last executing test programs: 44.224210879s ago: executing program 0 (id=1535): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002340)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x84004}, 0x20000080) 44.049928452s ago: executing program 0 (id=1538): r0 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) bind$packet(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x97, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) fanotify_init(0x8, 0x80000) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4044015}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20000010}, 0x20044000) 43.916112905s ago: executing program 0 (id=1540): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x1) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8901, &(0x7f0000000040)={'vlan1\x00', 0x10000007}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e0", 0x9}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 6.304207843s ago: executing program 1 (id=1763): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000800)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x3, 0x3, 0x1, {0xa, 0x4e22, 0x2, @mcast2}}}, 0x32) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f00000000c0)) r4 = fcntl$dupfd(r3, 0x0, r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), r4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, &(0x7f00000001c0)) write(0xffffffffffffffff, &(0x7f0000000280)="24e5450305ba2c82529b95b19d74029f6161ca34ef9bbd4f0ad2ccf15c25bb447205404c10f2124304685b91a4aff318a577172e530596e07935e5ab5157218dad79c01357048d", 0x47) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xffffffffffffffff) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0x7fff}, 0x80, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x35, &(0x7f0000000980)={0x0, 0x0}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x0, 0x0, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000240), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, 0x4}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @empty, @broadcast, @multicast1, 0x2}}}, {{@arp={@broadcast, @empty, 0xffffffff, 0xff000000, 0x10, 0x2, {@mac=@remote, {[0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x37a, 0x1, 0x9, 0x41dd, 0x7f, 0x8, 'vxcan1\x00', 'virt_wifi0\x00', {0xff}, {0xff}, 0x0, 0x15b}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @multicast2, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7002fedbdf25010000000000000009410000004c00180000000462726f6164636173742d6c696e6b000000000000000000000000000000000000000000000000000000000000001200"/98], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x10, 0x0, 0x800000001780}]}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r11, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xfffc, 0x0, 0x8001}}) ioctl$SNDRV_TIMER_IOCTL_START(r11, 0x54a0) readv(r11, &(0x7f0000000200)=[{&(0x7f0000004140)=""/4101, 0xb}], 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000300)) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000180)={0x41000, 0x4000, 0xb7, 0x9, 0xdc}) 5.878484853s ago: executing program 1 (id=1764): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r3, r4, 0x3, 0x0, 0xffffffff, 0x801, {0xac7c, 0x1, 0x3, 0x58, 0xf4b, 0x1, 0x2, 0x5, 0x412e, 0x897b, 0x1000, 0x7f, 0x11, 0xfffffffe, "fe1d00003413000000000020b42717e47f00"}}) 5.616128278s ago: executing program 1 (id=1765): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x81, 0xfffffff9, 0xa}) syz_usb_control_io$rtl8150(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000180)={0x81b930b674ac0e14, 0x3, 0xbe, {0xbe, 0x1, "fe7e93320a2c2bb1e43f7f428bf4962b55053edbaa866a07e7c3bacec587f0f795511f8b72ce0a3aac11c1f0d80c0479dbff3920fe825fd90c5b3e3ace0f0939eb7a19672c3c0dc76c51c150646e0d7810e8f62e40de2d95cceb582a847d24f0d155cd2580352ec0421f5530fbb18a332e9708656df780822b9ed706ac3b5f1a65ba72c0887883f0db90a4be2f7c3234a20b31e0ce67d56b9be5da2e5132cb6a53726deb9042c762a582993a4fc13962d24d0affd7c0eee0d456cc5a"}}, &(0x7f0000000580)={0x0, 0x3, 0xd0, @string={0xd0, 0x3, "4cb9dd28246124540ef5f39dcd435d13b4705d9ba5cf721b274072df733891d64719420e1f69bf1f019601e4de5cc472f22ca05fadb6dba5392e3d2aee8fb2464caf9c89f7c4b2880927856036fc6915034c68d91e5921561daa0d3d39641aefb4cb1cd98de3b122538dd0a94bc7e942e02b8303403d3517143577fcb8c64309b819783acb63ea6a24db3815430cf196709e731799329e1bb15af3617d6a35a135bc07446b74b19ffb4d0b15228be4f7ce2a2538fa9196de6d9fd0c7aed7015f9ca3d94df1610b5f506a0adaecf1"}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x95, "1a2ba9cbb82a634c0125ef3acbc66d3c0111c06111064bde709653b83e9709134595572d428cf92d828b59a01a79f04fe87e7f8e582b555f547b0dbde176295e745934ad6344bf71dab08ecbfd8f6aa178990ce42d5c10bce8ae60c762ccfd6463dfdaedf012b855b338c29f63a032d04cf9d276206816bf9cdec4a8a439828f640c5c59bff13288b4757132d025f540e2b889441a"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x38}, &(0x7f0000000440)={0xc0, 0x5, 0x4, "b2551527"}, &(0x7f0000000480)={0x40, 0x5, 0x5, "71bdd5ec1f"}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.416775989s ago: executing program 1 (id=1766): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000280)={{@my=0x1, 0x2}, @hyper, 0x0, 0x6, 0x5, 0x9, 0x0, 0x0, 0x5}) 5.178093112s ago: executing program 1 (id=1767): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000b00)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@userxattr}, {@redirect_dir_nofollow}], [], 0x2c}) 5.054410582s ago: executing program 2 (id=1768): socket$netlink(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x4c, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005f000100007c47c9f9343f152e"], 0x1c}}, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) syz_open_dev$dvb_dvr(&(0x7f0000000140), 0x1, 0x105040) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x9e081) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x72, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffff80000, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0xfffffffffffffffe, 0xf, 0x7ffffffe}, 0x0, 0x0) 5.04862791s ago: executing program 1 (id=1775): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) shutdown(r1, 0x0) syz_usb_connect(0x0, 0x59, &(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000080)=""/17, &(0x7f00000000c0)=0x11) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) (async) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) shutdown(r1, 0x0) (async) syz_usb_connect(0x0, 0x59, &(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x0) (async) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000080)=""/17, &(0x7f00000000c0)=0x11) (async) 4.840697453s ago: executing program 2 (id=1770): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)=@allocspi={0x10c, 0x16, 0x1, 0x70bd27, 0x25dfdbfb, {{{@in=@rand_addr=0x64010102, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, 0x4e22, 0x0, 0x4e20, 0x1ff, 0xe, 0xa0, 0x20, 0x62}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2d}, 0x4d6, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0xfffffffffffff801, 0x5, 0x7, 0x1, 0x4, 0x2, 0x1, 0x10001}, {0x2, 0xd05, 0xb, 0x5}, {0x9, 0x5, 0x1}, 0x70bd28, 0x3507, 0xa, 0x2, 0x2, 0x425f6b5a515837c7}, 0x200, 0x10000}, [@srcaddr={0x14, 0xd, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x24) 4.594592665s ago: executing program 2 (id=1772): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000080)={&(0x7f0000000040)=[{0x2, 0x0, 0x81, 0x2}], 0x1, 0x20, 0x6cd7, 0x81}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 4.480209186s ago: executing program 2 (id=1773): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x81, 0xfffffff9, 0xa}) syz_usb_control_io$rtl8150(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000180)={0x81b930b674ac0e14, 0x3, 0xbe, {0xbe, 0x1, "fe7e93320a2c2bb1e43f7f428bf4962b55053edbaa866a07e7c3bacec587f0f795511f8b72ce0a3aac11c1f0d80c0479dbff3920fe825fd90c5b3e3ace0f0939eb7a19672c3c0dc76c51c150646e0d7810e8f62e40de2d95cceb582a847d24f0d155cd2580352ec0421f5530fbb18a332e9708656df780822b9ed706ac3b5f1a65ba72c0887883f0db90a4be2f7c3234a20b31e0ce67d56b9be5da2e5132cb6a53726deb9042c762a582993a4fc13962d24d0affd7c0eee0d456cc5a"}}, &(0x7f0000000580)={0x0, 0x3, 0xd0, @string={0xd0, 0x3, "4cb9dd28246124540ef5f39dcd435d13b4705d9ba5cf721b274072df733891d64719420e1f69bf1f019601e4de5cc472f22ca05fadb6dba5392e3d2aee8fb2464caf9c89f7c4b2880927856036fc6915034c68d91e5921561daa0d3d39641aefb4cb1cd98de3b122538dd0a94bc7e942e02b8303403d3517143577fcb8c64309b819783acb63ea6a24db3815430cf196709e731799329e1bb15af3617d6a35a135bc07446b74b19ffb4d0b15228be4f7ce2a2538fa9196de6d9fd0c7aed7015f9ca3d94df1610b5f506a0adaecf1"}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x95, "1a2ba9cbb82a634c0125ef3acbc66d3c0111c06111064bde709653b83e9709134595572d428cf92d828b59a01a79f04fe87e7f8e582b555f547b0dbde176295e745934ad6344bf71dab08ecbfd8f6aa178990ce42d5c10bce8ae60c762ccfd6463dfdaedf012b855b338c29f63a032d04cf9d276206816bf9cdec4a8a439828f640c5c59bff13288b4757132d025f540e2b889441a"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x38}, &(0x7f0000000440)={0xc0, 0x5, 0x4, "b2551527"}, &(0x7f0000000480)={0x40, 0x5, 0x5, "71bdd5ec1f"}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.173444126s ago: executing program 3 (id=1774): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000280)={{@my=0x1, 0x2}, @hyper, 0x0, 0x6, 0x5, 0x9, 0x0, 0x0, 0x5}) 4.03387899s ago: executing program 3 (id=1776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f03f, 0x6e}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x15, 0x0, &(0x7f0000000340)) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r2, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, 0x0, 0xdeadbeef, 0x8, 0x0, 0x2000000}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000340)="8ca16f83", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0x18}}], 0x18}}], 0x2, 0x4000804) ioctl$XFS_IOC_FSGROWFSDATA(r5, 0x4010586e, &(0x7f0000000040)={0x200, 0xabf}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r7, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000036007bc32ddf7000fddbdf2503"], 0x14}}, 0x4000) clock_gettime(0x17, 0x0) 3.04391115s ago: executing program 3 (id=1777): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905", @ANYRES64], 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000540)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r1) syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x1e4}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) read$FUSE(0xffffffffffffffff, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0xa) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4020aeb2, &(0x7f0000000900)={0x0, 0x0, @ioapic={0x70000, 0x101, 0xec80, 0x8, 0x0, [{0x6, 0xf9, 0x8, '\x00', 0xed}, {0x2, 0x0, 0xfd, '\x00', 0x5b}, {0x2, 0x4, 0x8, '\x00', 0x8}, {0x5, 0x2, 0x3, '\x00', 0xf1}, {0x3, 0x2, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc9, '\x00', 0x5}, {0x2, 0x3, 0xf, '\x00', 0xfe}, {0x76, 0x0, 0x5, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0xf5}, {0x0, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x7, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x7d, 0x0, 0xa3, '\x00', 0x2}, {0x7, 0x1, 0x6, '\x00', 0x6}, {0xd, 0x4, 0xd, '\x00', 0x6}, {0x28, 0x80, 0x7c, '\x00', 0xb}, {0x3, 0x89, 0x85, '\x00', 0xe}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x3, 0x3, 0xb6, '\x00', 0x7}, {0x5, 0x28, 0x5, '\x00', 0x9}, {0x0, 0x0, 0xb, '\x00', 0x81}, {0xf9, 0xa7, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x5}]}}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0xfffffffffffffffc, {0x3, 0x1, 0x40000000004, 0x0, 0x84, 0x2, {0x0, 0xfffffffffffffffb, 0x4, 0x0, 0xfffffffffffffffd, 0x9, 0x1, 0xfb, 0x0, 0x6000, 0x6, r3, r4, 0x2000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') 2.51003049s ago: executing program 2 (id=1778): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x8e, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x58, 0xf4b, 0x1, 0x2, 0x5, 0x412e, 0xe154, 0x1000, 0x7f, 0x11, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) (fail_nth: 4) 1.111346666s ago: executing program 0 (id=1543): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r0, 0x400, 0x1) r1 = socket(0x2a, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x4, 0x34014c40, 0xffff, 0xfb85, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x1d9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCRMFF(r4, 0x40044581, 0x0) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206"], 0xdd12}], 0x1}, 0x40) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r7}) r8 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r8, 0x402c5639, &(0x7f0000000240)={0x4, 0x4, 0x1000000}) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file1\x00') 908.060152ms ago: executing program 0 (id=1779): socket$netlink(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x4c, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005f000100007c47c9f9343f152e"], 0x1c}}, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) syz_open_dev$dvb_dvr(&(0x7f0000000140), 0x1, 0x105040) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x9e081) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x72, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffff80000, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0xfffffffffffffffe, 0xf, 0x7ffffffe}, 0x0, 0x0) 907.2664ms ago: executing program 2 (id=1780): r0 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0xfffffffd, 0x1000008, 0x1010, 0xffffffffffffffff, 0x20000000) r1 = mmap$IORING_OFF_CQ_RING(0x0, 0x5, 0x9, 0x50, 0xffffffffffffffff, 0x8000000) r2 = syz_io_uring_complete(r0, r1) ioctl$mixer_OSS_ALSAEMULVER(r2, 0x80044df9, &(0x7f0000000000)) r3 = dup3(r2, r2, 0x0) ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BINDER_GET_EXTENDED_ERROR(r3, 0xc00c6211, &(0x7f0000000080)) setns(r2, 0x4000000) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f00000000c0)=""/217) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f00000001c0)="34e667164a80db25c87136d0b63c1c21d960cd9d0a93f922ae8c31472a9d2727ccb252d71a04f650ba8fb4c61e3b1e821f0cde616cb1df518479bb63fe115665b9c0b5c71fee3b35fcc39021380d9666808eab510d0767e0f804751534cee8517083e9b6acead663537324562cdfd8b2facf4478c3505aaeea7463f05b94", 0x7e) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000280)="f0c6c6ab8e445de17dfbd47974b06fef37fce8d1030bbcdf84f7b143b202dde5459a07506a89d26983f24096e715975a4bf9632dc89f9c328aeb5ed3f6cf4ab7aa00cdd9ccc453eda17ef5151fa6812675b05c449b8ac5486d89688bd5eb340882543a3995fdb244251c5ee895a68a51ce51728c1cd77f95181701ef16b5", 0x7e) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000300)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x10) r4 = syz_usb_connect$uac1(0x3, 0xa0, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3042, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x7, 0xd0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x26}, [@processing_unit={0xb, 0x24, 0x7, 0x4, 0x0, 0x2, "8824221d"}, @processing_unit={0x8, 0x24, 0x7, 0x1, 0x0, 0x74, "01"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x300, 0x1, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x7f, 0x1b, 0x40}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xb, 0x4, 0x5, {0x7, 0x25, 0x1, 0xc, 0x9, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x89, 0x1, 0xa, 0xa}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x3, 0x8, {0x7, 0x25, 0x1, 0x8, 0x3, 0xf06}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0x0, 0x86, 0x0, 0x10, 0x7}, 0xf0, &(0x7f0000000480)={0x5, 0xf, 0xf0, 0x2, [@generic={0xe1, 0x10, 0x2, "8d1a69dc0015703155d4a19a25455238afa252e1165ee58a16c0142ee36f96d2aff1d56f6f5d5aeaa4c93cba437c5f463335c8a7019879a85337b4175efbd4c7330769d854b31c6c6bfbd0b3b0b5a3e9c98de3b4c6df602f8e9485938b03c65f7f0662a2be1e8fb8c964ce453744f3d35e701311c3785725fd7639a4b9d7b78522da299a431ee482f687499c3ee443dddc1d492313b7d83e39b2c9ece9a341346c2ec9e9be43482cedcc858f1a674f415d6217a6d529cc84b4514217a4c988753c921143e240855450b203d0aebb96b21df0afaedae4b07b515a0651afdb"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x4, 0x2, 0x8386}]}, 0x1, [{0xe, &(0x7f0000000580)=@string={0xe, 0x3, "9da0d59eb19b6bd31a37405c"}}]}) syz_usb_control_io(r4, &(0x7f0000000780)={0x2c, &(0x7f0000000600)={0x0, 0x21, 0x74, {0x74, 0x21, "dce37b6017afaf8ddeb106d72f2421c79f4c51a7431df56c5a3aade55d942a8faea72fb52880d60bbb49a8f135c8aae3289cce515fc8cc436ddbdc07370557d472b78b30ca8b368beb829d9da5f8b1729d65cfe12c695ff5098f28103fd98c7a0a5f5972366729a5052e4567bdc87453e38e"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}, &(0x7f00000006c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0xce, 0x0, 0xef, 0x2, "9da31613", "adcdaca0"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xc, 0x0, 0x0, 0x19, 0x2, 0x8001, 0x8}}}, &(0x7f0000000c00)={0x84, &(0x7f00000007c0)={0x40, 0x12, 0x5e, "ae18179d93598a03ac9077268340a4c6e11d4703962877bce4d4c1eb8b8a27679db30220576a5e52e158e966ec89b596b4a80dab94f7a5bbbcad603f55f62e5dc2481e9bee63bf6f0636cd57d185922d21d792f5dde6f7af26231b43c3af"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x5d25e1384648649f, 0x3}}, &(0x7f0000000900)={0x20, 0x0, 0x8, {0x100, 0x40, [0xf000]}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0xe9d9}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "0d97"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x7f}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "0af4"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x1556}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0xb0}, &(0x7f0000000bc0)={0x40, 0x21, 0x1}}) fremovexattr(r2, &(0x7f0000000cc0)=@known='trusted.overlay.origin\x00') stat(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r5, 0x6002) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000dc0)={0x7, @raw_data="f8c1108c0c6509ce28b60271dfdada6a6d61bdb70a884e029033ce1768db109c0557e9aa6615b2c5a88e3ce555c69bfd47970395dd74359ce52c0bee0752e990e192852af311bb9a0f4c944e0e92e05aabe2c68f050ab30df3e28778bf0f7ce7942c1e179999128169933a6dc7c46694e46ac2c6ffbb41b486312ecaf2e8670ee5a71a1523e0d523b5643c6701dcfdf73cf1a63df73b81ffcce566540d7d8d30bd9592bf4356ede54d9fafd050c280381076ea279641ef7c1cbfa5cbbbbe419d83bd45d69f799945"}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000ec0)={0x5220, 0x1c, [{0x4, 0x1}, {0x8}, {0xc, 0x1}, {0x7}, {0xd, 0x1}, {0x5, 0x1}, {0xc}, {0xb}, {0xc, 0x1}, {0x4}, {0x4}, {0xf}, {0x1, 0x1}, {0xb}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0xe, 0x1}, {0x2}, {0x2}, {0xe}, {0xc}, {0xb, 0x1}, {0xd}, {0x9}, {0xd}, {0xd, 0x1}]}) sendmsg$tipc(r2, &(0x7f0000001400)={&(0x7f0000000f00)=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000f40)="b4feb74087d62dc9e7723613ab7d1e465e6cb7f94fe09df61a8343b93b5a7c3fc57137ed3ff2ca7cdeea27", 0x2b}, {&(0x7f0000000f80)="fe4e1e8e3df73722ce46b514359abb0ba7a58dcc0a0747b0ebd2", 