last executing test programs: 4m31.57685807s ago: executing program 3 (id=908): connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000040)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f00000000c0)) write$ppp(r0, &(0x7f0000000200)="1503", 0x2) 4m31.344067197s ago: executing program 3 (id=912): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='p:s/_ ./file0:0', 0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='p:s/_ ./file', 0xc) 4m31.288409187s ago: executing program 3 (id=913): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x14) 4m31.213208451s ago: executing program 3 (id=914): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x141) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='p:s/_ ./file0:0', 0xf) 4m31.063163385s ago: executing program 3 (id=915): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) 4m30.174728477s ago: executing program 3 (id=918): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)="6164642073797a30203132372e302e302e312bc27a", 0x15) 4m30.025436544s ago: executing program 32 (id=918): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)="6164642073797a30203132372e302e302e312bc27a", 0x15) 5.279720829s ago: executing program 0 (id=2679): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0xfffffffe, @loopback, 0x1}}, 0x0, 0x0, 0x4c, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)}], 0x1}}], 0x1, 0x20080058) 5.230967528s ago: executing program 0 (id=2680): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000240)) 5.164664242s ago: executing program 0 (id=2681): syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="5000000000010104000800000000000002000000240001801400018008000100e000000108000200e00000010c0002130e625c373552754f800500010000000000080008400000ff160600164000000000080004"], 0x50}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000680)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000001c0)={r5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xaa3a6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) mount_setattr(0xffffffffffffffff, 0x0, 0x8800, &(0x7f0000002940)={0x2, 0x10017e}, 0x20) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$evdev(0xffffffffffffffff, &(0x7f0000001040)=[{{0x77359400}, 0x5, 0x2, 0x1ff}, {{}, 0x0, 0xff, 0x7}, {{0x77359400}, 0x1, 0x1, 0x1ff}], 0x48) write$UHID_INPUT(r6, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) socket$inet_sctp(0x2, 0x1, 0x84) 4.026649735s ago: executing program 1 (id=2699): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000240)) 4.015683193s ago: executing program 1 (id=2700): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000300), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000100)={0x2, 0x2, 0x8001}) 3.782908012s ago: executing program 4 (id=2702): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'lo\x00', &(0x7f0000000240)=@ethtool_drvinfo={0x3, "adb0f85adbc15dc9cef326e60f3b5d3ff923971ef9042936ff6782a8ede0aa2b", "644352a0d57d8b7d9c4f0e015c35361366e9f21448a22735825296017f852c43", "7f9f2e129b2152607c5d481e13234ba359354ac8cfd7b6b1074d6088de9581bd", "028f97ef7495eb876f982d7431596498c53367756789ad4dcff7f1f073e49e96", "1129fcfdab9205c9566dccac92e5419a840c1d765413c489ed3eadc5562aea48", "e7a9169984cc0e9e4271bfa2", 0x7, 0x7f, 0x3, 0x80, 0x200}}) r2 = syz_ublk_setup_io_uring(0x6421, &(0x7f0000000180)={0x0, 0x1af2, 0x80000, 0x2, 0x61}, &(0x7f0000000300), &(0x7f0000000440), &(0x7f0000000480)) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x4002, 0x1e5, 0x0, r2}, &(0x7f0000000000)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x1080) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_WAITID={0x32, 0x4c, 0x0, 0xffffffff, &(0x7f0000000240)={0x1f, 0xffffff5c, 0x5da9}, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3}}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x64, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020026bd7000fddbdf253d00000008005d000000000008005d0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x80c4) socket$packet(0x11, 0x2, 0x300) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DESC={0x28, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1fffe0}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}}, 0x20050800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'vlan0\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r9, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0) 2.931006712s ago: executing program 2 (id=2705): setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0xfe, 0x4) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) 2.847187228s ago: executing program 4 (id=2706): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040840) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000080)={0x4, 0x5, 0xe, 0x800052d, 0x80000001, 0xfffffff6, "6bf59546e4b36fb5f6f45ceb55b2fcc4", 0xfe, 0xf1, 0x1, 0xfd, 0x2, 0x7f, 0x80}) r1 = syz_clone(0x840000, &(0x7f0000000280)="f8cb9f77cad11f44ee0ac0a4ee96c63e5a0b8ae581a288da7f2d3201cccc7abce2413e5dc38da2fbc7f20e3e65623f10175de866743f68051b72a03dc2db71747be47c88c8677a9a3cbfe321425616d02f06322c9cefb95561bf180914be3e06a985df316f7bc2037297963ab24086ec23dd5e6add6d80dae93c8a77408670c17b9d381f70787f6a2afc61a90a348ed80b1916252ebb790c153291beae9b5308c186788e7ea75a272becec3b77b647061c449f16ba2e42c1b837571f93a78c2932086c20c360222a3aeddf65dcd8e15c2e7a36b12f8b703f0fc4325c", 0xdc, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="79a125ef943f705094946c2a2312efa675fc48fe7ad5cbf439feb19f3d7dfcad3f7fc3c22b069d7beb60f8f6cc6cf0a9a5ad10211fc2e4a0b5d97a042a9d1980727cdb24585dfca4855808e0d9db0d") fcntl$lock(r0, 0x5, &(0x7f0000000480)={0x2, 0x2, 0x3ff, 0x6, r1}) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0xa0001) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x98, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x400c054) 2.777295717s ago: executing program 4 (id=2707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="2400000058004100f4f90085b3a85c91fddf020000000000000008000280010000000000f6be", 0x26) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r1, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000001700)=""/139, 0x8b}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000440)=""/40, 0x28}, {&(0x7f0000001640)=""/167, 0xa7}, {&(0x7f00000005c0)=""/4082, 0xff2}], 0x6}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}], 0x7, 0x100, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0), 0x0}) unshare(0x60040000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="640000001000010600000000000000000000000000000000000000000000000010000300766574683000000000000000240012000800010076657468482d0200140001000000000000000000000000000000fb001000fcff756574680200000000000000", 0x64}], 0x1}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000ba80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f000000ba40)={&(0x7f0000004840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x5c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_USERDATA={0x47, 0xc, "cc6b8baabb2405d9b6ff4182244d9baf869882b829594bdda7fe0839f62a0ccfb036f28b91237aa0cbacc8361d216cf30dfc95f38919335dd21ae0872bd5313d0cf937"}]}, @NFT_MSG_DELTABLE={0x88, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x40, 0x6, "1407c57866bda934cbe2e91e140732d85c1b34adc508b55741e20f781095b0c90a2995388c9d551b2ff0ba7e2295ffa9af5b0b29987aea73024ba051"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}]}, @NFT_MSG_DELSET={0x180, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_FLAGS={0x8}, @NFTA_SET_DESC={0xf4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xd8, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x82d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff01}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2150000}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFTA_SET_EXPRESSIONS={0x68, 0x12, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x380}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000880) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00 \x00', @ANYRES16=r5, @ANYBLOB="000328bd7000fbdbdf256700000008000100620000000800c300080000000800c4000c0000000800c300040000000800c400390800000800c4007f0000000800c400010000000800c400ff000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000810}, 0x24040880) 2.133597852s ago: executing program 4 (id=2708): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000240)) 2.044718461s ago: executing program 0 (id=2709): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) shutdown(r0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x0, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x6, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0xffff, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r4, 0x0, r6, 0x0, 0x8, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x48, 0x0, &(0x7f0000000380)=[@register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x840) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="0404"], 0xd) ioctl$KVM_RUN(r10, 0xae80, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x4c, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) 1.903000804s ago: executing program 4 (id=2710): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r2, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0xd, {0x0, 0x8, 0xfffffffffffffffd, 0x200, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x40900, 0x4) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) 1.605078129s ago: executing program 4 (id=2711): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="40f2ff01000000c8c126cd778308f32557e6549900"], 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 1.202896129s ago: executing program 2 (id=2712): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0xfffe, 0x41aa, 0x6, 0x0, 0x8, 0x90, 0x8}, 0xc) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) write(r0, &(0x7f0000000340)="a88c", 0x2) (fail_nth: 1) 876.189553ms ago: executing program 1 (id=2713): syz_emit_vhci(0x0, 0x7) 835.688126ms ago: executing program 2 (id=2714): chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='-:s/_ ./file0:0', 0xf) 662.869378ms ago: executing program 2 (id=2715): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc}) 575.791562ms ago: executing program 2 (id=2716): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc}) (fail_nth: 2) 549.556144ms ago: executing program 1 (id=2717): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r3}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc}) 482.771396ms ago: executing program 0 (id=2718): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000240)) 482.092939ms ago: executing program 1 (id=2719): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r2, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0xd, {0x0, 0x8, 0xfffffffffffffffd, 0x200, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x40900, 0x4) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) 163.006246ms ago: executing program 2 (id=2720): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="8025000041000701fefffffffeffffff017c0000040042800c00018006000600800a00005a250280bc131480b6130d"], 0x2580}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1, 0x0, 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0xffff, 0x40000043, 0x34565348, 0x4, 0xffffffff, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, r3}) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000100)=0x3) 7.035498ms ago: executing program 0 (id=2721): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000300), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000100)={0x2, 0x2, 0x8001}) 0s ago: executing program 1 (id=2722): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='p:s/_ ./file0:0', 0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='p:s/_ ./file0:0', 0xf) (fail_nth: 8) kernel console output (not intermixed with test programs): scall_64+0x17b/0x530 [ 398.564380][T12405] ? irqentry_exit+0x10f/0x8f0 [ 398.564397][T12405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.564416][T12405] ? clear_bhb_loop+0x40/0x90 [ 398.564439][T12405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.564457][T12405] RIP: 0033:0x7fee76cbe90e [ 398.564474][T12405] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 398.564490][T12405] RSP: 002b:00007fee74f55fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 398.564509][T12405] RAX: ffffffffffffffda RBX: 00007fee74f566c0 RCX: 00007fee76cbe90e [ 398.564523][T12405] RDX: 000000000000000f RSI: 00007fee74f560a0 RDI: 0000000000000004 [ 398.564535][T12405] RBP: 00007fee74f56090 R08: 0000000000000000 R09: 0000000000000000 [ 398.564547][T12405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.564558][T12405] R13: 00007fee76f86038 R14: 00007fee76f85fa0 R15: 00007fff0af2d718 [ 398.564589][T12405] [ 399.110076][T12409] ***************************************************** [ 399.110092][T12409] ORANGEFS Device Error: You cannot open the device file [ 399.110099][T12409] [ 399.110099][T12409] /dev/pvfs2-req more than once. Please make sure that [ 399.110099][T12409] there are no [ 399.110108][T12409] instances of a program using this device [ 399.110108][T12409] currently running. (You must verify this!) [ 399.110118][T12409] For example, you can use the lsof program as follows: [ 399.110125][T12409] 'lsof | grep pvfs2-req' (run this as root) [ 399.110132][T12409] open_access_count = 1 [ 399.110141][T12409] ***************************************************** [ 399.662638][T12428] protocol 0000 is buggy, dev veth0_vlan [ 399.816804][ T5706] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 399.969447][ T5706] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 399.969504][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.969524][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.969535][ T5706] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 399.969557][ T5706] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 399.969568][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.975123][ T5706] usb 3-1: config 0 descriptor?? [ 400.189465][T12432] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2299'. [ 400.394233][ T5706] usbhid 3-1:0.0: can't add hid device: -71 [ 400.394342][ T5706] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 400.426083][ T5706] usb 3-1: USB disconnect, device number 55 [ 401.067605][T12464] FAULT_INJECTION: forcing a failure. [ 401.067605][T12464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.067638][T12464] CPU: 0 UID: 0 PID: 12464 Comm: syz.1.2313 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 401.067660][T12464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 401.067671][T12464] Call Trace: [ 401.067678][T12464] [ 401.067686][T12464] dump_stack_lvl+0xe8/0x150 [ 401.067716][T12464] should_fail_ex+0x467/0x600 [ 401.067747][T12464] _copy_from_user+0x2d/0xb0 [ 401.067765][T12464] trace_parse_run_command+0xb8/0x380 [ 401.067793][T12464] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 401.067814][T12464] ? __pfx_probes_write+0x10/0x10 [ 401.067831][T12464] vfs_write+0x29f/0xbb0 [ 401.067859][T12464] ? __pfx_vfs_write+0x10/0x10 [ 401.067881][T12464] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 401.067901][T12464] ? lockdep_hardirqs_on+0x7a/0x110 [ 401.067919][T12464] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 401.067938][T12464] ? mutex_lock_nested+0x152/0x1d0 [ 401.067960][T12464] ? fdget_pos+0x252/0x320 [ 401.067988][T12464] ksys_write+0x156/0x270 [ 401.068012][T12464] ? __pfx_ksys_write+0x10/0x10 [ 401.068043][T12464] do_syscall_64+0x17b/0x530 [ 401.068062][T12464] ? irqentry_exit+0x10f/0x8f0 [ 401.068080][T12464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.068099][T12464] ? clear_bhb_loop+0x40/0x90 [ 401.068122][T12464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.068141][T12464] RIP: 0033:0x7fd78ddbe0d9 [ 401.068159][T12464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.068175][T12464] RSP: 002b:00007fd78c016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 401.068195][T12464] RAX: ffffffffffffffda RBX: 00007fd78e045fa0 RCX: 00007fd78ddbe0d9 [ 401.068209][T12464] RDX: 000000000000000f RSI: 0000200000000500 RDI: 0000000000000004 [ 401.068222][T12464] RBP: 00007fd78c016090 R08: 0000000000000000 R09: 0000000000000000 [ 401.068234][T12464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.068245][T12464] R13: 00007fd78e046038 R14: 00007fd78e045fa0 R15: 00007ffc4b1957b8 [ 401.068276][T12464] [ 401.289875][ T5706] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 401.342592][T12468] UDC core: g1: couldn't find an available UDC or it's busy [ 401.418260][ T5706] usb 5-1: device descriptor read/64, error -71 [ 401.434039][T12473] jffs2: notice: (12473) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 401.658486][ T5706] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 401.772884][T12487] FAULT_INJECTION: forcing a failure. [ 401.772884][T12487] name failslab, interval 1, probability 0, space 0, times 0 [ 401.772906][T12487] CPU: 1 UID: 0 PID: 12487 Comm: syz.1.2323 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 401.772918][T12487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 401.772924][T12487] Call Trace: [ 401.772928][T12487] [ 401.772933][T12487] dump_stack_lvl+0xe8/0x150 [ 401.772949][T12487] should_fail_ex+0x467/0x600 [ 401.772966][T12487] should_failslab+0xa8/0x100 [ 401.772977][T12487] __kmalloc_cache_noprof+0xa1/0x670 [ 401.772992][T12487] ? __request_region+0x5f/0x1a0 [ 401.773005][T12487] ? __request_region+0x5f/0x1a0 [ 401.773028][T12487] __request_region+0x5f/0x1a0 [ 401.773044][T12487] __comedi_check_request_region+0xd0/0x260 [ 401.773062][T12487] comedi_check_request_region+0x3c/0xc0 [ 401.773079][T12487] a2150_attach+0x74/0x9f0 [ 401.773094][T12487] comedi_device_attach+0x535/0x730 [ 401.773111][T12487] comedi_unlocked_ioctl+0x8f4/0x1af0 [ 401.773133][T12487] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 401.773144][T12487] ? kasan_quarantine_put+0xbb/0x1f0 [ 401.773166][T12487] ? do_vfs_ioctl+0x1184/0x1550 [ 401.773182][T12487] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 401.773202][T12487] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 401.773213][T12487] ? lockdep_hardirqs_on+0x7a/0x110 [ 401.773231][T12487] ? __fget_files+0x2a/0x420 [ 401.773244][T12487] ? __fget_files+0x3a8/0x420 [ 401.773253][T12487] ? __fget_files+0x2a/0x420 [ 401.773265][T12487] ? bpf_lsm_file_ioctl+0x9/0x20 [ 401.773281][T12487] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 401.773293][T12487] __se_sys_ioctl+0xff/0x170 [ 401.773307][T12487] do_syscall_64+0x17b/0x530 [ 401.773317][T12487] ? irqentry_exit+0x10f/0x8f0 [ 401.773326][T12487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.773337][T12487] ? clear_bhb_loop+0x40/0x90 [ 401.773349][T12487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.773359][T12487] RIP: 0033:0x7fd78ddbe0d9 [ 401.773369][T12487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.773378][T12487] RSP: 002b:00007fd78c016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.773389][T12487] RAX: ffffffffffffffda RBX: 00007fd78e045fa0 RCX: 00007fd78ddbe0d9 [ 401.773397][T12487] RDX: 0000200000000980 RSI: 0000000040946400 RDI: 0000000000000003 [ 401.773403][T12487] RBP: 00007fd78c016090 R08: 0000000000000000 R09: 0000000000000000 [ 401.773409][T12487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.773415][T12487] R13: 00007fd78e046038 R14: 00007fd78e045fa0 R15: 00007ffc4b1957b8 [ 401.773431][T12487] [ 401.773438][T12487] comedi comedi1: ni_at_a2150: I/O port conflict (0x300,28) [ 401.788773][ T5706] usb 5-1: device descriptor read/64, error -71 [ 401.848621][ T5693] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 401.898865][ T5706] usb usb5-port1: attempt power cycle [ 402.020603][ T5693] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 402.020664][ T5693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.020689][ T5693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.020708][ T5693] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 402.020746][ T5693] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 402.020768][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.028057][ T5693] usb 3-1: config 0 descriptor?? [ 402.248992][ T5706] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 402.269773][ T5706] usb 5-1: device descriptor read/8, error -71 [ 402.447679][ T5693] usbhid 3-1:0.0: can't add hid device: -71 [ 402.447793][ T5693] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 402.471677][ T5693] usb 3-1: USB disconnect, device number 56 [ 402.509127][ T5706] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 402.529613][ T5706] usb 5-1: device descriptor read/8, error -71 [ 402.639802][ T5706] usb usb5-port1: unable to enumerate USB device [ 403.497084][T12515] program syz.1.2336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 403.815390][T12525] netlink: 'syz.1.2340': attribute type 12 has an invalid length. [ 404.197867][T12538] netlink: zone id is out of range [ 404.197881][T12538] netlink: zone id is out of range [ 404.197890][T12538] netlink: set zone limit has 8 unknown bytes [ 404.286173][T12540] FAULT_INJECTION: forcing a failure. [ 404.286173][T12540] name failslab, interval 1, probability 0, space 0, times 0 [ 404.286206][T12540] CPU: 0 UID: 0 PID: 12540 Comm: syz.2.2346 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 404.286227][T12540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.286239][T12540] Call Trace: [ 404.286245][T12540] [ 404.286263][T12540] dump_stack_lvl+0xe8/0x150 [ 404.286292][T12540] should_fail_ex+0x467/0x600 [ 404.286323][T12540] should_failslab+0xa8/0x100 [ 404.286342][T12540] ? __inet_hash_connect+0x1628/0x25c0 [ 404.286362][T12540] kmem_cache_alloc_noprof+0x9e/0x680 [ 404.286390][T12540] ? __inet_hash_connect+0x1628/0x25c0 [ 404.286418][T12540] __inet_hash_connect+0x1628/0x25c0 [ 404.286450][T12540] ? __inet_hash_connect+0x5fe/0x25c0 [ 404.286484][T12540] ? __pfx___inet_hash_connect+0x10/0x10 [ 404.286505][T12540] ? sk_setup_caps+0x94f/0xbc0 [ 404.286532][T12540] ? inet6_ehashfn+0x2f/0x3b0 [ 404.286556][T12540] ? inet6_hash_connect+0xeb/0x170 [ 404.286581][T12540] tcp_v6_connect+0x1231/0x1cf0 [ 404.286603][T12540] ? tcp_sendmsg_locked+0x4ce2/0x55c0 [ 404.286628][T12540] ? tcp_sendmsg+0x2f/0x50 [ 404.286670][T12540] ? __pfx_tcp_v6_connect+0x10/0x10 [ 404.286706][T12540] __inet_stream_connect+0x258/0xe00 [ 404.286745][T12540] ? __pfx___inet_stream_connect+0x10/0x10 [ 404.286770][T12540] ? __kasan_kmalloc+0x93/0xb0 [ 404.286799][T12540] ? __kmalloc_cache_noprof+0x3cd/0x670 [ 404.286826][T12540] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 404.286861][T12540] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 404.286897][T12540] tcp_sendmsg_locked+0x4ce2/0x55c0 [ 404.286928][T12540] ? tcp_sendmsg_locked+0x641/0x55c0 [ 404.286976][T12540] ? __lock_acquire+0x6df/0x2e40 [ 404.287005][T12540] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 404.287025][T12540] ? lockdep_hardirqs_on+0x7a/0x110 [ 404.287042][T12540] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 404.287060][T12540] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 404.287094][T12540] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 404.287133][T12540] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 404.287153][T12540] ? lockdep_hardirqs_on+0x7a/0x110 [ 404.287177][T12540] tcp_sendmsg+0x2f/0x50 [ 404.287204][T12540] ? __pfx_inet6_sendmsg+0x10/0x10 [ 404.287226][T12540] sock_sendmsg_nosec+0x90/0x180 [ 404.287251][T12540] ____sys_sendmsg+0x565/0x870 [ 404.287299][T12540] ? __pfx_____sys_sendmsg+0x10/0x10 [ 404.287338][T12540] ? import_iovec+0x73/0xa0 [ 404.287373][T12540] ___sys_sendmsg+0x2a5/0x360 [ 404.287397][T12540] ? __lock_acquire+0x6df/0x2e40 [ 404.287419][T12540] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.287483][T12540] ? __fget_files+0x2a/0x420 [ 404.287502][T12540] ? __fget_files+0x3a8/0x420 [ 404.287533][T12540] __sys_sendmmsg+0x279/0x4d0 [ 404.287568][T12540] ? __pfx___sys_sendmmsg+0x10/0x10 [ 404.287607][T12540] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 404.287641][T12540] ? fput+0xa0/0xd0 [ 404.287671][T12540] ? ksys_write+0x248/0x270 [ 404.287697][T12540] ? __pfx_ksys_write+0x10/0x10 [ 404.287725][T12540] __x64_sys_sendmmsg+0xa0/0xc0 [ 404.287754][T12540] do_syscall_64+0x17b/0x530 [ 404.287771][T12540] ? irqentry_exit+0x10f/0x8f0 [ 404.287789][T12540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.287807][T12540] ? clear_bhb_loop+0x40/0x90 [ 404.287831][T12540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.287849][T12540] RIP: 0033:0x7fee76cfe0d9 [ 404.287867][T12540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.287883][T12540] RSP: 002b:00007fee74f56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 404.287903][T12540] RAX: ffffffffffffffda RBX: 00007fee76f85fa0 RCX: 00007fee76cfe0d9 [ 404.287917][T12540] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 404.287929][T12540] RBP: 00007fee74f56090 R08: 0000000000000000 R09: 0000000000000000 [ 404.287940][T12540] R10: 0000000020080058 R11: 0000000000000246 R12: 0000000000000001 [ 404.287951][T12540] R13: 00007fee76f86038 R14: 00007fee76f85fa0 R15: 00007fff0af2d718 [ 404.287984][T12540] [ 404.328233][T12543] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2347'. [ 404.743462][T12543] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2347'. [ 405.041753][ T5706] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 405.196109][ T5706] usb 3-1: Using ep0 maxpacket: 32 [ 405.205818][ T5706] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 405.205846][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.205864][ T5706] usb 3-1: Product: syz [ 405.205877][ T5706] usb 3-1: Manufacturer: syz [ 405.205890][ T5706] usb 3-1: SerialNumber: syz [ 405.216639][ T5706] usb 3-1: config 0 descriptor?? [ 405.642260][ T5706] airspy 3-1:0.0: Board ID: 00 [ 405.642282][ T5706] airspy 3-1:0.0: Firmware version: [ 406.453416][T12607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2362'. [ 406.455431][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2362'. [ 406.643709][ T5706] airspy 3-1:0.0: usb_control_msg() failed -71 request 12 [ 406.826816][ T5706] airspy 3-1:0.0: Registered as swradio24 [ 406.826837][ T5706] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 406.838528][ T5693] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 406.846211][ T5706] usb 3-1: USB disconnect, device number 57 [ 406.982035][ T5693] usb 2-1: Invalid ep0 maxpacket: 16 [ 407.116991][ T5693] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 407.262261][ T5693] usb 2-1: Invalid ep0 maxpacket: 16 [ 407.262649][ T5693] usb usb2-port1: attempt power cycle [ 407.604784][ T5693] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 407.628702][ T5693] usb 2-1: Invalid ep0 maxpacket: 16 [ 407.756179][ T5693] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 407.770415][T12660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 407.781401][ T5693] usb 2-1: Invalid ep0 maxpacket: 16 [ 407.787460][ T5693] usb usb2-port1: unable to enumerate USB device [ 407.881054][ T60] Bluetooth: hci1: unexpected event for opcode 0x203c [ 408.509120][T12688] FAULT_INJECTION: forcing a failure. [ 408.509120][T12688] name failslab, interval 1, probability 0, space 0, times 0 [ 408.509148][T12688] CPU: 1 UID: 0 PID: 12688 Comm: syz.2.2377 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 408.509167][T12688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.509176][T12688] Call Trace: [ 408.509181][T12688] [ 408.509187][T12688] dump_stack_lvl+0xe8/0x150 [ 408.509208][T12688] should_fail_ex+0x467/0x600 [ 408.509230][T12688] should_failslab+0xa8/0x100 [ 408.509246][T12688] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 408.509268][T12688] ? __trace_uprobe_create+0x2c1/0xe40 [ 408.509288][T12688] ? __trace_uprobe_create+0x2c1/0xe40 [ 408.509314][T12688] kstrdup+0x42/0x100 [ 408.509330][T12688] __trace_uprobe_create+0x2c1/0xe40 [ 408.509359][T12688] ? __pfx___trace_uprobe_create+0x10/0x10 [ 408.509381][T12688] ? __kmalloc_noprof+0x436/0x790 [ 408.509402][T12688] ? argv_split+0x18d/0x400 [ 408.509415][T12688] ? argv_split+0x18d/0x400 [ 408.509433][T12688] ? argv_split+0x378/0x400 [ 408.509451][T12688] trace_probe_create+0xce/0x130 [ 408.509472][T12688] ? __pfx___trace_uprobe_create+0x10/0x10 [ 408.509494][T12688] ? __pfx_trace_probe_create+0x10/0x10 [ 408.509513][T12688] ? lockdep_hardirqs_on+0x7a/0x110 [ 408.509528][T12688] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 408.509544][T12688] ? mutex_lock_nested+0x152/0x1d0 [ 408.509563][T12688] ? dyn_event_create+0x20/0x70 [ 408.509584][T12688] dyn_event_create+0x4f/0x70 [ 408.509600][T12688] create_or_delete_trace_uprobe+0x65/0xa0 [ 408.509615][T12688] trace_parse_run_command+0x1f3/0x380 [ 408.509642][T12688] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 408.509661][T12688] ? __pfx_probes_write+0x10/0x10 [ 408.509676][T12688] vfs_write+0x29f/0xbb0 [ 408.509704][T12688] ? __pfx_vfs_write+0x10/0x10 [ 408.509726][T12688] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 408.509743][T12688] ? lockdep_hardirqs_on+0x7a/0x110 [ 408.509758][T12688] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 408.509771][T12688] ? mutex_lock_nested+0x152/0x1d0 [ 408.509789][T12688] ? fdget_pos+0x252/0x320 [ 408.509812][T12688] ksys_write+0x156/0x270 [ 408.509831][T12688] ? __pfx_ksys_write+0x10/0x10 [ 408.509857][T12688] do_syscall_64+0x17b/0x530 [ 408.509872][T12688] ? irqentry_exit+0x10f/0x8f0 [ 408.509885][T12688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.509901][T12688] ? clear_bhb_loop+0x40/0x90 [ 408.509921][T12688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.509936][T12688] RIP: 0033:0x7fee76cfe0d9 [ 408.509950][T12688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.509963][T12688] RSP: 002b:00007fee74f56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 408.509980][T12688] RAX: ffffffffffffffda RBX: 00007fee76f85fa0 RCX: 00007fee76cfe0d9 [ 408.509991][T12688] RDX: 000000000000000f RSI: 0000200000000500 RDI: 0000000000000005 [ 408.510001][T12688] RBP: 00007fee74f56090 R08: 0000000000000000 R09: 0000000000000000 [ 408.510011][T12688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.510022][T12688] R13: 00007fee76f86038 R14: 00007fee76f85fa0 R15: 00007fff0af2d718 [ 408.510048][T12688] [ 409.263229][ T9] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 409.429552][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 409.430097][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 409.431158][ T9] usb 5-1: config 1 has an invalid interface number: 209 but max is 0 [ 409.431181][ T9] usb 5-1: config 1 has no interface number 0 [ 409.431210][ T9] usb 5-1: config 1 interface 209 has no altsetting 0 [ 409.436850][ T9] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=e4.45 [ 409.436876][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.436896][ T9] usb 5-1: Product: syz [ 409.436909][ T9] usb 5-1: Manufacturer: syz [ 409.436922][ T9] usb 5-1: SerialNumber: syz [ 409.536951][T12705] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 409.774494][ T9] qmi_wwan 5-1:1.209: probe with driver qmi_wwan failed with error -22 [ 409.813599][ T9] usb 5-1: USB disconnect, device number 77 [ 410.355963][T12720] capability: warning: `syz.1.2387' uses deprecated v2 capabilities in a way that may be insecure [ 410.593902][ T5706] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 410.751010][ T5706] usb 2-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 410.762820][ T5706] usb 2-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 410.762848][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.762866][ T5706] usb 2-1: Product: syz [ 410.762879][ T5706] usb 2-1: Manufacturer: syz [ 410.762893][ T5706] usb 2-1: SerialNumber: syz [ 411.012346][T12725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.012821][T12725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.097060][ T5706] scsi host1: uas [ 411.206326][ T10] usb 2-1: USB disconnect, device number 43 [ 411.212698][ T56] scsi 1:0:0:0: tag#8 sense submit err -2 uas-tag 1 inflight: s-st a-in a-cmd s-cmd [ 411.212803][ T56] scsi 1:0:0:0: tag#8 CDB: Inquiry 12 00 00 00 24 00 [ 411.413110][T12733] FAULT_INJECTION: forcing a failure. [ 411.413110][T12733] name failslab, interval 1, probability 0, space 0, times 0 [ 411.413131][T12733] CPU: 1 UID: 0 PID: 12733 Comm: syz.2.2390 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 411.413143][T12733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 411.413149][T12733] Call Trace: [ 411.413153][T12733] [ 411.413158][T12733] dump_stack_lvl+0xe8/0x150 [ 411.413174][T12733] should_fail_ex+0x467/0x600 [ 411.413193][T12733] should_failslab+0xa8/0x100 [ 411.413204][T12733] ? do_getname+0x2e/0x250 [ 411.413222][T12733] kmem_cache_alloc_noprof+0x9e/0x680 [ 411.413237][T12733] ? do_getname+0x2e/0x250 [ 411.413254][T12733] do_getname+0x2e/0x250 [ 411.413267][T12733] ? user_path_at+0x1e/0x160 [ 411.413284][T12733] user_path_at+0x2a/0x160 [ 411.413305][T12733] __se_sys_mount+0x2dc/0x420 [ 411.413329][T12733] ? __pfx___se_sys_mount+0x10/0x10 [ 411.413352][T12733] ? __x64_sys_mount+0x20/0xc0 [ 411.413372][T12733] do_syscall_64+0x17b/0x530 [ 411.413390][T12733] ? irqentry_exit+0x10f/0x8f0 [ 411.413407][T12733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.413426][T12733] ? clear_bhb_loop+0x40/0x90 [ 411.413450][T12733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.413464][T12733] RIP: 0033:0x7fee76cfe0d9 [ 411.413475][T12733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.413483][T12733] RSP: 002b:00007fee74f56028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 411.413495][T12733] RAX: ffffffffffffffda RBX: 00007fee76f85fa0 RCX: 00007fee76cfe0d9 [ 411.413502][T12733] RDX: 0000200000000b80 RSI: 0000200000000240 RDI: 0000000000000000 [ 411.413508][T12733] RBP: 00007fee74f56090 R08: 0000200000000040 R09: 0000000000000000 [ 411.413515][T12733] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 411.413521][T12733] R13: 00007fee76f86038 R14: 00007fee76f85fa0 R15: 00007fff0af2d718 [ 411.413536][T12733] [ 412.030026][ T60] Bluetooth: hci2: unexpected event for opcode 0x203c [ 412.098828][T12752] netlink: 'syz.2.2398': attribute type 2 has an invalid length. [ 412.098848][T12752] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2398'. [ 412.153910][ T60] Bluetooth: hci3: unexpected event 0x0b length: 3 < 11 [ 412.380782][T12757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.435034][ T10] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 412.493878][T12759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2401'. [ 412.563422][T12761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.590398][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 412.593406][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.593470][ T10] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 412.593493][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.622215][ T10] gspca_main: spca501-2.14.0 probing 0000:0000 [ 412.854388][ T10] gspca_spca501: reg write: error -71 [ 412.854406][ T10] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 412.854493][ T10] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 412.855974][ T10] uvcvideo 5-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 412.856062][ T10] uvcvideo 5-1:1.0: Found UVC 1.00 device (0000:0000) [ 412.860497][ T10] uvcvideo 5-1:1.0: No streaming interface found for terminal 32774. [ 412.863092][T12765] overlayfs: invalid origin (0000) [ 412.888132][ T10] usb 5-1: USB disconnect, device number 78 [ 413.855656][ T5706] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 413.995366][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 414.017481][ T5706] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 414.017497][ T5706] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 414.019613][ T5706] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 414.019639][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.019657][ T5706] usb 5-1: Product: syz [ 414.019669][ T5706] usb 5-1: Manufacturer: syz [ 414.019676][ T5706] usb 5-1: SerialNumber: syz [ 414.160275][ T10] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 414.160343][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.160363][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 414.160404][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 414.160424][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.167349][ T10] usb 3-1: config 0 descriptor?? [ 414.226190][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 414.233624][ T5706] usb 5-1: Limiting number of CPorts to U8_MAX [ 414.385446][ T5693] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 414.434088][T12780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.434711][T12780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.448477][T12780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.449100][T12780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.449667][ C1] usb 5-1: check_urb_status: overflow actual length is 128 [ 414.449691][ C1] usb 5-1: arpc in-urb error -75 (dropped) [ 414.557970][ T5693] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 414.557987][ T5693] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 414.558038][ T5693] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 414.558067][ T5693] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 414.558079][ T5693] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 414.559723][ T5693] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 414.559749][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 414.559768][ T5693] usb 2-1: Product: syz [ 414.559849][ T5693] usb 2-1: Manufacturer: syz [ 414.660818][ T5706] usb 5-1: failed to set cport flags for port 0 [ 414.683068][ T5706] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 414.722143][ T5693] cdc_wdm 2-1:1.0: skipping garbage [ 414.722156][ T5693] cdc_wdm 2-1:1.0: skipping garbage [ 414.723681][ T5693] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 414.723698][ T5693] cdc_wdm 2-1:1.0: Unknown control protocol [ 414.794538][ T5706] es2_ap_driver 5-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 414.818038][ T5706] usb 5-1: USB disconnect, device number 79 [ 414.951316][ T200] usb 2-1: USB disconnect, device number 44 [ 415.114933][T12793] netlink: zone id is out of range [ 415.114949][T12793] netlink: zone id is out of range [ 415.115023][T12793] netlink: zone id is out of range [ 415.115199][T12793] netlink: zone id is out of range [ 415.115429][T12793] netlink: zone id is out of range [ 415.115433][T12793] netlink: zone id is out of range [ 415.115437][T12793] netlink: zone id is out of range [ 415.115462][T12793] netlink: zone id is out of range [ 415.115466][T12793] netlink: zone id is out of range [ 415.115470][T12793] netlink: zone id is out of range [ 415.363216][ T60] Bluetooth: hci2: unexpected event for opcode 0x203c [ 415.715914][ T5751] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 415.866929][ T5751] usb 5-1: not running at top speed; connect to a high speed hub [ 415.868055][ T5751] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.868118][ T5751] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 415.868138][ T5751] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.890507][ T5751] gspca_main: spca501-2.14.0 probing 0000:0000 [ 416.024565][T12805] FAULT_INJECTION: forcing a failure. [ 416.024565][T12805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.024624][T12805] CPU: 0 UID: 0 PID: 12805 Comm: syz.1.2417 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 416.024637][T12805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 416.024644][T12805] Call Trace: [ 416.024648][T12805] [ 416.024653][T12805] dump_stack_lvl+0xe8/0x150 [ 416.024669][T12805] should_fail_ex+0x467/0x600 [ 416.024686][T12805] _copy_to_user+0x31/0xb0 [ 416.024697][T12805] simple_read_from_buffer+0xe1/0x170 [ 416.024710][T12805] proc_fail_nth_read+0x1be/0x230 [ 416.024723][T12805] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 416.024738][T12805] ? rw_verify_area+0x250/0x4d0 [ 416.024751][T12805] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 416.024761][T12805] vfs_read+0x219/0xa90 [ 416.024776][T12805] ? __pfx_vfs_read+0x10/0x10 [ 416.024789][T12805] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 416.024799][T12805] ? lockdep_hardirqs_on+0x7a/0x110 [ 416.024809][T12805] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 416.024819][T12805] ? mutex_lock_nested+0x152/0x1d0 [ 416.024831][T12805] ? fdget_pos+0x252/0x320 [ 416.024845][T12805] ksys_read+0x156/0x270 [ 416.024858][T12805] ? __pfx_ksys_read+0x10/0x10 [ 416.024874][T12805] do_syscall_64+0x17b/0x530 [ 416.024887][T12805] ? irqentry_exit+0x10f/0x8f0 [ 416.024896][T12805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.024906][T12805] ? clear_bhb_loop+0x40/0x90 [ 416.024919][T12805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.024928][T12805] RIP: 0033:0x7fd78dd7e90e [ 416.024938][T12805] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 416.024947][T12805] RSP: 002b:00007fd78c015fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 416.024958][T12805] RAX: ffffffffffffffda RBX: 00007fd78c0166c0 RCX: 00007fd78dd7e90e [ 416.024965][T12805] RDX: 000000000000000f RSI: 00007fd78c0160a0 RDI: 0000000000000006 [ 416.024971][T12805] RBP: 00007fd78c016090 R08: 0000000000000000 R09: 0000000000000000 [ 416.024978][T12805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.024983][T12805] R13: 00007fd78e046038 R14: 00007fd78e045fa0 R15: 00007ffc4b1957b8 [ 416.024999][T12805] [ 416.126582][ T5751] gspca_spca501: reg write: error -71 [ 416.126598][ T5751] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 416.126683][ T5751] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 416.131582][ T5751] uvcvideo 5-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 416.131670][ T5751] uvcvideo 5-1:1.0: Found UVC 1.00 device (0000:0000) [ 416.131727][ T5751] uvcvideo 5-1:1.0: No streaming interface found for terminal 32774. [ 416.145603][ T5751] usb 5-1: USB disconnect, device number 80 [ 416.689097][T12809] binder: 12808:12809 ioctl c018620c 200000000240 returned -1 [ 416.782524][ T5751] usb 3-1: USB disconnect, device number 58 [ 417.421591][ T5751] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 417.567372][ T5751] usb 5-1: Using ep0 maxpacket: 16 [ 417.569537][ T5751] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 417.569564][ T5751] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 42985, setting to 1024 [ 417.569588][ T5751] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 417.627514][ T5751] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 417.627542][ T5751] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.627636][ T5751] usb 5-1: Product: syz [ 417.627649][ T5751] usb 5-1: Manufacturer: syz [ 417.627662][ T5751] usb 5-1: SerialNumber: syz [ 417.643586][ T5751] usb 5-1: config 0 descriptor?? [ 417.644654][T12820] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 417.644823][T12820] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 417.871755][T12830] binder: 12829:12830 ioctl c018620c 200000000240 returned -1 [ 418.156756][ T5706] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 418.206590][ T5751] rc_core: IR keymap rc-hauppauge not found [ 418.206603][ T5751] Registered IR keymap rc-empty [ 418.210072][ T5751] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 418.238109][ T5751] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 418.262139][ T5751] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 418.275946][ T5751] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input15 [ 418.284265][ T5751] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 418.296916][ T5751] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 418.323730][ T5751] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 418.332527][ T5706] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 418.332577][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.332600][ T5706] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 418.332639][ T5706] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 418.332659][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.336984][ T5751] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 418.357113][ T5751] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 418.377129][ T5751] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 418.397080][ T5751] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 418.417072][ T5751] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 418.428876][ T5706] usb 3-1: config 0 descriptor?? [ 418.437021][ T5751] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 418.457144][ T5751] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 418.466887][ T5706] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 418.485928][ T5751] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 418.485949][ T5751] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 418.539585][ T5751] usb 5-1: USB disconnect, device number 81 [ 418.865074][T12847] No source specified [ 419.000297][T12851] FAULT_INJECTION: forcing a failure. [ 419.000297][T12851] name failslab, interval 1, probability 0, space 0, times 0 [ 419.000335][T12851] CPU: 1 UID: 0 PID: 12851 Comm: syz.4.2435 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 419.000392][T12851] Tainted: [L]=SOFTLOCKUP [ 419.000407][T12851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 419.000432][T12851] Call Trace: [ 419.000440][T12851] [ 419.000448][T12851] dump_stack_lvl+0xe8/0x150 [ 419.000477][T12851] should_fail_ex+0x467/0x600 [ 419.000509][T12851] should_failslab+0xa8/0x100 [ 419.000530][T12851] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 419.000560][T12851] ? argv_split+0x2e/0x400 [ 419.000578][T12851] ? argv_split+0x2e/0x400 [ 419.000603][T12851] kstrndup+0x7e/0x160 [ 419.000624][T12851] ? __pfx___trace_uprobe_create+0x10/0x10 [ 419.000663][T12851] argv_split+0x2e/0x400 [ 419.000685][T12851] ? __pfx___trace_uprobe_create+0x10/0x10 [ 419.000716][T12851] trace_probe_create+0x94/0x130 [ 419.000748][T12851] ? __pfx_trace_probe_create+0x10/0x10 [ 419.000773][T12851] ? lockdep_hardirqs_on+0x7a/0x110 [ 419.000795][T12851] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 419.000815][T12851] ? mutex_lock_nested+0x152/0x1d0 [ 419.000839][T12851] ? dyn_event_create+0x20/0x70 [ 419.000865][T12851] dyn_event_create+0x4f/0x70 [ 419.000887][T12851] create_or_delete_trace_uprobe+0x65/0xa0 [ 419.000907][T12851] trace_parse_run_command+0x1f3/0x380 [ 419.000939][T12851] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 419.000960][T12851] ? __pfx_probes_write+0x10/0x10 [ 419.000979][T12851] vfs_write+0x29f/0xbb0 [ 419.001011][T12851] ? __pfx_vfs_write+0x10/0x10 [ 419.001036][T12851] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 419.001056][T12851] ? lockdep_hardirqs_on+0x7a/0x110 [ 419.001075][T12851] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 419.001094][T12851] ? mutex_lock_nested+0x152/0x1d0 [ 419.001117][T12851] ? fdget_pos+0x252/0x320 [ 419.001146][T12851] ksys_write+0x156/0x270 [ 419.001172][T12851] ? __pfx_ksys_write+0x10/0x10 [ 419.001205][T12851] do_syscall_64+0x17b/0x530 [ 419.001224][T12851] ? irqentry_exit+0x10f/0x8f0 [ 419.001242][T12851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.001263][T12851] ? clear_bhb_loop+0x40/0x90 [ 419.001286][T12851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.001305][T12851] RIP: 0033:0x7fbe1555e0d9 [ 419.001322][T12851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.001337][T12851] RSP: 002b:00007fbe137b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 419.001358][T12851] RAX: ffffffffffffffda RBX: 00007fbe157e5fa0 RCX: 00007fbe1555e0d9 [ 419.001372][T12851] RDX: 000000000000000f RSI: 0000200000000500 RDI: 0000000000000004 [ 419.001385][T12851] RBP: 00007fbe137b6090 R08: 0000000000000000 R09: 0000000000000000 [ 419.001397][T12851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.001409][T12851] R13: 00007fbe157e6038 R14: 00007fbe157e5fa0 R15: 00007fff45f1a968 [ 419.001442][T12851] [ 419.485731][T12854] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 419.485760][T12854] overlayfs: failed to set xattr on upper [ 419.485768][T12854] overlayfs: ...falling back to redirect_dir=nofollow. [ 419.485776][T12854] overlayfs: ...falling back to metacopy=off. [ 419.485783][T12854] overlayfs: ...falling back to index=off. [ 419.485791][T12854] overlayfs: ...falling back to uuid=null. [ 419.504785][T12855] CUSE: unknown device info "" [ 419.504799][T12855] CUSE: unknown device info "Ö" [ 419.504807][T12855] CUSE: unknown device info "" [ 419.504815][T12855] CUSE: unknown device info "" [ 419.504823][T12855] CUSE: unknown device info "ðÿÿÿ" [ 419.504831][T12855] CUSE: unknown device info "" [ 419.504839][T12855] CUSE: unknown device info "" [ 419.504846][T12855] CUSE: unknown device info "" [ 419.504853][T12855] CUSE: unknown device info "" [ 419.504860][T12855] CUSE: unknown device info "r" [ 419.504869][T12855] CUSE: unknown device info "" [ 419.504876][T12855] CUSE: unknown device info "#Û" [ 419.504884][T12855] CUSE: unknown device info "ÿÿÿÿ" [ 419.504891][T12855] CUSE: unknown device info "" [ 419.504899][T12855] CUSE: unknown device info "ÿ" [ 419.504908][T12855] CUSE: DEVNAME unspecified [ 419.696691][T12857] binder: 12856:12857 ioctl c018620c 200000000240 returned -1 [ 419.755689][T12859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.827840][ T10] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 420.008079][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 420.015154][ T10] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 420.015181][ T10] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 420.015202][ T10] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 420.015221][ T10] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 420.015240][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 420.015260][ T10] usb 5-1: config 0 has no interface number 0 [ 420.015304][ T10] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 420.015330][ T10] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 420.015352][ T10] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 420.015385][ T10] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 420.015411][ T10] usb 5-1: config 0 interface 125 has no altsetting 0 [ 420.015428][ T10] usb 5-1: config 0 interface 125 has no altsetting 2 [ 420.019208][ T10] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 420.019234][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.019253][ T10] usb 5-1: Product: syz [ 420.019266][ T10] usb 5-1: Manufacturer: syz [ 420.019279][ T10] usb 5-1: SerialNumber: syz [ 420.068082][ T10] usb 5-1: config 0 descriptor?? [ 420.130505][ T10] usb 5-1: selecting invalid altsetting 2 [ 420.551981][T12879] FAULT_INJECTION: forcing a failure. [ 420.551981][T12879] name failslab, interval 1, probability 0, space 0, times 0 [ 420.552017][T12879] CPU: 1 UID: 0 PID: 12879 Comm: syz.0.2447 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 420.552042][T12879] Tainted: [L]=SOFTLOCKUP [ 420.552049][T12879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 420.552060][T12879] Call Trace: [ 420.552068][T12879] [ 420.552075][T12879] dump_stack_lvl+0xe8/0x150 [ 420.552103][T12879] should_fail_ex+0x467/0x600 [ 420.552131][T12879] should_failslab+0xa8/0x100 [ 420.552152][T12879] kmem_cache_alloc_node_noprof+0xac/0x660 [ 420.552180][T12879] ? __alloc_skb+0x1d7/0x7a0 [ 420.552202][T12879] ? __alloc_skb+0x1d7/0x7a0 [ 420.552231][T12879] __alloc_skb+0x1d7/0x7a0 [ 420.552260][T12879] netlink_ack+0x136/0xb30 [ 420.552285][T12879] ? __pfx_genl_rcv_msg+0x10/0x10 [ 420.552313][T12879] ? __pfx_nl802154_post_doit+0x10/0x10 [ 420.552354][T12879] netlink_rcv_skb+0x2a4/0x4a0 [ 420.552383][T12879] ? __pfx_genl_rcv_msg+0x10/0x10 [ 420.552407][T12879] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 420.552446][T12879] ? netlink_deliver_tap+0x2e/0x1b0 [ 420.552470][T12879] ? netlink_deliver_tap+0x2e/0x1b0 [ 420.552497][T12879] genl_rcv+0x28/0x40 [ 420.552513][T12879] netlink_unicast+0x7f5/0x990 [ 420.552553][T12879] netlink_sendmsg+0x813/0xb40 [ 420.552584][T12879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.552610][T12879] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 420.552637][T12879] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 420.552664][T12879] ? arch_stack_walk+0xfb/0x150 [ 420.552690][T12879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.552713][T12879] sock_sendmsg_nosec+0x13a/0x180 [ 420.552733][T12879] ____sys_sendmsg+0x565/0x870 [ 420.552764][T12879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.552795][T12879] ? import_iovec+0x73/0xa0 [ 420.552822][T12879] ___sys_sendmsg+0x2a5/0x360 [ 420.552844][T12879] ? __lock_acquire+0x6df/0x2e40 [ 420.552863][T12879] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.552913][T12879] ? __fget_files+0x2a/0x420 [ 420.552929][T12879] ? __fget_files+0x3a8/0x420 [ 420.552952][T12879] __x64_sys_sendmsg+0x1b7/0x290 [ 420.552977][T12879] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 420.553030][T12879] do_syscall_64+0x17b/0x530 [ 420.553047][T12879] ? irqentry_exit+0x10f/0x8f0 [ 420.553062][T12879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.553078][T12879] ? clear_bhb_loop+0x40/0x90 [ 420.553097][T12879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.553113][T12879] RIP: 0033:0x7fd4091ae0d9 [ 420.553128][T12879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.553141][T12879] RSP: 002b:00007fd407406028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.553158][T12879] RAX: ffffffffffffffda RBX: 00007fd409435fa0 RCX: 00007fd4091ae0d9 [ 420.553171][T12879] RDX: 0000000000000004 RSI: 0000200000000280 RDI: 0000000000000004 [ 420.553181][T12879] RBP: 00007fd407406090 R08: 0000000000000000 R09: 0000000000000000 [ 420.553191][T12879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.553200][T12879] R13: 00007fd409436038 R14: 00007fd409435fa0 R15: 00007fff14899918 [ 420.553226][T12879] [ 420.589694][ C0] usb 5-1: async_complete: urb error -71 [ 420.589794][ C0] usb 5-1: async_complete: urb error -71 [ 420.589883][ C0] usb 5-1: async_complete: urb error -71 [ 420.592046][ T10] get_1284_register: usb error -71 [ 420.627770][ T10] usb 5-1: USB disconnect, device number 82 [ 420.902843][T12882] binder_alloc: 12881: binder_alloc_buf, no vma [ 420.903371][T12882] binder: 12881:12882 ioctl c018620c 200000000240 returned -22 [ 420.952511][T12883] netlink: 'syz.1.2446': attribute type 12 has an invalid length. [ 420.971131][ T10] usb 3-1: USB disconnect, device number 59 [ 421.336020][T12895] netlink: 'syz.1.2454': attribute type 1 has an invalid length. [ 421.336042][T12895] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2454'. [ 421.394913][T12900] netlink: 'syz.2.2456': attribute type 12 has an invalid length. [ 421.427409][T12902] binder_alloc: 12901: binder_alloc_buf, no vma [ 421.427784][T12902] binder: 12901:12902 ioctl c018620c 200000000240 returned -22 [ 421.632487][T12906] tmpfs: Bad value for 'mpol' [ 421.707861][ T5706] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 421.862255][ T5706] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 421.862309][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.862332][ T5706] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 421.862372][ T5706] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 421.862393][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.925831][ T5706] usb 5-1: config 0 descriptor?? [ 421.938799][ T5706] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 422.593572][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 422.632032][ T5706] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 422.689195][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 422.699231][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 422.700617][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 422.701296][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 422.947796][ T5706] usb 2-1: device descriptor read/64, error -71 [ 423.146465][T12926] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 423.146749][T12926] block device autoloading is deprecated and will be removed. [ 423.227875][ T5706] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 423.371401][ T5706] usb 2-1: device descriptor read/64, error -71 [ 423.478356][ T5706] usb usb2-port1: attempt power cycle [ 423.817924][ T5706] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 423.841093][ T5706] usb 2-1: device descriptor read/8, error -71 [ 424.054281][ T2992] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.079041][ T5706] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 424.098663][ T5706] usb 2-1: device descriptor read/8, error -71 [ 424.213234][ T5706] usb usb2-port1: unable to enumerate USB device [ 424.527670][ T200] usb 5-1: USB disconnect, device number 83 [ 424.770331][ T2992] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.896981][T12988] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 424.917619][T12988] tipc: Enabled bearer , priority 10 [ 424.958264][ T60] Bluetooth: hci0: command tx timeout [ 425.466362][T13007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2474'. [ 425.545289][ T2992] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.748274][T13007] hsr_slave_0 (unregistering): left promiscuous mode [ 426.043738][ T2992] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.513913][T12931] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.514291][T12931] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.514556][T12931] bridge_slave_0: entered allmulticast mode [ 426.546439][T12931] bridge_slave_0: entered promiscuous mode [ 426.565383][T12931] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.566009][T12931] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.566323][T12931] bridge_slave_1: entered allmulticast mode [ 426.594796][T12931] bridge_slave_1: entered promiscuous mode [ 426.688476][ T200] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 426.860278][ T200] usb 5-1: Using ep0 maxpacket: 32 [ 426.865729][ T200] usb 5-1: unable to get BOS descriptor or descriptor too short [ 426.866800][ T200] usb 5-1: config 5 has an invalid interface number: 229 but max is 0 [ 426.866823][ T200] usb 5-1: config 5 has no interface number 0 [ 426.866851][ T200] usb 5-1: config 5 interface 229 has no altsetting 0 [ 426.910723][ T200] usb 5-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice=d3.ef [ 426.910751][ T200] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.910771][ T200] usb 5-1: Product: syz [ 426.910784][ T200] usb 5-1: Manufacturer: syz [ 426.910797][ T200] usb 5-1: SerialNumber: syz [ 427.039991][ T60] Bluetooth: hci0: command tx timeout [ 427.102660][T12931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.129618][T12931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.220723][ T200] usb 5-1: USB disconnect, device number 84 [ 427.552803][T12931] team0: Port device team_slave_0 added [ 427.573020][T12931] team0: Port device team_slave_1 added [ 427.763236][T12931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.765268][T12931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.765865][T12931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.771644][T12931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.771672][T12931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.771696][T12931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.908296][T12931] hsr_slave_0: entered promiscuous mode [ 427.924848][T12931] hsr_slave_1: entered promiscuous mode [ 428.100408][ T2992] bond0: left allmulticast mode [ 428.100430][ T2992] bond_slave_0: left allmulticast mode [ 428.100455][ T2992] bond_slave_1: left allmulticast mode [ 428.213041][ T2992] bridge0: port 3(bond0) entered disabled state [ 428.375068][ C1] net_ratelimit: 1 callbacks suppressed [ 428.375088][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 428.537448][ T2992] bridge_slave_1: left allmulticast mode [ 428.537472][ T2992] bridge_slave_1: left promiscuous mode [ 428.555930][ T2992] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.720799][ T2992] bridge_slave_0: left allmulticast mode [ 428.720832][ T2992] bridge_slave_0: left promiscuous mode [ 428.725879][ T2992] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.748865][T13084] openvswitch: netlink: IP tunnel dst address not specified [ 428.773588][T13085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2484'. [ 428.994555][ T38] audit: type=1326 audit(1786343524.878:32): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13093 comm="syz.1.2487" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd78ddbe0d9 code=0x0 [ 429.119116][ T60] Bluetooth: hci0: command tx timeout [ 429.728908][ T5693] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 429.859253][ T5693] usb 5-1: device descriptor read/64, error -71 [ 429.979424][ T2992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.020501][ T2992] bond_slave_0: left promiscuous mode [ 430.059984][ T2992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.079546][ T2992] bond_slave_1: left promiscuous mode [ 430.081154][ T2992] bond0 (unregistering): Released all slaves [ 430.100435][ T5693] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 430.239884][ T5693] usb 5-1: device descriptor read/64, error -71 [ 430.309004][T13085] hsr_slave_0 (unregistering): left promiscuous mode [ 430.362751][ T5693] usb usb5-port1: attempt power cycle [ 430.391611][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 430.699096][ T5693] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 430.720644][ T5693] usb 5-1: device descriptor read/8, error -71 [ 430.979224][ T5693] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 431.000239][ T5693] usb 5-1: device descriptor read/8, error -71 [ 431.109727][ T5693] usb usb5-port1: unable to enumerate USB device [ 431.160735][T13121] FAULT_INJECTION: forcing a failure. [ 431.160735][T13121] name failslab, interval 1, probability 0, space 0, times 0 [ 431.160757][T13121] CPU: 1 UID: 0 PID: 13121 Comm: syz.0.2497 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 431.160779][T13121] Tainted: [L]=SOFTLOCKUP [ 431.160782][T13121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 431.160788][T13121] Call Trace: [ 431.160793][T13121] [ 431.160797][T13121] dump_stack_lvl+0xe8/0x150 [ 431.160814][T13121] should_fail_ex+0x467/0x600 [ 431.160830][T13121] should_failslab+0xa8/0x100 [ 431.160840][T13121] ? do_getname+0x2e/0x250 [ 431.160855][T13121] kmem_cache_alloc_noprof+0x9e/0x680 [ 431.160869][T13121] ? do_getname+0x2e/0x250 [ 431.160886][T13121] do_getname+0x2e/0x250 [ 431.160900][T13121] ? user_path_at+0x1e/0x160 [ 431.160912][T13121] user_path_at+0x2a/0x160 [ 431.160924][T13121] __se_sys_mount+0x2dc/0x420 [ 431.160937][T13121] ? __pfx___se_sys_mount+0x10/0x10 [ 431.160949][T13121] ? __x64_sys_mount+0x20/0xc0 [ 431.160960][T13121] do_syscall_64+0x17b/0x530 [ 431.160970][T13121] ? irqentry_exit+0x10f/0x8f0 [ 431.160980][T13121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.160990][T13121] ? clear_bhb_loop+0x40/0x90 [ 431.161002][T13121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.161012][T13121] RIP: 0033:0x7fd4091ae0d9 [ 431.161022][T13121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.161030][T13121] RSP: 002b:00007fd407406028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 431.161042][T13121] RAX: ffffffffffffffda RBX: 00007fd409435fa0 RCX: 00007fd4091ae0d9 [ 431.161049][T13121] RDX: 0000200000000b80 RSI: 0000200000000240 RDI: 0000000000000000 [ 431.161056][T13121] RBP: 00007fd407406090 R08: 0000200000000040 R09: 0000000000000000 [ 431.161062][T13121] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 431.161068][T13121] R13: 00007fd409436038 R14: 00007fd409435fa0 R15: 00007fff14899918 [ 431.161083][T13121] [ 431.199160][ T60] Bluetooth: hci0: command tx timeout [ 431.329113][ T5706] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 431.416662][T13128] FAULT_INJECTION: forcing a failure. [ 431.416662][T13128] name failslab, interval 1, probability 0, space 0, times 0 [ 431.416701][T13128] CPU: 1 UID: 0 PID: 13128 Comm: syz.0.2499 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 431.416732][T13128] Tainted: [L]=SOFTLOCKUP [ 431.416739][T13128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 431.416750][T13128] Call Trace: [ 431.416757][T13128] [ 431.416765][T13128] dump_stack_lvl+0xe8/0x150 [ 431.416795][T13128] should_fail_ex+0x467/0x600 [ 431.416825][T13128] should_failslab+0xa8/0x100 [ 431.416844][T13128] __kmalloc_noprof+0xfb/0x790 [ 431.416870][T13128] ? tomoyo_encode+0x2ad/0x570 [ 431.416896][T13128] ? tomoyo_encode+0x2ad/0x570 [ 431.416927][T13128] tomoyo_encode+0x2ad/0x570 [ 431.416961][T13128] tomoyo_realpath_from_path+0x5fa/0x640 [ 431.416999][T13128] ? tomoyo_path_number_perm+0x219/0x5f0 [ 431.417023][T13128] tomoyo_path_number_perm+0x246/0x5f0 [ 431.417048][T13128] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 431.417071][T13128] ? do_raw_spin_lock+0x12b/0x2f0 [ 431.417110][T13128] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 431.417129][T13128] ? lockdep_hardirqs_on+0x7a/0x110 [ 431.417164][T13128] ? __fget_files+0x2a/0x420 [ 431.417188][T13128] ? __fget_files+0x3a8/0x420 [ 431.417206][T13128] ? __fget_files+0x2a/0x420 [ 