccf08c24fec06bd18667119d193444ed6c60c641f54a3826524167885f", 0xbb}], 0x9, &(0x7f00000014c0)}}, {{&(0x7f0000000500)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x8000}, 0x80, &(0x7f0000000580)=[{&(0x7f0000003840)="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"/4093, 0xffd}, {&(0x7f0000000dc0)="b5572ece7e3373e08dcb75b0e517da8a7cab2d5f573077b61674b3d044fe9638b573caa80b4324a2a935b2aafb92b1d3e977d8a8ce2e97684645cb58a88f795d7dcdcb12a91849af01cabac8da9fdda23185e0f975c4f5db7f5f0350d328b4172f520bcdca68148bbd3980b92bda71074da79ae9ce2ebabe5aadf09911483866836cf1953789a89886dce5ab31b7b99a3ae57d1e2da2c82f0baf66bdc6f55fd17b739c97c129b18f12a267c1f612161932650570fede3164c10dbe247458b76a18aeb8727d407e1d", 0xc8}], 0x2, &(0x7f0000000bc0)=[@mark={{0x14, 0x1, 0x24, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0xe}}], 0x48}}], 0x4, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9", 0x23}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) kernel console output (not intermixed with test programs): brid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 691.363494][ T5884] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input196 [ 691.395458][T11657] usb 1-1: USB disconnect, device number 85 [ 691.419190][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 691.443252][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 691.479725][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 691.509764][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 691.529920][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 691.549842][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 691.581371][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 691.651408][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 691.682376][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 691.710223][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 691.743164][ T5884] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 691.753988][ T5884] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 691.771916][ T5884] usb 3-1: USB disconnect, device number 80 [ 691.839627][ T807] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 691.999658][ T807] usb 4-1: Using ep0 maxpacket: 8 [ 692.006975][ T807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 692.020132][ T807] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 692.031452][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.046554][ T807] usb 4-1: config 0 descriptor?? [ 692.263072][ T807] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 692.289639][T11657] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 692.441399][T11657] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 692.451492][T11657] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 692.464681][T11657] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 692.470887][T13453] FAULT_INJECTION: forcing a failure. [ 692.470887][T13453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.474470][T11657] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.498701][T13453] CPU: 0 UID: 0 PID: 13453 Comm: syz.3.2445 Tainted: G L syzkaller #0 PREEMPT(full) [ 692.498733][T13453] Tainted: [L]=SOFTLOCKUP [ 692.498741][T13453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 692.498754][T13453] Call Trace: [ 692.498762][T13453] [ 692.498770][T13453] dump_stack_lvl+0xe8/0x150 [ 692.498810][T13453] should_fail_ex+0x412/0x560 [ 692.498842][T13453] _copy_to_user+0x31/0xb0 [ 692.498875][T13453] simple_read_from_buffer+0xe1/0x170 [ 692.498909][T13453] proc_fail_nth_read+0x1bb/0x230 [ 692.498939][T13453] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 692.498969][T13453] ? rw_verify_area+0x2a6/0x4d0 [ 692.499000][T13453] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 692.499029][T13453] vfs_read+0x20c/0xa70 [ 692.499059][T13453] ? fdget_pos+0x246/0x320 [ 692.499091][T13453] ? __pfx___mutex_lock+0x10/0x10 [ 692.499123][T13453] ? __pfx_vfs_read+0x10/0x10 [ 692.499154][T13453] ? __fget_files+0x2a/0x420 [ 692.499183][T13453] ? __fget_files+0x3a0/0x420 [ 692.499207][T13453] ? __fget_files+0x2a/0x420 [ 692.499240][T13453] ksys_read+0x150/0x270 [ 692.499273][T13453] ? __pfx_ksys_read+0x10/0x10 [ 692.499312][T13453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.499334][T13453] do_syscall_64+0x15f/0xf80 [ 692.499366][T13453] ? clear_bhb_loop+0x40/0x90 [ 692.499390][T13453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.499412][T13453] RIP: 0033:0x7f143355cfce [ 692.499440][T13453] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 692.499460][T13453] RSP: 002b:00007f1434394fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 692.499482][T13453] RAX: ffffffffffffffda RBX: 00007f14343956c0 RCX: 00007f143355cfce [ 692.499498][T13453] RDX: 000000000000000f RSI: 00007f14343950a0 RDI: 0000000000000005 [ 692.499511][T13453] RBP: 00007f1434395090 R08: 0000000000000000 R09: 0000000000000000 [ 692.499524][T13453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.499536][T13453] R13: 00007f1433816038 R14: 00007f1433815fa0 R15: 00007ffd7062dd48 [ 692.499568][T13453] [ 692.650011][ T807] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 692.744237][ T29] usb 4-1: USB disconnect, device number 79 [ 692.755361][T13460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.764510][T13460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.785189][T11657] usb 1-1: usb_control_msg returned -71 [ 692.808439][T11657] usbtmc 1-1:16.0: can't read capabilities [ 692.848868][T11657] usb 1-1: USB disconnect, device number 86 [ 692.870410][ T807] usb 3-1: Using ep0 maxpacket: 16 [ 692.887923][ T807] usb 3-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 692.916514][ T807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 692.935936][ T807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 692.947812][ T807] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 692.958264][ T807] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 692.972779][ T807] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 692.982560][ T807] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 692.993588][ T807] usb 3-1: Manufacturer: syz [ 693.001435][ T807] usb 3-1: config 0 descriptor?? [ 693.179772][ T5884] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 693.269676][ T807] rc_core: IR keymap rc-hauppauge not found [ 693.280662][ T807] Registered IR keymap rc-empty [ 693.292609][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 693.321077][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 693.334149][ T5884] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.344716][ T5884] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 693.357378][ T807] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 693.366894][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.378485][ T807] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input197 [ 693.393208][ T5884] usb 2-1: config 0 descriptor?? [ 693.406175][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 693.407486][ T5884] pwc: Askey VC010 type 2 USB webcam detected. [ 693.449986][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 693.470259][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 693.490417][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 693.510434][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 693.540900][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 693.549675][T11657] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 693.560717][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 693.579723][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 693.610307][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 693.629942][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 693.665867][ T807] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 693.675167][ T807] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 693.691818][ T807] usb 3-1: USB disconnect, device number 81 [ 693.702257][T11657] usb 4-1: Using ep0 maxpacket: 32 [ 693.714486][T11657] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 693.725179][T11657] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 693.734502][T11657] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 693.743929][T11657] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 693.756678][T11657] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 693.769082][T11657] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 693.793093][T11657] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 693.803004][T11657] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.816619][ T5884] pwc: recv_control_msg error -32 req 02 val 2b00 [ 693.830448][T11657] usb 4-1: config 0 descriptor?? [ 693.846488][ T5884] pwc: recv_control_msg error -32 req 02 val 2700 [ 693.861000][ T5884] pwc: recv_control_msg error -32 req 02 val 2c00 [ 693.877366][ T5884] pwc: recv_control_msg error -32 req 04 val 1000 [ 693.893707][ T5884] pwc: recv_control_msg error -32 req 04 val 1300 [ 693.916331][ T5884] pwc: recv_control_msg error -32 req 04 val 1400 [ 693.931517][ T5884] pwc: recv_control_msg error -32 req 02 val 2000 [ 693.938918][ T5884] pwc: recv_control_msg error -32 req 02 val 2100 [ 693.946974][ T5884] pwc: recv_control_msg error -32 req 04 val 1500 [ 693.954679][ T5884] pwc: recv_control_msg error -32 req 02 val 2500 [ 693.962637][ T5884] pwc: recv_control_msg error -32 req 02 val 2400 [ 693.972262][ T5884] pwc: recv_control_msg error -71 req 02 val 2600 [ 693.979877][ T5884] pwc: recv_control_msg error -71 req 02 val 2900 [ 693.992634][ T5884] pwc: recv_control_msg error -71 req 02 val 2800 [ 694.000056][ T5884] pwc: recv_control_msg error -71 req 04 val 1100 [ 694.007263][ T5884] pwc: recv_control_msg error -71 req 04 val 1200 [ 694.025931][ T5884] pwc: Registered as video103. [ 694.042256][ T5884] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input198 [ 694.069242][T11657] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 80 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 694.085137][ T5884] usb 2-1: USB disconnect, device number 84 [ 694.268561][ T30] audit: type=1326 audit(1774499697.191:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13479 comm="syz.3.2454" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f143359c799 code=0x0 [ 694.431387][T13501] FAULT_INJECTION: forcing a failure. [ 694.431387][T13501] name failslab, interval 1, probability 0, space 0, times 0 [ 694.445178][T13501] CPU: 1 UID: 0 PID: 13501 Comm: syz.0.2460 Tainted: G L syzkaller #0 PREEMPT(full) [ 694.445220][T13501] Tainted: [L]=SOFTLOCKUP [ 694.445229][T13501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 694.445248][T13501] Call Trace: [ 694.445256][T13501] [ 694.445266][T13501] dump_stack_lvl+0xe8/0x150 [ 694.445305][T13501] should_fail_ex+0x412/0x560 [ 694.445338][T13501] should_failslab+0xa8/0x100 [ 694.445365][T13501] __kmalloc_noprof+0xe8/0x760 [ 694.445398][T13501] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 694.445426][T13501] tomoyo_realpath_from_path+0xe3/0x5d0 [ 694.445449][T13501] ? tomoyo_domain+0xd7/0x130 [ 694.445501][T13501] ? tomoyo_path_number_perm+0x219/0x630 [ 694.445534][T13501] tomoyo_path_number_perm+0x246/0x630 [ 694.445565][T13501] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 694.445597][T13501] ? __lock_acquire+0x6b5/0x2cf0 [ 694.445632][T13501] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 694.445699][T13501] ? __fget_files+0x2a/0x420 [ 694.445729][T13501] ? __fget_files+0x2a/0x420 [ 694.445761][T13501] ? __fget_files+0x3a0/0x420 [ 694.445780][T13501] ? __fget_files+0x2a/0x420 [ 694.445817][T13501] security_file_ioctl+0xc3/0x2a0 [ 694.445853][T13501] __se_sys_ioctl+0x47/0x170 [ 694.445873][T13501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.445896][T13501] do_syscall_64+0x15f/0xf80 [ 694.445928][T13501] ? clear_bhb_loop+0x40/0x90 [ 694.445947][T13501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.445978][T13501] RIP: 0033:0x7f49e139c799 [ 694.445999][T13501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.446018][T13501] RSP: 002b:00007f49e2170028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 694.446040][T13501] RAX: ffffffffffffffda RBX: 00007f49e1615fa0 RCX: 00007f49e139c799 [ 694.446056][T13501] RDX: 0000200000000100 RSI: 000000004008af30 RDI: 0000000000000003 [ 694.446074][T13501] RBP: 00007f49e2170090 R08: 0000000000000000 R09: 0000000000000000 [ 694.446084][T13501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.446093][T13501] R13: 00007f49e1616038 R14: 00007f49e1615fa0 R15: 00007fffc8319418 [ 694.446117][T13501] [ 694.446195][T13501] ERROR: Out of memory at tomoyo_realpath_from_path. [ 694.958772][ T5885] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 695.049787][T13511] FAULT_INJECTION: forcing a failure. [ 695.049787][T13511] name failslab, interval 1, probability 0, space 0, times 0 [ 695.062684][T13511] CPU: 0 UID: 0 PID: 13511 Comm: syz.2.2464 Tainted: G L syzkaller #0 PREEMPT(full) [ 695.062718][T13511] Tainted: [L]=SOFTLOCKUP [ 695.062726][T13511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 695.062740][T13511] Call Trace: [ 695.062753][T13511] [ 695.062762][T13511] dump_stack_lvl+0xe8/0x150 [ 695.062801][T13511] should_fail_ex+0x412/0x560 [ 695.062834][T13511] should_failslab+0xa8/0x100 [ 695.062856][T13511] ? do_getname+0x2e/0x250 [ 695.062881][T13511] kmem_cache_alloc_noprof+0x87/0x650 [ 695.062911][T13511] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 695.062954][T13511] do_getname+0x2e/0x250 [ 695.062977][T13511] ? getname_uflags+0x11/0x30 [ 695.063003][T13511] do_fchownat+0xe3/0x250 [ 695.063031][T13511] ? __pfx_do_fchownat+0x10/0x10 [ 695.063056][T13511] ? __pfx_ksys_write+0x10/0x10 [ 695.063095][T13511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.063119][T13511] __x64_sys_lchown+0x85/0xa0 [ 695.063154][T13511] do_syscall_64+0x15f/0xf80 [ 695.063184][T13511] ? trace_irq_disable+0x3b/0x140 [ 695.063212][T13511] ? clear_bhb_loop+0x40/0x90 [ 695.063237][T13511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.063259][T13511] RIP: 0033:0x7f814579c799 [ 695.063279][T13511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.063298][T13511] RSP: 002b:00007f814672d028 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 695.063320][T13511] RAX: ffffffffffffffda RBX: 00007f8145a15fa0 RCX: 00007f814579c799 [ 695.063335][T13511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 695.063349][T13511] RBP: 00007f814672d090 R08: 0000000000000000 R09: 0000000000000000 [ 695.063363][T13511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.063375][T13511] R13: 