0x1a}, {&(0x7f0000000fc0)="13c86d1645d347357d8b145f24d3bf91e88adbe1e87990de5208f24f22c5794a31c5d4ed3e3e505156211872a40e0f97aea4271f2eb8ea052a49304573de40aacbd50185ce94176a0f8d497631b82734299503f6d76b2479b80507a5b649daac21380fc7c833e426529f5443ae85fba895e017fa997f3513", 0x78}, {&(0x7f0000001040)="a0039deb18ac9e2dce3609f012f35f598984df9a1b93dfbe87d1ec3165b4d791e78f67a6674fc6f5d25219ff0b3bd0cc155b2134492e6ac35abf1939b4a607152e943126835cf6a5e57232ce48072b969e60686505bb9d57917776a6322697a958c1aea5b50199236ad4605096745e99ba72f248179a048f4b5def516ca36bec37b371123316bb801fb355d85ed83b4e87d0fbd3a7280959c9111cf2bcabad20712b5d04adead596d23bb78abf34162de7", 0xb1}, {&(0x7f0000001100)="369f8784b696266feb76ddd0cbf2fd359507701da9fe316c48253488d020f9df4d7cd1ce407ef580c225c2ce56a6bd96fe02179bf40df5aeb18473fbae0767e18cffa5e313aa53c59faae1daa18c46785e1b2edda01aabc1163545d774cc8987ebf67c08847f9f3c7f632d9f6b73c1cdae1fbdd0c3583d27a83c9bf84902f832f191caf079e628a91e276f0967e96d7426e40b449dc4173f04c7c34c6d430c642b6a5216b11576ff5e61d8ae79fc846b717ae3e7e90ae4a129d36e95c1c4de99dc80bbf4b53eccafd27b5253284fffbaa0f5e489db2bbacf670f9e", 0xdb}, {&(0x7f0000001200)="8472263f122eacd4b10c19e6af68186f4232e653a628a0277ed4ec0c8b4a178bafa1bde94451d597adee77fe26e0aac6790b07a5b985d3d52564672398ab17800632d0501217c236ca3c738fd51f5af62572f215e9e71414c62bfe4e3921f229664e7e88ddf8846e9ed300ba76c31e7480b11252d4922151faa51bc0c3547fb09cde2702424e0c5905b0eb60658a4b520c3353c1f702d619970a4c0caca3d0239af5f74323b3a82e7db6e0ad4441af92dca45429a092b8acca4ffcbe7cb2b7ede4150907fb05dd1cf92a24", 0xcb}, {&(0x7f0000001300)="4f0a2f2411c997204cbb0588f2bdbb61325897a0ff50386ab8d63b4a5500655624286b46e9a2758d47ce3dd8eba24867ae498449e80bb93e48f4656f756e25ccb205f207cf1de5f8a0dea2fa13447d4dc981d448ed84aa389f16cdb1fa84b6e40cc630", 0x63}], 0x7, 0x0, 0x0, 0x8040041}, 0x44800) syz_usb_connect$uac2(0x3, 0xec, &(0x7f0000001440)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x4142, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda, 0x3, 0x1, 0x5, 0x80, 0x6, {0x8, 0xb, 0x0, 0x0, 0x1, 0xb, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x45b4, 0xff, 0x9, 0x8c}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xf, 0x3, 0x8, 0x7, "69a3f9", '\f'}, @as_header={0x10, 0x24, 0x1, 0x3, 0x1, 0x0, 0x5, 0x4, 0x0, 0x2}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x1, 0x6, 0x9, "5cd7b392ee746f"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x6, 0x2, 0xd}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x1000, 0x0, 0x6, "4a4dec45"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x49, 0x14, 0xfc, {0x8, 0x25, 0x1, 0x3, 0x3, 0x2, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0xa, 0x7, 0xb2f7be40ea4818aa, 0x5, 0xa6, 0xf290, 0xc0}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xff, 0x2, 0x5, 0x3, 0x7a}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x7}, @as_header={0x10, 0x24, 0x1, 0xfe, 0xa, 0x3, 0x1, 0x80, 0x8, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xf9, 0xa, 0xa, {0x8, 0x25, 0x1, 0x2, 0xf, 0x6, 0x9}}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000001540)={0xa, 0x6, 0x310, 0x6, 0x0, 0x10, 0x10, 0x2}, 0x5, &(0x7f0000001580)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x407}}, {0x4a, &(0x7f0000001680)=@string={0x4a, 0x3, "081dd80ab59c40bb40c9dd05950d07fcc773a4e98deacbd65e545b5ca876386e8d12e178a17a7635cb78c425a828ff774647034d66619442092ccb292f268e46f4104b2f335cb363"}}, {0xa1, &(0x7f0000001700)=@string={0xa1, 0x3, "e0b4fb19840332a187f741542a7bfa314090e9bb072e9af79d5221df4d05d553cad04318137d1e5ac4148b3f843ca07fbd79f4d00e6ac9b77f18209203b576c61ecd85bc4c7893b30dc326655ed32fbc720ee859fc9e787297be0a6b4a1175cf9125536d9b0cb90207e12c67fb3067086ee6333abe7abfb59f65a9922c82570ca9b853b29b4b620378620096c619b6520deac2619ecce52f59ff09b825e36c"}}, {0x101, &(0x7f00000017c0)=@string={0x101, 0x3, "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"}}, {0xa, &(0x7f0000001900)=@string={0xa, 0x3, "15351299615b1a63"}}]}) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f00000019c0)={0x0, 0xfffffffffffffc01, 0x40, 0xfffffff7}) getgid() socket$tipc(0x1e, 0x2, 0x0) 636.052759ms ago: executing program 3 (id=1781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, 0x0, 0xeffd) 349.91762ms ago: executing program 0 (id=1782): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x4010, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000140)) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x1070bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x84) getdents(r1, &(0x7f0000000380)=""/170, 0xffffff1d) 42.184794ms ago: executing program 3 (id=1783): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000280)={{@my=0x1, 0x2}, @hyper, 0x0, 0x6, 0x5, 0x9, 0x0, 0x0, 0x5}) 0s ago: executing program 3 (id=1784): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000000100)=""/171, 0x18) kernel console output (not intermixed with test programs): IAD found [ 278.000643][ T5758] cdc_ncm 4-1:1.0: bind() failure [ 278.064548][ T822] usb 3-1: Using ep0 maxpacket: 32 [ 278.068947][ T822] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 278.068979][ T822] usb 3-1: config 0 has no interface number 0 [ 278.069030][ T822] usb 3-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 278.069057][ T822] usb 3-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 278.069093][ T822] usb 3-1: config 0 interface 12 has no altsetting 0 [ 278.076882][ T822] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 278.076945][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.077007][ T822] usb 3-1: Product: syz [ 278.077050][ T822] usb 3-1: Manufacturer: syz [ 278.077110][ T822] usb 3-1: SerialNumber: syz [ 278.146298][ T822] usb 3-1: config 0 descriptor?? [ 278.171406][ T822] f81534 3-1:0.12: unsupported endpoint max packet size [ 278.367884][ T5758] usb 3-1: USB disconnect, device number 42 [ 278.608653][ T822] usb 4-1: USB disconnect, device number 36 [ 278.901474][T10170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1436'. [ 278.971690][T10174] netlink: 'syz.3.1436': attribute type 21 has an invalid length. [ 278.971777][T10174] netlink: 'syz.3.1436': attribute type 6 has an invalid length. [ 278.971795][T10174] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1436'. [ 279.057746][T10180] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1439'. [ 279.802695][T10216] FAULT_INJECTION: forcing a failure. [ 279.802695][T10216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.802734][T10216] CPU: 0 UID: 0 PID: 10216 Comm: syz.0.1453 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 279.802762][T10216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 279.802777][T10216] Call Trace: [ 279.802787][T10216] [ 279.802798][T10216] dump_stack_lvl+0xe8/0x150 [ 279.802832][T10216] should_fail_ex+0x46b/0x600 [ 279.802870][T10216] strncpy_from_user+0x36/0x2b0 [ 279.802909][T10216] do_getname+0x77/0x250 [ 279.802947][T10216] __se_sys_renameat2+0x43/0x2c0 [ 279.802983][T10216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.803009][T10216] do_syscall_64+0x174/0x580 [ 279.803040][T10216] ? clear_bhb_loop+0x40/0x90 [ 279.803070][T10216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.803094][T10216] RIP: 0033:0x7f4d9bb9ce59 [ 279.803115][T10216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.803135][T10216] RSP: 002b:00007f4d99df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 279.803160][T10216] RAX: ffffffffffffffda RBX: 00007f4d9be15fa0 RCX: 00007f4d9bb9ce59 [ 279.803178][T10216] RDX: ffffffffffffff9c RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 279.803196][T10216] RBP: 00007f4d99df6090 R08: 0000000000000000 R09: 0000000000000000 [ 279.803211][T10216] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 279.803226][T10216] R13: 00007f4d9be16038 R14: 00007f4d9be15fa0 R15: 00007ffdd8375908 [ 279.803262][T10216] [ 280.065475][T10234] FAULT_INJECTION: forcing a failure. [ 280.065475][T10234] name failslab, interval 1, probability 0, space 0, times 0 [ 280.065504][T10234] CPU: 1 UID: 0 PID: 10234 Comm: syz.1.1456 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 280.065524][T10234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 280.065534][T10234] Call Trace: [ 280.065541][T10234] [ 280.065548][T10234] dump_stack_lvl+0xe8/0x150 [ 280.065574][T10234] should_fail_ex+0x46b/0x600 [ 280.065602][T10234] should_failslab+0xa8/0x100 [ 280.065622][T10234] __kmalloc_noprof+0xfe/0x7e0 [ 280.065638][T10234] ? rcu_is_watching+0x15/0xb0 [ 280.065663][T10234] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 280.065681][T10234] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 280.065705][T10234] tomoyo_realpath_from_path+0xe3/0x5d0 [ 280.065726][T10234] ? tomoyo_domain+0xd7/0x130 [ 280.065749][T10234] ? tomoyo_path_number_perm+0x219/0x630 [ 280.065774][T10234] tomoyo_path_number_perm+0x246/0x630 [ 280.065802][T10234] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 280.065827][T10234] ? __lock_acquire+0x6b5/0x2d10 [ 280.065856][T10234] ? do_raw_spin_lock+0x12b/0x2f0 [ 280.065897][T10234] ? __fget_files+0x2a/0x420 [ 280.065916][T10234] ? __fget_files+0x2a/0x420 [ 280.065932][T10234] ? __fget_files+0x3a6/0x420 [ 280.065947][T10234] ? __fget_files+0x2a/0x420 [ 280.065967][T10234] security_file_ioctl+0xc3/0x2a0 [ 280.065993][T10234] __se_sys_ioctl+0x47/0x170 [ 280.066018][T10234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.066036][T10234] do_syscall_64+0x174/0x580 [ 280.066057][T10234] ? trace_irq_disable+0x3b/0x140 [ 280.066078][T10234] ? clear_bhb_loop+0x40/0x90 [ 280.066098][T10234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.066115][T10234] RIP: 0033:0x7fc58c69ce59 [ 280.066130][T10234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.066145][T10234] RSP: 002b:00007fc58a8f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.066162][T10234] RAX: ffffffffffffffda RBX: 00007fc58c915fa0 RCX: 00007fc58c69ce59 [ 280.066175][T10234] RDX: 0000200000000000 RSI: 00000000c0405610 RDI: 0000000000000003 [ 280.066186][T10234] RBP: 00007fc58a8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 280.066196][T10234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.066206][T10234] R13: 00007fc58c916038 R14: 00007fc58c915fa0 R15: 00007ffe80a78488 [ 280.066232][T10234] [ 280.066249][T10234] ERROR: Out of memory at tomoyo_realpath_from_path. [ 280.403721][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 280.533700][ T9] usb 3-1: device descriptor read/64, error -71 [ 280.646742][T10255] FAULT_INJECTION: forcing a failure. [ 280.646742][T10255] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 280.646771][T10255] CPU: 0 UID: 0 PID: 10255 Comm: syz.0.1462 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 280.646791][T10255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 280.646802][T10255] Call Trace: [ 280.646809][T10255] [ 280.646817][T10255] dump_stack_lvl+0xe8/0x150 [ 280.646842][T10255] should_fail_ex+0x46b/0x600 [ 280.646871][T10255] prepare_alloc_pages+0x22a/0x6b0 [ 280.646896][T10255] __alloc_frozen_pages_noprof+0x12f/0x380 [ 280.646920][T10255] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 280.646943][T10255] ? __pfx_policy_nodemask+0x10/0x10 [ 280.646971][T10255] alloc_pages_mpol+0xd1/0x380 [ 280.646993][T10255] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 280.647016][T10255] vma_alloc_folio_noprof+0xe1/0x1e0 [ 280.647038][T10255] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 280.647066][T10255] do_wp_page+0x1109/0x3d90 [ 280.647091][T10255] ? rt_spin_lock+0x1e0/0x400 [ 280.647118][T10255] ? preempt_count_add+0x91/0x190 [ 280.647144][T10255] ? __pfx_do_wp_page+0x10/0x10 [ 280.647167][T10255] ? rt_spin_lock+0x2ce/0x400 [ 280.647184][T10255] ? __pfx_rt_spin_lock+0x10/0x10 [ 280.647212][T10255] ? pte_offset_map_rw_nolock+0xea/0x160 [ 280.647240][T10255] handle_mm_fault+0xafb/0x14d0 [ 280.647259][T10255] ? handle_mm_fault+0xed/0x14d0 [ 280.647279][T10255] ? __pfx_handle_mm_fault+0x10/0x10 [ 280.647304][T10255] ? __lock_acquire+0x6b5/0x2d10 [ 280.647336][T10255] ? lock_mm_and_find_vma+0xa7/0x340 [ 280.647357][T10255] do_user_addr_fault+0x75b/0x1340 [ 280.647390][T10255] exc_page_fault+0x6a/0xc0 [ 280.647411][T10255] asm_exc_page_fault+0x26/0x30 [ 280.647427][T10255] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 280.647444][T10255] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 280.647459][T10255] RSP: 0018:ffffc900453cf538 EFLAGS: 00050202 [ 280.647474][T10255] RAX: ffffffff84b7e201 RBX: ffff88803bdb0fff RCX: 000000000000007e [ 280.647487][T10255] RDX: 0000000000000000 RSI: ffff88803bdb1f80 RDI: 0000200000002000 [ 280.647498][T10255] RBP: ffffc900453cf6b0 R08: ffff88803bdb1ffd R09: 1ffff110077b63ff [ 280.647511][T10255] R10: dffffc0000000000 R11: ffffed10077b6400 R12: 1ffff92008a79fbb [ 280.647524][T10255] R13: 000020000000107f R14: ffffc900453cfde8 R15: 0000000000000fff [ 280.647541][T10255] ? _copy_to_iter+0x1c1/0x17d0 [ 280.647572][T10255] _copy_to_iter+0x255/0x17d0 [ 280.647609][T10255] ? __pfx__copy_to_iter+0x10/0x10 [ 280.647639][T10255] ? __lock_acquire+0x6b5/0x2d10 [ 280.647665][T10255] __skb_datagram_iter+0x41a/0x980 [ 280.647689][T10255] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 280.647719][T10255] skb_copy_datagram_iter+0xb5/0x240 [ 280.647744][T10255] tcp_recvmsg_locked+0xf31/0x3770 [ 280.647782][T10255] ? __lock_acquire+0x6b5/0x2d10 [ 280.647817][T10255] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 280.647848][T10255] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 280.647870][T10255] ? lockdep_hardirqs_on+0x7a/0x110 [ 280.647890][T10255] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 280.647911][T10255] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 280.647935][T10255] ? __local_bh_enable+0x1e1/0x2f0 [ 280.647964][T10255] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 280.647989][T10255] ? lockdep_hardirqs_on+0x7a/0x110 [ 280.648013][T10255] tcp_recvmsg+0xf6/0x530 [ 280.648038][T10255] ? __pfx_tcp_recvmsg+0x10/0x10 [ 280.648060][T10255] ? sock_rps_record_flow+0x19/0x350 [ 280.648079][T10255] ? inet_recvmsg+0xb3/0x120 [ 280.648094][T10255] ? __pfx_inet_recvmsg+0x10/0x10 [ 280.648111][T10255] sock_recvmsg_nosec+0xff/0x170 [ 280.648140][T10255] __sys_recvfrom+0x289/0x400 [ 280.648164][T10255] ? __pfx___sys_recvfrom+0x10/0x10 [ 280.648204][T10255] ? __pfx_ksys_write+0x10/0x10 [ 280.648228][T10255] __x64_sys_recvfrom+0xde/0x100 [ 280.648248][T10255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.648267][T10255] do_syscall_64+0x174/0x580 [ 280.648287][T10255] ? trace_irq_disable+0x3b/0x140 [ 280.648308][T10255] ? clear_bhb_loop+0x40/0x90 [ 280.648335][T10255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.648351][T10255] RIP: 0033:0x7f4d9bb9ce59 [ 280.648367][T10255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.648380][T10255] RSP: 002b:00007f4d99dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 280.648396][T10255] RAX: ffffffffffffffda RBX: 00007f4d9be16090 RCX: 00007f4d9bb9ce59 [ 280.648408][T10255] RDX: fffffffffffffd0b RSI: 0000200000000080 RDI: 0000000000000003 [ 280.648420][T10255] RBP: 00007f4d99dd5090 R08: 0000000000000000 R09: fffffffffffffd25 [ 280.648431][T10255] R10: 00000000c9100114 R11: 0000000000000246 R12: 0000000000000001 [ 280.648442][T10255] R13: 00007f4d9be16128 R14: 00007f4d9be16090 R15: 00007ffdd8375908 [ 280.648467][T10255] [ 280.804015][ T5717] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 280.853741][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 280.967604][ T5717] usb 4-1: Using ep0 maxpacket: 16 [ 281.025163][ T9] usb 3-1: device descriptor read/64, error -71 [ 281.133369][ T5717] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 281.133618][ T5717] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 281.133651][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 281.133742][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 281.133826][ T5717] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 281.133984][ T5717] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 281.134050][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.162941][ T9] usb usb3-port1: attempt power cycle [ 281.245349][ T5717] usb 4-1: config 0 descriptor?? [ 281.246720][T10246] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 281.329830][ T5717] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19 [ 281.637076][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 281.654601][ T9] usb 3-1: device descriptor read/8, error -71 [ 281.868377][ T10] usb 4-1: USB disconnect, device number 37 [ 281.868476][ C0] pxrc 4-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 281.894319][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 281.916813][ T9] usb 3-1: device descriptor read/8, error -71 [ 282.026975][ T9] usb usb3-port1: unable to enumerate USB device [ 282.300729][T10308] FAULT_INJECTION: forcing a failure. [ 282.300729][T10308] name failslab, interval 1, probability 0, space 0, times 0 [ 282.300768][T10308] CPU: 1 UID: 0 PID: 10308 Comm: syz.1.1476 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 282.300794][T10308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 282.300809][T10308] Call Trace: [ 282.300819][T10308] [ 282.300829][T10308] dump_stack_lvl+0xe8/0x150 [ 282.300860][T10308] should_fail_ex+0x46b/0x600 [ 282.300899][T10308] should_failslab+0xa8/0x100 [ 282.300927][T10308] kmem_cache_alloc_node_noprof+0xae/0x710 [ 282.300968][T10308] ? __alloc_skb+0x1d0/0x7d0 [ 282.300992][T10308] ? __alloc_skb+0x1d0/0x7d0 [ 282.301023][T10308] __alloc_skb+0x1d0/0x7d0 [ 282.301048][T10308] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 282.301079][T10308] netlink_sendmsg+0x5d4/0xb40 [ 282.301119][T10308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.301152][T10308] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 282.301187][T10308] ? aa_sock_msg_perm+0x122/0x200 [ 282.301212][T10308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.301242][T10308] sock_sendmsg_nosec+0x13a/0x180 [ 282.301280][T10308] ____sys_sendmsg+0x55c/0x870 [ 282.301317][T10308] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.301358][T10308] ? import_iovec+0x73/0xa0 [ 282.301387][T10308] ___sys_sendmsg+0x2a5/0x360 [ 282.301417][T10308] ? __lock_acquire+0x6b5/0x2d10 [ 282.301451][T10308] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.301522][T10308] ? __fget_files+0x2a/0x420 [ 282.301545][T10308] ? __fget_files+0x3a6/0x420 [ 282.301578][T10308] __x64_sys_sendmsg+0x1b7/0x290 [ 282.301612][T10308] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 282.301658][T10308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.301686][T10308] do_syscall_64+0x174/0x580 [ 282.301724][T10308] ? trace_irq_disable+0x3b/0x140 [ 282.301754][T10308] ? clear_bhb_loop+0x40/0x90 [ 