last executing test programs: 3.663347137s ago: executing program 4 (id=814): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x191400, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001600)={{r0}, 0x0, 0x8, @unused=[0x0, 0xffff, 0x5, 0xb7b], @name="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"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.104581653s ago: executing program 4 (id=817): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000020000140012800900090076657468000000000400028008000300", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0xd, 0x0, 0x4000000}, 0x44050) r3 = signalfd4(r0, &(0x7f0000000040)={[0xff]}, 0x8, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x30, &(0x7f0000001600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x374e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff4000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_fd={0x18, 0x8, 0x1, 0x0, r3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0xac, 0x1000, &(0x7f0000000580)=""/4096, 0x41000, 0x4b, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000340)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x40ed, r4, 0x6, &(0x7f0000000400)=[r3, r3], &(0x7f0000001580)=[{0x1, 0x2, 0x4, 0x1}, {0x0, 0x5, 0x7, 0x5}, {0x5, 0x4, 0x8, 0xc}, {0x2, 0x2, 0xa, 0x5}, {0x1, 0x4, 0x4, 0x6}, {0x4, 0x5, 0xf}], 0x10, 0x38000000}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0xc3ff, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000130001002dbd7000fedbdf250000000027ff36005fdc08a03c8d873e9001e1cac491058b16b5e89fd9a26941bbebd4075e42989ebc0f9bf3c5968ce702ec6d59a9e102c56d8e37eb7e68a0d89425ff71fa9906b0df7dfd4255624d3770e2d944826dd82688324fee456ef301b87758ff20393c035199e4284edfe067e541164cfb3ae9608b69dda5c64b623500be7628dadcfc52dc77abb574", @ANYRES32=r6, @ANYBLOB="24200000201900000500100004000000"], 0x28}, 0x1, 0x0, 0x0, 0xc0000c1}, 0x48814) r7 = syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d2d, 0x13500}, &(0x7f0000000240), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x21, &(0x7f0000000440), 0x1) r8 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000000000)=0xa, 0x4) 2.637339201s ago: executing program 4 (id=819): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000040)={0x0, {0x80000000, 0x1}}) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000080)=0x401) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000000c0)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc) ioctl$KVM_TDX_CAPABILITIES(r1, 0xc008aeba, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x1, 0x0, [{}]}}}) r2 = syz_open_dev$loop(&(0x7f0000000980), 0x40, 0x48100) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f00000009c0)) ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f0000000a00)={0xd4, 0x0, 0x1}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000ac0)) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000b00)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f0000000c00)={r4, &(0x7f0000000b40)=""/138}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000c80)={0x4, &(0x7f0000000c40)=[{0x60, 0x5, 0x4, 0x4}, {0x200, 0x1, 0xc8, 0x8a46}, {0x4, 0x25, 0x2, 0x10}, {0xc20, 0xb5, 0x6, 0xfffff573}]}, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), r3) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d40)={0x1b8, r6, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x11c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfe9c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x64}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @mcast2, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8b7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000fc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x2c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) timer_create(0x5, &(0x7f0000001200)={0x0, 0x3, 0x2, @thr={&(0x7f00000010c0)="4419b08b06ece67e823fca3952c7f0f444799df1a4873f7d797390becb5d374a3b4b6d6cb9d44b5c3dc6e838bdecc3106ae9ef3c1db0ce60384c832ce8dc91090763a8d62223cc48d692237bb4652d043fdd665d0fc02e6cac87083fcaaef9b12ccf1f641c66a5b2af916e2d9d36df08d436be9fcb264da3b5daf137cc016812c23b633c5158fe37a4c774dfb94b0abb4be6cb4ec0c2d06b2557dbb9777e50aca1ac8fb5ffaad407387e30520e5e9589f07ea6ee27763d2cbc5959a28772992cd81fb951df49f787952f0e3af0c70856b06a1b60c7a69dbbbe4b058d372d3cf89c24bc949e", &(0x7f00000011c0)="644223b1b9505f704f346ccee2ceca09bc37fcf0103707c566b07f58e20a69d46dfe2ee0f1396663169eb4950f6f3ead39e57c3d6c1e"}}, &(0x7f0000001240)=0x0) clock_gettime(0x0, &(0x7f0000001280)={0x0, 0x0}) timer_settime(r8, 0x1, &(0x7f00000012c0)={{r9, r10+60000000}, {0x77359400}}, &(0x7f0000001300)) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001340)=0x5ee0) r11 = epoll_create1(0x80000) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000001780)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001740)={&(0x7f0000001440)={0x2fc, r12, 0x600, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IE={0x1c9, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x46}, 0x8, 0x3, @broadcast, 0x6, 0xff, 0xb}}, @mesh_chsw={0x76, 0x6, {0x8, 0x6, 0x42, 0x9}}, @mic={0x8c, 0x18, {0x277, "867ab9b94bff", @long="a7ac1fd4d30e79ec5b5dcbca5827acd7"}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x26}, 0xff, 0xc7, @broadcast, 0xb, 0x5, 0xffffffff}}, @tim={0x5, 0x82, {0x4, 0xf9, 0xf0, "ee5f3999c23105fff8f8b046acdfd9f447d1b22b3cb55ba27173fb455cc8e6f9143de84b5165a6bfd43ed89057145702c23c29dcdebcdb15ee4299a3f16559c115e527b6c8b1e189c9e13894dd8da47bd62989ec11da6daab3eb9023d9a04e2238a63f5c65816c542255410b5e7112a6b554111f4661efc769d63bb2cb7f1d"}}, @random_vendor={0xdd, 0xcc, "6523b1addc815bb414c9cc427c4a01a9a4b40bda7da997160342ac26b3e7a8b60c9ab7a6330b9994f6f8976e72e19de7dc2abee407bb24716713e6f8ddf53bb9e3398a5747c640b26deb30147cc35116a7467f5e6bd66ad76d2c7cbc1877c1f44319cdddf4acd2f038bef51cfb325f410517b2131d3d0b95263c8f0ad37cc745a4a9c20c6231ef09feb1c2928888e12008b81b14128082511191adccb0d995b868c405377a53f48d1fa31d974200686b03bbce75f74bf16ae2e69c83f94fb904a3d39ab96e1494a04636fd95"}, @mic={0x8c, 0x10, {0x263, "daa7e99bb841", @short="c40fc2f429e820bc"}}, @chsw_timing={0x68, 0x4, {0xf000, 0x3}}, @cf={0x4, 0x6, {0x7a, 0x2d, 0xfffc, 0x9}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0xf2, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x23}, 0x5, 0xf, @device_a, 0x7ff, 0xfff, 0x80}}, @fast_bss_trans={0x37, 0xd5, {0x7f, 0x6, "c73b86c0de5cea2fd3ca9387973fab43", "9cc91b0733507f040d70e90763bcd214f70e5f220833d734f4ae626877f7ee7b", "bfd76cf9550fb01fe4f296d2b814569d5849d5c760d0fe01b746850cbf5ebd1d", [{0x3, 0xf, "7cac2bed63a0c06244f4a7a69c7b7c"}, {0x3, 0x24, "75593518150adeb981dee289f4699289ba678035f06e44e8a2489de1163f3f03463b53c7"}, {0x3, 0xf, "4bfa09df6439804d59de466b1d42b8"}, {0x3, 0x8, "20ca514cf659441d"}, {0x4, 0x1e, "e7a7303761f7a9e0beff5e241fd354d0215f49166e5ed4ec43cfbb504f4b"}, {0x2, 0xf, "63d80e061acc1273b473087178313d"}]}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x81}, 0x14) lstat(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r11, 0xffffffff80000202, r14, &(0x7f0000001880)='./file0\x00') 2.564043941s ago: executing program 4 (id=821): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x12, @mcast2}, 0x1c) syz_open_dev$mouse(&(0x7f0000000040), 0xc, 0x40000) r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) 1.20808792s ago: executing program 1 (id=841): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1.094462168s ago: executing program 2 (id=843): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x18000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x200}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.072702476s ago: executing program 0 (id=844): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0xf}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0xce4e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 980.609977ms ago: executing program 3 (id=845): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x61]}}, &(0x7f0000000580)=""/237, 0x2b, 0xed, 0x1}, 0x28) 930.525356ms ago: executing program 1 (id=846): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808"], 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x4}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 930.085528ms ago: executing program 2 (id=847): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 854.511386ms ago: executing program 0 (id=848): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 807.418247ms ago: executing program 2 (id=849): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a0000000d0000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000180), &(0x7f0000000000), 0x2}, 0x20) 698.140271ms ago: executing program 3 (id=850): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@struct={0x8, 0x0, 0x0, 0xf, 0x0, 0x10005}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/257, 0x2e, 0x101, 0x6}, 0x28) 679.5863ms ago: executing program 0 (id=851): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30, 0x88}, 0x8000) 659.279875ms ago: executing program 2 (id=852): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, 0x0, 0x8901, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x3d) 562.11314ms ago: executing program 1 (id=853): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, &(0x7f0000000000)=""/163, 0x0, 0xa3, 0x4}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r1, 0x58, &(0x7f00000005c0)}, 0x10) 550.131556ms ago: executing program 3 (id=854): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@struct={0x8, 0x0, 0x0, 0xf, 0x0, 0x10005}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f00000001c0)=""/257, 0x2e, 0x101, 0x6}, 0x28) 471.873222ms ago: executing program 1 (id=855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 398.590301ms ago: executing program 0 (id=856): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5a2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 398.299102ms ago: executing program 3 (id=857): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x1, 0x0, 0xfffffffc}, 0x1f) 331.983036ms ago: executing program 1 (id=858): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) close(r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) 281.787769ms ago: executing program 2 (id=859): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 230.58078ms ago: executing program 3 (id=860): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x21) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 230.35391ms ago: executing program 0 (id=861): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x4, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 163.329483ms ago: executing program 4 (id=862): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) 99.480855ms ago: executing program 1 (id=863): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 99.132889ms ago: executing program 3 (id=864): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000006000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 50.500596ms ago: executing program 2 (id=865): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2d, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd47e0ffff00128700631177fbac141416e000030a44079f034d2f87e589ca6a", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020b4d0004"], 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 50.179084ms ago: executing program 0 (id=866): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 0s ago: executing program 4 (id=867): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000110850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2282, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0380, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r3) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000080)=r2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) kernel console output (not intermixed with test programs): roduct=0, SerialNumber=0 [ 255.141038][ T5890] usb 2-1: config 0 descriptor?? [ 255.157738][ T31] usb 4-1: config 0 has an invalid interface number: 238 but max is 0 [ 255.157769][ T31] usb 4-1: config 0 has no interface number 0 [ 255.157821][ T31] usb 4-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 255.157846][ T31] usb 4-1: config 0 interface 238 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 255.157875][ T31] usb 4-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 128 [ 255.167845][ T31] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 255.167881][ T31] usb 4-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 255.167906][ T31] usb 4-1: Product: syz [ 255.167923][ T31] usb 4-1: Manufacturer: syz [ 255.167940][ T31] usb 4-1: SerialNumber: syz [ 255.259577][ T31] usb 4-1: config 0 descriptor?? [ 255.260714][ T7341] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 255.385638][ T31] ni6501 4-1:0.238: driver 'ni6501' failed to auto-configure device. [ 255.489014][ T5808] usb 4-1: USB disconnect, device number 13 [ 255.726144][ T7353] 8021q: VLANs not supported on ipvlan1 [ 256.327826][ T5890] hdpvr 2-1:0.0: unexpected answer of status request, len -71 [ 256.327847][ T5890] hdpvr 2-1:0.0: device init failed [ 256.327912][ T5890] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 256.418938][ T5890] usb 2-1: USB disconnect, device number 16 [ 257.247891][ T5890] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 257.419298][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 257.419334][ T5890] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 257.419364][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 257.419389][ T5890] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 257.419433][ T5890] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 257.419459][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.239448][ T5890] usb 3-1: config 0 descriptor?? [ 260.891682][ T5890] hdpvr 3-1:0.0: unexpected answer of status request, len -71 [ 260.891709][ T5890] hdpvr 3-1:0.0: device init failed [ 260.891809][ T5890] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 260.908885][ T5890] usb 3-1: USB disconnect, device number 16 [ 261.261550][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.261604][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.520976][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 264.993444][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.499'. [ 265.278600][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'. [ 265.278636][ T7463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.501'. [ 265.329078][ T808] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 265.483282][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 265.483318][ T808] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 265.483347][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 265.483372][ T808] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 265.483415][ T808] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 265.483442][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.611747][ T808] usb 3-1: config 0 descriptor?? [ 267.010093][ T5868] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 267.106044][ T808] hdpvr 3-1:0.0: unexpected answer of status request, len -71 [ 267.106068][ T808] hdpvr 3-1:0.0: device init failed [ 267.106155][ T808] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 267.150026][ T808] usb 3-1: USB disconnect, device number 17 [ 267.188373][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 267.225058][ T5868] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 267.225093][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.259481][ T5868] usb 2-1: config 0 descriptor?? [ 267.266976][ T5868] gspca_main: sunplus-2.14.0 probing 041e:400b [ 268.111266][ T5868] gspca_sunplus: reg_w_riv err -110 [ 268.112235][ T5868] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 268.511231][ T37] kauditd_printk_skb: 45 callbacks suppressed [ 268.511254][ T37] audit: type=1804 audit(1769360448.228:376): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.501" name="/newroot/99/file0" dev="tmpfs" ino=572 res=1 errno=0 [ 268.957777][ T5946] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 269.107697][ T5946] usb 4-1: Using ep0 maxpacket: 32 [ 269.113491][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.113530][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.113573][ T5946] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 269.113600][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.125850][ T5946] usb 4-1: config 0 descriptor?? [ 269.192516][ T5946] hub 4-1:0.0: USB hub found [ 269.369475][ T5946] hub 4-1:0.0: 29 ports detected [ 269.370034][ T5946] hub 4-1:0.0: insufficient power available to use all downstream ports [ 270.039589][ T5946] usb 4-1: USB disconnect, device number 14 [ 270.712370][ T5946] usb 2-1: USB disconnect, device number 17 [ 270.978038][ T7526] netlink: 'syz.1.515': attribute type 8 has an invalid length. [ 272.487699][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 272.640050][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 272.640085][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 272.640108][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 272.640163][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 272.640200][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 272.646208][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 272.646241][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 272.646263][ T9] usb 2-1: Product: syz [ 272.646280][ T9] usb 2-1: Manufacturer: syz [ 272.739849][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 272.739866][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 272.770210][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 272.770236][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 272.873162][ T5802] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 272.873193][ T5802] CPU: 0 UID: 0 PID: 5802 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 272.873221][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 272.873238][ T5802] Workqueue: hci3 hci_rx_work [ 272.873276][ T5802] Call Trace: [ 272.873286][ T5802] [ 272.873307][ T5802] dump_stack_lvl+0xe8/0x150 [ 272.873344][ T5802] sysfs_create_dir_ns+0x271/0x2a0 [ 272.873381][ T5802] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 272.873410][ T5802] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 272.873449][ T5802] ? rt_spin_unlock+0x160/0x200 [ 272.873479][ T5802] kobject_add_internal+0x631/0xd10 [ 272.873527][ T5802] kobject_add+0x163/0x240 [ 272.873567][ T5802] ? __pfx_kobject_add+0x10/0x10 [ 272.873611][ T5802] ? get_device_parent+0x370/0x3a0 [ 272.873642][ T5802] device_add+0x408/0xb80 [ 272.873671][ T5802] hci_conn_add_sysfs+0xd5/0x210 [ 272.873708][ T5802] le_conn_complete_evt+0xf1d/0x1430 [ 272.873746][ T5802] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 272.873772][ T5802] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 272.873806][ T5802] ? lockdep_hardirqs_on+0x7a/0x110 [ 272.873843][ T5802] ? skb_pull_data+0xfb/0x200 [ 272.873878][ T5802] hci_le_conn_complete_evt+0x187/0x470 [ 272.873927][ T5802] hci_event_packet+0x7af/0x12c0 [ 272.873967][ T5802] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 272.874006][ T5802] ? __pfx_hci_event_packet+0x10/0x10 [ 272.874038][ T5802] ? rt_spin_unlock+0x14f/0x200 [ 272.874075][ T5802] ? hci_send_to_monitor+0xe2/0x590 [ 272.874106][ T5802] hci_rx_work+0x3ee/0x1030 [ 272.874148][ T5802] ? process_scheduled_works+0xa0f/0x17a0 [ 272.874179][ T5802] process_scheduled_works+0xaec/0x17a0 [ 272.874241][ T5802] ? __pfx_process_scheduled_works+0x10/0x10 [ 272.874267][ T5802] ? do_raw_spin_lock+0x12b/0x2f0 [ 272.874313][ T5802] ? assign_work+0x3d3/0x440 [ 272.874347][ T5802] worker_thread+0x89f/0xd90 [ 272.874406][ T5802] kthread+0x726/0x8b0 [ 272.874446][ T5802] ? __pfx_worker_thread+0x10/0x10 [ 272.874475][ T5802] ? __pfx_kthread+0x10/0x10 [ 272.874507][ T5802] ? rt_spin_unlock+0x14f/0x200 [ 272.874572][ T5802] ? rt_spin_unlock+0x160/0x200 [ 272.874598][ T5802] ? __pfx_kthread+0x10/0x10 [ 272.874635][ T5802] ret_from_fork+0x51b/0xa40 [ 272.874667][ T5802] ? __pfx_ret_from_fork+0x10/0x10 [ 272.874693][ T5802] ? __switch_to+0xc82/0x1410 [ 272.874722][ T5802] ? __pfx_kthread+0x10/0x10 [ 272.874758][ T5802] ret_from_fork_asm+0x1a/0x30 [ 272.874813][ T5802] [ 272.874849][ T5802] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 272.874896][ T5802] Bluetooth: hci3: failed to register connection device [ 273.174563][ T7551] FAULT_INJECTION: forcing a failure. [ 273.174563][ T7551] name failslab, interval 1, probability 0, space 0, times 0 [ 273.174606][ T7551] CPU: 1 UID: 0 PID: 7551 Comm: syz.0.526 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 273.174637][ T7551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 273.174654][ T7551] Call Trace: [ 273.174664][ T7551] [ 273.174675][ T7551] dump_stack_lvl+0xe8/0x150 [ 273.174718][ T7551] should_fail_ex+0x46b/0x600 [ 273.174754][ T7551] ? __alloc_skb+0x1d7/0x390 [ 273.174795][ T7551] should_failslab+0xa8/0x100 [ 273.174821][ T7551] ? __alloc_skb+0x1d7/0x390 [ 273.174859][ T7551] kmem_cache_alloc_node_noprof+0x8a/0x6d0 [ 273.174896][ T7551] ? lockdep_hardirqs_on+0x7a/0x110 [ 273.174934][ T7551] ? __alloc_skb+0x193/0x390 [ 273.174975][ T7551] __alloc_skb+0x1d7/0x390 [ 273.175021][ T7551] netlink_ack+0x146/0xa50 [ 273.175047][ T7551] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 273.175086][ T7551] ? ref_tracker_free+0x673/0x820 [ 273.175117][ T7551] ? __copy_skb_header+0xa3/0x4a0 [ 273.175149][ T7551] ? __pfx_ref_tracker_free+0x10/0x10 [ 273.175179][ T7551] ? __skb_clone+0x63/0x7a0 [ 273.175226][ T7551] netlink_rcv_skb+0x2b6/0x4b0 [ 273.175256][ T7551] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 273.175300][ T7551] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 273.175342][ T7551] ? netlink_deliver_tap+0x2e/0x1b0 [ 273.175381][ T7551] netlink_unicast+0x831/0x9f0 [ 273.175417][ T7551] ? __pfx_netlink_unicast+0x10/0x10 [ 273.175441][ T7551] ? __alloc_skb+0x193/0x390 [ 273.175479][ T7551] ? netlink_sendmsg+0x650/0xb40 [ 273.175506][ T7551] ? skb_put+0x11b/0x210 [ 273.175536][ T7551] netlink_sendmsg+0x813/0xb40 [ 273.175576][ T7551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.175608][ T7551] ? is_bpf_text_address+0x292/0x2b0 [ 273.175646][ T7551] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 273.175681][ T7551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.175713][ T7551] __sock_sendmsg+0x21c/0x270 [ 273.175750][ T7551] ____sys_sendmsg+0x4e1/0x800 [ 273.175788][ T7551] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.175827][ T7551] ? import_iovec+0x73/0xa0 [ 273.175869][ T7551] ___sys_sendmsg+0x2a5/0x360 [ 273.175895][ T7551] ? __lock_acquire+0x6b5/0x2cf0 [ 273.175937][ T7551] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.176006][ T7551] ? __fget_files+0x2a/0x420 [ 273.176034][ T7551] ? __fget_files+0x3a6/0x420 [ 273.176075][ T7551] __x64_sys_sendmsg+0x1c3/0x2a0 [ 273.176107][ T7551] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 273.176146][ T7551] ? __pfx_ksys_write+0x10/0x10 [ 273.176196][ T7551] do_syscall_64+0xe2/0xf80 [ 273.176240][ T7551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.176266][ T7551] ? trace_irq_disable+0x37/0x100 [ 273.176295][ T7551] ? clear_bhb_loop+0x60/0xb0 [ 273.176327][ T7551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.176354][ T7551] RIP: 0033:0x7fe69d2aacb9 [ 273.176376][ T7551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.176400][ T7551] RSP: 002b:00007fe69b506028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.176429][ T7551] RAX: ffffffffffffffda RBX: 00007fe69d525fa0 RCX: 00007fe69d2aacb9 [ 273.176450][ T7551] RDX: 0000000004000804 RSI: 0000200000003340 RDI: 0000000000000003 [ 273.176467][ T7551] RBP: 00007fe69b506090 R08: 0000000000000000 R09: 0000000000000000 [ 273.176485][ T7551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.176501][ T7551] R13: 00007fe69d526038 R14: 00007fe69d525fa0 R15: 00007ffdf46b77c8 [ 273.176540][ T7551] [ 273.267763][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 273.571844][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 273.637799][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 273.643113][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 273.643202][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.753381][ T9] usb 4-1: config 0 descriptor?? [ 273.798908][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 274.370056][ T9] gspca_sunplus: reg_r err -32 [ 274.370358][ T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 275.701708][ T31] usb 2-1: USB disconnect, device number 18 [ 275.857161][ T808] usb 4-1: USB disconnect, device number 15 [ 275.981506][ T7576] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 276.056272][ T7576] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 276.749215][ T37] audit: type=1326 audit(1769360456.178:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7582 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 276.749544][ T37] audit: type=1326 audit(1769360456.178:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7582 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 276.749801][ T37] audit: type=1326 audit(1769360456.188:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7582 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 276.750124][ T37] audit: type=1326 audit(1769360456.188:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7582 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 276.750420][ T37] audit: type=1326 audit(1769360456.198:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7582 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 276.750683][ T37] audit: type=1326 audit(1769360456.198:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7582 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 276.750901][ T37] audit: type=1326 audit(1769360456.198:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7582 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 276.751251][ T37] audit: type=1326 audit(1769360456.198:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7582 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 276.751517][ T37] audit: type=1326 audit(1769360456.208:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7582 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 276.751759][ T37] audit: type=1326 audit(1769360456.208:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7582 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 277.512505][ T50] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 277.512642][ T50] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 277.680707][ T50] usb 5-1: USB disconnect, device number 21 [ 277.867427][ T7593] FAULT_INJECTION: forcing a failure. [ 277.867427][ T7593] name failslab, interval 1, probability 0, space 0, times 0 [ 277.867467][ T7593] CPU: 0 UID: 0 PID: 7593 Comm: syz.3.539 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 277.867493][ T7593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 277.867508][ T7593] Call Trace: [ 277.867517][ T7593] [ 277.867527][ T7593] dump_stack_lvl+0xe8/0x150 [ 277.867570][ T7593] should_fail_ex+0x46b/0x600 [ 277.867603][ T7593] should_failslab+0xa8/0x100 [ 277.867628][ T7593] __kmalloc_noprof+0xdf/0x7c0 [ 277.867661][ T7593] ? tomoyo_encode+0x28b/0x550 [ 277.867691][ T7593] tomoyo_encode+0x28b/0x550 [ 277.867722][ T7593] tomoyo_realpath_from_path+0x58d/0x5d0 [ 277.867759][ T7593] ? tomoyo_path_number_perm+0x219/0x630 [ 277.867794][ T7593] tomoyo_path_number_perm+0x246/0x630 [ 277.867832][ T7593] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 277.867867][ T7593] ? __lock_acquire+0x6b5/0x2cf0 [ 277.867902][ T7593] ? do_raw_spin_lock+0x12b/0x2f0 [ 277.867973][ T7593] ? __fget_files+0x2a/0x420 [ 277.868002][ T7593] ? __fget_files+0x2a/0x420 [ 277.868024][ T7593] ? __fget_files+0x3a6/0x420 [ 277.868047][ T7593] ? __fget_files+0x2a/0x420 [ 277.868075][ T7593] security_file_ioctl+0xc3/0x2a0 [ 277.868110][ T7593] __se_sys_ioctl+0x47/0x170 [ 277.868154][ T7593] do_syscall_64+0xe2/0xf80 [ 277.868200][ T7593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.868229][ T7593] ? trace_irq_disable+0x37/0x100 [ 277.868267][ T7593] ? clear_bhb_loop+0x60/0xb0 [ 277.868297][ T7593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.868320][ T7593] RIP: 0033:0x7f663486acb9 [ 277.868339][ T7593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.868360][ T7593] RSP: 002b:00007f6632ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.868385][ T7593] RAX: ffffffffffffffda RBX: 00007f6634ae5fa0 RCX: 00007f663486acb9 [ 277.868404][ T7593] RDX: 0000200000002400 RSI: 00000000c018937e RDI: 0000000000000003 [ 277.868419][ T7593] RBP: 00007f6632ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 277.868441][ T7593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.868455][ T7593] R13: 00007f6634ae6038 R14: 00007f6634ae5fa0 R15: 00007ffc91c0a7e8 [ 277.868491][ T7593] [ 277.938012][ T7593] ERROR: Out of memory at tomoyo_realpath_from_path. [ 279.837719][ T50] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 280.612928][ T5813] Bluetooth: hci3: command 0x0406 tx timeout [ 282.463928][ T50] usb 3-1: Using ep0 maxpacket: 8 [ 282.476362][ T50] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 282.476438][ T50] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 282.476464][ T50] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 282.476492][ T50] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 282.476519][ T50] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.476566][ T50] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 282.476592][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.803118][ T50] usb 3-1: can't set config #16, error -71 [ 282.814797][ T50] usb 3-1: USB disconnect, device number 18 [ 284.337787][ T5784] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 284.487761][ T5784] usb 3-1: Using ep0 maxpacket: 32 [ 284.576063][ T5784] usb 3-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 284.576101][ T5784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.576125][ T5784] usb 3-1: Product: syz [ 284.576142][ T5784] usb 3-1: Manufacturer: syz [ 284.576159][ T5784] usb 3-1: SerialNumber: syz [ 284.759953][ T5784] usb 3-1: config 0 descriptor?? [ 284.808270][ T5784] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 284.811570][ T5784] dw2102: su3000_power_ctrl: 1, initialized 0 [ 284.812473][ T5784] dvb-usb: bulk message failed: -22 (2/0) [ 284.894196][ T5784] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 284.912073][ T5784] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 284.912144][ T5784] usb 3-1: media controller created [ 284.915700][ T5784] dvb-usb: bulk message failed: -22 (6/0) [ 284.915729][ T5784] dw2102: i2c transfer failed. [ 284.951023][ T5784] dvb-usb: bulk message failed: -22 (6/0) [ 284.951051][ T5784] dw2102: i2c transfer failed. [ 284.951071][ T5784] dvb-usb: bulk message failed: -22 (6/0) [ 284.951088][ T5784] dw2102: i2c transfer failed. [ 284.951107][ T5784] dvb-usb: bulk message failed: -22 (6/0) [ 284.951123][ T5784] dw2102: i2c transfer failed. [ 284.951142][ T5784] dvb-usb: bulk message failed: -22 (6/0) [ 284.951158][ T5784] dw2102: i2c transfer failed. [ 284.951176][ T5784] dvb-usb: bulk message failed: -22 (6/0) [ 284.951192][ T5784] dw2102: i2c transfer failed. [ 284.951203][ T5784] dvb-usb: MAC address: 02:02:02:02:02:02 [ 285.132231][ T5784] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.276071][ T5784] dvb-usb: bulk message failed: -22 (3/0) [ 285.276096][ T5784] dw2102: command 0x0e transfer failed. [ 