431.417229][T13128] security_file_ioctl+0xb9/0x260 [ 431.417261][T13128] __se_sys_ioctl+0x47/0x170 [ 431.417289][T13128] do_syscall_64+0x17b/0x530 [ 431.417309][T13128] ? irqentry_exit+0x10f/0x8f0 [ 431.417325][T13128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.417345][T13128] ? clear_bhb_loop+0x40/0x90 [ 431.417369][T13128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.417388][T13128] RIP: 0033:0x7fd4091ae0d9 [ 431.417405][T13128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.417421][T13128] RSP: 002b:00007fd4073e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.417442][T13128] RAX: ffffffffffffffda RBX: 00007fd409436090 RCX: 00007fd4091ae0d9 [ 431.417457][T13128] RDX: 0000200000000080 RSI: 00000000c058565d RDI: 0000000000000003 [ 431.417470][T13128] RBP: 00007fd4073e5090 R08: 0000000000000000 R09: 0000000000000000 [ 431.417483][T13128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.417495][T13128] R13: 00007fd409436128 R14: 00007fd409436090 R15: 00007fff14899918 [ 431.417523][T13128] [ 431.417541][T13128] ERROR: Out of memory at tomoyo_realpath_from_path. [ 431.629119][ T5706] usb 2-1: Using ep0 maxpacket: 8 [ 431.631320][ T5706] usb 2-1: unable to get BOS descriptor or descriptor too short [ 431.631402][ T5706] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 431.633919][ T5706] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 431.633953][ T5706] usb 2-1: can't read configurations, error -61 [ 431.799239][ T5706] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 431.969149][ T5706] usb 2-1: Using ep0 maxpacket: 8 [ 431.971362][ T5706] usb 2-1: unable to get BOS descriptor or descriptor too short [ 431.971442][ T5706] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 431.974298][ T5706] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 431.974328][ T5706] usb 2-1: can't read configurations, error -61 [ 431.974673][ T5706] usb usb2-port1: attempt power cycle [ 432.330421][ T5257] 8021q: adding VLAN 0 to HW filter on device eth6 [ 432.369879][ T5706] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 432.390037][ T5706] usb 2-1: Using ep0 maxpacket: 8 [ 432.392336][ T5706] usb 2-1: unable to get BOS descriptor or descriptor too short [ 432.392418][ T5706] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 432.394226][ T5706] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 432.394258][ T5706] usb 2-1: can't read configurations, error -61 [ 432.540441][ T5706] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 432.562276][ T5706] usb 2-1: Using ep0 maxpacket: 8 [ 432.564568][ T5706] usb 2-1: unable to get BOS descriptor or descriptor too short [ 432.564648][ T5706] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 432.567900][ T5706] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 432.567934][ T5706] usb 2-1: can't read configurations, error -61 [ 432.568288][ T5706] usb usb2-port1: unable to enumerate USB device [ 434.189447][ T2992] hsr_slave_0: left promiscuous mode [ 434.234119][ T2992] hsr_slave_1: left promiscuous mode [ 434.235972][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.235995][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.243242][T13195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2501'. [ 434.271929][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.271955][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.500263][ T2992] veth1_macvtap: left promiscuous mode [ 434.500370][ T2992] veth0_macvtap: left promiscuous mode [ 434.509821][ T2992] veth1_vlan: left promiscuous mode [ 434.510060][ T2992] veth0_vlan: left promiscuous mode [ 435.390930][T13219] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[8203] was attempted by ""[13219] [ 435.524214][ T2992] team0 (unregistering): Port device team_slave_1 removed [ 435.579955][ T2992] team0 (unregistering): Port device team_slave_0 removed [ 435.901590][T13195] hsr_slave_0 (unregistering): left promiscuous mode [ 435.919781][ T5706] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 436.072107][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.072137][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.072149][ T5706] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 436.072172][ T5706] usb 5-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.00 [ 436.072185][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.076699][ T5706] usb 5-1: config 0 descriptor?? [ 436.636845][ T5706] apple 0003:05AC:023F.000F: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 436.672116][ T5706] input: HID 05ac:023f as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:023F.000F/input/input16 [ 436.694568][T13229] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 436.694591][T13229] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 436.737052][T13228] overlay: filesystem on ./file0 not supported as upperdir [ 436.869661][T13223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.908422][T13223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.967510][ T5706] apple 0003:05AC:023F.000F: input,hidraw0: USB HID v0.00 Joystick [HID 05ac:023f] on usb-dummy_hcd.4-1/input0 [ 437.010569][T12931] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 437.019314][ T9] usb 5-1: USB disconnect, device number 89 [ 437.137908][T12931] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 437.165040][T13230] fido_id[13230]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 437.173499][T12931] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 437.392712][T12931] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 437.394132][T12931] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 437.459413][T12931] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 437.468818][T12931] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 437.507556][T12931] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 437.892449][T12931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.940674][T12931] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.986833][T12059] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.987035][T12059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.036735][T12059] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.036916][T12059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.611434][ T37] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 438.792393][ T37] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 438.792422][ T37] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 438.792443][ T37] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 438.792492][ T37] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 438.792518][ T37] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 438.795623][ T37] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 438.795651][ T37] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 438.795671][ T37] usb 2-1: Product: syz [ 438.795686][ T37] usb 2-1: Manufacturer: syz [ 438.800119][ T200] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 438.902385][ T37] cdc_wdm 2-1:1.0: skipping garbage [ 438.902404][ T37] cdc_wdm 2-1:1.0: skipping garbage [ 438.925776][ T37] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 438.925815][ T37] cdc_wdm 2-1:1.0: Unknown control protocol [ 438.957658][ T200] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 438.957684][ T200] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 438.957704][ T200] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 438.957747][ T200] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 438.957771][ T200] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 438.964922][ T200] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 438.964950][ T200] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 438.964969][ T200] usb 5-1: Product: syz [ 438.964983][ T200] usb 5-1: Manufacturer: syz [ 438.992030][ T200] cdc_wdm 5-1:1.0: skipping garbage [ 438.992047][ T200] cdc_wdm 5-1:1.0: skipping garbage [ 438.994253][ T200] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 438.994269][ T200] cdc_wdm 5-1:1.0: Unknown control protocol [ 439.072147][T13258] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 439.221410][T12931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.259860][ C0] wdm_int_callback: 274 callbacks suppressed [ 439.259891][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 439.259908][ C0] wdm_int_callback: 274 callbacks suppressed [ 439.259922][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 439.260321][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 439.260343][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 439.260570][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 439.260589][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 439.260996][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 439.261016][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 439.261243][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 439.261263][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 439.261530][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 439.261549][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 439.261772][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 439.261792][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 439.262010][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 439.262028][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 439.262148][ T10] usb 2-1: USB disconnect, device number 53 [ 439.262253][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 439.262272][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 439.262289][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 439.482870][ T5751] usb 5-1: USB disconnect, device number 90 [ 439.815178][T12931] veth0_vlan: entered promiscuous mode [ 439.820965][T13258] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 439.821217][T13258] overlayfs: failed to look up (tracing) for ino (-66) [ 439.858455][T12931] veth1_vlan: entered promiscuous mode [ 439.951313][T12931] veth0_macvtap: entered promiscuous mode [ 439.986916][T12931] veth1_macvtap: entered promiscuous mode [ 440.084956][T12931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.103349][T12931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.124599][T12059] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.124851][T12059] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.124891][T12059] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.124925][T12059] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.415132][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.415213][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.497307][ T10] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 440.890483][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 440.890514][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.890534][ T10] usb 5-1: Product: syz [ 440.890548][ T10] usb 5-1: Manufacturer: syz [ 440.890561][ T10] usb 5-1: SerialNumber: syz [ 440.953610][T10082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.953629][T10082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.279745][T10082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.279764][T10082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.389177][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 441.389232][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 441.723809][T13293] binder_alloc: 13292: binder_alloc_buf, no vma [ 441.725751][T13293] binder: 13292:13293 ioctl c018620c 200000000240 returned -22 [ 442.100139][ T5751] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 442.283603][ T5751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 118, changing to 10 [ 442.283706][ T5751] usb 3-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 442.283730][ T5751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.335454][ T5751] usb 3-1: config 0 descriptor?? [ 442.770676][ T5751] hid_parser_main: 470 callbacks suppressed [ 442.770692][ T5751] logitech-djreceiver 0003:046D:C52B.0010: unknown main item tag 0x0 [ 442.770712][ T5751] logitech-djreceiver 0003:046D:C52B.0010: unknown main item tag 0x0 [ 442.770727][ T5751] logitech-djreceiver 0003:046D:C52B.0010: unknown main item tag 0x0 [ 442.770776][ T5751] logitech-djreceiver 0003:046D:C52B.0010: unknown main item tag 0x0 [ 442.770792][ T5751] logitech-djreceiver 0003:046D:C52B.0010: unknown main item tag 0x0 [ 442.770807][ T5751] logitech-djreceiver 0003:046D:C52B.0010: unknown main item tag 0x0 [ 442.770822][ T5751] logitech-djreceiver 0003:046D:C52B.0010: unknown main item tag 0x0 [ 442.770837][ T5751] logitech-djreceiver 0003:046D:C52B.0010: unknown main item tag 0x0 [ 442.770852][ T5751] logitech-djreceiver 0003:046D:C52B.0010: unknown main item tag 0x0 [ 442.770866][ T5751] logitech-djreceiver 0003:046D:C52B.0010: unknown main item tag 0x0 [ 442.954605][ T5693] usb 3-1: USB disconnect, device number 60 [ 443.010543][T13317] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 443.150313][T13317] usb 2-1: device descriptor read/64, error -71 [ 443.401005][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 443.401062][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 443.433083][T13317] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 443.487054][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 443.527356][ T10] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 443.560148][T13317] usb 2-1: device descriptor read/64, error -71 [ 443.567367][ T10] usb 5-1: USB disconnect, device number 91 [ 443.616295][T13328] comedi comedi0: unsupported base address 0x3 [ 443.672846][T13317] usb usb2-port1: attempt power cycle [ 444.010164][T13317] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 444.041660][T13317] usb 2-1: device descriptor read/8, error -71 [ 444.114208][T13347] Line length is too long: Should be less than 4094 [ 444.130133][ T5751] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 444.290180][T13317] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 444.291990][ T5751] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 444.292016][ T5751] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 444.292027][ T5751] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 444.292056][ T5751] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 444.292070][ T5751] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 444.293908][ T5751] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 444.293933][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 444.294040][ T5751] usb 3-1: Product: syz [ 444.294054][ T5751] usb 3-1: Manufacturer: syz [ 444.303249][ T5751] cdc_wdm 3-1:1.0: skipping garbage [ 444.303323][ T5751] cdc_wdm 3-1:1.0: skipping garbage [ 444.306114][ T5751] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 444.306133][ T5751] cdc_wdm 3-1:1.0: Unknown control protocol [ 444.325796][T13317] usb 2-1: device descriptor read/8, error -71 [ 444.432977][T13317] usb usb2-port1: unable to enumerate USB device [ 444.480217][ T9] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 444.509215][T13339] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 444.543717][T13339] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 444.543763][T13339] overlayfs: failed to look up (tracing) for ino (-66) [ 444.655938][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 444.655970][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 444.656196][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 444.656217][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 444.656621][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 444.656641][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 444.656872][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 444.656892][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 444.657107][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 444.657126][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 444.657339][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 444.657358][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 444.657584][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 444.657602][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 444.657826][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 444.657845][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 444.658064][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 