282.301783][T10308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.301806][T10308] RIP: 0033:0x7fc58c69ce59 [ 282.301827][T10308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.301848][T10308] RSP: 002b:00007fc58a8f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.301875][T10308] RAX: ffffffffffffffda RBX: 00007fc58c915fa0 RCX: 00007fc58c69ce59 [ 282.301894][T10308] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 282.301909][T10308] RBP: 00007fc58a8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 282.301925][T10308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.301940][T10308] R13: 00007fc58c916038 R14: 00007fc58c915fa0 R15: 00007ffe80a78488 [ 282.301977][T10308] [ 282.846054][ T5717] kernel write not supported for file /radio5 (pid: 5717 comm: kworker/1:5) [ 283.359352][T10356] comedi comedi4: bad chanlist[0]=0x0000007f chan=127 range length=2 [ 283.699282][T10381] FAULT_INJECTION: forcing a failure. [ 283.699282][T10381] name failslab, interval 1, probability 0, space 0, times 0 [ 283.699322][T10381] CPU: 0 UID: 0 PID: 10381 Comm: syz.0.1500 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 283.699349][T10381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 283.699365][T10381] Call Trace: [ 283.699375][T10381] [ 283.699385][T10381] dump_stack_lvl+0xe8/0x150 [ 283.699419][T10381] should_fail_ex+0x46b/0x600 [ 283.699459][T10381] should_failslab+0xa8/0x100 [ 283.699488][T10381] __kmalloc_cache_noprof+0xa0/0x6d0 [ 283.699515][T10381] ? io_ring_ctx_alloc+0x53/0xd20 [ 283.699550][T10381] ? io_ring_ctx_alloc+0x53/0xd20 [ 283.699593][T10381] io_ring_ctx_alloc+0x53/0xd20 [ 283.699630][T10381] ? io_prepare_config+0x906/0xc70 [ 283.699672][T10381] io_uring_create+0x50/0x9a0 [ 283.699713][T10381] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 283.699746][T10381] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 283.699771][T10381] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 283.699818][T10381] ? __pfx_ksys_write+0x10/0x10 [ 283.699856][T10381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.699883][T10381] do_syscall_64+0x174/0x580 [ 283.699914][T10381] ? trace_irq_disable+0x3b/0x140 [ 283.699950][T10381] ? clear_bhb_loop+0x40/0x90 [ 283.699980][T10381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.700003][T10381] RIP: 0033:0x7f4d9bb9ce59 [ 283.700025][T10381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.700045][T10381] RSP: 002b:00007f4d99df5ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 283.700070][T10381] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f4d9bb9ce59 [ 283.700088][T10381] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 000000000000001c [ 283.700104][T10381] RBP: 0000200000000a80 R08: 0000200000001540 R09: 0000000000000000 [ 283.700121][T10381] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 283.700137][T10381] R13: 0000200000000b10 R14: 00007f4d99df5fd8 R15: 0000000000000000 [ 283.700172][T10381] [ 283.785902][ T5717] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 283.955298][ T37] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 283.955503][ T5717] usb 2-1: Using ep0 maxpacket: 16 [ 283.961182][ T5717] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 283.961222][ T5717] usb 2-1: config 0 interface 0 has no altsetting 0 [ 283.988214][ T5717] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 283.988308][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.988371][ T5717] usb 2-1: Product: syz [ 283.988430][ T5717] usb 2-1: Manufacturer: syz [ 283.988474][ T5717] usb 2-1: SerialNumber: syz [ 284.039639][ T5717] usb 2-1: config 0 descriptor?? [ 284.087770][ T37] usb 3-1: device descriptor read/64, error -71 [ 284.136793][T10390] netlink: 'syz.0.1503': attribute type 2 has an invalid length. [ 284.136817][T10390] netlink: 'syz.0.1503': attribute type 1 has an invalid length. [ 284.136833][T10390] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1503'. [ 284.336230][ T37] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 284.363807][ T10] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 284.544167][ T37] usb 3-1: device descriptor read/64, error -71 [ 284.563105][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 284.563140][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 284.563170][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 284.563195][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 284.629565][ T10] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 284.629596][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.629615][ T10] usb 1-1: Product: syz [ 284.629628][ T10] usb 1-1: Manufacturer: syz [ 284.629642][ T10] usb 1-1: SerialNumber: syz [ 284.669101][ T10] usb 1-1: config 0 descriptor?? [ 284.674292][ T37] usb usb3-port1: attempt power cycle [ 284.698100][T10395] FAULT_INJECTION: forcing a failure. [ 284.698100][T10395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.698127][T10395] CPU: 1 UID: 0 PID: 10395 Comm: syz.1.1496 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 284.698147][T10395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 284.698161][T10395] Call Trace: [ 284.698168][T10395] [ 284.698175][T10395] dump_stack_lvl+0xe8/0x150 [ 284.698200][T10395] should_fail_ex+0x46b/0x600 [ 284.698228][T10395] _copy_from_user+0x2d/0xb0 [ 284.698247][T10395] raw_ioctl+0x89e/0x40f0 [ 284.698270][T10395] ? tomoyo_path_number_perm+0x219/0x630 [ 284.698298][T10395] ? tomoyo_path_number_perm+0x219/0x630 [ 284.698358][T10395] ? do_vfs_ioctl+0x117b/0x1540 [ 284.698392][T10395] ? __pfx_raw_ioctl+0x10/0x10 [ 284.698423][T10395] ? handle_mm_fault+0x13ea/0x14d0 [ 284.698474][T10395] ? __fget_files+0x2a/0x420 [ 284.698500][T10395] ? __fget_files+0x2a/0x420 [ 284.698522][T10395] ? __fget_files+0x3a6/0x420 [ 284.698545][T10395] ? __fget_files+0x2a/0x420 [ 284.698571][T10395] ? bpf_lsm_file_ioctl+0x9/0x20 [ 284.698599][T10395] ? __pfx_raw_ioctl+0x10/0x10 [ 284.698627][T10395] __se_sys_ioctl+0xff/0x170 [ 284.698657][T10395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.698684][T10395] do_syscall_64+0x174/0x580 [ 284.698715][T10395] ? trace_irq_disable+0x3b/0x140 [ 284.698741][T10395] ? clear_bhb_loop+0x40/0x90 [ 284.698769][T10395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.698791][T10395] RIP: 0033:0x7fc58c69caeb [ 284.698812][T10395] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 284.698832][T10395] RSP: 002b:00007fc58a8d3f60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.698865][T10395] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc58c69caeb [ 284.698881][T10395] RDX: 00007fc58a8d3fe0 RSI: 0000000040085507 RDI: 0000000000000003 [ 284.698897][T10395] RBP: 0000000000000003 R08: 00007fc58ca40320 R09: 0000000000000000 [ 284.698911][T10395] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 284.698926][T10395] R13: 000000000000000a R14: 00007fc58c916090 R15: 00007ffe80a78488 [ 284.698962][T10395] [ 284.971693][ T32] usb 1-1: USB disconnect, device number 17 [ 285.313914][ T37] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 285.364860][ T37] usb 3-1: device descriptor read/8, error -71 [ 285.438255][T10413] FAULT_INJECTION: forcing a failure. [ 285.438255][T10413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.438381][T10413] CPU: 1 UID: 0 PID: 10413 Comm: syz.3.1506 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 285.438410][T10413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 285.438432][T10413] Call Trace: [ 285.438439][T10413] [ 285.438449][T10413] dump_stack_lvl+0xe8/0x150 [ 285.438475][T10413] should_fail_ex+0x46b/0x600 [ 285.438502][T10413] _copy_from_user+0x2d/0xb0 [ 285.438522][T10413] ___sys_sendmsg+0x1c6/0x360 [ 285.438543][T10413] ? __lock_acquire+0x6b5/0x2d10 [ 285.438568][T10413] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.438613][T10413] ? __fget_files+0x2a/0x420 [ 285.438629][T10413] ? __fget_files+0x3a6/0x420 [ 285.438652][T10413] __x64_sys_sendmsg+0x1b7/0x290 [ 285.438675][T10413] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 285.438709][T10413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.438727][T10413] do_syscall_64+0x174/0x580 [ 285.438748][T10413] ? trace_irq_disable+0x3b/0x140 [ 285.438771][T10413] ? clear_bhb_loop+0x40/0x90 [ 285.438791][T10413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.438808][T10413] RIP: 0033:0x7f3a56efce59 [ 285.438823][T10413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.438858][T10413] RSP: 002b:00007f3a55156028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.438884][T10413] RAX: ffffffffffffffda RBX: 00007f3a57175fa0 RCX: 00007f3a56efce59 [ 285.438902][T10413] RDX: 0000000000008880 RSI: 0000200000002a80 RDI: 0000000000000003 [ 285.438918][T10413] RBP: 00007f3a55156090 R08: 0000000000000000 R09: 0000000000000000 [ 285.438934][T10413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.438951][T10413] R13: 00007f3a57176038 R14: 00007f3a57175fa0 R15: 00007ffc948dcd58 [ 285.438981][T10413] [ 285.804461][ T37] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 285.835961][ T37] usb 3-1: device descriptor read/8, error -71 [ 285.955004][ T37] usb usb3-port1: unable to enumerate USB device [ 285.999665][T10424] FAULT_INJECTION: forcing a failure. [ 285.999665][T10424] name failslab, interval 1, probability 0, space 0, times 0 [ 285.999692][T10424] CPU: 1 UID: 0 PID: 10424 Comm: syz.0.1510 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 285.999714][T10424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 285.999725][T10424] Call Trace: [ 285.999731][T10424] [ 285.999739][T10424] dump_stack_lvl+0xe8/0x150 [ 285.999766][T10424] should_fail_ex+0x46b/0x600 [ 285.999794][T10424] should_failslab+0xa8/0x100 [ 285.999814][T10424] __kmalloc_noprof+0xfe/0x7e0 [ 285.999832][T10424] ? kvm_io_bus_unregister_dev+0x263/0x570 [ 285.999850][T10424] ? kvm_io_bus_unregister_dev+0x263/0x570 [ 285.999872][T10424] kvm_io_bus_unregister_dev+0x263/0x570 [ 285.999891][T10424] ? mutex_lock_nested+0x152/0x1d0 [ 285.999921][T10424] kvm_vm_ioctl_unregister_coalesced_mmio+0x253/0x370 [ 285.999950][T10424] kvm_vm_ioctl+0xa13/0xd50 [ 285.999972][T10424] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 286.000007][T10424] ? kasan_quarantine_put+0xbb/0x1f0 [ 286.000039][T10424] ? tomoyo_path_number_perm+0x219/0x630 [ 286.000065][T10424] ? tomoyo_path_number_perm+0x219/0x630 [ 286.000093][T10424] ? do_vfs_ioctl+0x117b/0x1540 [ 286.000146][T10424] ? __fget_files+0x2a/0x420 [ 286.000165][T10424] ? __fget_files+0x2a/0x420 [ 286.000181][T10424] ? __fget_files+0x3a6/0x420 [ 286.000196][T10424] ? __fget_files+0x2a/0x420 [ 286.000221][T10424] ? bpf_lsm_file_ioctl+0x9/0x20 [ 286.000264][T10424] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 286.000294][T10424] __se_sys_ioctl+0xff/0x170 [ 286.000325][T10424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.000352][T10424] do_syscall_64+0x174/0x580 [ 286.000386][T10424] ? trace_irq_disable+0x3b/0x140 [ 286.000408][T10424] ? clear_bhb_loop+0x40/0x90 [ 286.000428][T10424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.000445][T10424] RIP: 0033:0x7f4d9bb9ce59 [ 286.000460][T10424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.000475][T10424] RSP: 002b:00007f4d99df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.000492][T10424] RAX: ffffffffffffffda RBX: 00007f4d9be15fa0 RCX: 00007f4d9bb9ce59 [ 286.000505][T10424] RDX: 00002000000003c0 RSI: 000000004010ae68 RDI: 0000000000000004 [ 286.000516][T10424] RBP: 00007f4d99df6090 R08: 0000000000000000 R09: 0000000000000000 [ 286.000527][T10424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.000536][T10424] R13: 00007f4d9be16038 R14: 00007f4d9be15fa0 R15: 00007ffdd8375908 [ 286.000561][T10424] [ 286.013824][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 286.039720][T10424] kvm: failed to shrink bus, removing it completely [ 286.356874][ T10] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 286.356907][ T10] usb 4-1: config 0 has no interface number 0 [ 286.356958][ T10] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 286.360951][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 286.360985][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.361009][ T10] usb 4-1: Product: syz [ 286.361026][ T10] usb 4-1: Manufacturer: syz [ 286.361043][ T10] usb 4-1: SerialNumber: syz [ 286.453143][ T10] usb 4-1: config 0 descriptor?? [ 286.486677][ T10] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 286.749216][ T10] usb 4-1: USB disconnect, device number 38 [ 286.770411][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 286.804306][ T10] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 286.995966][T10457] FAULT_INJECTION: forcing a failure. [ 286.995966][T10457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.004097][T10457] CPU: 1 UID: 0 PID: 10457 Comm: syz.1.1515 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 287.004121][T10457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 287.004132][T10457] Call Trace: [ 287.004139][T10457] [ 287.004146][T10457] dump_stack_lvl+0xe8/0x150 [ 287.004174][T10457] should_fail_ex+0x46b/0x600 [ 287.004202][T10457] _copy_from_user+0x2d/0xb0 [ 287.004221][T10457] __ia32_sys_rt_sigreturn+0x379/0x8e0 [ 287.004241][T10457] ? __lock_acquire+0x6b5/0x2d10 [ 287.004266][T10457] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 287.004305][T10457] ? __task_pid_nr_ns+0x28/0x470 [ 287.004330][T10457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.004348][T10457] do_syscall_64+0x174/0x580 [ 287.004371][T10457] ? clear_bhb_loop+0x40/0x90 [ 287.004392][T10457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.004409][T10457] RIP: 0033:0x7fc58c63e1d9 [ 287.004424][T10457] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 287.004439][T10457] RSP: 002b:00007fc58a8f5a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 287.004457][T10457] RAX: ffffffffffffffda RBX: 00007fc58c915fa0 RCX: 00007fc58c63e1d9 [ 287.004470][T10457] RDX: 00007fc58a8f5a80 RSI: 00007fc58a8f5bb0 RDI: 0000000000000021 [ 287.004481][T10457] RBP: 00007fc58a8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 287.004492][T10457] R10: 0000000000010002 R11: 0000000000000202 R12: 0000000000000001 [ 287.004502][T10457] R13: 00007fc58c916038 R14: 00007fc58c915fa0 R15: 00007ffe80a78488 [ 287.004526][T10457] [ 287.221483][ T5717] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input20 [ 287.273686][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 287.423674][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 287.427507][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.427546][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.427573][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 287.427631][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 287.427659][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.553399][ T10] usb 3-1: config 0 descriptor?? [ 287.687415][T10482] FAULT_INJECTION: forcing a failure. [ 287.687415][T10482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.687472][T10482] CPU: 1 UID: 0 PID: 10482 Comm: syz.1.1521 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 287.687500][T10482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 287.687516][T10482] Call Trace: [ 287.687526][T10482] [ 287.687536][T10482] dump_stack_lvl+0xe8/0x150 [ 287.687572][T10482] should_fail_ex+0x46b/0x600 [ 287.687613][T10482] _copy_to_user+0x31/0xb0 [ 287.687642][T10482] simple_read_from_buffer+0xe1/0x170 [ 287.687674][T10482] proc_fail_nth_read+0x1be/0x230 [ 287.687703][T10482] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 287.687732][T10482] ? rw_verify_area+0x2ac/0x4e0 [ 287.687761][T10482] ? __fget_files+0x2a/0x420 [ 287.687784][T10482] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 287.687811][T10482] vfs_read+0x212/0xa80 [ 287.687848][T10482] ? __pfx_vfs_read+0x10/0x10 [ 287.687878][T10482] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 287.687911][T10482] ? lockdep_hardirqs_on+0x7a/0x110 [ 287.687942][T10482] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 287.687972][T10482] ? mutex_lock_nested+0x152/0x1d0 [ 287.688008][T10482] ? fdget_pos+0x252/0x320 [ 287.688042][T10482] ksys_read+0x156/0x270 [ 287.688085][T10482] ? __pfx_ksys_read+0x10/0x10 [ 287.688124][T10482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.688150][T10482] do_syscall_64+0x174/0x580 [ 287.688180][T10482] ? trace_irq_disable+0x3b/0x140 [ 287.688210][T10482] ? clear_bhb_loop+0x40/0x90 [ 287.688241][T10482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.688265][T10482] RIP: 0033:0x7fc58c65d68e [ 287.688285][T10482] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 287.688305][T10482] RSP: 002b:00007fc58a8f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 287.688328][T10482] RAX: ffffffffffffffda RBX: 00007fc58a8f66c0 RCX: 00007fc58c65d68e [ 287.688344][T10482] RDX: 000000000000000f RSI: 00007fc58a8f60a0 RDI: 0000000000000005 [ 287.688359][T10482] RBP: 00007fc58a8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 287.688375][T10482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.688390][T10482] R13: 00007fc58c916038 R14: 00007fc58c915fa0 R15: 00007ffe80a78488 [ 287.688425][T10482] [ 287.752336][ T5717] imon:send_packet: packet tx failed (-71) [ 287.769369][ T5717] imon 2-1:0.0: panel buttons/knobs setup failed [ 288.150942][ T38] audit: type=1326 audit(1781878425.247:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10458 comm="syz.2.1514" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa11f14ce59 code=0x0 [ 288.187888][ T5717] rc_core: IR keymap rc-imon-pad not found [ 288.187910][ T5717] Registered IR keymap rc-empty [ 288.188011][ T5717] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 288.188034][ T5717] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 288.189481][ T5717] imon:send_packet: packet tx failed (-71) [ 288.205972][ T5717] imon 2-1:0.0: remote input dev register failed [ 288.206281][ T5717] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 288.517374][T10505] FAULT_INJECTION: forcing a failure. [ 288.517374][T10505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.517424][T10505] CPU: 0 UID: 0 PID: 10505 Comm: syz.3.1527 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 288.517451][T10505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 288.517463][T10505] Call Trace: [ 288.517472][T10505] [ 288.517480][T10505] dump_stack_lvl+0xe8/0x150 [ 288.517511][T10505] should_fail_ex+0x46b/0x600 [ 288.517555][T10505] _copy_to_user+0x31/0xb0 [ 288.517581][T10505] do_ip_getsockopt+0x10a1/0x1d30 [ 288.517614][T10505] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 288.517646][T10505] ? _parse_integer_limit+0x192/0x1e0 [ 288.517681][T10505] ? __lock_acquire+0x6b5/0x2d10 [ 