285.276107][ T5784] dvb-usb: bulk message failed: -22 (3/0) [ 285.276123][ T5784] dw2102: command 0x0e transfer failed. [ 285.577727][ T5784] dvb-usb: bulk message failed: -22 (3/0) [ 285.577755][ T5784] dw2102: command 0x0e transfer failed. [ 285.577766][ T5784] dvb-usb: bulk message failed: -22 (3/0) [ 285.577782][ T5784] dw2102: command 0x0e transfer failed. [ 285.577793][ T5784] dvb-usb: bulk message failed: -22 (1/0) [ 285.577808][ T5784] dw2102: command 0x51 transfer failed. [ 285.938125][ T5784] DVB: Unable to find symbol ds3000_attach() [ 285.938144][ T5784] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 286.273845][ T7646] overlayfs: overlapping lowerdir path [ 286.340864][ T7649] netlink: 28 bytes leftover after parsing attributes in process `syz.2.556'. [ 286.367731][ T5784] rc_core: IR keymap rc-su3000 not found [ 286.367756][ T5784] Registered IR keymap rc-empty [ 286.374542][ T5784] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 286.380922][ T5784] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input9 [ 286.407012][ T5784] dvb-usb: schedule remote query interval to 150 msecs. [ 286.407046][ T5784] dw2102: su3000_power_ctrl: 0, initialized 1 [ 286.407061][ T5784] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 286.419752][ T5784] usb 3-1: USB disconnect, device number 19 [ 288.966419][ T5784] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 291.740188][ T37] kauditd_printk_skb: 158 callbacks suppressed [ 291.740210][ T37] audit: type=1326 audit(1769360471.478:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7662 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 291.743847][ T37] audit: type=1326 audit(1769360471.478:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7662 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 291.743907][ T37] audit: type=1326 audit(1769360471.478:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7662 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 291.797810][ T37] audit: type=1326 audit(1769360471.528:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7662 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 291.802180][ T37] audit: type=1326 audit(1769360471.538:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7662 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 291.802325][ T37] audit: type=1326 audit(1769360471.538:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7662 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 291.845422][ T37] audit: type=1326 audit(1769360471.578:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7662 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 291.845569][ T37] audit: type=1326 audit(1769360471.578:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7662 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 291.869639][ T37] audit: type=1326 audit(1769360471.608:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7662 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 291.871259][ T37] audit: type=1326 audit(1769360471.608:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7662 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 294.507892][ T808] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 294.667707][ T808] usb 5-1: Using ep0 maxpacket: 32 [ 294.674599][ T808] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 294.674624][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.674640][ T808] usb 5-1: Product: syz [ 294.674651][ T808] usb 5-1: Manufacturer: syz [ 294.674662][ T808] usb 5-1: SerialNumber: syz [ 294.721803][ T808] usb 5-1: config 0 descriptor?? [ 294.787814][ T808] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 294.787853][ T808] dw2102: su3000_power_ctrl: 1, initialized 0 [ 294.787868][ T808] dvb-usb: bulk message failed: -22 (2/0) [ 294.811204][ T808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 294.830229][ T808] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 294.830276][ T808] usb 5-1: media controller created [ 294.830297][ T808] dvb-usb: bulk message failed: -22 (6/0) [ 294.830309][ T808] dw2102: i2c transfer failed. [ 294.830321][ T808] dvb-usb: bulk message failed: -22 (6/0) [ 294.830331][ T808] dw2102: i2c transfer failed. [ 294.830343][ T808] dvb-usb: bulk message failed: -22 (6/0) [ 294.830354][ T808] dw2102: i2c transfer failed. [ 294.830365][ T808] dvb-usb: bulk message failed: -22 (6/0) [ 294.830376][ T808] dw2102: i2c transfer failed. [ 294.830387][ T808] dvb-usb: bulk message failed: -22 (6/0) [ 294.830398][ T808] dw2102: i2c transfer failed. [ 294.830409][ T808] dvb-usb: bulk message failed: -22 (6/0) [ 294.830420][ T808] dw2102: i2c transfer failed. [ 294.830427][ T808] dvb-usb: MAC address: 02:02:02:02:02:02 [ 294.957919][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.052668][ T808] dvb-usb: bulk message failed: -22 (3/0) [ 295.052692][ T808] dw2102: command 0x0e transfer failed. [ 295.052704][ T808] dvb-usb: bulk message failed: -22 (3/0) [ 295.052720][ T808] dw2102: command 0x0e transfer failed. [ 295.107750][ T50] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 295.163092][ T7699] ======================================================= [ 295.163092][ T7699] WARNING: The mand mount option has been deprecated and [ 295.163092][ T7699] and is ignored by this kernel. Remove the mand [ 295.163092][ T7699] option from the mount to silence this warning. [ 295.163092][ T7699] ======================================================= [ 295.259989][ T50] usb 4-1: Using ep0 maxpacket: 32 [ 295.264294][ T50] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 295.264327][ T50] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.296894][ T50] usb 4-1: config 0 descriptor?? [ 295.311153][ T50] gspca_main: sunplus-2.14.0 probing 041e:400b [ 295.358507][ T808] dvb-usb: bulk message failed: -22 (3/0) [ 295.358531][ T808] dw2102: command 0x0e transfer failed. [ 295.358542][ T808] dvb-usb: bulk message failed: -22 (3/0) [ 295.358557][ T808] dw2102: command 0x0e transfer failed. [ 295.358567][ T808] dvb-usb: bulk message failed: -22 (1/0) [ 295.358582][ T808] dw2102: command 0x51 transfer failed. [ 296.576964][ T50] gspca_sunplus: reg_r err -32 [ 296.577082][ T50] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 296.592855][ T808] DVB: Unable to find symbol ds3000_attach() [ 296.592897][ T808] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 296.727725][ T808] rc_core: IR keymap rc-su3000 not found [ 296.727750][ T808] Registered IR keymap rc-empty [ 296.729145][ T808] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 296.731457][ T808] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input10 [ 296.743031][ T808] dvb-usb: schedule remote query interval to 150 msecs. [ 296.743095][ T808] dw2102: su3000_power_ctrl: 0, initialized 1 [ 296.743136][ T808] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 296.790235][ T808] usb 5-1: USB disconnect, device number 22 [ 297.836895][ T808] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 298.127696][ T5808] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 298.199045][ T992] usb 4-1: USB disconnect, device number 16 [ 298.290775][ T5808] usb 2-1: config 1 has an invalid interface number: 255 but max is 0 [ 298.290810][ T5808] usb 2-1: config 1 has no interface number 0 [ 298.290861][ T5808] usb 2-1: config 1 interface 255 altsetting 2 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 298.290893][ T5808] usb 2-1: config 1 interface 255 altsetting 2 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 298.290926][ T5808] usb 2-1: config 1 interface 255 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 298.290951][ T5808] usb 2-1: config 1 interface 255 altsetting 2 endpoint 0xB has invalid maxpacket 4130, setting to 64 [ 298.290982][ T5808] usb 2-1: config 1 interface 255 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 298.291006][ T5808] usb 2-1: config 1 interface 255 has no altsetting 0 [ 298.294832][ T5808] usb 2-1: Dual-Role OTG device on HNP port [ 298.295126][ T5808] usb 2-1: New USB device found, idVendor=056c, idProduct=8007, bcdDevice=9d.43 [ 298.295146][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.295162][ T5808] usb 2-1: Product: syz [ 298.295173][ T5808] usb 2-1: Manufacturer: syz [ 298.295184][ T5808] usb 2-1: SerialNumber: syz [ 298.443791][ T7721] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 298.709293][ T5808] belkin_sa 2-1:1.255: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 298.711490][ T5808] usb 2-1: bcdDevice: 9d43, bfc: 0 [ 298.743206][ T5808] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 298.796204][ T5808] usb 2-1: USB disconnect, device number 19 [ 298.852483][ T5808] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 298.853456][ T5808] belkin_sa 2-1:1.255: device disconnected [ 303.447786][ T992] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 304.565317][ T992] usb 4-1: Using ep0 maxpacket: 32 [ 304.585845][ T992] usb 4-1: device descriptor read/all, error -61 [ 304.732288][ T992] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 304.870132][ T992] usb 4-1: device descriptor read/64, error -71 [ 304.961741][ T7771] FAULT_INJECTION: forcing a failure. [ 304.961741][ T7771] name failslab, interval 1, probability 0, space 0, times 0 [ 304.961785][ T7771] CPU: 0 UID: 0 PID: 7771 Comm: syz.1.594 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 304.961816][ T7771] Tainted: [L]=SOFTLOCKUP [ 304.961825][ T7771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 304.961840][ T7771] Call Trace: [ 304.961850][ T7771] [ 304.961860][ T7771] dump_stack_lvl+0xe8/0x150 [ 304.961899][ T7771] should_fail_ex+0x46b/0x600 [ 304.961932][ T7771] ? __alloc_skb+0x1d7/0x390 [ 304.961969][ T7771] should_failslab+0xa8/0x100 [ 304.961994][ T7771] ? __alloc_skb+0x1d7/0x390 [ 304.962028][ T7771] kmem_cache_alloc_node_noprof+0x8a/0x6d0 [ 304.962063][ T7771] ? lockdep_hardirqs_on+0x7a/0x110 [ 304.962098][ T7771] ? __alloc_skb+0x193/0x390 [ 304.962134][ T7771] __alloc_skb+0x1d7/0x390 [ 304.962173][ T7771] netlink_sendmsg+0x5d4/0xb40 [ 304.962218][ T7771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.962247][ T7771] ? is_bpf_text_address+0x292/0x2b0 [ 304.962280][ T7771] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 304.962312][ T7771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.962339][ T7771] __sock_sendmsg+0x21c/0x270 [ 304.962372][ T7771] ____sys_sendmsg+0x4e1/0x800 [ 304.962407][ T7771] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.962440][ T7771] ? import_iovec+0x73/0xa0 [ 304.962477][ T7771] ___sys_sendmsg+0x2a5/0x360 [ 304.962500][ T7771] ? __lock_acquire+0x6b5/0x2cf0 [ 304.962537][ T7771] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.962602][ T7771] ? __fget_files+0x2a/0x420 [ 304.962627][ T7771] ? __fget_files+0x3a6/0x420 [ 304.962660][ T7771] __x64_sys_sendmsg+0x1c3/0x2a0 [ 304.962689][ T7771] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.962724][ T7771] ? __pfx_ksys_write+0x10/0x10 [ 304.962770][ T7771] do_syscall_64+0xe2/0xf80 [ 304.962801][ T7771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.962824][ T7771] ? trace_irq_disable+0x37/0x100 [ 304.962851][ T7771] ? clear_bhb_loop+0x60/0xb0 [ 304.962880][ T7771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.962904][ T7771] RIP: 0033:0x7f81fc5eacb9 [ 304.962925][ T7771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.962945][ T7771] RSP: 002b:00007f81fa846028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.962970][ T7771] RAX: ffffffffffffffda RBX: 00007f81fc865fa0 RCX: 00007f81fc5eacb9 [ 304.962988][ T7771] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 304.963004][ T7771] RBP: 00007f81fa846090 R08: 0000000000000000 R09: 0000000000000000 [ 304.963019][ T7771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.963034][ T7771] R13: 00007f81fc866038 R14: 00007f81fc865fa0 R15: 00007ffff118a628 [ 304.963071][ T7771] [ 305.889867][ T992] usb usb4-port1: attempt power cycle [ 306.347910][ T50] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 306.403197][ T7782] FAULT_INJECTION: forcing a failure. [ 306.403197][ T7782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.403239][ T7782] CPU: 0 UID: 0 PID: 7782 Comm: syz.0.595 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 306.403270][ T7782] Tainted: [L]=SOFTLOCKUP [ 306.403279][ T7782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 306.403293][ T7782] Call Trace: [ 306.403302][ T7782] [ 306.403312][ T7782] dump_stack_lvl+0xe8/0x150 [ 306.403351][ T7782] should_fail_ex+0x46b/0x600 [ 306.403385][ T7782] _copy_to_user+0x31/0xb0 [ 306.403423][ T7782] simple_read_from_buffer+0xe1/0x170 [ 306.403454][ T7782] proc_fail_nth_read+0x1be/0x230 [ 306.403491][ T7782] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.403529][ T7782] ? rw_verify_area+0x2ac/0x4e0 [ 306.403559][ T7782] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.403594][ T7782] vfs_read+0x212/0xa70 [ 306.403636][ T7782] ? __pfx_vfs_read+0x10/0x10 [ 306.403670][ T7782] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 306.403704][ T7782] ? lockdep_hardirqs_on+0x7a/0x110 [ 306.403736][ T7782] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 306.403770][ T7782] ? mutex_lock_nested+0x152/0x1d0 [ 306.403793][ T7782] ? fdget_pos+0x252/0x320 [ 306.403828][ T7782] ksys_read+0x156/0x270 [ 306.403862][ T7782] ? __pfx_ksys_read+0x10/0x10 [ 306.403906][ T7782] do_syscall_64+0xe2/0xf80 [ 306.403937][ T7782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.403960][ T7782] ? trace_irq_disable+0x37/0x100 [ 306.403986][ T7782] ? clear_bhb_loop+0x60/0xb0 [ 306.404015][ T7782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.404039][ T7782] RIP: 0033:0x7fe69d26b58e [ 306.404060][ T7782] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 306.404080][ T7782] RSP: 002b:00007fe69b505fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 306.404105][ T7782] RAX: ffffffffffffffda RBX: 00007fe69b5066c0 RCX: 00007fe69d26b58e [ 306.404123][ T7782] RDX: 000000000000000f RSI: 00007fe69b5060a0 RDI: 0000000000000004 [ 306.404138][ T7782] RBP: 00007fe69b506090 R08: 0000000000000000 R09: 0000000000000000 [ 306.404153][ T7782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.404169][ T7782] R13: 00007fe69d526038 R14: 00007fe69d525fa0 R15: 00007ffdf46b77c8 [ 306.404213][ T7782] [ 306.577756][ T50] usb 5-1: Using ep0 maxpacket: 32 [ 306.607761][ T50] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 306.607797][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.676006][ T50] usb 5-1: config 0 descriptor?? [ 306.686953][ T50] gspca_main: sunplus-2.14.0 probing 041e:400b [ 306.907690][ T9] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 306.918381][ T992] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 306.943866][ T992] usb 4-1: config 1 has an invalid interface number: 255 but max is 0 [ 306.943901][ T992] usb 4-1: config 1 has no interface number 0 [ 306.943953][ T992] usb 4-1: config 1 interface 255 altsetting 2 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 306.943986][ T992] usb 4-1: config 1 interface 255 altsetting 2 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 306.944018][ T992] usb 4-1: config 1 interface 255 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 306.944047][ T992] usb 4-1: config 1 interface 255 altsetting 2 endpoint 0xB has invalid maxpacket 4130, setting to 64 [ 306.944068][ T992] usb 4-1: config 1 interface 255 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 306.944107][ T992] usb 4-1: config 1 interface 255 has no altsetting 0 [ 306.947302][ T992] usb 4-1: Dual-Role OTG device on HNP port [ 306.960770][ T992] usb 4-1: New USB device found, idVendor=056c, idProduct=8007, bcdDevice=9d.43 [ 306.960874][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.960899][ T992] usb 4-1: Product: syz [ 306.960917][ T992] usb 4-1: Manufacturer: syz [ 306.960941][ T992] usb 4-1: SerialNumber: syz [ 307.009709][ T7780] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 307.075846][ T9] usb 2-1: config 1 has an invalid interface number: 255 but max is 0 [ 307.075894][ T9] usb 2-1: config 1 has no interface number 0 [ 307.076796][ T9] usb 2-1: config 1 interface 255 altsetting 2 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 307.081701][ T9] usb 2-1: config 1 interface 255 altsetting 2 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 307.081741][ T9] usb 2-1: config 1 interface 255 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 307.081767][ T9] usb 2-1: config 1 interface 255 altsetting 2 endpoint 0xB has invalid maxpacket 4130, setting to 64 [ 307.084080][ T9] usb 2-1: config 1 interface 255 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 307.084169][ T9] usb 2-1: config 1 interface 255 has no altsetting 0 [ 307.162175][ T7789] overlayfs: missing 'lowerdir' [ 307.197544][ T9] usb 2-1: Dual-Role OTG device on HNP port [ 307.199196][ T9] usb 2-1: New USB device found, idVendor=056c, idProduct=8007, bcdDevice=9d.43 [ 307.199470][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.199496][ T9] usb 2-1: Product: syz [ 307.199513][ T9] usb 2-1: Manufacturer: syz [ 307.199529][ T9] usb 2-1: SerialNumber: syz [ 307.282537][ T50] gspca_sunplus: reg_r err -32 [ 307.282786][ T50] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 307.382103][ T992] belkin_sa 4-1:1.255: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 307.416603][ T992] usb 4-1: bcdDevice: 9d43, bfc: 0 [ 307.469721][ T992] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 307.599243][ T9] belkin_sa 2-1:1.255: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 307.602171][ T9] usb 2-1: bcdDevice: 9d43, bfc: 0 [ 307.668910][ T9] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB1 [ 307.709480][ T992] usb 4-1: USB disconnect, device number 19 [ 307.772220][ T9] usb 2-1: USB disconnect, device number 20 [ 307.973793][ T992] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 307.974653][ T992] belkin_sa 4-1:1.255: device disconnected [ 308.006509][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 308.006532][ T37] audit: type=1800 audit(1769360487.738:567): pid=7798 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.601" name="nullb0" dev="devtmpfs" ino=2907 res=0 errno=0 [ 308.007500][ T9] belkin ttyUSB1: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB1 [ 308.858071][ T9] belkin_sa 2-1:1.255: device disconnected [ 309.101460][ T5808] usb 5-1: USB disconnect, device number 23 [ 309.325765][ T7816] ALSA: mixer_oss: invalid OSS volume '' [ 310.568592][ T7822] FAULT_INJECTION: forcing a failure. [ 310.568592][ T7822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.568644][ T7822] CPU: 1 UID: 0 PID: 7822 Comm: syz.0.608 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 310.568672][ T7822] Tainted: [L]=SOFTLOCKUP [ 310.568679][ T7822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 310.568692][ T7822] Call Trace: [ 310.568700][ T7822] [ 310.568708][ T7822] dump_stack_lvl+0xe8/0x150 [ 310.568743][ T7822] should_fail_ex+0x46b/0x600 [ 310.568773][ T7822] _copy_from_user+0x2d/0xb0 [ 310.568803][ T7822] __sys_sendto+0x297/0x560 [ 310.568842][ T7822] ? __pfx___sys_sendto+0x10/0x10 [ 310.568897][ T7822] ? exc_page_fault+0x6a/0xc0 [ 310.568930][ T7822] ? do_user_addr_fault+0xc7c/0x1360 [ 310.568962][ T7822] __x64_sys_sendto+0xde/0x100 [ 310.569001][ T7822] do_syscall_64+0xe2/0xf80 [ 310.569032][ T7822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.569054][ T7822] ? trace_irq_disable+0x37/0x100 [ 310.569080][ T7822] ? clear_bhb_loop+0x60/0xb0 [ 310.569107][ T7822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.569130][ T7822] RIP: 0033:0x7fe69d26b58e [ 310.569151][ T7822] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 310.569171][ T7822] RSP: 002b:00007fe69b504e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 310.569196][ T7822] RAX: ffffffffffffffda RBX: 00007fe69b5066c0 RCX: 00007fe69d26b58e [ 310.569214][ T7822] RDX: 0000000000000020 RSI: 00007fe69b505000 RDI: 0000000000000004 [ 310.569228][ T7822] RBP: 0000000000000000 R08: 00007fe69b504f04 R09: 000000000000000c [ 310.569241][ T7822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 310.569255][ T7822] R13: 00007fe69b504f58 R14: 00007fe69b505000 R15: 0000000000000000 [ 310.569291][ T7822] [ 311.258235][ T7834] FAULT_INJECTION: forcing a failure. [ 311.258235][ T7834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.258277][ T7834] CPU: 1 UID: 0 PID: 7834 Comm: syz.4.610 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 311.258309][ T7834] Tainted: [L]=SOFTLOCKUP [ 311.258318][ T7834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 311.258333][ T7834] Call Trace: [ 311.258341][ T7834] [ 311.258351][ T7834] dump_stack_lvl+0xe8/0x150 [ 311.258389][ T7834] should_fail_ex+0x46b/0x600 [ 311.258424][ T7834] _copy_from_user+0x2d/0xb0 [ 311.258460][ T7834] kstrtouint_from_user+0xd6/0x180 [ 311.258493][ T7834] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 311.258542][ T7834] proc_fail_nth_write+0x8e/0x210 [ 311.258586][ T7834] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 311.258627][ T7834] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 311.258663][ T7834] vfs_write+0x2a3/0xba0 [ 311.258706][ T7834] ? __pfx_vfs_write+0x10/0x10 [ 311.258742][ T7834] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 311.258776][ T7834] ? lockdep_hardirqs_on+0x7a/0x110 [ 311.258807][ T7834] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 311.258841][ T7834] ? mutex_lock_nested+0x152/0x1d0 [ 311.258865][ T7834] ? fdget_pos+0x252/0x320 [ 311.258900][ T7834] ksys_write+0x156/0x270 [ 311.258936][ T7834] ? __pfx_ksys_write+0x10/0x10 [ 311.258983][ T7834] do_syscall_64+0xe2/0xf80 [ 311.259015][ T7834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.259038][ T7834] ? trace_irq_disable+0x37/0x100 [ 311.259063][ T7834] ? clear_bhb_loop+0x60/0xb0 [ 311.259093][ T7834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.259117][ T7834] RIP: 0033:0x7fcc584db58e [ 311.259137][ T7834] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 311.259158][ T7834] RSP: 002b:00007fcc56754fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 311.259183][ T7834] RAX: ffffffffffffffda RBX: 00007fcc567556c0 RCX: 00007fcc584db58e [ 311.259201][ T7834] RDX: 0000000000000001 RSI: 00007fcc567550a0 RDI: 0000000000000004 [ 311.259218][ T7834] RBP: 00007fcc56755090 R08: 0000000000000000 R09: 0000000000000000 [ 311.259233][ T7834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.259248][ T7834] R13: 00007fcc58796128 R14: 00007fcc58796090 R15: 00007fffa1089548 [ 311.259287][ T7834] [ 313.539500][ T7843] FAULT_INJECTION: forcing a failure. [ 313.539500][ T7843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.539543][ T7843] CPU: 1 UID: 0 PID: 7843 Comm: syz.2.614 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 313.539575][ T7843] Tainted: [L]=SOFTLOCKUP [ 313.539584][ T7843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 313.539600][ T7843] Call Trace: [ 313.539609][ T7843] [ 313.539618][ T7843] dump_stack_lvl+0xe8/0x150 [ 313.539657][ T7843] should_fail_ex+0x46b/0x600 [ 313.539699][ T7843] _copy_to_user+0x31/0xb0 [ 313.539738][ T7843] simple_read_from_buffer+0xe1/0x170 [ 313.539767][ T7843] proc_fail_nth_read+0x1be/0x230 [ 313.539805][ T7843] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 313.539842][ T7843] ? rw_verify_area+0x2ac/0x4e0 [ 313.539872][ T7843] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 313.539907][ T7843] vfs_read+0x212/0xa70 [ 313.539948][ T7843] ? __pfx_vfs_read+0x10/0x10 [ 313.539983][ T7843] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 313.540015][ T7843] ? lockdep_hardirqs_on+0x7a/0x110 [ 313.540047][ T7843] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 313.540080][ T7843] ? mutex_lock_nested+0x152/0x1d0 [ 313.540104][ T7843] ? fdget_pos+0x252/0x320 [ 313.540139][ T7843] ksys_read+0x156/0x270 [ 313.540174][ T7843] ? __pfx_ksys_read+0x10/0x10 [ 313.540219][ T7843] do_syscall_64+0xe2/0xf80 [ 313.540251][ T7843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.540273][ T7843] ? trace_irq_disable+0x37/0x100 [ 313.540298][ T7843] ? clear_bhb_loop+0x60/0xb0 [ 313.540327][ T7843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.540350][ T7843] RIP: 0033:0x7f111033b58e [ 313.540371][ T7843] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 313.540393][ T7843] RSP: 002b:00007f110e5d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 313.540419][ T7843] RAX: ffffffffffffffda RBX: 00007f110e5d66c0 RCX: 00007f111033b58e [ 313.540436][ T7843] RDX: 000000000000000f RSI: 00007f110e5d60a0 RDI: 0000000000000006 [ 313.540451][ T7843] RBP: 00007f110e5d6090 R08: 0000000000000000 R09: 0000000000000000 [ 313.540466][ T7843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.540481][ T7843] R13: 00007f11105f6038 R14: 00007f11105f5fa0 R15: 00007fffc074c9b8 [ 313.540519][ T7843] [ 313.617846][ T50] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 314.163096][ T31] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 314.395889][ T50] usb 2-1: config 1 has an invalid interface number: 255 but max is 0 [ 314.396005][ T50] usb 2-1: config 1 has no interface number 0 [ 314.422330][ T50] usb 2-1: config 1 interface 255 altsetting 2 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 314.422461][ T50] usb 2-1: config 1 interface 255 altsetting 2 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 314.422624][ T50] usb 2-1: config 1 interface 255 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 314.425769][ T50] usb 2-1: config 1 interface 255 altsetting 2 endpoint 0xB has invalid maxpacket 4130, setting to 64 [ 314.425863][ T50] usb 2-1: config 1 interface 255 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 314.425943][ T50] usb 2-1: config 1 interface 255 has no altsetting 0 [ 315.075262][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 315.093748][ T31] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 315.093838][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.172744][ T31] usb 4-1: config 0 descriptor?? [ 315.197319][ T50] usb 2-1: Dual-Role OTG device on HNP port [ 315.197842][ T50] usb 2-1: can't set HNP mode: -71 [ 315.228760][ T31] gspca_main: sunplus-2.14.0 probing 041e:400b [ 315.457754][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 315.625308][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 315.644575][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.644606][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.693781][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 315.693814][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.693836][ T10] usb 3-1: Product: syz [ 315.693854][ T10] usb 3-1: Manufacturer: syz [ 315.693871][ T10] usb 3-1: SerialNumber: syz [ 315.795708][ T31] gspca_sunplus: reg_r err -32 [ 315.795815][ T31] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 317.245209][ T50] usb 4-1: USB disconnect, device number 20 [ 318.622948][ T7874] netlink: 68 bytes leftover after parsing attributes in process `syz.3.625'. [ 318.623015][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.625'. [ 318.625478][ T37] audit: type=1326 audit(1769360498.358:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 318.625973][ T37] audit: type=1326 audit(1769360498.358:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 318.626142][ T37] audit: type=1326 audit(1769360498.358:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 318.627047][ T37] audit: type=1326 audit(1769360498.358:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 318.627262][ T37] audit: type=1326 audit(1769360498.358:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 318.639209][ T37] audit: type=1326 audit(1769360498.378:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 318.639268][ T37] audit: type=1326 audit(1769360498.378:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 318.639470][ T37] audit: type=1326 audit(1769360498.378:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 318.655028][ T7878] FAULT_INJECTION: forcing a failure. [ 318.655028][ T7878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.655173][ T7878] CPU: 0 UID: 0 PID: 7878 Comm: syz.4.626 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 318.655271][ T7878] Tainted: [L]=SOFTLOCKUP [ 318.655292][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 318.655333][ T7878] Call Trace: [ 318.655356][ T7878] [ 318.655371][ T7878] dump_stack_lvl+0xe8/0x150 [ 318.655442][ T7878] should_fail_ex+0x46b/0x600 [ 318.655537][ T7878] _copy_from_iter+0x1d3/0x1670 [ 318.655620][ T7878] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 318.655713][ T7878] ? __pfx__copy_from_iter+0x10/0x10 [ 318.655807][ T7878] ? set_page_refcounted+0xa0/0x1e0 [ 318.655870][ T7878] ? page_copy_sane+0x4e/0x270 [ 318.655954][ T7878] copy_page_from_iter+0xdd/0x170 [ 318.656029][ T7878] tun_get_user+0x1d4b/0x3de0 [ 318.656057][ T7878] ? tun_get_user+0x6ff/0x3de0 [ 318.656104][ T7878] ? __lock_acquire+0x6b5/0x2cf0 [ 318.656174][ T7878] ? __pfx_tun_get_user+0x10/0x10 [ 318.656257][ T7878] ? __lock_acquire+0x6b5/0x2cf0 [ 318.656380][ T7878] ? ref_tracker_alloc+0x339/0x4b0 [ 318.656453][ T7878] ? get_pid_task+0x20/0x1f0 [ 318.656561][ T7878] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 318.656656][ T7878] ? tun_get+0x1c/0x2f0 [ 318.656721][ T7878] ? tun_get+0x1c/0x2f0 [ 318.656805][ T7878] ? tun_get+0x1c/0x2f0 [ 318.656879][ T7878] ? tun_get+0x1c/0x2f0 [ 318.656956][ T7878] tun_chr_write_iter+0x119/0x200 [ 318.657037][ T7878] vfs_write+0x629/0xba0 [ 318.657151][ T7878] ? __pfx_vfs_write+0x10/0x10 [ 318.657205][ T7878] ? __fget_files+0x2a/0x420 [ 318.657241][ T7878] ksys_write+0x156/0x270 [ 318.657276][ T7878] ? __pfx_ksys_write+0x10/0x10 [ 318.657322][ T7878] do_syscall_64+0xe2/0xf80 [ 318.657355][ T7878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.657378][ T7878] ? trace_irq_disable+0x37/0x100 [ 318.657402][ T7878] ? clear_bhb_loop+0x60/0xb0 [ 318.657431][ T7878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.657455][ T7878] RIP: 0033:0x7fcc584db58e [ 318.657475][ T7878] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 318.657496][ T7878] RSP: 002b:00007fcc56775fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 318.657521][ T7878] RAX: ffffffffffffffda RBX: 00007fcc567766c0 RCX: 00007fcc584db58e [ 318.657539][ T7878] RDX: 0000000000000083 RSI: 0000200000000140 RDI: 00000000000000c8 [ 318.657558][ T7878] RBP: 00007fcc56776090 R08: 0000000000000000 R09: 0000000000000000 [ 318.657572][ T7878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.657587][ T7878] R13: 00007fcc58796038 R14: 00007fcc58795fa0 R15: 00007fffa1089548 [ 318.657623][ T7878] [ 318.905510][ T10] usb 3-1: 0:2 : does not exist [ 318.925273][ T37] audit: type=1326 audit(1769360498.648:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 318.925449][ T37] audit: type=1326 audit(1769360498.648:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663486acb9 code=0x7ffc0000 [ 319.084507][ T7876] max out of range [ 319.478238][ T10] usb 3-1: USB disconnect, device number 20 [ 319.542892][ T7791] udevd[7791]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.667753][ T50] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 319.817682][ T50] usb 2-1: Using ep0 maxpacket: 8 [ 319.820213][ T50] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.820273][ T50] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 319.820328][ T50] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 319.820355][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.826085][ T50] usb 2-1: config 0 descriptor?? [ 319.894149][ T50] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 319.909769][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 319.941314][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 319.947743][ T5868] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 320.101423][ T5868] usb 4-1: config 1 has an invalid interface number: 255 but max is 0 [ 320.101458][ T5868] usb 4-1: config 1 has no interface number 0 [ 320.101514][ T5868] usb 4-1: config 1 interface 255 altsetting 2 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 320.101545][ T5868] usb 4-1: config 1 interface 255 altsetting 2 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 320.101580][ T5868] usb 4-1: config 1 interface 255 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 320.101605][ T5868] usb 4-1: config 1 interface 255 altsetting 2 endpoint 0xB has invalid maxpacket 4130, setting to 64 [ 320.101636][ T5868] usb 4-1: config 1 interface 255 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 320.101662][ T5868] usb 4-1: config 1 interface 255 has no altsetting 0 [ 320.107525][ T5802] Bluetooth: hci4: unexpected subevent 0x01 length: 3 < 18 [ 320.109983][ T5868] usb 4-1: Dual-Role OTG device on HNP port [ 320.113731][ T992] usb 2-1: USB disconnect, device number 23 [ 320.117827][ T5868] usb 4-1: New USB device found, idVendor=056c, idProduct=8007, bcdDevice=9d.43 [ 320.117872][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.117910][ T5868] usb 4-1: Product: syz [ 320.117927][ T5868] usb 4-1: Manufacturer: syz [ 320.117944][ T5868] usb 4-1: SerialNumber: syz [ 320.299831][ T7886] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 320.508036][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 320.543725][ T5868] belkin_sa 4-1:1.255: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 320.546011][ T5868] usb 4-1: bcdDevice: 9d43, bfc: 0 [ 320.577431][ T5868] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 320.616003][ T5868] usb 4-1: USB disconnect, device number 21 [ 320.642243][ T5868] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 320.643390][ T5868] belkin_sa 4-1:1.255: device disconnected [ 320.668276][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 320.706997][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 320.707031][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.747529][ T10] usb 1-1: config 0 descriptor?? [ 320.766235][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 321.145668][ T7916] 9p: Bad value for 'wfdno' [ 321.179926][ T7916] max out of range [ 321.376087][ T10] gspca_sunplus: reg_r err -32 [ 321.376194][ T10] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 321.460466][ T7922] Bluetooth: hci0: load_link_keys: too big key_count value 3968 [ 323.829961][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.830130][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.989531][ T5784] usb 1-1: USB disconnect, device number 23 [ 324.014546][ T7933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.648'. [ 324.804145][ T7944] FAULT_INJECTION: forcing a failure. [ 324.804145][ T7944] name failslab, interval 1, probability 0, space 0, times 0 [ 324.804187][ T7944] CPU: 0 UID: 0 PID: 7944 Comm: syz.3.652 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 324.804219][ T7944] Tainted: [L]=SOFTLOCKUP [ 324.804228][ T7944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 324.804242][ T7944] Call Trace: [ 324.804251][ T7944] [ 324.804261][ T7944] dump_stack_lvl+0xe8/0x150 [ 324.804299][ T7944] should_fail_ex+0x46b/0x600 [ 324.804331][ T7944] ? __alloc_skb+0x1d7/0x390 [ 324.804365][ T7944] should_failslab+0xa8/0x100 [ 324.804389][ T7944] ? __alloc_skb+0x1d7/0x390 [ 324.804421][ T7944] kmem_cache_alloc_node_noprof+0x8a/0x6d0 [ 324.804455][ T7944] ? lockdep_hardirqs_on+0x7a/0x110 [ 324.804490][ T7944] ? __alloc_skb+0x193/0x390 [ 324.804525][ T7944] __alloc_skb+0x1d7/0x390 [ 324.804563][ T7944] netlink_sendmsg+0x5d4/0xb40 [ 324.804599][ T7944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.804628][ T7944] ? is_bpf_text_address+0x292/0x2b0 [ 324.804663][ T7944] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 324.804694][ T7944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.804722][ T7944] __sock_sendmsg+0x21c/0x270 [ 324.804756][ T7944] ____sys_sendmsg+0x4e1/0x800 [ 324.804789][ T7944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 324.804823][ T7944] ? import_iovec+0x73/0xa0 [ 324.804861][ T7944] ___sys_sendmsg+0x2a5/0x360 [ 324.804885][ T7944] ? __lock_acquire+0x6b5/0x2cf0 [ 324.804921][ T7944] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.804991][ T7944] ? __fget_files+0x2a/0x420 [ 324.805021][ T7944] ? __fget_files+0x3a6/0x420 [ 324.805046][ T7944] __x64_sys_sendmsg+0x1c3/0x2a0 [ 324.805065][ T7944] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 324.805089][ T7944] ? __pfx_ksys_write+0x10/0x10 [ 324.805121][ T7944] do_syscall_64+0xe2/0xf80 [ 324.805144][ T7944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.805160][ T7944] ? trace_irq_disable+0x37/0x100 [ 324.805178][ T7944] ? clear_bhb_loop+0x60/0xb0 [ 324.805198][ T7944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.805215][ T7944] RIP: 0033:0x7f663486acb9 [ 324.805230][ T7944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.805245][ T7944] RSP: 002b:00007f6632ac6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.805263][ T7944] RAX: ffffffffffffffda RBX: 00007f6634ae5fa0 RCX: 00007f663486acb9 [ 324.805275][ T7944] RDX: 000000000000c808 RSI: 0000200000000080 RDI: 0000000000000004 [ 324.805286][ T7944] RBP: 00007f6632ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 324.805297][ T7944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.805307][ T7944] R13: 00007f6634ae6038 R14: 00007f6634ae5fa0 R15: 00007ffc91c0a7e8 [ 324.805334][ T7944] [ 324.972908][ T5784] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 325.118303][ T992] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 325.120519][ T5784] usb 1-1: config 1 has an invalid interface number: 255 but max is 0 [ 325.120551][ T5784] usb 1-1: config 1 has no interface number 0 [ 325.120600][ T5784] usb 1-1: config 1 interface 255 altsetting 2 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 325.120634][ T5784] usb 1-1: config 1 interface 255 altsetting 2 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 325.120657][ T5784] usb 1-1: config 1 interface 255 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 325.120683][ T5784] usb 1-1: config 1 interface 255 altsetting 2 endpoint 0xB has invalid maxpacket 4130, setting to 64 [ 325.120707][ T5784] usb 1-1: config 1 interface 255 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 325.120726][ T5784] usb 1-1: config 1 interface 255 has no altsetting 0 [ 325.124569][ T5784] usb 1-1: Dual-Role OTG device on HNP port [ 325.124863][ T5784] usb 1-1: New USB device found, idVendor=056c, idProduct=8007, bcdDevice=9d.43 [ 325.124885][ T5784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.124900][ T5784] usb 1-1: Product: syz [ 325.124911][ T5784] usb 1-1: Manufacturer: syz [ 325.124923][ T5784] usb 1-1: SerialNumber: syz [ 325.186924][ T7940] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 325.267783][ T7948] 9p: Bad value for 'wfdno' [ 325.305985][ T37] kauditd_printk_skb: 71 callbacks suppressed [ 325.306008][ T37] audit: type=1326 audit(1769360505.018:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7946 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111037acb9 code=0x7ffc0000 [ 325.307276][ T37] audit: type=1326 audit(1769360505.038:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7946 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111037acb9 code=0x7ffc0000 [ 325.307410][ T37] audit: type=1326 audit(1769360505.038:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7946 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f111037acb9 code=0x7ffc0000 [ 325.335049][ T37] audit: type=1326 audit(1769360505.048:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7946 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111037acb9 code=0x7ffc0000 [ 325.383016][ T37] audit: type=1326 audit(1769360505.058:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7946 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111037acb9 code=0x7ffc0000 [ 325.406177][ T37] audit: type=1326 audit(1769360505.138:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7946 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111037acb9 code=0x7ffc0000 [ 325.406653][ T37] audit: type=1326 audit(1769360505.138:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7946 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111037acb9 code=0x7ffc0000 [ 325.407366][ T37] audit: type=1326 audit(1769360505.138:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7946 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111037acb9 code=0x7ffc0000 [ 325.408271][ T37] audit: type=1326 audit(1769360505.138:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7946 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f111037acb9 code=0x7ffc0000 [ 325.518364][ T37] audit: type=1326 audit(1769360505.248:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7946 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111037acb9 code=0x7ffc0000 [ 325.620649][ T992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 325.620678][ T992] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.620756][ T992] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 325.620775][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.622096][ T7948] max out of range [ 325.697381][ T7952] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 325.697433][ T7952] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 325.751925][ T992] usb 2-1: config 0 descriptor?? [ 325.857485][ T5784] belkin_sa 1-1:1.255: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 325.962962][ T5784] usb 1-1: bcdDevice: 9d43, bfc: 0 [ 326.005618][ T5784] usb 1-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 326.138429][ T5784] usb 1-1: USB disconnect, device number 24 [ 326.230195][ T7958] FAULT_INJECTION: forcing a failure. [ 326.230195][ T7958] name failslab, interval 1, probability 0, space 0, times 0 [ 326.230240][ T7958] CPU: 1 UID: 0 PID: 7958 Comm: syz.2.656 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 326.230272][ T7958] Tainted: [L]=SOFTLOCKUP [ 326.230281][ T7958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 326.230295][ T7958] Call Trace: [ 326.230305][ T7958] [ 326.230315][ T7958] dump_stack_lvl+0xe8/0x150 [ 326.230354][ T7958] should_fail_ex+0x46b/0x600 [ 326.230389][ T7958] should_failslab+0xa8/0x100 [ 326.230414][ T7958] __kmalloc_noprof+0xdf/0x7c0 [ 326.230447][ T7958] ? rds_info_getsockopt+0x1ee/0x400 [ 326.230474][ T7958] ? __might_fault+0xaf/0x130 [ 326.230516][ T7958] rds_info_getsockopt+0x1ee/0x400 [ 326.230546][ T7958] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 326.230572][ T7958] ? __might_fault+0xaf/0x130 [ 326.230611][ T7958] ? rds_getsockopt+0x2ed/0x500 [ 326.230644][ T7958] ? __pfx_rds_getsockopt+0x10/0x10 [ 326.230687][ T7958] do_sock_getsockopt+0x2d3/0x3f0 [ 326.230715][ T7958] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 326.230739][ T7958] ? __fget_files+0x3a6/0x420 [ 326.230763][ T7958] ? __fget_files+0x2a/0x420 [ 326.230795][ T7958] __x64_sys_getsockopt+0x1aa/0x250 [ 326.230829][ T7958] do_syscall_64+0xe2/0xf80 [ 326.230861][ T7958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.230884][ T7958] ? trace_irq_disable+0x37/0x100 [ 326.230908][ T7958] ? clear_bhb_loop+0x60/0xb0 [ 326.230937][ T7958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.230960][ T7958] RIP: 0033:0x7f111037acb9 [ 326.230982][ T7958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.231003][ T7958] RSP: 002b:00007f110e5d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 326.231028][ T7958] RAX: ffffffffffffffda RBX: 00007f11105f5fa0 RCX: 00007f111037acb9 [ 326.231046][ T7958] RDX: 000000000000271f RSI: 0000200000000114 RDI: 0000000000000003 [ 326.231062][ T7958] RBP: 00007f110e5d6090 R08: 0000200000000000 R09: 0000000000000000 [ 326.231079][ T7958] R10: 0000200000032380 R11: 0000000000000246 R12: 0000000000000001 [ 326.231094][ T7958] R13: 00007f11105f6038 R14: 00007f11105f5fa0 R15: 00007fffc074c9b8 [ 326.231132][ T7958] [ 326.535894][ T5784] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 326.553858][ T5784] belkin_sa 1-1:1.255: device disconnected [ 327.500977][ T7970] ip6gre1: entered allmulticast mode [ 327.905494][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.658'. [ 329.702001][ T992] usbhid 2-1:0.0: can't add hid device: -71 [ 329.704510][ T992] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 329.754042][ T992] usb 2-1: USB disconnect, device number 24 [ 333.876121][ T7997] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 333.876190][ T7997] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 334.018461][ T50] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 334.174555][ T50] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 334.174592][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.174617][ T50] usb 5-1: Product: syz [ 334.174634][ T50] usb 5-1: Manufacturer: syz [ 334.174651][ T50] usb 5-1: SerialNumber: syz [ 334.256318][ T50] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 334.353283][ T31] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 334.413555][ T8002] FAULT_INJECTION: forcing a failure. [ 334.413555][ T8002] name failslab, interval 1, probability 0, space 0, times 0 [ 334.413613][ T8002] CPU: 0 UID: 0 PID: 8002 Comm: syz.2.668 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 334.413646][ T8002] Tainted: [L]=SOFTLOCKUP [ 334.413656][ T8002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 334.413670][ T8002] Call Trace: [ 334.413680][ T8002] [ 334.413691][ T8002] dump_stack_lvl+0xe8/0x150 [ 334.413728][ T8002] should_fail_ex+0x46b/0x600 [ 334.413761][ T8002] ? __alloc_skb+0x1d7/0x390 [ 334.413796][ T8002] should_failslab+0xa8/0x100 [ 334.413821][ T8002] ? __alloc_skb+0x1d7/0x390 [ 334.413853][ T8002] kmem_cache_alloc_node_noprof+0x8a/0x6d0 [ 334.413887][ T8002] ? lockdep_hardirqs_on+0x7a/0x110 [ 334.413928][ T8002] ? __alloc_skb+0x193/0x390 [ 334.413954][ T8002] __alloc_skb+0x1d7/0x390 [ 334.414006][ T8002] netlink_sendmsg+0x5d4/0xb40 [ 334.414052][ T8002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.414089][ T8002] ? is_bpf_text_address+0x292/0x2b0 [ 334.414121][ T8002] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 334.414150][ T8002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.414170][ T8002] __sock_sendmsg+0x21c/0x270 [ 334.414220][ T8002] ____sys_sendmsg+0x4e1/0x800 [ 334.414256][ T8002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.414290][ T8002] ? import_iovec+0x73/0xa0 [ 334.414328][ T8002] ___sys_sendmsg+0x2a5/0x360 [ 334.414349][ T8002] ? __lock_acquire+0x6b5/0x2cf0 [ 334.414393][ T8002] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.414456][ T8002] ? __fget_files+0x2a/0x420 [ 334.414481][ T8002] ? __fget_files+0x3a6/0x420 [ 334.414514][ T8002] __x64_sys_sendmsg+0x1c3/0x2a0 [ 334.414545][ T8002] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 334.414569][ T8002] ? __pfx_ksys_write+0x10/0x10 [ 334.414632][ T8002] do_syscall_64+0xe2/0xf80 [ 334.414666][ T8002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.414690][ T8002] ? clear_bhb_loop+0x60/0xb0 [ 334.414716][ T8002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.414744][ T8002] RIP: 0033:0x7f111037acb9 [ 334.414760][ T8002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.414774][ T8002] RSP: 002b:00007f110e5d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.414811][ T8002] RAX: ffffffffffffffda RBX: 00007f11105f5fa0 RCX: 00007f111037acb9 [ 334.414829][ T8002] RDX: 000000002400c880 