444.658083][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 444.658297][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 444.658316][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 444.663260][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.663630][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 444.663655][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.812437][ T200] usb 3-1: USB disconnect, device number 61 [ 444.812532][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 444.817013][ T9] usb 5-1: config 0 descriptor?? [ 445.024581][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 445.024695][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 445.043777][ T9] usb 5-1: USB disconnect, device number 92 [ 445.400226][ T9] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 445.552721][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.552753][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 445.552766][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.555481][ T9] usb 5-1: config 0 descriptor?? [ 445.795895][T13373] FAULT_INJECTION: forcing a failure. [ 445.795895][T13373] name failslab, interval 1, probability 0, space 0, times 0 [ 445.795931][T13373] CPU: 0 UID: 0 PID: 13373 Comm: syz.2.2556 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 445.795958][T13373] Tainted: [L]=SOFTLOCKUP [ 445.795965][T13373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.795977][T13373] Call Trace: [ 445.795985][T13373] [ 445.795994][T13373] dump_stack_lvl+0xe8/0x150 [ 445.796028][T13373] should_fail_ex+0x467/0x600 [ 445.796060][T13373] should_failslab+0xa8/0x100 [ 445.796080][T13373] __kmalloc_noprof+0xfb/0x790 [ 445.796108][T13373] ? argv_split+0x18d/0x400 [ 445.796125][T13373] ? argv_split+0x18d/0x400 [ 445.796150][T13373] argv_split+0x18d/0x400 [ 445.796172][T13373] ? __pfx___trace_uprobe_create+0x10/0x10 [ 445.796203][T13373] trace_probe_create+0x94/0x130 [ 445.796232][T13373] ? __pfx_trace_probe_create+0x10/0x10 [ 445.796258][T13373] ? lockdep_hardirqs_on+0x7a/0x110 [ 445.796278][T13373] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 445.796299][T13373] ? mutex_lock_nested+0x152/0x1d0 [ 445.796324][T13373] ? dyn_event_create+0x20/0x70 [ 445.796355][T13373] dyn_event_create+0x4f/0x70 [ 445.796377][T13373] create_or_delete_trace_uprobe+0x65/0xa0 [ 445.796398][T13373] trace_parse_run_command+0x1f3/0x380 [ 445.796435][T13373] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 445.796457][T13373] ? __pfx_probes_write+0x10/0x10 [ 445.796476][T13373] vfs_write+0x29f/0xbb0 [ 445.796509][T13373] ? __pfx_vfs_write+0x10/0x10 [ 445.796536][T13373] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 445.796556][T13373] ? lockdep_hardirqs_on+0x7a/0x110 [ 445.796576][T13373] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 445.796597][T13373] ? mutex_lock_nested+0x152/0x1d0 [ 445.796622][T13373] ? fdget_pos+0x252/0x320 [ 445.796653][T13373] ksys_write+0x156/0x270 [ 445.796679][T13373] ? __pfx_ksys_write+0x10/0x10 [ 445.796724][T13373] do_syscall_64+0x17b/0x530 [ 445.796745][T13373] ? irqentry_exit+0x10f/0x8f0 [ 445.796764][T13373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.796785][T13373] ? clear_bhb_loop+0x40/0x90 [ 445.796811][T13373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.796831][T13373] RIP: 0033:0x7f07b55ee0d9 [ 445.796850][T13373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.796868][T13373] RSP: 002b:00007f07b3846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 445.796889][T13373] RAX: ffffffffffffffda RBX: 00007f07b5875fa0 RCX: 00007f07b55ee0d9 [ 445.796905][T13373] RDX: 000000000000000f RSI: 0000200000000500 RDI: 0000000000000004 [ 445.796918][T13373] RBP: 00007f07b3846090 R08: 0000000000000000 R09: 0000000000000000 [ 445.796931][T13373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.796944][T13373] R13: 00007f07b5876038 R14: 00007f07b5875fa0 R15: 00007ffd4804aba8 [ 445.796978][T13373] [ 446.074991][T13381] binder: BINDER_SET_CONTEXT_MGR already set [ 446.075006][T13381] binder: 13380:13381 ioctl 4018620d 200000004a80 returned -16 [ 446.075537][T13381] binder: 13380:13381 ioctl c018620c 200000000240 returned -1 [ 446.156693][T13383] protocol 0000 is buggy, dev veth0_vlan [ 446.171035][ T9] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 446.175859][ T9] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input17 [ 446.349424][T13385] netlink: 'syz.1.2562': attribute type 10 has an invalid length. [ 446.568809][ T5693] usb 5-1: USB disconnect, device number 93 [ 446.568937][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 446.631528][T13385] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 447.090293][ T5693] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 447.220348][ T5693] usb 5-1: device descriptor read/64, error -71 [ 447.460291][ T5693] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 447.590384][ T5693] usb 5-1: device descriptor read/64, error -71 [ 447.700606][ T5693] usb usb5-port1: attempt power cycle [ 448.040326][ T5693] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 448.060833][ T5693] usb 5-1: device descriptor read/8, error -71 [ 448.302007][ T5693] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 448.321158][ T5693] usb 5-1: device descriptor read/8, error -71 [ 448.400326][T13404] binder: BINDER_SET_CONTEXT_MGR already set [ 448.400340][T13404] binder: 13403:13404 ioctl 4018620d 200000004a80 returned -16 [ 448.400838][T13404] binder: 13403:13404 ioctl c018620c 200000000240 returned -1 [ 448.430801][ T5693] usb usb5-port1: unable to enumerate USB device [ 448.484040][T13406] fuse: Bad value for 'fd' [ 448.754385][T13416] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2575'. [ 448.896440][T13423] binder: BINDER_SET_CONTEXT_MGR already set [ 448.896462][T13423] binder: 13422:13423 ioctl 4018620d 200000004a80 returned -16 [ 448.897059][T13423] binder: 13422:13423 ioctl c018620c 200000000240 returned -1 [ 448.954451][T13425] fuse: Bad value for 'fd' [ 449.430401][ T9] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 449.582075][ T9] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 449.582107][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 449.582121][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 449.584246][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 449.584274][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 449.584293][ T9] usb 3-1: Product: syz [ 449.584305][ T9] usb 3-1: Manufacturer: syz [ 449.584312][ T9] usb 3-1: SerialNumber: syz [ 449.587793][ T9] usb 3-1: config 0 descriptor?? [ 449.589144][T13433] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 449.668185][ T9] usb 3-1: selecting invalid altsetting 0 [ 449.715759][T13435] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2584'. [ 449.828922][T13433] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 449.941969][ T9] usb 3-1: USB disconnect, device number 62 [ 450.115909][T13443] tmpfs: Unknown parameter 'grpquota_b' [ 450.118498][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.125402][T13441] binder: 13440:13441 ioctl c018620c 200000000240 returned -22 [ 450.206853][T13445] fuse: Bad value for 'fd' [ 450.238420][T13447] FAULT_INJECTION: forcing a failure. [ 450.238420][T13447] name failslab, interval 1, probability 0, space 0, times 0 [ 450.238444][T13447] CPU: 1 UID: 0 PID: 13447 Comm: syz.4.2590 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 450.238459][T13447] Tainted: [L]=SOFTLOCKUP [ 450.238463][T13447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 450.238470][T13447] Call Trace: [ 450.238474][T13447] [ 450.238479][T13447] dump_stack_lvl+0xe8/0x150 [ 450.238497][T13447] should_fail_ex+0x467/0x600 [ 450.238514][T13447] should_failslab+0xa8/0x100 [ 450.238525][T13447] __kmalloc_noprof+0xfb/0x790 [ 450.238540][T13447] ? tomoyo_realpath_from_path+0xef/0x640 [ 450.238557][T13447] ? tomoyo_realpath_from_path+0xef/0x640 [ 450.238575][T13447] tomoyo_realpath_from_path+0xef/0x640 [ 450.238594][T13447] ? tomoyo_path_number_perm+0x219/0x5f0 [ 450.238607][T13447] tomoyo_path_number_perm+0x246/0x5f0 [ 450.238621][T13447] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 450.238634][T13447] ? do_raw_spin_lock+0x12b/0x2f0 [ 450.238654][T13447] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 450.238665][T13447] ? lockdep_hardirqs_on+0x7a/0x110 [ 450.238684][T13447] ? __fget_files+0x2a/0x420 [ 450.238697][T13447] ? __fget_files+0x3a8/0x420 [ 450.238707][T13447] ? __fget_files+0x2a/0x420 [ 450.238718][T13447] security_file_ioctl+0xb9/0x260 [ 450.238732][T13447] __se_sys_ioctl+0x47/0x170 [ 450.238747][T13447] do_syscall_64+0x17b/0x530 [ 450.238757][T13447] ? irqentry_exit+0x10f/0x8f0 [ 450.238766][T13447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.238777][T13447] ? clear_bhb_loop+0x40/0x90 [ 450.238790][T13447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.238801][T13447] RIP: 0033:0x7fbe1555e0d9 [ 450.238811][T13447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.238820][T13447] RSP: 002b:00007fbe137b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.238831][T13447] RAX: ffffffffffffffda RBX: 00007fbe157e5fa0 RCX: 00007fbe1555e0d9 [ 450.238839][T13447] RDX: 0000200000000100 RSI: 0000000000003b88 RDI: 0000000000000003 [ 450.238846][T13447] RBP: 00007fbe137b6090 R08: 0000000000000000 R09: 0000000000000000 [ 450.238852][T13447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.238858][T13447] R13: 00007fbe157e6038 R14: 00007fbe157e5fa0 R15: 00007fff45f1a968 [ 450.238881][T13447] [ 450.238886][T13447] ERROR: Out of memory at tomoyo_realpath_from_path. [ 450.359295][T13451] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2593'. [ 450.770173][ T9] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 450.905345][ T5706] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 450.932371][ T9] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 450.932396][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.932415][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 450.932450][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 450.932474][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.985308][ T9] usb 5-1: config 0 descriptor?? [ 451.152661][T13457] usb usb9: usbfs: process 13457 (syz.1.2592) did not claim interface 0 before use [ 451.356396][ T5706] usb 2-1: unable to get BOS descriptor or descriptor too short [ 451.362194][ T5706] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 451.362233][ T5706] usb 2-1: can't read configurations, error -71 [ 451.430772][ T9] usb 5-1: string descriptor 0 read error: -71 [ 451.472856][ T9] usb 5-1: USB disconnect, device number 98 [ 451.672989][T13465] binder: 13464:13465 ioctl c018620c 200000000240 returned -22 [ 451.804862][T13467] tmpfs: Unknown parameter 'grpquota_b' [ 452.035838][T13475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2602'. [ 452.214657][T13484] binder: 13482:13484 ioctl c018620c 200000000240 returned -22 [ 452.269748][T13487] tmpfs: Unknown parameter 'grpquota_b' [ 452.270775][ T823] usb 5-1: new low-speed USB device number 99 using dummy_hcd [ 452.427891][ T823] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 452.427925][ T823] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 452.427950][ T823] usb 5-1: config 0 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 452.427967][ T823] usb 5-1: config 0 interface 0 has no altsetting 0 [ 452.427985][ T823] usb 5-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 452.427997][ T823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.433998][ T823] usb 5-1: config 0 descriptor?? [ 452.462171][T13477] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 452.462265][T13477] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 452.490628][ T9] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 452.665410][ T9] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 452.665466][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 452.665489][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 452.667993][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 452.668020][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 452.668040][ T9] usb 3-1: Product: syz [ 452.668054][ T9] usb 3-1: Manufacturer: syz [ 452.668068][ T9] usb 3-1: SerialNumber: syz [ 452.727532][ T9] usb 3-1: config 0 descriptor?? [ 452.738481][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 452.738519][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 452.758348][ T9] usb 3-1: selecting invalid altsetting 0 [ 452.923537][ T823] usbhid 5-1:0.0: can't add hid device: -71 [ 452.923652][ T823] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 452.936350][ T823] usb 5-1: USB disconnect, device number 99 [ 453.422592][ T5693] usb 3-1: USB disconnect, device number 63 [ 453.440579][ T5751] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 453.510274][T13503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2613'. [ 453.614975][ T5751] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 453.615002][ T5751] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.615021][ T5751] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 453.615057][ T5751] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 453.615080][ T5751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.672825][ T5751] usb 2-1: config 0 descriptor?? [ 453.701646][T13509] binder: BINDER_SET_CONTEXT_MGR already set [ 453.701661][T13509] binder: 13508:13509 ioctl 4018620d 200000004a80 returned -16 [ 453.702281][T13509] binder: 13508:13509 ioctl c018620c 200000000240 returned -1 [ 453.765517][T13511] tmpfs: Unknown parameter 'grpquota_block_har' [ 453.983049][T13519] FAULT_INJECTION: forcing a failure. [ 453.983049][T13519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.983091][T13519] CPU: 1 UID: 0 PID: 13519 Comm: syz.2.2620 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 453.983119][T13519] Tainted: [L]=SOFTLOCKUP [ 453.983126][T13519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 453.983138][T13519] Call Trace: [ 453.983146][T13519] [ 453.983154][T13519] dump_stack_lvl+0xe8/0x150 [ 453.983184][T13519] should_fail_ex+0x467/0x600 [ 453.983214][T13519] _copy_from_user+0x2d/0xb0 [ 453.983234][T13519] video_usercopy+0x359/0x1430 [ 453.983260][T13519] ? __pfx___video_do_ioctl+0x10/0x10 [ 453.983282][T13519] ? __pfx_video_usercopy+0x10/0x10 [ 453.983316][T13519] ? __fget_files+0x3a8/0x420 [ 453.983341][T13519] v4l2_ioctl+0x190/0x1e0 [ 453.983371][T13519] ? __pfx_v4l2_ioctl+0x10/0x10 [ 453.983400][T13519] __se_sys_ioctl+0xff/0x170 [ 453.983428][T13519] do_syscall_64+0x17b/0x530 [ 453.983449][T13519] ? irqentry_exit+0x10f/0x8f0 [ 453.983467][T13519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.983488][T13519] ? clear_bhb_loop+0x40/0x90 [ 453.983512][T13519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.983532][T13519] RIP: 0033:0x7f07b55ee0d9 [ 453.983550][T13519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.983567][T13519] RSP: 002b:00007f07b3825028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 453.983588][T13519] RAX: ffffffffffffffda RBX: 00007f07b5876090 RCX: 00007f07b55ee0d9 [ 453.983603][T13519] RDX: 0000200000000080 RSI: 00000000c058565d RDI: 0000000000000003 [ 453.983617][T13519] RBP: 00007f07b3825090 R08: 0000000000000000 R09: 0000000000000000 [ 453.983631][T13519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.983643][T13519] R13: 00007f07b5876128 R14: 00007f07b5876090 R15: 00007ffd4804aba8 [ 453.983675][T13519] [ 454.170556][ T5693] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 454.198373][ T5751] usb 2-1: string descriptor 0 read error: -71 [ 454.208193][ T5751] usb 2-1: USB disconnect, device number 60 [ 454.325819][ T5693] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 454.325853][ T5693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 454.325878][ T5693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 454.329284][ T5693] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 454.329312][ T5693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.329332][ T5693] usb 5-1: Product: syz [ 454.329347][ T5693] usb 5-1: Manufacturer: syz [ 454.329360][ T5693] usb 5-1: SerialNumber: syz [ 454.358459][ T5693] usb 5-1: config 0 descriptor?? [ 454.371089][T13516] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 