288.517719][T10505] ? __lock_acquire+0x6b5/0x2d10 [ 288.517750][T10505] ? __might_fault+0xaf/0x130 [ 288.517771][T10505] ip_getsockopt+0xbb/0x230 [ 288.517798][T10505] ? __pfx_ip_getsockopt+0x10/0x10 [ 288.517823][T10505] ? sock_common_getsockopt+0x2d/0xb0 [ 288.517853][T10505] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 288.517882][T10505] do_sock_getsockopt+0x51d/0x7e0 [ 288.517911][T10505] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 288.517946][T10505] ? __fget_files+0x3a6/0x420 [ 288.517965][T10505] ? __fget_files+0x2a/0x420 [ 288.517989][T10505] __x64_sys_getsockopt+0x1aa/0x250 [ 288.518019][T10505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.518043][T10505] do_syscall_64+0x174/0x580 [ 288.518066][T10505] ? trace_irq_disable+0x3b/0x140 [ 288.518088][T10505] ? clear_bhb_loop+0x40/0x90 [ 288.518110][T10505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.518129][T10505] RIP: 0033:0x7f3a56efce59 [ 288.518147][T10505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.518164][T10505] RSP: 002b:00007f3a55156028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 288.518185][T10505] RAX: ffffffffffffffda RBX: 00007f3a57175fa0 RCX: 00007f3a56efce59 [ 288.518200][T10505] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000003 [ 288.518212][T10505] RBP: 00007f3a55156090 R08: 0000200000000180 R09: 0000000000000000 [ 288.518225][T10505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.518237][T10505] R13: 00007f3a57176038 R14: 00007f3a57175fa0 R15: 00007ffc948dcd58 [ 288.518266][T10505] [ 289.142853][ T5717] imon 2-1:0.0: unable to initialize intf0, err 0 [ 289.142880][ T5717] imon:imon_probe: failed to initialize context! [ 289.142897][ T5717] imon 2-1:0.0: unable to register, err -19 [ 289.190549][ T5717] usb 2-1: USB disconnect, device number 21 [ 289.688514][T10545] FAULT_INJECTION: forcing a failure. [ 289.688514][T10545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.688553][T10545] CPU: 1 UID: 0 PID: 10545 Comm: syz.1.1542 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 289.688580][T10545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 289.688597][T10545] Call Trace: [ 289.688606][T10545] [ 289.688616][T10545] dump_stack_lvl+0xe8/0x150 [ 289.688651][T10545] should_fail_ex+0x46b/0x600 [ 289.688689][T10545] _copy_to_user+0x31/0xb0 [ 289.688719][T10545] cp_new_stat+0x3c3/0x540 [ 289.688749][T10545] ? __pfx_cp_new_stat+0x10/0x10 [ 289.688811][T10545] __x64_sys_newfstat+0x1b5/0x270 [ 289.688833][T10545] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 289.688867][T10545] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 289.688925][T10545] ? __pfx_ksys_write+0x10/0x10 [ 289.688963][T10545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.688990][T10545] do_syscall_64+0x174/0x580 [ 289.689019][T10545] ? trace_irq_disable+0x3b/0x140 [ 289.689050][T10545] ? clear_bhb_loop+0x40/0x90 [ 289.689080][T10545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.689103][T10545] RIP: 0033:0x7fc58c69ce59 [ 289.689127][T10545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.689148][T10545] RSP: 002b:00007fc58a8f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 289.689174][T10545] RAX: ffffffffffffffda RBX: 00007fc58c915fa0 RCX: 00007fc58c69ce59 [ 289.689192][T10545] RDX: 0000000000000000 RSI: 0000200000002a00 RDI: 0000000000000003 [ 289.689208][T10545] RBP: 00007fc58a8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 289.689224][T10545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.689240][T10545] R13: 00007fc58c916038 R14: 00007fc58c915fa0 R15: 00007ffe80a78488 [ 289.689276][T10545] [ 290.151211][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 290.151339][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 290.179869][ T10] usb 3-1: USB disconnect, device number 51 [ 290.198771][T10556] FAULT_INJECTION: forcing a failure. [ 290.198771][T10556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.198807][T10556] CPU: 1 UID: 0 PID: 10556 Comm: syz.3.1545 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 290.198832][T10556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 290.198847][T10556] Call Trace: [ 290.198856][T10556] [ 290.198866][T10556] dump_stack_lvl+0xe8/0x150 [ 290.198897][T10556] should_fail_ex+0x46b/0x600 [ 290.198933][T10556] _copy_from_user+0x2d/0xb0 [ 290.198959][T10556] __sys_sendto+0x292/0x5a0 [ 290.198990][T10556] ? __pfx___sys_sendto+0x10/0x10 [ 290.199042][T10556] ? __pfx_ksys_write+0x10/0x10 [ 290.199066][T10556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.199094][T10556] __x64_sys_sendto+0xde/0x100 [ 290.199119][T10556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.199144][T10556] do_syscall_64+0x174/0x580 [ 290.199172][T10556] ? trace_irq_disable+0x3b/0x140 [ 290.199199][T10556] ? clear_bhb_loop+0x40/0x90 [ 290.199225][T10556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.199248][T10556] RIP: 0033:0x7f3a56efce59 [ 290.199269][T10556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.199287][T10556] RSP: 002b:00007f3a55156028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 290.199310][T10556] RAX: ffffffffffffffda RBX: 00007f3a57175fa0 RCX: 00007f3a56efce59 [ 290.199327][T10556] RDX: 0000000000000026 RSI: 00002000000000c0 RDI: 0000000000000003 [ 290.199341][T10556] RBP: 00007f3a55156090 R08: 0000200000000540 R09: 0000000000000014 [ 290.199357][T10556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.199370][T10556] R13: 00007f3a57176038 R14: 00007f3a57175fa0 R15: 00007ffc948dcd58 [ 290.199403][T10556] [ 290.559751][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 290.597199][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 290.626265][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 290.627546][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 290.628604][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 291.168328][ T32] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 291.228243][T10587] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1546'. [ 291.228288][T10587] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1546'. [ 291.345191][ T32] usb 4-1: no configurations [ 291.345214][ T32] usb 4-1: can't read configurations, error -22 [ 291.564092][ T32] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 291.728877][ T32] usb 4-1: no configurations [ 291.728894][ T32] usb 4-1: can't read configurations, error -22 [ 291.729268][ T32] usb usb4-port1: attempt power cycle [ 291.806234][ T37] IPVS: starting estimator thread 0... [ 291.895353][T10613] IPVS: using max 10 ests per chain, 24000 per kthread [ 292.102095][ T32] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 292.126496][ T32] usb 4-1: no configurations [ 292.126518][ T32] usb 4-1: can't read configurations, error -22 [ 292.343796][ T32] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 292.386340][ T32] usb 4-1: no configurations [ 292.386439][ T32] usb 4-1: can't read configurations, error -22 [ 292.396487][ T32] usb usb4-port1: unable to enumerate USB device [ 292.725745][ T1033] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.804177][ T5628] Bluetooth: hci4: command tx timeout [ 293.257148][T10678] 9p: Bad value for 'rfdno' [ 293.257461][T10678] 9p: Bad value for 'rfdno' [ 293.257733][T10678] 9p: Bad value for 'rfdno' [ 293.258001][T10678] 9p: Bad value for 'rfdno' [ 293.258277][T10678] 9p: Bad value for 'rfdno' [ 293.260182][T10678] 9p: Bad value for 'rfdno' [ 293.261098][T10678] 9p: Bad value for 'rfdno' [ 293.263036][T10678] 9p: Bad value for 'rfdno' [ 293.263365][T10678] 9p: Bad value for 'rfdno' [ 293.268839][T10678] 9p: Bad value for 'rfdno' [ 293.269919][T10678] 9p: Bad value for 'rfdno' [ 293.270470][T10678] 9p: Bad value for 'rfdno' [ 293.270815][T10678] 9p: Bad value for 'rfdno' [ 293.271172][T10678] 9p: Bad value for 'rfdno' [ 293.271532][T10678] 9p: Bad value for 'rfdno' [ 293.271883][T10678] 9p: Bad value for 'rfdno' [ 293.272150][T10678] 9p: Bad value for 'rfdno' [ 293.272575][T10678] 9p: Bad value for 'rfdno' [ 293.272856][T10678] 9p: Bad value for 'rfdno' [ 293.273130][T10678] 9p: Bad value for 'rfdno' [ 293.273418][T10678] 9p: Bad value for 'rfdno' [ 293.277152][T10678] 9p: Bad value for 'rfdno' [ 293.277924][T10678] 9p: Bad value for 'rfdno' [ 293.278295][T10678] 9p: Bad value for 'rfdno' [ 293.278668][T10678] 9p: Bad value for 'rfdno' [ 293.279065][T10678] 9p: Bad value for 'rfdno' [ 293.279439][T10678] 9p: Bad value for 'rfdno' [ 293.279803][T10678] 9p: Bad value for 'rfdno' [ 293.280184][T10678] 9p: Bad value for 'rfdno' [ 293.280550][T10678] 9p: Bad value for 'rfdno' [ 293.280929][T10678] 9p: Bad value for 'rfdno' [ 293.281320][T10678] 9p: Bad value for 'rfdno' [ 293.281586][T10678] 9p: Bad value for 'rfdno' [ 293.281835][T10678] 9p: Bad value for 'rfdno' [ 293.282088][T10678] 9p: Bad value for 'rfdno' [ 293.282333][T10678] 9p: Bad value for 'rfdno' [ 293.282618][T10678] 9p: Bad value for 'rfdno' [ 293.282901][T10678] 9p: Bad value for 'rfdno' [ 293.283144][T10678] 9p: Bad value for 'rfdno' [ 293.283383][T10678] 9p: Bad value for 'rfdno' [ 293.342610][T10678] 9p: Bad value for 'rfdno' [ 293.342890][T10678] 9p: Bad value for 'rfdno' [ 293.343131][T10678] 9p: Bad value for 'rfdno' [ 293.343362][T10678] 9p: Bad value for 'rfdno' [ 293.344653][T10678] 9p: Bad value for 'rfdno' [ 293.346722][T10678] 9p: Bad value for 'rfdno' [ 293.347882][T10678] 9p: Bad value for 'rfdno' [ 293.348779][T10678] 9p: Bad value for 'rfdno' [ 293.351463][T10678] 9p: Bad value for 'rfdno' [ 293.352394][T10678] 9p: Bad value for 'rfdno' [ 293.443030][T10678] 9p: Bad value for 'rfdno' [ 293.448836][T10678] 9p: Bad value for 'rfdno' [ 293.453380][T10678] 9p: Bad value for 'rfdno' [ 293.456519][T10678] 9p: Bad value for 'rfdno' [ 293.460174][T10678] 9p: Bad value for 'rfdno' [ 293.461169][T10678] 9p: Bad value for 'rfdno' [ 293.464291][T10678] 9p: Bad value for 'rfdno' [ 293.466696][T10678] 9p: Bad value for 'rfdno' [ 293.473742][T10678] 9p: Bad value for 'rfdno' [ 293.474748][T10678] 9p: Bad value for 'rfdno' [ 293.476679][T10678] 9p: Bad value for 'rfdno' [ 293.478518][T10678] 9p: Bad value for 'rfdno' [ 293.479499][T10678] 9p: Bad value for 'rfdno' [ 293.485659][T10678] 9p: Bad value for 'rfdno' [ 293.490002][T10678] 9p: Bad value for 'rfdno' [ 293.592451][ T1033] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.976493][ T1033] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.181305][ T32] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 294.340737][ T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.340802][ T32] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 294.340836][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.376591][ T32] usb 4-1: config 0 descriptor?? [ 294.399753][ T32] pwc: Askey VC010 type 2 USB webcam detected. [ 294.802999][ T32] pwc: recv_control_msg error -32 req 02 val 2b00 [ 294.814378][ T32] pwc: recv_control_msg error -32 req 02 val 2700 [ 294.820862][ T32] pwc: recv_control_msg error -32 req 02 val 2c00 [ 294.821578][ T32] pwc: recv_control_msg error -32 req 04 val 1000 [ 294.858314][ T32] pwc: recv_control_msg error -32 req 04 val 1300 [ 294.884011][ T5628] Bluetooth: hci4: command tx timeout [ 295.037862][ T1033] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.063330][ T32] pwc: recv_control_msg error -32 req 02 val 2000 [ 295.065724][ T32] pwc: recv_control_msg error -32 req 02 val 2100 [ 295.079134][ T32] pwc: recv_control_msg error -32 req 04 val 1500 [ 295.088135][ T32] pwc: recv_control_msg error -32 req 02 val 2500 [ 295.089382][ T32] pwc: recv_control_msg error -32 req 02 val 2400 [ 295.092602][ T32] pwc: recv_control_msg error -32 req 02 val 2600 [ 295.241531][T10771] binder: 10770:10771 ioctl 401870c8 200000000040 returned -22 [ 295.325356][ T32] pwc: recv_control_msg error -71 req 02 val 2800 [ 295.329060][ T32] pwc: recv_control_msg error -71 req 04 val 1100 [ 295.329571][ T32] pwc: recv_control_msg error -71 req 04 val 1200 [ 295.737716][ T32] pwc: Registered as video103. [ 295.765327][ T32] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input22 [ 295.810435][ T32] usb 4-1: USB disconnect, device number 43 [ 296.045000][ T5628] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 296.045028][ T5628] CPU: 0 UID: 0 PID: 5628 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 296.045054][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 296.045069][ T5628] Workqueue: hci1 hci_rx_work [ 296.045096][ T5628] Call Trace: [ 296.045106][ T5628] [ 296.045116][ T5628] dump_stack_lvl+0xe8/0x150 [ 296.045146][ T5628] sysfs_create_dir_ns+0x271/0x2a0 [ 296.045180][ T5628] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 296.045205][ T5628] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 296.045242][ T5628] ? rt_spin_unlock+0x160/0x200 [ 296.045267][ T5628] kobject_add_internal+0x631/0xd10 [ 296.045310][ T5628] kobject_add+0x163/0x240 [ 296.045354][ T5628] ? __pfx_kobject_add+0x10/0x10 [ 296.045393][ T5628] ? get_device_parent+0x370/0x3a0 [ 296.045424][ T5628] device_add+0x408/0xb90 [ 296.045455][ T5628] hci_conn_add_sysfs+0xd5/0x210 [ 296.045483][ T5628] le_conn_complete_evt+0x10e6/0x16b0 [ 296.045536][ T5628] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 296.045574][ T5628] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 296.045605][ T5628] ? lockdep_hardirqs_on+0x7a/0x110 [ 296.045639][ T5628] ? skb_pull_data+0xfb/0x200 [ 296.045676][ T5628] hci_le_conn_complete_evt+0x187/0x470 [ 296.045715][ T5628] hci_event_packet+0x659/0xef0 [ 296.045748][ T5628] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 296.045770][ T5628] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 296.045799][ T5628] ? __pfx_hci_event_packet+0x10/0x10 [ 296.045825][ T5628] ? rt_spin_unlock+0x14f/0x200 [ 296.045859][ T5628] ? hci_send_to_monitor+0xe2/0x590 [ 296.045898][ T5628] hci_rx_work+0x3ee/0x1040 [ 296.045937][ T5628] ? process_one_work+0x8be/0x1630 [ 296.045972][ T5628] process_one_work+0x98b/0x1630 [ 296.046031][ T5628] ? __pfx_process_one_work+0x10/0x10 [ 296.046065][ T5628] ? do_raw_spin_lock+0x12b/0x2f0 [ 296.046111][ T5628] worker_thread+0xb49/0x1140 [ 296.046178][ T5628] kthread+0x388/0x470 [ 296.046205][ T5628] ? __pfx_worker_thread+0x10/0x10 [ 296.046240][ T5628] ? __pfx_kthread+0x10/0x10 [ 296.046269][ T5628] ret_from_fork+0x514/0xb70 [ 296.046303][ T5628] ? __pfx_ret_from_fork+0x10/0x10 [ 296.046332][ T5628] ? __switch_to+0xc79/0x1410 [ 296.046360][ T5628] ? __pfx_kthread+0x10/0x10 [ 296.046389][ T5628] ret_from_fork_asm+0x1a/0x30 [ 296.046441][ T5628] [ 296.046501][ T5628] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 296.046552][ T5628] Bluetooth: hci1: failed to register connection device [ 296.968124][ T60] Bluetooth: hci4: command tx timeout [ 297.033954][ T32] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 297.137808][T10879] FAULT_INJECTION: forcing a failure. [ 297.137808][T10879] name failslab, interval 1, probability 0, space 0, times 0 [ 297.137847][T10879] CPU: 1 UID: 0 PID: 10879 Comm: syz.1.1602 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 297.137874][T10879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 297.137890][T10879] Call Trace: [ 297.137899][T10879] [ 297.137910][T10879] dump_stack_lvl+0xe8/0x150 [ 297.137946][T10879] should_fail_ex+0x46b/0x600 [ 297.137985][T10879] should_failslab+0xa8/0x100 [ 297.138016][T10879] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 297.138059][T10879] ? __pmd_alloc+0xa4/0x5e0 [ 297.138087][T10879] ? __pmd_alloc+0xa4/0x5e0 [ 297.138116][T10879] __pmd_alloc+0xa4/0x5e0 [ 297.138144][T10879] handle_mm_fault+0xf4d/0x14d0 [ 297.138173][T10879] ? handle_mm_fault+0xed/0x14d0 [ 297.138202][T10879] ? __pfx_handle_mm_fault+0x10/0x10 [ 297.138239][T10879] ? __lock_acquire+0x6b5/0x2d10 [ 297.138275][T10879] ? lock_mm_and_find_vma+0xa7/0x340 [ 297.138308][T10879] do_user_addr_fault+0x75b/0x1340 [ 297.138355][T10879] exc_page_fault+0x6a/0xc0 [ 297.138388][T10879] asm_exc_page_fault+0x26/0x30 [ 297.138412][T10879] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 297.138437][T10879] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 297.138458][T10879] RSP: 0018:ffffc9000f3ffcb8 EFLAGS: 00050246 [ 297.138480][T10879] RAX: 00007ffffffff001 RBX: 0000000000000008 RCX: 0000000000000008 [ 297.138497][T10879] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: ffffc9000f3ffd90 [ 297.138514][T10879] RBP: ffffc9000f3ffe48 R08: ffffc9000f3ffd97 R09: 1ffff92001e7ffb2 [ 297.138533][T10879] R10: dffffc0000000000 R11: fffff52001e7ffb3 R12: 000000000000000d [ 297.138550][T10879] R13: dffffc0000000000 R14: ffffc9000f3ffd90 R15: 00002000000000c0 [ 297.138587][T10879] _copy_from_user+0x7a/0xb0 [ 297.138615][T10879] mptcp_setsockopt+0x2561/0x35a0 [ 297.138644][T10879] ? aa_sk_perm+0x703/0x950 [ 297.138682][T10879] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 297.138717][T10879] ? aa_sock_opt_perm+0x131/0x1f0 [ 297.138745][T10879] ? sock_common_setsockopt+0x36/0xc0 [ 297.138768][T10879] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 297.138795][T10879] do_sock_setsockopt+0x17c/0x1b0 [ 297.138829][T10879] __x64_sys_setsockopt+0x143/0x1b0 [ 297.138860][T10879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.138886][T10879] do_syscall_64+0x174/0x580 [ 297.138915][T10879] ? trace_irq_disable+0x3b/0x140 [ 297.138945][T10879] ? clear_bhb_loop+0x40/0x90 [ 297.138974][T10879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.138997][T10879] RIP: 0033:0x7fc58c69ce59 [ 297.139018][T10879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.139040][T10879] RSP: 002b:00007fc58a8f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 297.139063][T10879] RAX: ffffffffffffffda RBX: 00007fc58c915fa0 RCX: 00007fc58c69ce59 [ 297.139088][T10879] RDX: 000000000000000d RSI: 0000000000000001 RDI: 0000000000000003 [ 297.139103][T10879] RBP: 00007fc58a8f6090 R08: 0000000000000008 R09: 0000000000000000 [ 297.139119][T10879] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 297.139135][T10879] R13: 00007fc58c916038 R14: 00007fc58c915fa0 R15: 00007ffe80a78488 [ 297.139172][T10879] [ 297.171825][ T32] usb 4-1: device descriptor read/64, error -71 [ 297.406923][ T32] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 297.543830][ T32] usb 4-1: device descriptor read/64, error -71 [ 297.657544][ T32] usb usb4-port1: attempt power cycle [ 297.904599][T10558] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.906497][T10558] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.906840][T10558] bridge_slave_0: entered allmulticast mode [ 297.983635][T10558] bridge_slave_0: entered promiscuous mode [ 298.013791][ T32] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 298.037891][ T32] usb 4-1: device descriptor