RSI: 0000200000001080 RDI: 0000000000000003 [ 334.414845][ T8002] RBP: 00007f110e5d6090 R08: 0000000000000000 R09: 0000000000000000 [ 334.414861][ T8002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.414876][ T8002] R13: 00007f11105f6038 R14: 00007f11105f5fa0 R15: 00007fffc074c9b8 [ 334.414912][ T8002] [ 334.556417][ T7985] vivid-000: ================= START STATUS ================= [ 334.556435][ T7985] vivid-000: Radio HW Seek Mode: Bounded [ 334.556455][ T7985] vivid-000: Radio Programmable HW Seek: false [ 334.556470][ T7985] vivid-000: RDS Rx I/O Mode: Block I/O [ 334.556486][ T7985] vivid-000: Generate RBDS Instead of RDS: false [ 334.556501][ T7985] vivid-000: RDS Reception: true [ 334.556515][ T7985] vivid-000: RDS Program Type: 0 inactive [ 334.556534][ T7985] vivid-000: RDS PS Name: inactive [ 334.556552][ T7985] vivid-000: RDS Radio Text: inactive [ 334.556570][ T7985] vivid-000: RDS Traffic Announcement: false inactive [ 334.556588][ T7985] vivid-000: RDS Traffic Program: false inactive [ 334.556607][ T7985] vivid-000: RDS Music: false inactive [ 334.556625][ T7985] vivid-000: ================== END STATUS ================== [ 334.917009][ T8004] overlayfs: failed to resolve './bus': -2 [ 335.004773][ T9] usb 5-1: USB disconnect, device number 24 [ 335.408847][ T50] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 335.458645][ T31] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 335.459628][ T31] ath9k_htc: Failed to initialize the device [ 335.467848][ T5784] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 335.506539][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 335.577916][ T50] usb 3-1: Using ep0 maxpacket: 8 [ 335.593129][ T50] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.593189][ T50] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 335.593243][ T50] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 335.593271][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.644331][ T5784] usb 2-1: config 1 has an invalid interface number: 255 but max is 0 [ 335.644366][ T5784] usb 2-1: config 1 has no interface number 0 [ 335.644416][ T5784] usb 2-1: config 1 interface 255 altsetting 2 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 335.644447][ T5784] usb 2-1: config 1 interface 255 altsetting 2 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 335.644479][ T5784] usb 2-1: config 1 interface 255 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 335.644504][ T5784] usb 2-1: config 1 interface 255 altsetting 2 endpoint 0xB has invalid maxpacket 4130, setting to 64 [ 335.644535][ T5784] usb 2-1: config 1 interface 255 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 335.644560][ T5784] usb 2-1: config 1 interface 255 has no altsetting 0 [ 335.645284][ T50] usb 3-1: config 0 descriptor?? [ 335.648556][ T5784] usb 2-1: Dual-Role OTG device on HNP port [ 335.649052][ T5784] usb 2-1: New USB device found, idVendor=056c, idProduct=8007, bcdDevice=9d.43 [ 335.649081][ T5784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.649118][ T5784] usb 2-1: Product: syz [ 335.649162][ T5784] usb 2-1: Manufacturer: syz [ 335.649205][ T5784] usb 2-1: SerialNumber: syz [ 335.722483][ T8009] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 335.782351][ T50] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 335.875683][ T5802] Bluetooth: hci2: unexpected subevent 0x01 length: 3 < 18 [ 335.877190][ T50] usb 3-1: USB disconnect, device number 21 [ 335.974465][ T8011] misc userio: No port type given on /dev/userio [ 335.974613][ T8011] misc userio: The device must be registered before sending interrupts [ 336.301203][ T5784] belkin_sa 2-1:1.255: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 336.303426][ T5784] usb 2-1: bcdDevice: 9d43, bfc: 0 [ 336.347204][ T5784] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 336.443812][ T5784] usb 2-1: USB disconnect, device number 25 [ 336.519293][ T5784] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 336.520348][ T5784] belkin_sa 2-1:1.255: device disconnected [ 336.582869][ T8015] 9p: Bad value for 'wfdno' [ 336.584434][ T37] kauditd_printk_skb: 79 callbacks suppressed [ 336.584452][ T37] audit: type=1326 audit(1769360516.318:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8014 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69d2aacb9 code=0x7ffc0000 [ 336.584506][ T37] audit: type=1326 audit(1769360516.318:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8014 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69d2aacb9 code=0x7ffc0000 [ 336.584983][ T37] audit: type=1326 audit(1769360516.318:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8014 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69d2aacb9 code=0x7ffc0000 [ 336.585315][ T37] audit: type=1326 audit(1769360516.318:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8014 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69d2aacb9 code=0x7ffc0000 [ 336.586474][ T37] audit: type=1326 audit(1769360516.318:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8014 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69d2aacb9 code=0x7ffc0000 [ 336.586528][ T37] audit: type=1326 audit(1769360516.318:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8014 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe69d2aacb9 code=0x7ffc0000 [ 336.586958][ T37] audit: type=1326 audit(1769360516.318:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8014 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69d2aacb9 code=0x7ffc0000 [ 336.587407][ T37] audit: type=1326 audit(1769360516.318:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8014 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69d2aacb9 code=0x7ffc0000 [ 336.612054][ T37] audit: type=1326 audit(1769360516.318:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8014 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69d2aacb9 code=0x7ffc0000 [ 336.612118][ T37] audit: type=1326 audit(1769360516.348:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8014 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe69d2aacb9 code=0x7ffc0000 [ 336.699978][ T8015] max out of range [ 337.569978][ T8026] ip6gre1: entered allmulticast mode [ 338.972351][ T8039] overlayfs: upper fs does not support tmpfile. [ 340.681049][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.675'. [ 340.872839][ T8044] overlayfs: failed to resolve './bus': -2 [ 341.400419][ T5784] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 341.939152][ T8057] FAULT_INJECTION: forcing a failure. [ 341.939152][ T8057] name failslab, interval 1, probability 0, space 0, times 0 [ 341.939196][ T8057] CPU: 0 UID: 0 PID: 8057 Comm: syz.1.684 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 341.939229][ T8057] Tainted: [L]=SOFTLOCKUP [ 341.939237][ T8057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 341.939252][ T8057] Call Trace: [ 341.939261][ T8057] [ 341.939271][ T8057] dump_stack_lvl+0xe8/0x150 [ 341.939309][ T8057] should_fail_ex+0x46b/0x600 [ 341.939345][ T8057] should_failslab+0xa8/0x100 [ 341.939371][ T8057] __kmalloc_noprof+0xdf/0x7c0 [ 341.939408][ T8057] ? io_cache_alloc_new+0x40/0x100 [ 341.939451][ T8057] io_cache_alloc_new+0x40/0x100 [ 341.939490][ T8057] __io_prep_rw+0x2bf/0xed0 [ 341.939526][ T8057] ? __pfx___io_prep_rw+0x10/0x10 [ 341.939549][ T8057] ? percpu_ref_get_many+0x21/0x1e0 [ 341.939576][ T8057] ? percpu_ref_get_many+0x21/0x1e0 [ 341.939611][ T8057] io_prep_rwv+0x8e/0x440 [ 341.939635][ T8057] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 341.939670][ T8057] ? __pfx_io_prep_rwv+0x10/0x10 [ 341.939705][ T8057] ? io_task_refs_refill+0xba/0x180 [ 341.939745][ T8057] io_submit_sqes+0xad2/0x2130 [ 341.939807][ T8057] __se_sys_io_uring_enter+0x2fd/0x2bd0 [ 341.939851][ T8057] ? do_raw_spin_lock+0x12b/0x2f0 [ 341.939895][ T8057] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 341.939921][ T8057] ? lockdep_hardirqs_on+0x7a/0x110 [ 341.939955][ T8057] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 341.939989][ T8057] ? rt_mutex_slowunlock+0x1cb/0x300 [ 341.940015][ T8057] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 341.940054][ T8057] ? fput+0xa0/0xd0 [ 341.940081][ T8057] ? ksys_write+0x248/0x270 [ 341.940117][ T8057] ? __pfx_ksys_write+0x10/0x10 [ 341.940158][ T8057] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 341.940188][ T8057] do_syscall_64+0xe2/0xf80 [ 341.940221][ T8057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.940244][ T8057] ? trace_irq_disable+0x37/0x100 [ 341.940269][ T8057] ? clear_bhb_loop+0x60/0xb0 [ 341.940299][ T8057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.940323][ T8057] RIP: 0033:0x7f81fc5eacb9 [ 341.940345][ T8057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.940365][ T8057] RSP: 002b:00007f81fa846028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 341.940392][ T8057] RAX: ffffffffffffffda RBX: 00007f81fc865fa0 RCX: 00007f81fc5eacb9 [ 341.940410][ T8057] RDX: 0000000000000000 RSI: 0000000000000567 RDI: 0000000000000005 [ 341.940425][ T8057] RBP: 00007f81fa846090 R08: 0000000000000000 R09: 0000000000000000 [ 341.940440][ T8057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.940455][ T8057] R13: 00007f81fc866038 R14: 00007f81fc865fa0 R15: 00007ffff118a628 [ 341.940494][ T8057] [ 342.097650][ T5784] usb 4-1: Using ep0 maxpacket: 32 [ 342.163387][ T5784] usb 4-1: config 0 has an invalid interface number: 76 but max is 0 [ 342.163422][ T5784] usb 4-1: config 0 has no interface number 0 [ 342.310786][ T5784] usb 4-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 342.310831][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.310856][ T5784] usb 4-1: Product: syz [ 342.310873][ T5784] usb 4-1: Manufacturer: syz [ 342.310889][ T5784] usb 4-1: SerialNumber: syz [ 342.352781][ T5784] usb 4-1: config 0 descriptor?? [ 342.395808][ T5784] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 342.395864][ T5784] dw2102: su3000_power_ctrl: 1, initialized 0 [ 342.395887][ T5784] dvb-usb: bulk message failed: -22 (2/0) [ 342.429861][ T5784] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 342.431111][ T5784] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 342.431173][ T5784] usb 4-1: media controller created [ 342.431202][ T5784] dvb-usb: bulk message failed: -22 (6/0) [ 342.431220][ T5784] dw2102: i2c transfer failed. [ 342.431239][ T5784] dvb-usb: bulk message failed: -22 (6/0) [ 342.431254][ T5784] dw2102: i2c transfer failed. [ 342.431273][ T5784] dvb-usb: bulk message failed: -22 (6/0) [ 342.431289][ T5784] dw2102: i2c transfer failed. [ 342.431307][ T5784] dvb-usb: bulk message failed: -22 (6/0) [ 342.431323][ T5784] dw2102: i2c transfer failed. [ 342.431341][ T5784] dvb-usb: bulk message failed: -22 (6/0) [ 342.431356][ T5784] dw2102: i2c transfer failed. [ 342.431373][ T5784] dvb-usb: bulk message failed: -22 (6/0) [ 342.431388][ T5784] dw2102: i2c transfer failed. [ 342.431399][ T5784] dvb-usb: MAC address: 02:02:02:02:02:02 [ 342.547182][ T5784] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 342.591837][ T5784] dvb-usb: bulk message failed: -22 (3/0) [ 342.591861][ T5784] dw2102: command 0x0e transfer failed. [ 342.591881][ T5784] dvb-usb: bulk message failed: -22 (3/0) [ 342.591897][ T5784] dw2102: command 0x0e transfer failed. [ 344.872252][ T5784] dvb-usb: bulk message failed: -22 (3/0) [ 344.872282][ T5784] dw2102: command 0x0e transfer failed. [ 344.872293][ T5784] dvb-usb: bulk message failed: -22 (3/0) [ 344.872309][ T5784] dw2102: command 0x0e transfer failed. [ 344.872320][ T5784] dvb-usb: bulk message failed: -22 (1/0) [ 344.872335][ T5784] dw2102: command 0x51 transfer failed. [ 345.001657][ T8065] FAULT_INJECTION: forcing a failure. [ 345.001657][ T8065] name failslab, interval 1, probability 0, space 0, times 0 [ 345.001700][ T8065] CPU: 1 UID: 0 PID: 8065 Comm: syz.1.687 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 345.001732][ T8065] Tainted: [L]=SOFTLOCKUP [ 345.001741][ T8065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 345.001755][ T8065] Call Trace: [ 345.001765][ T8065] [ 345.001774][ T8065] dump_stack_lvl+0xe8/0x150 [ 345.001813][ T8065] should_fail_ex+0x46b/0x600 [ 345.001847][ T8065] should_failslab+0xa8/0x100 [ 345.001872][ T8065] __kmalloc_cache_noprof+0x83/0x6b0 [ 345.001908][ T8065] ? wakeup_source_register+0x5b/0x390 [ 345.001937][ T8065] wakeup_source_register+0x5b/0x390 [ 345.001965][ T8065] ep_modify+0x2e1/0xa50 [ 345.001998][ T8065] ? __pfx_ep_modify+0x10/0x10 [ 345.002031][ T8065] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 345.002067][ T8065] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 345.002100][ T8065] ? mutex_lock_nested+0x152/0x1d0 [ 345.002125][ T8065] ? do_epoll_ctl+0x3d2/0xe90 [ 345.002154][ T8065] do_epoll_ctl+0x6be/0xe90 [ 345.002190][ T8065] __x64_sys_epoll_ctl+0x165/0x1b0 [ 345.002220][ T8065] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 345.002261][ T8065] do_syscall_64+0xe2/0xf80 [ 345.002292][ T8065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.002315][ T8065] ? trace_irq_disable+0x37/0x100 [ 345.002340][ T8065] ? clear_bhb_loop+0x60/0xb0 [ 345.002369][ T8065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.002394][ T8065] RIP: 0033:0x7f81fc5eacb9 [ 345.002426][ T8065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.002447][ T8065] RSP: 002b:00007f81fa846028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 345.002472][ T8065] RAX: ffffffffffffffda RBX: 00007f81fc865fa0 RCX: 00007f81fc5eacb9 [ 345.002489][ T8065] RDX: 0000000000000005 RSI: 0000000000000003 RDI: 0000000000000003 [ 345.002504][ T8065] RBP: 00007f81fa846090 R08: 0000000000000000 R09: 0000000000000000 [ 345.002519][ T8065] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 345.002534][ T8065] R13: 00007f81fc866038 R14: 00007f81fc865fa0 R15: 00007ffff118a628 [ 345.002572][ T8065] [ 345.244600][ T8067] mmap: syz.2.688 (8067) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 345.475233][ T5784] DVB: Unable to find symbol ds3000_attach() [ 345.475253][ T5784] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 345.778179][ T5784] rc_core: IR keymap rc-su3000 not found [ 345.778209][ T5784] Registered IR keymap rc-empty [ 345.779579][ T5784] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 345.782092][ T5784] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input11 [ 345.838523][ T5784] dvb-usb: schedule remote query interval to 150 msecs. [ 345.838551][ T5784] dw2102: su3000_power_ctrl: 0, initialized 1 [ 345.838567][ T5784] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 345.883607][ T5784] usb 4-1: USB disconnect, device number 22 [ 346.421451][ T5784] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 346.581575][ T5802] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 346.581899][ T5802] Bluetooth: hci2: Injecting HCI hardware error event [ 346.586276][ T5813] Bluetooth: hci2: hardware error 0x00 [ 346.739406][ T8085] overlayfs: failed to resolve './file0': -2 [ 347.503465][ T8093] ip6gre1: entered allmulticast mode [ 348.328364][ T8095] tmpfs: Unknown parameter 'usrqu„ta_inode_hardlimit' [ 350.258368][ T5813] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 350.557714][ T5784] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 350.744353][ T5784] usb 1-1: config 1 has an invalid interface number: 255 but max is 0 [ 350.744390][ T5784] usb 1-1: config 1 has no interface number 0 [ 350.744442][ T5784] usb 1-1: config 1 interface 255 altsetting 2 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 350.744474][ T5784] usb 1-1: config 1 interface 255 altsetting 2 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 350.744508][ T5784] usb 1-1: config 1 interface 255 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 350.744534][ T5784] usb 1-1: config 1 