454.469927][T13526] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.473851][ T5693] rc_core: IR keymap rc-streamzap not found [ 454.473868][ T5693] Registered IR keymap rc-empty [ 454.478118][ T5693] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 454.483956][ T5693] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input19 [ 454.584318][T13516] tipc: Started in network mode [ 454.584340][T13516] tipc: Node identity aaadd9e62c, cluster identity 4711 [ 454.624759][T13516] tipc: Enabled bearer , priority 0 [ 454.647218][T13516] tipc: Enabling of bearer rejected, already enabled [ 454.653031][T13516] tipc: Enabling of bearer rejected, already enabled [ 454.668964][T13516] tipc: Enabling of bearer rejected, already enabled [ 454.837694][T13533] binder: BINDER_SET_CONTEXT_MGR already set [ 454.837709][T13533] binder: 13532:13533 ioctl 4018620d 200000004a80 returned -16 [ 454.838148][T13533] binder: 13532:13533 ioctl c018620c 200000000240 returned -1 [ 455.105347][ T5693] usb 5-1: USB disconnect, device number 100 [ 455.174634][T13516] tipc: Disabling bearer [ 455.290838][ T9] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 455.381320][T13547] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2630'. [ 455.429824][T13549] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2631'. [ 455.480558][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 455.484892][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 455.486917][ T9] usb 3-1: too many endpoints for config 1 interface 1 altsetting 255: 225, using maximum allowed: 30 [ 455.486957][ T9] usb 3-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 225 [ 455.486995][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 244, changing to 7 [ 455.487023][ T9] usb 3-1: config 1 interface 1 has no altsetting 2 [ 455.487041][ T9] usb 3-1: config 1 interface 2 has no altsetting 0 [ 455.489292][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 0.40 [ 455.489319][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.489339][ T9] usb 3-1: Product: syz [ 455.489353][ T9] usb 3-1: Manufacturer: syz [ 455.489368][ T9] usb 3-1: SerialNumber: syz [ 455.834103][T13561] binder: BINDER_SET_CONTEXT_MGR already set [ 455.834186][T13561] binder: 13560:13561 ioctl 4018620d 200000004a80 returned -16 [ 455.835026][T13561] binder: 13560:13561 ioctl c018620c 200000000240 returned -1 [ 455.882554][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 455.883095][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 455.888890][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 455.889495][ T9] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 455.930182][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 455.957076][ T5693] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 456.015005][ T9] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 456.028688][ T9] usb 3-1: USB disconnect, device number 64 [ 456.067688][ T8151] udevd[8151]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.103447][ T5693] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 456.103474][ T5693] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.103493][ T5693] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 456.103527][ T5693] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 456.103540][ T5693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.121678][ T5693] usb 2-1: config 0 descriptor?? [ 456.220691][ T823] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 456.225788][T13569] Bluetooth: MGMT ver 1.23 [ 456.225939][T13569] FAULT_INJECTION: forcing a failure. [ 456.225939][T13569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.225958][T13569] CPU: 1 UID: 0 PID: 13569 Comm: syz.0.2639 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 456.225973][T13569] Tainted: [L]=SOFTLOCKUP [ 456.225979][T13569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 456.225985][T13569] Call Trace: [ 456.225990][T13569] [ 456.225994][T13569] dump_stack_lvl+0xe8/0x150 [ 456.226011][T13569] should_fail_ex+0x467/0x600 [ 456.226029][T13569] _copy_from_user+0x2d/0xb0 [ 456.226042][T13569] kstrtouint_from_user+0xd6/0x180 [ 456.226058][T13569] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 456.226071][T13569] ? __lock_acquire+0x6df/0x2e40 [ 456.226081][T13569] ? trace_raw_output_btrfs_log_inode_enter+0x500/0x500 [ 456.226101][T13569] ? lock_acquire+0x115/0x350 [ 456.226119][T13569] proc_fail_nth_write+0x8e/0x210 [ 456.226131][T13569] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 456.226146][T13569] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 456.226156][T13569] vfs_write+0x29f/0xbb0 [ 456.226173][T13569] ? __pfx_vfs_write+0x10/0x10 [ 456.226186][T13569] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 456.226197][T13569] ? lockdep_hardirqs_on+0x7a/0x110 [ 456.226207][T13569] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 456.226217][T13569] ? mutex_lock_nested+0x152/0x1d0 [ 456.226230][T13569] ? fdget_pos+0x252/0x320 [ 456.226246][T13569] ksys_write+0x156/0x270 [ 456.226256][T13569] ? preempt_schedule_thunk+0x16/0x40 [ 456.226268][T13569] ? __pfx_ksys_write+0x10/0x10 [ 456.226284][T13569] do_syscall_64+0x17b/0x530 [ 456.226295][T13569] ? irqentry_exit+0x10f/0x8f0 [ 456.226304][T13569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.226315][T13569] ? clear_bhb_loop+0x40/0x90 [ 456.226328][T13569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.226338][T13569] RIP: 0033:0x7fd40916e90e [ 456.226348][T13569] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 456.226357][T13569] RSP: 002b:00007fd407405fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 456.226368][T13569] RAX: ffffffffffffffda RBX: 00007fd4074066c0 RCX: 00007fd40916e90e [ 456.226376][T13569] RDX: 0000000000000001 RSI: 00007fd4074060a0 RDI: 0000000000000003 [ 456.226382][T13569] RBP: 00007fd407406090 R08: 0000000000000000 R09: 0000000000000000 [ 456.226389][T13569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.226395][T13569] R13: 00007fd409436038 R14: 00007fd409435fa0 R15: 00007fff14899918 [ 456.226412][T13569] [ 456.394260][ T823] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.394327][ T823] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 456.394401][ T823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.552958][ T823] as10x_usb: device has been detected [ 456.554614][ T823] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 456.672968][ T823] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 456.729990][ T5693] usb 2-1: string descriptor 0 read error: -71 [ 456.765060][ T5693] usb 2-1: USB disconnect, device number 61 [ 456.765876][T13573] tipc: Can't bind to reserved service type 2 [ 456.768744][ T823] as10x_usb: error during firmware upload part1 [ 456.769096][ T823] Registered device Abilis Systems DVB-Titan [ 456.775618][T13578] fuse: Unknown parameter 'seclabel' [ 456.786625][T13578] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2643'. [ 456.863382][T13580] binder: 13579:13580 ioctl c018620c 200000000240 returned -22 [ 456.971508][T13584] FAULT_INJECTION: forcing a failure. [ 456.971508][T13584] name failslab, interval 1, probability 0, space 0, times 0 [ 456.971535][T13584] CPU: 1 UID: 0 PID: 13584 Comm: syz.2.2646 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 456.971550][T13584] Tainted: [L]=SOFTLOCKUP [ 456.971554][T13584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 456.971561][T13584] Call Trace: [ 456.971566][T13584] [ 456.971571][T13584] dump_stack_lvl+0xe8/0x150 [ 456.971589][T13584] should_fail_ex+0x467/0x600 [ 456.971605][T13584] should_failslab+0xa8/0x100 [ 456.971618][T13584] __kvmalloc_node_noprof+0x176/0x880 [ 456.971635][T13584] ? __kvm_mmu_topup_memory_cache+0x461/0x600 [ 456.971650][T13584] ? __kvm_mmu_topup_memory_cache+0x461/0x600 [ 456.971664][T13584] ? __pfx_kvm_hv_setup_tsc_page+0x10/0x10 [ 456.971677][T13584] __kvm_mmu_topup_memory_cache+0x461/0x600 [ 456.971692][T13584] ? kvm_msr_allowed+0x9a/0x490 [ 456.971711][T13584] mmu_topup_memory_caches+0x21/0x170 [ 456.971728][T13584] kvm_mmu_load+0x9d/0x22b0 [ 456.971738][T13584] ? kvm_msr_allowed+0x3f4/0x490 [ 456.971752][T13584] ? kvm_msr_allowed+0x9a/0x490 [ 456.971765][T13584] ? kvm_msr_allowed+0x9a/0x490 [ 456.971783][T13584] ? kvm_apic_has_interrupt+0x740/0x770 [ 456.971801][T13584] vcpu_run+0x4d91/0x7780 [ 456.971852][T13584] ? __pfx_vcpu_run+0x10/0x10 [ 456.971867][T13584] ? lock_acquire+0x115/0x350 [ 456.971890][T13584] kvm_arch_vcpu_ioctl_run+0xe23/0x1920 [ 456.971907][T13584] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1920 [ 456.971926][T13584] kvm_vcpu_ioctl+0xa64/0xfe0 [ 456.971944][T13584] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 456.971960][T13584] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 456.971971][T13584] ? lockdep_hardirqs_on+0x7a/0x110 [ 456.971994][T13584] ? __fget_files+0x2a/0x420 [ 456.972018][T13584] ? __fget_files+0x3a8/0x420 [ 456.972031][T13584] ? __fget_files+0x2a/0x420 [ 456.972051][T13584] ? bpf_lsm_file_ioctl+0x9/0x20 [ 456.972084][T13584] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 456.972113][T13584] __se_sys_ioctl+0xff/0x170 [ 456.972141][T13584] do_syscall_64+0x17b/0x530 [ 456.972161][T13584] ? irqentry_exit+0x10f/0x8f0 [ 456.972178][T13584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.972189][T13584] ? clear_bhb_loop+0x40/0x90 [ 456.972202][T13584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.972212][T13584] RIP: 0033:0x7f07b55ee0d9 [ 456.972223][T13584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.972233][T13584] RSP: 002b:00007f07b3846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.972245][T13584] RAX: ffffffffffffffda RBX: 00007f07b5875fa0 RCX: 00007f07b55ee0d9 [ 456.972253][T13584] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 456.972259][T13584] RBP: 00007f07b3846090 R08: 0000000000000000 R09: 0000000000000000 [ 456.972265][T13584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.972271][T13584] R13: 00007f07b5876038 R14: 00007f07b5875fa0 R15: 00007ffd4804aba8 [ 456.972288][T13584] [ 457.527734][T13601] binder: 13600:13601 ioctl c018620c 200000000240 returned -22 [ 457.564439][T13603] fuse: Bad value for 'fd' [ 457.959759][T13616] trusted_key: encrypted_key: insufficient parameters specified [ 458.085921][T13623] binder: 13622:13623 ioctl c018620c 200000000240 returned -22 [ 458.105331][ T823] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 458.132217][T13625] fuse: Bad value for 'fd' [ 458.182346][T13627] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2664'. [ 458.252386][ T823] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 458.252413][ T823] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 458.252444][ T823] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 458.252467][ T823] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 458.252479][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.256104][ T823] usb 2-1: config 0 descriptor?? [ 458.263786][ T823] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 458.271142][ T823] usb 5-1: USB disconnect, device number 101 [ 458.315814][ T823] Unregistered device Abilis Systems DVB-Titan [ 458.318694][ T823] as10x_usb: device has been disconnected [ 458.844831][ T60] Bluetooth: hci2: unexpected event for opcode 0x203c [ 459.525249][T13655] binder: 13654:13655 ioctl c018620c 200000000240 returned -22 [ 459.565103][T13657] fuse: Bad value for 'fd' [ 459.776895][ T60] Bluetooth: hci2: unexpected event for opcode 0x203c [ 459.940736][ T37] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 460.093642][ T37] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.093699][ T37] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 460.093717][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.131402][ T37] as10x_usb: device has been detected [ 460.132303][ T37] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 460.157657][ T37] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 460.172617][ T37] as10x_usb: error during firmware upload part1 [ 460.189457][ T37] Registered device Abilis Systems DVB-Titan [ 460.306932][T13673] binder: 13672:13673 ioctl c018620c 200000000240 returned -22 [ 460.429587][T13677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2682'. [ 460.534136][ T60] Bluetooth: hci2: unexpected event for opcode 0x203c [ 460.603889][T13687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2687'. [ 460.642756][T13687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2687'. [ 460.807158][T13692] binder: 13691:13692 ioctl c018620c 200000000240 returned -22 [ 460.879780][ T37] usb 2-1: USB disconnect, device number 62 [ 460.934015][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2691'. [ 461.067281][T13704] FAULT_INJECTION: forcing a failure. [ 461.067281][T13704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.067302][T13704] CPU: 1 UID: 0 PID: 13704 Comm: syz.4.2694 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 461.067317][T13704] Tainted: [L]=SOFTLOCKUP [ 461.067321][T13704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 461.067327][T13704] Call Trace: [ 461.067332][T13704] [ 461.067336][T13704] dump_stack_lvl+0xe8/0x150 [ 461.067352][T13704] should_fail_ex+0x467/0x600 [ 461.067368][T13704] _copy_to_user+0x31/0xb0 [ 461.067380][T13704] simple_read_from_buffer+0xe1/0x170 [ 461.067393][T13704] proc_fail_nth_read+0x1be/0x230 [ 461.067407][T13704] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.067420][T13704] ? rw_verify_area+0x250/0x4d0 [ 461.067432][T13704] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.067443][T13704] vfs_read+0x219/0xa90 [ 461.067459][T13704] ? __pfx_vfs_read+0x10/0x10 [ 461.067472][T13704] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 461.067483][T13704] ? lockdep_hardirqs_on+0x7a/0x110 [ 461.067493][T13704] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 461.067503][T13704] ? mutex_lock_nested+0x152/0x1d0 [ 461.067515][T13704] ? fdget_pos+0x252/0x320 [ 461.067530][T13704] ksys_read+0x156/0x270 [ 461.067543][T13704] ? __pfx_ksys_read+0x10/0x10 [ 461.067560][T13704] do_syscall_64+0x17b/0x530 [ 461.067577][T13704] ? irqentry_exit+0x10f/0x8f0 [ 461.067586][T13704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.067597][T13704] ? clear_bhb_loop+0x40/0x90 [ 461.067610][T13704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.067621][T13704] RIP: 0033:0x7fbe1551e90e [ 461.067631][T13704] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 461.067640][T13704] RSP: 002b:00007fbe137b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 461.067652][T13704] RAX: ffffffffffffffda RBX: 00007fbe137b66c0 RCX: 00007fbe1551e90e [ 461.067659][T13704] RDX: 000000000000000f RSI: 00007fbe137b60a0 RDI: 0000000000000003 [ 461.067666][T13704] RBP: 00007fbe137b6090 R08: 0000000000000000 R09: 0000000000000000 [ 461.067673][T13704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.067679][T13704] R13: 00007fbe157e6038 R14: 00007fbe157e5fa0 R15: 00007fff45f1a968 [ 461.067695][T13704] [ 461.246023][T13707] overlayfs: missing 'lowerdir' [ 461.300439][T13708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2697'. [ 461.463353][T13715] binder: 13714:13715 ioctl c018620c 200000000240 returned -22 [ 461.740708][ T823] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 461.785125][T13722] protocol 0000 is buggy, dev veth0_vlan [ 461.894330][ T823] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 461.894358][ T823] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 461.894389][ T823] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 461.894412][ T823] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 461.894424][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.898070][ T823] usb 2-1: config 0 descriptor?? [ 461.905670][ T823] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 461.932682][ T823] usb 3-1: USB disconnect, device number 65 [ 461.986716][ T823] Unregistered device Abilis Systems DVB-Titan [ 461.989783][ T823] as10x_usb: device has been disconnected [ 462.755268][T13735] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2707'. [ 462.780694][ T5751] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 462.856146][T13737] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2707'. [ 462.980686][ T5751] usb 3-1: Using ep0 maxpacket: 32 [ 462.983194][ T5751] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 462.983218][ T5751] usb 3-1: config 0 has no interface number 0 [ 