00007f8145a16038 R14: 00007f8145a15fa0 R15: 00007ffc348b1298 [ 695.063408][T13511] [ 695.303010][ T5885] usb 2-1: config 9 has an invalid interface number: 181 but max is 0 [ 695.313238][ T5885] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 695.319834][T11657] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 695.325639][ T5885] usb 2-1: config 9 has no interface number 0 [ 695.337500][ T5885] usb 2-1: config 9 interface 181 altsetting 44 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 695.351739][ T5885] usb 2-1: config 9 interface 181 has no altsetting 0 [ 695.363596][ T5885] usb 2-1: New USB device found, idVendor=eb1a, idProduct=e310, bcdDevice=34.b6 [ 695.375408][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.384061][ T5885] usb 2-1: Product: syz [ 695.388351][ T5885] usb 2-1: Manufacturer: syz [ 695.393511][ T5885] usb 2-1: SerialNumber: syz [ 695.484828][T11657] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 695.496870][T11657] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 695.510078][T11657] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 695.519196][T11657] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.613035][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2461'. [ 695.633863][ T5885] em28xx 2-1:9.181: audio device (eb1a:e310): interface 181, class 1 [ 695.646109][ T5885] usb 2-1: USB disconnect, device number 85 [ 695.707323][T13518] FAULT_INJECTION: forcing a failure. [ 695.707323][T13518] name failslab, interval 1, probability 0, space 0, times 0 [ 695.723001][T13518] CPU: 0 UID: 0 PID: 13518 Comm: syz.2.2466 Tainted: G L syzkaller #0 PREEMPT(full) [ 695.723039][T13518] Tainted: [L]=SOFTLOCKUP [ 695.723048][T13518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 695.723062][T13518] Call Trace: [ 695.723074][T13518] [ 695.723084][T13518] dump_stack_lvl+0xe8/0x150 [ 695.723124][T13518] should_fail_ex+0x412/0x560 [ 695.723157][T13518] should_failslab+0xa8/0x100 [ 695.723184][T13518] __kvmalloc_node_noprof+0x178/0x8a0 [ 695.723208][T13518] ? fuse_readdir+0x1931/0x3250 [ 695.723372][T13518] fuse_readdir+0x1931/0x3250 [ 695.723424][T13518] ? look_up_lock_class+0x57/0x110 [ 695.723459][T13518] ? register_lock_class+0x31/0x2e0 [ 695.723496][T13518] ? __lock_acquire+0x6b5/0x2cf0 [ 695.723531][T13518] ? _parse_integer_limit+0x192/0x1e0 [ 695.723555][T13518] ? __pfx_fuse_readdir+0x10/0x10 [ 695.723583][T13518] ? aa_file_perm+0x192/0x15e0 [ 695.723647][T13518] ? look_up_lock_class+0x57/0x110 [ 695.723682][T13518] ? register_lock_class+0x31/0x2e0 [ 695.723707][T13518] ? __lock_acquire+0x6b5/0x2cf0 [ 695.723760][T13518] ? trace_contention_end+0x3d/0x140 [ 695.723787][T13518] ? __mutex_lock+0x320/0x1420 [ 695.723848][T13518] ? iterate_dir+0x292/0x570 [ 695.723865][T13518] ? down_read_killable+0x1bb/0x340 [ 695.723884][T13518] iterate_dir+0x399/0x570 [ 695.723926][T13518] __se_sys_getdents64+0xf1/0x280 [ 695.723953][T13518] ? __pfx___se_sys_getdents64+0x10/0x10 [ 695.723973][T13518] ? ksys_write+0x242/0x270 [ 695.724006][T13518] ? __pfx_filldir64+0x10/0x10 [ 695.724024][T13518] ? __pfx_ksys_write+0x10/0x10 [ 695.724046][T13518] ? handle_softirqs+0x715/0x840 [ 695.724101][T13518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.724125][T13518] do_syscall_64+0x15f/0xf80 [ 695.724160][T13518] ? clear_bhb_loop+0x40/0x90 [ 695.724179][T13518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.724195][T13518] RIP: 0033:0x7f814579c799 [ 695.724233][T13518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.724253][T13518] RSP: 002b:00007f814670c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 695.724276][T13518] RAX: ffffffffffffffda RBX: 00007f8145a16090 RCX: 00007f814579c799 [ 695.724291][T13518] RDX: 0000000000000086 RSI: 0000200000000100 RDI: 0000000000000004 [ 695.724310][T13518] RBP: 00007f814670c090 R08: 0000000000000000 R09: 0000000000000000 [ 695.724321][T13518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.724330][T13518] R13: 00007f8145a16128 R14: 00007f8145a16090 R15: 00007ffc348b1298 [ 695.724354][T13518] [ 696.009382][T13509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.018801][T13509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.030478][T11657] usb 1-1: usb_control_msg returned -71 [ 696.036186][T11657] usbtmc 1-1:16.0: can't read capabilities [ 696.053708][T11657] usb 1-1: USB disconnect, device number 87 [ 696.337878][T11657] usb 4-1: USB disconnect, device number 80 [ 696.354599][T11657] usblp0: removed [ 696.700638][T11657] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 696.849743][ T5884] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 696.859777][T11657] usb 4-1: Using ep0 maxpacket: 16 [ 696.867281][T11657] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 696.879451][T11657] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.890535][T11657] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 696.901677][T11657] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 696.911870][T11657] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 696.922264][ T807] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 696.930001][T11657] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 696.944380][T11657] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 696.954291][T11657] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 696.962449][T11657] usb 4-1: Manufacturer: syz [ 696.970084][T11657] usb 4-1: config 0 descriptor?? [ 697.012646][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.023315][ T5884] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 697.038148][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.049663][ T5884] usb 1-1: config 0 descriptor?? [ 697.060516][ T5884] pwc: Askey VC010 type 2 USB webcam detected. [ 697.079659][ T6107] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 697.089923][ T807] usb 3-1: Using ep0 maxpacket: 32 [ 697.097161][ T807] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 697.106788][ T807] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 697.116103][ T807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.126360][ T807] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 697.135459][ T807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 697.145302][ T807] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 697.158352][ T807] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 697.168373][ T807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.180415][ T807] usb 3-1: config 0 descriptor?? [ 697.241371][ T6107] usb 2-1: Using ep0 maxpacket: 32 [ 697.248476][ T6107] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 697.257567][T11657] rc_core: IR keymap rc-hauppauge not found [ 697.263649][ T6107] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 697.272512][T11657] Registered IR keymap rc-empty [ 697.277458][ T6107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.288606][T11657] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.296322][ T6107] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 697.305512][ T6107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 697.315502][T11657] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.322741][ T6107] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 697.335990][ T6107] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 697.345121][ T6107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.355924][T11657] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 697.371309][ T6107] usb 2-1: config 0 descriptor?? [ 697.378726][T11657] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input199 [ 697.405248][ T5885] usb 3-1: USB disconnect, device number 82 [ 697.414906][T11657] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.440500][T11657] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.463607][T11657] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.477926][ T5884] pwc: recv_control_msg error -32 req 02 val 2b00 [ 697.485970][ T5884] pwc: recv_control_msg error -32 req 02 val 2700 [ 697.490268][T11657] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.497085][ T5884] pwc: recv_control_msg error -32 req 02 val 2c00 [ 697.507915][ T5884] pwc: recv_control_msg error -32 req 04 val 1000 [ 697.515680][ T5884] pwc: recv_control_msg error -32 req 04 val 1300 [ 697.519931][T11657] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.525877][ T5884] pwc: recv_control_msg error -32 req 04 val 1400 [ 697.536689][ T5884] pwc: recv_control_msg error -32 req 02 val 2000 [ 697.543923][ T5884] pwc: recv_control_msg error -32 req 02 val 2100 [ 697.550404][T11657] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.558646][ T5884] pwc: recv_control_msg error -32 req 04 val 1500 [ 697.566152][ T5884] pwc: recv_control_msg error -32 req 02 val 2500 [ 697.572635][T11657] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.581110][ T5884] pwc: recv_control_msg error -32 req 02 val 2400 [ 697.589779][ T5884] pwc: recv_control_msg error -71 req 02 val 2600 [ 697.593439][T11657] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.607267][ T5884] pwc: recv_control_msg error -71 req 02 val 2900 [ 697.612135][ T6107] usb 2-1: USB disconnect, device number 86 [ 697.621973][T11657] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.626724][ T5884] pwc: recv_control_msg error -71 req 02 val 2800 [ 697.638095][ T5884] pwc: recv_control_msg error -71 req 04 val 1100 [ 697.645289][ T5884] pwc: recv_control_msg error -71 req 04 val 1200 [ 697.662614][ T5884] pwc: Registered as video103. [ 697.670920][T11657] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.688826][ T5884] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input200 [ 697.706276][T11657] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 697.729575][T11657] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 697.739473][ T5884] usb 1-1: USB disconnect, device number 88 [ 697.768336][T11657] usb 4-1: USB disconnect, device number 81 [ 697.869609][ T5885] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 698.029753][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 698.036768][ T5885] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 698.045401][ T5885] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 698.054086][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.064337][ T5885] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 698.073477][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 698.087880][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 698.100878][ T5885] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 698.110563][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.121754][ T5885] usb 3-1: config 0 descriptor?? [ 698.130283][ T6107] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 698.254680][T13544] FAULT_INJECTION: forcing a failure. [ 698.254680][T13544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.267947][T13544] CPU: 0 UID: 0 PID: 13544 Comm: syz.3.2475 Tainted: G L syzkaller #0 PREEMPT(full) [ 698.267987][T13544] Tainted: [L]=SOFTLOCKUP [ 698.267993][T13544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 698.268003][T13544] Call Trace: [ 698.268009][T13544] [ 698.268016][T13544] dump_stack_lvl+0xe8/0x150 [ 698.268044][T13544] should_fail_ex+0x412/0x560 [ 698.268067][T13544] _copy_from_user+0x2d/0xb0 [ 698.268089][T13544] __sys_bind+0x1c6/0x410 [ 698.268112][T13544] ? __pfx___sys_bind+0x10/0x10 [ 698.268139][T13544] ? __pfx_ksys_write+0x10/0x10 [ 698.268167][T13544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.268184][T13544] __x64_sys_bind+0x7a/0x90 [ 698.268204][T13544] do_syscall_64+0x15f/0xf80 [ 698.268226][T13544] ? trace_irq_disable+0x3b/0x140 [ 698.268246][T13544] ? clear_bhb_loop+0x40/0x90 [ 698.268265][T13544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.268280][T13544] RIP: 0033:0x7f143359c799 [ 698.268295][T13544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.268313][T13544] RSP: 002b:00007f1434395028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 698.268331][T13544] RAX: ffffffffffffffda RBX: 00007f1433815fa0 RCX: 00007f143359c799 [ 698.268342][T13544] RDX: 0000000000000048 RSI: 0000200000000280 RDI: 0000000000000004 [ 698.268352][T13544] RBP: 00007f1434395090 R08: 0000000000000000 R09: 0000000000000000 [ 698.268362][T13544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.268372][T13544] R13: 00007f1433816038 R14: 00007f1433815fa0 R15: 00007ffd7062dd48 [ 698.268396][T13544] [ 698.449639][ T6107] usb 2-1: Using ep0 maxpacket: 32 [ 698.456740][ T6107] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 698.465737][ T6107] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 698.474907][ T6107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.485454][ T6107] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 698.495860][ T6107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 698.532726][ T6107] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 698.568805][ T6107] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 698.584158][ T6107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.604349][ T6107] usb 2-1: config 0 descriptor?? [ 698.797044][T13559] FAULT_INJECTION: forcing a failure. [ 698.797044][T13559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.810621][T13559] CPU: 1 UID: 0 PID: 13559 Comm: syz.2.2471 Tainted: G L syzkaller #0 PREEMPT(full) [ 698.810644][T13559] Tainted: [L]=SOFTLOCKUP [ 698.810650][T13559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 698.810660][T13559] Call Trace: [ 698.810665][T13559] [ 698.810672][T13559] dump_stack_lvl+0xe8/0x150 [ 698.810699][T13559] should_fail_ex+0x412/0x560 [ 698.810722][T13559] _copy_to_user+0x31/0xb0 [ 698.810744][T13559] simple_read_from_buffer+0xe1/0x170 [ 698.810769][T13559] proc_fail_nth_read+0x1bb/0x230 [ 698.810790][T13559] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 698.810812][T13559] ? rw_verify_area+0x2a6/0x4d0 [ 698.810835][T13559] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 698.810855][T13559] vfs_read+0x20c/0xa70 [ 698.810884][T13559] ? fdget_pos+0x246/0x320 [ 698.810906][T13559] ? __pfx___mutex_lock+0x10/0x10 [ 698.810930][T13559] ? __pfx_vfs_read+0x10/0x10 [ 698.810953][T13559] ? __fget_files+0x2a/0x420 [ 698.810975][T13559] ? __fget_files+0x3a0/0x420 [ 698.810993][T13559] ? __fget_files+0x2a/0x420 [ 698.811018][T13559] ksys_read+0x150/0x270 [ 698.811042][T13559] ? __pfx_ksys_read+0x10/0x10 [ 698.811070][T13559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.811086][T13559] do_syscall_64+0x15f/0xf80 [ 