interface 255 altsetting 2 endpoint 0xB has invalid maxpacket 4130, setting to 64 [ 350.744565][ T5784] usb 1-1: config 1 interface 255 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 350.744592][ T5784] usb 1-1: config 1 interface 255 has no altsetting 0 [ 350.750967][ T5784] usb 1-1: Dual-Role OTG device on HNP port [ 350.751680][ T5784] usb 1-1: New USB device found, idVendor=056c, idProduct=8007, bcdDevice=9d.43 [ 350.751755][ T5784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.751784][ T5784] usb 1-1: Product: syz [ 350.751801][ T5784] usb 1-1: Manufacturer: syz [ 350.751817][ T5784] usb 1-1: SerialNumber: syz [ 350.856550][ T8100] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 351.135148][ T5784] belkin_sa 1-1:1.255: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 351.139053][ T5784] usb 1-1: bcdDevice: 9d43, bfc: 0 [ 351.154725][ T5784] usb 1-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 351.250595][ T5784] usb 1-1: USB disconnect, device number 25 [ 351.299060][ T5784] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 351.305908][ T5784] belkin_sa 1-1:1.255: device disconnected [ 355.098856][ C1] sd 0:0:1:0: [sda] tag#7990 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 355.098930][ C1] sd 0:0:1:0: [sda] tag#7990 CDB: Read(10) 28 08 f9 9a 33 64 0a 01 [ 355.528182][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'. [ 355.549125][ T5888] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 355.699342][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 355.705246][ T5888] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 355.705279][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.705301][ T5888] usb 2-1: config 0 has no interface number 0 [ 355.705341][ T5888] usb 2-1: too many endpoints for config 0 interface 105 altsetting 48: 120, using maximum allowed: 30 [ 355.705385][ T5888] usb 2-1: config 0 interface 105 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 355.705416][ T5888] usb 2-1: config 0 interface 105 has no altsetting 0 [ 355.771219][ T5888] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 355.771253][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.771277][ T5888] usb 2-1: Product: syz [ 355.771294][ T5888] usb 2-1: Manufacturer: syz [ 355.771311][ T5888] usb 2-1: SerialNumber: syz [ 355.829894][ T5888] usb 2-1: config 0 descriptor?? [ 355.966564][ T8154] FAULT_INJECTION: forcing a failure. [ 355.966564][ T8154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.966668][ T8154] CPU: 1 UID: 0 PID: 8154 Comm: syz.4.716 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 355.966700][ T8154] Tainted: [L]=SOFTLOCKUP [ 355.966709][ T8154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 355.966724][ T8154] Call Trace: [ 355.966732][ T8154] [ 355.966743][ T8154] dump_stack_lvl+0xe8/0x150 [ 355.966793][ T8154] should_fail_ex+0x46b/0x600 [ 355.966827][ T8154] _copy_to_user+0x31/0xb0 [ 355.966871][ T8154] simple_read_from_buffer+0xe1/0x170 [ 355.966902][ T8154] proc_fail_nth_read+0x1be/0x230 [ 355.966940][ T8154] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.966978][ T8154] ? rw_verify_area+0x2ac/0x4e0 [ 355.967009][ T8154] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 355.967040][ T8154] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.967076][ T8154] vfs_read+0x212/0xa70 [ 355.967117][ T8154] ? __pfx_vfs_read+0x10/0x10 [ 355.967153][ T8154] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 355.967187][ T8154] ? lockdep_hardirqs_on+0x7a/0x110 [ 355.967220][ T8154] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 355.967254][ T8154] ? mutex_lock_nested+0x152/0x1d0 [ 355.967278][ T8154] ? fdget_pos+0x252/0x320 [ 355.967314][ T8154] ksys_read+0x156/0x270 [ 355.967351][ T8154] ? __pfx_ksys_read+0x10/0x10 [ 355.967398][ T8154] do_syscall_64+0xe2/0xf80 [ 355.967432][ T8154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.967456][ T8154] ? clear_bhb_loop+0x60/0xb0 [ 355.967485][ T8154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.967509][ T8154] RIP: 0033:0x7fcc584db58e [ 355.967530][ T8154] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 355.967550][ T8154] RSP: 002b:00007fcc56775fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 355.967573][ T8154] RAX: ffffffffffffffda RBX: 00007fcc567766c0 RCX: 00007fcc584db58e [ 355.967591][ T8154] RDX: 000000000000000f RSI: 00007fcc567760a0 RDI: 0000000000000005 [ 355.967606][ T8154] RBP: 00007fcc56776090 R08: 0000000000000000 R09: 0000000000000000 [ 355.967620][ T8154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.967634][ T8154] R13: 00007fcc58796038 R14: 00007fcc58795fa0 R15: 00007fffa1089548 [ 355.967671][ T8154] [ 356.232620][ T5888] usb 2-1: USB disconnect, device number 26 [ 356.469880][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 356.469902][ T37] audit: type=1326 audit(1769360536.208:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111037acb9 code=0x7ffc0000 [ 356.470061][ T37] audit: type=1326 audit(1769360536.208:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111037acb9 code=0x7ffc0000 [ 356.472525][ T37] audit: type=1326 audit(1769360536.208:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f111037acb9 code=0x7ffc0000 [ 356.472582][ T37] audit: type=1326 audit(1769360536.208:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111037acb9 code=0x7ffc0000 [ 356.472629][ T37] audit: type=1326 audit(1769360536.208:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111037acb9 code=0x7ffc0000 [ 356.472678][ T37] audit: type=1326 audit(1769360536.208:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f111037acb9 code=0x7ffc0000 [ 356.472736][ T37] audit: type=1326 audit(1769360536.208:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111037acb9 code=0x7ffc0000 [ 356.472786][ T37] audit: type=1326 audit(1769360536.208:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111037acb9 code=0x7ffc0000 [ 356.477075][ T37] audit: type=1326 audit(1769360536.208:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f111037acb9 code=0x7ffc0000 [ 356.477134][ T37] audit: type=1326 audit(1769360536.208:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111037acb9 code=0x7ffc0000 [ 358.548329][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 358.727732][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 358.730158][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.730188][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 358.733490][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 358.733522][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.733547][ T9] usb 2-1: Product: syz [ 358.733630][ T9] usb 2-1: Manufacturer: syz [ 358.733649][ T9] usb 2-1: SerialNumber: syz [ 358.837745][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 359.011910][ T10] usb 1-1: config index 0 descriptor too short (expected 93, got 72) [ 359.011935][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.011977][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 359.097385][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 359.097422][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.097445][ T10] usb 1-1: Product: syz [ 359.097463][ T10] usb 1-1: Manufacturer: syz [ 359.097480][ T10] usb 1-1: SerialNumber: syz [ 359.355552][ T10] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 360.839646][ T8196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.728'. [ 361.531764][ T9] usb 2-1: 0:2 : does not exist [ 361.564246][ T9] usb 2-1: USB disconnect, device number 27 [ 361.679784][ T7791] udevd[7791]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.716045][ T10] usb 1-1: USB disconnect, device number 26 [ 367.057806][ T5808] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 369.090333][ T5808] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 369.090366][ T5808] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.090389][ T5808] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 369.090447][ T5808] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.093910][ T5808] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 369.093943][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 369.093965][ T5808] usb 4-1: Product: syz [ 369.093981][ T5808] usb 4-1: Manufacturer: syz [ 369.185505][ T5808] cdc_wdm 4-1:1.0: skipping garbage [ 369.185530][ T5808] cdc_wdm 4-1:1.0: skipping garbage [ 369.198566][ T5808] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 369.198591][ T5808] cdc_wdm 4-1:1.0: Unknown control protocol [ 369.480466][ T5808] usb 4-1: USB disconnect, device number 23 [ 369.998153][ T5808] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 370.149155][ T5888] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 370.300421][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.300470][ T5888] usb 1-1: config 0 interface 0 has no altsetting 0 [ 370.302393][ T5808] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 370.302424][ T5808] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.302446][ T5808] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 370.302500][ T5808] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.304774][ T5808] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 370.304817][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 370.304846][ T5808] usb 4-1: Product: syz [ 370.304862][ T5808] usb 4-1: Manufacturer: syz [ 370.305263][ T5888] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 370.305290][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.305313][ T5888] usb 1-1: Product: syz [ 370.305330][ T5888] usb 1-1: Manufacturer: syz [ 370.305346][ T5888] usb 1-1: SerialNumber: syz [ 370.439258][ T5888] usb 1-1: config 0 descriptor?? [ 370.469155][ T5888] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 370.491392][ T5808] cdc_wdm 4-1:1.0: skipping garbage [ 370.491416][ T5808] cdc_wdm 4-1:1.0: skipping garbage [ 370.495849][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 370.496824][ T5888] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 370.496884][ T5888] usb 1-1: media controller created [ 370.508999][ T5808] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 370.509071][ T5808] cdc_wdm 4-1:1.0: Unknown control protocol [ 370.563118][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 370.579159][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 370.667706][ T5888] DVB: Unable to find symbol tda10046_attach() [ 370.667723][ T5888] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 370.667740][ T5888] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 370.699996][ T8258] tmpfs: Bad value for 'mpol' [ 370.708976][ T8259] tmpfs: Bad value for 'mpol' [ 370.727962][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 370.730654][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 370.730689][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 370.730718][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 370.730750][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 370.730778][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.730827][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 370.730855][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.834452][ T31] usb 4-1: USB disconnect, device number 24 [ 370.973373][ T10] usb 5-1: usb_control_msg returned -32 [ 370.973422][ T10] usbtmc 5-1:16.0: can't read capabilities [ 371.094239][ T10] usb 5-1: USB disconnect, device number 25 [ 371.461402][ T5888] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 371.634437][ T8267] ip6gre1: entered allmulticast mode [ 372.106943][ T5888] usb 1-1: USB disconnect, device number 27 [ 373.028156][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 373.180230][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 373.180337][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 373.180367][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 373.180396][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 373.180497][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 373.180516][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.186301][ T9] usb 1-1: config 0 descriptor?? [ 373.447385][ T9] hdpvr 1-1:0.0: unexpected answer of status request, len -71 [ 373.447423][ T9] hdpvr 1-1:0.0: device init failed [ 373.447513][ T9] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 373.482209][ T9] usb 1-1: USB disconnect, device number 28 [ 373.773297][ T8297] FAULT_INJECTION: forcing a failure. [ 373.773297][ T8297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.773353][ T8297] CPU: 0 UID: 0 PID: 8297 Comm: syz.4.767 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 373.773386][ T8297] Tainted: [L]=SOFTLOCKUP [ 373.773394][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 373.773414][ T8297] Call Trace: [ 373.773423][ T8297] [ 373.773437][ T8297] dump_stack_lvl+0xe8/0x150 [ 373.773476][ T8297] should_fail_ex+0x46b/0x600 [ 373.773511][ T8297] strncpy_from_user+0x36/0x2b0 [ 373.773541][ T8297] getname_flags+0xf2/0x540 [ 373.773584][ T8297] __x64_sys_renameat2+0xad/0xe0 [ 373.773610][ T8297] do_syscall_64+0xe2/0xf80 [ 373.773642][ T8297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.773667][ T8297] ? clear_bhb_loop+0x60/0xb0 [ 373.773701][ T8297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.773725][ T8297] RIP: 0033:0x7fcc5851acb9 [ 373.773746][ T8297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.773767][ T8297] RSP: 002b:00007fcc56776028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 373.773793][ T8297] RAX: ffffffffffffffda RBX: 00007fcc58795fa0 RCX: 00007fcc5851acb9 [ 373.773811][ T8297] RDX: ffffffffffffff9c RSI: 0000200000000480 RDI: ffffffffffffff9c [ 373.773829][ T8297] RBP: 00007fcc56776090 R08: 0000000000000002 R09: 0000000000000000 [ 373.773844][ T8297] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 373.773860][ T8297] R13: 00007fcc58796038 R14: 00007fcc58795fa0 R15: 00007fffa1089548 [ 373.773897][ T8297] [ 374.462889][ T8319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.777'. [ 375.307789][ T5888] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 375.313848][ T8334] FAULT_INJECTION: forcing a failure. [ 375.313848][ T8334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.313891][ T8334] CPU: 1 UID: 0 PID: 8334 Comm: syz.2.784 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 375.313923][ T8334] Tainted: [L]=SOFTLOCKUP [ 375.313932][ T8334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 375.313947][ T8334] Call Trace: [ 375.313956][ T8334] [ 375.313965][ T8334] dump_stack_lvl+0xe8/0x150 [ 375.314003][ T8334] should_fail_ex+0x46b/0x600 [ 375.314037][ T8334] _copy_from_user+0x2d/0xb0 [ 375.314074][ T8334] ___sys_sendmsg+0x1c6/0x360 [ 375.314099][ T8334] ? __lock_acquire+0x6b5/0x2cf0 [ 375.314136][ T8334] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.314199][ T8334] ? __fget_files+0x2a/0x420 [ 375.314222][ T8334] ? __fget_files+0x3a6/0x420 [ 375.314258][ T8334] __x64_sys_sendmsg+0x1c3/0x2a0 [ 375.314286][ T8334] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 375.314322][ T8334] ? __pfx_ksys_write+0x10/0x10 [ 375.314368][ T8334] do_syscall_64+0xe2/0xf80 [ 375.314401][ T8334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.314424][ T8334] ? trace_irq_disable+0x37/0x100 [ 375.314449][ T8334] ? clear_bhb_loop+0x60/0xb0 [ 375.314478][ T8334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.314502][ T8334] RIP: 0033:0x7f111037acb9 [ 375.314523][ T8334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.314545][ T8334] RSP: 002b:00007f110e5d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.314570][ T8334] RAX: ffffffffffffffda RBX: 00007f11105f5fa0 RCX: 00007f111037acb9 [ 375.314588][ T8334] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000003 [ 375.314603][ T8334] RBP: 00007f110e5d6090 R08: 0000000000000000 R09: 0000000000000000 [ 375.314618][ T8334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.314633][ T8334] R13: 00007f11105f6038 R14: 00007f11105f5fa0 R15: 00007fffc074c9b8 [ 375.314669][ T8334] [ 375.577965][ T5888] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 375.577998][ T5888] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 375.578021][ T5888] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 375.578044][ T5888] usb 5-1: config 220 has no interface number 2 [ 375.578126][ T5888] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 375.578158][ T5888] usb 5-1: config 220 interface 0 has no altsetting 0 [ 375.578179][ T5888] usb 5-1: config 220 interface 76 has no altsetting 0 [ 375.578199][ T5888] usb 5-1: config 220 interface 1 has no altsetting 0 [ 375.586749][ T5888] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 375.586783][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.586806][ T5888] usb 5-1: Product: syz [ 375.586823][ T5888] usb 5-1: Manufacturer: syz [ 375.586839][ T5888] usb 5-1: SerialNumber: syz [ 377.953306][ T5888] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 377.953347][ T5888] uvcvideo 5-1:220.0: No valid video chain found. [ 377.953413][ T5888] usb 5-1: selecting invalid altsetting 0 [ 378.019533][ T5888] usb 5-1: selecting invalid altsetting 0 [ 378.019576][ T5888] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 378.045006][ T5888] usb 5-1: USB disconnect, device number 26 [ 379.806317][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.794'. [ 381.216979][ T5813] block nbd4: Receive control failed (result -32) [ 381.383811][ T8370] block nbd4: shutting down sockets [ 381.806014][ T8381] FAULT_INJECTION: forcing a failure. [ 381.806014][ T8381] name failslab, interval 1, probability 0, space 0, times 0 [ 381.806065][ T8381] CPU: 1 UID: 0 PID: 8381 Comm: syz.4.801 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 381.806097][ T8381] Tainted: [L]=SOFTLOCKUP [ 381.806106][ T8381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 381.806121][ T8381] Call Trace: [ 381.806130][ T8381] [ 381.806140][ T8381] dump_stack_lvl+0xe8/0x150 [ 381.806178][ T8381] should_fail_ex+0x46b/0x600 [ 381.806214][ T8381] should_failslab+0xa8/0x100 [ 381.806239][ T8381] __kmalloc_noprof+0xdf/0x7c0 [ 381.806272][ T8381] ? sock_kmalloc+0xd6/0x160 [ 381.806297][ T8381] ? __local_bh_enable+0x1e1/0x2f0 [ 381.806331][ T8381] sock_kmalloc+0xd6/0x160 [ 381.806360][ T8381] af_alg_alloc_areq+0x99/0x200 [ 381.806399][ T8381] skcipher_recvmsg+0x332/0x1140 [ 381.806428][ T8381] ? __lock_acquire+0x6b5/0x2cf0 [ 381.806473][ T8381] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 381.806495][ T8381] ? __lock_acquire+0x6b5/0x2cf0 [ 381.806528][ T8381] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 381.806559][ T8381] ? security_socket_recvmsg+0x7e/0x2c0 [ 381.806591][ T8381] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 381.806616][ T8381] sock_recvmsg+0x22c/0x270 [ 381.806652][ T8381] ____sys_recvmsg+0x1f2/0x4b0 [ 381.806689][ T8381] ? __pfx_____sys_recvmsg+0x10/0x10 [ 381.806737][ T8381] ? import_iovec+0x73/0xa0 [ 381.806776][ T8381] ___sys_recvmsg+0x215/0x590 [ 381.806800][ T8381] ? get_pid_task+0x20/0x1f0 [ 381.806840][ T8381] ? __pfx____sys_recvmsg+0x10/0x10 [ 381.806871][ T8381] ? __fget_files+0x2a/0x420 [ 381.806915][ T8381] ? __fget_files+0x3a6/0x420 [ 381.806957][ T8381] __x64_sys_recvmsg+0x1c0/0x2a0 [ 381.806987][ T8381] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 381.807025][ T8381] ? __pfx_ksys_write+0x10/0x10 [ 381.807083][ T8381] do_syscall_64+0xe2/0xf80 [ 381.807117][ T8381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.807140][ T8381] ? trace_irq_disable+0x37/0x100 [ 381.807166][ T8381] ? clear_bhb_loop+0x60/0xb0 [ 381.807196][ T8381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.807219][ T8381] RIP: 0033:0x7fcc5851acb9 [ 381.807240][ T8381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.807259][ T8381] RSP: 002b:00007fcc56776028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 381.807284][ T8381] RAX: ffffffffffffffda RBX: 00007fcc58795fa0 RCX: 00007fcc5851acb9 [ 381.807302][ T8381] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 381.807324][ T8381] RBP: 00007fcc56776090 R08: 0000000000000000 R09: 0000000000000000 [ 381.807339][ T8381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.807353][ T8381] R13: 00007fcc58796038 R14: 00007fcc58795fa0 R15: 00007fffa1089548 [ 381.807392][ T8381] [ 382.037693][ T31] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 382.238215][ T8384] netlink: 20 bytes leftover after parsing attributes in process `syz.4.802'. [ 382.264195][ T31] usb 1-1: config 4 has an invalid interface number: 92 but max is 0 [ 382.264227][ T31] usb 1-1: config 4 has no interface number 0 [ 382.264390][ T31] usb 1-1: config 4 interface 92 has no altsetting 0 [ 382.863628][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 1.4f [ 382.863665][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.863688][ T31] usb 1-1: Product: syz [ 382.863705][ T31] usb 1-1: Manufacturer: syz [ 382.863721][ T31] usb 1-1: SerialNumber: syz [ 383.126487][ T31] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:4.92/input/input12 [ 383.166004][ T5148] bcm5974 1-1:4.92: could not read from device [ 383.253643][ T31] usb 1-1: USB disconnect, device number 29 [ 383.257693][ T5784] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 383.366611][ T7777] udevd[7777]: Error opening device "/dev/input/event4": No such file or directory [ 383.366749][ T7777] udevd[7777]: Unable to EVIOCGABS device "/dev/input/event4" [ 383.366866][ T7777] udevd[7777]: Unable to EVIOCGABS device "/dev/input/event4" [ 383.367028][ T7777] udevd[7777]: Unable to EVIOCGABS device "/dev/input/event4" [ 383.367140][ T7777] udevd[7777]: Unable to EVIOCGABS device "/dev/input/event4" [ 383.430751][ T5784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 383.430792][ T5784] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 383.430839][ T5784] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 383.430865][ T5784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.437187][ T5784] usb 5-1: config 0 descriptor?? [ 383.785300][ T8394] netlink: 44 bytes leftover after parsing attributes in process `syz.1.797'. [ 384.124204][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.126780][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.446766][ T8399] FAULT_INJECTION: forcing a failure. [ 384.446766][ T8399] name failslab, interval 1, probability 0, space 0, times 0 [ 384.446839][ T8399] CPU: 1 UID: 0 PID: 8399 Comm: syz.2.804 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 384.446871][ T8399] Tainted: [L]=SOFTLOCKUP [ 384.446880][ T8399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 384.446894][ T8399] Call Trace: [ 384.446904][ T8399] [ 384.446915][ T8399] dump_stack_lvl+0xe8/0x150 [ 384.446954][ T8399] should_fail_ex+0x46b/0x600 [ 384.446987][ T8399] ? __alloc_skb+0x1d7/0x390 [ 384.447024][ T8399] should_failslab+0xa8/0x100 [ 384.447048][ T8399] ? __alloc_skb+0x1d7/0x390 [ 384.447082][ T8399] kmem_cache_alloc_node_noprof+0x8a/0x6d0 [ 384.447117][ T8399] ? __local_bh_enable_ip+0x1c2/0x2b0 [ 384.447156][ T8399] ? __alloc_skb+0x193/0x390 [ 384.447193][ T8399] __alloc_skb+0x1d7/0x390 [ 384.447234][ T8399] pfkey_sendmsg+0x212/0x1120 [ 384.447269][ T8399] ? smack_socket_sendmsg+0x1a9/0x590 [ 384.447297][ T8399] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 384.447325][ T8399] ? __pfx___schedule+0x10/0x10 [ 384.447368][ T8399] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 384.447399][ T8399] ? irqentry_exit+0x59c/0x620 [ 384.447433][ T8399] ? lockdep_hardirqs_on+0x7a/0x110 [ 384.447468][ T8399] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 384.447501][ T8399] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 384.447530][ T8399] __sock_sendmsg+0x21c/0x270 [ 384.447561][ T8399] ____sys_sendmsg+0x4e1/0x800 [ 384.447596][ T8399] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.447631][ T8399] ? import_iovec+0x73/0xa0 [ 384.447669][ T8399] ___sys_sendmsg+0x2a5/0x360 [ 384.447693][ T8399] ? __lock_acquire+0x6b5/0x2cf0 [ 384.447731][ T8399] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.447794][ T8399] ? __fget_files+0x2a/0x420 [ 384.447819][ T8399] ? __fget_files+0x3a6/0x420 [ 384.447856][ T8399] __x64_sys_sendmsg+0x1c3/0x2a0 [ 384.447885][ T8399] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 384.447919][ T8399] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 384.447960][ T8399] do_syscall_64+0xe2/0xf80 [ 384.447992][ T8399] ? rcu_is_watching+0x15/0xb0 [ 384.448014][ T8399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.448038][ T8399] ? clear_bhb_loop+0x60/0xb0 [ 384.448068][ T8399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.448092][ T8399] RIP: 0033:0x7f111037acb9 [ 384.448114][ T8399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.448135][ T8399] RSP: 002b:00007f110e594028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.448196][ T8399] RAX: ffffffffffffffda RBX: 00007f11105f6180 RCX: 00007f111037acb9 [ 384.448215][ T8399] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 384.448230][ T8399] RBP: 00007f110e594090 R08: 0000000000000000 R09: 0000000000000000 [ 384.448246][ T8399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.448261][ T8399] R13: 00007f11105f6218 R14: 00007f11105f6180 R15: 00007fffc074c9b8 [ 384.448299][ T8399] [ 385.727036][ T5784] usbhid 5-1:0.0: can't add hid device: -71 [ 385.727180][ T5784] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 385.791699][ T5784] usb 5-1: USB disconnect, device number 27 [ 385.956571][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.809'. [ 385.956621][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.809'. [ 386.158702][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.812'. [ 386.187681][ T50] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 386.338935][ T50] usb 1-1: Using ep0 maxpacket: 32 [ 386.344156][ T50] usb 1-1: unable to get BOS descriptor or descriptor too short [ 386.345405][ T50] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 386.358942][ T50] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 386.358974][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.358996][ T50] usb 1-1: Product: syz [ 386.359013][ T50] usb 1-1: Manufacturer: syz [ 386.359028][ T50] usb 1-1: SerialNumber: syz [ 386.397685][ T808] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 386.569414][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 386.569504][ T808] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 386.569532][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 386.569557][ T808] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 386.569600][ T808] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 386.569679][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.637658][ T50] usb 1-1: Limiting number of CPorts to U8_MAX [ 386.655467][ T808] usb 3-1: config 0 descriptor?? [ 386.678069][ T50] usb 1-1: Not enough endpoints found in device, aborting! [ 386.759045][ T8425] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 386.839618][ T9] usb 1-1: USB disconnect, device number 30 [ 386.949392][ T5784] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 387.036261][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.817'. [ 387.092519][ T808] hdpvr 3-1:0.0: unexpected answer of status request, len -71 [ 387.092546][ T808] hdpvr 3-1:0.0: device init failed [ 387.092634][ T808] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 387.113143][ T5784] usb 2-1: Using ep0 maxpacket: 16 [ 387.130230][ T808] usb 3-1: USB disconnect, device number 22 [ 387.135737][ T5784] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.142304][ T5784] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 387.142399][ T5784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.142455][ T5784] usb 2-1: Product: syz [ 387.142498][ T5784] usb 2-1: Manufacturer: syz [ 387.142541][ T5784] usb 2-1: SerialNumber: syz [ 387.195121][ T5784] usb 2-1: config 0 descriptor?? [ 387.371836][ T8435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.820'. [ 387.403674][ T5784] usb 2-1: USB disconnect, device number 28 [ 388.407967][ T8464] tap0: tun_chr_ioctl cmd 1074025677 [ 388.408181][ T8464] tap0: linktype set to 1 [ 388.408783][ T8464] tap0: tun_chr_ioctl cmd 35108 [ 388.629960][ T8471] vlan0: entered promiscuous mode [ 388.630212][ T8471] vlan0: entered allmulticast mode [ 388.630229][ T8471] veth0_vlan: entered allmulticast mode [ 389.957197][ T8532] [ 389.957212][ T8532] ============================= [ 389.957221][ T8532] WARNING: suspicious RCU usage [ 389.957239][ T8532] syzkaller #0 Tainted: G L [ 389.957254][ T8532] ----------------------------- [ 389.957262][ T8532] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 389.957280][ T8532] [ 389.957280][ T8532] other info that might help us debug this: [ 389.957280][ T8532] [ 389.957289][ T8532] [ 389.957289][ T8532] rcu_scheduler_active = 2, debug_locks = 1 [ 389.957305][ T8532] 1 lock held by syz.0.866/8532: [ 389.957318][ T8532] #0: ffffffff8d9c7960 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x80 [ 389.957431][ T8532] [ 389.957431][ T8532] stack backtrace: [ 389.957449][ T8532] CPU: 0 UID: 0 PID: 8532 Comm: syz.0.866 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 389.957482][ T8532] Tainted: [L]=SOFTLOCKUP [ 389.957491][ T8532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 389.957506][ T8532] Call Trace: [ 389.957520][ T8532] [ 389.957530][ T8532] dump_stack_lvl+0xe8/0x150 [ 389.957565][ T8532] lockdep_rcu_suspicious+0x13f/0x1d0 [ 389.957608][ T8532] get_callchain_entry+0x2b6/0x3c0 [ 389.957640][ T8532] get_perf_callchain+0xcb/0x830 [ 389.957673][ T8532] ? __pfx_get_perf_callchain+0x10/0x10 [ 389.957704][ T8532] ? __resched_curr+0x202/0x3f0 [ 389.957733][ T8532] __bpf_get_stack+0x445/0xab0 [ 389.957765][ T8532] ? __pfx___bpf_get_stack+0x10/0x10 [ 389.957797][ T8532] ? __lock_acquire+0x6b5/0x2cf0 [ 389.957829][ T8532] bpf_get_stack+0x33/0x50 [ 389.957850][ T8532] ? bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 389.957868][ T8532] bpf_get_stack_raw_tp+0x1a9/0x220 [ 389.957899][ T8532] bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 389.957919][ T8532] bpf_prog_run_pin_on_cpu+0x142/0x470 [ 389.957948][ T8532] bpf_prog_test_run_syscall+0x318/0x4c0 [ 389.957974][ T8532] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 389.957997][ T8532] ? __fget_files+0x2a/0x420 [ 389.958022][ T8532] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 389.958046][ T8532] bpf_prog_test_run+0x2cd/0x340 [ 389.958073][ T8532] __sys_bpf+0x5cb/0x920 [ 389.958096][ T8532] ? __pfx___sys_bpf+0x10/0x10 [ 389.958115][ T8532] ? __fget_files+0x2a/0x420 [ 389.958152][ T8532] ? rcu_is_watching+0x15/0xb0 [ 389.958178][ T8532] __x64_sys_bpf+0x7c/0x90 [ 389.958197][ T8532] do_syscall_64+0xe2/0xf80 [ 389.958223][ T8532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.958242][ T8532] ? trace_irq_disable+0x37/0x100 [ 389.958263][ T8532] ? clear_bhb_loop+0x60/0xb0 [ 389.958285][ T8532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.958304][ T8532] RIP: 0033:0x7fe69d2aacb9 [ 389.958321][ T8532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.958337][ T8532] RSP: 002b:00007fe69b506028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 389.958357][ T8532] RAX: ffffffffffffffda RBX: 00007fe69d525fa0 RCX: 00007fe69d2aacb9 [ 389.958372][ T8532] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 389.958384][ T8532] RBP: 00007fe69d318bf7 R08: 0000000000000000 R09: 0000000000000000 [ 389.958396][ T8532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.958407][ T8532] R13: 00007fe69d526038 R14: 00007fe69d525fa0 R15: 00007ffdf46b77c8 [ 389.958436][ T8532]