462.983262][ T5751] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 463.018424][ T5751] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 463.018452][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.018471][ T5751] usb 3-1: Product: syz [ 463.018485][ T5751] usb 3-1: Manufacturer: syz [ 463.018499][ T5751] usb 3-1: SerialNumber: syz [ 463.060722][ T5751] usb 3-1: config 0 descriptor?? [ 463.061854][T13730] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 463.268476][T13730] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 463.533339][T13740] binder: 13739:13740 ioctl c018620c 200000000240 returned -22 [ 463.689441][ T5751] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 463.689722][ T5751] asix 3-1:0.188: probe with driver asix failed with error -71 [ 463.719872][ T5751] usb 3-1: USB disconnect, device number 66 [ 463.856287][ T60] Bluetooth: hci1: connection err: -111 [ 464.204634][ T200] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 464.283441][T13753] FAULT_INJECTION: forcing a failure. [ 464.283441][T13753] name failslab, interval 1, probability 0, space 0, times 0 [ 464.283480][T13753] CPU: 0 UID: 0 PID: 13753 Comm: syz.2.2712 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 464.283507][T13753] Tainted: [L]=SOFTLOCKUP [ 464.283514][T13753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 464.283526][T13753] Call Trace: [ 464.283534][T13753] [ 464.283542][T13753] dump_stack_lvl+0xe8/0x150 [ 464.283572][T13753] should_fail_ex+0x467/0x600 [ 464.283603][T13753] should_failslab+0xa8/0x100 [ 464.283624][T13753] kmem_cache_alloc_node_noprof+0xac/0x660 [ 464.283652][T13753] ? __alloc_skb+0x1d7/0x7a0 [ 464.283676][T13753] ? __alloc_skb+0x1d7/0x7a0 [ 464.283707][T13753] __alloc_skb+0x1d7/0x7a0 [ 464.283737][T13753] alloc_skb_with_frags+0xc6/0x760 [ 464.283775][T13753] sock_alloc_send_pskb+0x884/0x9a0 [ 464.283822][T13753] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 464.283842][T13753] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 464.283882][T13753] l2cap_sock_alloc_skb_cb+0xef/0x490 [ 464.283919][T13753] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 464.283949][T13753] ? __lock_acquire+0x6df/0x2e40 [ 464.283977][T13753] l2cap_create_basic_pdu+0xdb/0x350 [ 464.284002][T13753] l2cap_chan_send+0x172b/0x2310 [ 464.284030][T13753] ? lockdep_hardirqs_on+0x7a/0x110 [ 464.284052][T13753] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 464.284081][T13753] ? __pfx_l2cap_chan_send+0x10/0x10 [ 464.284113][T13753] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 464.284133][T13753] ? lockdep_hardirqs_on+0x7a/0x110 [ 464.284152][T13753] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 464.284171][T13753] ? mutex_lock_nested+0x152/0x1d0 [ 464.284192][T13753] ? l2cap_sock_sendmsg+0x324/0x4d0 [ 464.284221][T13753] l2cap_sock_sendmsg+0x33a/0x4d0 [ 464.284255][T13753] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 464.284284][T13753] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 464.284321][T13753] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 464.284347][T13753] sock_sendmsg_nosec+0x13a/0x180 [ 464.284372][T13753] sock_write_iter+0x2e4/0x3f0 [ 464.284396][T13753] ? __pfx_sock_write_iter+0x10/0x10 [ 464.284424][T13753] ? bpf_lsm_file_permission+0x9/0x20 [ 464.284452][T13753] ? security_file_permission+0x68/0x220 [ 464.284483][T13753] vfs_write+0x61e/0xbb0 [ 464.284514][T13753] ? __pfx_vfs_write+0x10/0x10 [ 464.284548][T13753] ? __fget_files+0x2a/0x420 [ 464.284576][T13753] ksys_write+0x156/0x270 [ 464.284601][T13753] ? __pfx_ksys_write+0x10/0x10 [ 464.284633][T13753] do_syscall_64+0x17b/0x530 [ 464.284652][T13753] ? irqentry_exit+0x10f/0x8f0 [ 464.284671][T13753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.284691][T13753] ? clear_bhb_loop+0x40/0x90 [ 464.284715][T13753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.284735][T13753] RIP: 0033:0x7f07b55ee0d9 [ 464.284753][T13753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.284769][T13753] RSP: 002b:00007f07b3846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 464.284798][T13753] RAX: ffffffffffffffda RBX: 00007f07b5875fa0 RCX: 00007f07b55ee0d9 [ 464.284813][T13753] RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000004 [ 464.284826][T13753] RBP: 00007f07b3846090 R08: 0000000000000000 R09: 0000000000000000 [ 464.284839][T13753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.284851][T13753] R13: 00007f07b5876038 R14: 00007f07b5875fa0 R15: 00007ffd4804aba8 [ 464.284881][T13753] [ 464.609943][ T32] usb 2-1: USB disconnect, device number 63 [ 464.663117][ T200] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.663168][ T200] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 464.663190][ T200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.767976][ T200] as10x_usb: device has been detected [ 464.768852][ T200] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 464.824537][ T200] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 464.878629][ T200] as10x_usb: error during firmware upload part1 [ 464.879274][ T200] Registered device Abilis Systems DVB-Titan [ 465.033040][T13763] FAULT_INJECTION: forcing a failure. [ 465.033040][T13763] name failslab, interval 1, probability 0, space 0, times 0 [ 465.033076][T13763] CPU: 0 UID: 0 PID: 13763 Comm: syz.2.2716 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 465.033103][T13763] Tainted: [L]=SOFTLOCKUP [ 465.033110][T13763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 465.033121][T13763] Call Trace: [ 465.033129][T13763] [ 465.033138][T13763] dump_stack_lvl+0xe8/0x150 [ 465.033168][T13763] should_fail_ex+0x467/0x600 [ 465.033199][T13763] should_failslab+0xa8/0x100 [ 465.033220][T13763] __kmalloc_noprof+0xfb/0x790 [ 465.033249][T13763] ? tomoyo_encode+0x2ad/0x570 [ 465.033277][T13763] ? tomoyo_encode+0x2ad/0x570 [ 465.033319][T13763] tomoyo_encode+0x2ad/0x570 [ 465.033353][T13763] tomoyo_realpath_from_path+0x5fa/0x640 [ 465.033393][T13763] ? tomoyo_path_number_perm+0x219/0x5f0 [ 465.033422][T13763] tomoyo_path_number_perm+0x246/0x5f0 [ 465.033448][T13763] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 465.033472][T13763] ? do_raw_spin_lock+0x12b/0x2f0 [ 465.033511][T13763] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 465.033531][T13763] ? lockdep_hardirqs_on+0x7a/0x110 [ 465.033566][T13763] ? __fget_files+0x2a/0x420 [ 465.033591][T13763] ? __fget_files+0x3a8/0x420 [ 465.033610][T13763] ? __fget_files+0x2a/0x420 [ 465.033634][T13763] security_file_ioctl+0xb9/0x260 [ 465.033661][T13763] __se_sys_ioctl+0x47/0x170 [ 465.033690][T13763] do_syscall_64+0x17b/0x530 [ 465.033710][T13763] ? irqentry_exit+0x10f/0x8f0 [ 465.033729][T13763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.033750][T13763] ? clear_bhb_loop+0x40/0x90 [ 465.033775][T13763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.033795][T13763] RIP: 0033:0x7f07b55ee0d9 [ 465.033814][T13763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.033831][T13763] RSP: 002b:00007f07b3846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.033852][T13763] RAX: ffffffffffffffda RBX: 00007f07b5875fa0 RCX: 00007f07b55ee0d9 [ 465.033868][T13763] RDX: 0000200000000100 RSI: 0000000000003b88 RDI: 0000000000000003 [ 465.033882][T13763] RBP: 00007f07b3846090 R08: 0000000000000000 R09: 0000000000000000 [ 465.033895][T13763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.033908][T13763] R13: 00007f07b5876038 R14: 00007f07b5875fa0 R15: 00007ffd4804aba8 [ 465.033940][T13763] [ 465.036902][T13763] ERROR: Out of memory at tomoyo_realpath_from_path. [ 465.416465][T13766] binder: 13765:13766 ioctl c018620c 200000000240 returned -22 [ 465.437444][T13772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.476023][T13772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 465.527042][T13774] FAULT_INJECTION: forcing a failure. [ 465.527042][T13774] name failslab, interval 1, probability 0, space 0, times 0 [ 465.527077][T13774] CPU: 0 UID: 0 PID: 13774 Comm: syz.1.2722 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 465.527105][T13774] Tainted: [L]=SOFTLOCKUP [ 465.527113][T13774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 465.527125][T13774] Call Trace: [ 465.527132][T13774] [ 465.527144][T13774] dump_stack_lvl+0xe8/0x150 [ 465.527174][T13774] should_fail_ex+0x467/0x600 [ 465.527205][T13774] should_failslab+0xa8/0x100 [ 465.527227][T13774] __kmalloc_noprof+0xfb/0x790 [ 465.527256][T13774] ? alloc_trace_uprobe+0x32/0x300 [ 465.527284][T13774] ? alloc_trace_uprobe+0x32/0x300 [ 465.527319][T13774] alloc_trace_uprobe+0x32/0x300 [ 465.527354][T13774] __trace_uprobe_create+0x9b5/0xe40 [ 465.527394][T13774] ? __pfx___trace_uprobe_create+0x10/0x10 [ 465.527423][T13774] ? __kmalloc_noprof+0x436/0x790 [ 465.527449][T13774] ? argv_split+0x18d/0x400 [ 465.527466][T13774] ? argv_split+0x18d/0x400 [ 465.527490][T13774] ? argv_split+0x378/0x400 [ 465.527516][T13774] trace_probe_create+0xce/0x130 [ 465.527545][T13774] ? __pfx___trace_uprobe_create+0x10/0x10 [ 465.527574][T13774] ? __pfx_trace_probe_create+0x10/0x10 [ 465.527600][T13774] ? lockdep_hardirqs_on+0x7a/0x110 [ 465.527620][T13774] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 465.527646][T13774] ? mutex_lock_nested+0x152/0x1d0 [ 465.527670][T13774] ? dyn_event_create+0x20/0x70 [ 465.527697][T13774] dyn_event_create+0x4f/0x70 [ 465.527724][T13774] create_or_delete_trace_uprobe+0x65/0xa0 [ 465.527745][T13774] trace_parse_run_command+0x1f3/0x380 [ 465.527778][T13774] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 465.527799][T13774] ? __pfx_probes_write+0x10/0x10 [ 465.527819][T13774] vfs_write+0x29f/0xbb0 [ 465.527851][T13774] ? __pfx_vfs_write+0x10/0x10 [ 465.527877][T13774] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 465.527897][T13774] ? lockdep_hardirqs_on+0x7a/0x110 [ 465.527916][T13774] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 465.527936][T13774] ? mutex_lock_nested+0x152/0x1d0 [ 465.527959][T13774] ? fdget_pos+0x252/0x320 [ 465.527987][T13774] ksys_write+0x156/0x270 [ 465.528012][T13774] ? __pfx_ksys_write+0x10/0x10 [ 465.528045][T13774] do_syscall_64+0x17b/0x530 [ 465.528064][T13774] ? irqentry_exit+0x10f/0x8f0 [ 465.528082][T13774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.528101][T13774] ? clear_bhb_loop+0x40/0x90 [ 465.528125][T13774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.528143][T13774] RIP: 0033:0x7fd78ddbe0d9 [ 465.528162][T13774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.528179][T13774] RSP: 002b:00007fd78c016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 465.528200][T13774] RAX: ffffffffffffffda RBX: 00007fd78e045fa0 RCX: 00007fd78ddbe0d9 [ 465.528216][T13774] RDX: 000000000000000f RSI: 0000200000000500 RDI: 0000000000000005 [ 465.528229][T13774] RBP: 00007fd78c016090 R08: 0000000000000000 R09: 0000000000000000 [ 465.528243][T13774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.528255][T13774] R13: 00007fd78e046038 R14: 00007fd78e045fa0 R15: 00007ffc4b1957b8 [ 465.528288][T13774] [ 465.528408][T13774] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI [ 465.528425][T13774] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 465.528448][T13774] CPU: 0 UID: 0 PID: 13774 Comm: syz.1.2722 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 465.528474][T13774] Tainted: [L]=SOFTLOCKUP [ 465.528481][T13774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 465.528493][T13774] RIP: 0010:path_put+0x24/0x60 [ 465.528511][T13774] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 17 ea 81 ff 48 8d 7b 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 e0 40 ee ff 48 8b 7b 08 e8 37 8a 03 00 48 [ 465.528528][T13774] RSP: 0018:ffffc9000479f9c8 EFLAGS: 00010203 [ 465.528544][T13774] RAX: 0000000000000008 RBX: 000000000000003c RCX: ffff88801f3d0000 [ 465.528557][T13774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000044 [ 465.528570][T13774] RBP: ffffc9000479fb50 R08: ffffffff99d12fd7 R09: 0000000000000000 [ 465.528584][T13774] R10: ffffffff99d12fc0 R11: fffffbfff33a25fb R12: fffffffffffffff4 [ 465.528598][T13774] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 465.528613][T13774] FS: 00007fd78c0166c0(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 465.528630][T13774] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 465.528644][T13774] CR2: 00007fd78dc90000 CR3: 000000005c9c6000 CR4: 00000000003526f0 [ 465.528662][T13774] DR0: 0000000000000082 DR1: 0000000000000001 DR2: 0000000000000000 [ 465.528674][T13774] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 465.528687][T13774] Call Trace: [ 465.528694][T13774] [ 465.528709][T13774] __trace_uprobe_create+0x53c/0xe40 [ 465.528741][T13774] ? __pfx___trace_uprobe_create+0x10/0x10 [ 465.528770][T13774] ? __kmalloc_noprof+0x436/0x790 [ 465.528797][T13774] ? argv_split+0x18d/0x400 [ 465.528813][T13774] ? argv_split+0x18d/0x400 [ 465.528833][T13774] ? argv_split+0x378/0x400 [ 465.528852][T13774] trace_probe_create+0xce/0x130 [ 465.528878][T13774] ? __pfx___trace_uprobe_create+0x10/0x10 [ 465.528909][T13774] ? __pfx_trace_probe_create+0x10/0x10 [ 465.528935][T13774] ? lockdep_hardirqs_on+0x7a/0x110 [ 465.528952][T13774] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 465.528971][T13774] ? mutex_lock_nested+0x152/0x1d0 [ 465.528994][T13774] ? dyn_event_create+0x20/0x70 [ 465.529015][T13774] dyn_event_create+0x4f/0x70 [ 465.529036][T13774] create_or_delete_trace_uprobe+0x65/0xa0 [ 465.529055][T13774] trace_parse_run_command+0x1f3/0x380 [ 465.529085][T13774] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 465.529105][T13774] ? __pfx_probes_write+0x10/0x10 [ 465.529123][T13774] vfs_write+0x29f/0xbb0 [ 465.529147][T13774] ? __pfx_vfs_write+0x10/0x10 [ 465.529169][T13774] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 465.529188][T13774] ? lockdep_hardirqs_on+0x7a/0x110 [ 465.529205][T13774] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 465.529224][T13774] ? mutex_lock_nested+0x152/0x1d0 [ 465.529247][T13774] ? fdget_pos+0x252/0x320 [ 465.529274][T13774] ksys_write+0x156/0x270 [ 465.529296][T13774] ? __pfx_ksys_write+0x10/0x10 [ 465.529322][T13774] do_syscall_64+0x17b/0x530 [ 465.529340][T13774] ? irqentry_exit+0x10f/0x8f0 [ 465.529357][T13774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.529376][T13774] ? clear_bhb_loop+0x40/0x90 [ 465.529398][T13774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.529416][T13774] RIP: 0033:0x7fd78ddbe0d9 [ 465.529438][T13774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.529454][T13774] RSP: 002b:00007fd78c016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 465.529472][T13774] RAX: ffffffffffffffda RBX: 00007fd78e045fa0 RCX: 00007fd78ddbe0d9 [ 465.529487][T13774] RDX: 000000000000000f RSI: 0000200000000500 RDI: 0000000000000005 [ 465.529499][T13774] RBP: 00007fd78c016090 R08: 0000000000000000 R09: 0000000000000000 [ 465.529512][T13774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.529524][T13774] R13: 00007fd78e046038 R14: 00007fd78e045fa0 R15: 00007ffc4b1957b8 [ 465.529545][T13774] [ 465.529556][T13774] Modules linked in: [ 465.529587][T13774] ---[ end trace 0000000000000000 ]--- [ 465.529634][T13774] RIP: 0010:path_put+0x24/0x60 [ 465.529653][T13774] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 17 ea 81 ff 48 8d 7b 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 e0 40 ee ff 48 8b 7b 08 e8 37 8a 03 00 48 [ 465.529668][T13774] RSP: 0018:ffffc9000479f9c8 EFLAGS: 00010203 [ 465.529683][T13774] RAX: 0000000000000008 RBX: 000000000000003c RCX: ffff88801f3d0000 [ 465.529715][T13774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000044 [ 465.529728][T13774] RBP: ffffc9000479fb50 R08: ffffffff99d12fd7 R09: 0000000000000000 [ 465.529741][T13774] R10: ffffffff99d12fc0 R11: fffffbfff33a25fb R12: fffffffffffffff4 [ 465.529756][T13774] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 465.529821][T13774] FS: 00007fd78c0166c0(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 465.529839][T13774] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 465.529852][T13774] CR2: 00007fd78dc90000 CR3: 000000005c9c6000 CR4: 00000000003526f0 [ 465.529870][T13774] DR0: 0000000000000082 DR1: 0000000000000001 DR2: 0000000000000000 [ 465.529882][T13774] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 465.529898][T13774] Kernel panic - not syncing: Fatal exception [ 465.530148][T13774] Kernel Offset: disabled