698.811107][T13559] ? trace_irq_disable+0x3b/0x140 [ 698.811126][T13559] ? clear_bhb_loop+0x40/0x90 [ 698.811144][T13559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.811159][T13559] RIP: 0033:0x7f814575cfce [ 698.811174][T13559] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 698.811187][T13559] RSP: 002b:00007f814670bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 698.811203][T13559] RAX: ffffffffffffffda RBX: 00007f814670c6c0 RCX: 00007f814575cfce [ 698.811214][T13559] RDX: 000000000000000f RSI: 00007f814670c0a0 RDI: 0000000000000004 [ 698.811224][T13559] RBP: 00007f814670c090 R08: 0000000000000000 R09: 0000000000000000 [ 698.811233][T13559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.811242][T13559] R13: 00007f8145a16128 R14: 00007f8145a16090 R15: 00007ffc348b1298 [ 698.811265][T13559] [ 699.050704][ T10] usb 3-1: USB disconnect, device number 83 [ 699.175794][ T5858] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 699.539674][ T10] usb 3-1: new low-speed USB device number 84 using dummy_hcd [ 699.723336][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 699.747768][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 699.806917][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 699.861720][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 699.905015][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 699.963802][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 699.992093][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 700.032059][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 700.087128][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 700.126189][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 700.224043][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 700.265141][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 700.312627][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 700.371122][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 700.456001][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 700.495135][ T10] usb 3-1: string descriptor 0 read error: -22 [ 700.504323][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 700.519014][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.599814][ T5884] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 700.696578][ T10] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 700.790415][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 700.859340][ T5884] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 700.935321][ T5884] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 701.023085][ T5884] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 701.106918][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 701.197262][ T5884] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 701.305658][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 701.447935][ T5884] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 701.501006][ T10] usb 2-1: USB disconnect, device number 87 [ 701.538042][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.818886][ T5884] usb 1-1: config 0 descriptor?? [ 702.167345][ T5884] usblp 1-1:0.0: usblp1: USB Bidirectional printer dev 89 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 702.242183][ T10] usb 3-1: USB disconnect, device number 84 [ 702.267752][ T5884] usb 1-1: USB disconnect, device number 89 [ 702.334354][ T5884] usblp1: removed [ 702.503892][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2489'. [ 702.539668][ T6107] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 702.659887][ T5884] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 702.689648][ T6107] usb 2-1: Using ep0 maxpacket: 16 [ 702.698508][ T6107] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 702.709039][ T6107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.719322][ T6107] usb 2-1: Product: syz [ 702.726018][ T6107] usb 2-1: Manufacturer: syz [ 702.730891][ T6107] usb 2-1: SerialNumber: syz [ 702.809642][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 702.826769][ T5884] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 702.844127][ T5884] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 702.863619][ T5884] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 702.881151][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 702.891646][ T5884] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 702.910689][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 702.927776][ T5884] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 702.938018][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.954400][ T5884] usb 1-1: config 0 descriptor?? [ 702.978079][ T6107] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 703.013365][ T6107] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 703.044652][ T6107] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -23 [ 703.075297][ T6107] usb 2-1: USB disconnect, device number 88 [ 703.166588][ T5884] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 90 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 703.200396][T13599] nbd: must specify at least one socket [ 705.089759][ T6107] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 705.201899][ T29] usb 1-1: USB disconnect, device number 90 [ 705.372539][ T6107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.465798][ T6107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.558602][ T6107] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 705.577822][ T29] usblp0: removed [ 705.676314][ T6107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.924351][ T6107] usb 4-1: config 0 descriptor?? [ 706.448404][T13610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.457983][T13618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.480017][T13610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.482918][T13618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.516335][ T6107] hid-steam 0003:28DE:1142.001B: unknown main item tag 0x0 [ 706.530498][ T6107] hid-steam 0003:28DE:1142.001B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 706.599631][ T6107] hid-steam 0003:28DE:1142.001B: Steam wireless receiver connected [ 706.609995][ T6107] hid-steam 0003:28DE:1142.001B: No HID_FEATURE_REPORT submitted - nothing to read [ 706.651466][ T5884] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 706.658708][ T6107] hid-steam 0003:28DE:1142.001C: unknown main item tag 0x0 [ 706.688057][ T6107] hid-steam 0003:28DE:1142.001C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 706.738955][ T6107] usb 4-1: USB disconnect, device number 82 [ 706.763341][T13623] fido_id[13623]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 706.770630][ T6107] hid-steam 0003:28DE:1142.001B: Steam wireless receiver disconnected [ 706.823574][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 706.831799][ T5884] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.842028][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 706.853803][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 706.863758][ T5884] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 706.873497][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 706.887961][ T5884] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 706.897261][ T5884] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 706.906021][ T5884] usb 2-1: Manufacturer: syz [ 706.914336][ T5884] usb 2-1: config 0 descriptor?? [ 706.939616][ T10] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 707.090598][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 707.098538][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.108837][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 707.120706][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 707.131691][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 707.142557][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 707.157016][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 707.168065][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 707.176193][ T10] usb 3-1: Manufacturer: syz [ 707.194445][ T10] usb 3-1: config 0 descriptor?? [ 707.239637][ T5884] rc_core: IR keymap rc-hauppauge not found [ 707.245676][ T5884] Registered IR keymap rc-empty [ 707.253093][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 707.279694][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 707.302005][T13626] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2502'. [ 707.312709][ T5884] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 707.334639][ T5884] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input201 [ 707.349795][T13629] nbd: must specify at least one socket [ 707.370326][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 707.410036][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 707.450182][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 707.479697][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 707.507313][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 707.543883][ T10] rc_core: IR keymap rc-hauppauge not found [ 707.550190][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 707.569612][ T10] Registered IR keymap rc-empty [ 707.574980][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 707.589764][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 707.603088][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 707.629706][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 707.641081][ T10] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 707.655748][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input202 [ 707.670075][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 707.682838][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 707.690815][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 707.710788][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 707.724356][ T5884] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 707.734598][ T5884] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 707.750523][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 707.760423][ T5884] usb 2-1: USB disconnect, device number 89 [ 707.782181][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 707.821750][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 707.859697][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 707.891059][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 707.909867][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 707.929945][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 707.949783][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 707.984250][ T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 707.995564][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 708.014325][ T10] usb 3-1: USB disconnect, device number 85 [ 708.657904][T13655] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2512'. [ 708.774193][T13672] netlink: 'syz.2.2517': attribute type 1 has an invalid length. [ 708.797770][T13672] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2517'. [ 709.130032][ T5912] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 709.289670][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 709.296838][ T5912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.308267][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 709.319296][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 709.329022][ T5912] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 709.338788][ T5912] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 709.355268][ T5912] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 709.367086][ T5912] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 709.377222][ T5912] usb 1-1: Manufacturer: syz [ 709.384845][ T5912] usb 1-1: config 0 descriptor?? [ 709.479663][T11657] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 709.499623][ T10] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 709.629705][T11657] usb 3-1: Using ep0 maxpacket: 16 [ 709.636608][T11657] usb 3-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 709.640777][ T5912] rc_core: IR keymap rc-hauppauge not found [ 709.647465][T11657] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 709.647500][T11657] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 709.647526][T11657] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 709.647552][T11657] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 709.651534][T11657] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 709.667909][ T5912] Registered IR keymap rc-empty [ 709.677261][T11657] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 709.694857][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.701961][T11657] usb 3-1: Manufacturer: syz [ 709.713820][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 709.742700][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 709.751895][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 709.761704][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.775046][ T10] usb 2-1: config 0 descriptor?? [ 709.789736][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 709.804145][T11657] usb 3-1: config 0 descriptor?? [ 709.820959][ T5912] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 709.835709][ T5912] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input203 [ 709.855134][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 709.879833][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 709.900014][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 709.920777][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 709.949695][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 709.969707][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 709.989693][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 710.009840][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 710.030648][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 710.069726][ T5912] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 710.080347][T11657] rc_core: IR keymap rc-hauppauge not found [ 710.086322][T11657] Registered IR keymap rc-empty [ 710.093495][T11657] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 710.096306][ T5912] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 710.109867][ T5912] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 710.121772][T11657] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 710.126218][ T5912] usb 1-1: USB disconnect, device number 91 [ 710.150008][ T29] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 710.171640][T11657] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 