read/8, error -71 [ 298.038946][T10914] FAULT_INJECTION: forcing a failure. [ 298.038946][T10914] name failslab, interval 1, probability 0, space 0, times 0 [ 298.038993][T10914] CPU: 1 UID: 0 PID: 10914 Comm: syz.2.1606 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 298.039019][T10914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 298.039034][T10914] Call Trace: [ 298.039044][T10914] [ 298.039061][T10914] dump_stack_lvl+0xe8/0x150 [ 298.039087][T10914] should_fail_ex+0x46b/0x600 [ 298.039115][T10914] should_failslab+0xa8/0x100 [ 298.039135][T10914] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 298.039163][T10914] ? __pmd_alloc+0xa4/0x5e0 [ 298.039177][T10914] ? __pmd_alloc+0xa4/0x5e0 [ 298.039197][T10914] __pmd_alloc+0xa4/0x5e0 [ 298.039216][T10914] handle_mm_fault+0xf4d/0x14d0 [ 298.039235][T10914] ? handle_mm_fault+0xed/0x14d0 [ 298.039254][T10914] ? __pfx_handle_mm_fault+0x10/0x10 [ 298.039279][T10914] ? __lock_acquire+0x6b5/0x2d10 [ 298.039304][T10914] ? lock_mm_and_find_vma+0xa7/0x340 [ 298.039326][T10914] do_user_addr_fault+0x75b/0x1340 [ 298.039358][T10914] exc_page_fault+0x6a/0xc0 [ 298.039381][T10914] asm_exc_page_fault+0x26/0x30 [ 298.039397][T10914] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 298.039415][T10914] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 298.039430][T10914] RSP: 0018:ffffc9004427fd58 EFLAGS: 00050246 [ 298.039445][T10914] RAX: 00007ffffffff001 RBX: 0000000000000008 RCX: 0000000000000008 [ 298.039457][T10914] RDX: 0000000000000001 RSI: 0000200000000280 RDI: ffffc9004427fdc0 [ 298.039469][T10914] RBP: ffffc9004427feb8 R08: ffffc9004427fdc7 R09: 1ffff9200884ffb8 [ 298.039483][T10914] R10: dffffc0000000000 R11: fffff5200884ffb9 R12: 0000200000000280 [ 298.039497][T10914] R13: ffffc9004427fdc0 R14: ffffc9004427fdc0 R15: 0000200000000280 [ 298.039522][T10914] _copy_from_user+0x7a/0xb0 [ 298.039542][T10914] __sys_bind+0x1cc/0x410 [ 298.039560][T10914] ? __pfx___sys_bind+0x10/0x10 [ 298.039586][T10914] ? __pfx_ksys_write+0x10/0x10 [ 298.039610][T10914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.039628][T10914] __x64_sys_bind+0x7a/0x90 [ 298.039645][T10914] do_syscall_64+0x174/0x580 [ 298.039666][T10914] ? trace_irq_disable+0x3b/0x140 [ 298.039687][T10914] ? clear_bhb_loop+0x40/0x90 [ 298.039708][T10914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.039725][T10914] RIP: 0033:0x7fa11f14ce59 [ 298.039739][T10914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.039753][T10914] RSP: 002b:00007fa11d39e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 298.039769][T10914] RAX: ffffffffffffffda RBX: 00007fa11f3c5fa0 RCX: 00007fa11f14ce59 [ 298.039781][T10914] RDX: 0000000000000008 RSI: 0000200000000280 RDI: 0000000000000004 [ 298.039792][T10914] RBP: 00007fa11d39e090 R08: 0000000000000000 R09: 0000000000000000 [ 298.039802][T10914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.039812][T10914] R13: 00007fa11f3c6038 R14: 00007fa11f3c5fa0 R15: 00007ffe18ab8fb8 [ 298.039837][T10914] [ 298.334061][ T32] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 298.390037][ T32] usb 4-1: device descriptor read/8, error -71 [ 298.391521][T10558] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.391964][T10558] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.398083][T10558] bridge_slave_1: entered allmulticast mode [ 298.426124][T10558] bridge_slave_1: entered promiscuous mode [ 298.495334][ T32] usb usb4-port1: unable to enumerate USB device [ 298.773785][ T32] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 298.835266][T10558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.092701][ T60] Bluetooth: hci4: command tx timeout [ 299.095500][ T32] usb 3-1: device descriptor read/64, error -71 [ 299.176703][T10956] FAULT_INJECTION: forcing a failure. [ 299.176703][T10956] name failslab, interval 1, probability 0, space 0, times 0 [ 299.176742][T10956] CPU: 1 UID: 0 PID: 10956 Comm: syz.1.1612 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 299.176768][T10956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 299.176785][T10956] Call Trace: [ 299.176795][T10956] [ 299.176806][T10956] dump_stack_lvl+0xe8/0x150 [ 299.176840][T10956] should_fail_ex+0x46b/0x600 [ 299.176878][T10956] should_failslab+0xa8/0x100 [ 299.176908][T10956] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 299.176946][T10956] ? security_inode_alloc+0x39/0x310 [ 299.176972][T10956] ? security_inode_alloc+0x39/0x310 [ 299.177005][T10956] security_inode_alloc+0x39/0x310 [ 299.177033][T10956] inode_init_always_gfp+0x99a/0xd50 [ 299.177077][T10956] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 299.177113][T10956] alloc_inode+0x82/0x1b0 [ 299.177149][T10956] new_inode+0x22/0x170 [ 299.177173][T10956] ? resv_map_alloc+0x200/0x2e0 [ 299.177217][T10956] hugetlbfs_get_inode+0x78/0x650 [ 299.177258][T10956] hugetlb_file_setup+0x21d/0x630 [ 299.177294][T10956] ksys_mmap_pgoff+0x22e/0x720 [ 299.177332][T10956] ? __x64_sys_mmap+0x7f/0x140 [ 299.177362][T10956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.177394][T10956] do_syscall_64+0x174/0x580 [ 299.177425][T10956] ? trace_irq_disable+0x3b/0x140 [ 299.177455][T10956] ? clear_bhb_loop+0x40/0x90 [ 299.177486][T10956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.177511][T10956] RIP: 0033:0x7fc58c69ce59 [ 299.177533][T10956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.177555][T10956] RSP: 002b:00007fc58a8f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 299.177586][T10956] RAX: ffffffffffffffda RBX: 00007fc58c915fa0 RCX: 00007fc58c69ce59 [ 299.177604][T10956] RDX: 0000000000000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 299.177619][T10956] RBP: 00007fc58a8f6090 R08: ffffffffffffffff R09: 0000000001000000 [ 299.177636][T10956] R10: 0000000000040033 R11: 0000000000000246 R12: 0000000000000001 [ 299.177657][T10956] R13: 00007fc58c916038 R14: 00007fc58c915fa0 R15: 00007ffe80a78488 [ 299.177694][T10956] [ 299.503727][ T32] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 299.621699][ T1033] bridge_slave_1: left allmulticast mode [ 299.622009][ T1033] bridge_slave_1: left promiscuous mode [ 299.643855][ T32] usb 3-1: device descriptor read/64, error -71 [ 299.693712][ T1033] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.758122][ T32] usb usb3-port1: attempt power cycle [ 300.034233][ T37] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 300.069438][ T1033] bridge_slave_0: left allmulticast mode [ 300.069477][ T1033] bridge_slave_0: left promiscuous mode [ 300.072811][ T1033] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.147049][ T32] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 300.173977][ T32] usb 3-1: device descriptor read/8, error -71 [ 300.276228][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.276277][ T37] usb 4-1: config 0 interface 0 has no altsetting 0 [ 300.279220][ T37] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 300.279252][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.279276][ T37] usb 4-1: Product: syz [ 300.279293][ T37] usb 4-1: Manufacturer: syz [ 300.279310][ T37] usb 4-1: SerialNumber: syz [ 300.327357][ T37] usb 4-1: config 0 descriptor?? [ 300.355510][ T37] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 300.396157][ T37] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 300.398320][ T37] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 300.398385][ T37] usb 4-1: media controller created [ 300.425162][ T32] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 300.451756][ T32] usb 3-1: device descriptor read/8, error -71 [ 300.572270][ T32] usb usb3-port1: unable to enumerate USB device [ 300.632185][ T37] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 300.830884][ T37] DVB: Unable to find symbol tda10046_attach() [ 300.830902][ T37] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 300.830919][ T37] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 301.002961][T11005] tmpfs: Bad value for 'mpol' [ 301.515755][ T37] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 301.561599][ T37] usb 4-1: USB disconnect, device number 48 [ 301.838840][T11023] FAULT_INJECTION: forcing a failure. [ 301.838840][T11023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.838886][T11023] CPU: 0 UID: 0 PID: 11023 Comm: syz.2.1620 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 301.838916][T11023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 301.838934][T11023] Call Trace: [ 301.838945][T11023] [ 301.838956][T11023] dump_stack_lvl+0xe8/0x150 [ 301.838995][T11023] should_fail_ex+0x46b/0x600 [ 301.839040][T11023] _copy_from_user+0x2d/0xb0 [ 301.839070][T11023] __se_sys_mount+0x18b/0x420 [ 301.839105][T11023] ? __pfx___se_sys_mount+0x10/0x10 [ 301.839138][T11023] ? __x64_sys_mount+0x20/0xc0 [ 301.839164][T11023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.839195][T11023] do_syscall_64+0x174/0x580 [ 301.839229][T11023] ? trace_irq_disable+0x3b/0x140 [ 301.839263][T11023] ? clear_bhb_loop+0x40/0x90 [ 301.839300][T11023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.839329][T11023] RIP: 0033:0x7fa11f14ce59 [ 301.839352][T11023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.839375][T11023] RSP: 002b:00007fa11d39e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 301.839403][T11023] RAX: ffffffffffffffda RBX: 00007fa11f3c5fa0 RCX: 00007fa11f14ce59 [ 301.839423][T11023] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 301.839440][T11023] RBP: 00007fa11d39e090 R08: 0000200000000300 R09: 0000000000000000 [ 301.839458][T11023] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 301.839475][T11023] R13: 00007fa11f3c6038 R14: 00007fa11f3c5fa0 R15: 00007ffe18ab8fb8 [ 301.839522][T11023] [ 301.899257][T11023] fuse: blksize only supported for fuseblk [ 302.099228][ T5717] libceph: connect (1)[c::]:6789 error -101 [ 302.252769][T11028] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 302.270188][ T5717] libceph: mon0 (1)[c::]:6789 connect error [ 302.300761][T11031] FAULT_INJECTION: forcing a failure. [ 302.300761][T11031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.300800][T11031] CPU: 1 UID: 0 PID: 11031 Comm: syz.3.1622 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 302.300826][T11031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 302.300842][T11031] Call Trace: [ 302.300851][T11031] [ 302.300861][T11031] dump_stack_lvl+0xe8/0x150 [ 302.300895][T11031] should_fail_ex+0x46b/0x600 [ 302.300934][T11031] _copy_from_user+0x2d/0xb0 [ 302.300961][T11031] iommufd_fops_ioctl+0x461/0x5d0 [ 302.300993][T11031] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 302.301025][T11031] ? __fget_files+0x2a/0x420 [ 302.301056][T11031] ? __fget_files+0x2a/0x420 [ 302.301083][T11031] ? bpf_lsm_file_ioctl+0x9/0x20 [ 302.301111][T11031] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 302.301140][T11031] __se_sys_ioctl+0xff/0x170 [ 302.301170][T11031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.301196][T11031] do_syscall_64+0x174/0x580 [ 302.301223][T11031] ? trace_irq_disable+0x3b/0x140 [ 302.301252][T11031] ? clear_bhb_loop+0x40/0x90 [ 302.301281][T11031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.301304][T11031] RIP: 0033:0x7f3a56efce59 [ 302.301333][T11031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.301355][T11031] RSP: 002b:00007f3a55135028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.301380][T11031] RAX: ffffffffffffffda RBX: 00007f3a57176090 RCX: 00007f3a56efce59 [ 302.301398][T11031] RDX: 00002000000003c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 302.301414][T11031] RBP: 00007f3a55135090 R08: 0000000000000000 R09: 0000000000000000 [ 302.301430][T11031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.301445][T11031] R13: 00007f3a57176128 R14: 00007f3a57176090 R15: 00007ffc948dcd58 [ 302.301481][T11031] [ 302.379850][ T5717] libceph: connect (1)[c::]:6789 error -101 [ 302.380464][ T5717] libceph: mon0 (1)[c::]:6789 connect error [ 302.503726][ T5628] Bluetooth: hci1: command 0x0406 tx timeout [ 302.522330][T11005] ceph: No mds server is up or the cluster is laggy [ 302.648627][ T5717] libceph: connect (1)[c::]:6789 error -101 [ 302.648838][ T5717] libceph: mon0 (1)[c::]:6789 connect error [ 303.183690][ T5758] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 303.398635][ T5758] usb 4-1: unable to get BOS descriptor or descriptor too short [ 303.400392][ T5758] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.400420][ T5758] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 303.594881][ T5704] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 303.754893][ T5704] usb 3-1: Using ep0 maxpacket: 32 [ 303.757576][ T5704] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.757607][ T5704] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 303.757652][ T5704] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 303.757707][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.780784][ T5704] usb 3-1: config 0 descriptor?? [ 303.890287][ T1033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.038969][ T1033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.227021][ T1033] bond0 (unregistering): Released all slaves [ 304.234682][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 304.234897][ T5704] usb 3-1: string descriptor 0 read error: -32 [ 304.290910][ T5704] usb 3-1: USB disconnect, device number 56 [ 304.430665][T10558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.658594][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 305.043867][T11100] FAULT_INJECTION: forcing a failure. [ 305.043867][T11100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.043906][T11100] CPU: 1 UID: 0 PID: 11100 Comm: syz.2.1637 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 305.043934][T11100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 305.043949][T11100] Call Trace: [ 305.043959][T11100] [ 305.043970][T11100] dump_stack_lvl+0xe8/0x150 [ 305.044006][T11100] should_fail_ex+0x46b/0x600 [ 305.044045][T11100] _copy_from_user+0x2d/0xb0 [ 305.044073][T11100] memdup_user+0x5e/0xd0 [ 305.044104][T11100] strndup_user+0x68/0xd0 [ 305.044136][T11100] __se_sys_mount+0xdf/0x420 [ 305.044163][T11100] ? ksys_write+0x248/0x270 [ 305.044195][T11100] ? __pfx___se_sys_mount+0x10/0x10 [ 305.044225][T11100] ? __x64_sys_mount+0x20/0xc0 [ 305.044248][T11100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.044273][T11100] do_syscall_64+0x174/0x580 [ 305.044305][T11100] ? trace_irq_disable+0x3b/0x140 [ 305.044336][T11100] ? clear_bhb_loop+0x40/0x90 [ 305.044364][T11100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.044388][T11100] RIP: 0033:0x7fa11f14ce59 [ 305.044409][T11100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.044430][T11100] RSP: 002b:00007fa11d39e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 305.044454][T11100] RAX: ffffffffffffffda RBX: 00007fa11f3c5fa0 RCX: 00007fa11f14ce59 [ 305.044474][T11100] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 00002000000002c0 [ 305.044493][T11100] RBP: 00007fa11d39e090 R08: 0000200000000100 R09: 0000000000000000 [ 305.044509][T11100] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 305.044532][T11100] R13: 00007fa11f3c6038 R14: 00007fa11f3c5fa0 R15: 00007ffe18ab8fb8 [ 305.044568][T11100] [ 305.316808][T10558] team0: Port device team_slave_0 added [ 305.359060][T10558] team0: Port device team_slave_1 added [ 305.500901][ T1033] tipc: Left network mode [ 305.621379][T11124] overlay: filesystem on ./file0 not supported as upperdir [ 305.633738][ T5347] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 305.863488][ T5347] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 305.865914][ T5347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.865943][ T5347] usb 3-1: Product: syz [ 305.865960][ T5347] usb 3-1: Manufacturer: syz [ 305.865977][ T5347] usb 3-1: SerialNumber: syz [ 305.961391][ T5347] usb 3-1: config 0 descriptor?? [ 306.033310][ T5758] usb 4-1: New USB device found, idVendor=1235, idProduct=8208, bcdDevice= 0.40 [ 306.033344][ T5758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.090491][T10558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.090511][T10558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.090545][T10558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.146928][ T5758] usb 4-1: can't set config #1, error -71 [ 306.161778][ T5758] usb 4-1: USB disconnect, device number 49 [ 306.181979][ T5347] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 306.683859][ T822] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 306.857311][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 306.857352][ T822] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 306.857399][ T822] usb 4-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 306.857435][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.925708][ T822] usb 4-1: config 0 descriptor?? [ 307.511715][T11172] FAULT_INJECTION: forcing a failure. [ 307.511715][T11172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.511750][T11172] CPU: 0 UID: 0 PID: 11172 Comm: syz.1.1646 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 307.511777][T11172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 307.511789][T11172] Call Trace: [ 307.511797][T11172] [ 307.511806][T11172] dump_stack_lvl+0xe8/0x150 [ 307.511836][T11172] should_fail_ex+0x46b/0x600 [ 307.511867][T11172] _copy_from_iter+0x1d3/0x1670 [ 307.511900][T11172] ? rcu_is_watching+0x15/0xb0 [ 307.511933][T11172] ? __pfx__copy_from_iter+0x10/0x10 [ 307.511960][T11172] ? __alloc_skb+0x27d/0x7d0 [ 307.511979][T11172] ? __alloc_skb+0x27d/0x7d0 [ 307.512004][T11172] ? netlink_sendmsg+0x650/0xb40 [ 307.512030][T11172] ? skb_put+0x11b/0x210 [ 307.512055][T11172] netlink_sendmsg+0x6c0/0xb40 [ 307.512087][T11172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.512114][T11172] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 307.512142][T11172] ? aa_sock_msg_perm+0x122/0x200 [ 307.512164][T11172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.512190][T11172] sock_sendmsg_nosec+0x13a/0x180 [ 307.512225][T11172] ____sys_sendmsg+0x55c/0x870 [ 307.512262][T11172] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.512297][T11172] ? import_iovec+0x73/0xa0 [ 307.512322][T11172] ___sys_sendmsg+0x2a5/0x360 [ 307.512346][T11172] ? __lock_acquire+0x6b5/0x2d10 [ 307.512384][T11172] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.512445][T11172] ? __fget_files+0x2a/0x420 [ 307.512469][T11172] ? __fget_files+0x3a6/0x420 [ 307.512500][T11172] __x64_sys_sendmsg+0x1b7/0x290 [ 307.512532][T11172] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 307.512576][T11172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.512603][T11172] do_syscall_64+0x174/0x580 [ 307.512633][T11172] ? trace_irq_disable+0x3b/0x140 [ 307.512661][T11172] ? clear_bhb_loop+0x40/0x90 [ 307.512687][T11172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.512707][T11172] RIP: 0033:0x7fc58c69ce59 [ 307.512725][T11172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.512744][T11172] RSP: 002b:00007fc58a8f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.512766][T11172] RAX: ffffffffffffffda RBX: 00007fc58c915fa0 RCX: 00007fc58c69ce59 [ 307.512780][T11172] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000004 [ 307.512794][T11172] RBP: 00007fc58a8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 307.512806][T11172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.512818][T11172] R13: 00007fc58c916038 R14: 00007fc58c915fa0 R15: 00007ffe80a78488 [ 307.512848][T11172] [ 307.522156][T10558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.522258][T10558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.522413][T10558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.090505][T11113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.120351][T11113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.343171][T11144] pimreg: entered allmulticast mode [ 308.369435][T11147] pimreg: left allmulticast mode [ 308.688034][ T822] usbhid 4-1:0.0: can't add hid device: -71 [ 308.688170][ T822] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 308.726402][ T822] usb 4-1: USB disconnect, device number 50 [ 308.802630][ T5347] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 308.851773][ T5347] usb 3-1: USB disconnect, device number 57 [ 309.367140][T10558] hsr_slave_0: entered promiscuous mode [ 309.371119][T10558] hsr_slave_1: entered promiscuous mode [ 309.428326][T10558] debugfs: 'hsr0' already exists in 'hsr' [ 309.428356][T10558] Cannot create hsr debugfs directory [ 309.532897][T11260] FAULT_INJECTION: forcing a failure. [ 309.532897][T11260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.532935][T11260] CPU: 1 UID: 0 PID: 11260 Comm: syz.2.1655 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 309.532962][T11260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 309.532978][T11260] Call Trace: [ 309.532988][T11260] [ 309.532998][T11260] dump_stack_lvl+0xe8/0x150 [ 309.533032][T11260] should_fail_ex+0x46b/0x600 [ 309.533070][T11260] _copy_from_iter+0x1d3/0x1670 [ 309.533123][T11260] ? rcu_is_watching+0x15/0xb0 [ 309.533167][T11260] ? __pfx__copy_from_iter+0x10/0x10 [ 309.533201][T11260] ? __alloc_skb+0x27d/0x7d0 [ 309.533225][T11260] ? __alloc_skb+0x27d/0x7d0 [ 309.533256][T11260] ? netlink_sendmsg+0x650/0xb40 [ 309.533284][T11260] ? skb_put+0x11b/0x210 [ 309.533313][T11260] netlink_sendmsg+0x6c0/0xb40 [ 309.533350][T11260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.533382][T11260] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 309.533414][T11260] ? aa_sock_msg_perm+0x122/0x200 [ 309.533441][T11260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.533469][T11260] sock_sendmsg_nosec+0x13a/0x180 [ 309.533568][T11260] ____sys_sendmsg+0x55c/0x870 [ 309.533603][T11260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.533641][T11260] ? import_iovec+0x73/0xa0 [ 309.533671][T11260] ___sys_sendmsg+0x2a5/0x360 [ 309.533698][T11260] ? __lock_acquire+0x6b5/0x2d10 [ 309.533734][T11260] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.533797][T11260] ? __fget_files+0x2a/0x420 [ 309.533821][T11260] ? __fget_files+0x3a6/0x420 [ 309.533856][T11260] __x64_sys_sendmsg+0x1b7/0x290 [ 309.533889][T11260] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 309.533938][T11260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.533965][T11260] do_syscall_64+0x174/0x580 [ 309.533994][T11260] ? trace_irq_disable+0x3b/0x140 [ 309.534024][T11260] ? clear_bhb_loop+0x40/0x90 [ 309.534054][T11260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.534078][T11260] RIP: 0033:0x7fa11f14ce59 [ 309.534101][T11260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.534122][T11260] RSP: 002b:00007fa11d39e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.534147][T11260] RAX: ffffffffffffffda RBX: 00007fa11f3c5fa0 RCX: 00007fa11f14ce59 [ 309.534166][T11260] RDX: 0000000020008800 RSI: 0000200000000100 RDI: 0000000000000003 [ 309.534182][T11260] RBP: 00007fa11d39e090 R08: 0000000000000000 R09: 0000000000000000 [ 309.534197][T11260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.534211][T11260] R13: 00007fa11f3c6038 R14: 00007fa11f3c5fa0 R15: 00007ffe18ab8fb8 [ 309.534247][T11260] [ 310.224233][ T5628] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260 [ 310.290953][T11290] 9p: Bad value for 'rfdno' [ 310.503869][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 310.652949][T11303] sg_write: data in/out 455644/242 bytes for SCSI command 0x0-- guessing data in; [ 310.652949][T11303] program syz.3.1663 not setting count and/or reply_len properly [ 310.663729][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 310.680129][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 310.680161][ T10] usb 3-1: config 0 has no interface number 0 [ 310.680211][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.680240][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.680283][ T10] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 310.680310][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.762097][ T10] usb 3-1: config 0 descriptor?? [ 310.800181][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 311.120705][T11323] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1666'. [ 311.395158][ T10] hid (null): unknown global tag 0xd [ 311.404950][ T10] hid (null): report_id 1484270440 is invalid [ 311.405013][ T10] hid (null): unknown global tag 0x8c [ 311.622249][T11364] FAULT_INJECTION: forcing a failure. [ 311.622249][T11364] name failslab, interval 1, probability 0, space 0, times 0 [ 311.622285][T11364] CPU: 0 UID: 0 PID: 11364 Comm: syz.3.1670 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 311.622313][T11364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 311.622328][T11364] Call Trace: [ 311.622338][T11364] [ 311.622348][T11364] dump_stack_lvl+0xe8/0x150 [ 311.622390][T11364] should_fail_ex+0x46b/0x600 [ 311.622429][T11364] should_failslab+0xa8/0x100 [ 311.622459][T11364] __kmalloc_cache_noprof+0xa0/0x6d0 [ 311.622485][T11364] ? percpu_ref_init+0xc5/0x360 [ 311.622517][T11364] ? percpu_ref_init+0xc5/0x360 [ 311.622555][T11364] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 311.622586][T11364] percpu_ref_init+0xc5/0x360 [ 311.622625][T11364] io_ring_ctx_alloc+0x33d/0xd20 [ 311.622668][T11364] io_uring_create+0x50/0x9a0 [ 311.622707][T11364] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 311.622738][T11364] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 311.622762][T11364] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 311.622809][T11364] ? __pfx_ksys_write+0x10/0x10 [ 311.622848][T11364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.622873][T11364] do_syscall_64+0x174/0x580 [ 311.622904][T11364] ? trace_irq_disable+0x3b/0x140 [ 311.622933][T11364] ? clear_bhb_loop+0x40/0x90 [ 311.622962][T11364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.622986][T11364] RIP: 0033:0x7f3a56efce59 [ 311.623010][T11364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.623030][T11364] RSP: 002b:00007f3a55155ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 311.623055][T11364] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007f3a56efce59 [ 311.623072][T11364] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 00000000000003c9 [ 311.623089][T11364] RBP: 0000200000000800 R08: 0000200000000340 R09: 0000000000000000 [ 311.623106][T11364] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 311.623123][T11364] R13: 0000200000000890 R14: 00007f3a55155fd8 R15: 0000000000000000 [ 311.623156][T11364] [ 311.770102][ T5704] usb 3-1: USB disconnect, device number 58 [ 312.023251][T11390] FAULT_INJECTION: forcing a failure. [ 312.023251][T11390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.023290][T11390] CPU: 0 UID: 0 PID: 11390 Comm: syz.3.1672 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 312.023321][T11390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 312.023345][T11390] Call Trace: [ 312.023356][T11390] [ 312.023366][T11390] dump_stack_lvl+0xe8/0x150 [ 312.023399][T11390] should_fail_ex+0x46b/0x600 [ 312.023440][T11390] _copy_to_user+0x31/0xb0 [ 312.023468][T11390] simple_read_from_buffer+0xe1/0x170 [ 312.023498][T11390] proc_fail_nth_read+0x1be/0x230 [ 312.023526][T11390] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.023553][T11390] ? rw_verify_area+0x2ac/0x4e0 [ 312.023581][T11390] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.023607][T11390] vfs_read+0x212/0xa80 [ 312.023644][T11390] ? __pfx_vfs_read+0x10/0x10 [ 312.023674][T11390] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 312.023705][T11390] ? lockdep_hardirqs_on+0x7a/0x110 [ 312.023734][T11390] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 312.023764][T11390] ? mutex_lock_nested+0x152/0x1d0 [ 312.023799][T11390] ? fdget_pos+0x252/0x320 [ 312.023832][T11390] ksys_read+0x156/0x270 [ 312.023864][T11390] ? __pfx_ksys_read+0x10/0x10 [ 312.023899][T11390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.023926][T11390] do_syscall_64+0x174/0x580 [ 312.023956][T11390] ? trace_irq_disable+0x3b/0x140 [ 312.023985][T11390] ? clear_bhb_loop+0x40/0x90 [ 312.024013][T11390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.024038][T11390] RIP: 0033:0x7f3a56ebd68e [ 312.024059][T11390] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 312.024081][T11390] RSP: 002b:00007f3a55155fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.024107][T11390] RAX: ffffffffffffffda RBX: 00007f3a551566c0 RCX: 00007f3a56ebd68e [ 312.024125][T11390] RDX: 000000000000000f RSI: 00007f3a551560a0 RDI: 0000000000000003 [ 312.024140][T11390] RBP: 00007f3a55156090 R08: 0000000000000000 R09: 0000000000000000 [ 312.024156][T11390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.024171][T11390] R13: 00007f3a57176038 R14: 00007f3a57175fa0 R15: 00007ffc948dcd58 [ 312.024207][T11390] [ 312.340965][ T1033] hsr_slave_0: left promiscuous mode [ 312.377917][ T1033] hsr_slave_1: left promiscuous mode [ 312.520212][ T1033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.520376][ T1033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.566240][ T5347] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 312.617818][ T1033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.617850][ T1033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.723815][ T5347] usb 4-1: Using ep0 maxpacket: 32 [ 312.727576][ T5347] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 312.727637][ T5347] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.727696][ T5347] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 312.727725][ T5347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.789614][ T5347] usb 4-1: config 0 descriptor?? [ 312.805034][ T5347] hub 4-1:0.0: bad descriptor, ignoring hub [ 312.805072][ T5347] hub 4-1:0.0: probe with driver hub failed with error -5 [ 312.809333][ T5347] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 313.132396][ T1033] veth1_macvtap: left promiscuous mode [ 313.132704][ T1033] veth0_macvtap: left promiscuous mode [ 313.185445][ T1033] veth1_vlan: left promiscuous mode [ 313.218967][ T1033] veth0_vlan: left promiscuous mode [ 313.578278][T11436] overlayfs: failed to resolve './bus': -2 [ 314.018263][ T5628] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 314.588735][T11478] FAULT_INJECTION: forcing a failure. [ 314.588735][T11478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.588776][T11478] CPU: 0 UID: 0 PID: 11478 Comm: syz.1.1692 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 314.588803][T11478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 314.588818][T11478] Call Trace: [ 314.588828][T11478] [ 314.588838][T11478] dump_stack_lvl+0xe8/0x150 [ 314.588873][T11478] should_fail_ex+0x46b/0x600 [ 314.588913][T11478] _copy_from_user+0x2d/0xb0 [ 314.588941][T11478] __sys_bind+0x1cc/0x410 [ 314.588977][T11478] ? __pfx___sys_bind+0x10/0x10 [ 314.589014][T11478] ? __pfx_ksys_write+0x10/0x10 [ 314.589048][T11478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.589075][T11478] __x64_sys_bind+0x7a/0x90 [ 314.589100][T11478] do_syscall_64+0x174/0x580 [ 314.589131][T11478] ? trace_irq_disable+0x3b/0x140 [ 314.589167][T11478] ? clear_bhb_loop+0x40/0x90 [ 314.589197][T11478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.589221][T11478] RIP: 0033:0x7fc58c69ce59 [ 314.589243][T11478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.589264][T11478] RSP: 002b:00007fc58a8f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 314.589290][T11478] RAX: ffffffffffffffda RBX: 00007fc58c915fa0 RCX: 00007fc58c69ce59 [ 314.589308][T11478] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 314.589324][T11478] RBP: 00007fc58a8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 314.589340][T11478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.589355][T11478] R13: 00007fc58c916038 R14: 00007fc58c915fa0 R15: 00007ffe80a78488 [ 314.589391][T11478] [ 315.194442][ T1033] team0 (unregistering): Port device team_slave_1 removed [ 315.324437][ T1033] team0 (unregistering): Port device team_slave_0 removed [ 315.524142][ T5704] usb 4-1: USB disconnect, device number 51 [ 316.335983][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 316.833105][ T5628] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 316.833135][ T5628] CPU: 1 UID: 0 PID: 5628 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 316.833164][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.833179][ T5628] Workqueue: hci1 hci_rx_work [ 316.833212][ T5628] Call Trace: [ 316.833221][ T5628] [ 316.833233][ T5628] dump_stack_lvl+0xe8/0x150 [ 316.833264][ T5628] sysfs_create_dir_ns+0x271/0x2a0 [ 316.833304][ T5628] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 316.833333][ T5628] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 316.833374][ T5628] ? rt_spin_unlock+0x160/0x200 [ 316.833400][ T5628] kobject_add_internal+0x631/0xd10 [ 316.833448][ T5628] kobject_add+0x163/0x240 [ 316.833495][ T5628] ? __pfx_kobject_add+0x10/0x10 [ 316.833538][ T5628] ? get_device_parent+0x370/0x3a0 [ 316.833572][ T5628] device_add+0x408/0xb90 [ 316.833606][ T5628] hci_conn_add_sysfs+0xd5/0x210 [ 316.833634][ T5628] le_conn_complete_evt+0x10e6/0x16b0 [ 316.833689][ T5628] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 316.833726][ T5628] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 316.833757][ T5628] ? lockdep_hardirqs_on+0x7a/0x110 [ 316.833791][ T5628] ? skb_pull_data+0xfb/0x200 [ 316.833832][ T5628] hci_le_conn_complete_evt+0x187/0x470 [ 316.833873][ T5628] hci_event_packet+0x659/0xef0 [ 316.833908][ T5628] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 316.833932][ T5628] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 316.833963][ T5628] ? __pfx_hci_event_packet+0x10/0x10 [ 316.833989][ T5628] ? rt_spin_unlock+0x14f/0x200 [ 316.834023][ T5628] ? hci_send_to_monitor+0xe2/0x590 [ 316.834064][ T5628] hci_rx_work+0x3ee/0x1040 [ 316.834102][ T5628] ? process_one_work+0x8be/0x1630 [ 316.834133][ T5628] process_one_work+0x98b/0x1630 [ 316.834181][ T5628] ? __pfx_process_one_work+0x10/0x10 [ 316.834211][ T5628] ? do_raw_spin_lock+0x12b/0x2f0 [ 316.834248][ T5628] worker_thread+0xb49/0x1140 [ 316.834303][ T5628] kthread+0x388/0x470 [ 316.834327][ T5628] ? __pfx_worker_thread+0x10/0x10 [ 316.834357][ T5628] ? __pfx_kthread+0x10/0x10 [ 316.834382][ T5628] ret_from_fork+0x514/0xb70 [ 316.834409][ T5628] ? __pfx_ret_from_fork+0x10/0x10 [ 316.834439][ T5628] ? __switch_to+0xc79/0x1410 [ 316.834465][ T5628] ? __pfx_kthread+0x10/0x10 [ 316.834494][ T5628] ret_from_fork_asm+0x1a/0x30 [ 316.834544][ T5628] [ 316.836401][ T5628] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 316.836455][ T5628] Bluetooth: hci1: failed to register connection device [ 317.220262][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.220362][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.682610][T11578] netlink: 37 bytes leftover after parsing attributes in process `syz.2.1713'. [ 317.723666][ T10] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 317.893749][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 317.896566][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.896606][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has an invalid bInterval 128, changing to 11 [ 317.896637][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 317.896673][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 317.896698][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.932328][ T10] usb 4-1: config 0 descriptor?? [ 318.088252][ T5628] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 318.088411][ T5628] Bluetooth: hci2: Injecting HCI hardware error event [ 318.109512][ T5628] Bluetooth: hci2: hardware error 0x00 [ 318.172979][T11596] FAULT_INJECTION: forcing a failure. [ 318.172979][T11596] name failslab, interval 1, probability 0, space 0, times 0 [ 318.173015][T11596] CPU: 1 UID: 0 PID: 11596 Comm: syz.1.1714 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 318.173038][T11596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 318.173051][T11596] Call Trace: [ 318.173059][T11596] [ 318.173069][T11596] dump_stack_lvl+0xe8/0x150 [ 318.173097][T11596] should_fail_ex+0x46b/0x600 [ 318.173132][T11596] should_failslab+0xa8/0x100 [ 318.173160][T11596] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 318.173196][T11596] ? __anon_vma_prepare+0xcb/0x4a0 [ 318.173216][T11596] ? __anon_vma_prepare+0xcb/0x4a0 [ 318.173245][T11596] __anon_vma_prepare+0xcb/0x4a0 [ 318.173273][T11596] uffd_lock_vma+0x1f4/0x2d0 [ 318.173312][T11596] mfill_get_vma+0xc5/0x6d0 [ 318.173355][T11596] mfill_atomic_copy+0x1a4/0x15b0 [ 318.173397][T11596] ? __might_fault+0xaf/0x130 [ 318.173428][T11596] ? __might_fault+0xaf/0x130 [ 318.173460][T11596] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 318.173502][T11596] userfaultfd_ioctl+0x257a/0x86c0 [ 318.173541][T11596] ? stack_depot_save_flags+0x33/0x810 [ 318.173619][T11596] ? kasan_save_track+0x4f/0x80 [ 318.173640][T11596] ? kasan_save_track+0x3e/0x80 [ 318.173660][T11596] ? kasan_save_free_info+0x46/0x50 [ 318.173690][T11596] ? __kasan_slab_free+0x5c/0x80 [ 318.173713][T11596] ? kfree+0x1c5/0x6c0 [ 318.173747][T11596] ? tomoyo_path_number_perm+0x501/0x630 [ 318.173781][T11596] ? security_file_ioctl+0xc3/0x2a0 [ 318.173813][T11596] ? __se_sys_ioctl+0x47/0x170 [ 318.173842][T11596] ? do_syscall_64+0x174/0x580 [ 