710.199720][T11657] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input204 [ 710.221419][T11657] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 710.250768][T11657] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 710.269759][T11657] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 710.290095][T11657] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 710.309644][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 710.314950][T11657] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 710.323777][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.334080][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 710.345137][T11657] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 710.352388][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 710.363736][ T29] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 710.373552][ T29] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 710.386635][T11657] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 710.397025][ T29] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 710.411538][ T29] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 710.419976][T11657] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 710.427187][ T29] usb 4-1: Manufacturer: syz [ 710.435102][ T29] usb 4-1: config 0 descriptor?? [ 710.459666][T11657] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 710.489681][T11657] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 710.512028][T11657] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 710.522741][T11657] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 710.535934][T11657] usb 3-1: USB disconnect, device number 86 [ 710.699745][ T29] rc_core: IR keymap rc-hauppauge not found [ 710.707263][ T29] Registered IR keymap rc-empty [ 710.717530][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 710.750320][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 710.771318][ T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 710.785691][ T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input205 [ 710.809349][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 710.829742][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 710.849741][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 710.879814][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 710.909664][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 710.929885][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 710.962437][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 710.989721][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 711.010144][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 711.030026][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 711.053542][ T29] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 711.062870][ T29] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 711.106656][ T29] usb 4-1: USB disconnect, device number 83 [ 711.143790][T13709] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 711.449623][ T10] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 711.612577][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 711.622184][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 711.634233][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 711.643599][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.652054][ T10] usb 3-1: Product: syz [ 711.656334][ T10] usb 3-1: Manufacturer: syz [ 711.661443][ T10] usb 3-1: SerialNumber: syz [ 711.708396][T13721] ======================================================= [ 711.708396][T13721] WARNING: The mand mount option has been deprecated and [ 711.708396][T13721] and is ignored by this kernel. Remove the mand [ 711.708396][T13721] option from the mount to silence this warning. [ 711.708396][T13721] ======================================================= [ 711.754424][T11657] kernel read not supported for file /video37 (pid: 11657 comm: kworker/1:3) [ 711.819627][ T29] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 711.874683][T13709] openvswitch: netlink: Flow actions attr not present in new flow. [ 711.900792][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 711.918920][ T10] usb 3-1: USB disconnect, device number 87 [ 711.970799][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 711.977445][ T29] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 711.985668][ T29] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 711.996828][ T29] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 711.999821][ T5884] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 712.006948][ T29] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 712.025782][ T29] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 712.036637][ T29] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 712.049769][ T29] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 712.058837][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.169594][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 712.176805][ T5884] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 712.185533][ T5884] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 712.197095][ T5884] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 712.207579][ T5884] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 712.219123][ T5884] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 712.229367][ T5884] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 712.242999][ T5884] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 712.252156][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.284689][ T29] usb 1-1: GET_CAPABILITIES returned 0 [ 712.291536][ T29] usbtmc 1-1:16.0: can't read capabilities [ 712.327607][ T29] usb 2-1: USB disconnect, device number 90 [ 712.468876][ T5884] usb 4-1: GET_CAPABILITIES returned 0 [ 712.485156][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 712.494119][ T5884] usbtmc 4-1:16.0: can't read capabilities [ 712.503236][ T5912] usb 1-1: USB disconnect, device number 92 [ 712.605145][T13733] netlink: 'syz.2.2533': attribute type 13 has an invalid length. [ 712.613426][T13733] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2533'. [ 712.625623][T13733] erspan0: refused to change device tx_queue_len [ 712.675079][ T29] usb 4-1: USB disconnect, device number 84 [ 713.100213][ T5912] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 713.272387][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.283538][ T5912] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 713.292805][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.305947][ T5912] usb 3-1: config 0 descriptor?? [ 713.317469][ T5912] pwc: Askey VC010 type 2 USB webcam detected. [ 713.710532][ T5884] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 713.724167][ T5912] pwc: recv_control_msg error -32 req 02 val 2b00 [ 713.740512][ T5912] pwc: recv_control_msg error -32 req 02 val 2700 [ 713.760200][ T5912] pwc: recv_control_msg error -32 req 02 val 2c00 [ 713.780954][ T5912] pwc: recv_control_msg error -32 req 04 val 1000 [ 713.793698][ T5912] pwc: recv_control_msg error -32 req 04 val 1300 [ 713.805800][ T5912] pwc: recv_control_msg error -32 req 04 val 1400 [ 713.819340][ T5912] pwc: recv_control_msg error -32 req 02 val 2000 [ 713.826817][ T5912] pwc: recv_control_msg error -32 req 02 val 2100 [ 713.835616][ T5912] pwc: recv_control_msg error -32 req 04 val 1500 [ 713.844602][ T5912] pwc: recv_control_msg error -32 req 02 val 2500 [ 713.852395][ T5912] pwc: recv_control_msg error -32 req 02 val 2400 [ 713.878272][ T5912] pwc: recv_control_msg error -71 req 02 val 2600 [ 713.887827][ T5884] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 713.899184][ T5912] pwc: recv_control_msg error -71 req 02 val 2900 [ 713.906224][ T5884] usb 4-1: config 0 has no interface number 0 [ 713.915168][ T5912] pwc: recv_control_msg error -71 req 02 val 2800 [ 713.924208][ T5884] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 713.937011][ T5912] pwc: recv_control_msg error -71 req 04 val 1100 [ 713.945098][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.957027][ T5912] pwc: recv_control_msg error -71 req 04 val 1200 [ 713.971468][ T5884] usb 4-1: Product: syz [ 713.975857][ T5884] usb 4-1: Manufacturer: syz [ 713.981952][ T5912] pwc: Registered as video103. [ 713.995335][ T5912] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input206 [ 714.005218][ T5884] usb 4-1: SerialNumber: syz [ 714.024565][ T5884] usb 4-1: config 0 descriptor?? [ 714.036420][ T5912] usb 3-1: USB disconnect, device number 88 [ 714.310511][ T29] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 714.480160][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 714.494861][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.519637][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 714.533512][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 714.543324][ T29] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 714.555275][ T29] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 714.572089][ T29] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 714.590523][ T29] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 714.610650][ T29] usb 1-1: Manufacturer: syz [ 714.623478][ T29] usb 1-1: config 0 descriptor?? [ 714.942887][ T29] rc_core: IR keymap rc-hauppauge not found [ 714.955571][ T29] Registered IR keymap rc-empty [ 714.967769][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.000034][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.032979][ T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 715.075831][ T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input207 [ 715.111595][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.150150][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.170696][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.210567][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.229674][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.272241][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.300718][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.339682][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.361288][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.399729][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.432108][ T29] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 715.449802][ T29] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 715.475364][ T29] usb 1-1: USB disconnect, device number 93 [ 715.730119][ T30] audit: type=1326 audit(1774499718.651:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13787 comm="syz.2.2551" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f814579c799 code=0x0 [ 716.359645][ T29] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 716.529662][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 716.540195][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.551102][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 716.562183][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 716.574115][ T29] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 716.583971][ T29] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 716.598197][ T5884] uvcvideo 4-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 716.607221][ T29] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 716.623389][ T5884] uvcvideo 4-1:0.64: No valid video chain found. [ 716.634495][ T29] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 716.651943][ T29] usb 2-1: Manufacturer: syz [ 716.662750][ T5884] usb 4-1: USB disconnect, device number 85 [ 716.704590][ T29] usb 2-1: config 0 descriptor?? [ 716.740853][T13804] input: syz0 as /devices/virtual/input/input208 [ 716.895866][T13809] FAULT_INJECTION: forcing a failure. [ 716.895866][T13809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.909706][T13809] CPU: 0 UID: 0 PID: 13809 Comm: syz.0.2558 Tainted: G L syzkaller #0 PREEMPT(full) [ 716.909743][T13809] Tainted: [L]=SOFTLOCKUP [ 716.909751][T13809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 716.909766][T13809] Call Trace: [ 716.909774][T13809] [ 716.909784][T13809] dump_stack_lvl+0xe8/0x150 [ 716.909824][T13809] should_fail_ex+0x412/0x560 [ 716.909858][T13809] _copy_from_user+0x2d/0xb0 [ 716.909890][T13809] ___sys_sendmsg+0x1c6/0x360 [ 716.909923][T13809] ? __lock_acquire+0x6b5/0x2cf0 [ 716.909958][T13809] ? __pfx____sys_sendmsg+0x10/0x10 [ 716.910028][T13809] ? __fget_files+0x2a/0x420 [ 716.910056][T13809] ? __fget_files+0x3a0/0x420 [ 716.910094][T13809] __x64_sys_sendmsg+0x1bd/0x2a0 [ 716.910131][T13809] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 716.910175][T13809] ? __pfx_ksys_write+0x10/0x10 [ 716.910217][T13809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.910240][T13809] do_syscall_64+0x15f/0xf80 [ 716.910273][T13809] ? trace_irq_disable+0x3b/0x140 [ 716.910300][T13809] ? clear_bhb_loop+0x40/0x90 [ 716.910326][T13809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.910356][T13809] RIP: 0033:0x7f49e139c799 [ 716.910377][T13809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.910396][T13809] RSP: 002b:00007f49e2170028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 716.910421][T13809] RAX: ffffffffffffffda RBX: 00007f49e1615fa0 RCX: 00007f49e139c799 [ 716.910437][T13809] RDX: 0000000000000080 RSI: 00002000000018c0 RDI: 0000000000000005 [ 716.910451][T13809] RBP: 00007f49e2170090 R08: 0000000000000000 R09: 0000000000000000 [ 716.910465][T13809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.910478][T13809] R13: 00007f49e1616038 R14: 00007f49e1615fa0 R15: 00007fffc8319418 [ 716.910512][T13809] [ 717.180190][ T29] rc_core: IR keymap rc-hauppauge not found [ 717.199592][ T5912] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 717.212236][ T29] Registered IR keymap rc-empty [ 717.219467][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 717.259719][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 717.288867][ T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 717.338654][ T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input209 [ 717.371863][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 717.389647][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 717.396610][ T5912] usb 3-1: config 0 has an invalid descriptor of length 24, skipping remainder of the config [ 717.407479][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 717.411248][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 717.419630][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 717.437719][ T5912] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 717.449238][ T5912] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 717.464943][ T5912] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 717.474747][ T5912] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 717.480177][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 717.484073][ T5912] usb 3-1: Manufacturer: syz [ 717.498107][ T5912] usb 3-1: config 0 descriptor?? [ 717.520397][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 717.556211][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 717.609879][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 717.629889][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 717.655266][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 717.689695][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 717.710844][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 717.742942][ T29] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 717.764070][ T29] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 717.783180][ T29] usb 2-1: USB disconnect, device number 91 [ 717.815729][ T5912] rc_core: IR keymap rc-hauppauge not found [ 717.827901][ T5912] Registered IR keymap rc-empty [ 717.843139][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 717.897519][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 717.940595][ T5912] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 717.953897][ T5912] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input210 [ 717.987570][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 718.029711][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 718.082161][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 718.129705][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 718.169858][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 718.199635][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 718.261732][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 718.321637][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 718.349696][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 718.370607][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 718.403639][ T5912] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 718.424725][ T5912] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 718.453795][ T5912] usb 3-1: USB disconnect, device number 89 [ 719.220125][ T5912] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 719.352691][ T5845] Bluetooth: hci0: command 0x2016 tx timeout [ 719.409952][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 719.420129][ T5912] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 719.429604][ T5912] usb 1-1: config 0 has no interface number 0 [ 719.439599][ T5912] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 719.452199][ T5912] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 719.464119][ T5912] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 719.475407][ T5912] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 719.488717][ T5912] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 719.503142][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.516049][ T5912] usb 1-1: config 0 descriptor?? [ 719.527103][ T5912] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 719.727466][T13833] FAULT_INJECTION: forcing a failure. [ 719.727466][T13833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.741487][T13833] CPU: 1 UID: 0 PID: 13833 Comm: syz.0.2565 Tainted: G L syzkaller #0 PREEMPT(full) [ 719.741526][T13833] Tainted: [L]=SOFTLOCKUP [ 719.741535][T13833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 719.741549][T13833] Call Trace: [ 719.741558][T13833] [ 719.741567][T13833] dump_stack_lvl+0xe8/0x150 [ 719.741606][T13833] should_fail_ex+0x412/0x560 [ 719.741639][T13833] _copy_to_user+0x31/0xb0 [ 719.741673][T13833] simple_read_from_buffer+0xe1/0x170 [ 719.741707][T13833] proc_fail_nth_read+0x1bb/0x230 [ 719.741740][T13833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 719.741772][T13833] ? rw_verify_area+0x2a6/0x4d0 [ 719.741803][T13833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 719.741833][T13833] vfs_read+0x20c/0xa70 [ 719.741864][T13833] ? fdget_pos+0x246/0x320 [ 719.741897][T13833] ? __pfx___mutex_lock+0x10/0x10 [ 719.741931][T13833] ? __pfx_vfs_read+0x10/0x10 [ 719.741965][T13833] ? __fget_files+0x2a/0x420 [ 719.741998][T13833] ? __fget_files+0x3a0/0x420 [ 719.742024][T13833] ? __fget_files+0x2a/0x420 [ 719.742061][T13833] ksys_read+0x150/0x270 [ 719.742096][T13833] ? __pfx_ksys_read+0x10/0x10 [ 719.742146][T13833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.742171][T13833] do_syscall_64+0x15f/0xf80 [ 719.742201][T13833] ? trace_irq_disable+0x3b/0x140 [ 719.742227][T13833] ? clear_bhb_loop+0x40/0x90 [ 719.742254][T13833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.742276][T13833] RIP: 0033:0x7f49e135cfce [ 719.742297][T13833] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 719.742316][T13833] RSP: 002b:00007f49e216ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 719.742339][T13833] RAX: ffffffffffffffda RBX: 00007f49e21706c0 RCX: 00007f49e135cfce [ 719.742356][T13833] RDX: 000000000000000f RSI: 00007f49e21700a0 RDI: 0000000000000005 [ 719.742370][T13833] RBP: 00007f49e2170090 R08: 0000000000000000 R09: 0000000000000000 [ 719.742384][T13833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.742397][T13833] R13: 00007f49e1616038 R14: 00007f49e1615fa0 R15: 00007fffc8319418 [ 719.742432][T13833] [ 720.001941][ T29] usb 1-1: USB disconnect, device number 94 [ 720.014022][ T29] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 720.559641][ T29] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 720.649619][ T807] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 720.723025][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 720.732337][ T29] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 720.744253][ T29] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 2 [ 720.758659][ T29] usb 1-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 720.767830][ T5912] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 720.776131][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.784627][ T29] usb 1-1: Product: syz [ 720.789179][ T29] usb 1-1: Manufacturer: syz [ 720.794290][ T29] usb 1-1: SerialNumber: syz [ 720.799608][ T807] usb 2-1: Using ep0 maxpacket: 16 [ 720.809381][ T807] usb 2-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 720.821182][ T807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 720.833584][ T807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 720.845312][ T807] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 720.855881][ T807] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 720.878759][ T807] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 720.888516][ T807] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 720.896972][ T807] usb 2-1: Manufacturer: syz [ 720.912816][ T807] usb 2-1: config 0 descriptor?? [ 720.931568][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.951211][ T5912] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 720.969543][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.996847][ T5912] usb 3-1: config 0 descriptor?? [ 721.010191][ T5912] pwc: Askey VC010 type 2 USB webcam detected. [ 721.059379][T13848] PKCS7: Unknown OID: [4] 0.0 [ 721.064358][T13848] PKCS7: Only support pkcs7_signedData type [ 721.159692][ T29] usb 1-1: USB disconnect, device number 95 [ 721.261886][ T807] rc_core: IR keymap rc-hauppauge not found [ 721.279602][ T807] Registered IR keymap rc-empty [ 721.297251][ T807] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 721.319751][ T807] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 721.341575][ T807] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 721.362359][ T807] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input211 [ 721.377698][ T807] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 721.400493][ T807] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 721.416713][ T5912] pwc: recv_control_msg error -32 req 02 val 2b00 [ 721.423871][ T807] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 721.435150][ T5912] pwc: recv_control_msg error -32 req 02 val 2700 [ 721.452251][ T5845] Bluetooth: hci0: command 0x2016 tx timeout [ 721.469692][ T807] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 721.472680][ T5912] pwc: recv_control_msg error -32 req 02 val 2c00 [ 721.484811][ T5912] pwc: recv_control_msg error -32 req 04 val 1000 [ 721.493449][ T5912] pwc: recv_control_msg error -32 req 04 val 1300 [ 721.501269][ T5912] pwc: recv_control_msg error -32 req 04 val 1400 [ 721.502312][ T807] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 721.510201][ T5912] pwc: recv_control_msg error -32 req 02 val 2000 [ 721.524209][ T5912] pwc: recv_control_msg error -32 req 02 val 2100 [ 721.532861][ T5912] pwc: recv_control_msg error -32 req 04 val 1500 [ 721.539697][ T807] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 721.549702][ T5912] pwc: recv_control_msg error -32 req 02 val 2500 [ 721.557894][ T5912] pwc: recv_control_msg error -32 req 02 val 2400 [ 721.566541][ T5912] pwc: recv_control_msg error -32 req 02 val 2600 [ 721.576924][ T807] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 721.580636][ T5912] pwc: recv_control_msg error -71 req 02 val 2900 [ 721.591651][ T5912] pwc: recv_control_msg error -71 req 02 val 2800 [ 721.598779][ T5912] pwc: recv_control_msg error -71 req 04 val 1100 [ 721.605980][ T5912] pwc: recv_control_msg error -71 req 04 val 1200 [ 721.614848][ T5912] pwc: Registered as video103. [ 721.625739][ T5912] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input212 [ 721.631057][ T807] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 721.656400][ T5912] usb 3-1: USB disconnect, device number 90 [ 721.700865][ T807] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 721.739676][ T807] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 721.801746][ T807] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 721.820277][ T807] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 721.878975][ T807] usb 2-1: USB disconnect, device number 92 [ 722.569679][ T10] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 722.771605][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.799468][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 722.817569][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 722.839422][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.863514][ T10] usb 2-1: config 0 descriptor?? [ 723.579660][ T807] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 723.750266][ T807] usb 3-1: Using ep0 maxpacket: 16 [ 723.758217][ T807] usb 3-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 723.768807][ T807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 723.780105][ T807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 723.790354][ T807] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 723.800762][ T807] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 723.816183][ T807] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 723.826408][ T807] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 723.834624][ T807] usb 3-1: Manufacturer: syz [ 723.842745][ T807] usb 3-1: config 0 descriptor?? [ 724.004422][T13899] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2587'. [ 724.163261][ T807] rc_core: IR keymap rc-hauppauge not found [ 724.182930][ T807] Registered IR keymap rc-empty [ 724.188517][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 724.219912][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 724.241511][ T807] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 724.264842][ T807] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input213 [ 724.281741][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 724.299990][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 724.321134][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 724.349679][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 724.370953][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 724.392342][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 724.393135][T13913] FAULT_INJECTION: forcing a failure. [ 724.393135][T13913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.412865][T13913] CPU: 0 UID: 0 PID: 13913 Comm: syz.3.2592 Tainted: G L syzkaller #0 PREEMPT(full) [ 724.412904][T13913] Tainted: [L]=SOFTLOCKUP [ 724.412911][T13913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 724.412937][T13913] Call Trace: [ 724.412946][T13913] [ 724.412956][T13913] dump_stack_lvl+0xe8/0x150 [ 724.412994][T13913] should_fail_ex+0x412/0x560 [ 724.413027][T13913] _copy_from_user+0x2d/0xb0 [ 724.413057][T13913] ___sys_sendmsg+0x1c6/0x360 [ 724.413108][T13913] ? __lock_acquire+0x6b5/0x2cf0 [ 724.413145][T13913] ? __pfx____sys_sendmsg+0x10/0x10 [ 724.413212][T13913] ? __fget_files+0x2a/0x420 [ 724.413239][T13913] ? __fget_files+0x3a0/0x420 [ 724.413300][T13913] __x64_sys_sendmsg+0x1bd/0x2a0 [ 724.413336][T13913] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 724.413380][T13913] ? __pfx_ksys_write+0x10/0x10 [ 724.413410][T13913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.413441][T13913] do_syscall_64+0x15f/0xf80 [ 724.413473][T13913] ? trace_irq_disable+0x3b/0x140 [ 724.413499][T13913] ? clear_bhb_loop+0x40/0x90 [ 724.413530][T13913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.413546][T13913] RIP: 0033:0x7f143359c799 [ 724.413561][T13913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.413574][T13913] RSP: 002b:00007f1434395028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 724.413608][T13913] RAX: ffffffffffffffda RBX: 00007f1433815fa0 RCX: 00007f143359c799 [ 724.413626][T13913] RDX: 00000000300080c1 RSI: 0000200000000240 RDI: 0000000000000003 [ 724.413640][T13913] RBP: 00007f1434395090 R08: 0000000000000000 R09: 0000000000000000 [ 724.413653][T13913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.413665][T13913] R13: 00007f1433816038 R14: 00007f1433815fa0 R15: 00007ffd7062dd48 [ 724.413699][T13913] [ 724.420219][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 724.619753][ T6107] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 724.650026][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 724.689717][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 724.711291][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 724.733803][ T807] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 724.751410][ T807] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 724.775750][ T807] usb 3-1: USB disconnect, device number 91 [ 724.781847][ T6107] usb 1-1: Using ep0 maxpacket: 32 [ 724.801533][ T6107] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 724.810443][ T6107] usb 1-1: config 0 has no interface number 0 [ 724.822536][ T6107] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 724.855503][ T6107] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 724.867550][ T6107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.889686][ T6107] usb 1-1: Product: syz [ 724.897887][ T6107] usb 1-1: Manufacturer: syz [ 724.902850][ T6107] usb 1-1: SerialNumber: syz [ 724.918565][ T6107] usb 1-1: config 0 descriptor?? [ 724.939102][T13909] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 724.965261][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 724.982109][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 724.991978][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 725.002556][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 725.011489][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 725.168377][T13909] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 725.316004][T13926] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2594'. [ 725.342706][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2594'. [ 725.375306][T13916] chnl_net:caif_netlink_parms(): no params data found [ 725.388674][ T6107] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 725.411812][ T6107] asix 1-1:0.188: probe with driver asix failed with error -32 [ 725.438087][ T10] usb 2-1: USB disconnect, device number 93 [ 725.582233][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.595085][T13934] FAULT_INJECTION: forcing a failure. [ 725.595085][T13934] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 725.612345][T13934] CPU: 0 UID: 0 PID: 13934 Comm: syz.1.2596 Tainted: G L syzkaller #0 PREEMPT(full) [ 725.612379][T13934] Tainted: [L]=SOFTLOCKUP [ 725.612388][T13934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 725.612401][T13934] Call Trace: [ 725.612410][T13934] [ 725.612420][T13934] dump_stack_lvl+0xe8/0x150 [ 725.612459][T13934] should_fail_ex+0x412/0x560 [ 725.612492][T13934] prepare_alloc_pages+0x22a/0x650 [ 725.612523][T13934] __alloc_frozen_pages_noprof+0x119/0x3d0 [ 725.612551][T13934] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 725.612579][T13934] ? __pfx_policy_nodemask+0x10/0x10 [ 725.612600][T13934] ? aa_file_perm+0x192/0x15e0 [ 725.612633][T13934] alloc_pages_mpol+0x235/0x490 [ 725.612661][T13934] alloc_pages_noprof+0xac/0x2a0 [ 725.612687][T13934] get_free_pages_noprof+0xf/0x80 [ 725.612712][T13934] vcs_write+0xf3/0x11c0 [ 725.612749][T13934] ? __lock_acquire+0x6b5/0x2cf0 [ 725.612785][T13934] ? apparmor_file_permission+0x1f4/0x300 [ 725.612814][T13934] ? __pfx_vcs_write+0x10/0x10 [ 725.612840][T13934] ? bpf_lsm_file_permission+0x9/0x20 [ 725.612873][T13934] ? security_file_permission+0x75/0x260 [ 725.612904][T13934] ? rw_verify_area+0x255/0x4d0 [ 725.612935][T13934] ? __pfx_vcs_write+0x10/0x10 [ 725.612964][T13934] vfs_write+0x29a/0xb90 [ 725.613006][T13934] ? __pfx_vfs_write+0x10/0x10 [ 725.613041][T13934] ? __fget_files+0x2a/0x420 [ 725.613071][T13934] ? __fget_files+0x2a/0x420 [ 725.613106][T13934] ? __fget_files+0x3a0/0x420 [ 725.613133][T13934] ? __fget_files+0x2a/0x420 [ 725.613170][T13934] ksys_write+0x150/0x270 [ 725.613205][T13934] ? __pfx_ksys_write+0x10/0x10 [ 725.613247][T13934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.613271][T13934] do_syscall_64+0x15f/0xf80 [ 725.613303][T13934] ? trace_irq_disable+0x3b/0x140 [ 725.613333][T13934] ? clear_bhb_loop+0x40/0x90 [ 725.613359][T13934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.613382][T13934] RIP: 0033:0x7f86d7f9c799 [ 725.613402][T13934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.613422][T13934] RSP: 002b:00007f86d8e18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 725.613445][T13934] RAX: ffffffffffffffda RBX: 00007f86d8215fa0 RCX: 00007f86d7f9c799 [ 725.613462][T13934] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 725.613475][T13934] RBP: 00007f86d8e18090 R08: 0000000000000000 R09: 0000000000000000 [ 725.613489][T13934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.613503][T13934] R13: 00007f86d8216038 R14: 00007f86d8215fa0 R15: 00007ffdff8a44b8 [ 725.613537][T13934] [ 725.984036][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.026478][T13916] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.034629][T13916] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.044316][T13916] bridge_slave_0: entered allmulticast mode [ 726.055285][T13916] bridge_slave_0: entered promiscuous mode [ 726.066069][T13916] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.082509][T13916] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.091272][T13916] bridge_slave_1: entered allmulticast mode [ 726.099240][T13916] bridge_slave_1: entered promiscuous mode [ 726.148570][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.197136][T13916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.210457][T13916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.259084][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.281385][T13916] team0: Port device team_slave_0 added [ 726.289294][T13916] team0: Port device team_slave_1 added [ 726.315388][T13916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.328497][T13916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.368245][T13916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.390546][T13916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.397566][T13916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.427411][T13916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.530418][T13916] hsr_slave_0: entered promiscuous mode [ 726.544509][T13916] hsr_slave_1: entered promiscuous mode [ 726.819743][ T5912] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 726.838351][ T36] bridge_slave_1: left allmulticast mode [ 726.844216][ T36] bridge_slave_1: left promiscuous mode [ 726.851095][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.860765][ T36] bridge_slave_0: left allmulticast mode [ 726.866449][ T36] bridge_slave_0: left promiscuous mode [ 726.872350][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.995534][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 727.003621][ T5912] usb 3-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 727.014268][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 727.025285][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 727.035081][ T5845] Bluetooth: hci1: command tx timeout [ 727.042794][ T5912] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 727.052726][ T5912] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 727.054334][ T6107] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 727.085873][ T5912] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 727.096112][ T5912] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 727.104225][ T5912] usb 3-1: Manufacturer: syz [ 727.111897][ T5912] usb 3-1: config 0 descriptor?? [ 727.139046][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.151787][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.162382][ T36] bond0 (unregistering): Released all slaves [ 727.222628][ T6107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.265544][ T6107] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 727.285969][ T36] tipc: Left network mode [ 727.287441][ T6107] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 727.316542][ T6107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.346719][ T6107] usb 2-1: config 0 descriptor?? [ 727.412455][ T6107] usb 1-1: USB disconnect, device number 96 [ 727.510383][ T5912] rc_core: IR keymap rc-hauppauge not found [ 727.520182][ T5912] Registered IR keymap rc-empty [ 727.535013][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 727.569680][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 727.658296][ T5912] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 727.715999][ T5912] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input214 [ 727.756446][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 727.799817][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 727.809358][ T36] hsr_slave_0: left promiscuous mode [ 727.820075][ T36] hsr_slave_1: left promiscuous mode [ 727.830284][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 727.845066][ T36] veth1_macvtap: left promiscuous mode [ 727.854784][ T36] veth0_macvtap: left promiscuous mode [ 727.861052][ T36] veth1_vlan: left promiscuous mode [ 727.866397][ T36] veth0_vlan: left promiscuous mode [ 727.879844][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 727.911122][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 727.959708][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 727.994017][ T5858] Bluetooth: hci2: command 0x2016 tx timeout [ 728.016702][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 728.059730][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 728.104650][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 728.140626][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 728.185152][ T5912] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 728.209270][ T5912] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 728.243296][ T5912] usb 3-1: USB disconnect, device number 92 [ 728.301402][T13971] FAULT_INJECTION: forcing a failure. [ 728.301402][T13971] name failslab, interval 1, probability 0, space 0, times 0 [ 728.338129][T13971] CPU: 0 UID: 0 PID: 13971 Comm: syz.0.2604 Tainted: G L syzkaller #0 PREEMPT(full) [ 728.338161][T13971] Tainted: [L]=SOFTLOCKUP [ 728.338169][T13971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 728.338181][T13971] Call Trace: [ 728.338189][T13971] [ 728.338198][T13971] dump_stack_lvl+0xe8/0x150 [ 728.338239][T13971] should_fail_ex+0x412/0x560 [ 728.338272][T13971] should_failslab+0xa8/0x100 [ 728.338297][T13971] __kmalloc_noprof+0xe8/0x760 [ 728.338330][T13971] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 728.338359][T13971] tomoyo_realpath_from_path+0xe3/0x5d0 [ 728.338383][T13971] ? tomoyo_domain+0xd7/0x130 [ 728.338410][T13971] ? tomoyo_path_number_perm+0x219/0x630 [ 728.338441][T13971] tomoyo_path_number_perm+0x246/0x630 [ 728.338474][T13971] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 728.338503][T13971] ? __lock_acquire+0x6b5/0x2cf0 [ 728.338550][T13971] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 728.338606][T13971] ? __fget_files+0x2a/0x420 [ 728.338637][T13971] ? __fget_files+0x2a/0x420 [ 728.338663][T13971] ? __fget_files+0x3a0/0x420 [ 728.338690][T13971] ? __fget_files+0x2a/0x420 [ 728.338722][T13971] security_file_ioctl+0xc3/0x2a0 [ 728.338752][T13971] __se_sys_ioctl+0x47/0x170 [ 728.338773][T13971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.338807][T13971] do_syscall_64+0x15f/0xf80 [ 728.338837][T13971] ? trace_irq_disable+0x3b/0x140 [ 728.338864][T13971] ? clear_bhb_loop+0x40/0x90 [ 728.338891][T13971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.338913][T13971] RIP: 0033:0x7f49e139c799 [ 728.338937][T13971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.338956][T13971] RSP: 002b:00007f49e2170028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 728.338980][T13971] RAX: ffffffffffffffda RBX: 00007f49e1615fa0 RCX: 00007f49e139c799 [ 728.338996][T13971] RDX: 0000200000000080 RSI: 000000004048aecb RDI: 0000000000000005 [ 728.339011][T13971] RBP: 00007f49e2170090 R08: 0000000000000000 R09: 0000000000000000 [ 728.339025][T13971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.339038][T13971] R13: 00007f49e1616038 R14: 00007f49e1615fa0 R15: 00007fffc8319418 [ 728.339074][T13971] [ 728.421441][T13971] ERROR: Out of memory at tomoyo_realpath_from_path. [ 728.813914][ T36] team0 (unregistering): Port device team_slave_1 removed [ 728.859315][ T36] team0 (unregistering): Port device team_slave_0 removed [ 729.110067][T11690] Bluetooth: hci1: command tx timeout [ 729.243183][T13992] FAULT_INJECTION: forcing a failure. [ 729.243183][T13992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.256505][T13992] CPU: 0 UID: 0 PID: 13992 Comm: syz.2.2608 Tainted: G L syzkaller #0 PREEMPT(full) [ 729.256535][T13992] Tainted: [L]=SOFTLOCKUP [ 729.256542][T13992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 729.256554][T13992] Call Trace: [ 729.256563][T13992] [ 729.256571][T13992] dump_stack_lvl+0xe8/0x150 [ 729.256608][T13992] should_fail_ex+0x412/0x560 [ 729.256635][T13992] _copy_from_user+0x2d/0xb0 [ 729.256663][T13992] ___sys_sendmsg+0x1c6/0x360 [ 729.256691][T13992] ? __lock_acquire+0x6b5/0x2cf0 [ 729.256722][T13992] ? __pfx____sys_sendmsg+0x10/0x10 [ 729.256779][T13992] ? __fget_files+0x2a/0x420 [ 729.256802][T13992] ? __fget_files+0x3a0/0x420 [ 729.256845][T13992] __x64_sys_sendmsg+0x1bd/0x2a0 [ 729.256875][T13992] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 729.256911][T13992] ? __pfx_ksys_write+0x10/0x10 [ 729.256947][T13992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.256967][T13992] do_syscall_64+0x15f/0xf80 [ 729.256994][T13992] ? trace_irq_disable+0x3b/0x140 [ 729.257016][T13992] ? clear_bhb_loop+0x40/0x90 [ 729.257039][T13992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.257057][T13992] RIP: 0033:0x7f814579c799 [ 729.257075][T13992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.257091][T13992] RSP: 002b:00007f814672d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.257111][T13992] RAX: ffffffffffffffda RBX: 00007f8145a15fa0 RCX: 00007f814579c799 [ 729.257125][T13992] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 729.257137][T13992] RBP: 00007f814672d090 R08: 0000000000000000 R09: 0000000000000000 [ 729.257148][T13992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.257158][T13992] R13: 00007f8145a16038 R14: 00007f8145a15fa0 R15: 00007ffc348b1298 [ 729.257186][T13992] [ 729.554501][T13997] FAULT_INJECTION: forcing a failure. [ 729.554501][T13997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.557483][T13916] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 729.567695][T13997] CPU: 0 UID: 0 PID: 13997 Comm: syz.2.2609 Tainted: G L syzkaller #0 PREEMPT(full) [ 729.567728][T13997] Tainted: [L]=SOFTLOCKUP [ 729.567736][T13997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 729.567749][T13997] Call Trace: [ 729.567757][T13997] [ 729.567767][T13997] dump_stack_lvl+0xe8/0x150 [ 729.567806][T13997] should_fail_ex+0x412/0x560 [ 729.567902][T13997] _copy_from_user+0x2d/0xb0 [ 729.568014][T13997] __sys_sendto+0x2b0/0x710 [ 