318.173870][T11596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.173897][T11596] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 318.173968][T11596] ? kasan_quarantine_put+0xbb/0x1f0 [ 318.174013][T11596] ? tomoyo_path_number_perm+0x219/0x630 [ 318.174057][T11596] ? do_vfs_ioctl+0x117b/0x1540 [ 318.174091][T11596] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 318.174160][T11596] ? __fget_files+0x2a/0x420 [ 318.174187][T11596] ? __fget_files+0x2a/0x420 [ 318.174210][T11596] ? __fget_files+0x3a6/0x420 [ 318.174233][T11596] ? __fget_files+0x2a/0x420 [ 318.174261][T11596] ? bpf_lsm_file_ioctl+0x9/0x20 [ 318.174288][T11596] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 318.174319][T11596] __se_sys_ioctl+0xff/0x170 [ 318.174349][T11596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.174375][T11596] do_syscall_64+0x174/0x580 [ 318.174403][T11596] ? trace_irq_disable+0x3b/0x140 [ 318.174432][T11596] ? clear_bhb_loop+0x40/0x90 [ 318.174460][T11596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.174484][T11596] RIP: 0033:0x7fc58c69ce59 [ 318.174505][T11596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.174525][T11596] RSP: 002b:00007fc58a8f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.174551][T11596] RAX: ffffffffffffffda RBX: 00007fc58c915fa0 RCX: 00007fc58c69ce59 [ 318.174576][T11596] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 318.174592][T11596] RBP: 00007fc58a8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 318.174608][T11596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.174622][T11596] R13: 00007fc58c916038 R14: 00007fc58c915fa0 R15: 00007ffe80a78488 [ 318.174660][T11596] [ 318.759833][ T10] hid (null): unknown global tag 0xc [ 318.759860][ T10] hid (null): unknown global tag 0xa3 [ 318.957154][ T10] wacom 0003:056A:032C.0004: unknown global tag 0xc [ 318.957182][ T10] wacom 0003:056A:032C.0004: item 0 1 1 12 parsing failed [ 318.959531][ T10] wacom 0003:056A:032C.0004: parse failed [ 318.959651][ T10] wacom 0003:056A:032C.0004: probe with driver wacom failed with error -22 [ 319.019364][ T10] usb 4-1: USB disconnect, device number 52 [ 319.242201][T11630] FAULT_INJECTION: forcing a failure. [ 319.242201][T11630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.242240][T11630] CPU: 0 UID: 0 PID: 11630 Comm: syz.1.1719 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 319.242268][T11630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 319.242284][T11630] Call Trace: [ 319.242293][T11630] [ 319.242304][T11630] dump_stack_lvl+0xe8/0x150 [ 319.242339][T11630] should_fail_ex+0x46b/0x600 [ 319.242378][T11630] _copy_from_user+0x2d/0xb0 [ 319.242406][T11630] binder_ioctl_write_read+0x167/0xa470 [ 319.242434][T11630] ? __kernel_text_address+0xd/0x30 [ 319.242464][T11630] ? unwind_get_return_address+0x4d/0x90 [ 319.242496][T11630] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 319.242526][T11630] ? arch_stack_walk+0xfb/0x150 [ 319.242568][T11630] ? try_to_take_rt_mutex+0x840/0xb00 [ 319.242607][T11630] ? __lock_acquire+0x6b5/0x2d10 [ 319.242644][T11630] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 319.242686][T11630] ? do_raw_spin_lock+0x12b/0x2f0 [ 319.242724][T11630] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 319.242753][T11630] ? lockdep_hardirqs_on+0x7a/0x110 [ 319.242784][T11630] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 319.242814][T11630] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 319.242841][T11630] ? reacquire_held_locks+0x104/0x190 [ 319.242876][T11630] ? rt_spin_lock+0x1e0/0x400 [ 319.242908][T11630] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 319.242936][T11630] ? rt_spin_unlock+0x14f/0x200 [ 319.242969][T11630] ? binder_get_thread+0x595/0x6d0 [ 319.242999][T11630] binder_ioctl+0x426/0x1b10 [ 319.243024][T11630] ? tomoyo_path_number_perm+0x219/0x630 [ 319.243062][T11630] ? tomoyo_path_number_perm+0x219/0x630 [ 319.243102][T11630] ? do_vfs_ioctl+0x117b/0x1540 [ 319.243133][T11630] ? __pfx_binder_ioctl+0x10/0x10 [ 319.243157][T11630] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 319.243224][T11630] ? __fget_files+0x2a/0x420 [ 319.243251][T11630] ? __fget_files+0x2a/0x420 [ 319.243274][T11630] ? __fget_files+0x3a6/0x420 [ 319.243297][T11630] ? __fget_files+0x2a/0x420 [ 319.243324][T11630] ? bpf_lsm_file_ioctl+0x9/0x20 [ 319.243353][T11630] ? __pfx_binder_ioctl+0x10/0x10 [ 319.243378][T11630] __se_sys_ioctl+0xff/0x170 [ 319.243415][T11630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.243443][T11630] do_syscall_64+0x174/0x580 [ 319.243473][T11630] ? trace_irq_disable+0x3b/0x140 [ 319.243501][T11630] ? clear_bhb_loop+0x40/0x90 [ 319.243529][T11630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.243552][T11630] RIP: 0033:0x7fc58c69ce59 [ 319.243573][T11630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.243593][T11630] RSP: 002b:00007fc58a8f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.243617][T11630] RAX: ffffffffffffffda RBX: 00007fc58c915fa0 RCX: 00007fc58c69ce59 [ 319.243635][T11630] RDX: 0000200000000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 319.243651][T11630] RBP: 00007fc58a8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 319.243666][T11630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.243680][T11630] R13: 00007fc58c916038 R14: 00007fc58c915fa0 R15: 00007ffe80a78488 [ 319.243716][T11630] [ 319.341421][T11630] binder: 11629:11630 ioctl c0306201 200000000000 returned -14 [ 320.514578][ T9] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 320.553746][T11675] FAULT_INJECTION: forcing a failure. [ 320.553746][T11675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.553792][T11675] CPU: 1 UID: 0 PID: 11675 Comm: syz.1.1727 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 320.553820][T11675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 320.553834][T11675] Call Trace: [ 320.553844][T11675] [ 320.553854][T11675] dump_stack_lvl+0xe8/0x150 [ 320.553887][T11675] should_fail_ex+0x46b/0x600 [ 320.553926][T11675] _copy_from_iter+0x1d3/0x1670 [ 320.553965][T11675] ? sock_alloc_send_pskb+0x8a2/0x9a0 [ 320.554004][T11675] ? __pfx__copy_from_iter+0x10/0x10 [ 320.554049][T11675] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 320.554085][T11675] skb_copy_datagram_from_iter+0xf5/0x710 [ 320.554120][T11675] ? dev_get_by_index+0x22/0x2f0 [ 320.554152][T11675] ? skb_put+0x11b/0x210 [ 320.554185][T11675] packet_sendmsg+0x35be/0x4fd0 [ 320.554240][T11675] ? _parse_integer_limit+0x192/0x1e0 [ 320.554280][T11675] ? __lock_acquire+0x6b5/0x2d10 [ 320.554326][T11675] ? __pfx_packet_sendmsg+0x10/0x10 [ 320.554364][T11675] ? aa_sk_perm+0x703/0x950 [ 320.554408][T11675] ? __pfx_aa_sk_perm+0x10/0x10 [ 320.554441][T11675] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 320.554475][T11675] ? aa_sock_msg_perm+0x122/0x200 [ 320.554499][T11675] ? __pfx_packet_sendmsg+0x10/0x10 [ 320.554533][T11675] sock_sendmsg_nosec+0x13a/0x180 [ 320.554572][T11675] __sys_sendto+0x41a/0x5a0 [ 320.554600][T11675] ? __pfx___sys_sendto+0x10/0x10 [ 320.554655][T11675] ? __pfx_ksys_write+0x10/0x10 [ 320.554690][T11675] __x64_sys_sendto+0xde/0x100 [ 320.554717][T11675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.554742][T11675] do_syscall_64+0x174/0x580 [ 320.554771][T11675] ? trace_irq_disable+0x3b/0x140 [ 320.554808][T11675] ? clear_bhb_loop+0x40/0x90 [ 320.554836][T11675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.554860][T11675] RIP: 0033:0x7fc58c69ce59 [ 320.554880][T11675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.554901][T11675] RSP: 002b:00007fc58a8f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 320.554927][T11675] RAX: ffffffffffffffda RBX: 00007fc58c915fa0 RCX: 00007fc58c69ce59 [ 320.554945][T11675] RDX: 000000000000000e RSI: 0000200000000100 RDI: 0000000000000003 [ 320.554960][T11675] RBP: 00007fc58a8f6090 R08: 0000200000000000 R09: 0000000000000014 [ 320.554977][T11675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.554992][T11675] R13: 00007fc58c916038 R14: 00007fc58c915fa0 R15: 00007ffe80a78488 [ 320.555028][T11675] [ 320.716454][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 320.716555][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 320.716639][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 320.716767][ T9] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 320.716838][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.814629][ T5628] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 320.829336][ T9] usb 3-1: config 0 descriptor?? [ 320.838243][T11660] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 321.225356][ T1033] IPVS: stop unused estimator thread 0... [ 321.272499][ T9] hid-multitouch 0003:1FD2:6007.0005: ignoring exceeding usage max [ 321.297676][ T9] hid-multitouch 0003:1FD2:6007.0005: unknown global tag 0xd [ 321.297704][ T9] hid-multitouch 0003:1FD2:6007.0005: item 0 4 1 13 parsing failed [ 321.300340][ T9] hid-multitouch 0003:1FD2:6007.0005: probe with driver hid-multitouch failed with error -22 [ 321.384458][ T5704] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 321.481332][ T9] usb 3-1: USB disconnect, device number 59 [ 321.569237][ T5704] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 321.569275][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.621764][ T5704] usb 4-1: config 0 descriptor?? [ 321.671313][ T5704] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 322.199776][T11724] FAULT_INJECTION: forcing a failure. [ 322.199776][T11724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.199817][T11724] CPU: 0 UID: 0 PID: 11724 Comm: syz.2.1733 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 322.199849][T11724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 322.199865][T11724] Call Trace: [ 322.199874][T11724] [ 322.199890][T11724] dump_stack_lvl+0xe8/0x150 [ 322.199926][T11724] should_fail_ex+0x46b/0x600 [ 322.199965][T11724] _copy_from_iter+0x1d3/0x1670 [ 322.200007][T11724] ? rcu_is_watching+0x15/0xb0 [ 322.200050][T11724] ? __pfx__copy_from_iter+0x10/0x10 [ 322.200083][T11724] ? __alloc_skb+0x27d/0x7d0 [ 322.200107][T11724] ? __alloc_skb+0x27d/0x7d0 [ 322.200147][T11724] ? netlink_sendmsg+0x650/0xb40 [ 322.200178][T11724] ? skb_put+0x11b/0x210 [ 322.200208][T11724] netlink_sendmsg+0x6c0/0xb40 [ 322.200248][T11724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.200281][T11724] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 322.200317][T11724] ? aa_sock_msg_perm+0x122/0x200 [ 322.200344][T11724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.200374][T11724] sock_sendmsg_nosec+0x13a/0x180 [ 322.200413][T11724] ____sys_sendmsg+0x55c/0x870 [ 322.200449][T11724] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.200490][T11724] ? import_iovec+0x73/0xa0 [ 322.200518][T11724] ___sys_sendmsg+0x2a5/0x360 [ 322.200547][T11724] ? __lock_acquire+0x6b5/0x2d10 [ 322.200580][T11724] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.200645][T11724] ? __fget_files+0x2a/0x420 [ 322.200669][T11724] ? __fget_files+0x3a6/0x420 [ 322.200702][T11724] __x64_sys_sendmsg+0x1b7/0x290 [ 322.200734][T11724] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 322.200783][T11724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.200810][T11724] do_syscall_64+0x174/0x580 [ 322.200841][T11724] ? trace_irq_disable+0x3b/0x140 [ 322.200871][T11724] ? clear_bhb_loop+0x40/0x90 [ 322.200900][T11724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.200925][T11724] RIP: 0033:0x7fa11f14ce59 [ 322.200948][T11724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.200969][T11724] RSP: 002b:00007fa11d39e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.200996][T11724] RAX: ffffffffffffffda RBX: 00007fa11f3c5fa0 RCX: 00007fa11f14ce59 [ 322.201013][T11724] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000005 [ 322.201030][T11724] RBP: 00007fa11d39e090 R08: 0000000000000000 R09: 0000000000000000 [ 322.201045][T11724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.201060][T11724] R13: 00007fa11f3c6038 R14: 00007fa11f3c5fa0 R15: 00007ffe18ab8fb8 [ 322.201096][T11724] [ 323.237477][ T5704] gspca_stv06xx: I2C: Read error writing address: -71 [ 323.310797][ T5704] usb 4-1: USB disconnect, device number 53 [ 323.363674][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 323.659341][T11774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1745'. [ 323.659367][T11774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1745'. [ 324.129717][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1751'. [ 324.238874][T10558] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 324.252226][T11793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.294188][ T5704] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 324.379652][T10558] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 324.381291][T10558] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 324.426282][T10558] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 324.470827][T10558] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 324.496265][ T5704] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.496310][ T5704] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 324.496331][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.535933][ T5704] usb 4-1: config 0 descriptor?? [ 324.560530][ T5704] pwc: Askey VC010 type 2 USB webcam detected. [ 324.741354][T10558] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 324.762931][T10558] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 324.978650][ T5704] pwc: recv_control_msg error -32 req 02 val 2b00 [ 324.979441][ T5704] pwc: recv_control_msg error -32 req 02 val 2700 [ 325.004130][ T5704] pwc: recv_control_msg error -32 req 02 val 2c00 [ 325.010368][T10558] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 325.011292][ T5704] pwc: recv_control_msg error -32 req 04 val 1000 [ 325.034964][ T5704] pwc: recv_control_msg error -32 req 04 val 1300 [ 325.054373][T11827] FAULT_INJECTION: forcing a failure. [ 325.054373][T11827] name failslab, interval 1, probability 0, space 0, times 0 [ 325.054406][T11827] CPU: 0 UID: 0 PID: 11827 Comm: syz.1.1754 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 325.054428][T11827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 325.054441][T11827] Call Trace: [ 325.054448][T11827] [ 325.054457][T11827] dump_stack_lvl+0xe8/0x150 [ 325.054487][T11827] should_fail_ex+0x46b/0x600 [ 325.054520][T11827] should_failslab+0xa8/0x100 [ 325.054544][T11827] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 325.054577][T11827] ? radix_tree_node_alloc+0xbf/0x3d0 [ 325.054601][T11827] ? radix_tree_node_alloc+0xbf/0x3d0 [ 325.054628][T11827] radix_tree_node_alloc+0xbf/0x3d0 [ 325.054651][T11827] ? __lock_acquire+0x6b5/0x2d10 [ 325.054678][T11827] idr_get_free+0x2b9/0xa70 [ 325.054710][T11827] idr_alloc_u32+0x193/0x330 [ 325.054739][T11827] ? __pfx_idr_alloc_u32+0x10/0x10 [ 325.054764][T11827] ? rcu_is_watching+0x15/0xb0 [ 325.054797][T11827] ? __pfx_rt_spin_lock+0x10/0x10 [ 325.054813][T11827] ? __local_bh_disable_ip+0x3c/0x420 [ 325.054847][T11827] idr_alloc+0x6e/0xd0 [ 325.054873][T11827] tipc_conn_alloc+0x338/0x500 [ 325.054896][T11827] ? tipc_conn_alloc+0x30d/0x500 [ 325.054924][T11827] tipc_topsrv_kern_subscr+0xf8/0x250 [ 325.054948][T11827] ? tipc_own_addr+0x45/0x2a0 [ 325.054976][T11827] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 325.055002][T11827] ? tipc_own_addr+0x45/0x2a0 [ 325.055028][T11827] ? __asan_memset+0x22/0x50 [ 325.055056][T11827] tipc_group_create+0x364/0x500 [ 325.055088][T11827] tipc_sk_join+0x256/0x6a0 [ 325.055115][T11827] ? __pfx_tipc_sk_join+0x10/0x10 [ 325.055137][T11827] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 325.055168][T11827] ? lockdep_hardirqs_on+0x7a/0x110 [ 325.055198][T11827] tipc_setsockopt+0x73e/0x990 [ 325.055224][T11827] ? __pfx_tipc_setsockopt+0x10/0x10 [ 325.055255][T11827] ? aa_sock_opt_perm+0x131/0x1f0 [ 325.055281][T11827] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 325.055302][T11827] ? __pfx_tipc_setsockopt+0x10/0x10 [ 325.055329][T11827] do_sock_setsockopt+0x17c/0x1b0 [ 325.055360][T11827] __x64_sys_setsockopt+0x143/0x1b0 [ 325.055389][T11827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.055412][T11827] do_syscall_64+0x174/0x580 [ 325.055436][T11827] ? trace_irq_disable+0x3b/0x140 [ 325.055461][T11827] ? clear_bhb_loop+0x40/0x90 [ 325.055486][T11827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.055506][T11827] RIP: 0033:0x7fc58c69ce59 [ 325.055525][T11827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.055543][T11827] RSP: 002b:00007fc58a8f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 325.055565][T11827] RAX: ffffffffffffffda RBX: 00007fc58c915fa0 RCX: 00007fc58c69ce59 [ 325.055581][T11827] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 325.055593][T11827] RBP: 00007fc58a8f6090 R08: 0000000000000010 R09: 0000000000000000 [ 325.055604][T11827] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 325.055616][T11827] R13: 00007fc58c916038 R14: 00007fc58c915fa0 R15: 00007ffe80a78488 [ 325.055644][T11827] [ 325.277815][ T5704] pwc: recv_control_msg error -32 req 02 val 2000 [ 325.283083][ T5704] pwc: recv_control_msg error -71 req 02 val 2100 [ 325.284557][ T5704] pwc: recv_control_msg error -71 req 04 val 1500 [ 325.303841][ T5704] pwc: recv_control_msg error -71 req 02 val 2500 [ 325.308319][ T5704] pwc: recv_control_msg error -71 req 02 val 2400 [ 325.313383][ T5704] pwc: recv_control_msg error -71 req 02 val 2600 [ 325.323315][ T5704] pwc: recv_control_msg error -71 req 02 val 2900 [ 325.332880][ T5704] pwc: recv_control_msg error -71 req 02 val 2800 [ 325.340207][ T5704] pwc: recv_control_msg error -71 req 04 val 1100 [ 325.345917][ T5704] pwc: recv_control_msg error -71 req 04 val 1200 [ 325.710580][ T5704] pwc: Registered as video103. [ 325.729941][ T5704] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 325.930205][ T5704] usb 4-1: USB disconnect, device number 54 [ 326.488192][T10558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.616686][T10558] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.720465][ T3427] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.720655][ T3427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.811077][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.811255][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.836487][ T5704] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 327.129112][ T5704] usb 4-1: Using ep0 maxpacket: 16 [ 327.143680][ T5704] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 327.143742][ T5704] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.143775][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 327.143807][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 327.143838][ T5704] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.143884][ T5704] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 327.143909][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.191795][ T5704] usb 4-1: config 0 descriptor?? [ 327.200930][T11868] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 327.364069][ T5704] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input24 [ 327.795494][ T5347] usb 4-1: USB disconnect, device number 55 [ 328.747612][ T5717] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 328.884186][ T5717] usb 2-1: device descriptor read/64, error -71 [ 328.916685][T11950] mmap: syz.3.1771 (11950): VmData 37593088 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 329.124732][ T5717] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 329.197619][T10558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.313759][ T5717] usb 2-1: device descriptor read/64, error -71 [ 329.323875][ T5704] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 329.399396][T10558] veth0_vlan: entered promiscuous mode [ 329.424096][ T5717] usb usb2-port1: attempt power cycle [ 329.425011][T10558] veth1_vlan: entered promiscuous mode [ 329.488940][ T5704] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.488997][ T5704] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 329.489015][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.526094][ T5704] usb 3-1: config 0 descriptor?? [ 329.551318][ T5704] pwc: Askey VC010 type 2 USB webcam detected. [ 329.682716][T10558] veth0_macvtap: entered promiscuous mode [ 329.726635][T10558] veth1_macvtap: entered promiscuous mode [ 329.812438][T10558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.840463][T10558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.854605][ T5717] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 329.884376][ T5717] usb 2-1: device descriptor read/8, error -71 [ 329.904894][ T1409] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.929928][ T1409] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.944968][ T5704] pwc: recv_control_msg error -32 req 02 val 2b00 [ 329.945679][ T5704] pwc: recv_control_msg error -32 req 02 val 2700 [ 329.950270][ T5704] pwc: recv_control_msg error -32 req 02 val 2c00 [ 329.950928][ T5704] pwc: recv_control_msg error -32 req 04 val 1000 [ 329.951255][ T1409] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.951590][ T5704] pwc: recv_control_msg error -32 req 04 val 1300 [ 329.961711][ T1409] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.158835][ T5717] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 330.159045][ T5704] pwc: recv_control_msg error -32 req 02 val 2000 [ 330.159429][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 330.159734][ T5704] pwc: recv_control_msg error -32 req 02 val 2100 [ 330.160321][ T5704] pwc: recv_control_msg error -71 req 04 val 1500 [ 330.161885][ T5704] pwc: recv_control_msg error -71 req 02 val 2500 [ 330.163403][ T5704] pwc: recv_control_msg error -71 req 02 val 2400 [ 330.164261][ T5704] pwc: recv_control_msg error -71 req 02 val 2600 [ 330.164865][ T5704] pwc: recv_control_msg error -71 req 02 val 2900 [ 330.165364][ T5704] pwc: recv_control_msg error -71 req 02 val 2800 [ 330.166152][ T5704] pwc: recv_control_msg error -71 req 04 val 1100 [ 330.166743][ T5704] pwc: recv_control_msg error -71 req 04 val 1200 [ 330.271828][ T5717] usb 2-1: device descriptor read/8, error -71 [ 330.348756][ T5704] pwc: Registered as video103. [ 330.351890][ T5704] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input25 [ 330.415624][ T5717] usb usb2-port1: unable to enumerate USB device [ 330.501441][ T5704] usb 3-1: USB disconnect, device number 60 [ 330.862749][ T5717] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 331.043284][T11997] FAULT_INJECTION: forcing a failure. [ 331.043284][T11997] name failslab, interval 1, probability 0, space 0, times 0 [ 331.043323][T11997] CPU: 0 UID: 0 PID: 11997 Comm: syz.2.1778 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 331.043351][T11997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 331.043367][T11997] Call Trace: [ 331.043377][T11997] [ 331.043388][T11997] dump_stack_lvl+0xe8/0x150 [ 331.043423][T11997] should_fail_ex+0x46b/0x600 [ 331.043463][T11997] should_failslab+0xa8/0x100 [ 331.043498][T11997] __kmalloc_cache_noprof+0xa0/0x6d0 [ 331.043526][T11997] ? drm_mode_setcrtc+0x88f/0x1d20 [ 331.043557][T11997] ? drm_mode_setcrtc+0x88f/0x1d20 [ 331.043595][T11997] drm_mode_setcrtc+0x88f/0x1d20 [ 331.043664][T11997] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 331.043701][T11997] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 331.043760][T11997] ? rt_spin_unlock+0x160/0x200 [ 331.043786][T11997] ? drm_is_current_master+0x1a2/0x210 [ 331.043812][T11997] drm_ioctl_kernel+0x2e2/0x3b0 [ 331.043846][T11997] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 331.043877][T11997] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 331.043919][T11997] drm_ioctl+0x6c0/0xb80 [ 331.043954][T11997] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 331.043990][T11997] ? __pfx_drm_ioctl+0x10/0x10 [ 331.044032][T11997] ? __fget_files+0x2a/0x420 [ 331.044061][T11997] ? bpf_lsm_file_ioctl+0x9/0x20 [ 331.044088][T11997] ? __pfx_drm_ioctl+0x10/0x10 [ 331.044118][T11997] __se_sys_ioctl+0xff/0x170 [ 331.044150][T11997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.044176][T11997] do_syscall_64+0x174/0x580 [ 331.044206][T11997] ? trace_irq_disable+0x3b/0x140 [ 331.044234][T11997] ? clear_bhb_loop+0x40/0x90 [ 331.044265][T11997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.044289][T11997] RIP: 0033:0x7fa11f14ce59 [ 331.044310][T11997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.044331][T11997] RSP: 002b:00007fa11d39e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 331.044357][T11997] RAX: ffffffffffffffda RBX: 00007fa11f3c5fa0 RCX: 00007fa11f14ce59 [ 331.044375][T11997] RDX: 0000200000000580 RSI: 00000000c06864a2 RDI: 0000000000000003 [ 331.044391][T11997] RBP: 00007fa11d39e090 R08: 0000000000000000 R09: 0000000000000000 [ 331.044406][T11997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.044421][T11997] R13: 00007fa11f3c6038 R14: 00007fa11f3c5fa0 R15: 00007ffe18ab8fb8 [ 331.044457][T11997] [ 331.045374][ T5717] usb 4-1: Using ep0 maxpacket: 16 [ 331.053816][ T5717] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 331.053874][ T5717] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 331.053903][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 331.053933][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 331.053963][ T5717] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 331.054005][ T5717] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 331.054029][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.377986][ T5717] usb 4-1: config 0 descriptor?? [ 331.399003][T11987] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 331.646447][ T5717] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input26 [ 331.853006][ T1033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.853028][ T1033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.046746][ T5717] usb 4-1: USB disconnect, device number 56 [ 332.074306][ T1409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.074328][ T1409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.852588][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 332.931962][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 332.933325][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 332.958428][ T10] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 332.959855][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 332.960865][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.104341][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 333.157018][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 333.157052][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.157074][ T10] usb 3-1: Product: syz [ 333.157090][ T10] usb 3-1: Manufacturer: syz [ 333.157107][ T10] usb 3-1: SerialNumber: syz [ 333.493311][ T5619] INFO: trying to register non-static key. [ 333.493326][ T5619] The code is fine but needs lockdep annotation, or maybe [ 333.493334][ T5619] you didn't initialize this object before use? [ 333.493341][ T5619] turning off the locking correctness validator. [ 333.493355][ T5619] CPU: 1 UID: 0 PID: 5619 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 333.493378][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 333.493399][ T5619] Call Trace: [ 333.493407][ T5619] [ 333.493420][ T5619] dump_stack_lvl+0xe8/0x150 [ 333.493448][ T5619] assign_lock_key+0x133/0x150 [ 333.493476][ T5619] register_lock_class+0xcc/0x2e0 [ 333.493504][ T5619] ? __schedule+0x1741/0x5550 [ 333.493527][ T5619] __lock_acquire+0xad/0x2d10 [ 333.493554][ T5619] ? __lock_acquire+0x6b5/0x2d10 [ 333.493577][ T5619] ? irqentry_exit+0x218/0x8c0 [ 333.493600][ T5619] ? trace_irq_disable+0x3b/0x140 [ 333.493627][ T5619] ? bt_accept_unlink+0x7d/0x2f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 333.493650][ T5619] lock_acquire+0x106/0x350 [ 333.493674][ T5619] ? bt_accept_unlink+0x7d/0x2f0 [ 333.493699][ T5619] ? __local_bh_disable_ip+0x3c/0x420 [ 333.493731][ T5619] rt_spin_lock+0x83/0x400 [ 333.493749][ T5619] ? bt_accept_unlink+0x7d/0x2f0 [ 333.493770][ T5619] ? trace_irq_disable+0x3b/0x140 [ 333.493796][ T5619] ? __pfx_rt_spin_lock+0x10/0x10 [ 333.493814][ T5619] ? __local_bh_disable_ip+0x3c/0x420 [ 333.493844][ T5619] ? rcu_is_watching+0x15/0xb0 [ 333.493871][ T5619] ? bt_accept_unlink+0x61/0x2f0 [ 333.493895][ T5619] bt_accept_unlink+0x7d/0x2f0 [ 333.493917][ T5619] ? __local_bh_enable_ip+0x1c2/0x2b0 [ 333.493943][ T5619] ? bt_accept_unlink+0x61/0x2f0 [ 333.493965][ T5619] l2cap_sock_teardown_cb+0x17e/0x490 [ 333.493986][ T5619] l2cap_chan_del+0x99/0x600 [ 333.494010][ T5619] l2cap_conn_del+0x33d/0x570 [ 333.494040][ T5619] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 333.494069][ T5619] hci_conn_hash_flush+0x10d/0x260 [ 333.494101][ T5619] hci_dev_close_sync+0x85d/0x1150 [ 333.494131][ T5619] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 333.494161][ T5619] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 333.494190][ T5619] ? hci_unregister_dev+0x22a/0x5b0 [ 333.494216][ T5619] hci_unregister_dev+0x232/0x5b0 [ 333.494243][ T5619] vhci_release+0x155/0x1b0 [ 333.494266][ T5619] ? __pfx_vhci_release+0x10/0x10 [ 333.494289][ T5619] __fput+0x461/0xa70 [ 333.494315][ T5619] task_work_run+0x1d9/0x270 [ 333.494345][ T5619] ? __pfx_task_work_run+0x10/0x10 [ 333.494372][ T5619] ? do_exit+0x70a/0x22c0 [ 333.494405][ T5619] ? kmem_cache_free+0x187/0x6c0 [ 333.494430][ T5619] ? put_net+0x191/0x260 [ 333.494461][ T5619] ? do_exit+0x70a/0x22c0 [ 333.494487][ T5619] do_exit+0x70f/0x22c0 [ 333.494514][ T5619] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 333.494542][ T5619] ? __pfx_do_exit+0x10/0x10 [ 333.494564][ T5619] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 333.494586][ T5619] ? reacquire_held_locks+0x104/0x190 [ 333.494619][ T5619] ? rt_spin_lock+0x1e0/0x400 [ 333.494645][ T5619] do_group_exit+0x21b/0x2d0 [ 333.494672][ T5619] ? rt_spin_unlock+0x160/0x200 [ 333.494694][ T5619] get_signal+0x1284/0x1330 [ 333.494737][ T5619] arch_do_signal_or_restart+0xbc/0x840 [ 333.494762][ T5619] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 333.494790][ T5619] ? ksys_read+0x202/0x270 [ 333.494820][ T5619] exit_to_user_mode_loop+0x104/0x710 [ 333.494848][ T5619] ? rcu_is_watching+0x15/0xb0 [ 333.494883][ T5619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.494907][ T5619] do_syscall_64+0x353/0x580 [ 333.494934][ T5619] ? trace_irq_disable+0x3b/0x140 [ 333.494961][ T5619] ? clear_bhb_loop+0x40/0x90 [ 333.494986][ T5619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.495009][ T5619] RIP: 0033:0x7fc58c65d68e [ 333.495029][ T5619] Code: Unable to access opcode bytes at 0x7fc58c65d664. [ 333.495042][ T5619] RSP: 002b:00007ffe80a78788 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 333.495067][ T5619] RAX: fffffffffffffe00 RBX: 0000555564862500 RCX: 00007fc58c65d68e [ 333.495085][ T5619] RDX: 0000000000000030 RSI: 00007ffe80a78880 RDI: 00000000000000f9 [ 333.495101][ T5619] RBP: 00007ffe80a7882c R08: 0000000000000000 R09: 0000000000000000 [ 333.495116][ T5619] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000028e [ 333.495130][ T5619] R13: 000000000000001c R14: 00000000000501dd R15: 00007ffe80a78880 [ 333.495155][ T5619] [ 333.497372][ T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 333.775232][T12044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.788296][T12044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.871483][ T10] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 333.876020][ T10] usb 3-1: unit 2 not found! [ 333.916023][ T5619] non-slab/vmalloc memory [ 333.916041][ T5619] list_del corruption. prev->next should be ffff88806074e780, but was 0000000000000000. (prev=ffff888026086780) [ 333.916822][ T5619] ------------[ cut here ]------------ [ 333.916835][ T5619] kernel BUG at lib/list_debug.c:64! [ 333.916873][ T5619] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 333.916898][ T5619] CPU: 1 UID: 0 PID: 5619 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 333.916925][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 333.916940][ T5619] RIP: 0010:__list_del_entry_valid_or_report+0x15a/0x190 [ 333.916984][ T5619] Code: e8 0b 4f 4b fd 43 80 3c 2c 00 74 08 4c 89 ff e8 dc f1 6b fd 49 8b 17 48 c7 c7 40 52 cc 8b 48 89 de 4c 89 f9 e8 77 ad 61 fc 90 <0f> 0b 4c 89 f7 e8 dc 4e 4b fd 43 80 3c 2c 00 74 08 4c 89 ff e8 ad [ 333.917004][ T5619] RSP: 0018:ffffc90004d876a0 EFLAGS: 00010246 [ 333.917025][ T5619] RAX: 000000000000006d RBX: ffff88806074e780 RCX: 256eb42b46d83b00 [ 333.917041][ T5619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.917055][ T5619] RBP: ffff88806074e780 R08: 0000000000000000 R09: 0000000000000000 [ 333.917069][ T5619] R10: dffffc0000000000 R11: ffffed10170e4903 R12: 1ffff11004c10cf0 [ 333.917086][ T5619] R13: dffffc0000000000 R14: ffff888026086780 R15: ffff888026086780 [ 333.917104][ T5619] FS: 0000000000000000(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 333.917122][ T5619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.917137][ T5619] CR2: 0000200000001000 CR3: 000000000e1b8000 CR4: 00000000003526f0 [ 333.917157][ T5619] Call Trace: [ 333.917167][ T5619] [ 333.917178][ T5619] bt_accept_unlink+0x8c/0x2f0 [ 333.917208][ T5619] ? __local_bh_enable_ip+0x1c2/0x2b0 [ 333.917242][ T5619] ? bt_accept_unlink+0x61/0x2f0 [ 333.917270][ T5619] l2cap_sock_teardown_cb+0x17e/0x490 [ 333.917305][ T5619] l2cap_chan_del+0x99/0x600 [ 333.917332][ [ 333.917332][ T5619] l2cap_conn_del+0x33d/0x570 [ 333.917368][ T5619] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 333.917402][ T5619] hci_conn_hash_flush+0x10d/0x260 [ 333.917443][ T5619] hci_dev_close_sync+0x85d/0x1150 [ 333.917479][ T5619] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 333.917510][ T5619] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 333.917540][ T5619] ? hci_unregister_dev+0x22a/0x5b0 [ 333.917568][ T5619] hci_unregister_dev+0x232/0x5b0 [ 333.917596][ T5619] vhci_release+0x155/0x1b0 [ 333.917621][ T5619] ? __pfx_vhci_release+0x10/0x10 [ 333.917645][ T5619] __fput+0x461/0xa70 [ 333.917671][ T5619] task_work_run+0x1d9/0x270 [ 333.917700][ T5619] ? __pfx_task_work_run+0x10/0x10 [ 333.917727][ T5619] ? do_exit+0x70a/0x22c0 [ 333.917750][ T5619] ? kmem_cache_free+0x187/0x6c0 [ 333.917773][ T5619] ? put_net+0x191/0x260 [ 333.917803][ T5619] ? do_exit+0x70a/0x22c0 [ 333.917829][ T5619] do_exit+0x70f/0x22c0 [ 333.917857][ T5619] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 333.917887][ T5619] ? __pfx_do_exit+0x10/0x10 [ 333.917912][ T5619] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 333.917934][ T5619] ? reacquire_held_locks+0x104/0x190 [ 333.917969][ T5619] ? rt_spin_lock+0x1e0/0x400 [ 333.917996][ T5619] do_group_exit+0x21b/0x2d0 [ 333.918023][ T5619] ? rt_spin_unlock+0x160/0x200 [ 333.918046][ T5619] get_signal+0x1284/0x1330 [ 333.918088][ T5619] arch_do_signal_or_restart+0xbc/0x840 [ 333.918115][ T5619] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 333.918143][ T5619] ? ksys_read+0x202/0x270 [ 333.918173][ T5619] exit_to_user_mode_loop+0x104/0x710 [ 333.918203][ T5619] ? rcu_is_watching+0x15/0xb0 [ 333.918239][ T5619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.918264][ T5619] do_syscall_64+0x353/0x580 [ 333.918300][ T5619] ? trace_irq_disable+0x3b/0x140 [ 333.918330][ T5619] ? clear_bhb_loop+0x40/0x90 [ 333.918356][ T5619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.918379][ T5619] RIP: 0033:0x7fc58c65d68e [ 333.918399][ T5619] Code: Unable to access opcode bytes at 0x7fc58c65d664. [ 333.918411][ T5619] RSP: 002b:00007ffe80a78788 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 333.918434][ T5619] RAX: fffffffffffffe00 RBX: 0000555564862500 RCX: 00007fc58c65d68e [ 333.918452][ T5619] RDX: 0000000000000030 RSI: 00007ffe80a78880 RDI: 00000000000000f9 [ 333.918467][ T5619] RBP: 00007ffe80a7882c R08: 0000000000000000 R09: 0000000000000000 [ 333.918482][ T5619] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000028e [ 333.918497][ T5619] R13: 000000000000001c R14: 00000000000501dd R15: 00007ffe80a78880 [ 333.918520][ T5619] [ 333.918528][ T5619] Modules linked in: [ 333.918572][ T5619] ---[ end trace 0000000000000000 ]--- [ 334.143283][ T5619] RIP: 0010:__list_del_entry_valid_or_report+0x15a/0x190 [ 334.143336][ T5619] Code: e8 0b 4f 4b fd 43 80 3c 2c 00 74 08 4c 89 ff e8 dc f1 6b fd 49 8b 17 48 c7 c7 40 52 cc 8b 48 89 de 4c 89 f9 e8 77 ad 61 fc 90 <0f> 0b 4c 89 f7 e8 dc 4e 4b fd 43 80 3c 2c 00 74 08 4c 89 ff e8 ad [ 334.143358][ T5619] RSP: 0018:ffffc90004d876a0 EFLAGS: 00010246 [ 334.143380][ T5619] RAX: 000000000000006d RBX: ffff88806074e780 RCX: 256eb42b46d83b00 [ 334.143398][ T5619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 334.143418][ T5619] RBP: ffff88806074e780 R08: 0000000000000000 R09: 0000000000000000 [ 334.143434][ T5619] R10: dffffc0000000000 R11: ffffed10170e4903 R12: 1ffff11004c10cf0 [ 334.143455][ T5619] R13: dffffc0000000000 R14: ffff888026086780 R15: ffff888026086780 [ 334.143473][ T5619] FS: 0000000000000000(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 334.148246][ T5619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 334.148269][ T5619] CR2: 0000200000001000 CR3: 000000000e1b8000 CR4: 00000000003526f0 [ 334.148294][ T5619] Kernel panic - not syncing: Fatal exception in interrupt [ 334.148910][ T5619] Kernel Offset: disabled