729.568105][T13997] ? __pfx___sys_sendto+0x10/0x10 [ 729.568176][T13997] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 729.568299][T13997] ? __fget_files+0x3a0/0x420 [ 729.568399][T13997] ? ksys_write+0x242/0x270 [ 729.568508][T13997] ? __pfx_ksys_write+0x10/0x10 [ 729.568609][T13997] __x64_sys_sendto+0xde/0x100 [ 729.568691][T13997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.568752][T13997] do_syscall_64+0x15f/0xf80 [ 729.568827][T13997] ? trace_irq_disable+0x3b/0x140 [ 729.568897][T13997] ? clear_bhb_loop+0x40/0x90 [ 729.568969][T13997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.569036][T13997] RIP: 0033:0x7f814579c799 [ 729.569096][T13997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.569158][T13997] RSP: 002b:00007f814672d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 729.569220][T13997] RAX: ffffffffffffffda RBX: 00007f8145a15fa0 RCX: 00007f814579c799 [ 729.569273][T13997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 729.569328][T13997] RBP: 00007f814672d090 R08: 0000200000000140 R09: 000000000000001c [ 729.569381][T13997] R10: 0000000028004044 R11: 0000000000000246 R12: 0000000000000001 [ 729.569427][T13997] R13: 00007f8145a16038 R14: 00007f8145a15fa0 R15: 00007ffc348b1298 [ 729.569517][T13997] [ 729.849022][ T807] usb 2-1: USB disconnect, device number 94 [ 729.964770][T13916] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 729.976679][T13916] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 729.999892][ T36] IPVS: stop unused estimator thread 0... [ 730.042074][T13916] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 730.072311][T11690] Bluetooth: hci2: command 0x2016 tx timeout [ 730.104493][T13061] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 730.213876][T13916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.241768][T13916] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.255007][ T1021] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.262240][ T1021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.270277][ T5912] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 730.279058][T13061] usb 3-1: Using ep0 maxpacket: 32 [ 730.290862][T13061] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 730.299435][T13061] usb 3-1: config 0 has no interface number 0 [ 730.310804][T13061] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 730.329163][ T1021] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.336413][ T1021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.344040][ T5884] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 730.359227][T13061] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 730.369001][T13061] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.377620][T13061] usb 3-1: Product: syz [ 730.382225][T13061] usb 3-1: Manufacturer: syz [ 730.386924][T13061] usb 3-1: SerialNumber: syz [ 730.404397][T13061] usb 3-1: config 0 descriptor?? [ 730.412914][T14001] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 730.449654][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 730.463264][ T5912] usb 2-1: config 0 has no interfaces? [ 730.469618][ T5912] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 730.483016][T13916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 730.493901][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.520025][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 730.528038][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.544994][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 730.565630][ T5912] usb 2-1: config 0 descriptor?? [ 730.572508][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 730.587006][ T5884] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 730.597706][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 730.613251][ T5884] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 730.626308][ T5884] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 730.634155][T14001] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 730.636578][ T5884] usb 1-1: Manufacturer: syz [ 730.657801][ T5884] usb 1-1: config 0 descriptor?? [ 730.812480][ T10] usb 2-1: USB disconnect, device number 95 [ 730.836890][T13916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.864903][T13061] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 730.882701][T13061] asix 3-1:0.188: probe with driver asix failed with error -32 [ 730.925015][T13916] veth0_vlan: entered promiscuous mode [ 730.946540][T13916] veth1_vlan: entered promiscuous mode [ 730.972447][ T5884] rc_core: IR keymap rc-hauppauge not found [ 730.974819][T13916] veth0_macvtap: entered promiscuous mode [ 730.982163][ T5884] Registered IR keymap rc-empty [ 730.989238][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 731.007614][T13916] veth1_macvtap: entered promiscuous mode [ 731.013602][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 731.034640][T13916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.048890][T13916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.056165][ T5884] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 731.068063][ T5884] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input215 [ 731.091843][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 731.104175][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.120101][ T5845] Bluetooth: hci0: command 0x2016 tx timeout [ 731.132386][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.146243][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 731.155312][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.164496][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.173912][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 731.199643][ T5858] Bluetooth: hci1: command tx timeout [ 731.211932][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 731.280161][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 731.299352][ T1021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.309421][ T1021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.309760][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 731.345486][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 731.383783][ T1021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.394375][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 731.404576][ T1021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.441457][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 731.472097][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 731.512664][ T5884] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 731.529599][ T5884] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 731.555874][ T5884] usb 1-1: USB disconnect, device number 97 [ 731.926519][T14043] FAULT_INJECTION: forcing a failure. [ 731.926519][T14043] name failslab, interval 1, probability 0, space 0, times 0 [ 731.940791][T14043] CPU: 1 UID: 0 PID: 14043 Comm: syz.0.2616 Tainted: G L syzkaller #0 PREEMPT(full) [ 731.940816][T14043] Tainted: [L]=SOFTLOCKUP [ 731.940822][T14043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 731.940832][T14043] Call Trace: [ 731.940838][T14043] [ 731.940845][T14043] dump_stack_lvl+0xe8/0x150 [ 731.940874][T14043] should_fail_ex+0x412/0x560 [ 731.940896][T14043] should_failslab+0xa8/0x100 [ 731.940913][T14043] ? do_getname+0x2e/0x250 [ 731.940931][T14043] kmem_cache_alloc_noprof+0x87/0x650 [ 731.940960][T14043] do_getname+0x2e/0x250 [ 731.940976][T14043] ? __se_sys_symlink+0x1f/0x2b0 [ 731.940997][T14043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.941014][T14043] __se_sys_symlink+0x2b/0x2b0 [ 731.941031][T14043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.941048][T14043] do_syscall_64+0x15f/0xf80 [ 731.941070][T14043] ? trace_irq_disable+0x3b/0x140 [ 731.941089][T14043] ? clear_bhb_loop+0x40/0x90 [ 731.941108][T14043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.941132][T14043] RIP: 0033:0x7f49e139c799 [ 731.941146][T14043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.941160][T14043] RSP: 002b:00007f49e2170028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 731.941176][T14043] RAX: ffffffffffffffda RBX: 00007f49e1615fa0 RCX: 00007f49e139c799 [ 731.941188][T14043] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000080 [ 731.941199][T14043] RBP: 00007f49e2170090 R08: 0000000000000000 R09: 0000000000000000 [ 731.941209][T14043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.941218][T14043] R13: 00007f49e1616038 R14: 00007f49e1615fa0 R15: 00007fffc8319418 [ 731.941242][T14043] [ 732.209646][T13061] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 732.379834][T13061] usb 4-1: Using ep0 maxpacket: 32 [ 732.409763][T13061] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.429579][T13061] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.449870][T13061] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 732.462562][T14047] fuse: Bad value for 'user_id' [ 732.468117][T14047] fuse: Bad value for 'user_id' [ 732.482578][T13061] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 732.492236][T13061] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.503560][T13061] usb 4-1: config 0 descriptor?? [ 732.869759][ T5884] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 732.879166][ T29] usb 3-1: USB disconnect, device number 93 [ 732.946719][T13061] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.001D/input/input216 [ 732.975585][T13061] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.001D/input/input217 [ 733.037011][ T5884] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.074638][T13061] kye 0003:0458:5011.001D: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 733.088407][ T5884] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 733.116037][ T5884] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 733.132809][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 733.163470][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.188937][T13061] usb 4-1: USB disconnect, device number 86 [ 733.196013][ T5858] Bluetooth: hci0: command 0x2016 tx timeout [ 733.212151][ T5884] usb 2-1: config 0 descriptor?? [ 733.272327][ T5858] Bluetooth: hci1: command tx timeout [ 733.291220][T14056] fido_id[14056]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 733.649721][ T6107] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 733.690437][T14061] atomic_op ffff88805b663998 conn xmit_atomic 0000000000000000 [ 733.812735][ T6107] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 733.822207][ T6107] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 733.832916][ T6107] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 733.846123][ T6107] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 733.857535][ T6107] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 733.871614][ T6107] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 733.880993][ T6107] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 733.889033][ T6107] usb 1-1: Product: syz [ 733.893676][ T6107] usb 1-1: Manufacturer: syz [ 733.904483][ T6107] cdc_wdm 1-1:1.0: skipping garbage [ 733.911138][ T6107] cdc_wdm 1-1:1.0: skipping garbage [ 733.918249][ T6107] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 733.925295][ T6107] cdc_wdm 1-1:1.0: Unknown control protocol [ 734.117922][ T6107] usb 1-1: USB disconnect, device number 98 [ 734.529638][ T807] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 734.668594][T14077] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2626'. [ 734.678093][T14077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2626'. [ 734.679805][ T807] usb 3-1: Using ep0 maxpacket: 16 [ 734.698998][ T807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.712536][ T807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 734.723711][ T807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 734.734556][ T807] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 734.744431][ T807] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 734.758558][ T807] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 734.768961][ T807] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 734.777260][ T807] usb 3-1: Manufacturer: syz [ 734.784340][ T807] usb 3-1: config 0 descriptor?? [ 734.939609][T13061] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 735.049615][ T807] rc_core: IR keymap rc-hauppauge not found [ 735.055741][ T807] Registered IR keymap rc-empty [ 735.060846][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 735.079806][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 735.100605][ T807] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 735.115048][ T807] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input218 [ 735.117268][T13061] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 735.136966][T13061] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 735.142291][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 735.148539][T13061] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 735.163623][T13061] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 735.170270][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 735.174931][T13061] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 735.198212][T13061] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 735.211811][T13061] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 735.221134][T13061] usb 1-1: Product: syz [ 735.224934][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 735.225361][T13061] usb 1-1: Manufacturer: syz [ 735.246586][T13061] cdc_wdm 1-1:1.0: skipping garbage [ 735.250666][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 735.261202][T13061] cdc_wdm 1-1:1.0: skipping garbage [ 735.272157][ T5858] Bluetooth: hci0: command 0x2016 tx timeout [ 735.281227][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 735.291127][T13061] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 735.297235][T13061] cdc_wdm 1-1:1.0: Unknown control protocol [ 735.301745][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 735.339883][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 735.362743][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 735.370942][T14083] FAULT_INJECTION: forcing a failure. [ 735.370942][T14083] name failslab, interval 1, probability 0, space 0, times 0 [ 735.384725][T14083] CPU: 0 UID: 0 PID: 14083 Comm: syz.3.2627 Tainted: G L syzkaller #0 PREEMPT(full) [ 735.384760][T14083] Tainted: [L]=SOFTLOCKUP [ 735.384769][T14083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 735.384783][T14083] Call Trace: [ 735.384791][T14083] [ 735.384801][T14083] dump_stack_lvl+0xe8/0x150 [ 735.384843][T14083] should_fail_ex+0x412/0x560 [ 735.384878][T14083] should_failslab+0xa8/0x100 [ 735.384905][T14083] __kmalloc_noprof+0xe8/0x760 [ 735.384940][T14083] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 735.384969][T14083] tomoyo_realpath_from_path+0xe3/0x5d0 [ 735.384994][T14083] ? tomoyo_domain+0xd7/0x130 [ 735.385022][T14083] ? tomoyo_path_number_perm+0x219/0x630 [ 735.385054][T14083] tomoyo_path_number_perm+0x246/0x630 [ 735.385087][T14083] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 735.385115][T14083] ? __lock_acquire+0x6b5/0x2cf0 [ 735.385164][T14083] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 735.385223][T14083] ? __fget_files+0x2a/0x420 [ 735.385257][T14083] ? __fget_files+0x2a/0x420 [ 735.385284][T14083] ? __fget_files+0x3a0/0x420 [ 735.385311][T14083] ? __fget_files+0x2a/0x420 [ 735.385344][T14083] security_file_ioctl+0xc3/0x2a0 [ 735.385372][T14083] __se_sys_ioctl+0x47/0x170 [ 735.385391][T14083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.385414][T14083] do_syscall_64+0x15f/0xf80 [ 735.385444][T14083] ? trace_irq_disable+0x3b/0x140 [ 735.385472][T14083] ? clear_bhb_loop+0x40/0x90 [ 735.385499][T14083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.385519][T14083] RIP: 0033:0x7ff91159c799 [ 735.385539][T14083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.385558][T14083] RSP: 002b:00007ff912437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 735.385580][T14083] RAX: ffffffffffffffda RBX: 00007ff911815fa0 RCX: 00007ff91159c799 [ 735.385597][T14083] RDX: 0000200000000500 RSI: 00000000c058565d RDI: 0000000000000003 [ 735.385612][T14083] RBP: 00007ff912437090 R08: 0000000000000000 R09: 0000000000000000 [ 735.385626][T14083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.385639][T14083] R13: 00007ff911816038 R14: 00007ff911815fa0 R15: 00007ffef200fd08 [ 735.385684][T14083] [ 735.385694][T14083] ERROR: Out of memory at tomoyo_realpath_from_path. [ 735.391069][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 735.397323][T14083] use of bytesused == 0 is deprecated and will be removed in the future, [ 735.437511][ T807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 735.439046][T14083] use the actual size instead. [ 735.533711][ T807] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 735.665211][ T807] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 735.678126][T13061] usb 1-1: USB disconnect, device number 99 [ 735.727805][ T807] usb 3-1: USB disconnect, device number 94 [ 735.779439][ T5884] usb 2-1: USB disconnect, device number 96 [ 736.030512][ T6107] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 736.189723][ T6107] usb 4-1: Using ep0 maxpacket: 32 [ 736.197101][ T6107] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 736.206635][ T6107] usb 4-1: config 0 has no interface number 0 [ 736.212670][ T5884] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 736.213412][ T6107] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 736.234568][ T6107] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 736.243987][ T6107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.252155][ T6107] usb 4-1: Product: syz [ 736.256527][ T6107] usb 4-1: Manufacturer: syz [ 736.261280][ T6107] usb 4-1: SerialNumber: syz [ 736.269121][ T6107] usb 4-1: config 0 descriptor?? [ 736.276396][T14085] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 736.380217][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 736.392602][ T5884] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 736.407258][ T5884] usb 2-1: config 179 has no interface number 0 [ 736.414412][ T5884] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 736.425844][ T5884] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 736.438593][ T5884] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 736.451629][ T5884] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 736.464308][ T5884] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 736.479090][ T5884] usb 2-1: config 179 interface 65 has no altsetting 0 [ 736.486128][ T5884] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 736.498672][T14085] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 736.510167][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.576308][ T5884] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input219 [ 736.630447][ T5198] input input219: unable to receive magic message: -110 [ 736.640639][ T5198] input input219: unable to receive magic message: -32 [ 736.659252][ T5198] input input219: unable to receive magic message: -32 [ 736.684008][ T5198] input input219: unable to receive magic message: -32 [ 736.721266][ T6107] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 736.759917][ T5859] input input219: unable to receive magic message: -32 [ 736.764081][ T6107] asix 4-1:0.188: probe with driver asix failed with error -32 [ 736.842434][ T5198] input input219: unable to receive magic message: -32 [ 736.865511][ T5198] input input219: unable to receive magic message: -32 [ 736.994685][T13061] usb 2-1: USB disconnect, device number 97 [ 737.000795][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 737.349713][ T5845] Bluetooth: hci0: command 0x2016 tx timeout [ 738.019888][ T6107] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 738.201905][ T6107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.213613][ T6107] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 738.223168][ T6107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.231334][ T5845] Bluetooth: hci4: command 0x2016 tx timeout [ 738.238427][ T6107] usb 2-1: config 0 descriptor?? [ 738.242990][ T5858] ================================================================== [ 738.251482][ T5858] BUG: KASAN: slab-use-after-free in hci_conn_drop+0x34/0x2a0 [ 738.259059][ T5858] Write of size 4 at addr ffff88803553c010 by task kworker/u9:8/5858 [ 738.267144][ T5858] [ 738.269489][ T5858] CPU: 0 UID: 0 PID: 5858 Comm: kworker/u9:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 738.269520][ T5858] Tainted: [L]=SOFTLOCKUP [ 738.269528][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 738.269543][ T5858] Workqueue: hci4 hci_cmd_sync_work [ 738.269652][ T5858] Call Trace: [ 738.269659][ T5858] [ 738.269667][ T5858] dump_stack_lvl+0xe8/0x150 [ 738.269696][ T5858] print_address_description+0x55/0x1e0 [ 738.269734][ T5858] ? hci_conn_drop+0x34/0x2a0 [ 738.269750][ T5858] print_report+0x58/0x70 [ 738.269773][ T5858] kasan_report+0x117/0x150 [ 738.269792][ T5858] ? hci_conn_drop+0x34/0x2a0 [ 738.269811][ T5858] kasan_check_range+0x264/0x2c0 [ 738.269830][ T5858] hci_conn_drop+0x34/0x2a0 [ 738.269844][ T5858] ? __pfx_le_read_features_complete+0x10/0x10 [ 738.269868][ T5858] hci_cmd_sync_work+0x262/0x400 [ 738.269893][ T5858] ? process_scheduled_works+0xa70/0x1860 [ 738.269921][ T5858] process_scheduled_works+0xb5d/0x1860 [ 738.269959][ T5858] ? __pfx_process_scheduled_works+0x10/0x10 [ 738.269987][ T5858] ? assign_work+0x3d5/0x5e0 [ 738.270013][ T5858] worker_thread+0xa53/0xfc0 [ 738.270051][ T5858] kthread+0x388/0x470 [ 738.270069][ T5858] ? __pfx_worker_thread+0x10/0x10 [ 738.270095][ T5858] ? __pfx_kthread+0x10/0x10 [ 738.270114][ T5858] ret_from_fork+0x514/0xb70 [ 738.270166][ T5858] ? __pfx_ret_from_fork+0x10/0x10 [ 738.270191][ T5858] ? __switch_to+0xc7d/0x1420 [ 738.270216][ T5858] ? __pfx_kthread+0x10/0x10 [ 738.270234][ T5858] ret_from_fork_asm+0x1a/0x30 [ 738.270258][ T5858] [ 738.270264][ T5858] [ 738.425722][ T5858] Allocated by task 5845: [ 738.430064][ T5858] kasan_save_track+0x3e/0x80 [ 738.434769][ T5858] __kasan_kmalloc+0x93/0xb0 [ 738.439379][ T5858] __kmalloc_cache_noprof+0x31c/0x660 [ 738.444787][ T5858] __hci_conn_add+0x3c4/0x1e00 [ 738.449570][ T5858] le_conn_complete_evt+0x706/0x1430 [ 738.454883][ T5858] hci_le_conn_complete_evt+0x187/0x470 [ 738.460459][ T5858] hci_event_packet+0x7af/0x12c0 [ 738.465427][ T5858] hci_rx_work+0x3ee/0x1040 [ 738.469951][ T5858] process_scheduled_works+0xb5d/0x1860 [ 738.475525][ T5858] worker_thread+0xa53/0xfc0 [ 738.480143][ T5858] kthread+0x388/0x470 [ 738.484226][ T5858] ret_from_fork+0x514/0xb70 [ 738.488846][ T5858] ret_from_fork_asm+0x1a/0x30 [ 738.493623][ T5858] [ 738.495956][ T5858] Freed by task 5845: [ 738.499949][ T5858] kasan_save_track+0x3e/0x80 [ 738.504648][ T5858] kasan_save_free_info+0x46/0x50 [ 738.509695][ T5858] __kasan_slab_free+0x5c/0x80 [ 738.514517][ T5858] kfree+0x1c5/0x640 [ 738.518435][ T5858] device_release+0xc4/0x1f0 [ 738.523058][ T5858] kobject_put+0x228/0x560 [ 738.527486][ T5858] hci_conn_del+0xc36/0x1230 [ 738.532088][ T5858] hci_disconn_complete_evt+0x64e/0x950 [ 738.537652][ T5858] hci_event_packet+0x805/0x12c0 [ 738.542609][ T5858] hci_rx_work+0x3ee/0x1040 [ 738.547132][ T5858] process_scheduled_works+0xb5d/0x1860 [ 738.552696][ T5858] worker_thread+0xa53/0xfc0 [ 738.557308][ T5858] kthread+0x388/0x470 [ 738.561395][ T5858] ret_from_fork+0x514/0xb70 [ 738.566010][ T5858] ret_from_fork_asm+0x1a/0x30 [ 738.570787][ T5858] [ 738.573121][ T5858] The buggy address belongs to the object at ffff88803553c000 [ 738.573121][ T5858] which belongs to the cache kmalloc-8k of size 8192 [ 738.587185][ T5858] The buggy address is located 16 bytes inside of [ 738.587185][ T5858] freed 8192-byte region [ffff88803553c000, ffff88803553e000) [ 738.600994][ T5858] [ 738.603333][ T5858] The buggy address belongs to the physical page: [ 738.609762][ T5858] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35538 [ 738.618532][ T5858] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 738.627041][ T5858] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 738.634611][ T5858] page_type: f5(slab) [ 738.638611][ T5858] raw: 00fff00000000040 ffff88813fe33280 dead000000000100 dead000000000122 [ 738.647206][ T5858] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 738.655801][ T5858] head: 00fff00000000040 ffff88813fe33280 dead000000000100 dead000000000122 [ 738.664485][ T5858] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 738.673181][ T5858] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 738.681982][ T5858] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 738.690659][ T5858] page dumped because: kasan: bad access detected [ 738.697515][ T5858] page_owner tracks the page as allocated [ 738.703237][ T5858] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5842, tgid 5842 (syz-executor), ts 79855640400, free_ts 60768396874 [ 738.724439][ T5858] post_alloc_hook+0x231/0x280 [ 738.729230][ T5858] get_page_from_freelist+0x239b/0x2440 [ 738.734793][ T5858] __alloc_frozen_pages_noprof+0x233/0x3d0 [ 738.740618][ T5858] allocate_slab+0x77/0x660 [ 738.745137][ T5858] refill_objects+0x339/0x3d0 [ 738.749831][ T5858] __pcs_replace_empty_main+0x321/0x720 [ 738.755394][ T5858] __kvmalloc_node_noprof+0x657/0x8a0 [ 738.760787][ T5858] pfifo_fast_init+0x112/0x6c0 [ 738.765659][ T5858] qdisc_create_dflt+0x13b/0x4e0 [ 738.770620][ T5858] dev_activate+0x378/0x1150 [ 738.775235][ T5858] __dev_open+0x67a/0x830 [ 738.779646][ T5858] __dev_change_flags+0x1f7/0x690 [ 738.784732][ T5858] netif_change_flags+0x88/0x1a0 [ 738.789694][ T5858] do_setlink+0xf82/0x4590 [ 738.794181][ T5858] rtnl_newlink+0x15a9/0x1be0 [ 738.798898][ T5858] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 738.803881][ T5858] page last free pid 5681 tgid 5681 stack trace: [ 738.810218][ T5858] __free_frozen_pages+0xbc7/0xd30 [ 738.815361][ T5858] __slab_free+0x274/0x2c0 [ 738.819805][ T5858] qlist_free_all+0x99/0x100 [ 738.824418][ T5858] kasan_quarantine_reduce+0x148/0x160 [ 738.829985][ T5858] __kasan_slab_alloc+0x22/0x80 [ 738.834859][ T5858] kmem_cache_alloc_noprof+0x2bc/0x650 [ 738.840426][ T5858] do_getname+0x2e/0x250 [ 738.844685][ T5858] vfs_fstatat+0x45/0x170 [ 738.849039][ T5858] __x64_sys_newfstatat+0x151/0x200 [ 738.854254][ T5858] do_syscall_64+0x15f/0xf80 [ 738.858864][ T5858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.864775][ T5858] [ 738.867107][ T5858] Memory state around the buggy address: [ 738.872751][ T5858] ffff88803553bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 738.880825][ T5858] ffff88803553bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 738.888896][ T5858] >ffff88803553c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 738.896975][ T5858] ^ [ 738.901585][ T5858] ffff88803553c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 738.909670][ T5858] ffff88803553c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 738.917739][ T5858] ================================================================== [ 738.934707][ T5858] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 738.941960][ T5858] CPU: 0 UID: 0 PID: 5858 Comm: kworker/u9:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 738.953003][ T5858] Tainted: [L]=SOFTLOCKUP [ 738.957343][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 738.967417][ T5858] Workqueue: hci4 hci_cmd_sync_work [ 738.972650][ T5858] Call Trace: [ 738.975980][ T5858] [ 738.978930][ T5858] vpanic+0x56c/0xa60 [ 738.982966][ T5858] ? __pfx_vpanic+0x10/0x10 [ 738.987497][ T5858] panic+0xc5/0xd0 [ 738.991233][ T5858] ? __pfx_panic+0x10/0x10 [ 738.995668][ T5858] ? preempt_schedule_thunk+0x16/0x30 [ 739.001061][ T5858] ? preempt_schedule_thunk+0x16/0x30 [ 739.006453][ T5858] ? hci_conn_drop+0x34/0x2a0 [ 739.011144][ T5858] check_panic_on_warn+0x89/0xb0 [ 739.016104][ T5858] ? hci_conn_drop+0x34/0x2a0 [ 739.020796][ T5858] end_report+0x73/0x170 [ 739.025061][ T5858] ? hci_conn_drop+0x34/0x2a0 [ 739.029752][ T5858] kasan_report+0x128/0x150 [ 739.034276][ T5858] ? hci_conn_drop+0x34/0x2a0 [ 739.038966][ T5858] kasan_check_range+0x264/0x2c0 [ 739.043918][ T5858] hci_conn_drop+0x34/0x2a0 [ 739.048443][ T5858] ? __pfx_le_read_features_complete+0x10/0x10 [ 739.054654][ T5858] hci_cmd_sync_work+0x262/0x400 [ 739.059626][ T5858] ? process_scheduled_works+0xa70/0x1860 [ 739.065386][ T5858] process_scheduled_works+0xb5d/0x1860 [ 739.070979][ T5858] ? __pfx_process_scheduled_works+0x10/0x10 [ 739.076990][ T5858] ? assign_work+0x3d5/0x5e0 [ 739.081613][ T5858] worker_thread+0xa53/0xfc0 [ 739.086240][ T5858] kthread+0x388/0x470 [ 739.090334][ T5858] ? __pfx_worker_thread+0x10/0x10 [ 739.095476][ T5858] ? __pfx_kthread+0x10/0x10 [ 739.100090][ T5858] ret_from_fork+0x514/0xb70 [ 739.104708][ T5858] ? __pfx_ret_from_fork+0x10/0x10 [ 739.109847][ T5858] ? __switch_to+0xc7d/0x1420 [ 739.114551][ T5858] ? __pfx_kthread+0x10/0x10 [ 739.119165][ T5858] ret_from_fork_asm+0x1a/0x30 [ 739.123957][ T5858] [ 739.127591][ T5858] Kernel Offset: disabled [ 739.131934][ T5858] Rebooting in 86400 seconds..